# changelog

author: Vratislav Podzimek <vpodzime@redhat.com> - 0.11-1
changelog:
  - Fix issues with using overriden functions over ErrorProxy (vpodzime)
  - Update the roadmap.rst and features.rst with new stuff (vpodzime)
  - Fix two minor issues with docs generation (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.12-1
changelog:
  - Require minimum version of libblockdev-utils in some plugins (vpodzime)
  - Report both stdout and stderr if exit code != 0 (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.13-1
changelog:
  - Prevent a leaky test from running in Jenkins (vpodzime)
  - Try harder when cleaning up after MD RAID tests (vpodzime)
  - Improve the MD RAID activate/deactivate test (vpodzime)
  - One more @contextmanager that needs try-finally (vpodzime)
  - Do not require metadata version to be reported by 'mdadm --examine' (#1217900) (vpodzime)
  - Make sure we always set things back in context managers (vpodzime)
  - Make the release date for version 1.0 more realistic (vpodzime)
  - Merge pull request #11 from vpodzime/master (vpodzime)
  - Run utilities with LC_ALL=C (vpodzime) (#1219033)
  - Free GMatchInfo instance even in case of no match (vpodzime)
  - Resolve /dev/md/ symlinks when checking swap status. (dlehman)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.0-1
changelog:
  - Adapt the release helper targets to autotools (vpodzime)
  - Fixes of paths in Makefile.am's inspired by build failures on s390 (vpodzime)
  - Add an s390-specific BuildRequires (vpodzime)
  - Distribute also the boilerplate_generator.py script (vpodzime)
  - Fix path to the generated blockdev.pc file (vpodzime)
  - Adapt tests that compile stuff to autotools (vpodzime)
  - Merge pull request #18 from vpodzime/master-autotools (vpodzime)
  - Merge pull request #20 from dashea/gtkdoc-sections (vpodzime)
  - Use the autotools building system instead of scons (vpodzime)
  - Add the two new functions to the 'blockdev' docs section (vpodzime)
  - Fix the line defining the docs file for the s390 section (vpodzime)
  - Add a missing #include to the kbd.api file (vpodzime)
  - Prevent s390-specific stuff from being used on other architectures (vpodzime)
  - Update the documentation of the is_initialized() function (vpodzime)
  - Merge pull request #19 from vpodzime/master-ensure_init (vpodzime)
  - Remove private macros from the gtkdoc sections file. (dshea)
  - Terminate ifdef statements for arch check. (sbueno+anaconda)
  - Return early from the init functions if setting up logging fails (vpodzime)
  - Add tests for the new and modified init functions (vpodzime)
  - Add new try_init() and try_reinit() functions (vpodzime)
  - Fix for adding number of loaded plugins (vpodzime)
  - Fix for ensure_init() (vpodzime)
  - Rename the try_init() function to ensure_init() and improve it (vpodzime)
  - Check number of loaded plugins and library initialization state (vpodzime)
  - Make 'reload' default to True instead of False in overrides (vpodzime)
  - Add the s390 plugin test file. (sbueno+anaconda)
  - Add the s390 plugin functions. (sbueno+anaconda)
  - Add the s390 plugin. (sbueno+anaconda)
  - Fix a typo in the spec file. (sbueno+anaconda)
  - Require the kmod-devel package for the build process (vpodzime)
  - Merge pull request #16 from dashea/escrow-encoding (vpodzime)
  - Merge pull request #13 from vpodzime/master-lvm_cache (vpodzime)
  - Merge pull request #12 from vpodzime/master-kbd_plugin (vpodzime)
  - Merge pull request #14 from vpodzime/master-better_is_multipath (vpodzime)
  - Use g_strdup() instead of g_strdup_printf() to just dup a string (vpodzime)
  - Fix the spelling of "escrow" (dshea)
  - Make the crypto plugin string parameters const (dshea)
  - Set encoding to NULL before writing the escrow packet. (dshea)
  - Get cache stats directly from the device mapper (vpodzime)
  - Reimplement the is_mpath_member() function using device mapper (vpodzime)
  - Add the LVM cache related symbols to the LVM section in the documentation (vpodzime)
  - Update the list of LVM cache related functions in features.rst (vpodzime)
  - Add tests for functions related to the LVM cache technology (vpodzime)
  - Implement the lvm_cache_stats() function (vpodzime)
  - Implement the lvm_cache_pool_name function (vpodzime)
  - Implement the lvm_cache_create_cached_lv() function (vpodzime)
  - Implement lvm_cache_attach/detach() functions (vpodzime)
  - Implement the lvm_cache_create_pool() function plus two support functions (vpodzime)
  - Implement the lvm_cache_get_default_md_size() function (vpodzime)
  - Add the 'type' parameter to the lvm_lvcreate function (vpodzime)
  - Teach boilerplate_generator to work with enum return types (vpodzime)
  - Teach boilerplate_generator to work with 'const' return types (vpodzime)
  - Add subpackages for the KBD plugin and its devel files (vpodzime)
  - Add provided symbols to the documentation section of the KBD plugin (vpodzime)
  - Implement the bcache_get_backing/cache_device functions (vpodzime)
  - Exclude bcache tests from the normal 'test' target (vpodzime)
  - Add some more and prolong some of the waits in KBD tests (vpodzime)
  - Zero all newly allocated structures (vpodzime)
  - Implement the bcache_status function and all it wants (vpodzime)
  - Fix for the zram stats (vpodzime)
  - Add bcache_get_mode and bcache_set_mode functions (vpodzime)
  - Teach boilerplate_generator to work with enum return types (vpodzime)
  - Teach boilerplate_generator to work with 'const' return types (vpodzime)
  - Add the zram_get_stats function (vpodzime)
  - Add the check() function for the KBD plugin (vpodzime)
  - Add ErrorProxy instance for the KBD plugin (vpodzime)
  - Add tests for bcache_create/attach/detach/destroy functions (vpodzime)
  - Add the 'rebuild' Makefile target (vpodzime)
  - Add bcache_create, bcache_attach, bcache_detach and bcache_destroy functions (vpodzime)
  - Implement a helper function to echo string into a file (vpodzime)
  - Add tests for zram_create_devices and zram_destroy_devices functions (vpodzime)
  - Add the zram_destroy_devices function to the KBD plugin (vpodzime)
  - Add first function to the KBD plugin: zram_create_devices (vpodzime)
  - Add the KernelBlockDevices plugin (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.1-1
changelog:
  - Clean generated boilerplate code on 'make clean' (vpodzime)
  - Merge pull request #31 from atodorov/use_lang_c (vpodzime)
  - tests: use LANG=C in test_backup_passphrase() (atodorov)
  - Merge pull request #30 from atodorov/makefile_updates (vpodzime)
  - Makefile.am:   - add separate check target   - add coverage targets   - make it possible to test with Python3 (atodorov)
  - Merge pull request #29 from atodorov/fix_issue_28 (vpodzime)
  - Merge pull request #27 from atodorov/fix_docs_url (vpodzime)
  - Merge pull request #26 from atodorov/test_docs (vpodzime)
  - Change the modified sources back in tearDown() method as well. Closes #28. (atodorov)
  - update URL to on-line documentation (atodorov)
  - add test documentation (atodorov)
  - Merge pull request #22 from dashea/escrow-tests (vpodzime)
  - Merge pull request #25 from dashea/python-dep (vpodzime)
  - Filter the python files from automatic rpm requires (dshea)
  - Added tests for escrow packets and backup passphrases (dshea)
  - Free leaked contexts from crypto_init (dshea)
  - Cooperate with volume_key's memory management (dshea)
  - Fix inheritance in the LVM tests to prevent multiple runs of some tests (vpodzime)
  - Make the regexp for testing crypto_generate_backup_passphrase() stricter (vpodzime)
  - Leave room in the backup passphrase for a trailing 0 (dshea)
  - Add functions to get names of data/metadata internal LVs (vpodzime)
  - Allow getting info for an internal LV (vpodzime)
  - Gather information about all LVs (vpodzime)
  - Round requested size to KBs in lvresize() (#1221247) (vpodzime)
  - Add overrides for the ensure_init() function (vpodzime)
  - Change the default value of the 'reload' parameter of try_reinit() (vpodzime)
  - Merge pull request #21 from vpodzime/master-thpool_size_discard (vpodzime)
  - Add overrides for the lvm_is_valid_thpool_chunk_size() function (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.2-1
changelog:
  - Merge pull request #40 from vpodzime/master-config_support (vpodzime)
  - Add tests for configuration support (vpodzime)
  - Add a function for getting the loaded soname for a plugin (vpodzime)
  - Add the default configuration (vpodzime)
  - Load and respect configuration files when loading plugins (vpodzime)
  - Add functions for finding and processing configuration files (vpodzime)
  - Merge pull request #38 from vpodzime/master-md_superblock_size (vpodzime)
  - Better document how MD RAID superblock size should be calculated (vpodzime)
  - Merge pull request #36 from phatina/master (vpodzime)
  - BTRFS: allow an arbitrary label to be set for a btrfs volume (phatina)
  - Merge pull request #32 from phatina/master (vpodzime)
  - BTRFS: fix parsing empty partition label (phatina)
  - Merge pull request #35 from vpodzime/master (vpodzime)
  - Define env variables for sudo via the env utility (vpodzime)
  - Merge pull request #34 from dashea/python3-tests (vpodzime)
  - Use unittest.addCleanup to simplify crypto_test. (dshea)
  - Run tests with both python2 and python3 in the ci target. (dshea)
  - Fix python3 issues in the unittests. (dshea)
  - Do not run all tests in the 'ci' target (vpodzime)
  - Merge pull request #33 from clumens/master (vpodzime)
  - Add a new makefile target that does everything needed for jenkins. (clumens)
  - Synchronize the .spec file with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.3-1
changelog:
  - Add missing python GI requires (vpodzime)
  - Merge pull request #49 from dashea/libblockdev-python (vpodzime)
  - Merge pull request #50 from vpodzime/master-fix_striped_lv (vpodzime)
  - Merge pull request #46 from vpodzime/master-bcache_destroy (vpodzime)
  - Merge pull request #39 from vpodzime/master-lvm_physical_space (vpodzime)
  - Add a missing ldconfig that rpmlint found. (dshea)
  - Move python files to separate packages (#1256758) (dshea)
  - Fix lvcreate calls for striped LVs (vpodzime)
  - Merge pull request #48 from vojtechtrefny/master_pvfree (vpodzime)
  - Add pv_free to BDLVMPVdata (vtrefny)
  - Merge pull request #47 from atodorov/add_coverage_report (vpodzime)
  - Produce coverage report in CI (atodorov)
  - Check bcache device's state before trying to detach the cache in destroy() (vpodzime)
  - Fix URLs in the spec (vpodzime)
  - Fix the int-float less-than comparison (vpodzime)
  - Fix the calculation of physical space taken by an LV (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.4-1
changelog:
  - Merge pull request #62 from vpodzime/master-clean_up (vpodzime)
  - Use addCleanup() instead of tearDown() in tests (vpodzime)
  - Merge pull request #58 from vpodzime/master-lvm_dbus_pr (vpodzime)
  - Add the VG renaming functionality (vpodzime)
  - Packaging of the lvm-dbus plugin (vpodzime)
  - The LVM DBus plugin (vpodzime)
  - Add more generic functions for logging (vpodzime)
  - Use MAX(a, b) instead of CLAMP(b, a, b) (vpodzime)
  - Merge pull request #59 from vpodzime/master-vgrename (vpodzime)
  - Add a function for renaming VGs (vpodzime)
  - Merge pull request #57 from clumens/master (vpodzime)
  - Fix error reporting when running "make test". (clumens)
  - Merge pull request #54 from vojtechtrefny/master-pvsize (vpodzime)
  - Do not try to create a PV with 4KiB metadata space (vpodzime)
  - Add pv_info to BDLVMPVdata (vtrefny)
  - btrfs now requires at least 128MiB device(s) (vpodzime)
  - Merge pull request #52 from vpodzime/master (vpodzime)
  - Round size in thpoolcreate() to KiB (vpodzime)
  - Sync the %changelog in spec with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.4-5
changelog:
  - Search for the LVM DBus service in activatable names (vpodzime)
  - Better check for the LVM DBus API (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.5-1
changelog:
  - Merge pull request #72 from vpodzime/master-faster_tests (vpodzime)
  - Ignore all .bak files (vpodzime)
  - Use python3-pylint and skip Python 2 tests (vpodzime)
  - Try a bit harder when deactivating MD arrays in tests (vpodzime)
  - Recompile only the LVM plugin in tests (vpodzime)
  - Merge pull request #65 from vpodzime/master-loc_indep_error (vpodzime)
  - Merge pull request #70 from vojtechtrefny/master-chunk_size (vpodzime)
  - Add bd_md_create_with_chunk_size() function (vtrefny)
  - Merge pull request #68 from vpodzime/master-no_intro_data (vpodzime)
  - Merge pull request #71 from vpodzime/master-ipython3 (vpodzime)
  - Run coverage with the right config directories (vpodzime)
  - Merge pull request #67 from phatina/master (vpodzime)
  - Merge pull request #69 from vpodzime/master-lvm_dbus_autostart (vpodzime)
  - Use ipython3 for debugging and testing sessions (vpodzime)
  - Don't expect to always get introspection data from DBus (vpodzime)
  - Make invocation of tests configurable (phatina)
  - Make error messages locale agnostic (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.6-1
changelog:
  - Ignore merge commits when creating changelog (vpodzime)
  - Only take the number of the first %changelog line found (vpodzime)
  - Add some more detailed description to the part plugin (vpodzime)
  - Fix a few extra issues with the const types (vpodzime)
  - Add function for getting best free region (vpodzime)
  - Add function for getting free regions (vpodzime)
  - Fix the error message when setting part flag fails (vpodzime)
  - Add function for setting disk flags (vpodzime)
  - Add function for getting information about disk(s) (vpodzime)
  - Do not set nonsense partition paths (vpodzime)
  - Add function for getting partition by position (vpodzime)
  - Indicate if there was error from parted or not in set_parted_error() (vpodzime)
  - Minor fixes for the bd_part_get_part_spec() function (vpodzime)
  - Add support for extra GPT flags (vpodzime)
  - Add functionality for partition types (GUIDs) (vpodzime)
  - Add functionality for partition names (vpodzime)
  - Do not destroy disk objects we didn't get (vpodzime)
  - Add a function for setting multiple partition flags at once (vpodzime)
  - Remove the unused definition USE_PYTHON3 from configure.ac (vpodzime)
  - Use different BTRFS_MIN_MEMBER_SIZE on aarch64 (vpodzime)
  - Better release memory from parted objects on failures (vpodzime)
  - Rework how we do optimal alignment (vpodzime)
  - Do not try to destroy object we didn't get (vpodzime)
  - Don't pass sizes in bytes to LVM (#1317373) (vpodzime)
  - Add the libbytesize-devel build requires (vpodzime)
  - Search for the LVM DBus service in both active and activatable names (vpodzime)
  - Adapt to another stupid change in btrfs-progs (vpodzime)
  - Add the XFS-related functions to the documentation (vpodzime)
  - Add tests for the XFS-related functions (vpodzime)
  - Add support for the XFS file system to the FS plugin (vpodzime)
  - Add chunk_size to BDMDExamineData (vtrefny)
  - Add the subpackage for the FS plugin (vpodzime)
  - Add the FS plugin to the docs (vpodzime)
  - Add tests for the ext4 functionality in the fs plugin (vpodzime)
  - Add the FS plugin and the ext4 support (vpodzime)
  - Add a function for running utility reporting error and exit code (vpodzime)
  - Add the subpackage for the part plugin (vpodzime)
  - Add a missing BuildRequires for parted-devel (vpodzime)
  - Tag as both libblockdev-$version and just $version (vpodzime)
  - Add the 'part' plugin to documentation (vpodzime)
  - Add tests for the newly added part plugin (vpodzime)
  - Add the part plugin with storaged-required functionality (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.7-1
changelog:
  - Include the LV roles in the LVdata (vpodzime)
  - Add a few missing items to the documentation (vpodzime)
  - Document fields of the structures (vpodzime)
  - Report (meta)data LV name properly for cache pools in lvm-dbus (vpodzime)
  - Add information about related LVs to LVMLVdata (vpodzime)
  - Remove unused code for getting supported functions (vpodzime)
  - Add zFCP functionality to s390 plugin (sbueno+anaconda)
  - Fix a few const params in the s390 plugin. (sbueno+anaconda)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.8-1
changelog:
  - Add a function to get all mpath member devices (vpodzime)
  - Fix backport issues in the zfcp-related functionality (#1348442) (vpodzime)
  - Revert "Fix a few const params in the s390 plugin." (vpodzime)
  - Fix creation of the version-only tags (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.9-1
changelog:
  - Add functions for creating thin/cache pools from existing LVs (vpodzime)
  - Add the new mpath_get_members() function to the docs (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.9-3
changelog:
  - Try to search for "RAID Level" in mdadm's output (vpodzime)
    Resolves: rhbz#1379865
  - Fix the number passed to LVM DBus as a job-creation timeout (vpodzime)
    Resolves: rhbz#1378970


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.9-4
changelog:
  - Do not report volume name for FW RAID container device (vpodzime)
    Related: rhbz#1379865
  - Search for just "UUID" in mdadm --examine output (vpodzime)
    Related: rhbz#1379865
  - Use 'mdadm --examine --export' to get MD RAID level (vpodzime)
    Related: rhbz#1379865


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.9-7
changelog:
  - Open the device file as RDWR when committing parts (vpodzime)
  - Handle mdadm --examine output during migration (adamw)
    Resolves: rhbz#1381996


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.9-8
changelog:
  - Revert "Prevent issues between libparted and udev" (vpodzime)
  - Revert "Open the device file as RDWR when committing parts" (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.1-1
changelog:
  - Do not require an exclusive lock on the device to commit part stuff (vpodzime)
  - Prevent failure if there are no btrfs subvolumes (vpodzime)
  - Fix the test for getting version of a failing utility (vpodzime)
  - Also run the utils tests (vpodzime)
  - Bump the version of the pkgconfig module (vpodzime)
  - Include utils.h in plugins that need it (vpodzime)
  - Fix dependency check in fs plugin (vtrefny)
  - Add support for setting part id (part type) on msdos part tables (vtrefny)
  - Trim the extra info for MD RAID's name (vpodzime)
  - Add xfsprogs and dosfstools as dependencies of the fs plugin (vpodzime)
  - Fix md_name_from_node to work with the "/dev/" prefix (vpodzime)
  - New major upstream release


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.2-1
changelog:
  - Use the .in file as source when bumping version (vpodzime)
  - Run pylint based on the python version and make it optional (vpodzime)
  - Disable python3 and bcache on RHEL (vpodzime)
  - Make bcache support optional (vpodzime)
  - Teach boileplate_generator.py to skip things based on patterns (vpodzime)
  - Require lower versions of some utilities (vpodzime)
  - Do not require python3 for the boilerplate generation script (vpodzime)
  - Use a proper initialization value for 'GPollFD fds[2]' (vpodzime)
  - Deal with older parted and libblkid (vpodzime)
  - Make python3 and gtk-doc optional (vpodzime)
  - Bump the version of the utils library (vpodzime)
  - Fix docstring for 'bd_md_node_from_name' (vtrefny)
  - Add tests for added mdraid methods (vtrefny)
  - Skip 'MDTestNominateDenominateActive' unless feeling lucky (vtrefny)
  - MDRaid tests: change 'wait_for_resync' to wait for given action (vtrefny)
  - Add functionality need by storaged to mdraid plugin (vtrefny)
  - Move 'echo_str_to_file' method to utils (vtrefny)
  - Add a function to setup a loop device from a file descriptor (vpodzime)
  - Add functions to get/set the autoclear flag on a loop device (vpodzime)
  - Fix checking /proc/mdstat for resync action (vtrefny)
  - Adapt the test config files to version 2.x (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.3-1
changelog:
  - Allow specifying raid 'name' in multiple way when calling md functions (vtrefny)
  - Allow using both path and raid name in bd_md_set_bitmap_location (vtrefny)
  - Fix potential memory issues in s390 sanitizate functions (vpodzime)
  - Try multiple times when probing device for wiping (vpodzime)
  - Check for libvolume_key.h and dmraid.h in configure.ac (vpodzime)
  - Define our own macro for testing required header files (vpodzime)
  - Include blockdev/utils.h in mdraid.h (vtrefny)
  - Fix misspelling (agrover)
  - Skip the bcache tests even on x86_64 (vpodzime)
  - Take a break between bcache creation tests (vpodzime)
  - Make sure ./configure fails if there are some soft failures (vpodzime)
  - Improve the error message on missing GI support (vpodzime)
  - Only require bcache-tools if supporting bcache (vpodzime)
  - Skip bcache tests on non-x86_64 architectures (vpodzime)
  - Try harder to register a new bcache device (vpodzime)
  - Reimplement swapon/swapoff functions by using syscalls (vpodzime)
  - Make sure bcache functions are correctly provided or not (vpodzime)
  - Changelog fixup (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.4-1
changelog:
  - Update specs.rst to use present-tense and current API (agrover)
  - Add functions using BLOBs as LUKS passphrases (vpodzime)
  - Make sure the _error_quark() functions are in the library (vtrefny)
  - Return a special error when trying to wipe empty device (vtrefny)
  - Adapt tests to use LIO devices instead of loop devices (vpodzime)
  - Add functions for creating and deleting LIO devices (vpodzime)
  - MDRAID: Allow path as input for functions that work with sysfs (vtrefny)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.5-1
changelog:
  - Do not try to get GVariant after not adding anything to its builder (vpodzime)
  - Replace NULL with "" when building ExtraArg (vpodzime)
  - Replace NULL with "" when adding it as a 's' GVariant (vpodzime)
  - Make sure we don't try to add NULL as GVariant to DBus params (vpodzime)
  - Add function for getting recommended thpool metadata size (vpodzime)
  - Make udev settle after we create a LIO device (vpodzime)
  - Always use '--yes' for lvremove (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.6-1
changelog:
  - Move the  part_err library before part and fs (vtrefny)
  - Fix BuildRequires for crypto and dm packages (vtrefny)
  - Fix mounting read-only devices (vtrefny)
  - Fix the bd_s390_dasd_is_ldl function. (vponcova)
  - Add the bd_s390_dasd_is_fba function to check if DASD is FBA (vponcova)
  - Disable MD RAID tests on 32bit systems (vpodzime)
  - Fix error message when mounting with a wrong fs type (vtrefny)
  - Only create RPMs for requested/configured  plugins (vpodzime)
  - Only check dependencies of plugins to be built (vpodzime)
  - Only build and distribute plugins if configured so (vpodzime)
  - Fix format-security and unused-result compiler warnings (vtrefny)
  - Add an AC macro for modular builds (vpodzime)
  - Add functions for mounting and unmounting filesystems (vtrefny)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7-1
changelog:
  - Skip btrfs min size tests on Fedora 25 (vtrefny)
  - Make sure the loop device doesn't disappear during tests (vpodzime)
  - Close the loop device when autoclear is (un)set (vpodzime)
  - Do not enforce Python 3 for running tests in CI (vpodzime)
  - Revert "Use different BTRFS_MIN_MEMBER_SIZE on aarch64" (vtrefny)
  - Use both 'old' and 'new' sysfs files to read zRAM stats (vtrefny)
  - Check if libparted-fs-resize pkgconfig is available (vpodzime)
  - Do not try to get name for inactive partitions (vtrefny)
  - Skip tests for getting free regions on CentOS/RHEL (vpodzime)
  - Free the container holding the specs of free regions (vpodzime)
  - Open loop devices as O_RDONLY when getting flags (vpodzime)
  - Resolve maximum partition size when we know its start (vpodzime)
  - Use --id instead of --part-type when setting partition id (vpodzime)
  - Fix mdadm command for removing failed device from an array (vtrefny)
  - Skip bcache tests on CentOS/RHEL 7 (vpodzime)
  - Use six.assertRaisesRegex in the FS tests (vpodzime)
  - Use mkdtemp() instead of TemporaryDirectory() (vpodzime)
  - Fix installation without specifying --exec-prefix (vpodzime)
  - Add options to force mkfs.ext4/vfat to create a FS on the whole device (vpodzime)
  - Skip the test for device escrow on CentOS/RHEL (vpodzime)
  - Define DEVNULL on our own if not in subprocess (vpodzime)
  - Remove the patches from the spec file (vpodzime)
  - Sync the spec file with downstream (vpodzime)
  - Stop skipping zRAM stats tests (vtrefny)
  - Add more tests for zRAM stats (vtrefny)
  - Fix reading zRAM properties from sysfs (vtrefny)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.8-1
changelog:
  - Temporarily skip vfat generic resize test on rawhide (vtrefny)
  - Use "safeprobe" in "bd_fs_wipe" (vtrefny)
  - Add a generic filesystem resize function (vtrefny)
  - Add a function to get mountpoint for a device (vtrefny)
  - Add a function to get filesystem type for a device (vtrefny)
  - Only include the LVM DBus config when shipping LVM DBus (vpodzime)
  - Skip the LVM DBus vgreduce tests on Rawhide (vpodzime)
  - Do not build the lvm-dbus plugin on RHEL/CentOS (vpodzime)
  - Give zRAM more time to settle before trying to remove a device (vpodzime)
  - Put zram tests adding/removing devices into a separate class (vpodzime)
  - Skip LVM cache and RAID tests on Rawhide (vpodzime)
  - Fix the skip_on decorator factory for tests (vpodzime)
  - Use 'blkid -p' instead of lsblk to get device's FS type (vpodzime)
  - Improve the lvm_set_global_config test (vpodzime)
  - Pass '-y' to pvresize (vpodzime)
  - Create a copy of os.environ for a child process (vpodzime)
  - Revert "Use the "C.UTF-8" locale instead of just "C"" (vpodzime)
  - Fix how we create vfat FS in tests (vpodzime)
  - Skip the test if requiring unavailable locales (vpodzime)
  - Use the "C.UTF-8" locale instead of just "C" (vpodzime)
  - Add functions for working with ext2 and ext3 filesystems (vtrefny)
  - Link to gobject when lvm or btrfs is enabled (andreas)
  - Link to libm where needed (andreas)
  - Add a function for cleaning a device (vtrefny)
  - Add few code exaples to documentation (vtrefny)
  - Use a special exception for no fs signature when doing wipe (vpodzime)
  - One more incompatible os.symlink() call (vpodzime)
  - Do not use pass-by-name in the os.symlink() call (vpodzime)
  - Ignore previous errors when falling back to using ioctl() (vpodzime)
  - Use ioctl() call to teardown loop devices (vpodzime)
  - Resolve the device to remove for mdadm (vpodzime)
  - Add a function for getting device symlinks (vpodzime)
  - Use the new resolve_device() function where appropriate (vpodzime)
  - Add the resolve_device() function to the utils library (vpodzime)
  - First try to read the 'autoclear' flag from /sys/ (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.9-1
changelog:
  - Fix hardcoded reference to gcc (timo.gurr)
  - Catch and ignore partial failures in LVM tests' cleanups (vpodzime)
  - Fix hardcoded reference to pkg-config (timo.gurr)
  - Make GObject introspection optional (vpodzime)
  - Do not link libraries required by plugins to the GI files (vpodzime)
  - Make sure the whole build status image is shown (vpodzime)
  - Show CI status in README (at the GH repo's front page) (vpodzime)
  - Always require the libudev pkg (tgurr)
  - Make sure we give kernel time to fully setup zram device(s) (vpodzime)
  - fs_test.py: Close FDs when calling utilities (tasleson)
  - crypto.c: Correct segmentation fault (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.10-1
changelog:
  - Only enable partition size tolerance with alignment (vpodzime)
  - Limit the requested partition size to maximum possible (vpodzime)
  - Do not verify vfat FS' size after generic resize (vpodzime)
  - Specify tolerance for partition size (kailueke)
  - Only use the exact constraint if not using any other (vpodzime)
  - Check resulting FS size in tests for generic FS resize (vpodzime)
  - Query setting FS label support and generic relabeling (kailueke)
  - Do not strictly require all FS utilities (vpodzime)
  - Compile everything with the C99 standard (vpodzime)
  - Add partition resize function (kailueke)
  - Generic Check and Repair Functions (kailueke)
  - Query functions for FS resize and repair support (kailueke)
  - Update the project/source URL in the spec file (vpodzime)
  - Add functions for opening/closing TrueCrypt/VeraCrypt volumes (vpodzime)
  - Adapt to a change in behaviour in new libmount (vpodzime)
  - Try RO mount also if we get EACCES (vpodzime)
  - Size in bytes for xfs_resize_device (kailueke)
  - src/plugins/Makefile.am: Remove hard coded include path in /usr prefix (tristan.vanberkom)
  - Fixed include for libvolume_key.h (tristan.vanberkom)
  - Ignore parted warnings if possible (squimrel)
  - bcache tests: Remove FEELINGLUCKY checks (tasleson)
  - kbd.c: Code review corrections (tasleson)
  - kbd.c: Make bd_kbd_bcache_create work without abort (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.11-1
changelog:
  - Make the KbdZRAMDevicesTestCase inherit from KbdZRAMTestCase (vpodzime)
  - Allow non-source directory builds (kailueke)
  - Add a way to disable runtime dependency checks (vpodzime)
  - Link to GObject even if no plugin is activated (kailueke)
  - Skip zram tests on Rawhide (vpodzime)
  - Keep most utilities available for tests (vpodzime)
  - Use new libmount function to get (un)mount error message (vtrefny)
  - Update the documentation URL (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.12-1
changelog:
  - Own directories /etc/libblockdev and /etc/libblockdev/conf.d (vtrefny)
  - Wait for resized partition (kailueke)
  - Make sure the device is opened for libparted (vpodzime)
  - Fix label check in swap_test (vtrefny)
  - Use "run_tests" script for running tests from Makefile (vtrefny)
  - Add a script for running tests (vtrefny)
  - Tests: Move library initialization to setUpClass method (vtrefny)
  - Stop skipping FAT resize tests on rawhide (vtrefny)
  - Close filesystem before closing the partition during FAT resize (vtrefny)
  - Use mountpoint for "xfs_info" calls (vtrefny)
  - Use libmount cache when parsing /proc/mounts (vtrefny)
  - Add some space for the CI status (vpodzime)
  - Confirm the force when creating PVs in FS tests (vpodzime)
  - Skip vgremove tests on 32bit Debian (vtrefny)
  - Fix names of backing files in tests (vtrefny)
  -  Fix checking for available locales (vtrefny)
  - Skip dependency checking in mpath tests on Debian (vtrefny)
  - Skip zRAM tests on Debian (vtrefny)
  - Skip the test for device escrow on Debian too (vtrefny)
  - Skip free region tests on Debian too (vtrefny)
  - Fix redirecting command output to /dev/null in tests (vtrefny)
  - Try harder to unmount devices in test cleanup (vtrefny)
  - Require only plugins that are needed for given test (vtrefny)
  - Try to get distribution info from "PrettyName" if "CPEName" isn't available (vtrefny)
  - Use -ff when creating PVs in FS tests (vpodzime)
  - Sync spec with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.13-1
changelog:
  - Fix the rpmlog and shortlog targets (vpodzime)
  - Add a function for enabling/disabling plugins' init checks (vpodzime)
  - Assign functions to tech-mode categories (vpodzime)
  - Add missing items to particular sections in the documentation (vpodzime)
  - Add a basic test for the runtime dependency checking (vpodzime)
  - Simplify what WITH_BD_BCACHE changes in the KBD plugin (vpodzime)
  - Add functions for querying available technologies (vpodzime)
  - Dynamically check for the required utilities (vpodzime)
  - Use shorter prefix for tempfiles (vtrefny)
  - Try harder when waiting for lio device to show up (vtrefny)
  - Better handle old and new zram sysfs api in tests (vtrefny)
  - Skip btrfs tests on CentOS 7 aarch64 (vtrefny)
  - Add new function for setting swap label (vtrefny)
  - Use only one git tag for new releases (vtrefny)
  - Fix source URL in spec file (vtrefny)
  - Add NEWS.rst file (vtrefny)
  - Do not include s390utils/vtoc.h in s390 plugin (vtrefny)
  - Use "AC_CANONICAL_BUILD" to check architecture instead of "uname" (vtrefny)
  - Bypass error proxy in s390 test (vtrefny)
  - Fix zFCP LUN max length (vtrefny)
  - Do not run g_clear_error after setting it (vtrefny)
  - Allow compiling libblockdev without s390 plugin (vtrefny)
  - Add a function for getting plugin name (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.14-1
changelog:
  - Support the legacy boot GPT flag (intrigeri)
  - Respect the version in the blockdev.pc file (vpodzime)
  - Add pkgconfig definitions for the utils library (vpodzime)
  - fs.c: Fix potential NULL pointer dereference (vtrefny)
  - dm.c: Fix uninitialized values in various dm plugin functions (vtrefny)
  - dm.c: Check return values of dm_task_set_name/run/get_info functions (vtrefny)
  - fs.c: Fix multiple "forward NULL" warnings in 'bd_fs_ntfs_get_info' (vtrefny)
  - lvm-dbus.c: Fix multiple "use after free" coverity warnings (vtrefny)
  - Fix duplicate 'const' in generated functions (vtrefny)
  - Add some test cases for NTFS (kailueke)
  - Add function wrappers for NTFS tools (kailueke)
  - exec.c: Fix error message in 'bd_utils_exec_and_report_progress' (vtrefny)
  - crypto.c: Fix waiting for enough entropy (vtrefny)
  - Ignore some coverity false positive errors (vtrefny)
  - exec.c: Ignore errors from 'g_io_channel_shutdown' (vtrefny)
  - part.c: Check if we've found a place to put new logical partitions (vtrefny)
  - kbd.c: Fix potential string overflow in 'bd_kbd_bcache_create' (vtrefny)
  - exec.c: Fix resource leaks in 'bd_utils_exec_and_report_progress' (vtrefny)
  - fs.c: Fix "forward null" in 'do_mount' and 'bd_fs_xfs_get_info' (vtrefny)
  - part.c: Fix possible NULL pointer dereference (vtrefny)
  - crypto.c: Use right key buffer in 'bd_crypto_luks_add_key' (vtrefny)
  - exec.c: Fix "use after free" in 'bd_utils_check_util_version' (vtrefny)
  - kbd.c: Fix double free in 'bd_kbd_zram_get_stats' (vtrefny)
  - part.c: Check if file discriptor is >= 0 before closing it (vtrefny)
  - mdraid.c: Fix resource leaks (vtrefny)
  - lvm.c: Fix "use after free" in 'bd_lvm_get_thpool_meta_size' (vtrefny)
  - fs.c: Fix for loop condition in 'bd_fs_get_fstype' (vtrefny)
  - fs.c: Check sscanf return value in 'bd_fs_vfat_get_info' (vtrefny)
  - fs.c: Fix resource leaks in 'bd_fs_get_fstype' (vtrefny)
  - blockdev.c.in: Fix unused variables (vtrefny)
  - Use libbytesize to parse bcache block size (vtrefny)
  - Use system values in KbdTestBcacheStatusTest (vtrefny)
  - Fix BSSize memory leaks in btrfs and mdraid plugins (vtrefny)
  - Skip btrfs subvolume tests with btrfs-progs 4.13.2 (vtrefny)
  - Added function to get DM device subsystem (japokorn)
  - Sync spec with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.15-1
changelog:
  - Do not use the 'btrfs' plugin in overrides tests (vpodzime)
  - Do not use the btrfs plugin in library tests (vpodzime)
  - Check for btrfs module availability in btrfs module (vtrefny)
  - Move kernel modules (un)loading and checking into utils (vtrefny)
  - Free locale struct in kbd plugin (vtrefny)
  - Add test for setting partition flags on GPT (vtrefny)
  - Use only sgdisk to set flags on GPT (vtrefny)
  - Move the fs.h file to its original place (vpodzime)
  - Add a HACKING.rst file (vpodzime)
  - Mark bcache tests as unstable (vpodzime)
  - Fix memory leaks in bd_fs_vfat_get_info() (vpodzime)
  - Revert the behaviour of bd_fs_check_deps() (vpodzime)
  - Split the bd_fs_is_tech_avail() implementation (vpodzime)
  - Split the FS plugin source into multiple files (vpodzime)
  - Fix bd_s390_dasd_format (vponcova)
  - Mark unstable tests as such (vpodzime)
  - bd_s390_dasd_is_ldl should be true only for LDL DADSs (vponcova)
  - Do not lie about tag creation (vpodzime)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.16-1
changelog:
  - Add tests for progress report (jtulak)
  - Add e2fsck progress (jtulak)
  - Add progress reporting infrastructure for Ext fsck (jtulak)
  - Add a function to test if prog. reporting was initialized (jtulak)
  - Add support for LUKS 2 opening and key management (vtrefny)
  - Fix few more links for project and documentation website (vtrefny)
  - Sync the spec file with downstream (vpodzime)
  - Check if 'journalctl' is available before trying to use it in tests (vtrefny)
  - Update 'Testing libblockdev' section in documentation (vtrefny)
  - Fix link to online documentation (vtrefny)
  - Fix how the new kernel module functions are added to docs (vpodzime)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.16-3
changelog:
  - Add the NVDIMM plugin (vtrefny)
  - Add tests for the NVDIMM plugin (vtrefny)
  - Add --without-xyz to DISTCHECK_CONFIGURE_FLAGS for disabled plugins (vtrefny)
  - Add function for getting NVDIMM namespace name from devname or path (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.17-1
changelog:
  - Redirect cryptsetup log to libblockdev log (vtrefny)
  - Add a generic logging function for libblockdev (vtrefny)
  - Add functions to resize LUKS 2 (vtrefny)
  - Add function to get information about LUKS 2 integrity devices (vtrefny)
  - Add function to get information about a LUKS device (vtrefny)
  - Add a basic test for creating LUKS 2 format (vtrefny)
  - Use libblockdev function to create LUKS 2 in tests (vtrefny)
  - Add support for creating LUKS 2 format (vtrefny)
  - Skip bcache tests on Rawhide (vtrefny)
  - Allow building libblockdev without Python 2 support (vtrefny)
  - Allow compiling libblockdev crypto plugin without escrow support (vtrefny)
  - Require at least libndctl 58.4 (vtrefny)
  - New function for luks metadata size (japokorn)
  - Add functions to backup and restore LUKS header (vtrefny)
  - Add function for killing keyslot on a LUKS device (vtrefny)
  - Add functions to suspend and resume a LUKS device (vtrefny)
  - Use '=' instead of '==' to compare using 'test' (v.podzimek)
  - lvm-dbus: Check returned job object for error (vtrefny)
  - Get sector size for non-block NVDIMM namespaces too (vtrefny)
  - Fix memory leaks discovered by clang (vtrefny)
  - Add new functions to docs/libblockdev-sections.txt (segfault)
  - Make a link point to the relevant section (segfault)
  - Don't use VeraCrypt PIM if compiled against libcryptsetup < 2.0 (segfault)
  - Make keyfiles parameter to bd_crypto_tc_open_full zero terminated (segfault)
  - Add function bd_crypto_device_seems_encrypted (segfault)
  - Support VeraCrypt PIM (segfault)
  - Support TCRYPT system volumes (segfault)
  - Support TCRYPT hidden containers (segfault)
  - Support TCRYPT keyfiles (segfault)
  - Support unlocking VeraCrypt volumes (segfault)
  - Enforce ZERO_INIT gcc backwards compatibility (bjornpagen)
  - Add function for getting NVDIMM namespace name from devname or path (vtrefny)
  - Add --without-xyz to DISTCHECK_CONFIGURE_FLAGS for disabled plugins (vtrefny)
  - Add tests for the NVDIMM plugin (vtrefny)
  - Add the NVDIMM plugin (vtrefny)
  - Fix build with clang (bjornpagen)
  - s390: don't hardcode paths, search PATH (flokli)
  - Fix build against musl libc (bjornpagen)
  - Fix python2-gobject-base dependency on Fedora 26 and older (vtrefny)
  - Sync the spec file with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-1
changelog:
  - Use python interpreter explicitly when running boilerplate_generator.py (vtrefny)
  - vdo: Implement bd_vdo_get_stats() (tbzatek)
  - Add test for is_tech_available with multiple dependencies (vtrefny)
  - lvm-dbus.c: Check for 'lvmdbus' dependency in 'bd_lvm_is_tech_avail' (vtrefny)
  - lvm.c: Check for 'lvm' dependency in 'bd_lvm_is_tech_avail' (vtrefny)
  - Fix licence headers in sources (vtrefny)
  - Fix three memory leaks in lvm-dbus.c (vtrefny)
  - Ignore "bad-super-call" pylint warning in BlockDev.py (vtrefny)
  - Fix running pylint in tests (vtrefny)
  - Fix vdo configuration options definition in spec file (vtrefny)
  - Fix calling BlockDev.reinit in swap tests (vtrefny)
  - Fix how we check zram stats from /sys/block/zram0/mm_stat (vtrefny)
  - Skip VDO tests also when the 'kvdo' module is not available (vtrefny)
  - Add version to tests that should be skipped on CentOS/RHEL 7 (vtrefny)
  - Skip btrfs tests if btrfs module is not available (vtrefny)
  - Do not build KBD plugin with bcache support on RHEL (vtrefny)
  - Do not build btrfs plugin on newer RHEL (vtrefny)
  - fs: Properly close both ends of the pipe (tbzatek)
  - Make sure library_test works after fixing -Wstrict-prototypes (vtrefny)
  - Make sure library tests properly clean after themselves (vtrefny)
  - pkg-config: add -L${libdir} and -I${includedir} (max.kellermann)
  - plugins/kbd: make wait_for_file() static (max.kellermann)
  - plugins/lvm{,-dbus}: get_lv_type_from_flags() returns const string (max.kellermann)
  - plugins/dm: add explicit cast to work around -Wdiscarded-qualifiers (max.kellermann)
  - plugins/crypto: work around -Wdiscarded-qualifiers (max.kellermann)
  - plugins/check_deps: make all strings and `UtilDep` instances `const` (max.kellermann)
  - exec: make `msg` parameters const (max.kellermann)
  - fix -Wstrict-prototypes (max.kellermann)
  - module.c: Accept kernel modules if they are built-in (marco.guerri.dev)
  - BlockDev.py Convert dictionary keys to set before using them (vtrefny)
  - Skip 'test_cache_pool_create_remove' on CentOS 7 (vtrefny)
  - Re-order libbd_crypto_la_LIBADD to fix libtool issue (tom)
  - acinclude.m4: Use AS_EXIT to fail in LIBBLOCKDEV_FAILURES (vtrefny)
  - configure.ac: Fix missing parenthesis in blkid version check (vtrefny)
  - Allow specifying extra options for PBKDF when creating LUKS2 (vtrefny)
  - Reintroduce python2 support for Fedora 29 (vtrefny)
  - Use versioned command for Python 2 (vtrefny)
  - Fix few wrong names in doc strings (vtrefny)
  - Make sure all our free and copy functions work with NULL (vtrefny)
  - Use libblkid in bd_crypto_is_luks (vtrefny)
  - vdo: Properly destroy the yaml parser (tbzatek)
  - Add a simple test case for bd_crypto_tc_open (vtrefny)
  - Add Python override for bd_crypto_tc_open_full (vtrefny)
  - Show simple summary after configure (vtrefny)
  - Do not build VDO plugin on non-x86_64 architectures (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-4
changelog:
  - Use libblkid to check swap status before swapon (vtrefny)
    Related: rhbz#1634016
  - Add error codes and Python exceptions for swapon fails (vtrefny)
    Resolves: rhbz#1634016


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-7
changelog:
  - Use major/minor macros from sys/sysmacros.h instead of linux/kdev_t.h (vtrefny)
    Resolves: rhbz#1644825


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-9
changelog:
  - Remove device-mapper-multipath dependency from fs and part plugins (vtrefny)
    Resolves: rhbz#1700297


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-12
changelog:
  - Use cryptsetup to check LUKS2 label
    Resolves: rhbz#1778689
  - Fix expected cache pool name with newest LVM
    Related: rhbz#1778689


author: Jens Petersen <petersen@redhat.com> - 0.8.6-1
changelog:
  - update to 0.8.6 (#1462722)
  - fixes manpage conflict (#1504831)
  - condition the gcc deprecation patch on epel < 7
  - clean up spec file


author: Eric Smith <eric@brouhaha.com> - 0.3.0-1
changelog:
  - Update to latest upstream release.
  - Removed Patch0, fixed upstream.
  - Removed BuildRoot, clean, defattr.


author: Eric Smith <brouhaha@fedoraproject.org> - 0.5.2-3
changelog:
  - Still having problems with setproctitle(), bug #981799, upstream
    freedesktop.org bug #66679. Added patch to noop out setproctitle().


author: Remi Collet <remi@remirepo.net> - 1.13.0-1
changelog:
  - update to 1.13.0
  - open https://jira.mongodb.org/browse/CDRIVER-2827 make install fails
  - open https://jira.mongodb.org/browse/CDRIVER-2828 test failures
  - disable test suite


author: Vojtech Trefny <vtrefny@redhat.com> - 1.3-1
changelog:
  - Allow building libbytesize without Python 2 support (vtrefny)
  - Sync spec with downstream (vtrefny)
  - Add gcc to BuildRequires (vtrefny)
  - Fix links for documentation and GH project (vtrefny)
  - Add a HACKING.rst file (vpodzime)
  - Do not segfault when trying to bs_size_free NULL (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 1.4-1
changelog:
  - Squashed 'translation-canary/' changes from 840c2d6..fccbb1b (vtrefny)
  - Make sure the test script fails if one of the test runs fail (vtrefny)
  - Do not try to run python2 tests without python2 support (vtrefny)
  - Fix licence header for "gettext.h" (vtrefny)
  - Do not use rpm to check for Zanata client (vtrefny)
  - Use new ldconfig_scriptlets macro in spec (vtrefny)


author: Zoltan Fridrich <zfridric@redhat.com> - 2.26-5
changelog:
  - added CAP_PERFMON, CAP_BPF and CAP_CHECKPOINT_RESTORE capabilities
    resolves: rhbz#1946982 rhbz#1921576


author: Zoltan Fridrich <zfridric@redhat.com> - 2.48-2
changelog:
  - rebase to 2.48
    resolves: rhbz#2032813
  - fix ambient capabilities for non-root users
    resolves: rhbz#1950187


author: Nikola Forró <nforro@redhat.com> - 0.41-17
changelog:
  - backport several upstream fixes
  - set Delegate property for cgconfig service to make sure complete
    cgroup hierarchy is always created by systemd


author: Dhaval Giani <dhaval@linux.vnet.ibm.com> 0.32.1-1
changelog:
  * Tue Feb 24 2009 Balbir Singh <balbir@linux.vnet.ibm.com> 0.33-1
  - Update to 0.33, spec file changes to add Makefiles and pam_cgroup module


author: Jan Safranek <jsafrane@redhat.com> 0.36.2-1
changelog:
  - Update to 0.36.2, fixing packaging the libraries (#605434)
  - Remove the dependency on redhat-lsb (#603578)


author: Jan Safranek <jsafrane@redhat.com> 0.37-1
changelog:
  - Update to 0.37
  - use /sys/fs/cgroup as default directory to mount control groups (and rely on
    systemd mounting tmpfs there)


author: Jan Safranek <jsafrane@redhat.com> 0.37.1-4
changelog:
  - fixed cgconfig service not to unmount stuff it did not mount
  - added better sample cgconfig.conf file to reflect systemd
    mounting all controllers during boot (#702111)


author: Peter Schiffer <pschiffe@redhat.com> - 0.38-3
changelog:
  - resolves: #850183
    scriptlets replaced with new systemd macros (thanks to vpavlin)
  - cleaned .spec file


author: Peter Schiffer <pschiffe@redhat.com> 0.41-1
changelog:
  - resolves: #966008
    updated to 0.41
  - removed deprecated cgred service
    please use Control Group Interface in Systemd instead


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Make inline function __comps_objmrtree_all also static (RhBug:1793424)
  - Fix memory leaks and resource leaks
  - Fix: Check result "comps_parse_parsed_init()"


author: Josef Ridky <jridky@redhat.com> - 3.19.1-1
changelog:
  - Update to 3.19.1
  - Add patch to use libtirpc
  - Add BR gcc-c++
  - Resolves: #1580754 - FTBFS in RHEL-8


author: Filip Januš <fjanus@redhat.com> 5.3.28-42
changelog:
  - Apply the previous change only on aarch64 to limit the risk of unwanted impact
  - Resolves: #1992402


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-31
changelog:
  - Add 0114-multipathd-ignore-duplicated-multipathd-command-keys.patch
    * Fixes bz #2133996
  - Add 0115-multipath-tools-use-run-instead-of-dev-shm.patch
    * Fixes bz #2133990
  - Resolves: bz #2133990, #2133996


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-32
changelog:
  - Add 0116-kpartx-hold-device-open-until-partitions-have-been-c.patch
    * Fixes bz #2128885
  - Add 0117-libmultipath-cleanup-remove_feature.patch
  - Add 0118-libmultipath-cleanup-add_feature.patch
  - Add 0119-multipath-tests-tests-for-adding-and-removing-featur.patch
  - Add 0120-libmultipath-fix-queue_mode-feature-handling.patch
  - Add 0121-multipath-tests-tests-for-reconcile_features_with_qu.patch
  - Add 0122-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch
  - Add 0123-libmultipath-get-nvme-path-transport-protocol.patch
  - Add 0124-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch
    * Fixes bz #2022359
  - Resolves: bz #2022359, #2128885


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-33
changelog:
  - Add 0125-multipath-add-historical-service-time-to-the-man-pag.patch
    * Fixes bz #2141996
  - Modify tests/multipath_conf_syntax/main.sh
    * fix unrelated test error
  - Resolves: bz #2141996


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-34
changelog:
  - Add 0126-libmultipath-copy-mpp-hwe-from-pp-hwe.patch
    * Fixes bz #2126714
  - Cleanup multiple CI tests
  - Resolves: bz #2126714


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-35
changelog:
  - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch
  - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch
  - Resolves: bz #2155560


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-36
changelog:
  - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch
  - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch
  - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch
  - Resolves: bz #2166468


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-37
changelog:
  - Fix bugzilla linked to the changes (was previously linked to
    the wrong bug, 2162537)
  - Resolves: bz #2166468


author: Peter Jones <pjones@redhat.com> - 0.4.7-4.1
changelog:
  - Split kpartx out into its own package so dmraid can use it without
    installing multipathd
  - Fix a segfault in kpartx


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.8-1
changelog:
  - Updated to latest Upstream 0.4.8 code: multipath-tools-080519.tgz
    (git commit id: 42704728855376d2f7da2de1967d7bc71bc54a2f)


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.8-6
changelog:
  - Updated to latest upstream 0.4.8 code: multipath-tools-080804.tgz
    (git commit id: eb87cbd0df8adf61d1c74c025f7326d833350f78)
  - fixed 451817, 456397 (scsi_id_change.patch), 457530 (config_space_fix.patch)
    457589 (static_libaio.patch)


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.8-7
changelog:
  - Since libaio is now in /lib, not /usr/lib, multipath no longer needs to
    statically link against it. Fixed an error with binding file and WWIDs
    that include spaces. Cleaned up the messages from the directio checker
    function.  Fixed the udev rules. Fixed a regression in multipath.conf
    parsing
  - Fixed 457530, 457589


author: Mike Snitzer <snitzer@redhat.com> - 0.4.9-1
changelog:
  - Updated to latest upstream 0.4.9 code: multipath-tools-090429.tgz
    (git commit id: 7395bcda3a218df2eab1617df54628af0dc3456e)
  - split the multipath libs out to a device-mapper-multipath-libs package
  - if appropriate, install multipath libs in /lib64 and /lib64/multipath


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.4.9-3
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-090729.tgz
    (git commit id: d678c139719d5631194b50e49f16ca97162ecd0f)
  - moved multipath bindings file from /var/lib/multipath to /etc/multipath
  - Fixed 354961, 432520


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.4.9-5
changelog:
  - Fixed problem where maps were being added and then removed.
  - Changed the udev rules to fix some issues.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-6
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-091013.tar.gz
    (git commit id: aa0a885e1f19359c41b63151bfcface38ccca176)
  - Drop, now upstream, patches:
    * fix_missed_uevs.patch.
    * log_all_messages.patch.
    * uninstall.patch.
    * select_lib.patch.
    * directio_message_cleanup.patch.
    * stop_warnings.patch.
  - Drop redhatification.patch in favour of spec file hacks.
  - Drop mpath_wait.patch: no longer required.
  - Merge multipath_rules.patch and udev_change.patch.
  - Rename all patches based on source.
  - Add patch 0009-RH-fix-hp-sw-hardware-table-entries.patch to fix
    default entry for hp_sw and match current kernel.
  - Add multipath.conf.redhat as source instead of patch.
  - spec file:
    * divide runtime and build/setup bits.
    * update BuildRoot.
    * update install section to apply all the little hacks here and there,
      in favour of patches against upstream.
    * move ldconfig invokation to libs package where it belong.
    * fix libs package directory ownership and files.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-7
changelog:
  - Add patch 0010-RH-Set-friendly-defaults.patch:
    * set rcdir to fedora default.
    * do not install kpartx udev bits.
    * install redhat init script.
    * Cleanup spec file install target.
  - Add patch 0011-RH-multipathd-blacklist-all-by-default.patch:
    * Fix BZ#528059
    * Stop installing default config in /etc and move it to the doc dir.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-8
changelog:
  - Split patches in "for-upstream" and "RH" series.
  - Replace 0011-RH-multipathd-blacklist-all-by-default.patch with
    version from Benjamin Marzinski.
  - Update udev rules 0010-RH-multipath-rules-udev-changes.patch.
  - rpmlint cleanup:
    * Drop useless-provides kpartx.
    * Cleanup tab vs spaces usage.
    * Summary not capitalized.
    * Missing docs in libs package.
    * Fix init script LSB headers.
  - Drop README* files from doc sections (they are empty).


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-10
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-091027.tar.gz
    (git commit id: a946bd4e2a529e5fba9c9547d03d3f91806618a3)
  - Drop unrequired for-upstream patches.
  - BuildRequires and Requires new device-mapper version for udev sync support.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-11
changelog:
  - Add 0002-for-upstream-add-tmo-config-options.patch
    * Add fail_io_fail_tmo and dev_loss_tmo multipath.conf options
  - Add 0013-RH-add-weighted_prio-prioritizer.patch
  - Add 0014-RH-add-hp_tur-checker.patch
  - Add 0015-RH-add-multipathd-count-paths-cmd.patch
  - rename multipath.conf.redhat to multipath.conf, and remove the default
    blacklist.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-12
changelog:
  - Refresh 0001-RH-queue-without-daemon.patch
  - Refresh 0002-RH-path-checker.patch
  - Modify 0010-RH-multipath-rules-udev-changes.patch
    * Fix udev rules to use DM_SBIN_PATH when calling kpartx
    * install udev rules to /lib/udev/rules.d instead of /etc/udev/rules.d
  - Modify 0014-RH-add-hp_tur-checker.patch
  - Add 0003-for-upstream-default-configs.patch
  - Add 0016-RHBZ-554561-fix-init-error-msg.patch
  - Add 0017-RHBZ-554592-man-page-note.patch
  - Add 0018-RHBZ-554596-SUN-6540-config.patch
  - Add 0019-RHBZ-554598-fix-multipath-locking.patch
  - Add 0020-RHBZ-554605-fix-manual-failover.patch
  - Add 0021-RHBZ-548874-add-find-multipaths.patch
    * Added find_multipaths multipath.conf option
    * Added /sbin/mpathconf for simple editting of multipath.conf
  - Add 0022-RHBZ-557845-RHEL5-style-partitions.patch
    * Make kpartx deal with logical partitions like it did in RHEL5.
      Don't create a dm-device for the extended partition itself.
      Create the logical partitions on top of the dm-device for the whole disk.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-13
changelog:
  - Replace 0012-RH-explicitly-disable-dm-udev-sync-support-in-kpartx.patch
    with 0012-RH-udev-sync-support.patch
    * Add udev sync support to kpartx and multipath. In kpartx it is disabled
      unless you use the -s option.
  - Refresh 0013-RH-add-weighted_prio-prioritizer.patch
  - Refresh 0021-RHBZ-548874-add-find-multipaths.patch
  - Modify 0022-RHBZ-557845-RHEL5-style-partitions.patch
    * kpartx now creates a 2 sector large device for dos extended
      partitions, just like the kernel does on the regular block devices.
  - Add 0023-RHBZ-557810-emc-invista-config.patch
  - Add 0024-RHBZ-565933-checker-timeout.patch
    * Multipath has a new option checker_timeout. If this is not set, 
      all path checker functions with explicit timeouts use
      /sys/block/sd<x>/device/timeout. If this is set, they use it instead.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-14
changelog:
  - Modify 0021-RHBZ-548874-add-find-multipaths.patch
    * fix bug where mpathconf wouldn't create a multpath.conf file unless one
      already existed.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-16
changelog:
  - Modify 0012-RH-udev-sync-support.patch
  - Modify 0021-RHBZ-548874-add-find-multipaths.patch
  - Modify 0022-RHBZ-557845-RHEL5-style-partitions.patch
  - Add 0025-RHBZ-508827-update-multipathd-manpage.patch through
        0101-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
    * sync with current state of RHEL6. Next release should include a updated
      source tarball with most of these fixes rolled in.
  - Add 0102-RHBZ-690828-systemd-unit-file.patch
    * Add Jóhann B. Guðmundsson's unit file for systemd.
    * Add sub-package sysvinit for SysV init script.
  - Resolves: bz #690828


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-17
changelog:
  - Add 0103-add-disable-sync-option.patch
    * add a -n (nosync) option to multipath. This disables synchronous
      file creation with udev.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-19
changelog:
  - Modify 0103-add-disable-sync-option.patch
  - Add 0104-RHBZ-737989-systemd-unit-fix.patch
    * systemd will only start multipathd if /etc/multipath.conf exists
  - Add 0105-fix-oom-adj.patch
    * first try setting oom_score_adj


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-21
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-120123.tgz
    (git commit id: 63704387009443bdb37d9deaaafa9ab121d45bfb)
  - Add 0001-RH-fix-async-tur.patch
  - Add 0002-RH-dont_start_with_no_config.patch
  - Add 0003-RH-multipath.rules.patch
  - Add 0004-RH-update-init-script.patch
  - Add 0005-RH-cciss_id.patch
  - Add 0006-RH-Make-build-system-RH-Fedora-friendly.patch
  - Add 0007-RH-multipathd-blacklist-all-by-default.patch
  - Add 0008-RH-add-mpathconf.patch
  - Add 0009-RH-add-find-multipaths.patch
  - Add 0010-RH-check-if-multipath-owns-path.patch
  - Add 0011-RH-add-hp_tur-checker.patch


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-22
changelog:
  - Add 0012-RH-update-on-show-topology.patch
  - Add 0013-RH-manpage-update.patch
  - Add 0014-RH-RHEL5-style-partitions.patch
  - Add 0015-RH-add-followover.patch
  - Add 0016-RH-dont-remove-map-on-enomem.patch
  - Add 0017-RH-fix-shutdown-crash.patch
  - Add 0018-RH-warn-on-bad-dev-loss-tmo.patch
  - Add 0019-RH-deprecate-uid-gid-mode.patch
  - Add 0020-RH-dont-remove-map-twice.patch
  - Add 0021-RH-validate-guid-partitions.patch
  - Add 0022-RH-adjust-messages.patch
  - Add 0023-RH-manpage-update.patch


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-27
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-120613.tgz
    (git commit id: cb0f7127ba90ab5e8e71fc534a0a16cdbe96a88f)
  - Add 0001-RH-remove_callout.patch
    * multipath no longer uses the getuid callout.  It now gets the
      wwid from the udev database or the environment variables
  - Add 0004-RH-fix-cciss-names.patch
    * convert cciss device names from cciss/cXdY to sysfs style cciss!cXdY
  - Split 0009-RH-add-find-multipaths.patch into 0002-RH-add-wwids-file.patch
          and 0010-RH-add-find-multipaths.patch
  - Add 0016-RH-change-configs.patch
    * default fast_io_fail to 5 and don't set the path selector in the
      builtin configs.
  Resolves: bz #831978


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-29
changelog:
  - Updated to latest upstrem 0.4.9 code: multipath-tools-120821.tgz
    (git commit id: 050b24b33d3c60e29f7820d2fb75e84a9edde528)
    * includes 0001-RH-remove_callout.patch, 0002-RH-add-wwids-file.patch,
      0003-RH-add-followover.patch, 0004-RH-fix-cciss-names.patch
  - Add 0013-RH-kpartx-msg.patch
  - Modify 0002-RH-multipath.rules.patch
    * removed socket call from rules file


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-31
changelog:
  - Add 0014-RH-dm_reassign.patch
    * Fix reassign_maps option
  - Add 0015-RH-selector_change.patch
    * devices default to using service-time selector
  - Add 0016-RH-retain_hwhandler.patch
    * add retain_attached_hw_handler option, to let multipath keep an
      already attached scsi device handler
  - Add 0017-RH-netapp_config.patch
  - Add 0018-RH-remove-config-dups.patch
    * Clean up duplicates in the devices and blacklist sections


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-32
changelog:
  - Modified 0018-RH-remove-config-dups.patch
    * Made modified config remove original only if the vendor/product
      exactly match


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-33
changelog:
  - Modify 0016-RH-retain_hwhandler.patch
    * Check the dm-multipath module version, and don't enable
      retain_attached_hw_handler if the kernel doesn't support it
  - Add 0019-RH-detect-prio.patch
    * add detect_prio option, to make multipath check if the device
      supports the ALUA prio, before defaulting to the configured prio
  - Remove 0017-RH-netapp_config.patch
  - Add 0020-RH-netapp-config.patch
    * new netapp config that uses retain_attached_hw_handler and
      detect_prio to autoconfigure ALUA and non-ALUA devices.


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-35
changelog:
  - Add 0022-RHBZ-864368-disable-libdm-failback.patch
    * make kpartx and multiapthd disable libdm failback device creation
  - Add 0023-RHBZ-866291-update-documentation.patch
  - Resolves: bz #864368, #866291


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-38
changelog:
  - Add 0026-RH-fix-mpathpersist-fns.patch
  - Add 0027-RH-default-partition-delimiters.patch
    * Only use the -p delimiter when the device name ends in a number
  - Add 0028-RH-storagetek-config.patch
  - Add 0029-RH-kpartx-retry.patch
    * retry delete on busy loop devices
  - Add 0030-RH-early-blacklist.patch
    * multipath will now blacklist devices by device type and wwid in
      store_pathinfo, so that it doesn't do a bunch of unnecessary work
      on paths that it would only be removing later on.


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-40
changelog:
  - Add 0032-RH-make-path-fd-readonly.patch
    * revert change made when adding persistent reservations, so that path fds
      are again opened O_RDONLY


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-41
changelog:
  - Add 0033-RH-dont-disable-libdm-failback-for-sync-case.patch
    * make kpartx -s and multipath use libdm failback device creation, so
      that they work in environments without udev


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-42
changelog:
  - Add 0034-RHBZ-887737-check-for-null-key.patch
  - Add 0035-RHBZ-883981-cleanup-rpmdiff-issues.patch
    * Compile multipathd with full RELRO and PIE and install to /usr


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-44
changelog:
  - Add 0036-UP-fix-state-handling.patch
    * handle transport-offline and quiesce sysfs state
  - Add 0037-UP-fix-params-size.patch
  - Add 0038-RH-fix-multipath.rules.patch
    * make sure multipath's link priority gets increased
  - Add 0039-RH-handle-other-sector-sizes.patch
    * allow gpt partitions on 4k sector size block devices.
  - Add 0040-RH-fix-output-buffer.patch
    * fix multipath -ll for large configuration.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-45
changelog:
  - Updated to latest upstrem 0.4.9 code: multipath-tools-130222
    (git commit id: 67b82ad6fe280caa1770025a6bb8110b633fa136)
  - Refresh 0001-RH-dont_start_with_no_config.patch
  - Modify 0002-RH-multipath.rules.patch
  - Modify 0003-RH-Make-build-system-RH-Fedora-friendly.patch
  - Refresh 0004-RH-multipathd-blacklist-all-by-default.patch
  - Refresh 0005-RH-add-mpathconf.patch
  - Refresh 0006-RH-add-find-multipaths.patch
  - Add 0008-RH-revert-partition-changes.patch
  - Rename 0008-RH-RHEL5-style-partitions.patch to
  	 0009-RH-RHEL5-style-partitions.patch
  - Rename 0009-RH-dont-remove-map-on-enomem.patch to
  	 0010-RH-dont-remove-map-on-enomem.patch
  - Rename 0010-RH-deprecate-uid-gid-mode.patch to
  	 0011-RH-deprecate-uid-gid-mode.patch
  - Rename 0013-RH-kpartx-msg.patch to 0012-RH-kpartx-msg.patch
  - Rename 0035-RHBZ-883981-cleanup-rpmdiff-issues.patch to
           0013-RHBZ-883981-cleanup-rpmdiff-issues.patch
  - Rename 0039-RH-handle-other-sector-sizes.patch to
  	 0014-RH-handle-other-sector-sizes.patch
  - Rename 0040-RH-fix-output-buffer.patch to 0015-RH-fix-output-buffer.patch
  - Add 0016-RH-dont-print-ghost-messages.patch
  - Add 0017-RH-fix-sigusr1.patch
    * Actually this fixes a number of issues related to signals
  - Rename 0018-RH-remove-config-dups.patch to 0018-RH-fix-factorize.patch
    * just the part that isn't upstream
  - Add 0019-RH-fix-sockets.patch
    * makes abstract multipathd a cli sockets use the correct name.
  - Set find_multipaths in the default config


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-46
changelog:
  - Add 0020-RHBZ-907360-static-pthread-init.patch
    * statically initialize the uevent pthread structures


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-47
changelog:
  - Add 0021-RHBZ-919119-respect-kernel-cmdline.patch
    * keep the multipath.rules udev file from running and multipathd from
      starting if nompath is on the kernel command line
  - Add 0022-RH-multipathd-check-wwids.patch
    * Whenever multipath runs configure, it will check the wwids, and
      add any missing ones to the wwids file
  - Add 0023-RH-multipath-wipe-wwid.patch
    * multipath's -w command will remove a wwid from the wwids file
  - Add 0024-RH-multipath-wipe-wwids.patch
    * multipath's -W command will set reset the wwids file to just the current
      devices
  - Add 0025-UPBZ-916668_add_maj_min.patch
  - Resolves: bz #919119


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-48
changelog:
  - Add 0026-fix-checker-time.patch
    * Once multipathd hit it max checker interval, it was reverting to
      to shortest checker interval
  - Add 0027-RH-get-wwid.patch
    * Multipath wasn't correctly setting the multipath wwid when it read devices
      in from the kernel
  - Add 0028-RHBZ-929078-refresh-udev-dev.patch
    * Make multipath try to get the UID of down devices.  Also, on ev_add_path,
      make multipathd reinitialize existing devices that weren't fully
      initialized before.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-49
changelog:
  - Modify 0020-RHBZ-907360-static-pthread-init.patch
    * Don't initialize uevent list twice
  - Add 0029-RH-no-prio-put-msg.patch
  - Add 0030-RHBZ-916528-override-queue-no-daemon.patch
    * Default to "queue_without_daemon no"
    * Add "forcequeueing daemon" and "restorequeueing daemon" cli commands
  - Modify spec file to force queue_without_daemon when restarting
    multipathd on upgrades.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-50
changelog:
  - Add 0031-RHBZ-957188-kpartx-use-dm-name.patch
    * use the basename of the devices that will be created to choose the
      delimiter instead of using the device name from the command line
  - Resolves: bz #957188


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-51
changelog:
  - Add 0032-RHBZ-956464-mpathconf-defaults.patch
    * fix defaults listed in usage
  - Add 0033-RHBZ-829963-e-series-conf.patch
  - Add 0034-RHBZ-851416-mpathconf-display.patch
    * display whether or not multipathd is running in the status
  - Add 0035-RHBZ-891921-list-mpp.patch
    * add a new path format wilcard to list the multipath device associated
      with a path
  - Add 0036-RHBZ-949239-load-multipath-module.patch
    * load the dm-multipath kernel module when multipathd starts
  - Add 0037-RHBZ-768873-fix-rename.patch
    * When deciding on a multipth devices name on reload, don't default to
      the existing name if there is no config file alias and user_friendly_names
      isn't set. Use the wwid.
  - Modify multipath.conf
  - Resolves: bz #768873, #950252


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-52
changelog:
  - Add 0038-RHBZ-799860-netapp-config.patch
  - Add 0039-RH-detect-prio-fix.patch
    * Don't autodetect ALUA prioritizer unless it actually can get a priority
  - Add 0040-RH-bindings-fix.patch
    * Do a better job of trying to get the first free user_friendly_name
  - Add 0041-RH-check-for-erofs.patch
    * Don't create/reload a device read-only unless doing it read/write fails
      with EROFS
  - Remove 0017-RH-fix-sigusr1.patch
    * fix signal handling upstream way instead
  - Add 0042-UP-fix-signal-handling.patch
    * uxlsnr now handles all the signals sent to multipathd. This makes its
      signal handling posix compliant, and harder to mess up.
  - Add 0043-RH-signal-waiter.patch
    * ioctl isn't a pthread cancellation point.  Send a signal to the waiter
      thread to break out of waiting in ioctl for a dm event.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-53
changelog:
  - Add 0044-RHBZ-976688-fix-wipe-wwids.patch
    * Seek back to the start of the file after truncating it
  - Add 0045-RHBZ-977297-man-page-fix.patch
    * update man page to match actual defaults
  - Add 0046-RHBZ-883981-move-udev-rules.patch
    * move udev rules file from /lib to /usr/lib
  - Resolves: bz #883981, #976688, #977297


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-54
changelog:
  - Add 0047-RHBZ-980777-kpartx-read-only-loop-devs.patch
    * make kpartx support read-only files better
  - Resolves: bz #980777


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-55
changelog:
  - Modify 0015-RH-fix-output-buffer.patch
    * Fix memory leak
  - Add 0047-RHBZ-kpartx-read-only-loop-devs.patch
    * Fix read only loop device handling
  - Add 0048-RH-print-defaults.patch
  - Add 0049-RH-remove-ID_FS_TYPE.patch
    * remove ID_FS_TYPE udev enviroment variable for multipath devices
  - Add 0051-UP-fix-cli-resize.patch
    * check before dereferencing variables
  - Add 0052-RH-fix-bad-derefs.patch
    * setup multipath free the multipath device when it fails, so don't keep
      using it.
  - Add 0053-UP-fix-failback.patch
    * setting failback in the devices section was broken
  - Add 0054-UP-keep-udev-ref.patch
    * multipathd needs to keep the same udev object across reconfigures
  - Add 0055-UP-handle-quiesced-paths.patch
    * quiesced paths should be treated as down
  - Add 0056-UP-alua-prio-fix.patch
    * Don't count the preferred bit for paths that are active/optimized
  - Add 0057-UP-fix-tmo.patch
    * Cleanup how multipath sets dev_loss_tmo and fast_io_fail_tmo.  Also
      make multipath get changing values directly from sysfs, instead of
      from udev, which caches them.
  - Add 0058-UP-fix-failback.patch
    * make failback print the default value when you show configs.
  - Add 0059-UP-flush-failure-queueing.patch
    * If you can't flush a multipath device, restore the queue_if_no_paths
      value
  - Add 0060-UP-uevent-loop-udev.patch
    * make ueventloop grab it's own udev reference, since it is cancelled
      asychnrously.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-56
changelog:
  - Add 0061-RH-display-find-mpaths.patch
    * display the find_multipaths value in show config
  - Add 0062-RH-dont-free-vecs.patch
    * don't free the vecs structure on shutdown. It's more pain than
      it's worth.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-57
changelog:
  - Add 0063-RH-fix-warning.patch
    * Fix complier warning
  - 0064-fix-ID_FS-attrs.patch
    * make multipath create a timestamp file /run/multipathd/timestamp, and
      add -T<timestamp>:<valid> option to shortcut processing if the
      timestamp hasn't changed


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-58
changelog:
  - Add 0065-UPBZ-995538-fail-rdac-on-unavailable.patch
    * make rdac checker always mark paths with asymmetric access state of
      unavailable as down


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-59
changelog:
  - Add 0066-UP-dos-4k-partition-fix.patch
    * Make kpartx correctly handle 4K sector size devices with dos partitions.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-60
changelog:
  - Add 0067-RHBZ-1022899-fix-udev-partition-handling.patch
    * Make sure to wipe partition devices on change event if they weren't
      wiped on the device add event
  - Add 0068-RHBZ-1034578-label-partition-devices.patch
    * Make sure that partition devices are labeled like the whole device
  - Add 0069-UPBZ-1033791-improve-rdac-checker.patch
    *  Use RTPG data in RDAC checker
  - Add 0070-RHBZ-1036503-blacklist-td-devs.patch
  - Add 0071-RHBZ-1031546-strip-dev.patch
    * make multipathd interactive commands able to handle /dev/<devnode>
      instead of just <devnode>


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-61
changelog:
  - Add 0072-RHBZ-1039199-check-loop-control.patch
    * Make kpartx use LOOP_CTL_GET_FREE and loop-control to find a free
      loop device. This will autoload the loop module.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-62
changelog:
  - Modify 0072-RHBZ-1039199-check-loop-control.patch
    * only call close on the /dev/loop-control fd the open succeeds
  - Add 0073-RH-update-build-flags.patch
    * fix print call to work with -Werror=format-security compile flag


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-63
changelog:
  - Add 0074-RHBZ-1056976-dm-mpath-rules.patch
    * Add rules to keep from doing work in udev if there are no
      active paths, or if the event was for a multipath device
      reloading its table due to a path change.
  - Add 0075-RHBZ-1056976-reload-flag.patch
    * multipath code to identify reloads that the new rules can
      ignore
  - Add 0076-RHBZ-1056686-add-hw_str_match.patch
    * add a new default config paramter, "hw_str_match", to make user
      device configs only overwrite builtin device configs if the
      identifier strings match exactly, like the default in RHEL6.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-64
changelog:
  - Modify 0076-RHBZ-1056686-add-hw_str_match.patch
    * free temporary memory used during configuration
  - Add 0078-RHBZ-1054044-fix-mpathconf-manpage.patch
    * fix typo
  - Add 0079-RHBZ-1070581-add-wwid-option.patch
    * add multipath option "-a". To add a device's wwid to the wwids file
  - Add 0080-RHBZ-1075796-cmdline-wwid.patch
    * add multipath option "-A" to add wwids specified by the kernel
      command line mapth.wwid options.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-68
changelog:
  - Modify multipath.conf
    * remove getuid_callout example
  - Re-add 0050-RH-listing-speedup.patch
  - Add 0081-RHBZ-1066264-check-prefix-on-rename.patch
    * make multipath check the prefix on kpartx partitions during rename, and
      copy the existing behaviour
  - Add 0082-UPBZ-1109995-no-sync-turs-on-pthread_cancel.patch
    * If async tur checker fails on threads, don't retry with the sync version
  - Add 0083-RHBZ-1080055-orphan-paths-on-reload.patch
    * Fix case where pathlist wasn't getting updated properly
  - Add 0084-RHBZ-1110000-multipath-man.patch
    * fix errors in multipath man page
  - Add 0085-UPBZ-1110006-datacore-config.patch
    * Add support for DataCore Virtual Disk
  - Add 0086-RHBZ-1110007-orphan-path-on-failed-add.patch
    * If multipathd fails to add path correctly, it now fully orphans the path
  - Add 0087-RHBZ-1110013-config-error-checking.patch
    * Improve multipath.conf error checking.
  - Add 0088-RHBZ-1069811-configurable-prio-timeout.patch
    * checker_timeout now adjusts the timeouts of the prioritizers as well.
  - Add 0089-RHBZ-1110016-add-noasync-option.patch
    * Add a new defaults option, "force_sync", that disables the async mode
      of the path checkers. This is for cases where to many parallel checkers
      hog the cpu
  - Add 0090-UPBZ-1080038-reorder-paths-for-round-robin.patch
    * make multipathd order paths for better throughput in round-robin mode
  - Add 0091-RHBZ-1069584-fix-empty-values-fast-io-fail-and-dev-loss.patch
    * check for null pointers in configuration reading code.
  - Add 0092-UPBZ-1104605-reload-on-rename.patch
    * Reload table on rename if necessary
  - Add 0093-UPBZ-1086825-user-friendly-name-remap.patch
    * Keep existing user_friend_name if possible
  - Add 0094-RHBZ-1086825-cleanup-remap.patch
    * Cleanup issues with upstream patch
  - Add 0095-RHBZ-1127944-xtremIO-config.patch
    * Add support for EMC ExtremIO devices
  - Add 0096-RHBZ-979474-new-wildcards.patch
    * Add N, n, R, and r path wildcards to print World Wide ids
  - Add 0097-RH-fix-coverity-errors.patch
    * Fix a number of unterminated strings and memory leaks on failure
      paths.
  - Add 0098-UPBZ-1067171-mutipath-i.patch
    * Add -i option to ignore wwids file when checking for valid paths
  - Add 0099-RH-add-all-devs.patch
    * Add new devices config option all_devs. This makes the configuration
      overwrite the specified values in all builtin configs
  - Add 0100-RHBZ-1067171-multipath-i-update.patch
    * make -i work correctly with find_multipaths
  - Add 0101-RH-adapter-name-wildcard.patch
    * Add 'a' path wildcard to print adapter name


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-70
changelog:
  - Add 0102-RHBZ-1160478-mpathconf-template.patch
    * mpathconf no longer copies the default config template for the
      docs directory.  It simply writes the template itself.
  - Resolves: bz# 1160478


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-71
changelog:
  - Add 0103-RH-cleanup-partmaps-code.patch
    * code refactoring to prepare for next patch
  - Add 0104-RHBZ-631009-deferred-remove.patch
    * add deferred_remove option to /etc/multipath.conf
  - Add 0105-RHBZ-1148979-fix-partition-mapping-creation-race-with-kpartx.patch
    * Only run kpartx on device activation
  - Add 0106-RHBZ-1159337-fix-double-free.patch
    * made ev_remove_path exit immediately after failing setup_multipath, since
      it handles cleaning up the device
  - Add 0107-RHBZ-1169935-no-new-devs.patch
    * Add new multipathd option '-n' which keeps multipathd from creating any
      multipath devices that aren't in the /etc/multipath/wwids file.
  - Add 0108-RHBZ-1153832-kpartx-remove-devs.patch
    * switch from 'kpartx -a' to 'kpartx -u' to remove missing devices as well.
  - Add 0109-RH-read-only-bindings.patch
    * re-enabled -B option for multipathd


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-72
changelog:
  - Modify 0107-RHBZ-1169935-no-new-devs.patch
    * instead of using "-n" there is now a new configuration option,
      'ignore_new_boot_devs'. If set to 'yes', multipath will ignore
      devices that aren't in /etc/multipath/wwids when running in the
      initramfs. This option does nothing while multipathd is running
      in the real root filesystem.
  - Update 0109-RH-read-only-bindings.patch


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-73
changelog:
  - Add 0110-RHBZ-blacklist-vd-devs.patch
    * blacklist vd[a-z] devices, since they don't have a WWID for
      multipath to use.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-75
changelog:
  - Add 0111-RH-dont-show-pg-timeout.patch
    * The kernel doesn't support pg_timeout, so multipath shouldn't
      bother to display it
  - Add 0112-RHBZ-1194917-add-config_dir-option.patch
    * multipath will now also read its configuration from files with
      the .conf suffix in the directory specified by config_dir
      which defaults to /etc/multipath/conf.d
  - Add 0113-RHBZ-1194917-cleanup.patch
    * cleanup some unnecessary code
  - Add 0114-RHBZ-1196394-delayed-reintegration.patch
    * Add "delay_watch_checks" and "delay_wait_checks" options to delay
      reintegration of flakey paths.
  - Add 0115-RHBZ-1198418-fix-double-free.patch
    * multipath was freeing the multipath alias twice if it failed to create the
      multipath device.
  - Add 0116-UPBZ-1188179-dell-36xxi.patch
    * new builtin configurations.
  - Add 0117-RHBZ-1198424-autodetect-clariion-alua.patch
    * configure multipath to automatically detect alua settings on clariion
      devices.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-77
changelog:
  - Modify 0104-RHBZ-631009-deferred-remove.patch
    * add man page info
  - Refresh 0112-RHBZ-1194917-add-config_dir-option.patch
  - Refresh 0114-RHBZ-1196394-delayed-reintegration.patch
  - Add 0118-UPBZ-1200738-update-eternus-config.patch
    * update default config
  - Add 0119-RHBZ-1081397-save-alua-info.patch
    * make prioritizers save information between calls to speed them up.
  - Add 0120-RHBZ-1043093-realloc-fix.patch
    * free old memory if realloc fails.
  - Add 0121-RHBZ-1197234-rules-fix.patch
    * make sure kpartx runs after an DM_ACTIVATION event occurs.
  - Add 0122-RHBZ-1212590-dont-use-var.patch
    * use /run instead of /var/run
  - Add 0123-UPBZ-1166072-fix-path-offline.patch
    * Don't mark quiesce and transport-offline paths as offline
  - Add 0124-RHBZ-1209275-retrigger-uevents.patch
    * Make multipathd retrigger uevents when paths haven't successfully had
      their udev_attribute environment variable set by udev and add
      "retrigger_ties" and "retrigger_delay" to control this
  - Add 0125-RHBZ-1153832-kpartx-delete.patch
    * Delete all partition devices with -d (not just the ones in the partition
      table)
  - Add 0126-RHBZ-1211383-alias-collision.patch
    * make multipathd use the old alias, if rename failed and add
      "new_bindings_in_boot" to determine if new bindings can be added to
      the bindings file in the initramfs
  - Add 0127-RHBZ-1201030-use-blk-availability.patch
    * Make multipath use blk-availability.service
  - Add 0128-RHBZ-1222123-mpathconf-allow.patch
    * Add mpathconf --allow for creating specialized config files.
  - Add 0129-RHBZ-1241774-sun-partition-numbering.patch
    * Make kpartx correctly number sun partitions.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-80
changelog:
  - Add 0131-RHBZ-1259523-host_name_len.patch
    * increase size of host string
  - Add 0132-UPBZ-1259831-lock-retry.patch
    * retry locking when creating multipath devices


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-82
changelog:
  - Modify 0005-RH-add-mpathconf.patch
    * changed warning message
  - Modify 0102-RHBZ-1160478-mpathconf-template.patch
    * updated man page
  - Modify 0104-RHBZ-631009-deferred-remove.patch
    * refactor code and minor fix
  - Refresh 0107-RHBZ-1169935-no-new-devs.patch
  - Refresh 0112-RHBZ-1194917-add-config_dir-option.patch
  - Refresh 0126-RHBZ-1211383-alias-collision.patch
  - Add 0133-RHBZ-1296979-fix-define.patch
    * look for the correct libudev function to set define
  - Add 0134-RHBZ-1241528-check-mpath-prefix.patch
    * only touch devices with a "mpath-" dm uuid prefix
  - Add 0135-RHBZ-1299600-path-dev-uevents.patch
    * trigger path uevent the first time a path is claimed by multipath
  - Add 0136-RHBZ-1304687-wait-for-map-add.patch
    * wait for the device to finish being added before reloading it.
  - Add 0137-RHBZ-1280524-clear-chkr-msg.patch
  - Add 0138-RHBZ-1288660-fix-mpathconf-allow.patch
    * don't remove existing lines from blacklist_exceptions section
  - Add 0139-RHBZ-1273173-queue-no-daemon-doc.patch
  - Add 0140-RHBZ-1299647-fix-help.patch
  - Add 0141-RHBZ-1303953-mpathpersist-typo.patch
  - Add 0142-RHBZ-1283750-kpartx-fix.patch
    * only remove devices if their uuid says that they are the correct
      partition device
  - Add 0143-RHBZ-1299648-kpartx-sync.patch
    * default to using udev sync mode
  - Add 0144-RHBZ-1299652-alua-pref-arg.patch
    * allow "exclusive_pref_bit" argument to alua prioritizer
  - Add 0145-UP-resize-help-msg.patch
  - Add 0146-UPBZ-1299651-raw-output.patch
    * allow raw format mutipathd show commands, that remove headers and padding
  - Add 0147-RHBZ-1272620-fail-rm-msg.patch
  - Add 0148-RHBZ-1292599-verify-before-remove.patch
    * verify that all partitions are unused before attempting to remove a device
  - Add 0149-RHBZ-1292599-restore-removed-parts.patch
    * don't disable kpartx when restoring the first path of a device.
  - Add 0150-RHBZ-1253913-fix-startup-msg.patch
    * wait for multipathd daemon to write pidfile before returning
  - Add 0151-RHBZ-1297456-weighted-fix.patch
    * add wwn keyword to weighted prioritizer for persistent naming
  - Add 0152-RHBZ-1269293-fix-blk-unit-file.patch
    * use "Wants" instead of "Requires"
  - Add 0153-RH-fix-i686-size-bug.patch
    * use 64-bit keycodes for multipathd client commands
  - Add 0154-UPBZ-1291406-disable-reinstate.patch
    * don't automatically reinstate ghost paths for implicit alua devices
  - Add 0155-UPBZ-1300415-PURE-config.patch
    * Add default config for PURE FlashArray
  - Add 0156-UPBZ-1313324-dont-fail-discovery.patch
    * don't fail discovery because individual paths failed.
  - Add 0157-RHBZ-1319853-multipath-c-error-msg.patch
    * better error reporting for multipath -c
  - Add 0158-RHBZ-1318581-timestamp-doc-fix.patch
    * add documentation for -T
  - Add 0159-UPBZ-1255885-udev-waits.patch
    * make multipath and kpartx wait after for udev after each command


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-83
changelog:
  - Modify 0135-RHBZ-1299600-path-dev-uevents.patch
    * trigger uevents when adding wwids for existing devices during startup
  - Refresh 0136-RHBZ-1304687-wait-for-map-add.patch
  - Refresh 0150-RHBZ-1253913-fix-startup-msg.patch
  - Modify 0159-UPBZ-1255885-udev-waits.patch
    * fix bug in failure path
  - Add 0160-RH-udev-flags.patch
  - Add 0161-RHBZ-1311659-no-kpartx.patch
    * skip_kpartx option disables kpartx running on multipath devices
  - Add 0162-RHBZ-1333331-huawei-config.patch
    * Add default config for Huawei XSG1 array
  - Add 0163-UPBZ-1333492-resize-map.patch
    * restore old size if resize fails
  - Add 0164-RHBZ-1311463-dos-part-rollover.patch
    * fix incorrect partition size due to 4k device size rollover
  - Add 0165-UPBZ-1341748-MSA-2040-conf.patch
    * Add default config for MSA 2040 array
  - Add 0166-RHBZ-1323429-dont-allow-new-wwid.patch
    * don't allow path wwid to change while it is in use
  - Add 0167-RHBZ-1335176-fix-show-cmds.patch
    * and new show multipath format wildcard, 'f' to sho number of failures.
      This will hopefully be useful for tracking what happens to multipath
      devices for bz #1335176
  - Add 0168-RHBZ-1347769-shared-lock.patch
    * make multipath lock the path devices with a shared lock
  - Add 0169-UPBZ-1353357-json-output.patch
    * add mulitpathd json output command
  - Add 0170-UPBZ-1352925-fix-typo.patch
  - Add 0171-UPBZ-1356651-allow-zero-size.patch
    * Allow zero-sized paths to be added to a multipath device
  - Add 0172-RHBZ-1350931-no-active-add.patch
    * Allow paths to be added to a new map if no active paths exist. Also
      fixes 1351430


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-86
changelog:
  - Modify 0136-RHBZ-1304687-wait-for-map-add.patch
    * switch to missing_uev_wait_timeout to stop waiting for uev
  - Refresh 0137-RHBZ-1280524-clear-chkr-msg.patch
  - Refresh 0150-RHBZ-1253913-fix-startup-msg.patch
  - Refresh 0154-UPBZ-1291406-disable-reinstate.patch
  - Refresh 0156-UPBZ-1313324-dont-fail-discovery.patch
  - Refresh 0161-RHBZ-1311659-no-kpartx.patch
  - Refresh 0167-RHBZ-1335176-fix-show-cmds.patch
  - Add 0173-RH-update-man-page.patch
  - Add 0174-RHBZ-1362396-modprobe.patch
    * make starting the multipathd service modprobe dm-multipath in the
      sysvinit scripts
  - Add 0175-RHBZ-1357382-ordering.patch
    * force multipathd.service to start after systemd-udev-trigger.service
  - Add 0176-RHBZ-1363830-fix-rename.patch
    * initialized a variable to make dm_rename not fail randomly
  - Add 0177-libmultipath-correctly-initialize-pp-sg_id.patch
    * This and all the following patches add the rbd patch checker
  - Add 0178-libmultipath-add-rbd-discovery.patch
  - Add 0179-multipath-tools-add-checker-callout-to-repair-path.patch
  - Add 0180-multipath-tools-Add-rbd-checker.patch
  - Add 0181-multipath-tools-Add-rbd-to-the-hwtable.patch
  - Add 0182-multipath-tools-check-for-initialized-checker-before.patch
  - Add 0183-multipathd-Don-t-call-repair-on-blacklisted-path.patch
  - Add 0184-rbd-fix-sync-repair-support.patch
  - Add 0185-rbd-check-for-nonshared-clients.patch
  - Add 0186-rbd-check-for-exclusive-lock-enabled.patch
  - Add 0187-rbd-fixup-log-messages.patch
  - Add 0188-RHBZ-1368501-dont-exit.patch
    * make multipathd not exit if it encounters recoverable errors on startup
  - Add 0189-RHBZ-1368211-remove-retries.patch
    * add "remove_retries" multipath.conf parameter to make multiple attempts
      to remove a multipath device if it is busy.
  - Add 0190-RHBZ-1380602-rbd-lock-on-read.patch
    * pass lock_on_read when remapping image
  - Add 0191-RHBZ-1169168-disable-changed-paths.patch
    * add "disabled_changed_wwids" multipath.conf parameter to disable
      paths whose wwid changes
  - Add 0192-RHBZ-1362409-infinibox-config.patch
  - Add 0194-RHBZ-1351964-kpartx-recurse.patch
    * fix recursion on corrupt dos partitions
  - Add 0195-RHBZ-1359510-no-daemon-msg.patch
    * print a messages when multipathd isn't running
  - Add 0196-RHBZ-1239173-dont-set-flag.patch
    * don't set reload flag on reloads when you gain your first
      valid path
  - Add 0197-RHBZ-1394059-max-sectors-kb.patch
    * add "max_sectors_kb" multipath.conf parameter to set max_sectors_kb
      on a multipath device and all its path devices
  - Add 0198-RHBZ-1372032-detect-path-checker.patch
    * add "detect_checker" multipath.conf parameter to detect ALUA arrays
      and set the path checker to TUR
  - Add 0199-RHBZ-1279355-3pardata-config.patch
  - Add 0200-RHBZ-1402092-orphan-status.patch
    * clear status on orphan paths
  - Add 0201-RHBZ-1403552-silence-warning.patch
  - Add 0202-RHBZ-1362120-skip-prio.patch
    * don't run prio on failed paths
  - Add 0203-RHBZ-1363718-add-msgs.patch
  - Add 0204-RHBZ-1406226-nimble-config.patch
  - Add 0205-RHBZ-1416569-reset-stats.patch
    * add "reset maps stats" and "reset map <map> stats" multipathd
      interactive commands to reset the stats tracked by multipathd
  - Add 0206-RHBZ-1239173-pt2-no-paths.patch
    * make multipath correctly disable scanning and rules running when
      it gets a uevent and there are not valid paths.
  - Add 0207-UP-add-libmpathcmd.patch
    * New shared library, libmpathcmd, that sends and receives messages from
      multipathd. device-mapper-multipath now uses this library internally.
  - Add 0208-UPBZ-1430097-multipathd-IPC-changes.patch
    * validation that modifying commands are coming from root.
  - Add 0209-UPBZ-1430097-multipath-C-API.patch
    * New shared library. libdmmp, that presents the information from multipathd
      in a structured manner to make it easier for callers to use
  - Add 0210-RH-fix-uninstall.patch
    * Minor compilation fixes
  - Add 0211-RH-strlen-fix.patch
    * checks that variables are not NULL before passing them to strlen
  - Add 0212-RHBZ-1431562-for-read-only.patch
  - Make 3 new subpackages
    * device-mapper-multipath-devel, libdmmp, and libdmmp-devel. libmpathcmd
      and libmpathprio are in device-mapper-multipath-libs and
      device-mapper-multipath-devel. libdmmp is in its own subpackages
  - Move libmpathprio devel files to device-mapper-multipath-devel
  - Added BuildRequires on librados2-devel


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-87
changelog:
  - Remove Epoch from device-mapper requires
    * The RHEL releases of device-mapper set the Epoch, and this was
      accidentally retained in the fedora spec file.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.1-1.gitf21166a
changelog:
  - Update Source to the latest upstream commit
  - Add 0001-libmultipath-add-comment-about-resuming.patch
    * posted upstream
  - Add 0002-multipath-attempt-at-common-multipath.rules.patch
    * under discussion upstream
  - Add 0003-RH-fixup-udev-rules-for-redhat.patch
    * Redhat uses different udev rules that some other distros, so multipath
      has run at a different time. Not all upstream distros link /sbin and
      /usr/sbin either.
  - Add 0004-RH-Remove-the-property-blacklist-exception-builtin.patch
    * Allow multipath to be used on devices without multiple paths. NAK'ed
      upstream, but requested by Red Hat
  - Add 0005-RH-don-t-start-without-a-config-file.patch
    * Don't start multipath unless a config file exists. NAK'ed upstream,
      but requested by Red Hat
  - Add 0006-RH-use-rpm-optflags-if-present.patch
    * Make the build system fedora friendly
  - Add 0007-RH-add-mpathconf.patch
    * Add tool to help configure multipath with Red Hat defaults.
  - Add 0008-RH-add-wwids-from-kernel-cmdline-mpath.wwids-with-A.patch
    * Make multipath able to claim devices based on the kernel command line
      NAK'ed upstream but requested by Red Hat
  - Add 0009-RH-trigger-change-uevent-on-new-device-creation.patch
    * under discussion upstream


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.1-2.gitf21166a
changelog:
  - Modify 0004-RH-Remove-the-property-blacklist-exception-builtin.patch
    * update multipath.conf.5 man page to remove builtin listing
  - Modify 0005-RH-don-t-start-without-a-config-file.patch
    * update multipathd.8 man page to note that a config file is necessary
  - Modify 0007-RH-add-mpathconf.patch
    * add property blacklist-exception to default config file
  - Add 0010-libmultipath-change-how-RADOS-checker-is-enabled.patch
    * Makefile now autodetects librados. Posted upstream
  - Remove related RADOS option from spec file
  - Add 0011-multipath-set-verbosity-to-default-during-config.patch
    * Allow multipath to print warning messages during configuration.
      Posted upstream
  - Add 0012-mpath-skip-device-configs-without-vendor-product.patch
    * device entries without vendor/product were breaking configurations.
      Posted upsteam
  - Add 0013-multipathd-fix-show-maps-json-crash.patch
    * multipathd crashed showing json output with no devices. Posted
      upstream


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.1-4.git847cc43
changelog:
  - Update Source to the latest upstream commit
    * Previous patches 0001 and 0010-0013 are included in this commit.
  - Add 0001-libmultipath-update-3PARdata-builtin-config.patch
    * Change for building configuration. Posted upstream
  - Modify 0006-RH-use-rpm-optflags-if-present.patch
    * Add missing lines to actually use RPM_OPT_FLAGS.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.1-8.git847cc43
changelog:
  - Refresh 0001-libmultipath-update-3PARdata-builtin-config.patch
  - Add 0010-RH-warn-on-invalid-regex-instead-of-failing.patch
    * Change old-style multipath.conf regex "*" to a proper ".*" instead of
      failing


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.3-1
changelog:
  - Update Source to upstream 0.7.3 release
    * Previous patch 0001 is included in this commit, and 0002 was solved in a
      different manner causing some change to previous patch 0003
    * Previous patches 0003-0010 are now patches 0007-0014
  - Add 0001-mpathpersist-Fix-invalid-condition-check.patch
    * Fix incorrect check. posted upstream
  - Add 0002-multipath-add-man-page-info-for-my-prkey-changes.patch
    * Add missing man page info. posted upstream
  - Add 0003-multipath-there-is-no-none-path-state.patch
    * remove incorrect path state. posted upstream
  - Add 0004-mutipath-updated-Huawei-storage-config.patch
    * update builtin device configuration. posted upstream
  - Add 0005-multipath-fix-doc-typo.patch
    * fix man page typo. posted upstream
  - Add 0006-multipath-add-ghost_delay-parameter.patch
    * add new multipath.conf parameter "ghost_delay". posted upstream


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.4-1.git07e7bd5
changelog:
  - Update Source to the latest upstream commit
    * Previous patches 0001-0006 are included in this commit
    * Previous patches 0007-0014 are now patches 0015-0022
  - Add 0001-libmultipath-fix-tur-checker-locking.patch
    * Fixed spinlock bug. posted upstream
  - Add 0002-multipath-fix-DEF_TIMEOUT-use.patch
    * Add missing sec to ms conversion. posted upstream
  - Add 0003-multipathd-remove-coalesce_paths-from-ev_add_map.patch
    * Remove unused code. posted upstream
  - Add 0004-multipathd-remove-unused-configure-parameter.patch
    * Remove unused code. posted upstream
  - Add 0005-Fix-set_no_path_retry-regression.patch
    * Fix issue with queueing and path addition. posted upstream
  - Add 0006-multipathd-change-spurious-uevent-msg-priority.patch
    * Change message priority to Notice. posted upstream
  - Add 0007-multipath-print-sysfs-state-in-fast-list-mode.patch
    * Show sysfs state correctly in fast list mode (-l). posted upstream
  - Add 0008-libmultipath-move-remove_map-waiter-code-to-multipat.patch
    * Move code around. posted upstream
  - Add 0009-move-waiter-code-from-libmultipath-to-multipathd.patch
    * Move code around. posted upstream
  - Add 0010-call-start_waiter_thread-before-setup_multipath.patch
    * Fix race on multipath device creations. posted upstream
  - Add 0011-libmultipath-add-helper-functions.patch
    * posted upstream
  - Add 0012-multipathd-RFC-add-new-polling-dmevents-waiter-threa.patch
    * Add alternate method of getting dmevents, that doesn't
      require a thread per device. posted upstream
  - Add 0013-libmultipath-condlog-log-to-stderr.patch
    * change condlog to log to stderr instead of stdout. posted upstream
  - Add 0014-multipathd-fix-compiler-warning-for-uev_pathfail_che.patch
    * fix indentation issue. posted upstream


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.7.6-1.git1cb704b
changelog:
  - Update Source to the latest upstream commit
    * Previous patches 0001-0014 are included in this commit
    * Previous patches 0015-0022 are now patches 0007-0014
  - 0001-multipathd-remove-incorrect-pthread_testcancel.patch
    * Fixed pthread cancellation issue. posted upstream
  - 0002-multipath-add-comments.patch
    * Posted upstream
  - 0003-multipathd-minor-dmevents-polling-code-cleanups.patch
    * Fixed minor polling issues. posted upstream
  - 0004-multipathd-remove-unneeded-function-parameter.patch
    * Posted upstream
  - 0005-mpathcmd-fix-libmpathcmd-license.patch
    * License clarification. posted upstream
  - 0006-libmultipath-don-t-print-undefined-values.patch
    * Fixed bug in 'multipath show config'. posted upstream


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.6-2.git1cb704b
changelog:
  - Add 0007-libmultipath-Fix-logic-in-should_multipath.patch
    * fix bug in identifying multipathable devices. posted upstream
  - Rename files
    * Previous patches 0007-0014 are now patches 0008-0015


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.6-3.git1cb704b
changelog:
  - Add 0008-multipathd-add-failures-path-format-wildcard.patch
  - Add 0009-multipathd-fix-reservation_key-check.patch
  - Rename files
    * Previous patches 0008-0015 are now patches 0010-0017


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.7-1
changelog:
  - Update Source to 0.7.7
    * Previous patches 0001-0009 & 0016 are included in this commit
  - Add upstream patches since 0.7.7
    * patches 0001-0012 are from upstream commits since 0.7.7
  - Add 0013-libmultipath-print-correct-default-for-delay_-_check.patch
    * fix minor configuration printing issue. posted upstream
  - Add 0014-multipath.conf.5-clarify-property-whitelist-handling.patch
    * clarify property blacklist_excecptions handling in man page
      posted upstream
  - Add 0015-mpathpersist-add-all_tg_pt-option.patch
    * add new all_tg_pt multpiath.conf option. posted upstream
  - Add 0016-libmultipath-remove-rbd-code.patch
    * remove unused rbd code. posted upstream
  - Add 0017-mpathpersist-fix-aptpl-support.patch
    * add ":aptpl" suffix for reservation_key to fix aptpl support.
      posted upstream
  - Add 0018-multipath-don-t-check-timestamps-without-a-path.patch
    * fix multipath null dereference crash. posted upstream
  - Add 0019-libmultipath-fix-detect-alua-corner-case.patch
    * fix alua detection with retain_hardware_handler set to off. posted
      upstream
  - Add 0020-multipath-fix-setting-conf-version.patch
    * multipath wasn't setting the kernel version correctly. posted
      upstream
  - Add 0028-RH-reset-default-find_mutipaths-value-to-off.patch
    * default to RHEL7 and older device detection style. Redhat specific,
      to keep customer experience the same.
  - Rename files
    * Previous patches 0010-0015 & 0017 are now patches 0021-0027
  - Modify 0021-RH-fixup-udev-rules-for-redhat.patch
    * Fix spurious compile warning with redhat compile options
  - Modify 0022-RH-Remove-the-property-blacklist-exception-builtin.patch
    * clarify changes in man page


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.7-2.gitef6d98b
changelog:
  - Update Source to latest upstream commit
    * Previous patches 0001-0018 are included in this commit
  - Rename files
    * Previous patches 0019-0028 are now patches 0002-0003 & 0012-0019
  - Add 0001-libmultipath-remove-last-of-rbd-code.patch
  - Add 0004-mpathpersist-add-param-alltgpt-option.patch
    * mpathpersist now accepts --param-alltgpt
  - Add 0005-libmutipath-remove-unused-IDE-bus-type.patch
  - Add 0006-multipathd-add-new-protocol-path-wildcard.patch
    * multipathd show paths format now accepts %PATCH for the path protocol/transport
  - Add 0007-libmultipath-add-protocol-blacklist-option.patch
    * You can now use the "protocol" blacklist section parameter to blacklist
      by protocol/transport
  - Add 0008-libmultipath-remove-_filter_-blacklist-functions.patch
  - Add 0009-multipath-tests-change-to-work-with-old-make-version.patch
  - Add 0010-multipath-tests-add-blacklist-tests.patch
  - Add 0011-mpathpersist-add-missing-param-rk-usage-info.patch
  - Refresh 0013-RH-Remove-the-property-blacklist-exception-builtin.patch
  - Modify 0016-RH-add-mpathconf.patch
    * improve usage message and man page
  - Modify device-mapper-multipath.spec
    * updated dependencies


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-1
changelog:
  - Update Source to upstream version 0.7.8
    * Previous patches 0001-0011 are included in this version
  - Rename files
    * Previous patches 0012-0019 are now patches 0007-0014
  - Add 0001-multipath-tweak-logging-style.patch
  - Add 0002-multipathd-check-for-NULL-udevice-in-cli_add_path.patch
  - Add 0003-libmultipath-remove-max_fds-code-duplication.patch
  - Add 0004-multipathd-set-return-code-for-multipathd-commands.patch
  - Add 0005-mpathpersist-fix-registration-rollback-issue.patch
  - Add 0006-libmultipath-timeout-on-unresponsive-tur-thread.patch
    * The above 6 patches have been submitted upstream
  - Resolves: bz #1606947, #1631883


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-2
changelog:
  - Add 0015-libmultipath-free-allocated-value-in-set_int.patch
  - Add 0016-kpartx-fix-new-memory-leak-in-dm_find_part.patch
  - change hardcoded /usr/lib/udev/rules.d to _udevrulesdir
  - Resolves: bz #1606947


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-3
changelog:
  - Add 0017-BZ-1648397-fix-mpp-hwe-handling-when-paths-are-freed.patch
    * Fix crash by deleting in use hardware entry list pointer
  - Add 0018-libmultipath-cleanup-pthread_cleanup_pop-call.patch
    * Fix compiler warning
  - Add 0019-libmultipath-fix-false-removes-in-dmevents-polling-c.patch
    * The above 3 patches have been accepted upstream
  - Resolves: bz #1648397


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-5
changelog:
  - Add 0021-BZ-1673167-Fix-miscounting-active-paths.patch
  - Add 0022-BZ-1673167-ignore-failed-wwid-recheck.patch
  - Resolves: bz #1673167


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-6
changelog:
  - Fix multipath_conf_syntax CI test
    * need to wait for udev to settle before removing multipath device
  - Resolves: bz #1673167


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-1
changelog:
  - Update Source to upstream version 0.8.0
    * Previous patches 0001-0006 & 0015-0019 are included in this commit
  - Rename files
    * Previous patches 0007-0014 are now 0018-0025
    * Previous patches 0020-0023 are now 0001, 0006 & 0007
  - Add 0002-libmultipath-handle-existing-paths-in-marginal_path-.patch
  - Add 0003-multipathd-cleanup-marginal-paths-checking-timers.patch
  - Add 0004-libmultipath-fix-marginal-paths-queueing-errors.patch
  - Add 0005-libmultipath-fix-marginal_paths-nr_active-check.patch
  - Add 0008-libmutipath-continue-to-use-old-state-on-PATH_PENDIN.patch
  - Add 0009-multipathd-use-update_path_groups-instead-of-reload_.patch
  - Add 0010-multipath.conf-add-missing-options-to-man-page.patch
  - Add 0011-libmultipath-add-get_uid-fallback-code-for-NVMe-devi.patch
  - Add 0012-libmulitpath-cleanup-uid_fallback-code.patch
  - Add 0013-multipathd-handle-changed-wwids-by-removal-and-addit.patch
    * Multipath will now automatically remove and re-add paths if
      their wwid changes
  - Add 0014-multipathd-remove-wwid_changed-path-attribute.patch
  - Add 0015-multipathd-ignore-disable_changed_wwids.patch
    * Since paths are now getting removed and re-added there is
      no need to disable them.
  - Add 0016-multipathd-Don-t-use-fallback-code-after-getting-wwi.patch
  - Add 0017-libmultipath-silence-dm_is_mpath-error-messages.patch
  - Add 0026-RH-Fix-nvme-compilation-warning.patch
  - Add 0027-Fix-systemd-version-detection.patch
    * The above 16 patches have been submitted upstream
  - Add 0028-RH-attempt-to-get-ANA-info-via-sysfs-first.patch
    * Red Hat has a sysfs method to access the ANA state, which isn't
      upstream, and will not be. This will probably go away in the
      future.
  - Resolves: bz #1498546


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-2
changelog:
  - Add 0029-BZ-1700451-check-on-multipathd-without-starting-it.patch
  - Add 0030-BZ-1700451-test-socket-connection-in-non-blocking-mo.patch
    * the "multipath -u" call in 62-multipath.rules should no longer hang
      on multipathd startup.
  - Resolves: bz #1700451


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-3
changelog:
  - Add 0031-libmultipath-handle-clock_gettime-failures-in-tur-ch.patch
  - Add 0032-kpartx-fail-if-dup-of-dasd-file-descriptor-fails.patch
  - Add 0033-multipathd-fix-REALLOC_REPLY-with-max-length-reply.patch
  - Add 0034-multipathd-handle-NULL-return-from-genhelp_handler.patch
    * The above 4 patches have been submitted upstream
  - Related: bz #1498546


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-4
changelog:
  - Add 0035-BZ-1700911-hwtable-add-Lenovo-DE-series.patch
  - Add 0036-libmultipath-make-vector_foreach_slot_backwards-work.patch
    * Fix for bz #1713459
  - Fixes for bz #1666322 and #1669097 were included in 0.8.0 upstream
    code
  - Resolves: bz #1666322, #1669097, #1700911, #1713459


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.3-1
changelog:
  - Update Source to upstream version 0.8.3
    * This version includes the fixes for bz #1690515, #1703439,
        * Previous patches 0001-0017 & 0031-0036 are included in this version
  - Rename files
    * Previous patches 0018-0026 & 0028 are now 0004-0013
    * 0008-RH-add-mpathconf.patch has been modified to add a
      --property_blacklist option to fix bz #1753729
  - Add 0001-multipathd-warn-when-configuration-has-been-changed.patch
    * Multipath now logs a warning message when the configuration file
      has been changed to fix bz #1750594
  - Add 0002-libmultipath-fix-leak-in-foreign-code.patch
  - Add 0003-Fix-leak-in-mpathpersist.patch
    * The above 3 patches have been submitted upstream
  - Resolves: bz #1690515, #1703439, #1719562, #1747534, #1750594, #1753729


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.3-3
changelog:
  - Rename files
    * Previous patches 0004-0013 are now 0010-0019
    * 0014-RH-add-mpathconf.patch now makes mpathconf default to not
      printing foreign devices (bz #1760709)
  - Add 0004-libmultipath-remove-unused-path-prio_args.patch
  - Add 0005-libmultipath-constify-get_unaligned_be.patch
  - Add 0006-libmultipath-add-missing-hwe-mpe-variable-merges.patch
  - Add 0007-libmultipath-fix-sgio_get_vpd-looping.patch
  - Add 0008-libmultipath-add-vend_id-to-get_vpd_sgio.patch
  - Add 0009-libmultipath-add-code-to-get-vendor-specific-vpd-dat.patch
    * Add the '%g' maps and paths format wildcard, and the vpd_vendor
      multipath.conf devices section parameter. (bz #1527212)
  - Resolves: bz #1527212, #1760709


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-1
changelog:
  - Update Source to upstream version 0.8.4
    * This version includes the fixes for bz #1768894 & #1821214
    * Previous patches 0001-0009 are included in this version
  - Rename files
    * Previous patches 0010-0019 are now 0011-0020
  - Add 0001-libmultipath-assign-variable-to-make-gcc-happy.patch
  - Add 0002-libmutipath-don-t-close-fd-on-dm_lib_release.patch
  - Add 0003-libmultipath-allow-force-reload-with-no-active-paths.patch
    * make multipath and multipathd reload maps with no active paths
      (bz #1814858)
  - Add 0004-libmpathpersist-depend-on-libmultipath.patch
  - Add 0005-multipath-tools-Makefile-more-dependency-fixes-for-p.patch
  - Add 0006-multipath-tools-Makefile.inc-set-Wno-error-clobbered.patch
  - Add 0007-libmultipath-discovery.c-use-z-qualifier-for-size_t.patch
  - Add 0008-libmultipath-eliminate-more-signed-unsigned-comparis.patch
  - Add 0009-libmultipath-set_uint-fix-parsing-for-32bit.patch
  - Add 0010-multipath-tools-Makefile-add-install-dependency.patch
    * The above 10 patches have been submitted upstream
  - Resolves: bz #1768894, #1814858, #1821214


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-2
changelog:
  - Add 0021-libmultipath-remove-_blacklist_exceptions-functions.patch
  - Add 0022-libmultipath-fix-parser-issue-with-comments-in-strin.patch
  - Add 0023-libmultipath-invert-regexes-that-start-with-exclamat.patch
    * This commit also changes the default devnode blacklist to
      blacklist all devices except scsi, dasd, and nvme.
  - Resolves: bz #1828180


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-3
changelog:
  - Add 0024-libmultipath-make-dm_get_map-status-return-codes-sym.patch
  - Add 0025-multipathd-fix-check_path-errors-with-removed-map.patch
  - Add 0026-libmultipath-make-dm_flush_maps-only-return-0-on-suc.patch
  - Add 0027-multipathd-add-del-maps-multipathd-command.patch
  - Add 0028-multipath-make-flushing-maps-work-like-other-command.patch
  - Add 0029-multipath-delegate-flushing-maps-to-multipathd.patch
  - Add 0030-multipath-add-option-to-skip-multipathd-delegation.patch
    * The above 7 patches fix bz #1845875. Multipath now attempts to
      delegate device removal to multipathd, and multipathd handles
      external device removal better.
  - Add 0031-libmultipath-fix-sysfs-dev_loss_tmo-parsing.patch
    * Fixes bz #1852843
  - Add 0032-kpartx-read-devices-with-direct-IO.patch
    * Fixes bz #1814858
  - Add 0033-kpartx-handle-alternate-bsd-disklabel-location.patch
  - Add 0034-libmultipath-fix-checker-detection-for-nvme-devices.patch
    * fixes bz #1845915
  - Add 0035-Makefile.inc-trim-extra-information-from-systemd-ver.patch
  - Add 0036-kpartx-fix-Wsign-compare-error.patch
  - Resolves: bz #1814858, #1845875, #1845915, #1852843


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-4
changelog:
  - Add 0037-libmultipath-count-pending-paths-as-active-on-loads.patch
    * make udev treat the device as having paths, so it will run kpartx
    * Fixes bz #1846866
  - Resolves: bz #1846866


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-5
changelog:
  - Add 0038-multipath-deal-with-failures-flushing-maps.patch
    * Don't print "fail" if multipath needs to failback to removing
      a device itself.
    * Fixes bz #1845875
  - Modify multipath_conf_syntax CI test
    * It started failing because "multpath -F" can now start multipathd
      via the socket, and the test expected multipathd to not be running
  - Resolves: bz #1845875


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-6
changelog:
  - Add 0039-libmultipath-factor-out-code-to-get-vpd-page-data.patch
  - Add 0040-libmultipath-limit-reading-0xc9-vpd-page.patch
    * Only check for rdac support on configured devices, or devices where
      vpd page 0x00 indicates support for vpd page 0xc9
    * Fixes bz #1877415
  - Add 0041-libmultipath-add-device-to-hwtable.c.patch
    * Add support for Fujitsu Eternus AB/HB
    * Fixes bz #1857429
  - Add 0042-libmultipath-move-fast_io_fail-defines-to-structs.h.patch
  - Add 0043-libmultipath-add-eh_deadline-multipath.conf-paramete.patch
    * Fixes bz #1819897
  - Add 0044-libmultipath-don-t-dlclose-tur-checker-DSO.patch
    * Fixes bz #1875384
  - Add 0045-libmultipath-warn-about-missing-braces-at-end-of-mul.patch
    * Fixes bz #1897530
  - Add 0046-libmultipath-ignore-multipaths-sections-without-wwid.patch
    * Fixes bz #1897815
  - Add 0047-tests-fix-missing-priority-blacklist-test.patch
  - Add 0048-mpathpersist-Fix-Register-and-Ignore-with-0x00-SARK.patch
    * Make mpathpersist Register and Ignore command clear the registration
      with a 0x0 SARK, like sg_persist does.
    * Fixes bz #1894103
  - Add 0049-mpathpersist-update-prkeys-file-on-changing-registra.patch
    * Fixes bz #1900522
    * The above 11 patches have all been submitted upstream
  - Resolves: bz #1819897, #1857429, #1875384, #1877415, #1894103, #1897530
  - Resolves: bz #1897815, #1900522


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-6
changelog:
  - Add 0050-multipathd-Fix-multipathd-stopping-on-shutdown.patch
    * Fixes bz #1892496
  - Add 0051-multipath.conf.5-Improve-checker_timeout-description.patch
    * Fixes bz #1906073
  - Resolves: bz #1892496, #1906073


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-7
changelog:
  - Add 0052-libmultipath-check-for-null-wwid-before-strcmp.patch
    * Missing part of fix for bz #1897815
  - Add 0053-libmultipath-make-find_err_path_by_dev-static.patch
  - Add 0054-multipathd-avoid-io_err_stat-crash-during-shutdown.patch
  - Add 0055-multipathd-avoid-io_err_stat-ABBA-deadlock.patch
  - Add 0056-multipathd-use-get_monotonic_time-in-io_err_stat-cod.patch
  - Add 0057-multipathd-combine-free_io_err_stat_path-and-destroy.patch
  - Add 0058-multipathd-cleanup-logging-for-marginal-paths.patch
    * The above 6 patches fix bz #1920795
  - Add 0059-libmpathpersist-fix-thread-safety-of-default-functio.patch
    * Fixes bz #1913549
  - Resolves: bz #1897815, #1913549, #1920795


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-9
changelog:
  - Add 0060-kpartx-free-loop-device-after-listing-partitions.patch
    * Fixes bz #1925490
  - Add 0061-RH-fix-find_multipaths-in-mpathconf.patch
    * Fixes bz #1921651
  - Resolves: bz #1921651, #1925490


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-10
changelog:
  - Add 0062-libmultipath-select_action-don-t-drop-map-if-alias-c.patch
    * Fall back to WWID names instead of removing existing device
  - Add 0063-libmultipath-check-if-user_friendly_name-is-in-use.patch
    * make sure to choose a user_friendly_name that isn't in use
    * Fixes bz #1923777
  - Add alias_clash CI test
  - Resolves: bz #1923777


author: mahailiang <mahailiang@uniontech.com> 0.8.4-10.02
changelog:
  - remove patch :0001-modify-OPTFLAGS-for-loongarch64.patch
  - add :sed -i "s/-Werror //g" Makefile.inc


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-20
changelog:
  - Add 0079-libmultipath-use-typedef-for-keyword-handler-and-pri.patch
  - Add 0080-libmultipath-print-the-correct-file-when-parsing-fai.patch
  - Add 0081-libmultipath-pass-file-and-line-number-to-keyword-ha.patch
  - Add 0082-libmultipath-make-set_int-take-a-range-for-valid-val.patch
  - Add 0083-libmultipath-improve-checks-for-set_str.patch
  - Add 0084-libmultipath-split-set_int-to-enable-reuse.patch
  - Add 0085-libmultipath-cleanup-invalid-config-handling.patch
  - Add 0086-libmultipath-don-t-return-error-on-invalid-values.patch
    * Above 8 patches fix bz #1900595
  - Add 0087-multipathd-avoid-unnecessary-path-read-only-reloads.patch
    * Fixes bz #2009624
  - Resolves: bz #1900595, #2009624, #2021823


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-21
changelog:
  - Add 0088-libmultipath-make-helper-function-to-trigger-path-ue.patch
  - Add 0089-multipathd-trigger-udev-change-on-path-addition.patch
  - Resolves: bz #1862032


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-23
changelog:
  - Add 0091-multipath-tools-add-HPE-MSA-1060-2060-to-hwtable.patch
    * Partial fix for bz #2058222
  - Add 0092-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
    * Fixes bz #2065468
  - Add 0093-updated-HPE-MSA-builtin-config.patch
    * Fixes bz #2058222
  - Resolves bz #2065468, #2058222


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-24
changelog:
  - Add 0094-multipath-return-failure-on-an-invalid-remove-comman.patch
    * Fixes bz #2052054
  - Add 0095-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
  - Add 0096-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
  - Add 0097-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
  - Add 0098-libmultipath-make-protocol_name-global.patch
  - Add 0099-libmultipath-add-a-protocol-subsection-to-multipath..patch
  - Add 0100-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
  - Add 0101-libmultipath-check-the-overrides-pctable-for-path-va.patch
  - Add 0102-libmultipath-fix-eh_deadline-documentation.patch
  - Add 0103-libmultipath-Add-documentation-for-the-protocol-subs.patch
  - Add 0104-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
    * The above 10 patches implement feature from bz #2065477
  - Resolves: bz #2052054, #2065477


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-25
changelog:
  - Add 0105-multipathd-handle-fpin-events.patch
  - Add 0106-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
  - Resolves: bz #2083077


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-27
changelog:
  - Add 0108-multipathd-Add-missing-ctype-include.patch
  - Add 0109-multipathd-replace-libreadline-with-libedit.patch
    * replace readline with libedit, to avoid license conflicts
  - Resolves: bz #2119887


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.12-22
changelog:
  - Python 2 binary package renamed to python2-libdnet
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Dominik Mierzejewski <rpm[AT]greysector.net> 5.0.3-4
changelog:
  - fix FTBFS due to doc files in the wrong place (#1307717)
  - use license macro
  - drop unnecessary defattr declarations


author: Dominik Mierzejewski <rpm@greysector.net> - 1.3.6-1
changelog:
  - update to 1.3.6 (#1570224)
  - add BR: gcc for https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot
  - switch build system to cmake
  - add missing dependencies to -devel subpackage
  - use license and ldconfig_scriptlets macros


author: Petr Pisar <ppisar@redhat.com> - 0.20181119-1
changelog:
  - CVS snapshot taken on 2018-11-19 (release memory fence switched to a memory
    barrier on x86 and x86_64 platforms, support for ISO C14 and C17 added)


author: Petr Pisar <ppisar@redhat.com> - 0.20190722-1
changelog:
  - CVS snapshot taken on 2019-07-22 (ECB_MEMORXY_FENCE_RELAXED memory fence
    added, use the memory barriers of a C++ compiler)


author: Honza Horak <hhorak@redhat.com> - 13.1-3
changelog:
  - Add Requires: libpgtypes to avoid the need to test interoperability
    between the various combinations of old and new subpackages


author: Parag Nemade <paragn AT fedoraproject DOT org> - 1.1.3-10
changelog:
  - ant-nodeps is dropped from ant-1.9.0-2 build in rawhide
  - Drop buildroot, %clean, %defattr and removal of buildroot in %install


author: Karsten Hopp <karsten@redhat.com> 0.1.0-6.pre1.1
changelog:
  - Excludearch s390 s390x, we don't have USB devices there and this package
    doesn't build without USB support


author: Matthew Garrett <mjg@redhat.com> 0.1.0-7.pre1
changelog:
  - fprint-add-udev-rules.patch - build udev rules for autosuspend
  - move hal fdi into the main package rather than -devel
  - add autoreconf as a build depend while carrying the udev diff


author: Rex Dieter <rdieter@fedoraproject.org> - 0.5.1-5
changelog:
  - error opening ATTR{/sys/devices/pci0000:00/0000:00:1a.0/usb1/1-1/1-1.3/1-1.3:1.0/power/control} for writing (#950205)
  - %build: --disable-silent-rules


author: ChengLulu <chenglulu@loongson.cn> 8.3.1-6
changelog:
  - 向量优化
  - 支持动态栈对齐
  - 支持 -march＝la264 和 -march=la364
  - 编译库时默认使能 -mstrict-align；多库编译选项可用--with-multilib-list 控制
  - 添加__builtin_copysign{f,}支持
  - 默认使能编译参数“-fsched-pressure”
  - backport上游补丁:PR106462 PR106459


author: mosquito <sensor.wen@gmail.com> - 1.22.2-7
changelog:
  - Add GL_ARB_shader_texture_lod and copy_sub_image support (#1421055)
  - Add pkgconfig(egl) BReq for rawhide
  - Move BReqs to pkgconfig


author: Kalev Lember <klember@redhat.com> - 3.12.0-14
changelog:
  - Add gnome-keyring-devel provides (#1557241)
  - Minor spec cleanup
  - Use license macro for COPYING
  - Rely on pkgconfig dep extractor instead of manual glib2-devel requires
  - Tighten -devel requires with the _isa macro


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.0-1
changelog:
  - Use fresh 1.0 release tarball, which only adds the makerelease.sh script.
  - Drop unneeded BuildRoot stuff.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.1-5
changelog:
  - Patch configure.ac to define m4 macro dir.
  - BR autoconf libtool and run autoreconf -f for aarch64 updates (#925758).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.2-1
changelog:
  - BR libmowgli no longer needed.
  - M4 dir patch merged.
  - Update URLs.
  - Upgrade to 1.2 (in the API only added the no-op libguess_init).


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-4
changelog:
  - Ensure gxps_archive_read_entry() fills the GError in case of failure
  - Handle errors returned by archive_read_data()
  - Fixes CVE-2018-10733
  - Resolves: #1576113


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-5
changelog:
  - Fix integer overflow in png decoder
  - Clear the error before trying to load an image again
  - Resolves: #1524378


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Rafael Aquini <aquini@redhat.com> - 2.21-4
changelog:
  - Fix: task-size-overrun hung over 8 hours on ppc64le (1737370)
  - Introduce libhugetlbfs-tests subpkg for CI tests (1688930)


author: Rafael Aquini <aquini@redhat.com> - 2.21-12
changelog:
  - Fix: Introduce libhugetlbfs-tests subpkg for CI tests (1688930)
  - trim repetitive changelogs for interim debug builds


author: Rafael Aquini <aquini@redhat.com> - 2.21-13
changelog:
  - Fix: huge_page_setup_helper.py: SyntaxError: Missing parentheses in call to 'print' (1821938)
  - libhugetlbfs-tests: harden the testcases to satisfy EXECSHIELD RPMDiff checks (1785296)


author: Doug Ledford <dledford@redhat.com> - 1.3.11-1
changelog:
  - Update to latest upstream release (dependency for another package)
  - Enable valgrind in build
  - Related: bz1092538


author: Doug Ledford <dledford@redhat.com> - 1.3.12-1
changelog:
  - Build on s390
  - Update to latest version to work with OPA enabled libibumad
  - Related: bz1169962, bz1186159


author: Jakub 'Livio' Rusinek <jakub.rusinek@gmail.com> - 0.27-2
changelog:
  - Source... Changed
  - Debug information in libical main package... Excluded
  - Non-numbered .so files in libical main package... Moved
  - libical-devel documentation... Added


author: Debarshi Ray <rishi@fedoraproject.org> - 0.30-4
changelog:
  - Changed value of License according to Fedora licensing guidelines.
  - Enabled reentrant system calls and C++ bindings.
  - Omitted unused direct shared library dependencies.
  - Added ChangeLog, COPYING, LICENSE, NEWS and README to doc and dropped
    examples.


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.40-1
changelog:
  - Version bump to 0.40. (Red Hat Bugzilla #466359)
  - Add patch from upstream to fix crash in icalvalue.c.
  - Update makefile patch, remove the test part (already applied).
  - Package libical.pc, add Requires: pkgconfig to -devel.


author: Debarshi Ray <rishi@fedoraproject.org> - 0.41-2
changelog:
  - Switched off ICAL_ERRORS_ARE_FATAL for all distributions, except Fedora 11.
    (Red Hat Bugzilla #478331)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.43-1
changelog:
  - Version bump to 0.43.
  - Added patch to fix implicit pointer conversion from Debian. (Debian BTS
    - Upstream has switched off ICAL_ERRORS_ARE_FATAL by default. This behaviour
    is being retained across all distributions, including Fedora 11.
  - Added 'Requires: tzdata'.
  - Enabled backtrace dumps in the syslog.


author: Debarshi Ray <rishi@fedoraproject.org> - 0.43-4
changelog:
  - Updated patch to fix #includes in the headers to work with
    'pkg-config --cflags libical'. (Red Hat Bugzilla #484091)


author: Robert Scheck <robert@fedoraproject.org> 0.46-1
changelog:
  - Upgrade to 0.46 (#525933, #628893)
  - Fixed race in populating builtin timezone components (#637150)
  - Fixed wrong ICAL_ERRORS_ARE_FATAL preprocessor check (#575715)


author: Milan Crha <mcrha@redhat.com> - 2.0.0-1
changelog:
  - Update to 2.0.0
  - Remove patch for RH bug #1176204 (fixed upstream)
  - Add patch to fix ARM build break


author: Rex Dieter <rdieter@fedoraproject.org> - 3.0.3-3
changelog:
  - use %license
  - %build: use %make_build
  - -glib: add %ldconfig_scriptlets
  - -glib: no need to Obsoletes/Provides itself
  - -glib-devel: Requires -devel,-glib (instead of base pkg)
  - drop deprecated Group: tag
  - -devel: drop hardcoded pkgconfig deps (let rpm autodetection do it)


author: Milan Crha <mcrha@redhat.com> - 3.0.3-8
changelog:
  - Add patch for Red Hat bug #1661501 (Improve thread safety of icaltimezone_load_builtin_timezone())


author: Milan Crha <mcrha@redhat.com> - 3.0.7-1
changelog:
  - Update to 3.0.7
  - Remove patch to fix ICalAttach handling of the icalattach native structure (fixed upstream)


author: David King <amigadave@amigadave.com> - 0.15.1b-27
changelog:
  - Add ID3v1 zero padding patch from Debian
  - Add a fix for CVE-2017-11550 (#1478934)
  - Add a fix for CVE-2004-2779 (#1561983)
  - Use %license, remove Group tag
  - Add BuildRequires on gcc


author: lichao <lichaod@uniontech.com> - 1.0.47-1.01
changelog:
  - update: update to 1.0.47
  - spec: limit opencv BuildRequires
  - fix: fix incorrect pkg replacing relation(bugid:219967)
  - spec: sw BuildRequires: opencv


author: Bastien Nocera <bnocera@redhat.com> - 1.2.0-12
changelog:
  + libimobiledevice-1.2.0-12
  - Replace patches with a single mega-patch
  - Fixes usbmuxd for iOS 11 devices


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.3-3
changelog:
  - Allow for the tablet mode quirk to apply to touchpads (#1664225)
  - Add a quirk for the Asus VivoBook Flip to keep the
    keyboard and touchpad working in tablet mode


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
  - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy
  - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files
  - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure
  - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000]
  - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization
  - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working
  - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides
  - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-3
changelog:
  - Resolves: rhbz#2236414 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237302 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-4
changelog:
  - Related: rhbz#2236414 - dbus and crond getting terminated with SIGBUS in sss_client code
    Handle all invalidations consistently
    Supply a valid pointer to `sss_mmap_cache_validate_or_reinit()`, not a pointer to a local var


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-4.2
changelog:
  - Resolves: RHEL-19212 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-8.9.0.z]
  - Resolves: RHEL-19994 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8.9.0.z]


author: lichao <lichaod@uniontech.com> - 2.9.1-4.5.01
changelog:
  - fix: adjust sssd service to speed up system-booting (bugid:240631)
  - fix: sssd service failed (bugid:240325)
  - fix:add default conf file at /etc/sssd/ (bugid:197047)


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New stable upstream version 1.2.1
  - Resolves: rhbz#595529 - spec file should eschew %define in favor of
  -                         %global
  - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart.
  - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
  -                         keyring
  - Resolves: rhbz#599724 - sssd is broken on Rawhide


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.91-20
changelog:
  - New upstream version 1.2.91 (1.3.0rc1)
  - Improved LDAP failover
  - Synchronous sysdb API (provides performance enhancements)
  - Better online reconnection detection


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-30
changelog:
  - Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
  -                           against LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-32
changelog:
  - Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
  -                         doesn't require it


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
changelog:
  - New upstream release 1.4.0
  - Added support for netgroups to the LDAP provider
  - Performance improvements made to group processing of RFC2307 LDAP servers
  - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
  - Build-system improvements to support Gentoo
  - Split out several libraries into the ding-libs tarball
  - Manpage reviewed and updated


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
changelog:
  - New upstream release 1.4.1
  - Add support for netgroups to the proxy provider
  - Fixes a minor bug with UIDs/GIDs >= 2^31
  - Fixes a segfault in the kerberos provider
  - Fixes a segfault in the NSS responder if a data provider crashes
  - Correctly use sdap_netgroup_search_base


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-3
changelog:
  - Solve a shutdown race-condition that sometimes left processes running
  - Resolves: rhbz#606887 - SSSD stops on upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  -Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Fix nested group member filter sanitization for RFC2307bis
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#677768 - name service caches names, so id command shows
  -                         recently deleted users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.2-1
changelog:
  - New upstream release 1.5.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
  - Fixes for support of FreeIPA v2
  - Fixes for failover if DNS entries change
  - Improved sss_obfuscate tool with better interactive mode
  - Fix several crash bugs
  - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
  - Delete users from the local cache if initgroups calls return 'no such user'
  - (previously only worked for getpwnam/getpwuid)
  - Use new Transifex.net translations
  - Better support for automatic TGT renewal (now survives restart)
  - Netgroup fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
  - Fixes for Active Directory when not all users and groups have POSIX attributes
  - Fixes for handling users and groups that have name aliases (aliases are ignored)
  - Fix group memberships after initgroups in the IPA provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
  - Fixes for several crash bugs
  - LDAP group lookups will no longer abort if there is a zero-length member
  - attribute
  - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-3
changelog:
  - Fix systemd conversion. Upgrades from SysV to systemd weren't properly
  - enabling the systemd service.
  - Fix a serious memory leak in the memberOf plugin
  - Fix an issue where the user's full name would sometimes be removed
  - from the cache


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-5
changelog:
  - Resolves: rhbz#697057 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server
  - Upgrades from SysV should now maintain enabled/disabled status


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6
  - Fixed a serious memory leak in the memberOf plugin
  - Fixed a regression with the negative cache that caused it to be essentially
  - nonfunctional
  - Fixed an issue where the user's full name would sometimes be removed from
  - the cache
  - Fixed an issue with password changes in the kerberos provider not working
  - with kpasswd


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-1
changelog:
  - Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites
  -                         cached password with predicatable filename


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-3
changelog:
  - Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d
  - Make sure to properly convert to systemd if upgrading from newer
  - updates for Fedora 14


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.8-1
changelog:
  - New upstream release 1.5.8
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
  - Support for the LDAP paging control
  - Support for multiple DNS servers for name resolution
  - Fixes for several group membership bugs
  - Fixes for rare crash bugs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.9-1
changelog:
  - New upstream release 1.5.9
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
  - Support for overriding home directory, shell and primary GID locally
  - Properly honor TTL values from SRV record lookups
  - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
  - servers)
  - Properly escape IPv6 addresses in the failover code
  - Do not crash if inotify fails (e.g. resource exhaustion)
  - Don't add multiple TGT renewal callbacks (too many log messages)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.10-1
changelog:
  - New upstream release 1.5.10
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
  - Fixed a regression introduced in 1.5.9 that could result in blocking calls
  - to LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.11-2
changelog:
  - New upstream release 1.5.11
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
  - Fix a serious regression that prevented SSSD from working with ldaps:// URIs
  - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6
  - address being saved to the AAAA record


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release 1.6.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0
  - Add host access control support for LDAP (similar to pam_host_attr)
  - Finer-grained control on principals used with Kerberos (such as for FAST or
  - validation)
  - Added a new tool sss_cache to allow selective expiring of cached entries
  - Added support for LDAP DEREF and ASQ controls
  - Added access control features for Novell Directory Server
  - FreeIPA dynamic DNS update now checks first to see if an update is needed
  - Complete rewrite of the HBAC library
  - New libraries: libipa_hbac and libipa_hbac-python


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.1-1
changelog:
  - New upstream release 1.6.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1
  - Fixes a serious issue with LDAP connections when the communication is
    dropped (e.g. VPN disconnection, waking from sleep)
  - SSSD is now less strict when dealing with users/groups with multiple names
    when a definitive primary name cannot be determined
  - The LDAP provider will no longer attempt to canonicalize by default when
    using SASL. An option to re-enable this has been provided.
  - Fixes for non-standard LDAP attribute names (e.g. those used by Active
    Directory)
  - Three HBAC regressions have been fixed.
  - Fix for an infinite loop in the deref code


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Improved handling of users and groups with multi-valued name attributes
    (aliases)
  - Performance enhancements
      Initgroups on RFC2307bis/FreeIPA
      HBAC rule processing
  - Improved process-hang detection and restarting
  - Enabled the midpoint cache refresh by default (fewer cache misses on
    commonly-used entries)
  - Cleaned up the example configuration
  - New tool to change debug level on the fly


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-4
changelog:
  - Change selinux policy requirement to Conflicts: with the old version,
    rather than Requires: the supported version.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
changelog:
  - New upstream release 1.6.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3
  - Fixes a major cache performance issue introduced in 1.6.2
  - Fixes a potential infinite-loop with certain LDAP layouts


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-4
changelog:
  - Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758425 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.4-1
changelog:
  - New upstream release 1.6.4
  - Rolls up previous patches applied to the 1.6.3 tarball
  - Fixes a rare issue causing crashes in the failover logic
  - Fixes an issue where SSSD would return the wrong PAM error code for users
    that it does not recognize.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-1
changelog:
  - New upstream release 1.7.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0
  - Support for case-insensitive domains
  - Support for multiple search bases in the LDAP provider
  - Support for the native FreeIPA netgroup implementation
  - Reliability improvements to the process monitor
  - New DEBUG facility with more consistent log levels
  - New tool to change debug log levels without restarting SSSD
  - SSSD will now disconnect from LDAP server when idle
  - FreeIPA HBAC rules can choose to ignore srchost options for significant
    performance gains
  - Assorted performance improvements in the LDAP provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-3
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-5
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features - fix netgroups and sudo as well


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta1
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta2
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
  - Fix two minor manpage bugs
  - Include the IPA AutoFS provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
changelog:
  - New upstream release 1.8.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed several memory-corruption bugs
  - Finalized the ABI for the autofs support
  - Fixed a regression in the proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
changelog:
  - New upstream release 1.8.0
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)
  - Include the IPA AutoFS provider
  - Fixed several memory-corruption bugs
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed a regression in the proxy provider
  - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
  - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
                            logged at each login
  - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                            /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-7
changelog:
  - New upstream release 1.8.1
  - Resolve issue where we could enter an infinite loop trying to connect to an
    auth server
  - Fix serious issue with complex (3+ levels) nested groups
  - Fix netgroup support for case-insensitivity and aliases
  - Fix serious issue with lookup bundling resulting in requests never
    completing
  - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
    in addition to pam_authenticate
  - Fix several regressions in the proxy provider
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-8
changelog:
  - Fix uninitialized value bug causing crashes throughout the code
  - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-9
changelog:
  - Don't duplicate libsss_autofs.so in two packages
  - Set explicit package contents instead of globbing


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.2-10
changelog:
  - New upstream release 1.8.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
  - Several fixes to case-insensitive domain functions
  - Fix for GSSAPI binds when the keytab contains unrelated principals
  - Fixed several segfaults
  - Workarounds added for LDAP servers with unreadable RootDSE
  - SSH knownhostproxy will no longer enter an infinite loop preventing login
  - The provided SYSV init script now starts SSSD earlier at startup and stops
    it later during shutdown
  - Assorted minor fixes for issues discovered by static analysis tools


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.3-11
changelog:
  - New upstream release 1.8.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
  - Numerous manpage and translation updates
  - LDAP: Handle situations where the RootDSE isn't available anonymously
  - LDAP: Fix regression for users using non-standard LDAP attributes for user
    information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-1.beta1
changelog:
  - New upstream release 1.9.0 beta 1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
  - Add native support for autofs to the IPA provider
  - Support for ID-mapping when connecting to Active Directory
  - Support for handling very large (> 1500 users) groups in Active Directory
  - Support for sub-domains (will be used for dealing with trust relationships)
  - Add a new fast in-memory cache to speed up lookups of cached data on
    repeated requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-2.beta1
changelog:
  - Fix several regressions since 1.5.x
  - Ensure that the RPM creates the /var/lib/sss/mc directory
  - Add support for Netscape password warning expiration control
  - Rebuild against libldb 1.1.6


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-5.beta2
changelog:
  - New upstream release 1.9.0 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
  - Add support for the Kerberos DIR cache for storing multiple TGTs
    automatically
  - Major performance enhancement when storing large groups in the cache
  - Major performance enhancement when performing initgroups() against Active
    Directory
  - SSSDConfig data file default locations can now be set during configure for
    easier packaging


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-7.beta2
changelog:
  - Switch unicode library from libunistring to Glib
  - Drop unnecessary explicit Requires on keyutils
  - Guarantee that versioned Requires include the correct architecture


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-8.beta3
changelog:
  - New upstream release 1.9.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
  - Add a new PAC responder for dealing with cross-realm Kerberos trusts
  - Terminate idle connections to the NSS and PAM responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-9.beta4
changelog:
  - New upstream release 1.9.0 beta 4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4
  - Add a new AD provider to improve integration with Active Directory 2008 R2
    or later servers
  - SUDO integration was completely rewritten. The new implementation works
    with multiple domains and uses an improved refresh mechanism to download
    only the necessary rules
  - The IPA authentication provider now supports subdomains
  - Fixed regression for setups that were setting default_tkt_enctypes
    manually by reverting a previous workaround.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-12.beta5
changelog:
  - New upstream release 1.9.0 beta 5
  - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5
  - Many fixes for the support for setting default SELinux user context from
    FreeIPA, most notably fixed the specificity evaluation
  - Fixed an incorrect default in the krb5_canonicalize option of the AD
    provider which was preventing password change operation
  - The shadowLastChange attribute value is now correctly updated with the
    number of days since the Epoch, not seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-13.beta6
changelog:
  - New upstream release 1.9.0 beta 6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6
  - A new option, override_shell was added. If this option is set, all users
    managed by SSSD will have their shell set to its value.
  - Fixes for the support for setting default SELinux user context from FreeIPA.
  - Fixed a regression introduced in beta 5 that broke LDAP SASL binds
  - The SSSD supports the concept of a Primary Server and a Back Up Server in
    failover
  - A new command-line tool sss_seed is available to help prime the cache with
    a user record when deploying a new machine
  - SSSD is now able to discover and save the domain-realm mappings
    between an IPA server and a trusted Active Directory server.
  - Packaging changes to fix ldconfig usage in subpackages (#843995)
  - Rebuild against libldb 1.1.9


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-14.beta6
changelog:
  - Don't discard HBAC rule processing result if SELinux is on
    Resolves: rhbz#846792 (CVE-2012-3462)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-18.beta6
changelog:
  - Change the default ccache location to DIR:/run/user/${UID}/krb5cc
    and patch man page accordingly
  - Resolves: rhbz#851304


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-3
changelog:
  - Recreate Kerberos ccache directory if it's missing
  - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
                            directory /run/user/UID/ccdir does not exist


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-4.beta1
changelog:
  - Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug
    in ding-libs
  - Fix SSH integration with fully-qualified domains
  - Add the ability to dynamically discover the NetBIOS name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-6.beta1
changelog:
  - Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
                            realm join
  - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
                            default for AD Provider
  - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
                            parent directory when logging in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-7.beta1
changelog:
  - Apply a couple of patches from upstream git that resolve crashes when
    ID mapping object was not initialized properly but needed later


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-8.beta2
changelog:
  - New upstream release 1.10 beta2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
  - BuildRequire libcmocka-devel in order to run all upstream tests during build
  - BuildRequire libnl3 instead of libnl1
  - No longer BuildRequire initscripts, we no longer use /sbin/service
  - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any
    older krb5-libs version


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-9.beta2
changelog:
  - Fix typo in Requires that prevented an upgrade (#973916)
  - Use a hardcoded version in Conflicts, not less-than-current


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-11.beta2
changelog:
  - Apply a number of patches from upstream to fix issues found post-beta,
    in particular:
    -- segfault with a high DEBUG level
    -- Fix IPA password migration (upstream #1873)
    -- Fix fail over when retrying SRV resolution (upstream #1886)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-14
changelog:
  - Fix Obsoletes: to account for dist tag
  - Convert post and pre scripts to run on the sssd-common subpackage
  - Remove old conversion from SYSV


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-16
changelog:
  - Move sssd_pac to the sssd-ipa and sssd-ad subpackages
  - Trim out RHEL5-specific macros since we don't build on RHEL 5
  - Trim out macros for Fedora older than F18
  - Update libldb requirement to 1.1.16
  - Trim RPM changelog down to the last year


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0.2beta2
changelog:
  - Resolves: #906427 - Do not use %{_lib} in specfile for the nss and
                        pam libraries


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-0.4.beta2
changelog:
  - Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid:
                        Process /usr/libexec/sssd/sssd_nss was killed by
                        signal 11 (SIGSEGV)
  - Resolves: #996214 - sssd proxy_child segfault


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-2
changelog:
  - Backport simplification of ccache management from 1.11.1
  - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-3
changelog:
  - Fix multicast checks in the SSSD
  - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source
                             code getting the host info


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-1
changelog:
  - New upstream release 1.11.2
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.3-1
changelog:
  - New upstream release 1.11.3
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.4-1
changelog:
  - New upstream release 1.11.4
  - Remove upstreamed patch
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.5-1
changelog:
  - New upstream release 1.11.5
  - Remove upstreamed patch
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.1-2
changelog:
  - Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user
                             private group from server


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.2-6
changelog:
  - Fix regressions and bugs in sssd upstream 1.12.2
  - https://fedorahosted.org/sssd/ticket/{id}
  - Regressions: #2471, #2475, #2483, #2487, #2529, #2535
  - Bugs: #2287, #2445


author: Sumit Bose <sbose@redhat.com> - 1.12.2-7
changelog:
  - Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes
                             crash in wbinfo
                             - in addition to the patch libwbclient.so is
                               filtered out of the Provides list of the package


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-1
changelog:
  - New upstream release 1.12.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3
  - Fix spelling errors in description (fedpkg lint)


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-2
changelog:
  - Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus
  - Resolves: rhbz#1179379 - gzip: stdin: file size changed while
                             zipping when rotating logfile


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-3
changelog:
  - Apply a number of patches from upstream to fix issues found 1.12.3
  - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple
                             interfaces, or isn't documented to be able to
  - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is
                            not running
  - Resolves: upstream #2557  authentication failure with user from AD


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-4
changelog:
  - Decrease priority of sssd-libwbclient 20 -> 5
  - It should be lower than priority of samba veriosn of libwbclient.
  - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-6
changelog:
  - Fix double free in monitor
  - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort():
                          sssd killed by SIGABRT


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-2
changelog:
  - Add support for python3 bindings
  - Add requirement to python3 or python3 bindings
  - Resolves: rhbz#1014594 - sssd: Support Python 3


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-5
changelog:
  - Fix regressions with ipa and SELinux
  - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security
                               context on client is staff_u


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-6
changelog:
  - Fix slow login with ipa and SELinux
  - Resolves: upstream #2624 - Only set the selinux context if the context
                               differs from the local one


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-8
changelog:
  - Backport important patches from upstream 1.13 prerelease
  - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable
                             attribute for group name
  - Resolves: upstream #2335 - Investigate using the krb5 responder
                               for driving the PAM conversation with OTPs
  - Enable cmocka tests for secondary architectures


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-4
changelog:
  - Fix ipa-migration bug
  - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled
                               migration mode


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-6
changelog:
  - Fix OTP bug
  - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were
                               entered separately


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.1-2
changelog:
  - Fix few segfaults
  - Resolves: upstream #2811 - PAM responder crashed if user was not set
  - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.1-3
changelog:
  - python-sssdconfig: Fix parssing sssd.conf without config_file_version
  - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-5
changelog:
  - Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA
                             groups during getgrnam and getgrgid
  - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses
                             in call to 'print'


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-6
changelog:
  - Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password
                             prompts (e.g. Password + Token)
  - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed
                             by remote host" if locale not available


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.4-3
changelog:
  - Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element():
                             sssd_ifp killed by SIGSEGV


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.1-2
changelog:
  - Backport important patches from upstream 1.14.2 prerelease
  - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after
                               boot
  - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.1-3
changelog:
  - Fix regression with krb5_map_user
  - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore
  - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError:
                             default if nonexistent domain is mentioned


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.2-2
changelog:
  - Resolves: rhbz#1369130 - nss_sss should not link against libpthread
  - Resolves: rhbz#1392916 - sssd failes to start after update
  - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses
                             on the directory /etc/sssd


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.0-4
changelog:
  - Cherry-pick patches from upstream that enable the files provider
  - Enable the files domain
  - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch
    which is superseded by the files domain autoconfiguration
  - Related: rhbz#1357418 - SSSD fast cache for local users


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.2
changelog:
  - Fix issue with IPA + SELinux in containers
  - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.3
changelog:
  - Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication
  - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with
                             file from package sssd-common-1.15.1-1.fc25.x86_64
  - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-4
changelog:
  - Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write
                             access on the sock_file system_bus_socket
  - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and
                             fails to download desktop profile data
  - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3
  - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients
                              after applying ID Views for them in IPA server
  - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id
                              mapping is applied


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-5
changelog:
  - Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when
                             searching in local cache database access on
                             the sock_file system_bus_socket


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.16.0-5
changelog:
  - Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in
                              setnetgrent_result_timeout
  - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted
                              or machine swaps
  - Resolves: failure in glibc tests
              https://sourceware.org/bugzilla/show_bug.cgi?id=22530
  - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and
                              auth_provider ldap, login fails if the LDAP server
                              is not allowing anonymous binds
  - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is
                              corrected with AD
  - Resolves: upstream#3586 - Give a more detailed debug and system-log message
                              if krb5_init_context() failed
  - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet
                             in /etc/systemd/system
  - Backport few upstream features from 1.16.1


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.0-12
changelog:
  - Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                             with no specific host/hostgroup set
  - Resolves: upstream#3621 - FleetCommander integration must not require
                              capability DAC_OVERRIDE


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-2
changelog:
  - Resolves: upstream#3573 - sssd won't show netgroups with blank domain
  - Resolves: upstream#3660 - confdb_expand_app_domains() always fails
  - Resolves: upstream#3658 - Application domain is not interpreted correctly
  - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to
                              json_loads()
  - Resolves: upstream#3386 - KCM: Payload buffer is too small
  - Resolves: upstream#3666 - Fix usage of str.decode() in our tests
  - A few KCM misc fixes


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-3
changelog:
  - Resolves: upstream#3684 - A group is not updated if its member is removed
                              with the cleanup task, but the group does not
                              change
  - Resolves: upstream#3558 - sudo: report error when two rules share cn
  - Tone down shutdown messages for socket activated responders
  - IPA: Qualify the externalUser sudo attribute
  - Resolves: upstream#3550 - refresh_expired_interval does not work with
                              netgrous in 1.15
  - Resolves: upstream#3402 - Support alternative sources for the files provider
  - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option
  - Resolves: upstream#3679 - Make nss netgroup requests more robust
  - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not
                              configured
  - Resolves: upstream#3469 - extend sss-certmap man page regarding priority
                              processing
  - Improve docs/debug message about GC detection
  - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes
                              list out of bound?
  - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is
                              set.
  - Document which principal does the AD provider use
  - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is
                              defined, but contains no SIDs
  - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM
  - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data
                             Provider returned an error
                             [org.freedesktop.sssd.Error.DataProvider.Fatal]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-1
changelog:
  - Update to 1.16.2 release
  - Cleanup unused global definitions
  - Remove python2 references from the spec file
  - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-2
changelog:
  - Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication
                             fails with the KCM ccache


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-4
changelog:
  - Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local
                             users


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-7
changelog:
  - Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it
                             differs from the default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-8
changelog:
  - Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function():
                              /usr/libexec/sssd/sssd_be killed by 11 crash
                              func _dbus_list_unlink


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-9
changelog:
  - Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del
                             commands in man pages since local provider
                             is deprecated


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-10
changelog:
  - Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not
                             started due to a misconfiguration


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-11
changelog:
  - Resolves: rhbz#1628122 - Printing incorrect information about domain
                             with sssctl utility


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-16
changelog:
  - Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a
                            PKCS#11 URI


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-17
changelog:
  - Related: rhbz#1637131 - pam_unix unable to match fully qualified username
                            provided by sssd during smartcard auth using gdm


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-18
changelog:
  - Related: rhbz#1638006 - Files: The files provider always enumerates
                            which causes duplicate when running getent passwd


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-19
changelog:
  - Add OSCP checks for p11_child
  - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local
                            users


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-21
changelog:
  - Related: rhbz#1638150 - session not recording for local user when groups defined
  - Also add silence a Coverity warning, which is related to rhbz#1637131


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-23
changelog:
  - Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui
                             with smart card


author: Michal Židek <mzidek@redhat.com> - 2.0.0-24
changelog:
  - Resolves: rhbz#1646168 - sssctl access-report always prints an error message
  - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the
                             configuration without having to restart the whole
                             sssd
  - Resolves: rhbz#1640576 - sssctl reports incorrect information about local
                             user's cache entry expiration time
  - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user
  - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys


author: Michal Židek <mzidek@redhat.com> - 2.0.0-25
changelog:
  - Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly
                             for D-bus, resulting in a crash


author: Michal Židek <mzidek@redhat.com> - 2.0.0-27
changelog:
  - Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work
                             if ID provider is authenticated with GSSAPI


author: Michal Židek <mzidek@redhat.com> - 2.0.0-29
changelog:
  - Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise():
                             /usr/libexec/sssd/proxy_child killed by 6


author: Michal Židek <mzidek@redhat.com> - 2.0.0-30
changelog:
  - Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to
                        retrieve AD users through IPA Trust


author: Michal Židek <mzidek@redhat.com> - 2.0.0-32
changelog:
  - Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc
              and libtevent to avoid an issue in GPO processing


author: Michal Židek <mzidek@redhat.com> - 2.0.0-33
changelog:
  - Resolves: rhbz#1646113 - Missing concise documentation about valid options
                             for sssd-files-provider


author: Michal Židek <mzidek@redhat.com> - 2.0.0-34
changelog:
  - Resolves: rhbz#1622008 - Error message when IPA server uninstall calls
                             kdestroy caused by KCM returning a wrong error
                             code during the delete operation


author: Michal Židek <mzidek@redhat.com> - 2.0.0-36
changelog:
  - Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss
                             suggests using * for backend sss


author: Michal Židek <mzidek@redhat.com> - 2.0.0-38
changelog:
  - Resolves: rhbz#1578014 - sssd does not work under non-root user
  - Note: Actually the patches were in the 2.0.0-37, this one just adds this
          changelog because it was missing.


author: Michal Židek <mzidek@redhat.com> - 2.0.0-39
changelog:
  - Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than
                             1.x, this can result in time outs


author: Michal Židek <mzidek@redhat.com> - 2.0.0-40
changelog:
  -Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error.
                            UnknownProperty: Unknown property


author: Michal Židek <mzidek@redhat.com> - 2.0.0-41
changelog:
  -Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong
                            subdomain service name being used


author: Michal Židek <mzidek@redhat.com> - 2.0.0-42
changelog:
  - Resolves: rhbz#1645291 - Perform some basic ccache initialization as part
                             of gen_new to avoid a subsequent switch call
                             failure


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-43
changelog:
  - Resolves: rhbz#1672780 - gdm login not prompting for username when smart
                             card maps to multiple users


author: Michal Židek <mzidek@redhat.com> - 2.0.0-45
changelog:
  - Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is
    done here in order to unblock gating changes before rebase.
  - Related: rhbz#1682305


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-2
changelog:
  - Resolves: rhbz#1673443 - sssd man pages: The default value of
                             "ldap_user_home_directory" is not mentioned
                             with AD server configuration


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-3
changelog:
  - Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with
                             no members


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-4
changelog:
  - Resolves: rhbz#1283798 - sssd failover does not work on connecting to
                             non-responsive ldaps:// server


author: Michal Židek <mzidek@redhat.com> - 2.2.0-6
changelog:
  - Resolves: rhbz#1726945 - negative cache does not use values from
                             'filter_users' config option for known domains


author: Michal Židek <mzidek@redhat.com> - 2.2.0-7
changelog:
  - Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is
                             not FIPS140 compliant


author: Michal Židek <mzidek@redhat.com> - 2.2.0-8
changelog:
  - Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder
                             repository
                           - This just required a raise in release number
                             and changelog for the record.


author: Michal Židek <mzidek@redhat.com> - 2.2.0-10
changelog:
  - Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing
                             the trailing colon


author: Michal Židek <mzidek@redhat.com> - 2.2.0-11
changelog:
  - Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                             non-root user


author: Michal Židek <mzidek@redhat.com> - 2.2.0-13
changelog:
  - Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
              systemd-user service in the account phase in RHEL-8


author: Michal Židek <mzidek@redhat.com> - 2.2.0-14
changelog:
  - Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                             should not cause files domain entries to be
                             qualified, this can break sudo access


author: Michal Židek <mzidek@redhat.com> - 2.2.0-15
changelog:
  - Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                             loop if wrong PIN was provided


author: Michal Židek <mzidek@redhat.com> - 2.2.0-16
changelog:
  - Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                             the IP address of the machine updated in IPA upon
                             sssd.service startup


author: Michal Židek <mzidek@redhat.com> - 2.2.0-17
changelog:
  - Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                             keyring
  - Also apply a patch to fix gating tests issue


author: Michal Židek <mzidek@redhat.com> - 2.2.0-18
changelog:
  - Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
  - Also sync. kcm multihost tests with master


author: Michal Židek <mzidek@redhat.com> - 2.2.0-19
changelog:
  - Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                             new ones (kcm)


author: Michal Židek <mzidek@redhat.com> - 2.2.3-2
changelog:
  * Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release
              PART2: Fix gating issue.


author: Michal Židek <mzidek@redhat.com> - 2.2.3-3
changelog:
  * Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release
              Increasing version number to pick latest libldb


author: Michal Židek <mzidek@redhat.com> - 2.2.3-4
changelog:
  * Resolves: rhbz#1781728 - sssctl config-check command does not give proper
                             error messages with line numbers


author: Michal Židek <mzidek@redhat.com> - 2.2.3-5
changelog:
  * Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character
                             for match rules sss-certmap


author: Michal Židek <mzidek@redhat.com> - 2.2.3-9
changelog:
  * Resolves: rhbz#1783190 - [abrt] [faf] sssd:
                             raise(): /usr/libexec/sssd/sssd_autofs killed by 6


author: Michal Židek <mzidek@redhat.com> - 2.2.3-10
changelog:
  * Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap
                             connection timeout


author: Michal Židek <mzidek@redhat.com> - 2.2.3-14
changelog:
  - Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be
                             specified up to the seconds


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-16
changelog:
  - Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is
                             omitted and auth_provider is krb5


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-17
changelog:
  - Resolves: rhbz#1718193 - p11_child should have an option to skip
                             C_WaitForSlotEvent if the PKCS#11 module
                             does not implement it properly


author: Michal Židek <mzidek@redhat.com> - 2.2.3-18
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1810634 - id command taking 1+ minute for returning user
                             information


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate
                             (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-1
changelog:
  - Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3
  - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure
  - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-2
changelog:
  - Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-3
changelog:
  - Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package
  - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP
  - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache
  - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for
                             inotify events, and no updates are triggered
  - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card"
                             on GDM login with smart-card
  - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat
  - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network.
  - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management
  - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest
                             if LDAP entries do not contain AD forest root information
  - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories
                             in SSSD-AD direct integration.
  - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card
  - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False
  - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-4
changelog:
  - Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication
  - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider
  - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-5
changelog:
  - Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache
  - Fixed "requires/provides" rpmdiff warning


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-7
changelog:
  - Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.
  - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-8
changelog:
  - Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working
  - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema
  - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf
  - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-9
changelog:
  - Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-1
changelog:
  - Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4
  - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI
  - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search()
  - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording
  - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x
  - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD.
  - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process
  - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL
  - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase)
  - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page
  - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals"
  - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains
  - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file
  - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes
  - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff
  - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command
  - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-3
changelog:
  - Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr()
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal
  - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-4
changelog:
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8]
  - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-5
changelog:
  - Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-6
changelog:
  - Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
  - Resolves: rhbz#1915395 - Memory leak in the simple access provider
  - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-7
changelog:
  - Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
  - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
  - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-8
changelog:
  - Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
  - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.0-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
  - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
  - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
  - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
  - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
  - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
  - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
  - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
  - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
  - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
  - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
  - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
  - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
  - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
  - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
  - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
  - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
  - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
  - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
  - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
  - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
  - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
  - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
  - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
  - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
  - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
  - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
  - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
  - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-2
changelog:
  - Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
  - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
  - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
  - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
  - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
  - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
  - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2
changelog:
  - Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
  - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1
changelog:
  - Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
  - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected
  - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator
  - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed
  - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb
  - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces)
  - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s
  - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
  - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA
  - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
  - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1
changelog:
  - Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
  - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
  - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
  - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
  - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
  - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
  - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
  - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
  - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
  - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
  - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
  - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-3
changelog:
  - Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
  - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
  - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
  - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-2
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
  - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
  - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
  - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
  - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
  - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
  - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
  - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
  - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
  - Resolves: rhbz#2087745 - 2FA prompting setting ineffective
  - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.2-1
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
  - Resolves: rhbz#2098617 - Harden kerberos ticket validation
  - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
  - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
  - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-5
changelog:
  - Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release
    Rebuild against Samba rebase.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.1-1
changelog:
  - Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
  - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr
  - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter
  - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
  - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
  - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
  - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization
  - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around
  - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-1
changelog:
  - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
  - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)
  - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket
  - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7
  - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name
  - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable")
  - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication
  - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache
  - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP'
  - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider')
  - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest
  - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf
  - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8]
  - Resolves: RHEL-10721 - very bad performance when requesting service tickets
  - Resolves: RHEL-19011 - Invalid handling groups from child domain
  - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8]
  - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8]
  - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently


author: lichao <lichaod@uniontech.com> - 2.9.4-3.01
changelog:
  - fix: adjust sssd service to speed up system-booting (bugid:240631)
  - fix: sssd service failed (bugid:240325)
  - fix: add default conf file at /etc/sssd/ (bugid:197047)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.4-19
changelog:
  - Python 2 binary package renamed to python2-libiptcdata
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Pavel Cahyna <pcahyna@redhat.com> - 1.4.8-4
changelog:
  - Remove KDE bits
  - Provide: mkisofs (as genisoimage does)
  - Increase alternative priority to win over genisoimage
  - Update RHEL conditionals for lib{isofs,burn} renaming to match those packages


author: kwizart < kwizart at gmail.com > - 0.3.1-3
changelog:
  - Use Fedora compliant (using version) _docdir directory.
  - Remove shebangs when not needed.
  - Bundle examples within -devel
  - Use global instead of define


author: Nicolas Chauvet <kwizart@gmail.com> - 0.4.1-2
changelog:
  - Update to 0.4.1
  - Spec file clean-up
  - Set the current valgrind arches
  - Use unversioned docdir - rhbz#993818


author: Gergely Gombos <gombosg@gmail.com> - 2.0.2.3-3
changelog:
  - Move unversioned symlinks to the base package. Linked packages dynamically load (dlopen) this module with the name libldacBT_enc.so.


author: Miro Hrončok <mhroncok@redhat.com> - 0.3.0-4
changelog:
  - Subpackage python2-macaroons has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.24.0-2
changelog:
  - fixing a segfault on adding new location to calendar
  - https://github.com/mate-desktop/libmateweather/issues/75


author: Ana Cabral <acabral@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved
    from the main package to the utils sub package causing a file
    conflict on multilib systems between the old 32 bit main
    package and the new 64 bit utils sub package.


author: Sérgio Basto <sergio@serjux.com> - 2.1.0-0.18.trunkREV507
changelog:
  - Fix https://nvd.nist.gov/vuln/detail/CVE-2018-14446
    https://nvd.nist.gov/vuln/detail/CVE-2018-14403
    https://nvd.nist.gov/vuln/detail/CVE-2018-14379
    https://nvd.nist.gov/vuln/detail/CVE-2018-14326
    https://nvd.nist.gov/vuln/detail/CVE-2018-14325
    https://nvd.nist.gov/vuln/detail/CVE-2018-14054
    based on https://github.com/TechSmith/mp4v2/pull/27
    and https://github.com/sergiomb2/libmp4v2/
  - Update spec
  - Fix build on epel7


author: Hangbin Liu <haliu@redhat.com> - 1.7-1
changelog:
  - Update to 1.7
  - libndp: apply filter to raw socket to only accept ND messages
  - libndp: move ndp_sock_{open,close}() after msg parsing functions
  - ndptool: Fix compilation on musl libc


author: Hangbin Liu <haliu@redhat.com> - 1.7-2
changelog:
  - ndptool: add -T target support (rhbz 1666194)
  - ndptool: fix target parameter typo (rhbz 1666194)
  - libndp: close sockfd after using to avoid handle leak (rhbz 1666194)
  - libndp: fix nd_msg typo when setting target address (rhbz 1666194)


author: Hangbin Liu <haliu@redhat.com> - 1.7-3
changelog:
  - ndptool: add -D dest support (rhbz 1697595)
  - ndptool: fix potential memory leak caused by strdup (rhbz 1697595)


author: Jiri Pirko <jpirko@redhat.com> - 1.2-1
changelog:
  - Update to 1.2
  - libndp: silently ignore packets with optlen 0
  - libndp: fix processing for larger options
  - libndp: do not fail on receiving non-ndp packets


author: Jiri Pirko <jpirko@redhat.com> - 1.2-2
changelog:
  - libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is used as parameter and destination in s[n]printf() [1044084] [1091720]


author: Jiri Pirko <jiri@mellanox.com> - 1.6-1
changelog:
  - Update to 1.6
  - libndb: reject redirect and router advertisements from non-link-local
  - libndp: validate the IPv6 hop limit
  - libndp: revert API change for ndp_msg_send() and add ndp_msg_send_with_flags()
  - libndp: fix type of field "na" in "struct ndp_msgna"
  - ndptool: add option to send messages types
  - libndp: add option flags to send messages
  - Add SubmittingPatches howto


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.2-2
changelog:
  - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
  - related: rhbz#2132051


author: Pavel Filipenský <pfilipenn@redhat.com> - 4.17.4-0
changelog:
  - related: rhbz#2132051 - Update to version 4.17.4
  - resolves: rhbz#2154370 - Fix CVE-2022-38023
  - resolves: rhbz#2142331 - Fix %U include directive for share listing (netshareenum)
  - resolves: rhbz#2148943 - Fix Winbind to retrieve user groups from Active Directory


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.5-2
changelog:
  - resolves: rhbz#2169339 - Fix winbind memory leak
  - resolves: rhbz#2152899 - Fix Samba shares not accessible issue


author: lichao <lichaod@uniontech.com> - 4.17.5-2.0.1.02
changelog:
  - cve: CVE-2022-2127 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 CVE-2023-42669 CVE-2023-4091 CVE-2023-3961


author: wangqing <wangqing@uniontech.com> - 0.8.6-2
changelog:
  - remove zfs-initramfs
  - reference: https://github.com/rpmsphere/source/blob/master/z/zfs-0.8.4-1.src.rpm
  - https://github.com/openzfs/zfs/issues/10885


author: Nicolas Chauvet <kwizart@gmail.com> - 0.9.3-20
changelog:
  - Fix memcpy boundary error with gcc8
  - Add patch by Emil Velikov to fix a valgrind issue - rhbz#1119235
  - Fix dates in changelog


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.1.3-2
changelog:
  - Removed ldconfig scriptlets as per
    https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.1.3-4
changelog:
  - Added gcc-c++ to BuildRequires as per https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.2.0-4
changelog:
  - Resolves: rhbz#1649632 - libosinfo test suite should collect+report all
                             failures, not exit on first error


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-3
changelog:
  - Resolves: rhbz#1727843 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.8.0-1
changelog:
  - Resolves: rhbz#1815158 - Rebase to libosinfo the latest upstream release
  - Resolves: rhbz#1754394 - Provide information about UEFI support for guests (libosinfo)
  - Resolves: rhbz#1032520 - WHQL'ed drivers should be made available for Boxes/libosinfo users


author: Carl Byington <carl@five-ten-sg.com> 0.6.71-1
changelog:
  - fedora python naming scheme changes
  - Zachary Travis - Add support for the OST 2013 format, and
    Content-Disposition filename key fix for outlook compatibility


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.6.71-4
changelog:
  - Python 2 binary package renamed to python2-libpst
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.0-3
changelog:
  - Use C.UTF-8 locale
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Mosaab Alzoubi <moceap@hotmail.com> - 0.7.0-4
changelog:
  - First build on EPEL8
  - Use one branch to build on Fedora and EPEL
  - Use python3 as BR except EPEL7
  - Use LC_ALL=en_US.UTF-8 in EPEL7


author: Jiri Vymazal <jvymazal@redhat.com> - 1.2.13-1
changelog:
  - rebase to 1.2.13
    resolves: rhbz#1425638
  - added patch for GnuTLS crypto-policy adherence
    resolves: rhbz#1179317
  - added autoconf, automake and libtool because package
    has patches now


author: Attila Lakatos <alakatos@redhat.com> - 1.9.0-1
changelog:
  - rebase to 1.9.0
  - add patch to comply with crypto policies
  - add support for openssl
    resolves: rhbz#1932783
  - Properly end TLS connections
    resolves: rhbz#1886400


author: Sergio Durigan Junior <sergiodj@redhat.com> - 0.0.4-12
changelog:
  - Resolves: rhbz#1786466 Do not use %{?_isa} for GDB dependency. Recommend
    GDB, instead of requiring it.


author: RPM Fusion Release Engineering <leigh123linux@gmail.com> - 2.4-13.20160224.gitfa8646d
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
  - Remove Group tag
  - Add BuildRequires:  gcc


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-2.1
changelog:
  - Use Python distutils to install SELinux python bindings (#1719771)
  - Move  sefcontext_compile to -utils package (#1612518)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-6
changelog:
  - Describe fcontext regular expressions (#1904059)
  - Strip spaces before values in config (#2012145)


author: Dan Walsh <dwalsh@redhat.com> 1.1.3-1
changelog:
  - Update from NSA
    * Merged errno fix from Joshua Brindle (Tresys).
    * Merged fix for semod_build_modules_list leak on error path
      from Serge Hallyn (IBM).  Bug found by Coverity.
    * Merged several fixes from Serge Hallyn (IBM).  Bugs found by
      Coverity.
    * Fixed several other bugs and warnings.
    * Merged patch to move module read/write code from libsemanage
      to libsepol from Jason Tang (Tresys).  
    * Merged relay records patch from Ivan Gyurdiev.
    * Merged key extract patch from Ivan Gyurdiev.

  - Initial version
  - Created by Stephen Smalley <sds@epoch.ncsc.mil>


author: Dan Walsh <dwalsh@redhat.com> 1.1.6-1
changelog:
  - Update from NSA
    * Merged semod.conf template patch from Dan Walsh (Red Hat),
    but restored location to /usr/share/semod/semod.conf.
    * Fixed several bugs found by valgrind.
    * Fixed bug in prior patch for the semod_build_module_list leak.
    * Merged errno fix from Joshua Brindle (Tresys).
    * Merged fix for semod_build_modules_list leak on error path
      from Serge Hallyn (IBM).  Bug found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.3.1-1
changelog:
  - Update from NSA
    * Merged stub functionality for managing user and port records,
    and record table code from Ivan Gyurdiev.
    * Updated version for release.


author: Dan Walsh <dwalsh@redhat.com> 1.3.2-1
changelog:
  - Update from NSA
    * Merged stub iterator functionality from Ivan Gyurdiev.
    * Merged interface record patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.3-1
changelog:
  - Update from NSA
    * Merged boolean record, stub record handler, and status codes 
      patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.5-1
changelog:
  - Update from NSA
    * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc].
    * Separated handle create from connect interface.
    * Added a constructor for initialization.
    * Moved up src/include/*.h to src.
    * Created a symbol map file; dropped dso.h and hidden markings.


author: Dan Walsh <dwalsh@redhat.com> 1.3.7-1
changelog:
  - Update from NSA
    * Merged patch series from Ivan Gyurdiev.
      (pointer typedef elimination, file renames, dbase work, backend
       separation)
    * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc].
    * Separated handle create from connect interface.
    * Added a constructor for initialization.
    * Moved up src/include/*.h to src.
    * Created a symbol map file; dropped dso.h and hidden markings.


author: Dan Walsh <dwalsh@redhat.com> 1.3.10-1
changelog:
  - Update from NSA
    * Updated for changes to libsepol, and to only use types and interfaces
    provided by the shared libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.3.11-1
changelog:
  - Update from NSA
    * Fixed semanage_install_active() to use the same logic for
    selecting a policy version as semanage_expand_sandbox().  Dropped
    dead code from semanage_install_sandbox().


author: Dan Walsh <dwalsh@redhat.com> 1.3.14-1
changelog:
  - Update from NSA
    * Updated to use get interfaces for hidden sepol_module_package type.
    * Changed semanage_expand_sandbox and semanage_install_active
    to generate/install the latest policy version supported  by libsepol
    by default (unless overridden by semanage.conf), since libselinux
    will now downgrade automatically for load_policy.
    * Merged new callback-based error reporting system and ongoing
    database work from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.18-1
changelog:
  - Update from NSA
    * Merged bugfix patch from Ivan Gyurdiev.
    * Merged seuser database patch from Ivan Gyurdiev.
    Merged direct user/port databases to the handle from Ivan Gyurdiev.
    * Removed obsolete include/semanage/commit_api.h (leftover).
    Merged seuser record patch from Ivan Gyurdiev.
    * Merged boolean and interface databases from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.20-1
changelog:
  - Update from NSA
    * Merged user and port APIs - policy database patch from Ivan
    Gyurdiev.
    * Converted calls to sepol link_packages and expand_module interfaces
    from using buffers to using sepol handles for error reporting, and 
    changed direct_connect/disconnect to create/destroy sepol handles.


author: Dan Walsh <dwalsh@redhat.com> 1.3.20-1
changelog:
  - Update from NSA
    * Changed default args for load_policy to be null, as it no longer
      takes a pathname argument and we want to preserve booleans.
    * Merged move local dbase initialization patch from Ivan Gyurdiev.
    * Merged acquire/release read lock in databases patch from Ivan Gyurdiev.
    * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev.
    * Added calls to sepol_policy_file_set_handle interface prior
      to invoking sepol operations on policy files.
    * Updated call to sepol_policydb_from_image to pass the handle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.24-1
changelog:
  - Update from NSA
    * Merged default database from Ivan Gyurdiev.
    * Merged removal of connect requirement in policydb backend from
      Ivan Gyurdiev.
    * Merged commit locking fix and lock rename from Joshua Brindle.
    * Merged transaction rollback in lock patch from Joshua Brindle.
    * Changed default args for load_policy to be null, as it no longer
      takes a pathname argument and we want to preserve booleans.
    * Merged move local dbase initialization patch from Ivan Gyurdiev.
    * Merged acquire/release read lock in databases patch from Ivan Gyurdiev.
    * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev.
    * Added calls to sepol_policy_file_set_handle interface prior
      to invoking sepol operations on policy files.
    * Updated call to sepol_policydb_from_image to pass the handle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.28-1
changelog:
  - Update from NSA
    * Merged interface renaming patch from Ivan Gyurdiev.
    * Merged policy component patch from Ivan Gyurdiev.
    * Renamed 'check=' configuration value to 'expand-check=' for 
      clarity.
    * Changed semanage_commit_sandbox to check for and report errors 
      on rename(2) calls performed during rollback.
    * Added optional check= configuration value to semanage.conf 
      and updated call to sepol_expand_module to pass its value
      to control assertion and hierarchy checking on module expansion.
    * Merged fixes for make DESTDIR= builds from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.30-1
changelog:
  - Update from NSA
    * Fixed policy file leaks in semanage_load_module and
      semanage_write_module.
    * Merged further database work from Ivan Gyurdiev.
    * Fixed bug in semanage_direct_disconnect.


author: Dan Walsh <dwalsh@redhat.com> 1.3.32-1
changelog:
  - Update from NSA
    * Merged resync to sepol changes and transaction fix patches from
      Ivan Gyurdiev.
    * Merged reorganize users patch from Ivan Gyurdiev.
    * Merged remove unused relay functions patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.34-1
changelog:
  - Update from NSA
    * Merged resync to sepol changes and booleans fixes/improvements 
      patches from Ivan Gyurdiev.
    * Merged support for genhomedircon/homedir template, store selection,
      explicit policy reload, and semanage.conf relocation from Joshua
      Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.35-1
changelog:
  - Update from NSA
    * Merged sepol handle passing, seusers support, and policydb cache
      patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.38-1
changelog:
  - Upgrade to latest from NSA
    * Merged dbase policydb list and count change from Ivan Gyurdiev.
    * Merged enable dbase and set relay patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.39-1
changelog:
  - Upgrade to latest from NSA
    * Merged record interface, dbase flush, common database code,
      and record bugfix patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.41-1
changelog:
  - Upgrade to latest from NSA
    * Merged interface parse/print, context_to_string interface change,
      move assert_noeof, and order preserving patches from Ivan Gyurdiev.
          * Added src/dso.h in preparation for other changes.
    * Merged install seusers, handle/error messages, MLS parsing,
      and seusers validation patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.43-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser parser resync, dbase tracking and cleanup, strtol
      bug, copyright, and assert space patches from Ivan Gyurdiev.
    * Added src/*_internal.h in preparation for other changes.
     * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and
            src/seusers.[hc].


author: Dan Walsh <dwalsh@redhat.com> 1.3.48-1
changelog:
  - Upgrade to latest from NSA
    * Disabled calls to port dbase for merge and commit and stubbed
      out calls to sepol_port interfaces since they are not exported.
    * Merged rename instead of copy patch from Joshua Brindle (Tresys).
    * Added hidden_def/hidden_proto for exported symbols used within 
      libsemanage to eliminate relocations.  Wrapped type definitions
      in exported headers as needed to avoid conflicts.  Added
      src/context_internal.h and src/iface_internal.h.
    * Added semanage_is_managed() interface to allow detection of whether
      the policy is managed via libsemanage.  This enables proper handling
      in setsebool for non-managed systems.
    * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev,
      to enable runtime control over preserving active boolean values
      versus reloading their saved settings upon commit.


author: Dan Walsh <dwalsh@redhat.com> 1.3.51-1
changelog:
  - Upgrade to latest from NSA
    * Clear modules modified flag upon disconnect and commit.
          * Added tracking of module modifications and use it to
      determine whether expand-time checks should be applied
      on commit.
    * Reverted semanage_set_reload_bools() interface.


author: Dan Walsh <dwalsh@redhat.com> 1.3.52-1
changelog:
  - Upgrade to latest from NSA
    * Merged cleanup patch from Ivan Gyurdiev.
      This renames semanage_module_conn to semanage_direct_handle,
      and moves sepol handle create/destroy into semanage handle
      create/destroy to allow use even when disconnected (for the
      record interfaces).


author: Dan Walsh <dwalsh@redhat.com> 1.3.53-1
changelog:
  - Upgrade to latest from NSA
    * Merged move seuser validation patch from Ivan Gyurdiev.
    * Merged hidden declaration fixes from Ivan Gyurdiev,
      with minor corrections.


author: Dan Walsh <dwalsh@redhat.com> 1.3.56-1
changelog:
  - Upgrade to latest from NSA
    * Fixed free->key_free bug.
    * Merged clear obsolete patch from Ivan Gyurdiev.
    * Merged modified swigify patch from Dan Walsh 
      (original patch from Joshua Brindle).
    * Merged move genhomedircon call patch from Chad Sellers.


author: Dan Walsh <dwalsh@redhat.com> 1.3.59-1
changelog:
  - Add additional swig objects
    * Merged wrap char*** for user_get_roles patch from Joshua Brindle.
    * Merged remove defrole from sepol patch from Ivan Gyurdiev.
    * Merged swig wrappers for modifying users and seusers from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.61-1
changelog:
  - Upgrade to latest from NSA
    * Merged Makefile python definitions patch from Dan Walsh.
    * Removed is_selinux_mls_enabled() conditionals in seusers and users
      file parsers.


author: Dan Walsh <dwalsh@redhat.com> 1.3.63-1
changelog:
  - Upgrade to latest from NSA
    * Dropped handle from user_del_role interface.
    * Removed defrole interfaces.


author: Dan Walsh <dwalsh@redhat.com> 1.3.64-1
changelog:
  - Upgrade to latest from NSA
    * Changed semanage_handle_create() to set do_reload based on
      is_selinux_enabled().  This prevents improper attempts to
      load policy on a non-SELinux system.


author: Dan Walsh <dwalsh@redhat.com> 1.5.1-1
changelog:
  - Upgrade to latest from NSA
    * Added file-mode= setting to semanage.conf, default to 0644.
      Changed semanage_copy_file and callers to use this mode when
      installing policy files to runtime locations.


author: Dan Walsh <dwalsh@redhat.com> 1.5.1-2
changelog:
  - Upgrade to latest from NSA
    * Merged toggle modified flag in policydb_modify, fix memory leak
      in clear_obsolete, polymorphism vs headers fix, and include guards
      for internal headers patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged further header cleanups from Ivan Gyurdiev.
    * Merged toggle modified flag in policydb_modify, fix memory leak
      in clear_obsolete, polymorphism vs headers fix, and include guards
      for internal headers patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.4-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch series from Ivan Gyurdiev.
      This includes patches to:
      - separate file rw code from linked list
      - annotate objects
      - fold together internal headers
      - support ordering of records in compare function
      - add active dbase backend, active booleans
      - return commit numbers for ro database calls
      - use modified flags to skip rebuild whenever possible
      - enable port interfaces
      - update swig interfaces and typemaps
      - add an API for file_contexts.local and file_contexts
      - flip the traversal order in iterate/list
      - reorganize sandbox_expand
      - add seusers MLS validation
      - improve dbase spec/documentation
      - clone record on set/add/modify


author: Dan Walsh <dwalsh@redhat.com> 1.5.6-1
changelog:
  - Upgrade to latest from NSA
    * Clarified error messages from parse_module_headers and 
      parse_base_headers for base/module mismatches.
    * Merged string and file optimization patch from Russell Coker.
    * Merged swig header reordering patch from Ivan Gyurdiev.
    * Merged toggle modify on add patch from Ivan Gyurdiev.
    * Merged ports parser bugfix patch from Ivan Gyurdiev.
    * Merged fcontext swig patch from Ivan Gyurdiev.
    * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev.
    * Merged man pages for dbase functions patch from Ivan Gyurdiev.
    * Merged pywrap tests patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.8-1
changelog:
  - Upgrade to latest from NSA
    * Re-applied string and file optimization patch from Russell Coker,
      with bug fix.
    * Reverted string and file optimization patch from Russell Coker.
    * Clarified error messages from parse_module_headers and 
      parse_base_headers for base/module mismatches.


author: Dan Walsh <dwalsh@redhat.com> 1.5.9-1
changelog:
  - Upgrade to latest from NSA
    * Merged const in APIs patch from Ivan Gyurdiev.
    * Merged validation of local file contexts patch from Ivan Gyurdiev.
    * Merged compare2 function patch from Ivan Gyurdiev.
    * Merged hidden def/proto update patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.14-1
changelog:
  - Upgrade to latest from NSA
    * Merged disallow port overlap patch from Ivan Gyurdiev.
    * Merged join prereq and implementation patches from Ivan Gyurdiev.
    * Merged join user extra data part 2 patch from Ivan Gyurdiev.
    * Merged bugfix patch from Ivan Gyurdiev.
    * Merged remove add_local/set_local patch from Ivan Gyurdiev.
    * Merged user extra data part 1 patch from Ivan Gyurdiev.
    * Merged size_t -> unsigned int patch from Ivan Gyurdiev.
    * Merged calloc check in semanage_store patch from Ivan Gyurdiev,
      bug noticed by Steve Grubb.
    * Merged cleanups after add/set removal patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.15-1
changelog:
  - Upgrade to latest from NSA
    * Merged pywrap Makefile diff from Dan Walsh.
    * Merged cache management patch from Ivan Gyurdiev.
    * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev.
    * Merged remove apply_local function patch from Ivan Gyurdiev.
    * Merged only do read locking in direct case patch from Ivan Gyurdiev.
    * Merged cache error path memory leak fix from Ivan Gyurdiev.
    * Merged auto-generated file header patch from Ivan Gyurdiev.
    * Merged pywrap test update from Ivan Gyurdiev.
    * Merged hidden defs update from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.18-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev.
    * Merged set_create_store, access_check, and is_connected interfaces
      from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.5.19-1
changelog:
  - Upgrade to latest from NSA
    * Merged fname parameter patch from Ivan Gyurdiev.
    * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev.
    * Merged seusers.system patch from Ivan Gyurdiev.
    * Merged improve port/fcontext API patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.21-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser/user_extra support patch from Joshua Brindle.
    * Merged remote system dbase patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.23-1
changelog:
  - Upgrade to latest from NSA
    * Merged optionals in base patch from Joshua Brindle.
    * Merged treat seusers/users_extra as optional sections patch from
      Ivan Gyurdiev.
    * Merged parse_optional fixes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.26-1
changelog:
  - Upgrade to latest from NSA
    * Merged paths array patch from Ivan Gyurdiev.
    * Merged bug fix patch from Ivan Gyurdiev.
    * Merged improve bindings patch from Ivan Gyurdiev.
    * Merged use PyList patch from Ivan Gyurdiev.  
    * Merged memory leak fix patch from Ivan Gyurdiev.
    * Merged nodecon support patch from Ivan Gyurdiev.
    * Merged cleanups patch from Ivan Gyurdiev.
    * Merged split swig patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.28-1
changelog:
  - Upgrade to latest from NSA
    * Merged bug fix for fcontext validate handler from Ivan Gyurdiev.
    * Merged base_merge_components changes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.6-1
changelog:
  - Make work on RHEL4
  - Upgrade to latest from NSA
    * Merged abort early on merge errors patch from Ivan Gyurdiev.
    * Cleaned up error handling in semanage_split_fc based on a patch
      by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev.
    * Merged MLS handling fixes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged Makefile PYLIBVER definition patch from Dan Walsh.
    * Merged man page reorganization from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.3-1
changelog:
  - Fix to work with new version of swig
  - Upgrade to latest from NSA
    * Merged corrected fix for descriptor leak from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.6-1
changelog:
  - Upgrade to latest from NSA
    * Merged updated file context sorting patch from Christopher
      Ashworth, with bug fix for escaped character flag.
    * Merged file context sorting code from Christopher Ashworth 
      (Tresys Technology), based on fc_sort.c code in refpolicy.
    * Merged python binding t_output_helper removal patch from Dan Walsh.
    * Regenerated swig files.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.8-1
changelog:
  - Upgrade to latest from NSA
    * Updated default location for setfiles to /sbin to
      match policycoreutils.  This can also be adjusted via 
      semanage.conf using the syntax:
      [setfiles]
      path = /path/to/setfiles
      args = -q -c $@ $<
      [end]


author: Dan Walsh <dwalsh@redhat.com> - 1.6.9-1
changelog:
  - Upgrade to latest from NSA
    * Merged several fixes from Serge Hallyn:
         dbase_file_cache:  deref of uninit data on error path.
         dbase_policydb_cache:  clear fp to avoid double fclose
         semanage_fc_sort:  destroy temp on error paths


author: Dan Walsh <dwalsh@redhat.com> - 1.6.12-1
changelog:
  - Upgrade to latest from NSA
    * Merged support for read operations on read-only fs from 
      Caleb Case (Tresys Technology).


author: Dan Walsh <dwalsh@redhat.com> - 1.6.15-1
changelog:
  - Upgrade to latest from NSA
    * Merged separate local file contexts patch from Chris PeBenito.
    * Merged patch to make most copy errors non-fatal from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.16-1
changelog:
  - Upgrade to latest from NSA
    * Make most copy errors fatal, but allow exceptions for
      file_contexts.local, seusers, and netfilter_contexts if
      the source file does not exist in the store.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.17-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to skip reload if no active store exists and
      the store path doesn't match the active store path from Dan Walsh.
    * Merged patch to not destroy sepol handle on error path of
      connect from James Athey.
    * Merged patch to add genhomedircon path to semanage.conf from
      James Athey.


author: Dan Walsh <dwalsh@redhat.com> - 1.9.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to compile wit -fPIC instead of -fpic from
      Manoj Srivastava to prevent hitting the global offest table
      limit. Patch changed to include libselinux and libsemanage in
      addition to libsepol.


author: Dan Walsh <dwalsh@redhat.com> - 1.9.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to optionally reduce disk usage by removing 
      the backup module store and linked policy from Karl MacMillan
    * Merged patch to correctly propagate return values in libsemanage


author: Dan Walsh <dwalsh@redhat.com> - 1.10.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged python binding fix from Dan Walsh.
    * Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
changelog:
  - Upgrade to latest from NSA
    * Merged Makefile test target patch from Caleb Case.
    * Merged get_commit_number function rename patch from Caleb Case.
    * Merged strnlen -> strlen patch from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.1-1
changelog:
  - Merged dbase_file_flush patch from Dan Walsh.
  - This removes any mention of specific tools (e.g. semanage)
  - from the comment header of the auto-generated files,
  - since there are multiple front-end tools.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.2-1
changelog:
  - Upgrade to latest from NSA
  - Merged optimizations from Stephen Smalley.
  -    do not set all booleans upon commit, only those whose values have changed
  -    only install the sandbox upon commit if something was rebuilt


author: Dan Walsh <dwalsh@redhat.com> - 2.0.3-1
changelog:
  - Upgrade to latest from NSA
    * Fix to libsemanage man patches so whatis will work better from Dan Walsh


author: Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
changelog:
  - Upgrade to latest from NSA
    * Allow dontaudits to be turned off via semanage interface when
      updating policy


author: Dan Walsh <dwalsh@redhat.com> - 2.0.6-1
changelog:
  - Upgrade to latest from NSA
    * Change to use getpw* function calls to the _r versions from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
changelog:
  - Upgrade to latest from NSA
    * Pass CFLAGS to CC even on link command, per Dennis Gilmore.
    * Clear errno on non-fatal errors to avoid reporting them upon a
      later error that does not set errno.
    * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley.

  - Fix segfault in genhomedircon when using bad user names


author: Dan Walsh <dwalsh@redhat.com> - 2.0.10-1
changelog:
  - Upgrade to latest from NSA
    * Fix error checking on getpw*_r functions from Todd Miller.
    * Make genhomedircon skip invalid homedir contexts from Todd Miller.
    * Set default user and prefix from seusers from Dan Walsh.
    * Add swigify Makefile target from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Upgrade to latest from NSA
    * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.12-1
changelog:
  - Upgrade to latest from NSA
    * ustr cleanups from James Antill.
    * Ensure that /root gets labeled even if using the default context from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.14-1
changelog:
  - Upgrade to latest from NSA
    * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley.
    * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.15-1
changelog:
  - Update to upstream
    * Fix genhomedircon handling of shells and missing user context template from Dan Walsh.
    * Copy the store path in semanage_select_store from Dan Walsh.
  - Add expand-check=0 to semanage.conf


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Update to upstream
    * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Update to upstream
    * Fix spurious out of memory error reports.
    * Merged second version of fix for genhomedircon handling from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.19-1
changelog:
  - Update to upstream
    * Fix genhomedircon to not override a file context with a homedir context from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.20-1
changelog:
  - Update to upstream
    * Use sepol_set_expand_consume_base to reduce peak memory usage when
    using semodule


author: Dan Walsh <dwalsh@redhat.com> - 2.0.22-1
changelog:
  - Update to upstream
    * Free policydb before fork from Joshua Brindle.
    * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.23-1
changelog:
  - Update to upstream
    * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.25-1
changelog:
  - Update to upstream
    * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley.
      Fixes semanage boolean -D seg fault (bug 441379).


author: Dan Walsh <dwalsh@redhat.com> - 2.0.26-1
changelog:
  - Update to upstream
    * Fix bug in genhomedircon fcontext matches logic from Dan Walsh.
    Strip any trailing slash before appending /*$.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.27-1
changelog:
  - Update to upstream
    * Modify genhomedircon to skip groupname entries.
    Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the groupname syntax.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.28-1
changelog:
  - Update to upstream
    * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh


author: Dan Walsh <dwalsh@redhat.com> - 2.0.31-1
changelog:
  - Update to upstream
    * Policy module compression (bzip) support from Dan Walsh.
    * Hard link files between tmp/active/previous from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.35-1
changelog:
  - Revert hard linking of files between tmp/active/previous.
  - Enable configuration of bzip behavior from Stephen Smalley.
  -   bzip-blocksize=0 to disable compression and decompression support.
  -   bzip-blocksize=1..9 to set the blocksize for compression.
  -   bzip-small=true to reduce memory usage for decompression.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.36-1
changelog:
  - Update to upstream
    * Changed bzip-blocksize=0 handling to support existing compressed
    modules in the store.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
changelog:
  - Update to upstream
    * Fix persistent dontaudit support to rebuild policy if the 
          dontaudit state is changed from Chad Sellers.
  - Move load_policy to /sbin


author: Dan Walsh <dwalsh@redhat.com> - 2.0.38-1
changelog:
  - Update to upstream
    * Change semodule upgrade behavior to install even if the module
      is not present from Dan Walsh.
    * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.41-1
changelog:
  - Update to upstream
    * Add pkgconfig file from Eamon Walsh.
    * Add semanage_set_check_contexts() function to disable calling
    setfiles


author: Dan Walsh <dwalsh@redhat.com> - 2.0.43-1
changelog:
  - Update to upstream
    * Move libsemanage.so to /usr/lib
    * Add NAME lines to man pages from Manoj Srivastava<srivasta@debian.org>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.44-1
changelog:
  - Update to upstream
  	* Replace usage of fmemopen() with sepol_policy_file_set_mem() since
  	  glibc < 2.9 does not support binary mode ('b') for fmemopen'd
  	  streams.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.45-1
changelog:
  - Update to upstream
  	* Add enable/disable patch support from Dan Walsh.
  	* Add usepasswd flag to semanage.conf to disable genhomedircon using
  	  passwd from Dan Walsh.
  	* regenerate swig wrappers


author: David Malcolm <dmalcolm@redhat.com> - 2.0.46-2
changelog:
  - big reworking of the support-multiple-python-builds patch to deal with
  PEP 3149: the latest Python 3.2 onwards uses include paths and library names
  that don't fit prior naming patterns, and so we must query python3-config for
  this information.  To complicate things further, python 2's python-config
  doesn't understand all of the options needed ("--extension-suffix").  I've
  thus added new Makefile variables as needed, to be supplied by the specfile by
  invoking the appropriate config tool (or by hardcoding the old value for
  "--extension-suffix" i.e. ".so")
  - rework python3 manifest for PEP 3149, and rebuild for newer python3


author: Dan Walsh <dwalsh@redhat.com> - 2.0.46-5
changelog:
  - Change libsemanage mechanism for handling disabled modules. Now it will only create a flag for a module 
  indicating the module is disabled.  MODULE.pp.disabled, it will no longer rename the module.  This way we can
  ship active modules in rpm.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.2-1
changelog:
  -Update to upstream
  2.1.2 2011-08-17
  	* print error debug info for buggy fc
  	* introduce semanage_set_root and friends
  	* throw exceptions in python rather than return
  	* python3 support.
  	* patch for MCS/MLS in user files

  2.1.1 2011-08-01
  	* Remove generated files, expand .gitignore
  	* Use -Werror and change a few prototypes to support it


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  	* Create a new preserve_tunables flag
  	* tree: default make target to all not
  	* fix semanage_store_access_check calling arguments


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  - Upgrade to upstream
  	* regenerate .pc on VERSION change
  	* maintain mode even if umask is tighter
  	* semanage.conf man page
  	* create man5dir if not exist


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  -Update to upstream
  	* add ignoredirs config for genhomedircon
  	* Fallback_user_level can be NULL if you are not using MLS


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
changelog:
  - Update to upstream 
  	* Alternate path for semanage.conf
  	* do not link against libpython, this is considered bad in Debian
  	* Allow to build for several ruby version
  	* fallback-user-level


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Update to upstream 
  	* remove build warning when build swig c files
  	* additional makefile support for rubywrap
  	* ignore 80 column limit for readability
  	* semanage_store: fix snprintf length argument by using asprintf
  	* Use default semanage.conf as a fallback
  	* use after free in python bindings


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-3
changelog:
  - Attempt to allocate memory for selinux_binary_policy_path and free memory 
  - allocated by asprintf.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Update to upstream 
  	* libsemanage: do not set soname needlessly
  	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
  	* do boolean name substitution
  	* Fix segfault for building standard policies.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-2
changelog:
  - Fix handling of missing semanage permissive -d foo, not failing correctly
  - Previous to this fix the first module beginning with foo would get deleted.


author: Dan Walsh <dwalsh@redhat.com> 2.1.9-3
changelog:
  - Update to latest patches from eparis/Upstream
  -    libsemanage: fixes from coverity
  -    libsemange: redo genhomedircon minuid


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  - Update to upstream 
  	* Add sefcontext_compile to compile regex everytime policy is rebuilt
  	* Cleanup/fix enable/disable/remove module.
  	* redo genhomedircon minuid
  	* fixes from coverity
  	* semanage_store: do not leak memory in semanage_exec_prog
  	* genhomedircon: remove useless conditional in get_home_dirs
  	* genhomedircon: double free in get_home_dirs
  	* fcontext_record: do not leak on error in semanage_fcontext_key_create
  	* genhomedircon: do not leak on failure in write_gen_home_dir_context
  	* semanage_store: do not leak fd 
  	* genhomedircon: do not leak shells list
  	* semanage_store: do not leak on strdup failure 
  	* semanage_store: rewrite for readability


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-6
changelog:
  - Remove dependance on selinux-policy, /etc/selinux should be owned by libsemanage, and selinux-policy can require it.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-7
changelog:
  - Move handling of role audit records into the library
  - Patch stops semanage from removing user record while in use


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-10
changelog:
  - Do not write error message to screen when looking for previous record for auditing.
  - Add mls_range from user record if the MLS range is not specified by the seuser add record.
  - Error out if seuser or mls range is not specified when adding user records


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-14
changelog:
  - Cleanup handling of missing mls_range to fix problems with useradd -Z
  - Fix auditing of login record changes, roles were not working correctly.
  Resolves: #952237


author: Dan Walsh <dwalsh@redhat.com> - 2.2-1
changelog:
  - Update to upstream 
  	* Avoid duplicate list entries from Dan Walsh.
  	* Add audit support to libsemanage from Dan Walsh.
  	* Remove policy.kern and replace with symlink from Dan Walsh.
  	* Apply a MAX_UID check for genhomedircon from Laurent Bigonville.
  	* Fix man pages from Laurent Bigonville.


author: Petr Lautrbach <plautrba@redhat.com> 2.4-2
changelog:
  - semanage_migrate_store: use /usr/bin/python3
  - move semanage_migrate_store script to libsemanage-python3


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-5
changelog:
  - Sort object files for deterministic linking order
  - Support overriding Makefile RANLIB
  - Respect CC and PKG_CONFIG environment variable


author: Petr Lautrbach <plautrba@redhat.com> 2.5-8
changelog:
  - Fixes bug preventing the installation of base modules
  - make distclean target work
  - Do not always print a module name warning
  - Use pp module name instead of filename when installing module
  - tests: Do not force using gcc
  - genhomedircon: remove hardcoded refpolicy strings
  - genhomedircon: add support for %group syntax
  - genhomedircon: generate contexts for logins mapped to the default user
  - Validate and compile file contexts before installing
  - Swap tcp and udp protocol numbers


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-1
changelog:
  - Update to upstream release 2017-08-04
  - Use 'sefcontext_compile -r' when it's run during SELinux policy build


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.7-2
changelog:
  - Python 2 binary package renamed to python2-libsemanage
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
  - Python 3 binary package renamed to python3-libsemanage


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-10
changelog:
  - properly check return value of iterate function
  - Use umask(0077) for fopen() write operations
  - Return commit number if save-previous false
  - Allow tmp files to be kept if a compile fails
  - build: follow standard semantics for DESTDIR and PREFIX
  - Improve warning for installing disabled module
  - silence clang static analyzer report
  - remove access() check to make setuid programs work


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-5
changelog:
  - Revert "genhomedircon: check usepasswd" (rhbz#1871786)
  - semanage.conf - improve usepasswd=False explanation (rhbz#1871786)
  - semanage.conf - expand list of ignoredirs (rhbz#1871786)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-7
changelog:
  - Trivial style fixes
  - Free contents of modkey in semanage_direct_remove
  - Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext()
  - add missing include to boolean_record.c
  - move module hashing into libsemanage
  - move compressed file handling into a separate object
  - clean up semanage_direct_commit() a bit
  - optionally rebuild policy when modules are changed externally
  - add command-line option to detect module changes (#2049186)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-9
changelog:
  - allow spaces in user/group names (#2042408)
  - always write kernel policy when check_ext_changes is specified (#2089802)


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.0.10-0.fdr.1
changelog:
  - Update to 1.0.10, update URLs, include ALSA support.
  - Disable dependency tracking to speed up the build.
  - Add missing ldconfig invocations.
  - Make -devel require pkgconfig.
  - Include developer docs in -devel.
  - Provide -octave in main package, own more related dirs.
  - Bring specfile up to date with current spec templates.


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-2
changelog:
  - Adding FLAC support to libsndfile courtesy of gentoo, #237575
  - Fixing CVE-2007-4974. Thanks to the gentoo people for the patch, #296221


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-6
changelog:
  - Removed spurious #endif in the libsndfile.h wrapper. Thx to Edward
    Sheldrake for finding it. Fixes #468508.
  - Fix build for autoconf-2.63


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.0.20-3
changelog:
  - Add FLAC/Ogg/Vorbis support (BR: libvorbis-devel)
  - Make build verbose
  - Remove rpath
  - Fix ChangeLog encoding
  - Move the big Changelog to the devel package


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.0.21-1
changelog:
  - Update to 10.0.21
  - Do not include the static library in the package (RHBZ#556074)
  - Remove BR on jack since sndfile-jackplay is not provided anymore


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0.25-2
changelog:
  - Patch to use system libgsm instead of a bundled copy.
  - Make main package dep in -devel ISA qualified.
  - Drop -octave Provides (not actually built with octave > 3.0).
  - Don't build throwaway static lib.
  - Run test suite during build.


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-14
changelog:
  - fix CVE-2014-9496: 2 buffer overruns in sd2_parse_rsrc_fork (#1178840)
  - division by zero leading to denial of service in psf_fwrite (#1177254)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-1
changelog:
  - updated to 1.0.28
  - fix possible buffer overflow when parsing crafted ID3 tags (#1440758, CVE-2017-7586)
  - fix possible buffer overflow when parsing crafted flac file (#1440756, CVE-2017-7585)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10
changelog:
  - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function
    i2alaw_array in alaw (#1673085)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-11
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985028)


author: Carl George <carl@george.computer> - 1.0.5-1
changelog:
  - Port from libsodium to libsodium13
  - Install license correctly
  - Disable native CPU optimizations
  - Update summary and descriptions to clarify this is a compatibility package


author: Paul Howarth <paul@city-fan.org> - 1.8.0-10
changelog:
  - Explicitly run the test suite in the en_US.UTF-8 locale to work around flaky
    locale settings in mock builders


author: Paul Howarth <paul@city-fan.org> - 1.8.1-1
changelog:
  - Update to 1.8.1
    - Fixed possible integer overflow when reading a specially crafted packet
      (CVE-2019-3855)
    - Fixed possible integer overflow in userauth_keyboard_interactive with a
      number of extremely long prompt strings (CVE-2019-3863)
    - Fixed possible integer overflow if the server sent an extremely large
      number of keyboard prompts (CVE-2019-3856)
    - Fixed possible out of bounds read when processing a specially crafted
      packet (CVE-2019-3861)
    - Fixed possible integer overflow when receiving a specially crafted exit
      signal message channel packet (CVE-2019-3857)
    - Fixed possible out of bounds read when receiving a specially crafted exit
      status message channel packet (CVE-2019-3862)
    - Fixed possible zero byte allocation when reading a specially crafted SFTP
      packet (CVE-2019-3858)
    - Fixed possible out of bounds reads when processing specially crafted SFTP
      packets (CVE-2019-3860)
    - Fixed possible out of bounds reads in _libssh2_packet_require(v)
      (CVE-2019-3859)
  - Fix mis-applied patch in the fix of CVE-2019-3859
    - https://github.com/libssh2/libssh2/issues/325
    - https://github.com/libssh2/libssh2/pull/327


author: Paul Howarth <paul@city-fan.org> - 1.8.2-1
changelog:
  - Update to 1.8.2
    - Fixed the misapplied userauth patch that broke 1.8.1
    - Moved the MAX size declarations from the public header


author: Paul Howarth <paul@city-fan.org> - 1.9.0-1
changelog:
  - Update to 1.9.0
    - Fixed integer overflow leading to out-of-bounds read (CVE-2019-13115)
    - Adds ECDSA keys and host key support when using OpenSSL
    - Adds ED25519 key and host key support when using OpenSSL 1.1.1
    - Adds OpenSSH style key file reading
    - Adds AES CTR mode support when using WinCNG
    - Adds PEM passphrase protected file support for libgcrypt and WinCNG
    - Adds SHA256 hostkey fingerprint
    - Adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
    - Adds explicit zeroing of sensitive data in memory
    - Adds additional bounds checks to network buffer reads
    - Adds the ability to use the server default permissions when creating sftp directories
    - Adds support for building with OpenSSL no engine flag
    - Adds support for building with LibreSSL
    - Increased sftp packet size to 256k
    - Fixed oversized packet handling in sftp
    - Fixed building with OpenSSL 1.1
    - Fixed a possible crash if sftp stat gets an unexpected response
    - Fixed incorrect parsing of the KEX preference string value
    - Fixed conditional RSA and AES-CTR support
    - Fixed a small memory leak during the key exchange process
    - Fixed a possible memory leak of the ssh banner string
    - Fixed various small memory leaks in the backends
    - Fixed possible out of bounds read when parsing public keys from the server
    - Fixed possible out of bounds read when parsing invalid PEM files
    - No longer null terminates the scp remote exec command
    - Now handle errors when Diffie Hellman key pair generation fails
    - Fixed compiling on Windows with the flag STDCALL=ON
    - Improved building instructions
    - Improved unit tests
  - Needs OpenSSL ≥ 1.0.1 now as ECC support is assumed
  - Modernize spec somewhat as EL-6 can no longer be supported


author: Tony Asleson <tasleson@redhat.com> - 1.9.1-7
changelog:
  - Remove valgrind dependency as not being used and causing
    build to fail as it pulls in python3.11


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.21-6
changelog:
  - Python 2 binary package renamed to python2-libsvm
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Ding-Yi Chen <dchen@redhat.com> - 3.23-1
changelog:
  - Upstream update to 3.23
    + add more digits of predicted file, model file, scaled data and data
      from matlab libsvmwrite: to .17g
    + svm-toy-gtk is no longer supported
    + Dependency qt is updated to qt5
  - probability output:
    + if 2 classes, directly output the predited probabilities
      rather than run the iterative algorithms for multi-class situations
  - java:
    + libsvm.jar generated by java 1.7 rather than 1.5
    + change the use of "_" in svm.java, which won't be allowed in later java
  - python:
    + split to python2 and python3


author: Kalev Lember <klember@redhat.com> - 3.39.92-2
changelog:
  - Split sysprof-capture library and header files out to sysprof-capture-devel
  - Update minimum required glib2 version


author: Kamil Dudka <kdudka@redhat.com> - 1.2.20-16
changelog:
  - fix memory leaks through gnu_long{name,link} (CVE-2021-33645 CVE-2021-33646)
  - fix out-of-bounds read in gnu_long{name,link} (CVE-2021-33643 CVE-2021-33644)


author: Xin Long <lxin@redhat.com> - 1.31-4
changelog:
  - teamd: do no remove the ports on shutdown with -N [2148856]
  - teamd: stop iterating callbacks when a loop restart is requested [2148855]


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - enable zip and jpeg codecs
  - change defattr in normal package to 0755
  - add defattr to -devel package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages from devel package to the regular one
  - integrate Frank Warmerdam's fixed .fax handling code (keep until next release
    of libtiff)
  - fix fax2ps breakage (bug #8345)


author: Phil Knirsch <phil@redhat.de>
changelog:
  - Fixed ia64 problem with tiffinfo. Was general 64 bit arch problem where s390x
    and ia64 were missing (#52129).


author: Matthias Clasen <mclasen@redhat.com> - 3.7.1-3
changelog:
  - Drop the largefile patch again
  - Fix a problem with the handling of alpha channels
  - Fix an integer overflow in tiffdump (#143576)


author: Matthias Saou <http://freshrpms.net/> 3.7.4-2
changelog:
  - Remove useless explicit dependencies.
  - Minor spec file cleanups.
  - Move make check to %check.
  - Add _smp_mflags.


author: Matthias Clasen <mclasen@redhat.com>
changelog:
  - Fix several vulnerabilities (CVE-2006-3460 CVE-2006-3461
    CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)


author: Jindrich Novy <jnovy@redhat.com> - 3.8.2-6
changelog:
  - fix CVE-2006-2193, tiff2pdf buffer overflow (#194362)
  - fix typo in man page for tiffset (#186297)
  - use %{?dist}


author: Tom Lane <tgl@redhat.com> 3.8.2-8
changelog:
  - Restore static library to distribution, in a separate -static subpackage
  Resolves: #219905
  - Don't apply multilib header hack to unrecognized architectures
  Resolves: #233091
  - Remove documentation for programs we don't ship
  Resolves: #205079
  Related: #185145


author: Tom Lane <tgl@redhat.com> 3.8.2-11
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Related: #458674
  - Use -fno-strict-aliasing per rpmdiff recommendation


author: Tom Lane <tgl@redhat.com> 3.9.2-1
changelog:
  - Update to libtiff 3.9.2; stop carrying a lot of old patches
  Resolves: #520734
  - Split command-line tools into libtiff-tools subpackage
  Resolves: #515170
  - Use build system's libtool instead of what package contains;
    among other cleanup this gets rid of unwanted rpath specs in executables
  Related: #226049


author: Tom Lane <tgl@redhat.com> 3.9.2-3
changelog:
  - Apply Adam Goode's fix for Warmerdam's fix
  Resolves: #552360
  Resolves: #533353
  - Add some defenses to prevent tiffcmp from crashing on downsampled JPEG
    images; this isn't enough to make it really work correctly though
  Related: #460322


author: Tom Lane <tgl@redhat.com> 3.9.4-1
changelog:
  - Update to libtiff 3.9.4, for numerous bug fixes including fixes for
    CVE-2010-1411, CVE-2010-2065, CVE-2010-2067
  Resolves: #554371
  Related: #460653, #588784, #601274, #599576, #592361, #603024
  - Add fixes for multiple SIGSEGV problems
  Resolves: #583081
  Related: #603081, #603699, #603703


author: Tom Lane <tgl@redhat.com> 3.9.4-3
changelog:
  - Add patch for CVE-2011-0192
  Resolves: #681672
  - Fix non-security-critical potential SIGSEGV in gif2tiff
  Related: #648820


author: Tom Lane <tgl@redhat.com> 3.9.4-4
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #684007
  Related: #688825
  - Add fix for CVE-2011-1167
  Resolves: #689574


author: Tom Lane <tgl@redhat.com> 3.9.5-1
changelog:
  - Update to libtiff 3.9.5, incorporating all our previous patches plus other
    fixes, notably the fix for CVE-2009-5022
  Related: #695885


author: Tom Lane <tgl@redhat.com> 4.0.1-1
changelog:
  - Update to libtiff 4.0.1, adds BigTIFF support and other features;
    library soname is bumped from libtiff.so.3 to libtiff.so.5
  Resolves: #782383
  - Temporarily package 3.9.5 shared library (only) in libtiff-compat subpackage
    so that dependent packages won't be broken while rebuilding proceeds


author: Tom Lane <tgl@redhat.com> 4.0.2-1
changelog:
  - Update to libtiff 4.0.2, includes fix for CVE-2012-2113
    (note that CVE-2012-2088 does not apply to 4.0.x)
  - Update libtiff-compat to 3.9.6 and add patches to it for
    CVE-2012-2088, CVE-2012-2113
  Resolves: #832866


author: Tom Lane <tgl@redhat.com> 4.0.2-5
changelog:
  - Add accessor functions for opaque type TIFFField (backport of not-yet-released
    upstream feature addition; needed to fix freeimage)


author: Tom Lane <tgl@redhat.com> 4.0.2-6
changelog:
  - Remove compat subpackage; no longer needed
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 4.0.3-2
changelog:
  - Add upstream patches for CVE-2012-4447, CVE-2012-4564
    (note: CVE-2012-5581 is already fixed in 4.0.3)
  Resolves: #880907


author: Nikola Forró <nforro@redhat.com> - 4.0.9-9
changelog:
  - Fix CVE-2017-9935, CVE-2017-18013 (#1530441),
    CVE-2018-8905 (#1559705) and CVE-2018-10963 (#1579061)


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: mahailiang <mahailiang@uniontech.com> - 2.9.0-9.01
changelog:
  - build: add udisks-mount-patch-changes.patch
  - spec: Modify redhat-rpm-config to uos-rpm-config and /media instead of /run/media


author: Peter Hatina <phatina@redhat.com> - 2.1.0-3
changelog:
  - Changes for EPEL-7
    - Lower systemd required version to 208
    - Rewrite BuildRequires for systemd-devel


author: Tomas Bzatek <tbzatek@redhat.com> - 2.8.3-1
changelog:
  - Rebased to upstream 2.8.3 release (#1685210)
  - Fix leaking filedescriptors (#1614774)
  - Fix udisksctl pager scrolling (#1662336)
  - Fix LVM2 plugin CreateSnapshot() error (#1668291)
  - Add ISCSI plugin GetInitiatorNameRaw() method (#1710257)


author: sunyuxuan <sunyuxuan@uniontech.com> - 1.4.0-4.5
changelog:
  - Add ExclusiveArch loongarch64
  - modify patch 0001-add-port-for-linux-on-loongarch.patch to support loongarch64


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 0.99-0.1.frysk20070405cvs
changelog:
  - Update to the upstream snapshot snap-070224.
  - Use the Frysk's modified version, currently snapshot 20070405cvs.
  - Extend the supported architectures from ia64 also to x86_64, i386 and ppc64.
  - Spec file fixups.
  - Split the package to its base and the `devel' part.
  - Drop the statically built libraries.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 0.99-0.2.frysk20070405cvs
changelog:
  - Require conflict with gdb < gdb-6.6-9 as it would not find `libunwind.so'.
  - Fixed (unused - commented) rule for a RPM build with embedded debug info.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 0.99-0.6.frysk20070405cvs
changelog:
  - Fix build error due to a `dprintf' conflict on recent glibc.
  - New rpmbuild parameter: --without check


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 0.99-0.8.frysk20070405cvs
changelog:
  - Fix .spec ExclusiveArch from i386 to %{ix86}.
  - Remove `BuildRequires: glibc gcc make tar gzip' - minimum build environment.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 0.99-0.9.20090413betagitb483ea3f
changelog:
  - Rebase the package on the upstream variant: http://www.nongnu.org/libunwind/
    - Drop the patch libunwind-snap-070224-frysk20070405cvs.patch
      as even frysk-0.4-8.fc11 still has this library bundled statically.
  - Disable the testsuite by default during the build.
    - It should be run separately as it crashes some ia64 kernels.
    - Drop the patch libunwind-snap-070224-orphanripper.patch.
  - Drop the patch libunwind-snap-070224-dprintf-vs-stdio.h as no longer needed.
  - Drop libunwind-snap-070224-multilib-rh342451.patch as accepted upstream.
  - Fix and enable ppc (ppc32) arch.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 0.99-0.11.20090430betagit4b8404d1
changelog:
  - Disable the libunwind-setjmp library as no longer compatible with glibc and
    no Fedora dependencies on it (FTBSFS BZ 511562).


author: Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.99-0.13.20090430betagit4b8404d1
changelog:
  - The devel package now requires also base package's %{release}.
  - Update the obsolete macro %{package_version}.


author: Kyle McMartin <kmcmarti@redhat.com> 1.1-1
changelog:
  - Update to upstream v1.1
  - libunwind-install-ptrace.patch: drop upstream patch
  - libunwind-arm-register-rename.patch: fixed upstream
  - Add pkg-config files to libunwind-devel


author: Dennis Gilmore <dennis@ausil.us> - 1.8.3-4
changelog:
  - pull in patch from upstream so that samples will build on 32 bit arches with
  - largefile support, enables gerbera to run on armv7hl and i686


author: Nicolas Chauvet <kwizart@gmail.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - Revert the ABI bump since it's the same as 1.8.3
  - Add back patch for largefile support


author: Jeff Moyer <jmoyer@redhat.com> - 1.0.7-2.el8
changelog:
  - Fix versioning.  The installed library is 1.0.7, make the rpm match.
  - bump release number for build, which includes -fPIC fix
  - Related: rhbz#1862551


author: Ziyang Zhang <ZiyangZhang@linux.alibaba.com> - 1.0.7-3.0.2
changelog:
  - revert io_uring ioctl support
  - update uapi for IORING_ENTER_SQ_SUBMIT_ON_IDLE
  - add a test for sqpoll sq_thread_idle_us mode


author: Petr Pisar <ppisar@redhat.com> - 1.1.11-35
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Harald Hoyer <harald@redhat.com> - 1.1.6-4
changelog:
  - play stupid tricks, to let alternatives make the links and
    rpm not removing them afterwards
  - removed bogus warning for "." and ".."


author: Roman Rakus <rrakus@redhat.com> - 1.1.8-1
changelog:
  - Version 1.1.8 - old patches included
                  - added bzip2-devel to build requirements
  - fixed #171510 - preserve directory permissions


author: Roman Rakus <rrakus@redhat.com> - 1.1.9-6
changelog:
  - rename functions as they conflict with glibc
  - Don't push cdda2mp3 because we don't have any mp3 coder
    Resolves: #505918


author: Honza Horak <hhorak@redhat.com> 1.1.11-2
changelog:
  - fixed man page missing arguments (Resolves: #647024)
    https://bugzilla.redhat.com/show_bug.cgi?id=647024
  - fixed erroneous "Unknown file type (unallocated)" warning 
    (Resolves: #174667)
    https://bugzilla.redhat.com/show_bug.cgi?id=174667


author: Honza Horak <hhorak@redhat.com> - 1.1.11-4
changelog:
  - Library libusal is installed in order to be used by other apps
    (Resolves: #588508)
    https://bugzilla.redhat.com/show_bug.cgi?id=588508


author: Honza Horak <hhorak@redhat.com> - 1.1.11-12
changelog:
  - Use system cdparanoia instead of old bundled version
  - Build libusal as a shared library
  - Messages from rpmlint clean-up


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-18
changelog:
  - ported from cdda-paranoia to libcdio-paranoia, modified paranoia-cdda.patch
  - fixed bogus date in changelog


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-28
changelog:
  - libusal: added /dev/srN next to /dev/scdN path when scanning for devices
    added cdrkit-1.1.11-devname.patch
    bz#1053056


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-32
changelog:
  - FTBFS: <sys/sysmacros.h> included where "major" and "minor" macros are in use
    (cdrkit-1.1.11-sysmacros.patch added)
  - https://bugzilla.redhat.com/show_bug.cgi?id=1263599 - man page clarified
    (cdrkit-1.1.11-manpagefix.patch modified)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-23
changelog:
  - Actually apply the patch from the previous build
  - Resolves: rhbz#1670997 - Amend the user lifecycle auditing


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.3-0.2.git09b0222
changelog:
  - Fixes from package review
  - Removed doubly-listed include directory
  - Update git tarball to the latest upstream code


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.9.4-4.gitdc559a5
changelog:
  - Bump epoch for the version downgrade
  - The 0.9.7 version hit the Rawhide repo due to the mass rebuild, we need a
    clean upgrade path.


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.0-2.git5462dab
changelog:
  - drop the patchlevel from the SONAME since libuv will retain binary
    compatibility for the life of the 0.10.x series


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.10.5-2
changelog:
  - Add patch to properly report soname version information
    This patch will be included upstream in 0.10.6 and can be dropped then.
  - Remove Bundles(ev) as this has not been true since 0.9.5


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.5-3
changelog:
  - don't sed the soname in the spec anymore; the patch takes care of it now
  - drop leftover global define for git revision


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-1
changelog:
  - new upstream release 0.10.33
    https://github.com/joyent/libuv/blob/v0.10.33/ChangeLog
  - update URL to point to the new libuv.org


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-2
changelog:
  - add missing %{_?isa} to devel requires of main package
  - fix some issues with the pkgconfig file and Group reported by Michael Schwendt


author: Alex Vainman <alexv@mellanox.com> - 7.0.14-1
changelog:
  - New upstream release
  - Removal of redundant macros and obsolete/unneeded tags
  - Added ExcludeArch, BuildRequires and Require sections
  - Fixes and cleanups in the build and installation sections
  - Install 30-libvma-limits.conf file under 
    /etc/security/limits.d/
  - Fixes related to files/directories ownerships
  - Removal of vma_perf_envelope.sh from the utility package
  - Update Source tag URL
  - Fix most of the rpmlint warnings


author: Alex Vainman <alexv@mellanox.com> - 7.0.14-2
changelog:
  - Added reasoning for archs exclusion
  - Package description improvement
  - Removal of the pre scriplet
  - Added COPYING and LICENSE files to the package


author: Alex Vainman <alexv@mellanox.com> - 8.0.1-1
changelog:
  - New upstream release
  - Move to dual license: GPLv2 or BSD
  - ExcludeArch update
  - Removal of extra space in:
    config(noreplace) {_sysconfdir}/security/limits.d/30-libvma-limits.conf
  - Add V=1 to make


author: Donald Dutile <ddutile@redhat.com> - 8.1.1-1
changelog:
  - Rebase to 8.1.1, re-apply patch to 8.0.1-2
  - Add (Build)Requires of libibverbs to 1.2.2
  - Resolves: rhbz#1353704


author: Jarod Wilson <jarod@redhat.com> - 8.1.3-1
changelog:
  - Patch in additional coverity fixes from upstream git tree
  - Rebase to 8.1.3 to pick up copious coverity corrections
  - Related: rhbz#1271624


author: Jarod Wilson <jarod@redhat.com> - 8.1.4-1
changelog:
  - Rebase to 8.1.4 after latest round of coverity fixes upstream
    reduced reported defects to 0
  - Related: rhbz#1271624


author: Jarod Wilson <jarod@redhat.com> - 8.6.10-0.1
changelog:
  - Rebase to upstream v8.6.10 pre-release, use 0.x release number scheme
    as means to differentiate pre-release from release


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.8-6
changelog:
  - Python 2 binary package renamed to python2-libvoikko
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Mike FABIAN <mfabian@redhat.com> - 4.1.1-1
changelog:
  - Rebase to 4.1.1 from Fedora 29 (provides only python3-libvoikko,
    removes python2-libvoikko)
  - Resolves: rhbz#1636062


author: Mike FABIAN <mfabian@redhat.com> - 4.1.1-2
changelog:
  - Fix man file names for Flatpak builds, exclude __pycache__ files from Flatpak builds
  - Resolves: rhbz#1896322


author: Wim Taymans <wtaymans@redhat.com> - 1.7.0-7
changelog:
  - Fix for CVE-2019-9232, CVE-2019-9433, CVE-2019-9371, CVE-2019-2126
  - Resolves: rhbz#1796086, rhbz#1796100, rhbz#1796448, rhbz#1796454
  - Remove php-cli BR


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.9.0-2
changelog:
  - fix permissions on binaries
  - rename generic binaries to v8_*
  - link shared library to -lm, -lpthread to resolve missing weak symbols


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.9.0-7
changelog:
  - update to git revision 8389f1967c5f8b3819cca80705b1b4ba04132b93
  - upstream fix for bz 599147
  - proper shared library support


author: zengwei <zengwei1@uniontech.com> - 1.7.0-11.0.1.01
changelog:
  - Add patch to fix integer overflows.
  - Fix compilation by including limits.h
  - Resolves: RHEL-40650
  - fix: fix CVE-2024-5197 CVE-2023-6349


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.3.0-1
changelog:
  - upstream release 0.3.0
  - enable gif2webp
  - add build requires on giflib-devel and libtiff-devel
  - use make_install and hardened macros
  - list binaries explicitly


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Weitao Zhou <yunqi.zwt@alibaba-inc.com> - 1.2.0-8.0.1
changelog:
  - Obsoletes libwebp7 from remi repo for better compatibility
  - Fix CVE-2023-4863 (#2238431)(cheng.shengyu1@zte.com.cn)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.4.2-1
changelog:
  - xkbcommon 0.4.2 (#1000497)
  - own %{_includedir}/xkbcommon/
  - -x11: +ldconfig scriptlets
  - -devel: don't include xkbcommon-x11.h
  - run reautoconf in %prep (instead of %build)
  - tighten subpkg deps via %_isa
  - .spec cleanup, remove deprecated stuff
  - BR: pkgconfig(xcb-xkb) >= 1.10


author: shenyangyang <shenyangyang4@huawei.com> - 2.9.10-3
changelog:
  - Fix-use-after-free-with-validating-reader and
    Never-expand-parameter-entities-in-text-declaration


author: zoulin <zoulin13@huawei.com> - 2.9.10-6
changelog:
  - Fix more quadratic runtime issues in HTML push parse
  - Fix reset HTML parser input before reporting error


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.9.10-10
changelog:
  - revert Don-t-try-to-handle-namespaces-when-building-HTML-do.patch.
    rubygem-nokogoro test case fail,because this patch remove xml namespace function.


author: zoulin <zoulin13@huawei.com> - 2.9.10-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] patches from upstream
         Fix-handling-of-unexpected-EOF-in-xmlParseContent.patch
         Fix-line-numbers-in-error-messages-for-mismatched-ta.patch
         Fix-null-deref-in-legacy-SAX1-parser.patch
         update-for-xsd-language-type-check.patch
         Fix-dangling-pointer-with-xmllint-dropdtd.patch
         Fix-duplicate-xmlStrEqual-calls-in-htmlParseEndTag.patch
         Fix-exponential-behavior-with-recursive-entities.patch
         Fix-quadratic-behavior-when-looking-up-xml-attribute.patch
         Fix-use-after-free-with-xmllint-html-push.patch
         Fix-xmlGetNodePath-with-invalid-node-types.patch
         Stop-checking-attributes-for-UTF-8-validity.patch


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix heap-use-after-free in xmlXIncludeIncludeNode
         fix stack overflow in xmlDocDumpMemory
         fix stack overflow in htmlDocContentDumpOutput


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix memory leaks in XPointer string-range function
         fix null pointer deref in xmlXPtrRangeInsideFunction
         stop using maxParserDepth in xpath.c
         hardcode maximum XPath recursion depth
         fix XPath recursion limit


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix following issues:
         fix unsigned integer overflow in htmlParseTryOrFinish
         fix undefined behavior in UTF16LEToUTF8
         fix SEGV in xmlSAXParseFileWithData
         encoding: fix memleak in xmlRegisterCharEncodingHandler()
         fix null deref in xmlStringGetNodeList
         fix memory leak in xmlParseElementMixedContentDecl
         fix slow parsing of HTML with encoding errors


author: fuanan <fuanan3@h-partners.com> - 2.9.10-25
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: Funda Wang <fundawang@yeah.net> - 2.9.10-43
changelog:
  - Type:CVE
  - CVE:CVE-2024-56171
  - CVE:CVE-2025-24928
  - CVE:CVE-2025-27113
  - SUG:NA
  - DESC: fix CVE-2024-56171, CVE-2025-24928, CVE-2025-27113


author: Jakub Ružička <jakub.ruzicka@nic.cz> - 2.0.231-1
changelog:
  - Rebase to version 2.0.231 (Resolves: rhbz#2111304)
  - Own yang modules (Resolves: rhbz#2094371)
  - Use proper CMAKE_BUILD_TYPE


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Wolfgang Ulbrich <fedora@raveit.de> - 2.0.4-1
changelog:
  - update to 2.0.4
  - drop obsolete IconCache scriptlets
  - add configure option --enable-kill-on-sigterm rhbz (#1545317)


author: Wolfgang Ulbrich <fedora@raveit.de> - 2.0.5-1
changelog:
  - update to 2.0.5
  - drop lightdm-gtk-greeter_readd-power.patch
  - use lightdm-gtk_add-language-button-to-layout.patch
  - drop lightdm-gtk-greeter_remove-atspi-spawn-code.patch


author: Paul Wolneykien <manowar@altlinux.org> 2.0.1-alt11
changelog:
  - A prompt-driven greeter.
  - Workaround: Use the theme\'s default foreground color for the
    prompt instead of the special question color because the latter is
    defined in only a few themes.
  - A better layout for error messages.
  - Load CSS from file ("css-path" config. option).
  - Support Pnago markup for error messages.
  - Automatically start new authentication session when the password
    is successfully changed.
  - Make the login and cancel button labels configurable.
  - Use CSS to style the prompt and error messages.
  - Conditional change pass (PIN) button.
  - Use configurable default info text.
  - Clear error when the auth. session is started by the button.
  - Append the error messages until user responds.
  - Hide cancel button when authentication completes.


author: Paul Wolneykien <manowar@altlinux.org> 2.0.1-alt12
changelog:
  - Fix: Restart the authentication session with empty username and
    don't use the last authenticated user name when the greeter-hide-users
    hint is set to true (closes: #36293).


author: Paul Wolneykien <manowar@altlinux.org> 2.0.1-alt13
changelog:
  - Fix/improve: Restart the authentication session with empty username
    when the user selector is set to "Other...".


author: Paul Wolneykien <manowar@altlinux.org> 2.0.1-alt15
changelog:
  - Russian translation of some prompts and titles (thx Oleg Zenin).
  - Translate the prompts and messages (thx Oleg Zenin).


author: Alec Leamas <leamas.alec@gmail.com> - 0.10.0-19
changelog:
  - Fix FTBS on python 3.8. Closes: #1718285.
  - mode2: Fix inconsistent loglevel/debug option (upstream #307)
  - plugins: devinput: fix glob "no match" error (upstream #285, DBS 860551)


author: Neal Gompa <ngompa13@gmail.com> - 1:27.0-1
changelog:
  - Bump version to 27.0 (ngompa13)
  - imgcreate/creator: Change to text strings for reading file list from rpm
    (ngompa13)
  - imgcreate/live: Check for dracut being installed to determine usability
    (ngompa13)
  - imgcreate/live: Add squashfs as a mandatory extra filesystem (ngompa13)
  - imgcreate/live: Rename dracut config file to 99-liveos.conf (ngompa13)
  - 'udevadm settle' needs some time to settle (sbonds)
  - README: Removed unnecessary 'the' (scwicker)
  - imgcreate/kickstart: Use systemctl for enabling/disabling services (ngompa13)
  - livecd-iso-to-disk: Simply mount read-only to test for flat_squashfs.
    (fgrose)
  - editliveos: Accommodate netinstall in multi boot configuration files.
    (fgrose)
  - livecd-iso-to-disk+pod: Support netinstall .isos and as multi install.
    (fgrose)


author: Chris Leech <christopher.leech@intel.com> - 0.9.7-1
changelog:
  - Updated to 0.9.7
  - Added a private copy of dcbnl.h until kernel-headers includes it.
    Export patch is making it's way to the upstream kernel via net-2.6,
    expected in 2.6.29-rc7


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.7-3
changelog:
  - added devel files again to support fcoe-utils package
  - added kernel >= 2.6.29 to Requires, deleted dcbnl.h, since it is
    aviable in kernel 2.6.29-rc7
  - changed config dir from /etc/sysconfig/dcbd to /etc/dcbd
  - updated init script: added mandatory Short description tag,
    deleted default runlevels, which should start the script


author: Karsten Hopp <karsten@redhat.com> 0.9.15-4
changelog:
  - buildrequire libconfig-devel >= 1.3.2, it doesn't build with 1.3.1 due to
    the different config_lookup_string api


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.26-1
changelog:
  - rebased to 0.9.26
  - package renamed to lldpad
  - enahanced functionality (LLDP supported as well as DCBX)


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.32-1
changelog:
  - rebased to 0.9.32 (various enhancements and bugfixes, see 
    lldpad-0.9.32-relnotes.txt on http://e1000.sf.net for complete list)


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.38-1
changelog:
  - rebased to 0.9.38 (various enhancements and bugfixes, see 
    lldpad-0.9.38-relnotes.txt on http://e1000.sf.net for complete list)


author: Petr Sabata <psabata@redhat.com> - 0.9.41-1
changelog:
  - 0.9.41 bump
  - New BR: autotools, flex
  - Buildroot garbage removed
  - Devel post and preun scriptlets sanitized


author: Petr Sabata <contyk@redhat.com> - 0.9.42-1
changelog:
  - 0.9.42 bump (massive patches cleanup)
  - Remove obsolete defattr
  - Remove COPYING and README from devel subpackage


author: Petr Sabata <contyk@redhat.com> - 0.9.42-2
changelog:
  - Introduce systemd unit file, drop SysV support
  - Call systemctl instead of service and chkconfig
  - Enable the service only on new installation (post)
  - Clean exit patch


author: Petr Sabata <contyk@redhat.com> - 0.9.43-2
changelog:
  - Apply various upstream 0.9.43 bugfixes
  - Include not yet accepted Jens Osterkamp's patch to fix bug #720080
  - Whitespace cleanup, phew


author: Petr Šabata <contyk@redhat.com> - 0.9.46-1
changelog:
  - 0.9.46 bump
  - 802.1Qaz fixes to enable support on not CEE DCBX-enabled hardware
  - 802.1Qbg EVB module support
  - lldpad now supports bonded interfaces


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.9.46-6
changelog:
  - Add upstream patch to build against libnl3
  - Drop legacy dcbd packaging support, we've not shipped it since F-13


author: Chris Leech <cleech@redhat.com> - 1.0.1-3.git986eb2e
changelog:
  - 1303439 package should not attempt to own /etc/bash_completion.d
  - fix more build warning in rawhide


author: Aaron Conole <aconole@redhat.com> - 1.0.1-14.git036e314
changelog:
  - Update to branch-1.1 compatibility
  - Fixes to avoid assert in the agent state machine
  - Remove the memory constraint on the event socket buffer (#1554110)


author: Brian C. Lane <bcl@redhat.com> 28.14.63-1
changelog:
  - Handle all possible dnf group_install errors (bcl)
    Related: rhbz#1947958
  - runtime-install: Install nvme-cli tool (bcl)
    Related: rhbz#1903339


author: Brian C. Lane <bcl@redhat.com> 28.14.64-1
changelog:
  - mkksiso: Check the length of the filenames (bcl)
    Related: rhbz#2028048
  - mkksiso: Check the iso's arch against the host's (bcl)
    Related: rhbz#2028048
  - mkksiso: Add missing implantisomd5 tool requirements (bcl)
    Related: rhbz#2028048
  - mkksiso: Raise error if no volume id is found (bcl)
    Related: rhbz#2028048
  - mount: Add aarch64 and s390x support to IsoMountopoint (bcl)
    Resolves: rhbz#2028089
  - mkksiso: Skip mkefiboot for non-UEFI isos (bcl)
    Resolves: rhbz#2028097
  - mkksiso: Add -joliet-long (bcl)
    Resolves: rhbz#2028044
  - mkksiso: Return 1 on errors (bcl)
    Resolves: rhbz#2028048
  - Increase boot.iso rootfs to 4GiB (bcl)
    Resolves: rhbz#2028059
  - Fix specfile to match the one from dist-git (bcl)
    Related: rhbz#2001942


author: Brian C. Lane <bcl@redhat.com> 28.14.67-1
changelog:
  - mkksiso: Fix the order of the ppc mkisofs command (bcl)
    Related: rhbz#2049205
  - mkksiso: mkfsiso argument order matters (bcl)
    Resolves: rhbz#2049205
  - mkksiso: Improve debug message about unsupported arch (bcl)
    Related: rhbz#2049190
  - mkksiso: Add kickstart to s390x cdboot.prm (bcl)
    Resolves: rhbz#2049190


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.1-1
changelog:
  - New upstream release 5.1.1
  - Fix detection of readline during compile (iow add readline support back)


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.1-2
changelog:
  - Only link /usr/bin/lua with readline / do not link %{_libdir}/liblua-5.1.so
    with readline so that we don't cause any License troubles for packages
    linking against liblua-5.1.so, otherwise lua could drag the GPL only readline
    lib into the linking of non GPL apps.


author: Tim Niemueller <tim@niemueller.de> - 5.1.3-3
changelog:
  - own $libdir/lua/5.1 and $datadir/lua/5.1. These are the standard package
    search path for Lua. Packaging them properly allows for easy creation of
    Lua addon packages.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.3-4
changelog:
  - Not only own $libdir/lua/5.1 and $datadir/lua/5.1 but also $libdir/lua
    and $datadir/lua for proper removal of these dirs upon lua removal


author: Tim Niemueller <tim@niemueller.de> - 5.1.3-5
changelog:
  - Provide lua = 5.1, this way add-on packages can easily depend on the Lua
    base version and expect certain paths for packages


author: Tim Niemueller <tim@niemueller.de> - 5.1.4-7
changelog:
  - Add patch to from lua.org with smaller bugfixes
  - sed -i -e 's/5\.1\.3/5.1.4/g' on autotoolize patch, bug #641144


author: Hans de Goede <hdegoede@redhat.com> - 5.2.2-3
changelog:
  - Drop compat-lua-libs package, as there now is a separate compat-lua
    package (including a -devel)


author: Mat Booth <mat.booth@redhat.com> - 0:3.6.2-15
changelog:
  - Fix failure to build from source
  - Use ivy-local correctly and switch away from obsolete maven macros


author: Julio Merino <jmmv@google.com> 0.1-2
changelog:
  - Made lutok-devel depend on lua-devel (needed for c_gate.hpp).
  - Forced lutok and lutok-devel to depend on Lua 5.1; 5.2 is not supported
    by Lutok 0.1.


author: Julio Merino <jmmv@google.com> 0.2-2
changelog:
  - Added the lutok-tests package providing the run-time tests of Lutok, readily
    runnable by the end users.


author: Julio Merino <jmmv@google.com> 0.3-1
changelog:
  - Package updated to Lutok 0.3.
  - Lutok now supports both Lua 5.1 and 5.2.  The specific version used in this
    release depends on the Fedora branch this package is built for.


author: lifeng <lifeng68@openeuler.org> - 4.0.3-2020112701
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: mount: make possible to bind mount /proc and /sys/fs.
  -	1. add check whether have /proc mounts entry, if has, skip the auto
  -	2. mount cgroup before do mount entrys
  -	3. pass if the mount on top of /proc and the source of the mount is a proc filesystem


author: wujing <wujing50@huawei.com> - 4.0.3-2020120701
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: use path based unix domain sockets instead of abstract namespace sockets


author: wangfengtu<wangfengtu@huawei.com> - 4.0.3-2022052301
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: do not operate playload and attach cgroup if no controller found


author: Gao Xiang <hsiangkao@linux.alibaba.com> - 1.9.4-1
changelog:
  - Update to 1.9.4 in sync with Anolis 23
  - Switch back from Meson since its version is too low on Anolis 8.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 4.32.7-13
changelog:
  - Don't build the obsolete base package (#999937).
  - Fix base -libs package dependency in -devel package to be arch-specific.


author: Parag Nemade <pnemade AT redhat DOT com> - 1.7.0-7
changelog:
  - Add missing BuildRequires: glibc-locale-source
  - Resolves:rh#996429 - Mapping of ਠ is improper as per standard
  - Resolves:rh#903272 - [gu_IN] use Devanagari U0965 instead of U0AE5 in inscript2 map


author: Parag Nemade <pnemade AT redhat DOT com> - 1.8.0-0.1.RC1
changelog:
  - Update to 1.8.0 (#1523967)
  - Resolves:rh#1487512 - Can't enter words beginning "ld" with Tibetan-ewts keyboard


author: Parag Nemade <pnemade AT redhat DOT com> - 1.55-25
changelog:
  - Add Supplements: for https://fedoraproject.org/wiki/Packaging:Langpacks guidelines
  - Clean the specfile to follow current packaging guidelines


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.6-22.g
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  - https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.22.2-2
changelog:
  - use https://github.com/mate-desktop/mate-control-center/commit/3e4ccaf
  - force uniform size of icons in shell


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.24.0-2
changelog:
  - use https://github.com/mate-desktop/mate-menus/pull/77
  - fix icons in panel menu with pt and pt_BR locale
  - fix rhbz (#1808522)


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.24.0-3
changelog:
  - add upstream patch
  - fix pt and pt_BR locale translation issues
  - build all applets in-process for wayland
  - fix broken SVG icons
  - use https://github.com/mate-desktop/mate-panel/pull/1066


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.0-2
changelog:
  - Fix segfault from gdk_x11_get_server_time if not on X11
  - don't build with appindicator support for the moment
  - intial build for epel8


author: Adam Jackson <ajax@redhat.com> - 1.22.1-2
changelog:
  - Drop BuildRequires: libXxf86misc-devel, X servers haven't implemented that
    extension in 10+ years.


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.22.2-2
changelog:
  - fix problems with gnome-keyring-3.34
  - use https://github.com/mate-desktop/mate-session-manager/pull/223


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.24.0-2
changelog:
  - use https://github.com/mate-desktop/mate-terminal/commit/2030aa2
  - use https://github.com/mate-desktop/mate-terminal/pull/327
  - use https://github.com/mate-desktop/mate-terminal/pull/322
  - use https://github.com/mate-desktop/mate-terminal/commit/c317ee8
  - use https://github.com/mate-desktop/mate-terminal/pull/332


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 0:1.5.22-2.0.1
changelog:
  - Fix glibc2.32 build issue for better compatible with both glibc2.28 and glibc2.32
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 and gcc8 build


author: Severin Gehwolf <sgehwolf@redhat.com> - 2.10.1-4
changelog:
  - Add explicit requirement on javapackages-tools since launcher script
    uses java-functions. See RHBZ#1600426.


author: Yoshinori Matsunobu <Yoshinori.Matsunobu@gmail.com>
changelog:
  - (Note: All changelogs are written here: http://code.google.com/p/mysql-master-ha/wiki/ReleaseNotes )
  - Version 0.57


author: Kenny.Gryp <kenny@goss.be>
changelog:
  - Several bugfixes
  - IPV6 support
  - super_read_only support
  - enforce_storage_engine support
  - Version 0.58
  - With the help of Marcelo Altmann <marcelo.altmann@percona.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.1-4
changelog:
  - Subpackage python2-miniupnpc has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Petr Pisar <ppisar@redhat.com> - 2.1.0-1
changelog:
  - 2.1.0 bump
  - Upstream moved to <https://github.com/richgel999/miniz>
  - License changed from "Unlicense" to "MIT and Unlicense"
  - ABI changed, API preserved


author: Pavel Raiskup <praiskup@redhat.com> 2.9-1
changelog:
  - rpkg_preprocessor: Add a force_enable option (tstellar@redhat.com)
  - use TemplatedDictionary as standalone module (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 2.10-1
changelog:
  - do not allocate tty for podman (msuchy@redhat.com)
  - work-around bug setting propagation for recursive bind-mounts (david.ward@ll.mit.edu)
  - fix handling of essential mountpoints (david.ward@ll.mit.edu)
  - pre-create the dest directory in _copy_config


author: Pavel Raiskup <praiskup@redhat.com> 2.11-1
changelog:
  - mock: fix broken --help output
  - compress_logs: compress also after repo failures
  - move to libera.chat (msuchy@redhat.com)
  - Define _platform_multiplier macro (msuchy@redhat.com)
  - allow to --install external:* (msuchy@redhat.com)
  - move installation of external:* to separate function (msuchy@redhat.com)
  - honor --cwd for --shell (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 2.12-1
changelog:
  - don't set --cwd for --shell when we know it will fail (el7)
  - explicitly convert macro values to str (logans@cottsay.net)
  - disable versionlock DNF plugin by default (igor.raits@gmail.com)
  - move Requires of shadow-utils from mock-core-configs to mock-filesystem
    (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 2.13-1
changelog:
  - local repositories to use gpgcheck=0 by default
  - A new option --additional-package (for --rebuild)
  - external-deps: install pip packages to /usr
  - Install external deps into build chroot, not bootstrap
  - Migrate from optparse to argparse
  - mock: don't specify SOURCE when remounting bind-mounts
  - mock: add option --debug-config-expanded (sergio@serjux.com)
  - Fix use of deprecated function (xfgusta@gmail.com)
  - lvm_root: fix copy/paste error in a warning message (kdudka@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 2.15-1
changelog:
  - argparse: handle old-style commands *before* ignoring "--" (awilliam@redhat.com)
  - Update mock.1 (cheese@nosuchhost.net)


author: Pavel Raiskup <praiskup@redhat.com> 2.16-1
changelog:
  - disable system call filtering
  - pass env to podman run (dani@lapiole.org)
  - give user alternative help for missing 'epel-8-*' configs
  - podman, explictily specify stdin as tar source (vreeland.justin@gmail.com)
  - add a new 'ssl_extra_certs' option (patrick@laimbock.com)


author: Pavel Raiskup <praiskup@redhat.com> 36.3-1
changelog:
  - add EuroLinux 8 aarch64 (alex@euro-linux.com)
  - add HA and RS configs to EuroLinux configs (alex@euro-linux.com)
  - Add epel9-next configs (carl@george.computer)


author: Pavel Raiskup <praiskup@redhat.com> 36.4-1
changelog:
  - add CentOS Stream 9 + EPEL Next 9 (ngompa13@gmail.com)
  - add compatibility symlinks for EPEL 7 to centos+epel-7-* (ngompa13@gmail.com)
  - EPEL 7 for AArch64 and PPC64 are EOL (ngompa13@gmail.com)
  - resolve the multiple "local" repo collision (from multiple templates)
  - configure the alternative help for missing 'epel-8-*' configs
  - Fedora 33 is EOL
  - rhelepel moved to rhel+epel
  - EOL the EPEL Playground configs (ngompa13@gmail.com)
  - Add rocky+epel confs + Disable devel-debug (tucklesepk@gmail.com)
  - Rename epel to centos+epel (ngompa13@gmail.com)
  - fix the root name and remove Next from the EPEL 9 configs (ngompa13@gmail.com)
  - rename 'epel-next' to 'centos-stream+epel-next' (ngompa13@gmail.com)
  - add epel9 repos to epel9 template (carl@george.computer)
  - rhbz#2026571 - expand dnf_vars (msuchy@redhat.com)
  - oraclelinux+epel configs (carl@george.computer)
  - Add AlmaLinux+EPEL configs (ngompa13@gmail.com)
  - add navy-8-x86_64 (adil@linux.com)
  - use quay.io Almalinux image (gotmax@e.email)
  - use fully qualified bootstrap_image name (gotmax@e.email)
  - update almalinux-8.tpl bootstrap_image (gotmax@e.email)
  - add Koji local repos to CentOS Stream configs (ngompa13@gmail.com)
  - reduce packages installed in epel chroots (carl@george.computer)


author: Pavel Raiskup <praiskup@redhat.com> 37-1
changelog:
  - move CentOS/EPEL 8 configs to eol/
  - Fedora 36 branching, Rawhide == Fedora 37 now
  - depend on distribution-gpg-keys 1.64
  - drop failovermethod=priority from EL8 configs
  - Add Extras repo for CentOS Stream 9 (ngompa13@gmail.com)
  - remove el7 specific parts from the spec file (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 37.1-1
changelog:
  - drop EL7 related %build hack
  - link default.cfg file to the right EL N config file
  - Add centos-stream+epel-8 configs


author: Pavel Raiskup <praiskup@redhat.com> 37.2-1
changelog:
  - Update CentOS Stream 9 Extras repo to use correct key (ngompa@centosproject.org)
  - Add AlmaLinux+EPEL 8 for POWER (ppc64le) (ngompa13@gmail.com)
  - Add AlmaLinux 8 for POWER (ppc64le) (ngompa13@gmail.com)
  - Delete Fedora 37/Rawhide armhfp configs (miro@hroncok.cz)


author: Pavel Raiskup <praiskup@redhat.com> 37.3-1
changelog:
  - updated %description field
  - provide 'epel-9' symlinks for 'fedpkg mockbuild'
  - allow n-2 gpg key for Fedora ELN (msuchy@redhat.com)
  - added config "description" fields for --list-chroots (msuchy@redhat.com)


author: Honggang Li <honli@redhat.com> - 3.3.2-8
changelog:
  - Sync with Fedora build
  - Update to latest upstream release 3.3.2
  - Resolves: rhbz#1657316, rhbz#1732982, rhbz#1850080


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 4.1.1-1.0.1
changelog:
  - Add -fallow-argument-mismatch for compatible with gcc10 build
  - Do not require valgrind for loongarch64 (geliwei@openanolis.org)


author: Miro Hrončok <mhroncok@redhat.com> - 0.1.2-2
changelog:
  - Reduced BRs a lot (removed support for various stuff)
  - Make smbclient realized
  - Changed the description to the text from manual page


author: Miro Hrončok <mhroncok@redhat.com> - 0.3.0-1
changelog:
  - New version 0.3.0
  - Switch to waf
  - Add some tricks from openSUSE
  - Removed already included patch


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.1-1
changelog:
  - Update to 0.9.1
  - BR compat-lua-devel because mpv does not work with lua 5.3
  - Add BR lcms2-devel (#3643)
  - Removed --enable-joystick and --enable-lirc (no longer used)


author: Sérgio Basto <sergio@serjux.com> - 0.15.0-2
changelog:
  - Drop BR lirc, because support for LIRC has been removed in mpv 0.9.0.
  - Add license tag.
  - libmpv-devel does not need have same doc and license files.


author: Leigh Scott <leigh123linux@googlemail.com> - 0.19.0-3
changelog:
  - Update to 0.19.0
  - Add LDFLAGS so build is hardened
  - Fix CFLAGS
  - Make build verbose
  - Remove Requires pkgconfig from devel sub-package
  - Fix source tag


author: liweiganga <liweiganga@uniontech.com> - 1.2.0-1
changelog:
  - upstream release 1.2.0
  - fix: fix CVE-2016-10141、CVE-2016-7504、CVE-2016-9136、CVE-2017-5628、CVE-2016-9017、\
         CVE-2016-7506、CVE-2017-5627、CVE-2016-9108、CVE-2016-9294


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.01-23
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
  - Added BuildRequires: javapackages-local (tdawson@redhat.com)


author: Mat Booth <mat.booth@redhat.com> - 0.9.6-1
changelog:
  - Update to latest upstream version
  - Drop upstreamed patch
  - Obsolete the benchmark module
  - Add conditional minimal dependency build


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.13.01-3
changelog:
  - Fix use-after-free and heap buffer overflow vulnerabilities
  - Resolves: CVE-2017-10686, CVE-2017-11111


author: Michael Simacek <msimacek@redhat.com> - 2.13.02-1
changelog:
  - Update to upstream version 2.13.02
  - Resolves: CVE-2017-17810, CVE-2017-17811, CVE-2017-17812, CVE-2017-17813,
    CVE-2017-17814, CVE-2017-17815, CVE-2017-17816, CVE-2017-17817,
    CVE-2017-17818, CVE-2017-17819, CVE-2017-17820


author: flyos@mailoo.org
changelog:
  - Change the name of the package to nbci-blast+ to be avoid conflicts
    with ncbi-blast packaged in "ncbi" and to be aligned with other systems
    (e.g. Debian world)
  - Update to version 2.7.1
    * BLAST+ 2.7.1: October 23, 2017
    - Improvements::
    Provided an upper limit on the number of threads for BLAST+
    search applications.
    Improved performance of taxonomic name lookups.
    Fixed Mac installers so they are interoperable with other NCBI
    applications.
    Reduced the amount of locking in BLASTDB reading library (CSeqDB).
    - Bug fixes::
    Fixed race condition when using gilist parameter.
    Fixed culling_limit bug with HSPs from different strands
    Fixed dustmasker bug with long region of Ns
    Fixed bl2seq problem with HTML output
    * BLAST+ 2.6.0: January 09, 2017
    - New features::
    Handle bare accessions on blastdb_aliastool.
    Change defaults for output formats 6, 7, and 10 to incorporate
    version in accessions.
    - Improvements::
    Add support for NCBI_DONT_USE_LOCAL_CONFIG and
    NCBI_DONT_USE_NCBIRC environment variables.
    Better runtime performance in blastdbcmd when the entry_batch
    parameter is used.
    SAM output improvements.
    Changed gapped alignment starting point to minimize the chance to
    produce sub-optimal alignments.
    For custom matrices absent from the util/tables source file, use
    BLOSUM62 for reporting number of positives.
    Added long_seqids flag to blastdbcmd to use long (legacy) NCBI
    Seq-id format.
    - Bug fixes::
    Fixed issue with missing alignments in blastx.
    Fixed problem processing accession.version in makeblastdb.
    Fixed blastdbcmd problem with local IDs.
    Removed memory leak for multi-threaded runs.
    Fixed blastdbcmd crash when listing all entries and a sequence has
    no title.
    * BLAST+ 2.5.0: September 12, 2016
    - New features::
    Composition based statistics for rpstblastn.
    Added output format for taxonomic organism report.
    Support for bare accessions in FASTA and BLAST reports.
    - Improvements::
    - remote option connects to NCBI via HTTPS. This adds a dependency
    on GNUTLS (see https://www.ncbi.nlm.nih.gov/books/NBK279690/)
    Pre-fetch sequences for formatting.
    - Bug fixes::
    Fixed improper functioning of output format 6 tokens ssciname,
    staxid, sscinames and staxids.
    tblastn core-dumps in multi-threaded mode.
    Ensure stable sorting of results in multi-threaded mode.
    Fixed incorrect percent identity in tabular format for sequences
    containing selenocysteine.
    * BLAST+ 2.4.0: June 02, 2016
    - New features:
    Introduced multi-threaded traceback for blastp, blastx, tblastn
    and tblastx.
    Added new tabular format specifiers for taxonomic information
    (staxid, ssciname, scomname, sblastname, skingdom) that correspond to
    the first subject ID.
    - Improvements:
    Speed up makeblastdb runtime performance with input consisting of
    many ambiguities.
    Better support for 'bare' IDs in taxid_map option to makeblastdb.
    Score U (selenocysteine) as C (not X) in protein-protein and
    translated searches.
    - Bug fixes:
    Corrected E-value computation in finite-size correction.
    Removed memory leak from rpsblast.
    Made handling of ambiguities in subjects identical when using
    FASTA and BLAST database inputs.
    makeblastdb no longer replaces tabs in definition line by '#'.
    Corrected problem with spaces in database names on windows.
    Corrected handling of subject_loc.
    * BLAST+ 2.3.0: December 21, 2015
    - New features:
    Added new PSIBLAST command line options to support saving PSSM
    and checkpoint files for each iteration and calculate checkpoint and
    PSSM for the last iteration.
    Added unique subject sequence query coverage to tabular output.
    Added support single file JSON and XML2 Blast output format.
    Beta release of SAM output format.
    Treat N subject sequences, entered with the -subject argument
    (bl2seq mode), as one search set rather than N sets.
    - Improvements:
    makeblastdb ignores and warns users about empty sequences in
    input.
    BLAST+ only accepts "obinary" windowmasker files for performance
    reasons.
    - Bug fixes:
    Best hits processing multi-threaded context.
    Fixed memory leak when invoking composition based statistics with
    an argument of 2.
    Return non-zero exit code when failing to write output file.
    Use relative paths in XInclude file for multi-file XML2 output
    format.
    Fixed memory leak in blastx.
    Fixed inconsistent XML2 output to standard output vs. file.
    Fixed psiblast incorrectly processing large input MSA.
    Fixed bug when running BLAST+ on windows with multiple threads.
    * BLAST+ 2.2.31: May 18, 2015
    - New features:
    Added support for BLAST-XML2 specification.
    Added support for JSON Blast output format.
    - Improvements:
    Improved adaptive batch size algorithm to better handle small
    databases.
    Preface error/warning message(s) with name of the application.
    Allow multiple deflines even without GIs.
    Download more concise database information for -remote searches.
    - Bug fixes:
    Fixed problem with makeblastdb's -max_file_sz.
    Reenabled support for word size 5 in tblastn.
    Fixed memory initialization problems.
    Use score for sorting search results if evalue less than 1.0e-180.


author: flyos@mailoo.org
changelog:
  - Remove rpsblast from install to avoid file conflicts with "ncbi-blast"
    package from "ncbi" spec file


author: Pierre Bonamy <flyos@mailoo.org>
changelog:
  - Readded rpsblast and use update-alternatives to allow co-installation
    with ncbi-tools (blast+ has higher priority)


author: openEuler Buildteam <buildteam@openeuler.org> - 6.1-12
changelog:
  - Type:cves
  - ID:CVE-2019-17594  CVE-2019-17595
  - SUG:NA
  - DESC:fix CVE-2019-17594 and CVE-2019-17595


author: Severin Gehwolf <sgehwolf@redhat.com> - 0:1.9.22-8
changelog:
  - Add explicit requirement on javapackages-tools since nekohtml-filter
    script uses java-functions. See RHBZ#1600426.


author: Josef Ridky <jridky@redhat.com> - 1:5.8-19
changelog:
  - revert permission of config files to 600 (#1601060)
  - fix error message when the address specified by clientaddr option
    is wrong or cannot be bound (#1877375)
  - log error with /proc/net/if_inet6 only when IPv6 is enabled (#1824367)
  - fix issue with quoting empty passphrase (#1817225)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-21
changelog:
  - prevent parsing IP address twice (#1768908)
  - add support for digests detected from ECC certs (#1919714)
  - fix broken ErrorMsg at ucd-snmp (#1933150)
  - add support for intermediate certs (#1914656)
  - fix crash of certs with longer extension (#1908718)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-27
changelog:
  - fix memory leak due of proc file creating (#2105957)
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141901) and (#2141905)
  - fix memory leak when ipv6 disable set to 1 (#2151537)
  - fix proxy timeout issue (#2160723)


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.13.0-138
changelog:
  - Merging upstream branch-2.13 [RH git: 424b25f9ca]
      Commit list:
      85358e0a9f datapath-windows: Reset flow key after Ipv4 fragments are reassembled


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.13.0-139
changelog:
  - Merging upstream branch-2.13 [RH git: 37c2767bbd]
      Commit list:
      057a5b0708 ofproto-dpif-xlate: Fix check_pkt_larger incomplete translation.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.13.0-140
changelog:
  - Merging upstream branch-2.13 [RH git: 6a59db52e8]
      Commit list:
      9fa66631c2 flow: Consider dataofs when parsing TCP packets.
      cabeb5d056 tests/flowgen: Fix packet data endianness.
      0b8586fbeb ofproto: Fix resource usage explosion due to removal of large number of flows.
      34801d50e2 ofproto: Fix resource usage explosion while processing bundled FLOW_MOD.
      1910814e5e tests/flowgen: Fix length field of 802.2 data link header.
      6aac7758c0 ovs-lib: Backup and remove existing DB when joining cluster.
      a5e1af7b99 docs/dpdk: Fix install doc.
      6fb9d7ab08 ovs-save: Save igmp flows in ofp_parse syntax.
      0c93c71f8c dpdk: Use DPDK 19.11.10 release.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.13.0-141
changelog:
  - Merging upstream branch-2.13 [RH git: 035911bcc8]
      Commit list:
      0263845fde compat: handle NF_REPEAT error on nf_conntrack_in.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.13.0-142
changelog:
  - Merging upstream branch-2.13 [RH git: e2ae994435]
      Commit list:
      025ec93bc5 Prepare for 2.13.7.
      723e0727f3 Set release date for 2.13.6.
      d6d2dead72 ofproto-dpif-xlate: Snoop ingress packets and update neigh cache if needed.
      dc8b79ccf1 tnl-neigh-cache: Do not refresh the entry while revalidating.
      7e1c6034b5 tnl-neigh-cache: Include expected array sizes in prototypes.
      9c98116ac7 tnl-neigh-cache: Read/write expires atomically.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.13.0-143
changelog:
  - Merging upstream branch-2.13 [RH git: 52b03eee18]
      Commit list:
      d30d561bd9 ofproto-dpif: Fix memory leak in dpif/show-dp-features appctl.


author: zengwefeng<zwfeng@huawei.com> - 0.9.6-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:enable check while building
         parser_bison memleak symbol redefinition
         segtree memleaks in interval_map_decompose
         json Combining terse with json has no effect
         evaluate Reject quoted strings containing only wildcard
         Solves Bug 1462 nft j list set does not show counters
         json Fix memleak in set_dtype_json
         mnl reply netlink error message might be larger than MNL_SOCKET_BUFFER_SIZE


author: gaihuiying <gaihuiying1@huawei.com> - 0.9.6-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:evaluate disallow ct original s d ddr from maps
         evaluate disallow ct original s d ddr from concatena


author: huangyu <huangyu106@huawei.com> - 1:0.9.6-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:parser_json fix device parsing in netdev family
  src don't parse string as verdict in map


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.14.1-9
changelog:
  - Place 'mdns4_minimal' in /etc/nsswitch.conf after 'files' in /etc/nsswitch.conf,
    so that it ends up before 'resolve' (#1867830)


author: Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
changelog:
  - Initial import into Fedora Core, based on a CVS snapshot of
    the NSS_3_11_RTM tag
  - Fix up the pkcs11-devel subpackage to contain the proper headers
  - Build with RPM_OPT_FLAGS
  - No need to have rpath of /usr/lib in the pc file


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Kai Engert <kengert@redhat.com> - 3.11.5-1
changelog:
  - Update to 3.11.5
  - This update fixes two security vulnerabilities with SSL 2
  - Do not use -rpath link option
  - Added several unsupported tools to tools package


author: Kai Engert <kengert@redhat.com> - 3.11.5-2
changelog:
  - Fix rhbz#230545, failure to enable FIPS mode
  - Fix rhbz#220542, make NSS more tolerant of resets when in the
    middle of prompting for a user password.


author: Kai Engert <kengert@redhat.com> - 3.11.7-2
changelog:
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5.
  - Use a workaround to avoid mozilla bug 51429.


author: Kai Engert <kengert@redhat.com> - 3.11.7-10
changelog:
  - Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist
    our signed libraries and protect them from modification.


author: Kai Engert <kengert@redhat.com> - 3.11.99.3-2
changelog:
  - Build against gcc 4.3.0, use workaround for bug 432146
  - Run the test suite after the build and abort on failures.


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-3
changelog:
  - nss package should own /etc/prelink.conf.d folder, rhbz#452062
  - use upstream patch to fix test suite abort


author: Kai Engert <kaie@redhat.com> - 3.12.3-3
changelog:
  - ship .chk files instead of running shlibsign at install time
  - include .chk file in softokn-freebl subpackage
  - add patch for upstream nss bug 488350


author: Kai Engert <kaie@redhat.com> - 3.12.3-7
changelog:
  - re-enable test suite
  - add patch for upstream bug 488646 and add newer paypal
    certs in order to make the test suite pass


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-5
changelog:
  - updated pem module incorporates various patches
  - fix off-by-one error when computing size to reduce memory leak. (483855)
  - fix data type to work on x86_64 systems. (429175)
  - fix various memory leaks and free internal objects on module unload. (501080)
  - fix to not clone internal objects in collect_objects().  (501118)
  - fix to not bypass initialization if module arguments are omitted. (501058)
  - fix numerous gcc warnings. (500815)
  - fix to support arbitrarily long password while loading a private key. (500180)
  - fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-10
changelog:
  - must install libnssutil3.since nss-util is untagged at the moment
  - preserve time stamps when installing various files


author: Elio Maldonado+emaldona@redhat.com - 3.12.3.99.3-11
changelog:
  - split off nss-softokn and nss-util as subpackages with their own rpms
  - first phase of splitting nss-softokn and nss-util as their own packages


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-19
changelog:
  - remove patches that are now in nss-softokn and
  - remove spurious exec-permissions for nss.pc per rpmlint
  - single requires line in nss.pc.in


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-22
changelog:
  - Fix nss-config not to include nssutil
  - Add BuildRequires on nss-softokn and nss-util since build also runs the test suite


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-25
changelog:
  - Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn
  - Add a temprary hack to nss.pc.in to unblock builds


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-29
changelog:
  - Restoring patches 2 and 7 as we still compile all sources
  - Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-30
changelog:
  - Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766
  - Fixed requires and buildrequires as per recommendations in spec file review


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-2
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - No rpath-link in nss-softokn-config


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - PEM module implements memory management for internal objects - 509705
  - PEM module doesn't crash when processing malformed key files - 512019


author: Elio Maldonado<emaldona@redhat.com - 3.12.4-9
changelog:
  - Install blank databases and configuration file for system shared database
  - nsssysinit queries system for fips mode before relying on environment variable


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-13
changelog:
  - User no longer prompted for a password when listing keys an empty system db (#527048)
  - Fix setup-nsssysinit to handle more general formats (#527051)


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-13.1
changelog:
  - Require nss-softoken of same architecture as nss (#527867)
  - Merge setup-nsssysinit.sh improvements from F-12 (#527051)


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1
changelog:
  - Update to 3.12.5
  - Patch to allow ssl/tls clients to interoperate with servers that require renogiation


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.5
changelog:
  - Fix nsssysinit to set the default flags on the crypto module (#545779)
  - Remove redundant header from the pem module


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.6
changelog:
  - Fix nsssysinit to enable apps to use system cert store, patch contributed by David Woodhouse (#546221)
  - Fix spec so sysinit requires coreutils for post install scriplet (#547067)
  - Fix segmentation fault when listing keys or certs in the database, patch contributed by Kamil Dudka (#540387)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-1.1
changelog:
  - Using SSL_RENEGOTIATE_TRANSITIONAL as default while on transition period
  - Disabling ssl tests suites until bug 539183 is resolved


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-3
changelog:
  - Add sed to sysinit requires as setup-nsssysinit.sh requires it (#576071)
  - Update PayPalEE test cert with unexpired one (#580207)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-5
changelog:
  - Update pem source tar to pick up the following bug fixes:
  - PEM - Allow collect objects to search through all objects
  - PEM - Make CopyObject return a new shallow copy
  - PEM - Fix memory leak in pem_mdCryptoOperationRSAPriv


author: Elio Maldonado <emaldona@redhat.com> - 3.12.7-2
changelog:
  - Define NSS_USE_SYSTEM_SQLITE and remove unneeded patch
  - Add comments regarding an unversioned provides which triggers rpmlint warning
  - Build requires nss-softokn-devel >= 3.12.7


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Prevent disabling of nss-sysinit on package upgrade (#636787)
  - Create pkcs11.txt with correct permissions regardless of umask (#636792)
  - Setup-nsssysinit.sh reports whether nss-sysinit is turned on or off (#636801)
  - Added provides pkcs11-devel-static to comply with packaging guidelines (#609612)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-3
changelog:
  - Replace posttrans sysinit scriptlet with a triggerpostun one (#636787)
  - Fix and cleanup the setup-nsssysinit.sh script (#636792, #636801)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8.99.2-1
changelog:
  - Update to NSS_3_12_9_BETA2
  - Fix libpnsspem crash when cacert dir contains other directories (#642433)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-5
changelog:
  - Fix the earlier infinite recursion patch (#499444)
  - Remove a header that now nss-softokn-freebl-devel ships


author: Christopher Aillon <caillon@redhat.com> - 3.12.9-6
changelog:
  - Revert patches for 499444 as they use a C++ reserved word and
    cause compilation of Firefox to fail


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-10
changelog:
  - Fix cms headers to not use c++ reserved words (#676036)
  - Reenabling Bug 499444 patches
  - Fix to swap internal key slot on fips mode switches


author: Elio Maldonado <emaldona@redhat.com> - 3.12.10-4
changelog:
  - Enable pluggable ecc support (#712556)
  - Disable the nssdb write-access-on-read-only-dir tests when user is root (#646045)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.11-3
changelog:
  - Fix attempt to free initilized pointer (#717338)
  - Fix leak on pem_CreateObject when given non-existing file name (#734760)
  - Fix pem_Initialize to return CKR_CANT_LOCK on multi-treaded calls (#736410)


author: Elio Maldonado Batiz <emaldona@redhat.com> - 3.13.1-4
changelog:
  - Rebuild with nss-softokn from 3.12 in the buildroot
  - Allows the pem module to statically link against 3.12.x freebl
  - Required for using nss-3.13.x with nss-softokn-3.12.y for a merge inrto rhel git repo
  - Build will be temprarily placed on buildroot override but not pushed in bodhi


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-5
changelog:
  - Statically link the pem module against system freebl found in buildroot
  - Disabling sha224-related powerup selftest until we update softokn
  - Disable sha224 and pss tests which nss-softokn 3.12.x doesn't support


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-6
changelog:
  - Removed unwanted /usr/include/nss3 in front of the normal cflags include path
  - Removed unnecessary patch dealing with CERTDB_TERMINAL_RECORD, it's visible


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-7
changelog:
  - Resolves: Bug 750376 - nss 3.13 breaks sssd TLS
  - Fix how pem is built so that nss-3.13.x works with nss-softokn-3.12.y
  - Only patch blapitest for the lack of sha224 on system freebl
  - Completed the patch to make pem link against system freebl


author: elio maldonado <emaldona@redhat.com> - 3.13.1-9
changelog:
  - Revert to using current nss_softokn_version
  - Patch to deal with lack of sha224 is no longer needed


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-10
changelog:
  - Resolves: Bug 770682 - nss update breaks pidgin-sipe connectivity
  - NSS_SSL_CBC_RANDOM_IV set to 0 by default and changed to 1 on user request


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Pick up fixes from RHEL
  - Resolves: rhbz#800674 - Unable to contact LDAP Server during winsync
  - Resolves: rhbz#800682 - Qpid AMQP daemon fails to load after nss update
  - Resolves: rhbz#800676 - NSS workaround for freebl bug that causes openswan to drop connections


author: Elio Maldonado <emaldona@redhat.com> - 3.13.4-1
changelog:
  - Update to NSS_3_13_4_RTM
  - Update the nss-pem source archive to the latest version
  - Remove no longer needed patches
  - Resolves: Bug 806043 - use pem files interchangeably in a single process
  - Resolves: Bug 806051 - PEM various flaws detected by Coverity
  - Resolves: Bug 806058 - PEM pem_CreateObject leaks memory given a non-existing file name


author: Elio Maldonado <emaldona@redhat.com> - 3.13.4-2
changelog:
  - Resolves: Bug 805723 - Library needs partial RELRO support added
  - Patch coreconf/Linux.mk as done on RHEL 6.2


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-4
changelog:
  - Resolves: Bug 830410 - Missing Requires %{?_isa}
  - Use Requires: %{name}%{?_isa} = %{version}-%{release} on tools
  - Drop zlib requires which rpmlint reports as error E: explicit-lib-dependency zlib
  - Enable sha224 portion of powerup selftest when running test suites
  - Require nspr 4.9.1


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-8
changelog:
  - Rebase pem sources to fedora-hosted upstream to pick up two fixes from rhel-6.3
  - Resolves: rhbz#847460 - Fix invalid read and free on invalid cert load
  - Resolves: rhbz#847462 - PEM module may attempt to free uninitialized pointer
  - Remove unneeded fix gcc 4.7 c++ issue in secmodt.h that actually undoes the upstream fix


author: Elio Maldonado <emaldona@redhat.com> - 3.14-0.1.rc.1
changelog:
  - Update to NSS_3_14_RC1
  - update nss-589636.patch to apply to httpdserv
  - turn off ocsp tests for now
  - remove no longer needed patches
  - remove headers shipped by nss-util


author: Elio Maldonado <emaldona@redhat.com> - 3.14-2
changelog:
  - Add secmodt.h to the headers installed by nss-devel
  - nss-devel must install secmodt.h which moved from softoken to pk11wrap with nss-3.14


author: Elio Maldonado <emaldona@redhat.com> - 3.14-5
changelog:
  - Fix the spec file so sechash.h gets installed
  - Resolves: rhbz#871882 - missing header: sechash.h in nss 3.14


author: Elio Maldonado <emaldona@redhat.com> - 3.14-6
changelog:
  - Fix a previous unwanted merge from f18
  - Update the SS_SSL_CBC_RANDOM_IV patch to match new sources while
  - Keeping the patch disabled while we are still in rawhide and
  - State in comment that patch is needed for both stable and beta branches
  - Update .gitignore to download only the new sources


author: Elio Maldonado <emaldona@redhat.com> - 3.14-7
changelog:
  - Add a dummy source file for testing /preventing fedpkg breakage
  - Helps test the fedpkg new-sources and upload commands for breakage by nss updates
  - Related to Bug 872124 - nss 3.14 breaks fedpkg new-sources


author: Elio Maldonado <emaldona@redhat.com> - 3.14-8
changelog:
  - Fix pk11wrap locking which fixes 'fedpkg new-sources' and 'fedpkg update' hangs
  - Bug 872124 - nss-3.14 breaks fedpkg new-sources
  - Fix should be considered preliminary since the patch may change upon upstream approval


author: Elio Maldonado <emaldona@redhat.com> - 3.14-9
changelog:
  - Disable bypass code at build time and return failure on attempts to enable at runtime
  - Bug 806588 - Disable SSL PKCS #11 bypass at build time


author: Elio Maldonado <emaldona@redhat.com> - 3.14-11
changelog:
  - Bug 879978 - Install the nssck.api header template in a place where mod_revocator can access it
  - Install nssck.api in /usr/includes/nss3


author: Elio Maldonado <emaldona@redhat.com> - 3.14-12
changelog:
  - Bug 879978 - Install the nssck.api header template where mod_revocator can access it
  - Install nssck.api in /usr/includes/nss3/templates


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - sync up pem rsawrapr.c with softoken upstream changes for nss-3.14.3
  - Resolves: rhbz#908257 - CVE-2013-1620 nss: TLS CBC padding timing attack
  - Resolves: rhbz#896651 - PEM module trashes private keys if login fails
  - Resolves: rhbz#909775 - specfile support for AArch64
  - Resolves: rhbz#910584 - certutil -a does not produce ASCII output


author: Kai Engert <kaie@redhat.com> - 3.14.3-9
changelog:
  - Configure libnssckbi.so to use the alternatives system
    in order to prepare for a drop in replacement.


author: Elio Maldonado <emaldona@redhat.com> - 3.15-0.1.beta1.1
changelog:
  - Update to NSS_3_15_BETA1
  - Update spec file, patches, and helper scripts on account of a shallower source tree


author: Elio Maldonado <emaldona@redhat.com> - 3.15-0.1.beta1.2
changelog:
  - Fix incorrect path that hid failed test from view
  - Add ocsp to the test suites to run but ...
  - Temporarily disable the ocsp stapling tests
  - Do not treat failed attempts at ssl pkcs11 bypass as fatal errors


author: Elio Maldonado <emaldona@redhat.com> - 3.15-5
changelog:
  - Install man pages for nss-tools and the nss-config and setup-nsssysinit scripts
  - Resolves: rhbz#606020 - nss security tools lack man pages


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-2
changelog:
  - Fix errors in the man pages
  - Resolves: rhbz#984106 - Add missing option descriptions to man pages for {cert|cms|crl}util
  - Resolves: rhbz#982856 - Fix path to script in man page for nss-sysinit


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-3
changelog:
  - Add man page for pkcs11.txt configuration file and cert and key databases
  - Resolves: rhbz#985114 - Provide man pages for the nss configuration files


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-4
changelog:
  - Cleanup spec file to address most rpmlint errors and warnings
  - Using double percent symbols to fix macro-in-comment warnings
  - Ignore unversioned-explicit-provides nss-system-init per spec comments
  - Ignore invalid-url Source0 as it comes from the git lookaside cache
  - Ignore invalid-url Source12 as it comes from the git lookaside cache


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-5
changelog:
  - Resolves: rhbz#996639 - Minor bugs in nss man pages
  - Fix some typos and improve description and see also sections


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-7
changelog:
  - Update pem sources to pick up a patch applied upstream which a faulty merge had missed
  - The pem module should not require unique file basenames


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-1
changelog:
  - Update to NSS_3_15_2_RTM
  - Update iquote.patch on account of modified prototype on cert.h installed by nss-devel


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-2
changelog:
  - Use the full sources from upstream
  - Bug 1019245 - ECDHE in openssl available -> NSS needs too for Firefox/Thunderbird


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-1
changelog:
  - Update to NSS_3_15_3_RTM
  - Resolves: Bug 1031897 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws
  - Fix option descriptions for setup-nsssysinit manpage
  - Fix man page of nss-sysinit wrong path and other flaws
  - Document email option for certutil manpage
  - Remove unused patches


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3.1-1
changelog:
  - Update to nss-3.15.3.1 (hg tag NSS_3_15_3_1_RTM)
  - Resolves: Bug 1040282 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)
  - Resolves: Bug 1040192 - nss-3.15.3.1 is available


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-1
changelog:
  - Update to nss-3.15.4 (hg tag NSS_3_15_4_RTM)
  - Resolves: Bug 1049229 - nss-3.15.4 is available
  - Update pem sources to latest from the interim upstream for pem
  - Remove no longer needed patches
  - Update pem/rsawrapr.c patch on account of upstream changes to freebl/softoken
  - Update iquote.patch on account of upstream changes


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-3
changelog:
  - Update pem sources to latest from nss-pem upstream
  - Pick up pem fixes verified on RHEL and applied upstream
  - Fix a problem where same files in two rpms created rpm conflict
  - Move some nss-sysinit manpages tar archives to the %files the
  - All man pages are listed by name so there shouldn't be wildcard inclusion
  - Add support for ppc64le, Resolves: Bug 1052545


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-5
changelog:
  - Revert previous change that moved some sysinit manpages
  - Restore nss-sysinit manpages tar archives to %files sysinit
  - Removing spurious wildcard entry was the only change needed


author: Elio Maldonado <emaldona@redhat.com> - 3.15.5-1
changelog:
  - Update to nss-3.15.5
  - Temporarily requiring only nss_softokn_version >= 3.15.4
  - Fix location of sharedb files and their manpages
  - Move cert9.db, key4.db, and pkcs11.txt to the main package
  - Move nss-sysinit manpages tar archives to the main package
  - Resolves: Bug 1066877 - nss-3.15.5 is available
  - Resolves: Bug 1067091 - Move sharedb files to the %files section


author: Elio Maldonado <emaldona@redhat.com> - 3.16.0-1
changelog:
  - Update to nss-3.16.0
  - Cleanup the copying of the tools man pages
  - Update the iquote.patch on account of the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-1
changelog:
  - Update to nss-3.16.1
  - Update the iquote patch on account of the rebase
  - Improve error detection in the %section
  - Resolves: Bug 1094702 - nss-3.16.1 is available


author: Jaromir Capik <jcapik@redhat.com> - 3.16.1-2
changelog:
  - Replacing ppc64 and ppc64le with the power64 macro
  - Related: Bug 1052545 - Trivial change for ppc64le in nss spec


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-4
changelog:
  - Remove unwanted source directories at end of %prep so it truly does it
  - Skip the cipher suite already run as part of the nss-softokn build


author: Elio Maldonado <emaldona@redhat.com> - 3.17.3-2
changelog:
  - Install pp man page in alternative location
  - Resolves: Bug 987189 - nss-tools RPM conflicts with perl-PAR-Packer


author: Elio Maldonado <emaldona@redhat.com> - 3.17.3-3
changelog:
  - Resolves: Bug 987189 - nss-tools RPM conflicts with perl-PAR-Packer
  - Install pp man page in %{_datadir}/doc/nss-tools/pp.1
  - Use %{_mandir} instead of /usr/share/man as more generic


author: Elio Maldonado <emaldona@redhat.com> - 3.17.4-2
changelog:
  - Disable SSL2 support at build time
  - Fix syntax errors in various shell scripts
  - Resolves: Bug 1189952 - Disable SSL2 and the export cipher suites


author: Elio Maldonado <emaldona@redhat.com> - 3.17.4-3
changelog:
  - Commented out the export NSS_NO_SSL2=1 line to not disable ssl2
  - Backing out from disabling ssl2 until the patches are fixed


author: Elio Maldonado <emaldona@redhat.com> - 3.17.4-5
changelog:
  - Disable export suites and SSL2 support at build time
  - Fix syntax errors in various shell scripts
  - Resolves: Bug 1189952 - Disable SSL2 and the export cipher suites


author: Elio Maldonado <emaldona@redhat.com> - 3.19.2-3
changelog:
  - Create on the fly versions of sslcov.txt and sslstress.txt that disable tests for SSL2 and EXPORT ciphers


author: Elio Maldonado <emaldona@redhat.com> - 3.20.0-3
changelog:
  - Fix patches that disable ssl2 and export cipher suites support
  - Fix libssl patch that disable ssl2 & export cipher suites to not disable RSA_WITH_NULL ciphers
  - Fix syntax errors in patch to skip ssl2 and export cipher suite tests
  - Turn ssl2 off by default in the tstclnt tool
  - Disable ssl stress tests containing TLS RC4 128 with MD5


author: Elio Maldonado <emaldona@redhat.com> - 3.20.0-5
changelog:
  - Enable ECC cipher-suites by default [hrbz#1185708]
  - Implement corrections requested in code review


author: Elio Maldonado <emaldona@redhat.com> - 3.20.0-6
changelog:
  - Enable ECC cipher-suites by default [hrbz#1185708]
  - Split the enabling patch in two for easier maintenance
  - Remove unused patches rendered obsolete by prior rebase


author: Elio Maldonado Batiz <emaldona@redhat.com> - 3.21.1-2
changelog:
  - Update to NSS 3.21
  - Package listsuites as part of the unsupported tools set
  - Resolves: Bug 1279912 - nss-3.21 is available
  - Resolves: Bug 1258425 - Use __isa_bits macro instead of list of 64-bit
  - Resolves: Bug 1280032 - Package listsuites as part of the nss unsupported tools set


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-4
changelog:
  - Update %{nss_util_version} and %{nss_softokn_version} to 3.21.0
  - Resolves: Bug 1284095 - all https fails with sec_error_no_token


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-6
changelog:
  - Resolves: Bug 1299040 - Enable ssl_gtests upstream test suite
  - Remove 'export NSS_DISABLE_GTESTS=1' go ssl_gtests are built
  - Use %define when specifying the nss_tests to run


author: Elio Maldonado <emaldona@redhat.com> - 3.23.0-3
changelog:
  - Update pem sources to latest from nss-pem upstream
  - Resolves: Bug 1300652 - [PEM] insufficient input validity checking while loading a private key


author: Elio Maldonado <emaldona@redhat.com> - 3.23.0-5
changelog:
  - Load policy file if /etc/pki/nssdb/policy.cfg exists
  - Resolves: Bug 1157720 - NSS should enforce the system-wide crypto policy


author: Elio Maldonado <emaldona@redhat.com> - 3.23.0-7
changelog:
  - Change the POLICY_PATH to "/etc/crypto-policies/back-ends"
  - Regenerate the check policy patch with hg to provide more context


author: Elio Maldonado <emaldona@redhat.com> - 3.24.0-2.1
changelog:
  - Rebase to NSS 3.24.0
  - Restore setting the policy file location
  - Make ssl tests scripts aware of policy
  - Ajust tests data expected result for policy


author: Elio Maldonado <emaldona@redhat.com> - 3.24.0-2.2
changelog:
  - Allow application requests to disable SSL v2 to succeed
  - Resolves: Bug 1342158 - nss-3.24 does no longer support ssl V2, installation of IPA fails because nss init fails


author: Elio Maldonado <emaldona@redhat.com> - 3.24.0-2.3
changelog:
  - Apply the patch that was last introduced
  - Renumber and reorder some of the patches
  - Resolves: Bug 1342158


author: Elio Maldonado <emaldona@redhat.com> - 3.25.0-5
changelog:
  - Add support for conditionally ignoring the system policy (#1157720)
  - Remove unneeded test scripts patches in order to run more tests
  - Remove unneeded test data modifications from the spec file


author: Daiki Ueno <dueno@redhat.com> - 3.26.0-2
changelog:
  - Rebase to NSS 3.26.0
  - Update check policy file patch to better match what was upstreamed
  - Remove conditionally ignore system policy patch as it has been upstreamed
  - Skip ectest as well as ecperf, which are built as part of nss-softokn
  - Fix rpmlint error regarding %define usage


author: Daiki Ueno <dueno@redhat.com> - 3.28.1-4
changelog:
  - Add "Conflicts" with older firefox packages which don't have support
    for smaller curves added in NSS 3.28.1


author: Daiki Ueno <dueno@redhat.com> - 3.28.1-5
changelog:
  - Disable TLS 1.3
  - Add "Conflicts" with packages using older Mozilla codebase, which is
    not compatible with NSS 3.28.1
  - Remove NSS_ECC_MORE_THAN_SUITE_B setting, as it was removed in upstream


author: Daiki Ueno <dueno@redhat.com> - 3.31.0-3
changelog:
  - Move signtool to %_libdir/nss/unsupported-tools, for:
    https://fedoraproject.org/wiki/Changes/NSSSigntoolDeprecation


author: Kai Engert <kaie@redhat.com> - 3.33.0-4
changelog:
  - Update tests to be compatible with default NSS DB changed to sql
    (the default was changed in the nss-util package).


author: Daiki Ueno <dueno@redhat.com> - 3.33.0-6
changelog:
  - Make sure 32bit nss-pem always be installed with 32bit nss in
    multlib environment, patch by Kamil Dudka


author: Kai Engert <kaie@redhat.com> - 3.35.0-4
changelog:
  - Fix a compiler error with gcc 8, mozbz#1434070
  - Set NSS_FORCE_FIPS=1 at %build time, and remove from %check.


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-1.0
changelog:
  - Update to NSS 3.36.0
  - Add gcc-c++ to BuildRequires (C++ is needed for gtests)
  - Make test failure detection robuster


author: Daiki Ueno <dueno@redhat.com> - 3.36.1-1.0
changelog:
  - Update to NSS 3.36.1
  - Remove nss-3.14.0.0-disble-ocsp-test.patch
  - Fix partial injection of LDFLAGS
  - Remove NSS_NO_PKCS11_BYPASS, which is no-op in upstream


author: Kai Engert <kaie@redhat.com> - 3.36.1-1.2
changelog:
  - Backport upstream addition of nss-policy-check utility, rhbz#1428746,
    includes required fixes for mozbz#1296263 and mozbz#1474875


author: Daiki Ueno <dueno@redhat.com> - 3.38.0-1.1
changelog:
  - Install crypto-policies configuration file for
    https://fedoraproject.org/wiki/Changes/NSSLoadP11KitModules
  - Port enable-fips-when-system-is-in-fips-mode.patch from RHEL-7
  - Use %ldconfig_scriptlets
  - Remove needless use of %defattr, by Jason Tibbitts


author: Daiki Ueno <dueno@redhat.com> - 3.39.0-1.2
changelog:
  - Update nss-dsa.patch to not advertise DSA signature algorithm
  - Update PayPal test certs for testing


author: Daiki Ueno <dueno@redhat.com> - 3.39.0-1.3
changelog:
  - Backport upstream fixes for rhbz#1649026, rhbz#1608895, rhbz#1644854
  - Document PKCS #11 URI
  - Add warning when adding module with modutil while p11-kit is enabled


author: Bob Relyea <rrelyea@redhat.com> - 3.39.0-1.4
changelog:
  - Support for IKE/IPsec typical PKIX usage so libreswan can use nss
    without rejecting certs based on EKU


author: Daiki Ueno <dueno@redhat.com> - 3.41.0-3
changelog:
  - Fix the last change
  - Add --no-reload option to update-crypto-policies to avoid
    unnecessary restart of daemons


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-1
changelog:
  - Update to NSS 3.44
  - Define NSS_SEED_ONLY_DEV_URANDOM=1 to exclusively use getentropy
  - Use %autosetup
  - Clean up manual pages generation
  - Clean up %check
  - Remove prelink dependency, which is not available in RHEL-8
  - Remove upstreamed patches


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-3
changelog:
  - Disable TLS 1.3 under FIPS mode
  - Disable RSASSA-PKCS1-v1_5 in TLS 1.3
  - Fix post-handshake auth transcript calculation if
    SSL_ENABLE_SESSION_TICKETS is set
  - Revert the change to use XDG basedirs (mozilla#818686)


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-6
changelog:
  - Add continuous RNG test required by FIPS
  - fipstest: use CKM_TLS12_MASTER_KEY_DERIVE instead of vendor specific mechanism


author: Bob Relyea <rrelyea@redhat.com> - 3.44.0-8
changelog:
  - CKM_NSS_IKE1_APP_B_PRF_DERIVE was missing from the mechanism list, preventing
    PK11_Derive*() from using it. Add gtests for the PK11_Derive interface for
    all the CKM_NSS_IKE*_DERIVE mechanism.


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-12
changelog:
  - Install cmac.h required by blapi.h (#1764513)
  - Fix out-of-bounds write in NSC_EncryptUpdate (#1775913)


author: Daiki Ueno <dueno@redhat.com> - 3.53.1-2
changelog:
  - Fix regression in MD5 disablement (#1849938)
  - Include rsa_pkcs1_* in signature_algorithms extension (#1847945)


author: Daiki Ueno <dueno@redhat.com> - 3.53.1-3
changelog:
  - Disable NSS_HASH_ALG_SUPPORT as well for MD5 (#1849938)
  - Adjust for update-crypto-policies packaging change (#1848649)
  - Fix compilation with -Werror=strict-prototypes (#1843417)


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-7
changelog:
  - Fix attribute decryption issue where the private key components
    integrity check on private attributes where not being checked.


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-11
changelog:
  - Fix issue with upgradedb where upgradedb expects standard to
    generate dbm databases, not sql databases (default in RHEL8)


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-12
changelog:
  - fips need to reject small primes even if they are approved
  - code to autodetect whether or not to use the cache needs to do so
    in a way that doesn't mess with filesystem negative file caching.
  - add kdf selftests


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-14
changelog:
  - Add support for enable/disable in policy. Now if your policy
    file has disallow=x enable=y it will act just like our other 
    libraries.


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-16
changelog:
  - Fix the following CVE
  - CVE-2020-12403 chacha-poly issues
  - CVE-2020-12400 constant time ECC.
  - CVE-2020-6829  constant time ECC.


author: Bob Relyea <rrelyea@redhat.com> - 3.67.0-4
changelog:
  - Better fix for the sdb timeout. The issue wasn't a race, it was
    the sqlite timeout waiting to begin a transaction under heavy
    thread usage.


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-1
changelog:
  - Rebase to NSS 3.79
  - Set FIPS Module ID
  - skip attribute verification on attributes with default values
  - don't export trust objects if they are default trust objects from dbm
  - add dbtool to nss-tools


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-5
changelog:
  - FIPS 140-3 changes
  -  Reject Small RSA keys, 1024 bit keys are marked as FIP OK when verifying, reject
     signature keys by policy
  -  Allow applications to retrigger selftests on demand.


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-8
changelog:
  - Update fips default for pk12util to AES rather than TDES
  - Fix bug in pkcs12 files with null passwords


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-10
changelog:
  - Fix QA found failures:
  -  remove extra '+' from sslpolicy.txt file causing test error values
  -  only use GRND_RANDOM if the kernel is in FIPS mode.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - update the restore defaults for pkcs12


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 3.101.0-7.01
changelog:
  - disable unit test
  - cherry-pick `add sw patch #ce8dbcf775a1bf3d6bd0d5de53d3688e7caa00db`. (nijie@wxiat.com)


author: Kamil Páral <kparal@redhat.com> - 2:2017.3.23-10
changelog:
  - add Recommends: ntfs-3g-system-compression. That allows people with
    Windows 10 to read system files.


author: Kay Hayen<kay.hayen@gmail.com> - 0.6.7
changelog:
  - adapted for Fedora31 and CentOS 8, Python3 enhancements
  - added Python3 for openSUSE 15 or higher too.


author: Severin Gehwolf <sgehwolf@redhat.com> - 3.3.1-20
changelog:
  - Add explicit javapackages-tools requirement for objectweb-asm3-processor
    script which uses java-functions.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Richard W.M. Jones <rjones@redhat.com> - 0.2.0-2rwmj20080321
changelog:
  - Build camomile subpackages because the camomile dependency is
    rather large.  However we can't build camomile on ppc64 yet so
    don't build those subpackages there.


author: Richard W.M. Jones <rjones@redhat.com> - 0.2.0-3.20080321patch
changelog:
  - Change the naming scheme to conform with "Snapshot packages" guideline.
  - Don't duplicate all the docs in camomile-devel.
  - Disable documentation.  Wants 'fop', but 'fop' throws a giant Java
    exception when present.


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.0-1
changelog:
  - New upstream version 0.3.0.
  - Big patch no longer required (integrated with upstream).
  - findlib < 1.2.1-3 known not to work with this.
  - build/ -> _build/
  - Re-enable documentation.
  - Prevent *.o files from being distributed.
  - Distribute *.cmx and *.mli files.


author: S390x secondary arch maintainer <fedora-s390x@lists.fedoraproject.org>
changelog:
  - ExcludeArch sparc64, s390, s390x as we don't have OCaml on those archs
    (added sparc64 per request from the sparc maintainer)


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.3-1
changelog:
  - New upstream release 0.3.3 (mainly small bugfixes).
  - This requires ocaml-fileutils 0.4.0 and is incompatible with
    any earlier version.
  - Fixed a number of rpmlint warnings with *.ml files in the
    non-devel package.


author: Karsten Hopp <karsten@redhat.com> 0.3.3-7
changelog:
  - build with 'make all', not 'make' as that defaults to 'make test' and fails on ppc64
    due to the missing gettext-camomile


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.5-18
changelog:
  - Subpackage ocaml-gettext-camomile-devel should depend on
    ocaml-gettext-camomile (thanks: Pino Toscano).


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.7-1
changelog:
  - Update to new upstream version 0.3.7.
  - New URL.
  - Include upstream patches since 0.3.7 was released.


author: Wenchao Hao <haowenchao@huawei.com> - 0.100-7
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Fix-the-issue-of-ignoring-the-return-value.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-Fix-compiler-issue-when-not-in-security-mode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-Fix-586-compile-issue-and-remove-Werror.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-Do-not-install-isnsd.socket-in-isnsd.service.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-libisns-remove-sighold-and-sigrelse.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-isnsadm-Fix-unparse-command-line-options-V-and-r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-isnsd-socket-Make-sure-to-create-IPv6-socket-default.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1.18.2-4
changelog:
  - remove support for no longer supported Fedora versions (<=25)
  - fix: add %{_libdir}/cmake/OpenAL directory to devel
  - fix: s/_datarootdir/_datadir/ as this package does not uses datarootdir
    but datadir
  - fix: add %{_datadir}/openal to main package as well and to %exclude
    %{_datadir}/openal/{alsoftrc.sample,presets/presets.txt} as those files
    are not needed
  - removed Group fields
    (https://fedoraproject.org/wiki/Packaging:Guidelines#Tags_and_Sections)
  - add use more macros (%autosetup, %make_build, %make_install)


author: Hans de Goede <hdegoede@redhat.com> - 1.18.2-5
changelog:
  - Allow pulseaudio to move openal-soft output streams (rhbz#1544381)
  - Fix release -4 not building (rhbz#1544012)
  - Drop unnecessary qt-devel BuildRequires (we also BuildRequire qt5-devel)


author: Miroslav Lichvar <mlichvar@redhat.com> - 3.6.1-7
changelog:
  - build setlayout with hardening LDFLAGS (#1548830)
  - use macro for ldconfig scriptlets
  - add gcc to build requirements


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-2
changelog:
  - fix cmakes location
  - remove -DENABLE_PKG_CONFIG=OFF (it was neither defined nor used)
  - remove confusing comment
  - WITH_GDAL=OFF (gdal dependency has been already removed)
    Related: #1694647


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-5
changelog:
  - Move libopencv_{calib3d,cvv,hfs}.so.* to their proper packages
  - Fix issues found by rpmdiff
    Related: #1694647


author: liulong <liulong20@huawei.com> - 2.4.50-3
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224 CVE-2020-36225 CVE-2020-36226 CVE-2020-36227 CVE-2020-36228 CVE-2020-36229 CVE-2020-36230


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - fbtl-posix: link to common_ompio
  - Require environment(modules)
  - Revert upstream commit c36d7459b6331c4da82
  - Resolves: rhbz#1974780, rhbz#1971771


author: Adam Williamson <awilliam@redhat.com> - 2.1.1-5
changelog:
  - Disable RDMA support on 32-bit ARM (#1484155)
  - Disable hanging opal_fifo test on ppc64le (gh #2526 / #2966)


author: Jarod Wilson <jarod@redhat.com> - 3.1.2-1
changelog:
  - Update to upstream 3.1.2 bug fix release
  - Fix some paths in module file, strip out python2 bits
  - Related: rhbz#1623441


author: Jarod Wilson <jarod@redhat.com> - 3.1.2-4
changelog:
  - Further tweaks to compile/linker flag usage
  - Related: rhbz#1624157
  - Move modulefiles under /etc like our other suppored mpi providers
  - Resolves: rhbz#1632399


author: Denis Arnaud <denis.arnaud_fedora@m4x.org> - 5.2.122-20
changelog:
  - Suppressed the dependency on SCons (as autotools are used instead)
  - Fixed the generated version minor number (from 127 to 122)
  - Fixed the target include directory


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.0.0-15
changelog:
  - Removed dependency on net-tools
    Resolves: #1496138
  - Removed init script, Group tag and macro from changelog in spec file
  - Slightly modified openssl-1.1 fix to be able build the package
    with OpenSSL version lower than 1.1


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-9
changelog:
  - Fixed Timing Oracle in RSA Decryption
    Resolves: CVE-2022-4304
  - Fixed Double free after calling PEM_read_bio_ex
    Resolves: CVE-2022-4450
  - Fixed Use-after-free following BIO_new_NDEF
    Resolves: CVE-2023-0215
  - Fixed X.400 address type confusion in X.509 GeneralName
    Resolves: CVE-2023-0286


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-13
changelog:
  - allow building on ARM architectures (#245417)
  - use reference timestamps to prevent multilib conflicts (#218064)
  - -devel package must require pkgconfig (#241031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-14
changelog:
  - use localhost in testsuite, hopefully fixes slow build in koji
  - CVE-2007-3108 - fix side channel attack on private keys (#250577)
  - make ssl session cache id matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-16
changelog:
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309801)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321191)
  - add alpha sub-archs (#296031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-2
changelog:
  - enable some new crypto algorithms and features
  - add some more important bug fixes from openssl CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-3
changelog:
  - set default paths when no explicit paths are set (#418771)
  - do not add tls extensions to client hello for SSLv3 (#422081)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-9
changelog:
  - fix CVE-2008-0891 - server name extension crash (#448492)
  - fix CVE-2008-1672 - server key exchange message omit crash (#448495)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-1
changelog:
  - new upstream version with necessary soname bump (#455753)
  - temporarily provide symlink to old soname to make it possible to rebuild
    the dependent packages in rawhide
  - add eap-fast support (#428181)
  - add possibility to disable zlib by setting
  - add fips mode support for testing purposes
  - do not null dereference on some invalid smime files
  - add buildrequires pkgconfig (#479493)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-6
changelog:
  - drop the temporary triggerpostun and symlinking in post
  - fix the pkgconfig files and drop the unnecessary buildrequires
    on pkgconfig as it is a rpmbuild dependency (#481419)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-7
changelog:
  - must also verify checksum of libssl.so in the FIPS mode
  - obtain the seed for FIPS rng directly from the kernel device
  - drop the temporary symlinks


author: Tomas Mraz <tmraz@redhat.com> 0.9.8k-1
changelog:
  - update to new upstream release (minor bug fixes, security
    fixes and machine code optimizations only)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8k-6
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS
  - make CA dir absolute path (#445344)
  - change default length for RSA key generation to 2048 (#484101)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.11.beta4
changelog:
  - update to new upstream version, no soname bump needed
  - fix CVE-2009-3555 - note that the fix is bypassed if SSL_OP_ALL is used
    so the compatibility with unfixed clients is not broken. The
    protocol extension is also not final.


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.12.beta4
changelog:
  - keep the beta status in version number at 3 so we do not have to rebuild
    openssh and possibly other dependencies with too strict version check


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.13.beta4
changelog:
  - disable enforcement of the renegotiation extension on the client (#537962)
  - add fixes from the current upstream snapshot


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.17.beta4
changelog:
  - upstream fix compression handling on session resumption
  - various null checks and other small fixes from upstream
  - upstream changes for the renegotiation info according to the latest draft


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.19.beta4
changelog:
  - fix CVE-2009-4355 - leak in applications incorrectly calling
    CRYPTO_free_all_ex_data() before application exit (#546707)
  - upstream fix for future TLS protocol version handling


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.21.beta5
changelog:
  - gracefully handle zero length in assembler implementations of
    OPENSSL_cleanse (#564029)
  - do not fail in s_server if client hostname not resolvable (#561260)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0c-2
changelog:
  - listen on ipv6 wildcard in s_server so we accept connections
    from both ipv4 and ipv6 (#601612)
  - fix openssl speed command so it can be used in the FIPS mode
    with FIPS allowed ciphers


author: Tomas Mraz <tmraz@redhat.com> 1.0.0c-3
changelog:
  - add -x931 parameter to openssl genrsa command to use the ANSI X9.31
    key generation method
  - use FIPS-186-3 method for DSA parameter generation
  - add OPENSSL_FIPS_NON_APPROVED_MD5_ALLOW environment variable
    to allow using MD5 when the system is in the maintenance state
    even if the /proc fips flag is on
  - make openssl pkcs12 command work by default in the FIPS mode


author: Tomas Mraz <tmraz@redhat.com> 1.0.0d-3
changelog:
  - add support for VIA Padlock on 64bit arch from upstream (#617539)
  - do not return bogus values from load_certs (#652286)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0d-6
changelog:
  - add support for newest Intel acceleration improvements backported
    from upstream by Intel in form of a separate engine


author: Tomas Mraz <tmraz@redhat.com> 1.0.0d-7
changelog:
  - correct openssl cms help output (#636266)
  - more tolerant starttls detection in XMPP protocol (#608239)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0d-8
changelog:
  - drop the separate engine for Intel acceleration improvements
    and merge in the AES-NI, SHA1, and RC4 optimizations
  - add support for OPENSSL_DISABLE_AES_NI environment variable
    that disables the AES-NI support


author: Tomas Mraz <tmraz@redhat.com> 1.0.0e-3
changelog:
  - do not use AVX instructions when osxsave bit not set
  - add direct known answer tests for SHA2 algorithms


author: Tomas Mraz <tmraz@redhat.com> 1.0.0g-1
changelog:
  - new upstream release fixing CVE-2012-0050 - DoS regression in
    DTLS support introduced by the previous release (#782795)


author: Tomas Mraz <tmraz@redhat.com> 1.0.1-0.1.beta2
changelog:
  - new upstream release from the 1.0.1 branch, ABI compatible
  - add documentation for the -no_ign_eof option


author: Tomas Mraz <tmraz@redhat.com> 1.0.1-0.2.beta3
changelog:
  - epoch bumped to 1 due to revert to 1.0.0g on Fedora 17
  - new upstream release from the 1.0.1 branch
  - fix s390x build (#798411)
  - versioning for the SSLeay symbol (#794950)
  - add -DPURIFY to build flags (#797323)
  - filter engine provides
  - split the libraries to a separate -libs package
  - add make to requires on the base package (#783446)


author: Tomas Mraz <tmraz@redhat.com> 1.0.1c-3
changelog:
  - fix DSA key generation in FIPS mode (#833866)
  - allow duplicate FIPS_mode_set(1)
  - enable build on ppc64 subarch (#834652)


author: Tomas Mraz <tmraz@redhat.com> 1.0.1c-4
changelog:
  - do not move libcrypto to /lib
  - do not use environment variables if __libc_enable_secure is on
  - fix strict aliasing problems in modes


author: Tomas Mraz <tmraz@redhat.com> 1.0.1c-7
changelog:
  - add missing initialization of str in aes_ccm_init_key (#853963)
  - add important patches from upstream CVS
  - use the secure_getenv() with new glibc


author: Tomas Mraz <tmraz@redhat.com> 1.0.1c-8
changelog:
  - use 1024 bit DH parameters in s_server as 512 bit is not allowed
    in FIPS mode and it is quite weak anyway


author: Tomas Mraz <tmraz@redhat.com> 1.0.1c-11
changelog:
  - add script for renewal of a self-signed cert by Philip Prindeville (#871566)
  - allow X509_issuer_and_serial_hash() produce correct result in
    the FIPS mode (#881336)


author: Kyle McMartin <kyle@redhat.com> 1.0.1e-21
changelog:
  - [arm] use elf auxv to figure out armcap.c instead of playing silly
    games with SIGILL handlers. (#1006474)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-26
changelog:
  - make DTLS1 work in FIPS mode
  - avoid RSA and DSA 512 bits and Whirlpool in 'openssl speed' in FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-32
changelog:
  - disable verification of certificate, CRL, and OCSP signatures
    using MD5 if OPENSSL_ENABLE_MD5_VERIFY environment variable
    is not set


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-35
changelog:
  - drop weak ciphers from the default TLS ciphersuite list
  - add back some symbols that were dropped with update to 1.0.1 branch
  - more FIPS validation requirement changes


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-36
changelog:
  - fix CVE-2013-6449 - crash when version in SSL structure is incorrect
  - more FIPS validation requirement changes


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-37
changelog:
  - fix CVE-2013-4353 - Invalid TLS handshake crash
  - fix CVE-2013-6450 - possible MiTM attack on DTLS1


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-39
changelog:
  - make expiration and key length changeable by DAYS and KEYLEN
    variables in the certificate Makefile (#1058108)
  - change default hash to sha256 (#1062325)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-40
changelog:
  - print ephemeral key size negotiated in TLS handshake (#1057715)
  - add DH_compute_key_padded needed for FIPS CAVS testing


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1g-1
changelog:
  - new upstream release 1.0.1g
  - do not include ECC ciphersuites in SSLv2 client hello (#1090952)
  - fail on hmac integrity check if the .hmac file is empty


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1h-3
changelog:
  - make FIPS mode keygen bit length restriction enforced only when
    OPENSSL_ENFORCE_MODULUS_BITS is set
  - fix CVE-2014-0224 fix that broke EAP-FAST session resumption support


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1h-5
changelog:
  - disable SSLv2 and SSLv3 protocols by default (can be enabled
    via appropriate SSL_CTX_clear_options() call)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1i-1
changelog:
  - new upstream release fixing multiple moderate security issues
  - for now disable only SSLv2 by default


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1j-3
changelog:
  - disable SSLv3 by default again (mail servers and possibly
    LDAP servers should probably allow it explicitly for legacy
    clients)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1k-2
changelog:
  - test in the non-FIPS RSA keygen for minimal distance of p and q
    similarly to the FIPS RSA keygen


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1k-6
changelog:
  - fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey()
  - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison
  - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1k-7
changelog:
  - drop the AES-GCM restriction of 2^32 operations because the IV is
    always 96 bits (32 bit fixed field + 64 bit invocation field)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2e-1
changelog:
  - minor upstream release 1.0.2e fixing moderate severity security issues
  - enable fast assembler implementation for NIST P-256 and P-521
    elliptic curves (#1164210)
  - filter out unwanted link options from the .pc files (#1257836)
  - do not set serial to 0 in Makefile.certificate (#1135719)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2f-1
changelog:
  - minor upstream release 1.0.2f fixing security issues
  - add support for MIPS secondary architecture


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2g-2
changelog:
  - reenable SSL2 in the build to avoid ABI break (it does not
    make the openssl vulnerable to DROWN attack)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2i-1
changelog:
  - minor upstream release 1.0.2i fixing security issues
  - move man pages for perl based scripts to perl subpackage (#1377617)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.0b-4
changelog:
  - use a random seed if the supplied one did not generate valid
    parameters in dsa_builtin_paramgen2()


author: Tomáš Mráz <tmraz@redhat.com> 1.1.0c-2
changelog:
  - EC curve NIST P-224 is now allowed, still kept disabled in TLS due
    to less than optimal security


author: Tomáš Mráz <tmraz@redhat.com> 1.1.0c-3
changelog:
  - revert SSL_read() behavior change - patch from upstream (#1394677)
  - fix behavior on client certificate request in renegotiation (#1393579)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.0e-1
changelog:
  - update to upstream version 1.1.0e
  - add documentation of the PROFILE=SYSTEM special cipher string (#1420232)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.0f-1
changelog:
  - update to upstream version 1.1.0f
  - SRP and GOST is now allowed, note that GOST support requires
    adding GOST engine which is not part of openssl anymore


author: Tomáš Mráz <tmraz@redhat.com> 1.1.0g-6
changelog:
  - one more try to apply RPM_LD_FLAGS properly (#1541033)
  - dropped unneeded starttls xmpp patch (#1417017)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-1
changelog:
  - update to the final 1.1.1 version
  - for consistent support of security policies we build
    RC4 support in TLS (not default) and allow SHA1 in SECLEVEL 2
  - use only /dev/urandom if getrandom() is not available
  - disable SM4


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1b-1
changelog:
  - update to the 1.1.1b release
  - EVP_KDF API backport from master
  - SSH KDF implementation for EVP_KDF API backport from master
  - add S390x chacha20-poly1305 assembler support from master branch


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1c-2
changelog:
  - do not try to use EC groups disallowed in FIPS mode
    in TLS
  - fix Valgrind regression with constant-time code


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1c-6
changelog:
  - backport of S390x ECC CPACF enhancements from master
  - FIPS mode: properly disable 1024 bit DSA key generation
  - FIPS mode: skip ED25519 and ED448 algorithms in openssl speed
  - FIPS mode: allow AES-CCM ciphersuites


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1c-8
changelog:
  - fix CVE-2019-1547 - side-channel weak encryption vulnerability
  - fix CVE-2019-1563 - padding oracle in CMS API
  - fix CVE-2019-1549 - ensure fork safety of the DRBG
  - fix handling of non-FIPS allowed EC curves in FIPS mode
  - fix TLS compliance issues


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1c-14
changelog:
  - fix incorrect error return value from FIPS_selftest_dsa
  - S390x: properly restore SIGILL signal handler


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1g-7
changelog:
  - Disallow dropping Extended Master Secret extension
    on renegotiation
  - Return alert from s_server if ALPN protocol does not match
  - SHA1 is allowed in @SECLEVEL=2 only if allowed by
    TLS SigAlgs configuration


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1g-9
changelog:
  - Rewire FIPS_drbg API to use the RAND_DRBG
  - Use the well known DH groups in TLS even for 2048 and 1024 bit parameters


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1g-12
changelog:
  - Implemented new FIPS requirements in regards to KDF and DH selftests
  - Disallow certificates with explicit EC parameters


author: Sahana Prasad <sahana@redhat.com> 1.1.1g-14
changelog:
  - Fix CVE-2021-3450 openssl: CA certificate check bypass with
    X509_V_FLAG_X509_STRICT
  - Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing


author: Daiki Ueno <dueno@redhat.com> 1.1.1g-16
changelog:
  - Use AI_ADDRCONFIG only when explicit host name is given
  - Allow only curves defined in RFC 8446 in TLS 1.3


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-2
changelog:
  - Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
  - Using safe primes for FIPS DH self-test


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes bugs in s390x AES code.
  - Uses the first detected address family if IPv6 is not available
  - Reverts the changes in https://github.com/openssl/openssl/pull/13305
    as it introduces a regression if server has a DSA key pair, the handshake fails
    when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
    it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
    will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
    known - https://trac.nginx.org/nginx/ticket/2071#comment:1
    As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
    could early callback instead of servername callback.
  - Resolves: rhbz#1978214
  - Related: rhbz#1934534


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-6
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Resolves: rhbz#2067144


author: maqi <maqi@uniontech.com> - 1:1.1.1k-6.01
changelog:
  - fix: delete empty link(bugid:123783)
  - build: build i686 and build without check
  - cve: CVE-2022-1292.
  - arch: Support loongarch64


author: David Sommerseth <dazo@eurephia.org> - 2.4.6-3
changelog:
  - Enable the asynchronous push feature, which can improve connect speeds with slow authentication backends


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.5-1
changelog:
  - Update to openwsman-2.6.5
  - Simplify python binding build and drop python2 subpackage
  - Fix malformed HTTP 200 status line


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.5-3
changelog:
  - Fix wrong SSL_CTX_set_cipher_list() retval check
  - Explicitly disable build of java bindings (build fails if java-devel is installed)


author: Peter Hanecak <hany@hany.sk> - 0.7.7-1
changelog:
  - Update to 0.7.7
  - Dropped pathes (both CVEs fixed in 0.7.7)
  - Added BuildRequires: gcc
    (https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot)


author: Fabian Deutsch <fabian.deutsch@gmx.de> - 0.4.3-2
changelog:
  - Running autoreconf to prevent building problems.
  - Added missing files to docs.
  - Added examples to devel docs.


author: Michael Mraka <michael.mraka@redhat.com> 5.11.99-1
changelog:
  - removed %%defattr from specfile
  - remove install/clean section initial cleanup
  - removed Group from specfile
  - removed BuildRoot from specfiles


author: Tomas Kasparek <tkasparek@redhat.com> 5.11.99-4
changelog:
  - remove osad files when packaging only for python3 (tkasparek@redhat.com)
  - osa-dispatcher is dependent on spacewalk-backend which is in python2
    (tkasparek@redhat.com)
  - run osa-dispatcher on python3 when possible (tkasparek@redhat.com)
  - don't build python2 subpackages on F28 + update python requires
    (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 5.11.99-6
changelog:
  - prefer to build for python3... (nils@redhat.com)
  - use %python2_* instead of unversioned macros (nils@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 5.11.99-7
changelog:
  - Resolves: #1607909 - remove TLSv1 hardcode and let client/server negotiate
    (tkasparek@redhat.com)


author: Ondrej Budai <obudai@redhat.com> - 17-1
changelog:
  - New upstream release 17 (rhbz#1831653)
  - Obsolete lorax-composer in favor of osbuild-composer (rhbz#1836844)


author: Christian Kellner <ckellner@redhat.com> - 12-1
changelog:
  - Sync with Fedora and use upstream release 12
  - Specify the exact version in the 'python3-osbuild' requirement
    to avoid the library and the main binary being out of sync.
  - osbuild-ostree sub-package with the necessary bits to create
    OSTree based images
  - Turn off dependency generator for internal components
  - Add NEWS.md file with the release notes and man pages


author: Christian Kellner <ckellner@redhat.com> - 14-1
changelog:
  - Upstream release 14
  - Install schemata to <datadir>/osbuild/schemas and include a
    symlink to it in /usr/lib/osbuild/schemas
  - The directories /usr/lib/osbuild/{assemblers, stages}/osbuild
    got removed. Changes to osbuild made them obsolete.


author: Christian Kellner <ckellner@redhat.com> - 14-2
changelog:
  - Add draft4-validator.json patch
    python3-jsonschema in RHEL currently has version 2.6.0 which
    has support validating up to and including draft4 of jsonschema.
    See https://github.com/osbuild/osbuild/pull/394


author: Christian Kellner <ckellner@redhat.com> - 15-2
changelog:
  - Add a patch to allow org.osbuild.files source in the new format
    but without actually containing the secrets key.
    Taken from merged PR: https://github.com/osbuild/osbuild/pull/416


author: Christian Kellner <ckellner@redhat.com> - 17-1
changelog:
  - Upstream release 17
  - Add custom SELinux policy that lets osbuild set labels inside
    the build root that are unknown to the host.


author: Christian Kellner <ckellner@redhat.com> - 18-2
changelog:
  - Add patch to not pass floats to curl in the files source
    https://github.com/osbuild/osbuild/pull/459


author: Christian Kellner <ckellner@redhat.com> - 18-3
changelog:
  - Add patch to allow nnp and nosuid domain transitions
    https://github.com/osbuild/osbuild/pull/495


author: Christian Kellner <ckellner@redhat.com> - 22-1
changelog:
  - Upstream release 22
  - Remove all patches since they are all in osbuild-22.
  - bubblewrap replaced systemd-nspawn for sandboxing; change the
    requirements accordingly.


author: Christian Kellner <ckellner@redhat.com> - 23-2
changelog:
  - Explicilty require python3. See the comment above the Requires
    for an explanation why this is needed.


author: Christian Kellner <ckellner@redhat.com> - 23-3
changelog:
  - only disable the dep. generator for runners, remove explicity
    python3 requirement again. The dependency should be picked up
    via the dependency generator now.


author: Christian Kellner <ckellner@redhat.com> - 25-1
changelog:
  - Upstream 25 release
  - First tech preview of the new manifest format. Includes
    various new stages and inputs to be able to build ostree
    commits contained in a oci archive.


author: Christian Kellner <christian@kellner.me> - 30-1
changelog:
  - Upstream release 30
  - Ship osbuild-mpp in new tools sub-package.
  - Remove executable bit from schemata files.


author: Dumitru Ceara <dceara@redhat.com> - 20.06.2-5
changelog:
  - Backport "lex: Allow unmasked bits in value/mask tokens." (#1812820)
  - Backport "ovn-nbctl: Deal with nb_cfg overflows." (#1873455)
  - Backport "pinctrl: Fix incorrect warning message for multicast querier." (#1875727)


author: Dumitru Ceara <dceara@redhat.com> - 20.06.2-6
changelog:
  - Backport "chassis: Fix the way encaps are updated for a chassis record." (#1873032)
  - Backport "chassis: Fix chassis_private record updates when the system-id changes." (#1873032)


author: Numan Siddique <nusiddiq@redhat.com> - 20.06.2-10
changelog:
  - Backport "ovn-northd: Fix multiple ARP replies for SNAT entries configured on a distributed router." (#1878451)


author: Numan Siddique <nusiddiq@redhat.com> - 20.06.2-11
changelog:
  - Backport "ovn-controller: Persist the conjunction ids allocated for conjuctive matches." (#1858878)
  - Backport "I-P engine: Provide the option to store client data in engine ctx." (#1858878)


author: Charles Duffy <cduffy@spamcop.net>
changelog:
  - upgraded to 4.13
   - added 7z (not just 7za) with a shell wrapper
   - added gcc-c++ to the BuildRequires list


author: Marcin Zajączkowski <mszpak@wp.pl>
changelog:
  - added 7za script and moved SFX module to _datadir/name/ to allow 7za & 7z
     use it simultaneously
   - returned to plugins in separate package


author: Matthias Saou <matthias@saou.eu> 4.14.01-1
changelog:
  - Spec file cleanup.
  - Fix wrapper scripts : Double quote $@ for filenames with spaces to work.
  - Move files from /usr/share to /usr/libexec.
  - Various other minor changes.


author: Matthias Saou <matthias@saou.eu> 4.39-1
changelog:
  - Update to 4.39.
  - Remove no longer needed gcc 4.1 patch.
  - Use the gcc_4.X makefile.
  - Remove RAR licensed files and RAR license itself (#190277).


author: Matthias Saou <matthias@saou.eu> 4.47-1
changelog:
  - Update to 4.47.
  - Include now required patch to exclude removed Rar bits from makefiles.
  - Switch to using "make install" for installation... so patch and hack.
  - Use the asm makefile for x86_64, so build require yasm for it too.
  - Add ppc64 to the main %ifarch.
  - Remove no longer included Codecs and Formats dirs (7z.so replaces them?).
  - Remove our wrapper scripts, since the install script creates its own.


author: Matthias Saou <matthias@saou.eu> 9.20.1-1
changelog:
  - Update to 9.20.1 (#688564).
  - Update norar, nostrip and install patches.
  - Minor clean ups : Don't use trivial macros + new email address.
  - Don't require the main package from the plugins package (#690551).
  - Use the any_cpu_gcc_4.X makefile for ppc* since the ppc specific one is gone.


author: Sérgio Basto <sergio@serjux.com> - 15.09-1
changelog:
  - Update to p7zip_15.09
  - Use cmake.
  - Refactor norar patch.
  - Deleted: p7zip_9.20.1-execstack.patch (upstreamed)
  - Deleted: p7zip_9.20.1-install.patch (upstreamed)
  - Deleted: p7zip_9.20.1-nostrip.patch (upstreamed)


author: Sérgio Basto <sergio@serjux.com> - 15.09-6
changelog:
  - Stating in License.txt file that we removed non-Free unrar code
    from sources (#190277)
  - Fix incorrect fsf address in the license files.
  - Add p7zip_15.09-no7zG_and_7zFM.patch in a diferent patch.


author: Sérgio Basto <sergio@serjux.com> - 15.14-1
changelog:
  - Update to 15.14 .
  - Rebase norar_cmake.patch
  - Minor improvement in snippet of documentation.
  - Drop patch1, from changelog build on s390 is fixed.
  - Drop p7zip-15.09-CVE-2015-1038.patch, from changelog if fixed.
  - Drop upstreamed p7zip_15.09-incorrect-fsf-address.patch .
  - Drop p7zip_15.09-no7zG_and_7zFM.patch, p7zip build is fixed.
  - Add sub-package p7zip-gui with 7zG.


author: Sérgio Basto <sergio@serjux.com> - 15.14-2
changelog:
  - Fix non-executable-in-bin for p7zipForFilemanager.
  - Remove p7zip_compress2.desktop to not duplicate the menu entries.
  - Also build 7zFM, rebuild p7zip_15.14_src_all-norar.tar.bz2, to build 7zFM
    instead 7zFM_do_not_use.


author: Sérgio Basto <sergio@serjux.com> - 15.14.1-1
changelog:
  - Update to 15.14.1
  - Revert 7zFM build, upstream recomends not build it
    http://sourceforge.net/p/p7zip/bugs/175/


author: Tomas Hoger <thoger@redhat.com> - 16.02-7
changelog:
  - Add conditional for building with(out) GUI support.  Keep GUI enabled for
    Fedora and EPEL builds, but disabled for RHEL.
  - Add missing dependency - 7zG requires 7z.so, so p7zip-gui needs to require
    p7zip-plugins.


author: Sérgio Basto <sergio@serjux.com> - 16.02-9
changelog:
  - Security fix for CVE-2017-17969 (from Debian)
  - Add 05-hardening-flags.patch, 09-man-update.patch, 10-drop-fm-doc.patch
    and 14-Fix-g++-warning.patch patches from Debian, very small changes
    better documentation, compile flags and compile warning.


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-2
changelog:
  - Correctly get metadata for systemd agent names that end in '@'
  - Use correct OCF 1.1 syntax in ocf:pacemaker:Stateful meta-data
  - Fix regression in displayed times in crm_mon's fence history
  - Resolves: rhbz2032031
  - Resolves: rhbz2032032
  - Resolves: rhbz2031765


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-3
changelog:
  - Detect an unresponsive subdaemon
  - Handle certain probe failures as stopped instead of failed
  - Update pcmk_delay_base option meta-data
  - Avoid crash when using clone notifications
  - Retry Corosync shutdown tracking if first attempt fails
  - Improve display of failed actions
  - Resolves: rhbz1707851
  - Resolves: rhbz2039982
  - Resolves: rhbz2032032
  - Resolves: rhbz2040443
  - Resolves: rhbz2042367
  - Resolves: rhbz2042546


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.3-1
changelog:
  - Unable to show metadata for "service" agents with "@" and "." in the name
  - Resource ocf:pacemaker:attribute does not comply with the OCF 1.1 standard
  - Pacemaker does not convert & to &amp; when generating metadata for non-ocf agents
  - Rebase pacemaker on upstream 2.1.3 release
  - Resolves: rhbz2045110
  - Resolves: rhbz2049720
  - Resolves: rhbz2050259
  - Resolves: rhbz2072108


