# changelog

author: Jan Friesse <jfriesse@redhat.com> - 1.0-251.3.bfb2f92.git
changelog:
  - Resolves: rhbz#2111669

  - Fix authfile directive handling in booth config file
    (fixes CVE-2022-2553)
  - Add enable-authfile option


author: Jan Friesse <jfriesse@redhat.com> - 1.1-1
changelog:
  - Resolves: RHEL-15268
  - Resolves: RHEL-7029

  - New upstream release (RHEL-15268)
  - Upstream releases should now be released regularly, so convert spec
    to use them instead of git snapshots (RHEL-15268)
  - Fix exit code on grant/revoke command error (RHEL-7029)


author: Jan Friesse <jfriesse@redhat.com> - 1.1-1.1
changelog:
  - Resolves: RHEL-32612

  - attr: Fix reading of server_reply
  - auth: Check result of gcrypt gcry_md_get_algo_dlen (fixes CVE-2024-3049)


author: Jan Friesse <jfriesse@redhat.com> - 1.1-2
changelog:
  - Resolves: RHEL-32613

  - attr: Fix reading of server_reply
  - auth: Check result of gcrypt gcry_md_get_algo_dlen (fixes CVE-2024-3049)


author: Jan Friesse <jfriesse@redhat.com> - 3.0.2-2
changelog:
  - Resolves: rhbz#2180045

  - qdevice: Destroy non blocking client on failure (rhbz#2180045)
  - merge upstream commit 4331c7d5650a8bf44c16512419f1954d0ef96df5 (rhbz#2180045)


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-62
changelog:
  - bundled urllib3: fix CVE-2023-45803
    Resolves: RHEL-18139
  - bundled pycryptodome: fix CVE-2023-52323
    Resolves: RHEL-20917
  - bundled jinja2: fix CVE-2024-22195
    Resolves: RHEL-21345


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-66
changelog:
  - Add missing licenses to spec-file
    Resolves: RHEL-27929
  - ha-cloud-support: fix aliyun-cli
    Resolves: RHEL-28097


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-69
changelog:
  - ha-cloud-support: upgrade bundled pyroute2 libs to fix issue in
    gcp-vpc-move-route's stop-action
    Resolves: RHEL-29649


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-70
changelog:
  - fence_aliyun: add credentials file support, filter parameter, and
    optimize log output
    Resolves: RHEL-31488, RHEL-31485, RHEL-31483


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-73
changelog:
  - fence_vmware_rest: detect if the API user has sufficient rights to
    manage the fence device
    Resolves: RHEL-25256


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-33
changelog:
  - fence_virt: add note that reboot-action doesnt power on nodes that
    are powered off
    Resolves: rhbz#2132008


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-36
changelog:
  - fence_virtd: add link to uri examples and uri w/socket path
    example for when VMS are run as non-root user to manpage
    Resolves: rhbz#2138823


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-42
changelog:
  - fencing/fence_wti: add --plug-separator to be able to avoid
    characters that are in node name(s)
    Resolves: rhbz#2152107


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-43
changelog:
  - fence_vmware_soap: set login_timeout lower than default
    pcmk_monitor_timeout (20s) to remove tmp dirs
    Resolves: rhbz#2122944


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-45
changelog:
  - fence_aws: add --skip-race-check parameter to allow running outside
    of AWS network
    Resolves: rhbz#2183162


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-55
changelog:
  - bundled dateutil: fix tarfile CVE-2007-4559
    Resolves: rhbz#2217902
  - fence_ipmilan: fix typos in metadata
    Resolves: rhbz#2224267


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-56
changelog:
  - fence_scsi: fix registration handling if ISID conflicts
    Resolves: RHEL-5396
  - bundled certifi: fix CVE-2023-37920
    Resolves: RHEL-9446


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-60
changelog:
  - all agents: update metadata in non-I/O agents to Power or Network
    fencing
    Resolves: RHEL-14030


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-76.1
changelog:
  - fence_scsi: preempt clears all devices on the mpath device, so only
    run it for the first device
    Resolves: RHEL-59882


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-76.6
changelog:
  - fence_ibm_vpc: refresh bearer-token if token data is corrupt, and
    avoid edge-case of writing empty token file
    Resolves: RHEL-83487


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
changelog:
  Rebase to 1.28 for startup and performance fixes
     threads: add config check to match min value with pong timeouts
     rx: allow links to be active faster
     links: fix ping interval and pong timeout value checking
     crypto: Try crypt and decrypt on crypto_init
     tx: Remove expensive memsets
     log: Add a TRACE log level
    Resolves: #RHEL-11787


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Use systemd-sysusers to create user/group
  - Pacemaker Remote nodes can validate against later schema versions
  - Related: RHEL-17225
  - Resolves: RHEL-7665


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7665
  - Related: RHEL-13216
  - Resolves: RHEL-7702


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-13216
  - Resolves: RHEL-17225
  - Resolves: RHEL-23498


author: Chris Lumens <clumens@redhat.com> - 2.1.5-1
changelog:
  - Rebase on upstream 2.1.5-rc2 release
  - Resolves: rhbz2123727
  - Resolves: rhbz2125337
  - Resolves: rhbz2125344
  - Resolves: rhbz2133546
  - Resolves: rhbz2142683


author: Chris Lumens <clumens@redhat.com> - 2.1.5-4
changelog:
  - Rebase pacemaker on upstream 2.1.5 final release
  - Add support for sync points to attribute daemon
  - Resolves: rhbz2122353


author: Chris Lumens <clumens@redhat.com> - 2.1.5-6
changelog:
  - Backport fix for migration history cleanup causing resource recovery
  - Backport fix for SIGABRT during pacemaker-fenced shutdown
  - Resolves: rhbz2166393
  - Resolves: rhbz2166967


author: Chris Lumens <clumens@redhat.com> - 2.1.5-7
changelog:
  - Additional fixes for SIGABRT during pacemaker-fenced shutdown
  - Backport fix for attrd_updater -QA not displaying all nodes
  - Related: rhbz2166967
  - Resolves: rhbz2169829


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.5-8
changelog:
  - Fix overall timeout calculation if watchdog and another fencing
    device share a topology level
  - Resolves: rhbz2187424


author: Chris Lumens <clumens@redhat.com> - 2.1.6-4
changelog:
  - Fix moving groups when there's a constraint for a single group member
  - Resolves: rhbz2218218
  - Resolves: rhbz2189301


author: Chris Lumens <clumens@redhat.com> - 2.1.6-5
changelog:
  - Clone instances should not shuffle unnecessarily
  - Fix a bug in clone resource description display
  - Resolves: rhbz2222055
  - Related: rhbz2189301


author: Chris Lumens <clumens@redhat.com> - 2.1.6-6
changelog:
  - Apply dampening when creating attributes with attrd_updater -U
  - Resolves: rhbz2224051
  - Related: rhbz2189301


author: Chris Lumens <clumens@redhat.com> - 2.1.8-1
changelog:
  - Rebase on upstream 2.1.8-rc1 release
  - Fix a typo in the help output of pacemaker-fenced
  - Fix escaping characters in XML attribute output
  - Resolves: RHEL-25819
  - Resolves: RHEL-30822


author: Chris Lumens <clumens@redhat.com> - 2.1.8-2
changelog:
  - Rebase on upstream 2.1.8-rc4 release
  - Add ability to immediately shutdown system with PCMK_panic_action=
  - Fix a memory leak in the attribute daemon
  - Add ability to list options and parameters as parseable metadata
  - crm_verify now reports invalid fence level indexes
  - Fix an error in node ID handling in `crm_node -i`
  - Fix regression in attrd_updater output
  - Resolves: RHEL-39057
  - Resolves: RHEL-40117
  - Resolves: RHEL-23401
  - Resolves: RHEL-2996
  - Resolves: RHEL-47249
  - Resolves: RHEL-45935


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-42
changelog:
  - Delay: increase stop, status and monitor timeouts to 40s to avoid
    failing with default values

    Resolves: rhbz#2209433


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-43
changelog:
  - Filesystem: improve stop-action and allow setting term/kill signals
    and signal_delay for large filesystems

    Resolves: rhbz#2207567


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-49
changelog:
  - aws-vpc-move-ip/aws-vpc-route53/awseip/awsvip: add auth_type parameter
    and AWS Policy based authentication type

    Resolves: RHEL-16247


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-51
changelog:
  - storage_mon/findif: fix handler out of scope leak, unitialized value
    and check that netmaskbits != EOS

    Resolves: RHEL-17072


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-52.2
changelog:
  - galera: fix issue where joiner promotion fails is the node reports
    being in non-primary state

    Resolves: RHEL-31791


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-52.4
changelog:
  - AWS agents: retry failed metadata requests to avoid instantly
    failing when there is a hiccup in the network or metadata service

    Resolves: RHEL-34146


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-54
changelog:
  - galera: fix issue where joiner promotion fails is the node reports
    being in non-primary state

    Resolves: RHEL-31763


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-56
changelog:
  - AWS agents: retry failed metadata requests to avoid instantly
    failing when there is a hiccup in the network or metadata service

    Resolves: RHEL-16246


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-57
changelog:
  - Filesystem: fail when incorrect device mounted on mountpoint, and
    dont unmount the mountpoint in this case, or if mountpoint set to "/"

    Resolves: RHEL-34777


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-58
changelog:
  - Filesystem: dont kill unrelated processes during stop-action
  - db2: fix OCF_SUCESS typo

    Resolves: RHEL-40393
    Resolves: RHEL-32829


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-59
changelog:
  - Filesystem: fail when leading or trailing whitespace is present in
    device or directory parameters

    Resolves: RHEL-24683


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-61
changelog:
  - LVM-activate: fail when both "system_id_source" and "volume_list"
    are set in lvm.conf to avoid false positive activation of the VG

    Resolves: RHEL-22715


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-24
changelog:
  - storage_mon: fix specified scores count and possible false negatives
  - LVM-activate: use correct return codes to fix unexpected behaviour
  - azure-events-az: new resource agent

    Resolves: rhbz#2109161
    Resolves: rhbz#2102126
    Resolves: rhbz#2111147


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-27
changelog:
  - nfsserver: add nfsv4_only parameter to make it run without
    rpc-statd/rpcbind services

    Resolves: rhbz#2127121


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-28
changelog:
  - mysql-common: return error in stop-action if kill fails to stop
    the process, so the node can get fenced

    Resolves: rhbz#2145260


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-34
changelog:
  - all agents: dont check notify/promotable settings during
    validate-action

    Resolves: rhbz#2157872


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-35
changelog:
  - lvmlockd: add "use_lvmlockd = 1" if it's commented out or missing
  - ethmonitor: dont log "Interface does not exist" for monitor-action

    Resolves: rhbz#2149968
    Resolves: rhbz#2174896


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-37
changelog:
  - azure-events*: fix for no "Transition Summary" for Pacemaker 2.1+
  - Filesystem: fail if AWS efs-utils not installed when fstype=efs

    Resolves: rhbz#2182415
    Resolves: rhbz#2183133


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-38
changelog:
  - resource-agents-paf: add perl-lib dependency
  - Filesystem: create systemd drop-in for network filesystems

    Resolves: rhbz#2203813
    Resolves: rhbz#2184779


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - properly conflict with pacemaker not providing sync-default we need
    Resolves: rhbz#1979961
    Resolves: rhbz#1979573


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.1-2
changelog:
  - obviously autoconf is defining runstatedir - but with a
    wrong default - directly hand it over to configure
    and skip --with-runstatedir implemented in configure.ac
    for older versions of autoconf

    Resolves: rhbz#2011707


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management

    Resolves: rhbz#2168579


author: Jan Friesse <jfriesse@redhat.com> - 20210520-1
changelog:
  - Resolves: rhbz#1962501

  - New upstream release
  - Support for cgroup v2
  - Document cgroup v2 problems


author: Jan Friesse <jfriesse@redhat.com> - 20210719-1
changelog:
  - Related: rhbz#1962501

  - New upstream release
  - Add mode option for moving to root cgroup functionality


