# changelog

author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-2
changelog:
  - postgresql-setup: don't create whole path to server's data to make sure that
    the parent directory has correct permissions (#972425)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-3
changelog:
  - add atomic operations support for aarch64 to preupgrade version also (#970661)
  - apply the forgotten man-page-day patch (#948933)


author: Pavel Raiskup <praiskup@redhat.com> - 9.3.0-1
changelog:
  - update to 9.3 major version per release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3.html


author: Jozef Mlich <jmlich@redhat.com> - 9.3.1-1
changelog:
  - update to 9.3.1 minor version per release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-1.html


author: Jozef Mlich <jmlich@redhat.com> - 9.3.2-1
changelog:
  - update to 9.3.2 minor version per release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-2.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.3.2-4
changelog:
  - postgresql-setup(upgrade): don't stop old server when it can not be started
  - postgresql-setup(initdb, upgrade): add $PGSETUP_INITDB_OPTIONS
  - postgresql-setup: do not pretend 'sh' compatibility
  - move script generation to proper place
  - postgresql-setup: document a little and genrate manual page


author: Jozef Mlich <jmlich@redhat.com> - 9.3.3-1
changelog:
  - update to 9.3.3 minor version per release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-3.html


author: Jozef Mlich <jmlich@redhat.com> - 9.3.4-1
changelog:
  - update to 9.3.4 minor version per release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-4.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.3.4-8
changelog:
  - provide postgresql-doc for postgresql-docs package (#1086420)
  - move html documentation to *-docs subpackage (#1086420)
  - provide postgresql-server(:MODULE_COMPAT_%{postgresql_major}) to guard
    against incompatible plugin installation (#1008939)


author: Pavel Raiskup <praiskup@redhat.com> - 9.4.1-4
changelog:
  - make the %check phase more verbose for FAIL cases
  - don't FTBFS on f23+ where hardening is on by default


author: Pavel Raiskup <praiskup@redhat.com> - 9.4.5-2
changelog:
  - devel package should not require the main package (rhbz#1272219)
  - multilib fix, more general solution (rhbz#1190346)


author: Pavel Raiskup <praiskup@redhat.com> - 9.5.0-1
changelog:
  - update to 9.5.0 per release notes
    http://www.postgresql.org/docs/9.5/static/release-9-5.html
  - update postgresql-setup to v4.0 to reflect new packaging style


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.1-1
changelog:
  - update to 9.6.1 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-1.html
  - add gen_sources.sh script
  - remove plpython build hack, fixed upstream
  - remove aarch64 and ppc64p7 hacks, fixed by the %configure call


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.2-1
changelog:
  - update to 9.6.2 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-2.html
  - remove mistakenly isntalled libpgfeutils.a


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.3-1
changelog:
  - update to 9.6.3 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-3.html


author: Petr Kubat <pkubat@redhat.com> - 9.6.4-1
changelog:
  - update to 9.6.4 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-4.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.5-1
changelog:
  - update to 9.6.5 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-5.html


author: Jozef Mlich <jmlich@redhat.com> - 10.0-2
changelog:
  - support for upgrade with extenstions
    i.e the postgresql-upgrade-devel subpackage was added (rhbz#1475177)


author: Pavel Raiskup <praiskup@redhat.com> - 10.0-3
changelog:
  - confess that we bundle setup scripts and previous version of ourseleves
  - provide %postgresql_upgrade_prefix macro


author: Pavel Raiskup <praiskup@redhat.com> - 10.1-3
changelog:
  - unify %configure options for python2/python3 configure
  - drop --with-krb5 option, not supported since PostgreSQL 9.4
  - python packaging - requires/provides s/python/python2/


author: Pavel Raiskup <praiskup@redhat.com> - 10.1-4
changelog:
  - configure with --with-systemd (rhbz#1414314)
  - disable startup timeout of PostgreSQL service (rhbz#1525477)


author: Pavel Raiskup <praiskup@redhat.com> - 10.3-2
changelog:
  - define %precise_version helper macro
  - drop explicit libpq.so provide from *-libs
  - update postgresql-setup tarball
  - add postgresql-test-rpm-macros package


author: Pavel Raiskup <praiskup@redhat.com> - 10.3-3
changelog:
  - upgrade: package plperl.so and pltcl.so
  - upgrade: package contrib modules
  - upgrade: drop dynamic libraries


author: Pavel Raiskup <praiskup@redhat.com> - 10.4-5
changelog:
  - re-enable -O3 for 64bit PPC boxes
  - explicitly set PYTHON=python2, /bin/python doesn't exist fc29+


author: Pavel Raiskup <praiskup@redhat.com> - 10.4-6
changelog:
  - drop ppc64 patch, gcc is already fixed (rhbz#1544349)
  - move pg_config*.mo files into devel subpackage


author: Pavel Raiskup <praiskup@redhat.com> - 10.4-8
changelog:
  - new postgresql-setup, the %postgresql_tests* macros now start
    the build-time server on random port number


author: Pavel Raiskup <praiskup@redhat.com> - 10.5-3
changelog:
  - devel subpackage provides postgresql-server-devel and libecpg-devel
    (first step for rhbz#1618698)


author: Pavel Raiskup <praiskup@redhat.com> - 11.0-1
changelog:
  - new upstream release, per release notes:
    https://www.postgresql.org/docs/11/static/release-11.html


author: Patrik Novotný <panovotn@redhat.com> - 12.5-1
changelog:
  - Rebase to upstream release 12.5
    Resolves: rhbz#1898330
    Resolves: rhbz#1898224
    Resolves: rhbz#1898244


author: Filip Januš <fjanus@redhat.com> - 13.7-1
changelog:
  - Resolves: CVE-2022-1552
  - Update to 13.7
  - Release notes: https://www.postgresql.org/docs/release/13.7/


author: Liwei Ge <geliwei@openanolis.org> - 13.10-1.0.1
changelog:
  - Disable spinlocks on loongarch64(Liwei Ge)
  - update broke macro in macros.in (rb01097748@alibaba-inc.com)


author: Honza Horak <hhorak@redhat.com> - 9.6.19-1
changelog:
  - Rebase to 9.6.19
    Also fixes: CVE-2019-10208, CVE-2020-14350, CVE-2019-10130
    Resolves: #1741490
    Resolves: #1867111
    Resolves: #1845074


author: Patrik Novotný <panovotn@redhat.com> - 9.6.20-1
changelog:
  - Rebase to upstream release 9.6.20
    Resolves: rhbz#1898246
    Resolves: rhbz#1898219
    Resolves: rhbz#1898335


author: Pavel Raiskup <praiskup@redhat.com> - 42.2.0-1
changelog:
  - rebase to the latest upstream release
  - nicer github source urls
  - sync with upstream spec
  - use new postgresql testing macros (rawhide only)
  - depend on postgresql-test-rpm-macros


author: Pavel Raiskup <praiskup@redhat.com> - 10.03.0000-1
changelog:
  - update to new upstream release, per announcement:
    https://www.postgresql.org/message-id/20180519131632.8E59CB40E51%40winpg.jp


author: Bastien Nocera <bnocera@redhat.com> - 0.8.1-2
changelog:
  + power-profiles-daemon-0.8.1-2
  - Remove linter, as apparently unwanted in check section
  - Resolves: rhbz#1947950


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.9-7
changelog:
  - Added support for Intel GLK platforms (by intel-glk-support patch)
  - Added support for Intel CNL-U/Y platforms (by intel-cnluy-support patch)
  - Fixed problem with some C-states overwriting others
    (by cstates-rewrite-fix patch)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.9-8
changelog:
  - Use intel_cpu only if APERF MSR is supported, it fixes powertop on KVM
    (by intel-cpu-check-aperf patch)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11-1
changelog:
  - New version
    Resolves: rhbz#1716721
  - Changed source to github and bootstraps sources
  - Dropped cstates-rewrite-fix, intel-glk-support, intel-cnluy-support,
    intel-cpu-check-aperf patches (all upstreamed)
  - Added bash completion


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.9.0-1
changelog:
  - New version
  - Dropped pptpsetup-mppe, vector-remove-fix, and call-use-after-free-fix
    patches (all upstreamed)
  - Dropped loading of nf_conntrack_pptp kernel module which was workaround and
    according to upstream only hides real problems


author: Severin Gehwolf <sgehwolf@redhat.com> - 0.12.0-7
changelog:
  - Add JDK binding sub-packages so that the package
    can be used with either JDK 11 or JDK 17.
  - Add requirement on base package for the JDK binding packages.


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.3.0-6
changelog:
  - Fix java subpackage bugs #669345 and #669346
  - Use new maven plugin names
  - Use mavenpomdir macro for pom installation


author: Conrad Meyer <konrad@tylerc.org> - 2.4.1-9
changelog:
  - Fix packaging bug, -emacs-el subpackage should depend on -emacs subpackage of
    the same version (%version), not the emacs version number...


author: Conrad Meyer <cemeyer@uw.edu> - 2.5.0-2
changelog:
  - Remove changelog history from before 2010
  - This spec already runs autoreconf -fi during %build, but bump build for
    rhbz #926374


author: Conrad Meyer <cemeyer@uw.edu> - 2.6.0-1
changelog:
  - Bump to upstream release 2.6.0 (rh# 1154474).
  - Rebase 'java fixes' patch on 2.6.0 pom.xml.
  - Drop patch #3 (fall back to generic GCC atomics if no specialized atomics
    exist, e.g. AArch64 GCC); this has been upstreamed.


author: Orion Poplawski <orion@cora.nwra.com> - 2.6.1-1
changelog:
  - Update to 2.6.1
  - New URL
  - Cleanup spec
  - Add patch to fix emacs compilation with emacs 24.4
  - Drop java-fixes patch, use pom macros instead
  - Add BR on python-google-apputils and mvn(org.easymock:easymock)
  - Run make check
  - Make -static require -devel (bug #1067475)


author: Mat Booth <mat.booth@redhat.com> - 3.3.1-2
changelog:
  - Make OSGi dependency on sun.misc package optional. This package is not
    available in all execution environments and will not be available in Java 9.


author: Jan Vcelak <jvcelak@fedoraproject.org> 1.2.1-1
changelog:
  - New upstream release:
    + fix: negative value packing
    + fix: eliminate undefined behavior in zigzag functions
    + fix: generate code that uses universal zero initializer for oneof unions


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: maqi <maqi@uniontech.com> - 15.0-2.0.1.01
changelog:
  - feat: allow each user to access sound card and play audio
  - refer to task-view-260869
  - sync: add 0001-fix-default-soundcard-device-on-W550-H30-workstation.patch


author: Tomas Orsava <torsava@redhat.com> - 1.3.7-21
changelog:
  - Disabled docs because the docs build config is not ported to Python 3 and
    thus cannot be built with Python 3 version of Sphinx


author: Lumír Balhar <lbalhar@redhat.com> - 1.3.7-27
changelog:
  - Remove nosetest-3 executable/manpage. This will be provided by python3 module.
  - Resolves: rhbz#1615727


author: John Dennis <jdennis@redhat.com> - 1.0.1-1
changelog:
  * Add TLS 1.3 cipher suites.

    * ssl_cipher_info.py now attempts to enable TLS 1.3.

    * Fix build issue in setup.py. python-nss can now be build
      as Python wheel, e.g. `pip wheel -w dist .`

    * The following constants were added:

      - ssl.TLS_AES_128_GCM_SHA256
      - ssl.TLS_AES_256_GCM_SHA384
      - ssl.TLS_CHACHA20_POLY1305_SHA256


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.1-5
changelog:
  - Python 2 binary package renamed to python2-nss
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: <jdennis@redhat.com> - 1.0.1-10
changelog:
  - Move documentation generator from epydoc to Sphinx autodoc
  - Modify py2/py3 build logic to comply with new guidelines


author: Tomas Orsava <torsava@redhat.com> - 2.7.5-5
changelog:
  - Require python2-psycopg2 instead of python-psycopg2 from the
    python2-psycopg2-debug subpackage
  - Resolves: rhbz#1628242


author: mahailiang <mahailiang@openanolis.org> - 2.7.5-7.0.1
changelog:
  - Mark _test_external_close as expected failure
  - Sync https://git.centos.org/rpms/python-psycopg2/tree/c8-stream-2.7


author: - Devrim GUNDUZ <devrim@commandprompt.com> 2.0.2-3
changelog:
  - Removed python dependency, per bugzilla review. (#199784)
  - Changed doc package group, per bugzilla review. (#199784)
  - Replaced dos2unix with sed, per guidelines and bugzilla review (#199784)
  - Fix changelog dates


author: - Devrim GUNDUZ <devrim@commandprompt.com> 2.0.3-2
changelog:
  - Fixed 64 bit builds
  - Fixed license
  - Added Zope subpackage
  - Fixed typo in doc description
  - Added macro for zope subpackage dir


author: - Devrim GUNDUZ <devrim@commandprompt.com> 2.0.3-3
changelog:
  - Fixed zope package dependencies and macro definition, per bugzilla review (#199784)
  - Fixed zope package directory ownership, per bugzilla review (#199784)
  - Fixed cp usage for zope subpackage, per bugzilla review (#199784)


author: Tom Lane <tgl@redhat.com> 2.0.13-2
changelog:
  - Fix rpmlint complaints: remove unneeded explicit Requires:, use Conflicts:
    instead of bogus Obsoletes: to indicate lack of zope subpackage


author: Devrim GUNDUZ <devrim@gunduz.org> - 2.2.1-1
changelog:
  - Update to 2.2.1
  - Improve description for 2.2 features.
  - Changelog for 2.2.0 is: 
     http://initd.org/pub/software/psycopg/ChangeLog-2.2


author: Devrim Gündüz <devrim@gunduz.org> 2.5-1
changelog:
  - Update to 2.5, per changes described at:
    http://www.psycopg.org/psycopg/articles/2013/04/07/psycopg-25-released/


author: Devrim Gündüz <devrim@gunduz.org> 2.5.2-1
changelog:
  - Update to 2.5.2, per changes described at:
    http://www.psycopg.org/psycopg/articles/2014/01/07/psycopg-252-released


author: Pavel Raiskup <praiskup@redhat.com> - 2.5.3-1
changelog:
  - rebase to most recent upstream version, per release notes:
    http://www.psycopg.org/psycopg/articles/2014/05/13/psycopg-253-released/


author: Devrim Gündüz <devrim@gunduz.org> 2.5.4-1
changelog:
  - Update to 2.5.4, per changes described at:
    http://www.psycopg.org/psycopg/articles/2014/08/30/psycopg-254-released


author: Devrim Gündüz <devrim@gunduz.org> 2.6-1
changelog:
  - Update to 2.6, per changes described at:
    http://www.psycopg.org/psycopg/articles/2015/02/09/psycopg-26-and-255-released/


author: Pavel Raiskup <praiskup@redhat.com> - 2.6.1-4
changelog:
  - again bump for new Python 3.5, not build previously?
  - fix rpmlint issues
  - no pyo files with python 3.5


author: Pavel Raiskup <praiskup@redhat.com> - 2.6.2-1
changelog:
  - rebase (rhbz#1353545), per release notes
    http://initd.org/psycopg/articles/2016/07/07/psycopg-262-released/


author: Pavel Raiskup <praiskup@redhat.com> - 2.7-1
changelog:
  - rebase to latest upstream release, per release notes:
    http://initd.org/psycopg/articles/2017/03/01/psycopg-27-released/
  - enable testsuite during build, and package it


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.1-1
changelog:
  - rebase to latest upstream release, per release notes:
    http://initd.org/psycopg/articles/2017/03/01/psycopg-271-released/
  - fix testsuite


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.2-1
changelog:
  - rebase to latest upstream release, per release notes:
    http://initd.org/psycopg/articles/2017/07/22/psycopg-272-released/


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.3-1
changelog:
  - rebase to latest upstream release, per release notes:
    http://initd.org/psycopg/articles/2017/07/24/psycopg-273-released/


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.3.2-1
changelog:
  - update to 2.7.3.2, per release notes:
    http://initd.org/psycopg/articles/2017/10/24/psycopg-2732-released/


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.4-1
changelog:
  - rebase to latest upstream release, per release notes:
    http://initd.org/psycopg/articles/2018/02/08/psycopg-274-released/


author: Tomas Orsava <torsava@redhat.com> - 2.7.4-3
changelog:
  - Revert switching Python 3 subpackages to the python3X- prefix
  - Switch only the requires for python3-devel/debug to the python36-prefix:
    the rest of the packages in the python36 collection will have the python3
    prefix to be unified with the Python 3 packages for Platform-Python


author: Tomas Orsava <torsava@redhat.com> - 3.6.1-6
changelog:
  - BuildRequire the python36-devel package when building for the python36 module
  - BuildRequire also python36-rpm-macros as part of the python36 module build


author: Miro Hrončok <mhroncok@redhat.com> - 3-37
changelog:
  - Workaround leaking buildroot PATH in 
  python_binary="%1"
  buildroot_path="%2"
  bytecode_compilation_path=".${buildroot_path/#$RPM_BUILD_ROOT}"
  failure=0
  pushd $RPM_BUILD_ROOT
  find $bytecode_compilation_path -type f -a -name "*.py" -print0 | xargs -0 $python_binary -O -m py_compile || failure=1
  find $bytecode_compilation_path -type f -a -name "*.py" -print0 | xargs -0 $python_binary -m py_compile || failure=1
  popd
  test $failure -eq 0
  - Resolves: rhbz#1644455


author: Miro Hrončok <mhroncok@redhat.com> - 15.1.0-19
changelog:
  - Use wheels from RPM packages (rhbz#1659550) (rhbz#1659551)
  - Fail with a warning on Python versions < 2.7


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-6
changelog:
  - Security fix for CVE-2020-27619: eval() call on content received via HTTP in the CJK codec tests
  Resolves: rhbz#1889886


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-10
changelog:
  - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
  Resolves: rhbz#2047376


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-11
changelog:
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2075390


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-12
changelog:
  - Security fix for CVE-2022-45061: CPU denial of service via inefficient IDNA decoder
  Resolves: rhbz#2144072


author: Jacob Wang <jacob.wang@openanolis.org> - 2.7.18-13
changelog:
  - Pick up fix from Upstream
    Fixup for CVE-2023-24329 patch name [f9e9f76](cstratak@redhat.com)
    Fix for CVE-2023-24329 [3f00cdc](lbalhar@redhat.com)


author: mahailiang <mahailiang@uniontech.com> - 2.7.18-13.01
changelog:
  - rebrand: rebrand to uos
  - spec: add BR git
  - spec: no check
  - spec: modify redhat-rpm-config to uos-rpm-config


author: Jeremy Hylton <jeremy@beopen.com>
changelog:
  - Version 2 of 2.0b1
  - Make the package relocatable.  Thanks to Suchandra Thapa.
  - Exclude Tkinter from main RPM.  If it is in a separate RPM, it is
    easier to track Tk releases.


author: Jeremy Hylton <jeremy@beopen.com>
changelog:
  - updated for 2.0c1
  - build audioop, imageop, and rgbimg extension modules
  - include xml.parsers subpackage
  - add test.xml.out to files list


author: Matt Wilson <msw@redhat.com>
changelog:
  - modify all files to use "python2.0" as the intrepter
  - don't build the Expat bindings
  - build against db1


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix the "requires" clause, it lacked a space causing problems
  - use %{_tmppath}
  - don't define name, version etc
  - add the available patches from the Python home page


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-0.4a4
changelog:
  - 2.2a4
  - Enable UCS4 support
  - Enable IPv6
  - Provide distutils
  - Include msgfmt.py and pygettext.py


author: Matt Wilson <msw@redhat.com> 2.2-0.9b2
changelog:
  - changed DESTDIR to point to / so that distutils will install dynload
    modules properly in the installroot


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-0.11c1
changelog:
  - 2.2 RC 1
  - Don't include the _tkinter module in the main package - it's
    already in the tkiter packace
  - Turn off the mpzmodule, something broke in the buildroot


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-5
changelog:
  - disable ndbm support, which is db2 in disguise (really interesting things
    can happen when you mix db2 and db4 in a single application)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-8
changelog:
  - Make files in /usr/bin install side by side with python 1.5 when
  - Drop explicit requirement of db4
    built as python2


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-16
changelog:
  - the same, but in builddirs - this will remove them from the
    docs package, which doesn't look in the buildroot for files.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - builds as python2 require a different libdb
  - changed the buildroot name of python to match python2 builds


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-2
  - Fix #76912 (python-tools contains idle, which uses tkinter, but there is no
    requirement of tkinter from python-tools).
  - Fix #74013 (rpm is missing the /usr/lib/python2.2/test directory)


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-3.*
  - Merged patch from Karsten Hopp <karsten@redhat.de> from 2.2.1-17hammer to
    use %{_libdir}
  - Added XFree86-libs as BuildRequires (because of tkinter)
  - Fixed duplicate listing of plat-linux2
  - Fixed exclusion of lib-dynload/japanese
  - Added lib64 patch for the japanese codecs
  - Use setup magic instead of using tar directly on JapaneseCodecs


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-5
  - Fixed configuration patch to add -lcrypt when compiling cryptmodule.c

  2.2.2-4
  - Spec file change from Matt Wilson <msw@redhat.com> to disable linking
    with the C++ compiler.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-3.7.3
  - Recompiled for 7.3 (to fix the -lcrypt bug)
  - Fix for the spurious error message at the end of the build (build-requires
    gets confused by executable files starting with """"): make the tests
    non-executable.


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-7
changelog:
  - Fix bug #79647 (Rebuild of SRPM fails if python isn't installed)
  - Added a bunch of missing BuildRequires found while fixing the
    above-mentioned bug


author: Jeremy Katz <katzj@redhat.com> 2.2.2-8
changelog:
  - urllib2 didn't support non-anonymous ftp.  add support based on how
    urllib did it (#80676, #78168)


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-11.7.3
changelog:
  - Fixed bug #82544: Errata removes most tools
  - Fixed bug #82435: Python 2.2.2 errata breaks redhat-config-users
  - Removed .lib64 and - files that get installed after we fix the multilib
    .py files.


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-13
changelog:
  - Attempt to look both in /usr/lib64 and /usr/lib/python2.2/site-packages/:
    some work on python-2.2.2-lib64.patch


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-22
changelog:
  - Using newer Japanese codecs (1.4.9). Thanks to
    Peter Bowen <pzb@datastacks.com> for pointing this out.


author: Jeremy Katz <katzj@redhat.com> 2.2.2-23
changelog:
  - ftp uri's should be able to specify being rooted at the root instead of
    where you login via ftp (#84692)


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-25
changelog:
  - Fixed bug #84886: pydoc dies when run w/o arguments
  - Fixed bug #84205: add python shm module back (used to be shipped with 1.5.2)
  - Fixed bug #84966: path in byte-compiled code still wrong


author: Mihai Ibanescu <misa@redhat.com> 2.3-0.2
changelog:
  - Building python 2.3
  - Added more BuildRequires
  - Updated the startup files for modulator and pynche; idle installs its own
    now.


author: Mihai Ibanescu <misa@redhat.com> 2.3.3-4
changelog:
  - Fix for bug #122304 : splitting the domain name fails on 64-bit arches
  - Fix for bug #120879 : including Makefile into the main package

  - Requires XFree86-devel instead of -libs (see bug #118442)


author: Mihai Ibanescu <misa@redhat.com> 2.3.3-6
changelog:
  - Correct fix for #122304 from upstream:
    http://sourceforge.net/tracker/?func=detail&atid=105470&aid=931848&group_id=5470


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-1
changelog:
  - Updated to 2.3.4-1 with Robert Scheck's help (bug #124764)
  - Added BuildRequires: tix-devel (bug #124918)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-3
changelog:
  - Added an optik.py that provides the same interface from optparse for
    backward compatibility; obsoleting python-optik


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-6
changelog:
  - Fixed #128030 (help() not printing anything)
  - Fixed #125472 (distutils.sysconfig.get_python_lib() not returning the right
    path on 64-bit systems)
  - Fixed #127357 (building python as a shared library)
  - Fixed  #19347 (including the contents of Tools/scripts/ in python-tools)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-7
changelog:
  - Including html documentation for non-i386 arches
  - Fixed #125362 (python-doc html files have japanese character encoding)
  - Fixed #128923 (missing dependency between python and python-devel)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-8
changelog:
  - Fixed bug #129769: Makefile in new python conflicts with older version found
    in old python-devel
  - Reorganized the spec file to get rid of the aspython2 define; __python_ver
    is more powerful.


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-10
changelog:
  - Fixed bug #77418 (Demo dir not packaged)
  - More tweaking on #19347 (Moved Tools/ under /usr/lib/python2.3/Tools)


author: Jeff Johnson <jbj@jbj.org> 2.4-2
changelog:
  - db-4.3.21 returns DB_BUFFER_SMALL rather than ENOMEM (#141994).
  - add Provide: python(abi) = 2.4
  - include msgfmt/pygettext *.pyc and *.pyo from brp-python-bytecompile.


author: Mihai Ibanescu <misa@redhat.com> 2.4-6
changelog:
  - building the docs from a different source rpm, to decouple bootstrapping
    python from having tetex installed


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-2
changelog:
  - Fixed bug #143667 (python should own /usr/lib/python* on 64-bit systems, for
    noarch packages)
  - Fixed bug #143419 (BuildRequires db4 is not versioned)


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-7
changelog:
  - Fixed bug #169046 (realpath is unsafe); thanks to
    Peter Jones <pjones@redhat.com> and Arjan van de Ven <arjanv@redhat.com> for
    diagnosing and the patch.


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-10
changelog:
  - Fixed bug #169159 (don't let python core dump if no arguments are passed in)
    Reworked the patch from -8 a bit more.


author: Peter Jones <pjones@redhat.com> 2.4.1-12
changelog:
  - Fixed bug #169159 (check for argc>0 and argv[0] == NULL, not just
      argv[0][0]='\0')
    Reworked the patch from -8 a bit more.


author: Mihai Ibanescu <misa@redhat.com> - 2.4.3-6
changelog:
  - Fixed bug #192592 (too aggressive assertion fails) - SF#1257960
  - Fixed bug #167468 (Doc/tools not included) - added in the python-tools package


author: Mihai Ibanescu <misa@redhat.com> - 2.4.99.c1
changelog:
  - Updated to 2.5c1. Merged fixes from FC6 too:
  - Fixed bug #199373 (on some platforms CFLAGS is needed when linking)
  - Fixed bug #198971 (case conversion not locale safe in logging library)
  - Verified bug #201434 (distutils.sysconfig is confused by the change to make
    python-devel multilib friendly) is fixed upstream


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - fix _md5 and _sha modules (Robert Sheck)
  - no longer provide optik compat; it's been a couple of years now
  - no longer provide the old shm module; if this is still needed, let's
    build it separately
  - no longer provide japanese codecs; should be a separate package


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - support db 4.5
  - obsolete python-elementtree; since it requires some code tweaks, don't
    provide it
  - obsolete old python-sqlite; provide the version that's actually included


author: Jeremy Katz <katzj@redhat.com> - 2.5.3-3
changelog:
  - fix atexit traceback with failed syslog logger (#218214)
  - split libpython into python-libs subpackage for multilib apps
    embedding python interpreters


author: Jeremy Katz <katzj@redhat.com> - 2.5.3-8
changelog:
  - fix extensions to use shared libpython (#219564)
  - all 64bit platforms need the regex fix (#122304)


author: Jeremy Katz <katzj@redhat.com> - 2.5.1-4
changelog:
  - fix _elementtree.so build (#245703)
  - ensure that extension modules we expect are actually built rather than
    having them silently fall out of the package


author: James Antill <jantill@redhat.com> - 2.5.1-13
changelog:
  - Add tix buildprereq
  - Add tkinter patch
  - Resolves: #281751
  - Fix ctypes loading of libraries, add requires on binutils
  - Resolves: #307221
  - Possible fix for CVE-2007-4965 possible exploitable integer overflow
  - Resolves: #295971


author: James Antill <jantill@redhat.com> - 2.5.1-15
changelog:
  - Do codec lowercase in C Locale.
  - Resolves: 207134 191096
  - Fix stupid namespacing in pysqlite, minimal upgrade to 2.3.3 pysqlite
  - Resolves: 263221


author: James Antill <jantill@redhat.com> - 2.5.1-16
changelog:
  - Fix pyconfig.h comment typo.
  - Add back test_support.py and the __init__.py file.
  - Resolves: rhbz#387401


author: James Antill <jantill@redhat.com> - 2.5.1-18
changelog:
  - Create a python-test sub-module, over 3MB of stuff noone wants.
  - Don't remove egginfo files, try this see what happens ... may revert.
  - Resolves: rhbz#414711


author: James Antill <jantill@redhat.com> - 2.5.1-20
changelog:
  - Add valgrind support files, as doc, to python-devel
  - Relates: rhbz#418621
  - Add new API from 2.6, set_wakeup_fd ... use at own risk, presumably won't
  - change but I have no control to guarantee that.
  - Resolves: rhbz#427794
  - Add gdbinit support file, as doc, to python-devel


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-2
changelog:
  - "Makefile" and the config-32/64.h file are needed by distutils/sysconfig.py
  _init_posix(), so we include them in the core package, along with their parent
  directories (bug 531901)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-3
changelog:
  - fixup the build when __python_ver is set (Zach Sadecki; bug 533989); use
  pybasever in the files section


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-4
changelog:
  - automatically disable arena allocator when run under valgrind (upstream
  issue 2422; patch 52)
  - add patch from Josh Boyer containing diff against upstream PyBSDDB to make
  the bsddb module compile against db-4.8 (patch 53, #544275); bump the necessary
  version of db4-devel to 4.8
  - patch setup.py so that it searches for db-4.8, and enable debug output for
  said search; make Setup.dist use db-4.8 (patch 54)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-5
changelog:
  - replace usage of %define with %global
  - use the %{_isa} macro to ensure that the python-devel dependency on python
  is for the correct multilib arch (#555943)
  - delete bundled copy of libffi to make sure we use the system one
  - replace references to /usr with %{_prefix}; replace references to
  /usr/include with %{_includedir}


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-6
changelog:
  - patch Makefile.pre.in to avoid building static library (patch111, bug 556092)
  - split up the "configure" invocation flags onto individual lines


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-9
changelog:
  - change python-2.6.2-config.patch to remove our downstream change to curses
  configuration in Modules/Setup.dist, so that the curses modules are built using
  setup.py with the downstream default (linking against libncursesw.so, rather
  than libncurses.so), rather than within the Makefile; add a test to %install
  to verify the dso files that the curses module is linked against the correct
  DSO (bug 539917; changes _cursesmodule.so -> _curses.so)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-10
changelog:
  - introduce macros for 3 directories, replacing expanded references throughout:
  %{pylibdir}, %{dynload_dir}, %{site_packages}
  - explicitly list all lib-dynload files, rather than dynamically gathering the
  payload into a temporary text file, so that we can be sure what we are
  shipping; remove now-redundant testing for presence of certain .so files
  - remove embedded copy of zlib from source tree before building


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-11
changelog:
  - update python-2.6.2-config.patch to remove downstream customization of build
  of pyexpat and elementtree modules
  - add patch adapted from upstream (patch 3) to add support for building against
  system expat; add --with-system-expat to "configure" invocation
  - remove embedded copy of expat from source tree during "prep"


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-12
changelog:
  - Address some of the issues identified in package review (bug 226342):
    - update libs requirement on base package to use %{name} for consistency's
  sake
    - convert from backticks to $() syntax throughout
    - wrap value of LD_LIBRARY_PATH in quotes
    - convert "/usr/bin/find" requirement to "findutils"
    - remove trailing periods from summaries of -devel and -tools subpackages
    - fix spelling mistake in description of -test subpackage
    - convert usage of $$RPM_BUILD_ROOT to %{buildroot} throughout, for
  stylistic consistency
    - supply dirmode arguments to defattr directives


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-15
changelog:
  - work around bug 562906 by supplying a fixed version of pythondeps.sh
  - set %{_python_bytecompile_errors_terminate_build} to 0 to prevent the broken
  test files from killing the build on buildroots where python is installed


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-17
changelog:
  - add systemtap static probes (wcohen; patch 55; rh bug #545179)
  - update some comments in specfile relating to gdb work
  - manually byte-compile the gdb.py file with the freshly-built python to ensure
  that .pyx and .pyo files make it into the debuginfo manifest if they are later
  byte-compiled after find-debuginfo.sh is run


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-18
changelog:
  - add a systemtap tapset defining "python.function.entry" and
  "python.function.return" to make it easy to use the static probepoint within
  Python; add an example of using the tapset to the docs


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-19
changelog:
  - revise the systemtap patch (patch 55:python-2.6.4-dtrace.patch) to the
  new version by mjw in attachment 390110 of rhbz:545179, as this should
  eliminate the performance penalty for the case where the probes aren't in
  use, and eliminate all architecture-specific code (rhbz:563541; except on
  sparc)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-20
changelog:
  - avoid having the "test" subdirectory and the files within it that are in the
  core subpackage also be owned by the test subpackage (rhbz:467588)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-22
changelog:
  - add pyfuntop.stp; allow systemtap support to be disabled
  - remove trailing period from tkinter summary
  - don't own /usr/bin/python-config if you're not the main python


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-23
changelog:
  - fixup distutils/unixccompiler.py to remove standard library path from
  rpath (patch 17)
  - delete DOS batch files


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-1
changelog:
  - update to 2.6.5: http://www.python.org/download/releases/2.6.5/
  - replace our patch to compile against db4.8 with a patch from
  upstream (patch 53, from r78974); update patch 54 since part of it is now in
  that upstream patch
  - update patch 110 so that it still applies in the face of upstream r78380


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-6
changelog:
  - move the "bdist_wininst" command's template .exe files from the core package
  to the devel subpackage, to save space (rhbz:525469)
  - fix stray doublelisting of config directory wildcard in devel subpackage


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-9
changelog:
  - build and install two different configurations of Python: debug and standard,
  packaging the debug build in a new "python-debug" subpackage (patch 112)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-10
changelog:
  - add configure-time support for COUNT_ALLOCS and CALL_PROFILE debug options
  (patch 113); enable them and the WITH_TSC option within the debug build


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-13
changelog:
  - ensure that the compiler is invoked with "-fwrapv" (rhbz#594819)
  - CVE-2010-1634: fix various integer overflow checks in the audioop
  module (patch 116)
  - CVE-2010-2089: further checks within the audioop module (patch 117)
  - CVE-2008-5983: the new PySys_SetArgvEx entry point from r81399 (patch 118)


author: Dan Horák <dan[at]danny.cz> - 2.6.5-14
changelog:
  - reading the timestamp counter is available only on some arches (see Python/ceval.c)
  - disable --with-valgrind on s390(x) arches


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-16
changelog:
  - Fix an incompatibility between pyexpat and the system expat-2.0.1 that led to
  a segfault running test_pyexpat.py (patch 119; upstream issue 9054)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-17
changelog:
  - Stop python bailing out with an assertion failure when UnicodeDecodeErrors
  occur on very large buffers (patch 120, upstream issue 9058)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-0.1.rc1
changelog:
  - 2.7rc1:
    - rework patches to apply against 2.7 (which among other changes has had a
  whitespace cleanup of the .c code): .rhconfig (patch0), .binutils-no-dep
  (patch10), .ascii-tolower (patch11), .socketmodule (patch13), .socketmodule2
  (patch14), .systemtap (patch55), .lib64 (patch102), .selinux (patch110),
  .no-static-lib (patch111), .debug-build (patch112), .statvfs-f-flag-constants
  (patch114), ..CVE-2010-2089 (patch117)
    - drop upstream patches: .expat (patch3), .brprpm (patch51), .valgrind
  (patch52), .db48 (patch53), .CVE-2010-1634 (patch 116), .CVE-2008-5983 (patch
  118)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-0.1.rc2
changelog:
  - 2.7rc2
  - revert r79310 (patch 121)
  - remove modulator: upstream removed it in r78338
  - rename mathmodule(_d).so to math(_d).so in manifests (appears to be changed
  by r76861)
  - _bytesio(_d).so and _filesio(_d).so were consolidated into _io(_d).so in
  r73394 (upstream issue 6215)
  - use the gdb hooks from the upstream tarball, rather than keeping our own
  copy. The upstream version has some whitespace changes, a new write_repr for
  unicode objects, and various bulletproofings for being run on older gdbs


author: David Malcolm <dmalcolm@redhat.com> - 2.7-1
changelog:
  - 2.7 final; drop alphatag
  - drop patch 117 (upstream), patch 120 (upstreamed)
  - fix the commented-out __python_ver from 26 to 27


author: David Malcolm <dmalcolm@redhat.com> - 2.7-2
changelog:
  - add machinery for regenerating the "configure" script in the face of
  mismatching autoconf versions (patch 300)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-4
changelog:
  - fix reference to pyconfig.h in sysconfig that led to failure on startup if
  python-devel was not installed


author: David Malcolm <dmalcolm@redhat.com> - 2.7-5
changelog:
  - disable systemtap for now (dtrace is failing on startup due to the bug
  mentioned in 2.7-4)
  - provide relative path to python binary when running pathfix.py
  - fix parallel make (patch 122)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-6
changelog:
  - re-enable systemtap
  - cherrypick upstream patch to 2to3 for "from itertools import *"
  traceback (patch 123)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-8
changelog:
  - add %check section
  - update lib64 patch (patch 102) to fix expected output in test_site.py on
  64-bit systems
  - patch test_commands.py to work with SELinux (patch 124)
  - patch the debug build's usage of COUNT_ALLOCS to be less verbose (patch 125)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-9
changelog:
  - move most of the payload of the core package to the libs subpackage, given
  that the libs aren't meaningfully usable without the standard libraries


author: David Malcolm <dmalcolm@redhat.com> - 2.7.1-1
changelog:
  - 2.7.1, reworking patch 0 (config), patch 102 (lib64); drop upstream
  patch 56 (cfgparse), patch 110 (ctypes/SELinux/noexecmem), patch 119 (expat
  compat), patch 123 (2to3 on "from itertools import *")
  - fix test_abc's test_cache_leak in the debug build (patch 128)
  - drop _weakref.so from manifest (_weakref became a core module in r84230)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.1-4
changelog:
  - for now, drop "obsoletes" of python-argparse, since it interracts badly with
  multilib (rhbz#667984)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-1
changelog:
  - 2.7.2; drop upstreamed patches: patch 122 (parallel make fix), patch 124
  (test_commands and SELinux), patch 130 (ppc preprocessor macro in debug
  build); patch 131 (decimal in Turkish locale); regenerate the autotool
  intermediates patch (patch 300)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-3
changelog:
  - reorganize test exclusions (test_openpty and test_pty seem to be failing on
  every arch, not just the explicitly-listed ones)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-7
changelog:
  - re-enable and fix the --with-tsc option on ppc64, and rework it on 32-bit
  ppc to avoid aliasing violations (patch 129; rhbz#698726)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-10
changelog:
  - rewrite of "check", introducing downstream-only hooks for skipping specific
  cases in an rpmbuild (patch 132), and fixing/skipping failing tests in a more
  fine-grained manner than before (patches 104, 133-142)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-11
changelog:
  - rename and renumber patches for consistency with python3.spec (55, 111, 113,
  114, 125, 131, 129 to 143)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-14
changelog:
  - support OpenSSL FIPS mode in _hashlib and hashlib; don't build the _md5 and
  _sha* modules, relying on _hashlib in hashlib, and thus within md5 etc
  (rhbz#563986; patch 146)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-1
changelog:
  - 2.7.3: refresh patch 102 (lib64); drop upstream patches 11 (ascii-to-lower),
  115 (pydoc robustness), 145 (linux2), 148 (gdbm magic values), 151 (deadlock
  in fork); refresh patch 112 (debug build); revise patch 127
  (test_structmember); fix test_gdb (patch 153); refresh patch 137 (distutils
  tests); add python2.pc to python-devel; regenerate the autotool intermediates
  patch (patch 300)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.3-11
changelog:
  - fix memory leak in module _hashlib (patch 158, rhbz#836285)
  - fix db4 include path for libdb4 package (f18 and above) (patch 159)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-17
changelog:
  - remove "_default_patch_fuzz" directive to avoid patches being silently
  misapplied (refresh patch 1, patch 101, patch 102, patch 111, patch 121,
  patch 158; rename patch 1, patch 101, patch 121; apply patch 54 before the
  lib64 patches to avoid fuzz problems caused by the conditional application
  of the lib64 patches)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-19
changelog:
  - bulletproof the gdb debugging hooks against a failure seen in ARM builds
  (patch 166; rhbz#912025)
  - re-enable make check on ARM (rhbz#912025)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-22
changelog:
  - fix a problem with distutils.sysconfig when CFLAGS is defined in the
  environment (patch 168; rhbz#849994)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-23
changelog:
  - use SHA-256 rather than implicitly using MD5 within the challenge handling
  in multiprocessing.connection (patch 169; rhbz#879695)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-25
changelog:
  - in debug builds, try to print repr() when a C-level assert fails in the
  garbage collector (typically indicating a reference-counting error somewhere
  else e.g in an extension module) (patch 170; rhbz#850013)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-27
changelog:
  - port _multiprocessing.Connection.poll() to use the "poll" syscall, rather
  than "select", allowing large numbers of subprocesses (patch 172;
  rhbz#849992)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-34
changelog:
  - restrict scope of workaround for cmpi-bindings issue to avoid breaking
  in-tree running of test_sys and test_subprocess (rhbz#817554)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.4-1
changelog:
  - Updated to Python 2.7.4.
  - Refreshed patches: 0 (config), 7 (sqlite encoding), 16 (rpath in config),
  55 (systemtap), 111 (no static lib), 112 (debug build), 113 (more
  configuration flags), 130 (add extension to python config), 134 (fix
  COUNT_ALLOCS in test_sys), 146 (haslib FIPS), 147 (add debug malloc stats),
  153 (fix gdb test noise), 157 (uid, gid overflow - fixed upstream, just
  keeping few more downstream tests), 165 (crypt module salt backport),
  175 (fix configure Wformat), 5000 (regenerated autotooling patch)
  - Dropped patches: 101 (lib64 regex; merged upstream), 171 (exception on
  missing /dev/urandom; merged upstream), 172 (poll for multiprocessing socket
  connection; merged upstream)


author: Kalev Lember <kalevlember@gmail.com> - 2.7.4-2
changelog:
  - Build with libdb 5.3 instead of libdb4
  - Refreshed patches: 0 (config), 102 (lib64)
  - Dropped patches: 54 (db4 version), 159 (db4 include path adjustment)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.5-1
changelog:
  - Updated to Python 2.7.5.
  - Refreshed patches: 0 (config), 102 (lib64), 121 (add Modules to build path),
  153 (gdb test noise)
  - Dropped patches: 126, 127 (big endian issues, both fixed upstream),
  175 (configure -Wformat, fixed upstream)
  - Synced patch numbers with python3.spec.


author: Matej Stuchlik <mstuchli@redhat.com> - 2.7.5-11
changelog:
  - Make library-files user writable to get rid of
    Permission Denied in buildlog from debuginfo-packaging


author: Tomas Radej <tradej@redhat.com> - 2.7.6-1
changelog:
  - Updated to v2.7.6
  - Freshened patches 102, 111, 112, 136, and 142
  - Dropped patches 186, 188 (both fixed upstream)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.6-5
changelog:
  - Fix test failure with SQLite > 3.8.4.
  - Obsolete/Provide python-unittest2
  Related:              rhbz#1060426


author: Matej Stuchlik <mstuchli@redhat.com> - 2.7.7-1
changelog:
  - Update to 2.7.7
  - Refreshed patches: #16, #112, #138, #147, #157, #166, #173, #5000
  - Dropped patches: #190, #192, #194


author: Matej Stuchlik <mstuchli@redhat.com> - 2.7.9-1
changelog:
  - Update to 2.7.9
  - Refreshed patches: #55, #137, #146, #153, #156, #198
  - Dropped patches: #196, #197
  - New patch: #199
  - Added the rewheel module


author: Slavek Kabrda <bkabrda@redhat.com> - 2.7.9-4
changelog:
  - We need to provide both arch specific and noarch Provide for python2-devel
  in order not to break noarch builds.


author: Thomas Spura <tomspur@fedoraproject.org> - 2.7.10-3
changelog:
  - Add unversioned python-macros from fpc#281 and fpc#534
    and require it from python-devel
  - Make python-macros noarch


author: Orion Poplawski <orion@cora.nwra.com> - 2.7.10-7
changelog:
  - Add obsoletes to %python_provide macro to fix upgrade path
  - Fix python2- provides for python- packages in %python_provide


author: Tomas Orsava <torsava@redhat.com> - 2.7.11-6
changelog:
  - Fix for: CVE-2016-0772 python: smtplib StartTLS stripping attack
  - Raise an error when STARTTLS fails
  - rhbz#1303647: https://bugzilla.redhat.com/show_bug.cgi?id=1303647
  - rhbz#1346344: https://bugzilla.redhat.com/show_bug.cgi?id=1346344
  - Fixed upstream: https://hg.python.org/cpython/rev/b3ce713fb9be


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.12-8
changelog:
  - Port ssl and hashlib modules to OpenSSL 1.1.0
  - Drop hashlib patch for now
  - Add riscv64 arch to 64bit and no-valgrind arches


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.12-9
changelog:
  - Rename package to python2 and also rename the subpackages accordingly
  - Provide and obsolete python and the respective subpackages to ensure a clean
  upgrade path
  - Remove old provides for packages that got into stdlib
  - Implement PEP 394


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.13-1
changelog:
  - Update to 2.7.13
  - Don't blow up on EL7 kernel (random generator) (rhbz#1410175, rhbz#1410187)
  - Require glibc >= 2.24.90-26 (rhbz#1410644)


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.13-8
changelog:
  - Enable profile guided optimizations for x86_64 and i686 architectures
  - Update description to reflect that Python 2 is not the default Python


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-9
changelog:
  - Added a dependency to the devel subpackage on python3-rpm-generators which
    have been excised out of rpm-build
  - There is no Python 2 package containing Python RPM generators, therefore
    Python 3 is needed when Python 2 package is to be built, but this was
    decided not to be a problem due to nearing EOL of Python 2
  - Involves: rhbz#1410631, rhbz#1444925


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.14-2
changelog:
  - Add a new PYTHONSHOWREFCOUNT environment variable for printing the reference
    count in debug builds.
  - Fix nondeterministic read in test_pty.


author: Petr Viktorin <pviktori@redhat.com> - 2.7.14-9
changelog:
  - Add patch 288: warn/fail if Python 2 is called as /usr/bin/python and
    PYTHON_DISALLOW_AMBIGUOUS_VERSION is set
  - Add patch 289: Fix for over-aligned GC info


author: Tomas Orsava <torsava@redhat.com> - 2.7.14-17
changelog:
  - Change shebangs to the proper versioned binary
  - Bytecompile files manually, disbale brp-python-bytecompile
  Resolves:             rhbz#1572171


author: Tomas Orsava <torsava@redhat.com> - 2.7.15-3
changelog:
  - Remove the /usr/bin/python executable so that the user can chose where it
    points to by installing various streams of the `python` module


author: Lumír Balhar <lbalhar@redhat.com> - 2.7.15-6
changelog:
  - Remove unversioned symlink to manual page and to pydoc binary.
    They are both available in streams of `python` module.
  - Resolves: rhbz#1613343


author: Tomas Orsava <torsava@redhat.com> - 2.7.15-9
changelog:
  - Set a special Provides tag that advertises the `python2` package as an
    alternative to the non-existing `python` package
  - Resolves: rhbz#1633559


author: Tomas Orsava <torsava@redhat.com> - 2.7.15-13
changelog:
  - Don't list /usr/bin/python as a ghost file so `yum install /usr/bin/python`
    doesn't install this package
  - Resolves: rhbz#1633537


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.15-18
changelog:
  - Workaround Python's threading library issue with non returning wait, for signals with timeout
  Resolves:             rhbz#1653754


author: Tomas Orsava <torsava@redhat.com> - 2.7.15-19
changelog:
  - Remove remaining unversioned executables (idle, msgfmt.py, pygettext.py,
    pynche, smtpd.py, python-config)
  Resolves:             rhbz#1656511


author: Tomas Orsava <torsava@redhat.com> - 2.7.15-21
changelog:
  - Fix Tkinter
  - Remove wininst exe files, that are no longer included, from the files section
  - Resolves: rhbz#1656488


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.16-7
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves:             rhbz#1703539 and rhbz#1704367


author: Miro Hrončok <mhroncok@redhat.com> - 2.7.16-11
changelog:
  - Use RPM built wheels of pip and setuptools in ensurepip instead of our rewheel patch
  - Require python2-setuptools from python2-devel to prevent packaging errors
  Resolves:             rhbz#1718398


author: Tomas Orsava <torsava@redhat.com> - 2.7.16-12
changelog:
  - Adding FIPS compliance to Python 2 in RHEL8:
    - Updated patch 146 with a new version of the FIPS patch
    - Patch 169 has been removed, obsoleted by the updated patch 146
  Resolves:             rhbz#1734126


author: Tomas Orsava <torsava@redhat.com> - 2.7.17-2
changelog:
  - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
  Resolves:             rhbz#1856481


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-2
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in httplib.putrequest
  Resolves:             rhbz#1883258


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-3
changelog:
  - Fixes for bundling prefix=/app build in gimp/inkscape containers
  Resolves:             rhbz#1907592


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-6
changelog:
  - Security fix for CVE-2020-27619: eval() call on content received via HTTP in the CJK codec tests
  Resolves:             rhbz#1889886


author: Lumír Balhar <lbalhar@redhat.com> - 2.7.18-8
changelog:
  - Security fixes for CVE-2021-3737 and CVE-2021-3733
  Resolves:             rhbz#1995162 and rhbz#1995234


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-9
changelog:
  - Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response
  Resolves:             rhbz#2036020


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-10
changelog:
  - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
  Resolves:             rhbz#2047376


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-11
changelog:
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves:             rhbz#2075390


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-12
changelog:
  - Security fix for CVE-2022-45061: CPU denial of service via inefficient IDNA decoder
  Resolves:             rhbz#2144072


author: zhangbinchen <zhangbinchen@openanolis.org> - 2.7.18-15.0.1
changelog:
  - Rebrand for Anolis OS
  - Support loongarch64 platform(Liwei Ge)
  - Pick up fix from Upstream (Jacob Wang)
    Fixup for CVE-2023-24329 patch name [f9e9f76](cstratak@redhat.com)
    Fix for CVE-2023-24329 [3f00cdc](lbalhar@redhat.com)


author: mahailiang <mahailiang@uniontech.com> - 2.7.18-15.0.1.01
changelog:
  - rebrand: rebrand to uos
  - spec: add BR git
  - spec: no check
  - spec: modify redhat-rpm-config to UnionTech-rpm-config


author: Charalampos Stratakis <cstratak@redhat.com> - 0.28.1-6
changelog:
  - Replace GCC's attribute optimize("Os") by the better supported and similar (cold).
  - Resolves: rhbz#1658621


author: Tomas Orsava <torsava@redhat.com> - 0.8.0-5
changelog:
  - Hardcode requires on python36-devel for the python36 module. This will have
    to be modified when python37 is added.


author: Tomas Orsava <torsava@redhat.com> - 1.0-16
changelog:
  - Update python macros to python2 versioned macros
  - Issue found when rebuilding the python27 module to include CVE fixes
  - Related: rhbz#1883890 rhbz#1883258


author: Petr Viktorin <pviktori@redhat.com> - 1.16.3-2
changelog:
  - Allow Python 2 for build
    See: https://hurl.corp.redhat.com/rhel8-py2

  - Skip tests on Python 2 (python2-pytest is being removed)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.5.3-2
changelog:
  - Patch from upstream for traceback when people use this with python2 and
    python3 in the same directory


author: Iryna Shcherbina <ishcherb@redhat.com> - 2.7.14-2
changelog:
  - Fix ambiguous Python 2 dependencies declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Tomas Orsava <torsava@redhat.com> - 2.7.15-2
changelog:
  - Modify for building on RHEL8
  - Disable the tests, because the linkchecker package isn't available in RHEL8
  - Resolves: rhbz#1656048


author: Tomas Orsava <torsava@redhat.com> - 2.7.15-3
changelog:
  - Modify for prebuilding and deploying on RHEL8
  - Rename the info page to python2
  - Resolves: rhbz#1656048


author: Tomas Orsava <torsava@redhat.com> - 0.14-11
changelog:
  - Remove python2 executables - they are functionally identical to the python3
    executables, so we're only going to ship them in the python3 subpackage
  - Resolves: rhbz#1656477


author: Petr Viktorin <pviktori@redhat.com> - 1.0.2-10
changelog:
  - Skip python2 tests to allow removing python2-unittest2 from the distribution
  - Fix workaround for allowing Python 2 for build


author: Petr Viktorin <pviktori@redhat.com> - 1.0.2-11
changelog:
  - Disable the python3 subpackage
    Functionality of funcsigs is available in Python 3's inspect module.


author: Petr Viktorin <pviktori@redhat.com> - 2.0.0-9
changelog:
  - Drop dependency on python3-funcsigs
    (funcsigs functionality is in the Python 3 standard library -- inspect)
  - Drop dependency on python2-unittest2
    (Not available in the distro)

  - Fix python2 requires names


author: Charalampos Stratakis <cstratak@redhat.com> - 1.14.2-12
changelog:
  - Set proper build flags for https://fedoraproject.org/wiki/Changes/Python_Extension_Flags
  - Resolves: rhbz#1715036


author: Charalampos Stratakis <cstratak@redhat.com> - 9.0.3-15
changelog:
  - Use the system level root certificate instead of the one bundled in certifi
  Resolves: rhbz#1659551


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-16
changelog:
  - Add four new patches for CVEs in bundled urllib3 and requests
  CVE-2018-20060, CVE-2019-11236, CVE-2019-11324, CVE-2018-18074
  Resolves: rhbz#1649153
  Resolves: rhbz#1700824
  Resolves: rhbz#1702473
  Resolves: rhbz#1643829


author: Tomas Orsava <torsava@redhat.com> - 9.0.3-18
changelog:
  - Patch for pip install <url> allow directory traversal, leading to arbitrary file write
  Resolves: rhbz#1870184


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.3.1-9
changelog:
  - Python 2 binary package renamed to python2-pluggy
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Petr Viktorin <pviktori@redhat.com> - 3.4.2-6
changelog:
  - Don't use timeout in tests
    https://bugzilla.redhat.com/show_bug.cgi?id=1592940
  - Add missing BuildRequires


author: Petr Viktorin <pviktori@redhat.com> - 3.4.2-7
changelog:
  - Remove BuildRequires on python2-hypothesis, a circular dependency
  - Explicitly BuildRequire python-attrs


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2017.2-3
changelog:
  - Python 2 binary package renamed to python2-pytz
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Matěj Cepl <mcepl@redhat.com> - 2017.2-6
changelog:
  - remove test_tzinfo.PicklingTest.testRoundtrip which fails with our
    system-wide timezone database (#1497572)


author: Orion Poplawski <orion@cora.nwra.com> - 2015.4-1
changelog:
  - Update to 2015.4 (bug #1161236)
  - Do not ship zoneinfo with python3 package (bug #1251554)
  - Run tests


author: Matěj Cepl <mcepl@redhat.com> - 2016.6.1-1
changelog:
  - Update to 2016.6.1 (RHBZ #1356337)
  - Fix Source0 URL to override a change in PyPI URLs (see
    https://bitbucket.org/pypa/pypi/issues/438/)


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.12-9
changelog:
  - Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Tomas Orsava <torsava@redhat.com> - 2.18.4-6
changelog:
  - Skip all tests needing httpbin: httpbin has too many dependencies to be
    shipped in RHEL just for build-time package tests


author: Arun SAG <sagarun@gmail.com> - 0.5.1-2
changelog:
  - Remove OPT_FLAGS from build section since it is a noarch package
  - Fix use of mixed tabs and space
  - Remove extra space around the word cumbersome in description


author: Arun SAG <sagarun@gmail.com> - 0.9.3-1
changelog:
  - Updated to new upstream version 0.9.3
  - Include python-gevent as a dependency for requests.async
  - Clean up shebangs in requests/setup.py,test_requests.py and test_requests_ext.py


author: Arun S A G <sagarun@gmail.com> 0.13.1-1
changelog:
  - Updated to latest upstream release 0.13.1
  - Use system provided ca-certificates
  - No more async requests use grrequests https://github.com/kennethreitz/grequests
  - Remove gevent as it is no longer required by requests


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.14.1-4
changelog:
  - Let brp_python_bytecompile run again, take care of the non-python{2,3} modules
    by removing them from the python{,3}-requests package that they did not belong
    in.
  - Use the certificates in the ca-certificates package instead of the bundled one
    + https://bugzilla.redhat.com/show_bug.cgi?id=904614
  - Fix a problem with cookie handling
    + https://bugzilla.redhat.com/show_bug.cgi?id=906924


author: Ralph Bean <rbean@redhat.com> - 1.1.0-1
changelog:
  - Latest upstream.
  - Relicense to ASL 2.0 with upstream.
  - Removed cookie handling patch (fixed in upstream tarball).
  - Updated cert unbundling patch to match upstream.
  - Added check section, but left it commented out for koji.


author: Ralph Bean <rbean@redhat.com> - 1.1.0-2
changelog:
  - Unbundled python-charade/chardet.  Using system python-chardet now.
  - Removed deprecated comments and actions against oauthlib unbundling.
    Those are no longer necessary in 1.1.0.
  - Added links to bz tickets over Patch declarations.


author: Ralph Bean <rbean@redhat.com> - 1.1.0-3
changelog:
  - Unbundled python-urllib3.  Using system python-urllib3 now.
  - Conditionally include python-ordereddict for el6.


author: Ralph Bean <rbean@redhat.com> - 2.0.0-1
changelog:
  - Latest upstream.
  - Add doc macro to the python3 files section.
  - Require python-urllib3 greater than or at 1.7.1.


author: Ralph Bean <rbean@redhat.com> - 2.7.0-3
changelog:
  - Lock down the python-urllib3 version to the specific version we unbundled.
    https://bugzilla.redhat.com/show_bug.cgi?id=1253823


author: Ralph Bean <rbean@redhat.com> - 2.7.0-6
changelog:
  - Replace the provides macro with a plain provides field for now until we can
    re-organize this package into two different subpackages.


author: Ralph Bean <rbean@redhat.com> - 2.7.0-7
changelog:
  - Tell setuptools about what version of urllib3 we're unbundling
    for https://github.com/kennethreitz/requests/issues/2816


author: Tomas Orsava <torsava@redhat.com> - 3-29
changelog:
  - Switch the Python 3 executable to /usr/libexec/platform-python
  - Update macros using pip or easy_install to be invoked through the main
    executable


author: Tomas Orsava <torsava@redhat.com> - 3-30
changelog:
  - Explicitly enable Python 2 when invoking Python 2 macros
    See: https://url.corp.redhat.com/rhel8-py2


author: Tomas Orsava <torsava@redhat.com> - 3-31
changelog:
  - Remove RHEL_ALLOW_PYTHON2_FOR_BUILD=1 from build and install macros,
    as that is where the user needs to set it themself


author: Tomas Orsava <torsava@redhat.com> - 3-32
changelog:
  - Merging: (Tue Jul 10 2018 Tomas Orsava <torsava@redhat.com> - 3-32)
    - Fix %py_byte_compile macro: when invoked with a Python 2 binary it also
      mistakenly ran py3_byte_compile
  - Merging: (Tue Jul 03 2018 Miro Hrončok <mhroncok@redhat.com> - 3-31)
    - Add %python3_platform useful for PYTHONPATH on arched builds
  - Merging: (Mon Jun 18 2018 Jason L Tibbitts III <tibbs@math.uh.edu> - 3-30)
    - Add %pypi_source macro, as well as %__pypi_url and
      %_pypi_default_extension.
  - Merging: (Wed Apr 18 2018 Miro Hrončok <mhroncok@redhat.com> - 3-29)
    - move macros.pybytecompile from python3-devel


author: Tomas Orsava <torsava@redhat.com> - 3-33
changelog:
  - macros.pybytecompile: Detect Python version through sys.version_info instead
    of guessing from the executable name


author: Nikola Forró <nforro@redhat.com> - 1.0.0-13
changelog:
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1624172


author: Neal Becker <ndbecker2@gmail.com> - 0.4.8-2
changelog:
  - Fix BuildRoot
  - Add BuildRequires, Requires
  - Test remove d1mach patch
  - Fix defattr
  - Add changelog
  - Removed Prefix, Vendor
  - Fix Source0


author: Jef Spaleta <jspaleta@gmail.com> - 0.5.1-4
changelog:
  - Minor adjustments to specfile for packaging guidelines.
  - Changed buildrequires fftw version 3  from fftw2


author: Jarrod Millman <millman@berkeley.edu> - 0.6.0-1
changelog:
  - update to new upstream source
  - update Summary, License, Url, and description
  - added extra dependencies
  - remove symlink since Lib has been renamed scipy


author: Orion Poplawski <orion@cora.nwra.com> - 0.9.0-1
changelog:
  - Update to 0.9.0
  - Drop all stsci sources and patches, dropped from upstream
  - Drop gcc and py27 patches fixed upstream
  - Add %check section to run tests


author: Thomas Spura <tomspur@fedoraproject.org> - 0.16.1-3
changelog:
  - Add patch to fix ctypes test
  - Move requires to correct python2 subpackage
  - Add FFLAGS also in %install


author: Björn Esser <besser82@fedoraproject.org> - 0.16.1-4
changelog:
  - Discard results of testsuite on %{arm} for now
    Segfaults on non-aligned memory test (expected for arm)


author: Christian Dersch <lupinix@mailbox.org> - 1.0.0-2
changelog:
  - Use openblas where available https://fedoraproject.org/wiki/Changes/OpenBLAS_as_default_BLAS
  - Remove ppc64 hackery for OpenBLAS
  - Don't run tests in parallel as pytest crashes
  - Don't run test_denormals as it tends to stuck


author: Petr Viktorin <pviktori@redhat.com> - 1.0.0-6
changelog:
  - Link with -lm to build with new stricter Fedora flags
    https://bugzilla.redhat.com/show_bug.cgi?id=1541416


author: Tomas Orsava <torsava@redhat.com> - 1.0.0-8
changelog:
  - Disabled docs building due to missing BuildRequires: python2/3-numpydoc
  - Disabled BuildRequires on pytest-xdist since it's not available in RHEL8
    right now and doesn't seem to be actually needed for the build


author: Tomas Orsava <torsava@redhat.com> - 1.0.0-9
changelog:
  - Removed test dependency python2/3-pytest-timeout, since it's not strictly needed and it's not available in RHEL8


author: Tomas Orsava <torsava@redhat.com> - 1.24.2-1
changelog:
  - Rebased to 1.24.2 to fix CVE-2019-11324
  - Added patches for CVE-2019-11236 (AKA CVE-2019-9740)
  - Resolves: rhbz#1706765 rhbz#1706762


author: Tomas Orsava <torsava@redhat.com> - 1.9.3-5
changelog:
  - Dropped test dependency on python3-pexpect since the tests weren't being
    run, and python3-pexpect is being dropped from RHEL8 as part of component
    trimming. If tests are needed in the future, they can be run by QE.


author: wangjie<wangjie294@huawei.com> -1.0.7-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Synchronize patches from community
         Verbose-CLI-start-pulling-Shared-Brotli.patch
         Ensure-decompression-consumes-all-input.patch
         fix-MSVC-configuration-and-c++-compilation-fails.patch
         fix-executable-mode-of-decode-js.patch
         Fix-include-for-EMCC-build.patch
         Add-an-option-to-avoid-building-shared-libraries.patch
         Disable-PIC-in-EMCC-mode.patch
         Add-missing-const-to-a-couple-of-kConstants.patch
         Move-TZCNT-and-BSR-intrinsics-and-add-MSVC-versions.patch


author: Vojtech Trefny <vtrefny@redhat.com> - 1.3-1
changelog:
  - Allow building libbytesize without Python 2 support (vtrefny)
  - Sync spec with downstream (vtrefny)
  - Add gcc to BuildRequires (vtrefny)
  - Fix links for documentation and GH project (vtrefny)
  - Add a HACKING.rst file (vpodzime)
  - Do not segfault when trying to bs_size_free NULL (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 1.4-1
changelog:
  - Squashed 'translation-canary/' changes from 840c2d6..fccbb1b (vtrefny)
  - Make sure the test script fails if one of the test runs fail (vtrefny)
  - Do not try to run python2 tests without python2 support (vtrefny)
  - Fix licence header for "gettext.h" (vtrefny)
  - Do not use rpm to check for Zanata client (vtrefny)
  - Use new ldconfig_scriptlets macro in spec (vtrefny)


author: Miro Hrončok <mhroncok@redhat.com> - 7.0-6
changelog:
  - Subpackage python2-click has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.1-26
changelog:
  - Python 2 binary package renamed to python2-cpio
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tim Waugh <twaugh@redhat.com> - 1.9.53-2
changelog:
  - Moved postscriptdriver RPM tagging machinery here.  Fixed
    leading/trailing whitespace in tags as well.


author: Tim Waugh <twaugh@redhat.com> - 1.9.53-3
changelog:
  - Fixed typo in psdriver.attr that prevented PPD files from being
    scanned when generating postscriptdriver tags.


author: Vendula Poncova <vponcova@redhat.com> - 0.2-1
changelog:
  - Unwrap DBus values (vponcova)
  - Unwrap a variant data type (vponcova)
  - Add a default DBus error (vponcova)
  - Use the minimal image in Travis CI (vponcova)
  - Remove GLibErrorHandler (vponcova)
  - Remove map_error and map_by_default (vponcova)
  - Extend arguments of dbus_error (vponcova)
  - Extend arguments of dbus_interface (vponcova)
  - The list of callbacks in signals can be changed during emitting (vponcova)
  - Don't import from mock (vponcova)
  - Enable checks in Travis CI (vponcova)
  - Fix too long lines (vponcova)
  - Don't use wildcard imports (vponcova)
  - Add the check target to the Makefile (vponcova)
  - Enable Travis CI (vponcova)
  - Catch logged warnings in the unit tests (vponcova)
  - Add the coverage target to the Makefile (vponcova)
  - Rename tests (vponcova)
  - Create Makefile (vponcova)
  - Create a .spec file (vponcova)
  - Add requirements to the README file (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 0.3-1
changelog:
  - Remove generate_dictionary_from_data (vponcova)
  - Improve some of the error messages (vponcova)
  - Check the list of DBus structures to convert (vponcova)
  - Add the Inspiration section to README (vponcova)
  - Enable syntax highlighting in README (vponcova)
  - Use the class EventLoop in README (vponcova)
  - Use the --no-merges option (vponcova)
  - Clean up the Makefile (vponcova)
  - Add examples (vponcova)
  - Add the representation of the event loop (vponcova)
  - Enable copr builds and add packit config (dhodovsk)
  - Extend README (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 0.4-1
changelog:
  - Replace the error register with the error mapper (vponcova)
  - Propagate additional arguments for the client handler factory (vponcova)
  - Propagate additional arguments in the class AddressedMessageBus (vponcova)
  - Generate the documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.0-1
changelog:
  - Fix the documentation (vponcova)
  - Fix minor typos (yurchor)
  - Enable Codecov (vponcova)
  - Test the documentation build (vponcova)
  - Extend the documentation (vponcova)
  - Add configuration files for Read the Docs and Conda (vponcova)
  - Fix all warnings from the generated documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.1-1
changelog:
  - Include tests and examples in the source distribution (vponcova)
  - Fix the pylint warning signature-differs (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.2-1
changelog:
  - Replace ABC with ABCMeta (vponcova)
  - Fix typing tests (vponcova)
  - Run tests on the latest CentOS (vponcova)
  - Install sphinx from PyPI (vponcova)


author: Brian C. Lane <bcl@redhat.com> - 0.12.2-4
changelog:
  - Add upstream changes from 0.12.4
    Resolves: rhbz#1585318
  - Add TestJSON to the gating test from upstream
    Related: rhbz#1585318


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.1-9
changelog:
  - Python 2 binary package renamed to python2-humanize
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miroslav Suchý <miroslav@suchy.cz> 2.3.4-1
changelog:
  - run pylint in %check
  - require hwdata in python 3 package too (jdobes@redhat.com)
  - implement PNP interface
  - errors in usb.ids should not be fatal
  - change upstream url in setup.py


author: Miroslav Suchý <msuchy@redhat.com> 2.3.5-1
changelog:
  - create python2-hwdata subpackage
  - use dnf instead of yum in README
  - remove rhel5 compatibilities from spec


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.1-1
changelog:
  - Update to 2.1, which fixes a number of bugs.
    See http://jinja.pocoo.org/2/documentation/changelog#version-2-1.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.2.1-1
changelog:
  - Update to 2.2.1, mainly a bugfix release.
  - Remove patch no longer needed.
  - Remove conditional for FC-8.
  - Compilation of speedup module has to be explicitly requested now.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.5-1
changelog:
  - Update to upstream version 2.5.
  - Create python3 subpackage.
  - Minor specfile fixes.
  - Add examples directory.
  - Thanks to Gareth Armstrong for additional hints.


author: David Malcolm <dmalcolm@redhat.com> - 2.5-3
changelog:
  - support disabling documentation in the build to break a circular build-time
  dependency with python-sphinx; disable docs for now


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.5.5-3
changelog:
  - Re-enable html doc generation.
  - Remove conditional for F-12 and below.
  - Do not silently fail the testsuite for with py3k.


author: haomimi <haomimi@uniontech.com> - 2.35.2-12.up4.07
changelog:
  - build: sync from anolis
  - build: fix #2142496 - update upstream tests
  - build: fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES
  - build: fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38
  - build: fix #2180413 - Backport hint about systemd daemon-reload


author: openEuler Buildteam <buildteam@openeuler.org> - 2.34-4
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:fix the problem of one iso can't mount directly twice by default


author: openEuler Buildteam <buildteam@openeuler.org> - 2.34-5
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:Add an entry for the HiSilicon aarch64 part tsv110 and
         use official name for HiSilicon tsv110


author: openEuler Buildteam <buildteam@openeuler.org> - 2.34-6
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:obsolete hardlink that has been merged into util-linux of 2.34


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.35.2-4
changelog:
  - Fix memleak in fdisk_script_read_file
    Fix heap-buffer-overflow in fdisk_partname
    Fix integer overflow in partno_from_devname


author: panchenbo <panchenbo@uniontech.com> - 2.35.2-11.up4
changelog:
  - Revert tty Chinese mode modification
    lscpu Add Phytium aarch64 FT-2000+ & S2500 cpupart
    Delete Chinese translation for sulogin
    fix noarch package built differently on different architectures


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-2
changelog:
  - [RFE] RFE backport allow enabling ZEROCOPY live migration to libvirt-python on RHEL8 to be consumed by VDSM (rhbz#2092756)


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Petr Viktorin <pviktori@redhat.com> - 1.0.6-9
changelog:
  - Make python-beaker an optional dependency
  - Add missing python_provide for python3-mako
  - Conditionalize the Python 2 subpackage
  - Modernize the specfile


author: Petr Viktorin <pviktori@redhat.com> - 1.0.6-11
changelog:
  - Add back the Python 2 subpackage (temporarily, for mesa build)
    https://bugzilla.redhat.com/show_bug.cgi?id=1569193


author: Petr Viktorin <pviktori@redhat.com> - 1.0.6-13
changelog:
  - Disable the Python 2 subpackage again
    https://bugzilla.redhat.com/show_bug.cgi?id=1590397
  - Fix the Python2 workaround


author: Martin Kolman <mkolman@redhat.com> - 0.44-1
changelog:
  - Some rpmlint fixes (mkolman)
  - Remove the removal of the eintr checker, which has been removed (dshea)


author: Martin Kolman <mkolman@redhat.com> - 0.47-1
changelog:
  - Make sure gettext returns strings not bytes (mkolman)
  - Spec: Move TUI back to main package (awilliam)


author: Martin Kolman <mkolman@redhat.com> - 0.47.2-1
changelog:
  - Require the Python interpreter directly instead of using the package name (torsava)
    Related: rhbz#1619153


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.19-4
changelog:
  - Python 2 binary package renamed to python2-netaddr
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tomas Orsava <torsava@redhat.com> - 1:1.14.3-5
changelog:
  - Switch runtime dependency of the python3-numpy-f2py package from
    python3-devel (that's now buildroot-only) to python3-libs-devel
  Resolves: rhbz#1610863


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.0.0-8
changelog:
  - Python 2 binary package renamed to python2-ordered-set
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-14
changelog:
  - Fixes for CVE-2021-25290, CVE-2021-25292, CVE-2021-25293, CVE-2021-27921
  CVE-2021-27922, and CVE-2021-27923
  Resolves: rhbz#1934685 rhbz#1934699 rhbz#1934705 rhbz#1935384 rhbz#1935396 rhbz#1935401


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-15
changelog:
  - Fixes for CVE-2021-25288, CVE-2021-25287, CVE-2021-28675, CVE-2021-28676,
  CVE-2021-28677 and CVE-2021-28678
  Resolves: rhbz#1958231, rhbz#1958226, rhbz#1958240, rhbz#1958252, rhbz#1958257, rhbz#1958263


author: Charalampos Stratakis <cstratak@redhat.com> - 5.1.1-18
changelog:
  - Fixup for CVE-2022-22817
  - Security fixes for CVE-2022-22815, CVE-2022-22816
  Resolves: rhbz#2042511, rhbz#2042522


author: Sandro Mani <manisandro@gmail.com> - 1.7.8-3.20130210gite09ff61
changelog:
  - Really remove -fno-strict-aliasing
  - Place comment on how to retreive source just above the Source0 line


author: Sandro Mani <manisandro@gmail.com> - 1.7.8-4.20130305git7866759
changelog:
  - Update to latest git snapshot
  - 0001-Cast-hash-table-values-to-unsigned-long.patch now upstream
  - Pillow-1.7.8-selftest.patch now upstream


author: Sandro Mani <manisandro@gmail.com> - 2.0.0-2.git2e88848
changelog:
  - Update to latest git
  - Remove python-pillow-disable-test.patch, gcc is now fixed
  - Add python-pillow_tempfile.patch to prevent a temporary file from getting packaged


author: Sandro Mani <manisandro@gmail.com> - 2.0.0-6.gitd1c6db8
changelog:
  - Update to latest git
  - python-pillow_quantization.patch now upstream
  - python-pillow_endianness.patch now upstream
  - Add subpackage for ImageQt module, with correct dependencies
  - Add PyQt4 and numpy BR (for generating docs / running tests)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0.0-7.gitd1c6db8
changelog:
  - Remove Obsoletes in the python-pillow-qt subpackage. Obsoletes isn't
    appropriate since qt support didn't exist in the previous python-pillow
    package so there's no reason to drag in python-pillow-qt when updating
    python-pillow.


author: Sandro Mani <manisandro@gmail.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Run tests in builddir, not installroot
  - Build python3-pillow docs with python3
  - python-pillow_endian.patch upstreamed


author: Sandro Mani <manisandro@gmail.com> - 2.1.0-4
changelog:
  - Add patch to fix incorrect PyArg_ParseTuple tuple signature, fixes rhbz#962091 and rhbz#988767.
  - Renable webp support on bigendian arches


author: Sandro Mani <manisandro@gmail.com> - 2.3.0-1
changelog:
  - Update to 2.3.0
  - Build with doc disabled to break circular python-pillow -> python-sphinx -> python pillow dependency


author: Sandro Mani <manisandro@gmail.com> - 2.4.0-2
changelog:
  - Enable Jpeg2000 support
  - Enable webp support also on s390* archs, bug #962091 is now fixed
  - Add upstream patch for ghostscript detection


author: Sandro Mani <manisandro@gmail.com> - 2.7.0-1
changelog:
  - Update to 2.7.0
  - Drop sane subpackage, is in python-sane now
  - Fix python3 headers directory
  - Drop Obsoletes: python3-pillow on python3-pillow-qt


author: Petr Viktorin <pviktori@redhat.com> - 5.1.1-2
changelog:
  - Remove the python2 version of docs
  - Remove Qt subpackages
  - Drop dependency on python2-olefile (breaking MicImagePlugin.py, FpxImagePlugin)


author: Petr Viktorin <pviktori@redhat.com> - 5.1.1-3
changelog:
  - Remove the Python 2 subpackage
  - Remove the libimagequant dependency
    The imagequant library was only used to support a non-default image
    quantization mode.


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-7
changelog:
  - Add upstream patch to solve build-time warning
  - Move patches to dist-git
  - Resolves: rhbz#1639348


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-16
changelog:
  - Add four new patches for CVEs in bundled urllib3 and requests
  - CVE-2018-20060, CVE-2019-11236, CVE-2019-11324, CVE-2018-18074
  - Resolves: rhbz#1649153
  - Resolves: rhbz#1700824
  - Resolves: rhbz#1702473
  - Resolves: rhbz#1643829


author: Tomas Orsava <torsava@redhat.com> - 9.0.3-18
changelog:
  - Patch for pip install <url> allow directory traversal, leading to arbitrary file write
  - Resolves: rhbz#1868016


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-20
changelog:
  - Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references
  - Resolves: rhbz#1962856


author: Tim Flink <tflink@fedoraproject.org> - 1.2.1-1
changelog:
  - Update to upstream 1.2.1
  - Change binary from pip-python to python-pip (RHBZ#855495)
  - Add alias from python-pip to pip-python, to be removed at a later date


author: Tim Flink <tflink@fedoraproject.org> - 1.4.1-1
changelog:
  - Removed patch for CVE 2013-2099 as it has been included in the upstream 1.4.1 release
  - Updated version to 1.4.1


author: Matej Stuchlik <mstuchli@redhat.com> - 1.5.6-3
changelog:
  - Added patch for local dos with predictable temp dictionary names
    (http://seclists.org/oss-sec/2014/q4/655)


author: Tomas Orsava <torsava@redhat.com> - 8.1.2-1
changelog:
  - Update to 8.1.2
  - Moved to a new PyPI URL format
  - Updated the prefix-stripping patch because of upstream changes in pip/wheel.py


author: Tomas Orsava <torsava@redhat.com> - 9.0.1-4
changelog:
  - Provide symlinks to executables to comply with Fedora guidelines for Python
  Resolves: rhbz#1406922


author: Tomas Orsava <torsava@redhat.com> - 9.0.1-12
changelog:
  - Switch macros to bcond's and make Python 2 optional to facilitate building
    the Python 2 and Python 3 modules


author: Tomas Orsava <torsava@redhat.com> - 9.0.3-5
changelog:
  - Split part of the python3-pip package into platform-python-pip
  - python3-pip will only contain binaries in /usr/bin
  - Resolves: rhbz#1638836


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-6
changelog:
  - python3-pip requires python36 and obsoletes previous version
    where python3- and platform-python- were in one package
  - Resolves: rhbz#1638836


author: Tomas Orsava <torsava@redhat.com> - 9.0.3-10
changelog:
  - Bump the NVR so it's higher than previous builds of python3-pip that have
    mistakenly gotten into the python27 module build when we were dealing with an
    MBS filtering problem. See BZ#1650568.
  - Resolves: rhbz#1638836


author: Victor Stinner <vstinner@redhat.com> - 9.0.3-11
changelog:
  - Prevent removing of the system packages installed under /usr/lib
    when pip install -U is executed. Patch by Michal Cyprian.
    Resolves: rhbz#1626408.


author: Miro Hrončok <mhroncok@redhat.com> - 9.0.3-13
changelog:
  - Use the system level root certificate instead of the one bundled in certifi
  - Resolves: rhbz#1655255


author: Tomas Orsava <torsava@redhat.com> - 9.0.3-18
changelog:
  - Patch for pip install <url> allow directory traversal, leading to arbitrary file write
  Resolves: rhbz#1868016


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-20
changelog:
  - Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references
  Resolves: rhbz#1962856


author: Jindrich Novy <jnovy@redhat.com> - 4.2.0-2
changelog:
  - fix "[RFE] python-podman: Podman support to perform custom actions on unhealthy containers"
  - Resolves: #2132360


author: Lokesh Mandvekar <lsm5@redhat.com> - 4.8.0.post1-1
changelog:
  - update to https://github.com/containers/podman-py/releases/tag/v4.8.0.post1
  - Related: Jira:RHEL-2110


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.2-12
changelog:
  - Python 2 binary package renamed to python2-prettytable
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tomas Orsava <torsava@redhat.com> - 2.8.4-3
changelog:
  - Fix shebang mangling
  - Don't ship the debug module, it is not needed and was not shipped in RHEL8 either


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.25.3-3
changelog:
  - Python 2 binary package renamed to python2-pyatspi
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Kamil Dudka <kdudka@redhat.com> - 7.43.0-15
changelog:
  - enable vsftpd-based tests
  - run the test-suite for Python 3 only
  - do not disable TLS-SRP test because it is now supported by OpenSSL in Fedora


author: Kamil Dudka <kdudka@redhat.com> - 7.43.0.2-4
changelog:
  - fix populating list of decoded strings (#1792213)
  - fix programming mistakes detected by static analyzers (#1666003)


author: Martin Kolman <mkolman@redhat.com> - 0.6.0-3
changelog:
  - add patch for DTD fix
  - add patch with support for asynchronous calls (vponcova)
  - add patch with support for transformation between D-Bus errors and exceptions (vponcova)


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.10-16
changelog:
  - Subpackage python2-pyodbc has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - Initial build split out into separate source from the parted package.
  - Don't build on ppc64 right now due to parted build problems (#118183)


author: Jeremy Katz <katzj@redhat.com> - 1.6.8-1
changelog:
  - update for new parted ABI
    - device -> heads, sectors, cylinders now refer to the bios geometry
  - require parted >= 1.6.12


author: David Cantrell <dcantrell@redhat.com> - 1.8.0-1
changelog:
  - Bump version to 1.8.0 and require parted >= 1.8.0
  - Remove python-abi Requires line since rpm handles that automatically


author: David Cantrell <dcantrell@redhat.com> - 1.8.1-1
changelog:
  - Determine Python version to use in %build so the source RPM is more
    easily moved between distribution releases.


author: Chris Lumens <clumens@redhat.com> - 2.1.2-1
changelog:
  - Upgrade to pyparted-2.1.2:
        PED_DEVICE_DM is always defined in libparted these days.
        Handle parted exceptions arising from ped_device_get (#495433).


author: David Cantrell <dcantrell@redhat.com> - 2.2-1
changelog:
  - Upgrade to pyparted-2.2:
        Fixes PedDisk2_ped_Disk() and avoids losing disk label data
        in the conversion process (#526999)


author: David Cantrell <dcantrell@redhat.com> - 2.3-1
changelog:
  - Upgrade to pyparted-2.3:
        Remove root user requirement in _ped
        Add testcases for new _ped device methods
        Add python wrapper for new PedDisk partition alignment info function
        Add support for new PedDisk parition alignment info function
        Add python wrappers for new PedDevice alignment info functions
        Add support for new PedDevice alignment info functions
        Fix a whole pile of test cases.
        Remove ped_disk_commit_to_dev() call from py_ped_disk_new_fresh()
        Fix error in Constraint __str__ method
        Make _ped_Device2PedDevice properly set / throw exceptions
        Fixup various errorhandling issues in pydisk.c
        Add missing _ped_Device2PedDevice() retval checks
        Use libparted commit() for parted.disk.Disk.commit() (hdegoede).
  - BR parted-devel >= 1.9.0-20


author: David Cantrell <dcantrell@redhat.com> - 2.4-1
changelog:
  - Upgrade to pyparted-2.4:
        Use PedDevice length instead of DIY (#532023) (hdegoede)
        Use sectorSize not physicalSectorSize for size calculations (hdegoede)


author: David Cantrell <dcantrell@redhat.com> - 2.5-1
changelog:
  - Update release instructions. (dcantrell)
  - Remove old cylinder alignment test cases for _ped. (dcantrell)
  - Add tests for max partition length / start sector (hdegoede)
  - Add _pedmodule and parted functions for max partition length / start
    sector (hdegoede)
  - Remove align_to_cylinders function bindings (hdegoede)
  - Add tests for disk flag methods (hdegoede)
  - Add _pedmodule and parted functions for per disk flags (hdegoede)
  - Every tuple member requires a comma after it. (dcantrell)
  - Fill out a lot of simple _ped.Disk test cases. (dcantrell)
  - Disable DeviceDestroyTestCase for now. (dcantrell)
  - Add RequiresLabeledDevice to tests/_ped/baseclass.py. (dcantrell)
  - Attempt at fixing _ped.Device.destroy(), no dice. (dcantrell)
  - Fix UnitFormatCustomTestCase and UnitFormatTestCase. (dcantrell)
  - Fix UnitFormatCustomByteTestCase and UnitFormatByteTestCase. (dcantrell)
  - Add DeviceStrTestCase, disable DeviceDestroyTestCase. (dcantrell)
  - Add DeviceDestroyTestCase and DeviceCacheRemoveTestCase. (dcantrell)
  - Implemented ConstraintIsSolutionTestCase(). (dcantrell)
  - Implement ConstraintSolveMaxTestCase(). (dcantrell)
  - Implement ConstraintSolveNearestTestCase(). (dcantrell)
  - Correct py_ped_file_system_probe_specific() for NULL returns. (dcantrell)
  - Implement FileSystemProbeSpecificTestCase(). (dcantrell)
  - Implement FileSystemProbeTestCase(). (dcantrell)
  - Add RequiresFileSystem to tests/_ped/baseclass.py. (dcantrell)
  - Add disk alignment test cases in test_ped.py. (dcantrell)
  - Fix CHSGeometryStrTestCase(). (dcantrell)
  - Fix ConstraintDuplicateTestCase...finally. (dcantrell)
  - Put a deprecation warning in py_ped_constraint_duplicate(). (dcantrell)
  - Note that we need parted from Fedora for pyparted. (dcantrell)
  - Fix UnitGetSizeTestCase in _ped test cases for _ped.UNIT_PERCENT.
    (dcantrell)
  - Add testcase for new _ped disk get_partition_alignment method (hdegoede)


author: Hans de Goede <hdegoede@redhat.com> - 2.5-3
changelog:
  - Change python_sitearch macro to use %global as the new rpm will break
    using %define here, see:
    https://www.redhat.com/archives/fedora-devel-list/2010-January/msg00093.html


author: Hans de Goede <hdegoede@redhat.com> - 2.5-4
changelog:
  - Rebuild for new parted-2.1
  - Remove py_disk_clobber_exclude function binding, as this function was
    removed from parted-2.1


author: David Cantrell <dcantrell@redhat.com> - 3.5-1
changelog:
  - Drop dependency on python-decorator module. (dcantrell)
  - Differentiate the "Could not commit" messages. (jgranado)
  - Import _ped.DiskLabelException into parted namespace (cjwatson)
  - Return PED_EXCEPTION_NO for yes/no interactive exceptions. (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 3.9-3
changelog:
  - Revert to pyparted-3.9 plus critical patches due to issues with the 3.10
    release which are actively being worked on.  The 3.10 release does not
    work with the installer right now.


author: David Cantrell <dcantrell@redhat.com> - 3.9.1-1
changelog:
  - Fix 'make bumpver' to handle multiple decimal points. (dcantrell)
  - Add support for hfs_esp flag (dcantrell)
  - Add support for esp flag (bcl)
  - Add support for irst flag (bcl)
  - Add support for msftdata flag (bcl)
  - Subject: [PATCH] pyparted: export ped_disk_new functionality (rnsastry)
  - Convert Constraint to __ped.Constraint in partition.getMaxGeometry()
    (chris)
  - Do not traceback when calling setlocale (#875354). (clumens)
  - Enable 'make check' in the spec file, patch for koji use
  - Add armv7l to the list of acceptable arches for gpt and msdos disklabels


author: David Cantrell <dcantrell@redhat.com> - 3.9.2-1
changelog:
  - Upgrade to pyparted-3.9.2
  - Enable 'make check' in the spec file, patch for koji use
  - Add armv7l to the list of acceptable arches for gpt and msdos disklabels


author: Chris Lumens <clumens@redhat.com> 3.9.3-1
changelog:
  - Upgrade to pyparted-3.9.3
  - Revert "Add support for hfs_esp flag" (bcl)
  - Add btrfs and ext4 for filesystem type test (bcl)
  - Remove geom tests that don't fail (bcl)


author: David Cantrell <dcantrell@redhat.com> - 3.10.6-1
changelog:
  - Use sys.exit instead of os._exit with pocketlint. (clumens)
  - Use addCleanup instead of tearDown for removing temp-device. (clumens)
  - Add a new makefile target that does everything needed for jenkins.
    (clumens)
  - Merge pull request #13 from atodorov/fix_imports (david.l.cantrell)
  - Merge pull request #14 from vpodzime/master (david.l.cantrell)
  - Do not support and use hashing on pyparted's objects (#1229186) (vpodzime)
  - Fix pylint errors (atodorov)
  - Merge pull request #12 from atodorov/remove_hardcoded_paths
    (david.l.cantrell)
  - Merge pull request #8 from atodorov/tests_ped_filesystem (david.l.cantrell)
  - Merge pull request #10 from atodorov/tests_ped_partition (david.l.cantrell)
  - Merge pull request #6 from atodorov/add_coverage (david.l.cantrell)
  - Remove hard-coded paths. You should have all tools in PATH when working on
    pyparted. (atodorov)
  - run the test suite under python-coverage and report the results (atodorov)
  - add test coverage for _ped.Partition (atodorov)
  - Merge pull request #9 from atodorov/tests_dont_skip_if_root
    (david.l.cantrell)
  - Merge pull request #11 from atodorov/fix_api_docs (david.l.cantrell)
  - update pydoc descriptions based on actual behavior (atodorov)
  - don't skip DeviceGetNextTestCase if running as root (atodorov)
  - add test cases for _ped.FileSystem (atodorov)
  - Merge pull request #7 from atodorov/tests_readme (david.l.cantrell)
  - Remove old BUGS file. (david.l.cantrell)
  - add simple test documentation (atodorov)
  - Merge pull request #5 from vpodzime/master (david.l.cantrell)
  - Beware of Python 3's version of the map() built-in function (vpodzime)
  - Remove the MANIFEST file when doing 'make release' (dcantrell)
  - Remove fedorahosted steps from the RELEASE file. (dcantrell)
  - Update documentation and Makefile for github. (dcantrell)
  - Stop using type() to do comparisons. (clumens)
  - Merge pull request #4 from vpodzime/master-python3 (david.l.cantrell)
  - Don't blindly expect that everything is hashable (vpodzime)
  - Replace filter() call with list comprehension (vpodzime)
  - Fix an incorrect reference to "type". (clumens)
  - Merge pull request #3 from clumens/master (clumens)
  - Only run pylint against a python3 build of pyparted. (clumens)
  - Fix the fdisk example up to pass pylint. (clumens)
  - Catch exact exceptions in a couple places. (clumens)
  - Ignore some pylint warnings. (clumens)
  - Don't use string formatting in calls to log.whatever. (clumens)
  - Fix a couple unused variable warnings. (clumens)
  - Define things in the setUp methods, not in runTest. (clumens)
  - Don't redefine reserved or already used function names. (clumens)
  - Fix import errors turned up by pylint. (clumens)
  - Convert to using pocketlint to run pylint. (clumens)
  - Don't run "git clean -fdx" in the "make clean" target. (clumens)
  - Add extension whitelist for _ped to pylint call (bcl)
  - Merge pull request #2 from jflorian/master (david.l.cantrell)
  - New - example to create a single bootable partition (john_florian)
  - Remember to pass the arguments to the exception handler. (clumens)
  - Put new _ped constants and functions into the parted module. (clumens)
  - PyInt_FromLong doesn't exist in python3, so always use PyLong_FromLong.
    (clumens)
  - Add new functions to extend exception handling. (clumens)
  - Add function for resetting partition's number. (vpodzime)
  - Fix localeC imports in a handful of src/parted/*.py files. (dcantrell)
  - Disable false positive E0611 errors on src/parted/__init__.py (dcantrell)
  - ped_unit_get_size() returns a long long, not just a long. (dcantrell)
  - Adjust test cases to deal with run-time support. (dcantrell)
  - Only import partition types that exist. (dcantrell)
  - Note x.y.z version number. (dcantrell)
  - Remove .travis.yml and tox.ini (dcantrell)
  - Skip 'aix' diskType in FreshDiskTestCase (dcantrell)
  - Handle running the test suite on armv7l hosts. (dcantrell)
  - Fix getPartitionByPath for disks that are just plain files. (dlehman)
  - ext2 may be smaller than the end of the device (#1095904) (bcl)
  - support ppc64le in pyparted (hamzy)
  - Fix up the PYTHONPATH for "make check" and "make test". (clumens)
  - Remove geom tests that don't fail (bcl)
  - Add btrfs and ext4 for filesystem type test (bcl)
  - Revert "Add support for hfs_esp flag" (bcl)
  - Teach pyparted that aarch64 support GPT partitions. (dcantrell)
  - And disable the length one, too. (clumens)
  - Disable one test case that fails on ppc64, for the moment. (clumens)
  - Update pylint options for the latest version of that program. (clumens)
  - Fix 'make bumpver' to handle multiple decimal points. (dcantrell)
  - Add support for hfs_esp flag (dcantrell)
  - Add support for esp flag (dcantrell)
  - Add support for irst flag (dcantrell)
  - Add support for msftdata flag (dcantrell)
  - Don't assume tools will be in the user's $PATH. (clumens)
  - Fix a lot of problems pylint caught. (clumens)
  - Move from pychecker to pylint. (clumens)
  - Have pychecker ignore some fale positives on missing class attrs. (clumens)
  - setattr doesn't return any value. (clumens)
  - Fix up pychecker errors reported by Jenkins. (dcantrell)
  - Subject: [PATCH] pyparted: export ped_disk_new functionality (rnsastry)
  - Correct boilerplate modifications. (dcantrell)
  - Tests also require the parted binary. (g2p.code)
  - Work around Travis's broken defaults. (g2p.code)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:3.11.0-6
changelog:
  - Python 2 binary package renamed to python2-pyparted
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.1-10
changelog:
  - Update Python macros to new packaging standards
    (See https://fedoraproject.org/wiki/Changes/Move_usr_bin_python_into_separate_package)


author: Tomas Orsava <torsava@redhat.com> - 0.1.14-5.git7dea353
changelog:
  - Conditionalize the Python 2 subpackage
  - Don't build the Python 2 subpackage on EL > 7 and Fedora > 28


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.0-6
changelog:
  - Python 2 binary package renamed to python2-pyusb
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 5.1-8
changelog:
  - Python 2 binary package renamed to python2-qrcode
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tomas Orsava <torsava@redhat.com> - 5.1-12
changelog:
  - Require platform-python-setuptools instead of python3-setuptools
  - Resolves: rhbz#1654457, rhbz#1654458


author: zhangkea <zhangkea@uniontech.com> - 3.4.0-10.02
changelog:
  - fix cve CVE-2019-19450 
  - Do not evaluate unichar element
  - Replace an invalid char with a correct one (rpminspect)
  - Resolves: RHEL-7008


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.16-8
changelog:
  - Related: #1622145 - don't run dmi_warnings() if there's no dmidecode
    (tkasparek@redhat.com)
  - Related: #1622145 - split into arch package (tkasparek@redhat.com)
  - Resolves: #1622145 - drop dmidecode dependency on non x86_64 arches
    (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.6-4
changelog:
  - don't package python2 files for rhnlib (tkasparek@redhat.com)
  - be compliant with new packaging guidelines when requiring python2 packages
    (tkasparek@redhat.com)


author: Tomas Orsava <torsava@redhat.com> - 5-5
changelog:
  - Create major-version provides only on major Python versions (2.7, 3.6)
  - Fix an extra parenthesis in python.attr
  - Resolves: rhbz#1776941


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.5-2
changelog:
  - Subpackage python2-rpmfluff has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jan Hutar <jhutar@redhat.com> - 0.5.6-1
changelog:
  - dshea: Add a add_manpage function
  - dshea: Sanitize the base directory name
  - dshea: Support subpackage scriptlets
  - dshea: Allow file directives to be added to symlinks
  - dshea: Use valid images for the test PNG and GIF data


author: Jan Hutar <jhutar@redhat.com> - 0.5.7-1
changelog:
  - Remove python 2 subpackage
  - ksrot: RPM now returns all string data as surrogate-escaped utf-8 strings
  - bcl: Tests fixes
  - bcl: pylint warnings
  - Better version of the check as advised by pmatilai


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.5.0-4
changelog:
  - Python 2 binary package renamed to python2-sanlock
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.8-1
changelog:
  - Update to 0.8 stable release
  - Rename python package for consistency
  - Add python3 bindings - fixes RHBZ 867958
  - Update the systemd scriptlets to the macroized versions


author: Scott Talbert <swt@techie.net> - 0.7-0.1.94664ddd46a6
changelog:
  - Switched to Jurko fork of suds
  - Modernize python packaging, build python3 package
  - Fixed bogus changelog dates


author: Scott Talbert <swt@techie.net> - 0.7-0.2.94664ddd46a6
changelog:
  - Applied patch from Haikel Guemar to support building on CentOS w/o Python 3
  - Move BRs to subpackages, support python- vs python2- BRs on non-Fedora


author: Petr Viktorin <pviktori@redhat.com> - 0.7-0.8.94664ddd46a6
changelog:
  - Don't build the python2 subpackage in rhel>7
    https://bugzilla.redhat.com/show_bug.cgi?id=1567165


author: Petr Machata <pmachata@redhat.com> - 2.0-2.20070927
changelog:
  - Review fixes
    - GCC 4.3 patchset
    - Add BR util-linux net-tools
    - Add full URL to Source0
    - Build in debug mode to work around problems with GCC 4.3


author: Petr Machata <pmachata@redhat.com> - 2.2-2.20090809
changelog:
  - Replace mfence instruction with xchg to make it run on ia32-class
    machines without SSE2.
  - Resolves: #600654


author: Petr Machata <pmachata@redhat.com> - 3.0-1.20110419
changelog:
  - Rebase to 3.0-r6
    - Port both patches
    - Package Design_Patterns.pdf
    - Thanks to Richard Shaw for initial rebase patch
  - Resolves: #723043


author: Petr Machata <pmachata@redhat.com> - 4.0-4.20120408
changelog:
  - Rebase to 4.0 update 4
  - Refresh Getting_Started.pdf, Reference.pdf, Tutorial.pdf
  - Provide pkg-config files
  - Resolves: #825402


author: Petr Machata <pmachata@redhat.com> - 4.1-2.20130314
changelog:
  - Fix mfence patch.  Since the __TBB_full_memory_fence macro was
    function-call-like, it stole () intended for function invocation.


author: Jerry James <loganjerry@gmail.com> - 4.4-1.20151115
changelog:
  - Rebase to 4.4u2
  - Fix the mfence patch to actually emit a memory barrier (bz 1288314)
  - Build an sse2 version for i386 for better performance on capable CPUs
  - Enable use of C++0x features
  - Drop out-of-date CHANGES.txt from git


author: Jerry James <loganjerry@gmail.com> - 2017.5-1
changelog:
  - Rebase to 2017 update 5
  - Change version scheme again to match upstream's change
  - New source URL on github
  - Drop upstreamed patch to fix detection of s390x as 64-bit arch


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018.2-7
changelog:
  - Selectively build python2 or python3 based on current version.
  - Don't use pathfix.py as it fails prep on RHEL when building on systems
    do not have python installled.


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.3-4
changelog:
  - Initial package for RHEL 8
  - Resolves: rhbz#2175215
  - Fedora+EPEL contributions by:
        Maxwell G <gotmax@e.email>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>


author: Jakub Kadlčík <frostyx@email.cz> 0.7.1-1
changelog:
  - Fix #116 - Support currrent versions of DNF (elyscape@gmail.com)
  - Fix #112 - handle PIDs that have no unit_path (seanokeeffe797@gmail.com)
  - Fix #119 - Improve session detection logic to fix (elyscape@gmail.com)
  - Fix space, instead of tabs (#115) (JensKuehnel@users.noreply.github.com)
  - A lot of changes to spec file regarding python2/3 (seanokeeffe797@gmail.com)


author: Jonathon Turel <jturel@gmail.com> 0.7.2-1
changelog:
  - Use DNF on RHEL (jturel@gmail.com)
  - Use PackageManager to determine kernel version (jturel@gmail.com)
  - Use subprocess to check process path arguments (jturel@gmail.com)
  - Find the right lxml version for Python 3.4 (jturel@gmail.com)
  - Update Vagrantfile to use Fedora 30 (jturel@gmail.com)
  - Ignore debug kernels when checking if kernel has been updated
    (jturel@gmail.com)
  - Add build dependency for nosetests (frostyx@email.cz)
  - Run tests within the %check phase (frostyx@email.cz)
  - Update fedora branches (frostyx@email.cz)


author: Jonathon Turel <jturel@gmail.com> 0.7.2-3
changelog:
  - Update tito releaser branches (frostyx@email.cz)
  - Not build for python2 package for Fedora anymore (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.4-1
changelog:
  - Fix list index out of range for ssh process names (frostyx@email.cz)
  - When there is no helper, it doesn't contain anything (frostyx@email.cz)
  - Fix wrong parameters number when upating an application objects
    (frostyx@email.cz)
  - Remove unnecessary string decoding (frostyx@email.cz)
  - Fix the missing dist in release (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.5-1
changelog:
  - Depend on python3-six instead of python3-future (frostyx@email.cz)
  - Drop beautifulsoup4 in favor of built-in xml.dom (frostyx@email.cz)
  - Drop nosetests dependency, use pytest instead (frostyx@email.cz)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.11.10-7
changelog:
  - Python 2 binary package renamed to python2-werkzeug
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-14
changelog:
  - Set a special Provides tag that advertises the `python36` package as an
    alternative to the non-existing `python` package
  - Resolves: rhbz#1633561


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-15
changelog:
  - Don't list /usr/bin/python as a ghost file so `yum install /usr/bin/python`
    doesn't install this package
  - Resolves: rhbz#1633534


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-18
changelog:
  - Remove the Python source tarball as it's not being used in this symlink
    component
  - Create a new explanatory README
  - Resolves: rhbz#1654867


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.8-3
changelog:
  - Security fix for CVE-2021-29921: Leading zeros in IPv4 addresses are no longer tolerated
  Resolves: rhbz#1957458


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.13-1
changelog:
  - Rebase to 3.8.13
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2075390


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.14-1
changelog:
  - Rebase to 3.8.14
  - Security fixes for CVE-2020-10735 and CVE-2021-28861
  Resolves: rhbz#1834423, rhbz#2120642


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.3-5
changelog:
  - Subpackage python2-cffi has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.4-14
changelog:
  - Subpackage python2-chardet has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 2.7-3
changelog:
  - Skip unit tests that fail with OpenSSL 1.1.1.d
  - Resolves: rhbz#1761194
  - Fix and simplify Python 3 packaging


author: Lumír Balhar <lbalhar@redhat.com> - 19.3.1
changelog:
  - Rebase to 19.3.1 to enable support for manylinux2014
  Resolves: rhbz#1827623
  - + some other fixes from Fedora 32 where we have the same version now


author: Orion Poplawski <orion@nwra.com> - 19.3.1-6
changelog:
  - Backport patch to fix infinite recursion with pip wheel with $TMPDIR in $PWD
  - Resolves: rhbz#2090006


author: Miro Hrončok <mhroncok@redhat.com> - 3.11-6
changelog:
  - Subpackage python2-ply has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Charalampos Stratakis <cstratak@redhat.com> - 5.6.4-4
changelog:
  - Security fix for CVE-2019-18874: double free because of refcount mishandling
  Resolves: rhbz#1772014


author: Christian Heimes <cheimes@redhat.com> - 2.14-18
changelog:
  - Add build dependency on cpp for unit tests
  - Add dependency on python-ply version to prevent "yacc table file version is out of date"
  - Fixes RHBZ#1668230


author: Petr Viktorin <pviktori@redhat.com> - 1.2.1-6
changelog:
  - Remove build dependency on python2-pytest-xdist and python2-pytest-timeout
  - Enable parallel tests in Python 3 %check
  - Use macros for Python interpreter in tests


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.1-1
changelog:
  - Update to 1.3.1 (#1674101)
  - Drop Python 2 packages (not supported by SciPy >= 1.3)
  - Backported upstream patch for cKDTree (fixes FTBFS)


author: Lumír Balhar <lbalhar@redhat.com> - 1.3.1-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983


author: Tomas Orsava <torsava@redhat.com> - 41.6.0-1
changelog:
  - Upgrade to 41.6.0 (#1758945).
  - https://setuptools.readthedocs.io/en/latest/history.html#v41-6-0
  - Disabled a failing upstream test: https://github.com/pypa/setuptools/issues/1896


author: Miro Hrončok <mhroncok@redhat.com> - 1.25.7-2
changelog:
  - Subpackage python2-urllib3 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Lumír Balhar <lbalhar@redhat.com> - 1.25.7-5
changelog:
  - Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser
  Resolves: rhbz#1968074
  - Update RECENT_DATE dynamically


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.6-1
changelog:
  - Update to 3.9.6
  - Fix CVE-2021-29921: Improper input validation of octal strings in the ipaddress module
  Resolves: rhbz#1957458


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.13-1
changelog:
  - Update to 3.9.13
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2075390


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.14-1
changelog:
  - Update to 3.9.14
  - Security fixes for CVE-2020-10735 and CVE-2021-28861
  Resolves: rhbz#1834423, rhbz#2120642


author: Miro Hrončok <mhroncok@redhat.com> - 2.8-5
changelog:
  - Subpackage python2-idna has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.1-3
changelog:
  - Subpackage python2-lxml has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tom Stellard <tstellar@redhat.com> - 4.6.8-3
changelog:
  - Use make_build macro instead of just make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Nikola Forró <nforro@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - Increase test timeout, 300 seconds is not always enough
    for test_logpdf_overflow on s390x
    resolves: #1894887


author: Tomas Orsava <torsava@redhat.com> - 1.5.4-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983 rhbz#1877430


author: Miro Hrončok <mhroncok@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0 (#1768982) for Python 3.9 support (#1788494)
  - Drop old obsoletes for platform-python-six


author: Tomas Orsava <torsava@redhat.com> - 0.10.1-5
changelog:
  - Convert spec for python39 module in RHEL8
  - Revert usage of pyproject-rpm-macros
  - Resolves: rhbz#1877430


author: Tomas Orsava <torsava@redhat.com> - 1:0.35.1-3
changelog:
  - Add back Epoch 1 to the package version because the original version with the
    epoch was available in CentOS Stream for a few days
  - Resolves: rhbz#1877430


author: <fengjiabo1@huawei.com> - 10:6.2.0-83
changelog:
  - hw/virtio/virtio-pmem: Replace impossible check by assertion
  - tests: Fix printf format string in acpi-utils.c
  - softmmu/dirtylimit: Add parameter check for hmp "set_vcpu_dirty_limit"
  - disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
  - qga: Fix memory leak when output stream is unused
  - ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
  - target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model
  - target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES
  - target/i386: Allow MCDT_NO if host supports
  - target/i386: Add support for MCDT_NO in CPUID enumeration
  - target/i386: Export MSR_ARCH_CAPABILITIES bits to guests
  - target/i386: add support for FB_CLEAR feature
  - target/i386: add support for FLUSH_L1D feature
  - crypto: remove shadowed 'ret' variable
  - hw/i2c/pmbus_device: Fix modifying QOM class internals from instance
  - hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number


author: <fengjiabo1@huawei.com> - 10:6.2.0-84
changelog:
  - hw/arm/fsl-imx: Do not ignore Error argument
  - hw/net/cadence_gem.c: spelling fixes: Octects
  - tests/qtest: check the return value
  - libvhost-user: Fix VHOST_USER_GET_MAX_MEM_SLOTS  reply mainline inclusion commit 69a5daec06f423843ce1bb9be5fb049314996f78 category: bugfix
  - io_uring: fix short read slow path mainline inclusion commit c06fc7ce147e57ab493bad9263f1601b8298484b category: bugfix
  - libvhost-user: Fix VHOST_USER_ADD_MEM_REG reply mainline inclusion commit 7f27d20ded2f480f3e66d03f90ea71507b834276 category: bugfix
  - qsd: Unlink absolute PID file path mainline inclusion commit 9d8f8233b9fa525a7e37350fbc18877051128c5d category: bugfix
  - net: Fix a misleading error message
  - vdpa: stop all svq on device deletion
  - vhost: release virtqueue objects in error path
  - vhost: fix the fd leak
  - virtio: i2c: Check notifier helpers for VIRTIO_CONFIG_IRQ_IDX
  - hw/virtio: fix typo in VIRTIO_CONFIG_IRQ_IDX comments
  - virtio-net: clear guest_announce feature if no cvq backend
  - vdpa: fix VHOST_BACKEND_F_IOTLB_ASID flag check
  - vdpa: do not block migration if device has cvq and x-svq=on
  - vdpa net: block migration if the device has CVQ
  - vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
  - vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
  - vdpa: fix not using CVQ buffer in case of error
  - vdpa: Fix possible use-after-free for VirtQueueElement
  - hw/virtio: fix vhost_user_read tracepoint
  - vhost: Fix false positive out-of-bounds
  - vhost: fix possible wrap in SVQ descriptor ring
  - vhost: move iova_tree set to vhost_svq_start
  - vhost: Always store new kick fd on vhost_svq_set_svq_kick_fd
  - virtio-crypto: verify src&dst buffer length for sym request
  - vdpa: commit all host notifier MRs in a single MR transaction
  - vdpa: harden the error path if get_iova_range failed
  - vdpa-dev: get iova range explicitly
  - virtio-pci: add support for configure interrupt
  - virtio-mmio: add support for configure interrupt
  - virtio-net: add support for configure interrupt
  - vhost: add support for configure interrupt
  - virtio: add support for configure interrupt
  - vhost-vdpa: add support for config interrupt
  - vhost: introduce new VhostOps vhost_set_config_call
  - virtio-pci: decouple the single vector from the interrupt process
  - virtio-pci: decouple notifier from interrupt process
  - virtio: introduce macro VIRTIO_CONFIG_IRQ_IDX
  - vdpa: do not handle VIRTIO_NET_F_GUEST_ANNOUNCE in vhost-vdpa
  - vdpa: handle VIRTIO_NET_CTRL_ANNOUNCE in vhost_vdpa_net_handle_ctrl_avail
  - vhost: fix vq dirty bitmap syncing when vIOMMU is enabled
  - hw/virtio: gracefully handle unset vhost_dev vdev
  - hw/virtio/vhost: Fix typo in comment.
  - vdpa: always start CVQ in SVQ mode if possible
  - vdpa: add shadow_data to vhost_vdpa
  - vdpa: store x-svq parameter in VhostVDPAState
  - vdpa: add asid parameter to vhost_vdpa_dma_map/unmap
  - vdpa: allocate SVQ array unconditionally
  - vdpa: move SVQ vring features check to net/
  - vdpa: request iova_range only once
  - vdpa: add vhost_vdpa_net_valid_svq_features
  - vhost: allocate SVQ device file descriptors at device start
  - vhost: set SVQ device call handler at SVQ start
  - vdpa: use v->shadow_vqs_enabled in vhost_vdpa_svqs_start & stop
  - vhost: enable vrings in vhost_dev_start() for vhost-user devices
  - vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)->async_tx.elem in virtio_net_reset
  - net/vhost-vdpa.c: Fix clang compilation failure
  - vhost-vdpa: allow passing opened vhostfd to vhost-vdpa
  - vdpa: Remove shadow CVQ command check
  - vdpa: Delete duplicated vdpa_feature_bits entry
  - hw/virtio: add some vhost-user trace events
  - vdpa: Allow MQ feature in SVQ
  - virtio-net: Update virtio-net curr_queue_pairs in vdpa backends
  - vdpa: validate MQ CVQ commands
  - vdpa: Add vhost_vdpa_net_load_mq
  - vdpa: extract vhost_vdpa_net_load_mac from vhost_vdpa_net_load
  - vdpa: Make VhostVDPAState cvq_cmd_in_buffer control ack type
  - vdpa: Delete CVQ migration blocker
  - vdpa: Add virtio-net mac address via CVQ at start
  - vhost_net: add NetClientState->load() callback
  - vdpa: extract vhost_vdpa_net_cvq_add from vhost_vdpa_net_handle_ctrl_avail
  - vdpa: Move command buffers map to start of net device
  - vdpa: add net_vhost_vdpa_cvq_info NetClientInfo
  - vhost_net: Add NetClientInfo stop callback
  - vhost_net: Add NetClientInfo start callback
  - vdpa: Use ring hwaddr at vhost_vdpa_svq_unmap_ring
  - vdpa: Make SVQ vring unmapping return void
  - vdpa: Remove SVQ vring from iova_tree at shutdown
  - util: accept iova_tree_remove_parameter by value
  - vdpa: do not save failed dma maps in SVQ iova tree
  - vdpa: Skip the maps not in the iova tree
  - vdpa: Fix file descriptor leak on get features error
  - vdpa: Fix memory listener deletions of iova tree
  - vhost: Get vring base from vq, not svq
  - vdpa: Add x-svq to NetdevVhostVDPAOptions
  - vdpa: Add device migration blocker
  - vdpa: Extract get features part from vhost_vdpa_get_max_queue_pairs
  - vdpa: Buffer CVQ support on shadow virtqueue
  - vdpa: manual forward CVQ buffers
  - vdpa: Export vhost_vdpa_dma_map and unmap calls
  - vhost: Add svq avail_handler callback
  - vhost: add vhost_svq_poll
  - vhost: Expose vhost_svq_add
  - vhost: add vhost_svq_push_elem
  - vhost: Track number of descs in SVQDescState
  - vhost: Add SVQDescState
  - vhost: Decouple vhost_svq_add from VirtQueueElement
  - vhost: Check for queue full at vhost_svq_add
  - vhost: Move vhost_svq_kick call to vhost_svq_add
  - vhost: Reorder vhost_svq_kick
  - vdpa: Avoid compiler to squash reads to used idx
  - virtio-net: Expose ctrl virtqueue logic
  - virtio-net: Expose MAC_TABLE_ENTRIES
  - vhost: move descriptor translation to vhost_svq_vring_write_descs
  - util: Return void on iova_tree_remove
  - virtio-net: don't handle mq request in userspace handler for vhost-vdpa
  - vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request()
  - vhost-vdpa: backend feature should set only once
  - vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa
  - virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa
  - virtio: add vhost support for virtio devices
  - include/hw: start documenting the vhost API
  - hw/virtio: add vhost_user_[read|write] trace points
  - vhost: Fix element in vhost_svq_add failure
  - vdpa: Fix index calculus at vhost_vdpa_svqs_start
  - vdpa: Fix bad index calculus at vhost_vdpa_get_vring_base
  - vhost: Fix device's used descriptor dequeue
  - vhost: Track descriptor chain in private at SVQ
  - vdpa: Add missing tracing to batch mapping functions
  - vhost-vdpa: fix typo in a comment
  - virtio: fix --enable-vhost-user build on non-Linux
  - vdpa: Expose VHOST_F_LOG_ALL on SVQ
  - vdpa: Never set log_base addr if SVQ is enabled
  - vdpa: Adapt vhost_vdpa_get_vring_base to SVQ
  - vdpa: Add custom IOTLB translations to SVQ
  - vhost: Add VhostIOVATree
  - util: add iova_tree_find_iova
  - util: Add iova_tree_alloc_map
  - vhost: Shadow virtqueue buffers forwarding
  - vdpa: adapt vhost_ops callbacks to svq
  - virtio: Add vhost_svq_get_vring_addr
  - vhost: Add vhost_svq_valid_features to shadow vq
  - vhost: Add Shadow VirtQueue call forwarding capabilities
  - vhost: Add Shadow VirtQueue kick forwarding capabilities
  - vhost: Add VhostShadowVirtqueue
  - vdpa: Make ncs autofree
  - Revert "virtio: introduce macro IRTIO_CONFIG_IRQ_IDX"
  - Revert "virtio-pci: decouple notifier from interrupt process"
  - Revert "virtio-pci: decouple the single vector from the interrupt process"
  - Revert "vhost-vdpa: add support for config interrupt"
  - Revert "virtio: add support for configure interrupt"
  - Revert "vhost: add support for configure interrupt"
  - Revert "virtio-net: add support for configure interrupt"
  - Revert "virtio-mmio: add support for configure interrupt"
  - Revert "virtio-pci: add support for configure interrupt"
  - Revert "vhost: introduce new VhostOps vhost_set_config_call"
  - virtio: signal after wrapping packed used_idx
  - target/i386: Adjust feature level according to FEAT_7_1_EDX
  - target/i386: Add new CPU model GraniteRapids
  - target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration
  - target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration
  - target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration
  - target/i386: Add support for AVX-IFMA in CPUID enumeration
  - target/i386: Add support for AMX-FP16 in CPUID enumeration
  - target/i386: Add support for CMPCCXADD in CPUID enumeration
  - tracetool: avoid invalid escape in Python string
  - hw/pvrdma: Protect against buggy or malicious guest driver
  - vga: avoid crash if no default vga card mainline inclusion commit 6985d8ede92494f3b791de01e8ee9306eb6d5e4a category: bugfix
  - qom/object: Remove circular include dependency mainline inclusion commit 5bba9bcfbb42e7c016626420e148a1bf1b080835 category: bugfix
  - artist: set memory region owners for buffers to the  artist device mainline inclusion commit 39fbaeca096a9bf6cbe2af88572c1cb2aa62aa8c category: bugfix
  - virtio-iommu: Fix the partial copy of probe request mainline inclusion commit 45461aace83d961e933b27519b81d17b4c690514 category: bugfix
  - e1000: set RX descriptor status in a separate  operation mainline inclusion commit 034d00d4858161e1d4cff82d8d230bce874a04d3 category: bugfix
  - vhost: introduce new VhostOps vhost_set_config_call
  - vhost: stick to -errno error return convention
  - vhost-user: stick to -errno error return convention
  - vhost-vdpa: stick to -errno error return convention
  - virtio-pci: add support for configure interrupt
  - virtio-mmio: add support for configure interrupt
  - virtio-net: add support for configure interrupt
  - vhost: add support for configure interrupt
  - virtio: add support for configure interrupt
  - vhost-vdpa: add support for config interrupt
  - virtio-pci: decouple the single vector from the interrupt process
  - virtio-pci: decouple notifier from interrupt process
  - virtio: introduce macro IRTIO_CONFIG_IRQ_IDX
  - pci: Fix the update of interrupt disable bit in PCI_COMMAND register
  - hw/timer/npcm7xx_timer: Prevent timer from counting down past zero
  - tpm_crb: mark command buffer as dirty on request  completion mainline inclusion commit e37a0ef4605e5d2041785ff3fc89ca6021faf7a0 category: bugfix
  - pci: fix overflow in snprintf string formatting mainline inclusion commit 36f18c6989a3d1ff1d7a0e50b0868ef3958299b4 category: bugfix
  - hw/usb/hcd-ehci: fix writeback order mainline inclusion commit f471e8b060798f26a7fc339c6152f82f22a7b33d category: bugfix
  - qemu-timer: Skip empty timer lists before locking  in qemu_clock_deadline_ns_all mainline inclusion commit 3f42906c9ab2c777a895b48b87b8107167e4a275 category: bugfix
  - semihosting/config: Merge --semihosting-config  option groups mainline inclusion commit 90c072e063737e9e8f431489bbd334452f89056e category: bugfix
  - semihosting: fix memleak at semihosting_arg_fallback
  - target/i386: Export GDS_NO bit to guests


author: <fengjiabo1@huawei.com> - 10:6.2.0-86
changelog:
  - vdpa: move memory listener to the realize stage
  - vdpa: implement vdpa device migration
  - vhost: implement post resume bh
  - vhost: implement migration state notifier for vdpa device
  - vhost: implement savevm_hanlder for vdpa device
  - vhost: implement vhost_vdpa_device_suspend/resume
  - vhost: implement vhost-vdpa suspend/resume
  - vhost: add vhost_dev_suspend/resume_op
  - vhost: introduce bytemap for vhost backend logging
  - vhost-vdpa: add migration log ops for VhostOps
  - vhost-vdpa: add VHOST_BACKEND_F_BYTEMAPLOG
  - vhost: fix null pointer access
  - ui/gtk: prevent ui lock up when dpy_gl_update called again before current draw event occurs
  - hw/usb: dev-mtp: Use g_mkdir()
  - target/ppc/cpu-models: Remove the "default" CPU alias
  - hw/intc/arm_gicv3: ICC_PMR_EL1 high bits should be RAZ
  - Fixed a QEMU hang when guest poweroff in COLO mode
  - migration/colo: More accurate update checkpoint time
  - scripts/entitlement.sh: Use backward-compatible cp flags
  - block/nvme: fix infinite loop in nvme_free_req_queue_cb()
  - hw/net: npcm7xx_emc fix missing queue_flush
  - Add dummy Aspeed AST2600 Display Port MCU (DPMCU)
  - hw/arm: ast2600: Fix address mapping of second SPI controller
  - vhost-user-blk: reconnect on any error during realize
  - vhost-user-blk: propagate error return from generic vhost
  - hw/riscv: boot: Reduce FDT address alignment constraints
  - Revert "hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus"
  - Fix STM32F2XX USART data register readout
  - block: use 'unsigned' for in_flight field on driver state
  - sphinx: change default language to 'en'
  - tests/qtest: Fix two format strings
  - trivial typos: namesapce
  - hw/ide/atapi.c: Correct typos (CD-CDROM -> CD-ROM)
  - hw/virtio/virtio-iommu-pci: Enforce the device is plugged on the root bus
  - hw/display/next-fb: Fix comment typo
  - xen/pass-through: merge emulated bits correctly mainline inclusion commit be9c61da9fc57eb7d293f380d0805ca6f46c2657 category: bugfix
  - tests/qtest/migration-test.c: spelling fix: bandwith
  - target/i386/cpu: Improve error message for property "vendor"
  - balloon: Fix a misleading error message
  - target/arm: Don't set syndrome ISS for loads and  stores with writeback mainline inclusion commit 53ae2fdef1f5661cbaa2ea571c517f98e6041cb8 category: bugfix
  - disas/hppa: Show hexcode of instruction along with disassembly
  - tcg/loongarch64: Fix tcg_out_mov() Aborted
  - ui/qmp-cmds: Improve two error messages
  - qga: Improve guest-exec-status error message
  - hmp: Improve sync-profile error message
  - spapr/pci: Correct "does not support hotplugging error messages
  - xen/pass-through: don't create needless register  group mainline inclusion commit c0e86b7624cb9d6db03e0d48cf82659e5b89a6a6 category: bugfix


author: Jacob Wang <jacob.wang@openanolis.org> - 6.2.0-40.0.1.1
changelog:
  - Adjust limit for virtiofsd minor version
  - Add loongarch supporti (lixianglai@loongson.cn)
  - Add package qemu-user-static (fuyuan.wh@alibaba-inc.com)
  - Modify-smbios-option-lack-and-Modify-the-maximum-num.patch (lixianglai@loongson.cn)
  - rename-kvm_msr_buf-with-kvm_csr_buf.patch (lixianglai@loongson.cn)
  - code-cleanup-for-loongarch-kvm.patch (lixianglai@loongson.cn)
  - Support-TPM.patch (lixianglai@loongson.cn)
  - kvm-csr-save-and-restore-optimization.patch (lixianglai@loongson.cn)
  - address-space-code-cleanup-on-7A-virt-machine.patch (lixianglai@loongson.cn)
  - Fix-irq-routing-and-fpu-option-to-compat-with-kernel.patch (lixianglai@loongson.cn)
  - Support-vfio-config.patch (lixianglai@loongson.cn)
  - pass-to-make-check.patch (lixianglai@loongson.cn)
  - fixup-can-t-find-cpu-type.patch (lixianglai@loongson.cn)
  - fix-smbios-type4-info-for-numa-support.patch (lixianglai@loongson.cn)
  - Fix-smp.cores-value.patch (lixianglai@loongson.cn)
  - Add-lbt-support-for-kvm.patch (lixianglai@loongson.cn)
  - Modify-the-ioctl-command-of-kvm.patch (lixianglai@loongson.cn)
  - Add-usb-storage-config-for-loongarch.patch (zhaotianrui@loongson.c)
  - Add-loongarch-into-QEMU_ARCH_VIRTIO_PCI-to-support-q.patch (zhaotianrui@loongson.c)
  - Fix-host-architecture-macro-of-LoongArch-to-HOST_LOO.patch (zhaotianrui@loongson.c)
  - Fix-LoongArch-KVM-header-macros.patch (zhaotianrui@loongson.c)
  - loongarch: Fixed the issue where qemu specifies the boot order (lixianglai@loongson.cn)
  - Fix CVE-2023-3354 (Liwei Ge <liwei.glw@alibaba-inc.com>)
  - #0001-anolis-csv-i386-add-CSV-context.patch (jiangxin@hygon.cn)
  - #0002-anolis-csv-i386-add-command-to-initialize-CSV-contex.patch (jiangxin@hygon.cn)
  - #0003-anolis-csv-i386-add-command-to-load-data-to-guest-me.patch (jiangxin@hygon.cn)
  - #0004-anolis-csv-i386-add-command-to-load-vmcb-to-guest-me.patch (jiangxin@hygon.cn)
  - #0005-anolis-cpu-i386-populate-CPUID-0x8000_001F-when-CSV-.patch (jiangxin@hygon.cn)
  - #0006-anolis-csv-i386-CSV-guest-do-not-need-register-unreg.patch (jiangxin@hygon.cn)
  - #0007-anolis-target-i386-csv-load-initial-image-to-private.patch (jiangxin@hygon.cn)
  - #0008-anolis-vga-force-full-update-for-CSV-guest.patch (jiangxin@hygon.cn)
    - #Support Hygon CSV/CSV2 live migration, CSV2 reboot (hanliyang@hygon.cn)
  - #Support CSV3 live migration (jiangxin@hygon.cn)


author: <fengjiabo1@huawei.com> - 10:6.2.0-87
changelog:
  - vdpa: suspend function return 0 when the vdpa device is stopped
  - vdpa: don't suspend/resume device when vdpa device not started
  - vdpa: support vdpa device suspend/resume
  - vdpa: correct param passed in when unregister save
  - vdpa: set vring enable only if the vring address has already been set
  - shadow_dev: introduce shadow dev for virtio-net device
  - revert "tcg/loongarch64: Fix tcg_out_mov() Aborted"
  - migration: Set downtime_start even for postcopy
  - gdb-xml: fix duplicate register in arm-neon.xml
  - iotests: fix default machine type detection
  - migration: fix RAMBlock add NULL check
  - s390x: Fix spelling errors
  - ppc: spelling fixes
  - hw/scsi/vhost-scsi: don't double close vhostfd on error
  - virtio/vhost-vsock: don't double close vhostfd, remove redundant cleanup
  - hw/scsi/vhost-scsi: don't leak vqs on error
  - hw/i386/pc: Add missing property descriptions
  - pcie_aer: Don't trigger a LSI if none are defined
  - pci: Export the pci_intx() function
  - hw/qdev: Cosmetic around documentation
  - tests/unit: fix a -Wformat-truncation warning
  - tests/avocado: mark ReplayKernelNormal.test_mips64el_malta as flaky
  - i386/sev: Avoid SEV-ES crash due to missing MSR_EFER_LMA bit
  - ui/vnc-clipboard: fix inflate_buffer
  - hw/usb/hcd-xhci.c: spelling: tranfer


author: Kaiqiang Wang <wangkaiqiang.inspur.com> - 6.2.0-41.0.1.1
changelog:
  - CVE-2023-3019 virt:rhel/qemu-kvm: QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest()


author: zhangxianting <zhangxianting@uniontech.com> - 6.2.0-41.0.1.1.01
changelog:
  - fix: modify q35 and i440fx desc for Standard PC (bugid:240633)
  - fix: msr: fix set ox48b error (bugid:241729)
  - feat: support cpu model 'host-model' at kunpeng920
  - feat: add hygon CSV support
  - fix: remove patch230-patch232 for uos_bug 228019 at loongarch64, issue:https://gitee.com/src-anolis-os/qemu-kvm/issues/I8HV58(bugid:228019)
  - fix: support spice at arm(bugid:SCC001136)
  - rebuild: enable qxl in aarch64 && add qxl related roms by guoke


author: Zdenek Dohnal <zdohnal@redhat.com>
changelog:
  - CVE-2018-9918 qpdf: stack exhaustion in QPDFObjectHandle and QPDF_Dictionary classes in libqpdf.a [fedora-all]


author: Rex Dieter <rdieter@fedoraproject.org> - 5.4.0-0.3.rc
changelog:
  - libQt5Designer should be in a subpackage (#1156685)
  - -doc: disable(boostrap for new clucene), drop dep on main pkg


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 5.4.0-0.4.rc
changelog:
  - disable bootstrap (reenable -doc)
  - system-clucene patch: drop -fpermissive flag
  - system-clucene patch: use toLocal8Bit instead of toStdString
  - system_clucene: BR clucene09-core-devel >= 0.9.21b-12 (-11 was broken)


author: Helio Chissini de Castro <helio@kde.org> - 5.6.0-3
changelog:
  - Reenable examples. Some interfaces marked as examples are needed from phonon
  - Update to second rc snapshot


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-0.5
changelog:
  - (re)fix bootstrap macro
  - include qt5-qdoc/qt5-qhelpgenerator build dep deps in -doc subpkg only
  - fix whitespace


author: Rex Dieter <rdieter@fedoraproject.org> - 5.8.0-4
changelog:
  - bootstrap 5.8.0 (rawhide)
  - Created a meta package called qt5-doctools to avoid the mess of multiple tools


author: Rex Dieter <rdieter@fedoraproject.org> - 5.9.1-4
changelog:
  - Obsoletes: qt5-designer-plugin-webkit (upgrade path when webkit support is not enabled)
  - resurrect bootstrap macro (commented)


author: Rex Dieter <rdieter@fedoraproject.org> 5.0.0-0.1.beta2
changelog:
  - %build: -accessibility
  - macros.qt5: +%_qt5_archdatadir +%_qt5_settingsdir
  - pull in a couple more configure-related upstream patches


author: Rex Dieter <rdieter@fedoraproject.org> 5.0.1-4
changelog:
  - create/own %{_qt5_plugindir}/iconengines
  - -devel: create/own %{_qt5_archdatadir}/mkspecs/modules
  - cleanup .prl


author: Rex Dieter <rdieter@fedoraproject.org> 5.0.1-5
changelog:
  - -static subpkg, Requires: fontconfig-devel,glib2-devel,zlib-devel
  - -devel: Requires: pkgconfig(gl)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.2.0-0.1.alpha
changelog:
  - 5.2.0-alpha
  - -system-harfbuzz
  - rename subpkg -x11 => -gui
  - move some gui-related plugins base => -gui
  - don't use symlinks in %_qt5_bindir (more qtchooser-friendly)


author: Rex Dieter <rdieter@fedoraproject.org> 5.2.0-0.10.rc1
changelog:
  - 5.2.0-rc1
  - revert/omit recent egl packaging changes
  - -doc install changes-5.* files here (#989149)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.2.0-0.11.rc1
changelog:
  - needs a minimum version on sqlite build dependency (#1038617)
  - fix build when doc macro not defined


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.2.0-4
changelog:
  - fix QTBUG-35459 (too low entityCharacterLimit=1024 for CVE-2013-4549)
  - fix QTBUG-35460 (error message for CVE-2013-4549 is misspelled)
  - reenable docs on Fedora (accidentally disabled)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 5.3.1-4
changelog:
  - support the old versions of libxcb and libxkbcommon in F19 and F20
  - don't use the bundled libxkbcommon


author: Rex Dieter <rdieter@fedoraproject.org> - 5.3.1-5
changelog:
  - drop dep on xorg-x11-xinit (own shared dirs instead)
  - fix/improve qtchooser support using alternatives (#1122316)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.4.0-0.1.beta
changelog:
  - 5.4.0-beta
  - avoid extra -devel deps by moving *Plugin.cmake files to base pkgs
  - support bootstrap macro, to disable -doc,-examples


author: Rex Dieter <rdieter@fedoraproject.org> - 5.4.1-3
changelog:
  - pull in handful of upstream fixes, particularly...
  - Fix a division by zero when processing malformed BMP files (QTBUG-44547, CVE-2015-0295)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.4.1-12
changelog:
  - backport a couple more upstream fixes
  - introduce -common noarch subpkg, should help multilib issues


author: Helio Chissini de Castro <helio@kde.org> - 5.5.0-11
changelog:
  - Add mesa-dri-drivers as recommends on gui package as reported by Kevin Kofler
  - Reference https://bugzilla.redhat.com/1249280


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.5.0-14
changelog:
  - remove GDB hackery again, -12 built fine on i686, hack breaks ARM build
  - fix 10-qt5-check-opengl2.sh for multiple screens (#1245755)


author: Rex Dieter <rdieter@fedoraproject.org> 5.5.0-16
changelog:
  - backport 0055-Respect-manual-set-icon-themes.patch (kde#344469)
  - conditionally use valgrind only if needed


author: Rex Dieter <rdieter@fedoraproject.org> 5.5.0-18
changelog:
  - When a screen comes back online, the windows need to be told about it (QTBUG-47041)
  - xcb: Ignore disabling of outputs in the middle of the mode switch


author: Helio Chissini de Castro <helio@kde.org> - 5.5.1-8
changelog:
  - qt5-qdoc need requires >= current version, otherwise will prevent the usage further when moved to qttools


author: Helio Chissini de Castro <helio@kde.org> - 5.6.0-0.2
changelog:
  - Valgrind still needed as buildreq due recent split qdoc package, but we can get rid of
    specific arch set.
  - Added missing libproxy buildreq
  - Epel and RHEL doesn't have libinput, so a plugin need to be excluded for this distros


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-0.4
changelog:
  - re-introduce bootstrap/examples macros
  - put examples-manifest.xml in -examples
  - restore -doc multilib hack (to be on the safe side, can't hurt)
  - %build: s/-optimized-qmake/-optimized-tools/


author: Rex Dieter <rdieter@fedoraproject.org> 5.6.0-0.40.rc
changelog:
  - respin QTBUG-51649 patch
  - %build: use -dbus-runtime unconditionally
  - drop (unused) build deps: atspi, dbus, networkmanager


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-6
changelog:
  - macros.qt5: we really only want the null-pointer-checks flag here
    and definitely no arch-specific ones


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-8
changelog:
  - make 10-qt5-check-opengl2.sh xinit script more robust
  - enable journald support for el7+ (#1315239)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-17
changelog:
  - support out-of-tree build
  - better %check
  - pull in final/upstream fixes for QTBUG-51648,QTBUG-51649
  - disable examples/tests in bootstrap mode


author: Rex Dieter <rdieter@fedoraproject.org> - 5.7.0-10
changelog:
  - fix Source0: https://download.qt.io/official_releases/qt/5.9/5.9.0/submodules/qtbase-opensource-src-5.9.0.tar.xz


author: Rex Dieter <rdieter@fedoraproject.org> - 5.7.1-6
changelog:
  - namespace QT_VERSION_CHECK to workaround major/minor being pre-defined (#1396755)
  - update moc patch to define _SYS_SYSMACROS_H (#1396755)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.8.0-6
changelog:
  - bootstrap (rawhide)
  - revert some minor changes introduced since 5.7
  - move *Plugin.cmake items to runtime (not -devel)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.9.1-6
changelog:
  - enable openssl11 support only for f27+ (for now)
  - Use mariadb-connector-c-devel, f28+ (#1493909)
  - Backport upstream mariadb patch (#1491316)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.0-2
changelog:
  - re-enable gold linker (#1458003)
  - drop qt5_null_flag/qt5_deprecated_flag hacks (should be fixed upstream for awhile)
  - make qt_settings/journald support unconditional


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.1-5
changelog:
  - QOpenGLShaderProgram: glProgramBinary() resulting in LINK_STATUS=FALSE not handled properly (QTBUG-66420)


author: Jan Grulich <jgrulich@redhat.com> - 5.11.1-7
changelog:
  - Move libQt5EglFSDeviceIntegration lib out of the -devel subpkg
    Resolves: bz#1692970

  - Fix QImage allocaion failure
    Resolve: bz#1667860

  - Fix double free in QXmlStreamReader
    Resolve: bz#1667858

  - Fix segmentation fault on malformed BMP file
    Resolve: bz#1667859


author: Jan Grulich <jgrulich@redhat.com> - 5.12.5-5
changelog:
  - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
    Resolves: bz#1814739
    Resolves: bz#1814683

  - Fix: XML entity expansion vulnerability
    Resolves: bz#1822193


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.1-3
changelog:
  - support %bootstrap, %check: add autotests
  - build with -O1 to workaround serious autotest/code failures (f28+, #1551246)


author: mosquito <sensor.wen@gmail.com> - 3.1.26-1
changelog:
  - Update to 3.1.26
  - build error with gobject-introspection 1.58 by gir-generator
    https://github.com/linuxdeepin/developer-center/issues/604


author: Tom Hughes <tom@compton.nu> - 1.1.0-1
changelog:
  - Update to 1.1.0 upstream release
  - Drop -march=native as ppc64 doesn't recognise it
  - Exclude valgrind on aarch64 due to unhandled instruction in libgcc


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-3
changelog:
  - Add patch for better handling of thin pools and other LV types not supported
    by vgcfgrestore
    Resolves: rhbz1747468


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-4
changelog:
  - Apply PR2675 to fix leftover temp dir bug (introduced in backported PR2625)
  - Apply PR2603 to ignore unused PV devices
  - Apply upstream PR2750 to avoid exclusion of wanted multipath devices
  - Remove unneeded xorriso dep on s390x (no ISO image support there)
  - Apply upstream PR2736 to add the EXCLUDE_{IP_ADDRESSES,NETWORK_INTERFACES}
    options


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-5
changelog:
  - Apply PR2795 to detect changes in system files between backup
    and rescue image
  - Apply PR2808 to exclude dev/watchdog* from recovery system
  - Backport upstream PRs 2827 and 2839 to pass -y to lvcreate instead of one "y"
    on stdin
  - Apply PR2811 to add the PRE/POST_RECOVERY_COMMANDS directives
  - Recommend dosfstools on x86 and aarch64, needed for EFI System Partition


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-6
changelog:
  - Restore usr/share/rear/output/PXE/default/820_copy_to_net.sh
    removed in 2.4-19 with rsync refactor.
    It is still needed to use a rsync OUTPUT_URL when OUTPUT=PXE and BACKUP=RSYNC


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-8
changelog:
  - Apply PR2903 to protect against colons in pvdisplay output
  - Apply PR2873 to fix initrd regeneration on s390x
  - Apply PR2431 to migrate XFS configuration files


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-10
changelog:
  - Apply PR 3027 to ensure correct creation of the rescue environment
    when a file is shrinking while being read
  - Backport PR 2774 to increase USB_UEFI_PART_SIZE to 1024 MiB
  - Apply upstream patch for temp dir usage with LUKS to ensure
    that during recovery an encrypted disk can be unlocked using a keyfile
  - Backport upstream PR 3031: Secure Boot support for OUTPUT=USB
  - Correct a mistake done when backporting PR 2691


author: Neil Horman <nhorman@tuxdriver.com> - 0.1-2
changelog:
  - Updated requires for python3
  - Removed unneeded BuildRequires
  - Globed the inclusion of man page
  - Fixed license file tagging


author: Mark Huth <mhuth@redhat.com> - 0.9.7-6
changelog:
  - Resolves: rhbz#1314606 - show progress with addattachment
  - Resolves: rhbz#1314607 - problem with addattachment -s switch


author: Pranita Ghole<pghole@redhat.com> - 0.10.1-1
changelog:
  - Resolves: rhbz#1670001 - redhat-support-tool -o option does not work (soscleaner)
  - Resolves: rhbz#1670369 - redhat-support-lib-python: Traceback on make_report from utils.reporthelper
  - Resolves: rhbz#1670044 - redhat-support-tool proxy does not work on rhel-8


author: Pranita Ghole<pghole@redhat.com> - 0.11.2-1
changelog:
  - Resolves: rhbz#1677257 - redhat-support-lib-python: AttributeError from utils/reporthelper.py no buf


author: Pranita Ghole<pghole@redhat.com> - 0.13.0-0
changelog:
  - Resolves: rhbz#2028550 - RHST should use new Red Hat Secure FTP instead of dropbox for attachments
  - Resolves: rhbz#2028546 - Add support for handling JSON response from API's
  - Resolves: rhbz#2028543 - Add support to upload to and download from S3


author: Vikas Rathee <vrathee@redhat.com> - 0.9.10-1
changelog:
  - Resolves: rhbz#1342627 - List cases by group.
  - Resolves: rhbz#1379619 - Inform when http_proxy environment variable is used.


author: Pranita Ghole<pghole@redhat.com> - 0.11.2-2
changelog:
  - Resolves: rhbz#1685296 - redhat-support-tool env var http_proxy does not work with user and password
  - Resolves: rhbz#1685295 - [RFE][RHEL8] Include Reason in cases of failed proxy
  - Resolves: rhbz#1684321 - redhat-support-tool config debug <level>` fails with "ERROR: debug is not a valid configuration file option.


author: Pranita Ghole<pghole@redhat.com> - 0.11.3-2
changelog:
  - Resolves: rhbz#1882771 - redhat-support-tool: UnboundLocalError: local variable 'timer' referenced before assignment
  - Resolves: rhbz#1882772 - [RFE] Add functionality to generate and send sosreport after selecting the case.
  - Resolves: rhbz#1882773 - [RFE] Generate and upload sosreport to case from cli


author: Pranita Ghole<pghole@redhat.com> - 0.13.0-0
changelog:
  - Resolves: rhbz#2028556 - RHST should use new Red Hat Secure FTP instead of dropbox for attachments
  - Resolves: rhbz#2028553 - Add support for handling JSON response from API's
  - Resolves: rhbz#2028540 - Add support to upload to and download from S3


author: Remi Collet <rcollet@redhat.com> - 4.0.10-2
changelog:
  - drop build dependency on pandoc
  - drop dependency on jemalloc #1591762
  - fix License (BSD and MIT)
  - add bundled libraries licences
  - cleanup conditions from spec file


author: Remi Collet <rcollet@redhat.com> - 5.0.3-2
changelog:
  - fix Heap buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10192
  - fix Stack buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10193


author: Remi Collet <rcollet@redhat.com> - 5.0.3-4
changelog:
  - fix lua scripts can overflow the heap-based Lua stack
    CVE-2021-32626
  - fix integer overflow issue with Streams
    CVE-2021-32627
  - fix integer overflow bug in the ziplist data structure
    CVE-2021-32628
  - fix integer overflow issue with intsets
    CVE-2021-32687
  - fix integer overflow issue with strings
    CVE-2021-41099


author: Silas Sewell <silas@sewell.ch> - 1.2.6-3
changelog:
  - Add Fedora build flags
  - Send all scriplet output to /dev/null
  - Remove debugging flags
  - Add redis.conf check to init script


author: Fabian Deutsch <fabiand@fedoraproject.org> - 2.4.6-1
changelog:
  - Update to 2.4.6
  - systemd unit file added
  - Compiler flags changed to compile 2.4.6
  - Remove doc/ and Changelog


author: Fabian Deutsch <fabian.deutsch@gmx.de> - 2.6.16-1
changelog:
  - Update to 2.6.16
  - Fix rhbz#973151
  - Fix rhbz#656683
  - Fix rhbz#977357 (Jan Vcelak <jvcelak@fedoraproject.org>)


author: Haïkel Guémar <hguemar@fedoraproject.org> - 2.8.14-1
changelog:
  - Upstream 2.8.14 (RHBZ #1136287)
  - Bugfix for lua scripting users (server crash)
  - Refresh patches
  - backport spec from EPEL7 (thanks Warren)


author: Haïkel Guémar <hguemar@fedoraproject.org> - 2.8.14-2
changelog:
  - Cleanup spec
  - Fix shutdown for redis-{server,sentinel}
  - Backport fixes from Remi Collet repository (ie: sentinel working)


author: Haïkel Guémar <hguemar@fedoraproject.org> - 2.8.15-1
changelog:
  - Upstream 2.8.15 (critical bugfix for sentinel)
  - Fix to sentinel systemd service and configuration (thanks Remi)
  - Refresh patch management


author: Remi Collet <remi@fedoraproject.org> - 2.8.17-1
changelog:
  - Upstream 2.8.17
  - fix redis-sentinel service unit file for systemd
  - fix redis-shutdown for sentinel
  - also use redis-shutdown in init scripts


author: Haïkel Guémar <hguemar@fedoraproject.org> - 2.8.19-1
changelog:
  - Upstream 2.8.19 (RHBZ #1175232)
  - Fix permissions for tmpfiles (RHBZ #1182913)
  - Add limits config files
  - Spec cleanups


author: Haïkel Guémar <hguemar@fedoraproject.org> - 3.0.2-1
changelog:
  - Upstream 3.0.2 (RHBZ #1228245)
  - Fix Lua sandbox escape and arbitrary code execution (RHBZ #1228331)


author: Haïkel Guémar <hguemar@fedoraproject.org> - 3.2.3-1
changelog:
  - Upstream 3.2.3
  - Security fix for CVE-2013-7458 (redis-cli history world readable)
  - RHBZ#1363670 RHBZ#1363671


author: Remi Collet <remi@fedoraproject.org> - 3.2.3-2
changelog:
  - add missing man pages #1374577
    using patch from https://github.com/antirez/redis/pull/3491
  - data and configuration should not be publicly readable #1374700
  - remove /var/run/redis with systemd #1374728
  - provide redis-check-rdb as a symlink to redis-server #1374736
    using patch from https://github.com/antirez/redis/pull/3494
  - move redis-shutdown to libexec


author: Nathan Scott <nathans@redhat.com> - 3.2.9-1
changelog:
  - Upstream 3.2.9
  - Add RuntimeDirectory=redis to systemd unit file (RHBZ #1454700)
  - Mark rundir as %ghost since it may disappear (tmpfs - #1454700)
  - Fix a shutdown failure with Unix domain sockets (RHBZ #1444988)


author: Nathan Scott <nathans@redhat.com> - 3.2.10-1
changelog:
  - Upstream 3.2.10 release
  - Ensure both the redis and redis-sentinel service files set correct perms
  - Dropped systemd tmpfiles source, handled directly in systemd service files


author: Nathan Scott <nathans@redhat.com> - 3.2.11-1
changelog:
  - Upstream 3.2.11 bug-fix-only release
  - Switch to using Type=notify for Redis systemd services (RHBZ #1172841)
  - Add Provides:bundled hiredis, linenoise, lua-libs clauses (RHBZ #788500)


author: Nathan Scott <nathans@redhat.com> - 4.0.2-1
changelog:
  - Upstream 4.0.2 release.  (RHBZ #1389592)
  - Add redis-devel for loadable module development.
  - Add redis-doc for man pages and detailed documentation.
  - Provide redis-check-aof as a symlink to redis-server also now.


author: Remi Collet <remi@remirepo.net> - 4.0.3-1
changelog:
  - Redis 4.0.3
  - fix ownership of /usr/share/doc/redis
  - use make_flags for test to avoid rebuild and failure
  - fix rpm macro location on EL-6
  - add /var/run/redis on EL-6
  - add spec file license header
  - drop duplicated documentation from main package
  - keep man in main page


author: Nathan Scott <nathans@redhat.com> - 4.0.4-1
changelog:
  - Upstream 4.0.4 release.
  - Update to current upstream redis-doc also.
  - Fix man page issues (RHBZ #1513594 and RHBZ #1515417).


author: Remi Collet <remi@remirepo.net> - 4.0.5-1
changelog:
  - Redis 4.0.5 - Released Thu Dec 1 16:03:32 CET 2017
  - Upgrade urgency CRITICAL: Redis 4.0.4 fix for PSYNC2 was broken,
    causing the slave to crash when receiving an RDB file from the
    master that contained a duplicated Lua script.


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.0-10.5
changelog:
  - Install license file with javadoc package
  - Convert versioned javadoc to versionless
  - Update to current packaging guidelines
  - Remove msv provides and obsoletes


author: Mat Booth <mat.booth@redhat.com> - 2011.1-1
changelog:
  - Update to version released from new project location rhbz#981275
  - Build/install with maven instead of ant
  - Drop old javadoc rpm bug workaround


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845548


author: Ade Lee <alee@redhat.com> - 3.0.6-5
changelog:
  - Replace broken dependencies junit4-> junit
  - Add patch to handle new bouncycastle API in version 1.50
  - Fix bogus dates in changelog


author: gil cattaneo <puntogil@libero.it> 3.0.17-1
changelog:
  - update to 3.0.17.Final
  - introduce license macro
  - enable resteasy-links, resteasy-oauth, resteasy-wadl modules
  - build resteasy-netty{3,4}


author: Rich Megginson <rmeggins@redhat.com> - 1.6.3-1
changelog:
  - storage - tag tests that use NVME and SCSI
    Resolves rhbz#1989211 (EL9)
    Resolves rhbz#1989638 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.6.4-1
changelog:
  - sshd - support for rhel9 managed hosts
    Resolves rhbz#1989221 (EL9)
    Resolves rhbz#1989638 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.6.6-1
changelog:
  - logging, certificate - Instead of the archive module, use "tar" command for backup.
    Resolves rhbz#1984182 (EL9)
    Resolves rhbz#1987096 (EL8)
  - logging - Add a support for list value to server_host in the elasticsearch output
    Resolves rhbz#1986460 (EL9)
    Resolves rhbz#1986463 (EL8)
  - logging - tests_relp.yml; Can't detect any of the required Python libraries cryptography (>= 1.2.3) or PyOpenSSL (>= 0.6)
    Resolves rhbz#1989962 (EL9)
    Resolves rhbz#1990142 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.6.7-1
changelog:
  - storage - tests_create_lvmvdo_then_remove fails - Module dm-vdo not found
    Resolves rhbz#1991141 (EL8)
    Resolves rhbz#1991062 (EL9)
  - storage - Get syntax errors in tests_lvm_errors.yml
    Resolves rhbz#1990793 (EL8)
    Resolves rhbz#1991142 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.7.0-1
changelog:
  - drop support for Ansible 2.8 - min_ansible_version is now 2.9
    Resolves rhbz#1989197 (EL9)
    Resolves rhbz#1989199 (EL8)
  - sshd - fix rhel6 support - failed to validate: error:Missing Match criteria for all Bad Match condition
    Resolves rhbz#1991598 (EL9)
    Resolves rhbz#1990947 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.7.1-1
changelog:
  - metrics - the bpftrace role does not properly configure bpftrace agent
    Resolves rhbz#1994180 (EL9)
    Resolves rhbz#1993240 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.7.2-1
changelog:
  - logging - Update the certificates copy tasks
    Resolves rhbz#1996777 (EL9)
    Resolves rhbz#1994580 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.7.3-1
changelog:
  - storage - revert the dm-vdo workaround fix for vdo testing
    Resolves rhbz#1978488 (EL9)
    Resolves rhbz#1991141 (EL8)


author: Rich Megginson <rmeggins@redhat.com> - 1.7.3-2
changelog:
  - selinux - tag tests_selinux_disabled.yml with tests::avc
    Resolves rhbz#1996315 (EL9)
    Resolves rhbz#1996317 (EL8)


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-5
changelog:
  + rhythmbox-3.4.2-5
  - Remove LIRC plugin
  - Fix 2 build warnings
  - Remove BRs for removed visualiser plugin


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-7
changelog:
  + rhythmbox-3.4.2-7
  - Fix warnings in art search when playing a radio
  - Fix initial import never finishing
  - Fix multimedia keys integration in GNOME


author: openEuler Buildteam <buildteam@openeuler.org> - 4.15.1-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert always execute file trigger scriptlet callbacks with owning header


author: Anakin Zhang <benjamin93@163.com> - 4.15.1-18
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:generate digest lists and add digest list plugin to support IMA


author: panxiaohe <panxiaohe@huawei.com> - 4.15.1-20
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:use ndb instead of Berkeley DB, and deprecate Berkeley DB.


author: shixuantong <shixuantong@huawei.com> - 4.15.1-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix data race in packageBinaries() function and prioritize large packages


author: renhongxun<renhongxun@h-partners.com> - 4.15.1-42
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix regression on ctrl-c during transaction killing scriptlets


author: yuxiaojun <yuxiaojun@uniontech.com> - 4.15.1-49.01
changelog:
  - fix: Rpm installs multiple packages at a time, and there is a bug that the labels are confused(bugid:187073)


author: mahailiang <mahailiang@uniontech.com> - 4.15.1-52.10
changelog:
  - feat: debugedit: Skip relocations with missing symbol/section offset
  - arch: add sw_64 debugedit support


author: Jarod Wilson <jarod@redhat.com> - 5-4
changelog:
  - Make hooks more resilient to missing info
  - Error out with a useful message when necessary info isn't there
  - Resolves: rhbz#1627122


author: Colin Walters <walters@verbum.org> - 2020.7-4
changelog:
  - Backport https://github.com/coreos/rpm-ostree/pull/2386/commits/aa8e49aaeddfc5d38651fa08f46e059655818fd1
    Resolves: #1944760


author: Luca BRUNO <lucab@lucabruno.net> - 2021.5-1
changelog:
  - New upstream version
    https://github.com/coreos/rpm-ostree/releases/tag/v2021.5
    Resolves: rhbz#1959874


author: Luca BRUNO <lucab@redhat.com> - 2021.5-2
changelog:
  - Backport _dbpath fixes, see
    https://github.com/coreos/rpm-ostree/issues/2904
    Resolves: rhbz#1973579


author: Thomas Woerner <twoerner@redhat.com> - 8.10-7
changelog:
  - removed fakeroot requirement and all qa_robot scripts (RHBZ#1615605)
  - Fixed missing build requires for python3-devel


author: Michal Domonkos <mdomonko@redhat.com> - 8.10-8
changelog:
  - spectool: ignore query string in URL (RHBZ#1826299)
  - Fix TypeError in rpmdev-rmdevelrpms and rpmdev-checksig (RHBZ#1851499)


author: Todd Zullinger <tmz@pobox.com> - 1.10-9
changelog:
  - Update UsrLibBinaryException config to include .build-id
  - Ignore useless-provides on debuginfo provides (bz1489096)


author: Thomas Woerner <twoerner@redhat.com> - 1.10.13.1
changelog:
  - Fix unit test: use platform-python, py.test-3, no flake8 (RHBZ#1576803)
  - Update of ValidShells (RHBZ#1633698)
  - Remove Python2 paths from TagsCheck.py (RHBZ#1633698)
  - Enable bash-competion scripts (RHBZ#1577890)


author: Matthias Saou <http://freshrpms.net/> 1.0.45-4
changelog:
  - Added epoch to the perl dependency to work with rpm > 4.2.
  - Fixed the % escaping in the perl dep.


author: Matthias Saou <http://freshrpms.net/> 1.0.46-1
changelog:
  - Update to 1.0.46.
  - Use system libpng and zlib instead of bundled ones.
  - Added php-rrdtool sub-package for the php4 module.


author: Matthias Saou <http://freshrpms.net/> 1.0.49-4
changelog:
  - Fix for the php module patch (Joe Pruett, Dag Wieers), #156716.
  - Update source URL to new location since 1.2 is now the default stable.
  - Don't (yet) update to 1.0.50, as it introduces some changes in the perl
    modules install.


author: Jarod Wilson <jwilson@redhat.com> 1.2.13-1
changelog:
  - Update to release 1.2.13
  - Merge spec changes from dag, atrpms and mdk builds
  - Additional hacktastic contortions for lib64 & rpath messiness
  - Add missing post/postun ldconfig
  - Fix a bunch of rpmlint errors
  - Disable static libs, per FE guidelines
  - Split off docs


author: Jarod Wilson <jwilson@redhat.com> 1.2.13-2
changelog:
  - Remove explicit perl dep, version grabbing using rpm during
    rpmbuild not guaranteed to work (fails on ppc in plague),
    and auto-gen perl deps are sufficient


author: Jarod Wilson <jwilson@redhat.com> 1.2.15-3
changelog:
  - One more addition to initrrdtool patch, to fully revert
    and correct upstream changeset 839
  - Fix for no python in minimal fc4 buildroots


author: Jarod Wilson <jwilson@redhat.com> 1.3-0.3.beta3
changelog:
  - Update to rrdtool 1.3 beta3
  - Return properly from errors in RRDp.pm (Resolves: #427040)
  - Requires: dejavu-lgc-fonts (Resolves: #426935)


author: Jarod Wilson <jwilson@redhat.com> 1.3-0.15.rc1
changelog:
  - Update to rrdtool 1.3 rc1
  - Fix versioning in changelog entries, had an extra 0 in there...
  - Drop cairo and python patches, they're in 1.3 rc1
  - Add Requires: gettext and libxml2-devel for new translations


author: Jarod Wilson <jwilson@redhat.com> 1.3.2-1
changelog:
  - Update to rrdtool 1.3.2
    * fixes a data corruption bug when rrd wraps around
    * make imginfo behave the same as docs say it does
    * fixes for numerous memory leaks


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.4-2
changelog:
  - Fixed mixed tabs and spaces rpmlint warning
  - Fixed tcl-site configure option (upstream ticket #281)
  - Removed Rpath from Ruby
  - Enabled Lua bindings (#656080), thanks to Tim Niemueller


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.9-1
changelog:
  - New version
    Resolves: rhbz#1147901
  - Dropped imginfo-check patch (upstreamed)
  - De-fuzzified patches


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.5.0-1
changelog:
  - New version
    Resolves: rhbz#1213035
  - Dropped autoconf and doc-fix patches (all upstreamed)
  - Included systemd rrdcached service and socket from upstream
  - General documentation (like NEWS) moved to basic package


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.5.4-1
changelog:
  - New version
    Resolves: rhbz#1251737
  - Defuzzified ruby-2-fix and lua-5.2 patches
  - Used global instead of define
  - Dropped macros for commands (e.g. rm)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.6.0-1
changelog:
  - New version
    Resolves: rhbz#1328651
  - Dropped lua-5.2 and arm-crash-fix patches (upstreamed)
  - Updated ruby-2-fix patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.6.0-4
changelog:
  - Disabled php bindings due to rhbz#1353500 and:
    https://github.com/oetiker/rrdtool-1.x/issues/724


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.7.0-5
changelog:
  - Python 2 binary package renamed to python2-rrdtool
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Liming Sun <lsun@mellanox.com> - 2.0.1-1
changelog:
  - Rename bfrshim to rshim
  - Remove rshim.spec since it's auto-generated from rshim.spec.in
  - Fix warnings reported by coverity
  - Add rhel/rshim.spec.in for fedora
  - Move rshim to sbin and move man page to man8


author: Liming Sun <lsun@mellanox.com> - 2.0.2-1
changelog:
  - Remove unnecessary dependency in .spec and use make_build
  - Add package build for debian/ubuntu
  - Fix some format in the man page
  - Add check for syslog headers


author: Liming Sun <lsun@mellanox.com> - 2.0.3-1
changelog:
  - Enable pci device during probing
  - Map the pci resource0 file instead of /dev/mem
  - Add copyright header in bootstrap.sh
  - Add 'Requires' tag check in the rpm .spec for kernel-modules-extra
  - Fix the 'rshim --version' output


author: Liming Sun <lsun@mellanox.com> - 2.0.4-1
changelog:
  - Update .spec file according to review comments
  - Fix the 'KillMode' in rshim.service
  - Support process termination by SIGTERM
  - Fix some compiling warnings and configure issue for FreeBSD
  - Fix a read()/write() issue in rshim_pcie.c caused by optimization


author: Dean Nelson <dnelson@redhat.com> - 2.0.4-4
changelog:
  - Expose gating.yaml file in order to enable manual CI gating for rshim
    in RHEL-8.4, by bumping release and doing a Brew build.
  - Partially resolves: rhbz#1912248


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-1
changelog:
  - Update user-space rshim driver source to version 2.0.5.
  - Modify rshim.spec accordingly.
  - Resolves: rhbz#1950425


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-2
changelog:
  - Add sysconfig/rshim file and update rshim.service to source it.
  - jbastian made the first cut of this patch, which needed to be
    modified due to the update to 2.0.5. And I chose to go with
    %autosetup to handle Patch0, instead of sticking with %setup.
  - Resolves: rhbz#1946349


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-9
changelog:
  - Add deleteStateOnFileMove imfile module option
    resolves: rhbz#1909639
  - Add inotify_rm_watch() inotify API call when object needs to be destroyed
    resolves: rhbz#2052403


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-10
changelog:
  - openssl: Correct gnutlsPriorityString (custom ciphers) behaviour
  - Fix error handling in gtlsRecordRecv that can cause 100 percent CPU usage
    resolves: rhbz#2046158
  - Address CVE-2022-24903, Heap-based overflow in TCP syslog server
    resolves: rhbz#2081401


author: Attila Lakatos <alaktos@redhat.com> - 8.2102.0-13
changelog:
  - Make rsyslog-relp require librelp>= 1.9.0
    resolves: rhbz#2029352
  - Reorder logrotate parameters to work with POSIXLY_CORRECT env var
    resolves: rhbz#2070496


author: Radovan Sroka <rsroka@redhat.com> - 8.32.0-1
changelog:
  - initial clean build with plugins from rhel7
  - removed plugins:
    - libdbi
    - omruleset
    - pmrfc3164sd
  - imported from fedora26


author: Marek Tamaskovic <mtamasko@redhat.com> - 8.35.0-1
changelog:
  - rebase to 8.35
  - rebased patches from 8.32 to 8.35
    - fixed imjournal-duplicates
    - fixed imjournal-default-tag
    - fixed service patch
    - fixed in upstream deserialize-property-name


author: Jiri Vymazal <jvymazal@redhat.com> - 8.35.0-1
changelog:
  - spec file cleanup
  - enabled kafka and hiredis modules
    resolves: rhbz#1542497
    resolves: rhbz#1542504
  - renamed patch fixing imjournal duplicating messages
    resolves: rhbz#1544394


author: Jiri Vymazal <jvymazal@redhat.com> - 8.36.0-1
changelog:
  - rebase to 8.36
  - removed hiredis module
  - removed omudpspoof module
    resolves: rhbz#1593762
  - finished converting config to new-style syntax


author: Jiri Vymazal <jvymazal@redhat.com> - 8.36.0-1
changelog:
  - changed PID file name to follow upstream
  - removed config option to disable stdlog as it is now
    disabled by default


author: Jiri Vymazal <jvymazal@redhat.com> - 8.36.0-3
changelog:
  - dropped json_nonoverwrite patch as there is no reason for
    keeping it
  - renumbered rest of patches
  - added release number to AC_INIT to have it in package error logs


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-1
changelog:
  - rebase to 8.37.0
    resolves: rhbz#1613880
    resolves: rhbz#1564054
    resolves: rhbz#1598218
    - dropped invalid statefile patch - upstreamed
    - dropped imjournal duplicates patch - upstreamed
    resolves: rhbz#1544394
  - renumbered default tag patch and fitted onto rebased version


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-5
changelog:
  - rebuild for rebased dependencies
  - dependency cleanup and sorted sub-packages in spec
    resolves: rhbz#1613880


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-10
changelog:
  RHEL 8.1.0 ERRATUM
  - added option for imfile endmsg.regex
    resolves: rhbz#1627941
  - added patch enhancing imfile rotation detection
    resolves: rhbz#1674471
  - added patch fixing msgOffset datatype preventing crash on
    message with too long other fields
    resolves: rhbz#1677037
  - added patch introducing "preservecase" option for imudp/imtcp
    resolves: rhbz#1614181


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-11
changelog:
  RHEL 8.1.0 ERRATUM
  - fixed memory leak in imjournal by proper cursor releasing
    resolves: rhbz#1716867


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-12
changelog:
  RHEL 8.1.0 ERRATUM
  - edited imjournal memleak patch to not cause double-free crash
    resolves: rhbz#1729995
  - added patch calling journald API only when there are no
    preceeding errors
    resolves: rhbz#1722165
  - added patch fixing imrelp module when invoked with old syntax
    resolves: rhbz#1724218


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-13
changelog:
  RHEL 8.1.0 ERRATUM
  - added patch enabling stricter TLS certs checking conforming to
    common criteria requirements
    resolves: rhbz#1733244


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-1
changelog:
  RHEL 8.2.0 ERRATUM
  - rebased to 8.1911.0 upstream version, removed, previously
    upstreamed patches
    resolves: rhbz#1740683
    resolves: rhbz#1659383
    resolves: rhbz#1746876
    resolves: rhbz#1676559
    resolves: rhbz#1692072
    resolves: rhbz#1692073
    resolves: rhbz#1692074
    resolves: rhbz#1699242
    resolves: rhbz#1738213
    resolves: rhbz#1744691
    resolves: rhbz#1755218
    resolves: rhbz#1768321
    resolves: rhbz#1768324
  - added patch fixing imfile stefiles naming
    resolves: rhbz#1763757


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-3
changelog:
  RHEL 8.2.0 ERRATUM
  - added patch reverting rejecting expired certs by default
    resolves: rhbz#1782353
  - added patch silencing false errors on config.enabled statement
    resolves: rhbz#1659383


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-5
changelog:
  RHEL 8.3.0 ERRATUM
  - added qpid-proton as another source and enabled omamqp1 module
    in a separate sub-package with it statically linked
    resolves: rhbz#1713427
  - extended config.enabled patch to cover rest of the cases
    resolves: rhbz#1659383
  - added patch making json serialization thread-safe
    resolves: rhbz#1789675
  - added another patch for imfile state-files id
    resolves: rhbz#1793569
  - fixed typo in commend-out part of default rsyslog.conf


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-6
changelog:
  RHEL 8.3.0 ERRATUM
  - added patch preventing imfile crash when selinux blocks symlink
    access
    resolves: rhbz#1843994
  - fixed config-enabled patch
    resolves: rhbz#1659383


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-2
changelog:
  RHEL 8.5.0 ERRATUM
  - rebase to 8.2102.0
    resolves: rhbz#1932795
  - Enable openssl
    resolves: rhbz#1891458
  - EKU check for client cert on server side
    resolves: rhbz#1783348
  - Use GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1880434
  - Use librelp with openssl enabled
    resolves: rhbz#1795607
  - Close dir when fsync=on
    resolves: rhbz#1960536


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-3
changelog:
  - Priority field must have valid length
    resolves: rhbz#1866877
  - Allocate more memory on too large groups
    resolves: rhbz#1944718


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-5
changelog:
  - Do not exit when user/group can not be found
    resolves: rhbz#1984489
  - Remove abortOnIDResolution fail


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.11-8
changelog:
  - Use a simpler patch for -lrt.
  - Remove ControlGroup setting from the service file
    Resolves: #1010534
  - Turn on hardening flags
    Resolves: #996735, #1008399


author: Stephen Gallagher <sgallagh@redhat.com> - 0.11-15
changelog:
  - Temporarily disable -Werror=format-security to unbreak the build
  - Build with verbose command-line visible in the logs
  - Resolves: rhbz#1424270


author: Vít Ondruch <vondruch@redhat.com> - 2.5.5-104
changelog:
  - Update to Ruby 2.5.5.
    * Remove Patch25: ruby-2.6.0-Update-for-tzdata-2018f.patch; subsumed
    * Remove Patch11: ruby-2.6.0-Try-to-update-cert.patch; subsumed
    * Remove Patch19: ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with
        -TLS-1.3.patch; subsumed
    Resolves: rhbz#1688758
  - Don't ship .stp files when SystemTap support is disabled.
    Related: rhbz#1657915
  - Fix CovScan issues.
    Resolves: rhbz#1628592


author: Jun Aruga <jaruga@redhat.com> - 2.5.5-105
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1688758
  - Fix rdoc gzipped javascript pages are not the same across multilib.
    Resolves: rhbz#1719647


author: Pavel Valena <pvalena@redhat.com> - 2.5.9-107
changelog:
  - Update to Ruby 2.5.9.
    * Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed
    Resolves: rhbz#1757844
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1950308


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-108
changelog:
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix StartTLS stripping vulnerability in Net::IMAP
    Resolves: CVE-2021-32066
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810


author: Jun Aruga <jaruga@redhat.com> - 2.5.9-110
changelog:
  - Fix FTBFS due to an incompatible load directive.
  - Fix a fiddle import test on an optimized glibc on Power 9.
  - Fix by adding length limit option for methods that parses date strings.
    Resolves: CVE-2021-41817
  - CGI::Cookie.parse no longer decodes cookie names to prevent spoofing security
    prefixes in cookie names.
    Resolves: CVE-2021-41819


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-111
changelog:
  - Fix HTTP response splitting in CGI.
    Resolves: CVE-2021-33621
  - Fix Buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739
  - Fix ReDoS vulnerability in URI.
    Resolves: CVE-2023-28755
  - Fix ReDoS vulnerability in Time.
    Resolves: CVE-2023-28756


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-105
changelog:
  - Update to Ruby 2.6.3 by merging Fedora master branch (commit: 1cc2a49)
    * Properly generate "ruby(rubygems)" versioned dependencies.
    * Extract composition of dependecy strings into helper.
    * Loosen RDoc dependency.
    * Upstream fix adding -C flag instead of changing directory for gem build.
    * Remove obsolete Group tag
    * Fix ".include =" support in openssl.cnf.
    * Link IRB back to StdLib.
    * Link IRB files instead of directories.
    * Exclude irb.rb from ruby-libs.
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-106
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1672575


author: Jarek Prokop <jprokop@redhat.com> - 2.6.7-107
changelog:
  - Upgrade to Ruby 2.6.7.
    Resolves: rhbz#1757846
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given an address
    containing leading zero
    Resolves: rhbz#1950307
  - Fix: Rubygem-bundler: Don't use insecure tmp directory as home
    allows for execution of malicious code.
    Resolves: CVE-2019-3881


author: Jun Aruga <jaruga@redhat.com> - 2.6.9-108
changelog:
  - Upgrade to Ruby 2.6.9.
  - Skip JIT tests in RHEL 8.
  - Fix the issues required to start the "make test-bundler" itself.
  - Fix Bundler dependency confusion.
    Resolves: CVE-2020-36327


author: Vít Ondruch <vondruch@redhat.com> - 2.6.10-109
changelog:
  - Upgrade to Ruby 2.6.10.
    Resolves: rhbz#2088415
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739
  - Fix FTBFS due to an incompatible load directive.
  - Fix a fiddle import test on an optimized glibc on Power 9.


author: Vít Ondruch <vondruch@redhat.com> - 2.7.1-133
changelog:
  - Fix `require` behavior allowing to load libraries multiple times.
    Resolves: rhbz#1842989
  - Add ruby-default-gems dependency on irb.


author: Pavel Valena <pvalena@redhat.com> - 2.7.3-136
changelog:
  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1947938
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1944227


author: Jun Aruga <jaruga@redhat.com> - 2.7.4-137
changelog:
  - Upgrade to Ruby 2.7.4.
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810
  - Fix StartTLS stripping vulnerability in Net::IMAP.
    Resolves: CVE-2021-32066
  - Upgrade to Bundler 2.2.24.
    Resolves: CVE-2020-36327


author: Jarek Prokop <jprokop@redhat.com> - 2.7.6-138
changelog:
  - Upgrade to Ruby 2.7.6.
    Resolves: rhbz#2109424
  - Fix FTBFS due to an incompatible load directive.
    Related: rhbz#2109424
  - Fix a fiddle import test on an optimized glibc on Power 9.
    Related: rhbz#2109424
  - Fix regular Expression Denial of Service Vulnerability of Date Parsing Methods.
    Resolves: CVE-2021-41817
  - Fix cookie prefix spoofing in CGI::Cookie.parse.
    Resolves: CVE-2021-41819
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jarek Prokop <jprokop@redhat.com> - 3.0.1-138
changelog:
  - Upgrade to Ruby 3.0.1 by merging Fedora rawhide branch (commit: 6b2ff68).
    * Add missing `rubygem-` prefix for bundled provide of 'connection_pool'.
    * Pass ldflags to gem install via CONFIGURE_ARGS
    * Remove IRB dependency from rubygem-rdoc.
    * Fix flaky excon test suite.
    * Properly support DWARF5 debug information.
        Related: rhbz#1920533
    * Bundle OpenSSL into StdLib.
    * Fix SEGFAULT in rubygem-shoulda-matchers test suite.
    * Provide `gem.build_complete` file for binary gems.
    * Re-enable test suite.
    * ruby-default-gems have to depend on rubygem(io-console) due to reline.
    * Fix SEGFAULT preventing rubygem-unicode to build on armv7hl.
    * Add support for reworked RubyGems plugins.
    * Use proper path for plugin wrappers.
    * Extract RSS and REXML into separate subpackages, because they were moved from
       default gems to bundled gems.
    * Drop Net::Telnet and XMLRPC packages, because they were dropped from Ruby.
    Resolves: rhbz#1938942
  - Fix FTBFS due to an incompatible load directive.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-139
changelog:
  - Upgrade to Ruby 3.0.2.
    Related: rhbz#1938942
  - Fix command injection vulnerability in RDoc. (CVE-2021-31799)
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    (CVE-2021-31810)
  - Fix StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)
  - Fix dependencies of gems with explicit source installed from a
    different source. (CVE-2020-36327)
  - Pass ldflags to gem install via CONFIGURE_ARGS.
    The same comment on the changelog 3.0.1-138 was wrong.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-140
changelog:
  - Fix rubygem-irb upgrade not working due to directory -> symlink conversion.
    Resolves: rhbz#2010949


author: Jarek Prokop <jprokop@redhat.com> - 3.0.4-141
changelog:
  - Upgrade to Ruby 3.0.4.
    Resolves: rhbz#2109431
    Resolves: rhbz#2110981
  - Fix double free in Regexp compilation.
    Resolves: CVE-2022-28738
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jun Aruga <jaruga@redhat.com> - 0.5.2-1
changelog:
  - New upstream release 0.5.2 by merging Fedora master branch (commit: cc15309)
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 0.5.3-1
changelog:
  - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475)
    Resolves: rhbz#1817135


author: lihaipeng <lihaipeng@openanolis.org> - 1.0.0-2.0.1
changelog:
  - Changed the way how/when parameters are interpret
  - Reference https://github.com/ged/ruby-pg/commit/73cd5e158ba4af73243c22f8918b1754256db17b


author: lihaipeng <lihaipeng@openanolis.com> - 1.0.0-2.0.2
changelog:
  - Fix expected PG::Error with message matching /invalid input syntax for integer/
  - Reference https://github.com/ged/ruby-pg/blob/v1.2.0/spec/pg/connection_spec.rb


author: Jun Aruga <jaruga@redhat.com> - 1.1.4-1
changelog:
  - Update to pg 1.1.4 by merging Fedora master branch (commit: 397796e)
    * BuildRequires: s/postgresql-devel/libpq-devel/
    * Add marking lines at the start and end of the setup.log
    Resolves: rhbz#1672575


author: Lokesh Mandvekar <lsm5@redhat.com> - 0.0.8-1.git4155b68
changelog:
  - Resolves: rhbz#1277245 - bump to 0.0.8
  - Resolves: rhbz#1302363 - criu is a runtime dep
  - Resolves: rhbz#1302348 - libseccomp-golang is bundled in Godeps
  - manpages included


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-1.rc2
changelog:
  - Resolves: #1412239 - *CVE-2016-9962* - set init processes as non-dumpable,
  runc patch from Michael Crosby <crosbymichael@gmail.com>


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-9.1.gitf8ce01d
changelog:
  - Resolves: #1447078 - change default root path
  - add commit e800860 from runc @projectatomic/change-root-path


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.0.0-24.rc4.dev.gitc6e4a1e.1
changelog:
  - rebase to c6e4a1ebeb1a72b529c6f1b6ee2b1ae5b868b14f
  - https://github.com/opencontainers/runc/pull/1651


author: Dan Walsh <dwalsh@redhat.com> - 2:1.0.0-40.rc5.dev.gitad0f525
changelog:
  - Remove sysclt handling, not needed in RHEL8
  - Make sure package built with seccomp flags
  - Remove rectty
  - Add completions


author: Dan Walsh <dwalsh@redhat.name> - 2:1.0.0-46.dev.gitb4e2ecb
changelog:
  - Add patch https://github.com/opencontainers/runc/pull/1807 to allow
  - runc and podman to work with sd_notify


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-68.rc92
changelog:
  - update to https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.3-6
changelog:
  - Fix every podman run invocation generates two "Couldn't stat device
    /dev/char/10:200: No such file or directory" lines in the journal
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.3-3
changelog:
  - fix "Error: runc: exec failed: unable to start container process:
    open /dev/pts/0: operation not permitted: OCI permission denied"
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.12-1
changelog:
  - update to https://github.com/opencontainers/runc/releases/tag/v1.1.12
  - fixes CVE-2024-21626
  - Resolves: RHEL-23587


author: Petr Kubat <pkubat@redhat.com> - 0.17-89
changelog:
  - Add dependencies on libtirpc, rpcsvc-proto-devel and rpcgen (#1556423)
    Related to: https://fedoraproject.org/wiki/Changes/SunRPCRemoval


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.0.27-15
changelog:
  - 1554032 - saned doesn't have permissions to write on usb port
  - updated README.Fedora - mention epson official drivers


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.0.27-20
changelog:
  - 1852468, 1852467, 1852466, 1852465 - prevent buffer overflow in esci2_img
  - 1852668, 1852667, 1852666, 1852665 - disable autodiscovery for epsonds backend


author: Jakub Filak <jakub@thefilaks.net> 0.22-1
changelog:
  - New upstream version
    - Added support fof JavaScript (V8) stack traces
    - Most parts of the in-hook core unwinder callable under unprivileged user
    - GDB core unwinder limits number of unwound frames
    - Fixed a pair of compile warnings - Chris Redmon <credmonster@gmail.com>


author: Matej Habrnal <mhabrnal@redhat.com> 0.23-1
changelog:
  - New upstream version
    - Allow rpm to be optional at build time
    - Do not use deprecated fedorahosted.org


author: Julius Milan <jmilan@redhat.com> 0.24-1
changelog:
  - New upstream version
    - Allow to report unpackaged problems
    - apidoc: generate html docs using doxygen
    - Fix parsing of subset of arm kernel oopses


author: Martin Kutlak <mkutlak@redhat.com> 0.25-1
changelog:
  - New upstream version
   - Normalization: actualize list of functions
   - Fix some compilation warnings
   - Allow to build python3 for rhel8
   - Makefile: add make release-* subcommands
   - Elfutils: Add missing stubs from earlier commit


author: Matej Habrnal <mhabrnal@redhat.com> 0.26-1
changelog:
  - spec: fix Allow python2 to be optional at build time
  - Allow python2 to be optional at build time
  - normalization: actualize list of functions
  - Append Python interpreter as related package
  - makefile: create .tar.xz with make release


author: Matej Habrnal <mhabrnal@redhat.com> 0.21-1
changelog:
  - New upstream version
    - Introduce 'serial' field in uReport
    - normalization: actualize list of functions


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - properly conflict with pacemaker not providing sync-default we need
    Resolves: rhbz#1979961
    Resolves: rhbz#1979573


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.1-2
changelog:
  - obviously autoconf is defining runstatedir - but with a
    wrong default - directly hand it over to configure
    and skip --with-runstatedir implemented in configure.ac
    for older versions of autoconf

    Resolves: rhbz#2011707


author: lixin <lixinb@uniontech.com> - 1.5.1-3
changelog:
  - update: update to upstream 1.5.1-3, modify Conflicts version of fence-agents-sbd
  - arch: add loongarch64


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-10
changelog:
  - Fix docdir patch (patch Makefile.am, not Makefile.in)
  - Use correct short name for Eclipse Public License 1.0
  - Use %license
  - Add explicit dependencies for libraries in Makefile.am (fixes FTBFS)
    Resolves: #1606302


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions
    Resolves: #1776670


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.5.0-1
changelog:
  - Update to latest upstream version
  - Change license to Eclipse Public License 1.0
  - Use %license
  - Fix URL


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-10
changelog:
  - Fix null pointer (DoS) vulnerability via POST request to /cimom (CVE-2018-6644)
    (patch by Adam Majer)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-16
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Remove %defattr
    Resolves: #1638007


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-9
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Fix license tag
    Resolves: #1638015


author: Michael Simacek <msimacek@redhat.com> - 2.10.6-7
changelog:
  - Port from deprecated add_maven_depmap to mvn_install
  - Remove unused BR felix-framework
  - Fix unowned directory


author: Michael Simacek <msimacek@redhat.com> - 2.10.6-11
changelog:
  - Correct license tag to include CC0 and Public Domain
  - Repack tarball to remove possibly proprietary binaries
  - Use %license macro


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.10.6-13
changelog:
  - Stop scaladoc from trying to bundle non-existent resources
  - Temporarly disable docs generation during build


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.63-2
changelog:
  - aligning with the latest STIG update (RHBZ#2112937)
  - OSPP: use Authselect minimal profile (RHBZ#2117192)
  - OSPP: change rules for protecting of boot (RHBZ#2116440)
  - add warning about configuring of TCP queues to rsyslog_remote_loghost (RHBZ#2078974)
  - fix handling of Defaults clause in sudoers (RHBZ#2083109)
  - make rules checking for mount options of /tmp and /var/tmp applicable only when the partition really exists (RHBZ#2032403)
  - fix handling of Rsyslog include directives (RHBZ#2075384)


author: Watson Sato <wsato@redhat.com> - 0.1.63-5
changelog:
  - Update RHEL8 STIG profile to V1R8 (RHBZ#2148446)
  - Add rule warning for sysctl IPv4 forwarding config (RHBZ#2118758)
  - Fix remediation for firewalld_sshd_port_enabled (RHBZ#2116474)
  - Fix compatibility with Ansible 2.14


author: Watson Sato <wsato@redhat.com> - 0.1.66-1
changelog:
  - Rebase to a new upstream release 0.1.66 (RHBZ#2158404)
  - Update RHEL8 STIG profile to V1R9 (RHBZ#2152658)
  - Fix levels of CIS rules (RHBZ#2162803)
  - Remove unused RHEL8 STIG control file (RHBZ#2156192)
  - Fix accounts_password_pam_unix_remember's check and remediations (RHBZ#2153547)
  - Fix handling of space in sudo_require_reauthentication (RHBZ#2152208)
  - Add rule for audit immutable login uids (RHBZ#2151553)
  - Fix remediation of audit watch rules (RHBZ#2119356)
  - Align file_permissions_sshd_private_key with DISA Benchmark (RHBZ#2115343)
  - Fix applicability of kerberos rules (RHBZ#2099394)
  - Add support rainer scripts in rsyslog rules (RHBZ#2072444)


author: Jan Černý <jcerny@redhat.com> - 0.1.69-1
changelog:
  - Rebase to a new upstream release 0.1.69 (RHBZ#2228444)
  - Add rule audit_rules_login_events_faillock to STIG profile (RHBZ#2228455)
  - Add appropriate STIGID to accounts_passwords_pam_faillock_interval rule (RHBZ#2228465)
  - Make rule checking for Postfix unrestricted relay accept more variants of valid configuration syntax (RHBZ#2228471)
  - Correct URL used to download CVE checks (RHBZ#2228452)
  - Evaluation and remediation of rules related to mount points have been enhanced for Image builder (RHBZ#2228448)
  - Mention exact required configuration value in description of some PAM related rules (RHBZ#2228441)
  - Fixed rules related to AIDE configuration (RHBZ#2228458)
  - Update ANSSI BP-028 profiles to be aligned with version 2.0 (RHBZ#2228429)
  - Improved and unified OVAL checks checking for interactive users (RHBZ#2228433)
  - Unify OVAL checks to correctly identify interactive users (RHBZ#2228460)
  - Fixed excess quotes in journald configuration files (RHBZ#2228437)
  - Allow default permissions for files stored on EFI FAT partitions (RHBZ#2228443)
  - Make mount point related rules not applicable when no such mount points exist (RHBZ#2228473)


author: Daniel Kopecek <dkopecek@redhat.com> - 2.5.2-14
changelog:
  Resolves: rhbz#1689897 - Missing '--extent-only' patch
  Resolves: rhbz#1630298 - Removal of component scrub or its crypto from RHEL


author: Vit Mojzis <vmojzis@redhat.com> - 4.2.1-3
changelog:
  - Use 
    CFLAGS="${CFLAGS:--O2 -g}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/uos/uos-hardened-ld}" ; export LDFLAGS instead of -O2 -g


author: Vit Mojzis <vmojzis@redhat.com> - 4.3.0-1
changelog:
  - SETools 4.3.0 release (#1820079)
  - Revised sediff method for TE rules. This drastically reduced memory and run time.
  - Added infiniband context support to seinfo, sediff, and apol.
  - Added apol configuration for location of Qt assistant.
  - Fixed sediff issue where properties header would display when not requested.
  - Fixed sediff issue with type_transition file name comparison.
  - Fixed permission map socket sendto information flow direction.
  - Added methods to TypeAttribute class to make it a complete Python collection.
  - Genfscon now will look up classes rather than using fixed values which
    were dropped from libsepol.
  - setools requires -console, -console-analyses and -gui packages (#1820078)


author: Vit Mojzis <vmojzis@redhat.com> - 4.3.0-4
changelog:
  - Disable/remove neverallow options in frontends (#2184141)
  - AVRuleXperm: Fix permission set creation for AVTAB_XPERMS_IOCTLDRIVER (#2174376)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.22-2
changelog:
  - Log plugin exception traceback when log level is DEBUG
  - sepolicy.info() returns a generator, not a list (#1784564)


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.23-1
changelog:
  - browser: Check return value of Gdk.Screen().get_default() (#1574434)
  - Improve and unify error messages (#1763982)
  - setroubleshoot.util: Catch exceptions from sepolicy import
  - Add dpkg support
  - Do not refer to hardcoded selinux-policy rpm in signature
  - Make date/time format locale specific (#1812674)
  - Improve speed of plugin evaluation (#1794807)
  - Do not try to report a bug on None package
  - sealert: Drop unused import slib.dbus.service
  - Drop updater.py - it's not used and doesn't work
  - root user doesn't need to use SetroubleshootPrivileged API
  - Use pydbus, a modern Python dbus API, for SetroubleshootPrivileged
  - Report bug on a package which owns the related SELinux domain (#1811644)
    https://pagure.io/setroubleshoot/issue/18
  - Add Local SELinux policy package version to analyses reports
  - setroubleshoot.utils.get_rpm_nvr_by_scontext add option to use DBUS method
  - Export setroubleshoot.utils.get_rpm_nvr_by_scontext via DBUS
  - setroubleshoot.util: get_rpm_nvr_by_type() and get_rpm_nvr_by_scontext()


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-1
changelog:
  - Add 'fur' into shipped locales
  - Update translations (#1820570)
  - Log full reports with correct syslog identifier
  - Cancel pending alarm during AVC analyses


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-2
changelog:
  - Optimize get_rpm_nvr_by_type by adding a cache (#1794807)
  - Stop building seappletlegacy (#1878792)
  - Update translations


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-1
changelog:
  - Revert "Replace pydbus with dasbus"
  - Fix typos in --help, man pages and developer's guide (#2028226)
  - Do not use Python slip package
  - Stop SetroubleshootFixit after 10 seconds of inactivity
  - Fix plugin exception reporting
  - export alert dbus signal
  - Make sure local_policy_package is not None
  - sealert: add "Last Seen" column to alert list


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.10-1
changelog:
  - Handle no "allowed_target_types" properly
  - bind_ports: Do not use when there are no allowed_target_types
  - Fix summary and "if" text for AVCs with unknown target path
  - plugins: Update translations


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.10-2
changelog:
  - update "file" plugin (#1649818)
  - Update "xen_image" plugin (#1649831)
  - Update qemu_blk_image and qemu_file_image (#1649838)


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.12-1
changelog:
  - Use get_package_nvr* functions instead of get_rpm_nvr*
  - Update deprecated type references (#1829306)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-12
changelog:
  - lib/sssd: redirect warning message to file (#1749001)
  - useradd: clarify valid usernames/groupnames (#1869432)
  - login.defs: link login specific information to its own package (#1804766)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-15
changelog:
  - Creation of subid and subid-devel subpackages (#2013009)
  - libsubid: creation and nsswitch support
  - libsubid: don't print error messages on stderr by default
  - libsubid: libsubid_init return false if out of memory
  - libsubid: don't return owner in list_owner_ranges API call
  - libsubid: libsubid_init don't print messages on error
  - libsubid: fix newusers when nss provides subids
  - libsubid: make shadow_logfd not extern
  - useradd: fix SUB_UID_COUNT=0
  - man: mention NSS in new[ug]idmap manpages
  - man: clarify subid delegation


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-16
changelog:
  - getsubids: provide system binary and man page. Resolves: #2013016
  - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #1986782


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-17
changelog:
  - subordinateio: also compare the owner ID. Resolves: #2093311
  - Fix release sources
  - Add subid requirement for subid-devel


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-18
changelog:
  - Update patch to close label to reset libselinux state. Resolves: #1984740
  - useradd: check if subid range exists for user. Resolves: #2012929
  - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #1994269


author: Nathan Scott <nathans@redhat.com> - 0.6.2-1
changelog:
  - Switch to enabling the Java 8+ maven modules only now.
  - Add unitsofmeasurement prefix to package name.
  - Update to latest upstream sources.


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 0.1.13-5
changelog:
  - include go-srpm-macros and compiler(go-compiler) in fedora conditionals
  - define %gobuild if not already
  - add patch to build with older version of golang


author: dwalsh <dwalsh@redhat.com> - 0.1.21-1.dev.git0b73154
changelog:
  - Add support for storage.conf and storage-config.5.md from github container storage package
  - Bump to the latest version of skopeo
  - vendor.conf: add ostree-go
  - it is used by containers/image for pulling images to the OSTree storage.
  - fail early when image os does not match host os
  - Improve documentation on what to do with containers/image failures in test-skopeo
  -   We now have the docker-archive: transport
  -   Integration tests with built registries also exist
  - Support /etc/docker/certs.d
  - update image-spec to v1.0.0-rc6


author: dwalsh <dwalsh@redhat.com> - 0.1.22-1.dev.git5d24b67
changelog:
  -  Give more useful help when explaining usage
  -  Also specify container-storage as a valid transport
  -  Remove docker reference wherever possible
  -  vendor in ostree fixes


author: dwalsh <dwalsh@redhat.com> - 0.1.23-6.dev.git1bbd87
changelog:
  - Change name of storage.conf.5 man page to containers-storage.conf.5, since
  it conflicts with inn package
  - Also remove default to "overalay" in the configuration, since we should
  - allow containers storage to pick the best default for the platform.


author: dwalsh <dwalsh@redhat.com> - 0.1.24-4.dev.git28d4e08
changelog:
  - Update container/storage.conf and containers-storage.conf man page
  - Default override to true so it is consistent with RHEL.


author: dwalsh <dwalsh@redhat.com> - 0.1.25-1.git7fd6f66b
changelog:
  -   Fix CVE in tar-split
  -   copy: add shared blob directory support for OCI sources/destinations
  -   Aligning Docker version between containers/image and skopeo
  -   Update image-tools, and remove the duplicate Sirupsen/logrus vendor
  -   makefile: use -buildmode=pie


author: dwalsh <dwalsh@redhat.com> - 0.1.25-2.git2e8377a7
changelog:
  -  Add manifest type conversion to skopeo copy
  -  User can select from 3 manifest types: oci, v2s1, or v2s2
  -   e.g skopeo copy --format v2s1 --compress-blobs docker-archive:alp.tar dir:my-directory


author: dwalsh <dwalsh@redhat.com> - 0.1.27-1.git
changelog:
  - Fix Conflicts to Obsoletes
  - Add better docs to man pages.
  - Use credentials from authfile for skopeo commands
  - Support storage="" in /etc/containers/storage.conf
  - Add global --override-arch and --override-os options


author: dwalsh <dwalsh@redhat.com> - 0.1.29-1.git
changelog:
  - bump to 0.1.29-1
  - Updated containers/image
      docker-archive generates docker legacy compatible images
      Do not create $DiffID subdirectories for layers with no configs
      Ensure the layer IDs in legacy docker/tarfile metadata are unique
      docker-archive: repeated layers are symlinked in the tar file
      sysregistries: remove all trailing slashes
      Improve docker/* error messages
      Fix failure to make auth directory
      Create a new slice in Schema1.UpdateLayerInfos
      Drop unused storageImageDestination.{image,systemContext}
      Load a *storage.Image only once in storageImageSource
      Support gzip for docker-archive files
      Remove .tar extension from blob and config file names
      ostree, src: support copy of compressed layers
      ostree: re-pull layer if it misses uncompressed_digest|uncompressed_size
      image: fix docker schema v1 -> OCI conversion
      Add /etc/containers/certs.d as default certs directory


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.31-1.git0144aa8
changelog:
  - Resolves: #1580938 - resolve FTBFS
  - Resolves: #1583762 - remove dependency on btrfs-progs-devel
  - bump to v0.1.31 (from master)
  - built commit ca3bff6
  - use go-toolset deps for rhel8


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.31-4.git0144aa8
changelog:
  - Resolves: #1597629 - handle dependency issue for skopeo-containers
  - rename skopeo-containers to containers-common as in Fedora


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.31-7.git0144aa8
changelog:
  - build with %gobuild
  - use scl-ized go-toolset as dep
  - disable i686 builds temporarily because of go-toolset issues


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.32-4.git1715c90
changelog:
  - Fixes @openshift/machine-config-operator#669
  - install /etc/containers/oci/hooks.d and /etc/containers/certs.d


author: Jindrich Novy <jnovy@redhat.com> - 1:0.1.40-2
changelog:
  - comment out mountopt option in order to fix gating tests
    see bug 1769769
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1:0.1.40-4
changelog:
  - fix symlinks in /usr/share/rhel/secrets and make
    subscription-manager soft dependency to make them work
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.0-2
changelog:
  - fix "CVE-2020-14040 skopeo: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-8]"
  - Resolves: #1854719


author: Eduardo Santiago <santiago@redhat.com> - 1:1.1.0-3
changelog:
  - fix broken gating tests: docker unexpectedly removed htpasswd from
    their 'registry:2' image, so we now use htpasswd from httpd-tools on host.


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-1
changelog:
  - update vendored component versions
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/2e90a8a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-5
changelog:
  - assure "NET_RAW" is always defined
  - support rhel-shortnames.conf with generated shortname/registry aliases
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-6
changelog:
  - fix rhel-shortnames.conf generation (avoid duplicates and records
    with invalid URL)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-8
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/2e90a8a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-10
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/a05ddb8)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-11
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/6c0e35a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-12
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/b4210c0)
  - Resolves: #1914884


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-13
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/3abb778)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/e72dd9c)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-2
changelog:
  - use rhel-shortnames only from trusted registries
  - sync with config files from current versions of vendored projects
  - Resolves: #1933775
  - Resolves: #1933776


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-3
changelog:
  - use infra_image = "registry.redhat.io/rhel8/pause" in contiainers.conf
  - add update-vendored.sh script which will always assure we ship
    documentation/configs for versions vendored in podman, buildah and
    skopeo
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-4
changelog:
  - use infra_image = "registry.redhat.io/ubi8/pause" in containers.conf
    (unlike previous one ubi8/pause doesn't require authentication)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-5
changelog:
  - require crun >= 0.19 and set it as default OCI runtime
  - add ensure() function to update.sh so that configuration statements
    can be easily amended/reviewed
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.3-1
changelog:
  - update to skopeo-1.2.3
  - sync with Fedora deps
  - fix typo in upstream Makefile
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.3-2
changelog:
  - assure runc is set as default runtime in RHEL8
  - update shortnames from upstream
  - sync vendored component versions with upstream
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.0-3
changelog:
  - update to new versions of vendored components
  - fail is there is an issue in communication with Pyxis API
  - understand devel branch in update.sh script
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.1-3
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.3
    (https://github.com/containers/skopeo/commit/038f70e)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.1-4
changelog:
  - add direct runc dependency to avoid situation when runc is listed
    as default runtime but only crun is present in RHEL8
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-1
changelog:
  - update vendored components
  - ship /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release only on non-RHEL and
    CentOS distros
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/ea32394)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/130f32f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.2-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/01e51ce)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/47b8082)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.3
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/177443f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.4
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/31b8981)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.5
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/db1e814)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.6
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/c5a5199)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.7
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/25d3e7b)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.8
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/4d3588e)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.9
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/86fa758)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.10
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/53cf287)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.11
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/a95b0cc)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.12
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/ff88d3f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/fc81803)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-0.2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/116e75f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-0.3
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/9c9a9f3)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:1.11.2-0.4
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.11
    (https://github.com/containers/skopeo/commit/8191ef3)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:1.11.3-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.11
    (https://github.com/containers/skopeo/commit/d79588e)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:1.11.3-0.2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.11
    (https://github.com/containers/skopeo/commit/7e11ab4)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:1.12.0-2
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179951
  - Resolves: #2187319
  - Resolves: #2187367
  - Resolves: #2203682
  - Resolves: #2207513


author: Jindrich Novy <jnovy@redhat.com> - 2:1.14.0-2
changelog:
  - update to latest content of https://github.com/containers/skopeo/releases/tag/1.14.0
    (https://github.com/containers/skopeo/commit/6abf96bb82666fbb3d4ad9faf1812e5ae2d31a74)


author: Jindrich Novy <jnovy@redhat.com> - 2:1.14.3-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
    (https://github.com/containers/skopeo/commit/1c2ab99)
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:1.14.3-0.2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
    (https://github.com/containers/skopeo/commit/d0a0f1a)
  - Resolves: RHEL-28226


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.14.3-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
    (https://github.com/containers/skopeo/commit/4a2bc3a)
  - Resolves: RHEL-28226


author: Jindrich Novy <jnovy@redhat.com> - 2:1.14.3-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
    (https://github.com/containers/skopeo/commit/5f2b9af)
  - Resolves: RHEL-28728


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-2
changelog:
  - CVE 2021-3480:  idm:DL1/slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
  - Resolves: rhbz#1944713


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-3
changelog:
  - Resolves: rhbz#1958909 - fix regression for scoped searches in compat tree
  - Resolves: rhbz#1978189 - better handle error response from libsss_nss_idmap


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - upstream release 0.60.0
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Resolves: rhbz#1984010
    Fix ID views integration
  - Fix base scope lookups
  - Resolves: rhbz#1784172
    Bump NIS max dgram size to 8KB by default instead of 1KB
  - Resolves: rhbz#2070575
    Allow to rebuild the compat tree


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog
  - Resolves: RHEL-11984


author: Jindrich Novy <jnovy@redhat.com> - 1.1.4-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.4
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.6-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.6
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.7-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.8-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 0.4.0-1
changelog:
  - update to v.0.4.0
  - sync with fedora spec
  - drop applied CVE-2019-14378 patch
  - Resolves: #1766774


author: Jindrich Novy <jnovy@redhat.com> - 1.0.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/archive/v1.0.1.tar.gz
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.1
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.2
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.3
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.1
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 1.2.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 1.2.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3
  - Related: Jira:RHEL-2110


author: Rajeesh K V <rajeeshknambiar@fedoraproject.org> 6.1-3
changelog:
  - Updated license for AnjaliOldLipi to OFL 1.1
  - Drop the email confirmation on AnjaliOldLipi license


author: gil cattaneo <puntogil@libero.it> - 1.0.5-5
changelog:
  - update Url and Source0 fields
  - minor changes to adapt to current guideline
  - introduce license macro


author: Paul Wouters <pwouters@redhat.com> - 1.7.3.2-1
changelog:
  - Resolves rhbz#1404290 socat build failure on rawhide
  - Resolves rhbz#1416597 socat-1.7.3.2 is available
  - Resolves rhbz#1417483 Failed DNS resolution causes SIGSEGV and endless loop
  - Removed obsoleted patch


author: Paul Wouters <pwouters@redhat.com> - 1.7.4.1-1
changelog:
  - Resolves: rhbz#1805132 socat does not recognize IP addresses of the SAN extensions in ssl mode
  - Resolves: rhbz#1870279 Transfer via socat fails with openssl enabled
  - Resolves: rhbz#1914989 Socat udp4-recvfrom cause endless loop error when target is not vaild


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-1
changelog:
  - Fixes: rhbz#1818877 - rebase to softhsm 2.6.0+
  - Fixes: rhbz#1701233 - support setting supported signature methods on the token


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-3
changelog:
  - Fixes: rhbz#1834909 - softhsm use-after-free on process exit
  - Synchronize the final fix with Fedora


author: Jake Hunsaker <jhunsake@redhat.com> - 1.6-1
changelog:
  - Drop paramiko dependency, use OpenSSH ControlPersist instead
  - Layered cluster profiles can now accept base profile options
  - Debian/Ubuntu hosts now supported


author: Jake Hunsaker <jhunsake@redhat.com> - 1.7-1
changelog:
  - New upstream release
  - Overhaul mechanism of execution of sosreport in containers
  - Added RHCOS support
  - Added a 'none' cluster type


author: Jake Hunsaker <jhunsake@redhat.com> - 1.7-2
changelog:
  - Fix 'none' cluster type enablement
  - Update RHCOS image to RHEL 8 version
  - Fix execution from within a container


author: Sérgio Basto <sergio@serjux.com> - 1.9.2-1
changelog:
  - Update to 1.9.2 (#961876).
  - Modernize spec file.
  - Makefile.am handles mmx and sse flags well, so no need patch 01 and sed anymore.
  - Patch 02 disabled, I hope we already have asm fixed on X86_64.


author: Sérgio Basto <sergio@serjux.com> - 1.9.2-2
changelog:
  - Add license tag.
  - Add back sed on -O3 .
  - Not modify soundtouch_config.h because looks correct, just have one line !.


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-10
changelog:
  - Fixed CVE-2018-11805
  - Resolves: rhbz#1787514
  - Fixed CVE-2020-1930
  - Resolves: rhbz#1820649
  - Fixed CVE-2020-1931
  - Resolves: rhbz#1820650


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2.0-1
changelog:
  - update to 1.2.0
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - include soname in file list
  - use license macro


author: Uri Lublin <uril@redhat.com> - 8.3-1
changelog:
  - mingw-virt-viewer 9.0-1
  - spice-usbdk-win   1.0-22
  - mingw-spice-gtk   0.38-4
  - mingw-libgovirt   0.3.7-2
  - mingw-spice-protocol 0.14-2
    Related:  rhbz#1841952, rhbz#1179070, rhbz#1428402
    Related:  rhbz#1575043, rhbz#1640058, rhbz#1793019
    Related:  rhbz#1841951
    Related:  rhbz#1842532
    Related:  rhbz#1841949
    Related:  rhbz#1773899
    Related:  rhbz#1741202, rhbz#1741252


author: Uri Lublin <uril@redhat.com> - 8.4-1
changelog:
  - mingw-virt-viewer 9.0-3
  - mingw-libgovirt   0.3.7-5
  - mingw-spice-gtk   0.38-5
    Related: rhbz#844683
    Related: rhbz#1839104 rhbz#1874740 rhbz#1017261
    Related: rhbz#1918459


author: Uri Lublin <uril@redhat.com> - 8.5-5
changelog:
  - mingw-virt-viewer 9.0-6
    Resolves: rhbz#1997058
    Resolves: rhbz#1918877
    Related:  rhbz#1939111
    Related:  rhbz#1942919


author: Gerd Hoffmann <kraxel@redhat.com> - 0.5.2-2
changelog:
  - Fix license: LGPL.
  - Cleanup specfile, drop bits not needed any more with
    recent rpm versions (F13+).
  - Use optflags as-is.
  -


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-2
changelog:
  - Various bugfixes from upstream git:
    - Make spicec work together with the Firefox XPI for RHEV-M
    - Make sure the spicec window gets properly raised when first shown


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-3
changelog:
  - Log to ~/.spicec/cegui.log rather then to CEGUI.log in the cwd, this
    fixes spicec from aborting when run in a non writable dir (#650253)


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-4
changelog:
  - Fix the info layer not showing when used through the XPI
  - Do not let the connection gui flash by when a hostname has been specified
    on the cmdline
  - Fix spice client locking up when dealing with XIM input (#654265)
  - Fix modifier keys getting stuck (#655048)
  - Fix spice client crashing when dealing with XIM ibus input (#655836)
  - Fix spice client only showing a white screen in full screen mode


author: Hans de Goede <hdegoede@redhat.com> - 0.8.0-2
changelog:
  - Fix being unable to send ctrl+alt+key when release mouse is bound to
    ctrl+alt (which can happen when used from RHEV-M)


author: Alon Levy <alevy@redhat.com>
changelog:
  - Fix mjpeg memory leak and bad behavior.
  - Add usbredir to list of channels for security purposes. (#819484)


author: Soren Sandmann <ssp@redhat.com> - 0.11.3-1
changelog:
  - Add capability patches
  - Add capability patches to the included copy of spice-protocol

      Please see the comment above Patch6 and Patch7
      regarding this situation.


author: Hans de Goede <hdegoede@redhat.com> - 0.12.4-1
changelog:
  - New upstream bug-fix release 0.12.4
  - Add patches from upstream git to fix sound-channel-free crash (rhbz#986407)
  - Add Obsoletes for dropped spice-client sub-package


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.5-5
changelog:
  - Fix advertised sound playback/recording rates in public headers
    Resolves: rhbz#1129961 (QEMU would need a rebuild though)


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.5-8
changelog:
  - Add upstream patch avoiding a regression in spice-protocol 0.12.8 which
    breaks SPICE support in QEMU


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.5-9
changelog:
  - Drop patch added in previous build which is no longer needed with
    spice-protocol 0.12.9 (and actually is actually breaking QEMU compilation
    without an additional patch)


author: Christophe Fergeau <cfergeau@redhat.com> 0.13.1-1
changelog:
  - Update to 0.13.1 release. This is a development release, but by the
    time Fedora 25 gets released, a stable 0.14.0 should be released.


author: Uri Lublin <uril@redhat.com> - 0.21.0-2
changelog:
  - Build without pciaccess
    Resolves: rhbz#1964922
  - Fix g_memdup deprecation warning with glib >= 2.68


author: Uri Lublin <uril@redhat.com> - 0.10.0-4
changelog:
  - Reset properly state of pending large messages upon disconnection
    Resolves rhbz#1548419
  - Return detailed message for file transfer
    Resolves rhbz#1520393


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-1
changelog:
  - new version 4.11
  - libsystemd integration
  - Resolves: #1829467 - squid:4 rebase
  - Resolves: #1828378 - CVE-2019-12521 squid:4/squid: off-by-one error in
    addStackElement allows for a heap buffer overflow and a crash
  - Resolves: #1828377 - CVE-2019-12520 squid:4/squid: improper input validation
    in request allows for proxy manipulation
  - Resolves: #1828375 - CVE-2019-12524 squid:4/squid: improper access restriction
    in url_regex may lead to security bypass
  - Resolves: #1820664 - CVE-2019-18860 squid: mishandles HTML in the host
    parameter to cachemgr.cgi which could result in squid behaving in unsecure way
  - Resolves: #1802514 - CVE-2020-8449 squid:4/squid: Improper input validation
    issues in HTTP Request processing
  - Resolves: #1802513 - CVE-2020-8450 squid:4/squid: Buffer overflow in a Squid
    acting as reverse-proxy
  - Resolves: #1802512 - CVE-2019-12528 squid:4/squid: Information Disclosure
    issue in FTP Gateway
  - Resolves: #1771288 - CVE-2019-18678 squid:4/squid: HTTP Request Splitting
    issue in HTTP message processing
  - Resolves: #1771283 - CVE-2019-18679 squid:4/squid: Information Disclosure
    issue in HTTP Digest Authentication
  - Resolves: #1771280 - CVE-2019-18677 squid:4/squid: Cross-Site Request Forgery
    issue in HTTP Request processing
  - Resolves: #1771275 - CVE-2019-12523 squid:4/squid: Improper input validation
    in URI processor
  - Resolves: #1771272 - CVE-2019-18676 squid:4/squid: Buffer overflow in URI
    processor
  - Resolves: #1771264 - CVE-2019-12526 squid:4/squid: Heap overflow issue in URN
    processing
  - Resolves: #1738581 - CVE-2019-12529 squid: OOB read in Proxy-Authorization
    header causes DoS


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-2
changelog:
  - Resolves: #1853130 - CVE-2020-15049 squid:4/squid: request smuggling and
    poisoning attack against the HTTP cache
  - Resolves: #1853136 - CVE-2020-14058 squid:4/squid: DoS in TLS handshake


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-3
changelog:
  - Resolves: #1871705 - CVE-2020-24606 squid: Improper Input Validation could
    result in a DoS
  - Resolves: #1871702 - CVE-2020-15811 squid: HTTP Request Splitting could result
    in cache poisoning
  - Resolves: #1871700 - CVE-2020-15810 squid: HTTP Request Smuggling could result
    in cache poisoning


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-5
changelog:
  - Resolves: #1944261 - CVE-2020-25097 squid:4/squid: improper input validation
    may allow a trusted client to perform HTTP Request Smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-2
changelog:
  - Resolves: #2006121 - SQUID shortens FTP Link wrong that contains a semi-colon
    and as a result is not able to download zip file.CODE 404 TO CLIENT)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-3
changelog:
  - Resolves: #1941506 - CVE-2021-28116 squid:4/squid: out-of-bounds read in WCCP
    protocol data may lead to information disclosure


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-3.2
changelog:
  - Resolves: #2130258 - CVE-2022-41318 squid:4/squid: buffer-over-read in SSPI and SMB
    authentication


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
  - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy
  - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files
  - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure
  - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000]
  - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization
  - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working
  - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides
  - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-3
changelog:
  - Resolves: rhbz#2236414 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237302 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-4
changelog:
  - Related: rhbz#2236414 - dbus and crond getting terminated with SIGBUS in sss_client code
    Handle all invalidations consistently
    Supply a valid pointer to `sss_mmap_cache_validate_or_reinit()`, not a pointer to a local var


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-4.2
changelog:
  - Resolves: RHEL-19212 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-8.9.0.z]
  - Resolves: RHEL-19994 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8.9.0.z]


author: lichao <lichaod@uniontech.com> - 2.9.1-4.5.01
changelog:
  - fix: adjust sssd service to speed up system-booting (bugid:240631)
  - fix: sssd service failed (bugid:240325)
  - fix:add default conf file at /etc/sssd/ (bugid:197047)


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New stable upstream version 1.2.1
  - Resolves: rhbz#595529 - spec file should eschew %define in favor of
  -                         %global
  - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart.
  - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
  -                         keyring
  - Resolves: rhbz#599724 - sssd is broken on Rawhide


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.91-20
changelog:
  - New upstream version 1.2.91 (1.3.0rc1)
  - Improved LDAP failover
  - Synchronous sysdb API (provides performance enhancements)
  - Better online reconnection detection


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-30
changelog:
  - Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
  -                           against LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-32
changelog:
  - Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
  -                         doesn't require it


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
changelog:
  - New upstream release 1.4.0
  - Added support for netgroups to the LDAP provider
  - Performance improvements made to group processing of RFC2307 LDAP servers
  - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
  - Build-system improvements to support Gentoo
  - Split out several libraries into the ding-libs tarball
  - Manpage reviewed and updated


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
changelog:
  - New upstream release 1.4.1
  - Add support for netgroups to the proxy provider
  - Fixes a minor bug with UIDs/GIDs >= 2^31
  - Fixes a segfault in the kerberos provider
  - Fixes a segfault in the NSS responder if a data provider crashes
  - Correctly use sdap_netgroup_search_base


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-3
changelog:
  - Solve a shutdown race-condition that sometimes left processes running
  - Resolves: rhbz#606887 - SSSD stops on upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  -Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Fix nested group member filter sanitization for RFC2307bis
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#677768 - name service caches names, so id command shows
  -                         recently deleted users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.2-1
changelog:
  - New upstream release 1.5.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
  - Fixes for support of FreeIPA v2
  - Fixes for failover if DNS entries change
  - Improved sss_obfuscate tool with better interactive mode
  - Fix several crash bugs
  - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
  - Delete users from the local cache if initgroups calls return 'no such user'
  - (previously only worked for getpwnam/getpwuid)
  - Use new Transifex.net translations
  - Better support for automatic TGT renewal (now survives restart)
  - Netgroup fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
  - Fixes for Active Directory when not all users and groups have POSIX attributes
  - Fixes for handling users and groups that have name aliases (aliases are ignored)
  - Fix group memberships after initgroups in the IPA provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
  - Fixes for several crash bugs
  - LDAP group lookups will no longer abort if there is a zero-length member
  - attribute
  - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-3
changelog:
  - Fix systemd conversion. Upgrades from SysV to systemd weren't properly
  - enabling the systemd service.
  - Fix a serious memory leak in the memberOf plugin
  - Fix an issue where the user's full name would sometimes be removed
  - from the cache


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-5
changelog:
  - Resolves: rhbz#697057 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server
  - Upgrades from SysV should now maintain enabled/disabled status


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6
  - Fixed a serious memory leak in the memberOf plugin
  - Fixed a regression with the negative cache that caused it to be essentially
  - nonfunctional
  - Fixed an issue where the user's full name would sometimes be removed from
  - the cache
  - Fixed an issue with password changes in the kerberos provider not working
  - with kpasswd


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-1
changelog:
  - Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites
  -                         cached password with predicatable filename


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-3
changelog:
  - Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d
  - Make sure to properly convert to systemd if upgrading from newer
  - updates for Fedora 14


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.8-1
changelog:
  - New upstream release 1.5.8
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
  - Support for the LDAP paging control
  - Support for multiple DNS servers for name resolution
  - Fixes for several group membership bugs
  - Fixes for rare crash bugs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.9-1
changelog:
  - New upstream release 1.5.9
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
  - Support for overriding home directory, shell and primary GID locally
  - Properly honor TTL values from SRV record lookups
  - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
  - servers)
  - Properly escape IPv6 addresses in the failover code
  - Do not crash if inotify fails (e.g. resource exhaustion)
  - Don't add multiple TGT renewal callbacks (too many log messages)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.10-1
changelog:
  - New upstream release 1.5.10
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
  - Fixed a regression introduced in 1.5.9 that could result in blocking calls
  - to LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.11-2
changelog:
  - New upstream release 1.5.11
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
  - Fix a serious regression that prevented SSSD from working with ldaps:// URIs
  - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6
  - address being saved to the AAAA record


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release 1.6.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0
  - Add host access control support for LDAP (similar to pam_host_attr)
  - Finer-grained control on principals used with Kerberos (such as for FAST or
  - validation)
  - Added a new tool sss_cache to allow selective expiring of cached entries
  - Added support for LDAP DEREF and ASQ controls
  - Added access control features for Novell Directory Server
  - FreeIPA dynamic DNS update now checks first to see if an update is needed
  - Complete rewrite of the HBAC library
  - New libraries: libipa_hbac and libipa_hbac-python


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.1-1
changelog:
  - New upstream release 1.6.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1
  - Fixes a serious issue with LDAP connections when the communication is
    dropped (e.g. VPN disconnection, waking from sleep)
  - SSSD is now less strict when dealing with users/groups with multiple names
    when a definitive primary name cannot be determined
  - The LDAP provider will no longer attempt to canonicalize by default when
    using SASL. An option to re-enable this has been provided.
  - Fixes for non-standard LDAP attribute names (e.g. those used by Active
    Directory)
  - Three HBAC regressions have been fixed.
  - Fix for an infinite loop in the deref code


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Improved handling of users and groups with multi-valued name attributes
    (aliases)
  - Performance enhancements
      Initgroups on RFC2307bis/FreeIPA
      HBAC rule processing
  - Improved process-hang detection and restarting
  - Enabled the midpoint cache refresh by default (fewer cache misses on
    commonly-used entries)
  - Cleaned up the example configuration
  - New tool to change debug level on the fly


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-4
changelog:
  - Change selinux policy requirement to Conflicts: with the old version,
    rather than Requires: the supported version.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
changelog:
  - New upstream release 1.6.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3
  - Fixes a major cache performance issue introduced in 1.6.2
  - Fixes a potential infinite-loop with certain LDAP layouts


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-4
changelog:
  - Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758425 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.4-1
changelog:
  - New upstream release 1.6.4
  - Rolls up previous patches applied to the 1.6.3 tarball
  - Fixes a rare issue causing crashes in the failover logic
  - Fixes an issue where SSSD would return the wrong PAM error code for users
    that it does not recognize.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-1
changelog:
  - New upstream release 1.7.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0
  - Support for case-insensitive domains
  - Support for multiple search bases in the LDAP provider
  - Support for the native FreeIPA netgroup implementation
  - Reliability improvements to the process monitor
  - New DEBUG facility with more consistent log levels
  - New tool to change debug log levels without restarting SSSD
  - SSSD will now disconnect from LDAP server when idle
  - FreeIPA HBAC rules can choose to ignore srchost options for significant
    performance gains
  - Assorted performance improvements in the LDAP provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-3
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-5
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features - fix netgroups and sudo as well


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta1
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta2
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
  - Fix two minor manpage bugs
  - Include the IPA AutoFS provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
changelog:
  - New upstream release 1.8.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed several memory-corruption bugs
  - Finalized the ABI for the autofs support
  - Fixed a regression in the proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
changelog:
  - New upstream release 1.8.0
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)
  - Include the IPA AutoFS provider
  - Fixed several memory-corruption bugs
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed a regression in the proxy provider
  - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
  - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
                            logged at each login
  - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                            /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-7
changelog:
  - New upstream release 1.8.1
  - Resolve issue where we could enter an infinite loop trying to connect to an
    auth server
  - Fix serious issue with complex (3+ levels) nested groups
  - Fix netgroup support for case-insensitivity and aliases
  - Fix serious issue with lookup bundling resulting in requests never
    completing
  - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
    in addition to pam_authenticate
  - Fix several regressions in the proxy provider
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-8
changelog:
  - Fix uninitialized value bug causing crashes throughout the code
  - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-9
changelog:
  - Don't duplicate libsss_autofs.so in two packages
  - Set explicit package contents instead of globbing


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.2-10
changelog:
  - New upstream release 1.8.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
  - Several fixes to case-insensitive domain functions
  - Fix for GSSAPI binds when the keytab contains unrelated principals
  - Fixed several segfaults
  - Workarounds added for LDAP servers with unreadable RootDSE
  - SSH knownhostproxy will no longer enter an infinite loop preventing login
  - The provided SYSV init script now starts SSSD earlier at startup and stops
    it later during shutdown
  - Assorted minor fixes for issues discovered by static analysis tools


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.3-11
changelog:
  - New upstream release 1.8.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
  - Numerous manpage and translation updates
  - LDAP: Handle situations where the RootDSE isn't available anonymously
  - LDAP: Fix regression for users using non-standard LDAP attributes for user
    information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-1.beta1
changelog:
  - New upstream release 1.9.0 beta 1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
  - Add native support for autofs to the IPA provider
  - Support for ID-mapping when connecting to Active Directory
  - Support for handling very large (> 1500 users) groups in Active Directory
  - Support for sub-domains (will be used for dealing with trust relationships)
  - Add a new fast in-memory cache to speed up lookups of cached data on
    repeated requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-2.beta1
changelog:
  - Fix several regressions since 1.5.x
  - Ensure that the RPM creates the /var/lib/sss/mc directory
  - Add support for Netscape password warning expiration control
  - Rebuild against libldb 1.1.6


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-5.beta2
changelog:
  - New upstream release 1.9.0 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
  - Add support for the Kerberos DIR cache for storing multiple TGTs
    automatically
  - Major performance enhancement when storing large groups in the cache
  - Major performance enhancement when performing initgroups() against Active
    Directory
  - SSSDConfig data file default locations can now be set during configure for
    easier packaging


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-7.beta2
changelog:
  - Switch unicode library from libunistring to Glib
  - Drop unnecessary explicit Requires on keyutils
  - Guarantee that versioned Requires include the correct architecture


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-8.beta3
changelog:
  - New upstream release 1.9.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
  - Add a new PAC responder for dealing with cross-realm Kerberos trusts
  - Terminate idle connections to the NSS and PAM responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-9.beta4
changelog:
  - New upstream release 1.9.0 beta 4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4
  - Add a new AD provider to improve integration with Active Directory 2008 R2
    or later servers
  - SUDO integration was completely rewritten. The new implementation works
    with multiple domains and uses an improved refresh mechanism to download
    only the necessary rules
  - The IPA authentication provider now supports subdomains
  - Fixed regression for setups that were setting default_tkt_enctypes
    manually by reverting a previous workaround.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-12.beta5
changelog:
  - New upstream release 1.9.0 beta 5
  - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5
  - Many fixes for the support for setting default SELinux user context from
    FreeIPA, most notably fixed the specificity evaluation
  - Fixed an incorrect default in the krb5_canonicalize option of the AD
    provider which was preventing password change operation
  - The shadowLastChange attribute value is now correctly updated with the
    number of days since the Epoch, not seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-13.beta6
changelog:
  - New upstream release 1.9.0 beta 6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6
  - A new option, override_shell was added. If this option is set, all users
    managed by SSSD will have their shell set to its value.
  - Fixes for the support for setting default SELinux user context from FreeIPA.
  - Fixed a regression introduced in beta 5 that broke LDAP SASL binds
  - The SSSD supports the concept of a Primary Server and a Back Up Server in
    failover
  - A new command-line tool sss_seed is available to help prime the cache with
    a user record when deploying a new machine
  - SSSD is now able to discover and save the domain-realm mappings
    between an IPA server and a trusted Active Directory server.
  - Packaging changes to fix ldconfig usage in subpackages (#843995)
  - Rebuild against libldb 1.1.9


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-14.beta6
changelog:
  - Don't discard HBAC rule processing result if SELinux is on
    Resolves: rhbz#846792 (CVE-2012-3462)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-18.beta6
changelog:
  - Change the default ccache location to DIR:/run/user/${UID}/krb5cc
    and patch man page accordingly
  - Resolves: rhbz#851304


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-3
changelog:
  - Recreate Kerberos ccache directory if it's missing
  - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
                            directory /run/user/UID/ccdir does not exist


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-4.beta1
changelog:
  - Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug
    in ding-libs
  - Fix SSH integration with fully-qualified domains
  - Add the ability to dynamically discover the NetBIOS name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-6.beta1
changelog:
  - Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
                            realm join
  - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
                            default for AD Provider
  - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
                            parent directory when logging in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-7.beta1
changelog:
  - Apply a couple of patches from upstream git that resolve crashes when
    ID mapping object was not initialized properly but needed later


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-8.beta2
changelog:
  - New upstream release 1.10 beta2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
  - BuildRequire libcmocka-devel in order to run all upstream tests during build
  - BuildRequire libnl3 instead of libnl1
  - No longer BuildRequire initscripts, we no longer use /sbin/service
  - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any
    older krb5-libs version


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-9.beta2
changelog:
  - Fix typo in Requires that prevented an upgrade (#973916)
  - Use a hardcoded version in Conflicts, not less-than-current


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-11.beta2
changelog:
  - Apply a number of patches from upstream to fix issues found post-beta,
    in particular:
    -- segfault with a high DEBUG level
    -- Fix IPA password migration (upstream #1873)
    -- Fix fail over when retrying SRV resolution (upstream #1886)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-14
changelog:
  - Fix Obsoletes: to account for dist tag
  - Convert post and pre scripts to run on the sssd-common subpackage
  - Remove old conversion from SYSV


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-16
changelog:
  - Move sssd_pac to the sssd-ipa and sssd-ad subpackages
  - Trim out RHEL5-specific macros since we don't build on RHEL 5
  - Trim out macros for Fedora older than F18
  - Update libldb requirement to 1.1.16
  - Trim RPM changelog down to the last year


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0.2beta2
changelog:
  - Resolves: #906427 - Do not use %{_lib} in specfile for the nss and
                        pam libraries


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-0.4.beta2
changelog:
  - Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid:
                        Process /usr/libexec/sssd/sssd_nss was killed by
                        signal 11 (SIGSEGV)
  - Resolves: #996214 - sssd proxy_child segfault


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-2
changelog:
  - Backport simplification of ccache management from 1.11.1
  - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-3
changelog:
  - Fix multicast checks in the SSSD
  - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source
                             code getting the host info


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-1
changelog:
  - New upstream release 1.11.2
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.3-1
changelog:
  - New upstream release 1.11.3
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.4-1
changelog:
  - New upstream release 1.11.4
  - Remove upstreamed patch
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.5-1
changelog:
  - New upstream release 1.11.5
  - Remove upstreamed patch
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.1-2
changelog:
  - Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user
                             private group from server


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.2-6
changelog:
  - Fix regressions and bugs in sssd upstream 1.12.2
  - https://fedorahosted.org/sssd/ticket/{id}
  - Regressions: #2471, #2475, #2483, #2487, #2529, #2535
  - Bugs: #2287, #2445


author: Sumit Bose <sbose@redhat.com> - 1.12.2-7
changelog:
  - Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes
                             crash in wbinfo
                             - in addition to the patch libwbclient.so is
                               filtered out of the Provides list of the package


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-1
changelog:
  - New upstream release 1.12.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3
  - Fix spelling errors in description (fedpkg lint)


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-2
changelog:
  - Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus
  - Resolves: rhbz#1179379 - gzip: stdin: file size changed while
                             zipping when rotating logfile


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-3
changelog:
  - Apply a number of patches from upstream to fix issues found 1.12.3
  - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple
                             interfaces, or isn't documented to be able to
  - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is
                            not running
  - Resolves: upstream #2557  authentication failure with user from AD


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-4
changelog:
  - Decrease priority of sssd-libwbclient 20 -> 5
  - It should be lower than priority of samba veriosn of libwbclient.
  - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-6
changelog:
  - Fix double free in monitor
  - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort():
                          sssd killed by SIGABRT


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-2
changelog:
  - Add support for python3 bindings
  - Add requirement to python3 or python3 bindings
  - Resolves: rhbz#1014594 - sssd: Support Python 3


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-5
changelog:
  - Fix regressions with ipa and SELinux
  - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security
                               context on client is staff_u


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-6
changelog:
  - Fix slow login with ipa and SELinux
  - Resolves: upstream #2624 - Only set the selinux context if the context
                               differs from the local one


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-8
changelog:
  - Backport important patches from upstream 1.13 prerelease
  - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable
                             attribute for group name
  - Resolves: upstream #2335 - Investigate using the krb5 responder
                               for driving the PAM conversation with OTPs
  - Enable cmocka tests for secondary architectures


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-4
changelog:
  - Fix ipa-migration bug
  - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled
                               migration mode


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-6
changelog:
  - Fix OTP bug
  - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were
                               entered separately


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.1-2
changelog:
  - Fix few segfaults
  - Resolves: upstream #2811 - PAM responder crashed if user was not set
  - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.1-3
changelog:
  - python-sssdconfig: Fix parssing sssd.conf without config_file_version
  - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-5
changelog:
  - Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA
                             groups during getgrnam and getgrgid
  - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses
                             in call to 'print'


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-6
changelog:
  - Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password
                             prompts (e.g. Password + Token)
  - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed
                             by remote host" if locale not available


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.4-3
changelog:
  - Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element():
                             sssd_ifp killed by SIGSEGV


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.1-2
changelog:
  - Backport important patches from upstream 1.14.2 prerelease
  - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after
                               boot
  - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.1-3
changelog:
  - Fix regression with krb5_map_user
  - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore
  - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError:
                             default if nonexistent domain is mentioned


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.2-2
changelog:
  - Resolves: rhbz#1369130 - nss_sss should not link against libpthread
  - Resolves: rhbz#1392916 - sssd failes to start after update
  - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses
                             on the directory /etc/sssd


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.0-4
changelog:
  - Cherry-pick patches from upstream that enable the files provider
  - Enable the files domain
  - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch
    which is superseded by the files domain autoconfiguration
  - Related: rhbz#1357418 - SSSD fast cache for local users


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.2
changelog:
  - Fix issue with IPA + SELinux in containers
  - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.3
changelog:
  - Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication
  - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with
                             file from package sssd-common-1.15.1-1.fc25.x86_64
  - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-4
changelog:
  - Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write
                             access on the sock_file system_bus_socket
  - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and
                             fails to download desktop profile data
  - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3
  - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients
                              after applying ID Views for them in IPA server
  - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id
                              mapping is applied


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-5
changelog:
  - Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when
                             searching in local cache database access on
                             the sock_file system_bus_socket


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.16.0-5
changelog:
  - Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in
                              setnetgrent_result_timeout
  - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted
                              or machine swaps
  - Resolves: failure in glibc tests
              https://sourceware.org/bugzilla/show_bug.cgi?id=22530
  - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and
                              auth_provider ldap, login fails if the LDAP server
                              is not allowing anonymous binds
  - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is
                              corrected with AD
  - Resolves: upstream#3586 - Give a more detailed debug and system-log message
                              if krb5_init_context() failed
  - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet
                             in /etc/systemd/system
  - Backport few upstream features from 1.16.1


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.0-12
changelog:
  - Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                             with no specific host/hostgroup set
  - Resolves: upstream#3621 - FleetCommander integration must not require
                              capability DAC_OVERRIDE


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-2
changelog:
  - Resolves: upstream#3573 - sssd won't show netgroups with blank domain
  - Resolves: upstream#3660 - confdb_expand_app_domains() always fails
  - Resolves: upstream#3658 - Application domain is not interpreted correctly
  - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to
                              json_loads()
  - Resolves: upstream#3386 - KCM: Payload buffer is too small
  - Resolves: upstream#3666 - Fix usage of str.decode() in our tests
  - A few KCM misc fixes


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-3
changelog:
  - Resolves: upstream#3684 - A group is not updated if its member is removed
                              with the cleanup task, but the group does not
                              change
  - Resolves: upstream#3558 - sudo: report error when two rules share cn
  - Tone down shutdown messages for socket activated responders
  - IPA: Qualify the externalUser sudo attribute
  - Resolves: upstream#3550 - refresh_expired_interval does not work with
                              netgrous in 1.15
  - Resolves: upstream#3402 - Support alternative sources for the files provider
  - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option
  - Resolves: upstream#3679 - Make nss netgroup requests more robust
  - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not
                              configured
  - Resolves: upstream#3469 - extend sss-certmap man page regarding priority
                              processing
  - Improve docs/debug message about GC detection
  - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes
                              list out of bound?
  - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is
                              set.
  - Document which principal does the AD provider use
  - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is
                              defined, but contains no SIDs
  - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM
  - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data
                             Provider returned an error
                             [org.freedesktop.sssd.Error.DataProvider.Fatal]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-1
changelog:
  - Update to 1.16.2 release
  - Cleanup unused global definitions
  - Remove python2 references from the spec file
  - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-2
changelog:
  - Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication
                             fails with the KCM ccache


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-4
changelog:
  - Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local
                             users


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-7
changelog:
  - Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it
                             differs from the default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-8
changelog:
  - Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function():
                              /usr/libexec/sssd/sssd_be killed by 11 crash
                              func _dbus_list_unlink


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-9
changelog:
  - Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del
                             commands in man pages since local provider
                             is deprecated


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-10
changelog:
  - Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not
                             started due to a misconfiguration


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-11
changelog:
  - Resolves: rhbz#1628122 - Printing incorrect information about domain
                             with sssctl utility


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-16
changelog:
  - Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a
                            PKCS#11 URI


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-17
changelog:
  - Related: rhbz#1637131 - pam_unix unable to match fully qualified username
                            provided by sssd during smartcard auth using gdm


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-18
changelog:
  - Related: rhbz#1638006 - Files: The files provider always enumerates
                            which causes duplicate when running getent passwd


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-19
changelog:
  - Add OSCP checks for p11_child
  - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local
                            users


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-21
changelog:
  - Related: rhbz#1638150 - session not recording for local user when groups defined
  - Also add silence a Coverity warning, which is related to rhbz#1637131


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-23
changelog:
  - Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui
                             with smart card


author: Michal Židek <mzidek@redhat.com> - 2.0.0-24
changelog:
  - Resolves: rhbz#1646168 - sssctl access-report always prints an error message
  - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the
                             configuration without having to restart the whole
                             sssd
  - Resolves: rhbz#1640576 - sssctl reports incorrect information about local
                             user's cache entry expiration time
  - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user
  - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys


author: Michal Židek <mzidek@redhat.com> - 2.0.0-25
changelog:
  - Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly
                             for D-bus, resulting in a crash


author: Michal Židek <mzidek@redhat.com> - 2.0.0-27
changelog:
  - Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work
                             if ID provider is authenticated with GSSAPI


author: Michal Židek <mzidek@redhat.com> - 2.0.0-29
changelog:
  - Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise():
                             /usr/libexec/sssd/proxy_child killed by 6


author: Michal Židek <mzidek@redhat.com> - 2.0.0-30
changelog:
  - Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to
                        retrieve AD users through IPA Trust


author: Michal Židek <mzidek@redhat.com> - 2.0.0-32
changelog:
  - Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc
              and libtevent to avoid an issue in GPO processing


author: Michal Židek <mzidek@redhat.com> - 2.0.0-33
changelog:
  - Resolves: rhbz#1646113 - Missing concise documentation about valid options
                             for sssd-files-provider


author: Michal Židek <mzidek@redhat.com> - 2.0.0-34
changelog:
  - Resolves: rhbz#1622008 - Error message when IPA server uninstall calls
                             kdestroy caused by KCM returning a wrong error
                             code during the delete operation


author: Michal Židek <mzidek@redhat.com> - 2.0.0-36
changelog:
  - Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss
                             suggests using * for backend sss


author: Michal Židek <mzidek@redhat.com> - 2.0.0-38
changelog:
  - Resolves: rhbz#1578014 - sssd does not work under non-root user
  - Note: Actually the patches were in the 2.0.0-37, this one just adds this
          changelog because it was missing.


author: Michal Židek <mzidek@redhat.com> - 2.0.0-39
changelog:
  - Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than
                             1.x, this can result in time outs


author: Michal Židek <mzidek@redhat.com> - 2.0.0-40
changelog:
  -Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error.
                            UnknownProperty: Unknown property


author: Michal Židek <mzidek@redhat.com> - 2.0.0-41
changelog:
  -Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong
                            subdomain service name being used


author: Michal Židek <mzidek@redhat.com> - 2.0.0-42
changelog:
  - Resolves: rhbz#1645291 - Perform some basic ccache initialization as part
                             of gen_new to avoid a subsequent switch call
                             failure


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-43
changelog:
  - Resolves: rhbz#1672780 - gdm login not prompting for username when smart
                             card maps to multiple users


author: Michal Židek <mzidek@redhat.com> - 2.0.0-45
changelog:
  - Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is
    done here in order to unblock gating changes before rebase.
  - Related: rhbz#1682305


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-2
changelog:
  - Resolves: rhbz#1673443 - sssd man pages: The default value of
                             "ldap_user_home_directory" is not mentioned
                             with AD server configuration


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-3
changelog:
  - Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with
                             no members


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-4
changelog:
  - Resolves: rhbz#1283798 - sssd failover does not work on connecting to
                             non-responsive ldaps:// server


author: Michal Židek <mzidek@redhat.com> - 2.2.0-6
changelog:
  - Resolves: rhbz#1726945 - negative cache does not use values from
                             'filter_users' config option for known domains


author: Michal Židek <mzidek@redhat.com> - 2.2.0-7
changelog:
  - Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is
                             not FIPS140 compliant


author: Michal Židek <mzidek@redhat.com> - 2.2.0-8
changelog:
  - Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder
                             repository
                           - This just required a raise in release number
                             and changelog for the record.


author: Michal Židek <mzidek@redhat.com> - 2.2.0-10
changelog:
  - Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing
                             the trailing colon


author: Michal Židek <mzidek@redhat.com> - 2.2.0-11
changelog:
  - Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                             non-root user


author: Michal Židek <mzidek@redhat.com> - 2.2.0-13
changelog:
  - Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
              systemd-user service in the account phase in RHEL-8


author: Michal Židek <mzidek@redhat.com> - 2.2.0-14
changelog:
  - Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                             should not cause files domain entries to be
                             qualified, this can break sudo access


author: Michal Židek <mzidek@redhat.com> - 2.2.0-15
changelog:
  - Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                             loop if wrong PIN was provided


author: Michal Židek <mzidek@redhat.com> - 2.2.0-16
changelog:
  - Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                             the IP address of the machine updated in IPA upon
                             sssd.service startup


author: Michal Židek <mzidek@redhat.com> - 2.2.0-17
changelog:
  - Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                             keyring
  - Also apply a patch to fix gating tests issue


author: Michal Židek <mzidek@redhat.com> - 2.2.0-18
changelog:
  - Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
  - Also sync. kcm multihost tests with master


author: Michal Židek <mzidek@redhat.com> - 2.2.0-19
changelog:
  - Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                             new ones (kcm)


author: Michal Židek <mzidek@redhat.com> - 2.2.3-2
changelog:
  * Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release
              PART2: Fix gating issue.


author: Michal Židek <mzidek@redhat.com> - 2.2.3-3
changelog:
  * Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release
              Increasing version number to pick latest libldb


author: Michal Židek <mzidek@redhat.com> - 2.2.3-4
changelog:
  * Resolves: rhbz#1781728 - sssctl config-check command does not give proper
                             error messages with line numbers


author: Michal Židek <mzidek@redhat.com> - 2.2.3-5
changelog:
  * Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character
                             for match rules sss-certmap


author: Michal Židek <mzidek@redhat.com> - 2.2.3-9
changelog:
  * Resolves: rhbz#1783190 - [abrt] [faf] sssd:
                             raise(): /usr/libexec/sssd/sssd_autofs killed by 6


author: Michal Židek <mzidek@redhat.com> - 2.2.3-10
changelog:
  * Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap
                             connection timeout


author: Michal Židek <mzidek@redhat.com> - 2.2.3-14
changelog:
  - Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be
                             specified up to the seconds


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-16
changelog:
  - Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is
                             omitted and auth_provider is krb5


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-17
changelog:
  - Resolves: rhbz#1718193 - p11_child should have an option to skip
                             C_WaitForSlotEvent if the PKCS#11 module
                             does not implement it properly


author: Michal Židek <mzidek@redhat.com> - 2.2.3-18
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1810634 - id command taking 1+ minute for returning user
                             information


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate
                             (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-1
changelog:
  - Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3
  - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure
  - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-2
changelog:
  - Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-3
changelog:
  - Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package
  - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP
  - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache
  - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for
                             inotify events, and no updates are triggered
  - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card"
                             on GDM login with smart-card
  - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat
  - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network.
  - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management
  - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest
                             if LDAP entries do not contain AD forest root information
  - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories
                             in SSSD-AD direct integration.
  - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card
  - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False
  - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-4
changelog:
  - Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication
  - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider
  - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-5
changelog:
  - Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache
  - Fixed "requires/provides" rpmdiff warning


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-7
changelog:
  - Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.
  - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-8
changelog:
  - Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working
  - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema
  - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf
  - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-9
changelog:
  - Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-1
changelog:
  - Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4
  - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI
  - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search()
  - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording
  - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x
  - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD.
  - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process
  - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL
  - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase)
  - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page
  - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals"
  - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains
  - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file
  - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes
  - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff
  - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command
  - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-3
changelog:
  - Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr()
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal
  - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-4
changelog:
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8]
  - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-5
changelog:
  - Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-6
changelog:
  - Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
  - Resolves: rhbz#1915395 - Memory leak in the simple access provider
  - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-7
changelog:
  - Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
  - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
  - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-8
changelog:
  - Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
  - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.0-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
  - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
  - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
  - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
  - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
  - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
  - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
  - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
  - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
  - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
  - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
  - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
  - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
  - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
  - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
  - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
  - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
  - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
  - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
  - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
  - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
  - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
  - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
  - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
  - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
  - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
  - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
  - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
  - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-2
changelog:
  - Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
  - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
  - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
  - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
  - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
  - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
  - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2
changelog:
  - Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
  - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1
changelog:
  - Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
  - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected
  - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator
  - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed
  - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb
  - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces)
  - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s
  - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
  - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA
  - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
  - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1
changelog:
  - Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
  - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
  - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
  - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
  - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
  - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
  - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
  - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
  - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
  - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
  - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
  - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-3
changelog:
  - Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
  - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
  - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
  - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-2
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
  - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
  - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
  - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
  - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
  - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
  - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
  - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
  - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
  - Resolves: rhbz#2087745 - 2FA prompting setting ineffective
  - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.2-1
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
  - Resolves: rhbz#2098617 - Harden kerberos ticket validation
  - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
  - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
  - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-5
changelog:
  - Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release
    Rebuild against Samba rebase.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.1-1
changelog:
  - Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
  - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr
  - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter
  - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
  - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
  - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
  - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization
  - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around
  - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-1
changelog:
  - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
  - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)
  - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket
  - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7
  - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name
  - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable")
  - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication
  - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache
  - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP'
  - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider')
  - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest
  - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf
  - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8]
  - Resolves: RHEL-10721 - very bad performance when requesting service tickets
  - Resolves: RHEL-19011 - Invalid handling groups from child domain
  - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8]
  - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8]
  - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently


author: lichao <lichaod@uniontech.com> - 2.9.4-3.01
changelog:
  - fix: adjust sssd service to speed up system-booting (bugid:240631)
  - fix: sssd service failed (bugid:240325)
  - fix: add default conf file at /etc/sssd/ (bugid:197047)


author: Clark Williams <williams@redhat.com> - 1.8-1
changelog:
  - Fix Readiness Protocol Mismatch with systemd
  - test01:  update to use buildin atomic operations
  - test01: add throttling check


author: Clark Williams <williams@redhat.com> - 1.9-1
changelog:
  - Set starvation threshold default to 30 seconds
  - rework read buffer allocation to properly find page size
  - Add the -g/--granularity option
  - Change the default granularity to five seconds
  - Implement idle detection
  - Implement the single-threaded mode
  - Add HRTICK_DL support


author: Clark Williams <williams@redhat.com> - 1.10-1
changelog:
  - utils: Fix bounds check on cpu and end_cpu variables
  - stalld: Support denylisting of tasks in stalld
  - src/utils: use right argument for warning printf


author: Clark Williams <williams@redhat.com> - 1.11-1
changelog:
  - redhat/stalld.spec: pick up gating test version for changelog
  - utils.c: set daemon umask to restrict global write/execute (1934586)
  - hardening fixes from coverity scan (1934590)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.12-1
changelog:
  - stalld.8: fix diff cruft left in manpage source
  - stalld.c: clean up handling of nr_running
  - stalld.c: remove duplicate parameter to fill_waiting_task() (1934582)
  - stalld.service: Run stalld as sched_fifo via systemd
  - stalld: Add error handling in get_cpu_idle_time() (1966259)
  - packaging: clean up Makefiles and rpm specfile (1972806)
  - stalld: Always print current function for info messages
  - stalld: Always print current function for warn messages
  - stalld: Always print current function for die messages
  - utils: change PATHMAX to 4096 (1934581)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.13-1
changelog:
  - stalld: Fix log message on boost_cpu_starving_vector()
  - stalld: Add the overload control to the single-threaded mode
  - stalld: Add the adaptive mode option
  - stalld: Use the last mode set in the cmdline
  - stalld: Fallback to the adaptive mode if force_fifo is selected
  - stalld: Make single-threaded mode the default one (1920041)
  - stalld.service: Always restart stalld on exit
  - utils.c: Fail if user is not root
  - utils.c: Make the path to sched_debug path dynamic (1977663)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.14.1-1
changelog:
  - stalld: Coding style cleanup
  - stalld: spaces in place of <TAB>
  - throttling: Use RT_RUNTIME_PATH in rt_throttling_is_off()
  - throttling: Check open() on turn_off_rt_throttling
  - throttling: Adjust variables in restore_rt_throttling()
  - stalld.c: utils.c: Remove complex assignments from variable declarations
  - stalld.h: Define MAX_PATH/DIR_PATH/FILE_NAME and use them
  - stalld: Adjust variables in parse_old_task_format()
  - utils.c: Use MAX_PATH for pidfile
  - stalld.c: Remove variable declaration from the middle of  the function
  - stalld: Respect -l option in single threaded mode (1983100)
  - utils: s/try_to_open_file/check_file_exists/
  - utils: use check_file_exists in setup_hr_tick()
  - utils: Check for the new sched_features path


author: Fernando Pacheco <fpacheco@redhat.com> - 1.15-1
changelog:
  - stalld: Fix incorrect open() return value checks
  - stalld: Pass errno to strerror() on sig*set() failures
  - throttling: Always null terminate sched_rt_runtime_us output
  - stalld: Remove unreachable statement in detect_task_format()
  - tests: Fix uninitialized value action.sa_mask
  - utils: Bail if malloc() returns null in parse_cpu_list()
  - stalld: Use correct format specifier for long types
    Resolves: rhbz#1990057, rhbz#1996799, rhbz#1996825


author: Parag Nemade <pnemade AT redhat DOT com> - 1.1.0-7
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove %clean section which is optional now
  - Remove buildroot which is optional now
  - Remove removal of buildroot in %install
  - Remove group tag


author: Dennis Keefe <dkeefe@redhat.com> - 2.0.0-2
changelog:
  - Update to 2.0.0
  - Allow the user to interact with the daemon under conditions
    where a pool, filesystem, or blockdev is not fully functional.
  - Resolves: rhbz#1730493
  - Establish an environment variable for D-Bus timeout parameter.
  - Resolves: rhbz#1678631
  - Return detailed error messages on all error-appearing user actions.
  - Resolves: rhbz#1642393
  - Resolves: rhbz#1687869
  - Exit with error code 0 and error message on stderr for all command-line
    parsing errors.
  - Resolves: rhbz#1747564
  - Show more complete error messages on D-Bus method call failures.
  - Resolves: rhbz#1717460
  - Add version numbers to required packages
  - Resolves: rhbz#1717489


author: Dennis Keefe <dkeefe@redhat.com> - 2.1.1-6
changelog:
  - Update to 2.1.1
  - Resolves: rhbz#1791472
  - Update RPM spec file
  - Resolves: rhbz#1827360
  - Error messages when creating a pool are more helpful
  - Resolves: rhbz#1734496
  - Support per-pool encryption of devices that form a pools data tier
  - Resolves: rhbz#1768580
  - Improve error handling on partial unlock failure of encrypted pools
  - Resolves: rhbz#1855520


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1931670
  - Remove requirement for python3-semantic_version
  - Resolves: rhbz#1972355
  - Remove unnecessary keyutils Requires line


author: Dennis Keefe <dkeefe@redhat.com> - 2.0.0-4
changelog:
  - Update to 2.0.0
  - Resolves: rhbz#1760906
  - Fix a bug where last update time for variable length metadata was not set
    properly on startup:
  - Resolves: rhbz#1720399
  - Specify path of PID file as "/run/stratisd.pid" instead of 
    "/var/run/stratisd.pid".
  - Resolves: rhbz#1754649
  - For a particular log entry, reduce log level from INFO to DEBUG and make the
    log message more detailed:
  - Resolves: rhbz#1680052


author: Dennis Keefe <dkeefe@redhat.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Resolves: rhbz#1791473
  - Update Stratis RPM Spec File
  - Resolves: rhbz#1828487
  - Support per-pool encryption of the devices that form a pool's data tier
  - Resolves: rhbz#1768580
  - Improve systemd unit file description
  - Resolves: rhbz#1756525


author: Dennis Keefe <dkeefe@redhat.com> - 2.3.0-2
changelog:
  - Update to 2.3.0
  - Resolves: rhbz#1885328
  - Stratis devices inhabit an existing root directory path
  - Resolves: rhbz#1798244
  - Add Clevis Support
  - Resolves: rhbz#1868100
  - Improve stratisd log levels
  - Resolves: rhbz#1757976


author: Bryan Gurney <bgurney@redhat.com> - 2.4.0-3
changelog:
  - Update to 2.4.0
  - Resolves: rhbz#1931671
  - Improve stratis by adding Multi-threading
  - Resolves: rhbz#1927485
  - Dump stratis configuration on demand or in debug
  - Resolves: rhbz#1735475
  - Add noalign option to XFS creation on MDV
  - Resolves: rhbz#1908318
  - Cap thinpool metadata device size at devicemapper-set limit
  - Resolves: rhbz#1707461


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1931671
  - Ensure that binaries are installed with proper features enabled
  - Split dracut modules out to subpackage
  - Add additional dependencies in dracut module


author: Liang Suilong <liangsuilong@gmail.com> - 2.0.4-0.1
changelog:
  - Upstream to the latest git snapshot
  - Add BR: python-devel
  - Upgrade to the latest SLM Data
  - Drop the patch: sunpinyin-fixes-unistd-compile.patch


author: Liang Suilong <liangsuilong@gmail.com> - 2.0.4-0.7
changelog:
  - Drop ibus-sunpinyin
  - Drop xsunpinyin
  - Architecture-dependent data file
  - Upstream sunpinyin data file


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.4-0.15.20130710git
changelog:
  - Rawhide only: Fix pod2man invocation for perl-podlators >= 4.
  - Export global compiler flags before building.
  - Minor spec cleanup: remove %defattr usage and %clean section,
    use %license, add %_isa to -devel base package dependency,
    don't mix %buildroot and $RPM_BUILD_ROOT
  - Insert gitdate into release to follow snapshot guidelines.
  - Fix duplicated doc files (#1001266).


author: Tom Stellard <tstellar@redhat.com> - 4.0.2-2
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable Go tests


author: Bastien Nocera <bnocera@redhat.com> - 1.1-1
changelog:
  + switcheroo-control-1.1-1
  - Update to 1.1
  - Don't throw errors when the machine doesn't have dual-GPU (#1391212)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.0-2.20200828git0c238a2
changelog:
  - Backport fixes from 0.4.0 stable branch. Resolves: rhbz#1868375
    (fixes usage of swtpm-localca with passwords when signing keys)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.2-1.20201201git2df14e3
changelog:
  - Update to 0.4.2, to address potential symlink vulnerabilities (CVE-2020-28407).
    Resolves: rhbz#1906043


author: chenyanpanHW <chenyanpan@huawei.com> - 2.1.0-32
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Fix-issue-with-sysfs-name-comparisons.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-sysfsutils-2.1.0-get_link.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-sysfsutils-2.1.0-manpages.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-sysfsutils-aarch64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-sysutils-modify-GPL-path-written-in-COPYING.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-fix-of-FUNC_TABLE_SIZE-mentioned-in-prev-commit.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-Fix-compiler-complain-about-multiple-defs-of-my_stdo.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0008-Use-stat-not-lstat-to-find-link-target.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0009-path_is_file-should-call-stat-not-lstat.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0010-lib-Fixed-a-memory-leak-in-lib-sysfs_driver.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0011-lib-Fixed-memory-leaks-in-lib-sysfs_device.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0012-lib-Fixed-memory-leaks-in-lib-sysfs_attr.c.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Michal Sekletár <msekleta@redhat.com> - 11.7.3-2
changelog:
  - sysstat's buildsystem doesn't really use LDFLAGS, we have to merge CFLAGS and LDFLAGS to get binaries with full RELRO (#1624177)


author: <msekleta@redhat.com> - 11.7.3-7
changelog:
  - Don't trigger autofs mounts when running sadc (#2000910)
  - sar: Add missing %gnice CPU value for tickless CPU (#2000916)
  - sadf: Fix seg fault on empty data files (#1910841)
  - sar: Fix typo in manual page (#1877836)


author: psimovec <psimovec@redhat.com> - 11.7.3-11
changelog:
  - fix the arithmetic overflow in allocate_structures() that is still possible on some 32 bit systems (CVE-2023-33204)


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-4
changelog:
  - Removing build-time dependency on sharutils(rhbz#1587877)
  - Changing git dependency to smaller git-core


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-6
changelog:
  - Resolves: #1715423 - tcpdump pre creates user and groups unconditionally
  - Resolves: #1655622 - CVE-2018-19519 Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.3-2
changelog:
  - Resolves: #1860216 - tcpdump can not parse mptcp options
  - Resolves: #1901635 - ppp decapsulator can be convinced to allocate a large amount of memory
  - Adding tedude test to gating


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-69
changelog:
  - Resolves: #1445259 - telnet won't build with latest gcc
  - added note about address resolution in manpage


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-73
changelog:
  - Resolves: #1602711 - Please review important issues found by covscan
  - Resolves: #1637085 - Option -i is missing in telnet in el8 but is available in el7


author: Than Ngo <than@redhat.com> - 9:20200327-19
changelog:
  - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs


author: maqi <maqi@unintech.com> - 9:20200406-26.01
changelog:
  - spec: Fix gcc10 -fno-common compile issue for compatible with gcc10 build
  - spec: anolis texlive add loongarch64(Yaxuan Liu)


author: Parag Nemade <pnemade AT redhat DOT com> - 0.5.0-9
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove group tag
  - Replace %define with %global


author: Adam Tkac <atkac redhat com> 0.0.90-0.4.20090403svn3751
changelog:
  - update to r3751
  - patches merged
    - tigervnc-xclients.patch
    - tigervnc-clipboard.patch
    - tigervnc-rh212985.patch
  - basic RandR support in Xvnc (resize of the desktop)
  - use built-in libjpeg (SSE2/MMX accelerated encoding on x86 platform)
  - use Tight encoding by default
  - use TigerVNC icons


author: Adam Tkac <atkac redhat com> 0.0.90-0.6.20090427svn3789
changelog:
  - update to r3789
    - tigervnc-rh494801.patch merged
  - tigervnc-newfbsize.patch is no longer needed
  - fix problems when vncviewer and Xvnc run on different endianess (#496653)
  - UltraVNC and TightVNC clients work fine again (#496786)


author: Adam Tkac <atkac redhat com> 0.0.90-0.10
changelog:
  - rebuild against 1.6.1.901 X server (#497835)
  - disable i18n, vncviewer is not UTF-8 compatible (#501832)


author: Adam Tkac <atkac redhat com> 0.0.91-0.11
changelog:
  - update to 0.0.91 (1.0.0 RC1)
  - patches merged
    - tigervnc10-rh499401.patch
    - tigervnc10-rh497592.patch
    - tigervnc10-rh501832.patch
  - after discusion in upstream drop tigervnc-bounds.patch
  - configure flags cleanup


author: Adam Tkac <atkac redhat com> 0.0.91-0.13
changelog:
  - temporary use F11 Xserver base to make Xvnc compilable
  - BuildRequires: libXi-devel
  - don't ship tigervnc-server-module on s390/s390x


author: Adam Tkac <atkac redhat com> 1.0.0-2
changelog:
  - update underlying X source to 1.6.4-0.3.fc11
  - remove bogus '-nohttpd' parameter from /etc/sysconfig/vncservers (#525629)
  - initscript LSB compliance fixes (#523974)
  - improve -LowColorSwitch documentation and handling (#510185)
  - honor dotWhenNoCursor option (and it's changes) every time (#524340)


author: Adam Tkac <atkac redhat com> 1.0.90-0.1.20091221svn3929
changelog:
  - update to 1.0.90 snapshot
  - patches merged
    - tigervnc10-compat.patch
    - tigervnc10-rh510185.patch
    - tigervnc10-rh524340.patch
    - tigervnc10-rh516274.patch


author: Adam Tkac <atkac redhat com> 1.0.90-0.2.20091221svn3929
changelog:
  - add patch for upstream X.Org issue #25909
  - add libXdmcp-devel to build requires to build Xvnc with XDMCP support (#552322)


author: Adam Tkac <atkac redhat com> 1.0.90-0.4.20091221svn3929
changelog:
  - mark stack as non-executable in jpeg ASM code
  - add xorg-x11-xauth to Requires
  - add support for X.Org 1.8
  - drop shave sources, they are no longer needed


author: Adam Tkac <atkac redhat com> 1.0.90-0.6.20100219svn3993
changelog:
  - add mesa-dri-drivers and xkeyboard-config to -server Requires
  - update to r3993 1.0.90 snapshot
    - tigervnc11-noexecstack.patch merged
    - tigervnc11-xorg18.patch merged
    - xserver18.patch is no longer needed


author: Adam Tkac <atkac redhat com> 1.0.90-0.9.20100219svn3993
changelog:
  - add server-applet subpackage which contains Java vncviewer applet
  - fix Java applet; it didn't work when run from web browser
  - add xorg-x11-xkb-utils to server Requires


author: Adam Tkac <atkac redhat com> 1.0.90-0.10.20100420svn4030
changelog:
  - update to r4030 snapshot
  - patches merged to upstream
    - tigervnc11-rh522369.patch
    - tigervnc11-rh551262.patch
    - tigervnc11-r4002.patch
    - tigervnc11-r4014.patch


author: Adam Tkac <atkac redhat com> 1.0.90-0.11.20100420svn4030
changelog:
  - link libvnc.so "now" to catch "undefined symbol" errors during Xorg startup
  - use always XkbConvertCase instead of XConvertCase (#580159, #586406)
  - don't link libvnc.so against libXi.la, libdix.la and libxkb.la; use symbols
    from Xorg instead


author: Adam Tkac <atkac redhat com> 1.0.90-0.14.20100420svn4030
changelog:
  - fix memory leak in Xvnc input code (#597172)
  - don't crash when receive negative encoding (#600070)
  - explicitly disable udev configuration support
  - add gettext-autopoint to BR


author: Adam Tkac <atkac redhat com> 1.0.90-0.17.20100721svn4113
changelog:
  - update to r4113
  - patches merged
    - tigervnc11-rh586406.patch
    - tigervnc11-libvnc.patch
    - tigervnc11-rh597172.patch
    - tigervnc11-rh600070.patch
    - tigervnc11-options.patch
  - don't own %{_datadir}/icons directory (#614301)
  - minor improvements in the .desktop file (#616340)
  - bundled libjpeg configure requires nasm; is executed even if system-wide
    libjpeg is used


author: Adam Tkac <atkac redhat com> 1.0.90-0.19.20100813svn4123
changelog:
  - separate Xvnc, vncpasswd and vncconfig to -server-minimal subpkg (#626946)
  - move license to separate subpkg and Requires it from main subpkgs
  - Xvnc: handle situations when no modifiers exist well (#611677)


author: Adam Tkac <atkac redhat com> 1.0.90-0.20.20100813svn4123
changelog:
  - press fake modifiers correctly (#633931)
  - supress unneeded debug information emitted from initscript (#633645)


author: Adam Tkac <atkac redhat com> 1.0.90-0.24.20100813svn4123
changelog:
  - rebuild against xserver 1.10.X
  - 0001-Return-Success-from-generate_modkeymap-when-max_keys.patch merged


author: Adam Tkac <atkac redhat com> 1.0.90-0.25.20101208svn4225
changelog:
  - update to r4225
  - patches merged
    - tigervnc11-rh611677.patch
    - tigervnc11-rh633931.patch
    - tigervnc11-xorg1.10.patch
  - enable VeNCrypt and PAM support


author: Adam Tkac <atkac redhat com> - 1.0.90-3
changelog:
  - fix wrong usage of memcpy which caused screen artifacts (#652590)
  - don't point to inaccessible link in sysconfig/vncservers (#644975)


author: Adam Tkac <atkac redhat com> - 1.1.0-1
changelog:
  - update to 1.1.0
  - update the xorg11 patch
  - patches merged
    - tigervnc11-glx.patch
    - tigervnc11-CVE-2011-1775.patch
    - 0001-Use-memmove-instead-of-memcpy-in-fbblt.c-when-memory.patch


author: Adam Tkac <atkac redhat com> - 1.1.0-3
changelog:
  - don't build X.Org devel docs (#755782)
  - applet: BR generic java-devel instead of java-gcj-devel (#755783)
  - use runuser to start Xvnc in systemd service file (#754259)
  - don't attepmt to restart Xvnc session during update/erase (#753216)


author: Adam Tkac <atkac redhat com> - 1.1.0-5
changelog:
  - clean Xvnc's /tmp environment in service file before startup
  - fix building against the latest JAVA 7 and X.Org 1.12


author: Adam Tkac <atkac redhat com> 1.2.80-0.1.20120905svn4996
changelog:
  - update to 1.2.80
  - remove deprecated patches
    - tigervnc-102434.patch
    - tigervnc-viewer-reparent.patch
    - tigervnc11-java7.patch
  - patches merged
    - tigervnc11-xorg111.patch
    - tigervnc11-xorg112.patch


author: Adam Tkac <atkac redhat com> - 1.2.80-0.12.20130314svn5065
changelog:
  - include /etc/X11/xorg.conf.d/10-libvnc.conf sample configuration (#712482)
  - vncserver now honors specified -geometry parameter (#755947)


author: Tim Waugh <twaugh@redhat.com> 1.2.80-0.14.20130314svn5065
changelog:
  - Use systemd rpm macros (bug #850340).  Moved systemd requirements
    from main package to server sub-package.
  - Applied Debian patch to fix busy loop when run from inetd in nowait
    mode (bug #920373).
  - Added dependency on xorg-x11-xinit to server sub-package so that
    default window manager can be found (bug #896284, bug #923655).
  - Fixed bogus changelog date.


author: Tim Waugh <twaugh@redhat.com> 1.3.0-3
changelog:
  - Avoid PIDFile problems in systemd unit file (bug #983232).
  - libvnc.so: don't use unexported key_is_down function.
  - Don't use shebang in vncserver script.


author: Tim Waugh <twaugh@redhat.com> 1.3.0-15
changelog:
  - Disable dri3 to enable building (bug #1063392).
  - Fixed heap-based buffer overflow (CVE-2014-0011, bug #1050928).


author: Tim Waugh <twaugh@redhat.com> - 1.3.1-8
changelog:
  - Input reset fixes from upstream (bug #1116956).
  - No longer need ppc64le patch as it's now in xorg-x11-server.
  - Rebased xserver114.patch again.


author: Tim Waugh <twaugh@redhat.com> - 1.4.2-1
changelog:
  - Rebased xserver116.patch against xorg-x11-server-1.17.1.
  - Allow build against xorg-x11-server-1.17.
  - 1.4.2.


author: Jan Grulich <jgrulich@redhat.com> - 1.6.0-4
changelog:
  - Utilize system-wide crypto policies
    Resolves: bz#1179345
  - Try to disable patch4 as it was previously written to support an
    older version of a different client and breaks some other usage
    Resolves: bz#1280440


author: Jan Grulich <jgrulich@redhat.com> - 1.7.1-3
changelog:
  - Bug 1438704 - CVE-2017-7392 CVE-2017-7393 CVE-2017-7394
                  CVE-2017-7395 CVE-2017-7396 tigervnc: various flaws
    + other upstream related fixes


author: Jan Grulich <jgrulich@redhat.com> - 1.9.0-7
changelog:
  - Improve coverity scan fixes
    Resolves: bz#1602714

    Inform whether view-only password is used or not
    Resolves: bz#1639169

    Backport fixes from RHEL 7
    Resolves: bz#1651254


author: Jan Grulich <jgrulich@redhat.com> - 1.10.1-5
changelog:
  - Install the HOWTO file to correct location
  - Add /usr/bin/vncserver file informing users to read the HOWTO.md file
    Resolves: bz#1790443


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-1
changelog:
  - Update to 1.11.0
    Resolves: bz#1880985
  - Backport fix to allow Tigervnc use boolean values in config files
    Resolves: bz#1883415


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-2
changelog:
  - Revert removal of vncserver
    Resolves: bz#1897504
  - Correctly start vncsession as a daemon
    Resolves: bz#1897498


author: Jan Grulich <jgrulich@redhat.com> - 1.12.0-4
changelog:
  - Added vncsession-restore script for SELinux policy migration
    Fix SELinux context for root user
    Resolves: bz#2021892


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-1
changelog:
  - 1.13.1
    Resolves: bz#2175748
  - Restore "--fallbacktofreeport" option in the vncserver script
    Resolves: bz#2174398


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-2
changelog:
  - xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege
    Escalation Vulnerability
    Resolves: bz#2180306


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-4
changelog:
  - Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
    Resolves: RHEL-15236

  - Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
    Resolves: RHEL-15230


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-5
changelog:
  - Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
    Resolves: RHEL-18410
  - Fix CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
    Resolves: RHEL-18422


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-7
changelog:
  - Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
    Resolves: RHEL-20388
  - Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
    Resolves: RHEL-20382
  - Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
    Resolves: RHEL-20530
  - Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
    Resolves: RHEL-21214


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-9
changelog:
  - Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
    Resolves: RHEL-30755
  - Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
    Resolves: RHEL-30767
  - Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
    Resolves: RHEL-30761


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-10
changelog:
  - Drop patches that are already part of xorg-x11-server
    Resolves: RHEL-30755
    Resolves: RHEL-30767
    Resolves: RHEL-30761


author: Jan Grulich <jgrulich@redhat.com>
changelog:
  - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability
    Resolves: RHEL-61999


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-2.1
changelog:
  - Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
  - Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
    Resolves: RHEL-15229


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-2.2
changelog:
  - Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
    Resolves: RHEL-18409
  - Fix CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
    Resolves: RHEL-18421


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-2.4
changelog:
  - Updated fix for CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
    Resolves: RHEL-18409


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-3.5
changelog:
  - Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
    Resolves: RHEL-20432
  - Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
    Resolves: RHEL-20420
  - Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
    Resolves: RHEL-20583
  - Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
    Resolves: RHEL-21252


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-3.6
changelog:
  - Don't try to get pointer position when the pointer becomes a floating device
    Resolves: RHEL-20432


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-3.7
changelog:
  - Fix use after free related to CVE-2024-21886
    Resolves: RHEL-20432
  - Fix copy/paste error in the DeviceStateNotify
    Resolves: RHEL-20583


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-2.8
changelog:
  - Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
    Resolves: RHEL-31011
  - Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
    Resolves: RHEL-30981
  - Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
    Resolves: RHEL-30998


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Release v7
  - Allow tlog-play redirection of stdout
  - Add -i/--interactive option to tlog-rec-session. Allows login
    programs to call tlog-rec-session more transparently.
  - Make in_txt/out_txt fields optional. This handles missing fields
    when reading from Elasticsearch or other backends.


author: Justin Stephenson <jstephen@redhat.com> - 8-1
changelog:
  - Release v8
  - Spec file fixes for EL6
  - Spec file improvements for Debian/Ubuntu pkg-config
  - Tlog-play improve authentication options
  - Handle piped in I/O from stdin and improve the main recording transfer exit
    condition.
  - Use empty string on hostname resolution failure


author: Justin Stephenson <jstephen@redhat.com> - 9-1
changelog:
  - Release v9
  - Add libutempter support
  - Require journal match filter
  - Add file reader match functionality
  - Restore cursor visibility and color attributes on tlog-play exit
  - Add "time" real clock timestamp message field
  - Various upstream CI improvements


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Fire SIGCHLD after utempter_add_record since it probably eats it.
  - Correct suse rpmbuild
  - Update debbuild for travis CI


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Release v12
  - Prevent infinite transfer loop on GDM login.
  - tlog-play: add journal namespace support.
  - tlitest: extend delay for limit-action delay test.


author: Justin Stephenson <jstephen@redhat.com> - 12.1
changelog:
  - Exit transfer loop when output fd is closed
  - Revert "Prevent infinite transfer loop on GDM login"


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5-1
changelog:
  - Implemented new 'make install' target.
  - Re-wrote tog-pegasus.spec file from scratch.
  - Ported BZ 167986 authentication code and BZ 167164 + BZ 167165 fixes from RHEL-4


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5-2
changelog:
  - Add /usr/lib/cmpi alternate providerLibDir for sblim-cmpi-base Fedora Extras pkg
  - Fix bug 171124: use numeric ids for pegasus user/group
  - guidelines: do not remove pegasus user/group in %postun.


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5-3
changelog:
  - Rebuild for new openssl dependencies
  - Enable CMPI support for sblim-cmpi-base with ENABLE_CQL=true


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5-6
changelog:
  - restore SSLv23_method SSL support now that bug 173399 is fixed
  - rebuild for new gcc, glibc, glibc-kernheaders
  - PAMBasicAuthenticatorUnix.cpp includes no longer include syslog.h: add
  - /usr/bin/install now decides to fail if chown fails - set $INSTALL_USER, $INSTALL_GROUP


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-2
changelog:
  - Apply patches for the two '2.5.2_APPROVED' upstream bugzillas
    4934(4943) and 4945 :
    (http://cvs.opengroup.org/bugzilla/buglist.cgi?bug_id=4943%2C4945)
  - Fix the PATH_MAX and MAXHOSTNAMELEN issues (again)


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-4
changelog:
  - fix bug 190432: %exclude /usr/lib/debug from RPM
  - fix upstream OpenPegasus '2.5.2_APPROVED' bugs, applying upstream patches:
    o 4955 : Bogus Description property for OperatingSystem provider
    o 4956 : reserveCapacity method may cause size overflow on invalid input
    o 4968 : CMPI provider up-calls cause failure with out-of-process
    o 4978 : snmpDeliverTrap_netsnmp::_createSession function is not thread safe
    o 4983 : Memory leak in OOP indication generation
    o 4984 : Forked process hangs in system call
    o 4986 : Adding automated test for snmpIndication Handler
    (  http://cvs.opengroup.org/bugzilla/show_bug.cgi?id=? )
  - apply upstream update to 'pegasus-2.5.1-warnings.patch'


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-6
changelog:
  - Apply upstream patches for latest 2.5.2_APPROVED bugs:
    o 5046: cimprovider timeout needs to be increased
    o 5047: cimmof timeout needs to be increased
    o 5048: Invalid Pointer in CIMOperationRequestEncoder code
    o 5049: Unnecessary dependency on experimental headers
    o 5051: Improved handling of OOP indication provide module failures
    o 5053: reserveCapacity method may cause size overflow
    o 5059: XMLWriter does not escape '>' in strings
    o 5072: Potential race condition with OOP response chunks
    o 5083: CIMRequestMessage buildResponse() should be const
  - Fix bug 193121: restore world read access to libraries


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-8
changelog:
  - Fix bug 192754: remove multilib conflicts
  - More upstream 2.5.2_APPROVED bug fixes:
    o 5119: memory leak in CMPI implementation
    o 5115: fix SetConfig_EnvVar comments


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.4.1-10
changelog:
  - More upstream 2.5.2_APPROVED bug fixes:
    o 4629: Pegasus freezes when it is unable to send out completely, the results of a request
    o 5073: Class Names on Reference, ReferenceNames, Assoc, AssocNames returned lower case
    o 5090: cimserver crash on a request after attempting to unload idle CMPI providers
    o 5180: OperationAggregate deleted in _enqueueResponse while member mutex held


author: Nalin Dahyabhai <nalin@redhat.com> - 2:2.5.2-3
changelog:
  - change requires: tog-pegasus to prereq: tog-pegasus so that the pegasus
    user and group will exist when we go to lay down files for tog-pegasus-devel
    (#218305)
  - prereq the current version of openssl so that the right versions of
    libssl and libcrypto will be available in %post (possible for #208949)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.7.0-1
changelog:
  - Update to upstream version 2.7.0
  - Unhide some cmpi classes, package cmpi C++ headers
  - Fix multiarch conflicts
    Resolves: #343311
  - Add libcmpiCppImpl.so (symlink to libcmpiCppImpl.so.1)
    Resolves: #366871


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.7.1-1
changelog:
  - Update to upstream version 2.7.1
  - Fix setElementAt() doesn't copy value of CMPI_char parameter
    Resolves: #454589
  - Fix CMPI MI factories that return errors are unsupported
    Resolves: #454590
  - Fix HTTP 401 responses lack Content-Length headers
    Resolves: #454591


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.7.2-1
changelog:
  - Update to upstream version 2.7.2
    (remove patches added in 2.7.1-1 - they're upstream now)
  - Enable out-of-process providers
    Resolves: #455109


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.9.2-1
changelog:
  - Update to upstream version 2.9.2
  - Mark files in /var/lib/Pegasus as noverify in spec file
  - Fix initscript permissions
  - Add patch/source descriptions to the spec file
  - Cleanup the spec file, use upstream Makefile


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.10.0-1
changelog:
  - Update to upstream version 2.10.0
  - Move creating of the 'pegasus' user and group to the 'libs' %pre
  - Use %global instead of %define and some minor spec file cleaning


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.11.1-1
changelog:
  - Update to upstream version 2.11.1
  - Add explicit file attributes where RPM requires it
  - Disable privilege separation feature


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-2
changelog:
  - Fix local-or-remote-auth patch to work with IPv6
  - Distribute modified access.conf file to conform README.RedHat.Security


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-4
changelog:
  - Fix CMPI enumGetNext function to change CMPI Data state from default CMPI_nullValue
    to CMPI_goodValue when it finds and returns next instance correctly
  - Enable processing of ExecQuery operations


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-6
changelog:
  - Set PEGASUS_ENABLE_INTEROP_PROVIDER=true (fixes registration of CMPI providers)
  - Move .so links back to main package (they are necessary to be present for a user
    to use or execute the functionality in the base package properly)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.0-9
changelog:
  - Add cimprovagt wrapper for possibility of confining providers in SELinux,
    update README.RedHat.Security accordingly, add provider specific wrapper
    example


author: D.Marlin <dmarlin@redhat.com> - 2:2.12.1-6
changelog:
  - Add initial 64-bit ARM (Aarch64) support.
    See http://bugzilla.openpegasus.org/show_bug.cgi?id=9663


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.13.0-6
changelog:
  - Allow unprivileged users to subscribe to indications
    Resolves: #1049314
  - Remove packages which are part of the minimum build environment from BR


author: Stephen Gallagher <sgallagh@redhat.com> - 2:2.13.0-8
changelog:
  - Generate SSL certificates with x509v3 and CA:FALSE
  - Automatically import self-signed certificates into local trust-store
  - Move SSL certificate generation into the systemd service file


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.13.0-23
changelog:
  - Fix tog-pegasus.service is marked world-inaccessible
    Resolves: #1191026
  - Fix build fail with gcc5


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-24
changelog:
  - Add snmp tests to the -test rpm and enable them, configure snmptrapd
    in test setup phase
  - Add missing ssl.h include


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-31
changelog:
  - Add missing dependency for -test subpackage
  - Fix enumerating instances of PG_SSLCertificateRevocationList returns error
    Resolves: #1032046


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-36
changelog:
  - Move SSL certificates to more convenient place, update related scripts
    and README.RedHat.SSL
    Related: #1308809


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-6
changelog:
  - Resolves: #2173874 Tomcat installs older java even though newer java is installed
  - Sync with rhel-8.8.0 branch


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-7
changelog:
  - Related: #2173874 Tomcat installs older java even though newer java is installed
  - Bump release number


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-10
changelog:
  - Resolves: #2210630 CVE-2023-28709 tomcat
  - Resolves: #2181448 CVE-2023-28708 tomcat: not including the secure attribute causes information disclosure
  - tomcat: Apache Commons FileUpload: FileUpload DoS with excessive parts (CVE-2023-24998)
    tomcat: JsonErrorReportValve injection (CVE-2022-45143)
    tomcat: request smuggling (CVE-2022-42252)
    tomcat: local privilege escalation vulnerability (CVE-2022-23181)


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-16
changelog:
  - Resolves: RHEL-12543
    tomcat: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
  - Remove JDK subpackges which are unused


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-27
changelog:
  - Related: RHEL-12543
    tomcat: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
  - Bump release number


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-28
changelog:
  - Resolves: RHEL-13907
    tomcat: incorrectly parsed http trailer headers can cause request smuggling (CVE-2023-45648)
  - Resolves: RHEL-13904
    tomcat: improper cleaning of recycled objects could lead to information leak (CVE-2023-42795)
  - Resolves: RHEL-12951
    tomcat: FileUpload: DoS due to accumulation of temporary files on Windows (CVE-2023-42794)
  - Resolves: RHEL-12544
    tomcat: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
  - Resolves: RHEL-2386
    tomcat: Open Redirect vulnerability in FORM authentication (CVE-2023-41080)


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-29
changelog:
  - Resolves: RHEL-17602
    tomcat: HTTP request smuggling via malformed trailer headers (CVE-2023-46589)
  - tomcat: Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549)


author: Sokratis Zappis <szappis@redhat.com> - 1:9.0.87-1.el8_10.1
changelog:
  - Resolves: RHEL-38548 - Amend tomcat package's changelog so that fixed CVEs are mentioned explicitly
  - Resolves: RHEL-35813 - Rebase tomcat to version 9.0.87
  - Resolves: RHEL-29255
    tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672)
  - Resolves: RHEL-29250
    tomcat: Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549)


author: Jindrich Novy <jnovy@redhat.com> - 0.0.99.2-1
changelog:
  - Update to 0.0.99.2
  - Make 'toolbox' create or fall back to a container if possible
  Resolves: #1914687
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 0.0.99.2-2
changelog:
  - Actually apply the patch to make 'toolbox' create or fall back to a
    container if possible
  - Support logging into a registry if necessary
  - Related: #1934415


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.3-2
changelog:
  - Update to 0.0.99.3
  - BuildRequire only systemd-rpm-macros as recommended by the Fedora packaging
    guidelines
  - Update the Summary to match upstream
  - Update the URL to point to the website
  Resolves: #2047290


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.4-3
changelog:
  - Rebuild for CVE-2022-41723, CVE-2023-24534, CVE-2023-24536 and
    CVE-2023-24538
  Resolves: #2187345, #2187368, #2203690


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.4-7
changelog:
  - Rebuild for CVE-2023-29406, CVE-2023-39318 and CVE-2023-39319
  Resolves: RHEL-4231, RHEL-4475, RHEL-4502


author: Honggang Li <honli@redhat.com> - 4.2.10-25
changelog:
  - Rebase to latest Fedora release
  - Fix file conflicts in torque-devel multilib packages
  - Resolve: bz1853167


author: Kalev Lember <klember@redhat.com> - 3.38.2-2
changelog:
  - Use conflicts for totem-video-thumbnailer split instead of self-obsoletes
  - Resolves: rhbz#1949422


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.19.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2057602
    - fixed parsing of inline comments
      resolves: rhbz#2060138
    - added support for quotes in isolated_cores specification
      resolves: rhbz#1891036
    - recommend: preset balanced profile for notebook, laptop or portable if
      syspurpose is not defined
      resolves: rhbz#1896717


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2133814
    - systemd: relax polkit requirement
      resolves: rhbz#2065591
    - sysvinit: fixed path
    - plugin_cpu: added support for pm_qos_resume_latency_us
    - do not exit on duplicate config lines
      resolves: rhbz#2071418
    - profiles: new cpu-partitioning-powersave profile
    - profiles: new profile for AWS EC2
    - API: add support for moving devices between instances
    - D-Bus: send tracebacks through D-Bus only in debug mode
    - Makefile: added fix for python-3.12
    - throughput-performance: set net.core.somaxconn to at least 2048
      resolves: rhbz#1998310
    - plugin_scheduler: do not leak FDs from the perf
      resolves: rhbz#2080227
    - plugin_cpu: added support for intel_pstate scaling driver
    - added support for the API access through the Unix Domain Socket


author: Wim Taymans <wtaymans@redhat.com> - 0.3.13-12
changelog:
  - Add explicit Requires for the -libs package.
  - Do NVR bump to move twolame-devel from buildroot to CRB
  - Resolves: rhbz#1843275


author: Patsy Griffin <patsy@redhat.com> - 2023a-1
changelog:
  - Rebase to tzdata-2023a
  - Egypt reintroduced DST, from April through October.
  - Morocco springs forward April 23, not April 30.
  - Palestine delayed the start of DST this year.


author: openEuler Buildteam <buildteam@openeuler.org> - 2019a-1
changelog:
  - Rebase to tzdata-2019a
    - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
      previously predicted.
    - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
      of Pacific standard time.


author: luochunsheng<luochunsheng@huawei.com> - 2019a-3
changelog:
  - Type:NA
  - ID:NA
  - SUG:NA
  - DESC: Revert "Bring back 2019-2037 Morocco Ramadan predictions" to
  	 fix Morocco zoneinfo.


author: luochunsheng<luochunsheng@huawei.com> - 2019a-4
changelog:
  - Type:fix
  - ID:NA
  - SUG:NA
  - DESC: Bring back 2019-2037 Morocco Ramadan predictions
  	https://www.timeanddate.com/news/time/morocco-changes-clocks-2019.html


author: openEuler Buildteam <buildteam@openeuler.org> - 2019b-1
changelog:
  - Rebase to tzdata-2019b
    - Brazil will no longer observe DST going forward.
    - The 2019 spring transition for Palestine occurred 03-29, not 03-30.


author: liuchao<liuchao173@huawei.com> -2019b-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: use rearguard data set to fix Casablance DST display error since 2019


author: Patsy Griffin <patsy@redhat.com> - 2022b-1
changelog:
  - Rebase to tzdata-2022b
    - Chile transitions to DST on 2022-09-11, not 2022-09-04
    - 'make install' now defaults LOCALTIME to Factory rather than GMT
    - More zones that are the same since 1970 have been moved to backzone.
    - Include patch for awk workaround.


author: Patsy Griffin <patsy@redhat.com> - 2022c-1
changelog:
  - Rebase to tzdata-2022c - supersedes tzdata-2022b
    - Add a work-around for an awk bug in FreeBSD, macOS, etc.
    - Improve tzselect with respect to intercontinental Zones.


author: Patsy Griffin <patsy@redhat.com> - 2022d-1
changelog:
  - Rebase to tzdata-2022d
    - Palestine's DST transition will be on October 29, 2022,
      not October 28, 2022.
    - Europe/Uzhgorod and Europe/Zaporozhye are moved to 'backzone'.


author: Patsy Griffin <patsy@redhat.com> - 2022e-1
changelog:
  - Rebase to tzdata-2022e
  - Jordan and Syria cancelled the DST transition planned
      for 2022-10-28, remaining at +03 permanently.


author: haomimi <haomimi@uniontech.com> - 2022e-1.01
changelog:
  - sync Add tzdata-uos-add-Bejing-option-in-timezone.patch
  - sync tzdata-uos-add-Urumqi-option-in-timezone.patch


author: Patsy Griffin <patsy@redhat.com> - 2022f-1
changelog:
  - Rebase to tzdata-2022f
    - Mexico will stop observing DST except near the US border.
    - Chihuahua moved to -06 year round starting on 2022-10-30.
    - Fiji no longer observes DST.


author: Patsy Griffin <patsy@redhat.com> - 2022g-1
changelog:
  - Rebase to tzdata-2022g
  - The northern edge of the Mexican state of Chihuahua will
    change time zone to agree with nearby US locations on
    2022-11-30.
  - Added a new Zone America/Ciudad_Juarez that splits from
    America/Ojinaga.


author: Jindrich Novy <jnovy@redhat.com> - 0.2.5-2
changelog:
  - New rebase https://github.com/containers/udica/releases/tag/v0.2.5 (#1995041)
  - Replace capability dictionary with str.lower()
  - Enable udica to generate policies with fifo class
  - Sort container inspect data before processing
  - Update templates to work properly with new cil parser
  - Related: #1934415


author: Lukas Vrabec <lvrabec@redhat.com> - 0.0.3-1
changelog:
  - Remove required parameters -i or -j and added support for reading json file from stdin.
  - Remove "-n" or "--name" parameter. Name of the container will be required for this tool


author: Lukas Vrabec <lvrabec@redhat.com> - 0.0.4-1
changelog:
  - Add manpages
  - Add support for communicating with libvirt daemon
  - Add support for communicating with X server.
  - Add support for read/write to the controlling terminal


author: Lukas Vrabec <lvrabec@redhat.com> - 0.1.3-1
changelog:
  - Fix capability allow rules when capabilities are specified in JSON file
  - Add additional SELinux allow rules to base container template to allow container to read proc_type types.


author: Lukas Vrabec <lvrabec@redhat.com> - 0.1.3-3
changelog:
  - Improve capability parsing for docker containers
  - Update small changes in manpage, like issue with mandatory option '-c' for docker containers
  - Fix parsing Mountpoints in docker inspect JSON file


author: Lukas Vrabec <lvrabec@redhat.com> - 0.1.3-4
changelog:
  - Update manpage with the latest known bug described in https://github.com/containers/udica/issues/8
  - Add check if runtimes are installed on the system


author: Lukas Vrabec <lvrabec@redhat.com> - 0.1.4-1
changelog:
  - Fix minor problems reported by pylint #11
  - Catch FileNotFoundError when inspecting containers #12
  - Create basic tests #13
  - Restore working directory #14
  - udica cannot use the container ID once it is provided #10


author: Lukas Vrabec <lvrabec@redhat.com> - 0.1.5-1
changelog:
  - Create mock selinux and semanage module
  - Update testing section in README
  - Add travis file for Travis CI
  - Grammar fixes in the udica.8 manpage file
  - Support port ranges (Resolves: #16)
  - Test port ranges


author: mahailiang <mahailiang@uniontech.com> - 2.9.0-9.01
changelog:
  - build: add udisks-mount-patch-changes.patch
  - spec: Modify redhat-rpm-config to uos-rpm-config and /media instead of /run/media


author: Peter Hatina <phatina@redhat.com> - 2.1.0-3
changelog:
  - Changes for EPEL-7
    - Lower systemd required version to 208
    - Rewrite BuildRequires for systemd-devel


author: Tomas Bzatek <tbzatek@redhat.com> - 2.8.3-1
changelog:
  - Rebased to upstream 2.8.3 release (#1685210)
  - Fix leaking filedescriptors (#1614774)
  - Fix udisksctl pager scrolling (#1662336)
  - Fix LVM2 plugin CreateSnapshot() error (#1668291)
  - Add ISCSI plugin GetInitiatorNameRaw() method (#1710257)


author: Sunyuxuan <sunyuxuan@uniontech.com> - 81.1-2.12.03.uelc
changelog:
  - uos-logos obsoletes chengjieos-logos
  - uos-backgrounds obsoletes chengjieos-backgrounds
  - uos-logos-httpd obsoletes chengjieos-logos-httpd
  - uos-logos-ipa obsoletes chengjieos-logos-ipa


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-5
changelog:
  - RHEL 8.3.0 ERRATUM
  - Use old-fasioned forking style in unit file
  Resolves: rhbz#1846885
  - Allow usbguard to read /proc/cpuinfo
  Resolves: rhbz#1847870
  - Removed notifier's Requires for usbguard-devel
  Resolves: rhbz#1667395
  - Allow usbguard to read /dev/urandom
  Resolves: rhbz#1848618


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-6
changelog:
  - RHEL 8.3.0 ERRATUM
  - Removed execstack from .spec
  - Removed AuthorizedDefault=wired from the usbguard
  Resolves: rhbz#1852539
  - Missing error message on bad configuration
  Resolves: rhbz#1857299
  - /etc/usbguard/usbguard-daemon.conf file does not contain all default options
  Resolves: rhbz#1862907


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-1
changelog:
  - Rebase to 1.0.0
  Resolves: rhbz#1887448
  - Filtering rules by attribute
  Resolves: rhbz#1873953
  - Change device policy of multiple devices using rule instead of ID
  Resolves: rhbz#1852568


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-8
changelog:
  - change usbguard icon injection
  - fix DSP module definition in spec file
  Resolves: rhbz#2014441
  - add execstack to spec
  - remove IPAddressDeny from usbguard service
  Resolves: rhbz#1929364
  - fix file conflict when installing usbguard on rhel
  Resolves: rhbz#1963271
  - fix IPC access control files override
  Resolves: rhbz#2004511
  - validate ACL permission existence
  Resolves: rhbz#2005020
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2000000


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-8.2
changelog:
  - Fix unauthorized access via D-bus
  - Fix memory leak on D-bus connection failure
  Resolves: rhbz#2127848


author: Bastien Nocera <bnocera@redhat.com> - 1.1.0-13
changelog:
  + usbmuxd-1.1.0-13
  - Fix usbmuxd not starting up a second time, and properties being lost
    with kernel >= 4.12


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Rebase to latest upstream: 0.13.0
  - Keeps usbredirserver binary (removed upstream)
    Related: rhbz#2135760


author: Victor Toso <victortoso@redhat.com> - 0.13.0-2
changelog:
  - Fixes 100% CPU usage when usbredirect used as TCP server
    Related: rhbz#2157520
  - Fixes USB redirection of identical devices
    Resolves: rhbz#2157520


author: Miloslav Trmač <mitr@redhat.com> - 1.111-10
changelog:
  - Fix a FBFS with  -Werror=format-security
    Resolves #1444750
  - Fix inconsistent dates in %changelog


author: Jiri Kucera <jkucera@redhat.com> - 1.112-2
changelog:
  - Dropped need to run autotools
  - <sys/sysmacros.h> must be now included manually
    Resolves #1611752
  - Fixed bad FSF address


author: Jiri Kucera <jkucera@redhat.com> - 1.113-2
changelog:
  - Fix typo in pam-panel-icon manpage
    Do not use deprecated selinux API
    Do not use fexecve
    Resolves: #1775931


author: lvgenggeng <lvgenggeng@uniontech.com> - 1.0.0-5
changelog:
  - fix: Optimization prompt information and return value (bugid:191267)
  - fix: be compatible with dnf/yum (bugid:191269)
  - fix: update list info by package source (bugid:191273)


author: lvgenggeng <lvgenggeng@uniontech.com> - 1.0.0-6
changelog:
  - fix: check name before action (bugid:199301)
  - fix: return error when name not found (bugid:199127)


author: lvgenggeng <lvgenggeng@uniontech.com> - 1.0.0-7
changelog:
  - fix: handle livepathc one by one (bugid:199175)
  - fix: retry when rmmod failed (bugid:199171)
  - fix: retry when load failed (bugid:199069)


author: Mark Wielaard <mjw@redhat.com> - 3.18.1-5
changelog:
  - Add valgrind-3.18.1-dhat-tests-copy.patch
  - Add valgrind-3.18.1-s390x-EXRL.patch
  - Add valgrind-3.18.1-ppc64-lxsibzx-lxsihzx.patch
  - Add valgrind-3.18.1-ppc-pstq.patch
  - Add valgrind-3.18.1-ppc-pstq-tests.patch
  - Add valgrind-3.18.1-gdbserver_tests-hwcap.patch
  - Add valgrind-3.18.1-rust-v0-demangle.patch
  - Add valgrind-3.18.1-arm64-doubleword-cas.patch
  - Add valgrind-3.18.1-arm64-ldaxp-stlxp.patch
  - Add valgrind-3.18.1-arm64-atomic-align.patch
  - Add valgrind-3.18.1-amd64-more-spec-rules.patch
  - Add valgrind-3.18.1-condvar.patch
  - Add valgrind-3.18.1-demangle-namespace.patch


author: Mark Wielaard <mjw@redhat.com> - 3.21.0-2
changelog:
  - Upgrade to upstream 3.21.0
  - Remove upstreamed patches
  - Add valgrind-3.21.0-no-memcpy-replace-check.patch


author: Mark Wielaard <mjw@redhat.com> - 3.21.0-7
changelog:
  - Add valgrind-3.21.0-callgrind_control-no-strict.patch
  - Add valgrind-3.21.0-realloc-again.patch
  - Update valgrind-3.21.0-no-memcpy-replace-check.patch (memcpy_chk)
  - Add valgrind-3.21.0-vgm.patch and valgrind-3.21.0-vgm-tests.patch
  - Add valgrind-3.21.0-pgste.patch


author: Binbin Zhou <zhoubinbin@loongson.cn> - 3.21.0-8
changelog:
  - Add valgrind-3.21.0-Add-LoongArch64-Linux-support.patch
  - Add valgrind-3.21.0-LoongArch64-Sync-kernel-4.19.patch


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 6.0.0-1
changelog:
  - New upstream release
  - Added a patch that fixes _FORTIFY_SOURCE=2 on copr/el6
  - Added a patch fixing compilation on epel6
  - Fresh checkout of pkg-varnish-cache
  - Updated find-requires sed fix to update variant and moved it to prep
  - Removed -libs subpackage
  - varnish_reload_vcl changed name to varnishreload, as in upstream
  - varnish.params is gone. To override startup configuration,
    use /etc/systemd/system/varnish.service
  - Dropped patch and sed fixes for find-provides, as it is fixed upstream
  - Dropped patch for test vsv00002, as it is fixed upstream
  - Droppet patch for python3, as it is included upstream
  - Dropped buildreq on groff, as tarball includes prebuilt manpages
  - Dropped systemv to systemd helpers
  - Updated project url
  - Use prebuilt html files for docs subpackage
  - Dropped unnecessary explicit require of initscripts, closes #1592398


author: Lubos Uhliarik <luhliari@redhat.com> - 6.0.6-2
changelog:
  - new version 6.0.6
  - Resolves: #1795673 - RFE: rebase varnish:6 to latest 6.0.x LTS
  - Resolves: #1790907 - CVE-2019-20637 varnish: not clearing pointer between two
    client requests leads to information disclosure
  - Resolves: #1763958 - CVE-2019-15892 varnish:6/varnish: denial of service 
    handling certain crafted HTTP/1 requests


author: Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-1
changelog:
  - new version 6.0.8
  - Resolves: #1982862 - CVE-2021-36740 varnish:6/varnish: HTTP/2 request
    smuggling attack via a large Content-Length header for a POST request


author: Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-2
changelog:
  - Resolves: #2047650 - CVE-2022-23959 varnish:6/varnish: Varnish HTTP/1 Request
    Smuggling Vulnerability


author: Lubos Uhliarik <luhliari@redhat.com> - 0.15.0-1
changelog:
  - updated to newer version (0.15.0)
  - Drop EPEL and older Fedora releases support
  - Drop broken manual ABI dependency to Varnish
  - Drop commented out references to past patches
  - Verbose test suite
  - Simplified configure step
  - Dependencies cleanup


author: gil cattaneo <puntogil@libero.it> 0:1.7-18
changelog:
  - fix FTBFS rhbz#1240035
  - fix BR list, change log4j with log4j12
  - set javac source/target to 1.6
  - disable Java8doc doclint
  - remove werken-xpath Import/Export refences in manifest file
  - resolve some rpmlint problems
  - remove zero-length file
  - introduce license macro


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-17
changelog:
  - Remove ldconfig
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/SU3LJVDZ7LUSJGZR5MS72BMRAFP3PQQL/


author: Martin Gansser <martinkg@fedoraproject.org> - 1.1-3.20170830gitafc8ea9
changelog:
  - change license tag to GPLv2
  - fix warning _FORTIFY_SOURCE requires compiling with optimization (-O)


author: wangjiang <wangjiang37@h-partners.com> - 2:9.0-15
changelog:
  - Type:CVE
  - ID:CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781
  - SUG:NA
  - DESC:fix CVE-2023-4738 CVE-2023-4750 CVE-2023-4752 CVE-2023-4781


author: Marek Kasik <mkasik@redhat.com> - 3.22.0-22
changelog:
  - Rebuild due to new version of FreeRDP
  - Fix an issue when RDP connection shows just black screen
  - Resolves: #1839744


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.0.0-1
changelog:
  - Rebased to virt-manager-4.0.0 (rhbz#2100525)
  - virt-install: add support for qemu-vdagent channel (rhbz#2060724)
  - virt-manager: add support for qemu-vdagent channel (rhbz#2060724)


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-1
changelog:
  - Rebased to virt-manager-4.1.0 (rhbz#2135791)
  - cloner: Sync <uuid> and <sysinfo> system uuid (rhbz#2038040)


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-3
changelog:
  - progress: Fix showing correct final total (rhbz#2156247)
  - virtinstall: Fix the allocating disk size printed by the progress bar (rhbz#2156247)
  - virtinstall: Hide total_size in the progress bar if it doesn't need (rhbz#2156247)


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-4
changelog:
  - virt-install: Recommend '--boot uefi' (rhbz#2112154)
  - virt-install: Document Secure Boot setups (rhbz#2112154)


author: Pino Toscano <ptoscano@redhat.com> - 1:1.42.0-4
changelog:
  - Copy %description also for the source, so tools are less confused
    about it.
  - Fix the "extra" addition to the version to refer to rhel.


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.2.5-1
changelog:
  - New upstream version 0.3.2.5.
  - Keep TODO out of the main package, but add (renamed) TODO.libvirt and
    TODO.virt-top to the devel and virt-top packages respectively.
  - Add BR gawk.


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.3.0-1
changelog:
  - New upstream release 0.3.3.0.
  - Added support for virt-df, but disabled it by default.
  - +BR ocaml-calendar.


author: Richard W.M. Jones <rjones@redhat.com> - 0.4.1.0-1
changelog:
  - New upstream release 0.4.1.0.
  - Upstream now requires ocaml-dbus >= 0.06, ocaml-lablgtk >= 2.10.0,
    ocaml-dbus-devel.
  - Enable virt-df.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.1-1
changelog:
  - New upstream release 1.0.1.
  - Don't BR ocaml-gettext-devel, it's not used at the moment.
  - Don't gzip the manpage, it happens automatically.
  - Add BR libvirt-devel.
  - Remove spurious executable bit on COPYING.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.1-2
changelog:
  - Use RPM percent-configure.
  - Add list of BRs for gettext.
  - Use find_lang to find PO files.
  - Comment out the OCaml dependency generator.  Not a library so not
    needed.


author: S390x secondary arch maintainer <fedora-s390x@lists.fedoraproject.org>
changelog:
  - ExcludeArch sparc64, s390, s390x as we don't have OCaml on those archs
    (added sparc64 per request from the sparc maintainer)


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.4-2
changelog:
  - New upstream release 1.0.4.
  - Includes new translations (RHBZ#493799).
  - Overall hardware memory is now displayed in CSV file (RHBZ#521785).
  - Several fixes to Japanese support (RHBZ#508197).
  - Japanese PO file also has bogus plural forms.
  - Additional BR on gettext (for msgfmt).


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.5-1
changelog:
  - New upstream version 1.0.5.
  - Rebuild against OCaml 3.12.0.
  - Project website moved to people.redhat.com.
  - Remove upstream patches.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.8-2
changelog:
  - New upstream version 1.0.8.
  - Requires tiny change to ocaml-libvirt, hence dep bump.
  - Clean up the spec file.
  - Remove explicit BR ocaml-camomile (not used AFAIK).


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.8-6
changelog:
  - Include processcsv.py script and man page, but on RHEL only
    (RHBZ#665817, RHBZ#912020)
  - Clear executable stack flag on PPC, PPC64 (RHBZ#605124).


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.8-22
changelog:
  - Include all upstream patches since 1.0.8 was released.
  - BR ocaml-libvirt with virConnectGetAllDomainStats API.
  - Remove execstack hack, no longer needed on any arch.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.8-37
changelog:
  - Fix "Input/output error" in journal
    resolves: rhbz#2149139
  - Store the patches in an upstream branch in git.


author: maqi <maqi@uniontech.com> - 1.0.8-37.0.1.01
changelog:
  - build: add patch1001 for loongarch64 and sw_64 build add patch1000 fix issue pattern matching is not exhaustive
  - spec: build on loongarch64


author: Uri Lublin <uril@redhat.com> - 9.0-5
changelog:
  - More specific key accelerator description for cursor release
    Resolves: rhbz#1548371
  - Report detailed error when file transfer fails
    Resolves: rhbz#1753563
  - Update copyright year in "about ui"
    Resolves: rhbz#1848267
  - Show an error dialog upon vnc-error
    Resolves: rhbz#1448151
  - Fix warning by Coverity
    Resolves: rhbz#1876719


author: Dams <anvil[AT]livna.org> 0:0.6.2-0.fdr.3
changelog:
  - Added builddep for libpng-devel and openslp-devel 
  - Added gnome (default:enabled) and ncurses (default:disabled)
    subpackages
  - Removed macros (mkdir/install/perl)
  - Modified descriptions
  - Removed gtk/gnome2 build deps
  - Added conditionnal (default-disabled) build option for alsa
  - Added conditionnal builddep for pth-devel


author: Dams <anvil[AT]livna.org> 0:0.6.2-0.fdr.4
changelog:
  - Added missing defattr for subpackages
  - Fixed permissions on mozilla plugin
  - fixed build failure due to typos in ncurses changes
  - Removed useless explicit 'Requires:' in subpackages declarations


author: Ville Skyttä <ville.skytta at iki.fi> - 0:0.7.2-0.lvn.5
changelog:
  - Use system ffmpeg (>= 0.4.9), and make it, ALSA, and fribidi unconditional.
  - Build with theora by default.
  - Change default font to Vera serif bold.
  - Enable pvr support for Hauppauge card users (thanks to Gabriel L. Somlo).


author: Ville Skyttä <ville.skytta at iki.fi> - 0:0.7.2-0.lvn.6
changelog:
  - BuildRequire alsa-lib-devel, was lost in previous update (bug 258).
  - Add libcdio and libmodplug build dependencies.
  - Tweak descriptions, remove unnecessary conditional sections.
  - Disable dependency tracking to speed up the build.


author: Ville Skyttä <ville.skytta at iki.fi> 0:0.8.2-0.lvn.0.1.test2
changelog:
  - Update to 0.8.2-test2, rename to vlc, improve summaries and descriptions.
  - Enable many more modules, many small improvements and cleanups here and there
  - Use unversioned install dir for the Mozilla plugin, rename to mozilla-vlc.
  - Drop < FC3 compatiblity due to unavailability of required lib versions.
  - Fold wx and ncurses to the main package (upstream has retired the
    VLC Gnome and KDE UI's, so separate UI packages don't have a purpose
    any more).


author: Ville Skyttä <ville.skytta at iki.fi> - 0:0.8.2-0.lvn.4
changelog:
  - Fix "--without cddb" build when libcddb-devel is installed.
  - BuildRequire live-devel instead of live.


author: Thorsten Leemhuis <fedora[AT]leemhuis.info> - 0.8.4-0.lvn.1.a
changelog:
  - Update to 0.8.4a [with help from che (Rudolf Kastl)]
  - Fix x64
  - drop Epoch
  - drop vlc-0.8.2-test2-altivec.patch, seems they worked on this
  - use " --disable-libcdio" until we update to wxGTK2 2.6
  - use "--disable-livedotcom" on x86_64 (does not build)


author: Thorsten Leemhuis <fedora[AT]leemhuis.info> - 0.8.4-0.lvn.2.a
changelog:
  - add buildoption "--without mkv" -- ebml in FC3 is to old
  - add buildoption "--without svg" -- does not build with svg on FC3-x86-64


author: Ville Skyttä <ville.skytta at iki.fi> - 0.8.4a-1
changelog:
  - Apply upstream patch to fix linking with newer ffmpeg/postproc.
  - Drop no longer needed build conditionals and build dependencies.
  - Enable Avahi, Musepack, SLP and sysfs support, fix SDL and Xv.
  - Install icon to %{_datadir}/icons/hicolor.
  - Drop zero Epoch remainders.
  - Fix -devel obsoletes.
  - Specfile cleanups.


author: Dams <anvil[AT]livna.org> - 0.8.5-1
changelog:
  - Updated to 0.8.5
  - Fixed MOZVER value in case more than one mozilla is installed.
  - Dropped patches 1, 2 and 3


author: kwizart < kwizart at gmail.com > - 0.8.6-rc1.1.fc6
changelog:
  - Update to 8.6rc1
  - disable components in mozilla-vlc
  - disable libvlc_pic.a in devel
  - Enable x264-devel for static linking.


author: kwizart < kwizart at gmail.com > - 0.8.6-1.fc6
changelog:
  - Update to 8.6 final
  - Change deprecated livdotcom to live555
  - build shared librairies is default since 8.6
  - Enabled --enable-dvdread
  - Enabled --enable-faad
  - Enabled --enable-twolame
  -   waiting --enable-quicktime (problem finding xqtsdk )
  - Enabled --enable-real
  - Enabled --enable-realrtsp
  - Enabled --enable-tremor
  - Enabled --enable-tarkin
  -   waiting --enable-dirac (TODO libdirac-devel )
  - Enabled --enable-snapshot
  - Enabled --enable-portaudio
  - Enabled --enable-jack
  - Enabled --enable-galaktos
  -   waiting --enable-mediacontrol-python-bindings (default install error)
  -   waiting --enable-cddax (new version of libcdio 0.78.2)
  -   waiting --enable-vcdx (new version of libcdio 0.78.2)


author: kwizart < kwizart at gmail.com > - 0.8.6-2
changelog:
  with help from Rathan
  - Enabled --enable-shout
  - Enabled --enable-quicktime (x86 only !) 
  - Enabled --enable-loader (x86 only !)
  - Enabled --with-wine-sdk-path (x86 only !)
  - Enabled --enable-corba
  -  testing --enable-dirac (libdirac-devel reviewing in extra)
     http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=221405
  - Enabled --enable-mediacontrol-python-bindings
  - Cosmetic changes in BR


author: kwizart < kwizart at gmail.com > - 0.8.6-3
changelog:
  with help from Rathan
  - Update to 0.8.6a (security update!)
    from http://www.videolan.org/sa0701.html - #1342
  - Add version to desktop file
  - Fix dual shortcuts / Add MimeType


author: kwizart < kwizart at gmail.com > - 0.8.6-4
changelog:
  - Use BuildConflics with libcdio
  - Enabled --enable-cddax
  - Enabled --enable-vcdx
  -  waiting --enable-quicktime (build fails)


author: kwizart < kwizart at gmail.com > - 0.8.6-5
changelog:
  - Update to BR bugzilla infos.
  - Fix perms with python and debug headers.
  - Cleaned obsolete-not-provided


author: Ville Skyttä <ville.skytta at iki.fi> - 0.8.6a-1
changelog:
  - Build internal copy of ffmpeg with $RPM_OPT_FLAGS.
  - Don't hardcode path to firefox headers.
  - Drop Application and X-Livna categories from desktop entry.
  - Clean up some unneeded cruft from specfile.
  - Fix aclocal/automake calls during bootstrap.
  - Let rpmbuild strip MediaControl.so.


author: kwizart < kwizart at gmail.com > - 0.8.6a-2
changelog:
  - Update ffmpeg to 20070308
  - Enabled static build for internal ffmpeg (x264 vlc modules)
  - Fixed: some configure options has changed for ffmpeg


author: kwizart < kwizart at gmail.com > - 0.8.6a-3
changelog:
  - Recover patch3 from Ville Skyttä
  - Fix FLAC api change see
   http://bugzilla.livna.org/show_bug.cgi?id=1433


author: kwizart < kwizart at gmail.com > - 0.8.6a-3.1
changelog:
  - Fix firefox-devel detection when avaible both i386 and x86_64
    http://bugzilla.livna.org/show_bug.cgi?id=1442


author: kwizart < kwizart at gmail.com > - 0.8.6a-4
changelog:
  - Enable conditionnal build for
  	* mozilla-vlc, java-vlc, dirac
  	* ffmpeg and live static
  - Enable pth
  - Enable gnu_ld


author: kwizart < kwizart at gmail.com > - 0.8.6a-4.2
changelog:
  - Fix .desktop file
  - Disable broken libtool 
  - Quick fixes for svn/cache prepare
  - Patch format_c
  - Fix rpmlint error with python-vlc


author: kwizart < kwizart at gmail.com > - 0.8.6a-4.5
changelog:
  - Test dirac (disabled mozilla )
  - Test Updated static live555 to 2007.02.22
  - Clean up svn to release changes


author: kwizart < kwizart at gmail.com > - 0.8.6a-4.6
changelog:
  - Fix %{_libdir}/advene directory ownership from: #1458
  - Fix .py? presence and perm (644)
  - Remove .la after make install
  - Add --disable-pth (broken for release and svn)


author: kwizart < kwizart at gmail.com > - 0.8.6a-5
changelog:
  - Use system ffmpeg lib (pth and libtool seems to be incompatible with it)
  - Dirac seem to compile fine but testing usability for now.
  - Cache isn't usefull for now (and won't be since using system libs)
  - Exclude %{_bindir}/vlcwrapper.py? since this is the guideline about python for now.


author: kwizart < kwizart at gmail.com > - 0.8.6b-0.1
changelog:
  - Update to rc 0.8.6b (bugfix)
  - Hack configure.ac script (it didn't detect firefox headers)
  - Add BR libshout-devel
  - Add BR svgalib-devel
  - Add BR gtk2-devel
  - Add BR directfb-devel (wip)
  - Add BR libnotify-devel
  - Enabled --enable-speex
  - Testing --enable-portaudio not usefull (oss is deprecated)
  - Enabled --enable-pda
  - Testing --enable-directfb (wip)
  - Removed patch5 (was format.c)


author: kwizart < kwizart at gmail.com > - 0.8.6b-0.2
changelog:
  - Fix svgalib-devel only for x86 x86_64
  - Fix firefox-devel headers presence/usability. This remains:
   npapi.h: accepted by the compiler, rejected by the preprocessor!
   npapi.h: proceeding with the compiler's result


author: kwizart < kwizart at gmail.com > - 0.8.6b-0.3
changelog:
  - Fix BR for libsmbclient-devel for Fedora 7
  - Update to 0.8.6-bugfix-20070418
  - Add BR libraw1394-devel
  - Add BR libavc1394-devel


author: kwizart < kwizart at gmail.com > - 0.8.6b-1
changelog:
  - Update to Final 8.6b
  - Enable Dirac codec
  - Fix mozilla-vlc libXt.so loading 
    (removing mozilla-sdk since using firefox sdk >= 1.5)
  - Fix SeLinux context for dmo plugin. Was:
    https://bugzilla.livna.org/show_bug.cgi?id=1404
  - Enabled cddax only for x86_64 (broken type).


author: kwizart < kwizart at gmail.com > - 0.8.6b-1.1
changelog:
  - Add missing BR libtiff-devel
  - Fix Selinux buglet when Selinux is not activated
    was https://bugzilla.livna.org/show_bug.cgi?id=1484


author: kwizart < kwizart at gmail.com > - 0.8.6b-1.2
changelog:
  - Few improvements for svn version
  - Add missing BR ORBit2-devel and pyorbit-devel
  - Improved post preun postun section with help from Anvil.


author: kwizart < kwizart at gmail.com > - 0.8.6b-3.1
changelog:
  - Add BR libebml-devel
  - Add BR Glide3-devel
  - Add BR gnome-vfs2-devel
  - Add BR libxml2-devel
  - Fix BR faad2-devel < 2.5
  - Add rpmfusion BR libopendaap-devel
  - Add rpmfusion BR libgoom2-devel
  - Add rpmfusion BR libdc1394-devel
  - Exclude corba plugin (broken)
  - Add relatives %configure options
  - Comment Glide3 (don't work now - wip)


author: kwizart < kwizart at gmail.com > - 0.8.6b-4
changelog:
  - Disabled pth (broken) and...
  - Build ffmpeg static (since shared ffmpeg is pth enabled).
  - Add post & postun update-desktop-database
  - Update static ffmpeg to 20070503 (same as shared version)


author: kwizart < kwizart at gmail.com > - 0.8.6b-5.3
changelog:
  - Uses only -fPIC to prevent Selinux context problems...
  - Uses compat-wxGTK26-devel on Fedora 7
  - Leave libcorba for now...
    (libquicktime_plugin seems also broken - confirmed by upstream)
  - Change static_live555 to internal_live555.
    needed for testing - uses live-devel for livna releases.


author: kwizart < kwizart at gmail.com > - 0.8.6c-0.1
changelog:
  - Update to 0.8.6c (bugfix) 20060616
  - Drop FLAC, automake110, wxGTK for 2.8, faad2
  - Uses shared ffmpeg.


author: kwizart < kwizart at gmail.com > - 0.8.6c-3
changelog:
  - Switch for python-vlc
  - Add bugfix patch pre_d
  - Fix version field for desktop file.
  - Fix ivtv support with updated patch for new videodev2.h
  - Clean old Obsoletes/Provides for name 8.1
  - Rebuild with firefox-devel 2.0.0.5
  - Patch/rebuild with libcdio 0.78.2
  - Add mesa's BR
  - Add BR libXvMC-devel for svn


author: kwizart < kwizart at gmail.com > - 0.8.6c-3.1
changelog:
  - Fix libtool with shared libs when python-vlc is used
    http://bugzilla.livna.org/show_bug.cgi?id=1590
  - Fix desktop file to be GNOME HIG compliant
    http://bugzilla.livna.org/show_bug.cgi?id=1591


author: kwizart < kwizart at gmail.com > - 0.8.6c-3.2
changelog:
  - clean-up with svn
  - patch smb.c for call_open (from rdieter advice)
  - Update license field to GPLv2


author: kwizart < kwizart at gmail.com > - 0.8.6c-4
changelog:
  - Change default font to dejavu-lgc/DejaVuLGCSerif.ttf
    http://bugzilla.livna.org/show_bug.cgi?id=1605
  - Remove unneeded fonts provided by skins2


author: kwizart < kwizart at gmail.com > - 0.8.6c-5
changelog:
  - Prepare svn version
  - Drop the python switch default
  - Add BR directfb-devel 
  - Improve timestamp
  - Allow faad2 to be 2.5 (license change is known GPL compatible).


author: kwizart < kwizart at gmail.com > - 0.8.6d-3.1
changelog:
  - Remove BR portaudio arts
  - Move skins2 to main vlc package
  - Enable libopendaap (included within Fedora)


author: kwizart < kwizart at gmail.com > - 0.8.6d-4
changelog:
  - Patches from Jens Petersen <juhpetersen at gmail.com>
  - Add wxGTK28 wip patch
  - Conditionalize directfb and dirac 
  - Change the default font to DejaVuSerif.ttf (dejavu-fonts)
  - Add BR missing libmpeg4v2


author: kwizart < kwizart at gmail.com > - 0.8.6e-0.2
changelog:
  - Update to svn20080221 from bugfix (pre 0.8.6e)
  - Updated merged pulseaudio patch
  - Raise PA to be used by default.


author: kwizart < kwizart at gmail.com > - 0.8.6e-1
changelog:
  - Update to 0.8.6e (Final)
  Security updates:
   * Subtitle demuxers overflow (CVE-2007-6681)
   * HTTP listener format string injection (CVE-2007-6682)
   * Fixed buffer overflow in the SDL_image library (CVE-2006-4484)
   * Real RTSP overflows (CVE-2008-0225, CVE-2008-0295,
     CVE-2008-0296, VideoLAN-SA-0801)
   * Arbitrary memory overwrite in the MP4 demuxer (CORE-2008-0130,
     VideoLAN-SA-0802)


author: kwizart < kwizart at gmail.com > - 0.8.6f-1
changelog:
  - Update to 0.8.6f (Final)
  Security updates:
   * Really fixed subtitle buffer overflow (CVE-2007-6681)
   * Fixed Real RTSP code execution problem (CVE-2008-0073)
   * Fixed MP4 integer overflows (CVE-2008-1489)
   * Fixed cinepak integer overflow
  Various bugfixes:
   * Fixed crashes in H264 packetizer
   * Close MMS access on network timeout
   * Fix some problems with AAC decoder & packetizer
  - Remove java-vlc (will be built externally)
  - Add clinkcc conditional/experimental support.


author: kwizart < kwizart at gmail.com > - 0.8.6f-3
changelog:
  - Bugfixes patches for post f version
  - Add vlvc 0.8 plugin support
  - Add textrel fix from gentoo patch
  - Improve libxul patch


author: kwizart < kwizart at gmail.com > - 0.8.6g-1
changelog:
  - Update to 0.8.6g
  Security updates:
   * Removed VLC variable settings from Mozilla and ActiveX (CVE-2007-6683)
   * Removed loading plugins from the current directory (CVE-2008-2147)

  Various bugfixes:
   * Fixed various memory leaks, improving stability when running as a server
   * Fixed compilation with recent versions of FFmpeg
   * Correctly parses SAP announcements from MPEG-TS
   * Fixed AAC resampling
   * The Fullscreen Controller appears correctly on Mac OS X,
     if the 'Always-on-top' video option was selected.


author: kwizart < kwizart at gmail.com > - 0.8.6h-1
changelog:
  - Update to 0.8.6h
  - Use hicolor icons
  - Add patch for new_x-content
    http://bugzilla.livna.org/show_bug.cgi?id=2003
  - Fix VLC: HTTP access: cannot seek AVI
    http://bugzilla.livna.org/show_bug.cgi?id=2014


author: kwizart < kwizart at gmail.com > - 0.9.0-0.3.20080703git
changelog:
  - Update to 0.9.0-20080703git
    http://mailman.videolan.org/pipermail/vlc-devel/2008-July/045911.html
  - Conditionalize xvmc to exclude ppc


author: kwizart < kwizart at gmail.com > - 0.9.5-1
changelog:
  - Update to 0.9.5
  - Use non-default rpmbuild options for dirac kate lua
  - Split core/nox (nox bundles directfb/svgalib)
  - Fix Selinux denials (patches from gentoo).
  - Fix spurious perms on qt4 sources.


author: kwizart < kwizart at gmail.com > - 0.9.8a-1
changelog:
  - Update to 0.9.8a
  Security update:
   * Fixed buffer overflow in Real demuxer (SA-0811, CVE-2008-5276)
  - Add pulse0071 Patch
  - Fix RPM Fusion bugs:
    https://bugzilla.rpmfusion.org/show_bug.cgi?id=201
    https://bugzilla.rpmfusion.org/show_bug.cgi?id=155


author: kwizart < kwizart at gmail.com > - 0.9.8a-3
changelog:
  - Add libxul 1.9.1 preliminary support
  - backport postproc fixes
  - Add pending 0.9-bugfix git branch
  - Add lua support by default


author: kwizart < kwizart at gmail.com > - 1.0.0-0.1pre1
changelog:
  - Update to 1.0.0-pre1
  - Add mozilla plugin with xulrunner-1.9.1. Patch from Alexey Gladkov
  - Disable xxmc


author: kwizart < kwizart at gmail.com > - 1.0.0-0.7rc2
changelog:
  - Update to 1.0.0-rc2
  - Rebase xulrunner patch for -rc2
  - Add GConf2 support for url-handler (based on totem)


author: kwizart < kwizart at gmail.com > - 1.0.0-0.10rc2
changelog:
  - Move some module to avoid dependency
  - Remove previous signal-slot connection(s) if any - vlc trac #2818


author: kwizart < kwizart at gmail.com > - 1.0.0-0.14rc4
changelog:
  - Cherry pick from 1.0-bugfix
  - Move xcb modules into main
  - Move -devel Requirement from main to -core (Mutlilib fix)


author: kwizart < kwizart at gmail.com > - 1.0.1-1
changelog:
  - Update to 1.0.1 (Final)
  - Improve conditionals
  - Backport zip qt4 from 1.0-bugfix
  - More %_isa requirement


author: Nicolas Chauvet <kwizart@gmail.com> - 1.1.4-1
changelog:
  - Update to 1.1.4
  - Fix libnotify build on f14
  - Obsoletes ffmpeg4vlc
  - Raise selinux requirements that fix rhbz#591854


author: Nicolas Chauvet <kwizart@gmail.com> - 1.1.4-2
changelog:
  - Adds support for vlc-cache-gen
  - Drop support for vlc-handlers.schemas
    (will be handled in .desktop file)


author: Nicolas Chauvet <kwizart@gmail.com> - 1.1.4-6
changelog:
  - Disable notify by f15 - deprecated upstream
  - Fix libProjectM crash once selected.
  - Fix default CA file for gnutls module.
  - xosd not built by default - deprecated upstream


author: Nicolas Chauvet <kwizart@gmail.com> - 1.1.5-1
changelog:
  - Update to 1.1.5
  - Rename nox subpackage to extras
  - Move opencv modules to extras
  - Move libnotify module to extras until f15


author: Nicolas Chauvet <kwizart@gmail.com> - 1.2.0-0.2_pre2
changelog:
  - Update to 1.2.0-pre2
  - Reverse build conditional to --without freeworld
    So it can be tested with Fedora only (patches welcomed)
  - Disable xcb globalhotkeys in Rawhide/F-17


author: Nicolas Chauvet <kwizart@gmail.com> - 2.0.5-6
changelog:
  - Move %{_datadir}/vlc/lua/http/.hosts to hosts-sample to avoid
    config file - https://bugzilla.rpmfusion.org/2726


author: Nicolas Chauvet <kwizart@gmail.com> - 3.0.0-0.14
changelog:
  - Update to 20170109
  - Disable wayland for now - rhbz#4380
  - Move libvlc pulse,vdpau,xcb from -core to main


author: Nicolas Chauvet <kwizart@gmail.com> - 3.0.0-0.15
changelog:
  - Fix lirc activation - rhbz#4420
  - Revert upstream commit 785b0f18d7 for wayland detection - rfbz#4380


author: Nicolas Chauvet <kwizart@gmail.com> - 3.0.0-0.17
changelog:
  - Update to 20170220 snapshot
  - Clean merged patch, unrevert wayland runtime detection
  - Switch source url on purpose


author: Nicolas Chauvet <kwizart@gmail.com> - 3.0.0-0.46.git20171221.rc2
changelog:
  - Update to 20171221
  - Drop pre-version
  - Set defaults fonts
  - Enable gstreamer on %{arm} and aarch64
  - Drop wayland patch


author: Nicolas Chauvet <kwizart@gmail.com> - 3.0.5-1
changelog:
  - Update to 3.0.5 snapshot from today
  - Enable aom support
  - Workaound a bug with vlc-cache-gen on armhfp


author: Nicolas Chauvet <kwizart@gmail.com> - 1:3.0.9-36
changelog:
  - Lower libopus requirement for el7 - rfbz#5585
  - Add patch to build with libdvdread/libdvdnav for rhel


author: Jiri Kucera <jkucera@redhat.com> - 0.3.11-4
changelog:
  - fixed License
  - Requires: /usr/bin/gpg2 in libs subpackage
  - Added support for opening all types of LUKS devices
    Resolves: #1626974


author: - Bastien Nocera <bnocera@redhat.com> - 1.1.1.svn20070412-1.fc7
changelog:
  - Upgrade to a current SVN snapshot of vorbis-tools to get our FLAC support
    back, after the recent libFLAC upgrade (#229124)
  - Remove obsolete UTF8 and Curl mute patches


author: Christopher Aillon <caillon@redhat.com> 1:1.1.1.svn20070412-2.fc7
changelog:
  - Bring back support for http URLs which was broken with the previous update
    See https://bugzilla.redhat.com/240351


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.0-1
changelog:
  - update to 1.2.0
  - remove libcurl and oggdec patches, applied upstream
  - drop unneeded autoconf BR
  - fix BuildRoot


author: Hans de Goede <j.w.r.degoede@hhs.n> - 1:1.2.0-2
changelog:
  - Stop calling autoconf, this was no longer necessarry and in current
    rawhide breaks us from building (because aclocal.m4 does not match
    the new autoconf version)
  - Drop our last 2 patches, they were modifying configure, but since we called
    autoconf after that in effect they were not doing anything, review has
    confirmed that they indeed are no longer needed)
  - Drop using system libtool hack, this is dangerous when the libtool used
    to generate ./configure and the one used differ
  - Remove various antique checks (for example check if RPM_BUILD_ROOT == /) 
  - Drop unnecessary explicit library Requires
  - Cleanup BuildRequires


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-32
changelog:
  - Removed a hint about the ftp_home_dir SELinux boolean from the config file
  - Resolves: rhbz#1623424


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-34
changelog:
  - Enable support for wide-character strings in logs
  - Replace unprintables with HEX code, not question marks
  - Resolves: rhbz#1947900


author: Weisson <Weisson@linux.alibaba.com> - 0.52.4-2.0.2
changelog:
  - Fix build with vala 0.43+ git master due to empty struct definition.
  Resolves: https://gitlab.gnome.org/GNOME/vte/-/issues/76


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.30.2-2
changelog:
  - Try to fix coverity build by disabling docs (thanks to Kamil Dudka <kdudka@redhat.com>!)
  - Related: #1883304


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.36.1-1
changelog:
  - Update to 2.36.1
    Related: #2061994
  - Resolves: #2075492
  - Resolves: #2075494
  - Resolves: #2075496


author: maqi <maqi@uniontech.com> - 2.38.5-1.0.1.4
changelog:
  - Add patch: 0001-Resolved-EGL_WAYLAND_BUFFER_WL-undefined.patch
  - fix: delete empty link(bugid:123783)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - upgraded to 1.5.0
  - they removed the man page from the distribution (Duh!) and I added it back
    from 1.4.5. Hey, removing the man page is DUMB!


author: Bill Nottingham <notting@redhat.com>
changelog:
  - setlocale for LC_CTYPE too, or else all the translations think their
    characters are unprintable.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 1.7
  - Require perl for building (to get man pages)
  - Don't include the Japanese po file, it's now included
  - Use %{_tmppath}
  - no patches necessary
  - Make /etc/wgetrc noreplace
  - More docs


author: Karsten Hopp <karsten@redhat.de> 1.9.1-7
changelog:
  - clean up manpage (#117519)
  - buildrequire texinfo (#123780)
  - LFS patch, based on wget-LFS-20040630.patch from Leonid Petrov
    (#123524, #124628, #115348)


author: Karsten Hopp <karsten@redhat.de> 1.9.1-18
changelog:
  - add support for --protocol-directories option as documented
    in the man page (Ville Skyttä, #145571)


author: Karsten Hopp <karsten@redhat.de> 1.9.1-19
changelog:
  - Don't set actime to access time of the remote file or tmpwatch might 
    remove the file again (#146440).  Set it to the current time instead.
    timestamping checks only modtime, so this should be ok.


author: Karsten Hopp <karsten@redhat.de> 1.9.1-20
changelog:
  - texi2pod doesn't handle texinfo xref's. rewrite some lines so that
    the man page doesn't have incomplete sentences anymore (#140470)


author: Karsten Hopp <karsten@redhat.de> 1.10-2
changelog:
  - update to wget-1.10
    - drop passive-ftp patch, already in 1.10
    - drop CVS patch
    - drop LFS patch, similar fix in 1.10
    - drop protdir patch, similar fix in 1.10
    - drop actime patch, already in 1.10


author: Karsten Hopp <karsten@redhat.com> 1.10.2-13
changelog:
  - merge review changes (#226538)
    - use version/release/... in buildroot tag
    - remove BR perl
    - use SMP flags
    - use make install instead of %makeinstall
    - include copy of license
    - use Requires(post)/Requires(preun)
    - use optflags
    - remove trailing dot from summary
    - change tabs to spaces


author: Karsten Hopp <karsten@redhat.com> 1.10.2-15
changelog:
  - fix discarding of expired cookies
  - escape non-printable characters
  - drop to11 patch for now (#223754, #227853, #227498)


author: Karsten Hopp <karsten@redhat.com> 1.11.3-1
changelog:
  - wget-1.11.3, downgrades the combination of the -N and -O options
    to a warning instead of an error


author: Karsten Hopp <karsten@redhat.com> 1.12-1
changelog:
  - update to wget-1.12
  - fixes CVE-2009-3490 wget: incorrect verification of SSL certificate
    with NUL in name


author: Jon Ciesla <limburgher@gmail.com> - 1.13.4-1
changelog:
  - New upstream, BZ 730286.
  - Modified path patch.
  - subjectAltNames patch upstreamed.
  - Specified openssl at config time.


author: Tomas Hozza <thozza@redhat.com> 1.14-3
changelog:
  - Added libuuid-devel to BuildRequires to use libuuid functions
    in "src/warc.c" functions (#865421)


author: Tomas Hozza <thozza@redhat.com> - 1.14-5
changelog:
  - Added BuildRequires: perl-podlators for pod2man
  - Patched manpage to silent new Tex errors
  - Resolves: (#914571)


author: Tomas Hozza <thozza@redhat.com> - 1.14-6
changelog:
  - add missing options accept-regex and reject-regex to man page
  - fix errors in texi2pod introduced in Perl-5.18


author: Tomas Hozza <thozza@redhat.com> - 1.14-8
changelog:
  - Fix deadcode and possible use of NULL in vprintf (#913153)
  - Add documentation for --regex-type and --preserve-permissions
  - Fix --preserve-permissions to work as documented (and expected)
  - Fix bug when authenticating using user:password@url syntax (#912358)
  - Document and fix --backups option


author: Tomas Hozza <thozza@redhat.com> - 1.17-1
changelog:
  - Updated to 1.17 + added some additional upstream fixes
  - Fixed hardening of wget executable (#1281829)


author: Tomas Hozza <thozza@redhat.com> - 1.19.4-1
changelog:
  - Update to the latest upstream version
  - Fix issue with decompressing with broken web servers (#1532233)


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-7
changelog:
  - Resolves: #1642919 - CVE-2018-12086, CVE-2018-18225, CVE-2018-18226, CVE-2018-18227
  - Resolves: #1656342 - CVE-2018-19623
  - Resolves: #1657634 - CVE-2018-19625
  - Resolves: #1657211 - CVE-2018-19626
  - Resolves: #1657184 - CVE-2018-19627
  - Resolves: #1657190 - CVE-2018-19628
  - fixes CVE-2018-19622, CVE-2018-19624


author: maqi <maqi@uniontech.com> - 1:2.6.2-14.3
changelog:
  - cve: CVE-2019-10894 CVE-2019-10896 CVE-2019-10899 
  - cve: CVE-2019-10901 CVE-2019-10903 CVE-2020-7045
  - cve: CVE-2019-12295 CVE-2019-13619 CVE-2019-9209 
  - cve: CVE-2020-26575 CVE-2020-9431  CVE-2020-11647
  - cve: CVE-2020-25862 CVE-2020-25863 CVE-2020-9428
  - rebuild: rebuild for c8.5


author: Radek Vokál <rvokal@redhat.com> 0.99.3-1
changelog:
  - upgrade to 0.99.3
  - Wireshark 0.99.3 fixes the following vulnerabilities:
  - the SCSI dissector could crash. Versions affected: CVE-2006-4330
  - the IPsec ESP preference parser was susceptible to off-by-one errors. CVE-2006-4331
  - a malformed packet could make the Q.2931 dissector use up available memory. CVE-2006-4333


author: Radek Vokál <rvokal@redhat.com> 0.99.5-1
changelog:
  - multiple security issues fixed (#227140)
  - CVE-2007-0459 - The TCP dissector could hang or crash while reassembling HTTP packets
  - CVE-2007-0459 - The HTTP dissector could crash.
  - CVE-2007-0457 - On some systems, the IEEE 802.11 dissector could crash.
  - CVE-2007-0456 - On some systems, the LLT dissector could crash.


author: Radek Vokal <rvokal@redhat.com> 0.99.7-0.pre2
changelog:
  - switch to libsmi from net-snmp
  - disable ADNS due to its lack of Ipv6 support
  - 0.99.7 prerelease 2


author: Radek Vokál <rvokal@redhat.com> 1.0.3-1
changelog:
  - upgrade to 1.0.3
  - Security-related bugs in the NCP dissector, zlib compression code, and Tektronix .rf5 file parser have been fixed.
  - WPA group key decryption is now supported.
  - A bug that could cause packets to be wrongly dissected as "Redback Lawful Intercept" has been fixed.


author: Radek Vokal <rvokal@redhat.com> - 1.2.5-1
changelog:
  - upgrade to 1.2.5
  - fixes security vulnaribilities, see https://www.wireshark.org/security/wnpa-sec-2009-09.html


author: Jeff Layton <jlayton@redhat.com> - 1.2.6-2
changelog:
  - add patch to allow decode of NFSv4.0 callback channel
  - add patch to allow decode of more SMB FIND_FILE infolevels


author: Jan Safranek <jsafrane@redhat.com> - 1.4.1-1
changelog:
  - upgrade to 1.4.1
  - see https://www.wireshark.org/docs/relnotes/wireshark-1.4.1.html
  - Own the %{_libdir}/wireshark dir (#644508)
  - associate *.pcap files with wireshark (#641163)


author: Jan Safranek <jsafrane@redhat.com> - 1.4.1-2
changelog:
  - temporarily disable zlib until
    https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4955 is resolved (#643461)


author: Jan Safranek <jsafrane@redhat.com> - 1.4.2-2
changelog:
  - rework the Wireshark security (#657490). Remove the console helper and
    allow only members of new 'wireshark' group to capture the packets.


