# changelog

author: Jan Friesse <jfriesse@redhat.com> - 1.0-251.3.bfb2f92.git
changelog:
  - Resolves: rhbz#2111669

  - Fix authfile directive handling in booth config file
    (fixes CVE-2022-2553)
  - Add enable-authfile option


author: Jan Friesse <jfriesse@redhat.com> - 1.1-1
changelog:
  - Resolves: RHEL-15268
  - Resolves: RHEL-7029

  - New upstream release (RHEL-15268)
  - Upstream releases should now be released regularly, so convert spec
    to use them instead of git snapshots (RHEL-15268)
  - Fix exit code on grant/revoke command error (RHEL-7029)


author: Jan Friesse <jfriesse@redhat.com> - 1.1-1.1
changelog:
  - Resolves: RHEL-32612

  - attr: Fix reading of server_reply
  - auth: Check result of gcrypt gcry_md_get_algo_dlen (fixes CVE-2024-3049)


author: Jan Friesse <jfriesse@redhat.com> - 1.0-6.ac1d34c.git.5
changelog:
  - Remove net-tools (netstat) dependency and replace it with iproute (ss)
  - Disable running tests during build by default (conditional run_build_tests)


author: Jan Friesse <jfriesse@redhat.com> - 1.0-249.1.977726e.git
changelog:
  - Resolves: rhbz#1961216

  - Do not include unit-test by default
  - Rebase to newest upstream snapshot


author: Jan Friesse <jfriesse@redhat.com> - 1.0-251.2.bfb2f92.git.1
changelog:
  - Resolves: rhbz#2113970

  - Fix authfile directive handling in booth config file
    (fixes CVE-2022-2553)
  - Add enable-authfile option


author: Jan Friesse <jfriesse@redhat.com> - 1.1-2
changelog:
  - Resolves: RHEL-32613

  - attr: Fix reading of server_reply
  - auth: Check result of gcrypt gcry_md_get_algo_dlen (fixes CVE-2024-3049)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.4-1
changelog:
  - Related: rhbz#1948974
  - Resolves: rhbz#1967485

  - New upstream release (rhbz#1948974)
  - stats: fix crash when iterating over deleted keys (rhbz#1967485)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-3
changelog:
  - Resolves: rhbz#2024652
  - Resolves: rhbz#2024657

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2024652)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2024652)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024657)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024657)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-4
changelog:
  - Resolves: rhbz#2070623

  - logrotate: Use copytruncate method by default (rhbz#2070623)
  - merge upstream commit 04362046c4a9d7307feb5b68341d567b7d0b94d6 (rhbz#2070623)


author: Jan Friesse <jfriesse@redhat.com> - 3.0.1-4.1
changelog:
  - Resolves: rhbz#2180244

  - qdevice: Destroy non blocking client on failure (rhbz#2180244)
  - merge upstream commit 4331c7d5650a8bf44c16512419f1954d0ef96df5 (rhbz#2180244)


author: Jan Friesse <jfriesse@redhat.com> - 3.0.2-2
changelog:
  - Resolves: rhbz#2180045

  - qdevice: Destroy non blocking client on failure (rhbz#2180045)
  - merge upstream commit 4331c7d5650a8bf44c16512419f1954d0ef96df5 (rhbz#2180045)


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-33
changelog:
  - fence_virt: add note that reboot-action doesnt power on nodes that
    are powered off
    Resolves: rhbz#2132008


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-36
changelog:
  - fence_virtd: add link to uri examples and uri w/socket path
    example for when VMS are run as non-root user to manpage
    Resolves: rhbz#2138823


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-42
changelog:
  - fencing/fence_wti: add --plug-separator to be able to avoid
    characters that are in node name(s)
    Resolves: rhbz#2152107


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-43
changelog:
  - fence_vmware_soap: set login_timeout lower than default
    pcmk_monitor_timeout (20s) to remove tmp dirs
    Resolves: rhbz#2122944


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-69
changelog:
  - ha-cloud-support: upgrade bundled pyroute2 libs to fix issue in
    gcp-vpc-move-route's stop-action
    Resolves: RHEL-29649


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-70
changelog:
  - fence_aliyun: add credentials file support, filter parameter, and
    optimize log output
    Resolves: RHEL-31488, RHEL-31485, RHEL-31483


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-73
changelog:
  - fence_vmware_rest: detect if the API user has sufficient rights to
    manage the fence device
    Resolves: RHEL-25256


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-76.1
changelog:
  - fence_scsi: preempt clears all devices on the mpath device, so only
    run it for the first device
    Resolves: RHEL-59882


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-45
changelog:
  - fence_aws: add --skip-race-check parameter to allow running outside
    of AWS network
    Resolves: rhbz#2183162


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-55
changelog:
  - bundled dateutil: fix tarfile CVE-2007-4559
    Resolves: rhbz#2217902
  - fence_ipmilan: fix typos in metadata
    Resolves: rhbz#2224267


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-56
changelog:
  - fence_scsi: fix registration handling if ISID conflicts
    Resolves: RHEL-5396
  - bundled certifi: fix CVE-2023-37920
    Resolves: RHEL-9446


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-60
changelog:
  - all agents: update metadata in non-I/O agents to Power or Network
    fencing
    Resolves: RHEL-14030


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-62
changelog:
  - bundled urllib3: fix CVE-2023-45803
    Resolves: RHEL-18139
  - bundled pycryptodome: fix CVE-2023-52323
    Resolves: RHEL-20917
  - bundled jinja2: fix CVE-2024-22195
    Resolves: RHEL-21345


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-16
changelog:
  - fence_openstack: add support for reading config from clouds.yaml
    and openrc
    Resolves: rhbz#2041933, rhbz#2041935


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-76.6
changelog:
  - fence_ibm_vpc: refresh bearer-token if token data is corrupt, and
    avoid edge-case of writing empty token file
    Resolves: RHEL-83487


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-62.1
changelog:
  - ha-cloud-support: upgrade bundled pyroute2 libs to fix issue in
    gcp-vpc-move-route's stop-action
    Resolves: RHEL-29668


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-66
changelog:
  - Add missing licenses to spec-file
    Resolves: RHEL-27929
  - ha-cloud-support: fix aliyun-cli
    Resolves: RHEL-28097


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-55.3
changelog:
  - bundled urllib3: fix CVE-2023-45803
    Resolves: RHEL-21714
  - bundled pycryptodome: fix CVE-2023-52323
    Resolves: RHEL-21722
  - bundled jinja2: fix CVE-2024-22195
    Resolves: RHEL-21736


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-23
changelog:
  - fence_ibm_vpc: remove unused instance parameter and make limit
    optional
    Resolves: rhbz#2081235


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-25
changelog:
  - all agents: unify ssl parameters to avoid having to use --ssl when
    using --ssl-secure/--ssl-insecure for some agents
    Resolves: rhbz#2072420


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-27
changelog:
  - fence_ibm_powervs: add support for proxy, private API servers and
    get token via API key
    Resolves: rhbz#2093216


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-30.1
changelog:
  - fence_ibm_vpc: add token cache support
    Resolves: rhbz#2127878
  - add azure-identity and dependencies
    Resolves: rhbz#2127882


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.20-1
changelog:
  - New upstream release
  - Fix TX/RX stats collections
  - Minor test suite improvements
  - Minor build fixes


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.19-1
changelog:
  - New upstream release
  - Add native support for openssl 3.0 (drop API COMPAT macros).
  - Code cleanup of public APIs. Lots of lines of code moved around, no
    functional changes.
  - Removed kronosnetd unsupported code completely
  - Removed unused poc-code from the source tree
  - Make sure to initialize epoll events structures


author: Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
changelog:
  Rebase to 1.28 for startup and performance fixes
     threads: add config check to match min value with pong timeouts
     rx: allow links to be active faster
     links: fix ping interval and pong timeout value checking
     crypto: Try crypt and decrypt on crypto_init
     tx: Remove expensive memsets
     log: Add a TRACE log level
    Resolves: #RHEL-11787


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Chris Lumens <clumens@redhat.com> - 2.1.5-1
changelog:
  - Rebase on upstream 2.1.5-rc2 release
  - Resolves: rhbz2123727
  - Resolves: rhbz2125337
  - Resolves: rhbz2125344
  - Resolves: rhbz2133546
  - Resolves: rhbz2142683


author: Chris Lumens <clumens@redhat.com> - 2.1.5-4
changelog:
  - Rebase pacemaker on upstream 2.1.5 final release
  - Add support for sync points to attribute daemon
  - Resolves: rhbz2122353


author: Chris Lumens <clumens@redhat.com> - 2.1.5-6
changelog:
  - Backport fix for migration history cleanup causing resource recovery
  - Backport fix for SIGABRT during pacemaker-fenced shutdown
  - Resolves: rhbz2166393
  - Resolves: rhbz2166967


author: Chris Lumens <clumens@redhat.com> - 2.1.5-7
changelog:
  - Additional fixes for SIGABRT during pacemaker-fenced shutdown
  - Backport fix for attrd_updater -QA not displaying all nodes
  - Related: rhbz2166967
  - Resolves: rhbz2169829


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Use systemd-sysusers to create user/group
  - Pacemaker Remote nodes can validate against later schema versions
  - Related: RHEL-17225
  - Resolves: RHEL-7665


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7665
  - Related: RHEL-13216
  - Resolves: RHEL-7702


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-13216
  - Resolves: RHEL-17225
  - Resolves: RHEL-23498


author: Chris Lumens <clumens@redhat.com> - 2.1.8-1
changelog:
  - Rebase on upstream 2.1.8-rc1 release
  - Fix a typo in the help output of pacemaker-fenced
  - Fix escaping characters in XML attribute output
  - Resolves: RHEL-25819
  - Resolves: RHEL-30822


author: Chris Lumens <clumens@redhat.com> - 2.1.8-2
changelog:
  - Rebase on upstream 2.1.8-rc4 release
  - Add ability to immediately shutdown system with PCMK_panic_action=
  - Fix a memory leak in the attribute daemon
  - Add ability to list options and parameters as parseable metadata
  - crm_verify now reports invalid fence level indexes
  - Fix an error in node ID handling in `crm_node -i`
  - Fix regression in attrd_updater output
  - Resolves: RHEL-39057
  - Resolves: RHEL-40117
  - Resolves: RHEL-23401
  - Resolves: RHEL-2996
  - Resolves: RHEL-47249
  - Resolves: RHEL-45935


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-9
changelog:
  - Fix watchdog agent version information
  - Ensure transient attributes are cleared when multiple nodes are lost
  - Resolves: rhbz1988568
  - Resolves: rhbz1989292


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-2
changelog:
  - Correctly get metadata for systemd agent names that end in '@'
  - Use correct OCF 1.1 syntax in ocf:pacemaker:Stateful meta-data
  - Fix regression in displayed times in crm_mon's fence history
  - Resolves: rhbz2032031
  - Resolves: rhbz2032032
  - Resolves: rhbz2031765


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-3
changelog:
  - Detect an unresponsive subdaemon
  - Handle certain probe failures as stopped instead of failed
  - Update pcmk_delay_base option meta-data
  - Avoid crash when using clone notifications
  - Retry Corosync shutdown tracking if first attempt fails
  - Improve display of failed actions
  - Resolves: rhbz1707851
  - Resolves: rhbz2039982
  - Resolves: rhbz2032032
  - Resolves: rhbz2040443
  - Resolves: rhbz2042367
  - Resolves: rhbz2042546


author: Chris Lumens <clumens@redhat.com> - 2.1.6-4
changelog:
  - Fix moving groups when there's a constraint for a single group member
  - Resolves: rhbz2218218
  - Resolves: rhbz2189301


author: Chris Lumens <clumens@redhat.com> - 2.1.6-5
changelog:
  - Clone instances should not shuffle unnecessarily
  - Fix a bug in clone resource description display
  - Resolves: rhbz2222055
  - Related: rhbz2189301


author: Chris Lumens <clumens@redhat.com> - 2.1.6-6
changelog:
  - Apply dampening when creating attributes with attrd_updater -U
  - Resolves: rhbz2224051
  - Related: rhbz2189301


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-6
changelog:
  - Avoid selecting wrong device when dynamic-list fencing is used with host map
  - Show better error messages in crm_resource with invalid resource types
  - Do not schedule probes of unmanaged resources on pending nodes
  - Fix regressions in crm_attribute and crm_master argument handling
  - Resolves: rhbz1978013
  - Resolves: rhbz1983196
  - Resolves: rhbz1983197
  - Resolves: rhbz1984130


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.3-1
changelog:
  - Unable to show metadata for "service" agents with "@" and "." in the name
  - Resource ocf:pacemaker:attribute does not comply with the OCF 1.1 standard
  - Pacemaker does not convert & to &amp; when generating metadata for non-ocf agents
  - Rebase pacemaker on upstream 2.1.3 release
  - Resolves: rhbz2045110
  - Resolves: rhbz2049720
  - Resolves: rhbz2050259
  - Resolves: rhbz2072108


author: Chris Lumens <clumens@redhat.com> - 2.1.4-5.1
changelog:
  - Fix regression where reordered resources do not get moved
  - Execute resource metadata actions asynchronously
  - Resolves: rhbz2128035
  - Resolves: rhbz2128036


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.5-8
changelog:
  - Fix overall timeout calculation if watchdog and another fencing
    device share a topology level
  - Resolves: rhbz2187424


author: Chris Lumens <clumens@redhat.com> - 2.1.5-9.1
changelog:
  - Apply dampening when creating attributes with attrd_updater -U
  - Wait for a reply from various controller commands
  - Resolves: rhbz2224071
  - Resolves: rhbz2225671


author: Miroslav Lisik <mlisik@redhat.com> - 0.11.0.alpha.1-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Updated pcs web ui
  - Resolves: rhbz#1283805 rhbz#1910644 rhbz#1910645 rhbz#1985981 rhbz#1991957 rhbz#1996067


author: Miroslav Lisik <mlisik@redhat.com> - 0.11.1-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1283805 rhbz#1910644 rhbz#1910645  rhbz#1956703 rhbz#1956706 rhbz#1985981 rhbz#1991957 rhbz#1996062 rhbz#1996067


author: Miroslav Lisik <mlisik@redhat.com> - 0.11.1-4
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Updated pcs web ui
  - Enabled wui patching
  - Resolves: rhbz#1811072 rhbz#1945305 rhbz#1997019 rhbz#2012129


author: Miroslav Lisik <mlisik@redhat.com> - 0.11.1-5
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1990787 rhbz#2018969 rhbz#2019836 rhbz#2023752 rhbz#2012129


author: Miroslav Lisik <mlisik@redhat.com> - 0.11.1-6
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Updated pcs web ui
  - Resolves: rhbz#1990787 rhbz#1997019 rhbz#2012129 rhbz#2024542 rhbz#2027678 rhbz#2027679


author: Miroslav Lisik <mlisik@redhat.com> - 0.11.1-7
changelog:
  - Fixed enabling corosync-qdevice
  - Fixed resource update command when unable to get agent metadata
  - Fixed revert of disallowing to clone a group with a stonith
  - Resolves: rhbz#1811072 rhbz#2019836 rhbz#2032473


author: Miroslav Lisik <mlisik@redhat.com> - 0.11.1-8
changelog:
  - Fixed 'pcs resource move' command
  - Fixed removing of unavailable fence-scsi storage device
  - Fixed ocf validation of ocf linbit drdb agent
  - Fixed creating empty cib
  - Updated pcs-web-ui
  - Resolves: rhbz#1990787 rhbz#2033248 rhbz#2039883 rhbz#2040420


author: Miroslav Lisik <mlisik@redhat.com> - 0.11.1-10
changelog:
  - Fixed snmp client
  - Fixed translating resource roles in colocation constraint
  - Resolves: rhbz#2048640


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.4-3
changelog:
  - Allow time values in stonith-watchdog-time property
  - Resource/stonith agent self-validation of instance attributes is now disabled by default, as many agents do not work with it properly.
  - Updated bundled rubygems: rack, rack-protection, sinatra
  - Added license for ruby2_keywords
  - Resolves: rhbz#2158790 rhbz#2159454


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.4-6
changelog:
  - Fixed broken filtering in create resource/fence device wizards in the web interface
  - Added BuildRequires: pam - needed for tier0 tests during build
  - Resolves: rhbz#2167471


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.4-7
changelog:
  - Fix displaying differences between configuration checkpoints in “pcs config checkpoint diff” command
  - Fix “pcs stonith update-scsi-devices” command which was broken since Pacemaker-2.1.5-rc1
  - Fixed loading of cluster status in the web interface when fencing levels are configured
  - Fixed a vulnerability in pcs-web-ui-node-modules
  - Updated bundled rubygem rack
  - Resolves: rhbz#2179901 rhbz#2180697 rhbz#2180704 rhbz#2180708 rhbz#2180978 rhbz#2183180


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.5-1
changelog:
  - Rebased to the latest upstream sources (see CHANGELOG.md)
  - Updated pcs-web-ui
  - Updated bundled dependencies: tornado, dacite
  - Added bundled rubygems: nio4r, puma
  - Removed bundled rubygems: daemons, eventmachine, thin, webrick
  - Updated bundled rubygems: backports, rack, rack-protection, rack-test, sinatra, tilt
  - Added dependency nss-tools - for working with qdevice certificates
  - Resolves: rhbz#1423473 rhbz#1860626 rhbz#2160664 rhbz#2163440 rhbz#2163914 rhbz#2163953 rhbz#2168155 rhbz#2168617 rhbz#2174735 rhbz#2174829 rhbz#2175881 rhbz#2177996 rhbz#2178701 rhbz#2178714 rhbz#2179902 rhbz#2180379 rhbz#2182810


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.5-2
changelog:
  - Fixed a regression causing crash in `pcs resource move` command (broken since pcs-0.11.5)
  - Resolves: rhbz#2210855


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.6-1
changelog:
  - Rebased to the latest upstream sources (see CHANGELOG.md)
  - Updated bundled rubygems: puma, tilt
  - Resolves: rhbz#1465829 rhbz#2163440 rhbz#2168155


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.6-2
changelog:
  - Added BuildRequires: debugedit - for generating MiniDebugInfo - triggered by removing find-debuginfo.sh from rpm
  - Make use of filters when extracting tarballs to enhance security if provided by Python (pcs config restore command)
  - Exporting constraints with rules in form of pcs commands now escapes # and fixes spaces in dates to make the commands valid
  - Constraints containing options unsupported by pcs are not exported and a warning is printed instead
  - Using spaces in dates in location constraint rules is deprecated
  - Resolves: rhbz#2163953 rhbz#2216434 rhbz#2217850 rhbz#2219407


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.6-3
changelog:
  - Refreshing any page in pcs-web-ui no longer causes it to display a blank page
  - Resolves: rhbz#2222788


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.6-6
changelog:
  - Rebased to the latest upstream sources (see CHANGELOG.md)
    Resolves: RHEL-7582, RHEL-7583, RHEL-7669, RHEL-7672, RHEL-7697, RHEL-7698, RHEL-7700, RHEL-7703, RHEL-7719, RHEL-7725, RHEL-7730, RHEL-7738, RHEL-7739, RHEL-7740, RHEL-7744, RHEL-7746
  - TLS cipher setting in pcsd now follows system-wide crypto policies by default
    Resolves: RHEL-7724
  - Tightened permissions of bundled rubygems to be 755 or stricter
    Resolves: RHEL-7716


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.7-2
changelog:
  - Fixed CVE-2024-25126, CVE-2024-26141, CVE-2024-26146 in bundled dependency rack
    Resolves: RHEL-26446, RHEL-26448, RHEL-26450


author: Miroslav Lisik <mlisik@redhat.com> - 0.11.3-3
changelog:
  - Fixed booth ticket mode value case insensitive
  - Fixed booth sync check whether /etc/booth exists
  - Resolves: rhbz#2026725 rhbz#2058243


author: Miroslav Lisik <mlisik@redhat.com> - 0.11.3-5
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Updated pcs-web-ui
  - Added bundled rubygem: childprocess
  - Removed bundled rubygem: open4
  - Updated bundled rubygems: mustermann, rack, rack-protection, rack-test, sinatra, tilt
  - Resolves: rhbz#1493416 rhbz#1796827 rhbz#2059147 rhbz#2092950 rhbz#2112079 rhbz#2112270 rhbz#2112293 rhbz#2117599 rhbz#2117601


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.4-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Updated pcs-web-ui
  - Resolves: rhbz#1620043 rhbz#2019464 rhbz#2099653 rhbz#2109633 rhbz#2112293 rhbz#2116295 rhbz#2117600 rhbz#2117601


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.4-2
changelog:
  - Fixed stopping of pcsd service using systemctl stop pcsd command
  - Fixed smoke test execution during gating
  - Added warning when omitting validation of misconfigured resource
  - Fixed displaying of bool and integer values in `pcs resource config` command
  - Updated bundled rubygems: ethon, rack-protection, sinatra
  - Resolves: rhbz#2148124 rhbz#2151164 rhbz#2151524


author: Miroslav Lisik <mlisik@redhat.com> - 0.11.2-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Updated pcs-web-ui
  - Updated bundled rubygems: backports, daemons, ethon ffi, ruby2_keywords, thin
  - Stopped bundling rubygem-rexml (use distribution package instead)
  - Resolves: rhbz#1301204 rhbz#2024522 rhbz#2026725 rhbz#2029844 rhbz#2039884 rhbz#2053177 rhbz#2054671 rhbz#2058243 rhbz#2058246 rhbz#2058247 rhbz#2058251 rhbz#2058252 rhbz#2059142 rhbz#2059145 rhbz#2059148 rhbz#2059149 rhbz#2059501 rhbz#2064818 rhbz#2068457 rhbz#2076585


author: Miroslav Lisik <mlisik@redhat.com> - 0.11.3-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Updated pcs-web-ui
  - Updated bundled rubygems: rack
  - Resolves: rhbz#2059122 rhbz#2059177 rhbz#2059501 rhbz#2095695 rhbz#2096886 rhbz#2097730 rhbz#2097731 rhbz#2097732 rhbz#2097733 rhbz#2097778


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.3-4.el9_1.1
changelog:
  - Fixed displaying of bool and integer values in `pcs resource config` command
  - Resolves: rhbz#2151575


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.3-4.el9_1.2
changelog:
  - Updated bundled rubygems: mustermann, rack, rack_protection, sinatra, tilt
  - Added license for rubygem ruby2_keywords
  - Resolves: rhbz#2159426


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.7-3
changelog:
  - Rebased to the latest sources (see CHANGELOG.md)
    Resolves: RHEL-2977, RHEL-16231, RHEL-21051, RHEL-25854, RHEL-27492, RHEL-28749, RHEL-34781, RHEL-36514
  - Updated pcs-web-ui to 0.1.19
    Resolves: RHEL-7726, RHEL-21895, RHEL-21896, RHEL-21897
  - Updated bundled rubygems: backports, childprocess, nio4r, puma, rack, rack-protection, sinatra
  - Bundled new rubygems: base64, rack-session, rackup, webrick


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.7-4
changelog:
  - Rebased to the latest sources (see CHANGELOG.md)
    Resolves: RHEL-7701, RHEL-7737, RHEL-17962, RHEL-34781
  - Fixed grammatical error in pcs-web-ui
    Resolves: RHEL-7726


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.8-1
changelog:
  - Updated pcs-web-ui to 0.1.20
  - Rebased to the latest sources (see CHANGELOG.md)
    Resolves: RHEL-34781


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.8-1.el9_5.2
changelog:
  - New runtime dependency python3-tornado which has been bundled in previous versions
    Resolves: RHEL-81919


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-42
changelog:
  - Delay: increase stop, status and monitor timeouts to 40s to avoid
    failing with default values

    Resolves: rhbz#2209433


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-43
changelog:
  - Filesystem: improve stop-action and allow setting term/kill signals
    and signal_delay for large filesystems

    Resolves: rhbz#2207567


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-49
changelog:
  - aws-vpc-move-ip/aws-vpc-route53/awseip/awsvip: add auth_type parameter
    and AWS Policy based authentication type

    Resolves: RHEL-16247


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-51
changelog:
  - storage_mon/findif: fix handler out of scope leak, unitialized value
    and check that netmaskbits != EOS

    Resolves: RHEL-17072


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-52.2
changelog:
  - galera: fix issue where joiner promotion fails is the node reports
    being in non-primary state

    Resolves: RHEL-31791


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-52.4
changelog:
  - AWS agents: retry failed metadata requests to avoid instantly
    failing when there is a hiccup in the network or metadata service

    Resolves: RHEL-34146


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.8.0-12
changelog:
  - Create cloud subpackage
  - Add nova-compute-wait/NovaEvacuate
  - nfsserver: fix nfs-convert issue

    Resolves: rhbz#1997548, rhbz#1997576, rhbz#1991855


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-2
changelog:
  - Rebase to resource-agents 4.9.0 upstream release.
  - Add "which" dependency
  - All agents: set correct agent and OCF version in metadata

    Resolves: rhbz#1995918
    Resolves: rhbz#2011142
    Resolves: rhbz#2003118


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-1
changelog:
  - Rebase to resource-agents 4.10.0 upstream release.
  - nfsserver: add nfs_server_scope parameter

    Resolves: rhbz#1995918
    Resolves: rhbz#2015171


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-4
changelog:
  - Route: return OCF_NOT_RUNNING for probe action when interface
    or route doesnt exist

    Resolves: rhbz#2029796


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-9
changelog:
  - IPsrcaddr: add warning about possible issues when used with DHCP,
    and add error message when matching route not found

    Resolves: rhbz#2055016


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-10
changelog:
  - corosync-qnetd: new resource agent
  - spec: remove Samba/CIFS dependency

    Resolves: rhbz#2069270
    Resolves: rhbz#1826455


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-11
changelog:
  - LVM-activate: use correct return code to fence failed node
  - IPaddr2: enable more control for IPv6 addresses

    Resolves: rhbz#2065125
    Resolves: rhbz#2065138


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-12
changelog:
  - Filesystem: fix UUID/label device support when there's whitespace
    between parameter and UUID/label

    Resolves: rhbz#2072371


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-17
changelog:
  - lvmlockd: fail when use_lvmlockd has not been set
  - aws-vpc-move-ip: add interface label support

    Resolves: rhbz#2094828
    Resolves: rhbz#2093213


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-20
changelog:
  - openstack-cinder-volume/openstack-floating-ip/openstack-info/
    openstack-virtual-ip: new resource agents

    Resolves: rhbz#2083081, rhbz#2083086, rhbz#2083090, rhbz#2083092


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-23
changelog:
  - ethmonitor/pgsql: remove attrd_updater "-q" parameter to solve issue
    with Pacemaker 2.1.3+ not ignoring it

    Resolves: rhbz#2110452


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-24
changelog:
  - storage_mon: fix specified scores count and possible false negatives
  - LVM-activate: use correct return codes to fix unexpected behaviour
  - azure-events-az: new resource agent

    Resolves: rhbz#2109161
    Resolves: rhbz#2102126
    Resolves: rhbz#2111147


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-27
changelog:
  - nfsserver: add nfsv4_only parameter to make it run without
    rpc-statd/rpcbind services

    Resolves: rhbz#2127121


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-28
changelog:
  - mysql-common: return error in stop-action if kill fails to stop
    the process, so the node can get fenced

    Resolves: rhbz#2145260


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-34
changelog:
  - all agents: dont check notify/promotable settings during
    validate-action

    Resolves: rhbz#2157872


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-35
changelog:
  - lvmlockd: add "use_lvmlockd = 1" if it's commented out or missing
  - ethmonitor: dont log "Interface does not exist" for monitor-action

    Resolves: rhbz#2149968
    Resolves: rhbz#2174896


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-37
changelog:
  - azure-events*: fix for no "Transition Summary" for Pacemaker 2.1+
  - Filesystem: fail if AWS efs-utils not installed when fstype=efs

    Resolves: rhbz#2182415
    Resolves: rhbz#2183133


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-38
changelog:
  - resource-agents-paf: add perl-lib dependency
  - Filesystem: create systemd drop-in for network filesystems

    Resolves: rhbz#2203813
    Resolves: rhbz#2184779


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-54
changelog:
  - galera: fix issue where joiner promotion fails is the node reports
    being in non-primary state

    Resolves: RHEL-31763


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-56
changelog:
  - AWS agents: retry failed metadata requests to avoid instantly
    failing when there is a hiccup in the network or metadata service

    Resolves: RHEL-16246


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-57
changelog:
  - Filesystem: fail when incorrect device mounted on mountpoint, and
    dont unmount the mountpoint in this case, or if mountpoint set to "/"

    Resolves: RHEL-34777


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-58
changelog:
  - Filesystem: dont kill unrelated processes during stop-action
  - db2: fix OCF_SUCESS typo

    Resolves: RHEL-40393
    Resolves: RHEL-32829


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-59
changelog:
  - Filesystem: fail when leading or trailing whitespace is present in
    device or directory parameters

    Resolves: RHEL-24683


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-61
changelog:
  - LVM-activate: fail when both "system_id_source" and "volume_list"
    are set in lvm.conf to avoid false positive activation of the VG

    Resolves: RHEL-22715


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-1
changelog:
  - Rebase to upstream v1.4.2
  - Conflict with pacemaker that doesn't have pacemakerd-api
  - Set default to not do startup/shutdown-syncing via pacemakerd-api
    but enable in template-config


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-2
changelog:
  - remove deprecated dist.depcheck from gating
  - add tier0 to push_stable to have rawhide gated as well


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - properly conflict with pacemaker not providing sync-default we need
    Resolves: rhbz#1979961
    Resolves: rhbz#1979573


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.1-2
changelog:
  - obviously autoconf is defining runstatedir - but with a
    wrong default - directly hand it over to configure
    and skip --with-runstatedir implemented in configure.ac
    for older versions of autoconf

    Resolves: rhbz#2011707


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management

    Resolves: rhbz#2168579


author: Jan Friesse <jfriesse@redhat.com> - 20210520-1
changelog:
  - Resolves: rhbz#1962501

  - New upstream release
  - Support for cgroup v2
  - Document cgroup v2 problems


author: Jan Friesse <jfriesse@redhat.com> - 20210719-1
changelog:
  - Related: rhbz#1962501

  - New upstream release
  - Add mode option for moving to root cgroup functionality


author: Chris Lumens <clumens@redhat.com> - 2.1.9-1
changelog:
  - Rebase on upstream 2.1.9 final release
  - Use async communication to establish TLS connections
  - Fix regression in adding alerts to CIB
  - Fix a crash in command line tools when stderr is closed
  - Resolves: RHEL-61382
  - Resolves: RHEL-34276
  - Resolves: RHEL-55458
  - Resolves: RHEL-59043


author: Chris Lumens <clumens@redhat.com> - 2.1.10-1
changelog:
  - Rebase on upstream 2.1.10-rc1 release
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Related: RHEL-89134
  - Resolves: RHEL-86143
  - Resolves: RHEL-84018


author: Chris Lumens <clumens@redhat.com> - 2.1.9-1.1
changelog:
  - Use dbus signalling for systemd resource start/stop
  - Add an option to disable default remote node fencing behavior
  - Resolves: RHEL-92505
  - Resolves: RHEL-92513


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.8-2
changelog:
  - Rebased to the latest sources (see CHANGELOG.md)
    Resolves: RHEL-16232, RHEL-46284, RHEL-46286, RHEL-46293, RHEL-55441, RHEL-61738, RHEL-61901
  - Updated pcs-web-ui to 0.1.21
  - Updated bundled rubygems: ffi, mustermann, puma, rack, rackup, tilt
  - Removed bundled rubygem webrick
  - New runtime dependency python3-tornado which has been bundled in previous versions


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.8-2
changelog:
  - Rebased pcs to the latest sources (see CHANGELOG.md)
    Resolves: RHEL-46303, RHEL-69040
  - Rebased pcs-web-ui to the latest sources
    Resolves: RHEL-69272, RHEL-69278, RHEL-69279, RHEL-69280, RHEL-69281, RHEL-69282


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.9-1
changelog:
  - Rebased pcs to the latest sources (see CHANGELOG.md)
    Resolves: RHEL-44420
  - Updated pcs-web-ui to 0.1.22


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.9-2
changelog:
  - Fixed restarting bundles
    Resolves: RHEL-79055
  - Fixed deletion of misconfigured bundles
    Resolves: RHEL-79160
  - Fixed filtering of resource clones in web console
    Resolves: RHEL-78653
  - Updated bundled rubygem rack
    Resolves: RHEL-79500


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.9-3
changelog:
  - Rebased pcs to the latest sources (see CHANGELOG.md)
    Resolves: RHEL-35420, RHEL-76055, RHEL-76059, RHEL-76060, RHEL-76153, RHEL-76154, RHEL-76170, RHEL-76177, RHEL-82894
  - Rebased pcs-web-ui to the latest sources
    Resolves: RHEL-76310, RHEL-76311, RHEL-76312, RHEL-79317, RHEL-85196, RHEL-85197, RHEL-85745
  - The upstream version of pcs-web-ui can now be queried through RPM - see bundled(pcs-web-ui)
    Resolves: RHEL-86229
  - Updated bundled rubygems: backports, childprocess, ffi, puma, rack, rack-protection, rack-session, rack-test, sinatra, tilt
    Resolves: RHEL-90151
  - Bundled rubygem logger


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.10-1
changelog:
  - Rebased pcs to the latest sources (see CHANGELOG.md)
    Resolves: RHEL-77194, RHEL-92044
  - Updated pcs-web-ui to 0.1.23 (see CHANGELOG_WUI.md)
    Resolves: RHEL-76309, RHEL-99805
  - There is now a changelog for the pcsd web UI
    Resolves: RHEL-86233
  - Fixed directory permissions for RHEL Image Mode
    Resolves: RHEL-97220
  - Updated bundled rubygem rack


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.9-2.el9_6.1
changelog:
  - Fixed CVE-2025-46727 by updating bundled rubygem rack
    Resolves: RHEL-90153
  - Fixed a regression in resource/stonith delete, booth delete, status query resource and remote node removal commands which failed when target-role was improperly capitalized
    Resolves: RHEL-92551


author: Michal Pospisil <mpospisi@redhat.com> - 0.11.9-2.el9_6.2
changelog:
  - Fixed CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919 by updating bundled rubygem rack
    Resolves: RHEL-120943, RHEL-121036, RHEL-123631, RHEL-123644, RHEL-124942


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-65
changelog:
  - Filesystem: dont sleep during stop-action when there are no
    processes to kill, and only use force argument for network
    filesystems after sending kill_signals
  - Filesystem: try umount first during stop-action, and avoid potential
    "Argument list too long" for force_unmount=safe
  - AWS agents: use awscli2

    Resolves: RHEL-58038
    Resolves: RHEL-59576
    Resolves: RHEL-46233


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-66
changelog:
  - nfsserver: also stop rpc-statd for nfsv4_only to avoid stop failing
    in some cases
  - podman: force-remove containers in stopping state if necessary

    Resolves: RHEL-59172
    Resolves: RHEL-58008


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-67
changelog:
  - ocf-shellfuncs: only create/update and reload systemd drop-in if
    needed
  - IPaddr2: improve fail logic and check ip_status after adding IP
  - azure-events-az: update API versions, and add retry functionality
    for metadata requests
  - azure-events*: use node name from cluster instead of hostname to
    avoid failing if they're not the same

    Resolves: RHEL-61888
    Resolves: RHEL-62200
    Resolves: RHEL-40589
    Resolves: RHEL-58632


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-69
changelog:
  - AWS agents: reuse IMDS token until it expires
  - awsvip: add interface parameter

    Resolves: RHEL-66292
    Resolves: RHEL-68739


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-71.7
changelog:
  - podman-etcd: add oom parameter to be able to tune the Out-Of-Memory (OOM)
    score for etcd containers

    Resolves: RHEL-113108


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-71.8
changelog:
  - podman-etcd: wrap ipv6 address in brackets
  - podman-etcd: preserve containers for debugging
  - podman-etcd: add cluster-wide force_new_cluster attribute check

    Resolves: RHEL-113813, RHEL-113810, RHEL-116208


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-72
changelog:
  - tomcat: fix CATALINA_PID not set, and catalina_base and catalina_out
    parameter defaults

    Resolves: RHEL-85056


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-73
changelog:
  - storage-mon: fix daemon mode bug that caused delayed initial score
  - portblock: fix iptables version detection

    Resolves: RHEL-76038, RHEL-79819


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-77
changelog:
  - IPaddr2/IPsrcaddr: fix to avoid duplicate route issues
  - IPaddr2: add link status DOWN/LOWERLAYERDOWN check

    Resolves: RHEL-70044, RHEL-7688


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-80
changelog:
  - ocf-shellfuncs/AWS agents: dont sleep after the final try in
    curl_retry()

    Resolves: RHEL-102727


author: Michal Pospíšil <mpospisi@redhat.com> - 0.11.10-1.el9_7.1
changelog:
  - Fixed CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919 by updating bundled rubygem rack
    Resolves: RHEL-120945, RHEL-121035, RHEL-123630, RHEL-123642, RHEL-124938


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-80.1
changelog:
  - podman-etcd: add oom parameter to be able to tune the Out-Of-Memory (OOM)
    score for etcd containers

    Resolves: RHEL-113109


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-80.2
changelog:
  - podman-etcd: wrap ipv6 address in brackets
  - podman-etcd: preserve containers for debugging
  - podman-etcd: add cluster-wide force_new_cluster attribute check

    Resolves: RHEL-113814, RHEL-113811, RHEL-116209


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-80.6
changelog:
  - db2: add "skip_basic_sql_health_check" parameter to avoid failing on
    systems with high load
  - db2: add "monitor_retries", "monitor_sleep", and "monitor_retry_all_errors"
    parameters to be able to avoid failing on first try
  - db2: use reintegration flag to avoid race condition on cluster
    reintegration
  - podman-etcd: add support for cert rotation
  - podman-etcd: compute dynamic revision bump from maxRaftIndex

    Resolves: RHEL-123284, RHEL-123287, RHEL-123293, RHEL-124202, RHEL-124205


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-80.8
changelog:
  - podman-etcd: add container crash detection with coordinated recovery
  - podman-etcd: prevent last active member from leaving the etcd member
    list

    Resolves: RHEL-126086, RHEL-130579


