# changelog

author: valeriak <v.kalinkina@rosa.ru> c2892e8
changelog:
  - Add patches:Patch5: 0001-pk-transaction-Only-set-polkit-interactive-flag-if-t.patch
   Patch6: 0002-pk-engine-Only-set-polkit-interactive-flag-if-method.patch
   
   https://github.com/PackageKit/PackageKit/pull/706
   https://bugzilla.redhat.com/show_bug.cgi?id=2256624#c8
   Patch10: Check-string-length-correctly-to-prevent-memory-over-consumption.patch
   
   https://bugzilla.redhat.com/show_bug.cgi?id=2256624
   https://github.com/PackageKit/PackageKit/commit/64278c9127e3333342b56ead99556161f7e86f79
   CVE-2024-0217
   Patch11: Check-that-Finished-signal-is-emitted-at-most-once.patch


author: valeriak <v.kalinkina@rosa.ru> 829518d
changelog:
  - Add patches:CVE-2023-1981
   Patch0006: 0001-Emit-error-if-requested-service-is-not-found.patch
   CVE-2023-38470
   Patch0007: 0001-Ensure-each-label-is-at-least-one-byte-long.patch
   CVE-2023-38472
   Patch0008: 0001-core-make-sure-there-is-rdata-to-process-before-pars.patch
   CVE-2023-38472
   Patch0009: 0001-core-copy-resource-records-with-zero-length-rdata-pr.patch
   CVE-2023-38473
   Patch0010: 0001-common-derive-alternative-host-name-from-its-unescap.patch
   CVE-2023-38471
   Patch0011: 0001-core-extract-host-name-using-avahi_unescape_label.patch
   Patch0012: 0001-core-return-errors-from-avahi_server_set_host_name-p.patch
   CVE-2023-38469
   Patch0013: 0001-core-reject-overly-long-TXT-resource-records.patch
   CVE-2021-3468
   Patch0014: 0001-Avoid-infinite-loop-in-avahi-daemon-by-handling-HUP-.patch


author: valeriak <v.kalinkina@rosalinux.ru> 4954085
changelog:
  - Update to 9.11.36; Add patches:https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/3067
   Patch184: bind-9.15-resolver-ntasks.patch
   
   Patch185: bind-9.11-CVE-2021-25220.patch
   Patch186: bind-9.11-CVE-2021-25220-test.patch
   Patch188: bind-9.16-CVE-2022-38177.patch
   Patch189: bind-9.16-CVE-2022-38178.patch
   
   https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/6695
   Patch190: bind-9.11-rh2101712.patch
   
   Patch191: bind-9.11-CVE-2022-2795.patch
   
   https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/7376
   Patch192: bind-9.11-rh2133889.patch
   
   https://gitlab.isc.org/isc-projects/bind9/commit/0b12907a1cad9f0f2080965b6fc50e797f908aa5
   Patch193: bind-9.11-CVE-2023-2828.patch


author: valeriak <v.kalinkina@rosa.ru> 3d1aae6
changelog:
  - Add patches from 193 to 210;Fixes:
   CVE-2022-3094
   CVE-2023-3341
   CVE-2023-4408
   CVE-2023-50387
   CVE-2023-50868
   CVE-2024-1737
   CVE-2024-1975
   CVE-2024-11187


author: valeriak <v.kalinkina@rosa.ru> fa8c16c
changelog:
  - Add patches:Patch93: binutils-plugin-as-needed-correct.patch
   Patch94: binutils-s390x-arch14.patch
   Patch96: binutils-undefined-unversioned-symbols.patch
   Patch97: binutils-plugin-error.patch
   Patch98: binutils-verdef.patch
   Patch99: binutils-aarch64-rng.patch
   Patch100: binutils-s390-z16.patch
   Patch101: binutils-coffgen-buffer-overrun.patch
   Patch102: binutils-plugin-search.patch
   Patch103: binutils-memory-access-when-parsing-an-elf-file.patch
   Patch104: binutils-DW_FORM_strx.patch
   
   Patch105: binutils-CVE-2018-12699-part1-PR22955.patch
   Patch106: binutils-CVE-2018-12699-part2-PR87861.patch
   Patch107: binutils-CVE-2018-12699-part3-PR22957.patch
   Patch108: binutils-CVE-2018-12699-part4-PR16615.patch
   Patch109: binutils-CVE-2018-12699-part5-PR28694.patch
   Patch110: binutils-CVE-2018-12699-part6-PR28862.patch
   Patch111: binutils-CVE-2018-12699-part7-PR28718.patch


author: valeriak <v.kalinkina@rosa.ru> 267a248
changelog:
  - Add patches:CVE-2020-22217
   Patch4: 0005-avoid-read-heap-buffer-overflow-332.patch
   
   CVE-2023-31130
   Patch5: 0006-Merge-pull-request-from-GHSA-x6mf-cxr9-8q6v.patch
   
   CVE-2024-25629
   Patch6: 0007-Merge-pull-request-from-GHSA-mg26-v6qh-x48q.patch


author: valeriak <v.kalinkina@rosalinux.ru> 1da9edb
changelog:
  - Add patches:1941437 - cupsd doesn't log job ids when logging into journal
   Patch59: cups-logs.patch
   
   1782216 - Print queue is paused after ipp backend ends with CUPS_BACKEND_STOP
   Patch60: cups-validate-1st.patch
   
   1938384 - CUPS doesn't start if sssd starts after cupsd
   Patch61: cups-sssd.patch
   
   1955964 - PreserveJobHistory doesn't work with seconds
   Patch62: cups-fix-preservejob-times.patch
   
   1927452 - CVE-2020-10001 cups: access to uninitialized buffer in ipp.c [rhel-8]
   Patch63: cups-cve202010001.patch
   
   2006987 - Unauthenticated users can't move print jobs in Web UI
   Patch64: 0001-cgi-bin-ipp-var.c-Use-guest-user-for-Move-Job-when-n.patch
   
   2017919 - Setting 'MaxJobTime 0' does not set a job time to unlimited
   Patch65: 0001-Fix-handling-of-MaxJobTime-0-Issue-5438.patch
   
   1726383 - "lpadmin -p <queue> -o cupsSNMPSupplies:false" doesn't work
   Patch66: 0001-Fix-lpadmin-with-cupsIPPSupplies-and-cupsSNMPSupplie.patch
   
   1982891 - Printing of banner before PCL file only prints banner
   Patch67: 0001-scheduler-job.c-use-gziptoany-for-raw-files-not-just.patch
   
   2006591 - Trying to restart and hold a job doesn't work
   Patch68: cups-restart-job-hold-until.patch
   
   1811716 - lpr to non-existent printer reports incorrect error
   Patch69: 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
   
   2015182 - RFE: Implement IdleExitTimeout configuration during build
   Patch70: 0001-Add-with-idle-exit-timeout-configure-option.patch
   
   2013865 - RFE: Implement TimeoutStartSec configuration during build
   Patch71: 0001-Add-with-systemd-timeoutstartsec-configure-option.patch
   
   2032965 - [RFE] RHEL8 - CUPS Web UI supports adding IPP Everywhere
   Patch72: cups-ippeve-web-support.patch
   
   2071417 - 30-second delays printing to Windows 2016 server via HTTPS
   Patch73: 0001-cups-tls-gnutls.c-Use-always-GNUTLS_SHUT_WR.patch
   
   2074684 - lp to a remote server takes a long time
   Patch74: 0001-Use-cupsGetNamedDest-for-legacy-printing-APIs-Issue-.patch
   
   2074736 - CUPS is too chatty about "Removing document files." in debug mode
   Patch75: cups-cupsd-too-chatty.patch
   
   CVE-2022-26691 cups: authorization bypass when using "local" authorization
   Patch76: 0001-scheduler-cert.c-Fix-string-comparison-fixes-CVE-202.patch
   
   2084257 - ErrorPolicy documentation is incorrect
   Patch77: cups-retry-current-job-man.patch
   
   1910415 - manpage update to acknowledge order dependency of -h option
   Patch78: 0001-Update-man-pages-for-h-option-Issue-357.patch
   
   2130391 - Kerberized IPP Printing Fails
   Patch79: cups-kerberos.patch


author: valeriak <v.kalinkina@rosalinux.ru> ea76501
changelog:
  - Add patches:2217178 - Delays printing to lpd when reserved ports are exhausted
   Patch80: 0001-Fix-delays-printing-to-lpd-when-reserved-ports-are-e.patch
   2217283 - The command "cancel -x <job>" does not remove job files
   Patch81: 0001-Use-purge-job-instead-of-purge-jobs-when-canceling-a.patch
   2217955 - Enlarge backlog queue for listen() in cupsd
   Patch82: 0001-cups-http-addr.c-Set-listen-backlog-size-to-INT_MAX-.patch
   CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
   Patch83: 0001-Log-result-of-httpGetHostname-BEFORE-closing-the-con.patch
   CVE-2023-32324 cups: heap buffer overflow may lead to DoS
   Patch84: 0001-cups-strlcpy-handle-zero-size.patch
   CVE-2023-32360 cups:  Information leak through Cups-Get-Document operation
   Patch85: 0001-Require-authentication-for-CUPS-Get-Document.patch
   RHEL-14933 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
   Patch86: cups-preservejob-leak.patch
   RHEL-15309 cupsd fails to open cups-files.conf and the resulting error message is lost
   Patch87: 0001-scheduler-conf.c-Print-to-stderr-if-we-don-t-open-cu.patch
   RHEL-10702 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents
   Patch88: 0001-httpAddrConnect2-Check-for-error-if-POLLHUP-is-in-va.patch
   RHEL-40386 CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777
   https://github.com/OpenPrinting/cups/commit/a436956
   Patch89: 0001-Fix-domain-socket-handling.patch
   RHEL-40386 CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777
   https://github.com/OpenPrinting/cups/pull/31
   Patch90: cups-require-cups-socket.patch
   RHEL-40386 CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777
   https://github.com/OpenPrinting/cups/commit/3448c52
   Patch91: cups-socket-remove-on-stop.patch
   RHEL-40386 CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777
   https://github.com/OpenPrinting/cups/commit/7adb508
   https://github.com/OpenPrinting/cups/commit/824f49f
   https://github.com/OpenPrinting/cups/commit/56b9728
   https://github.com/OpenPrinting/cups/commit/74f437b
   https://github.com/OpenPrinting/cups/commit/fb0c914
   Patch92: cups-check-for-listeners.patch
   
   CVE-2023-32360 migration script
   Source9: upgrade_get_document.py.in


author: valeriak <v.kalinkina@rosa.ru> 8eba153
changelog:
  - Add patches:RHEL-60338 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file
   Patch93: 0001-mirror-ipp-everywhere-printer-changes-from-master.patch
   Patch94: 0001-refactor-make-and-model-code.patch
   Patch95: 0001-ppdize-preset-and-template-names.patch
   Patch96: 0001-Fix-make-and-model-whitespace-trimming-Issue-1096.patch


author: valeriak <v.kalinkina@rosa.ru> 186ee53
changelog:
  - Add patches:fix GSS delegation too eager connection re-use (CVE-2023-27536)
   Patch49:  0049-curl-7.61.1-CVE-2023-27536.patch
   
   fix host name wildcard checking
   Fix CVE-2023-28321
   Patch53:  0053-curl-7.61.1-CVE-2023-28321.patch
   fix host name wildcard checking (CVE-2023-28321)
   Patch51:  0051-curl-7.61.1-CVE-2023-28321.patch
   
   rebuild certs with 2048-bit RSA keys
   Patch52:  0052-curl-7.61.1-certs.patch
   
   when keyboard-interactive auth fails, try password
   Patch53:  0053-curl-7.61.1-password-when-keyboard-interactive-fails.patch
   
   cap SFTP packet size sent
   Patch54:  0054-curl-7.61.1-64K-sftp.patch
   
   unify the upload/method handling (CVE-2023-28322)
   Patch55:  0055-curl-7.61.1-CVE-2023-28322.patch
   
   fix cookie injection with none file (CVE-2023-38546)
   Patch56:  0056-curl-7.61.1-CVE-2023-38546.patch
   
   consolidate nghttp2_session_mem_recv() call paths
   Patch57:  0057-curl-7.61.1-consolidate-nghttp2-session-mem-recv.patch
   
   when marked for closure and wanted to close == OK
   Patch58:  0058-curl-7.61.1-error-in-the-HTTP2-framing-layer.patch
   
   lowercase the domain names before PSL checks (CVE-2023-46218)
   Patch59:  0059-curl-7.61.1-CVE-2023-46218.patch
   
   lowercase headernames
   Patch60:  0060-curl-7.61.1-lowercase-headernames.patch


author: valeriak <v.kalinkina@rosalinux.ru> fa1a062
changelog:
  - Add patches:0039-libmultipath-factor-out-code-to-get-vpd-page-data.patch
   0040-libmultipath-limit-reading-0xc9-vpd-page.patch
   0041-libmultipath-add-device-to-hwtable.c.patch
   0042-libmultipath-move-fast_io_fail-defines-to-structs.h.patch
   0043-libmultipath-add-eh_deadline-multipath.conf-paramete.patch
   0044-libmultipath-don-t-dlclose-tur-checker-DSO.patch
   0045-libmultipath-warn-about-missing-braces-at-end-of-mul.patch
   0046-libmultipath-ignore-multipaths-sections-without-wwid.patch
   0047-tests-fix-missing-priority-blacklist-test.patch
   0048-mpathpersist-Fix-Register-and-Ignore-with-0x00-SARK.patch
   0049-mpathpersist-update-prkeys-file-on-changing-registra.patch
   0050-multipathd-Fix-multipathd-stopping-on-shutdown.patch
   0051-multipath.conf.5-Improve-checker_timeout-description.patch
   0052-libmultipath-check-for-null-wwid-before-strcmp.patch
   0053-libmultipath-make-find_err_path_by_dev-static.patch
   0054-multipathd-avoid-io_err_stat-crash-during-shutdown.patch
   0055-multipathd-avoid-io_err_stat-ABBA-deadlock.patch
   0056-multipathd-use-get_monotonic_time-in-io_err_stat-cod.patch
   0057-multipathd-combine-free_io_err_stat_path-and-destroy.patch
   0058-multipathd-cleanup-logging-for-marginal-paths.patch
   0059-libmpathpersist-fix-thread-safety-of-default-functio.patch
   0060-kpartx-free-loop-device-after-listing-partitions.patch
   0061-RH-fix-find_multipaths-in-mpathconf.patch
   0062-libmultipath-select_action-don-t-drop-map-if-alias-c.patch
   0063-libmultipath-check-if-user_friendly_name-is-in-use.patch
   0064-libmultipath-check-udev_device_get_-return-value-to-.patch
   0065-libmultipath-cleanup-code-to-strip-wwid-trailing-spa.patch
   0066-multipathd-add-recheck_wwid-option-to-verify-the-pat.patch
   0067-libmultipath-avoid-infinite-loop-with-bad-vpd-page-8.patch
   0068-libmultipath-fix-priorities-in-parse_vpd_pg83.patch
   0069-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
   0070-multipathd-improve-getting-parent-udevice-in-rescan_.patch
   0071-multipathd-don-t-trigger-uevent-for-partitions-on-ww.patch
   0072-RH-mpathconf-correctly-handle-spaces-after-option-na.patch
   0073-multipath.conf-fix-typo-in-checker_timeout-descripti.patch
   0074-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
   0075-multipath-print-warning-if-multipathd-is-not-running.patch
   0076-multipathd-don-t-access-path-if-it-was-deleted.patch
   0077-multipathd.socket-add-missing-conditions-from-servic.patch
   0078-libmulitpath-add-section-name-to-invalid-keyword-out.patch
   0079-libmultipath-use-typedef-for-keyword-handler-and-pri.patch
   0080-libmultipath-print-the-correct-file-when-parsing-fai.patch
   0081-libmultipath-pass-file-and-line-number-to-keyword-ha.patch
   0082-libmultipath-make-set_int-take-a-range-for-valid-val.patch
   0083-libmultipath-improve-checks-for-set_str.patch
   0084-libmultipath-split-set_int-to-enable-reuse.patch
   0085-libmultipath-cleanup-invalid-config-handling.patch
   0086-libmultipath-don-t-return-error-on-invalid-values.patch
   0087-multipathd-avoid-unnecessary-path-read-only-reloads.patch
   0088-libmultipath-make-helper-function-to-trigger-path-ue.patch
   0089-multipathd-trigger-udev-change-on-path-addition.patch
   0090-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
   0091-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
   
   CVE-2022-41974
   0092-multipathd-ignore-duplicated-multipathd-command-keys.patch


author: valeriak <v.kalinkina@rosalinux.ru> 83bdedc
changelog:
  - Add patches:https://bugzilla.redhat.com/show_bug.cgi?id=2016248
   Patch52:  dhcp-omshell-hmac-sha512-support.patch
   
   https://bugzilla.redhat.com/show_bug.cgi?id=2132248
   Patch53:  dhcp-CVE-2022-2928.patch
   
   https://bugzilla.redhat.com/show_bug.cgi?id=2132245
   Patch54:  dhcp-CVE-2022-2929.patch
   
   https://bugzilla.redhat.com/show_bug.cgi?id=2142024
   Patch55:  dhcp-dhcp6-vendor-opts.patch


author: valeriak <v.kalinkina@rosalinux.ru> af97561
changelog:
  - Add patches:Patch32:        dnsmasq-2.79-alternative-lease.patch
   Patch33:        dnsmasq-2.86-dhcpv6-client-arch.patch
   
   Downstream only patch; https://bugzilla.redhat.com/show_bug.cgi?id=1919894
   Similar functionality is implemented since 2.86 in upstream, but introduced
   several regressions. This implements just limited change in different way.
   Patch34:        dnsmasq-2.79-server-domain-rh1919894.patch
   
   http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=03345ecefeb0d82e3c3a4c28f27c3554f0611b39
   Patch35:        dnsmasq-2.87-CVE-2022-0934.patch
   
   http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=dded78b2338147daf69064d6d48c16b12744e441
   Patch36:        dnsmasq-2.81-option6-ntp-server-suboption.patch
   
   https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;h=3052ce208acf602f0163166dcefb7330d537cedb
   Patch37:        dnsmasq-2.81-linux-SIOCGSTAMP.patch
   
   Downstream only patch; fixes Patch34 change
   Patch38:        dnsmasq-2.79-server-domain-fixup.patch
   
   https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;h=f8c77edbdffb8ada7753ea9fa104f0f6da70cfe3
   Patch39:        dnsmasq-2.81-dhcpv6-relay-link-address.patch


author: valeriak <v.kalinkina@rosa.ru> 4b769ee
changelog:
  - Add patches:CVE-2023-28450
   Patch40: dnsmasq-2.89-edns0-size.patch
   Patch41: dnsmasq-2.85-serv_domain-rh2186481.patch
   Patch42: dnsmasq-2.85-serv_domain-rh2186481-2.patch
   Patch43: dnsmasq-2.87-log-root-writeable.patch
   Patch44: dnsmasq-2.85-domain-blocklist-speedup.patch
   Patch45: dnsmasq-2.80-synth-domain-RHEL-15216.patch
   Patch46: dnsmasq-2.90-CVE-2023-50387-CVE-2023-50868.patch


author: valeriak <v.kalinkina@rosa.ru> 562f7e2
changelog:
  - Add patches:CVE-2022-45939
   Patch3: emacs-ctags-local-command-execute-vulnerability.patch
   Patch4: emacs-mh-rmail-nonempty-dir.patch
   CVE-2022-48337
   Patch5: emacs-etags-local-command-injection-vulnerability.patch
   CVE-2022-48339
   Patch6: emacs-htmlfontify-command-injection-vulnerability.patch
   Patch7: emacs-ob-latex-command-injection-vulnerability.patch
   CVE-2024-30205
   Patch8: emacs-consider-org-file-contents-unsafe.patch
   CVE-2024-39331
   Patch9: emacs-org-link-expand-abbrev-unsafe-elisp.patch
   CVE-2024-30203
   Patch10: emacs-mark-contents-untrusted.patch
   CVE-2025-1244
   Patch11: emacs-man-el-shell-injection-vulnerability.patch


author: valeriak <v.kalinkina@rosa.ru> 0d68db1
changelog:
  - Add patches:CVE-2022-23852
   Patch3: expat-2.2.5-Detect-and-prevent-integer-overflow-in-XML_GetBuffer.patch
   CVE-2021-45960
   Patch4: expat-2.2.5-Detect-and-prevent-troublesome-left-shifts.patch
   CVE-2021-46143
   Patch5: expat-2.2.5-Prevent-integer-overflow-on-m_groupSize-in-function.patch
   CVE-2022-22822, CVE-2022-22823, CVE-2022-22824, CVE-2022-22825, CVE-2022-22826, CVE-2022-22827
   Patch6: expat-2.2.5-Prevent-more-integer-overflows.patch
   CVE-2022-25236
   Patch7: expat-2.2.5-Protect-against-malicious-namespace-declarations.patch
   CVE-2022-25235
   Patch8: expat-2.2.5-Add-missing-validation-of-encoding.patch
   CVE-2022-25315
   Patch9: expat-2.2.5-Prevent-integer-overflow-in-storeRawNames.patch
   CVE-2022-25314
   Patch10: expat-2.2.5-Prevent-integer-overflow-in-copyString.patch
   CVE-2022-25313
   Patch11: expat-2.2.5-Prevent-stack-exhaustion-in-build_model.patch
   CVE-2022-40674
   Patch12: expat-2.2.5-Ensure-raw-tagnames-are-safe-exiting-internalEntityParser.patch
   Patch13: expat-2.2.5-CVE-2022-43680.patch
   Patch14: expat-2.2.5-CVE-2023-52425.patch
   Patch15: expat-2.2.5-CVE-2024-45490.patch
   Patch16: expat-2.2.5-CVE-2024-45491.patch
   Patch17: expat-2.2.5-CVE-2024-45492.patch
   Patch18: expat-2.2.5-CVE-2024-50602.patch
   
   From Oracle (CVE-2022-23990)
   Patch1000: 1000-lib-prevent-integer-overflow-in-doProlog.patch


author: valeriak <v.kalinkina@rosalinux.ru> 371e101
changelog:
  - Add patches:Patch15:       gnutls-3.6.16-pkcs7-verify.patch (CVE-2022-2509)
   Patch16:       gnutls-3.6.16-cpuid.patch
   Patch17:       gnutls-3.7.8-rsa-kx-timing.patch
   Patch99:       CVE-2021-4209.patch


author: valeriak <v.kalinkina@rosa.ru> 95163ba
changelog:
  - Add patches:Patch18: gnutls-3.6.16-rehandshake-tickets.patch
   
   CVE-2023-5981
   Patch19: gnutls-3.6.16-rsa-psk-timing.patch
   
   CVE-2024-0553
   Patch20: gnutls-3.6.16-rsa-psk-timing-followup.patch


author: valeriak <v.kalinkina@rosa.ru> db98a2e
changelog:
  - Add patches:Patch7: 0001-entry-Only-offer-Emoji-if-requested.patch
   Patch8: 0001-fix-nonoverlay-scrollbars.patch
   Patch9: 0001-reftests-Enforce-default-settings.patch
   Patch10: gtk-3.22.20-fix-treeview-refcount.patch
   Patch11: gtk-3.22.20-fix-treeview-refcount2.patch
   Patch12: gtk-3.22.20-quiet-exit.patch
   Patch13: gtk-3.22.20-avoid-cellarea-crash.patch
   Patch14: 0001-Remove-the-without-parent-warning.patch
   Patch15: gtk3-icon-browser-no-icon.patch
   Fix loading modules from cwd (CVE-2024-6655)
   Patch16: 0001-Stop-looking-for-modules-in-cwd.patch


author: valeriak <v.kalinkina@rosa.ru> 6186dac
changelog:
  - Add patches:Patch91: httpd-2.4.37-add-SNI-support.patch
   Patch92: httpd-2.4.37-mod_status-duplicate-key.patch
   Patch93: httpd-2.4.37-r1885607.patch
   Patch94: httpd-2.4.57-r1884505+.patch
   Patch95: httpd-2.4.37-r1919325.patch
   Patch96: httpd-2.4.37-r1922080.patch
   Patch239: httpd-2.4.37-CVE-2023-27522.patch
   Patch240: httpd-2.4.37-CVE-2023-31122.patch
   Patch241: httpd-2.4.37-CVE-2023-38709.patch
   CVE-2024-38474 and CVE-2024-38475 fixed in one patch
   Patch242: httpd-2.4.37-CVE-2024-38474+.patch
   Patch243: httpd-2.4.37-CVE-2024-38473.patch
   Patch244: httpd-2.4.37-CVE-2024-38477.patch
   Patch245: httpd-2.4.37-CVE-2024-39573.patch
   Patch246: httpd-2.4.37-CVE-2024-38476.patch
   Patch247: httpd-2.4.37-CVE-2024-39884+.patch


author: valeriak <v.kalinkina@rosa.ru> 77a7e19
changelog:
  - Add patches:CVE-2020-14363
   Patch5: 0001-Fix-an-integer-overflow-in-init_om.patch
   Patch6: CVE-2021-31535.patch
   CVE-2023-3138
   Patch7: 0001-InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
   CVE-2023-43785
   Patch8: 0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
   CVE-2023-43786
   Patch9: 0001-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
   Patch10: 0002-XPutImage-clip-images-to-maximum-height-width-allowe.patch
   Patch11: 0003-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
   CVE-2023-43787
   Patch12: 0001-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
   Patch13: 0001-Avoid-recursing-through-_XError-due-to-sequence-adju.patch
   Patch14: 0001-imDefLkup-verify-that-a-pointer-isn-t-NULL-before-us.patch
   Patch100: CVE-2020-14344.patch


author: valeriak <v.kalinkina@rosalinux.ru> 4e90022
changelog:
  - Add patches:Patch7: 0007-libndp-ndptool-use-poll-instead-of-select.patch
   
   CVE-2024-5564
   Patch8: 0008-libndp-valid-route-information-option-length.patch


author: valeriak <v.kalinkina@rosa.ru> b326fef
changelog:
  - Add patches:Patch11: libsndfile-1.0.31-ced91d7b.patch
   
   From upstream, fix RHEL-3750, for <= 1.2.2 (CVE-2022-33065)
   Patch12: libsndfile-1.0.31-pullrequest979.patch
   
   From upstream, for <= 1.2.2, RHEL-65095
   Patch13: libsndfile-1.0.28-cve-2024-50612prereq.patch
   Patch14: libsndfile-1.2.2-cve-2024-50612.patch


author: valeriak <v.kalinkina@rosa.ru> cccbc39
changelog:
  - Add patches:Patch0004: 0004-ntlmv2.patch
   Patch0005: 0005-WebSockets-do-not-start-the-input-source-when-IO-is-closing.patch
   CVE-2024-52530
   Patch0006: 0001-headers-Strictly-don-t-allow-NUL-bytes.patch
   CVE-2024-52532
   Patch0007: 0001-websocket-process-the-frame-as-soon-as-we-read-data.patch
   CVE-2024-52531
   Patch0008: 0001-headers-Be-more-robust-against-invalid-input-when-pa.patch


author: valeriak <v.kalinkina@rosa.ru> 9b75466
changelog:
  - Add patches:0038-CVE-2023-0800-CVE-2023-0801-CVE-2023-0802-CVE-2023-0.patch
   0039-CVE-2022-3599-Revised-handling-of-TIFFTAG_INKNAMES-a.patch
   0040-CVE-2018-15209-Merge-branch-avoid_memory_exhaustion_.patch
   0041-CVE-2023-25433-Merge-branch-tiffcrop_correctly_updat.patch
   0042-CVE-2023-52356-Merge-branch-fix_622-into-master.patch
   0043-CVE-2023-6228-Merge-branch-fix_606_tiffcp_check_also.patch
   
   Patch44: libtiff-4.6.0-CVE-2024-7006.patch


author: valeriak <v.kalinkina@rosalinux.ru> ae9dac1
changelog:
  - Add patches:CVE-2023-44488
   Patch5: 0001-Fix-bug-with-smaller-width-bigger-size.patch
   CVE-2023-5217 https://issues.chromium.org/issues/40073300
   Patch6: 0001-VP8-disallow-thread-count-changes.patch
   Patch7: 0001-Fix-integer-overflows-in-calc-of-stride_in_bytes.patch
   Patch8: 0002-Apply-stride_align-to-byte-count-not-pixel-count.patch
   CVE-2024-5197 https://issues.chromium.org/issues/332382766
   Patch9: 0003-Fix-a-bug-in-alloc_size-for-high-bit-depths.patch
   Patch10: include-limits.patch


author: valeriak <v.kalinkina@rosa.ru> 2f78123
changelog:
  - Add patches:Patch27: libxml2-2.9.13-CVE-2024-56171.patch
   Patch28: libxml2-2.9.13-CVE-2025-24928.patch


author: valeriak <v.kalinkina@rosa.ru> a9651d2
changelog:
  - Add patches:Patch5: mod_http2-1.15.7-SNI.patch
   Patch6: mod_http2-1.15.7-CVE-2023-25690.patch
   incomplete fix of CVE-2023-44487
   Patch7: mod_http2-1.15.7-CVE-2023-45802.patch
   Patch8: mod_http2-1.15.7-CVE-2024-27316.patch
   Patch9: mod_http2-1.15.7-log-error-resp.patch
   Patch10: mod_http2-1.15.7-wrong-cl-proxy-resp-handling.patch
   CVE-2024-38477
   Patch11: mod_http2-1.15.7-r1918628.patch
   Patch12: mod_http2-1.15.7-fix-mood-change.patch


author: valeriak <v.kalinkina@rosa.ru> 7176921
changelog:
  - Add patches to fix CVEs:From OpenSSL 1.1.1v CVEs
   Patch105: openssl-1.1.1-cve-2023-3446.patch
   Patch106: openssl-1.1.1-cve-2023-3817.patch
   Patch107: openssl-1.1.1-cve-2023-5678.patch
   Backport from OpenSSL 3.2/RHEL 9
   Proper fix for CVE-2020-25659
   Patch108: openssl-1.1.1-pkcs1-implicit-rejection.patch
   From OpenSSL 1.1.1w CVEs
   Patch1000: openssl-1.1.1-cve-2024-0727-1.patch
   Patch1001: openssl-1.1.1-cve-2024-0727-2.patch


author: valeriak <v.kalinkina@rosa.ru> c5eb774
changelog:
  - Add patches:Patch48: pam-1.3.1-wheel-pam_ruser-fallback.patch
   Patch49: pam-1.3.1-namespace-gdm-doc.patch
   Patch50: pam-1.3.1-pam-userdb-prevent-garbage-characters-from-db.patch
   Patch51: pam-1.3.1-pam-limits-unlimited-value.patch
   Patch52: pam-1.3.1-pam-keyinit-thread-safe.patch
   Patch53: pam-1.3.1-pam-motd-support-multiple-motd-paths.patch
   Patch54: pam-1.3.1-pam-motd-fix-segmentation-fault.patch
   Patch55: pam-1.3.1-pam-motd-fix-memory-leak.patch
   Patch56: pam-1.3.1-pam-cc-compat.patch
   Patch57: pam-1.3.1-inline.patch
   Patch58: pam-1.3.1-faillock-load-conf-from-file.patch
   Patch59: pam-1.3.1-pam-usertype-SYS_UID_MAX.patch
   Patch60: pam-1.3.1-pam-pwhistory-load-conf-from-file.patch
   Patch61: pam-1.3.1-pam-motd-avoid-unnecessary-logging.patch
   Patch62: pam-1.5.1-pam-lastlog-check-localtime_r-return-value.patch
   Patch63: pam-1.5.1-pam-faillock-clarify-missing-user.patch
   Patch64: pam-1.5.1-pam-faillock-avoid-logging-erroneous.patch
   Patch65: pam-1.3.1-pam-misc-configurable.patch
   Patch66: pam-1.3.1-unix-enable-bcrypt.patch
   Patch67: pam-1.3.1-unix-default-rounds.patch
   Patch68: pam-1.3.1-faillock-create-tallydir.patch
   Patch69: pam-1.3.1-access-handle-hostnames.patch
   
   CVE-2024-22365
   Patch70: pam-1.3.1-namespace-protect-dir.patch
   
   Patch71: pam-1.3.1-audit-messages-formatting.patch
   
   CVE-2024-10041
   Patch72: pam-1.3.1-pam-unix-shadow-password.patch
   
   Patch73: pam-1.3.1-pam-access-local.patch
   Patch74: pam-1.3.1-libpam-support-long-lines.patch
   
   CVE-2024-10963
   Patch75: pam-1.3.1-pam-access-resolve-ip.patch


author: valeriak <v.kalinkina@rosa.ru> d3689ec
changelog:
  - Add patches:CVE-2020-35492
   Patch0: 0001-Initialize-temporary-buffers-in-general_composite_re.patch
   
   Patch1: 0001-Fix-bilinear-filter-computation-in-wide-pipeline.patch
   
   CVE-2022-44638
   Patch2: 0001-Avoid-integer-overflow-leading-to-out-of-bounds-writ.patch


author: valeriak <v.kalinkina@rosalinux.ru> c19aaf2
changelog:
  - Fix CVEs:CVE-2021-32027
   CVE-2021-32028
   CVE-2022-1552
   CVE-2023-5868
   CVE-2023-5869
   CVE-2023-5870
   CVE-2024-0985
   CVE-2024-7348


author: valeriak <v.kalinkina@rosa.ru> 851a095
changelog:
  - Add patches:Patch3: unbound-1.16-CVE-2022-3204.patch
   Patch4: unbound-1.16-CVE-2023-50387-CVE-2023-50868.patch
   Patch5: unbound-1.21-CVE-2024-8508.patch
   Change configs (fix CVE-2024-1488)


author: valeriak <v.kalinkina@rosalinux.ru> 2a12391
changelog:
  - Add patches:Patch3: CVE-2020-26137.patch
   Patch4: CVE-2023-43804.patch
   Patch5: CVE-2023-45803.patch
   Patch6: CVE-2024-37891.patch


author: valeriak <v.kalinkina@rosa.ru> 6352b02
changelog:
  - Add patches:rsync-3.1.3-sparse-block.patch
   rsync-3.1.3-cve-2022-37434.patch
   rsync-3.1.3-filtering-rules.patch
   rsync-3.1.3-missing-xattr-filter.patch
   rsync-3.1.3-cve-2024-12085.patch


author: valeriak <v.kalinkina@rosalinux.ru> db067cc
changelog:
  - Add patches:0024-v2v-Allow-large-temporary-directory-to-be-set-on-a-g.patch
   0025-v2v-o-openstack-Allow-guests-to-be-converted-to-UEFI.patch
   0026-v2v-Fix-spelling-mistake-in-uninstall-function-name.patch
   0027-v2v-windows-Refactor-uninstallation_commands-functio.patch
   0028-v2v-Replace-broken-VMware-Tools-uninstall-command-ms.patch
   0029-Update-common-submodule-to-latest-upstream.patch
   0030-v2v-rhv-upload-plugin-Defer-imageio-connection.patch
   0031-v2v-windows-Fix-schtasks-SD-parameter.patch
   0032-v2v-Turn-pnp_wait.exe-warning-into-a-debug-message.patch
   0033-docs-UEFI-guest-conversion-to-o-openstack-is-support.patch
   0034-docs-o-openstack-Clarify-name-of-file-containing-Ope.patch
   0035-v2v-Allow-output-to-block-devices-RHBZ-1868690.patch
   0036-v2v-Disable-readahead-for-VMware-curl-sources-too-RH.patch
   0037-docs-Document-how-to-remove-Out-of-HTTP-sessions-lim.patch
   0038-v2v-Increase-required-free-space-in-Windows-to-100-M.patch
   0039-v2v-windows-Allow-qxldod.inf-as-synonym-for-qxl.inf.patch
   0040-RHEL-8-docs-Fix-version-of-virt-v2v-which-added-UEFI.patch
   0041-v2v-Increase-Linux-minimum-root-filesystem-to-100-MB.patch
   0042-v2v-rhv-upload-plugin-Fix-waiting-for-finalize.patch
   0043-v2v-windows-Do-not-fix-NTFS-heads-in-Windows-Vista-a.patch
   0044-v2v-vcenter-Implement-cookie-scripts.patch
   0045-convert-convert_windows.ml-Handle-date-formats-with-.patch
   0046-v2v-Force-format-of-input-to-be-specified.patch
   0047-v2v-Cope-with-libvirt-vpx-esx-driver-which-does-not-.patch
   0048-o-rhv-upload-wait-for-VM-creation-task.patch
   0049-tests-Add-test-of-i-ova-from-a-directory.patch
   0050-v2v-i-ova-Fix-parsing-if-OVA-directory-name-has-a-tr.patch
   0051-convert-If-listing-RPM-applications-fails-rebuild-DB.patch
   0052-update-common-submodule-for-CVE-2022-2211-fix.patch
   0053-RHEL-8-If-setfiles-fails-fall-back-to-autorelabel.patch


author: valeriak <v.kalinkina@rosalinux.ru> c5ca3a9
changelog:
  - Add patches:Patch12: wget-1.19.5-no-log-when-quiet.patch
   Patch13: wget-1.19.5-CVE-2024-38428.patch


author: valeriak <v.kalinkina@rosa.ru> b7a2ee6
changelog:
  - Add patches to fix CVEs:CVE-2021-46143
   CVE-2022-22822
   CVE-2022-22827
   CVE-2022-25235
   CVE-2023-52425
   CVE-2024-4549


