# changelog

author: Vladislav Mitin <vladislav.mitin@red-soft.ru> - 0:7.81.0-9
changelog:
  - fix CVE-2023-27534, CVE-2023-27533, CVE-2023-27538, CVE-2023-27537,
    CVE-2023-27536, CVE-2023-27535


author: Sergey Fadin <sergey.fadin@red-soft.ru> - 0:3.6.2-1
changelog:
  - Update upstream to 3.6.2
  - Added python3 package
  - Move python to python2 package
  - Used github source tarball


author: Vladislav Mitin <vladislav.mitin@red-soft.ru> - 0:2.4.1-2
changelog:
  - Rebuild for os73-updates
  - Update fix with CVE-2022-25235, CVE-2022-25236, CVE-2022-25313, CVE-2022-25315, CVE-2022-25314
  - Without patch in xmltok_impl.c


author: Vitaly Peshcherov <vitaly.peshcherov@red-soft.ru> - 0:2.44.1-1
changelog:
  - Update to 2.44.1 for os73-updates {177718}
  - Fix CVE-2024-32004 CVE-2024-32020 CVE-2024-32021 CVE-2024-32465


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 0:1.1.1.0-0.4
changelog:
  - Use frpintf(stderr,...) instead of printf(...) in gost_eng.c
  - Because it brake some applications like git...


author: Dmitry Safonov <dmitry.safonov@red-soft.ru> - 0:1.1.1.0-0.6
changelog:
  - Changing the "openssl-switch-passhash" script
  - Now the files in the directory "/etc/pam.d/" are changed 
  - 	so that the script works equally on both the standard
  - 	and the certified OS version


author: Vitaly Peshcherov <vitaly.peshcherov@red-soft.ru> - 0:10.3.3-1.1
changelog:
  - Update to 10.3.1 for os73-updates {161159}
  - Fix CVE-2023-4822, CVE-2023-4399 {151362}
  - Fix CVE-2023-6152 {164160}


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 0:8.40-69.el7.2
changelog:
  * Mon Sep 12 2022 Anton Fadeev <anton.fadeev@red-soft.ru> - 8.40-68
  - Move man pages to grubby-deprecated package


author: Alexandr Subbotin <alexander.subbotin@red-soft.ru> - 5.15.35-5
changelog:
  - CVE-2022-2588
  - CVE-2022-2586
  - CVE-2021-33655
  - CVE-2022-29582
  - CVE-2022-34918
  - CVE-2022-2078 (BDU:2022-04090)


author: Artem Chernyshev <artem.chernyshev@red-soft.ru> - 5.15.72-1
changelog:
  - Update upstream to 5.15.72
  - Old patches removed

  - BDU-W-2022-00044
  - BDU-W-2022-00045
  - BDU-W-2022-00046
  - BDU-W-2022-00047
  - BDU-W-2022-00048


author: Artem Chernyshev <artem.chernyshev@red-soft.ru> - 5.15.78-1
changelog:
  - Update upstream to 5.15.78

  - CVE-2022-3435
  - CVE-2022-3521
  - CVE-2022-3534
  - CVE-2022-3577
  - CVE-2022-3606
  - CVE-2022-41848
  - CVE-2022-44032
  - CVE-2022-44033
  - CVE-2022-44034
  - CVE-2022-3566


author: Artem Chernyshev <artem.chernyshev@red-soft.ru> - 5.15.154-1
changelog:
  - Updated to 5.15.154
  - Mitigated problem with freeze after suspend on AlderLake CPU systems
  - Solved issue with screen rotate on certain systems
  - REISERFS was deprecated and currently removed from build
  - Kernel stack offset randomization and variable initialization on
  allocation was turned on for security reasons
  - Few unused protocols was turned off.
  - config options explicitly changed:
    * CONFIG_NET_9P=n
    * CONFIG_ROSE=n
    * CONFIG_REISERFS_FS=n
    * CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y
    * CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
    * CONFIG_BMI160=m
    * CONFIG_BMI160_I2C=m
    * CONFIG_BMI160_SPI=m


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 15.0-2
changelog:
  - Ship errcodes.h header file in -devel pacakge (kea package requires errorcodes)
  - Move errcodes.h to usr/include/pgsql/server/utils/
  - to be consistent with upstream


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 2:2.11.3-91
changelog:
  - Fix multiple CVEs (CVE-2024-22563, CVE-2023-1668, CVE-2023-5366, CVE-2022-4337, CVE-2022-4338)
  - Bump epoch to avoid conflicts with underlying repositories


author: Richard W.M. Jones <rjones@redhat.com> - 4-1
changelog:
  - s390x is now a native architecture with OCaml 4.04 in Fedora >= 26.
  - Add riscv64 as a native arch using out of tree backend.


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 4.4.9.2-8
changelog:
  - Set error_policy to report Set error_policy to report if disk type is LUN and Disk use SCSI
    Reservation


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 4.4.10.8-9
changelog:
  - Replace stored proc getvmsbydiskid to show vms associated with selected iso
  - DiskVmsActionPanel to show detach buttons


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 4.4.10.8-32
changelog:
  - Extend CA cert lifetime up to 7300 days
  - Extend VDS cert lifetime up to 1827
  - Restart services after enroll certs
  - Allow enroll certificates in NonResponsive status
  - Renew all known certificates


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 4.4.10.8-40
changelog:
  - Add ability to import VMs directly from ESXi hypervisor without vCenter
  - Feature depends on vdsm >= 4.40.100.2-15.el7, nbdkit >= 1.36.3-3.el7 and virt-v2v >= 1.45.90-6.el7


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 4.4.10.8-41
changelog:
  - Backport 43ffb48 (OVA allocation policy)
  - Fix wrong allocation policy is assigned to VM imported by OVA


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 4.4.10.8-42
changelog:
  - Fix bug with unlimited user session
  - Fix logrotate templates
  - Fix event subscriber upgrade scripts


author: Dmitry Safonov <dmitry.safonov@red-soft.ru> - 0:12.17-1
changelog:
  - Update to 12.17
  - fix CVE-2022-41862, CVE-2023-2454, CVE-2023-2455
  - CVE-2023-39417, CVE-2023-5868, CVE-2023-5869, CVE-2023-5870


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 1:3.2.1-5.el7
changelog:
  - Bump epoch to avoid conflict with other repos
  - Fix CVE-2023-49083, CVE-2023-23931, CVE-2020-36242


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 1:0.6.0-3
changelog:
  - Bump epoch to avoid conflicts with oither repos
  - Fix CVE-2024-28102, CVE-2023-6681, CVE-2022-3102


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 3.0.3-1
changelog:
  - Rebuild for RED Virtualization
  - Fix (CVE-2023-23934, CVE-2023-25577, CVE-2023-46136, CVE-2024-34069)


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 4.4.9.2-5
changelog:
  * Thu Dec 16 2021 Anton Fadeev <anton.fadeev@red-soft.ru> - 4.4.9.2-4
  - Remove link to Console Client Resources


author: Dmitry Sudakov <dmitriy.sudakov@red-soft.ru> - 1.0.0-11
changelog:
  - Added a check that the directory is suitable for mounting and has access to it
  - engine filesystem query
  - Tests for infra backups and reports features
  - Add working directory (/var/lib/redvirt/redvirt-backend) for redvirt-backend


author: Dmitriy Sudakov <dmitriy.sudakov@red-soft.ru> - 1.0.0-4
changelog:
  - transparent nodes background changed to white
  - fixed jumping edges (in most cases)
  - up/down status icons changed to better quality
  - changed plugin priority in Additional subtab


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 3.14.5-58
changelog:
  - Rebuild with container-selinux-2.228.1
  - Allow domain mmap usr_t files
  - Add an alias for nvme_device_t


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 3.14.5-59
changelog:
  - Allow fprintd install a sleep delay inhibitor
  - Allow fprintd read and write hardware state informat


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 3.14.5-60
changelog:
  - Allow systemd gpt auto generator read udev pid files
  - Add missing declaration in rpm_named_filetrans
  - Add default file context specification for dnf log files
  - Allow systemd-io-bridge ioctl rpm_script_t
  - Change rpm_setattr_db_files to use a pattern
  - Support using systemd update helper in rpm scriptlet
  - Allow login_userdomain write to boltd named pipes


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 3.14.5-61
changelog:
  - Actualize Samba module
  - Allow systemd userdbd the sys_resource capability
  - Allow domain read usermodehelper state information
  - Dont audit winbind_rpcd_t write urandom
  - Dont audit winbind_t write urandom


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 3.14.5-63
changelog:
  - Allow sssd read symlinks in etc sssd
  - Creating interface sssd_run_sssd
  - Allow domtrans to sssd_t and role access to sssd
  - Allow mongodb read network sysctls
  - Allow mongodb read filesystem sysctls
  - Allow mongodb search nfs dir


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 3.14.5-64
changelog:
  - Fix typo in rsyncd.conf in rsync.if
  - Allow xdm connect to unconfined_service_t over a unix stream socket
  - Allow xdm_t read unconfined services state
  - Allow lldpad send to unconfined_t over a unix dgram socket
  - Allow lldpd use an snmp subagent over a tcp socket
  - Allow lldpd connect to snmpd with a unix domain streem
  - Allow lldpad connect to systemd userdbd over a unix dgram socket


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 3.14.5-65
changelog:
  - Allow chage domtrans to sssd
  - Allow lldpad create and use netlink_generic_socket
  - Allow nut-upsd system state information
  - Allow upsmon execute upsmon via a helper script


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 3.14.5-66
changelog:
  - Allow kdump load a new kernel
  - Label var lib kdump with kdump_var_lib_t
  - Allow kdump_t net_admin capability
  - Label var log kdump.log with kdump_log_t
  - Allow kexec manage generic tmp files
  - Allow kdump create and use its memfd objects
  - Allow kdumpctl_t to list all directories with a file
  - Allow haproxy list the sysfs directories-content
  - Support hitless reloads feature in haproxy
  - Allow haproxy get attributes of cgroup filesystems
  - Allow haproxy get attributes of filesystems with ext
  - Allow haproxy read hardware state information
  - Update policy for haproxyd
  - Dontaudit firewalld dac_override capability
  - Allow firewalld drop capabilities
  - Allow firewalld load kernel modules
  - Allow firewalld read the contents of the sysfs files


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 3.14.5-67
changelog:
  - Allow haproxy get attributes of ram filesystems
  - Dontaudit firewalld dac_raed_search capability
  - Allow webadm_t use generic ptys


