Сопровождающий Denis Medvedev в ветке c8: Информация

- new version
- fix build with gcc8

- fixes:
 + CVE-2017-16611 Open files with O_NOFOLLOW

- backport to ALTLinux p8 (by rpmbph script)

- New version.

- mdadm future: try to make problem array writable.

- Sync with Debian 3.20190514.1:
  + New upstream microcode datafile 20190514
  + SECURITY UPDATE
    Implements MDS mitigation (RIDL, Fallout, Zombieload), INTEL-SA-00223
    CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  + New Microcodes:
    sig 0x00030678, pf_mask 0x02, 2019-04-22, rev 0x0838, size 52224
    sig 0x00030678, pf_mask 0x0c, 2019-04-22, rev 0x0838, size 52224
    sig 0x00030679, pf_mask 0x0f, 2019-04-23, rev 0x090c, size 52224
    sig 0x000406c3, pf_mask 0x01, 2019-04-23, rev 0x0368, size 69632
    sig 0x000406c4, pf_mask 0x01, 2019-04-23, rev 0x0411, size 68608
    sig 0x00050657, pf_mask 0xbf, 2019-02-27, rev 0x5000021, size 47104
  + Updated Microcodes:
    sig 0x000206a7, pf_mask 0x12, 2019-02-17, rev 0x002f, size 12288
    sig 0x000306a9, pf_mask 0x12, 2019-02-13, rev 0x0021, size 14336
    sig 0x000306c3, pf_mask 0x32, 2019-02-26, rev 0x0027, size 23552
    sig 0x000306d4, pf_mask 0xc0, 2019-03-07, rev 0x002d, size 19456
    sig 0x000306e4, pf_mask 0xed, 2019-03-14, rev 0x042e, size 16384
    sig 0x000306e7, pf_mask 0xed, 2019-03-14, rev 0x0715, size 17408
    sig 0x000306f2, pf_mask 0x6f, 2019-03-01, rev 0x0043, size 34816
    sig 0x000306f4, pf_mask 0x80, 2019-03-01, rev 0x0014, size 18432
    sig 0x00040651, pf_mask 0x72, 2019-02-26, rev 0x0025, size 21504
    sig 0x00040661, pf_mask 0x32, 2019-02-26, rev 0x001b, size 25600
    sig 0x00040671, pf_mask 0x22, 2019-03-07, rev 0x0020, size 14336
    sig 0x000406e3, pf_mask 0xc0, 2019-04-01, rev 0x00cc, size 100352
    sig 0x000406f1, pf_mask 0xef, 2019-03-02, rev 0xb000036, size 30720
    sig 0x00050654, pf_mask 0xb7, 2019-04-02, rev 0x200005e, size 32768
    sig 0x00050662, pf_mask 0x10, 2019-03-23, rev 0x001a, size 32768
    sig 0x00050663, pf_mask 0x10, 2019-03-23, rev 0x7000017, size 24576
    sig 0x00050664, pf_mask 0x10, 2019-03-23, rev 0xf000015, size 23552
    sig 0x00050665, pf_mask 0x10, 2019-03-23, rev 0xe00000d, size 19456
    sig 0x000506c9, pf_mask 0x03, 2019-01-15, rev 0x0038, size 17408
    sig 0x000506ca, pf_mask 0x03, 2019-03-01, rev 0x0016, size 15360
    sig 0x000506e3, pf_mask 0x36, 2019-04-01, rev 0x00cc, size 100352
    sig 0x000506f1, pf_mask 0x01, 2019-03-21, rev 0x002e, size 11264
    sig 0x000706a1, pf_mask 0x01, 2019-01-02, rev 0x002e, size 73728
    sig 0x000806e9, pf_mask 0x10, 2019-04-01, rev 0x00b4, size 98304
    sig 0x000806e9, pf_mask 0xc0, 2019-04-01, rev 0x00b4, size 99328
    sig 0x000806ea, pf_mask 0xc0, 2019-04-01, rev 0x00b4, size 99328
    sig 0x000806eb, pf_mask 0xd0, 2019-03-30, rev 0x00b8, size 98304
    sig 0x000806ec, pf_mask 0x94, 2019-03-30, rev 0x00b8, size 97280
    sig 0x000906e9, pf_mask 0x2a, 2019-04-01, rev 0x00b4, size 99328
    sig 0x000906ea, pf_mask 0x22, 2019-04-01, rev 0x00b4, size 98304
    sig 0x000906eb, pf_mask 0x02, 2019-04-01, rev 0x00b4, size 99328
    sig 0x000906ec, pf_mask 0x22, 2019-02-14, rev 0x00ae, size 98304
    sig 0x000906ed, pf_mask 0x22, 2019-03-17, rev 0x00b8, size 97280

- 1.13

- 1.13.1

- 7.2.17

- fix changelog
- security fixes: CVE-2018-10933

- rebuild for c8.1

- rebuild with procps 3.3.15

- new version 
- fixes: 
  * CVE-2018-1000120 FTP path trickery leads to NIL byte out of bounds write
  * CVE-2018-1000121 LDAP NULL pointer dereference
  * CVE-2018-1000122  RTSP RTP buffer over-read

- Correction for fix for CVE-2018-15473

- Backport new version with security fixes to c8 branch

- Backport new version to c8 branch.

- Update to release for samba-4.7.0 and samba-4.6.11 with tevent-0.9.34

- New version for samba-4.6.10 and samba-4.7.2

- Rebuild security release (Fixes: CVE-2018-1050, CVE-2018-1057) with old
  ceph version without libceph-common for c7/c8

- Rebuild security release (Fixes: CVE-2018-1050, CVE-2018-1057) with old
  ceph version without libceph-common for c7/c8

- Rebuild with headers from new release of Samba-4.6.14 for p8

- Backport to c8.
(Fixes: CVE-2017-10392,
CVE-2017-10407,
CVE-2017-10408,
CVE-2017-3733,
CVE-2017-10428)

- Build for kernel-image-un-def-4.9.75-alt0.M80C.1.

- Build for kernel-image-std-def-4.4.110-alt0.M80C.1.

- Build for kernel-image-std-def-4.4.110-alt0.M80C.1.

- Build for kernel-image-un-def-4.9.75-alt0.M80C.1.

- integrity check strictly before user login now

- c8 version

- added "Before" to  unit to make it start before DM

- changed wanted to required in unit

- everyone, not everybody in passwdqc

- fixes in passwdqc and smem change code.

- added osec start on boot

- add passwdqc password complexity and smem memory clean to grub.

- two profiles for workstation and server

- backport to c8

- fix bug

- fix shell script bugs

- added automount and autologout

- backport to c8

- enabling new services, added fixed rhosts, switched off MAC stuff in installer

- added fixed rhosts, added dependency to custom settings checker

- Added more space into usr

- to c8

- Updated settings

- step name fixed

Initial release

- fixed syntax error and variables in profile

- changed priorities

- fixed permissions

- backport to c8

- backport to c8

- backport to c8

- backport to c8
- multiple vulnerabilities (so-called KRACK attack) (Fixes:
  + CVE-2017-13077
  + CVE-2017-13078
  + CVE-2017-13079
  + CVE-2017-13080
  + CVE-2017-13081
  + CVE-2017-13082
  + CVE-2017-13086
  + CVE-2017-13087
  + CVE-2017-13088)

- Backport to C8
 (Fixes: CVE-2009-2288, CVE-2011-1523, CVE-2012-6096, CVE-2013-2214,
 CVE-2013-7108, CVE-2013-7205)

- backport to c8
 (Fixes: CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843)

- backport to c8

- Build for kernel-image-un-def-4.9.49-alt0.M80C.1.

- Build for kernel-image-std-def-4.4.86-alt0.M80C.1.

- Build for kernel-image-std-def-4.4.86-alt0.M80C.1.

- Build for kernel-image-un-def-4.9.49-alt0.M80C.1.

- extracted osec-timerunit package

- fix for dependences

- Update to spring release

- for c8

- Build for kernel-image-std-def-4.4.53-alt0.M80C.1.

- Build for kernel-image-un-def-4.9.14-alt0.M80C.1.

- Build for kernel-image-un-def-4.9.14-alt0.M80C.1.

- Build for kernel-image-std-def-4.4.53-alt0.M80C.1.

- fix place of systemd script

- More mature version that checks 3 additional signals.