# changelog

author: Shreyas B <shreyasb@vmware.com> 1.0.8-1
changelog:
  -   Upgrade to 1.0.8.
  -   Remove CVE-2016-3189.patch as the fix already available in the latest version.


author: Gerrit Photon <photon-checkins@vmware.com> 20200709-1
changelog:
  - Automatic Version Bump
  - Fix for OpenSSL CA certs not generated in latest tags move %post to %posttrans


author: Alexey Makhalov <amakhalov@vmware.com> 8.30-3
changelog:
  - coreutils-selinux: new package, cloned from coreutils.
  - keep version-release in sync with coreutils.


author: Alexey Makhalov <amakhalov@vmware.com> 2.9.6-3
changelog:
  -   Remove any dicts from cracklib main package
  -   Compress pw_dict.pwd file
  -   Move doc folder to devel package


author: Alexey Makhalov <amakhalov@vmware.com> 2.9.6-4
changelog:
  -   Revert compressing pw_dict.pwd back. Python code
      cracklib.VeryFascistCheck does not handle it.


author: Gerrit Photon <photon-checkins@vmware.com> 0.180-1
changelog:
  - Automatic Version Bump
  - Updated to 0.180
  - libdir/elfutils is removed
  - libebl.h and libebl.a is removed


author: Tapas Kundu <tkundu@vmware.com> 2.2.9-4
changelog:
  - Fix CVE-2022-22822, CVE-2022-22823, CVE-2022-22824
  - CVE-2022-22825, CVE-2022-22826, CVE-2022-22827
  - CVE-2021-46143, CVE-2021-45960


author: Sriram Nambakam <snambakam@vmware.com> 2.9.7-4
changelog:
  -   Use 
    
    CFLAGS="${CFLAGS:--O2 -g}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g }" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g }" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:-}" ; export LDFLAGS; 
    ./configure --host=x86_64-unknown-linux-gnu --build=x86_64-unknown-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info and set DESTDIR


author: Alexey Makhalov <amakhalov@vmware.com> 2.04-1
changelog:
  - Fixes for CVE-2020-10713, CVE-2020-14308, CVE-2020-14309,
    CVE-2020-14310, CVE-2020-14311, CVE-2020-15705, CVE-2020-15706
    CVE-2020-15707.


author: Bo Gan <ganb@vmware.com> 2.04-2
changelog:
  - Fix boot failure on aarch64
  - ERROR: (FIRMWARE BUG: efi_loaded_image_t::image_base has bogus value)


author: Alexey Makhalov <amakhalov@vmware.com> 2.04-3
changelog:
  - Fixes for CVE-2020-14372, CVE-2020-25632, CVE-2020-25647,
    CVE-2020-27749, CVE-2020-27779, CVE-2021-3418, CVE-2021-20225,
    CVE-2021-20233.


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.4-3
changelog:
  - PIDFile should be stored at /run instead of the default location /var/run
  - There is  long term plan that directory /var/run will not further exist in the future Fedora versions
  - Asked upstream to add -p <PID_FILE_location> switch to influence the location of the PID File
  - Set PIDFile=/var/run/haveged.pid This is needed as long -p option is not implemented
  - https://bugzilla.redhat.com/show_bug.cgi?id=770306#c10


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.5-1
changelog:
  - Update to the version 1.5
  - Main new feature is a run time verification of the produced random numbers
  - PIDFILE set to /run/haveged.pid
  - converted README and man page to UTF-8. Informed the upstream to fix it.


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.5-2
changelog:
  - BZ 850144
  - Introduce new systemd-rpm macros in haveged spec file
  - Fedora 19 changes the way how to work with services in spec files.
  - It introduces new macros - systemd_post, systemd_preun and systemd_postun;
  - which replace scriptlets from Fedora 18 and older
  - see https://fedoraproject.org/wiki/Packaging:ScriptletSnippets#Systemd


author: Sharan Turlapati <sturlapati@vmware.com> 551-2
changelog:
  -   Replace ./configure with 
    
    CFLAGS="${CFLAGS:--O2 -g}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g }" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g }" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:-}" ; export LDFLAGS; 
    ./configure --host=x86_64-unknown-linux-gnu --build=x86_64-unknown-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info


author: Ankit Jain <ankitja@vmware.com> 3.3.3-2
changelog:
  - Fix for CVE-2019-18408,CVE-2018-1000879,CVE-2018-1000880
  - CVE-2019-1000019,CVE-2019-1000020,CVE-2018-1000877, CVE-2018-1000878


author: Danut Moraru <dmoraru@vmware.com> 2.25-7
changelog:
  -   Remove capsh test that runs chroot already in chroot, failing due to
      expected environment/dependencies not available


author: Alexey Makhalov <amakhalov@vmware.com> 7.3.0-4
changelog:
  -   Use nofortify security_hardening instead of sed hacking
  -   Use 
    CFLAGS="${CFLAGS:--O2 -g}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g}" ; export FFLAGS ; 
    ./configure --host=x86_64-unknown-linux-gnu --build=x86_64-unknown-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info


author: Sujay G <gsujay@vmware.com> 2.9.11-1
changelog:
  -   Bump version to 2.9.11 to fix CVE-2021-3517, CVE-2021-3518, CVE-2021-3537
  -   Removed previous CVE patches that are un-necessary


author: Shreyas B. <shreyasb@vmware.com> 1.1.32-3
changelog:
  - Apply patch for CVE-2019-5815: READ heap-buffer-overflow in libxslt.
  - Apply patch for CVE-2019-18197
  - Apply patch for CVE-2019-13118
  - Apply patch for CVE-2019-13117
  - Apply patch for CVE-2019-11068


author: Alexey Makhalov <amakhalov@vmware.com> 5.10.103-4
changelog:
  - .config: enable squashfs module, enable crypto user api rng.
  - .config: enable CONFIG_EXT2_FS_XATTR


author: Keerthana K <keerthanak@vmware.com> 5.10.118-4
changelog:
  - Reduce FIPS canister memory footprint by disabling CONFIG_KALLSYMS_ALL
  - Add only fips_canister-kallsyms to vmlinux instead of all symbols


author: Neal Gompa <ngompa13@gmail.com> 3.0-3
changelog:
  - Fix issue files to not require arch mangling
  - Add system-release Provides for generic distroverpkg identifying name


author: Tapas Kundu <tkundu@vmware.com> 3.3.15-1
changelog:
  - Upgrade version to 3.3.15.
  - Fix for CVE-2018-1122 CVE-2018-1123 CVE-2018-1124 CVE-2018-1125
  - Fix for CVE-2018-1126


author: Alexey Makhalov <amakhalov@vmware.com> 7.0-3
changelog:
  - Use 
    CFLAGS="${CFLAGS:--O2 -g}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g}" ; export FFLAGS ; 
    ./configure --host=x86_64-unknown-linux-gnu --build=x86_64-unknown-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info


author: Shreenidhi Shedi <sshedi@vmware.com> 4.16.1.3-5
changelog:
  - Further fix to rpm-rebuilddb.sh
  - Introduced a new locking method to handle contention while rebuilding db


author: Alexey Makhalov <amakhalov@vmware.com> 4.2.1-15
changelog:
  -   Move pam.d config file to here for better tracking.
  -   Add pam_loginuid module as optional in a session.


author: Shreyas B <shreyasb@vmware.com> 3.32.1-1
changelog:
  -   Upgrade to 3.32.1 & fix CVE-2020-15358
  -   CVE-2020-13630 CVE-2020-13434 CVE-2020-13435 CVE-2020-13631 CVE-2020-13632


author: Shreenidhi Shedi <sshedi@vmware.com> 247.11-3
changelog:
  - Enable dns-over-tls support
  - Enable default-dns-over-tls=opportunistic support
  - Disable DNSSEC & DNSOverTLS by default


author: Keerthana K <keerthanak@vmware.com> 7.6-7
changelog:
  - Added HAVE_STRERROR CFLAGS for linux target in Makefile
  - to build with glibc v2.32 since sys_errlist and sys_nerr are deprecated.


author: Oliver Kurth <okurth@vmware.com> 3.1.5-1
changelog:
  - update to 3.1.5
  - add minversions config option
  - make pytests arch independent (does not affect functionality)


