.gitignore

@@ -1 +1 @@
-SOURCES/tboot-1.10.5.tar.gz
+SOURCES/tboot-1.10.2.tar.gz

.tboot.metadata

@@ -1 +1 @@
-687bb5c0453b0256d64c8b1aa538a49703f9737a SOURCES/tboot-1.10.5.tar.gz
+f11ed63c38588fe17ac6674efc115122dd2fc737 SOURCES/tboot-1.10.2.tar.gz

SOURCES/0001-Add-Wno-error-deprecated-declarations-to-Config.mk.patch

@@ -0,0 +1,30 @@
+From fb1b10586f293a39523cec835a8d2f102375bd0d Mon Sep 17 00:00:00 2001
+From: Tony Camuso <tcamuso@redhat.com>
+Date: Wed, 2 Jun 2021 06:57:41 -0400
+Subject: [PATCH] Add -Wno-error=deprecated-declarations to Config.mk
+
+For SSL3 build compatability. In the future, the code needs to be
+made SSL3 compatable.
+
+Signed-off-by: Tony Camuso <tcamuso@redhat.com>
+---
+ Config.mk | 3 ++-
+ 1 file changed, 2 insertions(+), 1 deletion(-)
+
+diff --git a/Config.mk b/Config.mk
+index ba997b0..764e725 100644
+--- a/Config.mk
++++ b/Config.mk
+@@ -43,7 +43,8 @@ CFLAGS_WARN       = -Wall -Wformat-security -Werror -Wstrict-prototypes \
+ 	            -Wextra -Winit-self -Wswitch-default -Wunused-parameter \
+ 	            -Wwrite-strings \
+ 	            $(call cc-option,$(CC),-Wlogical-op,) \
+-	            -Wno-missing-field-initializers -Wno-address-of-packed-member
++	            -Wno-missing-field-initializers -Wno-address-of-packed-member \
++	            -Wno-deprecated-declarations
+ 
+ AS         ?= as
+ LD         ?= ld
+-- 
+2.31.1
+

SOURCES/0001-fix-typo-in-lcp2_crtpollist-manpage.patch

@@ -1,20 +0,0 @@
-# HG changeset patch
-# User Pawel Randzio <pawel.randzio@intel.com>
-# Date 1646837604 -3600
-#      Wed Mar 09 15:53:24 2022 +0100
-# Node ID 9cda8c127b0a7bb11561befbaa9ecf1130763fcf
-# Parent  5941842afb661f0e78085cb1317781d362583a38
-Fixed a typo in man page for lcp2_crtpollist
-
-diff -r 5941842afb66 -r 9cda8c127b0a docs/man/lcp2_crtpollist.8
---- a/docs/man/lcp2_crtpollist.8	Fri Mar 04 11:14:35 2022 +0100
-+++ b/docs/man/lcp2_crtpollist.8	Wed Mar 09 15:53:24 2022 +0100
-@@ -36,7 +36,7 @@
- support rsapss and ecdsa.
- .TP \w'\fB--hashalg\ \fI<sha1|sha256|sha384|sha512|sm2>\fP'u+1n
- \fB--hashalg\ \fI<sha1|sha256|sha384|sha512|sm2>\fP
--Hash algorightm used for signing a list. Lists version 0x100 only support SHA1.
-+Hash algorithm used for signing a list. Lists version 0x100 only support SHA1.
- .TP
- \fB--pub\ \fIfile\fP
- Public key to use, must be in PEM format.

SOURCES/0002-check-for-client-server-match.patch

@@ -1,133 +0,0 @@
-# HG changeset patch
-# User Timo Lindfors <timo.lindfors@iki.fi>
-# Date 1646900891 -7200
-#      Thu Mar 10 10:28:11 2022 +0200
-# Node ID 9c625ab2035bae1fc38787025f74d2937600223b
-# Parent  9cda8c127b0a7bb11561befbaa9ecf1130763fcf
-txt-acminfo: Map TXT heap using mmap
-Without this patch
-
-txt-acminfo 5th_gen_i5_i7_SINIT_79.BIN
-
-segfaults. This issue was introduced in
-
-o  changeset:   627:d8a8e17f6d41
-|  user:        Lukasz Hawrylko <lukas...@in...>
-|  date:        Thu May 13 16:04:27 2021 +0200
-|  summary:     Check for client/server match when selecting SINIT
-
-Signed-off-by: Timo Lindfors <timo.lindfors@iki.fi>
-
-diff -r 9cda8c127b0a -r 9c625ab2035b tboot/common/loader.c
---- a/tboot/common/loader.c	Wed Mar 09 15:53:24 2022 +0100
-+++ b/tboot/common/loader.c	Thu Mar 10 10:28:11 2022 +0200
-@@ -1792,7 +1792,7 @@
-         void *base2 = (void *)m->mod_start;
-         uint32_t size2 = m->mod_end - (unsigned long)(base2);
-         if ( is_racm_acmod(base2, size2, false) &&
--             does_acmod_match_platform((acm_hdr_t *)base2) ) {
-+             does_acmod_match_platform((acm_hdr_t *)base2, NULL) ) {
-             if ( base != NULL )
-                 *base = base2;
-             if ( size != NULL )
-@@ -1837,7 +1837,7 @@
-         void *base2 = (void *)m->mod_start;
-         uint32_t size2 = m->mod_end - (unsigned long)(base2);
-         if ( is_sinit_acmod(base2, size2, false) &&
--             does_acmod_match_platform((acm_hdr_t *)base2) ) {
-+             does_acmod_match_platform((acm_hdr_t *)base2, NULL) ) {
-             if ( base != NULL )
-                 *base = base2;
-             if ( size != NULL )
-diff -r 9cda8c127b0a -r 9c625ab2035b tboot/include/txt/acmod.h
---- a/tboot/include/txt/acmod.h	Wed Mar 09 15:53:24 2022 +0100
-+++ b/tboot/include/txt/acmod.h	Thu Mar 10 10:28:11 2022 +0200
-@@ -37,6 +37,8 @@
- #ifndef __TXT_ACMOD_H__
- #define __TXT_ACMOD_H__
- 
-+typedef void   txt_heap_t;
-+
- /*
-  * authenticated code (AC) module header (ver 0.0)
-  */
-@@ -179,7 +181,7 @@
- extern acm_hdr_t *copy_racm(const acm_hdr_t *racm);
- extern bool verify_racm(const acm_hdr_t *acm_hdr);
- extern bool is_sinit_acmod(const void *acmod_base, uint32_t acmod_size, bool quiet);
--extern bool does_acmod_match_platform(const acm_hdr_t* hdr);
-+extern bool does_acmod_match_platform(const acm_hdr_t* hdr, const txt_heap_t* txt_heap);
- extern acm_hdr_t *copy_sinit(const acm_hdr_t *sinit);
- extern bool verify_acmod(const acm_hdr_t *acm_hdr);
- extern uint32_t get_supported_os_sinit_data_ver(const acm_hdr_t* hdr);
-diff -r 9cda8c127b0a -r 9c625ab2035b tboot/txt/acmod.c
---- a/tboot/txt/acmod.c	Wed Mar 09 15:53:24 2022 +0100
-+++ b/tboot/txt/acmod.c	Thu Mar 10 10:28:11 2022 +0200
-@@ -576,7 +576,7 @@
-     return true;
- }
- 
--bool does_acmod_match_platform(const acm_hdr_t* hdr)
-+bool does_acmod_match_platform(const acm_hdr_t* hdr, const txt_heap_t *txt_heap)
- {
-     /* used to ensure we don't print chipset/proc info for each module */
-     static bool printed_host_info;
-@@ -587,7 +587,8 @@
-         return false;
- 
-     /* verify client/server platform match */
--    txt_heap_t *txt_heap = get_txt_heap();
-+    if (txt_heap == NULL)
-+        txt_heap = get_txt_heap();
-     bios_data_t *bios_data = get_bios_data_start(txt_heap);
-     if (info_table->version >= 5 && bios_data->version >= 6) {
-         uint32_t bios_type = bios_data->flags.bits.mle.platform_type;
-@@ -713,7 +714,7 @@
- 
-     /* is it a valid SINIT module? */
-     if ( !is_sinit_acmod(sinit_region_base, bios_data->bios_sinit_size, false) ||
--         !does_acmod_match_platform((acm_hdr_t *)sinit_region_base) )
-+         !does_acmod_match_platform((acm_hdr_t *)sinit_region_base, NULL) )
-         return NULL;
- 
-     return (acm_hdr_t *)sinit_region_base;
-diff -r 9cda8c127b0a -r 9c625ab2035b utils/txt-acminfo.c
---- a/utils/txt-acminfo.c	Wed Mar 09 15:53:24 2022 +0100
-+++ b/utils/txt-acminfo.c	Thu Mar 10 10:28:11 2022 +0200
-@@ -203,15 +203,31 @@
-         close(fd_mem);
-         return false;
-     }
--    else {
--        if ( does_acmod_match_platform(hdr) )
--            printf("ACM matches platform\n");
--        else
--            printf("ACM does not match platform\n");
- 
-+    uint64_t txt_heap_size = *(volatile uint64_t *)(pub_config_base + TXTCR_HEAP_SIZE);
-+    if (txt_heap_size == 0) {
-+        printf("ERROR: No TXT heap is available\n");
-         munmap(pub_config_base, TXT_CONFIG_REGS_SIZE);
-+        close(fd_mem);
-+        return false;
-     }
- 
-+    uint64_t txt_heap_base = *(volatile uint64_t *)(pub_config_base + TXTCR_HEAP_BASE);
-+    txt_heap_t *txt_heap = mmap(NULL, txt_heap_size, PROT_READ, MAP_PRIVATE,
-+                                fd_mem, txt_heap_base);
-+    if ( txt_heap == MAP_FAILED ) {
-+        printf("ERROR: cannot map TXT heap by mmap()\n");
-+        munmap(pub_config_base, TXT_CONFIG_REGS_SIZE);
-+        close(fd_mem);
-+        return false;
-+    }
-+    if ( does_acmod_match_platform(hdr, txt_heap) )
-+        printf("ACM matches platform\n");
-+    else
-+        printf("ACM does not match platform\n");
-+
-+    munmap(txt_heap, txt_heap_size);
-+    munmap(pub_config_base, TXT_CONFIG_REGS_SIZE);
-     close(fd_mem);
-     return true;
- }

SOURCES/0002-lcputils.c-remove-call-to-EVP_PKEY_set_alias_type.patch

@@ -0,0 +1,63 @@
+From 8486ee675c00c2662d261fbbf26cf013ccd118fd Mon Sep 17 00:00:00 2001
+From: Tony Camuso <tcamuso@redhat.com>
+Date: Wed, 23 Jun 2021 08:01:54 -0400
+Subject: [PATCH] lcputils.c: remove call to EVP_PKEY_set_alias_type
+
+This function was previously needed as a workaround for SM2. With
+OpenSSL 3.0, this key type is internally recognized so the workaround
+is no longer needed.
+
+Signed-off-by: Tony Camuso <tcamuso@redhat.com>
+---
+ lcptools-v2/lcputils.c | 14 +++++++++++++-
+ 1 file changed, 13 insertions(+), 1 deletion(-)
+
+diff --git a/lcptools-v2/lcputils.c b/lcptools-v2/lcputils.c
+index 9d4b976..4dbb2fc 100644
+--- a/lcptools-v2/lcputils.c
++++ b/lcptools-v2/lcputils.c
+@@ -775,6 +775,11 @@ bool verify_ec_signature(sized_buffer *data, sized_buffer *pubkey_x,
+         result = 0;
+         goto EXIT;
+     }
++// SSL3 removed function EVP_PKEY_set_alias_type
++// This function was previously needed as a workaround for SM2.
++// With OpenSSL 3.0, this key type is internally recognized so
++// the workaround is no longer needed.
++#if 0
+     if (sigalg == TPM_ALG_SM2) {
+         result = EVP_PKEY_set_alias_type(evp_key, EVP_PKEY_SM2);
+         if (result <= 0) {
+@@ -782,6 +787,7 @@ bool verify_ec_signature(sized_buffer *data, sized_buffer *pubkey_x,
+             goto OPENSSL_ERROR;
+         }
+     }
++#endif
+     pctx = EVP_PKEY_CTX_new(evp_key, NULL);
+     if (pctx == NULL) {
+         ERROR("Error: failed to generate key context.\n");
+@@ -915,6 +921,11 @@ bool ec_sign_data(sized_buffer *data, sized_buffer *r, sized_buffer *s, uint16_t
+         goto OPENSSL_ERROR;
+     }
+ 
++// SSL3 removed function EVP_PKEY_set_alias_type
++// This function was previously needed as a workaround for SM2.
++// With OpenSSL 3.0, this key type is internally recognized so
++// the workaround is no longer needed.
++#if 0
+     if (sigalg == TPM_ALG_SM2) {
+         result = EVP_PKEY_set_alias_type(evp_key, EVP_PKEY_SM2);
+         if (result <= 0) {
+@@ -922,7 +933,8 @@ bool ec_sign_data(sized_buffer *data, sized_buffer *r, sized_buffer *s, uint16_t
+             goto OPENSSL_ERROR;
+         }
+     }
+-    
++#endif
++
+     pctx = EVP_PKEY_CTX_new(evp_key, NULL);
+     if (pctx == NULL) {
+         ERROR("Error: failed to allocate pkey context.\n");
+-- 
+2.31.1
+

SPECS/tboot.spec

@@ -1,21 +1,22 @@
 Summary:        Performs a verified launch using Intel TXT
 Name:           tboot
-Version:        1.10.5
+Version:        1.10.2
-Release:        2%{?dist}
+Release:        5%{?dist}
 Epoch:          1
 
-Group:          System Environment/Base
 License:        BSD
 URL:            http://sourceforge.net/projects/tboot/
 Source0:        http://downloads.sourceforge.net/%{name}/%{name}-%{version}.tar.gz
 
-BuildRequires:  openssl-devel
+Patch0:         0001-Add-Wno-error-deprecated-declarations-to-Config.mk.patch
-BuildRequires:	perl
+Patch1:         0002-lcputils.c-remove-call-to-EVP_PKEY_set_alias_type.patch
-ExclusiveArch:  %{ix86} x86_64
-Requires:  	grub2-efi-x64-modules
 
-Patch01: 0001-fix-typo-in-lcp2_crtpollist-manpage.patch
+BuildRequires:  make
-Patch02: 0002-check-for-client-server-match.patch
+BuildRequires:  gcc
+BuildRequires:  perl
+BuildRequires:  openssl-devel
+BuildRequires:  zlib-devel
+ExclusiveArch:  %{ix86} x86_64
 
 %description
 Trusted Boot (tboot) is an open source, pre-kernel/VMM module that uses
@@ -23,52 +24,14 @@ Intel Trusted Execution Technology (Intel TXT) to perform a measured
 and verified launch of an OS kernel/VMM.
 
 %prep
-%autosetup -S git
+%autosetup -p1 -n %{name}-%{version}
-
-# do not override OPTFLAGS
-sed -i -e 's/-march=i686//' Config.mk
 
 %build
-CFLAGS="$RPM_OPT_FLAGS"; export CFLAGS
+CFLAGS="%{optflags}"; export CFLAGS
-LDFLAGS="$RPM_LD_FLAGS"; export LDFLAGS
+LDFLAGS="%{build_ldflags}"; export LDFLAGS
 make debug=y %{?_smp_mflags}
 
-%post
-# create the tboot entry and copy the modules to the grubenvdir
-grublib='/usr/lib/grub/x86_64-efi/'
-
-if [ -d /sys/firmware/efi ]; then
-	echo "EFI detected .."
-	grubenvdir='/boot/efi/EFI/redhat'
-else
-	echo "Legacy BIOS detected .."
-	grubenvdir='/boot/grub2'
-	# If previous install put the modules in the wrong dir
-	[ -d /boot/efi/EFI/redhat/x86_64-efi ] && rm -rf /boot/efi/EFI/redhat/x86_64-efi
-fi
-
-grub2-mkconfig -o $grubenvdir/grub.cfg
-[ -d $grubenvdir/x86_64-efi ] || mkdir -pv $grubenvdir/x86_64-efi
-cp -vf $grublib/relocator.mod $grubenvdir/x86_64-efi/
-cp -vf $grublib/multiboot2.mod $grubenvdir/x86_64-efi/
-
-%postun
-# Cleanup all tboot files
-
-# Remove residual grub efi modules.
-if [ -d /sys/firmware/efi ]; then
-	echo "EFI detected .."
-	grubenvdir='/boot/efi/EFI/redhat'
-else
-	echo "Legacy BIOS detected .."
-	grubenvdir='/boot/grub2'
-fi
-
-[ -d $grubenvdir/x86_64-efi ] && rm -rf $grubenvdir/x86_64-efi
-grub2-mkconfig -o $grubenvdir/grub.cfg
-
 %install
-echo "installing tboot"
 make debug=y DISTDIR=$RPM_BUILD_ROOT install
 
 %files
@@ -95,84 +58,93 @@ make debug=y DISTDIR=$RPM_BUILD_ROOT install
 /boot/tboot-syms
 
 %changelog
-* Fri Aug 26 2022 Tony Camuso <tcamuso@redhat.com> - 1:1.10.5-2
+* Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - 1:1.10.2-5
-- The install scriptlet in %post was not choosing the correct
+- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
-  grubenv directory. In RHEL8, the efi and legacy bios grubenv
+  Related: rhbz#1991688
-  directories are different. This change assures that the
-  correct directory is used for grub.cfg and related modules.
-  Added a %postun section to cleanup when removing tboot with
-  dnf erase.
-  Resolves: rhbz#2121836
 
-* Wed Apr 20 2022 Tony Camuso <tcamuso@redhat.com> - 1:1.10.5-1
+* Wed Jul 28 2021 Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-4
-  Upgrade to tboot-1.10.5-1 for fixes and updates.
+- From Miroslave Vadkerti:
-  Added a scriptlet to the tboot.spec file to automatically install
+  Onboarding tests to RHEL9 in BaseOS CI requires action, adding
-  grub2-efi-x64-modules and move them to the correct directory.
+  test configuration in our "dispatcher" configuration for RHEL9:
-  Resolves: rhbz#2040082
+  https://gitlab.cee.redhat.com/baseos-qe/citool-config/blob/production/brew-dispatcher-rhel9.yaml
-  Resolves: rhbz#2041759
+  Test config was added for tboot in the following MR.
+  https://gitlab.cee.redhat.com/baseos-qe/citool-config/-/merge_requests/2686
+  Resolves: rhbz#1922002
 
-* Thu Jun 10 2021 Tony Camuso <tcamuso@redhat.com> - 1:1.10.1-1
+* Tue Jul 27 2021 Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-3
-  Upgrade to tboot-1.10.2-1 provides some bug fixes and updates.
+- Add the %{optflags} and %{build_ldflags} macros to assure the
-  Remove 0001-Do-not-install-man-pages-for-deprecated-tools.patch
+  build meets RHEL security requirements.
-  from the git repo, since it is no longer needed.
+  Resolves: rhbz#1922002
-  Resolves: rhbz#1857068
-  Resolves: rhbz#1873296
-  Resolves: rhbz#1920386
 
-* Mon Feb 22 2021 Tony Camuso <tcamuso@redhat.com> - 1:1.10.0-1
+* Thu Jul 22 2021 Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-2
-  Need to add BuildRequires: perl, since it has beem moved
+- Bump the NVR as a result of including the gating.yaml file in
-  from BuildRoot.
+  the git repo.
-  See: https://fedoraproject.org/wiki/Packaging:Perl#Build_Dependencies
+  Resolves: rhbz#1922002
-  Resolves: rhbz#1857068
 
-* Mon Feb 22 2021 Tony Camuso <tcamuso@redhat.com> - 1:1.10.0-1
+* Mon Jun 21 2021 Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-1
-  Build problem creating directory for grub modules. We can't
+- The patches are for SSL3 compatibility. These can probably be
-  know if the modules are there, so it's up to the end user to
+  removed when upstream tboot fully implements SSL3.
-  find the modules and copy them to the correct location.
+- Upgrade to latest upstream.
-  Specifically, for systems booting from EFI, the
+- Remove trousers dependency.
-  /boot/efi/EFI/redhat/x86_64-efi/multiboot2.mod file, if it
+  Resolves: rhbz#1922002
-  exists, must be copied to the /boot/efi/EFI/redhat/x86_64-efi/
+  Resolves: rhbz#1870520
-  directory. If that file does not exist, then the system has
+  Resolves: rhbz#1927374
-  the wrong version of grub for using tboot in an EFI system.
-  Resolves: rhbz#1857068
 
-* Fri Dec 11 2020 Tony Camuso <tcamuso@redhat.com> - 1:1.10.0-0
+* Wed Jun 16 2021 Mohan Boddu <mboddu@redhat.com> - 1:1.9.11-9
-  Upgrade to latest upstream version
+- Rebuilt for RHEL 9 BETA for openssl 3.0
-  Added upstream patch to remove deprecated man pages
+  Related: rhbz#1971065
-  Resolves: rhbz#1857068
 
-* Tue Jun 23 2020 Tony Camuso <tcamuso@redhat.com> - 1:1.9.12-2
+* Thu May 27 2021 Tony Camuso <tcamuso@redhat.com> - 1:1.9.11-8
-- Fix build issues with one upstream patch.
+- Add -Wno-error=deprecated-declarations to the Config.mk patch
-  This patch also reverts the previous patch concerning the
+  Resolves: rhbz#1958031
-  -Wno-address-of-packed-member cflag.
-  Resolves: rhbz#1847938
 
-* Fri Jun 12 2020 Tony Camuso <tcamuso@redhat.com> - 1:1.9.12-1
+* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 1:1.9.11-7
-- Add patch to revert "Disable GCC9 address-of-packed-member warning"
+- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
-  While it was able to build locally with 'rhpkg local', the brew
-  build failed, because the compiler on the brew systems did not
-  recognized the new GCC9 command line flag:
-  -Wno-address-of-packed-member
 
-* Fri May 29 2020 Tony Camuso <tcamuso@redhat.com> - 1:1.9.12-1
+* Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.9.11-6
-- Upgrade to latest upstream version
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
-  Resolves: rhbz#1790169
 
-* Fri Nov 15 2019 Tony Camuso <tcamuso@redhat.com> - 1:1.9.10-1
+* Fri Oct 30 2020 Jeff Law <law@redhat.com> - 1:1.9.11-5
-- Rebase to the lastest upstream version.
+- Re-enable -Wstringop-overflow and instead make the problematical
-  Resolves: rhbz#1725661
+  pointer volatile to avoid the false positive diagnostic
 
-* Fri Sep 7 2018 Tony Camuso <tcamuso@redhat.com> - 1:1.9.7-1
+* Thu Oct 29 2020 Jeff Law <law@redhat.com> - 1:1.9.11-4
-- Rebase to the latest upstream version.
+- Fix buglet exposed by gcc-11 -Warray-parameter
-  Resolves: rhbz#1511799
+- Temporarily disable -Wstringop-overflow due to false positive in gcc-11
-- Do not override OPTFLAGS in the make
-  Resolves: rhbz#1620070
 
-* Fri Jul 20 2018 Tony Camuso <tcamuso@redhat.com> - 1:1.9.6-3
+* Wed Jul 29 2020 Jeff Law <law@redhat.com> - 1:1.9.11-3
-- Incorporate latest upstream patches, including a newer version
+- Explicitly allow uninitialized variables in a few places that do it
-  of the OpenSSL patch in 1.9.6-2
+- on purpose
-  Resolves: rhbz#1492771
+
-  Resolves: rhbz#1499435
+* Wed Jul 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.9.11-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
+
+* Sun Apr 19 2020 Filipe Rosset <rosset.filipe@gmail.com> - 1:1.9.11-1
+- Update to 1.9.11
+
+* Fri Jan 31 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.9.10-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
+
+* Sat Jul 27 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.9.10-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
+
+* Tue May 14 2019 Yunying Sun <yunying.sun@intel.com> - 1:1.9.10-1
+- Add patch to fix package build error
+- Add build dependency to zlib-devel
+- Update to latest release 1.9.10
+
+* Sun Feb 03 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.9.8-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
+
+* Wed Oct 31 2018 Yunying Sun <yunying.sun@intel.com> - 1:1.9.8-1
+- Updated to upstream 1.9.8 release
+
+* Tue Sep 4 2018 Yunying Sun <yunying.sun@intel.com> - 1:1.9.7-1
+- Updated to upstream 1.9.7 release
+- Removed the patch for openssl 1.1 as it is included in 1.9.7 already
+
+* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1:1.9.6-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
 
 * Tue Feb 06 2018 Tomáš Mráz <tmraz@redhat.com> - 1:1.9.6-2
 - Patch to build with OpenSSL-1.1.x