# changelog

author: Jan Friesse <jfriesse@redhat.com> - 1.0-251.3.bfb2f92.git
changelog:
  - Resolves: rhbz#2111669

  - Fix authfile directive handling in booth config file
    (fixes CVE-2022-2553)
  - Add enable-authfile option


author: Jan Friesse <jfriesse@redhat.com> - 1.1-1
changelog:
  - Resolves: RHEL-15268
  - Resolves: RHEL-7029

  - New upstream release (RHEL-15268)
  - Upstream releases should now be released regularly, so convert spec
    to use them instead of git snapshots (RHEL-15268)
  - Fix exit code on grant/revoke command error (RHEL-7029)


author: Jan Friesse <jfriesse@redhat.com> - 1.1-2
changelog:
  - Resolves: RHEL-32613

  - attr: Fix reading of server_reply
  - auth: Check result of gcrypt gcry_md_get_algo_dlen (fixes CVE-2024-3049)


author: Jan Friesse <jfriesse@redhat.com> - 3.0.2-2
changelog:
  - Resolves: rhbz#2180045

  - qdevice: Destroy non blocking client on failure (rhbz#2180045)
  - merge upstream commit 4331c7d5650a8bf44c16512419f1954d0ef96df5 (rhbz#2180045)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.21.3-12
changelog:
  - resolves: RHEL-101766 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.21.3-7)


author: Andrew Price <anprice@redhat.com> - 3.5.0-1
changelog:
  - New upstream version
    Resolves: rhbz#2170017
  - Update tests
  - Disable LTO to fix unit test breakage in el9
  - gfs2_edit: Fix savemeta test failures in 32-bit environments


author: Andrew Price <anprice@redhat.com> - 3.5.1-2
changelog:
  - gfs2_edit: truncate to filesystem size at end of restoremeta()
    Resolves: RHEL-26661
  - Update tests/testsuite


author: Florian Weimer <fweimer@redhat.com> - 2.30-6.1
changelog:
  - Update to glibc-2.30-6.fc31.
  - Drop ppc64 and s390x support.  ppc64 is gone completely, and Fedora
    no longer has a 31-bit userland on s390x.
  - Add scripts and instructions from downstream.
    Written by Carlos O'Donell.


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
changelog:
  Rebase to 1.28 for startup and performance fixes
     threads: add config check to match min value with pong timeouts
     rx: allow links to be active faster
     links: fix ping interval and pong timeout value checking
     crypto: Try crypt and decrypt on crypto_init
     tx: Remove expensive memsets
     log: Add a TRACE log level
    Resolves: #RHEL-11787


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Use systemd-sysusers to create user/group
  - Pacemaker Remote nodes can validate against later schema versions
  - Related: RHEL-17225
  - Resolves: RHEL-7665


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7665
  - Related: RHEL-13216
  - Resolves: RHEL-7702


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-13216
  - Resolves: RHEL-17225
  - Resolves: RHEL-23498


author: Chris Lumens <clumens@redhat.com> - 2.1.8-1
changelog:
  - Rebase on upstream 2.1.8-rc1 release
  - Fix a typo in the help output of pacemaker-fenced
  - Fix escaping characters in XML attribute output
  - Resolves: RHEL-25819
  - Resolves: RHEL-30822


author: Chris Lumens <clumens@redhat.com> - 2.1.8-2
changelog:
  - Rebase on upstream 2.1.8-rc4 release
  - Add ability to immediately shutdown system with PCMK_panic_action=
  - Fix a memory leak in the attribute daemon
  - Add ability to list options and parameters as parseable metadata
  - crm_verify now reports invalid fence level indexes
  - Fix an error in node ID handling in `crm_node -i`
  - Fix regression in attrd_updater output
  - Resolves: RHEL-39057
  - Resolves: RHEL-40117
  - Resolves: RHEL-23401
  - Resolves: RHEL-2996
  - Resolves: RHEL-47249
  - Resolves: RHEL-45935


author: Chris Lumens <clumens@redhat.com> - 2.1.9-1
changelog:
  - Rebase on upstream 2.1.9 final release
  - Use async communication to establish TLS connections
  - Fix regression in adding alerts to CIB
  - Fix a crash in command line tools when stderr is closed
  - Resolves: RHEL-61382
  - Resolves: RHEL-34276
  - Resolves: RHEL-55458
  - Resolves: RHEL-59043


author: Chris Lumens <clumens@redhat.com> - 2.1.9-1.1
changelog:
  - Use dbus signalling for systemd resource start/stop
  - Add an option to disable default remote node fencing behavior
  - Resolves: RHEL-92505
  - Resolves: RHEL-92513


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.7-2
changelog:
  - Fixed CVE-2024-25126, CVE-2024-26141, CVE-2024-26146 in bundled dependency rack
    Resolves: RHEL-26446, RHEL-26448, RHEL-26450


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.7-3
changelog:
  - Rebased to the latest sources (see CHANGELOG.md)
    Resolves: RHEL-2977, RHEL-16231, RHEL-21051, RHEL-25854, RHEL-27492, RHEL-28749, RHEL-34781, RHEL-36514
  - Updated pcs-web-ui to 0.1.19
    Resolves: RHEL-7726, RHEL-21895, RHEL-21896, RHEL-21897
  - Updated bundled rubygems: backports, childprocess, nio4r, puma, rack, rack-protection, sinatra
  - Bundled new rubygems: base64, rack-session, rackup, webrick


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.7-4
changelog:
  - Rebased to the latest sources (see CHANGELOG.md)
    Resolves: RHEL-7701, RHEL-7737, RHEL-17962, RHEL-34781
  - Fixed grammatical error in pcs-web-ui
    Resolves: RHEL-7726


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.8-1
changelog:
  - Updated pcs-web-ui to 0.1.20
  - Rebased to the latest sources (see CHANGELOG.md)
    Resolves: RHEL-34781


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.8-2
changelog:
  - Rebased to the latest sources (see CHANGELOG.md)
    Resolves: RHEL-16232, RHEL-46284, RHEL-46286, RHEL-46293, RHEL-55441, RHEL-61738, RHEL-61901
  - Updated pcs-web-ui to 0.1.21
  - Updated bundled rubygems: ffi, mustermann, puma, rack, rackup, tilt
  - Removed bundled rubygem webrick
  - New runtime dependency python3-tornado which has been bundled in previous versions


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.8-2
changelog:
  - Rebased pcs to the latest sources (see CHANGELOG.md)
    Resolves: RHEL-46303, RHEL-69040
  - Rebased pcs-web-ui to the latest sources
    Resolves: RHEL-69272, RHEL-69278, RHEL-69279, RHEL-69280, RHEL-69281, RHEL-69282


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.9-1
changelog:
  - Rebased pcs to the latest sources (see CHANGELOG.md)
    Resolves: RHEL-44420
  - Updated pcs-web-ui to 0.1.22


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.9-2
changelog:
  - Fixed restarting bundles
    Resolves: RHEL-79055
  - Fixed deletion of misconfigured bundles
    Resolves: RHEL-79160
  - Fixed filtering of resource clones in web console
    Resolves: RHEL-78653
  - Updated bundled rubygem rack
    Resolves: RHEL-79500


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.9-2.el9_6.1
changelog:
  - Fixed CVE-2025-46727 by updating bundled rubygem rack
    Resolves: RHEL-90153
  - Fixed a regression in resource/stonith delete, booth delete, status query resource and remote node removal commands which failed when target-role was improperly capitalized
    Resolves: RHEL-92551


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.9-2.el9_6.2
changelog:
  - Fixed CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919 by updating bundled rubygem rack
    Resolves: RHEL-120943, RHEL-121036, RHEL-123631, RHEL-123644, RHEL-124942


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-61
changelog:
  - LVM-activate: fail when both "system_id_source" and "volume_list"
    are set in lvm.conf to avoid false positive activation of the VG

    Resolves: RHEL-22715


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-65
changelog:
  - Filesystem: dont sleep during stop-action when there are no
    processes to kill, and only use force argument for network
    filesystems after sending kill_signals
  - Filesystem: try umount first during stop-action, and avoid potential
    "Argument list too long" for force_unmount=safe
  - AWS agents: use awscli2

    Resolves: RHEL-58038
    Resolves: RHEL-59576
    Resolves: RHEL-46233


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-66
changelog:
  - nfsserver: also stop rpc-statd for nfsv4_only to avoid stop failing
    in some cases
  - podman: force-remove containers in stopping state if necessary

    Resolves: RHEL-59172
    Resolves: RHEL-58008


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-67
changelog:
  - ocf-shellfuncs: only create/update and reload systemd drop-in if
    needed
  - IPaddr2: improve fail logic and check ip_status after adding IP
  - azure-events-az: update API versions, and add retry functionality
    for metadata requests
  - azure-events*: use node name from cluster instead of hostname to
    avoid failing if they're not the same

    Resolves: RHEL-61888
    Resolves: RHEL-62200
    Resolves: RHEL-40589
    Resolves: RHEL-58632


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-69
changelog:
  - AWS agents: reuse IMDS token until it expires
  - awsvip: add interface parameter

    Resolves: RHEL-66292
    Resolves: RHEL-68739


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-71.7
changelog:
  - podman-etcd: add oom parameter to be able to tune the Out-Of-Memory (OOM)
    score for etcd containers

    Resolves: RHEL-113108


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-71.8
changelog:
  - podman-etcd: wrap ipv6 address in brackets
  - podman-etcd: preserve containers for debugging
  - podman-etcd: add cluster-wide force_new_cluster attribute check

    Resolves: RHEL-113813, RHEL-113810, RHEL-116208


author: Jan Friesse <jfriesse@redhat.com> - 20210520-1
changelog:
  - Resolves: rhbz#1962501

  - New upstream release
  - Support for cgroup v2
  - Document cgroup v2 problems


author: Jan Friesse <jfriesse@redhat.com> - 20210719-1
changelog:
  - Related: rhbz#1962501

  - New upstream release
  - Add mode option for moving to root cgroup functionality


