# changelog

author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-1
changelog:
  - New upstream release 1.11.2
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.3-1
changelog:
  - New upstream release 1.11.3
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.4-1
changelog:
  - New upstream release 1.11.4
  - Remove upstreamed patch
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.5-1
changelog:
  - New upstream release 1.11.5
  - Remove upstreamed patch
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.1-2
changelog:
  - Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user
                             private group from server


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.2-6
changelog:
  - Fix regressions and bugs in sssd upstream 1.12.2
  - https://fedorahosted.org/sssd/ticket/{id}
  - Regressions: #2471, #2475, #2483, #2487, #2529, #2535
  - Bugs: #2287, #2445


author: Sumit Bose <sbose@redhat.com> - 1.12.2-7
changelog:
  - Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes
                             crash in wbinfo
                             - in addition to the patch libwbclient.so is
                               filtered out of the Provides list of the package


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-1
changelog:
  - New upstream release 1.12.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3
  - Fix spelling errors in description (fedpkg lint)


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-2
changelog:
  - Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus
  - Resolves: rhbz#1179379 - gzip: stdin: file size changed while
                             zipping when rotating logfile


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-3
changelog:
  - Apply a number of patches from upstream to fix issues found 1.12.3
  - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple
                             interfaces, or isn't documented to be able to
  - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is
                            not running
  - Resolves: upstream #2557  authentication failure with user from AD


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-4
changelog:
  - Decrease priority of sssd-libwbclient 20 -> 5
  - It should be lower than priority of samba veriosn of libwbclient.
  - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-6
changelog:
  - Fix double free in monitor
  - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort():
                          sssd killed by SIGABRT


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-2
changelog:
  - Add support for python3 bindings
  - Add requirement to python3 or python3 bindings
  - Resolves: rhbz#1014594 - sssd: Support Python 3


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-5
changelog:
  - Fix regressions with ipa and SELinux
  - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security
                               context on client is staff_u


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-6
changelog:
  - Fix slow login with ipa and SELinux
  - Resolves: upstream #2624 - Only set the selinux context if the context
                               differs from the local one


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-8
changelog:
  - Backport important patches from upstream 1.13 prerelease
  - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable
                             attribute for group name
  - Resolves: upstream #2335 - Investigate using the krb5 responder
                               for driving the PAM conversation with OTPs
  - Enable cmocka tests for secondary architectures


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-4
changelog:
  - Fix ipa-migration bug
  - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled
                               migration mode


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-6
changelog:
  - Fix OTP bug
  - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were
                               entered separately


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.1-2
changelog:
  - Fix few segfaults
  - Resolves: upstream #2811 - PAM responder crashed if user was not set
  - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.1-3
changelog:
  - python-sssdconfig: Fix parssing sssd.conf without config_file_version
  - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-5
changelog:
  - Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA
                             groups during getgrnam and getgrgid
  - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses
                             in call to 'print'


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-6
changelog:
  - Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password
                             prompts (e.g. Password + Token)
  - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed
                             by remote host" if locale not available


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.4-3
changelog:
  - Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element():
                             sssd_ifp killed by SIGSEGV


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.1-2
changelog:
  - Backport important patches from upstream 1.14.2 prerelease
  - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after
                               boot
  - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.1-3
changelog:
  - Fix regression with krb5_map_user
  - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore
  - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError:
                             default if nonexistent domain is mentioned


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.2-2
changelog:
  - Resolves: rhbz#1369130 - nss_sss should not link against libpthread
  - Resolves: rhbz#1392916 - sssd failes to start after update
  - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses
                             on the directory /etc/sssd


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.0-4
changelog:
  - Cherry-pick patches from upstream that enable the files provider
  - Enable the files domain
  - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch
    which is superseded by the files domain autoconfiguration
  - Related: rhbz#1357418 - SSSD fast cache for local users


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.2
changelog:
  - Fix issue with IPA + SELinux in containers
  - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.3
changelog:
  - Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication
  - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with
                             file from package sssd-common-1.15.1-1.fc25.x86_64
  - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-4
changelog:
  - Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write
                             access on the sock_file system_bus_socket
  - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and
                             fails to download desktop profile data
  - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3
  - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients
                              after applying ID Views for them in IPA server
  - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id
                              mapping is applied


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-5
changelog:
  - Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when
                             searching in local cache database access on
                             the sock_file system_bus_socket


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.16.0-5
changelog:
  - Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in
                              setnetgrent_result_timeout
  - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted
                              or machine swaps
  - Resolves: failure in glibc tests
              https://sourceware.org/bugzilla/show_bug.cgi?id=22530
  - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and
                              auth_provider ldap, login fails if the LDAP server
                              is not allowing anonymous binds
  - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is
                              corrected with AD
  - Resolves: upstream#3586 - Give a more detailed debug and system-log message
                              if krb5_init_context() failed
  - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet
                             in /etc/systemd/system
  - Backport few upstream features from 1.16.1


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.0-12
changelog:
  - Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                             with no specific host/hostgroup set
  - Resolves: upstream#3621 - FleetCommander integration must not require
                              capability DAC_OVERRIDE


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-2
changelog:
  - Resolves: upstream#3573 - sssd won't show netgroups with blank domain
  - Resolves: upstream#3660 - confdb_expand_app_domains() always fails
  - Resolves: upstream#3658 - Application domain is not interpreted correctly
  - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to
                              json_loads()
  - Resolves: upstream#3386 - KCM: Payload buffer is too small
  - Resolves: upstream#3666 - Fix usage of str.decode() in our tests
  - A few KCM misc fixes


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-3
changelog:
  - Resolves: upstream#3684 - A group is not updated if its member is removed
                              with the cleanup task, but the group does not
                              change
  - Resolves: upstream#3558 - sudo: report error when two rules share cn
  - Tone down shutdown messages for socket activated responders
  - IPA: Qualify the externalUser sudo attribute
  - Resolves: upstream#3550 - refresh_expired_interval does not work with
                              netgrous in 1.15
  - Resolves: upstream#3402 - Support alternative sources for the files provider
  - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option
  - Resolves: upstream#3679 - Make nss netgroup requests more robust
  - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not
                              configured
  - Resolves: upstream#3469 - extend sss-certmap man page regarding priority
                              processing
  - Improve docs/debug message about GC detection
  - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes
                              list out of bound?
  - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is
                              set.
  - Document which principal does the AD provider use
  - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is
                              defined, but contains no SIDs
  - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM
  - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data
                             Provider returned an error
                             [org.freedesktop.sssd.Error.DataProvider.Fatal]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-1
changelog:
  - Update to 1.16.2 release
  - Cleanup unused global definitions
  - Remove python2 references from the spec file
  - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-2
changelog:
  - Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication
                             fails with the KCM ccache


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-4
changelog:
  - Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local
                             users


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-7
changelog:
  - Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it
                             differs from the default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-8
changelog:
  - Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function():
                              /usr/libexec/sssd/sssd_be killed by 11 crash
                              func _dbus_list_unlink


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-9
changelog:
  - Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del
                             commands in man pages since local provider
                             is deprecated


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-10
changelog:
  - Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not
                             started due to a misconfiguration


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-11
changelog:
  - Resolves: rhbz#1628122 - Printing incorrect information about domain
                             with sssctl utility


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-16
changelog:
  - Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a
                            PKCS#11 URI


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-17
changelog:
  - Related: rhbz#1637131 - pam_unix unable to match fully qualified username
                            provided by sssd during smartcard auth using gdm


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-18
changelog:
  - Related: rhbz#1638006 - Files: The files provider always enumerates
                            which causes duplicate when running getent passwd


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-19
changelog:
  - Add OSCP checks for p11_child
  - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local
                            users


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-21
changelog:
  - Related: rhbz#1638150 - session not recording for local user when groups defined
  - Also add silence a Coverity warning, which is related to rhbz#1637131


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-23
changelog:
  - Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui
                             with smart card


author: Michal Židek <mzidek@redhat.com> - 2.0.0-24
changelog:
  - Resolves: rhbz#1646168 - sssctl access-report always prints an error message
  - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the
                             configuration without having to restart the whole
                             sssd
  - Resolves: rhbz#1640576 - sssctl reports incorrect information about local
                             user's cache entry expiration time
  - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user
  - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys


author: Michal Židek <mzidek@redhat.com> - 2.0.0-25
changelog:
  - Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly
                             for D-bus, resulting in a crash


author: Michal Židek <mzidek@redhat.com> - 2.0.0-27
changelog:
  - Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work
                             if ID provider is authenticated with GSSAPI


author: Michal Židek <mzidek@redhat.com> - 2.0.0-29
changelog:
  - Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise():
                             /usr/libexec/sssd/proxy_child killed by 6


author: Michal Židek <mzidek@redhat.com> - 2.0.0-30
changelog:
  - Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to
                        retrieve AD users through IPA Trust


author: Michal Židek <mzidek@redhat.com> - 2.0.0-32
changelog:
  - Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc
              and libtevent to avoid an issue in GPO processing


author: Michal Židek <mzidek@redhat.com> - 2.0.0-33
changelog:
  - Resolves: rhbz#1646113 - Missing concise documentation about valid options
                             for sssd-files-provider


author: Michal Židek <mzidek@redhat.com> - 2.0.0-34
changelog:
  - Resolves: rhbz#1622008 - Error message when IPA server uninstall calls
                             kdestroy caused by KCM returning a wrong error
                             code during the delete operation


author: Michal Židek <mzidek@redhat.com> - 2.0.0-36
changelog:
  - Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss
                             suggests using * for backend sss


author: Michal Židek <mzidek@redhat.com> - 2.0.0-38
changelog:
  - Resolves: rhbz#1578014 - sssd does not work under non-root user
  - Note: Actually the patches were in the 2.0.0-37, this one just adds this
          changelog because it was missing.


author: Michal Židek <mzidek@redhat.com> - 2.0.0-39
changelog:
  - Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than
                             1.x, this can result in time outs


author: Michal Židek <mzidek@redhat.com> - 2.0.0-40
changelog:
  -Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error.
                            UnknownProperty: Unknown property


author: Michal Židek <mzidek@redhat.com> - 2.0.0-41
changelog:
  -Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong
                            subdomain service name being used


author: Michal Židek <mzidek@redhat.com> - 2.0.0-42
changelog:
  - Resolves: rhbz#1645291 - Perform some basic ccache initialization as part
                             of gen_new to avoid a subsequent switch call
                             failure


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-43
changelog:
  - Resolves: rhbz#1672780 - gdm login not prompting for username when smart
                             card maps to multiple users


author: Michal Židek <mzidek@redhat.com> - 2.0.0-45
changelog:
  - Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is
    done here in order to unblock gating changes before rebase.
  - Related: rhbz#1682305


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-2
changelog:
  - Resolves: rhbz#1673443 - sssd man pages: The default value of
                             "ldap_user_home_directory" is not mentioned
                             with AD server configuration


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-3
changelog:
  - Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with
                             no members


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-4
changelog:
  - Resolves: rhbz#1283798 - sssd failover does not work on connecting to
                             non-responsive ldaps:// server


author: Michal Židek <mzidek@redhat.com> - 2.2.0-6
changelog:
  - Resolves: rhbz#1726945 - negative cache does not use values from
                             'filter_users' config option for known domains


author: Michal Židek <mzidek@redhat.com> - 2.2.0-7
changelog:
  - Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is
                             not FIPS140 compliant


author: Michal Židek <mzidek@redhat.com> - 2.2.0-8
changelog:
  - Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder
                             repository
                           - This just required a raise in release number
                             and changelog for the record.


author: Michal Židek <mzidek@redhat.com> - 2.2.0-10
changelog:
  - Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing
                             the trailing colon


author: Michal Židek <mzidek@redhat.com> - 2.2.0-11
changelog:
  - Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                             non-root user


author: Michal Židek <mzidek@redhat.com> - 2.2.0-13
changelog:
  - Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
              systemd-user service in the account phase in RHEL-8


author: Michal Židek <mzidek@redhat.com> - 2.2.0-14
changelog:
  - Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                             should not cause files domain entries to be
                             qualified, this can break sudo access


author: Michal Židek <mzidek@redhat.com> - 2.2.0-15
changelog:
  - Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                             loop if wrong PIN was provided


author: Michal Židek <mzidek@redhat.com> - 2.2.0-16
changelog:
  - Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                             the IP address of the machine updated in IPA upon
                             sssd.service startup


author: Michal Židek <mzidek@redhat.com> - 2.2.0-17
changelog:
  - Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                             keyring
  - Also apply a patch to fix gating tests issue


author: Michal Židek <mzidek@redhat.com> - 2.2.0-18
changelog:
  - Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
  - Also sync. kcm multihost tests with master


author: Michal Židek <mzidek@redhat.com> - 2.2.0-19
changelog:
  - Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                             new ones (kcm)


author: Michal Židek <mzidek@redhat.com> - 2.2.3-2
changelog:
  * Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release
              PART2: Fix gating issue.


author: Michal Židek <mzidek@redhat.com> - 2.2.3-3
changelog:
  * Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release
              Increasing version number to pick latest libldb


author: Michal Židek <mzidek@redhat.com> - 2.2.3-4
changelog:
  * Resolves: rhbz#1781728 - sssctl config-check command does not give proper
                             error messages with line numbers


author: Michal Židek <mzidek@redhat.com> - 2.2.3-5
changelog:
  * Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character
                             for match rules sss-certmap


author: Michal Židek <mzidek@redhat.com> - 2.2.3-9
changelog:
  * Resolves: rhbz#1783190 - [abrt] [faf] sssd:
                             raise(): /usr/libexec/sssd/sssd_autofs killed by 6


author: Michal Židek <mzidek@redhat.com> - 2.2.3-10
changelog:
  * Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap
                             connection timeout


author: Michal Židek <mzidek@redhat.com> - 2.2.3-14
changelog:
  - Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be
                             specified up to the seconds


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-16
changelog:
  - Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is
                             omitted and auth_provider is krb5


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-17
changelog:
  - Resolves: rhbz#1718193 - p11_child should have an option to skip
                             C_WaitForSlotEvent if the PKCS#11 module
                             does not implement it properly


author: Michal Židek <mzidek@redhat.com> - 2.2.3-18
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1810634 - id command taking 1+ minute for returning user
                             information


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate
                             (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-1
changelog:
  - Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3
  - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure
  - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-2
changelog:
  - Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-3
changelog:
  - Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package
  - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP
  - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache
  - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for
                             inotify events, and no updates are triggered
  - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card"
                             on GDM login with smart-card
  - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat
  - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network.
  - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management
  - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest
                             if LDAP entries do not contain AD forest root information
  - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories
                             in SSSD-AD direct integration.
  - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card
  - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False
  - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-4
changelog:
  - Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication
  - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider
  - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-5
changelog:
  - Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache
  - Fixed "requires/provides" rpmdiff warning


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-7
changelog:
  - Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.
  - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-8
changelog:
  - Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working
  - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema
  - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf
  - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-9
changelog:
  - Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-1
changelog:
  - Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4
  - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI
  - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search()
  - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording
  - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x
  - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD.
  - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process
  - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL
  - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase)
  - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page
  - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals"
  - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains
  - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file
  - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes
  - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff
  - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command
  - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-3
changelog:
  - Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr()
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal
  - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-4
changelog:
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8]
  - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-5
changelog:
  - Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-6
changelog:
  - Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
  - Resolves: rhbz#1915395 - Memory leak in the simple access provider
  - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-7
changelog:
  - Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
  - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
  - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-8
changelog:
  - Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
  - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.0-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
  - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
  - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
  - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
  - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
  - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
  - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
  - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
  - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
  - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
  - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
  - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
  - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
  - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
  - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
  - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
  - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
  - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
  - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
  - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
  - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
  - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
  - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
  - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
  - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
  - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
  - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
  - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
  - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-2
changelog:
  - Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
  - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
  - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
  - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
  - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
  - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
  - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2
changelog:
  - Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
  - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1
changelog:
  - Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
  - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected
  - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator
  - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed
  - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb
  - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces)
  - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s
  - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
  - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA
  - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
  - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1
changelog:
  - Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
  - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
  - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
  - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
  - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
  - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
  - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
  - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
  - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
  - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
  - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
  - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-3
changelog:
  - Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
  - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
  - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
  - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-2
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
  - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
  - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
  - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
  - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
  - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
  - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
  - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
  - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
  - Resolves: rhbz#2087745 - 2FA prompting setting ineffective
  - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.2-1
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
  - Resolves: rhbz#2098617 - Harden kerberos ticket validation
  - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
  - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
  - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-5
changelog:
  - Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release
    Rebuild against Samba rebase.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.1-1
changelog:
  - Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
  - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr
  - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter
  - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
  - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
  - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
  - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization
  - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around
  - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-1
changelog:
  - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
  - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)
  - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket
  - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7
  - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name
  - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable")
  - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication
  - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache
  - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP'
  - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider')
  - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest
  - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf
  - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8]
  - Resolves: RHEL-10721 - very bad performance when requesting service tickets
  - Resolves: RHEL-19011 - Invalid handling groups from child domain
  - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8]
  - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8]
  - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently


author: lichao <lichaod@uniontech.com> - 2.9.4-3.01
changelog:
  - fix: adjust sssd service to speed up system-booting (bugid:240631)
  - fix: sssd service failed (bugid:240325)
  - fix: add default conf file at /etc/sssd/ (bugid:197047)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 1.6.1-6
changelog:
  - Fix v1.6.1-implicit-fallthrough.patch compatibility with gcc < 7.
  - Use %ldconfig_scriptlets.
    https://fedoraproject.org/wiki/Packaging:Scriptlets#Shared_Libraries


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 1.6.1-7
changelog:
  - Add: BuildRequires: gcc
    https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 1.6.1-8
changelog:
  - Enable tests (PTUNIT) and man pages (MAN).
  - Change BuildRequires: gcc -> gcc-c++ as PTUNIT tests require C++.


author: Mahailiang <mahailiang@chengjieos.com> - 1.6.1-10.01
changelog:
  - Del BR:pandoc
  - Modify -DMAN:BOOL=ON to -DMAN:BOOL=OFF
  - Del /usr/share/man/*/*.gz
  - Add Arch: mips64el aarch64


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.4-19
changelog:
  - Python 2 binary package renamed to python2-libiptcdata
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Pavel Cahyna <pcahyna@redhat.com> - 1.4.8-4
changelog:
  - Remove KDE bits
  - Provide: mkisofs (as genisoimage does)
  - Increase alternative priority to win over genisoimage
  - Update RHEL conditionals for lib{isofs,burn} renaming to match those packages


author: kwizart < kwizart at gmail.com > - 0.3.1-3
changelog:
  - Use Fedora compliant (using version) _docdir directory.
  - Remove shebangs when not needed.
  - Bundle examples within -devel
  - Use global instead of define


author: Nicolas Chauvet <kwizart@gmail.com> - 0.4.1-2
changelog:
  - Update to 0.4.1
  - Spec file clean-up
  - Set the current valgrind arches
  - Use unversioned docdir - rhbz#993818


author: Gergely Gombos <gombosg@gmail.com> - 2.0.2.3-3
changelog:
  - Move unversioned symlinks to the base package. Linked packages dynamically load (dlopen) this module with the name libldacBT_enc.so.


author: yangxianzhao <yangxianzhao@uniontech.com> - 2.1.4-1.01
changelog:
  - spec: no build loongarch

   * Wed Dec 11 2019 Jeremy Newton <alexjnewt AT hotmail DOT com> - 2.1.4-1
  - Update to 11.3


author: Miro Hrončok <mhroncok@redhat.com> - 0.3.0-4
changelog:
  - Subpackage python2-macaroons has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.24.0-2
changelog:
  - fixing a segfault on adding new location to calendar
  - https://github.com/mate-desktop/libmateweather/issues/75


author: Ana Cabral <acabral@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved
    from the main package to the utils sub package causing a file
    conflict on multilib systems between the old 32 bit main
    package and the new 64 bit utils sub package.


author: Dominik Mierzejewski <rpm@greysector.net> - 1.23-1
changelog:
  - update to 1.23 (#1471768)
  - bump SONAME due to incompatible ABI change in 1.23
    (https://github.com/lu-zero/mfx_dispatch/issues/44)


author: Dominik Mierzejewski <rpm@greysector.net> - 1.25-1
changelog:
  - update to 1.25
  - use a simpler Source URL
  - drop workaround for https://github.com/lu-zero/mfx_dispatch/issues/44
  - use modern macros
  - add missing Requires: pkgconfig in -devel subpackage


author: Sérgio Basto <sergio@serjux.com> - 2.1.0-0.18.trunkREV507
changelog:
  - Fix https://nvd.nist.gov/vuln/detail/CVE-2018-14446
    https://nvd.nist.gov/vuln/detail/CVE-2018-14403
    https://nvd.nist.gov/vuln/detail/CVE-2018-14379
    https://nvd.nist.gov/vuln/detail/CVE-2018-14326
    https://nvd.nist.gov/vuln/detail/CVE-2018-14325
    https://nvd.nist.gov/vuln/detail/CVE-2018-14054
    based on https://github.com/TechSmith/mp4v2/pull/27
    and https://github.com/sergiomb2/libmp4v2/
  - Update spec
  - Fix build on epel7


author: Hangbin Liu <haliu@redhat.com> - 1.7-1
changelog:
  - Update to 1.7
  - libndp: apply filter to raw socket to only accept ND messages
  - libndp: move ndp_sock_{open,close}() after msg parsing functions
  - ndptool: Fix compilation on musl libc


author: Hangbin Liu <haliu@redhat.com> - 1.7-2
changelog:
  - ndptool: add -T target support (rhbz 1666194)
  - ndptool: fix target parameter typo (rhbz 1666194)
  - libndp: close sockfd after using to avoid handle leak (rhbz 1666194)
  - libndp: fix nd_msg typo when setting target address (rhbz 1666194)


author: Hangbin Liu <haliu@redhat.com> - 1.7-3
changelog:
  - ndptool: add -D dest support (rhbz 1697595)
  - ndptool: fix potential memory leak caused by strdup (rhbz 1697595)


author: Jiri Pirko <jpirko@redhat.com> - 1.2-1
changelog:
  - Update to 1.2
  - libndp: silently ignore packets with optlen 0
  - libndp: fix processing for larger options
  - libndp: do not fail on receiving non-ndp packets


author: Jiri Pirko <jpirko@redhat.com> - 1.2-2
changelog:
  - libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is used as parameter and destination in s[n]printf() [1044084] [1091720]


author: Jiri Pirko <jiri@mellanox.com> - 1.6-1
changelog:
  - Update to 1.6
  - libndb: reject redirect and router advertisements from non-link-local
  - libndp: validate the IPv6 hop limit
  - libndp: revert API change for ndp_msg_send() and add ndp_msg_send_with_flags()
  - libndp: fix type of field "na" in "struct ndp_msgna"
  - ndptool: add option to send messages types
  - libndp: add option flags to send messages
  - Add SubmittingPatches howto


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.2-2
changelog:
  - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
  - related: rhbz#2132051


author: Pavel Filipenský <pfilipenn@redhat.com> - 4.17.4-0
changelog:
  - related: rhbz#2132051 - Update to version 4.17.4
  - resolves: rhbz#2154370 - Fix CVE-2022-38023
  - resolves: rhbz#2142331 - Fix %U include directive for share listing (netshareenum)
  - resolves: rhbz#2148943 - Fix Winbind to retrieve user groups from Active Directory


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.5-2
changelog:
  - resolves: rhbz#2169339 - Fix winbind memory leak
  - resolves: rhbz#2152899 - Fix Samba shares not accessible issue


author: lichao <lichaod@uniontech.com> - 4.17.5-2.0.1.02
changelog:
  - cve: CVE-2022-2127 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 CVE-2023-42669 CVE-2023-4091 CVE-2023-3961


author: wangqing <wangqing@uniontech.com> - 0.8.6-2
changelog:
  - remove zfs-initramfs
  - reference: https://github.com/rpmsphere/source/blob/master/z/zfs-0.8.4-1.src.rpm
  - https://github.com/openzfs/zfs/issues/10885


author: Nicolas Chauvet <kwizart@gmail.com> - 0.9.3-20
changelog:
  - Fix memcpy boundary error with gcc8
  - Add patch by Emil Velikov to fix a valgrind issue - rhbz#1119235
  - Fix dates in changelog


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.1.3-2
changelog:
  - Removed ldconfig scriptlets as per
    https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.1.3-4
changelog:
  - Added gcc-c++ to BuildRequires as per https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.2.0-4
changelog:
  - Resolves: rhbz#1649632 - libosinfo test suite should collect+report all
                             failures, not exit on first error


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-3
changelog:
  - Resolves: rhbz#1727843 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.8.0-1
changelog:
  - Resolves: rhbz#1815158 - Rebase to libosinfo the latest upstream release
  - Resolves: rhbz#1754394 - Provide information about UEFI support for guests (libosinfo)
  - Resolves: rhbz#1032520 - WHQL'ed drivers should be made available for Boxes/libosinfo users


author: Carl Byington <carl@five-ten-sg.com> 0.6.71-1
changelog:
  - fedora python naming scheme changes
  - Zachary Travis - Add support for the OST 2013 format, and
    Content-Disposition filename key fix for outlook compatibility


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.6.71-4
changelog:
  - Python 2 binary package renamed to python2-libpst
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.0-3
changelog:
  - Use C.UTF-8 locale
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Mosaab Alzoubi <moceap@hotmail.com> - 0.7.0-4
changelog:
  - First build on EPEL8
  - Use one branch to build on Fedora and EPEL
  - Use python3 as BR except EPEL7
  - Use LC_ALL=en_US.UTF-8 in EPEL7


author: Jiri Vymazal <jvymazal@redhat.com> - 1.2.13-1
changelog:
  - rebase to 1.2.13
    resolves: rhbz#1425638
  - added patch for GnuTLS crypto-policy adherence
    resolves: rhbz#1179317
  - added autoconf, automake and libtool because package
    has patches now


author: Attila Lakatos <alakatos@redhat.com> - 1.9.0-1
changelog:
  - rebase to 1.9.0
  - add patch to comply with crypto policies
  - add support for openssl
    resolves: rhbz#1932783
  - Properly end TLS connections
    resolves: rhbz#1886400


author: Sergio Durigan Junior <sergiodj@redhat.com> - 0.0.4-12
changelog:
  - Resolves: rhbz#1786466 Do not use %{?_isa} for GDB dependency. Recommend
    GDB, instead of requiring it.


author: RPM Fusion Release Engineering <leigh123linux@gmail.com> - 2.4-13.20160224.gitfa8646d
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
  - Remove Group tag
  - Add BuildRequires:  gcc


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-2.1
changelog:
  - Use Python distutils to install SELinux python bindings (#1719771)
  - Move  sefcontext_compile to -utils package (#1612518)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-6
changelog:
  - Describe fcontext regular expressions (#1904059)
  - Strip spaces before values in config (#2012145)


author: Dan Walsh <dwalsh@redhat.com> 1.1.3-1
changelog:
  - Update from NSA
    * Merged errno fix from Joshua Brindle (Tresys).
    * Merged fix for semod_build_modules_list leak on error path
      from Serge Hallyn (IBM).  Bug found by Coverity.
    * Merged several fixes from Serge Hallyn (IBM).  Bugs found by
      Coverity.
    * Fixed several other bugs and warnings.
    * Merged patch to move module read/write code from libsemanage
      to libsepol from Jason Tang (Tresys).  
    * Merged relay records patch from Ivan Gyurdiev.
    * Merged key extract patch from Ivan Gyurdiev.

  - Initial version
  - Created by Stephen Smalley <sds@epoch.ncsc.mil>


author: Dan Walsh <dwalsh@redhat.com> 1.1.6-1
changelog:
  - Update from NSA
    * Merged semod.conf template patch from Dan Walsh (Red Hat),
    but restored location to /usr/share/semod/semod.conf.
    * Fixed several bugs found by valgrind.
    * Fixed bug in prior patch for the semod_build_module_list leak.
    * Merged errno fix from Joshua Brindle (Tresys).
    * Merged fix for semod_build_modules_list leak on error path
      from Serge Hallyn (IBM).  Bug found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.3.1-1
changelog:
  - Update from NSA
    * Merged stub functionality for managing user and port records,
    and record table code from Ivan Gyurdiev.
    * Updated version for release.


author: Dan Walsh <dwalsh@redhat.com> 1.3.2-1
changelog:
  - Update from NSA
    * Merged stub iterator functionality from Ivan Gyurdiev.
    * Merged interface record patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.3-1
changelog:
  - Update from NSA
    * Merged boolean record, stub record handler, and status codes 
      patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.5-1
changelog:
  - Update from NSA
    * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc].
    * Separated handle create from connect interface.
    * Added a constructor for initialization.
    * Moved up src/include/*.h to src.
    * Created a symbol map file; dropped dso.h and hidden markings.


author: Dan Walsh <dwalsh@redhat.com> 1.3.7-1
changelog:
  - Update from NSA
    * Merged patch series from Ivan Gyurdiev.
      (pointer typedef elimination, file renames, dbase work, backend
       separation)
    * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc].
    * Separated handle create from connect interface.
    * Added a constructor for initialization.
    * Moved up src/include/*.h to src.
    * Created a symbol map file; dropped dso.h and hidden markings.


author: Dan Walsh <dwalsh@redhat.com> 1.3.10-1
changelog:
  - Update from NSA
    * Updated for changes to libsepol, and to only use types and interfaces
    provided by the shared libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.3.11-1
changelog:
  - Update from NSA
    * Fixed semanage_install_active() to use the same logic for
    selecting a policy version as semanage_expand_sandbox().  Dropped
    dead code from semanage_install_sandbox().


author: Dan Walsh <dwalsh@redhat.com> 1.3.14-1
changelog:
  - Update from NSA
    * Updated to use get interfaces for hidden sepol_module_package type.
    * Changed semanage_expand_sandbox and semanage_install_active
    to generate/install the latest policy version supported  by libsepol
    by default (unless overridden by semanage.conf), since libselinux
    will now downgrade automatically for load_policy.
    * Merged new callback-based error reporting system and ongoing
    database work from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.18-1
changelog:
  - Update from NSA
    * Merged bugfix patch from Ivan Gyurdiev.
    * Merged seuser database patch from Ivan Gyurdiev.
    Merged direct user/port databases to the handle from Ivan Gyurdiev.
    * Removed obsolete include/semanage/commit_api.h (leftover).
    Merged seuser record patch from Ivan Gyurdiev.
    * Merged boolean and interface databases from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.20-1
changelog:
  - Update from NSA
    * Merged user and port APIs - policy database patch from Ivan
    Gyurdiev.
    * Converted calls to sepol link_packages and expand_module interfaces
    from using buffers to using sepol handles for error reporting, and 
    changed direct_connect/disconnect to create/destroy sepol handles.


author: Dan Walsh <dwalsh@redhat.com> 1.3.20-1
changelog:
  - Update from NSA
    * Changed default args for load_policy to be null, as it no longer
      takes a pathname argument and we want to preserve booleans.
    * Merged move local dbase initialization patch from Ivan Gyurdiev.
    * Merged acquire/release read lock in databases patch from Ivan Gyurdiev.
    * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev.
    * Added calls to sepol_policy_file_set_handle interface prior
      to invoking sepol operations on policy files.
    * Updated call to sepol_policydb_from_image to pass the handle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.24-1
changelog:
  - Update from NSA
    * Merged default database from Ivan Gyurdiev.
    * Merged removal of connect requirement in policydb backend from
      Ivan Gyurdiev.
    * Merged commit locking fix and lock rename from Joshua Brindle.
    * Merged transaction rollback in lock patch from Joshua Brindle.
    * Changed default args for load_policy to be null, as it no longer
      takes a pathname argument and we want to preserve booleans.
    * Merged move local dbase initialization patch from Ivan Gyurdiev.
    * Merged acquire/release read lock in databases patch from Ivan Gyurdiev.
    * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev.
    * Added calls to sepol_policy_file_set_handle interface prior
      to invoking sepol operations on policy files.
    * Updated call to sepol_policydb_from_image to pass the handle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.28-1
changelog:
  - Update from NSA
    * Merged interface renaming patch from Ivan Gyurdiev.
    * Merged policy component patch from Ivan Gyurdiev.
    * Renamed 'check=' configuration value to 'expand-check=' for 
      clarity.
    * Changed semanage_commit_sandbox to check for and report errors 
      on rename(2) calls performed during rollback.
    * Added optional check= configuration value to semanage.conf 
      and updated call to sepol_expand_module to pass its value
      to control assertion and hierarchy checking on module expansion.
    * Merged fixes for make DESTDIR= builds from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.30-1
changelog:
  - Update from NSA
    * Fixed policy file leaks in semanage_load_module and
      semanage_write_module.
    * Merged further database work from Ivan Gyurdiev.
    * Fixed bug in semanage_direct_disconnect.


author: Dan Walsh <dwalsh@redhat.com> 1.3.32-1
changelog:
  - Update from NSA
    * Merged resync to sepol changes and transaction fix patches from
      Ivan Gyurdiev.
    * Merged reorganize users patch from Ivan Gyurdiev.
    * Merged remove unused relay functions patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.34-1
changelog:
  - Update from NSA
    * Merged resync to sepol changes and booleans fixes/improvements 
      patches from Ivan Gyurdiev.
    * Merged support for genhomedircon/homedir template, store selection,
      explicit policy reload, and semanage.conf relocation from Joshua
      Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.35-1
changelog:
  - Update from NSA
    * Merged sepol handle passing, seusers support, and policydb cache
      patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.38-1
changelog:
  - Upgrade to latest from NSA
    * Merged dbase policydb list and count change from Ivan Gyurdiev.
    * Merged enable dbase and set relay patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.39-1
changelog:
  - Upgrade to latest from NSA
    * Merged record interface, dbase flush, common database code,
      and record bugfix patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.41-1
changelog:
  - Upgrade to latest from NSA
    * Merged interface parse/print, context_to_string interface change,
      move assert_noeof, and order preserving patches from Ivan Gyurdiev.
          * Added src/dso.h in preparation for other changes.
    * Merged install seusers, handle/error messages, MLS parsing,
      and seusers validation patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.43-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser parser resync, dbase tracking and cleanup, strtol
      bug, copyright, and assert space patches from Ivan Gyurdiev.
    * Added src/*_internal.h in preparation for other changes.
     * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and
            src/seusers.[hc].


author: Dan Walsh <dwalsh@redhat.com> 1.3.48-1
changelog:
  - Upgrade to latest from NSA
    * Disabled calls to port dbase for merge and commit and stubbed
      out calls to sepol_port interfaces since they are not exported.
    * Merged rename instead of copy patch from Joshua Brindle (Tresys).
    * Added hidden_def/hidden_proto for exported symbols used within 
      libsemanage to eliminate relocations.  Wrapped type definitions
      in exported headers as needed to avoid conflicts.  Added
      src/context_internal.h and src/iface_internal.h.
    * Added semanage_is_managed() interface to allow detection of whether
      the policy is managed via libsemanage.  This enables proper handling
      in setsebool for non-managed systems.
    * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev,
      to enable runtime control over preserving active boolean values
      versus reloading their saved settings upon commit.


author: Dan Walsh <dwalsh@redhat.com> 1.3.51-1
changelog:
  - Upgrade to latest from NSA
    * Clear modules modified flag upon disconnect and commit.
          * Added tracking of module modifications and use it to
      determine whether expand-time checks should be applied
      on commit.
    * Reverted semanage_set_reload_bools() interface.


author: Dan Walsh <dwalsh@redhat.com> 1.3.52-1
changelog:
  - Upgrade to latest from NSA
    * Merged cleanup patch from Ivan Gyurdiev.
      This renames semanage_module_conn to semanage_direct_handle,
      and moves sepol handle create/destroy into semanage handle
      create/destroy to allow use even when disconnected (for the
      record interfaces).


author: Dan Walsh <dwalsh@redhat.com> 1.3.53-1
changelog:
  - Upgrade to latest from NSA
    * Merged move seuser validation patch from Ivan Gyurdiev.
    * Merged hidden declaration fixes from Ivan Gyurdiev,
      with minor corrections.


author: Dan Walsh <dwalsh@redhat.com> 1.3.56-1
changelog:
  - Upgrade to latest from NSA
    * Fixed free->key_free bug.
    * Merged clear obsolete patch from Ivan Gyurdiev.
    * Merged modified swigify patch from Dan Walsh 
      (original patch from Joshua Brindle).
    * Merged move genhomedircon call patch from Chad Sellers.


author: Dan Walsh <dwalsh@redhat.com> 1.3.59-1
changelog:
  - Add additional swig objects
    * Merged wrap char*** for user_get_roles patch from Joshua Brindle.
    * Merged remove defrole from sepol patch from Ivan Gyurdiev.
    * Merged swig wrappers for modifying users and seusers from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.61-1
changelog:
  - Upgrade to latest from NSA
    * Merged Makefile python definitions patch from Dan Walsh.
    * Removed is_selinux_mls_enabled() conditionals in seusers and users
      file parsers.


author: Dan Walsh <dwalsh@redhat.com> 1.3.63-1
changelog:
  - Upgrade to latest from NSA
    * Dropped handle from user_del_role interface.
    * Removed defrole interfaces.


author: Dan Walsh <dwalsh@redhat.com> 1.3.64-1
changelog:
  - Upgrade to latest from NSA
    * Changed semanage_handle_create() to set do_reload based on
      is_selinux_enabled().  This prevents improper attempts to
      load policy on a non-SELinux system.


author: Dan Walsh <dwalsh@redhat.com> 1.5.1-1
changelog:
  - Upgrade to latest from NSA
    * Added file-mode= setting to semanage.conf, default to 0644.
      Changed semanage_copy_file and callers to use this mode when
      installing policy files to runtime locations.


author: Dan Walsh <dwalsh@redhat.com> 1.5.1-2
changelog:
  - Upgrade to latest from NSA
    * Merged toggle modified flag in policydb_modify, fix memory leak
      in clear_obsolete, polymorphism vs headers fix, and include guards
      for internal headers patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged further header cleanups from Ivan Gyurdiev.
    * Merged toggle modified flag in policydb_modify, fix memory leak
      in clear_obsolete, polymorphism vs headers fix, and include guards
      for internal headers patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.4-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch series from Ivan Gyurdiev.
      This includes patches to:
      - separate file rw code from linked list
      - annotate objects
      - fold together internal headers
      - support ordering of records in compare function
      - add active dbase backend, active booleans
      - return commit numbers for ro database calls
      - use modified flags to skip rebuild whenever possible
      - enable port interfaces
      - update swig interfaces and typemaps
      - add an API for file_contexts.local and file_contexts
      - flip the traversal order in iterate/list
      - reorganize sandbox_expand
      - add seusers MLS validation
      - improve dbase spec/documentation
      - clone record on set/add/modify


author: Dan Walsh <dwalsh@redhat.com> 1.5.6-1
changelog:
  - Upgrade to latest from NSA
    * Clarified error messages from parse_module_headers and 
      parse_base_headers for base/module mismatches.
    * Merged string and file optimization patch from Russell Coker.
    * Merged swig header reordering patch from Ivan Gyurdiev.
    * Merged toggle modify on add patch from Ivan Gyurdiev.
    * Merged ports parser bugfix patch from Ivan Gyurdiev.
    * Merged fcontext swig patch from Ivan Gyurdiev.
    * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev.
    * Merged man pages for dbase functions patch from Ivan Gyurdiev.
    * Merged pywrap tests patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.8-1
changelog:
  - Upgrade to latest from NSA
    * Re-applied string and file optimization patch from Russell Coker,
      with bug fix.
    * Reverted string and file optimization patch from Russell Coker.
    * Clarified error messages from parse_module_headers and 
      parse_base_headers for base/module mismatches.


author: Dan Walsh <dwalsh@redhat.com> 1.5.9-1
changelog:
  - Upgrade to latest from NSA
    * Merged const in APIs patch from Ivan Gyurdiev.
    * Merged validation of local file contexts patch from Ivan Gyurdiev.
    * Merged compare2 function patch from Ivan Gyurdiev.
    * Merged hidden def/proto update patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.14-1
changelog:
  - Upgrade to latest from NSA
    * Merged disallow port overlap patch from Ivan Gyurdiev.
    * Merged join prereq and implementation patches from Ivan Gyurdiev.
    * Merged join user extra data part 2 patch from Ivan Gyurdiev.
    * Merged bugfix patch from Ivan Gyurdiev.
    * Merged remove add_local/set_local patch from Ivan Gyurdiev.
    * Merged user extra data part 1 patch from Ivan Gyurdiev.
    * Merged size_t -> unsigned int patch from Ivan Gyurdiev.
    * Merged calloc check in semanage_store patch from Ivan Gyurdiev,
      bug noticed by Steve Grubb.
    * Merged cleanups after add/set removal patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.15-1
changelog:
  - Upgrade to latest from NSA
    * Merged pywrap Makefile diff from Dan Walsh.
    * Merged cache management patch from Ivan Gyurdiev.
    * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev.
    * Merged remove apply_local function patch from Ivan Gyurdiev.
    * Merged only do read locking in direct case patch from Ivan Gyurdiev.
    * Merged cache error path memory leak fix from Ivan Gyurdiev.
    * Merged auto-generated file header patch from Ivan Gyurdiev.
    * Merged pywrap test update from Ivan Gyurdiev.
    * Merged hidden defs update from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.18-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev.
    * Merged set_create_store, access_check, and is_connected interfaces
      from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.5.19-1
changelog:
  - Upgrade to latest from NSA
    * Merged fname parameter patch from Ivan Gyurdiev.
    * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev.
    * Merged seusers.system patch from Ivan Gyurdiev.
    * Merged improve port/fcontext API patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.21-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser/user_extra support patch from Joshua Brindle.
    * Merged remote system dbase patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.23-1
changelog:
  - Upgrade to latest from NSA
    * Merged optionals in base patch from Joshua Brindle.
    * Merged treat seusers/users_extra as optional sections patch from
      Ivan Gyurdiev.
    * Merged parse_optional fixes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.26-1
changelog:
  - Upgrade to latest from NSA
    * Merged paths array patch from Ivan Gyurdiev.
    * Merged bug fix patch from Ivan Gyurdiev.
    * Merged improve bindings patch from Ivan Gyurdiev.
    * Merged use PyList patch from Ivan Gyurdiev.  
    * Merged memory leak fix patch from Ivan Gyurdiev.
    * Merged nodecon support patch from Ivan Gyurdiev.
    * Merged cleanups patch from Ivan Gyurdiev.
    * Merged split swig patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.28-1
changelog:
  - Upgrade to latest from NSA
    * Merged bug fix for fcontext validate handler from Ivan Gyurdiev.
    * Merged base_merge_components changes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.6-1
changelog:
  - Make work on RHEL4
  - Upgrade to latest from NSA
    * Merged abort early on merge errors patch from Ivan Gyurdiev.
    * Cleaned up error handling in semanage_split_fc based on a patch
      by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev.
    * Merged MLS handling fixes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged Makefile PYLIBVER definition patch from Dan Walsh.
    * Merged man page reorganization from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.3-1
changelog:
  - Fix to work with new version of swig
  - Upgrade to latest from NSA
    * Merged corrected fix for descriptor leak from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.6-1
changelog:
  - Upgrade to latest from NSA
    * Merged updated file context sorting patch from Christopher
      Ashworth, with bug fix for escaped character flag.
    * Merged file context sorting code from Christopher Ashworth 
      (Tresys Technology), based on fc_sort.c code in refpolicy.
    * Merged python binding t_output_helper removal patch from Dan Walsh.
    * Regenerated swig files.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.8-1
changelog:
  - Upgrade to latest from NSA
    * Updated default location for setfiles to /sbin to
      match policycoreutils.  This can also be adjusted via 
      semanage.conf using the syntax:
      [setfiles]
      path = /path/to/setfiles
      args = -q -c $@ $<
      [end]


author: Dan Walsh <dwalsh@redhat.com> - 1.6.9-1
changelog:
  - Upgrade to latest from NSA
    * Merged several fixes from Serge Hallyn:
         dbase_file_cache:  deref of uninit data on error path.
         dbase_policydb_cache:  clear fp to avoid double fclose
         semanage_fc_sort:  destroy temp on error paths


author: Dan Walsh <dwalsh@redhat.com> - 1.6.12-1
changelog:
  - Upgrade to latest from NSA
    * Merged support for read operations on read-only fs from 
      Caleb Case (Tresys Technology).


author: Dan Walsh <dwalsh@redhat.com> - 1.6.15-1
changelog:
  - Upgrade to latest from NSA
    * Merged separate local file contexts patch from Chris PeBenito.
    * Merged patch to make most copy errors non-fatal from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.16-1
changelog:
  - Upgrade to latest from NSA
    * Make most copy errors fatal, but allow exceptions for
      file_contexts.local, seusers, and netfilter_contexts if
      the source file does not exist in the store.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.17-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to skip reload if no active store exists and
      the store path doesn't match the active store path from Dan Walsh.
    * Merged patch to not destroy sepol handle on error path of
      connect from James Athey.
    * Merged patch to add genhomedircon path to semanage.conf from
      James Athey.


author: Dan Walsh <dwalsh@redhat.com> - 1.9.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to compile wit -fPIC instead of -fpic from
      Manoj Srivastava to prevent hitting the global offest table
      limit. Patch changed to include libselinux and libsemanage in
      addition to libsepol.


author: Dan Walsh <dwalsh@redhat.com> - 1.9.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to optionally reduce disk usage by removing 
      the backup module store and linked policy from Karl MacMillan
    * Merged patch to correctly propagate return values in libsemanage


author: Dan Walsh <dwalsh@redhat.com> - 1.10.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged python binding fix from Dan Walsh.
    * Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
changelog:
  - Upgrade to latest from NSA
    * Merged Makefile test target patch from Caleb Case.
    * Merged get_commit_number function rename patch from Caleb Case.
    * Merged strnlen -> strlen patch from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.1-1
changelog:
  - Merged dbase_file_flush patch from Dan Walsh.
  - This removes any mention of specific tools (e.g. semanage)
  - from the comment header of the auto-generated files,
  - since there are multiple front-end tools.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.2-1
changelog:
  - Upgrade to latest from NSA
  - Merged optimizations from Stephen Smalley.
  -    do not set all booleans upon commit, only those whose values have changed
  -    only install the sandbox upon commit if something was rebuilt


author: Dan Walsh <dwalsh@redhat.com> - 2.0.3-1
changelog:
  - Upgrade to latest from NSA
    * Fix to libsemanage man patches so whatis will work better from Dan Walsh


author: Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
changelog:
  - Upgrade to latest from NSA
    * Allow dontaudits to be turned off via semanage interface when
      updating policy


author: Dan Walsh <dwalsh@redhat.com> - 2.0.6-1
changelog:
  - Upgrade to latest from NSA
    * Change to use getpw* function calls to the _r versions from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
changelog:
  - Upgrade to latest from NSA
    * Pass CFLAGS to CC even on link command, per Dennis Gilmore.
    * Clear errno on non-fatal errors to avoid reporting them upon a
      later error that does not set errno.
    * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley.

  - Fix segfault in genhomedircon when using bad user names


author: Dan Walsh <dwalsh@redhat.com> - 2.0.10-1
changelog:
  - Upgrade to latest from NSA
    * Fix error checking on getpw*_r functions from Todd Miller.
    * Make genhomedircon skip invalid homedir contexts from Todd Miller.
    * Set default user and prefix from seusers from Dan Walsh.
    * Add swigify Makefile target from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Upgrade to latest from NSA
    * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.12-1
changelog:
  - Upgrade to latest from NSA
    * ustr cleanups from James Antill.
    * Ensure that /root gets labeled even if using the default context from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.14-1
changelog:
  - Upgrade to latest from NSA
    * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley.
    * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.15-1
changelog:
  - Update to upstream
    * Fix genhomedircon handling of shells and missing user context template from Dan Walsh.
    * Copy the store path in semanage_select_store from Dan Walsh.
  - Add expand-check=0 to semanage.conf


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Update to upstream
    * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Update to upstream
    * Fix spurious out of memory error reports.
    * Merged second version of fix for genhomedircon handling from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.19-1
changelog:
  - Update to upstream
    * Fix genhomedircon to not override a file context with a homedir context from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.20-1
changelog:
  - Update to upstream
    * Use sepol_set_expand_consume_base to reduce peak memory usage when
    using semodule


author: Dan Walsh <dwalsh@redhat.com> - 2.0.22-1
changelog:
  - Update to upstream
    * Free policydb before fork from Joshua Brindle.
    * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.23-1
changelog:
  - Update to upstream
    * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.25-1
changelog:
  - Update to upstream
    * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley.
      Fixes semanage boolean -D seg fault (bug 441379).


author: Dan Walsh <dwalsh@redhat.com> - 2.0.26-1
changelog:
  - Update to upstream
    * Fix bug in genhomedircon fcontext matches logic from Dan Walsh.
    Strip any trailing slash before appending /*$.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.27-1
changelog:
  - Update to upstream
    * Modify genhomedircon to skip groupname entries.
    Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the groupname syntax.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.28-1
changelog:
  - Update to upstream
    * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh


author: Dan Walsh <dwalsh@redhat.com> - 2.0.31-1
changelog:
  - Update to upstream
    * Policy module compression (bzip) support from Dan Walsh.
    * Hard link files between tmp/active/previous from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.35-1
changelog:
  - Revert hard linking of files between tmp/active/previous.
  - Enable configuration of bzip behavior from Stephen Smalley.
  -   bzip-blocksize=0 to disable compression and decompression support.
  -   bzip-blocksize=1..9 to set the blocksize for compression.
  -   bzip-small=true to reduce memory usage for decompression.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.36-1
changelog:
  - Update to upstream
    * Changed bzip-blocksize=0 handling to support existing compressed
    modules in the store.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
changelog:
  - Update to upstream
    * Fix persistent dontaudit support to rebuild policy if the 
          dontaudit state is changed from Chad Sellers.
  - Move load_policy to /sbin


author: Dan Walsh <dwalsh@redhat.com> - 2.0.38-1
changelog:
  - Update to upstream
    * Change semodule upgrade behavior to install even if the module
      is not present from Dan Walsh.
    * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.41-1
changelog:
  - Update to upstream
    * Add pkgconfig file from Eamon Walsh.
    * Add semanage_set_check_contexts() function to disable calling
    setfiles


author: Dan Walsh <dwalsh@redhat.com> - 2.0.43-1
changelog:
  - Update to upstream
    * Move libsemanage.so to /usr/lib
    * Add NAME lines to man pages from Manoj Srivastava<srivasta@debian.org>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.44-1
changelog:
  - Update to upstream
  	* Replace usage of fmemopen() with sepol_policy_file_set_mem() since
  	  glibc < 2.9 does not support binary mode ('b') for fmemopen'd
  	  streams.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.45-1
changelog:
  - Update to upstream
  	* Add enable/disable patch support from Dan Walsh.
  	* Add usepasswd flag to semanage.conf to disable genhomedircon using
  	  passwd from Dan Walsh.
  	* regenerate swig wrappers


author: David Malcolm <dmalcolm@redhat.com> - 2.0.46-2
changelog:
  - big reworking of the support-multiple-python-builds patch to deal with
  PEP 3149: the latest Python 3.2 onwards uses include paths and library names
  that don't fit prior naming patterns, and so we must query python3-config for
  this information.  To complicate things further, python 2's python-config
  doesn't understand all of the options needed ("--extension-suffix").  I've
  thus added new Makefile variables as needed, to be supplied by the specfile by
  invoking the appropriate config tool (or by hardcoding the old value for
  "--extension-suffix" i.e. ".so")
  - rework python3 manifest for PEP 3149, and rebuild for newer python3


author: Dan Walsh <dwalsh@redhat.com> - 2.0.46-5
changelog:
  - Change libsemanage mechanism for handling disabled modules. Now it will only create a flag for a module 
  indicating the module is disabled.  MODULE.pp.disabled, it will no longer rename the module.  This way we can
  ship active modules in rpm.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.2-1
changelog:
  -Update to upstream
  2.1.2 2011-08-17
  	* print error debug info for buggy fc
  	* introduce semanage_set_root and friends
  	* throw exceptions in python rather than return
  	* python3 support.
  	* patch for MCS/MLS in user files

  2.1.1 2011-08-01
  	* Remove generated files, expand .gitignore
  	* Use -Werror and change a few prototypes to support it


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  	* Create a new preserve_tunables flag
  	* tree: default make target to all not
  	* fix semanage_store_access_check calling arguments


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  - Upgrade to upstream
  	* regenerate .pc on VERSION change
  	* maintain mode even if umask is tighter
  	* semanage.conf man page
  	* create man5dir if not exist


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  -Update to upstream
  	* add ignoredirs config for genhomedircon
  	* Fallback_user_level can be NULL if you are not using MLS


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
changelog:
  - Update to upstream 
  	* Alternate path for semanage.conf
  	* do not link against libpython, this is considered bad in Debian
  	* Allow to build for several ruby version
  	* fallback-user-level


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Update to upstream 
  	* remove build warning when build swig c files
  	* additional makefile support for rubywrap
  	* ignore 80 column limit for readability
  	* semanage_store: fix snprintf length argument by using asprintf
  	* Use default semanage.conf as a fallback
  	* use after free in python bindings


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-3
changelog:
  - Attempt to allocate memory for selinux_binary_policy_path and free memory 
  - allocated by asprintf.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Update to upstream 
  	* libsemanage: do not set soname needlessly
  	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
  	* do boolean name substitution
  	* Fix segfault for building standard policies.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-2
changelog:
  - Fix handling of missing semanage permissive -d foo, not failing correctly
  - Previous to this fix the first module beginning with foo would get deleted.


author: Dan Walsh <dwalsh@redhat.com> 2.1.9-3
changelog:
  - Update to latest patches from eparis/Upstream
  -    libsemanage: fixes from coverity
  -    libsemange: redo genhomedircon minuid


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  - Update to upstream 
  	* Add sefcontext_compile to compile regex everytime policy is rebuilt
  	* Cleanup/fix enable/disable/remove module.
  	* redo genhomedircon minuid
  	* fixes from coverity
  	* semanage_store: do not leak memory in semanage_exec_prog
  	* genhomedircon: remove useless conditional in get_home_dirs
  	* genhomedircon: double free in get_home_dirs
  	* fcontext_record: do not leak on error in semanage_fcontext_key_create
  	* genhomedircon: do not leak on failure in write_gen_home_dir_context
  	* semanage_store: do not leak fd 
  	* genhomedircon: do not leak shells list
  	* semanage_store: do not leak on strdup failure 
  	* semanage_store: rewrite for readability


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-6
changelog:
  - Remove dependance on selinux-policy, /etc/selinux should be owned by libsemanage, and selinux-policy can require it.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-7
changelog:
  - Move handling of role audit records into the library
  - Patch stops semanage from removing user record while in use


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-10
changelog:
  - Do not write error message to screen when looking for previous record for auditing.
  - Add mls_range from user record if the MLS range is not specified by the seuser add record.
  - Error out if seuser or mls range is not specified when adding user records


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-14
changelog:
  - Cleanup handling of missing mls_range to fix problems with useradd -Z
  - Fix auditing of login record changes, roles were not working correctly.
  Resolves: #952237


author: Dan Walsh <dwalsh@redhat.com> - 2.2-1
changelog:
  - Update to upstream 
  	* Avoid duplicate list entries from Dan Walsh.
  	* Add audit support to libsemanage from Dan Walsh.
  	* Remove policy.kern and replace with symlink from Dan Walsh.
  	* Apply a MAX_UID check for genhomedircon from Laurent Bigonville.
  	* Fix man pages from Laurent Bigonville.


author: Petr Lautrbach <plautrba@redhat.com> 2.4-2
changelog:
  - semanage_migrate_store: use /usr/bin/python3
  - move semanage_migrate_store script to libsemanage-python3


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-5
changelog:
  - Sort object files for deterministic linking order
  - Support overriding Makefile RANLIB
  - Respect CC and PKG_CONFIG environment variable


author: Petr Lautrbach <plautrba@redhat.com> 2.5-8
changelog:
  - Fixes bug preventing the installation of base modules
  - make distclean target work
  - Do not always print a module name warning
  - Use pp module name instead of filename when installing module
  - tests: Do not force using gcc
  - genhomedircon: remove hardcoded refpolicy strings
  - genhomedircon: add support for %group syntax
  - genhomedircon: generate contexts for logins mapped to the default user
  - Validate and compile file contexts before installing
  - Swap tcp and udp protocol numbers


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-1
changelog:
  - Update to upstream release 2017-08-04
  - Use 'sefcontext_compile -r' when it's run during SELinux policy build


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.7-2
changelog:
  - Python 2 binary package renamed to python2-libsemanage
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
  - Python 3 binary package renamed to python3-libsemanage


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-10
changelog:
  - properly check return value of iterate function
  - Use umask(0077) for fopen() write operations
  - Return commit number if save-previous false
  - Allow tmp files to be kept if a compile fails
  - build: follow standard semantics for DESTDIR and PREFIX
  - Improve warning for installing disabled module
  - silence clang static analyzer report
  - remove access() check to make setuid programs work


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-5
changelog:
  - Revert "genhomedircon: check usepasswd" (rhbz#1871786)
  - semanage.conf - improve usepasswd=False explanation (rhbz#1871786)
  - semanage.conf - expand list of ignoredirs (rhbz#1871786)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-7
changelog:
  - Trivial style fixes
  - Free contents of modkey in semanage_direct_remove
  - Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext()
  - add missing include to boolean_record.c
  - move module hashing into libsemanage
  - move compressed file handling into a separate object
  - clean up semanage_direct_commit() a bit
  - optionally rebuild policy when modules are changed externally
  - add command-line option to detect module changes (#2049186)


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.0.10-0.fdr.1
changelog:
  - Update to 1.0.10, update URLs, include ALSA support.
  - Disable dependency tracking to speed up the build.
  - Add missing ldconfig invocations.
  - Make -devel require pkgconfig.
  - Include developer docs in -devel.
  - Provide -octave in main package, own more related dirs.
  - Bring specfile up to date with current spec templates.


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-2
changelog:
  - Adding FLAC support to libsndfile courtesy of gentoo, #237575
  - Fixing CVE-2007-4974. Thanks to the gentoo people for the patch, #296221


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-6
changelog:
  - Removed spurious #endif in the libsndfile.h wrapper. Thx to Edward
    Sheldrake for finding it. Fixes #468508.
  - Fix build for autoconf-2.63


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.0.20-3
changelog:
  - Add FLAC/Ogg/Vorbis support (BR: libvorbis-devel)
  - Make build verbose
  - Remove rpath
  - Fix ChangeLog encoding
  - Move the big Changelog to the devel package


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.0.21-1
changelog:
  - Update to 10.0.21
  - Do not include the static library in the package (RHBZ#556074)
  - Remove BR on jack since sndfile-jackplay is not provided anymore


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0.25-2
changelog:
  - Patch to use system libgsm instead of a bundled copy.
  - Make main package dep in -devel ISA qualified.
  - Drop -octave Provides (not actually built with octave > 3.0).
  - Don't build throwaway static lib.
  - Run test suite during build.


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-14
changelog:
  - fix CVE-2014-9496: 2 buffer overruns in sd2_parse_rsrc_fork (#1178840)
  - division by zero leading to denial of service in psf_fwrite (#1177254)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-1
changelog:
  - updated to 1.0.28
  - fix possible buffer overflow when parsing crafted ID3 tags (#1440758, CVE-2017-7586)
  - fix possible buffer overflow when parsing crafted flac file (#1440756, CVE-2017-7585)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10
changelog:
  - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function
    i2alaw_array in alaw (#1673085)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-11
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985028)


author: Carl George <carl@george.computer> - 1.0.5-1
changelog:
  - Port from libsodium to libsodium13
  - Install license correctly
  - Disable native CPU optimizations
  - Update summary and descriptions to clarify this is a compatibility package


author: Paul Howarth <paul@city-fan.org> - 1.8.0-10
changelog:
  - Explicitly run the test suite in the en_US.UTF-8 locale to work around flaky
    locale settings in mock builders


author: Paul Howarth <paul@city-fan.org> - 1.8.1-1
changelog:
  - Update to 1.8.1
    - Fixed possible integer overflow when reading a specially crafted packet
      (CVE-2019-3855)
    - Fixed possible integer overflow in userauth_keyboard_interactive with a
      number of extremely long prompt strings (CVE-2019-3863)
    - Fixed possible integer overflow if the server sent an extremely large
      number of keyboard prompts (CVE-2019-3856)
    - Fixed possible out of bounds read when processing a specially crafted
      packet (CVE-2019-3861)
    - Fixed possible integer overflow when receiving a specially crafted exit
      signal message channel packet (CVE-2019-3857)
    - Fixed possible out of bounds read when receiving a specially crafted exit
      status message channel packet (CVE-2019-3862)
    - Fixed possible zero byte allocation when reading a specially crafted SFTP
      packet (CVE-2019-3858)
    - Fixed possible out of bounds reads when processing specially crafted SFTP
      packets (CVE-2019-3860)
    - Fixed possible out of bounds reads in _libssh2_packet_require(v)
      (CVE-2019-3859)
  - Fix mis-applied patch in the fix of CVE-2019-3859
    - https://github.com/libssh2/libssh2/issues/325
    - https://github.com/libssh2/libssh2/pull/327


author: Paul Howarth <paul@city-fan.org> - 1.8.2-1
changelog:
  - Update to 1.8.2
    - Fixed the misapplied userauth patch that broke 1.8.1
    - Moved the MAX size declarations from the public header


author: Paul Howarth <paul@city-fan.org> - 1.9.0-1
changelog:
  - Update to 1.9.0
    - Fixed integer overflow leading to out-of-bounds read (CVE-2019-13115)
    - Adds ECDSA keys and host key support when using OpenSSL
    - Adds ED25519 key and host key support when using OpenSSL 1.1.1
    - Adds OpenSSH style key file reading
    - Adds AES CTR mode support when using WinCNG
    - Adds PEM passphrase protected file support for libgcrypt and WinCNG
    - Adds SHA256 hostkey fingerprint
    - Adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
    - Adds explicit zeroing of sensitive data in memory
    - Adds additional bounds checks to network buffer reads
    - Adds the ability to use the server default permissions when creating sftp directories
    - Adds support for building with OpenSSL no engine flag
    - Adds support for building with LibreSSL
    - Increased sftp packet size to 256k
    - Fixed oversized packet handling in sftp
    - Fixed building with OpenSSL 1.1
    - Fixed a possible crash if sftp stat gets an unexpected response
    - Fixed incorrect parsing of the KEX preference string value
    - Fixed conditional RSA and AES-CTR support
    - Fixed a small memory leak during the key exchange process
    - Fixed a possible memory leak of the ssh banner string
    - Fixed various small memory leaks in the backends
    - Fixed possible out of bounds read when parsing public keys from the server
    - Fixed possible out of bounds read when parsing invalid PEM files
    - No longer null terminates the scp remote exec command
    - Now handle errors when Diffie Hellman key pair generation fails
    - Fixed compiling on Windows with the flag STDCALL=ON
    - Improved building instructions
    - Improved unit tests
  - Needs OpenSSL ≥ 1.0.1 now as ECC support is assumed
  - Modernize spec somewhat as EL-6 can no longer be supported


author: Tony Asleson <tasleson@redhat.com> - 1.9.1-7
changelog:
  - Remove valgrind dependency as not being used and causing
    build to fail as it pulls in python3.11


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.21-6
changelog:
  - Python 2 binary package renamed to python2-libsvm
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Ding-Yi Chen <dchen@redhat.com> - 3.23-1
changelog:
  - Upstream update to 3.23
    + add more digits of predicted file, model file, scaled data and data
      from matlab libsvmwrite: to .17g
    + svm-toy-gtk is no longer supported
    + Dependency qt is updated to qt5
  - probability output:
    + if 2 classes, directly output the predited probabilities
      rather than run the iterative algorithms for multi-class situations
  - java:
    + libsvm.jar generated by java 1.7 rather than 1.5
    + change the use of "_" in svm.java, which won't be allowed in later java
  - python:
    + split to python2 and python3


author: Kalev Lember <klember@redhat.com> - 3.39.92-2
changelog:
  - Split sysprof-capture library and header files out to sysprof-capture-devel
  - Update minimum required glib2 version


author: Kamil Dudka <kdudka@redhat.com> - 1.2.20-16
changelog:
  - fix memory leaks through gnu_long{name,link} (CVE-2021-33645 CVE-2021-33646)
  - fix out-of-bounds read in gnu_long{name,link} (CVE-2021-33643 CVE-2021-33644)


author: Xin Long <lxin@redhat.com> - 1.31-4
changelog:
  - teamd: do no remove the ports on shutdown with -N [2148856]
  - teamd: stop iterating callbacks when a loop restart is requested [2148855]


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - enable zip and jpeg codecs
  - change defattr in normal package to 0755
  - add defattr to -devel package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages from devel package to the regular one
  - integrate Frank Warmerdam's fixed .fax handling code (keep until next release
    of libtiff)
  - fix fax2ps breakage (bug #8345)


author: Phil Knirsch <phil@redhat.de>
changelog:
  - Fixed ia64 problem with tiffinfo. Was general 64 bit arch problem where s390x
    and ia64 were missing (#52129).


author: Matthias Clasen <mclasen@redhat.com> - 3.7.1-3
changelog:
  - Drop the largefile patch again
  - Fix a problem with the handling of alpha channels
  - Fix an integer overflow in tiffdump (#143576)


author: Matthias Saou <http://freshrpms.net/> 3.7.4-2
changelog:
  - Remove useless explicit dependencies.
  - Minor spec file cleanups.
  - Move make check to %check.
  - Add _smp_mflags.


author: Matthias Clasen <mclasen@redhat.com>
changelog:
  - Fix several vulnerabilities (CVE-2006-3460 CVE-2006-3461
    CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)


author: Jindrich Novy <jnovy@redhat.com> - 3.8.2-6
changelog:
  - fix CVE-2006-2193, tiff2pdf buffer overflow (#194362)
  - fix typo in man page for tiffset (#186297)
  - use %{?dist}


author: Tom Lane <tgl@redhat.com> 3.8.2-8
changelog:
  - Restore static library to distribution, in a separate -static subpackage
  Resolves: #219905
  - Don't apply multilib header hack to unrecognized architectures
  Resolves: #233091
  - Remove documentation for programs we don't ship
  Resolves: #205079
  Related: #185145


author: Tom Lane <tgl@redhat.com> 3.8.2-11
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Related: #458674
  - Use -fno-strict-aliasing per rpmdiff recommendation


author: Tom Lane <tgl@redhat.com> 3.9.2-1
changelog:
  - Update to libtiff 3.9.2; stop carrying a lot of old patches
  Resolves: #520734
  - Split command-line tools into libtiff-tools subpackage
  Resolves: #515170
  - Use build system's libtool instead of what package contains;
    among other cleanup this gets rid of unwanted rpath specs in executables
  Related: #226049


author: Tom Lane <tgl@redhat.com> 3.9.2-3
changelog:
  - Apply Adam Goode's fix for Warmerdam's fix
  Resolves: #552360
  Resolves: #533353
  - Add some defenses to prevent tiffcmp from crashing on downsampled JPEG
    images; this isn't enough to make it really work correctly though
  Related: #460322


author: Tom Lane <tgl@redhat.com> 3.9.4-1
changelog:
  - Update to libtiff 3.9.4, for numerous bug fixes including fixes for
    CVE-2010-1411, CVE-2010-2065, CVE-2010-2067
  Resolves: #554371
  Related: #460653, #588784, #601274, #599576, #592361, #603024
  - Add fixes for multiple SIGSEGV problems
  Resolves: #583081
  Related: #603081, #603699, #603703


author: Tom Lane <tgl@redhat.com> 3.9.4-3
changelog:
  - Add patch for CVE-2011-0192
  Resolves: #681672
  - Fix non-security-critical potential SIGSEGV in gif2tiff
  Related: #648820


author: Tom Lane <tgl@redhat.com> 3.9.4-4
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #684007
  Related: #688825
  - Add fix for CVE-2011-1167
  Resolves: #689574


author: Tom Lane <tgl@redhat.com> 3.9.5-1
changelog:
  - Update to libtiff 3.9.5, incorporating all our previous patches plus other
    fixes, notably the fix for CVE-2009-5022
  Related: #695885


author: Tom Lane <tgl@redhat.com> 4.0.1-1
changelog:
  - Update to libtiff 4.0.1, adds BigTIFF support and other features;
    library soname is bumped from libtiff.so.3 to libtiff.so.5
  Resolves: #782383
  - Temporarily package 3.9.5 shared library (only) in libtiff-compat subpackage
    so that dependent packages won't be broken while rebuilding proceeds


author: Tom Lane <tgl@redhat.com> 4.0.2-1
changelog:
  - Update to libtiff 4.0.2, includes fix for CVE-2012-2113
    (note that CVE-2012-2088 does not apply to 4.0.x)
  - Update libtiff-compat to 3.9.6 and add patches to it for
    CVE-2012-2088, CVE-2012-2113
  Resolves: #832866


author: Tom Lane <tgl@redhat.com> 4.0.2-5
changelog:
  - Add accessor functions for opaque type TIFFField (backport of not-yet-released
    upstream feature addition; needed to fix freeimage)


author: Tom Lane <tgl@redhat.com> 4.0.2-6
changelog:
  - Remove compat subpackage; no longer needed
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 4.0.3-2
changelog:
  - Add upstream patches for CVE-2012-4447, CVE-2012-4564
    (note: CVE-2012-5581 is already fixed in 4.0.3)
  Resolves: #880907


author: Nikola Forró <nforro@redhat.com> - 4.0.9-9
changelog:
  - Fix CVE-2017-9935, CVE-2017-18013 (#1530441),
    CVE-2018-8905 (#1559705) and CVE-2018-10963 (#1579061)


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: mahailiang <mahailiang@uniontech.com> - 2.9.0-9.01
changelog:
  - build: add udisks-mount-patch-changes.patch
  - spec: Modify redhat-rpm-config to uos-rpm-config and /media instead of /run/media


author: Peter Hatina <phatina@redhat.com> - 2.1.0-3
changelog:
  - Changes for EPEL-7
    - Lower systemd required version to 208
    - Rewrite BuildRequires for systemd-devel


author: Tomas Bzatek <tbzatek@redhat.com> - 2.8.3-1
changelog:
  - Rebased to upstream 2.8.3 release (#1685210)
  - Fix leaking filedescriptors (#1614774)
  - Fix udisksctl pager scrolling (#1662336)
  - Fix LVM2 plugin CreateSnapshot() error (#1668291)
  - Add ISCSI plugin GetInitiatorNameRaw() method (#1710257)


author: sunyuxuan <sunyuxuan@uniontech.com> - 1.4.0-4.5
changelog:
  - Add ExclusiveArch loongarch64
  - modify patch 0001-add-port-for-linux-on-loongarch.patch to support loongarch64


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 0.99-0.1.frysk20070405cvs
changelog:
  - Update to the upstream snapshot snap-070224.
  - Use the Frysk's modified version, currently snapshot 20070405cvs.
  - Extend the supported architectures from ia64 also to x86_64, i386 and ppc64.
  - Spec file fixups.
  - Split the package to its base and the `devel' part.
  - Drop the statically built libraries.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 0.99-0.2.frysk20070405cvs
changelog:
  - Require conflict with gdb < gdb-6.6-9 as it would not find `libunwind.so'.
  - Fixed (unused - commented) rule for a RPM build with embedded debug info.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 0.99-0.6.frysk20070405cvs
changelog:
  - Fix build error due to a `dprintf' conflict on recent glibc.
  - New rpmbuild parameter: --without check


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 0.99-0.8.frysk20070405cvs
changelog:
  - Fix .spec ExclusiveArch from i386 to %{ix86}.
  - Remove `BuildRequires: glibc gcc make tar gzip' - minimum build environment.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 0.99-0.9.20090413betagitb483ea3f
changelog:
  - Rebase the package on the upstream variant: http://www.nongnu.org/libunwind/
    - Drop the patch libunwind-snap-070224-frysk20070405cvs.patch
      as even frysk-0.4-8.fc11 still has this library bundled statically.
  - Disable the testsuite by default during the build.
    - It should be run separately as it crashes some ia64 kernels.
    - Drop the patch libunwind-snap-070224-orphanripper.patch.
  - Drop the patch libunwind-snap-070224-dprintf-vs-stdio.h as no longer needed.
  - Drop libunwind-snap-070224-multilib-rh342451.patch as accepted upstream.
  - Fix and enable ppc (ppc32) arch.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 0.99-0.11.20090430betagit4b8404d1
changelog:
  - Disable the libunwind-setjmp library as no longer compatible with glibc and
    no Fedora dependencies on it (FTBSFS BZ 511562).


author: Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.99-0.13.20090430betagit4b8404d1
changelog:
  - The devel package now requires also base package's %{release}.
  - Update the obsolete macro %{package_version}.


author: Kyle McMartin <kmcmarti@redhat.com> 1.1-1
changelog:
  - Update to upstream v1.1
  - libunwind-install-ptrace.patch: drop upstream patch
  - libunwind-arm-register-rename.patch: fixed upstream
  - Add pkg-config files to libunwind-devel


author: Dennis Gilmore <dennis@ausil.us> - 1.8.3-4
changelog:
  - pull in patch from upstream so that samples will build on 32 bit arches with
  - largefile support, enables gerbera to run on armv7hl and i686


author: Nicolas Chauvet <kwizart@gmail.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - Revert the ABI bump since it's the same as 1.8.3
  - Add back patch for largefile support


author: Jeff Moyer <jmoyer@redhat.com> - 1.0.7-2.el8
changelog:
  - Fix versioning.  The installed library is 1.0.7, make the rpm match.
  - bump release number for build, which includes -fPIC fix
  - Related: rhbz#1862551


author: Ziyang Zhang <ZiyangZhang@linux.alibaba.com> - 1.0.7-3.0.2
changelog:
  - revert io_uring ioctl support
  - update uapi for IORING_ENTER_SQ_SUBMIT_ON_IDLE
  - add a test for sqpoll sq_thread_idle_us mode


author: Petr Pisar <ppisar@redhat.com> - 1.1.11-35
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Harald Hoyer <harald@redhat.com> - 1.1.6-4
changelog:
  - play stupid tricks, to let alternatives make the links and
    rpm not removing them afterwards
  - removed bogus warning for "." and ".."


author: Roman Rakus <rrakus@redhat.com> - 1.1.8-1
changelog:
  - Version 1.1.8 - old patches included
                  - added bzip2-devel to build requirements
  - fixed #171510 - preserve directory permissions


author: Roman Rakus <rrakus@redhat.com> - 1.1.9-6
changelog:
  - rename functions as they conflict with glibc
  - Don't push cdda2mp3 because we don't have any mp3 coder
    Resolves: #505918


author: Honza Horak <hhorak@redhat.com> 1.1.11-2
changelog:
  - fixed man page missing arguments (Resolves: #647024)
    https://bugzilla.redhat.com/show_bug.cgi?id=647024
  - fixed erroneous "Unknown file type (unallocated)" warning 
    (Resolves: #174667)
    https://bugzilla.redhat.com/show_bug.cgi?id=174667


author: Honza Horak <hhorak@redhat.com> - 1.1.11-4
changelog:
  - Library libusal is installed in order to be used by other apps
    (Resolves: #588508)
    https://bugzilla.redhat.com/show_bug.cgi?id=588508


author: Honza Horak <hhorak@redhat.com> - 1.1.11-12
changelog:
  - Use system cdparanoia instead of old bundled version
  - Build libusal as a shared library
  - Messages from rpmlint clean-up


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-18
changelog:
  - ported from cdda-paranoia to libcdio-paranoia, modified paranoia-cdda.patch
  - fixed bogus date in changelog


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-28
changelog:
  - libusal: added /dev/srN next to /dev/scdN path when scanning for devices
    added cdrkit-1.1.11-devname.patch
    bz#1053056


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-32
changelog:
  - FTBFS: <sys/sysmacros.h> included where "major" and "minor" macros are in use
    (cdrkit-1.1.11-sysmacros.patch added)
  - https://bugzilla.redhat.com/show_bug.cgi?id=1263599 - man page clarified
    (cdrkit-1.1.11-manpagefix.patch modified)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-23
changelog:
  - Actually apply the patch from the previous build
  - Resolves: rhbz#1670997 - Amend the user lifecycle auditing


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.3-0.2.git09b0222
changelog:
  - Fixes from package review
  - Removed doubly-listed include directory
  - Update git tarball to the latest upstream code


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.9.4-4.gitdc559a5
changelog:
  - Bump epoch for the version downgrade
  - The 0.9.7 version hit the Rawhide repo due to the mass rebuild, we need a
    clean upgrade path.


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.0-2.git5462dab
changelog:
  - drop the patchlevel from the SONAME since libuv will retain binary
    compatibility for the life of the 0.10.x series


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.10.5-2
changelog:
  - Add patch to properly report soname version information
    This patch will be included upstream in 0.10.6 and can be dropped then.
  - Remove Bundles(ev) as this has not been true since 0.9.5


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.5-3
changelog:
  - don't sed the soname in the spec anymore; the patch takes care of it now
  - drop leftover global define for git revision


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-1
changelog:
  - new upstream release 0.10.33
    https://github.com/joyent/libuv/blob/v0.10.33/ChangeLog
  - update URL to point to the new libuv.org


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-2
changelog:
  - add missing %{_?isa} to devel requires of main package
  - fix some issues with the pkgconfig file and Group reported by Michael Schwendt


author: Alex Vainman <alexv@mellanox.com> - 7.0.14-1
changelog:
  - New upstream release
  - Removal of redundant macros and obsolete/unneeded tags
  - Added ExcludeArch, BuildRequires and Require sections
  - Fixes and cleanups in the build and installation sections
  - Install 30-libvma-limits.conf file under 
    /etc/security/limits.d/
  - Fixes related to files/directories ownerships
  - Removal of vma_perf_envelope.sh from the utility package
  - Update Source tag URL
  - Fix most of the rpmlint warnings


author: Alex Vainman <alexv@mellanox.com> - 7.0.14-2
changelog:
  - Added reasoning for archs exclusion
  - Package description improvement
  - Removal of the pre scriplet
  - Added COPYING and LICENSE files to the package


author: Alex Vainman <alexv@mellanox.com> - 8.0.1-1
changelog:
  - New upstream release
  - Move to dual license: GPLv2 or BSD
  - ExcludeArch update
  - Removal of extra space in:
    config(noreplace) {_sysconfdir}/security/limits.d/30-libvma-limits.conf
  - Add V=1 to make


author: Donald Dutile <ddutile@redhat.com> - 8.1.1-1
changelog:
  - Rebase to 8.1.1, re-apply patch to 8.0.1-2
  - Add (Build)Requires of libibverbs to 1.2.2
  - Resolves: rhbz#1353704


author: Jarod Wilson <jarod@redhat.com> - 8.1.3-1
changelog:
  - Patch in additional coverity fixes from upstream git tree
  - Rebase to 8.1.3 to pick up copious coverity corrections
  - Related: rhbz#1271624


author: Jarod Wilson <jarod@redhat.com> - 8.1.4-1
changelog:
  - Rebase to 8.1.4 after latest round of coverity fixes upstream
    reduced reported defects to 0
  - Related: rhbz#1271624


author: Jarod Wilson <jarod@redhat.com> - 8.6.10-0.1
changelog:
  - Rebase to upstream v8.6.10 pre-release, use 0.x release number scheme
    as means to differentiate pre-release from release


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.8-6
changelog:
  - Python 2 binary package renamed to python2-libvoikko
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Mike FABIAN <mfabian@redhat.com> - 4.1.1-1
changelog:
  - Rebase to 4.1.1 from Fedora 29 (provides only python3-libvoikko,
    removes python2-libvoikko)
  - Resolves: rhbz#1636062


author: Mike FABIAN <mfabian@redhat.com> - 4.1.1-2
changelog:
  - Fix man file names for Flatpak builds, exclude __pycache__ files from Flatpak builds
  - Resolves: rhbz#1896322


author: Wim Taymans <wtaymans@redhat.com> - 1.7.0-7
changelog:
  - Fix for CVE-2019-9232, CVE-2019-9433, CVE-2019-9371, CVE-2019-2126
  - Resolves: rhbz#1796086, rhbz#1796100, rhbz#1796448, rhbz#1796454
  - Remove php-cli BR


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.9.0-2
changelog:
  - fix permissions on binaries
  - rename generic binaries to v8_*
  - link shared library to -lm, -lpthread to resolve missing weak symbols


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.9.0-7
changelog:
  - update to git revision 8389f1967c5f8b3819cca80705b1b4ba04132b93
  - upstream fix for bz 599147
  - proper shared library support


author: zengwei <zengwei1@uniontech.com> - 1.7.0-11.0.1.01
changelog:
  - Add patch to fix integer overflows.
  - Fix compilation by including limits.h
  - Resolves: RHEL-40650
  - fix: fix CVE-2024-5197 CVE-2023-6349


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.3.0-1
changelog:
  - upstream release 0.3.0
  - enable gif2webp
  - add build requires on giflib-devel and libtiff-devel
  - use make_install and hardened macros
  - list binaries explicitly


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Weitao Zhou <yunqi.zwt@alibaba-inc.com> - 1.2.0-8.0.1
changelog:
  - Obsoletes libwebp7 from remi repo for better compatibility
  - Fix CVE-2023-4863 (#2238431)(cheng.shengyu1@zte.com.cn)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.4.2-1
changelog:
  - xkbcommon 0.4.2 (#1000497)
  - own %{_includedir}/xkbcommon/
  - -x11: +ldconfig scriptlets
  - -devel: don't include xkbcommon-x11.h
  - run reautoconf in %prep (instead of %build)
  - tighten subpkg deps via %_isa
  - .spec cleanup, remove deprecated stuff
  - BR: pkgconfig(xcb-xkb) >= 1.10


author: shenyangyang <shenyangyang4@huawei.com> - 2.9.10-3
changelog:
  - Fix-use-after-free-with-validating-reader and
    Never-expand-parameter-entities-in-text-declaration


author: zoulin <zoulin13@huawei.com> - 2.9.10-6
changelog:
  - Fix more quadratic runtime issues in HTML push parse
  - Fix reset HTML parser input before reporting error


author: yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 2.9.10-10
changelog:
  - revert Don-t-try-to-handle-namespaces-when-building-HTML-do.patch.
    rubygem-nokogoro test case fail,because this patch remove xml namespace function.


author: zoulin <zoulin13@huawei.com> - 2.9.10-15
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:[add] patches from upstream
         Fix-handling-of-unexpected-EOF-in-xmlParseContent.patch
         Fix-line-numbers-in-error-messages-for-mismatched-ta.patch
         Fix-null-deref-in-legacy-SAX1-parser.patch
         update-for-xsd-language-type-check.patch
         Fix-dangling-pointer-with-xmllint-dropdtd.patch
         Fix-duplicate-xmlStrEqual-calls-in-htmlParseEndTag.patch
         Fix-exponential-behavior-with-recursive-entities.patch
         Fix-quadratic-behavior-when-looking-up-xml-attribute.patch
         Fix-use-after-free-with-xmllint-html-push.patch
         Fix-xmlGetNodePath-with-invalid-node-types.patch
         Stop-checking-attributes-for-UTF-8-validity.patch


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix heap-use-after-free in xmlXIncludeIncludeNode
         fix stack overflow in xmlDocDumpMemory
         fix stack overflow in htmlDocContentDumpOutput


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-18
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix fuzz issues
         fix memory leaks in XPointer string-range function
         fix null pointer deref in xmlXPtrRangeInsideFunction
         stop using maxParserDepth in xpath.c
         hardcode maximum XPath recursion depth
         fix XPath recursion limit


author: panxiaohe <panxiaohe@huawei.com> - 2.9.10-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix following issues:
         fix unsigned integer overflow in htmlParseTryOrFinish
         fix undefined behavior in UTF16LEToUTF8
         fix SEGV in xmlSAXParseFileWithData
         encoding: fix memleak in xmlRegisterCharEncodingHandler()
         fix null deref in xmlStringGetNodeList
         fix memory leak in xmlParseElementMixedContentDecl
         fix slow parsing of HTML with encoding errors


author: fuanan <fuanan3@h-partners.com> - 2.9.10-25
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:use upstream patch refix heap-use-after-free in xmlAddNextSibling and xmlAddChild


author: Jakub Ružička <jakub.ruzicka@nic.cz> - 2.0.231-1
changelog:
  - Rebase to version 2.0.231 (Resolves: rhbz#2111304)
  - Own yang modules (Resolves: rhbz#2094371)
  - Use proper CMAKE_BUILD_TYPE


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Wolfgang Ulbrich <fedora@raveit.de> - 2.0.4-1
changelog:
  - update to 2.0.4
  - drop obsolete IconCache scriptlets
  - add configure option --enable-kill-on-sigterm rhbz (#1545317)


author: Wolfgang Ulbrich <fedora@raveit.de> - 2.0.5-1
changelog:
  - update to 2.0.5
  - drop lightdm-gtk-greeter_readd-power.patch
  - use lightdm-gtk_add-language-button-to-layout.patch
  - drop lightdm-gtk-greeter_remove-atspi-spawn-code.patch


author: Paul Wolneykien <manowar@altlinux.org> 2.0.1-alt11
changelog:
  - A prompt-driven greeter.
  - Workaround: Use the theme\'s default foreground color for the
    prompt instead of the special question color because the latter is
    defined in only a few themes.
  - A better layout for error messages.
  - Load CSS from file ("css-path" config. option).
  - Support Pnago markup for error messages.
  - Automatically start new authentication session when the password
    is successfully changed.
  - Make the login and cancel button labels configurable.
  - Use CSS to style the prompt and error messages.
  - Conditional change pass (PIN) button.
  - Use configurable default info text.
  - Clear error when the auth. session is started by the button.
  - Append the error messages until user responds.
  - Hide cancel button when authentication completes.


author: Paul Wolneykien <manowar@altlinux.org> 2.0.1-alt12
changelog:
  - Fix: Restart the authentication session with empty username and
    don't use the last authenticated user name when the greeter-hide-users
    hint is set to true (closes: #36293).


author: Paul Wolneykien <manowar@altlinux.org> 2.0.1-alt13
changelog:
  - Fix/improve: Restart the authentication session with empty username
    when the user selector is set to "Other...".


author: Paul Wolneykien <manowar@altlinux.org> 2.0.1-alt15
changelog:
  - Russian translation of some prompts and titles (thx Oleg Zenin).
  - Translate the prompts and messages (thx Oleg Zenin).


author: Alec Leamas <leamas.alec@gmail.com> - 0.10.0-19
changelog:
  - Fix FTBS on python 3.8. Closes: #1718285.
  - mode2: Fix inconsistent loglevel/debug option (upstream #307)
  - plugins: devinput: fix glob "no match" error (upstream #285, DBS 860551)


author: Neal Gompa <ngompa13@gmail.com> - 1:27.0-1
changelog:
  - Bump version to 27.0 (ngompa13)
  - imgcreate/creator: Change to text strings for reading file list from rpm
    (ngompa13)
  - imgcreate/live: Check for dracut being installed to determine usability
    (ngompa13)
  - imgcreate/live: Add squashfs as a mandatory extra filesystem (ngompa13)
  - imgcreate/live: Rename dracut config file to 99-liveos.conf (ngompa13)
  - 'udevadm settle' needs some time to settle (sbonds)
  - README: Removed unnecessary 'the' (scwicker)
  - imgcreate/kickstart: Use systemctl for enabling/disabling services (ngompa13)
  - livecd-iso-to-disk: Simply mount read-only to test for flat_squashfs.
    (fgrose)
  - editliveos: Accommodate netinstall in multi boot configuration files.
    (fgrose)
  - livecd-iso-to-disk+pod: Support netinstall .isos and as multi install.
    (fgrose)


author: Chris Leech <christopher.leech@intel.com> - 0.9.7-1
changelog:
  - Updated to 0.9.7
  - Added a private copy of dcbnl.h until kernel-headers includes it.
    Export patch is making it's way to the upstream kernel via net-2.6,
    expected in 2.6.29-rc7


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.7-3
changelog:
  - added devel files again to support fcoe-utils package
  - added kernel >= 2.6.29 to Requires, deleted dcbnl.h, since it is
    aviable in kernel 2.6.29-rc7
  - changed config dir from /etc/sysconfig/dcbd to /etc/dcbd
  - updated init script: added mandatory Short description tag,
    deleted default runlevels, which should start the script


author: Karsten Hopp <karsten@redhat.com> 0.9.15-4
changelog:
  - buildrequire libconfig-devel >= 1.3.2, it doesn't build with 1.3.1 due to
    the different config_lookup_string api


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.26-1
changelog:
  - rebased to 0.9.26
  - package renamed to lldpad
  - enahanced functionality (LLDP supported as well as DCBX)


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.32-1
changelog:
  - rebased to 0.9.32 (various enhancements and bugfixes, see 
    lldpad-0.9.32-relnotes.txt on http://e1000.sf.net for complete list)


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.38-1
changelog:
  - rebased to 0.9.38 (various enhancements and bugfixes, see 
    lldpad-0.9.38-relnotes.txt on http://e1000.sf.net for complete list)


author: Petr Sabata <psabata@redhat.com> - 0.9.41-1
changelog:
  - 0.9.41 bump
  - New BR: autotools, flex
  - Buildroot garbage removed
  - Devel post and preun scriptlets sanitized


author: Petr Sabata <contyk@redhat.com> - 0.9.42-1
changelog:
  - 0.9.42 bump (massive patches cleanup)
  - Remove obsolete defattr
  - Remove COPYING and README from devel subpackage


author: Petr Sabata <contyk@redhat.com> - 0.9.42-2
changelog:
  - Introduce systemd unit file, drop SysV support
  - Call systemctl instead of service and chkconfig
  - Enable the service only on new installation (post)
  - Clean exit patch


author: Petr Sabata <contyk@redhat.com> - 0.9.43-2
changelog:
  - Apply various upstream 0.9.43 bugfixes
  - Include not yet accepted Jens Osterkamp's patch to fix bug #720080
  - Whitespace cleanup, phew


author: Petr Šabata <contyk@redhat.com> - 0.9.46-1
changelog:
  - 0.9.46 bump
  - 802.1Qaz fixes to enable support on not CEE DCBX-enabled hardware
  - 802.1Qbg EVB module support
  - lldpad now supports bonded interfaces


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.9.46-6
changelog:
  - Add upstream patch to build against libnl3
  - Drop legacy dcbd packaging support, we've not shipped it since F-13


author: Chris Leech <cleech@redhat.com> - 1.0.1-3.git986eb2e
changelog:
  - 1303439 package should not attempt to own /etc/bash_completion.d
  - fix more build warning in rawhide


author: Aaron Conole <aconole@redhat.com> - 1.0.1-14.git036e314
changelog:
  - Update to branch-1.1 compatibility
  - Fixes to avoid assert in the agent state machine
  - Remove the memory constraint on the event socket buffer (#1554110)


author: Brian C. Lane <bcl@redhat.com> 28.14.63-1
changelog:
  - Handle all possible dnf group_install errors (bcl)
    Related: rhbz#1947958
  - runtime-install: Install nvme-cli tool (bcl)
    Related: rhbz#1903339


author: Brian C. Lane <bcl@redhat.com> 28.14.64-1
changelog:
  - mkksiso: Check the length of the filenames (bcl)
    Related: rhbz#2028048
  - mkksiso: Check the iso's arch against the host's (bcl)
    Related: rhbz#2028048
  - mkksiso: Add missing implantisomd5 tool requirements (bcl)
    Related: rhbz#2028048
  - mkksiso: Raise error if no volume id is found (bcl)
    Related: rhbz#2028048
  - mount: Add aarch64 and s390x support to IsoMountopoint (bcl)
    Resolves: rhbz#2028089
  - mkksiso: Skip mkefiboot for non-UEFI isos (bcl)
    Resolves: rhbz#2028097
  - mkksiso: Add -joliet-long (bcl)
    Resolves: rhbz#2028044
  - mkksiso: Return 1 on errors (bcl)
    Resolves: rhbz#2028048
  - Increase boot.iso rootfs to 4GiB (bcl)
    Resolves: rhbz#2028059
  - Fix specfile to match the one from dist-git (bcl)
    Related: rhbz#2001942


author: Brian C. Lane <bcl@redhat.com> 28.14.67-1
changelog:
  - mkksiso: Fix the order of the ppc mkisofs command (bcl)
    Related: rhbz#2049205
  - mkksiso: mkfsiso argument order matters (bcl)
    Resolves: rhbz#2049205
  - mkksiso: Improve debug message about unsupported arch (bcl)
    Related: rhbz#2049190
  - mkksiso: Add kickstart to s390x cdboot.prm (bcl)
    Resolves: rhbz#2049190


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.1-1
changelog:
  - New upstream release 5.1.1
  - Fix detection of readline during compile (iow add readline support back)


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.1-2
changelog:
  - Only link /usr/bin/lua with readline / do not link %{_libdir}/liblua-5.1.so
    with readline so that we don't cause any License troubles for packages
    linking against liblua-5.1.so, otherwise lua could drag the GPL only readline
    lib into the linking of non GPL apps.


author: Tim Niemueller <tim@niemueller.de> - 5.1.3-3
changelog:
  - own $libdir/lua/5.1 and $datadir/lua/5.1. These are the standard package
    search path for Lua. Packaging them properly allows for easy creation of
    Lua addon packages.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.3-4
changelog:
  - Not only own $libdir/lua/5.1 and $datadir/lua/5.1 but also $libdir/lua
    and $datadir/lua for proper removal of these dirs upon lua removal


author: Tim Niemueller <tim@niemueller.de> - 5.1.3-5
changelog:
  - Provide lua = 5.1, this way add-on packages can easily depend on the Lua
    base version and expect certain paths for packages


author: Tim Niemueller <tim@niemueller.de> - 5.1.4-7
changelog:
  - Add patch to from lua.org with smaller bugfixes
  - sed -i -e 's/5\.1\.3/5.1.4/g' on autotoolize patch, bug #641144


author: Hans de Goede <hdegoede@redhat.com> - 5.2.2-3
changelog:
  - Drop compat-lua-libs package, as there now is a separate compat-lua
    package (including a -devel)


author: Siddhesh Poyarekar <sid@reserved-bit.com> - 2.1.0-0.10beta3
changelog:
  - Add upstream bug fixes from the v2.1 branch.
  - Add bug fixes from https://github.com/siddhesh/LuaJIT.git
  - Incorporate tests and benchmarks from LuaJIT-test-cleanup.


author: Siddhesh Poyarekar <sid@reserved-bit.com> - 2.1.0-0.13beta3
changelog:
  - arm: Fix up condition codes for conditional arithmetic insn.
  - bugfix: fixed a segfault when unsinking 64-bit pointers.
  - Remove setrlimit on FreeBSD.
  - test: Check for package.searchers only in compat5.2.


author: Mat Booth <mat.booth@redhat.com> - 0:3.6.2-15
changelog:
  - Fix failure to build from source
  - Use ivy-local correctly and switch away from obsolete maven macros


author: Julio Merino <jmmv@google.com> 0.1-2
changelog:
  - Made lutok-devel depend on lua-devel (needed for c_gate.hpp).
  - Forced lutok and lutok-devel to depend on Lua 5.1; 5.2 is not supported
    by Lutok 0.1.


author: Julio Merino <jmmv@google.com> 0.2-2
changelog:
  - Added the lutok-tests package providing the run-time tests of Lutok, readily
    runnable by the end users.


author: Julio Merino <jmmv@google.com> 0.3-1
changelog:
  - Package updated to Lutok 0.3.
  - Lutok now supports both Lua 5.1 and 5.2.  The specific version used in this
    release depends on the Fedora branch this package is built for.


author: lifeng <lifeng68@openeuler.org> - 4.0.3-2020112701
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: mount: make possible to bind mount /proc and /sys/fs.
  -	1. add check whether have /proc mounts entry, if has, skip the auto
  -	2. mount cgroup before do mount entrys
  -	3. pass if the mount on top of /proc and the source of the mount is a proc filesystem


author: wujing <wujing50@huawei.com> - 4.0.3-2020120701
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC: use path based unix domain sockets instead of abstract namespace sockets


author: wangfengtu<wangfengtu@huawei.com> - 4.0.3-2022052301
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: do not operate playload and attach cgroup if no controller found


author: Gao Xiang <hsiangkao@linux.alibaba.com> - 1.9.4-1
changelog:
  - Update to 1.9.4 in sync with Anolis 23
  - Switch back from Meson since its version is too low on Anolis 8.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 4.32.7-13
changelog:
  - Don't build the obsolete base package (#999937).
  - Fix base -libs package dependency in -devel package to be arch-specific.


author: Parag Nemade <pnemade AT redhat DOT com> - 1.7.0-7
changelog:
  - Add missing BuildRequires: glibc-locale-source
  - Resolves:rh#996429 - Mapping of ਠ is improper as per standard
  - Resolves:rh#903272 - [gu_IN] use Devanagari U0965 instead of U0AE5 in inscript2 map


author: Parag Nemade <pnemade AT redhat DOT com> - 1.8.0-0.1.RC1
changelog:
  - Update to 1.8.0 (#1523967)
  - Resolves:rh#1487512 - Can't enter words beginning "ld" with Tibetan-ewts keyboard


author: Bo Wang <wangbo@chengjieos.com> - 4.5.0-202009041228.p0.1
changelog:
  - add ChengJieOS support
  - patch: 0001-machine-config-daemon-chengjieos-Add-ChengJieOS-support.patch


author: Parag Nemade <pnemade AT redhat DOT com> - 1.55-25
changelog:
  - Add Supplements: for https://fedoraproject.org/wiki/Packaging:Langpacks guidelines
  - Clean the specfile to follow current packaging guidelines


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.6-22.g
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  - https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.22.2-2
changelog:
  - use https://github.com/mate-desktop/mate-control-center/commit/3e4ccaf
  - force uniform size of icons in shell


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.24.0-2
changelog:
  - use https://github.com/mate-desktop/mate-menus/pull/77
  - fix icons in panel menu with pt and pt_BR locale
  - fix rhbz (#1808522)


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.24.0-3
changelog:
  - add upstream patch
  - fix pt and pt_BR locale translation issues
  - build all applets in-process for wayland
  - fix broken SVG icons
  - use https://github.com/mate-desktop/mate-panel/pull/1066


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.0-2
changelog:
  - Fix segfault from gdk_x11_get_server_time if not on X11
  - don't build with appindicator support for the moment
  - intial build for epel8


author: Adam Jackson <ajax@redhat.com> - 1.22.1-2
changelog:
  - Drop BuildRequires: libXxf86misc-devel, X servers haven't implemented that
    extension in 10+ years.


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.22.2-2
changelog:
  - fix problems with gnome-keyring-3.34
  - use https://github.com/mate-desktop/mate-session-manager/pull/223


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.24.0-2
changelog:
  - use https://github.com/mate-desktop/mate-terminal/commit/2030aa2
  - use https://github.com/mate-desktop/mate-terminal/pull/327
  - use https://github.com/mate-desktop/mate-terminal/pull/322
  - use https://github.com/mate-desktop/mate-terminal/commit/c317ee8
  - use https://github.com/mate-desktop/mate-terminal/pull/332


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 0:1.5.22-2.0.1
changelog:
  - Fix glibc2.32 build issue for better compatible with both glibc2.28 and glibc2.32
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 and gcc8 build


author: Severin Gehwolf <sgehwolf@redhat.com> - 2.10.1-4
changelog:
  - Add explicit requirement on javapackages-tools since launcher script
    uses java-functions. See RHBZ#1600426.


author: Yoshinori Matsunobu <Yoshinori.Matsunobu@gmail.com>
changelog:
  - (Note: All changelogs are written here: http://code.google.com/p/mysql-master-ha/wiki/ReleaseNotes )
  - Version 0.57


author: Kenny.Gryp <kenny@goss.be>
changelog:
  - Several bugfixes
  - IPV6 support
  - super_read_only support
  - enforce_storage_engine support
  - Version 0.58
  - With the help of Marcelo Altmann <marcelo.altmann@percona.com>


author: Uri Lublin <uril@redhat.com> - 2.4.8-1
changelog:
  - Update to 2.4.8 and pick up CVEs fixes
  - Resolves: rhbz#2050504 CVE-2022-23990
  - Resolves: rhbz#2057023 CVE-2022-25236
  - Resolves: rhbz#2057037 CVE-2022-25235
  - Resolves: rhbz#2057094 CVE-2022-25313
  - Resolves: rhbz#2057099 CVE-2022-25314
  - Resolves: rhbz#2057127 CVE-2022-25315


author: Christophe Fergeau <cfergeau@redhat.com> - 1.0.2k-1
changelog:
  - Sync with rhel 7.6 OpenSSL 1.0.2k+patches in order to get the latest security
    fixes
  - Related: rhbz#1615874


author: Miro Hrončok <mhroncok@redhat.com> - 2.1-4
changelog:
  - Subpackage python2-miniupnpc has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Petr Pisar <ppisar@redhat.com> - 2.1.0-1
changelog:
  - 2.1.0 bump
  - Upstream moved to <https://github.com/richgel999/miniz>
  - License changed from "Unlicense" to "MIT and Unlicense"
  - ABI changed, API preserved


author: Pavel Raiskup <praiskup@redhat.com> 2.9-1
changelog:
  - rpkg_preprocessor: Add a force_enable option (tstellar@redhat.com)
  - use TemplatedDictionary as standalone module (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 2.10-1
changelog:
  - do not allocate tty for podman (msuchy@redhat.com)
  - work-around bug setting propagation for recursive bind-mounts (david.ward@ll.mit.edu)
  - fix handling of essential mountpoints (david.ward@ll.mit.edu)
  - pre-create the dest directory in _copy_config


author: Pavel Raiskup <praiskup@redhat.com> 2.11-1
changelog:
  - mock: fix broken --help output
  - compress_logs: compress also after repo failures
  - move to libera.chat (msuchy@redhat.com)
  - Define _platform_multiplier macro (msuchy@redhat.com)
  - allow to --install external:* (msuchy@redhat.com)
  - move installation of external:* to separate function (msuchy@redhat.com)
  - honor --cwd for --shell (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 2.12-1
changelog:
  - don't set --cwd for --shell when we know it will fail (el7)
  - explicitly convert macro values to str (logans@cottsay.net)
  - disable versionlock DNF plugin by default (igor.raits@gmail.com)
  - move Requires of shadow-utils from mock-core-configs to mock-filesystem
    (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 2.13-1
changelog:
  - local repositories to use gpgcheck=0 by default
  - A new option --additional-package (for --rebuild)
  - external-deps: install pip packages to /usr
  - Install external deps into build chroot, not bootstrap
  - Migrate from optparse to argparse
  - mock: don't specify SOURCE when remounting bind-mounts
  - mock: add option --debug-config-expanded (sergio@serjux.com)
  - Fix use of deprecated function (xfgusta@gmail.com)
  - lvm_root: fix copy/paste error in a warning message (kdudka@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 2.15-1
changelog:
  - argparse: handle old-style commands *before* ignoring "--" (awilliam@redhat.com)
  - Update mock.1 (cheese@nosuchhost.net)


author: Pavel Raiskup <praiskup@redhat.com> 2.16-1
changelog:
  - disable system call filtering
  - pass env to podman run (dani@lapiole.org)
  - give user alternative help for missing 'epel-8-*' configs
  - podman, explictily specify stdin as tar source (vreeland.justin@gmail.com)
  - add a new 'ssl_extra_certs' option (patrick@laimbock.com)


author: Pavel Raiskup <praiskup@redhat.com> 36.3-1
changelog:
  - add EuroLinux 8 aarch64 (alex@euro-linux.com)
  - add HA and RS configs to EuroLinux configs (alex@euro-linux.com)
  - Add epel9-next configs (carl@george.computer)


author: Pavel Raiskup <praiskup@redhat.com> 36.4-1
changelog:
  - add CentOS Stream 9 + EPEL Next 9 (ngompa13@gmail.com)
  - add compatibility symlinks for EPEL 7 to centos+epel-7-* (ngompa13@gmail.com)
  - EPEL 7 for AArch64 and PPC64 are EOL (ngompa13@gmail.com)
  - resolve the multiple "local" repo collision (from multiple templates)
  - configure the alternative help for missing 'epel-8-*' configs
  - Fedora 33 is EOL
  - rhelepel moved to rhel+epel
  - EOL the EPEL Playground configs (ngompa13@gmail.com)
  - Add rocky+epel confs + Disable devel-debug (tucklesepk@gmail.com)
  - Rename epel to centos+epel (ngompa13@gmail.com)
  - fix the root name and remove Next from the EPEL 9 configs (ngompa13@gmail.com)
  - rename 'epel-next' to 'centos-stream+epel-next' (ngompa13@gmail.com)
  - add epel9 repos to epel9 template (carl@george.computer)
  - rhbz#2026571 - expand dnf_vars (msuchy@redhat.com)
  - oraclelinux+epel configs (carl@george.computer)
  - Add AlmaLinux+EPEL configs (ngompa13@gmail.com)
  - add navy-8-x86_64 (adil@linux.com)
  - use quay.io Almalinux image (gotmax@e.email)
  - use fully qualified bootstrap_image name (gotmax@e.email)
  - update almalinux-8.tpl bootstrap_image (gotmax@e.email)
  - add Koji local repos to CentOS Stream configs (ngompa13@gmail.com)
  - reduce packages installed in epel chroots (carl@george.computer)


author: Pavel Raiskup <praiskup@redhat.com> 37-1
changelog:
  - move CentOS/EPEL 8 configs to eol/
  - Fedora 36 branching, Rawhide == Fedora 37 now
  - depend on distribution-gpg-keys 1.64
  - drop failovermethod=priority from EL8 configs
  - Add Extras repo for CentOS Stream 9 (ngompa13@gmail.com)
  - remove el7 specific parts from the spec file (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 37.1-1
changelog:
  - drop EL7 related %build hack
  - link default.cfg file to the right EL N config file
  - Add centos-stream+epel-8 configs


author: Pavel Raiskup <praiskup@redhat.com> 37.2-1
changelog:
  - Update CentOS Stream 9 Extras repo to use correct key (ngompa@centosproject.org)
  - Add AlmaLinux+EPEL 8 for POWER (ppc64le) (ngompa13@gmail.com)
  - Add AlmaLinux 8 for POWER (ppc64le) (ngompa13@gmail.com)
  - Delete Fedora 37/Rawhide armhfp configs (miro@hroncok.cz)


author: Pavel Raiskup <praiskup@redhat.com> 37.3-1
changelog:
  - updated %description field
  - provide 'epel-9' symlinks for 'fedpkg mockbuild'
  - allow n-2 gpg key for Fedora ELN (msuchy@redhat.com)
  - added config "description" fields for --list-chroots (msuchy@redhat.com)


author: Honggang Li <honli@redhat.com> - 3.3.2-8
changelog:
  - Sync with Fedora build
  - Update to latest upstream release 3.3.2
  - Resolves: rhbz#1657316, rhbz#1732982, rhbz#1850080


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 4.1.1-1.0.1
changelog:
  - Add -fallow-argument-mismatch for compatible with gcc10 build
  - Do not require valgrind for loongarch64 (geliwei@openanolis.org)


author: Miro Hrončok <mhroncok@redhat.com> - 0.1.2-2
changelog:
  - Reduced BRs a lot (removed support for various stuff)
  - Make smbclient realized
  - Changed the description to the text from manual page


author: Miro Hrončok <mhroncok@redhat.com> - 0.3.0-1
changelog:
  - New version 0.3.0
  - Switch to waf
  - Add some tricks from openSUSE
  - Removed already included patch


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.1-1
changelog:
  - Update to 0.9.1
  - BR compat-lua-devel because mpv does not work with lua 5.3
  - Add BR lcms2-devel (#3643)
  - Removed --enable-joystick and --enable-lirc (no longer used)


author: Sérgio Basto <sergio@serjux.com> - 0.15.0-2
changelog:
  - Drop BR lirc, because support for LIRC has been removed in mpv 0.9.0.
  - Add license tag.
  - libmpv-devel does not need have same doc and license files.


author: Leigh Scott <leigh123linux@googlemail.com> - 0.19.0-3
changelog:
  - Update to 0.19.0
  - Add LDFLAGS so build is hardened
  - Fix CFLAGS
  - Make build verbose
  - Remove Requires pkgconfig from devel sub-package
  - Fix source tag


author: liweiganga <liweiganga@uniontech.com> - 1.2.0-1
changelog:
  - upstream release 1.2.0
  - fix: fix CVE-2016-10141、CVE-2016-7504、CVE-2016-9136、CVE-2017-5628、CVE-2016-9017、\
         CVE-2016-7506、CVE-2017-5627、CVE-2016-9108、CVE-2016-9294


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.01-23
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
  - Added BuildRequires: javapackages-local (tdawson@redhat.com)


author: Mat Booth <mat.booth@redhat.com> - 0.9.6-1
changelog:
  - Update to latest upstream version
  - Drop upstreamed patch
  - Obsolete the benchmark module
  - Add conditional minimal dependency build


author: Tom Stellard <tstellar@redhat.com> - 1.9.4-20
changelog:
  - Use make macros
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Modernize systemd and ldconfig packaging


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.13.01-3
changelog:
  - Fix use-after-free and heap buffer overflow vulnerabilities
  - Resolves: CVE-2017-10686, CVE-2017-11111


author: Michael Simacek <msimacek@redhat.com> - 2.13.02-1
changelog:
  - Update to upstream version 2.13.02
  - Resolves: CVE-2017-17810, CVE-2017-17811, CVE-2017-17812, CVE-2017-17813,
    CVE-2017-17814, CVE-2017-17815, CVE-2017-17816, CVE-2017-17817,
    CVE-2017-17818, CVE-2017-17819, CVE-2017-17820


author: flyos@mailoo.org
changelog:
  - Change the name of the package to nbci-blast+ to be avoid conflicts
    with ncbi-blast packaged in "ncbi" and to be aligned with other systems
    (e.g. Debian world)
  - Update to version 2.7.1
    * BLAST+ 2.7.1: October 23, 2017
    - Improvements::
    Provided an upper limit on the number of threads for BLAST+
    search applications.
    Improved performance of taxonomic name lookups.
    Fixed Mac installers so they are interoperable with other NCBI
    applications.
    Reduced the amount of locking in BLASTDB reading library (CSeqDB).
    - Bug fixes::
    Fixed race condition when using gilist parameter.
    Fixed culling_limit bug with HSPs from different strands
    Fixed dustmasker bug with long region of Ns
    Fixed bl2seq problem with HTML output
    * BLAST+ 2.6.0: January 09, 2017
    - New features::
    Handle bare accessions on blastdb_aliastool.
    Change defaults for output formats 6, 7, and 10 to incorporate
    version in accessions.
    - Improvements::
    Add support for NCBI_DONT_USE_LOCAL_CONFIG and
    NCBI_DONT_USE_NCBIRC environment variables.
    Better runtime performance in blastdbcmd when the entry_batch
    parameter is used.
    SAM output improvements.
    Changed gapped alignment starting point to minimize the chance to
    produce sub-optimal alignments.
    For custom matrices absent from the util/tables source file, use
    BLOSUM62 for reporting number of positives.
    Added long_seqids flag to blastdbcmd to use long (legacy) NCBI
    Seq-id format.
    - Bug fixes::
    Fixed issue with missing alignments in blastx.
    Fixed problem processing accession.version in makeblastdb.
    Fixed blastdbcmd problem with local IDs.
    Removed memory leak for multi-threaded runs.
    Fixed blastdbcmd crash when listing all entries and a sequence has
    no title.
    * BLAST+ 2.5.0: September 12, 2016
    - New features::
    Composition based statistics for rpstblastn.
    Added output format for taxonomic organism report.
    Support for bare accessions in FASTA and BLAST reports.
    - Improvements::
    - remote option connects to NCBI via HTTPS. This adds a dependency
    on GNUTLS (see https://www.ncbi.nlm.nih.gov/books/NBK279690/)
    Pre-fetch sequences for formatting.
    - Bug fixes::
    Fixed improper functioning of output format 6 tokens ssciname,
    staxid, sscinames and staxids.
    tblastn core-dumps in multi-threaded mode.
    Ensure stable sorting of results in multi-threaded mode.
    Fixed incorrect percent identity in tabular format for sequences
    containing selenocysteine.
    * BLAST+ 2.4.0: June 02, 2016
    - New features:
    Introduced multi-threaded traceback for blastp, blastx, tblastn
    and tblastx.
    Added new tabular format specifiers for taxonomic information
    (staxid, ssciname, scomname, sblastname, skingdom) that correspond to
    the first subject ID.
    - Improvements:
    Speed up makeblastdb runtime performance with input consisting of
    many ambiguities.
    Better support for 'bare' IDs in taxid_map option to makeblastdb.
    Score U (selenocysteine) as C (not X) in protein-protein and
    translated searches.
    - Bug fixes:
    Corrected E-value computation in finite-size correction.
    Removed memory leak from rpsblast.
    Made handling of ambiguities in subjects identical when using
    FASTA and BLAST database inputs.
    makeblastdb no longer replaces tabs in definition line by '#'.
    Corrected problem with spaces in database names on windows.
    Corrected handling of subject_loc.
    * BLAST+ 2.3.0: December 21, 2015
    - New features:
    Added new PSIBLAST command line options to support saving PSSM
    and checkpoint files for each iteration and calculate checkpoint and
    PSSM for the last iteration.
    Added unique subject sequence query coverage to tabular output.
    Added support single file JSON and XML2 Blast output format.
    Beta release of SAM output format.
    Treat N subject sequences, entered with the -subject argument
    (bl2seq mode), as one search set rather than N sets.
    - Improvements:
    makeblastdb ignores and warns users about empty sequences in
    input.
    BLAST+ only accepts "obinary" windowmasker files for performance
    reasons.
    - Bug fixes:
    Best hits processing multi-threaded context.
    Fixed memory leak when invoking composition based statistics with
    an argument of 2.
    Return non-zero exit code when failing to write output file.
    Use relative paths in XInclude file for multi-file XML2 output
    format.
    Fixed memory leak in blastx.
    Fixed inconsistent XML2 output to standard output vs. file.
    Fixed psiblast incorrectly processing large input MSA.
    Fixed bug when running BLAST+ on windows with multiple threads.
    * BLAST+ 2.2.31: May 18, 2015
    - New features:
    Added support for BLAST-XML2 specification.
    Added support for JSON Blast output format.
    - Improvements:
    Improved adaptive batch size algorithm to better handle small
    databases.
    Preface error/warning message(s) with name of the application.
    Allow multiple deflines even without GIs.
    Download more concise database information for -remote searches.
    - Bug fixes:
    Fixed problem with makeblastdb's -max_file_sz.
    Reenabled support for word size 5 in tblastn.
    Fixed memory initialization problems.
    Use score for sorting search results if evalue less than 1.0e-180.


author: flyos@mailoo.org
changelog:
  - Remove rpsblast from install to avoid file conflicts with "ncbi-blast"
    package from "ncbi" spec file


author: Pierre Bonamy <flyos@mailoo.org>
changelog:
  - Readded rpsblast and use update-alternatives to allow co-installation
    with ncbi-tools (blast+ has higher priority)


author: openEuler Buildteam <buildteam@openeuler.org> - 6.1-12
changelog:
  - Type:cves
  - ID:CVE-2019-17594  CVE-2019-17595
  - SUG:NA
  - DESC:fix CVE-2019-17594 and CVE-2019-17595


author: Severin Gehwolf <sgehwolf@redhat.com> - 0:1.9.22-8
changelog:
  - Add explicit requirement on javapackages-tools since nekohtml-filter
    script uses java-functions. See RHBZ#1600426.


author: Josef Ridky <jridky@redhat.com> - 1:5.8-19
changelog:
  - revert permission of config files to 600 (#1601060)
  - fix error message when the address specified by clientaddr option
    is wrong or cannot be bound (#1877375)
  - log error with /proc/net/if_inet6 only when IPv6 is enabled (#1824367)
  - fix issue with quoting empty passphrase (#1817225)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-21
changelog:
  - prevent parsing IP address twice (#1768908)
  - add support for digests detected from ECC certs (#1919714)
  - fix broken ErrorMsg at ucd-snmp (#1933150)
  - add support for intermediate certs (#1914656)
  - fix crash of certs with longer extension (#1908718)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-27
changelog:
  - fix memory leak due of proc file creating (#2105957)
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141901) and (#2141905)
  - fix memory leak when ipv6 disable set to 1 (#2151537)
  - fix proxy timeout issue (#2160723)


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.13.0-138
changelog:
  - Merging upstream branch-2.13 [RH git: 424b25f9ca]
      Commit list:
      85358e0a9f datapath-windows: Reset flow key after Ipv4 fragments are reassembled


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.13.0-139
changelog:
  - Merging upstream branch-2.13 [RH git: 37c2767bbd]
      Commit list:
      057a5b0708 ofproto-dpif-xlate: Fix check_pkt_larger incomplete translation.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.13.0-140
changelog:
  - Merging upstream branch-2.13 [RH git: 6a59db52e8]
      Commit list:
      9fa66631c2 flow: Consider dataofs when parsing TCP packets.
      cabeb5d056 tests/flowgen: Fix packet data endianness.
      0b8586fbeb ofproto: Fix resource usage explosion due to removal of large number of flows.
      34801d50e2 ofproto: Fix resource usage explosion while processing bundled FLOW_MOD.
      1910814e5e tests/flowgen: Fix length field of 802.2 data link header.
      6aac7758c0 ovs-lib: Backup and remove existing DB when joining cluster.
      a5e1af7b99 docs/dpdk: Fix install doc.
      6fb9d7ab08 ovs-save: Save igmp flows in ofp_parse syntax.
      0c93c71f8c dpdk: Use DPDK 19.11.10 release.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.13.0-141
changelog:
  - Merging upstream branch-2.13 [RH git: 035911bcc8]
      Commit list:
      0263845fde compat: handle NF_REPEAT error on nf_conntrack_in.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.13.0-142
changelog:
  - Merging upstream branch-2.13 [RH git: e2ae994435]
      Commit list:
      025ec93bc5 Prepare for 2.13.7.
      723e0727f3 Set release date for 2.13.6.
      d6d2dead72 ofproto-dpif-xlate: Snoop ingress packets and update neigh cache if needed.
      dc8b79ccf1 tnl-neigh-cache: Do not refresh the entry while revalidating.
      7e1c6034b5 tnl-neigh-cache: Include expected array sizes in prototypes.
      9c98116ac7 tnl-neigh-cache: Read/write expires atomically.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.13.0-143
changelog:
  - Merging upstream branch-2.13 [RH git: 52b03eee18]
      Commit list:
      d30d561bd9 ofproto-dpif: Fix memory leak in dpif/show-dp-features appctl.


author: zengwefeng<zwfeng@huawei.com> - 0.9.6-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:enable check while building
         parser_bison memleak symbol redefinition
         segtree memleaks in interval_map_decompose
         json Combining terse with json has no effect
         evaluate Reject quoted strings containing only wildcard
         Solves Bug 1462 nft j list set does not show counters
         json Fix memleak in set_dtype_json
         mnl reply netlink error message might be larger than MNL_SOCKET_BUFFER_SIZE


author: gaihuiying <gaihuiying1@huawei.com> - 0.9.6-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:evaluate disallow ct original s d ddr from maps
         evaluate disallow ct original s d ddr from concatena


author: huangyu <huangyu106@huawei.com> - 1:0.9.6-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:parser_json fix device parsing in netdev family
  src don't parse string as verdict in map


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.14.1-9
changelog:
  - Place 'mdns4_minimal' in /etc/nsswitch.conf after 'files' in /etc/nsswitch.conf,
    so that it ends up before 'resolve' (#1867830)


author: Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
changelog:
  - Initial import into Fedora Core, based on a CVS snapshot of
    the NSS_3_11_RTM tag
  - Fix up the pkcs11-devel subpackage to contain the proper headers
  - Build with RPM_OPT_FLAGS
  - No need to have rpath of /usr/lib in the pc file


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Kai Engert <kengert@redhat.com> - 3.11.5-1
changelog:
  - Update to 3.11.5
  - This update fixes two security vulnerabilities with SSL 2
  - Do not use -rpath link option
  - Added several unsupported tools to tools package


author: Kai Engert <kengert@redhat.com> - 3.11.5-2
changelog:
  - Fix rhbz#230545, failure to enable FIPS mode
  - Fix rhbz#220542, make NSS more tolerant of resets when in the
    middle of prompting for a user password.


author: Kai Engert <kengert@redhat.com> - 3.11.7-2
changelog:
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5.
  - Use a workaround to avoid mozilla bug 51429.


author: Kai Engert <kengert@redhat.com> - 3.11.7-10
changelog:
  - Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist
    our signed libraries and protect them from modification.


author: Kai Engert <kengert@redhat.com> - 3.11.99.3-2
changelog:
  - Build against gcc 4.3.0, use workaround for bug 432146
  - Run the test suite after the build and abort on failures.


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-3
changelog:
  - nss package should own /etc/prelink.conf.d folder, rhbz#452062
  - use upstream patch to fix test suite abort


author: Kai Engert <kaie@redhat.com> - 3.12.3-3
changelog:
  - ship .chk files instead of running shlibsign at install time
  - include .chk file in softokn-freebl subpackage
  - add patch for upstream nss bug 488350


author: Kai Engert <kaie@redhat.com> - 3.12.3-7
changelog:
  - re-enable test suite
  - add patch for upstream bug 488646 and add newer paypal
    certs in order to make the test suite pass


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-5
changelog:
  - updated pem module incorporates various patches
  - fix off-by-one error when computing size to reduce memory leak. (483855)
  - fix data type to work on x86_64 systems. (429175)
  - fix various memory leaks and free internal objects on module unload. (501080)
  - fix to not clone internal objects in collect_objects().  (501118)
  - fix to not bypass initialization if module arguments are omitted. (501058)
  - fix numerous gcc warnings. (500815)
  - fix to support arbitrarily long password while loading a private key. (500180)
  - fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-10
changelog:
  - must install libnssutil3.since nss-util is untagged at the moment
  - preserve time stamps when installing various files


author: Elio Maldonado+emaldona@redhat.com - 3.12.3.99.3-11
changelog:
  - split off nss-softokn and nss-util as subpackages with their own rpms
  - first phase of splitting nss-softokn and nss-util as their own packages


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-19
changelog:
  - remove patches that are now in nss-softokn and
  - remove spurious exec-permissions for nss.pc per rpmlint
  - single requires line in nss.pc.in


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-22
changelog:
  - Fix nss-config not to include nssutil
  - Add BuildRequires on nss-softokn and nss-util since build also runs the test suite


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-25
changelog:
  - Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn
  - Add a temprary hack to nss.pc.in to unblock builds


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-29
changelog:
  - Restoring patches 2 and 7 as we still compile all sources
  - Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-30
changelog:
  - Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766
  - Fixed requires and buildrequires as per recommendations in spec file review


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-2
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - No rpath-link in nss-softokn-config


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - PEM module implements memory management for internal objects - 509705
  - PEM module doesn't crash when processing malformed key files - 512019


author: Elio Maldonado<emaldona@redhat.com - 3.12.4-9
changelog:
  - Install blank databases and configuration file for system shared database
  - nsssysinit queries system for fips mode before relying on environment variable


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-13
changelog:
  - User no longer prompted for a password when listing keys an empty system db (#527048)
  - Fix setup-nsssysinit to handle more general formats (#527051)


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-13.1
changelog:
  - Require nss-softoken of same architecture as nss (#527867)
  - Merge setup-nsssysinit.sh improvements from F-12 (#527051)


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1
changelog:
  - Update to 3.12.5
  - Patch to allow ssl/tls clients to interoperate with servers that require renogiation


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.5
changelog:
  - Fix nsssysinit to set the default flags on the crypto module (#545779)
  - Remove redundant header from the pem module


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.6
changelog:
  - Fix nsssysinit to enable apps to use system cert store, patch contributed by David Woodhouse (#546221)
  - Fix spec so sysinit requires coreutils for post install scriplet (#547067)
  - Fix segmentation fault when listing keys or certs in the database, patch contributed by Kamil Dudka (#540387)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-1.1
changelog:
  - Using SSL_RENEGOTIATE_TRANSITIONAL as default while on transition period
  - Disabling ssl tests suites until bug 539183 is resolved


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-3
changelog:
  - Add sed to sysinit requires as setup-nsssysinit.sh requires it (#576071)
  - Update PayPalEE test cert with unexpired one (#580207)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-5
changelog:
  - Update pem source tar to pick up the following bug fixes:
  - PEM - Allow collect objects to search through all objects
  - PEM - Make CopyObject return a new shallow copy
  - PEM - Fix memory leak in pem_mdCryptoOperationRSAPriv


author: Elio Maldonado <emaldona@redhat.com> - 3.12.7-2
changelog:
  - Define NSS_USE_SYSTEM_SQLITE and remove unneeded patch
  - Add comments regarding an unversioned provides which triggers rpmlint warning
  - Build requires nss-softokn-devel >= 3.12.7


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Prevent disabling of nss-sysinit on package upgrade (#636787)
  - Create pkcs11.txt with correct permissions regardless of umask (#636792)
  - Setup-nsssysinit.sh reports whether nss-sysinit is turned on or off (#636801)
  - Added provides pkcs11-devel-static to comply with packaging guidelines (#609612)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-3
changelog:
  - Replace posttrans sysinit scriptlet with a triggerpostun one (#636787)
  - Fix and cleanup the setup-nsssysinit.sh script (#636792, #636801)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8.99.2-1
changelog:
  - Update to NSS_3_12_9_BETA2
  - Fix libpnsspem crash when cacert dir contains other directories (#642433)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-5
changelog:
  - Fix the earlier infinite recursion patch (#499444)
  - Remove a header that now nss-softokn-freebl-devel ships


author: Christopher Aillon <caillon@redhat.com> - 3.12.9-6
changelog:
  - Revert patches for 499444 as they use a C++ reserved word and
    cause compilation of Firefox to fail


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-10
changelog:
  - Fix cms headers to not use c++ reserved words (#676036)
  - Reenabling Bug 499444 patches
  - Fix to swap internal key slot on fips mode switches


author: Elio Maldonado <emaldona@redhat.com> - 3.12.10-4
changelog:
  - Enable pluggable ecc support (#712556)
  - Disable the nssdb write-access-on-read-only-dir tests when user is root (#646045)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.11-3
changelog:
  - Fix attempt to free initilized pointer (#717338)
  - Fix leak on pem_CreateObject when given non-existing file name (#734760)
  - Fix pem_Initialize to return CKR_CANT_LOCK on multi-treaded calls (#736410)


author: Elio Maldonado Batiz <emaldona@redhat.com> - 3.13.1-4
changelog:
  - Rebuild with nss-softokn from 3.12 in the buildroot
  - Allows the pem module to statically link against 3.12.x freebl
  - Required for using nss-3.13.x with nss-softokn-3.12.y for a merge inrto rhel git repo
  - Build will be temprarily placed on buildroot override but not pushed in bodhi


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-5
changelog:
  - Statically link the pem module against system freebl found in buildroot
  - Disabling sha224-related powerup selftest until we update softokn
  - Disable sha224 and pss tests which nss-softokn 3.12.x doesn't support


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-6
changelog:
  - Removed unwanted /usr/include/nss3 in front of the normal cflags include path
  - Removed unnecessary patch dealing with CERTDB_TERMINAL_RECORD, it's visible


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-7
changelog:
  - Resolves: Bug 750376 - nss 3.13 breaks sssd TLS
  - Fix how pem is built so that nss-3.13.x works with nss-softokn-3.12.y
  - Only patch blapitest for the lack of sha224 on system freebl
  - Completed the patch to make pem link against system freebl


author: elio maldonado <emaldona@redhat.com> - 3.13.1-9
changelog:
  - Revert to using current nss_softokn_version
  - Patch to deal with lack of sha224 is no longer needed


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-10
changelog:
  - Resolves: Bug 770682 - nss update breaks pidgin-sipe connectivity
  - NSS_SSL_CBC_RANDOM_IV set to 0 by default and changed to 1 on user request


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Pick up fixes from RHEL
  - Resolves: rhbz#800674 - Unable to contact LDAP Server during winsync
  - Resolves: rhbz#800682 - Qpid AMQP daemon fails to load after nss update
  - Resolves: rhbz#800676 - NSS workaround for freebl bug that causes openswan to drop connections


author: Elio Maldonado <emaldona@redhat.com> - 3.13.4-1
changelog:
  - Update to NSS_3_13_4_RTM
  - Update the nss-pem source archive to the latest version
  - Remove no longer needed patches
  - Resolves: Bug 806043 - use pem files interchangeably in a single process
  - Resolves: Bug 806051 - PEM various flaws detected by Coverity
  - Resolves: Bug 806058 - PEM pem_CreateObject leaks memory given a non-existing file name


author: Elio Maldonado <emaldona@redhat.com> - 3.13.4-2
changelog:
  - Resolves: Bug 805723 - Library needs partial RELRO support added
  - Patch coreconf/Linux.mk as done on RHEL 6.2


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-4
changelog:
  - Resolves: Bug 830410 - Missing Requires %{?_isa}
  - Use Requires: %{name}%{?_isa} = %{version}-%{release} on tools
  - Drop zlib requires which rpmlint reports as error E: explicit-lib-dependency zlib
  - Enable sha224 portion of powerup selftest when running test suites
  - Require nspr 4.9.1


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-8
changelog:
  - Rebase pem sources to fedora-hosted upstream to pick up two fixes from rhel-6.3
  - Resolves: rhbz#847460 - Fix invalid read and free on invalid cert load
  - Resolves: rhbz#847462 - PEM module may attempt to free uninitialized pointer
  - Remove unneeded fix gcc 4.7 c++ issue in secmodt.h that actually undoes the upstream fix


author: Elio Maldonado <emaldona@redhat.com> - 3.14-0.1.rc.1
changelog:
  - Update to NSS_3_14_RC1
  - update nss-589636.patch to apply to httpdserv
  - turn off ocsp tests for now
  - remove no longer needed patches
  - remove headers shipped by nss-util


author: Elio Maldonado <emaldona@redhat.com> - 3.14-2
changelog:
  - Add secmodt.h to the headers installed by nss-devel
  - nss-devel must install secmodt.h which moved from softoken to pk11wrap with nss-3.14


author: Elio Maldonado <emaldona@redhat.com> - 3.14-5
changelog:
  - Fix the spec file so sechash.h gets installed
  - Resolves: rhbz#871882 - missing header: sechash.h in nss 3.14


author: Elio Maldonado <emaldona@redhat.com> - 3.14-6
changelog:
  - Fix a previous unwanted merge from f18
  - Update the SS_SSL_CBC_RANDOM_IV patch to match new sources while
  - Keeping the patch disabled while we are still in rawhide and
  - State in comment that patch is needed for both stable and beta branches
  - Update .gitignore to download only the new sources


author: Elio Maldonado <emaldona@redhat.com> - 3.14-7
changelog:
  - Add a dummy source file for testing /preventing fedpkg breakage
  - Helps test the fedpkg new-sources and upload commands for breakage by nss updates
  - Related to Bug 872124 - nss 3.14 breaks fedpkg new-sources


author: Elio Maldonado <emaldona@redhat.com> - 3.14-8
changelog:
  - Fix pk11wrap locking which fixes 'fedpkg new-sources' and 'fedpkg update' hangs
  - Bug 872124 - nss-3.14 breaks fedpkg new-sources
  - Fix should be considered preliminary since the patch may change upon upstream approval


author: Elio Maldonado <emaldona@redhat.com> - 3.14-9
changelog:
  - Disable bypass code at build time and return failure on attempts to enable at runtime
  - Bug 806588 - Disable SSL PKCS #11 bypass at build time


author: Elio Maldonado <emaldona@redhat.com> - 3.14-11
changelog:
  - Bug 879978 - Install the nssck.api header template in a place where mod_revocator can access it
  - Install nssck.api in /usr/includes/nss3


author: Elio Maldonado <emaldona@redhat.com> - 3.14-12
changelog:
  - Bug 879978 - Install the nssck.api header template where mod_revocator can access it
  - Install nssck.api in /usr/includes/nss3/templates


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - sync up pem rsawrapr.c with softoken upstream changes for nss-3.14.3
  - Resolves: rhbz#908257 - CVE-2013-1620 nss: TLS CBC padding timing attack
  - Resolves: rhbz#896651 - PEM module trashes private keys if login fails
  - Resolves: rhbz#909775 - specfile support for AArch64
  - Resolves: rhbz#910584 - certutil -a does not produce ASCII output


author: Kai Engert <kaie@redhat.com> - 3.14.3-9
changelog:
  - Configure libnssckbi.so to use the alternatives system
    in order to prepare for a drop in replacement.


author: Elio Maldonado <emaldona@redhat.com> - 3.15-0.1.beta1.1
changelog:
  - Update to NSS_3_15_BETA1
  - Update spec file, patches, and helper scripts on account of a shallower source tree


author: Elio Maldonado <emaldona@redhat.com> - 3.15-0.1.beta1.2
changelog:
  - Fix incorrect path that hid failed test from view
  - Add ocsp to the test suites to run but ...
  - Temporarily disable the ocsp stapling tests
  - Do not treat failed attempts at ssl pkcs11 bypass as fatal errors


author: Elio Maldonado <emaldona@redhat.com> - 3.15-5
changelog:
  - Install man pages for nss-tools and the nss-config and setup-nsssysinit scripts
  - Resolves: rhbz#606020 - nss security tools lack man pages


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-2
changelog:
  - Fix errors in the man pages
  - Resolves: rhbz#984106 - Add missing option descriptions to man pages for {cert|cms|crl}util
  - Resolves: rhbz#982856 - Fix path to script in man page for nss-sysinit


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-3
changelog:
  - Add man page for pkcs11.txt configuration file and cert and key databases
  - Resolves: rhbz#985114 - Provide man pages for the nss configuration files


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-4
changelog:
  - Cleanup spec file to address most rpmlint errors and warnings
  - Using double percent symbols to fix macro-in-comment warnings
  - Ignore unversioned-explicit-provides nss-system-init per spec comments
  - Ignore invalid-url Source0 as it comes from the git lookaside cache
  - Ignore invalid-url Source12 as it comes from the git lookaside cache


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-5
changelog:
  - Resolves: rhbz#996639 - Minor bugs in nss man pages
  - Fix some typos and improve description and see also sections


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-7
changelog:
  - Update pem sources to pick up a patch applied upstream which a faulty merge had missed
  - The pem module should not require unique file basenames


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-1
changelog:
  - Update to NSS_3_15_2_RTM
  - Update iquote.patch on account of modified prototype on cert.h installed by nss-devel


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-2
changelog:
  - Use the full sources from upstream
  - Bug 1019245 - ECDHE in openssl available -> NSS needs too for Firefox/Thunderbird


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-1
changelog:
  - Update to NSS_3_15_3_RTM
  - Resolves: Bug 1031897 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws
  - Fix option descriptions for setup-nsssysinit manpage
  - Fix man page of nss-sysinit wrong path and other flaws
  - Document email option for certutil manpage
  - Remove unused patches


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3.1-1
changelog:
  - Update to nss-3.15.3.1 (hg tag NSS_3_15_3_1_RTM)
  - Resolves: Bug 1040282 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)
  - Resolves: Bug 1040192 - nss-3.15.3.1 is available


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-1
changelog:
  - Update to nss-3.15.4 (hg tag NSS_3_15_4_RTM)
  - Resolves: Bug 1049229 - nss-3.15.4 is available
  - Update pem sources to latest from the interim upstream for pem
  - Remove no longer needed patches
  - Update pem/rsawrapr.c patch on account of upstream changes to freebl/softoken
  - Update iquote.patch on account of upstream changes


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-3
changelog:
  - Update pem sources to latest from nss-pem upstream
  - Pick up pem fixes verified on RHEL and applied upstream
  - Fix a problem where same files in two rpms created rpm conflict
  - Move some nss-sysinit manpages tar archives to the %files the
  - All man pages are listed by name so there shouldn't be wildcard inclusion
  - Add support for ppc64le, Resolves: Bug 1052545


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-5
changelog:
  - Revert previous change that moved some sysinit manpages
  - Restore nss-sysinit manpages tar archives to %files sysinit
  - Removing spurious wildcard entry was the only change needed


author: Elio Maldonado <emaldona@redhat.com> - 3.15.5-1
changelog:
  - Update to nss-3.15.5
  - Temporarily requiring only nss_softokn_version >= 3.15.4
  - Fix location of sharedb files and their manpages
  - Move cert9.db, key4.db, and pkcs11.txt to the main package
  - Move nss-sysinit manpages tar archives to the main package
  - Resolves: Bug 1066877 - nss-3.15.5 is available
  - Resolves: Bug 1067091 - Move sharedb files to the %files section


author: Elio Maldonado <emaldona@redhat.com> - 3.16.0-1
changelog:
  - Update to nss-3.16.0
  - Cleanup the copying of the tools man pages
  - Update the iquote.patch on account of the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-1
changelog:
  - Update to nss-3.16.1
  - Update the iquote patch on account of the rebase
  - Improve error detection in the %section
  - Resolves: Bug 1094702 - nss-3.16.1 is available


author: Jaromir Capik <jcapik@redhat.com> - 3.16.1-2
changelog:
  - Replacing ppc64 and ppc64le with the power64 macro
  - Related: Bug 1052545 - Trivial change for ppc64le in nss spec


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-4
changelog:
  - Remove unwanted source directories at end of %prep so it truly does it
  - Skip the cipher suite already run as part of the nss-softokn build


author: Elio Maldonado <emaldona@redhat.com> - 3.17.3-2
changelog:
  - Install pp man page in alternative location
  - Resolves: Bug 987189 - nss-tools RPM conflicts with perl-PAR-Packer


author: Elio Maldonado <emaldona@redhat.com> - 3.17.3-3
changelog:
  - Resolves: Bug 987189 - nss-tools RPM conflicts with perl-PAR-Packer
  - Install pp man page in %{_datadir}/doc/nss-tools/pp.1
  - Use %{_mandir} instead of /usr/share/man as more generic


author: Elio Maldonado <emaldona@redhat.com> - 3.17.4-2
changelog:
  - Disable SSL2 support at build time
  - Fix syntax errors in various shell scripts
  - Resolves: Bug 1189952 - Disable SSL2 and the export cipher suites


author: Elio Maldonado <emaldona@redhat.com> - 3.17.4-3
changelog:
  - Commented out the export NSS_NO_SSL2=1 line to not disable ssl2
  - Backing out from disabling ssl2 until the patches are fixed


author: Elio Maldonado <emaldona@redhat.com> - 3.17.4-5
changelog:
  - Disable export suites and SSL2 support at build time
  - Fix syntax errors in various shell scripts
  - Resolves: Bug 1189952 - Disable SSL2 and the export cipher suites


author: Elio Maldonado <emaldona@redhat.com> - 3.19.2-3
changelog:
  - Create on the fly versions of sslcov.txt and sslstress.txt that disable tests for SSL2 and EXPORT ciphers


author: Elio Maldonado <emaldona@redhat.com> - 3.20.0-3
changelog:
  - Fix patches that disable ssl2 and export cipher suites support
  - Fix libssl patch that disable ssl2 & export cipher suites to not disable RSA_WITH_NULL ciphers
  - Fix syntax errors in patch to skip ssl2 and export cipher suite tests
  - Turn ssl2 off by default in the tstclnt tool
  - Disable ssl stress tests containing TLS RC4 128 with MD5


author: Elio Maldonado <emaldona@redhat.com> - 3.20.0-5
changelog:
  - Enable ECC cipher-suites by default [hrbz#1185708]
  - Implement corrections requested in code review


author: Elio Maldonado <emaldona@redhat.com> - 3.20.0-6
changelog:
  - Enable ECC cipher-suites by default [hrbz#1185708]
  - Split the enabling patch in two for easier maintenance
  - Remove unused patches rendered obsolete by prior rebase


author: Elio Maldonado Batiz <emaldona@redhat.com> - 3.21.1-2
changelog:
  - Update to NSS 3.21
  - Package listsuites as part of the unsupported tools set
  - Resolves: Bug 1279912 - nss-3.21 is available
  - Resolves: Bug 1258425 - Use __isa_bits macro instead of list of 64-bit
  - Resolves: Bug 1280032 - Package listsuites as part of the nss unsupported tools set


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-4
changelog:
  - Update %{nss_util_version} and %{nss_softokn_version} to 3.21.0
  - Resolves: Bug 1284095 - all https fails with sec_error_no_token


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-6
changelog:
  - Resolves: Bug 1299040 - Enable ssl_gtests upstream test suite
  - Remove 'export NSS_DISABLE_GTESTS=1' go ssl_gtests are built
  - Use %define when specifying the nss_tests to run


author: Elio Maldonado <emaldona@redhat.com> - 3.23.0-3
changelog:
  - Update pem sources to latest from nss-pem upstream
  - Resolves: Bug 1300652 - [PEM] insufficient input validity checking while loading a private key


author: Elio Maldonado <emaldona@redhat.com> - 3.23.0-5
changelog:
  - Load policy file if /etc/pki/nssdb/policy.cfg exists
  - Resolves: Bug 1157720 - NSS should enforce the system-wide crypto policy


author: Elio Maldonado <emaldona@redhat.com> - 3.23.0-7
changelog:
  - Change the POLICY_PATH to "/etc/crypto-policies/back-ends"
  - Regenerate the check policy patch with hg to provide more context


author: Elio Maldonado <emaldona@redhat.com> - 3.24.0-2.1
changelog:
  - Rebase to NSS 3.24.0
  - Restore setting the policy file location
  - Make ssl tests scripts aware of policy
  - Ajust tests data expected result for policy


author: Elio Maldonado <emaldona@redhat.com> - 3.24.0-2.2
changelog:
  - Allow application requests to disable SSL v2 to succeed
  - Resolves: Bug 1342158 - nss-3.24 does no longer support ssl V2, installation of IPA fails because nss init fails


author: Elio Maldonado <emaldona@redhat.com> - 3.24.0-2.3
changelog:
  - Apply the patch that was last introduced
  - Renumber and reorder some of the patches
  - Resolves: Bug 1342158


author: Elio Maldonado <emaldona@redhat.com> - 3.25.0-5
changelog:
  - Add support for conditionally ignoring the system policy (#1157720)
  - Remove unneeded test scripts patches in order to run more tests
  - Remove unneeded test data modifications from the spec file


author: Daiki Ueno <dueno@redhat.com> - 3.26.0-2
changelog:
  - Rebase to NSS 3.26.0
  - Update check policy file patch to better match what was upstreamed
  - Remove conditionally ignore system policy patch as it has been upstreamed
  - Skip ectest as well as ecperf, which are built as part of nss-softokn
  - Fix rpmlint error regarding %define usage


author: Daiki Ueno <dueno@redhat.com> - 3.28.1-4
changelog:
  - Add "Conflicts" with older firefox packages which don't have support
    for smaller curves added in NSS 3.28.1


author: Daiki Ueno <dueno@redhat.com> - 3.28.1-5
changelog:
  - Disable TLS 1.3
  - Add "Conflicts" with packages using older Mozilla codebase, which is
    not compatible with NSS 3.28.1
  - Remove NSS_ECC_MORE_THAN_SUITE_B setting, as it was removed in upstream


author: Daiki Ueno <dueno@redhat.com> - 3.31.0-3
changelog:
  - Move signtool to %_libdir/nss/unsupported-tools, for:
    https://fedoraproject.org/wiki/Changes/NSSSigntoolDeprecation


author: Kai Engert <kaie@redhat.com> - 3.33.0-4
changelog:
  - Update tests to be compatible with default NSS DB changed to sql
    (the default was changed in the nss-util package).


author: Daiki Ueno <dueno@redhat.com> - 3.33.0-6
changelog:
  - Make sure 32bit nss-pem always be installed with 32bit nss in
    multlib environment, patch by Kamil Dudka


author: Kai Engert <kaie@redhat.com> - 3.35.0-4
changelog:
  - Fix a compiler error with gcc 8, mozbz#1434070
  - Set NSS_FORCE_FIPS=1 at %build time, and remove from %check.


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-1.0
changelog:
  - Update to NSS 3.36.0
  - Add gcc-c++ to BuildRequires (C++ is needed for gtests)
  - Make test failure detection robuster


author: Daiki Ueno <dueno@redhat.com> - 3.36.1-1.0
changelog:
  - Update to NSS 3.36.1
  - Remove nss-3.14.0.0-disble-ocsp-test.patch
  - Fix partial injection of LDFLAGS
  - Remove NSS_NO_PKCS11_BYPASS, which is no-op in upstream


author: Kai Engert <kaie@redhat.com> - 3.36.1-1.2
changelog:
  - Backport upstream addition of nss-policy-check utility, rhbz#1428746,
    includes required fixes for mozbz#1296263 and mozbz#1474875


author: Daiki Ueno <dueno@redhat.com> - 3.38.0-1.1
changelog:
  - Install crypto-policies configuration file for
    https://fedoraproject.org/wiki/Changes/NSSLoadP11KitModules
  - Port enable-fips-when-system-is-in-fips-mode.patch from RHEL-7
  - Use %ldconfig_scriptlets
  - Remove needless use of %defattr, by Jason Tibbitts


author: Daiki Ueno <dueno@redhat.com> - 3.39.0-1.2
changelog:
  - Update nss-dsa.patch to not advertise DSA signature algorithm
  - Update PayPal test certs for testing


author: Daiki Ueno <dueno@redhat.com> - 3.39.0-1.3
changelog:
  - Backport upstream fixes for rhbz#1649026, rhbz#1608895, rhbz#1644854
  - Document PKCS #11 URI
  - Add warning when adding module with modutil while p11-kit is enabled


author: Bob Relyea <rrelyea@redhat.com> - 3.39.0-1.4
changelog:
  - Support for IKE/IPsec typical PKIX usage so libreswan can use nss
    without rejecting certs based on EKU


author: Daiki Ueno <dueno@redhat.com> - 3.41.0-3
changelog:
  - Fix the last change
  - Add --no-reload option to update-crypto-policies to avoid
    unnecessary restart of daemons


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-1
changelog:
  - Update to NSS 3.44
  - Define NSS_SEED_ONLY_DEV_URANDOM=1 to exclusively use getentropy
  - Use %autosetup
  - Clean up manual pages generation
  - Clean up %check
  - Remove prelink dependency, which is not available in RHEL-8
  - Remove upstreamed patches


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-3
changelog:
  - Disable TLS 1.3 under FIPS mode
  - Disable RSASSA-PKCS1-v1_5 in TLS 1.3
  - Fix post-handshake auth transcript calculation if
    SSL_ENABLE_SESSION_TICKETS is set
  - Revert the change to use XDG basedirs (mozilla#818686)


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-6
changelog:
  - Add continuous RNG test required by FIPS
  - fipstest: use CKM_TLS12_MASTER_KEY_DERIVE instead of vendor specific mechanism


author: Bob Relyea <rrelyea@redhat.com> - 3.44.0-8
changelog:
  - CKM_NSS_IKE1_APP_B_PRF_DERIVE was missing from the mechanism list, preventing
    PK11_Derive*() from using it. Add gtests for the PK11_Derive interface for
    all the CKM_NSS_IKE*_DERIVE mechanism.


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-12
changelog:
  - Install cmac.h required by blapi.h (#1764513)
  - Fix out-of-bounds write in NSC_EncryptUpdate (#1775913)


author: Daiki Ueno <dueno@redhat.com> - 3.53.1-2
changelog:
  - Fix regression in MD5 disablement (#1849938)
  - Include rsa_pkcs1_* in signature_algorithms extension (#1847945)


author: Daiki Ueno <dueno@redhat.com> - 3.53.1-3
changelog:
  - Disable NSS_HASH_ALG_SUPPORT as well for MD5 (#1849938)
  - Adjust for update-crypto-policies packaging change (#1848649)
  - Fix compilation with -Werror=strict-prototypes (#1843417)


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-7
changelog:
  - Fix attribute decryption issue where the private key components
    integrity check on private attributes where not being checked.


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-11
changelog:
  - Fix issue with upgradedb where upgradedb expects standard to
    generate dbm databases, not sql databases (default in RHEL8)


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-12
changelog:
  - fips need to reject small primes even if they are approved
  - code to autodetect whether or not to use the cache needs to do so
    in a way that doesn't mess with filesystem negative file caching.
  - add kdf selftests


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-14
changelog:
  - Add support for enable/disable in policy. Now if your policy
    file has disallow=x enable=y it will act just like our other 
    libraries.


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-16
changelog:
  - Fix the following CVE
  - CVE-2020-12403 chacha-poly issues
  - CVE-2020-12400 constant time ECC.
  - CVE-2020-6829  constant time ECC.


author: Bob Relyea <rrelyea@redhat.com> - 3.67.0-4
changelog:
  - Better fix for the sdb timeout. The issue wasn't a race, it was
    the sqlite timeout waiting to begin a transaction under heavy
    thread usage.


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-1
changelog:
  - Rebase to NSS 3.79
  - Set FIPS Module ID
  - skip attribute verification on attributes with default values
  - don't export trust objects if they are default trust objects from dbm
  - add dbtool to nss-tools


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-5
changelog:
  - FIPS 140-3 changes
  -  Reject Small RSA keys, 1024 bit keys are marked as FIP OK when verifying, reject
     signature keys by policy
  -  Allow applications to retrigger selftests on demand.


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-8
changelog:
  - Update fips default for pk12util to AES rather than TDES
  - Fix bug in pkcs12 files with null passwords


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-10
changelog:
  - Fix QA found failures:
  -  remove extra '+' from sslpolicy.txt file causing test error values
  -  only use GRND_RANDOM if the kernel is in FIPS mode.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - update the restore defaults for pkcs12


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 3.101.0-7.01
changelog:
  - disable unit test
  - cherry-pick `add sw patch #ce8dbcf775a1bf3d6bd0d5de53d3688e7caa00db`. (nijie@wxiat.com)


author: Kamil Páral <kparal@redhat.com> - 2:2017.3.23-10
changelog:
  - add Recommends: ntfs-3g-system-compression. That allows people with
    Windows 10 to read system files.


author: Kay Hayen<kay.hayen@gmail.com> - 0.6.7
changelog:
  - adapted for Fedora31 and CentOS 8, Python3 enhancements
  - added Python3 for openSUSE 15 or higher too.


author: Severin Gehwolf <sgehwolf@redhat.com> - 3.3.1-20
changelog:
  - Add explicit javapackages-tools requirement for objectweb-asm3-processor
    script which uses java-functions.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Richard W.M. Jones <rjones@redhat.com> - 0.2.0-2rwmj20080321
changelog:
  - Build camomile subpackages because the camomile dependency is
    rather large.  However we can't build camomile on ppc64 yet so
    don't build those subpackages there.


author: Richard W.M. Jones <rjones@redhat.com> - 0.2.0-3.20080321patch
changelog:
  - Change the naming scheme to conform with "Snapshot packages" guideline.
  - Don't duplicate all the docs in camomile-devel.
  - Disable documentation.  Wants 'fop', but 'fop' throws a giant Java
    exception when present.


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.0-1
changelog:
  - New upstream version 0.3.0.
  - Big patch no longer required (integrated with upstream).
  - findlib < 1.2.1-3 known not to work with this.
  - build/ -> _build/
  - Re-enable documentation.
  - Prevent *.o files from being distributed.
  - Distribute *.cmx and *.mli files.


author: S390x secondary arch maintainer <fedora-s390x@lists.fedoraproject.org>
changelog:
  - ExcludeArch sparc64, s390, s390x as we don't have OCaml on those archs
    (added sparc64 per request from the sparc maintainer)


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.3-1
changelog:
  - New upstream release 0.3.3 (mainly small bugfixes).
  - This requires ocaml-fileutils 0.4.0 and is incompatible with
    any earlier version.
  - Fixed a number of rpmlint warnings with *.ml files in the
    non-devel package.


author: Karsten Hopp <karsten@redhat.com> 0.3.3-7
changelog:
  - build with 'make all', not 'make' as that defaults to 'make test' and fails on ppc64
    due to the missing gettext-camomile


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.5-18
changelog:
  - Subpackage ocaml-gettext-camomile-devel should depend on
    ocaml-gettext-camomile (thanks: Pino Toscano).


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.7-1
changelog:
  - Update to new upstream version 0.3.7.
  - New URL.
  - Include upstream patches since 0.3.7 was released.


author: Wenchao Hao <haowenchao@huawei.com> - 0.100-7
changelog:
  - DESC: delete -S git from 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-Fix-the-issue-of-ignoring-the-return-value.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0002-Fix-compiler-issue-when-not-in-security-mode.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0003-Fix-586-compile-issue-and-remove-Werror.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0004-Do-not-install-isnsd.socket-in-isnsd.service.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0005-libisns-remove-sighold-and-sigrelse.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0006-isnsadm-Fix-unparse-command-line-options-V-and-r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0007-isnsd-socket-Make-sure-to-create-IPv6-socket-default.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch

  , and delete BuildRequires git


author: Jon Maloy <jmaloy@redhat.com> - 12.0.5-2
changelog:
  - ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119284]
  - Resolves: bz#2119284
    (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-8.7.0])


author: Miroslav Rezanina <mrezanin@redhat.com> 12.1.0-1
changelog:
  - Rebase to open-vm-tools 12.1.0
  - Resolves: bz#2121196
    ([ESXi][RHEL8]Open-vm-tools release 12.1.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> 12.1.5-1
changelog:
  - Rebase to open-vm-tools 12.1.5 [bz#2150188]
  - Resolves: bz#2150188
    (ESXi][RHEL8]Open-vm-tools release 12.1.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-1
changelog:
  - Rebase to open-vm-tools 12.2.0 [bz#2177068]
  - Resolves: bz#2177068
    ([ESXi][RHEL8]open-vm-tools version 12.2.0 has been released - please rebase)


author: Jon Maloy <jmaloy@redhat.com> - 12.2.0-3
changelog:
  - ovt-Remove-some-dead-code.patch [bz#2215563]
  - Resolves: bz#2215563
    ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1
changelog:
  - Rebase to open-vm-tools 12.2.5 [bz#2214861]
  - Resolves: bz#2214861
    ([ESXi][RHEL8]open-vm-tools version 12.2.5 has been released - please rebase)
  - Resolves: bz#2216415
    ([ESXi][RHEL8] URL in service unit files are started from http instead of https)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-2.el8_9
changelog:
  - ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [bz#2236543]
  - Resolves: bz#2236543
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 12.2.5-3.el8_9
changelog:
  - ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-2447]
  - Resolves: RHEL-2447
    ([RHEL8.9][ESXi]Latest version of open-vm-tools breaks VM backups)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-3.1
changelog:
  - ovt-Don-t-accept-tokens-with-unrelated-certs.patch [RHEL-14648]
  - ovt-File-descriptor-vulnerability-in-the-open-vm-tools-v.patch [RHEL-14682]
  - Resolves: RHEL-14648
    (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-8.9.0])
  - Resolves: RHEL-14682
    (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-8.9.0])


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1.18.2-4
changelog:
  - remove support for no longer supported Fedora versions (<=25)
  - fix: add %{_libdir}/cmake/OpenAL directory to devel
  - fix: s/_datarootdir/_datadir/ as this package does not uses datarootdir
    but datadir
  - fix: add %{_datadir}/openal to main package as well and to %exclude
    %{_datadir}/openal/{alsoftrc.sample,presets/presets.txt} as those files
    are not needed
  - removed Group fields
    (https://fedoraproject.org/wiki/Packaging:Guidelines#Tags_and_Sections)
  - add use more macros (%autosetup, %make_build, %make_install)


author: Hans de Goede <hdegoede@redhat.com> - 1.18.2-5
changelog:
  - Allow pulseaudio to move openal-soft output streams (rhbz#1544381)
  - Fix release -4 not building (rhbz#1544012)
  - Drop unnecessary qt-devel BuildRequires (we also BuildRequire qt5-devel)


author: Miroslav Lichvar <mlichvar@redhat.com> - 3.6.1-7
changelog:
  - build setlayout with hardening LDFLAGS (#1548830)
  - use macro for ldconfig scriptlets
  - add gcc to build requirements


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-2
changelog:
  - fix cmakes location
  - remove -DENABLE_PKG_CONFIG=OFF (it was neither defined nor used)
  - remove confusing comment
  - WITH_GDAL=OFF (gdal dependency has been already removed)
    Related: #1694647


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-5
changelog:
  - Move libopencv_{calib3d,cvv,hfs}.so.* to their proper packages
  - Fix issues found by rpmdiff
    Related: #1694647


author: liulong <liulong20@huawei.com> - 2.4.50-3
changelog:
  - Type:cves
  - ID:NA
  - SUG:restart
  - DESC:fix CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224 CVE-2020-36225 CVE-2020-36226 CVE-2020-36227 CVE-2020-36228 CVE-2020-36229 CVE-2020-36230


author: Radek Novacek <rnovacek@redhat.com> 0.2.2-3
changelog:
  - Fix LMI_IPElementSettingData refering bridging master setting instead of slave setting
  - Support connections that has interface-name option specified
  - Fix that bond slave names are not going above 2
  - allow virtual device name change for bonds


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - fbtl-posix: link to common_ompio
  - Require environment(modules)
  - Revert upstream commit c36d7459b6331c4da82
  - Resolves: rhbz#1974780, rhbz#1971771


author: Adam Williamson <awilliam@redhat.com> - 2.1.1-5
changelog:
  - Disable RDMA support on 32-bit ARM (#1484155)
  - Disable hanging opal_fifo test on ppc64le (gh #2526 / #2966)


author: Jarod Wilson <jarod@redhat.com> - 3.1.2-1
changelog:
  - Update to upstream 3.1.2 bug fix release
  - Fix some paths in module file, strip out python2 bits
  - Related: rhbz#1623441


author: Jarod Wilson <jarod@redhat.com> - 3.1.2-4
changelog:
  - Further tweaks to compile/linker flag usage
  - Related: rhbz#1624157
  - Move modulefiles under /etc like our other suppored mpi providers
  - Resolves: rhbz#1632399


author: Denis Arnaud <denis.arnaud_fedora@m4x.org> - 5.2.122-20
changelog:
  - Suppressed the dependency on SCons (as autotools are used instead)
  - Fixed the generated version minor number (from 127 to 122)
  - Fixed the target include directory


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.0.0-15
changelog:
  - Removed dependency on net-tools
    Resolves: #1496138
  - Removed init script, Group tag and macro from changelog in spec file
  - Slightly modified openssl-1.1 fix to be able build the package
    with OpenSSL version lower than 1.1


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-9
changelog:
  - Fixed Timing Oracle in RSA Decryption
    Resolves: CVE-2022-4304
  - Fixed Double free after calling PEM_read_bio_ex
    Resolves: CVE-2022-4450
  - Fixed Use-after-free following BIO_new_NDEF
    Resolves: CVE-2023-0215
  - Fixed X.400 address type confusion in X.509 GeneralName
    Resolves: CVE-2023-0286


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-13
changelog:
  - allow building on ARM architectures (#245417)
  - use reference timestamps to prevent multilib conflicts (#218064)
  - -devel package must require pkgconfig (#241031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-14
changelog:
  - use localhost in testsuite, hopefully fixes slow build in koji
  - CVE-2007-3108 - fix side channel attack on private keys (#250577)
  - make ssl session cache id matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-16
changelog:
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309801)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321191)
  - add alpha sub-archs (#296031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-2
changelog:
  - enable some new crypto algorithms and features
  - add some more important bug fixes from openssl CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-3
changelog:
  - set default paths when no explicit paths are set (#418771)
  - do not add tls extensions to client hello for SSLv3 (#422081)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-9
changelog:
  - fix CVE-2008-0891 - server name extension crash (#448492)
  - fix CVE-2008-1672 - server key exchange message omit crash (#448495)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-1
changelog:
  - new upstream version with necessary soname bump (#455753)
  - temporarily provide symlink to old soname to make it possible to rebuild
    the dependent packages in rawhide
  - add eap-fast support (#428181)
  - add possibility to disable zlib by setting
  - add fips mode support for testing purposes
  - do not null dereference on some invalid smime files
  - add buildrequires pkgconfig (#479493)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-6
changelog:
  - drop the temporary triggerpostun and symlinking in post
  - fix the pkgconfig files and drop the unnecessary buildrequires
    on pkgconfig as it is a rpmbuild dependency (#481419)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-7
changelog:
  - must also verify checksum of libssl.so in the FIPS mode
  - obtain the seed for FIPS rng directly from the kernel device
  - drop the temporary symlinks


author: Tomas Mraz <tmraz@redhat.com> 0.9.8k-1
changelog:
  - update to new upstream release (minor bug fixes, security
    fixes and machine code optimizations only)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8k-6
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS
  - make CA dir absolute path (#445344)
  - change default length for RSA key generation to 2048 (#484101)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.11.beta4
changelog:
  - update to new upstream version, no soname bump needed
  - fix CVE-2009-3555 - note that the fix is bypassed if SSL_OP_ALL is used
    so the compatibility with unfixed clients is not broken. The
    protocol extension is also not final.


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.12.beta4
changelog:
  - keep the beta status in version number at 3 so we do not have to rebuild
    openssh and possibly other dependencies with too strict version check


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.13.beta4
changelog:
  - disable enforcement of the renegotiation extension on the client (#537962)
  - add fixes from the current upstream snapshot


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.17.beta4
changelog:
  - upstream fix compression handling on session resumption
  - various null checks and other small fixes from upstream
  - upstream changes for the renegotiation info according to the latest draft


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.19.beta4
changelog:
  - fix CVE-2009-4355 - leak in applications incorrectly calling
    CRYPTO_free_all_ex_data() before application exit (#546707)
  - upstream fix for future TLS protocol version handling


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.21.beta5
changelog:
  - gracefully handle zero length in assembler implementations of
    OPENSSL_cleanse (#564029)
  - do not fail in s_server if client hostname not resolvable (#561260)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0c-2
changelog:
  - listen on ipv6 wildcard in s_server so we accept connections
    from both ipv4 and ipv6 (#601612)
  - fix openssl speed command so it can be used in the FIPS mode
    with FIPS allowed ciphers


author: Tomas Mraz <tmraz@redhat.com> 1.0.0c-3
changelog:
  - add -x931 parameter to openssl genrsa command to use the ANSI X9.31
    key generation method
  - use FIPS-186-3 method for DSA parameter generation
  - add OPENSSL_FIPS_NON_APPROVED_MD5_ALLOW environment variable
    to allow using MD5 when the system is in the maintenance state
    even if the /proc fips flag is on
  - make openssl pkcs12 command work by default in the FIPS mode


author: Tomas Mraz <tmraz@redhat.com> 1.0.0d-3
changelog:
  - add support for VIA Padlock on 64bit arch from upstream (#617539)
  - do not return bogus values from load_certs (#652286)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0d-6
changelog:
  - add support for newest Intel acceleration improvements backported
    from upstream by Intel in form of a separate engine


author: Tomas Mraz <tmraz@redhat.com> 1.0.0d-7
changelog:
  - correct openssl cms help output (#636266)
  - more tolerant starttls detection in XMPP protocol (#608239)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0d-8
changelog:
  - drop the separate engine for Intel acceleration improvements
    and merge in the AES-NI, SHA1, and RC4 optimizations
  - add support for OPENSSL_DISABLE_AES_NI environment variable
    that disables the AES-NI support


author: Tomas Mraz <tmraz@redhat.com> 1.0.0e-3
changelog:
  - do not use AVX instructions when osxsave bit not set
  - add direct known answer tests for SHA2 algorithms


author: Tomas Mraz <tmraz@redhat.com> 1.0.0g-1
changelog:
  - new upstream release fixing CVE-2012-0050 - DoS regression in
    DTLS support introduced by the previous release (#782795)


author: Tomas Mraz <tmraz@redhat.com> 1.0.1-0.1.beta2
changelog:
  - new upstream release from the 1.0.1 branch, ABI compatible
  - add documentation for the -no_ign_eof option


author: Tomas Mraz <tmraz@redhat.com> 1.0.1-0.2.beta3
changelog:
  - epoch bumped to 1 due to revert to 1.0.0g on Fedora 17
  - new upstream release from the 1.0.1 branch
  - fix s390x build (#798411)
  - versioning for the SSLeay symbol (#794950)
  - add -DPURIFY to build flags (#797323)
  - filter engine provides
  - split the libraries to a separate -libs package
  - add make to requires on the base package (#783446)


author: Tomas Mraz <tmraz@redhat.com> 1.0.1c-3
changelog:
  - fix DSA key generation in FIPS mode (#833866)
  - allow duplicate FIPS_mode_set(1)
  - enable build on ppc64 subarch (#834652)


author: Tomas Mraz <tmraz@redhat.com> 1.0.1c-4
changelog:
  - do not move libcrypto to /lib
  - do not use environment variables if __libc_enable_secure is on
  - fix strict aliasing problems in modes


author: Tomas Mraz <tmraz@redhat.com> 1.0.1c-7
changelog:
  - add missing initialization of str in aes_ccm_init_key (#853963)
  - add important patches from upstream CVS
  - use the secure_getenv() with new glibc


author: Tomas Mraz <tmraz@redhat.com> 1.0.1c-8
changelog:
  - use 1024 bit DH parameters in s_server as 512 bit is not allowed
    in FIPS mode and it is quite weak anyway


author: Tomas Mraz <tmraz@redhat.com> 1.0.1c-11
changelog:
  - add script for renewal of a self-signed cert by Philip Prindeville (#871566)
  - allow X509_issuer_and_serial_hash() produce correct result in
    the FIPS mode (#881336)


author: Kyle McMartin <kyle@redhat.com> 1.0.1e-21
changelog:
  - [arm] use elf auxv to figure out armcap.c instead of playing silly
    games with SIGILL handlers. (#1006474)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-26
changelog:
  - make DTLS1 work in FIPS mode
  - avoid RSA and DSA 512 bits and Whirlpool in 'openssl speed' in FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-32
changelog:
  - disable verification of certificate, CRL, and OCSP signatures
    using MD5 if OPENSSL_ENABLE_MD5_VERIFY environment variable
    is not set


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-35
changelog:
  - drop weak ciphers from the default TLS ciphersuite list
  - add back some symbols that were dropped with update to 1.0.1 branch
  - more FIPS validation requirement changes


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-36
changelog:
  - fix CVE-2013-6449 - crash when version in SSL structure is incorrect
  - more FIPS validation requirement changes


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-37
changelog:
  - fix CVE-2013-4353 - Invalid TLS handshake crash
  - fix CVE-2013-6450 - possible MiTM attack on DTLS1


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-39
changelog:
  - make expiration and key length changeable by DAYS and KEYLEN
    variables in the certificate Makefile (#1058108)
  - change default hash to sha256 (#1062325)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-40
changelog:
  - print ephemeral key size negotiated in TLS handshake (#1057715)
  - add DH_compute_key_padded needed for FIPS CAVS testing


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1g-1
changelog:
  - new upstream release 1.0.1g
  - do not include ECC ciphersuites in SSLv2 client hello (#1090952)
  - fail on hmac integrity check if the .hmac file is empty


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1h-3
changelog:
  - make FIPS mode keygen bit length restriction enforced only when
    OPENSSL_ENFORCE_MODULUS_BITS is set
  - fix CVE-2014-0224 fix that broke EAP-FAST session resumption support


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1h-5
changelog:
  - disable SSLv2 and SSLv3 protocols by default (can be enabled
    via appropriate SSL_CTX_clear_options() call)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1i-1
changelog:
  - new upstream release fixing multiple moderate security issues
  - for now disable only SSLv2 by default


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1j-3
changelog:
  - disable SSLv3 by default again (mail servers and possibly
    LDAP servers should probably allow it explicitly for legacy
    clients)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1k-2
changelog:
  - test in the non-FIPS RSA keygen for minimal distance of p and q
    similarly to the FIPS RSA keygen


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1k-6
changelog:
  - fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey()
  - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison
  - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1k-7
changelog:
  - drop the AES-GCM restriction of 2^32 operations because the IV is
    always 96 bits (32 bit fixed field + 64 bit invocation field)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2e-1
changelog:
  - minor upstream release 1.0.2e fixing moderate severity security issues
  - enable fast assembler implementation for NIST P-256 and P-521
    elliptic curves (#1164210)
  - filter out unwanted link options from the .pc files (#1257836)
  - do not set serial to 0 in Makefile.certificate (#1135719)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2f-1
changelog:
  - minor upstream release 1.0.2f fixing security issues
  - add support for MIPS secondary architecture


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2g-2
changelog:
  - reenable SSL2 in the build to avoid ABI break (it does not
    make the openssl vulnerable to DROWN attack)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2i-1
changelog:
  - minor upstream release 1.0.2i fixing security issues
  - move man pages for perl based scripts to perl subpackage (#1377617)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.0b-4
changelog:
  - use a random seed if the supplied one did not generate valid
    parameters in dsa_builtin_paramgen2()


author: Tomáš Mráz <tmraz@redhat.com> 1.1.0c-2
changelog:
  - EC curve NIST P-224 is now allowed, still kept disabled in TLS due
    to less than optimal security


author: Tomáš Mráz <tmraz@redhat.com> 1.1.0c-3
changelog:
  - revert SSL_read() behavior change - patch from upstream (#1394677)
  - fix behavior on client certificate request in renegotiation (#1393579)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.0e-1
changelog:
  - update to upstream version 1.1.0e
  - add documentation of the PROFILE=SYSTEM special cipher string (#1420232)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.0f-1
changelog:
  - update to upstream version 1.1.0f
  - SRP and GOST is now allowed, note that GOST support requires
    adding GOST engine which is not part of openssl anymore


author: Tomáš Mráz <tmraz@redhat.com> 1.1.0g-6
changelog:
  - one more try to apply RPM_LD_FLAGS properly (#1541033)
  - dropped unneeded starttls xmpp patch (#1417017)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-1
changelog:
  - update to the final 1.1.1 version
  - for consistent support of security policies we build
    RC4 support in TLS (not default) and allow SHA1 in SECLEVEL 2
  - use only /dev/urandom if getrandom() is not available
  - disable SM4


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1b-1
changelog:
  - update to the 1.1.1b release
  - EVP_KDF API backport from master
  - SSH KDF implementation for EVP_KDF API backport from master
  - add S390x chacha20-poly1305 assembler support from master branch


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1c-2
changelog:
  - do not try to use EC groups disallowed in FIPS mode
    in TLS
  - fix Valgrind regression with constant-time code


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1c-6
changelog:
  - backport of S390x ECC CPACF enhancements from master
  - FIPS mode: properly disable 1024 bit DSA key generation
  - FIPS mode: skip ED25519 and ED448 algorithms in openssl speed
  - FIPS mode: allow AES-CCM ciphersuites


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1c-8
changelog:
  - fix CVE-2019-1547 - side-channel weak encryption vulnerability
  - fix CVE-2019-1563 - padding oracle in CMS API
  - fix CVE-2019-1549 - ensure fork safety of the DRBG
  - fix handling of non-FIPS allowed EC curves in FIPS mode
  - fix TLS compliance issues


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1c-14
changelog:
  - fix incorrect error return value from FIPS_selftest_dsa
  - S390x: properly restore SIGILL signal handler


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1g-7
changelog:
  - Disallow dropping Extended Master Secret extension
    on renegotiation
  - Return alert from s_server if ALPN protocol does not match
  - SHA1 is allowed in @SECLEVEL=2 only if allowed by
    TLS SigAlgs configuration


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1g-9
changelog:
  - Rewire FIPS_drbg API to use the RAND_DRBG
  - Use the well known DH groups in TLS even for 2048 and 1024 bit parameters


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1g-12
changelog:
  - Implemented new FIPS requirements in regards to KDF and DH selftests
  - Disallow certificates with explicit EC parameters


author: Sahana Prasad <sahana@redhat.com> 1.1.1g-14
changelog:
  - Fix CVE-2021-3450 openssl: CA certificate check bypass with
    X509_V_FLAG_X509_STRICT
  - Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing


author: Daiki Ueno <dueno@redhat.com> 1.1.1g-16
changelog:
  - Use AI_ADDRCONFIG only when explicit host name is given
  - Allow only curves defined in RFC 8446 in TLS 1.3


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-2
changelog:
  - Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
  - Using safe primes for FIPS DH self-test


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes bugs in s390x AES code.
  - Uses the first detected address family if IPv6 is not available
  - Reverts the changes in https://github.com/openssl/openssl/pull/13305
    as it introduces a regression if server has a DSA key pair, the handshake fails
    when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
    it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
    will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
    known - https://trac.nginx.org/nginx/ticket/2071#comment:1
    As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
    could early callback instead of servername callback.
  - Resolves: rhbz#1978214
  - Related: rhbz#1934534


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-6
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Resolves: rhbz#2067144


author: maqi <maqi@uniontech.com> - 1:1.1.1k-6.01
changelog:
  - fix: delete empty link(bugid:123783)
  - build: build i686 and build without check
  - cve: CVE-2022-1292.
  - arch: Support loongarch64


author: David Sommerseth <dazo@eurephia.org> - 2.4.6-3
changelog:
  - Enable the asynchronous push feature, which can improve connect speeds with slow authentication backends


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.5-1
changelog:
  - Update to openwsman-2.6.5
  - Simplify python binding build and drop python2 subpackage
  - Fix malformed HTTP 200 status line


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.5-3
changelog:
  - Fix wrong SSL_CTX_set_cipher_list() retval check
  - Explicitly disable build of java bindings (build fails if java-devel is installed)


author: Peter Hanecak <hany@hany.sk> - 0.7.7-1
changelog:
  - Update to 0.7.7
  - Dropped pathes (both CVEs fixed in 0.7.7)
  - Added BuildRequires: gcc
    (https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot)


author: Fabian Deutsch <fabian.deutsch@gmx.de> - 0.4.3-2
changelog:
  - Running autoreconf to prevent building problems.
  - Added missing files to docs.
  - Added examples to devel docs.


author: Michael Mraka <michael.mraka@redhat.com> 5.11.99-1
changelog:
  - removed %%defattr from specfile
  - remove install/clean section initial cleanup
  - removed Group from specfile
  - removed BuildRoot from specfiles


author: Tomas Kasparek <tkasparek@redhat.com> 5.11.99-4
changelog:
  - remove osad files when packaging only for python3 (tkasparek@redhat.com)
  - osa-dispatcher is dependent on spacewalk-backend which is in python2
    (tkasparek@redhat.com)
  - run osa-dispatcher on python3 when possible (tkasparek@redhat.com)
  - don't build python2 subpackages on F28 + update python requires
    (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 5.11.99-6
changelog:
  - prefer to build for python3... (nils@redhat.com)
  - use %python2_* instead of unversioned macros (nils@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 5.11.99-7
changelog:
  - Resolves: #1607909 - remove TLSv1 hardcode and let client/server negotiate
    (tkasparek@redhat.com)


author: Ondrej Budai <obudai@redhat.com> - 17-1
changelog:
  - New upstream release 17 (rhbz#1831653)
  - Obsolete lorax-composer in favor of osbuild-composer (rhbz#1836844)


author: Christian Kellner <ckellner@redhat.com> - 12-1
changelog:
  - Sync with Fedora and use upstream release 12
  - Specify the exact version in the 'python3-osbuild' requirement
    to avoid the library and the main binary being out of sync.
  - osbuild-ostree sub-package with the necessary bits to create
    OSTree based images
  - Turn off dependency generator for internal components
  - Add NEWS.md file with the release notes and man pages


author: Christian Kellner <ckellner@redhat.com> - 14-1
changelog:
  - Upstream release 14
  - Install schemata to <datadir>/osbuild/schemas and include a
    symlink to it in /usr/lib/osbuild/schemas
  - The directories /usr/lib/osbuild/{assemblers, stages}/osbuild
    got removed. Changes to osbuild made them obsolete.


author: Christian Kellner <ckellner@redhat.com> - 14-2
changelog:
  - Add draft4-validator.json patch
    python3-jsonschema in RHEL currently has version 2.6.0 which
    has support validating up to and including draft4 of jsonschema.
    See https://github.com/osbuild/osbuild/pull/394


author: Christian Kellner <ckellner@redhat.com> - 15-2
changelog:
  - Add a patch to allow org.osbuild.files source in the new format
    but without actually containing the secrets key.
    Taken from merged PR: https://github.com/osbuild/osbuild/pull/416


author: Christian Kellner <ckellner@redhat.com> - 17-1
changelog:
  - Upstream release 17
  - Add custom SELinux policy that lets osbuild set labels inside
    the build root that are unknown to the host.


author: Christian Kellner <ckellner@redhat.com> - 18-2
changelog:
  - Add patch to not pass floats to curl in the files source
    https://github.com/osbuild/osbuild/pull/459


author: Christian Kellner <ckellner@redhat.com> - 18-3
changelog:
  - Add patch to allow nnp and nosuid domain transitions
    https://github.com/osbuild/osbuild/pull/495


author: Christian Kellner <ckellner@redhat.com> - 22-1
changelog:
  - Upstream release 22
  - Remove all patches since they are all in osbuild-22.
  - bubblewrap replaced systemd-nspawn for sandboxing; change the
    requirements accordingly.


author: Christian Kellner <ckellner@redhat.com> - 23-2
changelog:
  - Explicilty require python3. See the comment above the Requires
    for an explanation why this is needed.


author: Christian Kellner <ckellner@redhat.com> - 23-3
changelog:
  - only disable the dep. generator for runners, remove explicity
    python3 requirement again. The dependency should be picked up
    via the dependency generator now.


author: Christian Kellner <ckellner@redhat.com> - 25-1
changelog:
  - Upstream 25 release
  - First tech preview of the new manifest format. Includes
    various new stages and inputs to be able to build ostree
    commits contained in a oci archive.


author: Christian Kellner <christian@kellner.me> - 30-1
changelog:
  - Upstream release 30
  - Ship osbuild-mpp in new tools sub-package.
  - Remove executable bit from schemata files.


author: Dumitru Ceara <dceara@redhat.com> - 20.06.2-5
changelog:
  - Backport "lex: Allow unmasked bits in value/mask tokens." (#1812820)
  - Backport "ovn-nbctl: Deal with nb_cfg overflows." (#1873455)
  - Backport "pinctrl: Fix incorrect warning message for multicast querier." (#1875727)


author: Dumitru Ceara <dceara@redhat.com> - 20.06.2-6
changelog:
  - Backport "chassis: Fix the way encaps are updated for a chassis record." (#1873032)
  - Backport "chassis: Fix chassis_private record updates when the system-id changes." (#1873032)


author: Numan Siddique <nusiddiq@redhat.com> - 20.06.2-10
changelog:
  - Backport "ovn-northd: Fix multiple ARP replies for SNAT entries configured on a distributed router." (#1878451)


author: Numan Siddique <nusiddiq@redhat.com> - 20.06.2-11
changelog:
  - Backport "ovn-controller: Persist the conjunction ids allocated for conjuctive matches." (#1858878)
  - Backport "I-P engine: Provide the option to store client data in engine ctx." (#1858878)


author: Charles Duffy <cduffy@spamcop.net>
changelog:
  - upgraded to 4.13
   - added 7z (not just 7za) with a shell wrapper
   - added gcc-c++ to the BuildRequires list


author: Marcin Zajączkowski <mszpak@wp.pl>
changelog:
  - added 7za script and moved SFX module to _datadir/name/ to allow 7za & 7z
     use it simultaneously
   - returned to plugins in separate package


author: Matthias Saou <matthias@saou.eu> 4.14.01-1
changelog:
  - Spec file cleanup.
  - Fix wrapper scripts : Double quote $@ for filenames with spaces to work.
  - Move files from /usr/share to /usr/libexec.
  - Various other minor changes.


author: Matthias Saou <matthias@saou.eu> 4.39-1
changelog:
  - Update to 4.39.
  - Remove no longer needed gcc 4.1 patch.
  - Use the gcc_4.X makefile.
  - Remove RAR licensed files and RAR license itself (#190277).


author: Matthias Saou <matthias@saou.eu> 4.47-1
changelog:
  - Update to 4.47.
  - Include now required patch to exclude removed Rar bits from makefiles.
  - Switch to using "make install" for installation... so patch and hack.
  - Use the asm makefile for x86_64, so build require yasm for it too.
  - Add ppc64 to the main %ifarch.
  - Remove no longer included Codecs and Formats dirs (7z.so replaces them?).
  - Remove our wrapper scripts, since the install script creates its own.


author: Matthias Saou <matthias@saou.eu> 9.20.1-1
changelog:
  - Update to 9.20.1 (#688564).
  - Update norar, nostrip and install patches.
  - Minor clean ups : Don't use trivial macros + new email address.
  - Don't require the main package from the plugins package (#690551).
  - Use the any_cpu_gcc_4.X makefile for ppc* since the ppc specific one is gone.


author: Sérgio Basto <sergio@serjux.com> - 15.09-1
changelog:
  - Update to p7zip_15.09
  - Use cmake.
  - Refactor norar patch.
  - Deleted: p7zip_9.20.1-execstack.patch (upstreamed)
  - Deleted: p7zip_9.20.1-install.patch (upstreamed)
  - Deleted: p7zip_9.20.1-nostrip.patch (upstreamed)


author: Sérgio Basto <sergio@serjux.com> - 15.09-6
changelog:
  - Stating in License.txt file that we removed non-Free unrar code
    from sources (#190277)
  - Fix incorrect fsf address in the license files.
  - Add p7zip_15.09-no7zG_and_7zFM.patch in a diferent patch.


author: Sérgio Basto <sergio@serjux.com> - 15.14-1
changelog:
  - Update to 15.14 .
  - Rebase norar_cmake.patch
  - Minor improvement in snippet of documentation.
  - Drop patch1, from changelog build on s390 is fixed.
  - Drop p7zip-15.09-CVE-2015-1038.patch, from changelog if fixed.
  - Drop upstreamed p7zip_15.09-incorrect-fsf-address.patch .
  - Drop p7zip_15.09-no7zG_and_7zFM.patch, p7zip build is fixed.
  - Add sub-package p7zip-gui with 7zG.


author: Sérgio Basto <sergio@serjux.com> - 15.14-2
changelog:
  - Fix non-executable-in-bin for p7zipForFilemanager.
  - Remove p7zip_compress2.desktop to not duplicate the menu entries.
  - Also build 7zFM, rebuild p7zip_15.14_src_all-norar.tar.bz2, to build 7zFM
    instead 7zFM_do_not_use.


author: Sérgio Basto <sergio@serjux.com> - 15.14.1-1
changelog:
  - Update to 15.14.1
  - Revert 7zFM build, upstream recomends not build it
    http://sourceforge.net/p/p7zip/bugs/175/


author: Tomas Hoger <thoger@redhat.com> - 16.02-7
changelog:
  - Add conditional for building with(out) GUI support.  Keep GUI enabled for
    Fedora and EPEL builds, but disabled for RHEL.
  - Add missing dependency - 7zG requires 7z.so, so p7zip-gui needs to require
    p7zip-plugins.


author: Sérgio Basto <sergio@serjux.com> - 16.02-9
changelog:
  - Security fix for CVE-2017-17969 (from Debian)
  - Add 05-hardening-flags.patch, 09-man-update.patch, 10-drop-fm-doc.patch
    and 14-Fix-g++-warning.patch patches from Debian, very small changes
    better documentation, compile flags and compile warning.


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-2
changelog:
  - Correctly get metadata for systemd agent names that end in '@'
  - Use correct OCF 1.1 syntax in ocf:pacemaker:Stateful meta-data
  - Fix regression in displayed times in crm_mon's fence history
  - Resolves: rhbz2032031
  - Resolves: rhbz2032032
  - Resolves: rhbz2031765


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-3
changelog:
  - Detect an unresponsive subdaemon
  - Handle certain probe failures as stopped instead of failed
  - Update pcmk_delay_base option meta-data
  - Avoid crash when using clone notifications
  - Retry Corosync shutdown tracking if first attempt fails
  - Improve display of failed actions
  - Resolves: rhbz1707851
  - Resolves: rhbz2039982
  - Resolves: rhbz2032032
  - Resolves: rhbz2040443
  - Resolves: rhbz2042367
  - Resolves: rhbz2042546


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.3-1
changelog:
  - Unable to show metadata for "service" agents with "@" and "." in the name
  - Resource ocf:pacemaker:attribute does not comply with the OCF 1.1 standard
  - Pacemaker does not convert & to &amp; when generating metadata for non-ocf agents
  - Rebase pacemaker on upstream 2.1.3 release
  - Resolves: rhbz2045110
  - Resolves: rhbz2049720
  - Resolves: rhbz2050259
  - Resolves: rhbz2072108


author: Lixin <lixinb@uniontech.com> - 2.1.4-5.01
changelog:
  - update : rebase to upstream 2.1.4-5
  - feat: Add environment variables CRM alert log level (Patch100)
  - feat: Add resource translatefile (Patch101)


author: Parag Nemade <pnemade AT redhat DOT com> - 0.0.2-12
changelog:
  - Add BuildRequires: gcc as per packaging guidelines
  - Added %license
  - Removed group tag
  - Used %autosetup


author: Weisson <Weisson@linux.alibaba.com> - 6.0.0-15.0.2
changelog:
  - cherry-pick `add sw arch #8df28831ab9ee0af53d8fa394c9f5cd1863d6e7d`.
  - cherry-pick `explicitly disable static lib #266b8d83eb0812ae4dca5661e9491329cd0d3111`.


author: Tadej Janež <tadej.j@nez.si> - 0.7.4-1
changelog:
  - Update to 0.7.4 release.
  - Drop OpenMP support patch which has been merged upstream.
  - Drop patch that uses /dev/urandom in tests since it has been merged upstream.
  - Modernize and clean-up SPEC file.


author: Tadej Janež <tadej.j@nez.si> - 0.8.0-1
changelog:
  - Update to 0.8.0 release
  - Add gcc-c++ to BuildRequires to account for
    https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot
  - Use make command instead of %{__make} as mandated in
    https://fedoraproject.org/wiki/Packaging:Guidelines#Macros


author: Michal Hlavinka <mhlavink@redhat.com> - 3.7.0-1
changelog:
  - pciutils updated to 3.7.0, add support for basic DVSEC and CXL DVSEC (#1856436)
  - add support for RCEC Associated Endpoint (#1856440)


author: yangmingtai <yangmingtai@huawei.com> - 10.35-4
changelog:
  - DESC:sync community patches
         backport-jit-fail-early-in-ffcps_-if-subject-shorter-than-off.patch
         backport-jit-fix-pcre2_jit_free_unused_memory-if-sljit-not-us.patch


author: lixin <lixinb@uniontech.com> - 0.10.14-5.03
changelog:
  - cve: CVE-2022-45442 
  - build: remove unneeded rubygem webrick
  - build: limit ruby version to 2.5.9
  - arch: remove i686


author: gil cattaneo <puntogil@libero.it> 0-0.18.128svn.20110310
changelog:
  - fix FTBFS rhbz#1239763,1307848
  - fix Url field
  - fix rpmlint problems
  - add maven metadata
  - adapt to current guideline


author: Paul Howarth <paul@city-fan.org> - 0.10-16
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.35-10
changelog:
  - Tweak for EPEL-8 build
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Fix permissions verbosely
    - Make %files list more explicit
    - Package README.md


author: Paul Howarth <paul@city-fan.org> - 1.2.9-1
changelog:
  - Update to 1.2.9
    - Use either Redis::Fast or Redis
    - Fix error when searchOn is used without fields


author: Paul Howarth <paul@city-fan.org> - 1.3.1-1
changelog:
  - Update to 1.3.1
    - Fix typo in Oracle.pm (GH#15)
    - Postgres: Ensure that returned @fields keep their original case (GH#17)


author: Paul Howarth <paul@city-fan.org> - 0.2-13
changelog:
  - EL-5 is EOL so Redis can be assumed to be available everywhere now
  - Drop now-redundant buildroot cleaning
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.71-10
changelog:
  - Drop POD patch, fixed in 1.67
  - Fix source URL to refer to current upstream maintainer
  - Escape macro used in changelog (#1527541)
  - Drop legacy Group: and BuildRoot: tags
  - Drop %defattr, redundant since rpm 4.4
  - Use %license where possible
  - Drop redundant buildroot cleaning
  - Don't need to remove empty directories from the buildroot
  - Simplify find command using -delete
  - Specify all build dependencies
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.11-12
changelog:
  - For EPEL, don't bother with optional test requiring Parallel::ForkManager
  - Use author-independent source URL


author: Petr Pisar <ppisar@redhat.com> - 1:0.80-8
changelog:
  - Remove perl-Extract-Archive-lzma-Compress-unLZMA subpackage because
    Compress::unLZMA is not packaged


author: Paul Howarth <paul@city-fan.org> - 1:0.08-1
changelog:
  - Update to 0.08
    - Switched to Dist::Zilla
    - Added version dependency for Algorithm::Diff in Array/Diff.pm
    - Added a bunch of entries to SEE ALSO


author: Paul Howarth <paul@city-fan.org> - 1:0.09-1
changelog:
  - Update to 0.09
    - Set minimum Perl version in metadata (GH#1)
    - Clarified in the doc that the arrays must be sorted (CPAN RT#39184)


author: Paul Howarth <paul@city-fan.org> - 0.27-1
changelog:
  - Update to 0.27
    - Force FreeRADIUS dictionary format when BEGIN-VENDOR directive is found
    - Load included files using the requested format
    - Added full support for octets type


author: Paul Howarth <paul@city-fan.org> - 0.29-1
changelog:
  - Update to 0.29
    - Fixed tagged integer attribute encoding
    - Fix tests if FreeRADIUS dictionary not available


author: Paul Howarth <paul@city-fan.org> - 0.31-1
changelog:
  - Update to 0.31
    - Fixed check_pwd() method when dictionaries are not loaded and attribute ID
      is used instead of Name


author: Paul Howarth <paul@city-fan.org> - 0.6-26
changelog:
  - Tweak for EPEL-8 build
    - Use author-independent source URL
    - Specify all build dependencies
    - Don't need to remove empty directories from the buildroot
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.22-1
changelog:
  - Update to 0.22
    - Use cleaner wrap_op_checker() API to control op checking
    - Use core's Perl_check_t typedef instead of inventing our own


author: Paul Howarth <paul@city-fan.org> - 1.16-1
changelog:
  - Update to 1.16
    - Added 5.27.7 changes (CPAN RT#123948)
    - Added cperl class keywords
    - Added keywords per version back to 5.004
  - Drop legacy Group: tag
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.27-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.60-1
changelog:
  - Update to 0.60
    - Updates for BDB 6.2 and BDB 6.3
    - Expose set_lg_filemode (CPAN RT#124979)
    - Added meta-json.t and meta-yaml.t
    - Moved source to github: https://github.com/pmqs/BerkeleyDB
    - Add META_MERGE to Makefile.PL
  - Add patch to fix a couple of typos
    https://github.com/pmqs/BerkeleyDB/pull/1


author: Paul Howarth <paul@city-fan.org> - 0.400002-13
changelog:
  - Avoid optional test dependency perl(Moo) for EPEL builds
  - Use author-independent source URL
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.08-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.013-11
changelog:
  - Spec tidy-up
    - Drop redundant buildroot cleaning in %install section
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.08-16
changelog:
  - Tweak for EPEL-8 build
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.010-7
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop redundant use of %{?perl_default_filter}
    - Follow upstream guidance (META.json) on run-time dependencies
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.07-10
changelog:
  - Spec tidy-up
    - Classify buildreqs by usage
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 3.8-14
changelog:
  - Spec tidy-up
    - Classify buildreqs by usage
    - Drop comments referring to older versions of the package
    - Simplify find commands using -empty and -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.32-10
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Cpanel::JSON::XS is now upstream's preferred JSON backend
    - Drop redundant use of %{?perl_default_filter}
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0.21-1
changelog:
  - Update to 0.21.
  - Corrected several changelog entries.
  - Removed an explicit perl(Convert::ASN1) provides.


author: Paul Howarth <paul@city-fan.org> - 0.08-31
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.18-17
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Drop redundant buildroot cleaning from %install section
    - Simplify find command using --delete


author: Paul Howarth <paul@city-fan.org> - 0.11-2
changelog:
  - Tweak for EPEL-8 build
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 4.12-1
changelog:
  - Update to 4.12
    - Make encoder independent of Math::BigInt version (GH#140)
    - Rethrow error from eval_sv and eval_pv() (GH#138, GH#139), e.g. when
      Math::BigInt/BigFloat fails
    - Fix encoding Inf and NaN from PV and NV slots to JSON_TYPE_INT (GH#137)
    - Fix memory corruption in sv_to_ivuv() function (GH#136)
    - Add new method ->require_types (GH#135)
    - Fix typed json encoder conversion from scalar's PV and NV slot to
      JSON_TYPE_INT (GH#133, GH#134)
    - Fix inconsistency with warnings in typed json encoder (GH#131)
    - Fix Perl 5.8.0 support (GH#130)
    - Fixed minor pod typo (GH#129)
    - Document invalid recursive callbacks or overloads (GH#128)


author: Paul Howarth <paul@city-fan.org> - 4.13-1
changelog:
  - Update to 4.13
    - For JSON_TYPE_INT and JSON_TYPE_FLOAT, allow to encode numeric values above
      2^64 in PV slot via Math::BigInt/Float (GH#145, GH#148, GH#149)
    - For JSON_TYPE_INT and JSON_TYPE_FLOAT encoder, allow to pass Math::BigInt
      and Math::BigFloat objects with allow_bignum (GH#147)
    - Fix encoding floating point values above 2^64 in PV slot to JSON_TYPE_INT
      (GH#148, GH#150)
    - Do not allow serializing objects when convert_blessed is not enabled
      (GH#146)


author: Paul Howarth <paul@city-fan.org> - 4.14-1
changelog:
  - Update to 4.14
    - Fix tests for nvtype long double (GH#153)
    - Fix PREREQ's, e.g. CentOS 7 has not Test::More anymore (GH#152)


author: Paul Howarth <paul@city-fan.org> - 2.14-16
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Simplify find commands using -empty and -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 2.33-25
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Fix permissions verbosely
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.7-24
changelog:
  - Spec clean-up
    - Specify all dependencies
    - Drop support for legacy distributions prior to Fedora 14
    - Drop legacy Group: tag
    - Drop %defattr, redundant since rpm 4.4
    - Drop buildroot cleaning in %install section
    - Don't need to remove empty directories from the buildroot
    - Simplify find commands using -delete
    - Simplify %files list
  - Drop redundant "automake" patch
  - Fix building on Perls without "." in @INC


author: Paul Howarth <paul@city-fan.org> - 0.07-22
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.10-11
changelog:
  - BR: gcc
  - Remove some legacy cruft
    - Drop BuildRoot: and Group: tags
    - Drop explicit %clean section
    - Drop explicit buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 1.4.0-17
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify Digest::MD5 versioned dependency generation using a patch
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.51-19
changelog:
  - Tweak for EPEL-8 build
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.0014-1
changelog:
  - Update to 2.0014
    - Fix for tests failing on 5.26
  - Drop explicit buildroot cleaning in %install section
  - BR: perl-interpreter rather than perl


author: Paul Howarth <paul@city-fan.org> - 2.0016-1
changelog:
  - Update to 2.0016
    - Fix for tests failing on 5.28
  - Switch upstream from search.cpan.org to metacpan.org


author: Paul Howarth <paul@city-fan.org> - 0.02-28
changelog:
  - Fix typo in Summary
  - Avoid use of 'use lib' in shipped code (CPAN RT#123225)
  - Fix test warnings about pack 'c' (CPAN RT#123226)
  - Clean up
    - Make %files list more explicit
    - Drop %defattr, redundant since rpm 4.4
    - Don't need to remove empty directories from the buildroot
    - Use %{_fixperms} macro rather than our own chmod incantation
    - Simplify find command using -delete
    - Specify all build requirements
    - Avoid use of macros for basic commands
    - Drop explicit buildroot cleaning in %install
    - Drop explicit %clean section
    - Drop legacy Group: and BuildRoot: tags
    - Use DESTDIR rather than PERL_INSTALL_ROOT


author: Paul Howarth <paul@city-fan.org> - 0.07-17
changelog:
  - Spec tidy-up
    - Use author-independent URLs
    - Specify all build dependencies
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license where possible


author: Paul Howarth <paul@city-fan.org> - 0.0601-27
changelog:
  - Spec clean-up
    - Classify buildreqs by usage
    - Drop legacy Group: tag
    - Use %license where possible
    - Drop %defattr, redundant since rpm 4.4
    - Drop buildroot cleaning in %install section
    - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.16-9
changelog:
  - Add dependency on Math::BigInt::GMP as this module specifically requests
    that backend as first preference for Math::BigInt
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.06-12
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.03-36
changelog:
  - Spec tidy-up
    - Simplify find command using -delete
    - Drop redundant buildroot cleaning in %install section
    - Drop redundant explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 1.33-4
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop now-redundant dependency on perl(JSON)
    - Simplify find command using -empty
    - Don't need to remove empty directories from the buildroot
    - Fix permissions verbosely
    - Package Contributors and LICENCE files
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.0010-1
changelog:
  - Update to 0.0010
    - Makefile.PL: better prereqs declaration
    - Documentation typo fix
  - Switch upstream from search.cpan.org to metacpan.org
  - Drop legacy Group: tag
  - Use plain 'perl' instead of '%{__perl}' macro
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.005-1
changelog:
  - Update to 0.005
    - Add overload_op_info() function for info about a single op
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.15-9
changelog:
  - Tweak for EPEL-8 build
    - Use author-independent source URL
    - Drop redundant use of %{?perl_default_filter}
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Run author and release tests too
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.9-17
changelog:
  - Specify all explicitly-used build requirements
  - Remove some legacy cruft
    - Drop BuildRoot: and Group: tags
    - Drop explicit %clean section
    - Drop explicit buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 1.9-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 3.008-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Simplify find command using -delete
    - Don't need to remove empty directories from the buildroot
    - Fix permissions verbosely
    - Make %files list more explicit
    - Use %license


author: Paul Howarth <paul@city-fan.org> - 1.912-5
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.946-8
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.022-8
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license
    - Make %files list more explicit


author: Petr Pisar <ppisar@redhat.com> - 1.406-10
changelog:
  - Remove an unused dependency on Email::Address (bug #1475784)
  - Modernize spec file and specify all dependencies


author: Paul Howarth <paul@city-fan.org> - 1.406-14
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Use %{make_build} and %{make_install}
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 2.216-1
changelog:
  - Update to 2.216
    - Do not re-fold folded lines
  - Classify buildreqs by usage
  - Drop legacy Group: tag
  - Drop provides/obsoletes for perl-Email-Simple-Creator added in 2010
  - Make %files list more explicit
  - Simplify find command using -delete
  - Don't need to remove empty directories from the buildroot


author: Jason Tibbitts <tibbs@math.uh.edu> 1.05-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Cleaned up the generated spec to meet current guidelines.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 1.05-2
changelog:
  - Add more build dependencies.
  - Use DESTDIR instead of cpanspec-provided PERL_INSTALL_ROOT.
  - Build with NO_PACKLIST=1 and don't bother deleting .packlist files.


author: Paul Howarth <paul@city-fan.org> - 1.12-17
changelog:
  - Spec tidy-up
    - Specify all build requirements
    - Simplify find command using -delete
    - Drop redundant buildroot cleaning in %install section
    - Use %license where possible


author: Paul Howarth <paul@city-fan.org> - 0.10-13
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.008-13
changelog:
  - Specify all build dependencies
  - Simplify find command using -delete
  - Use %license where possible
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - Drop workaround for building with Test::More < 0.88


author: Paul Howarth <paul@city-fan.org> - 0.8000-1
changelog:
  - Update to 0.8000
    - Bump version so https://metacpan.org/pod/ExtUtils::Depends shows the
      correct ExtUtils::Depends module
    - Quote directories with spaces
  - Modernize spec using features from ExtUtils::MakeMaker ≥ 6.76


author: Paul Howarth <paul@city-fan.org> - 0.026-8
changelog:
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 0.012-1
changelog:
  - Update to 0.012
    - Allow an argument to install_map with source dirs
    - Make tests prove and 5.6 friendly
  - Release tests moved to xt/, so don't bother with them
  - Simplify find command using -delete
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 1.16-10
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify builds by usage
    - Drop redundant buildroot cleaning in %install section
    - Don't need to delete empty directories from the buildroot
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.28-34
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Fix typo in %description
    - Fix permissions verbosely
    - Drop redundant buildroot cleaning in %install section
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Simplify find command using -delete
    - Don't need to remove empty directories from the buildroot
    - Make %files list more specific


author: Paul Howarth <paul@city-fan.org> - 0.005-1
changelog:
  - Update to 0.005
    - Introduce rcopy(), a stripped-down replacement for
      File::Copy::Recursive::rcopy()
    - Implement copying of symlinks within all three public functions; at this
      point we should be able to make substitutions for File::Copy::Recursive's
      fcopy(), dircopy() and rcopy() functions in a large proportion of toolchain
      libraries, particularly in test suites


author: Paul Howarth <paul@city-fan.org> - 0.006-1
changelog:
  - Update to 0.006
    - File::Copy::Recursive 0.41 has been released to CPAN and addresses the
      problem which was the focus of File::Copy::Recursive::Reduced; Hence, FCR2
      is now feature-complete


author: Paul Howarth <paul@city-fan.org> - 0.0312-1
changelog:
  - Update to 0.0312
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)


author: Paul Howarth <paul@city-fan.org> - 1.15-13
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Replace source files filter patch with a less invasive workaround
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.16-7
changelog:
  - Modernize spec
    - BR: file-devel rather than %{_includedir}/magic.h (#1731720)
    - Use %{make_build} and %{make_install}
    - Drop now-redundant workaround for CPAN RT#107081


author: Paul Howarth <paul@city-fan.org> - 1.30-9
changelog:
  - Fix "Redundant argument in sprintf" warning (CPAN RT#109673)
  - Classify buildreqs by usage
  - Simplify find command using -delete
  - Use %license where possible


author: Paul Howarth <paul@city-fan.org> - 0.13-1
changelog:
  - Update to 0.13
    - Add rules files for 'prove' and Test::Harness to specify that tests need to
      be run serially for now
    - Support spaces (and other special characters too) in share files (GH#2)
  - BR: perl(CPAN::Meta::YAML) so we can process testrules.yml


author: Paul Howarth <paul@city-fan.org> - 0.004-1
changelog:
  - Update to 0.004
    - Add discouragement notice (File::Slurper is a better choice)
    - Don't skip '.\n' and '..\n' in read_dir
    - Don't install benchmark.pl
  - Use %license where possible
  - Release tests no longer part of main test suite


author: Paul Howarth <paul@city-fan.org> - 0.5001-28
changelog:
  - Spec tidy-up
    - Classify buildreqs by usage
    - Fix permissions verbosely
    - Simplify find command using -delete
    - Don't need to remove empty directories from the buildroot
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 2.67-1
changelog:
  - Update to 2.67
    - Fix thread-safety for GD::Simple %COLORS (GH#26)
    - Fix arc start-angle docs (CPAN RT#123277)
    - Improve setBrush docs (CPAN RT#123194)
    - Improve StringFT docs (CPAN RT#123193)
    - Replace MacOSX by darwin, and not by Mac OS X/macOS as suggested in GH#24
    - Add GD::Image->_file method and the helper GD::supportsFileType
      (CPAN RT#60488)


author: Paul Howarth <paul@city-fan.org> - 2.71-1
changelog:
  - Update to 2.71
    - Skip Test::Fork on freebsd (GH#25)
  - Filter unversioned provide of perl(GD::Polygon)


author: Paul Howarth <paul@city-fan.org> - 1:1.54-11
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.86-42
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 2009041301-27
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Drop redundant buildroot cleaning in %install section
    - Don't need to remove empty directories from the buildroot
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit
    - Package upstream's documentation


author: Paul Howarth <paul@city-fan.org> - 0.102-1
changelog:
  - Update to 0.102
    - Long spacer lines are now line broken
    - "Empty" spacer lines no longer have leading whitespace
    - Option specifications ":+" and ":5" (etc.) now get better presentation in
      the usage description


author: Petr Pisar <ppisar@redhat.com> - 2.24-11
changelog:
  - Modernize a spec file
  - Correct dependencies
  - Subpackage GraphViz::XML to perl-GrapViz-XML package


author: Paul Howarth <paul@city-fan.org> - 2.97-10
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Add Suggests: for modules providing optional functionality
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Simplify find command using -delete
    - Don't need to remove empty directories from the buildroot
    - Fix permissions verbosely
    - Make %files list more explicit
    - Use %license


author: Paul Howarth <paul@city-fan.org> - 0.52-10
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Unbundle inc::Module::Install
    - Don't need to remove empty directories from the buildroot
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.16-15
changelog:
  - Tweak for EPEL-8 build
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Run the release tests too
    - Fix permissions verbosely
    - Make %files list more explicit
    - Package LICENSE file


author: Paul Howarth <paul@city-fan.org> - 0.15-1
changelog:
  - Update to 0.15
    - t/orig/03_class.t failed if FamilyTreeInfo-2.3.24 was installed (GH#1)
  - Classify buildreqs by usage
  - Simplify find command using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 0.15-7
changelog:
  - Arch-specific package using Module::Build needs to use ExtUtils::CBuilder
    (https://bugzilla.redhat.com/show_bug.cgi?id=1547165#c7)


author: Paul Howarth <paul@city-fan.org> - 0.300-8
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop redundant use of %{?perl_default_filter}
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.1104-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all dependencies
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Simplify find command using -delete
    - Don't need to remove empty directories from the buildroot
    - Fix permissions verbosely
    - Package CONTRIBUTING.mkdn and LICENSE files
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.1-3
changelog:
  - Incorporate package review feedback (#1378014)
    - Silence rpmlint warning about capitalization of UNIX in %description
    - Quieten interaction with Canary::Stability during build process


author: Paul Howarth <paul@city-fan.org> - 1.2-1
changelog:
  - Update to 1.2
    - Compatibility macros were still using C++ syntax, fortunately only
      affecting the Solaris platform


author: Paul Howarth <paul@city-fan.org> - 0.32-13
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Switch to upstream's preferred flow, using Module::Build::Tiny
    - Classify buildreqs by usage
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.3-40
changelog:
  - Spec clean-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Don't need to remove empty directories from the buildroot
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.004000-1
changelog:
  - Update to 1.004000
    - Added true and false subs so they can be used via JSON::MaybeXS rather than
      only JSON() exported sub


author: Paul Howarth <paul@city-fan.org> - 2.97-1
changelog:
  - Update to 2.97 (upstream 2.97000 but stick to two-digit minor version
    downstream in case upstream changes back before version 3.x)


author: Paul Howarth <paul@city-fan.org> - 2.07-30
changelog:
  - Spec tidy-up
    - Classify buildreqs by usage
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Retain timestamp of Jcode/Nihongo.pod when patching


author: Petr Pisar <ppisar@redhat.com> - 1:0.66-7
changelog:
  - Fix tests subpackage test script (bug #1663063)
  - Fix a shell bang in a certificate generator script (bug #1663063)


author: Paul Howarth <paul@city-fan.org> - 6.03-21
changelog:
  - Tweak for EPEL-8 build
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Don't need to remove empty directories from the buildroot
    - Fix permissions verbosely
    - Make %files list more explicit


author: Emmanuel Seyman <emmanuel.seyman@club-internet.fr> 1.06-1
changelog:
  - Update to 1.06
  - Clean up spec file with indentation
  - Remove no-longer-used macros
  - Add perl default filter


author: Paul Howarth <paul@city-fan.org> - 0.011-6
changelog:
  - Arch-specific package using Module::Build needs to use ExtUtils::CBuilder
    (https://bugzilla.redhat.com/show_bug.cgi?id=1547165#c7)
  - Drop explicit gcc build-require as EU::CB is effectively our compiler here
  - Add build-require coreutils for %{_fixperms}
  - Simplify find command using -empty


author: Emmanuel Seyman <emmanuel@seyman.fr> - 1.00-16
changelog:
  - Replace tabs with spaces in the spec file
  - Drop the Group tag
  - Replace PERL_INSTALL_ROOT with DESTDIR


author: Paul Howarth <paul@city-fan.org> - 0.208-17
changelog:
  - Spec tidy-up
    - Specify all dependencies
    - Drop redundant buildroot cleaning in %install section
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Don't need to remove empty directories from the buildroot
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.35-1
changelog:
  - update to 1.35
  - classify buildreqs by usage
  - make %files list more explicit
  - don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 1.844-1
changelog:
  - Update to 1.844
    - Resolved MCE stalling when specifying max_retries with init_relay, ditto
      for loop_timeout with init_relay on UNIX platforms
    - Enhanced loop_timeout to handle workers dieing uncontrollably from any
      user_tasks (i.e. task_id ≥ 0); previously, only task_id == 0
    - Improved IPC on the Windows platform for edge case when a worker is
      awaiting input while the manager process is restarting a worker
    - MCE, MCE::Child workers exit immediately upon receiving a SIGSEGV signal;
      this safeguards IPC from stalling inside the manager process
    - Enhanced the _wait_one private function in MCE::Child
    - Removed Prima from the list for auto-enabling the posix_exit option; Prima
      (since 1.52) is parallel safe during global cleanup
    - Reached 100% Pod coverage


author: Paul Howarth <paul@city-fan.org> - 1.845-1
changelog:
  - Update to 1.845
    - Croak if is_joinable, is_running, or join is called by a non-managed
      process in MCE::Child; added LIMITATION section to the documentation
    - Improved is_joinable, is_running, list_joinable, and list_running in
      MCE::Child
    - Added example (consumer requests item) to MCE::Channel documentation
    - Support the task_end option regardless of whether user_tasks is specified
    - Support IO::All::{ File, Pipe, STDIO } for input data including output
      via MCE->print($io, ...), printf, and say
    - Support gather ⇒ MCE::Candy::out_iter_fh($io) using MCE::Candy


author: Paul Howarth <paul@city-fan.org> - 1.847-1
changelog:
  - Update to 1.847
    - Obsolete RedHat MCE-1.840-Sereal-deps.patch file; this patch file is no
      longer needed and finally resolved with this release
    - PDL random numbers now unique between threads:
      see https://www.perlmonks.org/?node_id=1214439
    - Replaced "PF_UNIX" with "AF_UNIX" in MCE::Util


author: Paul Howarth <paul@city-fan.org> - 1.848-1
changelog:
  - Update to 1.848
    - Improved IO::All::{ File, Pipe, STDIO } output via MCE->print($io, ...),
      printf, and say; this resolves a bug introduced in 1.845 when using
      App::Cmd::Tester to capture output


author: Paul Howarth <paul@city-fan.org> - 1.849-1
changelog:
  - Update to 1.849
    - Fixed edge case in MCE::Child when reaping inside a signal handler
    - Added list_pids class method to MCE::Child


author: Paul Howarth <paul@city-fan.org> - 1.860-1
changelog:
  - Update to 1.860
    - Signal-handling update release
    - Localized input and output record separators in MCE::Channel
    - IPC safety in MCE::Child during SIGINT and SIGTERM
    - Method $child->exit in MCE::Child now sends the SIGINT signal for extra
      reliability with MCE::Shared (previously SIGQUIT)


author: Paul Howarth <paul@city-fan.org> - 1.862-1
changelog:
  - Update to 1.862
    - The edge cases regarding signal handling have finally been resolved for
      MCE::Child; see mce-examples/framebuffer on GitHub


author: Paul Howarth <paul@city-fan.org> - 1.844-1
changelog:
  - Update to 1.844
    - Completed validation running Kelp and Raisin apps with MCE::Shared
      - For example, constructing shared objects at the top of the script (i.e.
        MCE::Shared->scalar, MCE::Shared->cache, et cetera)
      - Shared objects are accessible by Plack workers (i.e. Starman)
    - Disable internal signal handling for the shared-manager process if
      spawned from inside a thread or process
    - MCE::Hobo workers exit immediately upon receiving a SIGSEGV signal; this
      safegaurds IPC from stalling inside the manager process
    - Enhanced the _wait_one private function in MCE::Hobo
    - Removed Prima from the list for auto-enabling the posix_exit option; Prima
      (since 1.52) is parallel safe during global cleanup
    - Reached 100% Pod coverage


author: Paul Howarth <paul@city-fan.org> - 1.845-1
changelog:
  - Update to 1.845
    - Improved is_joinable, is_running, list_joinable, and list_running in
      MCE::Hobo
    - Added parallel Graphics::Framebuffer demonstrations:
      https://github.com/marioroy/mce-examples/tree/master/framebuffer
    - Bumped MCE dependency to 1.845


author: Paul Howarth <paul@city-fan.org> - 1.847-1
changelog:
  - Update to 1.847
    - Obsolete RedHat MCE-Shared-1.841-Sereal-deps.patch file; this patch file is
      no longer needed and finally resolved with this release
    - Updated PDL examples in the documentation including Cookbook on GitHub:
      - Resolved segmentation fault in global cleanup for shared PDL objects
      - Added missing pdl_random class method to MCE::Shared
    - Bumped MCE dependency to 1.847


author: Paul Howarth <paul@city-fan.org> - 1.848-1
changelog:
  - Update to 1.848
    - Fixed broken examples in the MCE::Shared documentation
    - Bumped MCE dependency to 1.848


author: Paul Howarth <paul@city-fan.org> - 1.849-1
changelog:
  - Update to 1.849
    - Fixed edge case in MCE::Hobo when reaping inside a signal handler
    - Guard clean-up code in MCE::Shared::Server during global destruction
    - Configured extra data channel used for reaping Hobos and exporting
    - Optimized reaping in MCE::Hobo when void_context is set
    - Added list_pids class method to MCE::Hobo
    - Added pid class method to MCE::Shared
    - Bumped MCE dependency to 1.849


author: Paul Howarth <paul@city-fan.org> - 1.850-1
changelog:
  - Update to 1.850
    - More safety around clean-up code in MCE::Shared::Server
    - Bumped MCE dependency to 1.850


author: Paul Howarth <paul@city-fan.org> - 1.860-1
changelog:
  - Update to 1.860
    - Signal-handling update release
    - SIGINT and SIGTERM safety for shared objects during IPC
    - IPC safety in MCE::Hobo during SIGINT and SIGTERM
    - Method $hobo->exit in MCE::Hobo now sends the SIGINT signal for extra
      reliability with MCE::Shared (previously SIGQUIT)
    - Bumped MCE dependency to 1.860


author: Paul Howarth <paul@city-fan.org> - 1.862-1
changelog:
  - Update to 1.862
    - The edge cases regarding signal handling have finally been resolved for
      MCE::Hobo; see mce-examples/framebuffer on GitHub
    - Bumped MCE dependency to 1.862


author: Paul Howarth <paul@city-fan.org> - 5.509-1
changelog:
  - Update to 5.509
    - Makefile.PL failed with no '.' in @INC (CPAN RT#120871)
    - Test t/Ref.t failed on Windows install (CPAN RT#118262)
    - MIME::Parser::parse_data() should check what it gets back (CPAN RT#119166)
    - Allow \r\n to be used as line-end delimiter when outputting MIME message
      (CPAN RT#119568)
  - Drop EL-5 support (should have happened years ago, dependencies not available)
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 3.008-5
changelog:
  - Add bootstrap for EPEL-8
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Drop redundant %{?perl_default_filter}
    - Use %{make_build} and %{make_install}
    - Drop redundant recoding of Mail::Message::Field manpage
    - Fix permissions verbosely
    - Make %files list more explicit
    - Package README.md rather than README


author: Paul Howarth <paul@city-fan.org> - 3.004-3
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Drop redundant use of %{?perl_default_filter}
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit
    - Package README.md rather than README


author: Paul Howarth <paul@city-fan.org> - 1.6000-1
changelog:
  - Update to 1.6000
    - Sync test files with Math-BigInt-1.999800
    - Update bundled Devel::CheckLib from v1.03 to v1.07
    - Math::BigInt::GMP is now a subclass of Math::BigInt::Lib, so remove pure
      Perl methods from Math::BigInt::GMP that are implemented in the superclass
      Math::BigInt::Lib; the methods removed are _digit(), _num(), _nok(), and
      _log_int() (the version of _log_int() implemented in Math::BigInt::GMP was
      buggy anyway)
    - Fix _check() so it doesn't give a "use of uninitialized value" warning if
      given an undefined "object"
    - Trim whitespace in all files
    - Better use of the functionality in Test::More in t/bigintg.t
  - Add support for build --with author_tests


author: Paul Howarth <paul@city-fan.org> - 1.07-26
changelog:
  - Spec tidy-up
    - Drop redundant buildroot cleaning in %install section
    - Drop redundant explicit %clean section
    - Simplify find command using -delete
    - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 1.20181021-1
changelog:
  - Update to 1.20181021
    - Autogenerate META.json file (GH#7)
    - Remove Module::Build build dependency to make installation easier
  - Switch to ExtUtils::MakeMaker flow


author: Paul Howarth <paul@city-fan.org> - 1.20190601-1
changelog:
  - Update to 1.20190601
    - Update for 2019
    - Reduce scope of lexical %dates (CPAN RT#128406)
    - Support 'perl -Modern::Perl=20xx' (CPAN RT#96319)


author: Paul Howarth <paul@city-fan.org> - 1.20190727-1
changelog:
  - Update to 1.20190727
    - Remove explicit autodie dependency (GH#11)
    - Add description of odern::Perl module (GH#12)


author: Paul Howarth <paul@city-fan.org> - 0.039-15
changelog:
  - Use author-independent URLs
  - Work around ExtUtils::CBuilder in EL-8 having no dependency on gcc or gcc-c++
    (#1547165)


author: Paul Howarth <paul@city-fan.org> - 0.18-1
changelog:
  - Update to 0.18
    - Remove Module::Build::Tiny from deps
  - Drop explicit perl-devel test dependency as it's pulled in by
    perl-ExtUtils-CBuilder, which is a more sane place for the dependency to be


author: Paul Howarth <paul@city-fan.org> - 0.19-1
changelog:
  - Update to 0.19
    - Use File::Copy::Recursive::Reduced instead of File::Copy::Recursive (GH#13)
  - Treat perl-devel as a runtime dependency


author: Paul Howarth <paul@city-fan.org> - 0.99-1
changelog:
  - Update to 0.99
    - Module::CPANTS::Kwalitee now uses Module::Find to find Kwalitee modules
      (instead of Module::Pluggable that unconditonally spits a deprecation
      warning); you usually don't need to care but if you have your custom
      Kwalitee plugin loader (such as Module::CPANTS::SiteKwalitee), you need to
      change it - sorry for the inconvenience
    - Allow dash and dot in script name in the NAME section for
      non-pm, non-pod files
    - Added has_meta_json metric (CPAN RT#107885)
    - Accept a few more README extensions
    - Accept two more Moose modules as strict equivalents
    - Various micro optimization for performance
    - Dropped a few dependencies
    - Various documentation updates
    - Not to check use_strict/use_warnings for Perl 6 modules in a Perl 5
      distribution
    - Worked around a File::Find::Object issue
    - Fixed dynamic_config handling
    - Improved LICENSE file detection (CPAN RT#114247)
    - Skip everything in MANIFEST.SKIP while testing symlinks (GH#33)
  - Simplify find command using -delete
  - Add file xt/kwalitee/mas_meta_json.t missing from dist, needed for
    xt/kwalitee.t (GH#38)


author: Paul Howarth <paul@city-fan.org> - 0.342-1
changelog:
  - Update to 0.342
    - Escape left (and right) braces to silence deprecation warnings
      (CPAN RT#124146)
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 0.13-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Keep timestamp of Changes file constant
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.09-8
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Be verbose about permissions changes
    - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.17-25
changelog:
  - Spec tidy-up
    - Escape '%' in %summary
    - Specify all dependencies
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.82-1
changelog:
  - Update to 0.82
    - Fix CRLF handling on Win32
    - Default to SHA256 on new hashes as SHA1 is deprecated


author: Emmanuel Seyman <emmanuel@seyman.fr> - 8.23-1
changelog:
  - Update to 8.23
  - Replace calls to %{__perl} with /usr/bin/perl
  - Replace calls to "make pure_install" with %{make_install}
  - Replace calls to "make" with %{make_build}
  - Pass NO_PERLLOCAL=1 to Makefile.PL


author: Paul Howarth <paul@city-fan.org> - - 0.001008-16
changelog:
  - Tweak for EPEL-8 build
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Fix typo in %description
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.29-13
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 2.2011-9
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Don't run tests that would require bootstapping on EPEL
    - Refresh build and runtime dependencies
    - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.11-1
changelog:
  - Update to 1.11
    - Remove MooseX::Role::WithOverloading from test dependencies
      (CPAN RT#130075)
  - Specify all build dependencies
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.17-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Simplify find command using -empty and -delete
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.11-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Refresh stale list of build requirements
    - Drop redundant use of %{?perl_default_filter}
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.50-1
changelog:
  - Update to 0.50
    - Reverted the is_Foo and to_Foo refactoring again temporarily to resolve
      issues with Sub::Defer


author: Paul Howarth <paul@city-fan.org> - 0.003-17
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license


author: Paul Howarth <paul@city-fan.org> - 0.19-1
changelog:
  - Update to 0.19
  - Drop redundant %{?perl_default_filter}
  - Classify buildreqs by usage
  - Don't need to delete empty directories from the buildroot
  - Use %license
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.20-1
changelog:
  - Update to 0.20
    - _ipcmp: Handle comparison of mixed IPv4 and IPv6-specified addresses,
      allowing cidrlookup() to look up IPv6-mapped IPv4 addresses in IPv4
      address ranges, and vice versa


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.49-1
changelog:
  - Update to 0.49
  - Pass NO_PACKLIST=1 NO_PERLLOCAL=1 to Makefile.PL
  - Use %{make_install} instead of "make pure_install"
  - Use %{make_build} instead of make
  - Replace %{__perl} with /usr/bin/perl


author: Paul Howarth <paul@city-fan.org> - 1.26-20
changelog:
  - Use upstream-approved fix for zero networks (CPAN RT#60439)
  - Fix shellbangs in utility scripts
  - Specify all dependencies
  - Use %license


author: Paul Howarth <paul@city-fan.org> - 0.1.2-13
changelog:
  - Spec clean-up
    - Classify buildreqs by usage
    - Drop legacy Group: tag
    - Use %license
    - Distinguish between 'Build' script commands and options


author: Paul Howarth <paul@city-fan.org> - 1.266-1
changelog:
  - Update to 1.266
    - Prevent heredoc terminator detection triggering regex errors
    - Small clean-ups
  - Work around test failures caused by DOS line endings in test data files
    (https://github.com/adamkennedy/PPI/issues/243)


author: Paul Howarth <paul@city-fan.org> - 1.08-21
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.001000-35
changelog:
  - Specify all build requirements
  - Don't assume manpages have ".3pm" extension
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 2.02-5
changelog:
  - Tweak for EPEL-8 build
    - Use author-independent source URL
    - lib/Parallel/ForkManager.pm is already UTF8 encoded
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Don't need to remove empty directories from the buildroot
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.14-30
changelog:
  - Spec clean-up
    - Drop %defattr, redundant since rpm 4.4
    - Drop buildroot cleaning in %install section
    - Drop legacy Group: tag
    - Use %license where possible
    - Simplify find command using -delete
    - Classify buildreqs by usage


author: Paul Howarth <paul@city-fan.org> - 1.967014-1
changelog:
  - Update to 1.967014
    - Add a newline to package declaration lines in precompiled parsers, to keep
      CPAN from indexing them (CPAN RT#110404)
    - Provide repository and bugtracker entries in MYMETA.* (CPAN RT#110403)
    - Update tests to handle '.' no longer being part of @INC in perl-5.26.0
      (CPAN RT#120415)


author: Paul Howarth <paul@city-fan.org> - 0.37-14
changelog:
  - Switch to ExtUtils::MakeMaker flow
  - Don't try to run author tests during package build
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.134-1
changelog:
  - Update to 1.134
    New Features
    - Added new policy BuiltinFunctions::ProhibitShiftRef (GH#837)
    - Support indented heredocs (GH#861)
    - In Subroutines::ProhibitManyArgs, you can now omit the object variable
      (C<$self> or C<$class>) from the argument count (GH#815)
    Policy Changes
    - The policy Documentation::RequirePodLinksIncludeText is obsolete and has
      been removed (GH#494)
    Dependencies
    - Removed use of File::HomeDir
    - Upgrade to PPI 1.265 (GH#860)
    - Fix failed tests caused by new PPI (GH#858)
    Internals
    - Updated the Appveyor config (GH#851)


author: Paul Howarth <paul@city-fan.org> - 1.38-20
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Make %files list more explicit
    - Bootstrapping not required for EPEL-8
    - Drop redundant dependency filter


author: Paul Howarth <paul@city-fan.org> - 0.100-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.07-13
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop redundant use of %{?perl_default_filter}
    - Switch to upstream's preferred flow, using Module::Build::Tiny
    - Fix permissions verbosely
    - Package CONTRIBUTING file
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.20-13
changelog:
  - Use author-independent source URL
  - Bump version of File::Temp dependency to 0.17, needed for ->seek
  - Enumerate man pages in %files list


author: Paul Howarth <paul@city-fan.org> - 0.59-3
changelog:
  - Spec tidy-up
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Simplify find command using -empty
    - Make %files list more explicit


author: Emmanuel Seyman <emmanuel@seyman.fr> - 273-15
changelog:
  - Use Source link as listed on metacpan project page
  - Replace calls to %{__perl} with /usr/bin/perl
  - Pass NO_PACKLIST=1 NO_PERLLOCAL=1 to Makefile.PL
  - Replace calls to "make install" with %{make_install}
  - Replace calls to make with %{make_build}


author: Paul Howarth <paul@city-fan.org> - 1.995-3
changelog:
  - Spec tidy-up
    - Switch to upstream's preferred flow, using Module::Build::Tiny
    - Classify buildreqs by usage
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.38-1
changelog:
  - Update to 0.38
    - Fix test prereqs; pod tests moved to xt/ (CPAN RT#122136, CPAN RT#122137)
    - Adopt new repo structure:
      - Delete MANIFEST and META.yml, and hereafter auto-generate them
      - Modernize .gitignore and MANIFEST.SKIP
      - The code says Perl licence but the LICENCE file says Artistic, so replace
        LICENCE file with LICENSE (so spelled), which says Perl
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 2017060201-11
changelog:
  - Tidy up for EPEL-8 build
    - Specify all build dependencies
    - Expand %description
    - Add patch to fix POD so we get properly-coded manpage
    - Modernize spec using %{make_build} and %{make_install}
    - Make %files list more explicit
    - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 1.000006-1
changelog:
  - Update to 1.000006
    - Now falling back to $obj->isa if DOES/does is not implemented on the
      object, to avoid fatal errors on perls too old to have their own DOES
      (CPAN RT#100866)
  - This release by HAARG → update source URL
  - Clarify %description
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.000007-1
changelog:
  - Update to 1.000007
    - Added new interface: $obj->$_call_if_can
  - This release by ETHER → update source URL
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 1.000009-1
changelog:
  - Update to 1.000009
    - Fix handling of DOES and does (they no longer fall back to isa in most
      situations outside of Moo/Moose)


author: Paul Howarth <paul@city-fan.org> - 1.29-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Simplify find command using -delete
    - Don't need to remove empty directories from the buildroot
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.03-14
changelog:
  - Tweak for EPEL-8 build
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Run the release tests too
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.18-1
changelog:
  - Update to 1.18
    - Escape { and } (CPAN RT#124147)
  - This release by SREZIC → update source URL
  - Specify all dependencies
  - Simplify find command using -delete
  - Use %license where possible
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.100052-13
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop redundant use of %{?perl_default_filter}
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.004-10
changelog:
  - Spec tweaks for EPEL-8
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.08-22
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop redundant buildroot cleaning in %install section
    - Fix permissions verbosely


author: Emmanuel Seyman <emmanuel@seyman.fr> - 1.36-6
changelog:
  - Patch to reflect change of location in the manual website (#1787937)
  - Use /usr/bin/perl instead of %{__perl}
  - Use %{make_install} instead of make pure_install
  - Use %{make_build} instead of make


author: Paul Howarth <paul@city-fan.org> - 0.010-1
changelog:
  - Update to 0.010
    - Revised internals for constants/subrefs in the stash (a breaking change
      planned for Perl 5.28)
  - Test::Builder::Module dependency now detected correctly everywhere


author: Paul Howarth <paul@city-fan.org> - 0.14-26
changelog:
  - Spec clean-up
    - Use author-independent source URL
    - Drop support for building with Test::More < 0.88
    - Drop support for building on RHEL-5
    - Drop redundant buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 0.010-23
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Modernize spec using %{make_build} and %{make_install}
    - Use %license


author: Paul Howarth <paul@city-fan.org> - 0.50-15
changelog:
  - Use author-independent source URL
  - Specify all build dependencies
  - Simplify find command using -delete
  - Drop redundant buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 1.014-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Install into vendor directory
    - Use %{make_build} and %{make_install}
    - Drop redundant find commands in %install section
    - Drop redundant explicit dependencies and filtering of them
    - Avoid need to remove *.list files in %check
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 2.00-32
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify builds by usage
    - Drop redundant buildroot cleaning in %install section
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.44.2-1
changelog:
  - Update to 1.442
    - Fix for missing . in @INC; this relates to CVE-2016-1238
      (https://github.com/briandfoy/test-file/issues/14)
  - Split rpm and upstream versioning
  - Use features from recent EUMM to simplify %install section


author: Paul Howarth <paul@city-fan.org> - 1.44.3-1
changelog:
  - Update to 1.443
    - Found another relative path require issue:
      http://blogs.perl.org/users/ryan_voots/2017/04/trials-and-troubles-with-changing-inc.html
    - This is another attempt at avoiding failures from the v5.26 removal of . from @INC
  - Drop redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 2.021-1
changelog:
  - Update to 2.021
    - Clarify that it's the Artistic License 2.0
  - License changed to Artistic 2.0
  - Drop legacy BuildRoot: and Group: tags
  - Drop explicit %clean section
  - Drop buildroot cleaning in %install section
  - Simplify find command using -delete
  - Classify build requirements by usage


author: Paul Howarth <paul@city-fan.org> - 1.06-13
changelog:
  - Modernize spec using %{make_build} and %{make_install}
  - Use author-independent source URL
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> = 0.101082-11
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop redundant permission fixing in %prep section
    - Classify buildreqs by usage
    - Use %{make_build} and %{make_install}
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.170.0-5
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Enhance %description
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.20180705-5
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit
    - Package LICENSE file
    - Drop redundant use of %{?perl_default_filter}


author: Paul Howarth <paul@city-fan.org> - 0.17-7
changelog:
  - Tweak for EPEL-8 build
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Fix permissions verbosely
    - Use %{make_build} and %{make_install}
    - Make %files list more explicit
    - Package README file


author: Paul Howarth <paul@city-fan.org> - 2.02-1
changelog:
  - Update to 2.02
    - Altered a test to not bake @INC into -I options for a subprocess, to avoid
      too-long commands


author: Paul Howarth <paul@city-fan.org> - 1.06-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Simplify find command using -delete
    - Don't need to remove empty directories from the buildroot
    - Fix permissions verbosely
    - Don't display developer dependencies as we're not running extra tests


author: Paul Howarth <paul@city-fan.org> - 1.04-1
changelog:
  - Update to 1.04
    - Sped up critic_ok() by 4x by not recreating a Perl::Critic object over and
      over (GH#10)
    - Now requires Test::Builder~0.88 or later to support the done_testing()
      method (GH#2)
    - Now requires MCE 1.827 to deal with problems running under taint mode (GH#6)
  - This release by PETDANCE → update source URL
  - Drop BuildRoot: and Group: tags


author: Paul Howarth <paul@city-fan.org> - 0.09-1
changelog:
  - Update to 0.09
    - Add windows_reserved option to test for Windows reserved filenames
    - Add tests, now requires Perl 5.008
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - Drop workaround for building with Test::More < 0.88


author: Paul Howarth <paul@city-fan.org> - 1.25-2
changelog:
  - Tidy up for EPEL-8 build
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Modernize spec using %{make_build} and %{make_install}
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.38-1
changelog:
  - Update to 0.38
    - Simplify checks for overloading to not call overload::Overloaded(); just
      checking the return value of overload::Method() is sufficient


author: Paul Howarth <paul@city-fan.org> - 0.39-1
changelog:
  - Update to 0.39
    - Many bug fixes and improvements to the types created by
      {any,object}_{can,does,isa}_type; in some cases, an invalid value could
      cause an exception in type check itself, and in other cases, a value that
      failed a type check would cause an exception when generating a message
      describing the failure
    - The messages describing a failure for all of these types have been improved
    - You can now create anonymous *_does and *_isa types using the exports from
      Specio::Declare


author: Paul Howarth <paul@city-fan.org> - 0.40-1
changelog:
  - Update to 0.40
    - Fixed more bugs with {any,object}_{can,does,isa}_type
      - When passed a glob (not a globref) they would die in their type check
      - On Perl 5.16 or earlier, passing a number to an any_* type would also die
    - Fixed subification overloading: if Sub::Quote was loaded, this would be
      used, but any environment variables needed for the closure would not be
      included, which broke enums, among other things


author: Paul Howarth <paul@city-fan.org> - 0.42-1
changelog:
  - Update to 0.42
    - Fixed checks for whether a class is loaded in light of upcoming
      optimization in Perl 5.28 (GH#12)
    - The Perl library claimed it provided types named LaxVersionStr and
      StrictVersionStr but they were really named LaxVersion and StrictVersion;
      the names have now been fixed to match the documentation, so they are
      LaxVersionStr and StrictVersionStr


author: Paul Howarth <paul@city-fan.org> - 0.22-1
changelog:
  - Update to 0.22
    - No . in @INC should no longer be an issue (CPAN RT#120425)
    - Removed the POD spelling test from /t as it's now in /xt
    - Forego usage of inc::Module::Install for EU::MM
    - List out all prereqs individually; provide cpanfile
    - Use dzil to build the dist
    - Convert the README to markdown
    - Add a LICENSE file
    - Clean up the Changes log
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.23-1
changelog:
  - Update to 0.23
    - Fixed some documentation errors
    - Added unicode support (GH#10)
    - Bump Perl prereq to 5.8 now that we support unicode
    - Don't inherit from Exporter (GH#9)
    - Bump Exporter prereq to 5.57


author: Paul Howarth <paul@city-fan.org> - 0.24-1
changelog:
  - Update to 0.24
    - Fix up the prereqs somewhat
    - Revert the unicode support added in the last release as it caused some
      test breakage


author: Paul Howarth <paul@city-fan.org> - 0.25-1
changelog:
  - Update to 0.25
    - Re-worded the documentation
    - Ordered documented functions in alphabetical order
    - Fixed up the synopsis
    - Put function usage examples directly below the function name; this makes it
      easier to get clickable links for functions in metacpan
    - Documented get_pod_parser
    - Moved hunspell up to the preferred checker


author: Paul Howarth <paul@city-fan.org> - 1.10-1
changelog:
  - Update to 1.10
    - Switch packaging to Dist::Zilla, which makes the distribution installable
      again on perl 5.27.7 (CPAN RT#123867)
  - This release by ETHER ⇒ update source URL
  - Use %license where possible
  - Enhance %description
  - Drop EL-5 support
    - Drop legacy BuildRoot: and Group: tags
    - Drop redundant buildroot cleaning


author: Paul Howarth <paul@city-fan.org> - 0.0302-1
changelog:
  - Update to 0.0302
    - Now at https://github.com/shlomif/perl-test-trailingspace
    - Convert to https://metacpan.org/pod/Dist::Zilla::PluginBundle::SHLOMIF
  - Switch to ExtUtils::MakeMaker flow


author: Paul Howarth <paul@city-fan.org> - 0.17-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Explicitly specify more build requirements
    - Simplify find command using -delete
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.19-6
changelog:
  - Add build option --with debug_valgrind
  - Fix shellbang in samples/map.pl
  - Drop EL-5 support
    - Drop legacy BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - Drop support for building with File::Temp < 0.19 and
      ExtUtils::Install < 1.3702


author: Paul Howarth <paul@city-fan.org> - 0.08-16
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop redundant buildroot cleaning in %install section
    - Specify more build dependencies
    - Simplify find command using -delete
    - Fix typo in %description


author: Paul Howarth <paul@city-fan.org> - 0.07-1
changelog:
  - Update to 0.07
    - Reverted back to using the Warning event type, since the bug in the Test2
      core that caused this to be a problem has since been fixed
    - Replaced use of Test2::Bundle::Extended with Test2::V0
  - Package new document CODE_OF_CONDUCT.md
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.08-1
changelog:
  - Update to 0.08
    - Use IPC::Run3 instead of Capture::Tiny for all tests, which fixes an issue
      with the 'tap-bug-in-test2.t' on Windows (CPAN RT#129294)


author: Paul Howarth <paul@city-fan.org> - 0.02-2
changelog:
  - Incorporate feedback from package review (#1776509)
    - Rephrase %summary
    - BR: perl(:VERSION) >= 5.8.1


author: Paul Howarth <paul@city-fan.org> - 1.37-1
changelog:
  - Update to 1.37
    - Moved pod-tests from t to xt
    - Add munge as alias for munge_column_names
    - Update to Devel::PPPort-3.43
    - Simplified ref-check defines in XS (GH#12)
    - Tested against perl-5.29.3


author: Paul Howarth <paul@city-fan.org> - 1.38-1
changelog:
  - Update to 1.38
    - Name the duplicate headers on error 1013
    - Add missing attributes to default list (documentation only)
    - Add support for combined keys
    - Look at $NO_COLOR for csvdiff
    - Add support for key-value pair


author: Paul Howarth <paul@city-fan.org> - 1.39-1
changelog:
  - Update to 1.39
    - It's 2019
    - Fix tests to skip on Encode failing (GH#17)
    - Tested on Z/OS (s390x - Hercules)
    - Test with new Module::CPANTS::Analyse
    - Add options -w/-b/-Z to csvdiff
    - Fix strict on streaming EOF
    - Now also tested with cperl


author: Paul Howarth <paul@city-fan.org> - 1.40-1
changelog:
  - Update to 1.40
    - Update to Devel::PPPort-3.52
    - Development perl is now 5.28.2
    - [csv2xlsx] sheetnames are restricted to 31 characters
    - Generate cpanfile
    - Add munge type "db"
    - [csv2xls/csv2xlsx] do not generate xls/xlsx on empty CSV (GH#18)
    - New: support $csv->formula (sub { ... })
    - Support stacked encodings
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.27-1
changelog:
  - Update to 1.27
    - Remove the line that reads 'use open qw(:std :utf8);' (CPAN RT#105798)
    - Remove Build.PL, ship only Makefile.PL
    - Remove .gitignore from MANIFEST


author: Paul Howarth <paul@city-fan.org> - 1.29-1
changelog:
  - Update to 1.29
    - No code changes
    - Rework Makefile.PL so File::Spec, File::Temp and Test::More are in
      TEST_REQUIRES (CPAN RT#112568)
    - Expand the SYNOPSIS
    - Update MANIFEST.SKIP to include .gitignore
    - Test::Pod is only a developer dependency


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30
    - Explicitly escape { and } in a regexp because unescaped { issues a warning
      now and will become a fatal error in Perl 5.32
    - Adopt new repo structure, see:
      http://savage.net.au/Ron/html/My.Workflow.for.Building.Distros.html
  - Drop legacy Group: tag
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.014-5
changelog:
  - Tweak for EPEL-8 build
    - Specify all dependencies
    - Avoid need to bootstrap with Types::Standard on EPEL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.20140328-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Simplify find command using -delete
    - Don't need to remove empty directories from the buildroot
    - Fix permissions verbosely
    - Package LICENSE file
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.03-17
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Unbundle inc::Module::Install and friends
    - Simplify find commands using -empty and -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.03-27
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop redundant buildroot cleaning in %install section
    - Drop redundant "-a" operator in find command
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.13-33
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use a patch rather than scripted iconv to fix document encoding
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Simplify find commands using -empty and -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.11-40
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Drop redundant %{?perl_default_filter}
    - Drop redundant specification of compiler flags for noarch package
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Simplify find command using -delete
    - Don't need to remove empty directories from the buildroot
    - Fix permissions verbosely
    - Package the Changes file


author: Paul Howarth <paul@city-fan.org> - 0.99-8
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Explicitly require perl(Geography::Countries)
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit
    - Package README.md rather than README


author: Paul Howarth <paul@city-fan.org> - 7.900057-11
changelog:
  - Tweak for EPEL-8 build
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Emmanuel Seyman <emmanuel@seyman.fr> - 4.17-21
changelog:
  - Add Debian patch to fix build (#1754813)
  - Replace call to perl with /usr/bin/perl
  - Replace call to "make pure_install" with %{make_install}
  - Replace call to make with %{make_build}


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 0.26-1
changelog:
  - Update to 0.26.
  - Drop WWW-Form-UrlEncoded-0.23-arch.patch,
    use BREAK_BACKWARD_COMPAT=1 instead.


author: Paul Howarth <paul@city-fan.org> - 0.29-8
changelog:
  - Clean up for EPEL-8 build
    - Classify buildreqs by usage
    - Modernize spec using %{make_build} and %{make_install}
    - Make %files list more explicit
    - Package TODO file


author: Paul Howarth <paul@city-fan.org> - 1.01-32
changelog:
  - Spec tidy-up
    - Classify buildreqs by usage
    - Drop redundant buildroot cleaning in %install section
    - Don't need to remove empty directories from the buildroot
    - Simplify find command using -delete
    - Make %files list more explicit
    - Make permission changes visible in build log


author: Paul Howarth <paul@city-fan.org> - 0.57-5
changelog:
  - Spec tidy-up
    - Classify buildreqs by usage
    - Make permission changes visible in build log
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.0006-1
changelog:
  - Update to 1.0006
    - Fix failing to find the difference in this scenario (CPAN RT#84546):
      Before: <element>0</element>
      After: <element></element>
  - Drop EL-5 support:
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 0.002-2
changelog:
  - Incorporate feedback from package review (#1776513)
    - BR: findutils
    - BR: perl(CPAN::Meta::Prereqs)
    - Need perl(ExtUtils::MakeMaker) >= 6.76
    - Add reference to upstream ticket about unnecessary build requirements
      https://github.com/atoomic/XString/issues/2
    - Add run-time dependency on perl(XSLoader)


author: Paul Howarth <paul@city-fan.org> - 2.86-1
changelog:
  - Update to 2.86
    - Fix bug that prevented autoboxing working under the debugger on perl 5.22+
      (GH#9); added t/debugger.t
    - Fix bug that prevented bareword method-calls being exempted when the method
      is a variable e.g. Foo->$bar (GH#8)
    - Add operator-overloading note to the gotchas section (GH#7)
  - License changed to Artistic 2.0
  - Drop legacy Group: tag


author: Paul Howarth <paul@city-fan.org> - 3.0.1-1
changelog:
  - Update to 3.0.1
    - Breaking change:
      - The behaviour of UNIVERSAL methods like $native->can and $native->isa is
        now defined as being the same as when autobox is not enabled rather than
        "undefined" (technically, this still falls under the rubric of
        "undefined", but the switch from "don't know" to "don't" could break
        buggy code, so bump for safety)
      - Add DOES to the list of non-autoboxed methods
    - Switch to semantic versioning scheme
    - Upgrade ppport.h from 3.35 → 3.42
    - Fix version declaration on 5.8 (GH#11)


author: Paul Howarth <paul@city-fan.org> - 20090629-23
changelog:
  - Spec tidy-up
    - Classify buildreqs by usage
    - Drop redundant use of %{?perl_default_filter}
    - Don't need to remove empty directories from the buildroot
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.17-1
changelog:
  - Update to 0.17
    - A large chunk of boilerplate XS code, which is also used in other XS
      modules, has been factored out of the main .xs file to a collection of .h
      files in the xsh subdirectory
    - The new optimization in perl 5.27.3 for scalar(keys(%$hashref)) is now
      correctly supported


author: Paul Howarth <paul@city-fan.org> - 0.18-1
changelog:
  - Update to 0.18
    - Fix compatibility with CV-in-stash optimization (CPAN RT#123411)
    - Fix strict/warn flags seeming to do nothing (CPAN RT#122956); the
      documentation has been amended to clarify how these two options are
      supposed to be used


author: Paul Howarth <paul@city-fan.org> - 0.39-1
changelog:
  - Update to 0.39
    - Fix failures on perl ≥ 5.28.0 with -DDEBUGGING (CPAN RT#127118); the
      module has been amended to accommodate with a change of behaviour of a core
      macro
    - Updated contact information


author: Paul Howarth <paul@city-fan.org> - 1.0.1-1
changelog:
  - Update to 1.0.1
    - Fix breakage when using Moo/Moose and Function::Parameters on perl < 5.24
      (CPAN RT#124745)
    - Add t/rt-124745.t
    - Update ppport.h from 3.19 → 3.44
  - License changed from (GPL+ or Artistic) to Artistic 2.0
  - Modernize spec using features from ExtUtils::MakeMaker ≥ 6.76


author: Rex Dieter <rdieter@fedoraproject.org> - 4.10.3-11
changelog:
  - qt4-only compat package
  - fix URL
  - bump Release to ensure upgrade path from non-compat pkg
  - add explicit BR: gcc-c++
  - add comments for each patch
  - -devel: %license: COPYING-CMAKE-SCRIPTS


author: Owen Taylor <otaylor@redhat.com> - 4.10.1-3
changelog:
  - Pass Qt paths we'll use in the file list to CMake
  - In %check, augment PKG_CONFIG_PATH, not replace it


author: Xavier Bachelot <xavier@bachelot.org> - 1.0.9.0-1
changelog:
  - Update to 1.0.9.0.
  - Clean up specfile.
  - Add upstream patch to fix a php 7.2 deprecation warning.
    (Thanks Artur Iwicki)


author: Remi Collet <remi@remirepo.net> - 1.2.2-1
changelog:
  - Update to 1.2.2
  - add composer virtual provides
  - keep documentation in pear directory
  - run test suite during the build


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 1.2.6.3-1
changelog:
  - update to 1.2.6.3
  - add fixes for php >= 8.0 (patches from Patrick Monnerat <patrick@monnerat.net>)


author: gil cattaneo <puntogil@libero.it> 2.0.8-1
changelog:
  - updated to 2.0.8
  - use POM macros
  - update URL field
  - remove some rpmlint problems
  - add license files


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Philip Kovacs <pkdevel@yahoo.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Added enviromnent module for pmi/pmix
  - Added pkgconfig files for pmix/pmi/pmi2
  - Ensure lexer sources are rebuilt
  - Removed obsolete sasl support
  - Use new ldconfig_scriplets macro


author: Jarod Wilson <jarod@redhat.com> - 2.1.1-2
changelog:
  - Add the --with-tests-examples flag to be able to better verify functionality
  - Related: rhbz#1682374


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 0.4.8-4
changelog:
  - specfile cleanup according to Fedora Packaging Guidelines
  - ghostscript parts removed from specfile


author: Adam Jackson <ajax@redhat.com> 0.8.0-3
changelog:
  - poppler-0.8.0-ocg-crash.patch: Fix a crash when no optional content
    groups are defined.
  - Mangle configure to account for the new directory for qt3 libs.
  - Fix grammar in %description.


author: Marek Kasik <mkasik@redhat.com> - 0.12.3-3
changelog:
  - Correct permissions of goo/GooTimer.h
  - Convert pdftohtml.1 to utf8
  - Make the pdftohtml's Provides/Obsoletes versioned


author: Marek Kasik <mkasik@redhat.com> - 0.15.0-5
changelog:
  - Add poppler-0.15.0-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.15.0-CVE-2010-3703.patch
      (Properly initialize stack)
  - Add poppler-0.15.0-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639861


author: Marek Kasik <mkasik@redhat.com> - 0.17.3-2
changelog:
  - Don't include pdfextract and pdfmerge in resulting packages for now
  - since they conflict with packages pdfmerge and mupdf (#740906)


author: Marek Kasik <mkasik@redhat.com> 0.18.4-3
changelog:
  - Backport of a patch which sets mask matrix before drawing an image with a mask
  - Resolves: #817378


author: Marek Kasik <mkasik@redhat.com> 0.20.2-6
changelog:
  - Backport most of the changes from poppler-0.20.3 - poppler-0.20.5
  -   (those which doesn't change API or ABI and are important)
  - See poppler-0.20.3-5.patch for detailed list of included commits


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-8
changelog:
  - Check for stream before calling stream methods
  - when saving an embedded file
  - Resolves: #1649438


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-19
changelog:
  - Constrain number of cycles in rescale filter
  - Compute correct coverage values for box filter
  - Resolves: #1688418


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-25
changelog:
  - Check whether input is RGB in PSOutputDev::checkPageSlice()
  - also when using "-optimizecolorspace" flag
  - Resolves: #1697576


author: wangqia <wangqia@uniontech.com> - 1.18-3.01
changelog:
  - Fix incorrect handling of leftovers with poptStuffArgs and memory leak
  - Revert fix memory leak regressions in popt


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.8-2
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1977732


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.2-1
changelog:
  - Initial Red Hat Linux packaging, based on spec file from
    Simon J Mudd <sjmudd@pobox.com>
  - Changes from that:
    - Set up chroot environment in triggers to make sure we catch glibc errata
    - Remove some hacks to support building on all sorts of distributions at
      the cost of specfile readability
    - Remove postdrop group on deletion


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.3-1
changelog:
  - 1.1.3, TLS 0.8.3
  - Fix updating
  - Don't run the statistics cron job
  - remove requirement on perl Date::Calc


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.3-2
changelog:
  - listen on 127.0.0.1 only by default (#60071)
  - Put config samples in %{_docdir}/%{name}-%{version} rather than
    /etc/postfix (#60072)
  - Some spec file cleanups


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.3-3
changelog:
  - adjust the default postfix-files config file to match the alternatives setup
    by altering the arguments passed to post-install in the %install phase
    (otherwise, it might point to sendmail's binaries, breaking it rather rudely)
  - adjust the post-install script so that it silently uses paths which have been
    modified for use with alternatives, for upgrade cases where the postfix-files
    configuration file isn't overwritten
  - don't forcefully strip files -- that's a build root policy
  - remove hard requirement on openldap, library dependencies take care of it
  - redirect %postun to /dev/null
  - don't remove the postfix user and group when the package is removed


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.4-1
changelog:
  - 1.1.4
  - TLS 0.8.4
  - Move postalias run from %post to init script to work around
    anaconda being broken.


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed missing smtpd.conf file for SASL support and included SASL Postfix
    Red Hat HOWTO (#62505).
  - Included SASL2 support patch (#68800).


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fix shell in /etc/passwd (#68373)
  - fix documentation in /etc/postfix (#65858)
  - Provides: /usr/bin/newaliases (#66746)
  - fix autorequires by changing /usr/local/bin/perl to /usr/bin/perl in a
    script in %doc (#68852), although I don't think this is necessary anymore


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - upgrade to release 2.0.6
  - remove chroot as this is now the preferred installation according to Wietse Venema, the postfix author


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - upgrade to new 2.0.11 upstream release
  - fix authentication problems
  - rewrite SASL documentation
  - upgrade to use SASL version 2
  - Fix bugs 75439, 81913 90412, 91225, 78020, 90891, 88131


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.16-3
changelog:
  - add zlib-devel build prereq, fixes bug 112822
  - remove copy of resolve.conf into chroot jail, fixes bug 111923


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.16-4
changelog:
  - remove mysqlclient prereq, fixes bug 101779
  - remove md5 verification override, this fixes bug 113370. Write parse-postfix-files
    script to generate explicit list of all upstream files with ownership, modes, etc.
    carefully add back in all other not upstream files, files list is hopefully
    rock solid now.


author: John Dennis <jdennis@porkchop.devel.redhat.com>
changelog:
  - revert back to v1 of sasl because LDAP still links against v1 and we can't 
  - bump revision for build
    have two different versions of the sasl library loaded in one load image at
    the same time. How is that possible? Because the sasl libraries have different 
    names (libsasl.so & libsasl2.so) but export the same symbols :-(
    Fixes bugs 115249 and 111767


author: John Dennis <jdennis@porkchop.devel.redhat.com>
changelog:
  - set sasl back to v2 for mainline, this is good for fedora and beyond,
    for RHEL3, we'll branch and set set sasl to v1 and turn off ipv6


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.18-1
changelog:
  - bring source up to upstream release 2.0.18
  - include pflogsumm, fixes bug #68799
  - include smtp-sink, smtp-source man pages, fixes bug #118163


author: John Dennis <jdennis@redhat.com> 2:2.0.18-4
changelog:
  - remove version from pflogsumm subpackage, it was resetting the
    version used in the doc directory, fixes bug 119213


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.1-3.1
changelog:
  - fixed directory permissions in %doc (#125406)
  - fixed missing spool dirs (#125460)
  - fixed verify problem for aliases.db (#125461)
  - fixed bogus upgrade warning (#125628)
  - more spec file cleanup


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.4-1
changelog:
  - new version 2.1.4
  - new ipv6 and tls+ipv6 patches: 1.25-pf-2.1.4
  - new pfixtls-0.8.18-2.1.3-0.9.7d patch


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-2
changelog:
  - switched over to system aliases file and database in /etc/ (#117661)
  - new reuires and buildrequires for setup >= 2.5.36-1


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-2.2
changelog:
  - automated postalias call in init script
  - removed postconf call from spec file: moved changes into patch


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-5.1
changelog:
  - fixed open relay bug in postfix ipv6 patch: new version 1.26 (#146731)
  - fixed permissions on doc directory (#147280)
  - integrated fixed fqdn patch from Joseph Dunn (#139983)


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.0-1
changelog:
  - new version 2.2.0
  - cleanup of spec file: removed external TLS and IPV6 patches, removed 
    smtp_sasl_proto patch
  - dropped samples directory till there are good examples again (was TLS and
    IPV6)
  - v2.2.0 fixes code problems: #132798 and #137858


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.5-2.1
changelog:
  - replaced postconf and postalias call in initscript with newaliases (#156358)
  - fixed initscripts messages (#155774)
  - fixed build problems when sasl is disabled (#164773)
  - fixed pre-definition of mailbox_transport lmtp socket path (#122910)


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.10-1
changelog:
  - new version 2.2.10
  - added option LDAP_DEPRECATED to support deprecated ldap functions for now
  - fixed build without pflogsumm support (#188470)


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.2-1
changelog:
  - new version 2.3.2 with major upstream fixes:
    - corrupted queue file after a request to modify a short message header
    - panic after spurious Milter request when a client was rejected
    - maked the Milter more tolerant for redundant "data cleanup" requests
  - applying pflogsumm-conn-delays-dsn-patch from postfix tree to pflogsumm


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.6-1
changelog:
  - new version 2.3.6
  - limiting SASL mechanisms to plain login for sasl with saslauthd (#175259)
  - dropped usage of ed in the install stage


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.3-1
changelog:
  - new stable version 2.4.3
  - enabled mysql support (rhbz#185515)
  - dropped build requirements for gawk, ed and sed


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.3-2
changelog:
  - diabled mysql support again (rhbz#185515)
  - added support flag for PostgreSQL build (rhbz#180579)
    Ben: Thanks for the patch
  - Fixed remaining rewiew problems (rhbz#226307)


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.5-2
changelog:
  - made init script lsb conform (#243286, rhbz#247025)
  - added link to postfix sasl readme into Postfix-SASL-RedHat readme


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.5-3
changelog:
  - fixed multilib conflict for makedefs.out: rename to makedefs.out-%{_arch}
    (rhbz#342941)
  - enabled mysql support


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.6-1
changelog:
  - new verison 2.4.6
  - added virtual server(smtp) provide (rhbz#380631)
  - enabling IPv6 support (rhbz#197105)
  - made the MYSQL and PGSQL defines overloadable as build argument


author: Thomas Woerner <twoerner@redhat.com> 2:2.5.1-2
changelog:
  - fixed fix for enabling IPv6 support (rhbz#437024)
  - added new postfix data directory (rhbz#437042)


author: Thomas Woerner <twoerner@redhat.com> 2:2.5.1-3
changelog:
  - fixed postfix privilege problem with symlinks in the mail spool directory
    (CVE-2008-2936) (rhbz#459101)


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.5.5-2
changelog:
  - enable Large file support on 32-bit archs (#428996)
  - fix mailq(1) and newaliases(1) man pages (#429501)
  - move pflogsumm and qshape to -perl-scripts subpackage (#467529)
  - update pflogsumm to 1.1.1
  - fix large-fs patch
  - drop open_define patch
  - add -Wno-comment to CFLAGS


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.5.6-1
changelog:
  - update to 2.5.6 (#479108)
  - rebuild /etc/aliases.db only when necessary (#327651)
  - convert doc files to UTF-8


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.1-1
changelog:
  - update to 2.6.1
  - move non-config files out of /etc/postfix (#490983)
  - fix multilib conflict in postfix-files (#502211)
  - run chroot-update script in init script (#483186)
  - package examples (#251677)
  - provide all alternatives files
  - suppress postfix output in post script


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.5-3
changelog:
  - fix init script LSB compliance (#528151)
  - update pflogsumm to 1.1.2
  - require Date::Calc for pflogsumm (#536678)
  - fix some rpmlint warnings


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.7.0-2
changelog:
  - follow guidelines for alternatives (#570801)
  - move sasl config to /etc/sasl2 (#574434)
  - drop sasl v1 support
  - remove unnecessary requirements
  - use bcond macros


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.8.7-2
changelog:
  - Introduce systemd unit file, thanks to Jóhann B. Guðmundsson <johannbg@hi.is>
    Resolves: rhbz#718793


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.10.0-2
changelog:
  - Fixed systemd error message regarding chroot-update, patch provided
    by John Heidemann <johnh@isi.edu>
    Resolves: rhbz#917463


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.11.0-1
changelog:
  - New version
    Resolves: rhbz#1054116
  - Updated / de-fuzzified patches
  - Compiled with USE_LDAP_SASL if both "ldap" and "sasl" options are enabled.
    Patch provided by Davide Principi <davide.principi@nethesis.it>
    Resolves: rhbz#1052958


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.0.0-1
changelog:
  - New version
    Resolves: rhbz#1190797
  - Defuzzified alternatives, config, large-fs patches
  - Rebased files patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.0.0-4
changelog:
  - Switched to dynamically loaded libraries and database plugins
  - Enabled PostgreSQL support by default
  - Added SQLite support
  - Added CDB support


author: Dodji Seketeli <dodji@seketeli.org> - 2:3.0.1-2
changelog:
  - Avoid spurious errors by re-setting errno to 0 before calling that readdir()
    Resolves: rhbz#1204139
  - Add a patch to support compiling on Linux 4.*


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.0.2-1
changelog:
  - New version
    Resolves: rhbz#1245183
  - Dropped linux4 patch (not needed)
  - Defuzzified alternatives patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.0.3-4
changelog:
  - Increased alternatives priority, it is desirable to prefer postfix
    to e.g. ssmtp
    Resolves: rhbz#1255131


author: Ondřej Lysoněk <olysonek@redhat.com> - 2:3.1.1-3
changelog:
  - Preserve timestamps during 'make install'
    Patch provided by Robert Scheck
    Resolves: rhbz#1307064


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.1.2-1
changelog:
  - New version
    Resolves: rhbz#1370899
  - Dropped timestamps patch (upstream rejected)
  - Fixed minor whitespace problem


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.2.0-1
changelog:
  - New version
    Resolves: rhbz#1427860
  - De-fuzzified patches
  - Dropped timestamps patch (upstreamed)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.2.1-1
changelog:
  - New version
    Resolves: rhbz#1460474
  - Updated pflogsumm to 1.1.5
  - Fixed warnings if IPv6 addresses are in the log
    Resolves: rhbz#1384871


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.2.5-1
changelog:
  - New version
    Resolves: rhbz#1539465
  - Switched to libnsl2, because nsl is no longer provided by glibc
  - Macro workaround not to check symbols during compilation, because
    plugins have symbols which are unresolvable during compile time


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.3.1-1
changelog:
  - New version
    Resolves: rhbz#1548222
  - Updated libnsl2 library and header paths
    Resolves: rhbz#1543928
  - Updated license for dual licensing


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.3.1-10
changelog:
  - Release bump and rebuild for relengs to be able to ship postfix-pcre,
    postfix-cdb, postfix-sqlite
    Resolves: rhbz#1745321


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.9.0-1
changelog:
  - New version
  - Dropped pptpsetup-mppe, vector-remove-fix, and call-use-after-free-fix
    patches (all upstreamed)
  - Dropped loading of nf_conntrack_pptp kernel module which was workaround and
    according to upstream only hides real problems


author: Jakub Jelinek <jakub@redhat.com> 0.5.0-3
changelog:
  - fix R_390_IRELATIVE handling on s390/s390x (#973259, #1010392, #1010398)
  - change cron.daily/prelink permissions to rwxr-x--- (#1012538)


author: Mahailiang <mahailiang@chengjieos.com> 0.5.0-10
changelog:
  - Add arch: mips64el aarch64
  - Del make -C testsuite check-harder
  - Del make -C testsuite check-cycle


author: Devrim Gündüz <devrim@gunduz.org> - 6.2.0-1
changelog:
  - Update to 6.2.0
  - Applied https://src.fedoraproject.org/rpms/proj/pull-request/6 by
    Orion Poplawski.


author: Severin Gehwolf <sgehwolf@redhat.com> - 0.12.0-7
changelog:
  - Add JDK binding sub-packages so that the package
    can be used with either JDK 11 or JDK 17.
  - Add requirement on base package for the JDK binding packages.


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.3.0-6
changelog:
  - Fix java subpackage bugs #669345 and #669346
  - Use new maven plugin names
  - Use mavenpomdir macro for pom installation


author: Conrad Meyer <konrad@tylerc.org> - 2.4.1-9
changelog:
  - Fix packaging bug, -emacs-el subpackage should depend on -emacs subpackage of
    the same version (%version), not the emacs version number...


author: Conrad Meyer <cemeyer@uw.edu> - 2.5.0-2
changelog:
  - Remove changelog history from before 2010
  - This spec already runs autoreconf -fi during %build, but bump build for
    rhbz #926374


author: Conrad Meyer <cemeyer@uw.edu> - 2.6.0-1
changelog:
  - Bump to upstream release 2.6.0 (rh# 1154474).
  - Rebase 'java fixes' patch on 2.6.0 pom.xml.
  - Drop patch #3 (fall back to generic GCC atomics if no specialized atomics
    exist, e.g. AArch64 GCC); this has been upstreamed.


author: Orion Poplawski <orion@cora.nwra.com> - 2.6.1-1
changelog:
  - Update to 2.6.1
  - New URL
  - Cleanup spec
  - Add patch to fix emacs compilation with emacs 24.4
  - Drop java-fixes patch, use pom macros instead
  - Add BR on python-google-apputils and mvn(org.easymock:easymock)
  - Run make check
  - Make -static require -devel (bug #1067475)


author: Mat Booth <mat.booth@redhat.com> - 3.3.1-2
changelog:
  - Make OSGi dependency on sun.misc package optional. This package is not
    available in all execution environments and will not be available in Java 9.


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: maqi <maqi@uniontech.com> - 15.0-2.0.1.01
changelog:
  - feat: allow each user to access sound card and play audio
  - refer to task-view-260869
  - sync: add 0001-fix-default-soundcard-device-on-W550-H30-workstation.patch


author: Haibo Lin <hlin@redhat.com> - 4.2.10-1
changelog:
  - Show and log command when using the run_blocking_cmd() method (fdipretre)
  - Use cachedir when createrepo (hlin)
  - gather: Add all srpms to variant lookaside repo (lsedlar)
  - Add task URL to watch task log (hlin)
  - Log warning when module defined in variants.xml not found (hlin)
  - pkgset: Compare future events correctly (lsedlar)
  - util: Strip file:// from local urls (lsedlar)
  - Clean up temporary yumroot dir (hlin)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.3.0-1
changelog:
  - Only build CTS url when configured (lsedlar)
  - Require requests_kerberos only when needed (lsedlar)
  - Allow specifying $COMPOSE_ID in the `repo` value for osbs phase. (jkaluza)
  - Make getting old compose config reusable (lsedlar)
  - paths: Allow customizing log file extension (lsedlar)
  - Add authentication for updating the compose URL in CTS. (ounsal)
  - Fix type detection for osbuild images (lsedlar)
  - Enable pungi to send compose_url patches to CTS (ounsal)
  - Use xorriso instead of isoinfo when createiso_use_xorrisofs is enabled
    (ounsal)
  - Fix tests for createrepo (drumian)
  - Formatted files according to flake8 and black feedback (drumian)
  - Handle the pungi failures to ensure creation of log files (ounsal)
  - Add createrepo_enable_cache to configuration doc (hlin)
  - Fix formatting (hlin)
  - Install missing deps in ci image (hlin)
  - Use pytest directly incl. support for posargs, e.g.: tox -- -s -vvv
    tests/path/to/a/single/test_something.py (fvalder)
  - Supersede ModuleStream loading with ModuleIndex (fvalder)
  - Better error message than 'KeyError' in pungi (drumian)
  - Adding multithreading support for pungi/phases/image_checksum.py (jkunstle)
  - doc: more additional_packages documentation (kdreyer)
  - doc: fix typo in additional_packages description (kdreyer)
  - doc: improve signed packages retry docs (kdreyer)
  - Better error message than 'KeyError' in pungi (drumian)
  - doc: explain buildContainer API (kdreyer)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.3.1-1
changelog:
  - Correct irc network name & add matrix room (dan.cermak)
  - Add missing mock to osbs tests (lsedlar)
  - osbs: Reuse images from old compose (hlin)
  - image_build: Allow reusing old image_build results (hlin)
  - Allow ISO-Level configuration within the config file (ounsal)
  - Work around ODCS creating COMPOSE_ID later (lsedlar)
  - When `cts_url` is configured, use CTS `/repo` API for buildContainer
    yum_repourls. (jkaluza)
  - Add COMPOSE_ID into the pungi log file (ounsal)
  - buildinstall: Add easy way to check if previous result was reused (lsedlar)


author: Haibo Lin <hlin@redhat.com> - 4.3.2-1
changelog:
  - gather: Load JSON mapping relative to config dir (lsedlar)
  - gather: Stop requiring all variants/arches in JSON (lsedlar)
  - doc: make dnf "backend" settings easier to discover (kdreyer)
  - Remove with_jigdo argument (lsedlar)
  - Check dependencies after config validation (lsedlar)
  - default "with_jigdo" to False (kdreyer)
  - Stop trying to validate non-existent metadata (lsedlar)
  - test images for metadata deserialization error (fdipretre)
  - repoclosure: Use --forcearch for dnf repoclosure (lsedlar)
  - extra_isos: Allow reusing old images (lsedlar)
  - createiso: Allow reusing old images (lsedlar)
  - Remove default runroot channel (lsedlar)


author: Haibo Lin <hlin@redhat.com> - 4.3.3-1
changelog:
  - hybrid: Explicitly pull in debugsource packages (lsedlar)
  - Add module obsoletes feature (fvalder)
  - buildinstall: Add ability to install extra packages in runroot (ounsal)
  - Ignore osbs/osbuild config when reusing iso images (hlin)
  - compose: Make sure temporary dirs are world readable (lsedlar)
  - Pass compose parameter for debugging git issue (hlin)
  - Generate images.json for extra_isos phase (hlin)
  - Fix tests for python 2.6 (hlin)


author: Ondřej Nosek <onosek@redhat.com> - 4.3.4-1
changelog:
  - kojiwrapper: Add retries to login call (lsedlar)
  - Variants file in config can contain path (onosek)
  - nomacboot option for livemedia koji tasks (cobrien)
  - doc: improve osbs_registries explanation (kdreyer)
  - osbs: only handle archives of type "image" (kdreyer)
  - Update the default greedy_method value in doc (ounsal)
  - Fix the wrong working directory for the progress_notification script (ounsal)
  - Filter out environment groups unmatch given arch (hlin)
  - profiler: Respect provided output stream (lsedlar)
  - modules: Correct a typo in loading obsoletes (ppisar)
  - Do not clone the same repository multiple times, re-use already cloned
    repository (ounsal)


author: Petr Viktorin <pviktori@redhat.com> - 1.1-1
changelog:
  - Update to 1.1 to fix Python 3.8 compatibility in tests
    https://bugzilla.redhat.com/show_bug.cgi?id=1758446


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.3-22
changelog:
  - Update Python macros to new packaging standards
    (See https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 8.2.44-1
changelog:
  - Update to version 8.2.44
  - Drop EPEL 6 specializations (will be EOL November 2020)
  - Don't use python-embed when compiling python modules


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 8.3.06-1
changelog:
  - Update to version 8.3.06
  - Drop missing include patch (fixed upstream)
  - Update URL and Source tags to new domain (pythia.org)


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.1-9
changelog:
  - Subpackage python2-Bottleneck has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.4.3-3
changelog:
  - Subpackage python2-binaryornot has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Cole Robinson <crobinso@redhat.com> - 2.2.0-1
changelog:
  - Rebased to version 2.2.0
  - Port tests to pytest
  - cli: --cert Client side certificate support (Tobias Wolter)
  - cli: add ability to post comment while sending attachment (Jeff Mahoney)
  - cli: Add --comment-tag option
  - cli: Add info --active-components
  - Add a raw Product.get wrapper API
  - Don't traceback on missing cli command (bz #1513819)
  - Fix bug.get with sub_components (bz #1503491)
  - Fix uploading binary attachments (bz #1496821)


author: Cole Robinson <crobinso@redhat.com> - 2.3.0-1
changelog:
  - Update to version 2.3.0
  - restrict-login suppot (Viliam Krizan)
  - cli: Add support for private attachments (Brian 'Redbeard' Harrington)
  - Fix python3 deprecation warnings
  - Drop python 3.3 support, minimum python3 is python 3.4 now


author: Scott K Logan <logans@cottsay.net> - 0.4.11-1
changelog:
  - Update to 0.4.11
  - Switch to Python 3 Sphinx
  - Handle automatic dependency generation (f30+)
  - Make doc subpackage a weaker dependency


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 4.2.1-1
changelog:
  - Update to 4.2.1 (#1602746).
  - https://github.com/celery/celery/blob/v4.2.1/Changelog
  - Correct documentation license to CC-BY-SA.


author: Neal Gompa <ngompa13@gmail.com> - 4.2.1-2
changelog:
  - Switch celery binary to Python 3 in F30+
  - Switch to bconds for controlling the build
  - Drop unused macro


author: Miro Hrončok <mhroncok@redhat.com> - 0.0.1-0.10.20181018git212cb79
changelog:
  - Subpackage python2-collectd_systemd has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Steve Traylen <steve.traylen@cern.ch> - 0.0.1-0.16.20181018git212cb79
changelog:
  - BR systemd as systemd-rpm-macros does not exist yet.
  - condrestart collectd on upgrade in particular


author: Jakub Kadlčík <frostyx@email.cz> 1.94-1
changelog:
  - add CLI for permissions
  - support temporary projects
  - print friendly error on http when https is enforced
  - print helpful hints for config parsing errors
  - remove unnecessary PY3 condition
  - re-order spec {Build,}Requires
  - BuildRequires python3-mock
  - avoid 'collections.abc' warnings
  - handle timeout errors
  - remove old_status column from package table
  - fix wait function for custom List
  - remove dependency on python3-configparser


author: Pavel Raiskup <praiskup@redhat.com> 1.101-1
changelog:
  - allow to pick dist-git instance when building modules
  - fix traceback when wrong url to frontend is specified


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.6.7-9
changelog:
  - Drop explicit locale setting
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Matthias Runge <mrunge@redhat.com> - 2.2.3-1
changelog:
  - fix CVE-2019-12781 Incorrect HTTP detection with reverse-proxy connecting
    via HTTPS (rhbz#1726014)


author: Miro Hrončok <mhroncok@redhat.com> - 2.2.13-1
changelog:
  - Update to 2.2.13
  - Security fix for CVE-2020-7471 (rhbz#1798519)
  - Security fix for CVE-2020-9402 (rhbz#1810094)
  - Security fix for CVE-2020-13254 (rhbz#1843616)
  - Security fix for CVE-2020-13596 (rhbz#1843626)


author: Scott K Logan <logans@cottsay.net> - 3.0.9-1
changelog:
  - Update to 3.0.9
  - Add spec conditionals for python version targeting (rhbz#1632320)
  - Fix theme package dependency (s/sphinx_rtd_theme/sphinx-theme-alabaster/)


author: Scott K Logan <logans@cottsay.net> - 3.0.12-2
changelog:
  - Add explicit conflict between unlike python2/3 subpackages (rhbz#1708871)
  - Make the -doc subpackage dependency weaker


author: Brian C. Lane <bcl@redhat.com> - 0.12.2-4
changelog:
  - Add upstream changes from 0.12.4
    Resolves: rhbz#1585318
  - Add TestJSON to the gating test from upstream
    Related: rhbz#1585318


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.1-10
changelog:
  - Subpackage python2-formencode has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.0-6
changelog:
  - Subpackage python2-gitlab has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.0-4
changelog:
  - Subpackage python2-kazoo has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: - Maxim Burgerhout <wzzrd@fedoraproject.org> - 0.71b-2
changelog:
  - Enable tests to be run during build
  - Remove EL5 code from specfile in order to 
  - Fix %files section to include the proper files


author: - Maxim Burgerhout <wzzrd@fedoraproject.org> - 0.71c-1
changelog:
  - Build with new upstream tarball containing fixes for hashbangs, exec bits,
    a LICENSE file and more.


author: Ralph Bean <rbean@redhat.com> - 1.2.6-1
changelog:
  - New version with updated codepoints.
  - Disable the check section, due to issues discussed in #1583600.


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.22-8
changelog:
  - Fixes from package review
  - Change Requires: on tools subpackage to be the exact version/release
  - Remove unnecessary BuildRoot directive


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-1
changelog:
  - New upstream release 1.0.0
  - SOname bump to account for module loading changes
  - Rename libldb-tools to ldb-tools to make upgrades easier


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.3-2
changelog:
  - Build and install API documentation
  - Build tdb_compat and ccan statically. They have no upstream releases to
    link against yet and their API is in flux. It is unsafe to make them
    public and shared at this time.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.3-3
changelog:
  - Add explicit mention of the bundled libreplace
  - https://fedorahosted.org/fpc/ticket/120
  - Add explicit mention of bundled libtdb_compat and libccan
  - https://fedorahosted.org/fpc/ticket/119


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.4-1
changelog:
  - New upstream release
  - Add ldb_module_error() routine
  - Fedora: work around unreliable configure check for pytevent
  - Drop patch to ignore --disable-silent-rules (included in tarball)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.6-1
changelog:
  - New upstream release 1.1.6
  - Drop upstream patches
  - Required for upcoming Samba 4 beta
  - Explicitly build with tdb1 support


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.8-1
changelog:
  - New upstream release 1.1.8
  - Required for latest Samba 4 beta
  - Fixes for pyldb
  - Revert to using tdb1 by default
  - Drop support for tdb_compat
  - CCAN is no longer built as a static library


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.9-1
changelog:
  - New upstream release 1.1.9
  - Required for Samba 4 Beta 5
  - Ensure rename target does not exist before deleting old record
  - Add parameter to avoid NULL format string flagged by -Werror=format


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.14-2
changelog:
  - Add patch by Stephen Gallagher to include manual pages for
    ldb_connect() and several other functions.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.24-1
changelog:
  - New upstream release 1.1.24
  - Resolves: rhbz#1292070 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [fedora-all]


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.1.29-5
changelog:
  - rhbz#1401172 - Missing symbol versioning provided by libldb.so with strict CFLAGS
  - Fix configure time detection with -Werror=implicit-function-declaration
    -Werror=implicit-int


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.2-1
changelog:
  - New upstream release 1.3.3
  - Resolves: rhbz#1574267 - libldb-1.3.3 is available
  - Backport a patch from samba upstream to not require rpc.h


author: Petr Viktorin <pviktori@redhat.com> - 1.4.0-3
changelog:
  - Use %{__python2}, not "python", as the Python2 interpreter
  - Add workaround to allow building with Python 2
  - Remove the lmdb dependency in RHEL


author: Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1
changelog:
  - Resolves: rhbz#1684582 - Rebase libldb to version 1.5.4 for Samba
  - Resolves: rhbz#1567115 - libldb: Drop Python 2 subpackages from RHEL 8
  - Resolves: rhbz#1597243 - libldb uses Python 2 to build.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-2
changelog:
  - Fix some python2-related upgrade issues
  - Related: rhbz#1567115 - libldb: Drop Python 2 subpackages from RHEL 8


author: Isaac Boukris <iboukris@redhat.com> - 2.0.7-3
changelog:
  - Resolves: rhbz#1754423 - Rebase libldb to 2.0.7 version for samba
  - Related: rhbz#1754423 - Fix sssd tests (ldb)


author: Isaac Boukris <iboukris@redhat.com> - 2.2.0-1
changelog:
  - Resolves: rhbz#1878114 - Rebase libldb to the version required by Samba
  - Resolves: rhbz#1794349 - Build libldb with lmdb support


author: Andreas Schneider <asn@redhat.com> - 2.3.0-1
changelog:
  - resolves: rhbz#1945021 - Update to version 2.3.0
  - resolves: rhbz#1897082 - Fix libldb tests on aarch64


author: Petr Viktorin <pviktori@redhat.com> - 1.0.6-9
changelog:
  - Make python-beaker an optional dependency
  - Add missing python_provide for python3-mako
  - Conditionalize the Python 2 subpackage
  - Modernize the specfile


author: Petr Viktorin <pviktori@redhat.com> - 1.0.6-11
changelog:
  - Add back the Python 2 subpackage (temporarily, for mesa build)
    https://bugzilla.redhat.com/show_bug.cgi?id=1569193


author: Petr Viktorin <pviktori@redhat.com> - 1.0.6-13
changelog:
  - Disable the Python 2 subpackage again
    https://bugzilla.redhat.com/show_bug.cgi?id=1590397
  - Fix the Python2 workaround


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.0.0-6
changelog:
  - Python 2 binary package renamed to python2-markups
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.0.0-11
changelog:
  - Subpackage python2-markups has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Francisco Javier Tsao Santín <tsao@gpul.org> - 1.0.2-9
changelog:
  - Removed Python2 binary package 
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Javier Peña <jpena@redhat.com> - 1.29.0-2
changelog:
  - Include the binaries in the python2 subpackage when not building with Python3, for CentOS 7 compatibility


author: Paul Howarth <paul@city-fan.org> - 2.7.0-1
changelog:
  - Update to 2.7.0
    - Implement support for OpenSSH 6.5-style private key files (typically
      denoted as having 'BEGIN OPENSSH PRIVATE KEY' headers instead of PEM
      format's 'BEGIN RSA PRIVATE KEY' or similar); if you were getting any sort
      of weird auth error from "modern" keys generated on newer operating system
      releases (such as macOS Mojave), this is the first update to try (GH#602,
      GH#618, GH#1313, GH#1343)
    - Token expansion in 'ssh_config' used a different method of determining the
      local username ('$USER' environment variable), compared to what the (much
      older) client connection code does ('getpass.getuser', which includes
      '$USER' but may check other variables first, and is generally much more
      comprehensive); both modules now use 'getpass.getuser'
    - A couple of outright '~paramiko.config.SSHConfig' parse errors were
      previously represented as vanilla 'Exception' instances; as part of recent
      feature work a more specific exception class,
      '~paramiko.ssh_exception.ConfigParseError', has been created; it is now
      also used in those older spots, which is naturally backwards compatible
    - Implement support for the 'Match' keyword in 'ssh_config' files;
      previously, this keyword was simply ignored and keywords inside such blocks
      were treated as if they were part of the previous block (GH#717)
      - Note: this feature adds a new optional install dependency 'Invoke'
        (https://www.pyinvoke.org), for managing 'Match exec' subprocesses
    - Additional installation 'extras_require' "flavors" ('ed25519', 'invoke',
      and 'all') have been added to our packaging metadata
    - Paramiko's use of 'subprocess' for 'ProxyCommand' support is conditionally
      imported to prevent issues on limited interpreter platforms like Google
      Compute Engine; however, any resulting 'ImportError' was lost instead of
      preserved for raising (in the rare cases where a user tried leveraging
      'ProxyCommand' in such an environment); this has been fixed
    - Perform deduplication of 'IdentityFile' contents during 'ssh_config'
      parsing; previously, if your config would result in the same value being
      encountered more than once, 'IdentityFile' would contain that many copies
      of the same string
    - Implement most 'canonical hostname' 'ssh_config' functionality
      ('CanonicalizeHostname', 'CanonicalDomains', 'CanonicalizeFallbackLocal',
      and 'CanonicalizeMaxDots'; 'CanonicalizePermittedCNAMEs' has *not* yet
      been implemented) - all were previously silently ignored (GH#897)
    - Explicitly document which ssh_config features we currently support;
      previously users just had to guess, which is simply no good
    - Add new convenience classmethod constructors to
      '~paramiko.config.SSHConfig': '~paramiko.config.SSHConfig.from_text',
      '~paramiko.config.SSHConfig.from_file', and
      '~paramiko.config.SSHConfig.from_path'; no more annoying two-step process!
  - Add Recommends: of python3-invoke and python3-pyasn1 for optional
    functionality


author: Paul Howarth <paul@city-fan.org> - 2.7.1-1
changelog:
  - Update to 2.7.1
    - The new-style private key format (added in 2.7.0) suffered from an
      unpadding bug that had been fixed earlier for Ed25519 (as that key type has
      always used the newer format); that fix has been refactored and applied to
      the base key class (GH#1567)
    - Fix a bug in support for ECDSA keys under the newly-supported OpenSSH key
      format (GH#1565, GH#1566)


author: Paul Howarth <paul@city-fan.org> - 2.7.1-4
changelog:
  - Avoid FTBFS with pytest 5 (pytest-relaxed pulls in pytest 4)
  - Drop explicit dependencies for things that the python dependency generator
    finds by itself


author: Paul Howarth <paul@city-fan.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
    - Update our CI to catch issues with sdist generation, installation and
      testing
    - Add missing test suite fixtures directory to MANIFEST.in, reinstating the
      ability to run Paramiko's tests from an sdist tarball (GH#1727)
    - Remove leading whitespace from OpenSSH RSA test suite static key fixture,
      to conform better to spec. (GH#1722)
    - Fix incorrect string formatting causing unhelpful error message annotation
      when using Kerberos/GSSAPI
    - Fix incorrectly swapped order of 'p' and 'q' numbers when loading
      OpenSSH-format RSA private keys; at minimum this should address a slowdown
      when using such keys, and it also means Paramiko works with Cryptography
      3.1 and above, which complains strenuously when this problem appears
      (GH#1723)


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-16
changelog:
  - Add four new patches for CVEs in bundled urllib3 and requests
  - CVE-2018-20060, CVE-2019-11236, CVE-2019-11324, CVE-2018-18074
  - Resolves: rhbz#1649153
  - Resolves: rhbz#1700824
  - Resolves: rhbz#1702473
  - Resolves: rhbz#1643829


author: Tomas Orsava <torsava@redhat.com> - 9.0.3-18
changelog:
  - Patch for pip install <url> allow directory traversal, leading to arbitrary file write
  - Resolves: rhbz#1868016


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-20
changelog:
  - Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references
  - Resolves: rhbz#1962856


author: Tim Flink <tflink@fedoraproject.org> - 1.2.1-1
changelog:
  - Update to upstream 1.2.1
  - Change binary from pip-python to python-pip (RHBZ#855495)
  - Add alias from python-pip to pip-python, to be removed at a later date


author: Tim Flink <tflink@fedoraproject.org> - 1.4.1-1
changelog:
  - Removed patch for CVE 2013-2099 as it has been included in the upstream 1.4.1 release
  - Updated version to 1.4.1


author: Matej Stuchlik <mstuchli@redhat.com> - 1.5.6-3
changelog:
  - Added patch for local dos with predictable temp dictionary names
    (http://seclists.org/oss-sec/2014/q4/655)


author: Tomas Orsava <torsava@redhat.com> - 8.1.2-1
changelog:
  - Update to 8.1.2
  - Moved to a new PyPI URL format
  - Updated the prefix-stripping patch because of upstream changes in pip/wheel.py


author: Tomas Orsava <torsava@redhat.com> - 9.0.1-4
changelog:
  - Provide symlinks to executables to comply with Fedora guidelines for Python
  Resolves: rhbz#1406922


author: Tomas Orsava <torsava@redhat.com> - 9.0.1-12
changelog:
  - Switch macros to bcond's and make Python 2 optional to facilitate building
    the Python 2 and Python 3 modules


author: Tomas Orsava <torsava@redhat.com> - 9.0.3-5
changelog:
  - Split part of the python3-pip package into platform-python-pip
  - python3-pip will only contain binaries in /usr/bin
  - Resolves: rhbz#1638836


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-6
changelog:
  - python3-pip requires python36 and obsoletes previous version
    where python3- and platform-python- were in one package
  - Resolves: rhbz#1638836


author: Tomas Orsava <torsava@redhat.com> - 9.0.3-10
changelog:
  - Bump the NVR so it's higher than previous builds of python3-pip that have
    mistakenly gotten into the python27 module build when we were dealing with an
    MBS filtering problem. See BZ#1650568.
  - Resolves: rhbz#1638836


author: Victor Stinner <vstinner@redhat.com> - 9.0.3-11
changelog:
  - Prevent removing of the system packages installed under /usr/lib
    when pip install -U is executed. Patch by Michal Cyprian.
    Resolves: rhbz#1626408.


author: Miro Hrončok <mhroncok@redhat.com> - 9.0.3-13
changelog:
  - Use the system level root certificate instead of the one bundled in certifi
  - Resolves: rhbz#1655255


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-16
changelog:
  - Add four new patches for CVEs in bundled urllib3 and requests
  CVE-2018-20060, CVE-2019-11236, CVE-2019-11324, CVE-2018-18074
  Resolves: rhbz#1649153
  Resolves: rhbz#1700824
  Resolves: rhbz#1702473
  Resolves: rhbz#1643829


author: Tomas Orsava <torsava@redhat.com> - 9.0.3-18
changelog:
  - Patch for pip install <url> allow directory traversal, leading to arbitrary file write
  Resolves: rhbz#1868016


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-20
changelog:
  - Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references
  Resolves: rhbz#1962856


author: Raphael Groner <projects.rg@smart.ms> - 0.3.0-2
changelog:
  - fix URL
  - fix description
  - split doc subpackage
  - add dialog dependencies for runtime
  - ignore manpage warning of rpmlint due to interactive tui, later in scm


author: Miro Hrončok <mhroncok@redhat.com> - 1.6.4-3
changelog:
  - Subpackage python2-pyperclip has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2.2-11
changelog:
  - Python 2 binary package renamed to python2-pyside
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Orion Poplawski <orion@nwra.com> - 1.2.4-1
changelog:
  - Update to 1.2.4
  - Ship python3 version (bug #1320653)
  - Fix scriptlet packages
  - Drop deprecated provides filtering


author: zhangkea <zhangkea@uniontech.com> - 3.4.0-10.02
changelog:
  - fix cve CVE-2019-19450 
  - Do not evaluate unichar element
  - Replace an invalid char with a correct one (rpminspect)
  - Resolves: RHEL-7008


author: Rich Mattes <richmattes@gmail.com> - 0.11.2-1
changelog:
  - Update to release 0.11.2
  - Update to latest github guidelines
  - Use license macro for license file
  - Added python3 package


author: Scott K Logan <logans@cottsay.net> - 0.15.1-1
changelog:
  - Update to 0.15.1
  - Add executable links with Python version numbers
  - Create a separate 'doc' package
  - Co-own man page and sources directories among python2 and python3
  - Make python-rpm recommended (will fall back to RPM CLI if not present)


author: Scott K Logan <logans@cottsay.net> - 0.15.2-1
changelog:
  - Update to 0.15.2 (rhbz#1711473)
  - Handle automatic dependency generation (f30+)
  - Switch to Python 3 sphinx


author: Scott K Logan <logans@cottsay.net> - 0.16.1-2
changelog:
  - Add dependency on python-srpm-macros to resolve %{python3_pkgversion}
  - Add weak dependencies for RHEL 8
  - Make doc subpackage dependency weaker


author: Scott K Logan <logans@cottsay.net> - 0.3.7-1
changelog:
  - Update to release 0.3.7
  - Remove argparse patch (fixed upstream)
  - Fix sphinx dependency in el6
  - Add check section
  - Add python3 package


author: Scott K Logan <logans@cottsay.net> - 0.7.3-1
changelog:
  - Update to 0.7.3 (rhbz#1693483)
  - Switch to Python 3 Sphinx
  - Handle automatic dependency generation (f30+)
  - Make doc subpackage a weaker dependency


author: Scott K Logan <logans@cottsay.net> - 1.1.8-1
changelog:
  - Update to 1.1.8 (rhbz#1699085)
  - Switch to Python 3 Sphinx
  - Create a separate 'doc' package
  - Handle automatic dependency generation (f30+)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:1.7.6-2
changelog:
  - Drop explicit locale setting for python3, use C.UTF-8 for python2
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Miro Hrončok <mhroncok@redhat.com> - 3.2.1-13
changelog:
  - Subpackage python2-statsd has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.0-12
changelog:
  - Python2 binary package has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 3.5.2-2
changelog:
  - Subpackage python2-tables has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.11.10-7
changelog:
  - Python 2 binary package renamed to python2-werkzeug
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.2-4
changelog:
  - Subpackage python2-wrapt has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.81-27
changelog:
  - Subpackage python2-IPy has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.4.1-9
changelog:
  - Python 2 binary package renamed to python2-wsgiproxy2
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 3.4-1
changelog:
  - Update to 3.4
  - Modernize spec file a little
  - Drop building the documentation as apparently upstream stopped shipping it in
    their tarball


author: Jerry James <loganjerry@gmail.com> - 3.7.1-1
changelog:
  - New upstream version
  - Add workaround for https://github.com/pypa/setuptools/issues/1062
  - Delete shebangs from nonexecutable files


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.5-12
changelog:
  - Subpackage python2-contextlib2 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 3.2.1-1
changelog:
  - Rebase to upstream release 3.2.1
  - Resolves: rhbz#1873581
  - Resolves: rhbz#1778939
  - Removed dependencies on python-asn1crypto, python-idna


author: Christian Heimes <cheimes@redhat.com> - 3.2.1-4
changelog:
  - CVE-2020-36242: Fixed a bug where certain sequences of update() calls
    when symmetrically encrypting very large payloads (>2GB) could result
    in an integer overflow, leading to buffer overflows.
  - Resolves: rhbz#1926528


author: Miro Hrončok <mhroncok@redhat.com> - 0.6.2-15
changelog:
  - Subpackage python2-docopt has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 0.6.7-1
changelog:
  - Update to 0.6.7 (#1609253).
  - https://dogpilecache.readthedocs.io/en/latest/changelog.html#change-0.6.7


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.96-18
changelog:
  - Python 2 binary package renamed to python2-easygui
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.6-4
changelog:
  - Subpackage python2-httmock has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.4-7
changelog:
  - Python 2 binary package renamed to python2-isodate
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9.6-21
changelog:
  - Python 2 binary package renamed to python2-kid
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Subpackage python2-ldap3 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:0.11.0-8
changelog:
  - Python 2 binary package renamed to python2-lockfile
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 0.35.2-4
changelog:
  - Subpackage python2-m2crypto has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Mohan Boddu <mboddu@bhujji.com> - 0-3.20170523git77cb3ee
changelog:
  - Following the upstream release numbers
  - Allow providing HTTP method
  - Make refresh_token also update the cache


author: Miro Hrončok <mhroncok@redhat.com> - 2.0.1-4
changelog:
  - Subpackage python2-paste-deploy has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 2.3.4-5
changelog:
  - Subpackage python2-pathlib2 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jeremy Cline <jcline@redhat.com> - 1.0.0-1
changelog:
  - Update to v1.0.0
  - De-conditionalize specfile
  - Build documentation with Python 3
  - Simplify check section to only run unit tests


author: Jeremy Cline <jcline@redhat.com> - 1.0.1-2
changelog:
  - Drop tests for Python 2 as Tornado is going away
  - Drop integration test requirements from specfile


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 0.4.2-1
changelog:
  - Update to 0.4.2 (#1469107).
  - https://github.com/Pylons/plaster_pastedeploy/blob/0.4.2/CHANGES.rst


author: Carl George <carl@george.computer> - 5.6.3-6
changelog:
  - Drop python3-psutil subpackage (provided in RHEL 8)
  - Rename spec file to python2-psutil.spec to avoid conflict with RHEL 8 SRPM
  - See rhbz#1797174 for more information


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.3.6-9
changelog:
  - Python 2 binary package renamed to python2-pydns
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.1-10
changelog:
  - Update Python macros to new packaging standards
    (See https://fedoraproject.org/wiki/Changes/Move_usr_bin_python_into_separate_package)


author: Orion Poplawski <orion@nwra.com> - 1:2.6.0-1
changelog:
  - Revert to 2.6.0 and bump epoch to handle older pytest in RHEL8.0
  - Enable python dependency generator


author: Tony Asleson <tasleson@redhat.com> - 0.11.0-8
changelog:
  - Fix the conflict with sblim-wbemcli: RHBZ #1757855
  - Corrected warning about multiple file inclusion


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.3-13
changelog:
  - Python 2 binary package renamed to python2-pyxattr
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.36.0-3
changelog:
  - Python 2 binary package renamed to python2-qpid
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.4-15
changelog:
  - Python 2 binary package renamed to python2-repoze-lru
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: openEuler Buildteam <buildteam@openeuler.org> - 4.15.1-13
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert always execute file trigger scriptlet callbacks with owning header


author: Anakin Zhang <benjamin93@163.com> - 4.15.1-18
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:generate digest lists and add digest list plugin to support IMA


author: panxiaohe <panxiaohe@huawei.com> - 4.15.1-20
changelog:
  - Type:enhancement
  - ID:NA
  - SUG:NA
  - DESC:use ndb instead of Berkeley DB, and deprecate Berkeley DB.


author: shixuantong <shixuantong@huawei.com> - 4.15.1-27
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix data race in packageBinaries() function and prioritize large packages


author: renhongxun<renhongxun@h-partners.com> - 4.15.1-42
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix regression on ctrl-c during transaction killing scriptlets


author: yuxiaojun <yuxiaojun@uniontech.com> - 4.15.1-49.01
changelog:
  - fix: Rpm installs multiple packages at a time, and there is a bug that the labels are confused(bugid:187073)


author: mahailiang <mahailiang@uniontech.com> - 4.15.1-52.10
changelog:
  - feat: debugedit: Skip relocations with missing symbol/section offset
  - arch: add sw_64 debugedit support


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.16-19
changelog:
  - Python 2 binary package renamed to python2-saslwrapper
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 2.4.0-8
changelog:
  - Subpackage python2-scapy has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Michal Ambroz <rebus _AT seznam.cz> - 2.4.3-1
changelog:
  - bump to 2.4.3 release
  - change the python2 to conditional build to be able to keep one spec for all
  - add Recommends for dependencies, except for EPEL7


author: Michal Ambroz <rebus _AT seznam.cz> - 2.4.3-3
changelog:
  - remove colliding manpage from python2 package
  - add license files
  - add doc subpackage
  - remove shebangs


author: Javier Peña <jpena@redhat.com> - 1.0.1-8.20180316git
changelog:
  - Update to commit ebe84efc1a869da8d5689c706cdcf6ea864f0d9b
  - Fix build with Sphinx 1.7 (bz#1578132)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.1-17
changelog:
  - Python 2 binary package renamed to python2-tempita
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.5-4
changelog:
  - Subpackage python2-webob has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Merlin Mathesius <mmathesi@redhat.com> - 2.0.29-3
changelog:
  - Override py3dir to avoid potential troublesome characters in path
    (such as "+") that can cause test_http self-test errors


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.1.0-19
changelog:
  - Python 2 binary package renamed to python2-which
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 4.0.3-9
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
  - Disabled tests in Python 3 due to them failing upstream.
  - Mark the license with the license macro.
  - Rename python-zope-configuration to python2-zope-configuration.
  - Used GitHub as new URL and Source0 since the old URLs were 404.
  - Dropped BuildRoot.
  - Use global instead of define for modname variable.


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 4.0.3-10
changelog:
  - The python2- subpackage now provides the python- name.
  - Correct a changelog entry from the last build not to use a macro.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 4.1.1-13
changelog:
  - Python 2 binary package renamed to python2-zope-deprecation
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Fabian Affolter <mail@fabian-affolter.ch> - 2.1.4-1
changelog:
  - Switch to PyPI for the source to get rid of the BitBucket shortcomings
  - Update to latest upstream release 2.1.4


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 1.3.1-1
changelog:
  - Update to 1.3.1 (#1767518).
  - https://alembic.sqlalchemy.org/en/latest/changelog.html#change-1.3.1


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 1.4.0-1
changelog:
  - Update to 1.4.0 (#1784129).
  - https://alembic.sqlalchemy.org/en/latest/changelog.html#change-1.4.0


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.12-17
changelog:
  - Subpackage python2-altgraph has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Ken Dreyer <kdreyer@redhat.com> - 1.5-1
changelog:
  - Update to new upstream version 1.5 (rhbz#1672801)
  - Update package URL and Source0
  - Use setuptools_scm
  - Handle README file rename


author: Miro Hrončok <mhroncok@redhat.com> - 1.5-4
changelog:
  - Subpackage python2-apipkg has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.4.3-12
changelog:
  - Subpackage python2-appdirs has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.3.3-10
changelog:
  - Subpackage python2-asciitree has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0-13
changelog:
  - Python 2 binary package renamed to python2-auth-credential
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0-18
changelog:
  - Subpackage python2-auth-credential has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Mohamed El Morabity <melmorabity@fedoraproject.org> - 4.0.0-3
changelog:
  - Build documentation with Python 3 on Fedora
  - Fix Python 3-only file deployment
  - Don't glob everything under the Python sitelib directory


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.0-9
changelog:
  - Update to 4.0.0 + azure-mgmt-compute 5.0.0 (for skip_shutdown feature)
    Resolves: rhbz#1708129
  - Add CI gating tests
    Resolves: rhbz#1682879


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 1.6.0-1
changelog:
  - Update to 1.6.0 (#1566766).
  - https://github.com/litl/backoff/blob/v1.6.0/CHANGELOG.md
  - Import a patch from an upstream pull request to solve a Python 3.7 compatibility issue (#1605610).


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.4.2-10
changelog:
  - Subpackage python2-batinfo has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.7-3
changelog:
  - Subpackage python2-bcrypt has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.8.1-5
changelog:
  - Subpackage python2-betamax has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.7-5
changelog:
  - Subpackage python2-blessings has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.6-23
changelog:
  - Subpackage python2-blist has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.12.13-10
changelog:
  - Subpackage python2-bottle has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Petr Viktorin <pviktori@redhat.com> - 1.16.3-2
changelog:
  - Allow Python 2 for build
    See: https://hurl.corp.redhat.com/rhel8-py2

  - Skip tests on Python 2 (python2-pytest is being removed)


author: Miro Hrončok <mhroncok@redhat.com> - 0.2.2-12
changelog:
  - Subpackage python2-catkin-sphinx has been removed
    See https://fedoraproject.org/wiki/Changes/Sphinx2


author: Miro Hrončok <mhroncok@redhat.com> - 1.5-11
changelog:
  - Subpackage python2-cccolutils has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: <jdennis@redhat.com> - 2018.10.15-3
changelog:
  - Resolves: rhbz#1659132 Incorrect location used for system certs
    where() now returns /etc/pki/tls/certs/ca-bundle.crt


author: Miro Hrončok <mhroncok@redhat.com> - 0.8.8-7
changelog:
  - Subpackage python2-cmd2 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.4-6
changelog:
  - Subpackage python2-colander has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.12.0-6
changelog:
  - Subpackage python2-configargparse has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Peter Robinson <pbrobinson@fedoraproject.org> 2.9.45-2
changelog:
  - Add python2 build deps to conditional
  - Re-enable python2 builds on rawhide as it's still a build requirement


author: clime <clime@redhat.com> 0.3-1
changelog:
  - %{python_sitelib} → %{python2_sitelib}
  - fix git packing for python-copr, copr-common
  - fix reading spec file values from setup.py
  - rpkg deployment into COPR


author: Miroslav Suchý <msuchy@redhat.com> 0.4-1
changelog:
  - sync common.BuildSourceEnum with helpers.BuildSourceEnum
  - use git_dir_archive instead of git_dir_pack
  - packaging: Python 2/3, RHEL/Fedora fixes


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 3.0.0-1
changelog:
  - Update to 3.0.0 (#1430178).
  - https://github.com/Cornices/cornice/blob/3.0.0/CHANGES.txt
  - https://cornice.readthedocs.io/en/latest/upgrading.html
  - Clean up spec file to target only Rawhide since 3.0.0 can not be released on older releases.


author: Miro Hrončok <mhroncok@redhat.com> - 3.4.0-2
changelog:
  - Subpackage python2-cornice has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1:0.3-7
changelog:
  - Subpackage python2-cornice-sphinx has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Brian C. Lane <bcl@redhat.com> - 1.8.2-1
changelog:
  - Upstream release 1.8.2
    rhbz#1719981
  - Removeing python2 package
  - Switched to upstream source tar.gz from GitHub because it includes docs (and tests)
  - Add new python3-coveralls-docs package with html documentation and sphinx source


author: Zbigniew JÃ„â„¢drzejewski-Szmek <zbyszek@in.waw.pl> - 0.6-18
changelog:
  - Subpackage python2-cram has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.3.4-12
changelog:
  - Python 2 binary package renamed to python2-croniter
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.0-13
changelog:
  - Subpackage python2-cycler has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.2.12-12.post1
changelog:
  - Subpackage python2-d2to1 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 2.2.3-6
changelog:
  - Subpackage python2-daemon has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.16.7-4
changelog:
  - Python 2 binary package renamed to python2-dbusmock
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Bastien Nocera <bnocera@redhat.com> - 0.17-4
changelog:
  + python-dbusmock-0.17-4
  - Patch from Benjamin Berg to correct the python3 subpackage deps
    and summary


author: Adam Williamson <awilliam@redhat.com> - 0.5.0-1
changelog:
  - Update to 0.5.0, drop merged/superseded patches
  - Enable Python 3 build for EPEL 7, per https://fedoraproject.org/wiki/PackagingDrafts:Python3EPEL
  - Drop format-string patch as Python 2.6 is no longer supported anyway
  - Update URL to github
  - Update source URL for pypi changes


author: zhangbinchen <zhangbinchen@openanolis.org> - 3.6.8-51.0.1.1
changelog:
  - Add Anolis platform cherry-pick [9a96461]
  - Support Loongarch for python3
  - Fix testcase fails on loongarch64


author: wxiat <nijie@wxiat.com> - 3.6.8-56.0.2.1
changelog:
  - cherry-pick `add sw patch #1182efa2f05c5804a55d35d45a9d72f97b64a9b2`.
  - cherry-pick `sw use python of wordsize 64 #862dabb407d3f98c64f3a9d2675fcd3a6300a21f`.


author: zhangkea <zhangkea@uniontech.com> - 3.6.8-56.0.2.2
changelog:
  - spec: change redhat-rpm-config to uos-rpm-config
  - rebrand: add uos platform
  - feat: add sm3 support


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-2
changelog:
  - disable invocation of brp-python-bytecompile in postprocessing, since
  it would be with the wrong version of python (adapted from ivazquez'
  python3000 specfile)
  - use a custom implementation of __find_provides in order to filter out bogus
  provides lines for the various .so modules
  - fixup distutils/unixccompiler.py to remove standard library path from rpath
  (patch 1, was Patch0 in ivazquez' python3000 specfile)
  - split out libraries into a -libs subpackage
  - update summaries and descriptions, basing content on ivazquez' specfile
  - fixup executable permissions on .py, .xpm and .xbm files, based on work in
  ivazquez's specfile
  - get rid of DOS batch files
  - fixup permissions for shared libraries from non-standard 555 to standard 755
  - move /usr/bin/python*-config to the -devel subpackage
  - mark various directories as being documentation


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-3
changelog:
  - remove executable flag from various files that shouldn't have it
  - fix end-of-line encodings
  - fix a character encoding


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-4
changelog:
  - update patch0's setup of the crypt module to link it against libcrypt
  - update patch0 to comment "datetimemodule" back out, so that it is built
  using setup.py (see Setup, option 3), thus linking it statically against
  timemodule.c and thus avoiding a run-time "undefined symbol:
  _PyTime_DoubleToTimet" failure on "import datetime"


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-5
changelog:
  - fixup importlib/_bootstrap.py so that it correctly handles being unable to
  open .pyc files for writing (patch 2, upstream issue 7187)
  - actually apply the rpath patch (patch 1)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-6
changelog:
  - reword description, based on suggestion by amcnabb
  - fix the test_email and test_imp selftests (patch 3 and patch 4 respectively)
  - fix the test_tk and test_ttk_* selftests (patch 5)
  - fix up the specfile's handling of shebang/perms to avoid corrupting
  test_httpservers.py (sed command suggested by amcnabb)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-7
changelog:
  - remove commented-away patch 51 (python-2.6-distutils_rpm.patch): the -O1
  flag is used by default in the upstream code
  - "Makefile" and the config-32/64.h file are needed by distutils/sysconfig.py
  _init_posix(), so we include them in the core package, along with their parent
  directories (bug 531901)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-8
changelog:
  - add a provides of "python(abi)" (see bug 532118)
  - fix issues identified by a.badger in package review (bug 526126, comment 39):
    - use "3" thoughout metadata, rather than "3.*"
    - remove conditional around "pkg-config openssl"
    - use standard cleanup of RPM_BUILD_ROOT
    - replace hardcoded references to /usr with _prefix macro
    - stop removing egg-info files
    - use /usr/bin/python3.1 rather than /use/bin/env python3.1 when fixing
  up shebang lines
    - stop attempting to remove no-longer-present .cvsignore files
    - move the post/postun sections above the "files" sections


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-9
changelog:
  - add macros.python3 to the -devel subpackage, containing common macros for use
  when packaging python3 modules


author: Andrew McNabb <amcnabb@mcnabbs.org> - 3.1.1-10
changelog:
  - switched a few instances of "find |xargs" to "find -exec" for consistency.
  - made the description of __os_install_post more accurate.


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-11
changelog:
  - add %check section (thanks to Thomas Spura)
  - update patch 4 to use correct shebang line
  - get rid of stray patch file from buildroot


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-12
changelog:
  - remove build-time requirements on tix and tk, since we already have
  build-time requirements on the -devel subpackages for each of these (Thomas
  Spura)
  - replace usage of %define with %global (Thomas Spura)
  - remove forcing of CC=gcc as this old workaround for bug 109268 appears to
  longer be necessary
  - move various test files from the "tools"/"tkinter" subpackages to the "test"
  subpackage


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-14
changelog:
  - replace references to /usr with %{_prefix}; replace references to
  /usr/include with %{_includedir} (Toshio)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-15
changelog:
  - fix the URLs output by pydoc so they point at python.org's 3.1 build of the
  docs, rather than the 2.6 build


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-16
changelog:
  - use the %{_isa} macro to ensure that the python-devel dependency on python
  is for the correct multilib arch (#555943)
  - delete bundled copy of libffi to make sure we use the system one


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-19
changelog:
  - add %py3dir macro to macros.python3 (to be used during unified python 2/3
  builds for setting up the python3 copy of the source tree)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-20
changelog:
  - change python-3.1.1-config.patch to remove our downstream change to curses
  configuration in Modules/Setup.dist, so that the curses modules are built using
  setup.py with the downstream default (linking against libncursesw.so, rather
  than libncurses.so), rather than within the Makefile; add a test to %install
  to verify the dso files that the curses module is linked against the correct
  DSO (bug 539917; changes _cursesmodule.so -> _curses.so)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-21
changelog:
  - introduce %{dynload_dir} macro
  - explicitly list all lib-dynload files, rather than dynamically gathering the
  payload into a temporary text file, so that we can be sure what we are
  shipping
  - introduce a macros.pybytecompile source file, to help with packaging python3
  modules (Source3; written by Toshio)
  - rename "2to3-3" to "python3-2to3" to better reflect python 3 module packaging
  plans


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-22
changelog:
  - update python-3.1.1-config.patch to remove downstream customization of build
  of pyexpat and elementtree modules
  - add patch adapted from upstream (patch 7) to add support for building against
  system expat; add --with-system-expat to "configure" invocation
  - remove embedded copies of expat and zlib from source tree during "prep"


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-24
changelog:
  - move the -gdb.py file from %{_libdir}/INSTSONAME-gdb.py to
  %{_prefix}/lib/debug/%{_libdir}/INSTSONAME.debug-gdb.py to avoid noise from
  ldconfig (bug 562980), and which should also ensure it becomes part of the
  debuginfo subpackage, rather than the libs subpackage
  - introduce %{py_SOVERSION} and %{py_INSTSONAME} to reflect the upstream
  configure script, and to avoid fragile scripts that try to figure this out
  dynamically (e.g. for the -gdb.py change)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-25
changelog:
  - split configure options into multiple lines for easy of editing
  - add systemtap static markers (wcohen, mjw, dmalcolm; patch 8), a systemtap
  tapset defining "python.function.entry" and "python.function.return" to make
  the markers easy to use (dmalcolm; source 5), and an example of using the
  tapset to the docs (dmalcolm; source 6) (rhbz:545179)


author: Thomas Spura <tomspur@fedoraproject.org> - 3.1.1-26
changelog:
  - rebuild for new package of redhat-rpm-config (rhbz:564527)
  - use 'install -p' when running 'make install'


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-27
changelog:
  - add pyfuntop.stp example (source 7)
  - convert usage of $$RPM_BUILD_ROOT to %{buildroot} throughout, for
  consistency with python.spec


