update to glibc-2.28-151.el8.src.rpm

Signed-off-by: Liwei Ge <geliwei@openanolis.org>
2021-06-16 16:09:23 +08:00 · 2021-06-16 16:09:23 +08:00 · 37da1d0798
commit 37da1d0798
parent ba6a26df65
284 changed files with 62546 additions and 13 deletions
--- a/glibc.spec
+++ b/glibc.spec
@ -1,6 +1,6 @@
 %define glibcsrcdir glibc-2.28
 %define glibcversion 2.28
-%define glibcrelease 101%{?dist}
+%define glibcrelease 151%{?dist}
 # Pre-release tarballs are pulled in from git using a command that is
 # effectively:
 #
@ -72,6 +72,9 @@
 %define buildpower9 0
 %endif

+# RHEL 8 does not have a working %%dnl macro.
+%define comment() %{nil}
+
 ##############################################################################
 # Any architecture/kernel combination that supports running 32-bit and 64-bit
 # code in userspace is considered a biarch arch.
@ -396,6 +399,289 @@ Patch262: glibc-rh1410154-13.patch
 Patch263: glibc-rh1410154-14.patch
 Patch264: glibc-rh1410154-15.patch
 Patch265: glibc-rh1410154-16.patch
+Patch266: glibc-rh1810142-1.patch
+Patch267: glibc-rh1810142-2.patch
+Patch268: glibc-rh1810142-3.patch
+Patch269: glibc-rh1810142-4.patch
+Patch270: glibc-rh1810142-5.patch
+Patch271: glibc-rh1810142-6.patch
+Patch272: glibc-rh1743445-1.patch
+Patch273: glibc-rh1743445-2.patch
+Patch274: glibc-rh1780204-01.patch
+Patch275: glibc-rh1780204-02.patch
+Patch276: glibc-rh1780204-03.patch
+Patch277: glibc-rh1780204-04.patch
+Patch278: glibc-rh1780204-05.patch
+Patch279: glibc-rh1780204-06.patch
+Patch280: glibc-rh1780204-07.patch
+Patch281: glibc-rh1780204-08.patch
+Patch282: glibc-rh1780204-09.patch
+Patch283: glibc-rh1780204-10.patch
+Patch284: glibc-rh1780204-11.patch
+Patch285: glibc-rh1780204-12.patch
+Patch286: glibc-rh1780204-13.patch
+Patch287: glibc-rh1780204-14.patch
+Patch288: glibc-rh1780204-15.patch
+Patch289: glibc-rh1780204-16.patch
+Patch290: glibc-rh1780204-17.patch
+Patch291: glibc-rh1780204-18.patch
+Patch292: glibc-rh1780204-19.patch
+Patch293: glibc-rh1780204-20.patch
+Patch294: glibc-rh1780204-21.patch
+Patch295: glibc-rh1780204-22.patch
+Patch296: glibc-rh1780204-23.patch
+Patch297: glibc-rh1780204-24.patch
+Patch298: glibc-rh1780204-25.patch
+Patch299: glibc-rh1780204-26.patch
+Patch300: glibc-rh1780204-27.patch
+Patch301: glibc-rh1780204-28.patch
+Patch302: glibc-rh1784519.patch
+Patch303: glibc-rh1775819.patch
+Patch304: glibc-rh1774114.patch
+Patch305: glibc-rh1812756-1.patch
+Patch306: glibc-rh1812756-2.patch
+Patch307: glibc-rh1812756-3.patch
+Patch308: glibc-rh1757354.patch
+Patch309: glibc-rh1784520.patch
+Patch310: glibc-rh1784525.patch
+Patch311: glibc-rh1810146.patch
+Patch312: glibc-rh1810223-1.patch
+Patch313: glibc-rh1810223-2.patch
+Patch314: glibc-rh1811796-1.patch
+Patch315: glibc-rh1811796-2.patch
+Patch316: glibc-rh1813398.patch
+Patch317: glibc-rh1813399.patch
+Patch318: glibc-rh1810224-1.patch
+Patch319: glibc-rh1810224-2.patch
+Patch320: glibc-rh1810224-3.patch
+Patch321: glibc-rh1810224-4.patch
+Patch322: glibc-rh1783303-1.patch
+Patch323: glibc-rh1783303-2.patch
+Patch324: glibc-rh1783303-3.patch
+Patch325: glibc-rh1783303-4.patch
+Patch326: glibc-rh1783303-5.patch
+Patch327: glibc-rh1783303-6.patch
+Patch328: glibc-rh1783303-7.patch
+Patch329: glibc-rh1783303-8.patch
+Patch330: glibc-rh1783303-9.patch
+Patch331: glibc-rh1783303-10.patch
+Patch332: glibc-rh1783303-11.patch
+Patch333: glibc-rh1783303-12.patch
+Patch334: glibc-rh1783303-13.patch
+Patch335: glibc-rh1783303-14.patch
+Patch336: glibc-rh1783303-15.patch
+Patch337: glibc-rh1783303-16.patch
+Patch338: glibc-rh1783303-17.patch
+Patch339: glibc-rh1783303-18.patch
+Patch340: glibc-rh1642150-1.patch
+Patch341: glibc-rh1642150-2.patch
+Patch342: glibc-rh1642150-3.patch
+Patch343: glibc-rh1774115.patch
+Patch344: glibc-rh1780204-29.patch
+Patch345: glibc-rh1748197-1.patch
+Patch346: glibc-rh1748197-2.patch
+Patch347: glibc-rh1748197-3.patch
+Patch348: glibc-rh1748197-4.patch
+Patch349: glibc-rh1748197-5.patch
+Patch350: glibc-rh1748197-6.patch
+Patch351: glibc-rh1748197-7.patch
+Patch352: glibc-rh1642150-4.patch
+Patch353: glibc-rh1836867.patch
+Patch354: glibc-rh1821531-1.patch
+Patch355: glibc-rh1821531-2.patch
+Patch356: glibc-rh1845098-1.patch
+Patch357: glibc-rh1845098-2.patch
+Patch358: glibc-rh1845098-3.patch
+Patch359: glibc-rh1871387-1.patch
+Patch360: glibc-rh1871387-2.patch
+Patch361: glibc-rh1871387-3.patch
+Patch362: glibc-rh1871387-4.patch
+Patch363: glibc-rh1871387-5.patch
+Patch364: glibc-rh1871387-6.patch
+Patch365: glibc-rh1871394-1.patch
+Patch366: glibc-rh1871394-2.patch
+Patch367: glibc-rh1871394-3.patch
+Patch368: glibc-rh1871395-1.patch
+Patch369: glibc-rh1871395-2.patch
+Patch370: glibc-rh1871397-1.patch
+Patch371: glibc-rh1871397-2.patch
+Patch372: glibc-rh1871397-3.patch
+Patch373: glibc-rh1871397-4.patch
+Patch374: glibc-rh1871397-5.patch
+Patch375: glibc-rh1871397-6.patch
+Patch376: glibc-rh1871397-7.patch
+Patch377: glibc-rh1871397-8.patch
+Patch378: glibc-rh1871397-9.patch
+Patch379: glibc-rh1871397-10.patch
+Patch380: glibc-rh1871397-11.patch
+Patch381: glibc-rh1880670.patch
+Patch382: glibc-rh1868106-1.patch
+Patch383: glibc-rh1868106-2.patch
+Patch384: glibc-rh1868106-3.patch
+Patch385: glibc-rh1868106-4.patch
+Patch386: glibc-rh1868106-5.patch
+Patch387: glibc-rh1868106-6.patch
+Patch388: glibc-rh1856398.patch
+Patch389: glibc-rh1880670-2.patch
+Patch390: glibc-rh1704868-1.patch
+Patch391: glibc-rh1704868-2.patch
+Patch392: glibc-rh1704868-3.patch
+Patch393: glibc-rh1704868-4.patch
+Patch394: glibc-rh1704868-5.patch
+Patch395: glibc-rh1893662-1.patch
+Patch396: glibc-rh1893662-2.patch
+Patch397: glibc-rh1855790-1.patch
+Patch398: glibc-rh1855790-2.patch
+Patch399: glibc-rh1855790-3.patch
+Patch400: glibc-rh1855790-4.patch
+Patch401: glibc-rh1855790-5.patch
+Patch402: glibc-rh1855790-6.patch
+Patch403: glibc-rh1855790-7.patch
+Patch404: glibc-rh1855790-8.patch
+Patch405: glibc-rh1855790-9.patch
+Patch406: glibc-rh1855790-10.patch
+Patch407: glibc-rh1855790-11.patch
+Patch408: glibc-rh1817513-1.patch
+Patch409: glibc-rh1817513-2.patch
+Patch410: glibc-rh1817513-3.patch
+Patch411: glibc-rh1817513-4.patch
+Patch412: glibc-rh1817513-5.patch
+Patch413: glibc-rh1817513-6.patch
+Patch414: glibc-rh1817513-7.patch
+Patch415: glibc-rh1817513-8.patch
+Patch416: glibc-rh1817513-9.patch
+Patch417: glibc-rh1817513-10.patch
+Patch418: glibc-rh1817513-11.patch
+Patch419: glibc-rh1817513-12.patch
+Patch420: glibc-rh1817513-13.patch
+Patch421: glibc-rh1817513-14.patch
+Patch422: glibc-rh1817513-15.patch
+Patch423: glibc-rh1817513-16.patch
+Patch424: glibc-rh1817513-17.patch
+Patch425: glibc-rh1817513-18.patch
+Patch426: glibc-rh1817513-19.patch
+Patch427: glibc-rh1817513-20.patch
+Patch428: glibc-rh1817513-21.patch
+Patch429: glibc-rh1817513-22.patch
+Patch430: glibc-rh1817513-23.patch
+Patch431: glibc-rh1817513-24.patch
+Patch432: glibc-rh1817513-25.patch
+Patch433: glibc-rh1817513-26.patch
+Patch434: glibc-rh1817513-27.patch
+Patch435: glibc-rh1817513-28.patch
+Patch436: glibc-rh1817513-29.patch
+Patch437: glibc-rh1817513-30.patch
+Patch438: glibc-rh1817513-31.patch
+Patch439: glibc-rh1817513-32.patch
+Patch440: glibc-rh1817513-33.patch
+Patch441: glibc-rh1817513-34.patch
+Patch442: glibc-rh1817513-35.patch
+Patch443: glibc-rh1817513-36.patch
+Patch444: glibc-rh1817513-37.patch
+Patch445: glibc-rh1817513-38.patch
+Patch446: glibc-rh1817513-39.patch
+Patch447: glibc-rh1817513-40.patch
+Patch448: glibc-rh1817513-41.patch
+Patch449: glibc-rh1817513-42.patch
+Patch450: glibc-rh1817513-43.patch
+Patch451: glibc-rh1817513-44.patch
+Patch452: glibc-rh1817513-45.patch
+Patch453: glibc-rh1817513-46.patch
+Patch454: glibc-rh1817513-47.patch
+Patch455: glibc-rh1817513-48.patch
+Patch456: glibc-rh1817513-49.patch
+Patch457: glibc-rh1817513-50.patch
+Patch458: glibc-rh1817513-51.patch
+Patch459: glibc-rh1817513-52.patch
+Patch460: glibc-rh1817513-53.patch
+Patch461: glibc-rh1817513-54.patch
+Patch462: glibc-rh1817513-55.patch
+Patch463: glibc-rh1817513-56.patch
+Patch464: glibc-rh1817513-57.patch
+Patch465: glibc-rh1817513-58.patch
+Patch466: glibc-rh1817513-59.patch
+Patch467: glibc-rh1817513-60.patch
+Patch468: glibc-rh1817513-61.patch
+Patch469: glibc-rh1817513-62.patch
+Patch470: glibc-rh1817513-63.patch
+Patch471: glibc-rh1817513-64.patch
+Patch472: glibc-rh1817513-65.patch
+Patch473: glibc-rh1817513-66.patch
+Patch474: glibc-rh1817513-67.patch
+Patch475: glibc-rh1817513-68.patch
+Patch476: glibc-rh1817513-69.patch
+Patch477: glibc-rh1817513-70.patch
+Patch478: glibc-rh1817513-71.patch
+Patch479: glibc-rh1817513-72.patch
+Patch480: glibc-rh1817513-73.patch
+Patch481: glibc-rh1817513-74.patch
+Patch482: glibc-rh1817513-75.patch
+Patch483: glibc-rh1817513-76.patch
+Patch484: glibc-rh1817513-77.patch
+Patch485: glibc-rh1817513-78.patch
+Patch486: glibc-rh1817513-79.patch
+Patch487: glibc-rh1817513-80.patch
+Patch488: glibc-rh1817513-81.patch
+Patch489: glibc-rh1817513-82.patch
+Patch490: glibc-rh1817513-83.patch
+Patch491: glibc-rh1817513-84.patch
+Patch492: glibc-rh1817513-85.patch
+Patch493: glibc-rh1817513-86.patch
+Patch494: glibc-rh1817513-87.patch
+Patch495: glibc-rh1817513-88.patch
+Patch496: glibc-rh1817513-89.patch
+Patch497: glibc-rh1817513-90.patch
+Patch498: glibc-rh1817513-91.patch
+Patch499: glibc-rh1817513-92.patch
+Patch500: glibc-rh1817513-93.patch
+Patch501: glibc-rh1817513-94.patch
+Patch502: glibc-rh1817513-95.patch
+Patch503: glibc-rh1817513-96.patch
+Patch504: glibc-rh1817513-97.patch
+Patch505: glibc-rh1817513-98.patch
+Patch506: glibc-rh1817513-99.patch
+Patch507: glibc-rh1817513-100.patch
+Patch508: glibc-rh1817513-101.patch
+Patch509: glibc-rh1817513-102.patch
+Patch510: glibc-rh1817513-103.patch
+Patch511: glibc-rh1817513-104.patch
+Patch512: glibc-rh1817513-105.patch
+Patch513: glibc-rh1817513-106.patch
+Patch514: glibc-rh1817513-107.patch
+Patch515: glibc-rh1817513-108.patch
+Patch516: glibc-rh1817513-109.patch
+Patch517: glibc-rh1817513-110.patch
+Patch518: glibc-rh1817513-111.patch
+Patch519: glibc-rh1817513-112.patch
+Patch520: glibc-rh1817513-113.patch
+Patch521: glibc-rh1817513-114.patch
+Patch522: glibc-rh1817513-115.patch
+Patch523: glibc-rh1817513-116.patch
+Patch524: glibc-rh1817513-117.patch
+Patch525: glibc-rh1817513-118.patch
+Patch526: glibc-rh1817513-119.patch
+Patch527: glibc-rh1817513-120.patch
+Patch528: glibc-rh1817513-121.patch
+Patch529: glibc-rh1817513-122.patch
+Patch530: glibc-rh1817513-123.patch
+Patch531: glibc-rh1817513-124.patch
+Patch532: glibc-rh1817513-125.patch
+Patch533: glibc-rh1817513-126.patch
+Patch534: glibc-rh1817513-127.patch
+Patch535: glibc-rh1817513-128.patch
+Patch536: glibc-rh1817513-129.patch
+Patch537: glibc-rh1817513-130.patch
+Patch538: glibc-rh1817513-131.patch
+Patch539: glibc-rh1817513-132.patch
+Patch540: glibc-rh1882466-1.patch
+Patch541: glibc-rh1882466-2.patch
+Patch542: glibc-rh1882466-3.patch
+Patch543: glibc-rh1817513-133.patch
+Patch544: glibc-rh1912544.patch
+Patch545: glibc-rh1918115.patch
+Patch546: glibc-rh1924919.patch
+Patch547: glibc-rh1927040.patch
+Patch548: glibc-rh1685400.patch

 ##############################################################################
 # Continued list of core "glibc" package information:
@ -412,6 +698,13 @@ Provides: bundled(gnulib)

 Requires(pre): basesystem

+%ifarch %{ix86}
+# Automatically install the 32-bit variant if the 64-bit variant has
+# been installed.  This covers the case when glibc.i686 is installed
+# after nss_db.x86_64.  (See below for the other ordering.)
+Recommends: (nss_db(x86-32) if nss_db(x86-64))
+%endif
+
 # This is for building auxiliary programs like memusage, nscd
 # For initial glibc bootstraps it can be commented out
 %if %{without bootstrap}
@ -453,9 +746,8 @@ BuildRequires: systemd
 # so we also depend on python3-devel.
 BuildRequires: python3 python3-devel

-# This is the first GCC version with enhanced valgrind support in the
-# inline expansion of string functions (#1532205, #1652929, #1652932).
-BuildRequires: gcc >= 8.2.1-3.4
+# This is the first GCC version with -moutline-atomics (#1856398)
+BuildRequires: gcc >= 8.3.1-5.2
 %define enablekernel 3.2
 Conflicts: kernel < %{enablekernel}
 %define target %{_target_cpu}-redhat-linux
@ -803,6 +1095,12 @@ performance with LDAP, and may help with DNS as well.
 %package -n nss_db
 Summary: Name Service Switch (NSS) module using hash-indexed files
 Requires: %{name}%{_isa} = %{version}-%{release}
+%ifarch x86_64
+# Automatically install the 32-bit variant if the 64-bit variant has
+# been installed.  This covers the case when glibc.i686 is installed
+# before nss_db.x86_64.  (See above for the other ordering.)
+Recommends: (nss_db(x86-32) if glibc(x86-32))
+%endif

 %description -n nss_db
 The nss_db Name Service Switch module uses hash-indexed files in /var/db
@ -895,8 +1193,11 @@ This package provides debug information for package %{name}.
 Debug information is useful when developing applications that use this
 package or when debugging this package.

-%endif # %{debuginfocommonarches}
-%endif # 0%{?_enable_debug_packages}
+%comment Matches: %ifarch %{debuginfocommonarches}
+%endif
+
+%comment Matches: %if 0%{?_enable_debug_packages}
+%endif

 %if %{with benchtests}
 %package benchtests
@ -1041,6 +1342,12 @@ rpm_inherit_flags \
 %define glibc_make_flags_as ASFLAGS="-g -Wa,--generate-missing-build-notes=yes"
 %define glibc_make_flags %{glibc_make_flags_as}

+%ifarch aarch64
+# BZ 1856398 - Build AArch64 with out-of-line support for LSE atomics
+GCC="$GCC -moutline-atomics"
+GXX="$GXX -moutline-atomics"
+%endif
+
 ##############################################################################
 # %%build - Generic options.
 ##############################################################################
@ -1273,8 +1580,7 @@ pushd %{glibc_sysroot}%{_prefix}/lib/locale
 rm -f locale-archive
 # Intentionally we do not pass --alias-file=, aliases will be added
 # by build-locale-archive.
-$olddir/build-%{target}/elf/ld.so \
-        --library-path $olddir/build-%{target}/ \
+$olddir/build-%{target}/testrun.sh \
        $olddir/build-%{target}/locale/localedef \
        --prefix %{glibc_sysroot} --add-to-archive \
        eo *_*
@ -1857,13 +2163,15 @@ egrep "$auxarches_debugsources" debuginfocommon.sources >> debuginfo.filelist
 egrep -v "$auxarches_debugsources" \
  debuginfocommon.sources >> debuginfocommon.filelist

-%endif # %{biarcharches}
+%comment Matches: %ifarch %{biarcharches}
+%endif

 # Add the list of *.a archives in the debug directory to
 # the common debuginfo package.
 list_debug_archives >> debuginfocommon.filelist

-%endif # %{debuginfocommonarches}
+%comment Matches: %ifarch %{debuginfocommonarches}
+%endif

 # Remove some common directories from the common package debuginfo so that we
 # don't end up owning them.
@ -1883,7 +2191,8 @@ exclude_common_dirs debuginfocommon.filelist
 %endif
 exclude_common_dirs debuginfo.filelist

-%endif # 0%{?_enable_debug_packages}
+%comment Matches: %if 0%{?_enable_debug_packages}
+%endif

 ##############################################################################
 # Delete files that we do not intended to ship with the auxarch.
@ -1899,7 +2208,8 @@ sed -e '/%%dir/d;/%%config/d;/%%verify/d;s/%%lang([^)]*) //;s#^/*##' \
 	debuginfocommon.filelist \
 %endif
 	| (cd %{glibc_sysroot}; xargs --no-run-if-empty rm -f 2> /dev/null || :)
-%endif # %{auxarches}
+%comment Matches: %ifarch %{auxarches}
+%endif

 ##############################################################################
 # Run the glibc testsuite
@ -1990,7 +2300,8 @@ elf/ld.so --library-path .:elf:nptl:dlfcn \
 %endif
 popd

-%endif # %{run_glibc_tests}
+%comment Matches: %if %{run_glibc_tests}
+%endif


 %pre -p <lua>
@ -2282,6 +2593,158 @@ fi
 %files -f compat-libpthread-nonshared.filelist -n compat-libpthread-nonshared

 %changelog
+* Fri Mar  5 2021 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-151
+- CVE-2019-9169: Fix buffer overread in regexec.c (#1685400).
+
+* Fri Mar 05 2021 Carlos O'Donell <carlos@redhat.com> - 2.28-150
+- Rebuild glibc to update security markup metadata (#1931305)
+
+* Wed Feb 24 2021 Carlos O'Donell <carlos@redhat.com> - 2.28-149
+- Fix NSS files and compat service upgrade defect (#1927040).
+
+* Fri Feb  5 2021 Florian Weimer <fweimer@redhat.com> - 2.28-148
+- CVE-2021-3326: iconv assertion failure in ISO-2022-JP-3 decoding (#1924919)
+
+* Wed Jan 20 2021 Florian Weimer <fweimer@redhat.com> - 2.28-147
+- x86-64: Fix FMA4 math routine selection after bug 1817513 (#1918115)
+
+* Mon Jan 18 2021 Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-146
+- CVE-2019-25013:Fix buffer overrun in EUC-KR conversion module (#1912544)
+
+* Mon Jan  4 2021 Florian Weimer <fweimer@redhat.com> - 2.28-145
+- Update glibc-hwcaps fix from upstream (#1817513)
+
+* Tue Dec 15 2020 Florian Weimer <fweimer@redhat.com> - 2.28-144
+- Support running libc.so.6 as a main program in more cases (#1882466)
+
+* Thu Dec 10 2020 Florian Weimer <fweimer@redhat.com> - 2.28-142
+- Add glibc-hwcaps support (#1817513)
+- Implement DT_AUDIT support (#1871385)
+
+* Mon Nov 30 2020 Carlos O'Donell <carlos@redhat.com> - 2.28-141
+- Update Intel CET support (#1855790)
+
+* Tue Nov 10 2020 Carlos O'Donell <carlos@redhat.com> - 2.28-140
+- Fix calling lazily-bound SVE-using functions on AArch64 (#1893662)
+
+* Tue Nov 10 2020 Arjun Shankar <arjun@redhat.com> - 2.28-139
+- CVE-2016-10228, CVE-2020-27618: Fix infinite loops in iconv (#1704868,
+  #1894669)
+
+* Fri Nov  6 2020 Florian Weimer <fweimer@redhat.com> - 2.28-138
+- Avoid comments after %%endif in the RPM spec file (#1894340)
+
+* Fri Oct 30 2020 Florian Weimer <fweimer@redhat.com> - 2.28-137
+- x86: Further memcpy optimizations for AMD Zen (#1880670)
+
+* Tue Oct 27 2020 DJ Delorie <dj@redhat.com> - 2.28-136
+- Allow __getauxval in testsuite check (#1856398)
+
+* Wed Oct 21 2020 DJ Delorie <dj@redhat.com> - 2.28-135
+- Use -moutline-atomics for aarch64 (#1856398)
+
+* Tue Oct 20 2020 Florian Weimer <fweimer@redhat.com> - 2.28-134
+- resolv: Handle DNS transaction ID collisions (#1868106)
+
+* Tue Oct 20 2020 Florian Weimer <fweimer@redhat.com> - 2.28-133
+- x86: Update auto-tuning of memcpy non-temporal threshold (#1880670)
+
+* Mon Oct 5 2020 DJ Delorie <dj@redhat.com> - 2.28-132
+- Fix fgetsgent_r data corruption bug (#1871397)
+
+* Fri Oct 02 2020 Patsy Griffin <patsy@redhat.com> - 2.28-131
+- Improve IBM zSeries (s390x) Performance (#1871395)
+
+* Fri Oct 02 2020 Patsy Griffin <patsy@redhat.com> - 2.28-130
+- Fix avx2 strncmp offset compare condition check (#1871394)
+- Add strncmp and strcmp testcases for page boundary
+
+* Fri Sep 18 2020 Arjun Shankar <arjun@redhat.com> - 2.28-129
+- Improve IBM POWER9 architecture performance (#1871387)
+
+* Thu Sep 17 2020 Arjun Shankar <arjun@redhat.com> - 2.28-128
+- Enable glibc for POWER10 (#1845098)
+
+* Tue Jun 09 2020 Carlos O'Donell <calros@redhat.com> - 2.28-127
+- Improve performance of library strstr() function (#1821531)
+
+* Wed May 27 2020 Florian Weimer <fweimer@redhat.com> - 2.28-126
+- Do not clobber errno in nss_compat (#1836867)
+
+* Thu May 14 2020 Carlos O'Donell <carlos@redhat.com> - 2.28-125
+- Support building rpm under newer versions of Coverity Scan (#1835999)
+
+* Mon May 11 2020 Florian Weimer <fweimer@redhat.com> - 2.28-124
+- Enhance memory protection key support on ppc64le (#1642150)
+
+* Thu Apr 23 2020 Florian Weimer <fweimer@redhat.com> - 2.28-123
+- Reduce IFUNC resolver usage in libpthread and librt (#1748197)
+
+* Thu Apr  9 2020 DJ Delorie <dj@redhat.com> - 2.28-122
+- Math library optimizations for IBM Z (#1780204)
+- Additional patch for s_nearbyint.c
+
+* Wed Apr  8 2020 Florian Weimer <fweimer@redhat.com> - 2.28-121
+- elf: Assign TLS modid later during dlopen (#1774115)
+
+* Wed Apr  8 2020 Florian Weimer <fweimer@redhat.com> - 2.28-120
+- x86-64: Automatically install nss_db.i686 for 32-bit environments (#1807824)
+
+* Tue Apr  7 2020 Florian Weimer <fweimer@redhat.com> - 2.28-119
+- ppc64le: Enable protection key support (#1642150)
+
+* Tue Apr  7 2020 Florian Weimer <fweimer@redhat.com> - 2.28-118
+- ppc64le: floating-point status and exception optimizations (#1783303)
+
+* Fri Apr  3 2020 Patsy Griffin <patsy@redhat.com> - 2.28-117
+- Update to Linux 5.6 syscall-names.list. (#1810224)
+
+* Fri Apr  3 2020 Patsy Griffin <patsy@redhat.com> - 2.28-116
+- CVE-2020-1751: Fix an array overflow in backtrace on PowerPC. (#1813399)
+
+* Fri Apr  3 2020 Patsy Griffin <patsy@redhat.com> - 2.28-115
+- CVE:2020-1752: Fix a use after free in glob when expanding ~user. (#1813398)
+
+* Fri Apr  3 2020 Patsy Griffin <patsy@redhat.com> - 2.28-114
+- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
+  sincosl, and tanl function. (#1811796)
+
+* Thu Apr  2 2020 Carlos O'Donell <carlos@redhat.com> - 2.28-113
+- Improve elf/ and nptl/ testsuites (#1810223)
+
+* Thu Apr  2 2020 Carlos O'Donell <carlos@redhat.com> - 2.28-112
+- Fix resource leak in getaddrinfo (#1810146)
+
+* Thu Apr  2 2020 Carlos O'Donell <carlos@redhat.com> - 2.28-111
+- Protect locale archive against corruption (#1784525)
+
+* Thu Apr  2 2020 Carlos O'Donell <carlos@redhat.com> - 2.28-110
+- Properly handle signed vs. unsigned values in mallopt (#1784520)
+
+* Thu Apr  2 2020 Carlos O'Donell <carlos@redhat.com> - 2.28-109
+- Update and harmonize locale names with CLDR (#1757354)
+
+* Thu Apr  2 2020 Carlos O'Donell <carlos@redhat.com> - 2.28-108
+- Fix filter and auxiliary filter implementation (#1812756)
+
+* Thu Apr  2 2020 Carlos O'Donell <carlos@redhat.com> - 2.28-107
+- Handle .dynstr located in separate segment (#1774114)
+
+* Fri Mar 27 2020 Patsy Griffin <patsy@redhat.com> - 2.28-106
+- Disable vtable validation for pre-2.1 interposed handles (#1775819)
+
+* Fri Mar 27 2020 Patsy Griffin <patsy@redhat.com> - 2.28-105
+- Define __CORRECT_ISO_CPP_STRING_H_PROTO for Clang. (#1784519)
+
+* Wed Mar 25 2020 DJ Delorie <dj@redhat.com> - 2.28-104
+- Math library optimizations for IBM Z (#1780204)
+
+* Wed Mar 25 2020 DJ Delorie <dj@redhat.com> - 2.28-103
+- Filter "ignore" autofs mount entries in getmntent (#1743445)
+
+* Wed Mar 25 2020 DJ Delorie <dj@redhat.com> - 2.28-102
+- Fix /etc/resolv.conf reloading defects (#1810142)
+
 * Thu Jan 16 2020 Florian Weimer <fweimer@redhat.com> - 2.28-101
 - ld.so: Reset GL (dl_initfirst) pointer on dlopen failure (#1410154)