# changelog

author: Tapas Kundu <tkundu@vmware.com> 3.13-3
changelog:
  -   Added lib3 changes for CVE-2017-18342
  -   change default loader for yaml.add_constructor
  -   Add custom constructors to multiple loaders


author: Tapas Kundu <tkundu@vmware.com> 3.13-3
changelog:
  - Added lib3 changes for CVE-2017-18342
  - change default loader for yaml.add_constructor
  - Add custom constructors to multiple loaders


author: Divya Thaluru <dthaluru@vmware.com> 3.5.0-3
changelog:
  -   Removed dependency on ANT_HOME
  -   Removed apache-maven profile file
  -   Removed version from directory path


author: Divya Thaluru <dthaluru@vmware.com> 3.5.0-3
changelog:
  - Removed dependency on ANT_HOME
  - Removed apache-maven profile file
  - Removed version from directory path


author: Dweep Advani <dadvani@vmware.com> 2.69-7
changelog:
  -   Build section is changed to used 
    CFLAGS="${CFLAGS:--O2 -g}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g}" ; export FFLAGS ; 
    ./configure --host=x86_64-unknown-linux-gnu --build=x86_64-unknown-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info


author: Dweep Advani <dadvani@vmware.com> 9.16.33-1
changelog:
  -   Version upgraded to 9.16.33 to fix multiple CVEs
  -   CVE-2022-2795, CVE-2022-3080,  CVE-2022-38177 and CVE-2022-38178


author: Dweep Advani <dadvani@vmware.com> 9.16.33-1
changelog:
  - Version upgraded to 9.16.33 to fix multiple CVEs
  - CVE-2022-2795, CVE-2022-3080,  CVE-2022-38177 and CVE-2022-38178


author: Vikash Bansal <bvikas@vmware.com> 2.31.1-5
changelog:
  -   Fix CVE-2018-20623, CVE-2018-20671, CVE-2018-20651,
  -   CVE-2018-17794-18700-18701-18484, CVE-2019-9071, CVE-2019-9073 and CVE-2019-9074


author: Nitesh Kumar <nitesh-nk.kumar@broadcom.com> 5.71-1
changelog:
  - Version upgrade to v5.71 to fix following CVE's:
  - CVE-2023-44431, CVE-2023-51580, CVE-2023-51589,
  - CVE-2023-51592 and CVE-2023-51596


author: Shreyas B <shreyasb@vmware.com> 1.0.8-1
changelog:
  -   Upgrade to 1.0.8.
  -   Remove CVE-2016-3189.patch & CVE-2019-12900.patch, as the fix already available in latest version.


author: Michelle Wang <michellew@vmware.com> 1.16.0-1
changelog:
  -       Upgrade cairo to 1.16.0 for CVE-2018-18064
  -       CVE-2018-18064 is for version up to (including) 1.15.14


author: Michelle Wang <michellew@vmware.com> 1.16.0-1
changelog:
  -   Upgrade cairo to 1.16.0 for CVE-2018-18064
  -   CVE-2018-18064 is for version up to (including) 1.15.14


author: Michelle Wang <michellew@vmware.com> 1.16.0-1
changelog:
  - Upgrade cairo to 1.16.0 for CVE-2018-18064
  - CVE-2018-18064 is for version up to (including) 1.15.14


author: Keerthana K <keerthanak@vmware.com> 18.3-4
changelog:
  -   Fix to delete the contents of /etc/systemd/network dir at the beginning
  -   of write_network instead of looping through each NIC and delete the contents
  -   before writing a custom network file.


author: Keerthana K <keerthanak@vmware.com> 18.3-6
changelog:
  -   Fix socket.getfqdn() in DataSourceVMwareGuestInfo
  -   Return False when no data is found in get_data() of DataSourceVMwareGuestInfo.
  -   Disable manage_etc_hosts by default as cloud-init tries to write its default template /etc/hosts file if enabled.


author: Shreenidhi Shedi <sshedi@vmware.com> 19.1-4
changelog:
  -   Enable power-state-change in cloud-photon.cfg file
  -   Updated DataSourceVMwareGuestInfo.patch (till commit 9e69060 from mainline)
  -   Updated dscheck_VMwareGuestInfo and ds-guestinfo-photon.patch


author: Shreenidhi Shedi <sshedi@vmware.com> 19.1-7
changelog:
  -   Updated ds-guestinfo-photon.patch
  -   Fixed dhcp issue in photon-distro.patch
  -   Updated DataSourceVMwareGuestInfo.patch (till commit bf996d9 from mainline)


author: Shreenidhi Shedi <sshedi@vmware.com> 19.1-8
changelog:
  -   Fixed make check
  -   Enable all harmless options
  -   Generate cloud.cfg using render-cloudcfg script


author: Andrew Kutz <akutz@vmware.com> 19.4-3
changelog:
  -   Support multiple NICs with Networking Config Version 2
  -   Remove unneccesary variable definitions
  -   Format distro file photon.py with consistent tab widths


author: Shreenidhi Shedi <sshedi@vmware.com> 19.4-10
changelog:
  -   Fixed creating `[Route]` entries while creating network files
  -   Updated DataSourceVMwareGuestInfo (till commit abc387c7)


author: Shreenidhi Shedi <sshedi@vmware.com> 21.2-1
changelog:
  -   Upgrade to version 21.2
  -   Refactored ds-guestinfo-photon.patch to generate netcfg v2
  -   Added fallback-netcfg.patch to handle net configs when no DS present


author: Shreenidhi Shedi <sshedi@vmware.com> 19.4-10
changelog:
  - Fixed creating `[Route]` entries while creating network files
  - Updated DataSourceVMwareGuestInfo (till commit abc387c7)


author: Shreenidhi Shedi <sshedi@vmware.com> 21.2-1
changelog:
  - Upgrade to version 21.2
  - Refactored ds-guestinfo-photon.patch to generate netcfg v2
  - Added fallback-netcfg.patch to handle net configs when no DS present


author: Divya Thaluru <dthaluru@vmware.com> 1.0.15-11
changelog:
  -   Packaged jar files to /usr/share/java
  -   Removed version information from jar files
  -   Removed dependency on ANT_HOME


author: Divya Thaluru <dthaluru@vmware.com> 1.0.15-11
changelog:
  - Packaged jar files to /usr/share/java
  - Removed version information from jar files
  - Removed dependency on ANT_HOME


author: Nitesh Kumar <kunitesh@vmware.com> 1.10.1-1
changelog:
  - Version upgrade to v1.10.1 to fix following CVE's:
  - CVE-2018-1098, CVE-2018-1099, CVE-2023-0296,
  - CVE-2020-15106, CVE-2020-15112, CVE-2020-15113,
  - CVE-2020-15114, CVE-2020-15115, CVE-2020-15136


author: Alexey Makhalov <amakhalov@vmware.com> 2.9.6-3
changelog:
  -   Remove any dicts from cracklib main package
  -   Compress pw_dict.pwd file
  -   Move doc folder to devel package


author: Alexey Makhalov <amakhalov@vmware.com> 2.9.6-4
changelog:
  -   Revert compressing pw_dict.pwd back. Python code
      cracklib.VeryFascistCheck does not handle it.


author: Alexey Makhalov <amakhalov@vmware.com> 2.9.6-3
changelog:
  - Remove any dicts from cracklib main package
  - Compress pw_dict.pwd file
  - Move doc folder to devel package


author: Alexey Makhalov <amakhalov@vmware.com> 2.9.6-4
changelog:
  - Revert compressing pw_dict.pwd back. Python code
      cracklib.VeryFascistCheck does not handle it.


author: Alexey Makhalov <amakhalov@vmware.com> 7.1.5-1
changelog:
  -   Update version to 7.1.5 (it supports linux-4.4)
  -   Added gcore plugin
  -   Remove zlib-devel requirement from -devel subpackage


author: Alexey Makhalov <amakhalov@vmware.com> 7.1.8-1
changelog:
  -   Update version to 7.1.8 (it supports linux-4.9)
  -   Disable a patch - it requires a verification.


author: Alexey Makhalov <amakhalov@vmware.com> 5.6.4.1-3
changelog:
  -   N-to-M-mapping-support.patch
      reverse key-values in the mapping file. Photon package name as a key
      and NVD product name(s) as a value.
  -   mapping: added python[23]->python and curl->curl libcurl


author: Alexey Makhalov <amakhalov@vmware.com> 5.6.4.1-4
changelog:
  -   0004-Mapping-supports-vendor-product-combination.patch
      to support package=vendor:product mapping


author: Alexey Makhalov <amakhalov@vmware.com> 5.6.4.1-7
changelog:
  -   Add more entries in package mapping file
  -   Improve jdk/jre version parsing
  -   Improve .spec parser to search comment with CVE-xxxx-xxxx mentioning


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.61-1
changelog:
  - specfile cleanup
  - ifup-ipv6: set accept_ra to 2 when IPV6FORWARDING=yes and IPV6_AUTOCONF=yes
  - ifup-post: check resolve.conf also with DNS2
  - ifup-aliases: do not fail when only ipv6 addr is specified
  - fedora-import-state.service: run a little bit later
  - fedora-readonly: Updates for systemd random-seed handling
  - network-functions: is_available_wait should wait even in the case that is_available returns 2
  - ifdown-post: remove resolv.conf only in specific cases
  - network-functions: fix check in install_bonding_driver


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.62-1
changelog:
  - network-functions: fix change_resolv_conf after grep update
  - ifup-aliases: don't return with error when arping fails
  - init.d/functions: rc.debug option to debug initscripts
  - ifup-aliases: inherit ARPCHECK from parent device
  - network: report that we can't shut down network for root on netfs
  - ifdown-eth: use scope host for lo


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.63-1
changelog:
  - remove ipcalc, it has its own package now
  - network: tell NM to reload its configuration during start
  - bonding: warn if the ifup for slave device failed
  - sysctl.conf: drop SHMALL and SHMMAX, they have sane default values in kernel
  - ifup: don't call NM for loopback
  - clarify daemon() usage message
  - rename_device: allow non-channel nics for s390x machines
  - ifup: add missing quotes


author: Brennan Lamoreaux <blamoreaux@vmware.com> 0.6.2-1
changelog:
  - Initial addition to Photon. Needed for addition of SSSD.
  - Modified from provided spec file in GitHub repository.


author: Satya Naga Vasamsetty <svasamsetty@vmware.com> 2.82-1
changelog:
  -   Fix CVE-2020-25681,CVE-2020-25682,CVE-2020-25683,CVE-2020-25684
  -   CVE-2020-25685,CVE-2020-25686,CVE-2020-25687


author: Satya Naga Vasamsetty <svasamsetty@vmware.com> 2.82-1
changelog:
  - Fix CVE-2020-25681,CVE-2020-25682,CVE-2020-25683,CVE-2020-25684
  - CVE-2020-25685,CVE-2020-25686,CVE-2020-25687


author: Shreenidhi Shedi <sshedi@vmware.com> 048-8
changelog:
  - Don't create orpan debug file under kernel modules directory
  - This was getting created by 0001-fips-changes.patch


author: Shreenidhi Shedi <sshedi@vmware.com> 1.8.3-5
changelog:
  - Fix packaging to remove conflict with arptables package
  - Apply HCX team's patch to libebt_nflog.c, arptables


author: Sujay G <gsujay@vmware.com> 0.176-1
changelog:
  - Updated to version 0.176 to fix CVE-2019-{7148, 7149, 7150}'s
  - Removed cve-2014-0172.patch, CVE-2018-18310.patch, CVE-2018-18520.patch,
    CVE-2018-18521.patch patch files.


author: Tapas Kundu <tkundu@vmware.com> 2.2.9-3
changelog:
  - Fix CVE-2022-22822, CVE-2022-22823, CVE-2022-22824
  - CVE-2022-22825, CVE-2022-22826, CVE-2022-22827


author: Tapas Kundu <tkundu@vmware.com> 2.2.9-3
changelog:
  -   Fix CVE-2022-22822, CVE-2022-22823, CVE-2022-22824
  -   CVE-2022-22825, CVE-2022-22826, CVE-2022-22827


author: Alexey Makhalov <amakhalov@vmware.com> 7.3.0-4
changelog:
  -   Use nofortify security_hardening instead of sed hacking
  -   Use 
    CFLAGS="${CFLAGS:--O2 -g}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g}" ; export FFLAGS ; 
    ./configure --host=x86_64-unknown-linux-gnu --build=x86_64-unknown-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info


author: Dweep Advani <dadvani@vmware.com> 2.19.0-2
changelog:
  -   Using 
    CFLAGS="${CFLAGS:--O2 -g}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g}" ; export FFLAGS ; 
    ./configure --host=x86_64-unknown-linux-gnu --build=x86_64-unknown-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info and changing for perl upgrade


author: Dweep Advani <dadvani@vmware.com> 2.19.0-2
changelog:
  - Using 
    CFLAGS="${CFLAGS:--O2 -g}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g}" ; export FFLAGS ; 
    ./configure --host=x86_64-unknown-linux-gnu --build=x86_64-unknown-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info and changing for perl upgrade


author: Vamsi Krishna Brahmajosyula <vbrahmajosyula@vmware.com> 2.58.3-1
changelog:
  - Upgrade to 2.58.3 to apply relevant CVE fix patches from debian
  - https://salsa.debian.org/gnome-team/glib/-/commits/debian/2.58.3-2+deb10u5?ref_type=tags


author: Alexey Makhalov <amakhalov@vmware.com> 2.02-12
changelog:
  -   Update grub version from ~rc3 to release.
  -   Enhance SB + TPM support (19 patches from grub2-2.02-70.fc30)
  -   Remove i386-pc modules from grub2-efi


author: Alexey Makhalov <amakhalov@vmware.com> 2.04-1
changelog:
  -   Fixes for CVE-2020-10713, CVE-2020-14308, CVE-2020-14309,
      CVE-2020-14310, CVE-2020-14311, CVE-2020-15705, CVE-2020-15706
      CVE-2020-15707.


author: Alexey Makhalov <amakhalov@vmware.com> 2.04-2
changelog:
  -   Fixes for CVE-2020-14372, CVE-2020-25632, CVE-2020-25647,
      CVE-2020-27749, CVE-2020-27779, CVE-2021-3418, CVE-2021-20225,
      CVE-2021-20233.


author: Alexey Makhalov <amakhalov@vmware.com> 2.02-12
changelog:
  - Update grub version from ~rc3 to release.
  - Enhance SB + TPM support (19 patches from grub2-2.02-70.fc30)
  - Remove i386-pc modules from grub2-efi


author: Alexey Makhalov <amakhalov@vmware.com> 2.04-1
changelog:
  - Fixes for CVE-2020-10713, CVE-2020-14308, CVE-2020-14309,
    CVE-2020-14310, CVE-2020-14311, CVE-2020-15705, CVE-2020-15706
    CVE-2020-15707.


author: Alexey Makhalov <amakhalov@vmware.com> 2.04-2
changelog:
  - Fixes for CVE-2020-14372, CVE-2020-25632, CVE-2020-25647,
    CVE-2020-27749, CVE-2020-27779, CVE-2021-3418, CVE-2021-20225,
    CVE-2021-20233.


author: Andrew Kutz <akutz@vmware.com> 2.2.2-1
changelog:
  -   Update to version 2.2.2
  -   Removed patch for CVE-2020-11100 as it is now built into the program


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.4-3
changelog:
  - PIDFile should be stored at /run instead of the default location /var/run
  - There is  long term plan that directory /var/run will not further exist in the future Fedora versions
  - Asked upstream to add -p <PID_FILE_location> switch to influence the location of the PID File
  - Set PIDFile=/var/run/haveged.pid This is needed as long -p option is not implemented
  - https://bugzilla.redhat.com/show_bug.cgi?id=770306#c10


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.5-1
changelog:
  - Update to the version 1.5
  - Main new feature is a run time verification of the produced random numbers
  - PIDFILE set to /run/haveged.pid
  - converted README and man page to UTF-8. Informed the upstream to fix it.


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.5-2
changelog:
  - BZ 850144
  - Introduce new systemd-rpm macros in haveged spec file
  - Fedora 19 changes the way how to work with services in spec files.
  - It introduces new macros - systemd_post, systemd_preun and systemd_postun;
  - which replace scriptlets from Fedora 18 and older
  - see https://fedoraproject.org/wiki/Packaging:ScriptletSnippets#Systemd


author: Sujay G <gsujay@vmware.com> 2017.1-6
changelog:
  -   Set SOLVER_FLAG_ALLOW_DOWNGRADE to true for downgrade operation.
  -   Return severity and reboot_suggested.
  -   Set Release to 6, skipping 5 to resolved Photon upgrade issue.


author: Dweep Advani <dadvani@vmware.com> 2.4.39-1
changelog:
  -   Upgrading to 2.4.39 for fixing multiple CVEs
  -   (1) CVE-2018-17189 (2) CVE-2018-17199 (3) CVE-2019-0190
  -   (4) CVE-2019-0211 (5) CVE-2019-0215 (6) CVE-2019-0217


author: Shreyas B. <shreyasb@vmware.com> 2.4.41-1
changelog:
  -   Upgrading to 2.4.41 to address following CVEs.
  -   (1) CVE-2019-10092 (2) CVE-2019-10098 (3) CVE-2019-10082
  -   (4) CVE-2019-10081 (5) CVE-2019-9517


author: Dweep Advani <dadvani@vmware.com> 2.4.39-1
changelog:
  - Upgrading to 2.4.39 for fixing multiple CVEs
  - (1) CVE-2018-17189 (2) CVE-2018-17199 (3) CVE-2019-0190
  - (4) CVE-2019-0211 (5) CVE-2019-0215 (6) CVE-2019-0217


author: Shreyas B. <shreyasb@vmware.com> 2.4.41-1
changelog:
  - Upgrading to 2.4.41 to address following CVEs.
  - (1) CVE-2019-10092 (2) CVE-2019-10098 (3) CVE-2019-10082
  - (4) CVE-2019-10081 (5) CVE-2019-9517


author: Gerrit Photon <photon-checkins@vmware.com> 1.2.48-1
changelog:
  -       Automatic Version Bump
  -	used 
    CFLAGS="${CFLAGS:--O2 -g}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g}" ; export FFLAGS ; 
    ./configure --host=x86_64-unknown-linux-gnu --build=x86_64-unknown-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info instead of ./configure


author: Gerrit Photon <photon-checkins@vmware.com> 1.2.48-1
changelog:
  - Automatic Version Bump
  - Use 
    CFLAGS="${CFLAGS:--O2 -g}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g}" ; export FFLAGS ; 
    ./configure --host=x86_64-unknown-linux-gnu --build=x86_64-unknown-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info instead of ./configure


author: Vikash Bansal <bvikas@vmware.com> 2.0-7
changelog:
  -   Add all flavours of hmacgen package to watched packages list
  -   Add "/etc/hmacgen" to watched paths (for photon-checksum-generator)


author: Keerthana K <keerthanak@vmware.com> 1.8.18-3
changelog:
  -   Fix 
    CFLAGS="${CFLAGS:--O2 -g}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g}" ; export FFLAGS ; 
    ./configure --host=x86_64-unknown-linux-gnu --build=x86_64-unknown-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info.


author: Brennan Lamoreaux <blamoreaux@vmware.com> 0.9.6-1
changelog:
  - Initial addition to photon. Modified from provided kpatch.spec on GitHub.
  - Also includes automated livepatch building subpackage as kpatch-utils.


author: Brennan Lamoreaux <blamoreaux@vmware.com> 0.9.6-2
changelog:
  - Adding option both in kpatch-utils scripts and kpatch-build itself for
  - setting the description field of a livepatch module.


author: Brennan Lamoreaux <blamoreaux@vmware.com> 0.9.6-3
changelog:
  - Fixed issue where auto_livepatch.sh keeps description file around
  - and alwasy copies into container.


author: Brennan Lamoreaux <blamoreaux@vmware.com> 0.9.6-4
changelog:
  - Adding patch to make livepatch modules visible to modinfo.
  - Adding cabability to package modules as RPMS.


author: Shreyas B <shreyasb@vmware.com> 1.14.10-1
changelog:
  -   Upgrade to v1.14.10 to address CVE-2019-11251.
  -   Fix for the CVE-2019-11250.
  -   Fix for the CVE-2020-8552.


author: Sharan Turlapati <sturlapati@vmware.com> 530-2
changelog:
  -   Replacing ./configure with 
    CFLAGS="${CFLAGS:--O2 -g}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g}" ; export FFLAGS ; 
    ./configure --host=x86_64-unknown-linux-gnu --build=x86_64-unknown-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info


author: Sharan Turlapati <sturlapati@vmware.com> 530-2
changelog:
  - Replacing ./configure with 
    CFLAGS="${CFLAGS:--O2 -g}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g}" ; export FFLAGS ; 
    ./configure --host=x86_64-unknown-linux-gnu --build=x86_64-unknown-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info


author: Keerthana K <keerthanak@vmware.com> 2015.2-2
changelog:
  -   Removed % from autosetup in the changelog to address the
  -   build break with latest RPM version.


author: Brennan Lamoreaux <blamoreaux@vmware.com> 2.8.1-1
changelog:
  - Initial addition to Photon. Reorganized, edited and updated
  - for Photon OS from provided spec file in the sssd github repo.


author: Brennan Lamoreaux <blamoreaux@vmware.com> 2.8.1-11
changelog:
  - Remove autoconfiguration on post install/uninstall as this can
  - compromise user settings if not properly checked.


author: Harinadh D <hdommaraju@vmware.com> 1.11.0-1
changelog:
  -   version upgrade
  -   RSA SHA2 256/512 key upgrade to support RFC 8332
  -   fix VCDA fails to perform SFTP upload of its backups to SFTP servers


author: Brennan Lamoreaux <blamoreaux@vmware.com> 2.3.4-1
changelog:
  -   Version increase needed for SSSD addition. Forces update to python 3 packages.
  -   Enable debuginfo.


author: Ankit Jain <ankitja@vmware.com> 1.2.20-6
changelog:
  - fix CVE-2021-33643 CVE-2021-33644 CVE-2021-33645 CVE-2021-33646
  - fix multiple memory leak related issues


author: Dheeraj Shetty <dheerajs@vmware.com> 4.0.9-1
changelog:
  -   Updated to version 4.0.9 to fix CVE-2017-11613, CVE-2017-9937,
  -   CVE-2017-17973. Added a patch for CVE-2017-18013


author: Shivani Agarwal <shivania2@vmware.com> 4.4.0-1
changelog:
  -   Fix CVE-2022-1622, CVE-2022-22844, CVE-2022-0865, CVE-2022-0924, CVE-2022-0908, CVE-2022-0909, CVE-2022-0907


author: Brennan Lamoreaux <blamoreaux@vmware.com> 4.17.2-1
changelog:
  -   Package additional header files needed for SSSD. Version upgrade.
  -   Unbundle some libraries so to not conflict with external libs.
  -   Regenerate patch for dcerpc.


author: Sujay G <gsujay@vmware.com> 1.0.3-1
changelog:
  - Bump version to 1.0.3 to fix following CVE's:
  - CVE-2018-25009, CVE-2018-25010, CVE-2018-25011, CVE-2018-25012,
  - CVE-2018-25013, CVE-2018-25014, CVE-2020-36328, CVE-2020-36329,
  - CVE-2020-36330, CVE-2020-36331, CVE-2020-36332


author: Shreyas B <shreyasb@vmware.com> 2.9.10-1
changelog:
  -   Updgrade to v2.9.10 to address CVE-2019-19956(memory leak issue).
  -   Fix CVE-2020-7595(end-of-file issue).


author: Sujay G <gsujay@vmware.com> 2.9.11-1
changelog:
  -   Bump version to 2.9.11 to fix CVE-2021-3517, CVE-2021-3518, CVE-2021-3537.
  -   Remove other unnecessary patch files.


author: Sujay G <gsujay@vmware.com> 2.9.11-1
changelog:
  - Bump version to 2.9.11 to fix CVE-2021-3517, CVE-2021-3518, CVE-2021-3537.
  - Remove other unnecessary patch files.


author: Shreyas B <shreyasb@vmware.com> 2.9.10-1
changelog:
  - Updgrade to v2.9.10 to address CVE-2019-19956(memory leak issue).
  - Fix CVE-2020-7595(end-of-file issue).


author: Tapas Kundu <tkundu@vmware.com> 6.2.11.13-1
changelog:
  -   Added checks to make sure if we are in chroot or not.
  -   Check pid of lwsmd when we are not in chroot.


author: Keerthana K <keerthanak@vmware.com> 4.19.87-3
changelog:
  -   Modify tcrypt to remove tests for algorithms that are not supported in photon.
  -   Added tests for DH, DRBG algorithms.


author: Keerthana K <keerthanak@vmware.com> 4.19.97-2
changelog:
  -   Update tcrypt to test drbg_pr_sha256 and drbg_nopr_sha256.
  -   Update testmgr to add drbg_pr_ctr_aes256 test vectors.


author: Keerthana K <keerthanak@vmware.com> 4.19.97-4
changelog:
  -   Add photon-checksum-generator source tarball and remove hmacgen patch.
  -   Exclude hmacgen.ko from base package.


author: Albert Guo <aguo@vmware.com> 4.19.154-5
changelog:
  -   9P: Ensure seekdir work correctly when readdir hasn't reached eof
  -   9P: [VDFS]Initialize fid->iounit during creation of p9_fid


author: Srivatsa S. Bhat (VMware) <srivatsa@csail.mit.edu> 4.19.154-6
changelog:
  -   Add support for PTP_SYS_OFFSET_EXTENDED ioctl
  -   Update i40e out-of-tree driver to version 2.13.10


author: Ankit Jain <ankitja@vmware.com> 4.19.160-2
changelog:
  -   Enable CONFIG_NET_VENDOR_AMAZON and CONFIG_ENA_ETHERNET
  -   to add support for ami in arm in linux generic
  -   Added nvme and nvme-core to initrd modules


author: Ajay Kaher <akaher@vmware.com> 4.19.160-6
changelog:
  -   Adding sev-es: patch set v3
  -   x86/efi,boot: GDT handling cleanup/fixes
  -   x86: Add guard pages to exception and interrupt stacks<<<<< HEAD


author: Alexey Makhalov <amakhalov@vmware.com> 4.19.182-2
changelog:
  -   Disable kernel accounting for memory cgroups
  -   Enable cgroup v1 stats
  -   .config: enable PERCPU_STATS


author: Keerthana K <keerthanak@vmware.com> 4.19.191-1
changelog:
  -   Update to version 4.19.191
  -   Remove XR usb driver support
  -   .config: Enable CONFIG_FANOTIFY_ACCESS_PERMISSIONS


author: Srivatsa S. Bhat (VMware) <srivatsa@csail.mit.edu> 4.19.198-4
changelog:
  -   Add PCI quirk to allow multiple devices under the same virtual
  -   PCI bridge to be put into separate IOMMU groups.


author: Srivatsa S. Bhat (VMware) <srivatsa@csail.mit.edu> 4.19.214-4
changelog:
  -   .config: Enable CONFIG_INTEL_RDT, CONFIG_USERFAULTFD, and
  -   CONFIG_NFT_{CHAIN_ROUTE, CHAIN_NAT, MASQ, REDIR}_IPV4.


author: Srivatsa S. Bhat (VMware) <srivatsa@csail.mit.edu> 4.19.247-6
changelog:
  - Update iavf driver to v4.4.2
  - Update ice driver to v1.8.3
  - .config: Enable CONFIG_NET_DEVLINK=y (ice v1.8.3 needs it).


author: Srivatsa S. Bhat (VMware) <srivatsa@csail.mit.edu> 4.19.269-2
changelog:
  - Enable turbostat to work in the guest on VMware hypervisor.
  - Add support for Intel Ice Lake server CPUs to turbostat.


author: Vamsi Krishna Brahmajosyula <vbrahmajosyula@vmware.com> 4.19.269-3
changelog:
  - update to latest ToT vmxnet3 driver
  - Include patch "vmxnet3: correctly report csum_level for encapsulated packet"


author: Brennan Lamoreaux <blamoreaux@vmware.com> 4.19.277-2
changelog:
  - Patch drivers to not install aux module on modules_install_no_aux
  - Clean up driver installation code


author: Ankit Jain <ankitja@vmware.com> 4.19.283-2
changelog:
  - Add support for Intel Sapphire Rapids server CPUs to turbostat.
  - Allow cpuidle subsystem to use acpi_idle driver
  - when only one C-state is available


author: Him Kalyan Bordoloi <bordoloih@vmware.com> 4.19.295-4
changelog:
  - Remove patch to fix compilation issues in ice, iavf and i40e drivers
  - Replace ice-1.12.6 with ice-1.12.7


author: Ajay Kaher <akaher@vmware.com> 4.19.84-3
changelog:
  -   Fix CVE-2019-19062, CVE-2019-19066, CVE-2019-19072,
  -   CVE-2019-19073, CVE-2019-19074, CVE-2019-19078


author: Keerthana K <keerthanak@vmware.com> 4.19.40-2
changelog:
  -   Fix to parse through /boot folder and update symlink (/boot/photon.cfg) if
  -   mulitple kernels are installed and current linux kernel is removed.


author: Srivatsa S. Bhat (VMware) <srivatsa@csail.mit.edu> 4.19.52-1
changelog:
  -   Update to version 4.19.52
  -   Fix CVE-2019-12456, CVE-2019-12379, CVE-2019-12380, CVE-2019-12381,
  -   CVE-2019-12382, CVE-2019-12378, CVE-2019-12455


author: Alexey Makhalov <amakhalov@vmware.com> 4.19.6-4
changelog:
  -   .config: added Compulab fitlet2 device drivers
  -   .config_aarch64: added gpio sysfs support
  -   renamed -sound to -drivers-sound


author: Ankit Jain <ankitja@vmware.com> 4.19.6-6
changelog:
  -   Enable following for x86_64 and aarch64:
  -    Enable Kernel Address Space Layout Randomization.
  -    Enable CONFIG_SECURITY_NETWORK_XFRM


author: Alexey Makhalov <amakhalov@vmware.com> 4.19.65-4
changelog:
  -   NXP ls1046a frwy board support.
  -   config_aarch64: add fsl_dpaa2 support.
  -   fix fsl_dpaa_mac initialization issue.


author: Ajay Kaher <akaher@vmware.com> 4.19.69-2
changelog:
  -   Adding SPI and Audio interfaces in rpi3 device tree
  -   Adding spi0 and audio overlays
  -   Copying rpi dt in /boot/broadcom as u-boot picks from here


author: Srivatsa S. Bhat (VMware) <srivatsa@csail.mit.edu> 4.19.76-2
changelog:
  -   Add additional BuildRequires and Requires to fix issues with perf, related to
  -   interactive UI and C++ symbol demangling. Also update the last few perf python
  -   scripts in Linux kernel to use python3 syntax.


author: Mounesh Badiger <badigerm@vmware.com> 4.19.104-2
changelog:
  -   p9fs_dir_readdir offset support
  -   Add 9p zero copy data path using crossfd
  -   Enable cache=loose for vdfs 9p
  -   9p:Calculate zerocopy pages with considering buffer alignment


author: Mounesh Badiger <badigerm@vmware.con> 4.19.132-5
changelog:
  -   VDFS 9p Initial recovery logic in 9p.
  -   VDFS 9p Add lock state for 9P fid to use it for recovery
  -   VDFS 9p Add test infra to test 9p recovery logic
  -   VDFS 9p Handle failure during recover
  -   VDFS 9p Adding claim tags support in 9p


author: Alexey Makhalov <amakhalov@vmware.com> 4.19.150-2
changelog:
  -   Improve 03-poweroff patch to support direct boot.
  -   .config: enable CONFIG_POWER_RESET_PIIX4_POWEROFF.


author: Ajay Kaher <akaher@vmware.com> 4.19.154-2
changelog:
  -   Adding following patch series required for sev-es:
  -   x86/efi,boot: GDT handling cleanup/fixes
  -   x86: Add guard pages to exception and interrupt stacks
  -   vmwgfx patches


author: Mounesh Badiger <badigerm@vmware.com> 4.19.177-5
changelog:
  -   9p: VDFS: Integrate shared memory with recovery logic
  -   9p: VDFS: Add support claim tags in shared memory
  -   9p: VDFS: Integrate 9p IO path with shared memory
  -   9p: VDFS: Poller thread for polling completion rings
  -   9p: VDFS: Add 9p handlers for shared memory operatios
  -   9p: VDFS: Shared memory ring buffer management support
  -   9p: VDFS: Add shared memory mmap support in 9p


author: Alexey Makhalov <amakhalov@vmware.com> 4.19.182-2
changelog:
  -   .config: disable kernel accounting for memory cgroups
  -   .config: enable PERCPU_STATS
  -   Enable cgroup v1 stats


author: Alexey Makhalov <amakhalov@vmware.com> 4.19.229-3
changelog:
  -   .config: enable squashfs module, enable crypto user api rng.
  -   Reduce kernel .text size by ~40% by removing .entry.text alignment.


author: Alexey Makhalov <amakhalov@vmware.com> 4.19.245-2
changelog:
  -   .config: enable CROSS_MEMORY_ATTACH
  -   Add elfutils-libelf-devel required to build objtool
  -   vmxnet3: enable software timestamping


author: Srivatsa S. Bhat (VMware) <srivatsa@csail.mit.edu> 4.19.247-5
changelog:
  -   Update iavf driver to v4.4.2
  -   Update ice driver to v1.8.3
  -   .config: Enable CONFIG_NET_DEVLINK=y (ice v1.8.3 needs it).


author: Alexey Makhalov <amakhalov@vmware.com> 4.19.245-2
changelog:
  - .config: enable CROSS_MEMORY_ATTACH
  - Add elfutils-libelf-devel required to build objtool
  - vmxnet3: enable software timestamping


author: Bo Gan <ganb@vmware.com> 4.19.148-2
changelog:
  -   Revert d254087 (clockevents: Stop unused clockevent devices)
  -   Solve cyclictest regression introduced in 4.1


author: Srivatsa S. Bhat (VMware) <srivatsa@csail.mit.edu> 4.19.241-2
changelog:
  -   .config: Enable CONFIG_NFT_CHAIN_ROUTE_IPV4, CONFIG_NFT_CHAIN_NAT_IPV4,
  -            CONFIG_NFT_MASQ_IPV4 and CONFIG_NFT_REDIR_IPV4


author: Keerthana K <keerthanak@vmware.com> 4.19.247-11
changelog:
  - Fix linux headers, doc folder and linux-<uname -r>.cfg names
  - Drop rt_version from uname_r
  - Patch to skip reading localversion-rt


author: Shivani Agarwal <shivania2@vmware.com> 4.19.247-14
changelog:
  - .config: Enable MPLS and other routing related options, namely,
  - CGROUP_BPF, XFRM_INTERFACE, NETFILTER_XT_TARGET_NOTRACK
  - NET_ACT_BPF, MPLS_ROUTING, MPLS_IPTUNNEL, LWTUNNEL, LWTUNNEL_BPF, PPP


author: Srivatsa S. Bhat (VMware) <srivatsa@csail.mit.edu> 4.19.264-3
changelog:
  - Package Intel i40e, iavf and ice drivers as sub-packages, and provide
  - multiple versions of these drivers, namely, i40e-v2.16.11, i40e-v2.15.9,
  - iavf-v4.4.2, iavf-v4.2.7, ice-v1.8.3 and ice-v1.6.4


author: Bo Gan <ganb@vmware.com> 4.19.264-5
changelog:
  - Reduce latency spikes when process using vfio-pci terminates,
  - by avoiding vfio-pci toggling io/memory decoding.


author: Ankit Jain <ankitja@vmware.com> 4.19.277-3
changelog:
  - Use cpumask_any_distribute() instead of cpumask_any()
  - This will help in distributing the RT tasks on affined cpus


author: Srivatsa S. Bhat <srivatsa@csail.mit.edu> 6.0.1-1
changelog:
  -   Update to version 6.0.1 to get it to build with gcc 7.3
  -   Make python2_sitelib macro global to fix build error.


author: Srivatsa S. Bhat <srivatsa@csail.mit.edu> 6.0.1-1
changelog:
  - Update to version 6.0.1 to get it to build with gcc 7.3
  - Make python2_sitelib macro global to fix build error.


author: Him Kalyan Bordoloi <bordoloih@vmware.com> 8.0.13-1
changelog:
  -   Upgrade to version 8.0.13
  -   Workaround for broken DCMAKE_BUILD_TYPE=RELEASE(Mysql Bug#92945). Revert in next version


author: Nitesh Kumar <kunitesh@vmware.com> 2.16.01-1
changelog:
  - Upgrade to v2.16.01 to fix following CVE's
  - CVE-2018-20535, CVE-2020-24978, CVE-2018-1000886,
  - CVE-2019-7147, CVE-2018-19755, CVE-2021-45257


author: Guruswamy Basavaiah <bguruswamy@vmware.com> 5.8-11
changelog:
  - Fix CVE-2022-24805, CVE-2022-24806,
    CVE-2022-24807, CVE-2022-24808, CVE-2022-24809
    and CVE-2022-24810


author: Alexey Makhalov <amakhalov@vmware.com> 2.3.3-2
changelog:
  -   Fix compilation issue against glibc-2.28
  -   Use internal rpcgen, disable librpcsecgss dependency.


author: Siju Maliakkal <smaliakkal@vmware.com> 16.20.1-1
changelog:
  -   Upgrade to 16.20.1 to fix CVE-2023-30581, CVE-2023-30585
  -   CVE-2023-30588, CVE-2023-30589, CVE-2023-30590


author: Anish Swaminathan <anishs@vmware.com> 10.3.10-3
changelog:
  -   Update memory leak fix patch to include
  -   https://github.com/vmware/open-vm-tools/commit/26b9edbeb79d1c67b9ae73a0c97c48999c1fb503


author: Shreenidhi Shedi <sshedi@vmware.com> 11.1.0-5
changelog:
  -   Updated gosc-scripts version to 1.3
  -   Do 'cloud-init clean -ls' before calling init
  -   gosc scripts location changed to /usr/share/open-vm-tools/gosc-scripts/
  -   Use 'hashed_passwd' & 'lock_passwd' instead of 'passwd' & 'lock-passwd'


author: Keerthana K <keerthanak@vmware.com> 11.1.0-6
changelog:
  -   Use `passwd` command to set root password in gosc-scripts
  -   since `openssl passwd` crashes in fips mode.


author: Shreenidhi Shedi <sshedi@vmware.com> 11.1.0-7
changelog:
  -   Updated gosc to 1.3.1 & following are new changes in gosc
  -   Explicitly make fqdn empty to change hostname
  -   Fixed DHCP setting logic while creating network file
  -   Enclose permission within single quotes


author: Keerthana K <keerthanak@vmware.com> 11.1.0-6
changelog:
  - Use `passwd` command to set root password in gosc-scripts
  - since `openssl passwd` crashes in fips mode.


author: Shreenidhi Shedi <sshedi@vmware.com> 11.1.0-7
changelog:
  - Updated gosc to 1.3.1 & following are new changes in gosc
  - Explicitly make fqdn empty to change hostname
  - Fixed DHCP setting logic while creating network file
  - Enclose permission within single quotes


author: Ankit Jain <ankitja@vmware.com> 1.10.0.23-4
changelog:
  -   Divided version:majorversion+subversion to remove specific
  -   version java dependency from other packages


author: Ankit Jain <ankitja@vmware.com> 1.11.0.2-4
changelog:
  - Divided version:majorversion+subversion to remove specific
  - version java dependency from other packages


author: Shivani Agarwal <shivania2@vmware.com> 17.0.8-1
changelog:
  - Update to jdk-17.0.8-5 to fix CVE-2023-21937, CVE-2023-21938, CVE-2023-21930, CVE-2023-21968,
  - CVE-2023-21939, CVE-2022-21360, CVE-2023-21967, CVE-2023-21954


author: Tapas Kundu <tkundu@vmware.com> 1.8.0.212-1
changelog:
  -   Upgrade to version 1.8.0.212
  -   Add new clhsdb and hsdb binaries.
  -   Fix CVE-2019-2602, CVE-2019-2697, CVE-2019-2698.


author: Shreyas B. <shreyasb@vmware.com> 1.8.0.222-1
changelog:
  -   Upgrade to version 1.8.0.222 b10 (jdk8u222-b10)
  -   Fix diff for TrustStoreManager.java in file check-system-ca-certs.patch to check-system-ca-certs-x86.patch.


author: Ankit Jain <ankitja@vmware.com> 1.8.0.252-2
changelog:
  -   Cleaned removing of OpenJDK-1.8.0 directory in postun
  -   Installing jdk in new directory OpenJDK8 to fix upgrade issue


author: Ankit Jain <ankitja@vmware.com> 1.8.0.252-2
changelog:
  - Cleaned removing of OpenJDK-1.8.0 directory in postun
  - Installing jdk in new directory OpenJDK8 to fix upgrade issue


author: Ankit Jain <ankitja@vmware.comm> 7.8p1-2
changelog:
  -   Fix CVE-2018-20685.
  -   Use 
    CFLAGS="${CFLAGS:--O2 -g}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g}" ; export FFLAGS ; 
    ./configure --host=x86_64-unknown-linux-gnu --build=x86_64-unknown-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info


author: Keerthana K <keerthanak@vmware.com> 7.8p1-9
changelog:
  -   Fix ssh-keyscan not skip RSA keys if SHA1 (ssh-rsa signature algorithm)
  -   is not enabled in server.


author: Keerthana K <keerthanak@vmware.com> 7.8p1-9
changelog:
  - Fix ssh-keyscan not skip RSA keys if SHA1 (ssh-rsa signature algorithm)
  - is not enabled in server.


author: Srinidhi Rao <srinidhir@vmware.com> 1.0.2v-2
changelog:
  -   Improve the patch openssl-drbg-default-read-system-fips
  -   Modifies RAND_get_rand_method() to supply default FIPS RNG.


author: Xiaolin Li <xiaolinl@vmware.com> 5.22.1-5
changelog:
  -   CVE-2016-1238 patch from http://perl5.git.perl.org/perl.git/commit/cee96d52c39b1e7b36e1c62d38bcd8d86e9a41ab.


author: Dheeraj Shetty <dheerajs@vmware.com> 5.24.1-4
changelog:
  -   CVE-2017-12837 and CVE-2017-12883 patch from
  -   https://perl5.git.perl.org/perl.git/commitdiff/2be4edede4ae226e2eebd4eff28cedd2041f300f#patch1


author: Neal Gompa <ngompa13@gmail.com> 3.0-4
changelog:
  -       Fix issue files to not require arch mangling
  -       Add system-release Provides for generic distroverpkg identifying name


author: Neal Gompa <ngompa13@gmail.com> 3.0-4
changelog:
  - Fix issue files to not require arch mangling
  - Add system-release Provides for generic distroverpkg identifying name


author: Oliver Kurth <okurth@vmware.com> 3.0-8
changelog:
  -   conflicts with tdnf < 3.0.0, which doesn't support multiple keys
  -   make sure 4096 bit key is configured


author: Vamsi Krishna Brahmajosuyula <vbrahmajosyula@vmware.com> 1.0-16
changelog:
  - Change default tomcat upgrade target to apache-tomcat10
  - Rename apache-tomcat-9 to apache-tomcat9


author: Dweep Advani <dadvani@vmware.com> 1.0-18
changelog:
  - Only backup and restore modified config files of erased and reinstalled packages
  - Remove pycrypto from replaced packages map


author: Dweep Advani <dweep.advani@broadcom.com> 1.0-21
changelog:
  - Upgrade to installed package name only whenever possible
  - deprecate libnss-ato in 3.0 to 5.0 upgrade


author: Shreenidhi Shedi <shreenidhi.shedi@broadcom.com> 1.1-1
changelog:
  - Check for linux-rt presence during Ph3 to Ph4 upgrades
  - Show logs to console and store them in a file at the same time
  - Speed up package availability check in target repo


author: Shreenidhi Shedi <shreenidhi.shedi@broadcom.com> 1.1-5
changelog:
  - Updated PostgreSQL, pgaudit, and repmgr version mappings in PH4 and PH5 upgrade scripts
  - Fixed log message typos in photon-upgrade.sh ("systemd utils" -> "systemd units")


author: Priyesh Padmavilasom <ppadmavilasom@vmware.com> 0.0.5-2
changelog:
  -   Apply patch for local rpc connection separation
  -   patch for couple of minor coverity scan fixes.


author: Priyesh Padmavilasom <ppadmavilasom@vmware.com> 6.2.3-1
changelog:
  -   update to 6.2.3
  -   refactor build script
  -   include PSReadLine, PowerShellGet and PackageManagement modules


author: Shreyas B <shreyasb@vmware.com> 6.2.3-5
changelog:
  -   Adding make check for powershell & powershell-native.
  -   Fix Test failre in libpsl-native/test/test-locale.cpp.


author: Shreyas B <shreyasb@vmware.com> 6.2.3-5
changelog:
  - Adding make check for powershell & powershell-native.
  - Fix Test failre in libpsl-native/test/test-locale.cpp.


author: Tapas Kundu <tkundu@vmware.com> 3.3.15-1
changelog:
  -   Upgrade version to 3.3.15.
  -   Fix for CVE-2018-1122 CVE-2018-1123 CVE-2018-1124 CVE-2018-1125
  -   Fix for CVE-2018-1126


author: Tapas Kundu <tkundu@vmware.com> 3.3.15-1
changelog:
  - Upgrade version to 3.3.15.
  - Fix for CVE-2018-1122 CVE-2018-1123 CVE-2018-1124 CVE-2018-1125
  - Fix for CVE-2018-1126


author: Tapas Kundu <tkundu@vmware.com> 18.2.0-3
changelog:
  -   hypothesis 4.38.2 has requirement attrs>=19.2.0,
  -   but we have attrs 18.2.0 which is incompatible.


author: Tapas Kundu <tkundu@vmware.com> 5.4.7-3
changelog:
  -   Disabled make check as it requires certain drivers to be
  -   installed in /sys/class/power_supply


author: Piyush Gupta <gpiyush@vmware.com> 4.14.2-14
changelog:
  -   Added zstd-libs in Requires
  -   Remove python dependency from rpm
  -   Build without archive support


author: Harinadh D <hdommaraju@vmware.com> 3.11.18-1
changelog:
  - Upgrade to v3.11.18
  - Modified spec similar to below page
  - https://github.com/rabbitmq/rabbitmq-packaging/blob/main/RPMS/Fedora/rabbitmq-server.spec
  - Disabled DIST_AS_EZS to add schema files in rpm deliverables


author: Nitesh Kumar <kunitesh@vmware.com> 6.0.16-1
changelog:
  - Upgrade to v6.0.16 to fix following CVE's:
  - 2021-32672, 2021-41099, 2021-32762, 2021-32687
  - 2021-32675, 2021-32628, 2021-32627 and 2021-32626.


author: Tapas Kundu <tapas.kundu@broadcom.com> 3.2.7-3
changelog:
  - Fixed CVE-2024-12084,CVE-2024-12085,CVE-2024-12086,CVE-2024-12087,
  - CVE-2024-12088,CVE-2024-12747


author: Vinothkumar D <vinothkumard@vmware.com> 2018.3.3-1
changelog:
  - This is an initial version of salt with python3 support for Photon OS
    The source is from https://github.com/saltstack/salt/archive/v2018.3.3.tar.gz


author: Keerthana K <keerthanak@vmware.com> 2019.2.8-3
changelog:
  - Fix CVE-2020-28243 CVE-2020-28972 CVE-2020-35662 CVE-2021-3148
  - CVE-2021-3144 CVE-2021-25281 CVE-2021-25282 CVE-2021-25283
  - CVE-2021-25284 CVE-2021-3197


author: Alexey Makhalov <amakhalov@vmware.com> 8.15.2-14
changelog:
  -   Requires coreutils/net-tools or toybox, /bin/sed
  -   Remove shadow from requires and use explicit tools for post actions


author: Alexey Makhalov <amakhalov@vmware.com> 8.15.2-14
changelog:
  - Requires coreutils/net-tools or toybox, /bin/sed
  - Remove shadow from requires and use explicit tools for post actions


author: Alexey Makhalov <amakhalov@vmware.com> 4.2.1-15
changelog:
  -   Move pam.d config file to here for better tracking.
  -   Add pam_loginuid module as optional in a session.


author: Alexey Makhalov <amakhalov@vmware.com> 4.2.1-15
changelog:
  - Move pam.d config file to here for better tracking.
  - Add pam_loginuid module as optional in a session.


author: Siju Maliakkal <smaliakkal@vmware.com> 3.31.1-1
changelog:
  -   Upgrade to 3.31.1 for following CVEs
  -   CVE-2019-19959 CVE-2019-19926 CVE-2019-19925 CVE-2019-19923 CVE-2019-19244


author: Siju Maliakkal <smaliakkal@vmware.com> 3.32.1-1
changelog:
  -   Upgrade to 3.32.1 for following CVEs
  -   CVE-2020-13630 CVE-2020-13434 CVE-2020-13435 CVE-2020-13631 CVE-2020-13632


author: Siju Maliakkal <smaliakkal@vmware.com> 3.31.1-1
changelog:
  - Upgrade to 3.31.1 for following CVEs
  - CVE-2019-19959 CVE-2019-19926 CVE-2019-19925 CVE-2019-19923 CVE-2019-19244


author: Siju Maliakkal <smaliakkal@vmware.com> 3.32.1-1
changelog:
  - Upgrade to 3.32.1 for following CVEs
  - CVE-2020-13630 CVE-2020-13434 CVE-2020-13435 CVE-2020-13631 CVE-2020-13632


author: Susant Sahani <ssahani@vmware.com> 4.16-1
changelog:
  - Version update and fix CVE-2021-31806, CVE-2021-33620,
  - CVE-2021-28651, CVE-2021-28662, CVE-2021-31807, CVE-2021-28652,
  - CVE-2021-28116, CVE-2021-31808


author: Sharan Turlapati <sturlapati@vmware.com> 1.3.0-11
changelog:
  - Fix nr_periods calculation while boosting using SCHED_FIFO
  - Expose FORCE_FIFO as an option in the conf file


author: Alexey Makhalov <amakhalov@vmware.com> 1.8.18p1-2
changelog:
  -   Remove --with-pam-login to use /etc/pam.d/sudo for `sudo -i`
  -   Fix groupadd wheel warning during the %post action


author: Ajay Kaher <akaher@vmware.com> 0.26.4-1
changelog:
  -   Update to version 0.26.4 to fix kernel NULL pointer
  -   dereference crash in record_event_consumer.part


author: Ajay Kaher <akaher@vmware.com> 0.26.4-1
changelog:
  - Update to version 0.26.4 to fix kernel NULL pointer
  - dereference crash in record_event_consumer.part


author: Anish Swaminathan <anishs@vmware.com> 239-5
changelog:
  -    Revert the commit that causes GCE networkd timeout
  -    https://github.com/systemd/systemd/commit/44b598a1c9d11c23420a5ef45ff11bcb0ed195eb


author: Susant Sahani <ssahani@vmware.com> 239-17
changelog:
  -    Fix If system has invalid hostname, systemd-networkd dhcpv4 does not run
  -    and obscure error message is also sligtly update generatedRoutingPolicyRule


author: Susant Sahani <ssahani@vmware.com> 239-19
changelog:
  -    Don't treat syntax error as fatal, fix bz 2527776 and drop
  -    patch 16 as upstream dropped it.


author: Tapas Kundu <tkundu@vmware.com> 239-22
changelog:
  -    systemd: services shouldn't start if there is residual processes left over
  -    Services restart after systemd update
  -    Increase watchdog timeout


author: Susant Sahani <ssahani@vmware.com> 239-27
changelog:
  -    sd-bus: use "queue" message references for managing r/w message queus in connection objects
  -    Backport network - Route.Type


author: Susant Sahani <ssahani@vmware.com> 239-32
changelog:
  -    timedate: defer the property changed signal until job of
  -    starting/stopping NTP service is finished


author: Susant Sahani <ssahani@vmware.com> 239-27
changelog:
  - sd-bus: use "queue" message references for managing r/w message queus in connection objects
  - Backport network - Route.Type


author: Susant Sahani <ssahani@vmware.com> 239-32
changelog:
  - timedate: defer the property changed signal until job of
  - starting/stopping NTP service is finished


author: Alexey Makhalov <amakhalov@vmware.com> 8.6.6-2
changelog:
  -   Package more files (private headers, etc). Took install section from
      Fedora: http://pkgs.fedoraproject.org/cgit/rpms/tcl.git/tree/tcl.spec
  -   Move init.tcl and other *.tck files to the main package


author: Alexey Makhalov <amakhalov@vmware.com> 8.6.6-2
changelog:
  - Package more files (private headers, etc). Took install section from
    Fedora: http://pkgs.fedoraproject.org/cgit/rpms/tcl.git/tree/tcl.spec
  - Move init.tcl and other *.tck files to the main package


author: Dheeraj Shetty <dheerajs@vmware.com> 4.9.0-1
changelog:
  -       Adding latest version to handle following CVEs
  -       CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925,
  -       CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929,
  -       CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933,
  -       CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937,
  -       CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973,
  -       CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984,
  -       CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993,
  -       CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203,
  -       CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342,
  -       CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485,
  -       CVE-2017-5486


author: Prashant Singh Chauhan <psinghchauha@vmware.com> 4.9.3-1
changelog:
  -   Update to version 4.9.3 to fix multiple CVEs
  -   Removed kh-addrfail tests, to fix make check failure


author: Dheeraj Shetty <dheerajs@vmware.com> 4.9.0-1
changelog:
  -   Adding latest version to handle following CVEs
  -   CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925,
  -   CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929,
  -   CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933,
  -   CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937,
  -   CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973,
  -   CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984,
  -   CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993,
  -   CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203,
  -   CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342,
  -   CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485,
  -   CVE-2017-5486


author: Dheeraj Shetty <dheerajs@vmware.com> 4.9.0-1
changelog:
  - Adding latest version to handle following CVEs
  - CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925,
  - CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929,
  - CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933,
  - CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937,
  - CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973,
  - CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984,
  - CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993,
  - CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203,
  - CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342,
  - CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485,
  - CVE-2017-5486


author: Prashant Singh Chauhan <psinghchauha@vmware.com> 4.9.3-1
changelog:
  - Update to version 4.9.3 to fix multiple CVEs
  - Removed kh-addrfail tests, to fix make check failure


author: Keerthana K <keerthanak@vmware.com> 2.0.0-4
changelog:
  -   Add support for libsolv caching.
  -   Fix bug in tdnf updateinfo command.
  -   Fix bug on list available command.


author: Oliver Kurth <okurth@vmware.com> 3.1.4-1
changelog:
  - update to 3.1.4
  - fix configreader key reading logic
  - set repo expiry to two days
  - do not refresh metadata twice when installing with the --refresh option
  - do not fail if tdnf list <scope> returns empty (issue #94)


author: Oliver Kurth <okurth@vmware.co> 3.1.12-1
changelog:
  - update to 3.1.12
  - local package cache optimization (PR 392)
  - ulimit fix (PR 393/391)
  - reinstall fix (PR 388)


author: Oliver Kurth <okurth@vmware.com> 3.1.4-1
changelog:
  -   update to 3.1.4
  -   fix configreader key reading logic
  -   set repo expiry to two days
  -   do not refresh metadata twice when installing with the --refresh option
  -   do not fail if tdnf list <scope> returns empty (issue #94)


author: Prashant S Chauhan <psinghchauha@vmware.com> 1.28.1-1
changelog:
  - Upgrade telegraf to latest, Fixes some second level CVEs
  - Home directory should be owned by telegraf user


author: Shreyas B. <shryasb@vmware.com> 1.8.0-3
changelog:
  -  Fix for vulnerability CVE-2019-18934 that can cause shell code
  execution after receiving a specially crafted answer.


author: Shreyas B. <shryasb@vmware.com> 1.8.0-3
changelog:
  -  Fix for vulnerability CVE-2019-18934 that can cause shell code execution after receiving a specially crafted answer.


author: Shreyas B. <shryasb@vmware.com> 1.8.0-3
changelog:
  - Fix for vulnerability CVE-2019-18934 that can cause shell code execution after receiving a specially crafted answer.


author: Shreyas B. <shryasb@vmware.com> 1.8.0-3
changelog:
  -  Fix for vulnerability CVE-2019-18934 that can cause shell code \
  execution after receiving a specially crafted answer.


author: Sujay G <gsujay@vmware.com> 2.32.1-2
changelog:
  -   Replaced ./configure with 
    CFLAGS="${CFLAGS:--O2 -g}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g}" ; export FFLAGS ; 
    ./configure --host=x86_64-unknown-linux-gnu --build=x86_64-unknown-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info to fix builder issue


author: Sujay G <gsujay@vmware.com> 2.32.1-2
changelog:
  - Replaced ./configure with 
    CFLAGS="${CFLAGS:--O2 -g}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g}" ; export FFLAGS ; 
    ./configure --host=x86_64-unknown-linux-gnu --build=x86_64-unknown-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info to fix builder issue


author: Priyesh Padmavilasom <ppadmavilasom@vmware.com> 3.15.0-2
changelog:
  -   Apply patch for assertion failed "szB >= CACHE_ENTRY_SIZE"
  -   See: https://bugs.kde.org/show_bug.cgi?id=385386


author: Vamsi Krishna Brahmajosyula <vbrahmajosyula@vmware.com> 1.12.0-1
changelog:
  -   Upgrade to 1.12.0 version
  -   Add Requires on useradd, groupadd for pre and userdel, groupdel for postun


author: Vamsi Krishna Brahmajosyula <vbrahmajosyula@vmware.com> 1.12.0-1
changelog:
  - Upgrade to 1.12.0 version
  - Add Requires on useradd, groupadd for pre and userdel, groupdel for postun


author: Srish Srinivasan <ssrish@vmware.com> 8.2.5169-5
changelog:
  - fixed multiple P1 CVEs
  - CVE-2022-3520, CVE-2022-4292, CVE-2022-2946
  - CVE-2022-3591, CVE-2022-2819, CVE-2022-3324


author: Srish Srinivasan <ssrish@vmware.com> 8.2.5169-6
changelog:
  - fixed multiple P2 CVEs
  - CVE-2023-1264, CVE-2023-1175, CVE-2023-1170, CVE-2022-3352
  - CVE-2022-3256, CVE-2022-3235, CVE-2022-4141, CVE-2022-3099
  - CVE-2022-2874, CVE-2022-2343, CVE-2022-3134, CVE-2022-2849
  - CVE-2022-2285, CVE-2022-3234, CVE-2022-3297, CVE-2022-2286
  - CVE-2022-2345, CVE-2022-2581, CVE-2022-2522, CVE-2022-2889
  - CVE-2022-3296, CVE-2022-2598, CVE-2022-2982, CVE-2022-2845
  - CVE-2022-2571, CVE-2022-3016, CVE-2022-2289, CVE-2022-2344
  - CVE-2022-3037, CVE-2022-2287, CVE-2022-2257, CVE-2022-2284
  - CVE-2022-2264, CVE-2022-2980, CVE-2022-2817, CVE-2022-2580
  - CVE-2022-2288, CVE-2022-2816, CVE-2022-2862, CVE-2022-2923
  - CVE-2022-2304, CVE-2022-3491, CVE-2022-4293, CVE-2022-3705
  - CVE-2022-3153, CVE-2022-3278


author: Susant Sahani <ssahani@vmware.com> 3.6.0-1
changelog:
  - Update version and fix CVE-2021-39922, CVE-2021-39923, CVE-2021-3992
  - CVE-2021-39924, CVE-2021-39925, CVE-2021-39926, CVE-2021-39922,
  - CVE-2021-39921, CVE-2021-39920, CVE-2021-39928


author: Alexey Makhalov <amakhalov@vmware.com> 2.6-2
changelog:
  -   Improve .service file: wait wlanX to appear, run daemon in background.
  -   Added skeleton for wlan0 conf file.


author: Michelle Wang <michellew@vmware.com> 2.7-4
changelog:
  -   Add patch for CVE-2019-9494 and CVE-2019-11555
  -   Skip 001, 002 and 003 patch of CVE-2019-9494
  -   Since they are duplicate with those patches in CVE-2019-9495


