# changelog

author: Debarshi Ray <rishi@fedoraproject.org> - 1:2.8.8-19
changelog:
  - Use XDG_CONFIG_HOME instead of home for config files
    (http://sourceforge.net/p/xchat/bugs/1506/)
  - Use name and generic name correctly in desktop file
    (http://sourceforge.net/p/xchat/bugs/1397/)


author: Pavel Raiskup <praiskup@redhat.com> - 3.0.7-2
changelog:
  - really remove the gcc-warning patch & remove old Makefile from git
  - s/Url/URL/, for both fixes thanks to pshiffer


author: Kalev Lember <kalevlember@gmail.com> - 0.9-1
changelog:
  - Update to 0.9
  - Adjust BuildRequires to build with gtk3
  - Drop lxde patch, merged upstream
  - Validate the desktop file


author: Kalev Lember <kalev@smartlink.ee> - 3.1.1-1
changelog:
  - Update to 3.1.1
  - Dropped CVE-2009-1885 patch.
  - Use dos2unix -k instead of unrecognized option -U
  - Removed the multilib conflict workaround as Xerces_autoconf_config.hpp
    no longer contains the conflicting XERCES_SIZEOF_LONG define.


author: Eric Sandeen <sandeen@redhat.com> 3.1.3-2
changelog:
  - Preserve xattrs on multi-part stream restores (#1034014)
  - Prevent segfault on multi-part stream restores (#1034015)


author: Eric Sandeen <sandeen@redhat.com> 3.1.3-5
changelog:
  - Preserve file capabilities during xfsrestore (#1013345)

  - Preserve xattrs on multi-part stream restores (#1034014)


author: Eric Sandeen <sandeen@redhat.com> 3.1.7-1
changelog:
  - Rebase to build against current RHEL7 xfsprogs headers
  - Fix race condition between lseek() and read()/write() (#1086532)


author: Eric Sandeen <sandeen@redhat.com> 3.2.0-0.3.alpha2
changelog:
  - New upstream alpha release (#1034445)
  - Remove xfs_check reference from fsck.xfs output (#1029455)
  - Fix xfs_fsr on some files with selinux attributes (#1034013)


author: Eric Sandeen <sandeen@redhat.com> 3.2.0-0.6.alpha2
changelog:
  - xfs_metadump: Require -F if proper SB magic is not found (#1040921)
  - xfs_repair: fix bad block pointer found in large directories (#1034157)
  - libxfs: Don't mark single-map blockmaps as discontiguous (#1033480)
  - libxfs: Clear stale buffer errors on write (1033480)


author: Eric Sandeen <sandeen@redhat.com> 3.2.0-0.7.alpha2
changelog:
  - xfs_metadump: Really add xfs_metadump -F option (#1040921)
  - xfs_check: Remove xfs_check manpage, xfs_check is deprecated (#1029458)


author: Eric Sandeen <sandeen@redhat.com> 3.2.0-0.8.alpha2
changelog:
  - mkfs.xfs fix default log size for small filesystems (#1034003)
  - xfs_copy: partial fixups for CRC filesystems (#1043570)
  - xfs_logprint: Don't error out after split items lose context (#1043591)


author: Jingdong Lu <jingdong.lu@oracle.com> 3.2.0-0.10.alpha2.0.1.el7
changelog:
  - fix xfs_copy exit with error code (Junxiao Bi) [orabug 18813298]
  - Add proper checking for size arguments (Guangyu Sun) [orabug 17613612]


author: Allison Henderson <allison.henderson@oracle.com> - 4.15-4.el7
changelog:
  - Add a wrapper script to detect pmem devices and set mkfs.xfs options appropriately. (Darrick J. Wong)  [Orabug: 29216384] 
  - Port upstream agfl corruption fixes (Allison Henderson)  [Orabug: 28721740] 
  - Re-apply agfl struct packing revert (Allison Henderson)


author: Allison Henderson <allison.henderson@oracle.com> - 4.15-6.0.1.el7
changelog:
  - xfs_repair: continue after xfs_bunmapi deadlock avoidance (Allison Henderson)  
  - Update mkfs.xmem script (Allison Henderson)


author: Srikanth C S <srikanth.c.s@oracle.com> - 4.15-7.0.2.el7
changelog:
  - xfs_repair: don't assert on bad '.' entry in no-modify mode (Darrick J. Wong)
    [Orabug: 34673376]


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-3
changelog:
  - mkfs.xfs: disable finobt by default, disable sparse inodes entirely (#1345961)
  - Fix header files for compatibility (#1340553)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-4
changelog:
  - xfs_db: Fix multi-inode-record chunks in 4.5.0 (#1346927)
  - xfs_repair: Fix special inode handling in 4.5.0 (#1347698)
  - xfs_repair: Fix quota inode handling in 4.5.0 (#1347719)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-8
changelog:
  - revert loff_t to off64_t change to preserve xfs.h behavior (#1366291)
  - accomodate lack of ustat() on some arches (#1373605)


author: Edward Leung <edward.leung@oracle.com> - 4.5.0-10.0.1
changelog:
  - Disable dirftype by default for compatibility with UEK3 [orabug 24836884]
  - Disable crc, finobt by default for compatibility with UEK3 [orabug 22711906]
  - Add proper checking for size arguments (Guangyu Sun) [orabug 17613612]


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-13
changelog:
  - mkfs.xfs: clarify ftype defaults in manpage (#1488124)
  - mkfs.xfs: allow specification of 0 data stripe width (#1444166)
  - mkfs.xfs: Don't stagger AG for a single disk (#1492552)
  - xfs_db: xfs_db-update-buffer-size-when-new-type-is-set (#1458670)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-16
changelog:
  - xfs_db: fix the source command when passed as -c option (#1510279)
  - xfs_metadump: allow much larger extent counts (#1502927)
  - xfs_db: fix crash when field list selector has garbage (#1532271)
  - mkfs.xfs, others: don't stat non-block devices on startup (#1573974)
  - Update project URLs throughout the pkg, code and docs (#1550798)


author: EL Errata <el-errata_ww@oracle.com> - 4.5.0-18.0.1
changelog:
  - Disable crc, finobt by default for compatibility with UEK3 [orabug 22711906]
  - Add proper checking for size arguments (Guangyu Sun) [orabug 17613612]
  - Removed patch xfsprogs-default-disable-dirftype.patch [orabug 26176688]


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-20
changelog:
  - xfs_quota: fix errors if project flag is not set on regular files (#1663502)
  - xfs_repair: initialize non-leaf finobt blocks with correct magic (#1670154)


author: Edward Leung <edward.leung@oracle.com> - 4.5.0-20.0.1
changelog:
  - Disable crc, finobt by default for compatibility with UEK3 [Orabug: 22711906]
  - Add proper checking for size arguments (Guangyu Sun) [Orabug: 17613612]
  - Removed patch xfsprogs-default-disable-dirftype.patch [Orabug: 26176688]


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-21
changelog:
  - mkfs.xfs: make device discard interruptable, print notice (#1769786)
  - xfs_io: remove +/-x flag from chattr, not supported in kernel (#1630112)
  - xfs_metadump: fix symlink handling (#1693138)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-1
changelog:
  - Rebase to upstream v4.5.0 (#1309498)
  - mkfs: default to CRC enabled filesystems
  - mkfs: default to ftype enabled filesystems
  - mkfs.xfs.8: Clarify mkfs vs. mount block size limits. (#1263535)
  - xfs_copy: fix copy of hard 4k devices (#1231841)
  - xfs_quota: use Q_XGETNEXTQUOTA for faster repquota (#1164652)
  - xfs_fsr: more fixes for extent swaps with selinux (#1083833)
  - xfs_copy: Allow UUID changes on V5 filesystems (#1072283)


author: Jan Synáček <jsynacek@redhat.com> - 2:2.3.15-13
changelog:
  - modify the xinetd man page to make it more clear on what happens to services on xinetd reload (#1147538)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.2.19-3
changelog:
  - Fix duplicate documentation (#1001250)
  - Turn on verbose build output via V=1 make
  - Use %?_isa in explicit package deps
  - Fix base package Group tag to "System Environment/Libraries"
  - Remove %defattr


author: Simo Sorce <simo@redhat.com> - 1.2.20-1
changelog:
  - New upstrema version with memleaks, crl checks and other fixes
  - enable make check during build
  - drop ecdsa patch as it has been included upstream


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.24-1
changelog:
  - new release 0.0.24, basic support for docbook->epub
    conversion, use backend extensions by default
    (--noextensions) to disable it


author: Peter Hutterer <peter.hutterer@redhat.com> 7.7-3
changelog:
  - luit 1.1.1
  - oclock 1.0.3
  - xclock 1.0.6
  - xbiff 1.0.3
  - xpr 1.0.4
  - xcursorgen 1.0.5
  - xclipboard 1.1.2
  - xfontsel 1.0.4
  - xfd 1.1.1
  - xlogo 1.0.4
  - xvidtune 1.0.3


author: Hans de Goede <hdegoede@redhat.com> 7.7.1-1
changelog:
  - Update to latest git, this is the equivalent of 7.7.1 + fixes for use
    with xserver-1.19 (rhbz#1325613)
  - Rebuild against xserver-1.19


author: Lyude Paul <cpaul@redhat.com> - 2.99.917-20.20151109
changelog:
  - Update to upstream package.
  - Fix trailing whitespace
  - Add some patches to fix issues with ignoring DP MST hotplugs


author: Hans de Goede <hdegoede@redhat.com> - 2.99.917-22.20160119
changelog:
  - xorg-x11-drv-intel hardly has any accel on skylake and newer, so make
    Xorg fallback to modesetting + glamor by returning FALSE from probe
  - Using glamor also gives us proper Xvideo support on skylake (rhbz#1305369)


author: Hans de Goede <hdegoede@redhat.com> - 2.99.917-23.20160512
changelog:
  - Update to 20160512 snapshot
  - This fixes laptops with switchable graphics hanging after a dpms off of
    the lcd screen (rhbz#1334581)
  - Fix fd-leak when falling back to mode-setting on skylake, this fixes
    Xorg exiting with a "drmSetMaster failed" error when not using server
    managed fds (e.g. using a different login manager then gdm)
  - Fix duplicate binaries in -devel / intel-gpu-tools subpackages (rhbz#1323641)


author: Hans de Goede <hdegoede@redhat.com> - 2.99.917-24.20160712
changelog:
  - Git snapshot du jour, bringing in a bunch of bugfixes
  - Fix dpi issues on Surface 3 (also needs some kernel fixes)
  - Hopefully fix rhbz#1354124


author: Peter Hutterer <peter.hutterer@redhat.com> 0.22.0-3
changelog:
  - Provide xorg-x11-drv-synaptics. The actual content is now provided by
    xorg-x11-drv-synaptics-legacy (#1394836). For details, see
    https://fedoraproject.org/wiki/Changes/RetireSynapticsDriver


author: Peter Hutterer <peter.hutterer@redhat.com> 0.23.0-2
changelog:
  - Ignore LED updates for disabled devices, avoids a null-pointer dereference
    when an AccessX timeout is set


author: Peter Hutterer <peter.hutterer@redhat.com> 0.25.0-2
changelog:
  - Don't provide xorg-x11-drv-synaptics (#1413811)
  - Don't reassign libinput to wacom touchpads, that's left to the user
  - Don't assign to wacom tablets, tablets behave differently on RHEL7.4


author: Hans de Goede <hdegoede@redhat.com> - 1.0.11-4
changelog:
  - nouveau-1.0.11-cleanup-reverse-prime-fb: fix gpu not suspending after
    using an external output in a switchable graphics setup
  - Resolves: rhbz#1349821


author: Hans de Goede <hdegoede@redhat.com> - 1.0.12-4
changelog:
  - Fix the crtc not being turned off, causing the dgpu to not suspend,
    after using a dgpu attached output


author: Lyude Paul <lyude@redhat.com> 1.0.13-2
changelog:
  - nouveau-1.0.13-fix-pageflipping-with-atomic.patch:
    Fix broken pageflipping with RHEL 7.4 DRM backport kernel (#1428214)


author: Marc-Andre Lureau <mlureau@redhat.com> 0.1.1-12
changelog:
  - Try to fallback to previous working configuration if
    drmModeSetCrtc() failed.
    Resolves: rhbz#1127552


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.1.1-16
changelog:
  - Fix glitches when restarting X server
    Resolves: rhbz#1102175
  - Fix restarting X server
    Resolves: rhbz#1185807


author: Christophe Fergeau <cfergeau@redhat.com> 0.1.1-17
changelog:
  - Fix freeze in xfig when entering space character
    Resolves: rhbz#1221909
  - Fix memory leak
    Resolves: rhbz#1222038
  - Fix cursor leak causing a crash when running RHEL6 anaconda in a VM
    Resolves: rhbz#1222040


author: Victor Toso <victortoso@redhat.com> - 0.1.5-5
changelog:
  - Fix crash due uninitialized pointer
    Resolves: rhbz#1690453
  - Call LeaveVt on shutdown to avoid racy situations
    Resolves: rhbz#1640918


author: Peter Hutterer <peter.hutterer@redhat.com> 0.34.2-2
changelog:
  - Add Pressure2K option for backwards-compatibility with applications that
    hardcode the previous pressure range (#1457024)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.34.2-3
changelog:
  - Fix hang after unplugging a device (#1496650)
  - Correct device flags for some Cintiqs and Intuos pros (#1496659)


author: Peter Hutterer <peter.hutterer@redhat.com> 1:7.5-10
changelog:
  - Add the epoch to the Provides bdftruncate. bdftruncate had an epoch for
    years, make sure that stays alive


author: Peter Hutterer <peter.hutterer@redhat.com> 1:7.5-14
changelog:
  - mkfontscale 1.1.0
  - mkfontdir 1.0.7
  - bdftopcf 1.0.4
  - Document mkfontscale's -u/-U in the man page (#948841)


author: Jerome Glisse <jglisse@redhat.com> 0.5.0-2.20130401git81aadb8
changelog:
  - Silence rpmlint warning about ldconfig
  - Only install libglamor.so in devel package.
  - Adding COPYING and README as doc


author: Jerome Glisse <jglisse@redhat.com> 0.5.0-3.20130401git81aadb8
changelog:
  - Remove comment rather than investigating Xorg mess as running ldconfig can't be harmfull.
  - Fix devel package dependency.


author: Adam Jackson <ajax@redhat.com> 1.15.0-7.3
changelog:
  - CVE fixes for: CVE-2014-8099, CVE-2014-8098, CVE-2014-8097, CVE-2014-8096,
    CVE-2014-8095, CVE-2014-8094, CVE-2014-8093, CVE-2014-8092, CVE-2014-8091,
    CVE-2014-8101, CVE-2014-8100, CVE-2014-8103, CVE-2014-8102


author: Adam Jackson <ajax@redhat.com> 1.17.2-8
changelog:
  - Add 32->24bpp downconversion and tile-based double buffering to the
    shadow framebuffer support in modesetting


author: Hans de Goede <hdegoede@redhat.com> - 1.17.2-21
changelog:
  - Add missing modesetting-Claim-PCI-devices-as-PCI-not-platform changes to
    really allow prime and slave output support with the modesetting driver
  - Resolves: rhbz#1353505


author: Hans de Goede <hdegoede@redhat.com> - 1.17.2-22
changelog:
  - Replace modesetting-Claim-PCI-devices-as-PCI-not-platform with a new patch
    for the same issue, which also works properly with prime setups
  - Resolves: rhbz#1353505


author: Adam Jackson <ajax@redhat.com> - 1.20.4-11
changelog:
  - Fix a crash when moving an animated cursor between screens
  - Be case-insentive when matching extension names to enable or disable


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.4-12
changelog:
  - CVE fixes for: CVE-2020-14345 (#1872389), CVE-2020-14346 (#1872393),
    CVE-2020-14361 (#1872400), CVE-2020-14362 (#1872407)
  - Temporarily revert fixes from 1.20.4-11 build for delivery of CVE fixes


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.4-17
changelog:
  - CVE fix for: CVE-2021-4008 (#2030161), CVE-2021-4009 (#2030171),
    CVE-2021-4010 (#2030176), CVE-2021-4011 (#2030180)


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.4-18
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2109031, rhbz#2109033


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.20.4-20
changelog:
  - CVE fix for: CVE-2022-4283 (#2151800), CVE-2022-46340 (#2151775),
    CVE-2022-46341 (#2151780), CVE-2022-46342 (#2151787),
    CVE-2022-46343 (#2151790), CVE-2022-46344 (#2151797)


author: Adam Jackson <ajax@redhat.com> 7.7-1
changelog:
  - rgb 1.0.5
  - xsessreg 1.0.8
  - xgamma 1.0.5
  - xhost 1.0.5
  - xmodmap 1.0.7
  - xsetroot 1.1.1
  - xstdcmap 1.0.3


author: Peter Hutterer <peter.hutterer@redhat.com> 7.5-12
changelog:
  - Update sources for latest tarballs, some changes got lost before the commit
  - require gettext-devel for AM_ICONV (now required by xwininfo)


author: Adam Jackson <ajax@redhat.com> - 7.5-21
changelog:
  - Sync with F25: xdpyinfo 1.3.2, xev 1.2.2, xlsatoms 1.1.2, xlsclients 1.1.3,
    xlsfonts 1.0.5, xvinfo 1.1.3


author: Kevin Fenzi <kevin@scrye.com> 1.3.2-7
changelog:
  - Add patch to not switch tty's, so systemd-logind works right with startx. 
  - Partially Fixes bug #806491


author: Hans de Goede <hdegoede@redhat.com> - 1.3.2-14
changelog:
  - Xclients: only try to start gnome classic session if installed
  - Resolves: rhbz#1078948
  - startx: Only specify vt argument automatically when run from a vt
  - Resolves: rhbz#1083188


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-1
changelog:
  - xinit 1.3.4
  - Drop xorg-x11-xinit-1.3.2-systemd-logind.patch (included upstream in 1.3.4)
  - Add patches from Fedora to fix automatically finding a free display-number
  - Resolves: rhbz#1194894


author: Peter Hutterer <peter.hutterer@redhat.com> 7.7-4
changelog:
  - xkbcomp: Fix generation of XKB directory listing, missing reset on file
    handler caused parse errors and incomplete directory listings


author: Pavel Cahyna <pcahyna@redhat.com> - 1.4.8-3
changelog:
  - Disable libjte to make the build more similar to the libisofs builds
  - Remove unneeded files from sources


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.12.3-1
changelog:
  - update to 0.12.3
  - drop upstreamed immodule patch
  - rewrite Net/ThemeName handling: set it based on .gtkrc-2.0-kde4 (kcm-gtk)


author: Tianyue Lan <tianyue.lan@oracle.com> - 24.5.0-1.0.1
changelog:
  - Replaced xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js
  - Removed XULRUNNER_VERSION from SOURCE21


author: Pavel Raiskup <praiskup@redhat.com> - 5.1.2-5alpha
changelog:
  - fix manual page inconsistencies with help output (private #948533)
  - enable/fix the 'xzgrep -h' (private #850898)


author: Daniel P. Berrange <berrange@redhat.com> - 2.0.4-1
changelog:
  - Update to 2.0.4 release (rhbz #845777)
  - Fix License tag to reflect change in 2.0.0 series from BSD to ISC


author: Kalev Lember <kalevlember@gmail.com> - 1:3.8.1-3
changelog:
  - Make yelp-libs dep arch-specific, thanks to Michael Schwendt (#967180)
  - Don't create empty /usr/share/gnome/help directory: this should be owned by
    individual packages that install files in there (#964421)
  - Use configure --disable-static instead of removing the static .a afterwards


author: Honza Horak <hhorak@redhat.com> - 2.12-9
changelog:
  - Do not check old passwords using passwd.adjunct feature
  - Patch from Paul Wouters to handle crypt() returning NULL
    Resolves: #814803


author: Honza Horak <hhorak@redhat.com> - 3:1.37.1-5
changelog:
  - Remove SysV init conversion and systemd macros compatible code
  - Require systemd instead systemd-units
  - Remove systemd-sysv


author: Honza Horak <hhorak@redhat.com> - 2.31-4
changelog:
  - Remove systemd-units and systemd-sysv requirements
  - Clean-up SysV init conversion code
  - Clean-up systemd preset macros compatibility code
  - Remove fedora-releated stuff for maps upgrading


author: Matej Mužila <mmuzila@redhat.com> - 2.31-9
changelog:
  - Do not update NIS map when master's version is older
  - Open correct _temporary_ db with tokyocabinet
  - Resolves #1305137, #1331882


author: Kalev Lember <kalevlember@gmail.com> - 3.4.0-1
changelog:
  - Update to 3.4.0
  - Don't run autoreconf and intltoolize in the spec file; the tarball should be
    good enough


author: Karel Klic <kklic@redhat.com> - 3.0-1
changelog:
  - New upstream version
  - Removed zip23.patch, because ZMEM is not used anyway
  - Removed zip-2.31-install.patch, problem solved in upstream
  - Removed zip23-umask.patch, upstream uses mkstemp which solves the problem
  - Removed zip-2.31-near-4GB.patch, because upstream version
    handles large files well
  - Removed zip-2.31-configure.patch, configure is better in the current version
  - Removed zip-2.3-sf.patch, the error message doesn't exist in upstream anymore
  - Removed zip-2.31-umask_mode.patch, which fixes also removed near-4GB patch
  - Updated zip-2.31-time.patch for zip 3.0
  - Updated exec-shield.patch for zip 3.0
  - Updated zip-2.3-currdir.patch for zip 3.0


author: Peter Schiffer <pschiffe@redhat.com> - 1.2.7-7
changelog:
  - resolves: #844791
    rank Z_BLOCK flush below Z_PARTIAL_FLUSH only when last flush was Z_BLOCK
  - done some minor .spec file cleanup


author: Peter Schiffer <pschiffe@redhat.com> - 1.2.7-8
changelog:
  - related: #832545
    reverted changes for this bug, static libraries shouldn't be compiled with
    -fPIC flag


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.7-21
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: James Antill <james@fedoraproject.org> - 5.0.2-7
changelog:
  - Remove unneeded build require on tetex.
  - Resolves: rhbz#1037828
  - Depend on hostname package instead of /bin/hostname.


author: Kamil Dudka <kdudka@redhat.com> - 5.0.2-9
changelog:
  - signal safety when updating global state in execshfunc() (#1163823)
  - make the wait built-in work for already exited processes (#1162198)
  - replace an incorrect comment in /etc/zshenv (#1164312)
  - optimize matching of multiple * in wildcards (#1130418)
  - use heap rather than stack allocation for variable length arrays (#1165118)
  - shell emulation doc addition (#1147545)
  - suppress a warning about closing an already closed file descriptor (#1131191)


author: Kamil Dudka <kdudka@redhat.com> - 5.0.2-14.el7_2.1
changelog:
  - signal-handling related fixes collected from upstream (#1198671)
  - queue signals while processing a job exit (#1291782)
  - fix malloc() signal leak in lexsave() (#1267912)


author: Kamil Dudka <kdudka@redhat.com> - 5.0.2-30
changelog:
  - fix stack-based buffer overflow in utils.c:checkmailpath() (CVE-2018-1100)
  - fix stack-based buffer overflow in gen_matches_files() (CVE-2018-1083)
  - fix stack-based buffer overflow in exec.c:hashcmd() (CVE-2018-1071)
  - avoid crash when copying empty hash table (CVE-2018-7549)
  - fix buffer overrun in xsymlinks (CVE-2017-18206)
  - fix NULL dereference in cd (CVE-2017-18205)
  - fix buffer overflow when scanning very long path for symlinks (CVE-2014-10072)
  - fix buffer overflow for very long fds in >& fd syntax (CVE-2014-10071)


author: Kamil Dudka <kdudka@redhat.com> - 5.0.2-34
changelog:
  - make the chaselinks option work again (#1729997)
  - fix off-by-one error in buffer allocation to avoid stack smashing (#1722486)


author: Kamil Dudka <kdudka@redhat.com> - 5.0.2-7.el7_1.2
changelog:
  - fix SIGSEGV of the syntax check in ksh emulation mode (#1222867)
  - make the wait built-in work for already exited processes (#1162198)
  - optimize matching of multiple * in wildcards (#1130418)


author: Jakub Martisko <jamartis@redhat.com> - 0.13.62-9
changelog:
  - Fix covscan warning
  - "Variable "file" going out of scope leaks the storage it points to."
    has been introduced by the original version of 0001-fix-CVE-2018-7725.patch
  - Related: 1558596


author: Jakub Martisko <jamartis@redhat.com> - 0.13.62-11
changelog:
  - Fix CVE-2018-6541
  - Part of the original patch has already been applied in the past (CVE-2018-7726),
    so the bug should not be reproducible in a way described in the github 
    issue, even without this commit. Applying the rest of the original patch anyway.
  - https://github.com/gdraheim/zziplib/issues/16
  - Related: CVE-2018-6541


