# changelog

author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 1.6.3-2
changelog:
  - regression in IPv4 handling in r1907242. Cycle through the address list
    handling v4/v6 addresses correctly


author: Vladislav Mitin <vladislav.mitin@red-soft.ru> - 0:7.81.0-9
changelog:
  - fix CVE-2023-27534, CVE-2023-27533, CVE-2023-27538, CVE-2023-27537,
    CVE-2023-27536, CVE-2023-27535


author: Sergey Fadin <sergey.fadin@red-soft.ru> - 0:3.6.2-1
changelog:
  - Update upstream to 3.6.2
  - Added python3 package
  - Move python to python2 package
  - Used github source tarball


author: Vladislav Mitin <vladislav.mitin@red-soft.ru> - 0:2.4.1-2
changelog:
  - Rebuild for os73-updates
  - Update fix with CVE-2022-25235, CVE-2022-25236, CVE-2022-25313, CVE-2022-25315, CVE-2022-25314
  - Without patch in xmltok_impl.c


author: Vitaly Peshcherov <vitaly.peshcherov@red-soft.ru> - 0:2.44.1-1
changelog:
  - Update to 2.44.1 for os73-updates {177718}
  - Fix CVE-2024-32004 CVE-2024-32020 CVE-2024-32021 CVE-2024-32465


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 2.65.3-3
changelog:
  - multiple GVariant security issues
  - CVE-2023-24593, CVE-2023-29499, CVE-2023-25180, CVE-2023-32611,
    CVE-2023-32636, CVE-2023-32643, CVE-2023-32665
  - CVE-2021-27218, CVE-2021-27219


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 0:1.1.1.0-0.4
changelog:
  - Use frpintf(stderr,...) instead of printf(...) in gost_eng.c
  - Because it brake some applications like git...


author: Dmitry Safonov <dmitry.safonov@red-soft.ru> - 0:1.1.1.0-0.6
changelog:
  - Changing the "openssl-switch-passhash" script
  - Now the files in the directory "/etc/pam.d/" are changed 
  - 	so that the script works equally on both the standard
  - 	and the certified OS version


author: Vitaly Peshcherov <vitaly.peshcherov@red-soft.ru> - 0:10.3.3-1.1
changelog:
  - Update to 10.3.1 for os73-updates {161159}
  - Fix CVE-2023-4822, CVE-2023-4399 {151362}
  - Fix CVE-2023-6152 {164160}


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 0:8.40-69.el7.2
changelog:
  * Mon Sep 12 2022 Anton Fadeev <anton.fadeev@red-soft.ru> - 8.40-68
  - Move man pages to grubby-deprecated package


author: Ilya Polyvyanyy <ilia.polyvyanyy@red-soft.ru> - 2.4.61-1
changelog:
  - 2.4.61 to fix CVE-2024-39884 CVE-2024-36387 CVE-2024-38472 CVE-2024-38473 CVE-2024-38474 CVE-2024-38475 CVE-2024-38476 CVE-2024-38477 CVE-2024-39573
  - back to old .service file


author: Nikita Golubev <nikita.golubev@red-soft.ru> - 0:2.4.65-4
changelog:
  - package update 
  - Fix CVE-2025-54090, CVE-2024-42516, CVE-2024-43204,  CVE-2024-43394, 
  - CVE-2024-47252, CVE-2025-49630, CVE-2025-49812,  CVE-2025-53020


author: Alexandr Subbotin <alexander.subbotin@red-soft.ru> - 5.15.35-5
changelog:
  - CVE-2022-2588
  - CVE-2022-2586
  - CVE-2021-33655
  - CVE-2022-29582
  - CVE-2022-34918
  - CVE-2022-2078 (BDU:2022-04090)


author: Artem Chernyshev <artem.chernyshev@red-soft.ru> - 5.15.72-1
changelog:
  - Update upstream to 5.15.72
  - Old patches removed

  - BDU-W-2022-00044
  - BDU-W-2022-00045
  - BDU-W-2022-00046
  - BDU-W-2022-00047
  - BDU-W-2022-00048


author: Artem Chernyshev <artem.chernyshev@red-soft.ru> - 5.15.78-1
changelog:
  - Update upstream to 5.15.78

  - CVE-2022-3435
  - CVE-2022-3521
  - CVE-2022-3534
  - CVE-2022-3577
  - CVE-2022-3606
  - CVE-2022-41848
  - CVE-2022-44032
  - CVE-2022-44033
  - CVE-2022-44034
  - CVE-2022-3566


author: Artem Chernyshev <artem.chernyshev@red-soft.ru> - 5.15.154-1
changelog:
  - Updated to 5.15.154
  - Mitigated problem with freeze after suspend on AlderLake CPU systems
  - Solved issue with screen rotate on certain systems
  - REISERFS was deprecated and currently removed from build
  - Kernel stack offset randomization and variable initialization on
  allocation was turned on for security reasons
  - Few unused protocols was turned off.
  - config options explicitly changed:
    * CONFIG_NET_9P=n
    * CONFIG_ROSE=n
    * CONFIG_REISERFS_FS=n
    * CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y
    * CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
    * CONFIG_BMI160=m
    * CONFIG_BMI160_I2C=m
    * CONFIG_BMI160_SPI=m


author: Artem Chernyshev <artem.chernyshev@red-soft.ru> - 6.1.85-1
changelog:
  - Updated to 6.1.85
  - Mitigated problem with freeze after suspend on AlderLake CPU systems
  - Solved issue with screen rotate on certain systems
  - Fixed screen flickering issues observed in rare cases
  - REISERFS was deprecated and currently removed from build
  - Multi-gen Least Recently Used memory page reclaim algorithm using
  by default.
  - Kernel stack offset randomization and variable initialization on
  allocation was turned on for security reasons
  - Few unused protocols was turned off.
  - config options explicitly changed:
    * CONFIG_NET_9P=n
    * CONFIG_ROSE=n
    * CONFIG_REISERFS_FS=n
    * CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y
    * CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
    * CONFIG_BMI160=m
    * CONFIG_BMI160_I2C=m
    * CONFIG_BMI160_SPI=m
    * CONFIG_LRU_GEN=y
    * CONFIG_LRU_GEN_ENABLED=y


author: Artem Chernyshev <artem.chernyshev@red-soft.ru> - 6.1.128-2
changelog:
  - Updated to 6.1.128
  - Fix selinux issue in aarch64
  - config options explicitly changed:
    * CONFIG_BLK_CGROUP_IOPRIO=y
    * CONFIG_MD_CLUSTER=m
    * CONFIG_SECURITY_DMESG_RESTRICT=y
    * CONFIG_USB_SERIAL=m
    * CONFIG_X86_AMD_PSTATE=y
    * CONFIG_X86_AMD_PSTATE_UT=y


author: Artem Chernyshev <artem.chernyshev@red-soft.ru> - 6.1.143-1
changelog:
  - Updated to 6.1.143
  - added patch and corresponding boot option for vpd size fix
  - CONFIG_BLK_DEV_UBLK=m
  - CONFIG_FB_SM750=m
  - CONFIG_MPTCP_IPV6=y
  - CONFIG_MPTCP_KUNIT_TEST=m
  - CONFIG_MPTCP=y


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 15.0-2
changelog:
  - Ship errcodes.h header file in -devel pacakge (kea package requires errorcodes)
  - Move errcodes.h to usr/include/pgsql/server/utils/
  - to be consistent with upstream


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 2:2.11.3-91
changelog:
  - Fix multiple CVEs (CVE-2024-22563, CVE-2023-1668, CVE-2023-5366, CVE-2022-4337, CVE-2022-4338)
  - Bump epoch to avoid conflicts with underlying repositories


author: Alexander Lushin <alexandr.lushin@red-soft.ru> - 2:2.16.0-5
changelog:
  - Fix ovsdb-server systemd unit. Now it additionaly setups openvswitch permissions to /etc/openvswitch and /run/openvswitch directory.


author: Alexander Lushin <alexandr.lushin@red-soft.ru> - 2:2.16.0-6
changelog:
  - Fix ovsdb-server systemd unit. Now it setups openvswitch permissions to /etc/openvswitch and others recursively.
  - Ipsec custom launch options
  - Fix default ovs paths for RED Virtualization directories


author: Richard W.M. Jones <rjones@redhat.com> - 4-1
changelog:
  - s390x is now a native architecture with OCaml 4.04 in Fedora >= 26.
  - Add riscv64 as a native arch using out of tree backend.


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 4.4.9.2-8
changelog:
  - Set error_policy to report Set error_policy to report if disk type is LUN and Disk use SCSI
    Reservation


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 4.4.10.8-9
changelog:
  - Replace stored proc getvmsbydiskid to show vms associated with selected iso
  - DiskVmsActionPanel to show detach buttons


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 4.4.10.8-32
changelog:
  - Extend CA cert lifetime up to 7300 days
  - Extend VDS cert lifetime up to 1827
  - Restart services after enroll certs
  - Allow enroll certificates in NonResponsive status
  - Renew all known certificates


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 4.4.10.8-42
changelog:
  - Fix bug with unlimited user session
  - Fix logrotate templates
  - Fix event subscriber upgrade scripts


author: Alexander Lushin <alexandr.lushin@red-soft.ru> - 4.4.10.8-47
changelog:
  - Move theme switch logic to welcome page
  - Fix "must appear in the GROUP BY clause or be used in an aggregate function" errors
  - Generate OVN certificates


author: Alexander Lushin <alexandr.lushin@red-soft.ru> - 4.4.10.8-49
changelog:
  - Fix error with openvswitch-ipsec
  - Add engine updates repo mirrors
  - Improve ovirt-host-check-upgrade role
  - Fix migrate process display


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 4.4.10.8-50
changelog:
  - Add ability to find events by time
  - Localize loading...
  - Fix engine-setup when no clusters create
  - Fix certification duplication in WebAdmin UI
  - Fix failing snapshot creation if vm has plugged iso from iso-domain
  - Add excludes to mirror repos


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 4.4.10.8-52
changelog:
  - Resize cpu_flags column in vds_dynamic
  - Add vm_groups to ovf inside snapshot
  - Fix readRate/writeRate (loing instead of int)
  - Add logrotate for ansible artifacts
  - Filter out image transfers with no disk_id
  - Disable auto-synchronization when creating an OVN provider via engine-setup
  - Extend ServerCPUList
  - Add host filesystem usage tracking
  - Update tech links on welcome-page
  - Filter out capstone and virtiofsd as qemu deps in cert RO Node
  - Move VM, host, and disk dashboards to redvirt-dashboards-ui-extension
  - Fix some <UNKNOWN> messages in events
  - Add missing backup field to copyOf routine
  - Add missing key SshHostReboot to ExecutionMessages.properties


author: Alexander Lushin <alexandr.lushin@red-soft.ru> - 1.2.37-3
changelog:
  - Rebuild onto last commits (ec8f8b82e07f14e0237dee718c486edc61e2471f)
  - Remove the requirement for the security group name when updating it
  - Implement error code assembly from parameters at the BadRequestError class level


author: Dmitry Miroshnikov <dmitry.miroshnikov@red-soft.ru> - 1.2.37-5
changelog:
  - Add a check for the uniqueness of key object names
  - Add vm ports check before subnet deletion
  - Add a subnet existence check before deleting a network


author: Dmitry Miroshnikov <dmitry.miroshnikov@red-soft.ru> - 1.2.37-6
changelog:
  - Fix external subnet deletion
  - Fix network deletion
  - Add the ability to assign an object its own name without triggering a 409 error


author: Dmitry Safonov <dmitry.safonov@red-soft.ru> - 0:12.17-1
changelog:
  - Update to 12.17
  - fix CVE-2022-41862, CVE-2023-2454, CVE-2023-2455
  - CVE-2023-39417, CVE-2023-5868, CVE-2023-5869, CVE-2023-5870


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 1:3.2.1-5.el7
changelog:
  - Bump epoch to avoid conflict with other repos
  - Fix CVE-2023-49083, CVE-2023-23931, CVE-2020-36242


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 1:0.6.0-3
changelog:
  - Bump epoch to avoid conflicts with oither repos
  - Fix CVE-2024-28102, CVE-2023-6681, CVE-2022-3102


author: Anton Fadeev <anton.fadeev@red-soft.ru> - 3.0.3-1
changelog:
  - Rebuild for RED Virtualization
  - Fix (CVE-2023-23934, CVE-2023-25577, CVE-2023-46136, CVE-2024-34069)


author: Dmitry Sudakov <dmitriy.sudakov@red-soft.ru> - 1.0.0-11
changelog:
  - Added a check that the directory is suitable for mounting and has access to it
  - engine filesystem query
  - Tests for infra backups and reports features
  - Add working directory (/var/lib/redvirt/redvirt-backend) for redvirt-backend


author: Dmitry Sudakov <dmitriy.sudakov@red-soft.ru> - 1.0.0-17
changelog:
  - Fix reading dynamical configurations
  - Fix empty pages in virtual infrastructure report when no data in DWH


author: Alexander Lushin <alexandr.lushin@red-soft.ru> - 0.0.5-34
changelog:
  - Added mounting parameters, fix backup deletion, fix edit plan, added api connection shutdown if connection attempts are unsuccessful, replaced ca.pem to apache-ca.pem
  - RPM Spec refactoring


author: Nikita Parfenov <nikita.parfenov@red-soft.ru> - 0.0.5-35
changelog:
  - Release up
  - Fixed database connections if error
  - Fixed waiting task if image is large
  - Fixed mount storage with parameters(params now listed in network path)


author: Nikita Parfenov <nikita.parfenov@red-soft.ru> - 0.1.3-9
changelog:
  - fix edit plan, fix create backup and plan buttons, added delete storage ask for erase data, added parameters for mounting nfs
  - add redvirtci


author: Dmitriy Sudakov <dmitriy.sudakov@red-soft.ru> - 1.0.0-4
changelog:
  - transparent nodes background changed to white
  - fixed jumping edges (in most cases)
  - up/down status icons changed to better quality
  - changed plugin priority in Additional subtab


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 3.14.5-58
changelog:
  - Rebuild with container-selinux-2.228.1
  - Allow domain mmap usr_t files
  - Add an alias for nvme_device_t


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 3.14.5-59
changelog:
  - Allow fprintd install a sleep delay inhibitor
  - Allow fprintd read and write hardware state informat


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 3.14.5-60
changelog:
  - Allow systemd gpt auto generator read udev pid files
  - Add missing declaration in rpm_named_filetrans
  - Add default file context specification for dnf log files
  - Allow systemd-io-bridge ioctl rpm_script_t
  - Change rpm_setattr_db_files to use a pattern
  - Support using systemd update helper in rpm scriptlet
  - Allow login_userdomain write to boltd named pipes


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 3.14.5-61
changelog:
  - Actualize Samba module
  - Allow systemd userdbd the sys_resource capability
  - Allow domain read usermodehelper state information
  - Dont audit winbind_rpcd_t write urandom
  - Dont audit winbind_t write urandom


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 3.14.5-63
changelog:
  - Allow sssd read symlinks in etc sssd
  - Creating interface sssd_run_sssd
  - Allow domtrans to sssd_t and role access to sssd
  - Allow mongodb read network sysctls
  - Allow mongodb read filesystem sysctls
  - Allow mongodb search nfs dir


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 3.14.5-64
changelog:
  - Fix typo in rsyncd.conf in rsync.if
  - Allow xdm connect to unconfined_service_t over a unix stream socket
  - Allow xdm_t read unconfined services state
  - Allow lldpad send to unconfined_t over a unix dgram socket
  - Allow lldpd use an snmp subagent over a tcp socket
  - Allow lldpd connect to snmpd with a unix domain streem
  - Allow lldpad connect to systemd userdbd over a unix dgram socket


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 3.14.5-65
changelog:
  - Allow chage domtrans to sssd
  - Allow lldpad create and use netlink_generic_socket
  - Allow nut-upsd system state information
  - Allow upsmon execute upsmon via a helper script


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 3.14.5-66
changelog:
  - Allow kdump load a new kernel
  - Label var lib kdump with kdump_var_lib_t
  - Allow kdump_t net_admin capability
  - Label var log kdump.log with kdump_log_t
  - Allow kexec manage generic tmp files
  - Allow kdump create and use its memfd objects
  - Allow kdumpctl_t to list all directories with a file
  - Allow haproxy list the sysfs directories-content
  - Support hitless reloads feature in haproxy
  - Allow haproxy get attributes of cgroup filesystems
  - Allow haproxy get attributes of filesystems with ext
  - Allow haproxy read hardware state information
  - Update policy for haproxyd
  - Dontaudit firewalld dac_override capability
  - Allow firewalld drop capabilities
  - Allow firewalld load kernel modules
  - Allow firewalld read the contents of the sysfs files


author: Oleg Sviridov <oleg.sviridov@red-soft.ru> - 3.14.5-67
changelog:
  - Allow haproxy get attributes of ram filesystems
  - Dontaudit firewalld dac_raed_search capability
  - Allow webadm_t use generic ptys


author: Elia Leontiev <ilya.leontiev@red-soft.ru> - 2:9.1.774-1
changelog:
  - Build for fix 
      CVE-2024-47814
      CVE-2024-45306
      CVE-2024-43802
      CVE-2024-43374
      CVE-2024-43790


