# changelog

author: Kamil Dudka <kdudka@redhat.com> 7.20.1-4
changelog:
  - upstream patch preventing failure of test536 with threaded DNS resolver
  - upstream patch preventing SSL handshake timeout underflow


author: Kamil Dudka <kdudka@redhat.com> 7.20.1-5
changelog:
  - CRL support now works again (#581926)
  - make it possible to start a testing OpenSSH server when building with SELinux
    in the enforcing mode (#521087)


author: Kamil Dudka <kdudka@redhat.com> 7.21.0-1
changelog:
  - new upstream release, drop applied patches
  - update of %description
  - disable valgrind for certain test-cases (libssh2 problem)


author: Kamil Dudka <kdudka@redhat.com> 7.21.0-4
changelog:
  - modify system headers to work around a gcc bug (#617757)
  - curl -T now ignores file size of special files (#622520)
  - fix kerberos proxy authentication for https (#625676)
  - fix curl -J to chop filename at next semicolon (upstream commit d76874a)
  - avoid failure of test575 with threaded DNS resolver (upstream commit d63bdba)
  - work around glibc/valgrind problem on x86_64 (#626470)


author: Kamil Dudka <kdudka@redhat.com> 7.21.0-6
changelog:
  - do not send QUIT to a dead FTP control connection (#650255)
  - pull back glibc's implementation of str[n]casecmp(), #626470 appears fixed
  - prevent FTP client from hanging on unrecognized ABOR response (#649347)
  - return more appropriate error code in case FTP server session idle
    timeout has exceeded (#650255)
  - prevent FTP server from hanging on closed data connection (#643656)
  - enforce versioned libssh2 dependency for libcurl (#642796)
  - proxy tunnel support for LDAP requests (#655073)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-8
changelog:
  - Explicitly clear the ARP cache and flush all addresses & routes
    instead of bringing the interface down (#574568)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-10
changelog:
  - Check whether there is any unexpired address in previous lease
    prior to confirming (INIT-REBOOT) the lease (#585418)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-11
changelog:
  - Use ping instead of arping in dhclient-script to handle
    not-on-local-net gateway in ARP-less device (#524298)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-12
changelog:
  - Server was ignoring client's
    Solicit (where client included address/prefix as a preference) (#634842)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-13.P1
changelog:
  - 4.2.0-P1: fix for CVE-2010-3611 (#649880)
  - dhclient-script: when updating 'search' statement in resolv.conf,
    add domain part of hostname if it's not already there (#637763)


author: Tomas Mraz <tmraz@redhat.com> - 2.0.13-3
changelog:
  - drop s390 specific ifnarchs as all the previously missing dependencies
    are now there
  - split out gpgsm into a smime subpackage to reduce main package dependencies


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.13-4
changelog:
  - Explicitly BR libassuan-static in accordance with the Packaging
    Guidelines (libassuan-devel is still static-only).


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-3
changelog:
  - initialize small amount of secmem for list of algorithms in help (#598847)
    (necessary in the FIPS mode of libgcrypt)


author: Andrea Claudi <aclaudi@redhat.com> [4.11.0-21.el7]
changelog:
  - Check user supplied interface name lengths (Andrea Claudi) [1465646]
  - tc: flower: No need to cache indev arg (Andrea Claudi) [1465646]
  - ip{6, }tunnel: Avoid copying user-supplied interface name around (Andrea Claudi) [1465646]
  - utils: strlcpy() and strlcat() don't clobber dst (Andrea Claudi) [1465646]
  - lnstat_util: Make sure buffer is NUL-terminated (Andrea Claudi) [1465646]
  - tc_util: No need to terminate an snprintf'ed buffer (Andrea Claudi) [1465646]
  - ipxfrm: Replace STRBUF_CAT macro with strlcat() (Andrea Claudi) [1465646]
  - Convert harmful calls to strncpy() to strlcpy() (Andrea Claudi) [1465646]
  - Convert the obvious cases to strlcpy() (Andrea Claudi) [1465646]
  - utils: Implement strlcpy() and strlcat() (Andrea Claudi) [1465646]
  - lib/libnetlink: Don't pass NULL parameter to memcpy() (Andrea Claudi) [1465646]
  - lib/fs: Fix and simplify make_path() (Andrea Claudi) [1465646]
  - lib/bpf: Check return value of write() (Andrea Claudi) [1465646]
  - netem/maketable: Check return value of fscanf() (Andrea Claudi) [1465646]
  - ss: Make sure scanned index value to unix_state_map is sane (Andrea Claudi) [1465646]
  - ss: Make struct tcpstat fields 'timer' and 'timeout' unsigned (Andrea Claudi) [1465646]
  - lib/ll_map: Choose size of new cache items at run-time (Andrea Claudi) [1465646]
  - tc/m_xt: Fix for potential string buffer overflows (Andrea Claudi) [1465646]
  - lnstat_util: Simplify alloc_and_open() a bit (Andrea Claudi) [1465646]
  - lib/inet_proto: Review inet_proto_{a2n,n2a}() (Andrea Claudi) [1465646]
  - lib/fs: Fix format string in find_fs_mount() (Andrea Claudi) [1465646]
  - ipntable: Avoid memory allocation for filter.name (Andrea Claudi) [1465646]
  - tipc/bearer: Prevent NULL pointer dereference (Andrea Claudi) [1465646]
  - tc/tc_filter: Make sure filter name is not empty (Andrea Claudi) [1465646]
  - tc/q_netem: Don't dereference possibly NULL pointer (Andrea Claudi) [1465646]
  - ifstat, nstat: Check fdopen() return value (Andrea Claudi) [1465646]
  - lib/bpf: Don't leak fp in bpf_find_mntpt() (Andrea Claudi) [1465646]
  - devlink: Check return code of strslashrsplit() (Andrea Claudi) [1465646]
  - iplink_vrf: Complain if main table is not found (Andrea Claudi) [1465646]
  - iproute: Check mark value input (Andrea Claudi) [1465646]
  - tc/q_multiq: Don't pass garbage in TCA_OPTIONS (Andrea Claudi) [1465646]
  - netem/maketable: Check return value of fstat() (Andrea Claudi) [1465646]
  - ss: Use C99 initializer in netlink_show_one() (Andrea Claudi) [1465646]
  - ipmaddr: Avoid accessing uninitialized data (Andrea Claudi) [1465646]
  - iplink_can: Prevent overstepping array bounds (Andrea Claudi) [1465646]
  - ipaddress: Avoid accessing uninitialized variable lcl (Andrea Claudi) [1465646]
  - tc/m_gact: Drop dead code (Andrea Claudi) [1465646]
  - ss: Drop useless assignment (Andrea Claudi) [1465646]
  - ss: Skip useless check in parse_hostcond() (Andrea Claudi) [1465646]
  - lib/rt_names: Drop dead code in rtnl_rttable_n2a() (Andrea Claudi) [1465646]
  - iproute: Fix for missing 'Oifs:' display (Andrea Claudi) [1465646]
  - ipntable: No need to check and assign to parms_rta (Andrea Claudi) [1465646]
  - devlink: No need for this self-assignment (Andrea Claudi) [1465646]
  - tipc/bearer: Fix resource leak in error path (Andrea Claudi) [1465646]
  - ss: Fix potential memleak in unix_stats_print() (Andrea Claudi) [1465646]
  - ifstat: Fix memleak in dump_kern_db() for json output (Andrea Claudi) [1465646]
  - ifstat: Fix memleak in error case (Andrea Claudi) [1465646]
  - ipvrf: Fix error path of vrf_switch() (Andrea Claudi) [1465646]
  - tc/em_ipset: Don't leak sockfd on error path (Andrea Claudi) [1465646]
  - ss: Don't leak fd in tcp_show_netlink_file() (Andrea Claudi) [1465646]
  - iproute_lwtunnel: csum_mode value checking was ineffective (Andrea Claudi) [1465646]
  - iproute_lwtunnel: Argument to strerror must be positive (Andrea Claudi) [1465646]
  - tipc/node: Fix socket fd check in cmd_node_get_addr() (Andrea Claudi) [1465646]
  - ifcfg: Quote left-hand side of [ ] expression (Andrea Claudi) [1465646]
  - examples: Some shell fixes to cbq.init (Andrea Claudi) [1465646]
  - ip-address: Use correct max attribute value in print_vf_stats64() (Andrea Claudi) [1679749]
  - ss: enclose IPv6 address in brackets (Andrea Claudi) [1588122]
  - tc: f_flower: Add support for matching first frag packets (Andrea Claudi) [1559814]


author: Andrea Claudi <aclaudi@redhat.com> [4.11.0-23.el7]
changelog:
  - tc_util: Silence spurious compiler warning (Andrea Claudi) [1714660]
  - gre6: add collect metadata support (Andrea Claudi) [1714660]
  - tc: m_tunnel_key: add csum/nocsum option (Andrea Claudi) [1714660]
  - m_mirred: don't bail if the control action is missing (Andrea Claudi) [1714660]
  - tc: fix parsing of the control action (Andrea Claudi) [1714660]
  - tc: util: Don't call NEXT_ARG_FWD() in __parse_action_control() (Andrea Claudi) [1714660]
  - tc: don't print error message on miss when parsing action with default (Andrea Claudi) [1714660]
  - tc: gact: fix control action parsing (Andrea Claudi) [1714660]
  - tc/actions: introduce support for goto chain action (Andrea Claudi) [1714660]
  - tc: actions: add helpers to parse and print control actions (Andrea Claudi) [1714660]
  - tc_filter: add support for chain index (Andrea Claudi) [1714660]
  - gre/gre6: allow clearing {,i,o}{key,seq,csum} flags (Andrea Claudi) [1714660]
  - man: ip link: document GRE tunnels (Andrea Claudi) [1714660]
  - ip/tunnel: Use tnl_parse_key() to parse tunnel key (Andrea Claudi) [1714660]


author: Andrea Claudi <aclaudi@redhat.com> [4.11.0-25.el7]
changelog:
  - tc: implement ingress/egress block index attributes for qdiscs (Andrea Claudi) [1721291]
  - tc: introduce support for block-handle for filter operations (Andrea Claudi) [1721291]
  - tc_filter: resolve device name before parsing filter (Andrea Claudi) [1721291]
  - tc: introduce tc_qdisc_block_exists helper (Andrea Claudi) [1721291]


author: Andrea Claudi <aclaudi@redhat.com> [4.11.0-27.el7]
changelog:
  - ss: fix NULL pointer access when parsing unix sockets with oldformat (Andrea Claudi) [1795891]
  - tc_util: Add support for showing TCA_STATS_BASIC_HW statistics (Andrea Claudi) [1637437]
  - Update kernel headers (Andrea Claudi) [1637437]
  - uapi: update bpf headers (Andrea Claudi) [1637437]
  - Update kernel headers (Andrea Claudi) [1637437]
  - man: Clarify idleslope calculation for tc-cbs (Andrea Claudi) [1557461]
  - man: Add initial manpage for tc-cbs(8) (Andrea Claudi) [1557461]
  - tc: Add support for the CBS qdisc (Andrea Claudi) [1557461]
  - nstat: print useful error messages in abort() cases (Andrea Claudi) [1792908]


author: Alan Bartlett <ajb@elrepo.org> - 4.4.173-1
changelog:
  - Updated with the 4.4.173 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.173]


author: Alan Bartlett <ajb@elrepo.org> - 4.4.174-1
changelog:
  - Updated with the 4.4.174 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.174]


author: Alan Bartlett <ajb@elrepo.org> - 4.4.175-1
changelog:
  - Updated with the 4.4.175 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.175]


author: Alan Bartlett <ajb@elrepo.org> - 4.4.176-1
changelog:
  - Updated with the 4.4.176 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.176]


author: Alan Bartlett <ajb@elrepo.org> - 4.4.177-1
changelog:
  - Updated with the 4.4.177 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.177]
  - CONFIG_SQUASHFS_LZ4=y [https://elrepo.org/bugs/view.php?id=908]


author: Alan Bartlett <ajb@elrepo.org> - 4.4.178-1
changelog:
  - Updated with the 4.4.178 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.178]


author: Alan Bartlett <ajb@elrepo.org> - 4.4.179-1
changelog:
  - Updated with the 4.4.179 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.179]


author: Alan Bartlett <ajb@elrepo.org> - 4.4.180-1
changelog:
  - Updated with the 4.4.180 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.180]
  - Purge the source tree of all unrequired dot-files.
  - [https://elrepo.org/bugs/view.php?id=912]


author: Alan Bartlett <ajb@elrepo.org> - 4.4.181-1
changelog:
  - Updated with the 4.4.181 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.181]
  - Added NO_LIBZSTD=1 directive to the %global perf_make line.


author: Alan Bartlett <ajb@elrepo.org> - 4.4.182-1
changelog:
  - Updated with the 4.4.182 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.182]


author: Alan Bartlett <ajb@elrepo.org> - 4.4.237-1
changelog:
  - Updated with the 4.4.237 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.237]


author: Alan Bartlett <ajb@elrepo.org> - 4.4.238-1
changelog:
  - Updated with the 4.4.238 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.238]


author: Alan Bartlett <ajb@elrepo.org> - 4.4.239-1
changelog:
  - Updated with the 4.4.239 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.239]


author: Alan Bartlett <ajb@elrepo.org> - 4.4.240-1
changelog:
  - Updated with the 4.4.240 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.240]


author: Alan Bartlett <ajb@elrepo.org> - 4.4.241-1
changelog:
  - Updated with the 4.4.241 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.241]


author: Alan Bartlett <ajb@elrepo.org> - 4.4.242-1
changelog:
  - Updated with the 4.4.242 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.242]


author: Alan Bartlett <ajb@elrepo.org> - 4.4.243-1
changelog:
  - Updated with the 4.4.243 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.243]


author: Alan Bartlett <ajb@elrepo.org> - 4.4.244-1
changelog:
  - Updated with the 4.4.244 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.244]


author: Alan Bartlett <ajb@elrepo.org> - 4.4.245-1
changelog:
  - Updated with the 4.4.245 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.245]


author: Alan Bartlett <ajb@elrepo.org> - 4.4.246-1
changelog:
  - Updated with the 4.4.246 source tarball.
  - [https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.246]


author: Jan F. Chadima <jchadima@redhat.com> - 5.5p1-20 + 0.9.2-26
changelog:
  - Tweaking selabel patch to work properly without selinux rules loaded. (#632914)
  - enabling authorized keys command patch


author: Than Ngo <than@redhat.com> - 3.10-4
changelog:
  - add feature, save and restore all information about default routes bz#191242
  - add startup script for pppoe-server bz#507123


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-4
changelog:
  - audit related Makefile.in and configure.in corrections
  - added --with-audit configure option
  - removed call to libtoolize


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p6-1
changelog:
  - update to new upstream version
  - merged .audit and .libaudit patch
  - added sudoers.ldap.5* to files


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p4-1
changelog:
  - update to new upstream version
  - sudo now uses /var/db/sudo for timestamps
  - new command available: sudoreplay
  - use native audit support
  - corrected license field value: BSD -> ISC


