# changelog

author: Nils Philippsen <nils@redhat.com> - 0.6.0-1
changelog:
  - version 0.6.0
    - support Python 3.x
    - fix util.hookable hashing, add Hookable.add_hook_hookable()
  - remove our own age-old python directory macros
  - fix changelog date


author: Nils Philippsen <nils@redhat.com> - 0.6.2-1
changelog:
  - dbus: listen less aggressively on NameOwnerChanged signals
  - use GLib instead of GObject for wrapper functions (#1202554)


author: Scott Talbert <swt@techie.net> - 0.7-0.1.94664ddd46a6
changelog:
  - Switched to Jurko fork of suds
  - Modernize python packaging, build python3 package
  - Fixed bogus changelog dates


author: Scott Talbert <swt@techie.net> - 0.7-0.2.94664ddd46a6
changelog:
  - Applied patch from Haikel Guemar to support building on CentOS w/o Python 3
  - Move BRs to subpackages, support python- vs python2- BRs on non-Fedora


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.3-1
changelog:
  - Updated to 0.5.3
  - Updated the website
  - Updated download URL to PyPI
  - Removed useless Require of python >= 2.2
  - Use %{pythonX_sitearch} macros
  - Removed BuildRoot definition, %clean section and rm -rf at the beginning of %install
  - Introduced Python 3 subpackage
  - Introduced %check and run the test suite


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 1.0.0-2
changelog:
  - Upstream clarified that the license is indeed GPLv2:
    https://github.com/SpamExperts/pyzor/issues/35


author: Cole Robinson <crobinso@redhat.com> - 2:2.9.0-0.1-rc2
changelog:
  - Rebase to qemu-2.9.0-rc2
  - Add Obsoletes for or32-or1k rename (bz 1435016)
  - spec: Pull in vga and pxe roms for ppc64 (bz 1431403)


author: Peter Gordon <peter@thecodergeek.com> - 3.4.2-1
changelog:
  - Update to new upstream release (3.4.2)
    - Fixes a memory leak, string-splitting, and Micro QR encoding bugs.
  - Run autoconf in %build to add ARM 64 (aarch64) to the configure scripts.
  - Resolves:  #926414 (qrencode: Does not support aarch64 in f19 and rawhide)
  - Update source/homepage URLs.


author: Rex Dieter <rdieter@fedoraproject.org> - 1:4.8.7-24
changelog:
  - namespace QT_VERSION_CHECK to workaround major/minor being pre-defined (#1396755)
  - update QTBUG-22829.patch to define _SYS_SYSMACROS_H (#1396755)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.7.1-6
changelog:
  - namespace QT_VERSION_CHECK to workaround major/minor being pre-defined (#1396755)
  - update moc patch to define _SYS_SYSMACROS_H (#1396755)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.7.1-2
changelog:
  - 5.7.1 dec5 snapshot
  - drop BR: cmake (handled by qt5-rpm-macros now)
  - BR: qt5-qtbase-private-devel


author: Helio Chissini de Castro <helio@kde.org> - 5.7.0-5
changelog:
  - Fix typo. Thanks to Diego Herrera.
  - Add macro qt5_includedir as more logical than headerdir. Old one still available


author: Rex Dieter <rdieter@fedoraproject.org> - 5.7.0-8
changelog:
  - introduce -srpm-macros (initially defines %qt5_qtwebengine_arches)
  - -devel: drop Requires: qt5-qtwebengine-devel (since not all archs are supported)


author: Petr Pisar <ppisar@redhat.com> - 1:4.03-6
changelog:
  - Correct repquota indentation for file systems with hiden quota files
  - Remove unnecessary quota dependency from quota-devel package
  - Break licenses down to each package


author: Paul Howarth <paul@city-fan.org> 0.997-1
changelog:
  - update to 0.997
    - main feature of this version is ipv6 support
    - feature: ip6trie - new dataset supports listing of arbitrary length ip6
      CIDRs, along with individual A/TXT values for each prefix
    - feature: ip6tset - new dataset supports listing of ip6 /64 subnets and the
      exclusion of /128 subnets; only supports a single A/TXT value for the
      entire dataset
    - optimization: ip4trie - using new trie implementation (developed for the
      ip6trie dataset) decreases memory consumption by roughly a factor of three
    - feature: acl dataset - ip6 addresses are now supported in ACLs
    - feature: added --enable-asserts configure option to enable compilation of
      debugging assertions; assertion checking is disabled by default
    - featurette: zero-length "wildcard" IP4 CIDR prefixes are now allowed in
      ip4trie and acl datasets


author: Paul Howarth <paul@city-fan.org> 0.997a-1
changelog:
  - update to 0.997a
    - minor fixes/changes in packaging, no code changes
    - in particular, fixes a build failure on *BSD introduced in 0.997


author: Paul Howarth <paul@city-fan.org> 0.997a-4
changelog:
  - fix return value from initscript, by using process substitution instead of
    a while loop at the end of a pipe (#1118013)
  - drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 0.998-1
changelog:
  - Update to 0.998
    - Correctly handle V4MAPPED (v4 in v6) addresses; the original v6 prefix was
      wrong
    - Sometimes IP4-based datasets gave false positives when an IP6 dataset was
      present, and it was also possible to have false positives in IP6 datasets;
      both have been fixed


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.0-10.5
changelog:
  - Install license file with javadoc package
  - Convert versioned javadoc to versionless
  - Update to current packaging guidelines
  - Remove msv provides and obsoletes


author: Mat Booth <mat.booth@redhat.com> - 2011.1-1
changelog:
  - Update to version released from new project location rhbz#981275
  - Build/install with maven instead of ant
  - Drop old javadoc rpm bug workaround


author: Kalev Lember <kalevlember@gmail.com> - 0.7.93-1
changelog:
  - Update to 0.7.93
  - Tighten deps with the _isa macro
  - Don't manually require pkgconfig; rpmbuild generates this automatically
  - Use license macro for the COPYING file


author: gil cattaneo <puntogil@libero.it> 3.0.17-1
changelog:
  - update to 3.0.17.Final
  - introduce license macro
  - enable resteasy-links, resteasy-oauth, resteasy-wadl modules
  - build resteasy-netty{3,4}


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 5-4
changelog:
  - Build with hardening flags (#1051344)
  - Fail nicely if no hardware generator is found (#892178)
  - Drop unneeded dependency


author: Stephen Gallagher <sgallagh@redhat.com> 0.4.0-3.rc1
changelog:
  - Added support for installing roles through kickstart
  - Added support for providing setting values through stdin
  - Enabled deploying Domain Controller and Database Server with no mandatory
    options
  - New API feature: sanitize() which will remove sensitive information from the
    settings output (such as autogenerated passwords once they have been
    recorded)


author: Stephen Gallagher <sgallagh@redhat.com> 0.4.0-5
changelog:
  - Release version 0.4.0
  - Drop upstreamed patches
  - https://github.com/libre-server/rolekit/releases/tag/rolekit-0_4_0


author: Stephen Gallagher <sgallagh@redhat.com> - 0.5.1-1
changelog:
  - Upstream preview release 0.5.1
  - Simplify creating systemd units for roles.
  - Synchronize role state with systemd so rolekit doesn't get confused.


author: Ondrej Vasik <ovasik@redhat.com> 0.1-13
changelog:
  - copy content of /etc/skel directory for root as posstrans,
    don't overwrite  existing files (#999114)


author: Remi Collet <remi@fedoraproject.org> - 1.2.0-1
changelog:
  - update to 1.2.0
  - add dependency on Crypt_GPG   >= 1.4.1
  - raise dependency on Net_LDAP2 >= 2.2.0
  - raise dependency on Mail_Mime >= 1.10.0
  - replace dependency on pear/Net_Sieve by roundcube/net_sieve >= 1.5.0


author: Remi Collet <remi@fedoraproject.org> - 1.2.1-3
changelog:
  - use /var/lib/roundcubemail/temp for temporary files
  - add /var/lib/roundcubemail/enigma for GPG keys storage
  - move plugins configuration samples in /etc/roundcubemail
  - fix permission adjustments required for encryption support #1347332


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-5
changelog:
  - new default config, using RainerScript wherever possible
    resolves: rhbz#1419625
  - updated testbench guard as testbench now needs explicit configuration
    see: rhbz#1211194
  - added patch to make chdir call after chroot
    resolves: rhbz#1422542


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-6
changelog:
  - fixed typo in chdir location
    resolves: rhbz#1422542
  - updated one more directive in default config
    resolves: rhbz#1419625


author: Radovan Sroka <rsroka@redhat.com> - 8.26.0-1
changelog:
  - rebase to 8.26.0
  - added doc patch rhbz#1436113
  - dropped chdir patch, https://github.com/rsyslog/rsyslog/pull/1420 
  - moved dependency libgcrypt to rsyslog core


author: Vít Ondruch <vondruch@redhat.com> - 2.4.0-70
changelog:
  - Upgrade to Ruby 2.4.0.
  - Move gemified xmlrpc into subpackage.
  - Move gemified openssl into subpackage.
  - Tk is removed from stdlib.
  - Extend 'gem_' macros for pre-release version support.


author: Matej Habrnal <mhabrnal@redhat.com> 0.20-1
changelog:
  - New upstream version
    - Don't parse SO files as source_files
    - Add support for OS Variant
    - Fix the missing frame build_id and file_name
    - Bugfixes


author: Matej Habrnal <mhabrnal@redhat.com> - 0.20-1
changelog:
  - New upstream version
    - Introduce 'serial' field in uReport
    - normalization: actualize list of functions


author: Jakub Filak <jakub@thefilaks.net> 0.22-1
changelog:
  - New upstream version
    - Added support fof JavaScript (V8) stack traces
    - Most parts of the in-hook core unwinder callable under unprivileged user
    - GDB core unwinder limits number of unwound frames
    - Fixed a pair of compile warnings - Chris Redmon <credmonster@gmail.com>


author: Matej Habrnal <mhabrnal@redhat.com> 0.23-1
changelog:
  - New upstream version
    - Allow rpm to be optional at build time
    - Do not use deprecated fedorahosted.org


author: <andrew@beekhof.net> - 1.2.1-1
changelog:
  - Correctly enable /proc/pid validation for sbd_lock_running()
  - Improved integration with the el7 environment


author: Petr Stodulka <pstodulk@redhat.com> - 4.2.2-14
changelog:
  - remove meaningless redefinition of _bindir - it's standard macro now;
    sed will be store in /usr/bin/sed
    Resovles: #1305835


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-250
changelog:
  - Merge pull request #4 from lslebodn/sssd_socket_activated
  - Remove typo bugs
  - Remove /proc <<none>> from fedora policy, it's no longer necessary
  - Allow iptables get list of kernel modules
  - Allow unconfined_domain_type to enable/disable transient unit
  - Add interfaces init_enable_transient_unit() and init_disable_transient_unit
  - Revert "Allow sshd setcap capability. This is needed due to latest changes in sshd"
  - Label sysroot dir under ostree as root_t


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-251
changelog:
  - Allow sbd_t to read/write fixed disk devices
  - Add sys_ptrace capability to radiusd_t domain
  - Allow cockpit_session_t domain connects to ssh tcp ports.
  - Allow pcp_pmcd_t net_admin capability. Allow pcp_pmcd_t read net sysctls Allow system_cronjob_t create /var/run/pcp with pcp_var_run_t
  - Allow sendmail to search network sysctls
  - Allow chronyd_t net_admin capability to allow support HW timestamping.
  - Allow certmonger to start haproxy service
  - Fix init Module
  - Allow staff user to read fwupd_cache_t files
  - Remove typo bugs
  - Remove /proc <<none>> from fedora policy, it's no longer necessary


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-253
changelog:
  - auth_use_nsswitch can call only domain not attribute
  - Fix broken cermonger module
  - Fix broken apache module
  - Dontaudit net_admin cap for winbind_t
  - Allow tlp_t domain to stream connect to system bus
  - Allow hypervkvp_t domain execute hostname
  - Dontaudit sssd_selinux_manager_t use of net_admin capability
  - Allow sssd_selinux_manager_t to ioctl init_t sockets
  - Improve ipa_cert_filetrans_named_content() interface to also allow caller domain manage ipa_cert_t type.
  - Allow pki_tomcat_t domain read /etc/passwd.
  - Label new path for ipa-otpd
  - Allow radiusd_t domain stream connect to postgresql_t
  - Allow rhsmcertd_t to execute hostname_exec_t binaries.
  - Allow virtlogd to append nfs_t files when virt_use_nfs=1
  - Allow httpd_t domain read also httpd_user_content_type lnk_files.
  - Allow httpd_t domain create /etc/httpd/alias/ipaseesion.key with label ipa_cert_t
  - Dontaudit <user>_gkeyringd_t stream connect to system_dbusd_t
  - Label /var/www/html/nextcloud/data as httpd_sys_rw_content_t
  - Add interface ipa_filetrans_named_content()
  - Allow tomcat use nsswitch
  - Allow dirsrv read cgroup files.
  - Allow certmonger_t start/status generic services
  - Allow ganesha_t domain read/write infiniband devices.
  - Allow sendmail_t domain sysctl_net_t files
  - Allow targetd_t domain read network state and getattr on loop_control_device_t
  - Allow condor_schedd_t domain send mails.
  - Allow ntpd to creating sockets. BZ(1434395)
  - Alow certmonger to create own systemd unit files.
  - Add kill namespace capability to xdm_t domain
  - Revert "su using libselinux and creating netlink_selinux socket is needed to allow libselinux initialization."
  - Revert "Allow <role>_su_t to create netlink_selinux_socket"
  - Allow <role>_su_t to create netlink_selinux_socket
  - Allow unconfined_t to module_load any file
  - Allow staff to systemctl virt server when staff_use_svirt=1
  - Allow unconfined_t create /tmp/ca.p12 file with ipa_tmp_t context
  - Allow netutils setpcap capability
  - Dontaudit leaked file descriptor happening in setfiles_t domain BZ(1388124)


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-254
changelog:
  - Allow svirt_t to read raw fixed_disk_device_t to make working blockcommit
  - ejabberd small fixes
  - Update targetd policy to accommodate changes in the service
  - Allow virt_domain to read raw fixed_disk_device_t to make working blockcommit
  - Allow glusterd_t domain start ganesha service
  - Made few cosmetic changes in sssd SELinux module
  - sssd-kcm should not run as unconfined_service_t BZ(1447411)
  - Update virt_rw_stream_sockets_svirt() interface to allow confined users set socket options.
  - Allow keepalived_t domain read usermodehelper_t
  - Allow radius domain stream connec to postgresql
  - Remove ejabberd from the RabbitMQ policy.
  - Add a policy for ejabberd.
  - Add fs_manage_configfs_lnk_files() interface


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-255
changelog:
  - devicekit wants to getattr blk devices when unconfined disabled
  - Use stricter fc rules for sssd sockets in /var/run
  - Allow certmonger reads httpd_config_t files
  - Allow keepalived_t domain creating netlink_netfilter_socket.
  - Allow sssd_t domain creating sock files labeled as sssd_var_run_t in /var/run/
  - Allow svirt_t to read raw fixed_disk_device_t to make working blockcommit
  - ejabberd small fixes
  - Update targetd policy to accommodate changes in the service
  - Allow virt_domain to read raw fixed_disk_device_t to make working blockcommit
  - Add interface to allow types to associate with cgroup filesystems
  - Dontaudit net_admin capability for useradd_t domain
  - Allow systemd_localed_t and systemd_timedated_t create files in /etc with label locate_t BZ(1443723)
  - Make able deply overcloud via neutron_t to label nsfs as fs_t
  - Add fs_manage_configfs_lnk_files() interface


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-256
changelog:
  - Allow keepalived domain connect to squid tcp port
  - Allow krb5kdc_t domain read realmd lib files.
  - Allow ganesha to connect to all rpc ports
  - Update ganesha with few allow rules
  - Update rpc_read_nfs_state_data() interface to allow read also lnk_files.
  - virt_use_glusterd boolean should be in optional block
  - Add new boolean virt_use_glusterd
  - Add capability sys_boot for sbd_t domain Allow sbd_t domain to create rpc sysctls.
  - Allow ganesha_t domain to manage glusterd_var_run_t pid files.
  - Create new interface: glusterd_read_lib_files() Allow ganesha read glusterd lib files. Allow ganesha read network sysctls
  - Add few allow rules to ganesha module
  - Allow condor_master_t to read sysctls.
  - Add dac_override cap to ctdbd_t domain
  - Add ganesha_use_fusefs boolean.
  - Allow httpd_t reading kerberos kdc config files
  - Allow  dnsmasq_t domain to read systemd-resolved pid files.
  - Allow smbd_t domain generate debugging files under /var/run/gluster. These files are created through the libgfapi.so library that provides integration of a GlusterFS client in the Samba (vfs_glusterfs) process.
  - Allow condor_master_t write to sysctl_net_t
  - Allow nagios check disk plugin read /sys/kernel/config/
  - Allow pcp_pmie_t domain execute systemctl binary
  - Allow nagios to connect to stream sockets. Allow nagios start httpd via systemctl
  - xdm_t should view kernel keys
  - Hide broken symptoms when machine is configured with network bounding.
  - Label 8750 tcp/udp port as dey_keyneg_port_t
  - Add interface fs_read_configfs_dirs()
  - Add interface fs_read_configfs_files()
  - Fix systemd_resolved_read_pid interface
  - Add interface systemd_resolved_read_pid()
  - Allow sshd_net_t domain read/write into crypto devices


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-257
changelog:
  -  Add a boolean to enable the use of dac_override
  - Add support for userns for sandbox domains
  - Allow zabbix_t to kill zabbix_script_t processes
  - Allow kdumpgui to read removable disk device
  - Allow systemd_dbusd_t domain read/write to nvme devices
  - Allow udisks2 domain to read removable devices BZ(1443981)
  - Allow virtlogd_t to execute itself
  - Allow keepalived to read/write usermodehelper state
  - Allow named_t to bind on udp 4321 port
  - Fix interface tlp_manage_pid_files()
  - Allow collectd domain read lvm config files. BZ(1459097)
  - Allow RabbitMQ to use systemd-notify
  - Allow samba_manage_home_dirs boolean to manage user content
  - udev wants this when unconfined disabled
  - Allow systemd_modules_load_t to load modules


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-258
changelog:
  - Allow rpcbind_t to execute systemd_tmpfiles_exec_t binary files.
  - Allow qemu to authenticate SPICE connections with SASL GSSAPI when SSSD is in use
  - Fix dbus_dontaudit_stream_connect_system_dbusd() interface to require TYPE rather than ATTRIBUTE for systemd_dbusd_t.
  - Allow httpd_t to read realmd_var_lib_t files
  - Allow unconfined_t user all user namespace capabilties.
  - Add interface systemd_tmpfiles_exec()
  - Add interface libs_dontaudit_setattr_lib_files()
  - Dontaudit xdm_t domain to setattr on lib_t dirs
  - Allow sysadm_r role to jump into dirsrv_t


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-259
changelog:
  - Allow boinc_t nsswitch
  - Dontaudit firewalld to write to lib_t dirs
  - Allow modemmanager_t domain to write to raw_ip file labeled as sysfs_t
  - Allow thumb_t domain to allow create dgram sockets
  - Disable mysqld_safe_t secure mode environment cleansing
  - Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
  - Allow dirsrv domain setrlimit
  - Dontaudit staff_t user read admin_home_t files.
  - Add interface lvm_manage_metadata
  - Add permission open to files_read_inherited_tmp_files() interface


author: Ondřej Lysoněk <olysonek@redhat.com> - 8.15.2-8
changelog:
  - Removed dependency for sendmail in sendmail-devel, renamed sendmail-devel
    to sendmail-milter-devel
    Resolves: rhbz#891288


author: Ondřej Lysoněk <olysonek@redhat.com> - 8.15.2-9
changelog:
  - Fixed Provides and Obsoletes in sendmail-milter-devel
  - Made 'Requires: sendmail-milter' in sendmail-milter-devel arch specific


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-11
changelog:
  - Added SASL AUTH_REALM into default configuration
    Resolves: rhbz#748279
  - Fixed compilation with openssl-1.1.0
    Resolves: rhbz#1400239


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-13
changelog:
  - Removed systemd limit for sendmail restarts to workaround failure due to
    rapid restarts caused by NetworkManager dispatcher script
    Resolves: rhbz#1422771


author: Petr Lautrbach <plautrba@redhat.com> - 4.1.0-2
changelog:
  - Move python networkx dependency to -gui and -console-analyses
  - Ship sedta and seinfoflow in setools-console-analyses


author: Ondrej Vasik <ovasik@redhat.com> - 2.9.5-1
changelog:
  - assign uidgid for systemd-network(192:192) - FPC 481,bz#1102002
  - assign uidgid for systemd-resolve(193:193) - FPC 481,bz#1102002


author: Jan Synáček <jsynacek@redhat.com> - 1.2.0.10-9
changelog:
  - dos2unix'ed the patch
  - Call dos2unix before patching and dos2unix Makefile as well
  - Use %{_sbindir} instead of '/sbin'


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.2.1-5
changelog:
  - do not use obscure permissions for binaries
  - remove unused commands from login.defs(5) cross-reference


author: Bastien Nocera <bnocera@redhat.com> - 1.6-3
changelog:
  - Remove file-roller as handler for cbz/cbr files
    See https://bugzilla.gnome.org/show_bug.cgi?id=767244


author: Peter Jones <pjones@redhat.com> - 0.8-1
changelog:
  - Update to shim 0.8
    rhbz#1148230
    rhbz#1148231
    rhbz#1148232
  - Handle building on aarch64 as well


author: Peter Jones <pjones@redhat.com> - 0.8-6
changelog:
  - Rebuild once more so we can use a different -unsigned version on different
    arches (because we can't tag a newer build into aarch64 without an x86
    update to match.)
    Related: rhbz#1170289


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54.1-1
changelog:
  - support FreeIPA overrides in LDAP BIND callback
  - ignore FreeIPA override searchs outside configured schema compat subtrees


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54.2-1
changelog:
  - CVE-2015-0283 slapi-nis: infinite loop in getgrnam_r() and getgrgid_r() (#1206049)
  - Make sure nss_sss.so.2 module is used directly
  - Allow building slapi-nis with ID views against 389-ds-base from RHEL7.0/CentOS7.0 releases


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.55-1
changelog:
  - Support external members of IPA groups in schema compat
  - Support bind over ID overrides when uid is not overridden
  - Populate schema compat trees in parallel to LDAP server startup


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-3
changelog:
  - Add support for CKM_RSA_PKCS_OAEP key un/wrapping [Petr Spacek]
  - Use OpenSSL EVP interface for AES key wrapping [Petr Spacek]
  - Fix softhsm2-pk11install buid and post call
  - Do not use --with-objectstore-backend-db (causes issues on i686)
  - Change install directory to /usr/lib*/pkcs11/
  - Install pkcs11 module file
  - Use official upstream tar ball
  - Create ods user to own softhsm/token files
  - Enable migration tools (for softhsm-v1 installs)
  - Add softlink for softhsm-v1 .so (needed for opendnssec's conf.xml)
  - Require p11-kit, nss-tools, for SoftHSM PKCS #11 Module file
  - Copy pk11install.c from coolkey package
  - Enable hardened build
  - Add upstream official source url


author: Paul Wouters <pwouters@redhat.com> - 2.0.0-1
changelog:
  - Resolves: rhbz#1244461 Update to softhsm-2.0.0
  - Resolves: rhbz#1177086 A marked as trusted certificate cannot be written in a softhsmv2 db
  - Resolves: rhbz#1159827 Typo in homedir in /etc/passwd
  - Added global prever to toggle snapshot vs full release build changes


author: Paul Wouters <pwouters@redhat.com> - 2.1.0-1
changelog:
  - Resolves: rhbz#1244461 Updated to 2.1.0
  - Resolves: rhbz#1272423 Softhsm PKCS#11 module not visible to NSS becasue it is not in the search path
  - Resolves: rhbz#1177086 A marked as trusted certificate cannot be written in a softhsmv2 db
  - Resolves: rhbz#1272453 - A marked as CA certificate cannot be written in a softhsmv2 db
  - Removed merged in bug#162 patch
  - Temporarily disable make check because cppunit is broken


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-2
changelog:
  - [sosreport] ensure private temporary directory is removed
  - [global] sync rawhide package with upstream
  - [ceph] collect /var/lib/ceph and /var/run/ceph
  - [sosreport] prepare report in a private subdirectory (CVE-2015-7529)
  - [docker] collect journald logs for docker unit
  - [sosreport] fix command-line report defaults
  - [openstack_neutron] obfuscate server_auth in restproxy.ini
  - [memory] collect swapon --show output in bytes
  - [sosreport] fix command-line report defaults (proper patch ordering)
  - [sapnw] call self methods properly
  - [openvswitch] capture the logs, db and OVS bridges details
  - [logs] fix reference to missing 'rsyslog_conf' variable
  - [sapnw] Add check if saphostctrl is not present, dont use Set
  - [Plugin] fix handling of symlinks in non-sysroot environments
  - [openstack] Ensure openstack passwords and secrets are obfuscated
  - [plugin] pass stderr through _collect_cmd_output
  - [kubernetes,plugin] Support running sos inside a container
  - [openstack] New Openstack Trove (DBaaS) plugin
  - [services] Add more diagnostics to applications
  - [openstack_neutron] Obscure passwords and secrets
  - [ceph] add calamari and ragos logs and configs
  - [iprconfig] enable plugin for ppc64* architectures
  - [general] verify --profile contains valid plugins only
  - [kernel,mpt,memory] additional kernel-related diagnostics
  - [cluster] enable crm_report password scrubbing
  - [sosreport] fix command-line report defaults
  - [virsh] add new plugin, add listing of qemu
  - [sap*,vhostmd] new plugins for SAP
  - [cluster] crm_report fails to run because dir already exists
  - [foreman] Skip collection of generic resources
  - [apache] Added collection of conf.modules.d dir for httpd 2.4
  - [pcp] collect /etc/pcp.conf
  - [puppet] adding new plugin for puppet
  - [block] Don't use parted human readable output
  - [general] Better handling --name and --ticket-number in
  - [networking] additional ip, firewall and traffic shaping
  - [infiniband] add opensm and infiniband-diags support
  - [plugins/rabbitmq] Added cluster_status command output
  - [networking] re-add 'ip addr' with a root symlink
  - [kimchi] add new plugin
  - [iprconfig] add plugin for IBM Power RAID adapters
  - [ovirt] Collect engine tunables and domain information.
  - [activemq] Honour all_logs and get config on RHEL
  - [cluster] Add luci to packages for standalone luci servers
  - [hpasm] hpasmcli commands hang under timeout
  - [mysql] Collect log file
  - [chrony] add chrony plugin
  - [openstack_sahara] redact secrets from sahara configuration
  - [openstack_sahara] add new openstack_sahara plugin
  - [openstack_neutron] neutron configuration and logs files not captured
  - [ovirt] remove ovirt-engine setup answer file password leak
  - [networking] network plugin fails if NetworkManager is disabled
  - [cluster] crm_report fails to run because dir already exists
  - [mysql] improve handling of dbuser, dbpass and MYSQL_PWD
  - [mysql] test for boolean values in dbuser and dbpass
  - [plugin] limit path names to PC_NAME_MAX
  - [squid] collect files from /var/log/squid
  - [sosreport] log plugin exceptions to a file
  - [ctdb] fix collection of /etc/sysconfig/ctdb
  - [sosreport] fix silent exception handling
  - [sosreport] do not make logging calls after OSError
  - [sosreport] catch OSError exceptions in SoSReport.execute()
  - [anaconda] make useradd password regex tolerant of whitespace
  - [mysql] fix handling of mysql.dbpass option
  - [navicli] catch exceptions if stdin is unreadable
  - [docs] update man page for new options
  - [sosreport] make all utf-8 handling user errors=ignore
  - [kpatch] do not attempt to collect data if kpatch is not installed
  - [archive] drop support for Zip archives
  - [sosreport] fix archive permissions regression
  - [tomcat] add support for tomcat7 and default log size limits
  - [mysql] obtain database password from the environment
  - [corosync] add postprocessing for corosync-objctl output
  - [ovirt_hosted_engine] fix exception when force-enabled
  - [yum] call rhsm-debug with --no-subscriptions
  - [powerpc] allow PowerPC plugin to run on ppc64le
  - [package] add Obsoletes for sos-plugins-openstack
  - [pam] add pam_tally2 and faillock support
  - [postgresql] obtain db password from the environment
  - [pcp] add Performance Co-Pilot plugin
  - [nfsserver] collect /etc/exports.d
  - [sosreport] handle --compression-type correctly
  - [anaconda] redact passwords in kickstart configurations
  - [haproxy] add new plugin
  - [keepalived] add new plugin
  - [lvm2] set locking_type=0 when calling lvm commands
  - [tuned] add new plugin
  - [cgroups] collect /etc/sysconfig/cgred
  - [plugins] ensure doc text is always displayed for plugins
  - [sosreport] fix the distribution version API call
  - [docker] add new plugin
  - [openstack_*] include broken-out openstack plugins
  - [mysql] support MariaDB
  - [openstack] do not collect /var/lib/nova
  - [grub2] collect grub.cfg on UEFI systems
  - [sosreport] handle out-of-space errors gracefully
  - [firewalld] new plugin
  - [networking] collect NetworkManager status
  - [kpatch] new plugin
  - [global] update to upstream 3.2 release
  - [foreman] add new plugin


author: Sérgio Basto <sergio@serjux.com> - 1.9.2-1
changelog:
  - Update to 1.9.2 (#961876).
  - Modernize spec file.
  - Makefile.am handles mmx and sse flags well, so no need patch 01 and sed anymore.
  - Patch 02 disabled, I hope we already have asm fixed on X86_64.


author: Sérgio Basto <sergio@serjux.com> - 1.9.2-2
changelog:
  - Add license tag.
  - Add back sed on -O3 .
  - Not modify soundtouch_config.h because looks correct, just have one line !.


author: Paul Howarth <paul@city-fan.org> - 0.4.0-1
changelog:
  - Update to 0.4.0
    - New options:
      -C option to change the default reject code
      -S option to specify a path to sendmail (for the -x option)
      -R option to specify the rejection message
      -a option to skip messages that were authenticated
    - IPv6 address support
    - Syntax clean-ups
  - Drop upstreamed syntax, rejection text and IPv6 patches
  - Update authuser patch: note that upstream has introduced a -a option that
    does pretty much the same as the -I option added by this patch, so this
    patch is deprecated and will not be included in builds for Fedora 22 onwards
  - Clean up other patches to apply cleanly


author: Kevin Fenzi <kevin@scrye.com> - 3.4.1-9
changelog:
  - Add perl-Razor-Agent and perl-Net-Patricia To Requires, they might help processing. Fixes bug #1337924
  - Add patch for netdns 1.0.1+ dns lookups.


author: Petr Kubat <pkubat@redhat.com> - 3.18.0-1
changelog:
  - Updated to version 3.18.0 (https://sqlite.org/releaselog/3_18_0.html)
  - Modify sync2.test to pass with DIRSYNC turned off


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.4-1
changelog:
  - Update to 2.0.4
  - Addresses a potential race-condition when the key and certificate share the
    same file.


author: Radovan Sroka <rsroka@redhat.com> 1.8.18rc2-1
changelog:
  - update to 1.8.18rc2
  - dropped sudo-1.8.14p1-ldapconfpatch.patch
    upstreamed --> https://www.sudo.ws/pipermail/sudo-workers/2016-September/001006.html


author: Radovan Sroka <rsroka@redhat.com> 1.8.19-0.1.20160923git90e4538
changelog:
  - we were not able to update from rc and beta versions to stable one
  - so this is a new snapshot package which resolves it


author: Jiri Vymazal <jvymazal@redhat.com> - 1.8.20-0.1.b1
changelog:
  - update to latest development version 1.8.20b1
  - added sudo to dnf/yum protected packages
    Resolves: rhbz#1418756


author: Noriko Hosoi <nhosoi@redhat.com> - 4.1.0-1
changelog:
  - Release 4.1.0-1
  - Resolves: Bug 1324983 - Rebase: svrcore
              Added systemd ask password support (DS 48450)


author: Mark Reynolds <mreynolds@redhat.com> - 4.1.3-1
changelog:
  - release 4.1.3-1
  - Ticket 18 - Remove configure outputs
  - Ticket 17 - update stdc to c99 to match other projects
  - Ticket 16 - with systemd should unset have systemd if pkgconfig not found
  - Ticket 14 - svrcore does not detect tty


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 233-1
changelog:
  - New upstream release (#1416201, #1405439, #1420753, many others)
  - New systemd-tests subpackage with "installed tests"


author: Michal Sekletar <msekleta@redhat.com> - 233-3
changelog:
  - Backport bugfixes from upstream
  - Don't return error when machinectl couldn't figure out container IP addresses (#1419501)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 233-4
changelog:
  - Backport a bunch of small fixes (memleaks, wrong format strings,
    man page clarifications, shell completion)
  - Fix systemd-resolved crash on crafted DNS packet (CVE-2017-9217, #1455493)
  - Fix systemd-vconsole-setup.service error on systems with no VGA console (#1272686)


author: Pavel Raiskup <praiskup@redhat.com> - 1.28-6
changelog:
  - fix --files-from and -T cooperation (rhbz#1230762)
  - avoid two testsuite false alarms related to --files-from option


author: Pavel Raiskup <praiskup@redhat.com> - 1.29-3
changelog:
  - revert back some docs
  - fix --create to use --xattrs-include/exclude (rhbz#1341787)
  - don't hang with '-x --skip-old-files --xattrs' (rhbz#1399036)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.6-2
changelog:
  - Splitted documentation to the doc subpackage
    Resolves: rhbz#1380291
  - Fixed whitespace
  - Dropped obsoleted defattr


author: Pavel Raiskup <praiskup@redhat.com> - 2.1.0-1
changelog:
  - rebase to recent upstream relase (#1094731), per release notes:
    http://sourceforge.net/projects/pgtclng/files/pgtclng/2.1.0/
  - spec cleanup per fedora-review


author: Pavel Raiskup <praiskup@redhat.com> - 2.1.1-1
changelog:
  - rebase to recent upstream release (#1144394), per release notes:
    http://sourceforge.net/projects/pgtclng/files/pgtclng/2.1.1/


author: Michal Sekletar <msekleta@redhat.com> - 14:4.7.3-1
changelog:
  - rebase to 4.7.3 (#1201573)
  - contains fixes for CVE-2015-0261 CVE-2015-2154 CVE-2015-2153 CVE-2015-2155 (#1201799,#1201792,#1201795,#1201797)


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-69
changelog:
  - Resolves: #1445259 - telnet won't build with latest gcc
  - added note about address resolution in manpage


author: Jan Grulich <jgrulich@redhat.com> - 1.7.1-3
changelog:
  - Bug 1438704 - CVE-2017-7392 CVE-2017-7393 CVE-2017-7394
                  CVE-2017-7395 CVE-2017-7396 tigervnc: various flaws
    + other upstream related fixes


author: Miloslav Trmač <mitr@redhat.com> - 2.11-3
changelog:
  - Drop the cron.daily script, systemd default configuration handles the same
    places.
    Resolves: #906455


author: Coty Sutherland <csutherl@redhat.com> - 1:8.0.36-1
changelog:
  - Resolves: rhbz#1349469 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service (updates to 8.0.36)
  - Resolves: rhbz#1364056 The command tomcat-digest doesn't work
  - Resolves: rhbz#1363884 The tomcat-tool-wrapper script is broken
  - Resolves: rhbz#1347864 The systemd service unit does not allow tomcat to shut down gracefully
  - Resolves: rhbz#1347835 The security manager doesn't work correctly (JSPs cannot be compiled)
  - Resolves: rhbz#1341853 rpm -V tomcat fails on /var/log/tomcat/catalina.out
  - Resolves: rhbz#1341850 tomcat-jsvc.service has TOMCAT_USER value hard-coded
  - Resolves: rhbz#1359737 Missing maven depmap for the following artifacts: org.apache.tomcat:tomcat-websocket, org.apache.tomcat:tomcat-websocket-api
  - Resolves: asfbz#59960  Building javadocs with java8 fails


author: Coty Sutherland <csutherl@redhat.com> - 1:8.0.37-1
changelog:
  - Rebase to 8.0.37
  - Resolves: rhbz#1375581 CVE-2016-5388 CGI sets environmental variable based on user supplied Proxy request header
  - Resolves: rhbz#1370262 catalina.out is no longer in use in the main package, but still gets rotated


author: Coty Sutherland <csutherl@redhat.com> - 1:8.0.37-3
changelog:
  - Resolves: rhbz#1383216 CVE-2016-6325 tomcat: tomcat writable config files allow privilege escalation
  - Resolves: rhbz#1382310 CVE-2016-5425 tomcat: Local privilege escalation via systemd-tmpfiles service


author: Coty Sutherland <csutherl@redhat.com> - 1:8.0.39-1
changelog:
  - Update to 8.0.39
  - Resolves: rhbz#1397493 CVE-2016-6816 CVE-2016-6817 CVE-2016-8735 tomcat: various flaws


author: Coty Sutherland <csutherl@redhat.com> - 1:8.0.41-1
changelog:
  - Update to 8.0.41
  - Resolves: rhbz#1403825 CVE-2016-8745 tomcat: information disclosure due to incorrect Processor sharing


author: Christina Fu <cfu@redhat.com> 7.1.1-1
changelog:
  - Bugzilla Bug #1058366 NullPointerException in tomcatjss searching
    for attribute "clientauth" (cfu)
  - Bugzilla Bug #871171 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 (cfu)
  - Bumped revision to 7.1.1


author: David Brown <david.brown@pnnl.gov> - 4.2.10-3
changelog:
  - Bugfix - #1215207 create/install service files for these
  - Bugfix - #1117263 qmgr aborts in some instances
  - Bugfix - #1144396 Hey! Version Bump!
  - Bugfix - #1215992 more service scripts
  - Bugfix - #1216037 fixed permissions on directories
  - Bugfix - #1149045 hopefully these are all fixed now
  - Bugfix - #965513 calling this one fixed...


author: David Brown <david.brown@pnnl.gov> - 4.2.10-4
changelog:
  - Bugfix - #1227003 test system in cluster environment
  - Bugfix - #1216049 add --enable-cpuset and hwloc
  - Bugfix - #1176080 this maybe a duplicate of #1216037


author: David Brown <david.brown@pnnl.gov> - 4.2.10-9
changelog:
  - Resolve dependencies for rawhide (#1308192)
  - Fix port and args environment variables for el5/6 (#1254301)


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-10
changelog:
  - fix build on aarch64 (bug #926655)
  - drop obsolete specfile parts
  - fix deprecated python macro usage


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-13.20140228gitc2f5d13
changelog:
  - update to latest snapshot from github
  - drop patches merged upstream
  - fix broken LDFLAGS in tre.pc (#1224203)


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-18.20140228gitc2f5d13
changelog:
  - fix CVE-2016-8859 (#1387112, #1387113)
  - probably fix CVE-2015-3796 (see upstream issue #37 and
    https://bugs.chromium.org/p/project-zero/issues/detail?id=428)
  - update python bindings subpackage to current guidelines
  - fix parallel installation of multilib packages (patch by joseba.gar at gmail.com)
    (bug #1275830)


author: Steve Grubb <sgrubb@redhat.com> 0.3.11.2-3
changelog:
  - Fix crash when linking libgnutls and libmysqlclient (#1069079)
  - Don't order tcsd after syslog.target (#1055198)


author: Tomáš Mráz <tmraz@redhat.com> 0.3.13-4
changelog:
  - Split libtspi to a trousers-lib subpackage (#1225062)
  - Fix FTBFS with current gcc (drop inline keyword when bogus)


author: Patsy Franklin <pfrankli@redhat.com> - 2016f-1
changelog:
  - Rebase to 2016f
    - Egypt cancelled DST.
    - Asia/Novosibirsk transitions from +06 to +07 on 2016-07-24 at 02:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2016g-1
changelog:
  - Rebase to 2016g
    - Turkey permanently switches from +02 to +03 as of 2016-09-07,
    - Per IERS Bulletin C 52, leap second to be added on 2016-09-31 at 23:59:60.


author: Patsy Franklin <pfrankli@redhat.com> - 2016h-1
changelog:
  - Rebase to 2016h
    - DST ends in Asia/Gaza and Asia/Hebron on 2016-10-29 at 01:00,
      not the predicted date of 2016-10-21 at 00:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2016i-1
changelog:
  - Rebase to 2016i
    - Pacific/Tongatapu now begins DST on 2016-11-06 at 02:00 and ends
      on 2017-01-15 at 03:00.
    - Northern Cyprus is changed to +03 year round. This results in a
      split in Cyprus time zones starting 2016-10-30 at 04:00 and
      creates a new zone - Asia/Famagusta.
    - Antarctica/Casey changed from +08 to +11 on 2016-10-22.


author: Patsy Franklin <pfrankli@redhat.com> - 2016j-1
changelog:
  - Rebase to 2016j
    - The Saratov Region of Russia is changing from +03 to +04 on
      2016-12-04, resulting in a new timezone Europe/Saratov.


author: Patsy Franklin <pfrankli@redhat.com> - 2017a-1
changelog:
  - Rebase to tzdata-2017a
    - Mongolia no longer observes DST
    - Magallanes region of Chile moves from -04/-03 to -03 year round.
      This results in a new zone, America/Punta_Arenas.


author: Peter Robinson <pbrobinson@fedoraproject.org> 2017.05-0.6.rc2
changelog:
  - Add SPL/ATF support for AllWinner A64 SoCs
  - Ship u-boot elf binaries for all aarch64 devices
  - Cleanups and spec updates
  - Add some more docs/tools


author: Peter Robinson <pbrobinson@fedoraproject.org> 2017.05-2
changelog:
  - Spec and build refactoring
  - Add distro-boot support for ClearFog
  - Add support for building a chained u-boot for nyan-big
  - Dragonboard and uEFI fixes


author: Peter Robinson <pbrobinson@fedoraproject.org> 2017.05-4
changelog:
  - Fix bug in aarch64 builds that dropped some files
  - Add DT Overlay support for RPi/BeagleBone/CHIP/96boards devices


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 9.0.06-1
changelog:
  - Uupdate to latest version (removal of serifs from Cherokee letters,
    Pikto CSUR glyph improvements)


author: Jan Stanek <jstanek@redhat.com> - 2.3.3-1
changelog:
  - Update to version 2.3.3
  - Removed patches and sources included upstream
  - Recreated so-version-bump.patch


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-29
changelog:
  - added build parameter "-DNO_LCHMOD" because lchmod isn't provided on Linux
    system
    Resolves: #1350627


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-30
changelog:
  - rename patch unzip-6.0-nostrip.patch to unzip-6.0-configure.patch
    so linking is now configurable from the spec file
  - define __global_ldflags on EL <= 7
  - set LFLAGS2 with __global_ldflags for hardened build
    Resolves: #1330519


author: John W. Linville <linville@redhat.com> - 4.4-16
changelog:
  - Replace strcpy/strcat with strncpy/strncat to avoid some buffer overflows
  - Check for backward-pointing directory entries to avoid endless looping
  - Fix _most_ of the compiler warnings


author: Chris Adams <linux@cmadams.net> - 1.2.8-0.1.20130726svn14389
changelog:
  - Update to upstream Subversion snapshot to get bug fixes
  - Apply autoconf patch to handle aarch64
  - Update spec to latest startup script handling, also conditionalize
    RHEL SysV init handle for EPEL to make it easier to handle both


author: James Antill <james@fedoraproject.org> - 1.0.4-20
changelog:
  - Move doc/ustr-devel-<version> to doc/ustr-devel. BZ 993940.
  - Use -fgnu89-inline workaround for gcc5.


author: Remi Collet <rcollet@redhat.com> - 1.6.2-26
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/Php56
  - add numerical prefix to PHP extension configuration file


author: Matias Kreder <mkreder@gmail.com> - 1.6.2-34
changelog:
  - Removed uuid-php subpackage since php(api) is no longer provided on
  - PHP 7 and there is a replacement (pecl/uuid extension)


author: Petr Pisar <ppisar@redhat.com> - 1.9-14
changelog:
  - Fix a security warning by compiler (bug #1037376)
  - Move the executable to /usr/sbin
  - Modernize the spec file


author: gil cattaneo <puntogil@libero.it> 0:1.7-18
changelog:
  - fix FTBFS rhbz#1240035
  - fix BR list, change log4j with log4j12
  - set javac source/target to 1.6
  - disable Java8doc doclint
  - remove werken-xpath Import/Export refences in manifest file
  - resolve some rpmlint problems
  - remove zero-length file
  - introduce license macro


author: Cole Robinson <crobinso@redhat.com> - 1.3.2-3
changelog:
  - Fix screenshot on F24 rawhide (bz #1297988)
  - Fix URL installs when content-length header missing (bz #1297900)


author: Cole Robinson <crobinso@redhat.com> - 1.3.2-4.20160520git2204de62d9
changelog:
  - Rebase to latest git
  - Update translations (bz #1323015)
  - Fix rawhide URL installs (bz #1322011)
  - Update viewer to work with spice GL


author: Cole Robinson <crobinso@redhat.com> - 1.4.0-4
changelog:
  - Fix fedora24 installs from incorrectly using virtio-input (bz #1391522)
  - Fix error checking extra_args for console argument


author: Cole Robinson <crobinso@redhat.com> - 1.4.0-5
changelog:
  - Fix version check for spice GL support
  - Don't return virtio1.0-net as a valid device name (bz #1399083)
  - Fix window size tracking on wayland (bz #1375175)
  - Fix 'resize to VM' on wayland (bz #1397598)


author: Cole Robinson <crobinso@redhat.com> - 1.4.1-1
changelog:
  - Rebased to version 1.4.1
  - storage/nodedev event API support (Jovanka Gulicoska)
  - UI options for enabling spice GL (Marc-André Lureau)
  - Add default virtio-rng /dev/urandom for supported guest OS
  - Cloning and rename support for UEFI VMs (Pavel Hrdina)
  - libguestfs inspection UI improvements (Pino Toscano)
  - virt-install: Add --qemu-commandline
  - virt-install: Add --network vhostuser (Chen Hanxiao)
  - virt-install: Add --sysinfo (Charles Arnold)


author: Martin Sehnoutka <msehnout@redhat.com> - 3.0.3-2
changelog:
  - Applied patches:
  - Readd seccomp disabled by default
  - vsftpd local_max_rate option doesn't work as expected
  - The vsftpd hangs in a SIGCHLD handler when the pam_exec.so is used in pam.d 
  - configuration
  - The vsftpd doesn't remove failed upload when the delete_failed_uploads is 
  - enabled and the network cable is unplagged
  - man pages bug
  - vsftpd segfaults in vsf_sysutil_strndup
  - Fix logging when syslog is used


author: Martin Sehnoutka <msehnout@redhat.com> - 3.0.3-3
changelog:
  - Review patches
  - Add TLSv1.{1,2} options
  - Fix question mark wildcard within a file name
  - Seccomp patch removed


author: Till Maas <opensource@till.name> - 2.20-10
changelog:
  - Use alias instead of exported function for which to avoid bashism,
  http://unix.stackexchange.com/questions/59360/#59431


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-6
changelog:
  - Fix use-after-free when macsec secure channels are deleted
  - Fix segmentation fault in case macsec module is not loaded (rh#1428937)


author: Dan Horák <dan[at]danny.cz> - 2.8.12-23
changelog:
  - fix FTBFS (#1308243)
  - skip tests as they depend on cppunit-config which was removed from cppunit-devel


author: Rex Dieter <rdieter@fedoraproject.org> 1.1.1-4
changelog:
  - save mimetype defaults to ~/.config/mimeapps.list
    (instead of ~/.local/share/applications/mimeapps.list)


author: Jerry James <loganjerry@gmail.com> - 21.5.34-19.20170114hg29e551281d78
changelog:
  - Update to latest mercurial snapshot (bz 1408201)
  - Use glibc malloc on all platforms
  - Add -with-output-to-string patch


author: Jerry James <loganjerry@gmail.com> - 21.5.34-20.20170124hgf412e9f093d4
changelog:
  - Update to latest mercurial snapshot to really fix bz 1408201
  - Drop upstreamed -with-output-to-string patch


author: Paul Wouters <pwouters@redhat.com> - 1.3.8-1
changelog:
  - Upgraded to 1.3.8 and updated existing patches still required
  - Fix kernel mode breaking the closing tunnels


author: Paul Wouters <pwouters@redhat.com> - 1.3.8-2
changelog:
  - Very reluctantly add a Suggests: tag to work around dnf/kernel bug
  - Resolves: rhbz#1192189 Both kernel-debug-core and kernel-core are installed


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.2-15
changelog:
  - Use %jpackage_script to generate scripts.
  - Add OSGi metadata to manifest instead of discarding everything else in it.
  - Drop dependency on xml-commons-api, add one on java(-headless).
  - Crosslink javadocs with Java's.
  - Include NOTICE* in docs.
  - Update URLs.
  - Specfile cleanups.


author: Simone Caronni <negativo17@gmail.com> - 7.7-12
changelog:
  - Clean up SPEC file, fix rpmlint warnings.
  - Simplify build requirements.
  - Xprint has been removed everywhere.
  - xclipboard 1.1.3
  - xclock 1.0.7
  - xconsole 1.0.6
  - xfd 1.1.2
  - xfontsel 1.0.5
  - xload 1.1.2
  - xwd 1.0.6
  - xwud 1.0.4


author: Simone Caronni <negativo17@gmail.com> - 1:7.5-25
changelog:
  - Restore font-utils provider, required by some packages for building.
   examine all platform=3 encodings (fixes #578460)


author: Hans de Goede <hdegoede@redhat.com> - 7.5-11
changelog:
  - Update most fonts:
     -encodings-1.0.4
     -font-adobe-100dpi-1.0.3
     -font-adobe-75dpi-1.0.3
     -font-adobe-utopia-100dpi-1.0.4
     -font-adobe-utopia-75dpi-1.0.4
     -font-adobe-utopia-type1-1.0.4
     -font-arabic-misc-1.0.3
     -font-bh-100dpi-1.0.3
     -font-bh-75dpi-1.0.3
     -font-bh-lucidatypewriter-100dpi-1.0.3
     -font-bh-lucidatypewriter-75dpi-1.0.3
     -font-bitstream-100dpi-1.0.3
     -font-bitstream-75dpi-1.0.3
     -font-bitstream-type1-1.0.3
     -font-cronyx-cyrillic-1.0.3
     -font-cursor-misc-1.0.3
     -font-daewoo-misc-1.0.3
     -font-dec-misc-1.0.3
     -font-isas-misc-1.0.3
     -font-jis-misc-1.0.3
     -font-micro-misc-1.0.3
     -font-misc-cyrillic-1.0.3
     -font-misc-ethiopic-1.0.3
     -font-misc-misc-1.1.2
     -font-mutt-misc-1.0.3
     -font-schumacher-misc-1.1.2
     -font-screen-cyrillic-1.0.4
     -font-sony-misc-1.0.3
     -font-sun-misc-1.0.3
     -font-winitzki-cyrillic-1.0.3
     -font-xfree86-type1-1.0.4
  - Fix a bug in jisx0201.1976-0.enc (#1009350)


author: Simone Caronni <negativo17@gmail.com> - 7.5-12
changelog:
  - Clean up SPEC file, remove obsolete tags, fix all rpmlint warnings.
  - Rework build/install section to be like other xorg packages.
  - Remove all obsolete provides/obsoletes/conflicts.
  - Simplify build requirements.
  - Simplify build, it has not changed since 2008.


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-6
changelog:
  - Set XORG_RUN_AS_USER_OK when starting X on the current tty, to run X
    to run without root rights when possible


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-12
changelog:
  - Drop 0001-startx-Pass-nolisten-tcp-by-default.patch this is the
    server default now
  - Check for SSH_AUTH_SOCK not SSH_AGENT in xinitrc-common (rhbz#1352339)


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-13
changelog:
  - Check for all 3 of SSH_AGENT, SSH_AGENT_PID and SSH_AUTH_SOCK to fix
    a regression introduced by the previous fix (rhbz#1352339)


author: Java SIG <java-devel@lists.fedoraproject.org> - 0-7.20110809svn
changelog:
  - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
  - Replace maven BuildRequires with maven-local


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.0-1
changelog:
  - rebase per upstream release notes (#1023718)
    http://www.mail-archive.com/xz-devel@tukaani.org/msg00216.html
  - fedora-review fixes, documentation/license fixes in spec


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.1-1
changelog:
  - bugfix rebase to 5.2.1, per release notes
    http://www.mail-archive.com/xz-devel@tukaani.org/msg00226.html


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.2-1
changelog:
  - rebase to stable 5.2.2 per release notes:
    http://www.mail-archive.com/xz-devel@tukaani.org/msg00244.html


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.3-1
changelog:
  - rebase to stable 5.2.3 per release notes:
    http://www.mail-archive.com/xz-devel@tukaani.org/msg00285.html


author: Daniel P. Berrange <berrange@redhat.com> - 2.0.4-1
changelog:
  - Update to 2.0.4 release (rhbz #845777)
  - Fix License tag to reflect change in 2.0.0 series from BSD to ISC


author: James Antill <james at fedoraproject.org> - 3.4.3-156
changelog:
  - update to latest HEAD
  - Have "yum check" ignore self conflicts.
  - Add simple testcase for installing older intermediate kernel. BZ 1063181.
  - Don't look for upgrades for install only packages. BZ 1063181.
  - check if repos list is empty after excluding disabled repos. BZ 1109473.
  - Allow caching local repos. BZ 1125387.
  - Expect KB as well as MB in disk requirements message from rpm. BZ 1051931.
  - Multiple lvm fixes. BZ 1047793, BZ 1145485.
  - Change the sqlite synchronous mode for the history file, to NORMAL.
  - Add CAShe config. and objects, use it for MD and packages.
  - Add query_install_excludes conf./docs and use it for list/info/search/prov


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 3.4.3-505
changelog:
  - update to latest HEAD
  - Make sure epoch is a string while checking for running kernel. BZ#1200159
  - Fix rounding issue in required disk space message.
  - Rename yum executable to yum-deprecated.


author: Pavel Raiskup <praiskup@redhat.com> - 1.2.11-1
changelog:
  - latest upstream release (rhbz#1409372)
  - cleanup rpmlint
  - revert fix for rhbz#985344
  - requires with %_isa tag
  - drop zlib Z_BLOCK flush patch (rhbz#1417355)


