# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 1.1.45-1
changelog:
  bump version to 1.1.45
  Ticket 48988 - ds_removal and ds_unregister should support prompting for password
  bump version to 1.1.44
  Bug 1236635 - 389-admin TPS srpmtest failure
  Ticket 48932 - stopping admin server stops all httpd processes
  Ticket 47413 - 389-admin fails to build with latest httpd
  Ticket 48931 - start-ds-admin should use systemctl
  Ticket 48823 - Admin Server - Add IPv6 support
  Ticket 48907 - register-ds-admin fails to find local config DS
  Ticket 48306 - perl module conditional test is not conditional when checking SELinux policies
  Ticket 48213 - Admin server registration requires anonymous binds
  bump version to 1.1.43
  Ticket 48429 - running remove-ds-admin.pl multiple times will make it so you cannot install DS
  Ticket 48410 - 389-admin - Unable to remove / unregister a DS instance from admin server
  Ticket 48409 - RHDS upgrade change Ownership of certificate files upon upgrade.
  Ticket 47840 - Fix setup-ds-admin.pl to create adm.conf with sbin scripts


author: Mark Reynolds <mreynolds@redhat.com> - 1.1.46-1
changelog:
  - Bump verison to 1.1.46
  - Ticket 49015 - regsiter-ds-amin.pl silent registration does not work with local instances


author: Mark Reynolds <mreynoilds@redhat.com> - 1.3.7.1-1
changelog:
  - Bump verson to 1.3.7.1
  - Ticket 49288 - RootDN Access wrong plugin path in template-dse.ldif.in
  - Ticket 49289 - Improve result handling from connections with NS
  - Ticket 49294 - radiusd before in unit file
  - Ticket 49293 - inttypes in nunc-stans
  - Ticket 49295 - Fix latest CI test failures
  - Ticket 623 - Add test case and refactor the cleanallruv suite
  - Ticket 49291 - slapi_search_internal_callback_pb may SIGSEV if related pblock has not operation set
  - Ticket 49008 - Fix MO plugin betxn test
  - Ticket 48944 - Add CI test case
  - Ticket 49227 - ldapsearch does not return the expected Error log level
  - Ticket 49028 - Add autotuning test suite
  - Ticket 49281 - improve db2* tests
  - Ticket 49273 - bak2db doesn't operate with dbversion
  - Ticket 49184 - adjust logging level in MO plugin
  - Ticket 49257 - Update CI script
  - Ticket 49257 - only register modify callbacks
  - Ticket 49008 - Adjust CI test for new memberOf behavior
  - Ticket 49273 - Fix compiler warning in dbversion_write, missing newline
  - Ticket 49277 - improve out of box system tuning for EL7
  - Ticket 49273 - crash when DBVERSION is corrupt.
  - Ticket 49273 - crash when DBVERSIOn is corrupt.
  - Ticket 49268 - master branch fails on big endian systems
  - Ticket 49271 - Fix pbkdf2 and openssl missing issue
  - Ticket 49242 - add gdb script to rpm
  - Ticket 49269 - Fix coverity errors
  - Ticket 49241 - add symblic link location to db2bak.pl output
  - Ticket #49072: memberOf fixup task does not validate args
  - Ticket 49257 - Reject nsslapd-cachememsize & nsslapd-cachesize when nsslapd-cache-autosize is set
  - Ticket 48538 - Failed to delete old semaphore
  - Ticket 49231 - force EXTERNAL always
  - Ticket 49267 - autosize split of 0 results in dbcache of 0
  - Ticket 49099 - resolve systemd startup interaction with ns
  - Ticket 49157 - fix error in ds-logpipe.py
  - Ticket 48864 - remove config.h from spal header.
  - Ticket 48681 - logconv.pl - Fix SASL Bind stats and rework report format
  - Ticket 49261 - Fix script usage and man pages
  - Ticket 49238 - AddressSanitizer: heap-use-after-free in libreplication
  - Ticket 48864 - Fix FreeIPA build
  - Ticket 49257 - Reject dbcachesize updates while auto cache sizing is enabled
  - Ticket 49249 - cos_cache is erroneously logging schema checking failure
  - Ticket 49248 - update eduPerson to 201602
  - Ticket 48050 - Add a test case for an issue 49014
  - Ticket 49258 - Allow nsslapd-cache-autosize to be modified while the server is running
  - Ticket 49165 - Fix compiler warnings
  - Ticket 49247 - resolve build issues on debian
  - Ticket 48123 - create contrib section
  - Ticket 49099 - fix configure.ac due to NS change
  - Ticket 49250 - remove mempool experimental!
  - Ticket 49099 - ns workers prep
  - Ticket 49185 - Fix leaks in compute init and dblayer
  - Ticket 49246 - ns-slapd crashes in role cache creation
  - Ticket 49244 - resolve various test case issues
  - Ticket 49157 - ds-logpipe.py crashes for non-existing users
  - Ticket 49053 - Fix rpm build
  - Ticket 49237 - Drop support for libdb older than 4.7
  - Ticket 49053 - Enable flto for DS
  - Ticket 49243 - segv in memberof fixup
  - Ticket 48985 - Add schema for nested groups to work out of box.
  - Ticket 49241 - Update man page and usage for db2bak.pl
  - Ticket 49071 - Add test case to tickets
  - Ticket 49075 - Adjust logging severity levels
  - Ticket 47662 - db2index not properly evalauating arguments
  - Ticket 49240 - ci compiler warns
  - Ticket 48989 - fix perf counters
  - Ticket 48681 - logconv.pl - fix sasl/bind stats
  - Ticket 49097 - fix pblock whitespace
  - Ticket 49097 - fix the pblock to be a hierachial structure
  - Ticket 49239 - move ds-replcheck man page and add script
  - Ticket 49239 - Add a tool to compare entries on LDAP servers.
  - Ticket 49231 - fix sasl mech handling
  - Ticket 49233 - Fix crash in persistent search
  - Ticket 49225 - Fix CI Test
  - Ticket 49230 - slapi_register_plugin creates config entry where it should not
  - Ticket 49225 - Add additional CRYPT password storage schemes


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.2-1
changelog:
  - Bump verison to 1.3.7.2
  - Ticket 49038 - Fix regression from legacy code cleanup
  - Ticket 49295 - Fix CI tests
  - Ticket 48067 - Add bugzilla tests for ds_logs
  - Ticket 49356 - mapping tree crash can occur during tot init
  - Ticket 49275 - fix compiler warns for gcc 7
  - Ticket 49248 - Add a docstring to account locking test case
  - Ticket 49445 - remove dead code
  - Ticket 48081 - Add regression tests for pwpolicy
  - Ticket 48056 - Add docstrings to basic test suite
  - Ticket 49349 - global name 'imap' is not defined
  - Ticket 83 - lib389 - Fix tests and create_test.py
  - Ticket 48185 - Remove referint-logchanges attr from referint's config
  - Ticket 48081 - Add regression tests for pwpolicy
  - Ticket 83 - lib389 - Replace topology agmt objects
  - Ticket 49331 - change autoscaling defaults
  - Ticket 49330 - Improve ndn cache performance.
  - Ticket 49347 - reproducable build numbers
  - Ticket 39344 - changelog ldif import fails
  - Ticket 49337 - Add regression tests for import tests
  - Ticket 49309 - syntax checking on referint's delay attr
  - Ticket 49336 - SECURITY: Locked account provides different return code
  - Ticket 49332 - Event queue is not working
  - Ticket 49313 - Change the retrochangelog default cache size
  - Ticket 49329 - Descriptive error msg for USN cleanup task
  - Ticket 49328 - Cleanup source code
  - Ticket 49299 - Add normalized dn cache stats to dbmon.sh
  - Ticket 49290 - improve idl handling in complex searches
  - Ticket 49328 - Update clang-format config file
  - Ticket 49091 - remove usage of changelog semaphore
  - Ticket 49275 - shadow warnings for gcc7 - pass 1
  - Ticket 49316 - fix missing not condition in clock cleanu
  - Ticket 49038 - Remove legacy replication
  - Ticket 49287 - v3 extend csnpl handling to multiple backends
  - Ticket 49310 - remove sds logging in debug builds
  - Ticket 49031 - Improve memberof with a cache of group parents
  - Ticket 49316 - Fix clock unsafety in DS
  - Ticket 48210 - Add IP addr and connid to monitor output
  - Ticket 49295 - Fix CI tests and compiler warnings
  - Ticket 49295 - Fix CI tests
  - Ticket 49305 - Improve atomic behaviours in 389-ds
  - Ticket 49298 - fix missing header
  - Ticket 49314 - Add untracked files to the .gitignore
  - Ticket 49303 - Fix error in CI test
  - Ticket 49302 - fix dirsrv importst due to lib389 change
  - Ticket 49303 - Add option to disable TLS client-initiated renegotiation
  - Ticket 49298 - force sync() on shutdown
  - Ticket 49306 - make -f rpm.mk rpms produces build without tcmalloc enabled
  - Ticket 49297 - improve search perf in bpt by removing a deref
  - Ticket 49284 - resolve crash in memberof when deleting attrs
  - Ticket 49290 - unindexed range searches don't provide notes=U
  - Ticket 49301 - Add one logpipe test case


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.3-1
changelog:
  - Bump version to 1.3.7.3
  - Ticket 49354 - fix regression in total init due to mistake in range fetch
  - Ticket 49370 - local password policies should use the same defaults as the global policy
  - Ticket 48989 - Delete slow lib389 test
  - Ticket 49367 - missing braces in idsktune
  - Ticket 49364 - incorrect function declaration.
  - Ticket 49275 - fix tls auth regression
  - Ticket 49038 - Revise creation of cn=replication,cn=config
  - Ticket 49368 - Fix typo in log message
  - Ticket 48059 - Add docstrings to CLU tests
  - Ticket 47840 - Add docstrings to setup tests
  - Ticket 49348 - support perlless and wrapperless install


author: Till Maas <opensource@till.name> - 3.2.6-12
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Ville Skyttä <ville.skytta@iki.fi> - 3.2.6-15
changelog:
  - Fix source URL and switch to xz tarball (the only one available)
  - Do not own %{_localstatedir}/lib/rpm-state (#907618)
  - Ship gsettings-schema-convert manpage only in -devel (#893767)
  - Install COPYING as %license where available
  - Fix bogus dates in %changelog


author: Paul Howarth <paul@city-fan.org> - 1.6.6-1
changelog:
  - Update to 1.6.6
    - Replaced usage of deprecated fileno, read, and lseek on Visual Studio 2005+
      with their ISO C++ conformant replacements (GH#55)
    - A warning about using a double as a float was fixed (GH#56)
    - Fixed segfault when doing a lookup on an empty database (GH#62)
    - Fixed a memcheck error from valgrind in the '_check_mtime' function (GH#60)
    - Fixed '_check_mtime' to check the return value of 'gettimeofday' rather
      than just assuming it worked


author: Paul Howarth <paul@city-fan.org> - 1.6.7-1
changelog:
  - Update to 1.6.7
    - Fixed a MSVC parser stack overflow when parsing 'regionName.c' and
      'timeZone.c' (GH#54)
    - Updated region codes and timezones
    - When using 'GEOIP_MEMORY_CACHE' with an invalid database file, the search
      tree traversal could attempt to read memory outside of the memory allocated
      for the memory cache, resulting in a segmentation fault; a check was added
      to ensure that the traversal code does not try to read beyond the end of
      the file, whether in memory, memory mapped, or on disk
    - Previously the return values from file reads were ignored; we now check
      these values to ensure that there were no errors


author: Paul Howarth <paul@city-fan.org> - 1.6.9-1
changelog:
  - Update to 1.6.9
    - Allow compilation on older systems by relaxing the autoconf and automake
      minimum versions
    - Avoid potential problems in multi-threaded environments by consistently
      using pread() rather than read()
    - Fix various small issues reported by clang's static analyser
    - Fix a regression introduced in version 1.6.8, which caused
      GeoIP_database_info to erroneously return NULL


author: Paul Howarth <paul@city-fan.org> - 1.6.10-1
changelog:
  - Update to 1.6.10
    - GeoIP_database_info now returns the full version string rather than
      incorrectly truncating it (GH#79)
    - This API is now distributed with a small test copy of GeoIP.dat rather than
      a full copy
    - Fix issue where Visual Studio 2015 was optimizing out initialization code
      (GH#81)
    - Fix test/benchmark on Windows (GH#75)


author: Paul Howarth <paul@city-fan.org> - 1.6.11-1
changelog:
  - Update to 1.6.11
    - Fix use of a NULL pointer when opening a corrupt database with 'GeoIP_open'
      (GH#87)
  - Drop EL-5 support
    - Drop redundant BuildRoot: and Group: tags
    - Drop EL5-only dependency on GeoIP-GeoLite-data
    - Drop explicit pkgconfig dependency in devel package
    - Drop buildroot cleaning in %install section
    - Drop explicit %clean section


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-4
changelog:
  - ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
  - tui: fix crash during connect (rh #1456826)
  - libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)
  - bluetooth: fix crash on connecting to a NAP (rh #1454385)
  - device: release removed devices from master on cleanup (rh #1448907)
  - nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.8.0-5
changelog:
  - bond: fix crash comparing mode while generating bond connection (rh #1459580)
  - connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
  - device: persist nm-owned in run state (rh #1376199)
  - device: fix assuming master device on restart (rh #1452062)
  - device: apply route metric penality only when the default route exists (rh #1459604)
  - connectivity: fix periodic connectivity check (rh #1458399)
  - bond: improve option matching on daemon restart (rh #1457909)
  - device: fix touching device after external activation (rh #1457242)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.8.0-6
changelog:
  - device: don't change MTU unless explicitly configured (rh #1460760)
  - core: don't remove external IPv4 addresses (rh #1459813)
  - cli: fix output of iface in overview output (rh#1460219)
  - ppp: unexport NMPPPManager instance on dispose (rh#1459579)
  - cli: remove spurious device names from wifi subcommands output (rh#1460527)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.8.2-1
changelog:
  - Update to 1.8.2 release
  - dhcp/dhclient: improve "interface" statement parsing
  - dns: fix public suffix check on search domains (rh #1404350)


author: Stephen Gallagher <sgallagh@redhat.com> - 1:1.8.2-2
changelog:
  - NetworkManager-wifi and NetworkManager-glib-devel should require
    NetworkManager, not provide it.


author: Thomas Haller <thaller@redhat.com> - 1:1.8.4-1
changelog:
  - Update to 1.8.4 release
  - don't install NetworkManager-wait-online in network-online.target.wants (rh#1455704)


author: Richard Hughes <rhughes@redhat.com> - 1.1.7-1
changelog:
  - New upstream release
  - Add fedora-cisco-openh264 repos to supported repos list
  - Add missing context pushes and pops in appstream-glib
  - Add the ability to install updates on reboot in PackageKit-cron
  - Effectively check for previous proxy entries
  - Fix an inverted condition that led to frequent crashes
  - Show a different progress message for system upgrades


author: Pete Zaitcev <zaitcev@redhat.com> - 2.7b-1
changelog:
  - Upstream 2.7b (includes ./configure for autoconf 2.69, required for ARM 64)
  - Rebuild for PIE (954334)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:2.7-0.4.d
changelog:
  - Update to 2.7d:
  - added "Disable PROTO" directives (fix for Poodle vulnerability)
  - added Cert, Disable and Cipher directives for HTTPS back-ends. The
    directive HTTPS "cert" no longer supported.
  - fixed address comparison for RewriteLocation (IPv4/IPv6 problem -


author: Petr Kubat <pkubat@redhat.com> - 5.0.1-1
changelog:
  - Rebase to upstream version 5.0.1 per #1370775
    See changelog http://www.pygresql.org/changelog.html


author: Petr Kubat <pkubat@redhat.com> - 5.0.2-1
changelog:
  - Rebase to upstream version 5.0.2 per #1376292
    See changelog http://www.pygresql.org/changelog.html


author: Pavel Raiskup <praiskup@redhat.com> - 5.0.4-1
changelog:
  - Rebase to upstream version 5.0.4 per rhbz#1475595
    See changelog http://www.pygresql.org/changelog.html


author: Petr Pisar <ppisar@redhat.com> - 1.2.15-23
changelog:
  - Enable setting gamma by programing palette as supported by xorg-server
    1.19.0 again (bug #891973)


author: Martin Kutlak <mkutlak@redhat.com> 2.10.3-1
changelog:
  - Translation updates
  - applet: add a default action to a notification
  - spec: require libreport-plugin-systemd-journal on Fedoras
  - changing load location from bin to libexec
  - changing location of abrt-action-save-container-data from bin to libexec
  - koops: Improve not-reportable for oopses with taint flags
  - This fixes #1173
  - python: provide more information about exception
  - abrt-journal: adapt to suspicious blacklist addition
  - koops: add suspicious strings blacklist
  - build: fix changelog adding in release target
  - Resolves: #1452160, #1444924, #1437956


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.10.3-7
changelog:
  - Python 2 binary package renamed to python2-abrt
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
  - Python 3 binary package renamed to python3-abrt
  - Add-on packages renamed to python[23]-abrt-addon
  - Documentation packages renamed to python[23]-abrt-doc


author: Matej Habrnal <mhabrnal@redhat.com> 2.10.4-1
changelog:
  - Translation updates
  - logging: rename log() to log_warning()
  - Quick hack to fix build with rpm >= 4.14
  - cli,dbus: Allow polkit to be optional at build time
  - spec: add dependency for python{3}-gobject
  - a-d-journal-core: fix bad condition in creating reason msg
  - a-d-journal-core: use pid of crashed process in dumpdir name
  - changelog: update CHANGELOG.md


author: Kamil Dudka <kdudka@redhat.com> 2.2.52-14
changelog:
  - drop obsolete BuildRoot and Group tags
  - fix spurious acl_check() failure on setfacl --restore (#1451826)


author: Kamil Dudka <kdudka@redhat.com> 2.2.52-15
changelog:
  - setfacl.1: document the meaning of '-' in perms (#1337039)
  - avoid failure of %check when building as root (#1085389)
  - apply patches automatically to ease maintenance


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-13.20140228gitc2f5d13
changelog:
  - update to latest snapshot from github
  - drop patches merged upstream
  - fix broken LDFLAGS in tre.pc (#1224203)


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-18.20140228gitc2f5d13
changelog:
  - fix CVE-2016-8859 (#1387112, #1387113)
  - probably fix CVE-2015-3796 (see upstream issue #37 and
    https://bugs.chromium.org/p/project-zero/issues/detail?id=428)
  - update python bindings subpackage to current guidelines
  - fix parallel installation of multilib packages (patch by joseba.gar at gmail.com)
    (bug #1275830)


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.4.2-3
changelog:
  - Add patch from upstream to fix a segfault in planner.  Hopefully fixes
    https://bugzilla.redhat.com/show_bug.cgi?id=1423471


author: Martin Kolman <mkolman@redhat.com> - 27.18-1
changelog:
  - rpmostreepayload: Reuse the local repo as a cache (walters)
  - Document how to create Anaconda releases and package builds (mkolman)


author: Radek Vykydal <rvykydal@redhat.com> - 27.19-1
changelog:
  - rpmostreepayload: Set up /var first (walters)
  - rpmostreepayload: Explicitly create /var/lib before tmpfiles (walters)
  - rpmostreepayload: Rework mount setup to support admin-defined mounts
    (walters)
  - rpmostreepayload: try to verify local ostree repo cache (dusty)
  - rpmostreepayload: ignore <F25 location, support RHEL (dusty)
  - rpmostreepayload: use correct secondary url location (dusty)
  - Add tracking of requirements application to requirements container.
    (rvykydal)
  - Add langpacks via payload requirements (rvykydal)
  - Add NTP_PACKAGE via installation requirements (rvykydal)
  - timezone: simplify kickstart setup metod (rvykydal)
  - Store payload (packages, groups) requirements in a container. (rvykydal)
  - Fix anaconda --help fail with traceback (#1470514) (jkonecny)
  - rpmostreepayload: Do /sysroot mount non-recursively (walters)
  - Add isolated-test makefile target (jkonecny)
  - gui: show supported locales on Atomic Host installs (jlebon)


author: Martin Kolman <mkolman@redhat.com> - 27.20-1
changelog:
  - Add support for automatic generating of DBus specification. (vponcova)
  - Add support for generating XML (vponcova)
  - Add support for DBus typing system (vponcova)
  - dnfpayload: do not try to contact disabled repo (artem.bityutskiy)
  - Add message to setup-test-env is ran (jkonecny)
  - Use SHA256 instead of MD5 for repoMDHash (#1341280) (bcl)
  - Add lorax-packages.log to bug report. (rvykydal)
  - Use SHA256 instead of MD5 for repoMDHash (#1341280) (jkonecny)
  - 80-setfilecons: Add a few paths (/var/run, /var/spool) (walters)
  - Also capture anaconda-pre logs if they exist (riehecky)
  - Don't mock modules with sys in unit tests (vponcova)
  - logging: replace SyslogHandler with JournalHandler (rvykydal)
  - Add setup-test-env target to the Makefile (jkonecny)
  - Add tests for the install class factory (vponcova)
  - Support for the installclass kickstart command (vponcova)
  - Modules with install classes should define __all__ (vponcova)
  - Refactorization of the installclass.py (vponcova)
  - docs: minor fixups of release document (rvykydal)
  - rescue: add RTD documentation (rvykydal)
  - rescue: clean up method for mounting root (rvykydal)
  - rescue: separate UI and execution logic (rvykydal)
  - Make kickstart rescue command noninteractive. (rvykydal)
  - Remove unused argument and code. (rvykydal)


author: Martin Kolman <mkolman@redhat.com> - 27.20.1-1
changelog:
  - Remove the metacity theme. (vponcova)
  - Add the option inst.decorated to allow title bar in GUI (vponcova)
  - Move python3-gobject Requires to core (jkonecny)
  - Return simpleline removed ipmi calls back (jkonecny)
  - Use new list container from Simpleline (jkonecny)
  - Remove old simpleline from anaconda (jkonecny)
  - Ask multiple times for wrong input (jkonecny)
  - Show TUI exception only first time (jkonecny)
  - Add simpleline logger to the Anaconda (jkonecny)
  - Modify TUI to use new Simpleline package (jkonecny)
  - Make 64-bit kernel on 32-bit firmware work for x86 efi machines (pjones)
  - Add missing gtk3 required version to spec file (jkonecny)
  - Sort spec required versions alphabetically (jkonecny)
  - Fix testing of the kickstart version (vponcova)
  - Move the installclass command to the %anaconda section. (vponcova)
  - Fix SL install class to use right efi dir (riehecky)
  - Fix accelerator key for blivet-gui partitioning (#1482438) (vtrefny)
  - Add blivet-gui logs to python-meh file list (vtrefny)
  - Remove the title bar in anaconda by default (#1468801) (vponcova)
  - Add simple script to read journal with message code source and thread info.
    (rvykydal)


author: Martin Kolman <mkolman@redhat.com> - 27.20.2-1
changelog:
  - Use name instead of index in TUI env selection (#1495204) (jkonecny)
  - Fix missing container in TUI source spoke (#1494801) (jkonecny)
  - Add MOCK_EXTRA_ARGS to Makefile (jkonecny)
  - tui source spoke: initialize nfs values when switching to nfs (rvykydal)
  - Deselect encryption when switching to blivet-gui partitioning (vtrefny)
  - Fix missing id to name environment transition (#1491119) (jkonecny)
  - Fix test for unset TUI software environment (#1491119) (jkonecny)
  - Rename processingDone to processing_done variable (jkonecny)
  - network: add support for kickstart --bindto=mac for virtual devices
    (#1328576) (rvykydal)
  - network: support mac bound network settings as first class (#1328576)
    (rvykydal)
  - network: add support for kickstart --bindto=mac for wired devices (#1328576)
    (rvykydal)
  - Don't setup the hub twice (#1491333) (vponcova)
  - rpmostreepayload: Substitute ${basearch} in ostreesetup ref (walters)
  - Bump Simpleline version (jkonecny)
  - Perform repo checks only when there are checks available. (rvykydal)
  - Add support for repo --metalink (GUI) (#1464843) (rvykydal)
  - Add support for repo --metalink (kickstart, tui) (#1464843) (rvykydal)
  - Make EFIGRUB._efi_binary a property, not a method (awilliam)
  - Better storing logs from build and tests (jkonecny)
  - Provide a default install class. (vponcova)
  - Do not use hidden install classes. (vponcova)
  - Make geolocation with kickstart possible (#1358331) (mkolman)
  - Run python-meh as modal in TUI (jkonecny)
  - Use GLib event loop in the simpleline (jkonecny)
  - TUI progress reporting is handled by show_all (jkonecny)
  - Fix catch TUI not main thread exceptions (jkonecny)
  - Add efi_dir to the BaseInstallClass (#1412391) (vponcova)
  - Document Anaconda branching workflow (mkolman)
  - Use constants for version number bumps and additions (mkolman)
  - Fix closest mirror now needs network (jkonecny)
  - Fix restart payload thread in Network spoke GUI (#1478970) (jkonecny)
  - Network spoke freeze when testing availability (#1478970) (jkonecny)
  - Add support for adding version numbers to makebumpver (mkolman)
  - Add support for major version bump to makebumpver (mkolman)
  - Fix proxy settings badly used when testing repos (#1478970) (jkonecny)
  - Add inst.notmux option (dusty)


author: Martin Kolman <mkolman@redhat.com> - 27.20.3-1
changelog:
  - Mark the mount point assignment in TUI as experimental (vpodzime)
  - Reset storage on change in text mode (vpodzime)
  - Only allow the supported file systems in text mode (vpodzime)
  - Textual configuration of mount points (vpodzime)
  - Add support for the new 'mount' kickstart command (vpodzime)
  - Fix dnf exception repository not set (#1495211) (jkonecny)
  - Add logging of complete spokes in GUI. (rvykydal)
  - Do not execute storage when the spoke is left with no selected disk
    (#1496327) (rvykydal)
  - Add checks for group names (#1497676) (vponcova)
  - Add new checks for user names (#1491006) (vponcova)


author: Martin Kolman <mkolman@redhat.com> - 27.20.4-2
changelog:
  - network: create default ifcfg also for missing default NM connection (#1478141) (rvykydal)
  - Mac EFI installs need grub2-tools (#1503496) (adamw)


author: Martin Kolman <mkolman@redhat.com> - 27.20.4-3
changelog:
  - Add logging to TUI software selection spoke (#1505090) (jkonecny)
  - Fix changing source don't erase old environment TUI (#1505090) (jkonecny)
  - Add modular server repo to the base repositories (#1506894) (jkonecny)


author: Joe Orton <jorton@redhat.com> - 1.6.0-1
changelog:
  - update to 1.6.0 (#1460831)
  - move bdb support to loadable DSO in apr-util-dbd subpackage
  - drop NSS, freetds support


author: Robert Scheck <robert@fedoraproject.org> 3.10.22-22
changelog:
  - Added patch from Debian to avoid free on invalid pointer due to a
    buffer overflow (#1196751, #1207180)
  - Added patch from Debian for symlink directory traversal (#1178824)
  - Added patch from Debian to fix the directory traversal via
    //multiple/leading/slash (#1178824)


author: Adam Jackson <ajax@redhat.com> 2.4.47-13
changelog:
  - Remove bizarre 12 year old libtool invocation workaround that prevented
    hardened cflags being applied


author: Kamil Dudka <kdudka@redhat.com> 2.4.47-19
changelog:
  - fix test-suite failure with perl-5.26.0 (#1473853)
  - apply patches automatically to ease maintenance
  - update URL of the upstream source tarball


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.6-1
changelog:
  - add use_first_pass to pam_sss in password stack
  - more robust initialization of sssdConfig
  - check whether base DN value is a real base DN
  - use non-deprecated pam_pwquality option authtok_type= instead of type=
  - update lastlog for su


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.7-1
changelog:
  - samba-winbind-clients package contains the nsswitch and pam modules (#919117)
  - do not drop sss from nsswitch.conf on --update (#980861)
  - writing out smartcard/fingerprint auth policy to dconf (original patch by
    Ray Strode) (#990625)
  - document other possible return codes from authconfig invocation (#991804)
  - print error message if config file save fails (#994596)
  - never stop rpcbind (#990788)
  - do not disable sssd.service when --enablesssd is used (#953851)
  - revert use_first_pass addition to pam_sss in password stack (#953116)


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-1
changelog:
  - detect invalid LDAP uri and report error
  - fix handling of IPA domain join errors and uninstall
  - add support for winbind authentication over Kerberos 5
  - set umask=077 by default for pam_mkhomedir and pam_oddjob_mkhomedir
  - better error checking for password quality options


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.9-1
changelog:
  - support screensaver lock handling by GDM
  - fix pam_pkcs11 options
  - enable/disable/restart only services that are affected by the configuration
    changes
  - do not overwrite special ldap base values
  - display error message if winbind or IPA domain join fails
  - fix invocation of IPA domain join from GUI
  - translation updates


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.10-1
changelog:
  - allow multiple LDAP URIs in the setting again
  - winbind modules are now in samba-winbind package
  - add support for keeping myhostname in nsswitch.conf hosts entry
  - do not misinterpret comment for realm in krb5.conf
  - warn about unsupported locale, do not bail out with exception
  - python 3 compatibility for authconfig command line


author: Tomáš Mráz <tmraz@redhat.com> - 7.0.0-1
changelog:
  - dropped authconfig-gtk (system-config-authentication) (no GTK3 support)
  - dropped authconfig-tui (deprecated long ago)
  - dropped IPA domain join support (conflicts with the recommended way to
    install IPA client on a machine)
  - dropped support for Hesiod, Wins, AFS, and other obsolete cruft


author: Tomáš Mráz <tmraz@redhat.com> - 7.0.1-1
changelog:
  - fix CVE-2017-7488 incorrect PAM configuration with SSSD (#1441604)
    (if you use configuration with pam_sss, use authconfig --updateall
    to fix the PAM configuration)
  - support locking accounts after multiple authentication failures via
    pam_faillock
  - enable SSSD smartcard support if module sssd is used


author: Kevin Fenzi <kevin@scrye.com> - 1.07.1-1https://bugs.archlinux.org/task/53546
changelog:
  - Update to 1.07.1
  - Fixes a bug that breaks kernel builds ( https://bugs.archlinux.org/task/53546 )


author: Rolf Fokkens <rolf@rolffokkens.nl> - 1.0.8-6
changelog:
  - Added experimental kernel cmdline parameter processing for bcache
  - fixed bad non-root permission handling for --gc option (#1360951)


author: Petr Menšík <pemensik@redhat.com> - 10.1-2
changelog:
  - Patched to alfa 11.0 with support for BIND 9.11
  - Configuration format in named.conf is different
      and incompatible with all previous versions. Please see README.md.
  - Minimal BIND version is now 9.11.0rc1. Please see NEWS.


author: Tomas Krizek <tkrizek@redhat.com> - 11.1-1
changelog:
  - Update to 11.1
  - Bumped required version of BIND to 9.11.0-6.P2
    (required since bind-dyndb-ldap 11.0-1 release)
  - Updated source URL links to pagure


author: Nick Clifton <nickc@redhat.com> 2.29-1
changelog:
  - Rebase on FSF binutils 2.29.
  - Retire: binutils-2.20.51.0.10-ppc64-pie.patch
  - Retire: binutils-2.27-ld-buffer-overflow.patch
  - Retire: binutils-2.28-libiberty-bugfixes.patch
  - Retire: binutils-gnu-build-notes.patch
  - Retire: binutils-2.28-gas-comp_dir.patch
  - Retire: binutils-2.28-ppc-dynamic-relocs.patch
  - Retire: binutils-2.28-dynamic-section-warning.patch
  - Retire: binutils-2.28-aarch64-copy-relocs.patch
  - Retire: binutils-2.28-DW_AT_export_symbols.patch


author: Nick Clifton <nickc@redhat.com> 2.29-5
changelog:
  - Update ppc64 localentry0 patch with changes made by Alan Modra to the FSF binutils sources.
    (#1475636)


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.63.0-9
changelog:
  - Add numpy and numpy3 packages (#1451982)
  - Fix location of openmpi-python and mpich-python modules
  - Add openmpi-python3 and mpich-python3 packages
  - Add missing ldconfig post/postun for python3 package


author: Jonathan Wakely <jwakely@redhat.com> - 1.64.0-4
changelog:
  - Fix some rpmlint issues
  - Remove Requires for libquadmath (explicit-lib-dependency)
  - Remove executable bits on header files (spurious-executable-perm)
  - Adjust boost.wave %description (spelling-error)


author: Peter Robinson <pbrobinson@fedoraproject.org> 1.5-12
changelog:
  - Use system CFLAGS to build libbridge so properly hardened etc (fix FTBFS)
  - Use %license, spec cleanups


author: Pavel Raiskup <praiskup@redhat.com> - 3.3.1-1
changelog:
  - the latest release, per release notes:
    https://groups.google.com/forum/#!topic/libarchive-discuss/jfc7lBfrvVg


author: Colin Walters <walters@verbum.org> - 0.1.7-1
changelog:
  - New upstream version;
    https://github.com/projectatomic/bubblewrap/releases/tag/v0.1.7
  - Resolves: #1411814


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-28
changelog:
  - libusal: added /dev/srN next to /dev/scdN path when scanning for devices
    added cdrkit-1.1.11-devname.patch
    bz#1053056


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-32
changelog:
  - FTBFS: <sys/sysmacros.h> included where "major" and "minor" macros are in use
    (cdrkit-1.1.11-sysmacros.patch added)
  - https://bugzilla.redhat.com/show_bug.cgi?id=1263599 - man page clarified
    (cdrkit-1.1.11-manpagefix.patch modified)


author: Petr Pisar <ppisar@redhat.com> - 1.1.11-35
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Nalin Dahyabhai <nalin@redhat.com> 0.79-1
changelog:
  - update to 0.79:
    - getcert now offers an option (-X) for requesting processing by a particular
      CA if the server we're contacting is running more than one
    - getcert also offers options (--for-ca, --not-for-ca, --ca-path-length) for
      requesting BasicConstraints values
    - getcert now displays times in local time instead of UTC, which was
      previously the only way they were displayed; the --utc option can often be
      used to switch back to its previous behavior
    - the SCEP enrollment helper now correctly issues GetCACertChain requests to
      SCEP servers, instead of issuing a GetCAChain request, which isn't part of
      the protocol; from report by Jason Garland
    - when issuing SCEP requests, the ID of the CA included in the HTTP request
      is now URL-encoded, as it should be
    - renewal or notification-of-impending-expiration logic is now triggered
      closer to TTL thresholds rather than waiting for a periodic check to pass a
      threshold
    - properly builds with OpenSSL 1.1, thanks to Lukas Slebodnik and Tomas Mraz
      for a lot of the legwork
  - resync .spec file with Fedora
  - upstream project migrated from fedorahosted.org to pagure.io


author: Rob Crittenden <rcritten@redhat.com> 0.79.4-1
changelog:
  - update to 0.79.4
    - fix CA option name for ipa cert-request
    - fix minor memory leak
    - fix build warnings
    - fix an incorrect date in the .spec changelog
    - bump gettext version to avoid warning


author: Rob Crittenden <rcritten@redhat.com> 0.79.4-2
changelog:
  - Reformat certificates returned by Dogtag. Dogtag was including
    a spurious newline before -----END CERTIFICATE-----


author: Rob Crittenden <rcritten@redhat.com> 0.79.5-1
changelog:
  - update to 0.79.5:
     - getcert start-tracking: use issuer option when specified
     - add support for specifying the MS certificate template
     - Reformat certificates returned by Dogtag to strip extra newline


author: Pavel Lisý <pali@fedoraproject.org> - 1.2.103-1
changelog:
  - latest 1.2.x upstream release
  - Resolves bz 961057 - RFE: Cherokee 1.2.103 is available
  - Resolves bz 961056 - RFE: Cherokee 1.2.103 is available
  - Resolves bz 954199 - cherokee 1.2.103 is available
  - Resolves bz 958337 - Update request for Cherokee
  - Resolves bz 858542 - Cherokee should not be built with trace/backtrace support for performance


author: Pavel Lisý <pali@fedoraproject.org> - 1.2.103-6
changelog:
  - Resolves bz 1114461 - CVE-2014-4668 cherokee: authentication bypass when LDAP server allows unauthenticated binds
  - Resolves bz 1094901 - cherokee: script and/or trigger should not directly enable systemd units
  - Resolves bz  959170 - cherokee-worker and cherokee-admin want to use execstack (EL5)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.4-1
changelog:
  - ntsysv: show systemd services and sockets
  - fix combination --type xinetd --list service
  - leveldb: restore selinux context for xinetd conf files
  - alternatives: remove unused variable
  - alternatives: warn if the target is not a symlink
  - spec: add link to git
  - lets simplify version


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.5-1
changelog:
  - add systemd-sysv-install alias
  - don't create symlinks if they already exist
  - fix wrongly behaving LDFLAGS


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.6-1
changelog:
  - systemd-sysv-install: don't play ping-pong with systemctl
  - ntsysv: add description to systemd services
  - ntsysv: skip templates
  - Makefile: fix typo


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.8-1
changelog:
  - alternatives: introduce --keep-missing
  - alternatives: allow family in --set and display it in --config
  - chkconfig: use isXinetdEnabled instead of isOn
  - leveldb: trim leading whitespaces from systemctl
  - leveldb: suppress error messages when selinux is turned off
  - alternatives: always recreate symlinks when the alternative is updated
  - test-alternatives: basic tests for slave links
  - chkconfig: resetpriorities should work on all runlevels


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-4
changelog:
  - use ID from /etc/os-release to set pool.ntp.org vendor zone (#1443599)
  - fix seccomp filter for new glibc once again
  - don't drop PHC samples with zero delay


author: Orion Poplawski <orion@cora.nwra.com> - 0.99.2-7
changelog:
  - Fix clamav-milter startup under selinux (bug #1434176)
  - Move /etc/clam.d to clamav-filesystem (bug #1275630)
  - Make clamav-milter own /etc/mail (bug #1175473)


author: Jan Pokorný <jpokorny+rpm-clufter@fedoraproject.org> - 0.70.0-1
changelog:
  - split -bin and -common packages, the former becoming the only arch-specific
  - also move python-specific (entry points, main files) back from -cli package
  - also rename python-clufter to python2-clufter (former is a legacy alias)
  - also leverage the above modularization to package python3-clufter in parallel
  - bump upstream package (version rolling the above changes out)


author: Jan Pokorný <jpokorny+rpm-clufter@fedoraproject.org> - 0.75.0-1
changelog:
  - move nano fallback editor dependency to -cli package [PGissue#1]
  - bump upstream package, see https://pagure.io/clufter/releases


author: Jan Pokorný <jpokorny+rpm-clufter@fedoraproject.org> - 0.76.0-1
changelog:
  - factor "borrow validation schemas from pacemaker" out to a separate script
  - bump upstream package, see https://pagure.io/clufter/releases


author: Marian Csontos <mcsontos@redhat.com> - 2.02.171-1
changelog:
  - Add RAID takeover and reshaping.
  - Add pvcreate prompt when device size doesn't match setphysicalvolumesize.
  - Remove obsolete lvmchange binary - convert to built-in command.
  - Support cache segment with configurable metadata format.
  - Add option for lvcreate/lvconvert --cachemetadataformat auto|1|2.
  - Add allocation/cache_metadata_format profilable settings.
  - Command line options, help and man pages using common definitions.
  - Add build-time configuration command line to 'lvm version' output.
  - Disable lvmetad when lvconvert --repair is run.
  - Raise mirror/raid default regionsize to 2MiB.
  - Support shrinking of RaidLVs.
  - Introduce global/fsadm_executable to make fsadm path configurable.
  - Look for limited thin pool metadata size when using 16G metadata.
  - Add lvconvert pool creation rule disallowing options with poolmetadata.
  - Fix missing lvmlockd LV locks in lvchange and lvconvert.
  - Fix dmeventd setup for lvchange --poll.
  - Fix use of --poll and --monitor with lvchange and vgchange.
  - Disallow lvconvert of hidden LV to a pool.
  - Ignore --partial option when not used for activation.
  - Allow --activationmode option with lvchange --refresh.
  - Allow valid lvconvert --regionsize change
  - Fix SIGINT blocking to prevent corrupted metadata
  - Fix systemd unit existence check for lvmconf --services --startstopservices.
  - Check and use PATH_MAX buffers when creating vgrename device paths.
  - Handle known table line parameter order change in specific raid target vsns.
  - Show more information for cached volumes in lvdisplay [-m].
  - Use function cache_set_params() for both lvcreate and lvconvert.
  - Skip rounding on cache chunk size boudary when create cache LV.
  - Improve cache_set_params support for chunk_size selection.
  - Fix metadata profile allocation/cache_[mode|policy] setting.
  - Fix missing support for using allocation/cache_pool_chunk_size setting.
  - Support conversion of raid type, stripesize and number of disks
  - Reject writemostly/writebehind in lvchange during resynchronization.
  - Deactivate active origin first before removal for improved workflow.
  - Fix regression of accepting both --type and -m with lvresize. (2.02.158)
  - Add extra memory page when limiting pthread stack size in clvmd.
  - Support striped/raid0* <-> raid10_near conversions.
  - Support region size changes on existing RaidLVs.
  - Avoid parallel usage of cpg_mcast_joined() in clvmd with corosync.
  - Support raid6_{ls,rs,la,ra}_6 segment types and conversions from/to it.
  - Support raid6_n_6 segment type and conversions from/to it.
  - Support raid5_n segment type and conversions from/to it.
  - Support new internal command _dmeventd_thin_command.
  - Introduce new dmeventd/thin_command configurable setting.
  - Use new default units 'r' for displaying sizes.
  - Also unmount mount point on top of MD device if using blkdeactivate -u.
  - Restore check preventing resize of cache type volumes (2.02.158).
  - Add missing udev sync when flushing dirty cache content.
  - vgchange -p accepts only uint32 numbers.
  - Report thin LV date for merged LV when the merge is in progress.
  - Detect if snapshot merge really started before polling for progress.
  - Checking LV for merging origin requires also it has merged snapshot.
  - Extend validation of metadata processing.
  - Enable usage of cached volumes as snapshot origin LV.
  - Fix displayed lv name when splitting snapshot (2.02.146).
  - Warn about command not making metadata backup just once per command.
  - Enable usage of cached volume as thin volume's external origin.
  - Support cache volume activation with -real layer.
  - Improve search of lock-holder for external origin and thin-pool.
  - Support status checking of cache volume used in layer.
  - Avoid shifting by one number of blocks when clearing dirty cache volume.
  - Extend metadata validation of external origin LV use count.
  - Fix dm table when the last user of active external origin is removed.
  - Improve reported lvs status for active external origin volume.
  - Fix table load for splitted RAID LV and require explicit activation.
  - Always active splitted RAID LV exclusively locally.
  - Do not use LV RAID status bit for segment status.
  - Check segtype directly instead of checking RAID in segment status.
  - Reusing exiting code for raid image removal.
  - Fix pvmove leaving -pvmove0 error device in clustered VG.
  - Avoid adding extra '_' at end of raid extracted images or metadata.
  - Optimize another _rmeta clearing code.
  - Fix deactivation of raid orphan devices for clustered VG.
  - Fix lvconvert raid1 to mirror table reload order.
  - Add internal function for separate mirror log preparation.
  - Fix segfault in lvmetad from missing NULL in daemon_reply_simple.
  - Simplify internal _info_run() and use _setup_task_run() for mknod.
  - Better API for internal function _setup_task_run.
  - Avoid using lv_has_target_type() call within lv_info_with_seg_status.
  - Simplify internal lv_info_with_seg_status API.
  - Decide which status is needed in one place for lv_info_with_seg_status.
  - Fix matching of LV segment when checking for it info status.
  - Report log_warn when status cannot be parsed.
  - Test segment type before accessing segment members when checking status.
  - Implement compatible target function for stripe segment.
  - Use status info to report merge failed and snapshot invalid lvs fields.
  - See WHATS_NEW and WHATS_NEW_DM in the documentation directory for more.


author: Marian Csontos <mcsontos@redhat.com> - 2.02.172-1
changelog:
  - Do not lvdisplay --maps unset settings of cache pool.
  - Fix lvdisplay --maps for cache pool without policy settings.
  - Support aborting of flushing cache LV.
  - Improve lvcreate --cachepool arg validation.
  - Cache format2 flag is now using segment name type field.
  - Disallow cachepool creation with policy cleaner and mode writeback.
  - Lvconvert --repair handles failing raid legs (present but marked 'D'ead).
  - Add display_percent helper function for printing percent values.
  - Add dm_percent_to_round_float for adjusted percentage rounding.
  - Fix lvcreate extent percentage calculation for mirrors.
  - Reenable conversion of data and metadata thin-pool volumes to raid.
  - Linear to RAID1 upconverts now use "recover" sync action, not "resync".
  - No longer necessary to '--force' a repair for RAID1.
  - Improve raid status reporting with lvs.
  - dm_get_status_raid() handle better some incosistent md statuses.
  - Limit maximal size of thin-pool for specific chunk size.
  - Print a warning about in-use PVs with no VG using them.
  - Disable automatic clearing of PVs that look like in-use orphans.
  - Extend validation of filesystems resized by fsadm.
  - Properly handle subshell return codes in fsadm.
  - Stop using '--yes' mode when fsadm runs without terminal.
  - Support storing status flags via segtype name field.
  - Enhance lvconvert automatic settings of possible (raid) LV types.
  - Add missing NULL to argv array when spliting cmdline arguments.
  - Don't reinstate still-missing devices when correcting inconsistent metadata.
  - Allow lvchange to change properties on a thin pool data sub LV.
  - Fix reusing of dm_task structure for status reading (used by dmeventd).
  - Drop unneeded --config option from raid dmeventd plugin.
  - Accept truncated files in calls to dm_stats_update_regions_from_fd().
  - Restore Warning by 5% increment when thin-pool is over 80% (1.02.138).
  - Reset array with dead rimage devices once raid gets in sync.


author: Marian Csontos <mcsontos@redhat.com> - 2.02.173-1
changelog:
  - Create /dev/disk/by-part{uuid,label} and gpt-auto-root symlinks with udev.
  - Add synchronization points with udev during conversion of raid LVs.
  - Improve --size args validation and report more detailed error message.
  - Initialize debugging mutex before any debug message in clvmd.
  - Log error instead of warn when noticing connection problem with lvmetad.
  - Fix memory leak in lvmetad when working with duplicates.
  - Remove restrictions on reshaping open and clustered raid devices.
  - Add incompatible data_offset to raid metadata to fix reshape activation.
  - Accept 'lvm -h' and 'lvm --help' as well as 'lvm help' for help.
  - Suppress error message from accept() on clean lvmetad shutdown.
  - Tidy clvmd client list processing and fix segfaults.
  - Protect clvmd debug log messages with mutex and add client id.
  - Fix shellcheck reported issues for script files.


author: Martin Pitt <<martin@piware.de>> - 142-1
changelog:
  - Virtual machines display an interactive console, either in browser, or a popup viewer
  - Fix Virtual Machines operations on non-English locales
  - Add documentation explaining how to grant/restrict access via polkit rules


author: Martin Pitt <<martin@piware.de>> - 143-1
changelog:
  - Add "Software Updates" page for package (rpm/deb) based operating systems
  - Fix cockpit-machines package to make inline VNC console actually work
  - Fix Kubernetes authentication when Kubernetes configured for RBAC
  - Build Docker page for s390x architecture


author: Martin Pitt <martin@piware.de> - 145-1
changelog:
  - Resize the terminal dynamically to use all available space
  - Let the Machines page update immediately after changes
  - Add delete VM functionality to the Machines page
  - Retire support for external Machines provider API
  - Always recommend rebooting after applying Software Updates
  - Group D-Bus channels to avoid hitting connection limits
  - Fix building on Fedora Rawhide/glibc 2.25.90


author: Martin Pitt <martin@piware.de> - 146-1
changelog:
  - Show recent updates and live update log on Software Updates page
  - Improve available Software Updates table layout for small/mobile screens
  - Support OAuth Kubernetes logins to work with Google Compute Engine
  - Fix reporting ABRT crashes that are already known to the server
  - Scroll the virtual machine VNC console into view automatically


author: petervo <petervo@redhat.com> - 149-1
changelog:
  - Support sending non-maskable interrupt to VMs
  - Fix building on fedora 27
  - Add information about non-met conditions for systemd services
  - Clear cockpit cookie on logout


author: Martin Pitt <martin@piware.de> - 150-1
changelog:
  - Automatically enable and start newly created timers on the Services page
  - Support cockpit-dashboard installation into OSTree overlay on Atomic
  - Support Kubernetes basic auth with Google Compute Engine 1.7.x


author: Martin Pitt <martin@piware.de> - 151-1
changelog:
  - Support loading SSH keys from arbitrary paths
  - Support X-Forwarded-Proto HTTP header for Kubernetes
  - Fix Kubernetes connection hangs (regression in version 150)


author: Richard Hughes <richard@hughsie.com> 1.3.2-1
changelog:
  - New upstream version
  - Add initial support for the v2 protocol used by ColorHug+
  - Fix a crash then calibrating monitors with broken EDIDs
  - Fix a hard-to-reproduce bug when cancelling async operations


author: Richard Hughes <richard@hughsie.com> 1.3.3-1
changelog:
  - New upstream version
  - Fix an assert failure when connecting to sensors
  - Increase timeout to 60s for argyll spotread sampling
  - Use the USB path to match the ArgyllCMS port


author: Richard Hughes <richard@hughsie.com> 1.3.4-1
changelog:
  - New upstream version
  - Add cd_color_rgb_from_wavelength()
  - Add cd_spectrum_resample_to_size()
  - Fix a possible NULL dereference when talking to Spark devices
  - Fix compile with -Wformat-signedness
  - Fix possible division by zero if parsing /proc/cpuinfo fails
  - Install the libcolordcompat.so in the main -libs package
  - Support enabling the illuminants on the ColorHug+


author: Richard Hughes <richard@hughsie.com> 1.4.0-1
changelog:
  - New upstream version
  - Port to the Meson build system
  - Correctly build the ICC transfer curve for Rec709
  - Do not spin the Huey LEDs when the sensor is embedded
  - Do not use /tmp to create profiles
  - Use a different Huey unlock code on the W700 laptop


author: Richard Hughes <richard@hughsie.com> 1.4.1-1
changelog:
  - New upstream version
  - Include all the files in the GIR target
  - Include the correct file when using Colord-1.0.gir
  - Use gio-2.0 when generating the VAPI


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2j-3
changelog:
  - add back -devel subpackage as a stop-gap measure for software
    that cannot be ported to new API easily


author: Jan Pokorný <jpokorny+rpm-corosync@redhat.com> - 2.4.2-6
changelog:
  - Rebuilt to solve corosync libraries built with work-in-progress fix in libqb
    so as to re-establishing compatibility with ld from binutils 2.29 unusuable
    on powerpc platforms for further link (rhbz#1487787)


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-33
changelog:
  - the stored archive in testsuite has little endian headers, expect also
    'reversed byte-order' warning on big-endian


author: Ondrej Vasik <ovasik@redhat.com> - 2.11-36
changelog:
  - in 2015, file name in CVE-2014-9112 shows in a bit different timestamp
    format (fix FTBFS, #1239416)


author: John W. Linville <linville@redhat.com> - 3.18_2016.02.08-1
changelog:
  - Update wireless-regdb to version 2016.02.08
  - Do not treat unused-const-variable warnings as errors


author: Dominik Mierzejewski <rpm@greysector.net> 0-10.20100106
changelog:
  - fix build with gcc-5.x (rhbz#1239418)
  - fix bogus date in changelog and clean up spec
  - drop dual release versioning
  - comply with Emacs packaging guidelines
  - add missing BR: words for megatest


author: Guenther Deschner <gdeschner@redhat.com> - 4.7.0-0.12
changelog:
  - Update to Samba 4.7.0
  - resolves: #1493441 - Security fix for CVE-2017-12150 CVE-2017-12151 CVE-2017-12163


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.3-4
changelog:
  - fixing issue with #1437065 - makes res_init() call to local resolver and keeps error message, but no hard exit for cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.14.0-3
changelog:
  - update python Requires/BuildRequires accordingly to Fedora Guidelines for Python (python-cups -> python3-cups)


author: Kamil Dudka <kdudka@redhat.com> 7.55.0-1
changelog:
  - drop multilib fix for libcurl header files no longer needed
  - new upstream release, which fixes the following vulnerabilities
      CVE-2017-1000099 - FILE buffer read out of bounds
      CVE-2017-1000100 - TFTP sends more than buffer size
      CVE-2017-1000101 - URL globbing out of bounds read


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.2-2
changelog:
  - Exclude one more test from 32-bit arches.  Looks like this failure crept in
    with the Cassandane update.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.2-3
changelog:
  - Patch the provided imapd.conf and cyrus.conf to more closely match previous
    Fedora defaults and directories included in this package and to enable
    features which are supported by the Fedora build.
  - Add tmpfiles.d configuration file for directories in /run.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.2-5
changelog:
  - Add two patches from upstream which fix JMAPCalendars issues on 32-bit and
    big-endian architectures.
  - Clean up test invocation and exclusion list.  More tests pass now.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.3-1
changelog:
  - Update to 3.0.3, which contains an important security fix.  The fix is not
    embargoed but no CVE has been assigned yet.
  - Drop patches merged upstream.
  - An update of imaptest has resulted in three additional cassandane failures,
    reported upstream as https://github.com/cyrusimap/cyrus-imapd/issues/2087.
    In order to get the security fix out without delay, those three tests have been
    disabled.


author: Pavel Zhukov <landgraf@fedoraproject.org> - 3.0.4-1
changelog:
  - Update to 3.0.4
  - Patched cassandane for new behaviour. It should be updated idealy.
  - Disable ImapTest.urlauth2 test; it seems to fail randomly regardless of
    architecture.


author: David King <amigadave@amigadave.com> - 0.102-1
changelog:
  - Update to 0.102
  - Use pkgconfig for BuildRequires
  - Remove outdated gtk subpackage
  - Use license for COPYING
  - Tighten subpackage dependencies with the isa macro
  - Tidy spec file
  - Preserve timestamps during install


author: David King <amigadave@amigadave.com> - 0.104-1
changelog:
  - Update to 0.104
  - Remove RPATH
  - Remove executable bit from sourced script
  - Move man page to main package and update glob
  - Make the build output more verbose


author: Igor Gnatenko <ignatenko@redhat.com> - 3.6-16
changelog:
  - Make python3 builds conditionally
  - Follow new packaging guidelines
  - Use modern macroses like %autosetup
  - Remove duplicated doc files


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-86
changelog:
  - Modify 0136-RHBZ-1304687-wait-for-map-add.patch
    * switch to missing_uev_wait_timeout to stop waiting for uev
  - Refresh 0137-RHBZ-1280524-clear-chkr-msg.patch
  - Refresh 0150-RHBZ-1253913-fix-startup-msg.patch
  - Refresh 0154-UPBZ-1291406-disable-reinstate.patch
  - Refresh 0156-UPBZ-1313324-dont-fail-discovery.patch
  - Refresh 0161-RHBZ-1311659-no-kpartx.patch
  - Refresh 0167-RHBZ-1335176-fix-show-cmds.patch
  - Add 0173-RH-update-man-page.patch
  - Add 0174-RHBZ-1362396-modprobe.patch
    * make starting the multipathd service modprobe dm-multipath in the
      sysvinit scripts
  - Add 0175-RHBZ-1357382-ordering.patch
    * force multipathd.service to start after systemd-udev-trigger.service
  - Add 0176-RHBZ-1363830-fix-rename.patch
    * initialized a variable to make dm_rename not fail randomly
  - Add 0177-libmultipath-correctly-initialize-pp-sg_id.patch
    * This and all the following patches add the rbd patch checker
  - Add 0178-libmultipath-add-rbd-discovery.patch
  - Add 0179-multipath-tools-add-checker-callout-to-repair-path.patch
  - Add 0180-multipath-tools-Add-rbd-checker.patch
  - Add 0181-multipath-tools-Add-rbd-to-the-hwtable.patch
  - Add 0182-multipath-tools-check-for-initialized-checker-before.patch
  - Add 0183-multipathd-Don-t-call-repair-on-blacklisted-path.patch
  - Add 0184-rbd-fix-sync-repair-support.patch
  - Add 0185-rbd-check-for-nonshared-clients.patch
  - Add 0186-rbd-check-for-exclusive-lock-enabled.patch
  - Add 0187-rbd-fixup-log-messages.patch
  - Add 0188-RHBZ-1368501-dont-exit.patch
    * make multipathd not exit if it encounters recoverable errors on startup
  - Add 0189-RHBZ-1368211-remove-retries.patch
    * add "remove_retries" multipath.conf parameter to make multiple attempts
      to remove a multipath device if it is busy.
  - Add 0190-RHBZ-1380602-rbd-lock-on-read.patch
    * pass lock_on_read when remapping image
  - Add 0191-RHBZ-1169168-disable-changed-paths.patch
    * add "disabled_changed_wwids" multipath.conf parameter to disable
      paths whose wwid changes
  - Add 0192-RHBZ-1362409-infinibox-config.patch
  - Add 0194-RHBZ-1351964-kpartx-recurse.patch
    * fix recursion on corrupt dos partitions
  - Add 0195-RHBZ-1359510-no-daemon-msg.patch
    * print a messages when multipathd isn't running
  - Add 0196-RHBZ-1239173-dont-set-flag.patch
    * don't set reload flag on reloads when you gain your first
      valid path
  - Add 0197-RHBZ-1394059-max-sectors-kb.patch
    * add "max_sectors_kb" multipath.conf parameter to set max_sectors_kb
      on a multipath device and all its path devices
  - Add 0198-RHBZ-1372032-detect-path-checker.patch
    * add "detect_checker" multipath.conf parameter to detect ALUA arrays
      and set the path checker to TUR
  - Add 0199-RHBZ-1279355-3pardata-config.patch
  - Add 0200-RHBZ-1402092-orphan-status.patch
    * clear status on orphan paths
  - Add 0201-RHBZ-1403552-silence-warning.patch
  - Add 0202-RHBZ-1362120-skip-prio.patch
    * don't run prio on failed paths
  - Add 0203-RHBZ-1363718-add-msgs.patch
  - Add 0204-RHBZ-1406226-nimble-config.patch
  - Add 0205-RHBZ-1416569-reset-stats.patch
    * add "reset maps stats" and "reset map <map> stats" multipathd
      interactive commands to reset the stats tracked by multipathd
  - Add 0206-RHBZ-1239173-pt2-no-paths.patch
    * make multipath correctly disable scanning and rules running when
      it gets a uevent and there are not valid paths.
  - Add 0207-UP-add-libmpathcmd.patch
    * New shared library, libmpathcmd, that sends and receives messages from
      multipathd. device-mapper-multipath now uses this library internally.
  - Add 0208-UPBZ-1430097-multipathd-IPC-changes.patch
    * validation that modifying commands are coming from root.
  - Add 0209-UPBZ-1430097-multipath-C-API.patch
    * New shared library. libdmmp, that presents the information from multipathd
      in a structured manner to make it easier for callers to use
  - Add 0210-RH-fix-uninstall.patch
    * Minor compilation fixes
  - Add 0211-RH-strlen-fix.patch
    * checks that variables are not NULL before passing them to strlen
  - Add 0212-RHBZ-1431562-for-read-only.patch
  - Make 3 new subpackages
    * device-mapper-multipath-devel, libdmmp, and libdmmp-devel. libmpathcmd
      and libmpathprio are in device-mapper-multipath-libs and
      device-mapper-multipath-devel. libdmmp is in its own subpackages
  - Move libmpathprio devel files to device-mapper-multipath-devel
  - Added BuildRequires on librados2-devel


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-87
changelog:
  - Remove Epoch from device-mapper requires
    * The RHEL releases of device-mapper set the Epoch, and this was
      accidentally retained in the fedora spec file.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.1-1.gitf21166a
changelog:
  - Update Source to the latest upstream commit
  - Add 0001-libmultipath-add-comment-about-resuming.patch
    * posted upstream
  - Add 0002-multipath-attempt-at-common-multipath.rules.patch
    * under discussion upstream
  - Add 0003-RH-fixup-udev-rules-for-redhat.patch
    * Redhat uses different udev rules that some other distros, so multipath
      has run at a different time. Not all upstream distros link /sbin and
      /usr/sbin either.
  - Add 0004-RH-Remove-the-property-blacklist-exception-builtin.patch
    * Allow multipath to be used on devices without multiple paths. NAK'ed
      upstream, but requested by Red Hat
  - Add 0005-RH-don-t-start-without-a-config-file.patch
    * Don't start multipath unless a config file exists. NAK'ed upstream,
      but requested by Red Hat
  - Add 0006-RH-use-rpm-optflags-if-present.patch
    * Make the build system fedora friendly
  - Add 0007-RH-add-mpathconf.patch
    * Add tool to help configure multipath with Red Hat defaults.
  - Add 0008-RH-add-wwids-from-kernel-cmdline-mpath.wwids-with-A.patch
    * Make multipath able to claim devices based on the kernel command line
      NAK'ed upstream but requested by Red Hat
  - Add 0009-RH-trigger-change-uevent-on-new-device-creation.patch
    * under discussion upstream


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.1-2.gitf21166a
changelog:
  - Modify 0004-RH-Remove-the-property-blacklist-exception-builtin.patch
    * update multipath.conf.5 man page to remove builtin listing
  - Modify 0005-RH-don-t-start-without-a-config-file.patch
    * update multipathd.8 man page to note that a config file is necessary
  - Modify 0007-RH-add-mpathconf.patch
    * add property blacklist-exception to default config file
  - Add 0010-libmultipath-change-how-RADOS-checker-is-enabled.patch
    * Makefile now autodetects librados. Posted upstream
  - Remove related RADOS option from spec file
  - Add 0011-multipath-set-verbosity-to-default-during-config.patch
    * Allow multipath to print warning messages during configuration.
      Posted upstream
  - Add 0012-mpath-skip-device-configs-without-vendor-product.patch
    * device entries without vendor/product were breaking configurations.
      Posted upsteam
  - Add 0013-multipathd-fix-show-maps-json-crash.patch
    * multipathd crashed showing json output with no devices. Posted
      upstream


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.1-4.git847cc43
changelog:
  - Update Source to the latest upstream commit
    * Previous patches 0001 and 0010-0013 are included in this commit.
  - Add 0001-libmultipath-update-3PARdata-builtin-config.patch
    * Change for building configuration. Posted upstream
  - Modify 0006-RH-use-rpm-optflags-if-present.patch
    * Add missing lines to actually use RPM_OPT_FLAGS.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc2
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - New thin_show_duplicates command.
  - Add '--skip-mappings' and '--format custom' options to thin_dump.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc6
changelog:
  - Don't open devices as writeable if --clear-needs-check-flag is not set.
  - Fix cache metadata format version 2 superblock packing.


author: Peter Rajnoha <prajnoha@redhat.com> - 1.0.0.rc16-29
changelog:
  - Fix dmraid-activation.service to execute before local-fs-pre.target
    instead of local-fs.target to activate dmraid before any mount points.


author: Petr Menšík <pemensik@redhat.com> - 2.77-8
changelog:
  - Security fix, CVE-2017-14491, DNS heap buffer overflow
  - Security fix, CVE-2017-14492, DHCPv6 RA heap overflow
  - Security fix, CVE-2017-14493, DHCPv6 - Stack buffer overflow
  - Security fix, CVE-2017-14494, Infoleak handling DHCPv6
  - Security fix, CVE-2017-14496, Integer underflow in DNS response creation
  - Security fix, CVE-2017-14495, OOM in DNS response creation
  - Misc code cleanups arising from Google analysis
  - Do not include stdio.h before dnsmasq.h


author: Paul Wouters <pwouters@redhat.com> - 2.1.0.0-1
changelog:
  - Updated to 2.1.0.0 (rhbz#1305929)
  - Remove incorporated patches
  - Updated example query file with upstream
  - Fixup bad changelog dates
  - Use gunzip not bunzip2 as upstream query file is only gzipped


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 2:1.13.1-26.gitb5e3294
changelog:
  - built docker @projectatomic/docker-1.13.1 commit b5e3294
  - built docker-novolume-plugin commit 385ec70
  - built rhel-push-plugin commit af9107b
  - built docker-lvm-plugin commit 8647404
  - built docker-runc @projectatomic/docker-1.13.1 commit a07b8d4
  - built docker-containerd @projectatomic/docker-1.13.1 commit 62a9c60
  - built oci-umount commit 299e781
  - built docker-init commit 4892d4d
  - built libnetwork commit 2719c60
  - oci-umount BR: pcre-devel


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.0.27-1
changelog:
  - New version
    Resolves: rhbz#1078057
    Resolves: rhbz#1158101
  - Updated URL to point to new upstream
  - Removed RPM artefacts from SPEC


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.0-1
changelog:
  - New version
    Resolves: rhbz#1333781
  - Switched to autotools
  - Various spec file cosmetic fixes (e.g. used optflags)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.29.1-1
changelog:
  - dovecot updated to 2.2.29.1
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - pigeonhole updated to 0.4.18
  - imapsieve plugin: Implemented the copy_source_after rule action. When this
    is enabled for a mailbox rule, the specified Sieve script is executed for
    the message in the source mailbox during a "COPY" event. This happens only
    after the Sieve script that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  - imapsieve plugin: Added non-standard Sieve environment items for the source
    and destination mailbox.
  - multiscript: The execution of the discard script had an implicit "keep",
    rather than an implicit "discard".


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.30.1-1
changelog:
  - dovecot updated to 2.2.30.1
  - More fixes to automatically fix corruption in dovecot.list.index
  - dsync-server: Fix support for dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and per-mailbox keys
    are used. Otherwise the copied mails can't be opened.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.30.2-1
changelog:
  - dovecot updated to 2.2.30.2
  - auth: Multiple failed authentications within short time caused crashes
  - push-notification: OX driver crashed at deinit


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.31-1
changelog:
  - dovecot updated to 2.2.31
  - Various fixes to handling mailbox listing. Especially related to
    handling nonexistent autocreated/autosubscribed mailboxes and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This caused
    some of the ACL rule interactions to not work exactly as intended.
  - Using mail_sort_max_read_count may have caused very high CPU usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly and
    caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date or
    Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since the
    beginning.
  - pigeonhole updated to 0.4.19
  - Fixed bug in handling of implicit keep in some cases.
  - include extension: Fixed segfault that (sometimes) occurred when the
    global script location was left unconfigured.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.32-1
changelog:
  - dovecot updated to 2.2.32
  - Modseq tracking didn't always work correctly. This could have caused
    imap unhibernation to fail or IMAP QRESYNC/CONDSTORE extensions to
    not work perfectly.
  - mdbox: "Inconsistency in map index" wasn't fixed automatically
  - dict-ldap: %variable values used in the LDAP filter weren't escaped.
  - quota=count: quota_warning = -storage=.. was never executed (try #2).
  - imapc: >= 32 kB mail bodies were supposed to be cached for subsequent
    FETCHes, but weren't.
  - quota-status service didn't support recipient_delimiter
  - acl: Don't access dovecot-acl-list files with acl_globals_only=yes
  - mail_location: If INDEX dir is set, mailbox deletion deletes its
    childrens' indexes. 
  - director: v2.2.31 caused rapid reconnection loops to directors
    that were down.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.32-2
changelog:
  - pigeonhole updated to 0.4.20
  - Made the retention period for redirect duplicate identifiers
    configurable. Changed the default retention period from 24 to 12 hours.
  - sieve-filter: Fixed memory leak: forgot to clean up script binary at
    end of execution
  - managesieve-login: Fixed handling of AUTHENTICATE command. A second
    authenticate command would be parsed wrong.


author: Matej Chalk <mchalk@redhat.com> 0.3.0-3
changelog:
  - Now contains makedeltarpm and applydeltarpm functionality
  - Added lzlib-devel dependency for OpenSUSE


author: Peter Jones <pjones@redhat.com> - 13-1
changelog:
  - Update to version 13
  - add efibootdump
  - use efivar's error reporting facility
  - Add address range mirroring support
  - lots of bug fixes


author: Peter Jones <pjones@redhat.com> - 13-2
changelog:
  - Update to efibootmgr 13
  - Add support for --sysprep and --driver to support UEFI System Prep
    Applications and UEFI Drivers.
  - use efivar's error reporting facility, and show error traces when
    "-v -v" is used.
  - Still yet better error codes returned on failures.
  - Add -m and -M to support Memory Address Range Mirroring.
  - Add efibootdump, to examine Boot* variables found in tarballs in bug
    reports and similar.
  - miscellaneous bugfixes.


author: Peter Jones <pjones@redhat.com> - 14-1
changelog:
  - Update to efibootmgr 14
  - Remove "(hex)" from description of --delete-bootnum
  - Fix a typo in the popt options
  - Add README.md
  - make efibootdump install by default
  - Man page fixes
  - Better compiler detection
  - Don't use --default-symver in efibootmgr
  - Make -flto part of the overrideable CFLAGS


author: Peter Jones <pjones@redhat.com> - 15-1
changelog:
  - Update to efibootmgr 15
  - Make efibootmgr use EFIDIR / efibootmgr.efidir like fwupdate does
  - make --loader default build-time configurable
  - sanitize set_mirror()/get_mirror()
  - Add support for parsing loader options as UCS2
  - GCC 7 fixes
  - Don't use -fshort-wchar since we don't run on EFI machines.
  - Also rebuild for efivar-31-1.fc26 to get symbol versioning right.
    Resolves: rhbz#1468841


author: Peter Jones <pjones@redhat.com> - 29-1
changelog:
  - Use -pie not -PIE in our linker config
  - Fix some overflow checks for gcc < 5.x
  - Make variable class probes other than the first one actually work
  - Move -flto to CFLAGS
  - Pack all of the efi device path headers
  - Fix redundant decl of efi_guid_zero()


author: Peter Jones <pjones@redhat.com> - 31-1
changelog:
  - Update to efivar 31
  - Work around NVMe EUI sysfs change
  - Provide some oldish version strings we should have kept.
  - lots of overflow checking on our pointer math in dp parsing
  - fix major/minor device number handling in the linux code
  - Do better formatting checks for MBR partitions
  - Fixes for gcc 7


author: Mark Wielaard <mark@klomp.org> - 0.168-5
changelog:
  - Add patches for new gcc warnings and new binutils ppc64 attributes.
    - elfutils-0.168-libasm-truncation.patch
    - elfutils-0.168-ppc64-attrs.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-1
changelog:
  - New upstream release. Remove upstreamed patches.
  - provide_yama_scope for either fedora >= 22 and rhel >= 7.


author: Peter Lemenkov <lemenkov@gmail.com> - 19.3.4-1
changelog:
  - Ver. 19.3.4
  - Require javapackages-tools (/use/share/java)
  - Use /dev/null as a homedir for EPMD (its shell is /sbin/nologin anyway)


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 1.0.13-1
changelog:
  - Update to 1.0.13 (#1434190).
  - https://github.com/processone/fast_tls/blob/1.0.13/CHANGELOG.md
  - Rebase the patch.


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 1.1.19-1
changelog:
  - Update to 1.1.19 (#1412156).
  - https://github.com/processone/fast_xml/blob/1.1.19/CHANGELOG.md
  - Disabled tests due to https://github.com/processone/fast_xml/issues/21


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.2-1
changelog:
  - New version
    Resolves: rhbz#1051667
  - Removed spurious whitespaces
  - Fixed bogus dates in changelog (best effort)
  - Removed some obsoleted artifacts (like clean section)
  - Ghosted files for alternatives and removed explicit provides
    Resolves: rhbz#570797


author: Ondřej Lysoněk <olysonek@redhat.com> - 1.2-4
changelog:
  - Fixed patch esmtp-1.2-cron-fix.patch from the last release
    This resolves some SELinux denials
    Resolves: rhbz#1303305


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.89-1
changelog:
  - New version
    Resolves: rhbz#1430156
  - Switched to xz archive
  - Dropped DKIM-fix patch (already upstream)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.89-5
changelog:
  - Fixed compilation with the mariadb-10.2
    Resolves: rhbz#1467312
  - Fixed multiple memory leaks
    Resolves: CVE-2017-1000369
  - Fixed typo causing exim-clamav to create /0750 directory
    Resolves: rhbz#1412028
  - On callout avoid SIZE option when doing recipient verification with
    caching enabled
    Resolves: rhbz#1482217
  - Fixed some minor whitespace problems in the spec


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-19
changelog:
  - Use different and probably better approach of fixing segfaults if Tcl is
    built with stubs and Expect is used directly from C program


author: Dan Horák <dan[at]danny.cz> - 3.3.5-3
changelog:
  - Update BRs so nss-myhostname (provided by systemd) is included also
    in mpich-only builds (Related: #1383271)


author: Kamil Dudka <kdudka@redhat.com> - 1:4.6.0-6
changelog:
  - use %autosetup to create a git repo in %prep
  - use out of source build
  - avoid SIGSEGV in case the internal -noop option is used (#1346471)


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: Sérgio Basto <sergio@serjux.com> - 0.11.0.1-1.20140103git886031a
changelog:
  - Update to flumotion-0.11.0.1-20140103-886031a.tar.bz2 github source using
    snapshot-flumotion.sh and bundle command.tar.bz2 of
    flumotion/extern/command@509 , we don't want do svn co when building package.
  - Added small patch to fix build ( flumotion-common ).
  - Update .spec with .spec generated by flumotion source.
  - Patches md5, manpages spelling and deprecated functions from
    https://github.com/equinox0815/flumotion/
  - fix .desktop entries .


author: Akira TAGOH <tagoh@redhat.com> - 2.12.4-2
changelog:
  - Allow installing 32/64 bit version of fc-cache at the same time. (#1474257)
  - Add fc-cache script to invoke both version of fc-cache if available.


author: Adam Williamson <awilliam@redhat.com> - 4.6.0-2
changelog:
  - Fixes #1488640 "unknown command 'undefined'" error when changing password in web UI
  - BuildRequires diffstat (for the use in patch application)


author: Adam Williamson <awilliam@redhat.com> - 4.6.0-3
changelog:
  - Fixes #1490762 Ipa-server-install update dse.ldif with wrong SELinux context
  - Fixes #1491056 FreeIPA enrolment via kickstart fails


author: Tomas Krizek <tkrizek@redhat.com> - 4.6.1-1
changelog:
  - Fixes #1491053  Firefox reports insecure TLS configuration when visiting
    FreeIPA web UI after standard server deployment


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.12-3
changelog:
  - Do not fail logrotate if radiusd is not running.
  - Fix output to log file specified with -l option.
  - Fix long hostnames interpreted as IP addresses.
  - Avoid clashes with libtool library symbols.
  - Remove mentions of Auth-Type = System from docs.
  - Improve ip/v4/v6/addr documentation.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-1
changelog:
  - Upgrade to upstream v3.0.13 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-2
changelog:
  - Fix permissions of default key files in raddb/certs.
  - Require OpenSSL version we built with, or newer, to avoid startup failures
    due to runtime OpenSSL version checks.
    Resolves: Bug#1299388
  - Fix some issues found with static analyzers.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-3
changelog:
  - Explicitly disable rlm_cache_memcached to avoid error when the module's
    dependencies are installed, and it is built, but not packaged.
  - Prevent segfaults by adding a missing handling of connection errors in
    rlm_ldap.
  - Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.14-1
changelog:
  - Upgrade to upstream v3.0.14 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
  - Fix TLS resumption authentication bypass (CVE-2017-9148)


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.15-1
changelog:
  - Upgrade to upstream v3.0.15 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
  - Resolves: Bug#1471848 CVE-2017-10978 freeradius: Out-of-bounds read/write
                          due to improper output buffer size check in
                          make_secret()
  - Resolves: Bug#1471860 CVE-2017-10983 freeradius: Out-of-bounds read in
                          fr_dhcp_decode() when decoding option 63
  - Resolves: Bug#1471861 CVE-2017-10984 freeradius: Out-of-bounds write in
                          data2vp_wimax()
  - Resolves: Bug#1471863 CVE-2017-10985 freeradius: Infinite loop and memory
                          exhaustion with 'concat' attributes
  - Resolves: Bug#1471864 CVE-2017-10986 freeradius: Infinite read in
                          dhcp_attr2vp()
  - Resolves: Bug#1471865 CVE-2017-10987 freeradius: Buffer over-read in
                          fr_dhcp_decode_suboptions()
  - Resolves: Bug#1456220 freeradius-3.0.15 is available


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 1.00.38-1
changelog:
  - Update to 1.00.38
  - split freetds-libs package (for multiarch support)
  - change default tds vesrion to auto
  - move odbc plugin from devel to libs package (#1449881)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.1.10-24
changelog:
  - ship sample /etc/gamin/gaminrc, /etc/gamin/mandatory_gaminrc
  - s|/usr/bin/python|/usr/bin/python2|


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.1.3-8
changelog:
  - Support for GNU MPFR added (see 'man gawk', look for --bignum option)
  - Another round of specfile refactoring


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.1.4-7
changelog:
  - Revert previous change of adding 'awk*' symlinks for info pages (bug #1486924)
  - Added patch to correctly fix the info pages issue (bug #1486924)
  - specfile content refactored for better readability
  - Package now provides its ABI version via gawk(abi)
  - Added test for usage of correct gawk(abi) into %check section


author: Jakub Jelinek <jakub@redhat.com> 7.0.1-0.16
changelog:
  - update from the 7 branch
    - ABI change on ARM and AArch64 (PR target/77728)
    - PRs middle-end/79931, rtl-optimization/80500, rtl-optimization/80501,
  	target/79895, target/80080, target/80464, target/80482,
  	tree-optimization/80497


author: Jakub Jelinek <jakub@redhat.com> 7.1.1-1
changelog:
  - update from the 7 branch
    - GCC 7.1 release
    - PRs bootstrap/80531, c++/80534, c/80468, target/68491, target/79430,
  	target/80530, tree-optimization/80591


author: Jakub Jelinek <jakub@redhat.com> 7.1.1-2
changelog:
  - update from the 7 branch
    - PRs ada/80626, ada/80784, documentation/50642, fortran/78659,
  	fortran/80121, fortran/80333, fortran/80392, fortran/80484,
  	fortran/80741, fortran/80752, go/64238, libgfortran/80333,
  	libgfortran/80727, libgfortran/80741, libstdc++/78939, libstdc++/80478,
  	libstdc++/80761, libstdc++/80796, middle-end/80539, middle-end/80809,
  	middle-end/80853, rtl-optimization/80754, sanitizer/80659,
  	sanitizer/80875, target/68163, target/79027, target/79202,
  	target/79203, target/80090, target/80510, target/80671, target/80706,
  	target/80799, tree-optimization/80453, tree-optimization/80492
  - fix s390 indirect_jump reloading (#1450353, PR target/80725)


author: Jakub Jelinek <jakub@redhat.com> 7.1.1-3
changelog:
  - update from the 7 branch
    - PRs ada/80921, ada/81070, ada/81105, c++/60063, c++/66297, c++/70844,
  	c++/71747, c++/80179, c++/80384, c++/80465, c++/80562, c++/80593,
  	c++/80605, c++/80614, c++/80639, c++/80829, c++/80831, c++/80840,
  	c++/80856, c++/80972, c++/80973, c++/80984, c++/81011, c++/81045,
  	c++/81073, c++/81074, c++/81102, c++/81130, c++/81154, c/80919,
  	c/81006, fortran/70601, fortran/80766, fortran/80904, fortran/80918,
  	fortran/80975, libgcc/80037, libgomp/80822, libstdc++/80675,
  	libstdc++/80940, libstdc++/81002, libstdc++/81092,
  	rtl-optimization/80474, rtl-optimization/80903, sanitizer/81111,
  	sanitizer/81125, target/59874, target/71607, target/71778,
  	target/80718, target/80968, target/80970, target/81015, target/81121,
  	target/81151, tree-optimization/80293, tree-optimization/80549,
  	tree-optimization/80705, tree-optimization/80842,
  	tree-optimization/80906


author: Jakub Jelinek <jakub@redhat.com> 7.1.1-4
changelog:
  - update from the 7 branch
    - PRs c++/54769, c++/61022, c++/72801, c++/79056, c++/81164, c++/81180,
  	c++/81187, c++/81188, c++/81204, c++/81215, c++/81257, driver/31468,
  	driver/56469, gcov-profile/53915, gcov-profile/81080, ipa/79849,
  	ipa/79850, ipa/80663, ipa/81112, libfortran/81195, libgfortran/53029,
  	libstdc++/81221, middle-end/80692, middle-end/80902, middle-end/81007,
  	middle-end/81207, other/80589, other/80909, sanitizer/80879,
  	sanitizer/81209, target/79155, target/79799, target/80618,
  	target/80966, target/81294, target/81300, target/81305, target/81348,
  	tree-optimization/80612, tree-optimization/81083,
  	tree-optimization/81192
  - fix ppc* float128 ifunc (#1467526)


author: Jakub Jelinek <jakub@redhat.com> 7.1.1-5
changelog:
  - update from the 7 branch
    - PRs libstdc++/80316, target/81375
  - fix libsanitizer build against recent glibc (PR sanitizer/81066)


author: Jakub Jelinek <jakub@redhat.com> 7.1.1-6
changelog:
  - update from the 7 branch
    - PRs ada/81446, c++/81258, middle-end/80929, rtl-optimization/81424,
  	target/79883, target/81225, tree-optimization/81365,
  	tree-optimization/81428
  - fix bootstrap on s390{,x} in libgo (PR go/81393)
  - rebuilt against hopefully fixed glibc to reenable TLS support on ppc64le
    in libstdc++ (#1470692)


author: Jakub Jelinek <jakub@redhat.com> 7.1.1-7
changelog:
  - update from the 7 branch
    - 7.2-rc1
    - PRs c++/71570, gcov-profile/81561, libgcc/61152, libquadmath/65757,
  	libstdc++/80553, libstdc++/80721, libstdc++/80737, libstdc++/80939,
  	libstdc++/81017, lto/81487, middle-end/79499, middle-end/81505,
  	rtl-optimization/75964, sanitize/81186, sanitizer/81021,
  	sanitizer/81224, sanitizer/81302, sanitizer/81604, target/79041,
  	target/80569, target/81069, target/81175, target/81193, target/81407,
  	target/81414, target/81471, target/81473, target/81534, target/81622,
  	target/81641, tree-optimization/71752, tree-optimization/80769,
  	tree-optimization/81162, tree-optimization/81388,
  	tree-optimization/81410, tree-optimization/81455,
  	tree-optimization/81555, tree-optimization/81556,
  	tree-optimization/81588, tree-optimization/81633,
  	tree-optimization/81655


author: Jakub Jelinek <jakub@redhat.com> 7.2.1-1
changelog:
  - update from the 7 branch
    - 7.2 release
    - PRs c++/67054, c++/81607, debug/81993, driver/81523, fortran/80164,
  	fortran/81296, ipa/77732, libstdc++/53984, libstdc++/79820,
  	libstdc++/81751, middle-end/81065, middle-end/81088, middle-end/81766,
  	middle-end/81884, sanitizer/80932, target/67712, target/72804,
  	target/78460, target/80210, target/81170, target/81295, target/81861,
  	target/81894, target/81910, target/81921, testsuite/81056,
  	tree-optimization/81181, tree-optimization/81354,
  	tree-optimization/81723, tree-optimization/81977


author: Jakub Jelinek <jakub@redhat.com> 7.2.1-2
changelog:
  - update from the 7 branch
    - PRs ada/62235, ada/79441, ada/79542, bootstrap/81926, c++/81355,
  	c++/81852, c++/82039, c++/82040, c/45784, c/81687, driver/81650,
  	fortran/81770, inline-asm/82001, ipa/81128, libstdc++/70483,
  	libstdc++/81338, libstdc++/81468, libstdc++/81599, libstdc++/81835,
  	libstdc++/81891, libstdc++/81912, middle-end/81052, middle-end/81768,
  	other/39851, sanitizer/63361, sanitizer/81923, target/80695,
  	target/81504, target/81593, target/81621, target/81833, target/81988,
  	target/82181, testsuite/82114, testsuite/82120, tree-opt/81696,
  	tree-optimization/81503, tree-optimization/81987
  - fix OpenMP implicit firstprivate handling of references (PR c++/81314)
  - fix -fcompare-debug failures with PowerPC atomics (PR target/81325)
  - fix compile time hog in C++ replace_placeholders (PR sanitizer/81929)
  - fix __atomic* and PowerPC vec_ld/vec_st handling of array arguments
    (PR target/82112)


author: Marek Skalický <mskalick@redhat.com> - 2.2.3-4
changelog:
  - Fix stack based buffer overflow when passing negative `rlen` as size to
    memcpy() (CVE-2016-8670)


author: Marek Skalický <mskalick@redhat.com> - 2.2.3-5
changelog:
  - Fix invalid read in gdImageCreateFromTiffPtr() ( CVE-2016-6911)
  - Disable tests using freetype in Fedora 26 (freetype > 2.6)


author: Remi Collet <remi@fedoraproject.org> - 2.2.5-1
changelog:
  - Update to 2.2.5
  - fix double-free in gdImagePngPtr(). CVE-2017-6362
  - fix buffer over-read into uninitialized memory. CVE-2017-7890


author: Pavel Raiskup <praiskup@redhat.com> - 0.19.8.1-7
changelog:
  - really remove Requires: git from gettext-devel (rhbz#1161284)
  - make the BuildRequires unconditional (rhbz#1416691)


author: Andrew Price <anprice@redhat.com> - 3.1.8-5
changelog:
  - Add patches to install the withdraw helper script properly:
    scripts_rename_gfs2_wd_udev_sh_to_gfs2_withdraw_helper.patch
    scripts_install_the_withdraw_helper_script.patch
    scripts_install_the_withdraw_udev_rules_script.patch
  - Remove the obsolete udev script installation bits


author: Andrew Price <anprice@redhat.com> - 3.1.8-7
changelog:
  - libgfs2: Add support for dirent.de_rahead
  - gfs2_edit: Include dirent.de_rahead in directory listings
  - gfs2-utils: Add a check for the de_rahead field
  - libgfs2: Support the new dirent de_cookie field
    Resolves: bz#1307532


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-5
changelog:
  - Added fix to avoid SIGSEGV for some *.ps files. More info here:
    <http://bugs.ghostscript.com/show_bug.cgi?id=697286>


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-6
changelog:
  - Remove and (re-implement) ConvertUTF.c (bug #1404933)
  - Added security fix for CVE-2016-9601 (bug #1410021)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-9
changelog:
  - Added security fixes for:
    - CVE-2016-10217 (bug #1441564)
    - CVE-2016-10218 (bug #1441568)
    - CVE-2016-10219 (bug #1441569)
    - CVE-2016-10220 (bug #1441571)
    - CVE-2017-5951  (bug #1441572)
    - CVE-2017-8291  (bug #1446063)


author: Kalev Lember <klember@redhat.com> - 3.19.0-3
changelog:
  - Switch to Python 3 (#1238957)
  - Use the make_install macro
  - Use upstream screenshots for appdata
  - Validate appdata file
  - Tighten deps with the _isa macro


author: Karsten Hopp <karsten@redhat.com> - 3.20.0-6
changelog:
  - apply upstream patch from Jonh Wendell to fix g_ptr_array_find types and make it
    build with latest glib2


author: Florian Weimer <fweimer@redhat.com> - 2.26-6
changelog:
  - Backport upstream patch for the built-in system call list (#1484729)
  - Auto-sync with upstream release/2.26/master,
    commit 6043d77a47de297b62084c1c261cdada082bf09c.


author: Florian Weimer <fweimer@redhat.com> - 2.26-7
changelog:
  - Auto-sync with upstream release/2.26/master,
    commit a71a3374cd8cf53776c33994f69ec184c26f2129:
  - Provide a C++ version of issignaling that does not use __MATH_TG
  - Provide a C++ version of iszero that does not use __MATH_TG (swbz#21930)
  - getaddrinfo: Return EAI_NODATA if gethostbyname2_r with NO_DATA (swzbz#21922)
  - getaddrinfo: Fix error handling in gethosts (swbz#21915)


author: Florian Weimer <fweimer@redhat.com> - 2.26-10
changelog:
  - Drop glibc-gcc-strict-overflow.patch, different workaround applied upstream.
  - Auto-sync with upstream release/2.26/master,
    commit fdf58ebc60ce0eb459fd616241b52872b3571ac1:
  - Fix nearbyint arithmetic moved before feholdexcept (swbz#22225)
  - Avoid __MATH_TG in C++ mode with -Os for fpclassify (swbz#22146)
  - Place $(elf-objpfx)sofini.os last (swbz#22051)
  - __libc_dynarray_emplace_enlarge: Add missing else
  - dynarray: Set errno on overflow-induced allocation failure
  - resolv: __resolv_conf_attach must not free passed conf object (swbz#22096)
  - resolv: Fix memory leak with OOM during resolv.conf parsing (swbz#22095)
  - nss_dns: Remove dead PTR IPv4-to-IPv6 mapping code


author: Florian Weimer <fweimer@redhat.com> - 2.26-11
changelog:
  - Do not flush stdio streams on abort, assertion failure (#1498880)
  - Move nss_compat to the main glibc package (#1400538)


author: Carlos O'Donell <carlos@systemhalted.org> - 2.26-12
changelog:
  - Auto-sync with upstream release/2.26/master,
    commit d5c6dea2d5b4b5c64625c5386f6baec7bf2d89b3.
  - malloc: Fix tcache leak after thread destruction (swbz#22111)
  - Add C++ versions of iscanonical (swbz#22235)


author: Carlos O'Donell <carlos@redhat.com> - 2.26-14
changelog:
  - Disable lock elision for IBM z Series (#1499260)
  - As a precaution escape all % in spec file comments.


author: Florian Weimer <fweimer@redhat.com> - 2.26-15
changelog:
  - Auto-sync with upstream branch release/2.26/master,
    commit a76376df7c07e577a9515c3faa5dbd50bda5da07:
  - CVE-2017-15670: glob: Fix one-byte overflow (#1504807)
  - CVE-2017-15671: glob: Fix memory leak (#1504807)
  - sysconf: Fix missing definition of UIO_MAXIOV on Linux (#1504165)
  - nss_files: Avoid large buffers with many host addresses (swbz#22078)
  - nss_files: Use struct scratch_buffer for gethostbyname (swbz#18023)
  - aarch64: Optimized implementation of memcpy, memmove for Qualcomm Falkor


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.1.2-3
changelog:
  - Build process updated to correctly build .debug_info for i386
    and to correctly use hardening flags


author: Brian C. Lane <bcl@redhat.com> 1.4.20-1
changelog:
  - New upstream v1.4.20 (#1293112)
  - Reject signatures made using the MD5 hash algorithm unless the new option --allow-weak-digest-algos or --pgp2 are given.
  - New option --weak-digest to specify hash algorithms which should be considered weak.
  - Changed default cipher for symmetric-only encryption to AES-128.
  - Fix for DoS when importing certain garbled secret keys.
  - Improved error reporting for secret subkey w/o corresponding public subkey.
  - Improved error reporting in decryption due to wrong algorithm.
  - Fix cluttering of stdout with trustdb info in double verbose mode.
  - Pass a DBUS envvar to gpg-agent for use by gnome-keyring.


author: Brian C. Lane <bcl@redhat.com> - 1.4.21-1
changelog:
  - New upstream v1.4.21
  - Fix critical security bug in the RNG [CVE-2016-6313] (#1366105)
  - Tweak default options for gpgv
  - By default do not anymore emit the GnuPG version with --armor


author: Brian C. Lane <bcl@redhat.com> - 1.4.22-1
changelog:
  - Removed workaround for ARM build problems fixed by upstream.
  - Switch to using %autosetup macro
  - Update Source to use https instead of ftp
  - New upstream v1.4.22
  - build: Avoid check gpg --version during make distcheck. (wk)
  - indent: Fix indentation of an if block. (wk)
  - gpg: Fix memory leak. (gniibe)
  - rsa: Reduce secmem pressure. (gniibe)
  - rsa: Allow different build directory. (gniibe)
  - rsa: Add exponent blinding. (mb)
  - mpi: Minor fix for mpi_pow. (gniibe)
  - mpi: Same computation for square and multiply for mpi_pow. (gniibe)
  - mpi: Simplify mpi_powm. (gniibe)
  - mpi: Fix ARM assembler in longlong.h. (marcus.brinkmann) (#1424619)
  - g10: Fix secmem leak. (ineiev)
  - gpg: Fix exporting of zero length user ID packets. (wk)
  - tools: Fix option parsing for gpg-zip. (neal)


author: Tomáš Mráz <tmraz@redhat.com> - 2.1.19-1
changelog:
  - upgrade to 2.1.19
  - shorten time waiting on gpg-agent/dirmngr to start by exponential
    backoff (#1431749)


author: Peter Jones <pjones@redhat.com> - 2.02-11
changelog:
  - Put grub2-mkimage in -tools, not -tools-extra.
  - Fix i686 building
  - Fix ppc HFS+ usage due to /boot/efi's presence.


author: Peter Jones <pjones@redhat.com> - 2.02-12
changelog:
  - Fix arm kernel command line allocation
    Resolves: rhbz#1484609
  - Get rid of the temporary extra efi packages hack.


author: Peter Jones <pjones@redhat.com> - 2.02-13
changelog:
  - Add some unconditional Provides:
    grub2-efi on grub2-efi-${arch}
    grub2-efi-cdboot on grub2-efi-${arch}-cdboot
    grub2 on all grub2-${arch} pacakges
  - Something is somehow adding /usr/lib/.build-id/... to all the -tools
    subpackages, so exclude all that.


author: Peter Jones <pjones@redhat.com> - 2.02-14
changelog:
  - Revert the /usr/lib/.build-id/ change:
    https://fedoraproject.org/wiki/Changes/ParallelInstallableDebuginfo
    says (without any particularly convincing reasoning):
      The main build-id file should not be in the debuginfo file, but in the
      main package (this was always a problem since the package and debuginfo
      package installed might not match). If we want to make usr/lib/debug/ a
      network resource then we will need to move the symlink to another
      location (maybe /usr/lib/.build-id).
    So do it that way.  Of course it doesn't matter, because exclude gets
    ignored due to implementation details.


author: Peter Jones <pjones@redhat.com> - 8.38-1
changelog:
  - Update to 8.38
  - Fix title extraction with some config file types
    Resolves: rhbz#1204353
    Resolves: rhbz#1204888
    Resolves: rhbz#1206943


author: Peter Jones <pjones@redhat.com> - 8.39-1
changelog:
  - Update to 8.39
  - Fix title extraction with some config file types
    Resolves: rhbz#1204353
    Resolves: rhbz#1204888
    Resolves: rhbz#1206943


author: Dominik Mierzejewski <rpm[AT]greysector.net> 1.0.17-1
changelog:
  - update to 1.0.17 (#1465878)
  - ease future updates by better macro use
  - drop obsolete patch hunks
  - fix missing prototype for fchown warning


author: Wim Taymans <wtaymans@redhat.com> - 1.11.90-1
changelog:
  - Update to 1.11.90
  - Update plugin names
  - Remove old rawparse plugin
  - Add new allocator lib and legacyrawparse


author: Petr Stodulka <pstodulk@redhat.com> - 1.7-1
changelog:
  - rebase to new upstream version 1.7
  - dropped all patches (almost all issues are fixed in new upstream version,
    sometimes in different way)
    - only patch gzip-1.3.12-openbsd-owl-tmp.patch is untested - code is changed
      significantly and patch is undocumented from archaic time, so I drop it too
    Resolves: #1321560


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.2.1-1
changelog:
  - update to 3.2.1
    - merged all patches or equivalents
    - re-merged hesinfo, so we obsolete it now
    - adds a pkgconfig configuration file for libhesiod
  - correct inconsistent changelog dates, assuming day-of-week is correct
  - add build requirement on libidn-devel
  - package the license


author: Richard W.M. Jones <rjones@redhat.com> - 540.1.linux3-7
changelog:
  - ExcludeArch arm because clang doesn't select the correct float ABI.
  - Remove unnecessary cruft not required by modern RPM.


author: Adam Jackson <ajax@redhat.com> 540.1.linux3-8
changelog:
  - Remove asinine blocks usage so we don't need clang, build with gcc, and
    remove ExcludeArchery to match
  - Fix FTBFS on arm due to a... fascinating interpretation of how varargs work


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - conditionalize that last change in case we end up having to use this .spec
    file on older releases
  - resync with .spec file from Fedora master


author: Peter Schiffer <pschiffe@redhat.com> - 1.2-8
changelog:
  - cleaned build section:
    STRIP variable is used in make install
    CFLAGS are picked up already by configure script
    fixed bogus dates in changelog


author: Joe Orton <jorton@redhat.com> - 2.4.27-9
changelog:
  - use sscg defaults; append CA cert to generated cert
  - document httpd-init.service in httpd-init.service(8)


author: Björn Esser <bjoern.esser@gmail.com> - 2.4.1-1
changelog:
  - update new to release v2.4.1 (#1101950)
  - fix CVE-2014-9091 (#1168146, #1168147, #1168148, #1168149)
  - fix CVE-2014-9018 (#1165880, #1165882, #1165883, #1165885)
  - unified spec-file for el5+ and Fedora
  - some improvements to readability
  - added doc-subpkg


author: Björn Esser <bjoern.esser@gmail.com> - 2.4.2-1
changelog:
  - update to 2.4.2 (#1236296)
  - fix CVE-2015-3026 (#1210198, #1210199, #1210200)
  - use %license on Fedora 22+


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.0-1
changelog:
  - New upstream release
  - Fix OpenSSL 1.1 incompatibility issues adding OpenSSL 1.0 compat package on
    BuildRequires.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.1-3
changelog:
  - install-info: use create-tmp-then-rename pattern because of OSTree
    (patch by Colin Walters)
    Resolves: #1348671


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4-2
changelog:
  - Fix broken reference following when the reference is split to
    more than one line
  - Fix possible incorrect selection of already loaded file when
    following cross reference
    Resolves: #1383057


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.68-1
changelog:
  - fedora-import-state: skip modifying of existing folders (#1347436)
  - functions: systemctl show now returns an error when unit does not exist


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.71-1
changelog:
  - usleep: print deprecation warning from now on
  - sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
  - DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
  - re-add missing $HOSTNAME initialization
  - ifup: add support for VLAN_EGRESS_PRIORITY_MAP
  - specfile: mark 'rwtab' and 'statetab' as config files
  - killproc/status: add missing '-b <binary>' option
  - ifdown-eth: we need to flush global scope as well
  - ifup-eth: remove quote marks
  - po: download latest translations from zanata
  - rwtab: add /var/lib/systemd/timers
  - Update initscripts.pot
  - Port headers in xgettext_sh.py to 2017


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.72-1
changelog:
  - rename_device.c: rewrite of isCfg() function
  - Add *.old to list of ignored files
  - Replace usleep(1) calls with sleep(1) calls


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.73-1
changelog:
  - Makefile: replace /var/run with /run
  - Replace /var/run with /run everywhere
  - Update references to sysctl.conf
  - Drop sysctl.d/00-system.conf
  - Drop 256term.{sh,csh}
  - ARPUPDATE introduced


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.75-1
changelog:
  - Makefile: $ROOT variable is now empty by default
  - Makefile: Fix additional error in commit b119d37d1
  - ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
  - init.d/functions: is_true() & is_false() extended by ON/OFF support
  - init.d/functions: convert2sec() function added


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.76-1
changelog:
  - Makefile: return make archive for testing purposes
  - Revert "Makefile: replace /var/run with /run"


author: Phil Sutter <psutter@redhat.com> - 4.10.0-1
changelog:
  - Ship new header iproute2/bpf_elf.h
  - Document content of remaining docs fixup patch in spec file
  - Drop patches already applied upstream
  - New version 4.10.0


author: Thomas Woerner <twoerner@redhat.com> - 6.29-1
changelog:
  - New upstream version 6.29 (RHBZ#1317208)
    - Suppress unnecessary stderr in command loop for resize and list
    - Correction in comment test
    - Support chroot buildroots (reported by Jan Engelhardt)
    - Fix "configure" breakage due to pkg-config related changes
      (reported by Jan Engelhardt)
    - Support older pkg-config packages
    - Add bash completion to the install routine (Mart Frauenlob)
    - Fix misleading error message with comment extension
    - Test added to check 0.0.0.0/0,iface to be matched in hash:net,iface type
    - Fix link with libtool >= 2.4.4 (Olivier Blin)


author: Thomas Woerner <twoerner@redhat.com> - 1.6.0-1
changelog:
  - New upstream version 1.6.0 with nft-compat support and lots of fixes (RHBZ#1292990)
    Upstream changelog:
    http://netfilter.org/projects/iptables/files/changes-iptables-1.6.0.txt
  - New libs sub package containing libxtables and unstable libip*tc libraries (RHBZ#1323161)
  - Using scripts form RHEL-7 (RHBZ#1240366)
  - New compat sub package for nftables compatibility
  - Install iptables-apply (RHBZ#912047)
  - Fixed module uninstall (RHBZ#1324101)
  - Incorporated changes by Petr Pisar
  - Enabled bpf compiler (RHBZ#1170227) Thanks to Yanko Kaneti for the patch


author: Petr Šabata <contyk@redhat.com> - 1.6.0-4
changelog:
  - Disabling parallel build to avoid build issues with xtables
  - See http://patchwork.alpinelinux.org/patch/1787/ for reference
  - This should be fixed in 1.6.1; parallel build can be restored after the
    update


author: Thomas Woerner <twoerner@redhat.com> - 1.6.1-1
changelog:
  - New upstream version 1.6.1 with enhanced translation to nft support and
    several fixes (RHBZ#1417323)
    http://netfilter.org/projects/iptables/files/changes-iptables-1.6.1.txt
  - Enable parallel build again


author: Thomas Woerner <twoerner@redhat.com> 2.2.6-1
changelog:
  - New upstream version 2.2.6
    - Located at github
    - Fixes (RHBZ#1294913 and RHBZ#1375395)
  - Additional upstream patch (no_debug) to drop some debugging remains
  - Additional proposed patch to fix segmentation fault with -1 -C (RHBZ#599181)


author: Chris Leech <cleech@redhat.com> - 0.94-1
changelog:
  - new upstream location, update to 0.94
  - new devel package, upstream open-iscsi is dropping it's internal copy


author: Brian C. Lane <bcl@redhat.com> - 1:1.2.0-1
changelog:
  - New Version 1.2.0 (bcl)
  - Improve the python test and add a test target to the Makefile (bcl)
  - Improve error handling of libimplantisomd5 (squimrel)
  - Fix popt memory leak and avoid exit in main (squimrel)
  - Add derived clang format and editorconfig (squimrel)
  - Format, constify, castify, decl-at-use code (squimrel)
  - Make libimplantisomd5 use the utilities (squimrel)
  - Implement shared utilities (squimrel)
  - Refactor libcheckisomd5 (squimrel)


author: Brian C. Lane <bcl@redhat.com> - 1:1.2.1-1
changelog:
  - New Version 1.2.1 (bcl)
  - Let the user pass their own file descriptor (squimrel)
  - Correct format specifiers (squimrel)


author: Adrian Reber <adrian@lisas.de> - 2.4.0-6
changelog:
  - Added patches to fix "segfaut in 'sm' component when blocking users" (#1406062)
  - BR libdb-devel instead of db4-devel


author: Josef Ridky <jridky@redhat.com> - 1.900.13-1
changelog:
  - New upstream release 1.900.13 (#1385637)
  - Release contains security fix for CVE-2016-8690, CVE-2016-8691, CVE-2016-8692, CVE-2016-8693 (#1385516)


author: Josef Ridky <jridky@redhat.com> - 2.0.2-1
changelog:
  - New upstream release 2.0.2 (#1395929)
  - CVE-2016-9262 jasper: Multiple overflow vulnerabilities leading to use after free (#1393883)
  - CVE-2016-8654 jasper: Heap-based buffer overflow in QMFB code in JPC codec (#1399168)
  - CVE-2016-9388 jasper: Reachable assertion in RAS encoder/decoder
  - CVE-2016-9389 jasper: Improper equality testing of component domains via assertion
  - CVE-2016-9390 jasper: Assertion failure when tiles lie outside of the image area
  - CVE-2016-9391 jasper: reachable assertions in the JPC bitstream code
  - CVE-2016-9392 jasper: Missing sanity checks on the date in SIZ marker segment
  - CVE-2016-9393 jasper: Missing sanity checks on the date in SIZ marker segment
  - CVE-2016-9394 jasper: Missing sanity checks on the data in a SIZ marker segment
  - CVE-2016-9395 jasper: Assertion failure in jas_seq2d_create
  - CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
  - CVE-2016-9560 jasper: Stack-based buffer overflow in jpc_tsfb.c
  - Upgrade libjasper.so.1* to libjasper.so.4*


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.144-1.b01
changelog:
  - Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
  - Exclude 8175887 from Shenandoah builds as it has been included in that repo.
  - Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
  - get rid of bin/* and lib/*, fixed rhbz1480777
  - adapted to rpm 4.14: all expanding macros changed to define, all %1 and %1 replaced by , all expandable macros parameter preffixed by --
  - get rid of generated filelists all except javafx and demos


author: jvanek <jvanek@redhat.com> - 1:1.8.0.144-7.b01
changelog:
  - updated to aarch64-shenandoah-jdk8u144-b02-shenandoah-merge-2017-10-02 (from aarch64-port/jdk8u-shenandoah) of hotspot
  - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u144-b02-shenandoah-merge-2017-10-02.tar.xz as new sources for hotspot


author: Fridolin Pokorny <fpokorny@redhat.com> - 2.1-1
changelog:
  - Update to 2.1
  - Removed jbigkit-CVE-2013-6369.patch (accepted by upstream)
  - Updated jbigkit-2.0-warnings.patch to fix only fread() checks
  - Updated jbigkit-2.0-shlib.patch


author: Björn Esser <besser82@fedoraproject.org> - 0.12.1-1
changelog:
  - Update to new upstream release
  - Introduces SONAME bump, that should have been in 0.12 already
  - Unify %doc
  - General spec-file cleanup


author: Elio Maldonado <emaldona@redhat.com> - 4.4.0-1
changelog:
  - Bugzilla Bug #1431937 - Rebase jss to 4.4.x in Fedora 25+
  - ## JSS 4.4.0 includes the following patches ported from downstream:
  - Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
  - Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
  - Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
    CS interface
  - Mozilla Bugzilla #1307993 - Expose updated certificate verification function
    in JSS
  - Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
    pointer arithmetic
  - Mozilla Bugzilla #1308001 - Verification should fail when a revoked
    certificate is added
  - Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
  - Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
    (HSM + NSS)
  - Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
  - Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
  - Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
    unwrapping keys should be done in the token
  - Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
    manufacturer identifier
  - Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
    JSS 4.2.6
  - Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 via NSS through JSS
  - Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
    error from NSS
  - Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
  - Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
  - Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
  - Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
    PKCS#11 bypass support
  - Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
  - Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
    in FIPS Mode and ECC algorithms
  - Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
    functions
  - Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
  - ## JSS 4.4.0 includes the following changes for building and testing:
  - Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
  - Mozilla Bugzilla #1346420 - Document steps required to use the proper
    libjss4.so when running certain HMAC Algorithms tests


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.1-1
changelog:
  - Bugzilla Bug #1431937 - Rebase jss to 4.4.x in Fedora 25+
  - Updated build requirements for NSPR
  - Updated build and runtime requirements for NSS
  - ## 'jss-post-rebase.patch' resolves the following issues ported from
    - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
    code for RFC5272+ (cfu)
  - Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
  - Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
    class. (edewata)
  - Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
  - Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
  - Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
    (edewata)
  - Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
  - Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
  - Mozilla Bugzilla #1350130 - Missing
    CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.1-2
changelog:
  - Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
    idm-console-framework < 1.1.17-4
  - Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.2-1
changelog:
  - Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
    release tag (mharmsen)
  - Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
    exporting EncryptedPrivateKeyInfo (ftweedal)
  - Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
    (ftweedal)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.2-2
changelog:
  - Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
    Mozilla Bugzilla #1360207 - Fix incorrect if (ss->...) in SSL_ReconfigFD


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 4.0-45
changelog:
  - Replace 'define' with 'global'
  - Fix jwhois updates complain "failed to link ..." (patch by Michal Jaegermann)
    Resolves: #1298383


author: Peter Robinson <pbrobinson@fedoraproject.org>
changelog:
  - Fix USB-3 Superspeed negotiation on exynos5 hardware (rhbz 1487006)
  - Some AllWinner A64 fixes and improvements


author: Justin M. Forbes <jforbes@fedoraproject.org> - 4.13.7-300
changelog:
  - Linux v4.13.7
  - Fixes CVE-2017-5123 (rhbz 1500094 1501762)
  - Fix CVE-2017-15265 (rhbz 1501878 1501880)


author: Zamir SUN <zsun@fedoraproject.org> - 2.6-2
changelog:
  - Add bz1386451-trace-cmd-record-crash-f-before-e.patch
  - Fix rpmlint error unstripped-binary-or-object
  - Resolves: rhbz#1386451


author: Dave Young <dyoung@redhat.com> - 2.0.15-3
changelog:
  - module-setup: fix 99kdumpbase network dependency
  - mkdumprd: omit dracut modules in case of network dumping
  - mkdumprd: omit dracut modules in case of no dm target
  - mkdumprd: omit crypt when there is no crypt kdump target
  - kdumpctl: use generated rd.lvm.lv=X
  - mkdumprd: change for_each_block_target() to use get_kdump_targets()
  - kdump-lib.sh: introduce get_kdump_targets()
  - kdump-lib.sh: fix improper get_block_dump_target()
  - kdumpctl: fix infinite loop caused by running under bash


author: Dave Young <dyoung@redhat.com> - 2.0.15-10
changelog:
  - Improve 'cpu add' udev rules
  - module-setup: suppress the early iscsi error messages
  - mkdumprd: use 300s as the default systemd unit timeout for kdump mount


author: David Howells <dhowells@redhat.com> - 1.5.6-1
changelog:
  - Fix the request-key.conf.5 manpage.
  - Fix the max depth of key tree dump (keyctl show).
  - The input buffer size for keyctl padd and pinstantiate should be larger.
  - Add keyctl_invalidate.3 manpage.


author: David Howells <dhowells@redhat.com> - 1.5.7-1
changelog:
  - Provide a utility function to find a key by type and name.
  - Allow keyctl commands to take a type+name arg instead of a key-id arg.
  - Add per-UID get_persistent keyring function.


author: David Howells <dhowells@redhat.com> - 1.5.9-1
changelog:
  - Add manpages for get_persistent.
  - Fix memory leaks in keyctl_describe/read/get_security_alloc().
  - Use keyctl_describe_alloc in dump_key_tree_aux rather than open coding it.
  - Exit rather than returning from act_xxx() functions.
  - Fix memory leak in dump_key_tree_aux.
  - Only get the groups list if we need it.
  - Don't trust sscanf's %n argument.
  - Use the correct path macros in the specfile.
  - Avoid use realloc when the memory has no content.
  - Fix a bunch of issues in key.dns_resolver.
  - Fix command table searching in keyctl utility.
  - Fix a typo in the permissions mask constants.
  - Improve the keyctl_read manpage.
  - Add man7 pages describing various keyrings concepts.


author: David Howells <dhowells@redhat.com> - 1.5.10-1
changelog:
  - Include sys/types.h in keyutils.h.
  - The dns resolver needs limits.h.
  - Overhaul of all manual pages.
  - Some manual pages moved to Linux man-pages project.
  - Add Diffie-Helman keyctl function.


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-22
changelog:
  * Mon Aug 07 2017 Robbie Harwood <rharwood@redhat.com> - 1.15.1-21
  - Display an error message if ocsp pkinit is requested


author: Rex Dieter <rdieter@fedoraproject.org> - 2.7-4
changelog:
  - %files: less globs, use %license
  - tighten subpkg deps
  - -devel: use %doc
  - use %version in Source URL
  - simplify %setup
  - %check: make check


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.1.29-5
changelog:
  - rhbz#1401172 - Missing symbol versioning provided by libldb.so with strict CFLAGS
  - Fix configure time detection with -Werror=implicit-function-declaration
    -Werror=implicit-int


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.0-3
changelog:
  - explicitly track library soname (so bumps aren't a surprise)
  - use %license, drop dup'd README in -devel
  - BR: openssl-devel >= 1.1.0 (required for DANE verification)


author: Petr Kubat <pkubat@redhat.com> - 3.18.0-1
changelog:
  - Updated to version 3.18.0 (https://sqlite.org/releaselog/3_18_0.html)
  - Modify sync2.test to pass with DIRSYNC turned off


author: Petr Kubat <pkubat@redhat.com> - 3.19.3-1
changelog:
  - Updated to version 3.19.3 (https://sqlite.org/releaselog/3_19_3.html)
  - Better detection of CVE-2017-10989 (#1469673)


author: Adam Jackson <ajax@redhat.com> - 1.6.5-4
changelog:
  - Split libX11-xcb to its own subpackage. This doesn't have much effect at
    the moment because x11-xcb.pc still lists both libX11 and libxcb in
    Requires, but once that's fixed eg. libEGL should be able to be installed
    without libX11.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.1.4-8
changelog:
  - Fix duplicate documentation (#1001246) by not using %doc
  - Turn on verbose build output via V=1 make
  - Remove %defattr
  - Use %?_isa in explicit package deps


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.110-2
changelog:
  - Rebase to 0.3.110 which adds support for aarch64 and other arches (Jeff Moyer)
  - Move to /usr
  - Resolves: bz#969680


author: Richard Hughes <richard@hughsie.com> 0.6.12-1
changelog:
  - New upstream release
  - Validate kudos in AppData and AppStream files
  - Copy hash table keys to avoid a common crash on Ubuntu
  - Fix the predicate comparison when using globs in metainfo files


author: Richard Hughes <richard@hughsie.com> 0.6.13-1
changelog:
  - New upstream release
  - Add a 'check-component' command to appstream-util
  - Add new API for gnome-software and fwupd
  - Add support for icon scaling and <launchable>
  - Allow using the app origin as a search keyword
  - Casefold all stemmed entries
  - Support non-numeric version numbers correctly


author: Richard Hughes <richard@hughsie.com> 0.7.0-1
changelog:
  - New upstream release
  - Add the limits in the validation output messages
  - Do not enforce that the project is a valid environment_id
  - Don't cast gsize to guint32 when getting file length
  - Remove the cache-id functionality
  - Show a warning if adding keywords after the cache creation
  - Switch to the meson build system


author: Richard Hughes <richard@hughsie.com> 0.7.1-1
changelog:
  - New upstream release
  - Add <id> kinds for application provides
  - Fail to validate if AppData screenshots are duplicated
  - Install appdata-xml.m4
  - Skip loading desktop data from Snap directory
  - Update the SPDX license list to 2.6
  - Validate the <id> format according to the spec


author: Richard Hughes <richard@hughsie.com> 0.7.2-1
changelog:
  - New upstream release
  - Allow remote icon types for desktop AppData files
  - Do not check the suffix of <id> tags
  - Prefer /usr/share/metainfo as default path for metainfo files


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.6-1
changelog:
  - Move the  part_err library before part and fs (vtrefny)
  - Fix BuildRequires for crypto and dm packages (vtrefny)
  - Fix mounting read-only devices (vtrefny)
  - Fix the bd_s390_dasd_is_ldl function. (vponcova)
  - Add the bd_s390_dasd_is_fba function to check if DASD is FBA (vponcova)
  - Disable MD RAID tests on 32bit systems (vpodzime)
  - Fix error message when mounting with a wrong fs type (vtrefny)
  - Only create RPMs for requested/configured  plugins (vpodzime)
  - Only check dependencies of plugins to be built (vpodzime)
  - Only build and distribute plugins if configured so (vpodzime)
  - Fix format-security and unused-result compiler warnings (vtrefny)
  - Add an AC macro for modular builds (vpodzime)
  - Add functions for mounting and unmounting filesystems (vtrefny)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7-1
changelog:
  - Skip btrfs min size tests on Fedora 25 (vtrefny)
  - Make sure the loop device doesn't disappear during tests (vpodzime)
  - Close the loop device when autoclear is (un)set (vpodzime)
  - Do not enforce Python 3 for running tests in CI (vpodzime)
  - Revert "Use different BTRFS_MIN_MEMBER_SIZE on aarch64" (vtrefny)
  - Use both 'old' and 'new' sysfs files to read zRAM stats (vtrefny)
  - Check if libparted-fs-resize pkgconfig is available (vpodzime)
  - Do not try to get name for inactive partitions (vtrefny)
  - Skip tests for getting free regions on CentOS/RHEL (vpodzime)
  - Free the container holding the specs of free regions (vpodzime)
  - Open loop devices as O_RDONLY when getting flags (vpodzime)
  - Resolve maximum partition size when we know its start (vpodzime)
  - Use --id instead of --part-type when setting partition id (vpodzime)
  - Fix mdadm command for removing failed device from an array (vtrefny)
  - Skip bcache tests on CentOS/RHEL 7 (vpodzime)
  - Use six.assertRaisesRegex in the FS tests (vpodzime)
  - Use mkdtemp() instead of TemporaryDirectory() (vpodzime)
  - Fix installation without specifying --exec-prefix (vpodzime)
  - Add options to force mkfs.ext4/vfat to create a FS on the whole device (vpodzime)
  - Skip the test for device escrow on CentOS/RHEL (vpodzime)
  - Define DEVNULL on our own if not in subprocess (vpodzime)
  - Remove the patches from the spec file (vpodzime)
  - Sync the spec file with downstream (vpodzime)
  - Stop skipping zRAM stats tests (vtrefny)
  - Add more tests for zRAM stats (vtrefny)
  - Fix reading zRAM properties from sysfs (vtrefny)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.8-1
changelog:
  - Temporarily skip vfat generic resize test on rawhide (vtrefny)
  - Use "safeprobe" in "bd_fs_wipe" (vtrefny)
  - Add a generic filesystem resize function (vtrefny)
  - Add a function to get mountpoint for a device (vtrefny)
  - Add a function to get filesystem type for a device (vtrefny)
  - Only include the LVM DBus config when shipping LVM DBus (vpodzime)
  - Skip the LVM DBus vgreduce tests on Rawhide (vpodzime)
  - Do not build the lvm-dbus plugin on RHEL/CentOS (vpodzime)
  - Give zRAM more time to settle before trying to remove a device (vpodzime)
  - Put zram tests adding/removing devices into a separate class (vpodzime)
  - Skip LVM cache and RAID tests on Rawhide (vpodzime)
  - Fix the skip_on decorator factory for tests (vpodzime)
  - Use 'blkid -p' instead of lsblk to get device's FS type (vpodzime)
  - Improve the lvm_set_global_config test (vpodzime)
  - Pass '-y' to pvresize (vpodzime)
  - Create a copy of os.environ for a child process (vpodzime)
  - Revert "Use the "C.UTF-8" locale instead of just "C"" (vpodzime)
  - Fix how we create vfat FS in tests (vpodzime)
  - Skip the test if requiring unavailable locales (vpodzime)
  - Use the "C.UTF-8" locale instead of just "C" (vpodzime)
  - Add functions for working with ext2 and ext3 filesystems (vtrefny)
  - Link to gobject when lvm or btrfs is enabled (andreas)
  - Link to libm where needed (andreas)
  - Add a function for cleaning a device (vtrefny)
  - Add few code exaples to documentation (vtrefny)
  - Use a special exception for no fs signature when doing wipe (vpodzime)
  - One more incompatible os.symlink() call (vpodzime)
  - Do not use pass-by-name in the os.symlink() call (vpodzime)
  - Ignore previous errors when falling back to using ioctl() (vpodzime)
  - Use ioctl() call to teardown loop devices (vpodzime)
  - Resolve the device to remove for mdadm (vpodzime)
  - Add a function for getting device symlinks (vpodzime)
  - Use the new resolve_device() function where appropriate (vpodzime)
  - Add the resolve_device() function to the utils library (vpodzime)
  - First try to read the 'autoclear' flag from /sys/ (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.9-1
changelog:
  - Fix hardcoded reference to gcc (timo.gurr)
  - Catch and ignore partial failures in LVM tests' cleanups (vpodzime)
  - Fix hardcoded reference to pkg-config (timo.gurr)
  - Make GObject introspection optional (vpodzime)
  - Do not link libraries required by plugins to the GI files (vpodzime)
  - Make sure the whole build status image is shown (vpodzime)
  - Show CI status in README (at the GH repo's front page) (vpodzime)
  - Always require the libudev pkg (tgurr)
  - Make sure we give kernel time to fully setup zram device(s) (vpodzime)
  - fs_test.py: Close FDs when calling utilities (tasleson)
  - crypto.c: Correct segmentation fault (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.10-1
changelog:
  - Only enable partition size tolerance with alignment (vpodzime)
  - Limit the requested partition size to maximum possible (vpodzime)
  - Do not verify vfat FS' size after generic resize (vpodzime)
  - Specify tolerance for partition size (kailueke)
  - Only use the exact constraint if not using any other (vpodzime)
  - Check resulting FS size in tests for generic FS resize (vpodzime)
  - Query setting FS label support and generic relabeling (kailueke)
  - Do not strictly require all FS utilities (vpodzime)
  - Compile everything with the C99 standard (vpodzime)
  - Add partition resize function (kailueke)
  - Generic Check and Repair Functions (kailueke)
  - Query functions for FS resize and repair support (kailueke)
  - Update the project/source URL in the spec file (vpodzime)
  - Add functions for opening/closing TrueCrypt/VeraCrypt volumes (vpodzime)
  - Adapt to a change in behaviour in new libmount (vpodzime)
  - Try RO mount also if we get EACCES (vpodzime)
  - Size in bytes for xfs_resize_device (kailueke)
  - src/plugins/Makefile.am: Remove hard coded include path in /usr prefix (tristan.vanberkom)
  - Fixed include for libvolume_key.h (tristan.vanberkom)
  - Ignore parted warnings if possible (squimrel)
  - bcache tests: Remove FEELINGLUCKY checks (tasleson)
  - kbd.c: Code review corrections (tasleson)
  - kbd.c: Make bd_kbd_bcache_create work without abort (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.11-1
changelog:
  - Make the KbdZRAMDevicesTestCase inherit from KbdZRAMTestCase (vpodzime)
  - Allow non-source directory builds (kailueke)
  - Add a way to disable runtime dependency checks (vpodzime)
  - Link to GObject even if no plugin is activated (kailueke)
  - Skip zram tests on Rawhide (vpodzime)
  - Keep most utilities available for tests (vpodzime)
  - Use new libmount function to get (un)mount error message (vtrefny)
  - Update the documentation URL (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.12-1
changelog:
  - Own directories /etc/libblockdev and /etc/libblockdev/conf.d (vtrefny)
  - Wait for resized partition (kailueke)
  - Make sure the device is opened for libparted (vpodzime)
  - Fix label check in swap_test (vtrefny)
  - Use "run_tests" script for running tests from Makefile (vtrefny)
  - Add a script for running tests (vtrefny)
  - Tests: Move library initialization to setUpClass method (vtrefny)
  - Stop skipping FAT resize tests on rawhide (vtrefny)
  - Close filesystem before closing the partition during FAT resize (vtrefny)
  - Use mountpoint for "xfs_info" calls (vtrefny)
  - Use libmount cache when parsing /proc/mounts (vtrefny)
  - Add some space for the CI status (vpodzime)
  - Confirm the force when creating PVs in FS tests (vpodzime)
  - Skip vgremove tests on 32bit Debian (vtrefny)
  - Fix names of backing files in tests (vtrefny)
  -  Fix checking for available locales (vtrefny)
  - Skip dependency checking in mpath tests on Debian (vtrefny)
  - Skip zRAM tests on Debian (vtrefny)
  - Skip the test for device escrow on Debian too (vtrefny)
  - Skip free region tests on Debian too (vtrefny)
  - Fix redirecting command output to /dev/null in tests (vtrefny)
  - Try harder to unmount devices in test cleanup (vtrefny)
  - Require only plugins that are needed for given test (vtrefny)
  - Try to get distribution info from "PrettyName" if "CPEName" isn't available (vtrefny)
  - Use -ff when creating PVs in FS tests (vpodzime)
  - Sync spec with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.8-1
changelog:
  - Add a docstring to python bindings (vpodzime)
  - Neutralize None as an operand for math operations (vpodzime)
  - Add targets for checking and installing test requirements (vpodzime)
  - Fix 'make local' (vtrefny)
  - Make the python packages own their package directories (vpodzime)
  - Don't compare translated and untranslated representations (vpodzime)
  - replace_char_with_str: Fix the character count. (dshea)
  - Ditch autopoint. (dshea)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.9-1
changelog:
  - Allow the Size python class to be easily imported (vpodzime)
  - Make sure pyexecdir is defined (vpodzime)
  - Do not run Python 3 tests without python3 (vpodzime)
  - Disable python3 on RHEL (vpodzime)
  - Reflect the configuration in the spec file template (vpodzime)
  - Make documentation generation conditional (vpodzime)
  - Make python3 support conditional (vpodzime)
  - Require lower version of libpcre (vpodzime)
  - Sync the spec file with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.10-1
changelog:
  - Fix installation without specifying --exec-prefix (martin)
  - Sync the spec file with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.11-1
changelog:
  - Fix README file name (vtrefny)
  - Add a build status image to the README.md (vpodzime)
  - Remove "glibc-all-langpacks" from test dependencies (vtrefny)
  - Check for requires in generated spec file, not in the template (vtrefny)
  - Fix checking for available locales (vtrefny)
  - Fix library name in acinclude.m4 (vtrefny)
  - Do not try to run translation tests on CentOS/RHEL 7 (vtrefny)
  - Skip tests if they require unavailable locales (vpodzime)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.11-4
changelog:
  - Python 2 binary package renamed to python2-libbytesize
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.0-1
changelog:
  - Make more space for CI status image (vtrefny)
  - Include limits.h to make sure ULONG_MAX is defined (vpodzime)
  - Remove extra 'is' in two docstrings (vpodzime)
  - Properly support 64bit operands (vpodzime)


author: Rex Dieter <rdieter@fedoraproject.org> - 2007f-14
changelog:
  - .spec cosmetics, %define -> %global, drop %clean
  - workaround el6 libc-client WONTFIX brokenness (#736120)
  - use compat-openssl10 on f26+ (#1424334)


author: Kalev Lember <klember@redhat.com> - 0.6.9-1
changelog:
  - Update to 0.6.9
  - Use make_install macro
  - Mark COPYING and COPYING.LIB as %license
  - Tighten -devel subpackage deps


author: Petr Kubat <pkubat@redhat.com> - 5.3.28-21
changelog:
  - Reintroduce upstream patch for rhbz#1394862
  - Do not rebuild rpm's environment during a rpm transaction


author: Petr Kubat <pkubat@redhat.com> - 5.3.28-23
changelog:
  - Reintroduce patches removed in 5.3.28-22
  - Modify upstream patch to fail on pthread version mismatch (#1460003)


author: Petr Kubat <pkubat@redhat.com> - 5.3.28-23
changelog:
  - Try looking at env lock via /proc/locks during env_attach (#1460003)
  - Check rpm's transaction lock via /proc/locks
  - Do not access DB_CONFIG when db_home is not set (#1464033)


author: Tom Lane <tgl@redhat.com> 0.8.3-12
changelog:
  - Remove unnecessary package-name Requires:, since dependencies on library
    sonames should be enough, and we don't want to hard-wire assumptions about
    which packages provide which libraries
  - isa-ify cross-subpackage Requires:


author: Richard W.M. Jones <rjones@redhat.com> - 1.12-13
changelog:
  - Add patch to fix multilib conflicts in dnet-config (RHBZ#342001).
  - Remove RPM cruft from the spec file.


author: Jaroslav Mracek <jmracek@redhat.com> - 0.10.1-1
changelog:
  - Update to 0.10.1
  - It improves query performance with name and arch filters. Also nevra filter will now
    handle string with or without epoch.
  - Additionally for python bindings it renames NEVRA._has_just_name() to NEVRA.has_just_name() due
    to movement of code into c part of library.
  - Resolves: rhbz#1260242 - --exclude does not affect dnf remove's removal of requirements
  - Resolves: rhbz#1485881 - DNF claims it cannot install package, which have been already installed
  - Resolves: rhbz#1361187 - [abrt] python-ipython-console: filter_updown(): python3.5 killed by SIGABRT


author: Dominik Mierzejewski <rpm[AT]greysector.net> 5.0.3-4
changelog:
  - fix FTBFS due to doc files in the wrong place (#1307717)
  - use license macro
  - drop unnecessary defattr declarations


author: Boris Ranto <branto@redhat.com> - 3.1-12.20150325cvs
changelog:
  - Rebase to latest upstream version
  - We no longer need the patch to not ignore extchars on utf8 charset -- the patch was merged upstream


author: Jens Petersen <petersen@redhat.com> - 3.1-12
changelog:
  - protect install-info in the rpm scriptlets
    https://fedoraproject.org/wiki/Packaging:Scriptlets#Texinfo


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.5.1-5
changelog:
  - error opening ATTR{/sys/devices/pci0000:00/0000:00:1a.0/usb1/1-1/1-1.3/1-1.3:1.0/power/control} for writing (#950205)
  - %build: --disable-silent-rules


author: Nicolas Chauvet <kwizart@gmail.com> - 1:0.2.999-18.20170607git80d9a87
changelog:
  - Update snapshot to 20170607
  - Default to asm and tls when available
  - Use the fixed tsd for armhfp and aarch64
    fixed in https://github.com/NVIDIA/libglvnd/issues/116


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Richard Hughes <richard@hughsie.com> 0.2.7-1
changelog:
  - New upstream version
  - Add missing element-type annotations
  - Support g_autoptr() for all gusb object types


author: Richard Hughes <richard@hughsie.com> 0.2.8-1
changelog:
  - New upstream version
  - Add a PERMISSION_DENIED error enum
  - Add a thin glib wrapper around a libusb_interface_descriptor
  - Ignore the not-found error when resetting a device


author: Richard Hughes <richard@hughsie.com> 0.2.10-1
changelog:
  - New upstream version
  - Correctly detect removed devices when rescanning
  - Fix a memory leak when using control tranfers
  - Fix symbol version table up to version 0.2.9


author: Igor Gnatenko <ignatenko@redhat.com> - 1.8.0-2
changelog:
  - Add missing BuildRequires: gcc
  - Fixup other BuildRequires
  - Rebuild for pkg-config fix from meson


author: Peter Hutterer <peter.hutterer@redhat.com> 1.8.1-4
changelog:
  - Don't try pinching when the finger number exceeds available slots
  - Don't resume a disabled touchpad after a lid switch open (#1448962)


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.2
changelog:
  - Fix issue with IPA + SELinux in containers
  - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.3
changelog:
  - Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication
  - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with
                             file from package sssd-common-1.15.1-1.fc25.x86_64
  - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-4
changelog:
  - Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write
                             access on the sock_file system_bus_socket
  - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and
                             fails to download desktop profile data
  - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3
  - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients
                              after applying ID Views for them in IPA server
  - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id
                              mapping is applied


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-5
changelog:
  - Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when
                             searching in local cache database access on
                             the sock_file system_bus_socket


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.4.alpha
changelog:
  - Avoid 'test/md5.c:126:3: warning: dereferencing type-punned pointer
    will break strict-aliasing rules' by adding -fno-strict-aliasing flag.


author: Jiri Pirko <jiri@mellanox.com> - 1.6-1
changelog:
  - Update to 1.6
  - libndb: reject redirect and router advertisements from non-link-local
  - libndp: validate the IPv6 hop limit
  - libndp: revert API change for ndp_msg_send() and add ndp_msg_send_with_flags()
  - libndp: fix type of field "na" in "struct ndp_msgna"
  - ndptool: add option to send messages types
  - libndp: add option flags to send messages
  - Add SubmittingPatches howto


author: Thomas Haller <thaller@redhat.com> - 3.2.29-2
changelog:
  - Update with patches from upstream
  - check valid input arguments for nla_reserve() (rh#1414305, CVE-2017-0386)
  - fix crash during SRIOV parsing
  - lazyly read psched settings
  - use O_CLOEXEC when creating file descriptors with fopen()


author: Lubomir Rintel <lrintel@redhat.com> - 1.8.0-2
changelog:
  - editor: fix crash when destroying 802.1x page (rh #1458567)
  - po: update Japanese translation (rh #1379642)


author: Kalev Lember <klember@redhat.com> - 0.7.7-1
changelog:
  - Update to 0.7.7
  - Remove lib64 rpaths
  - Don't set group tags
  - Use make_install macro
  - Don't manually set deps that pkgconfig dep extractor automatically does
  - Drop old, unused build deps
  - Tighten deps with the _isa macro


author: Christopher Meng <rpm@cicku.me> - 1.4-1
changelog:
  - New release(BZ#1000496).
  - Add gnulib virtual provides(BZ#821770).
  - Add AArch64 support(BZ#925829).
  - Devel package explicit arch requires.
  - Correct summary as it only supports V1 protocol.


author: Steve Jenkins <steve@stevejenkins.com> - 2.10.3-5
changelog:
  - Fixed OpenLDAP support for all targets except EL5 (required version not available)
  - Updated spec file to more modern conventions


author: Steve Jenkins <steve@stevejenkins.com> - 2.11.0-0.1
changelog:
  - Updated to 2.11.0.Alpha0 upstream source
  - Rediffed, combined, and applied patch for SF #35 + #37
  - Modernized spec slightly (thanks to EPEL 5 getting a bit more modern)


author: Tomas Mraz <tmraz@redhat.com> 1.2.0-1
changelog:
  - add maxsequence check for too long monotonic character sequence.
  - clarified alternative licensing to GPLv2+.
  - add local_users_only option to skip the pwquality checks for
    non-locals. (thanks to Stef Walter)


author: Tomas Mraz <tmraz@redhat.com> 1.2.1-1
changelog:
  - properly free pwquality settings
  - add extern "C" to public header
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.2.2-1
changelog:
  - manual page fixes
  - make it possible to set the maxsequence configuration value
  - updated translations from Transifex


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-1
changelog:
  - fix problem with parsing the pam_pwquality options
    patch by Vladimir Sorokin.
  - updated translations from Transifex
  - treat empty user or password as NULL
  - move the library to /usr


author: Tomáš Mráz <tmraz@redhat.com> 1.3.0-1
changelog:
  - Change the defaults for credits, difok, and minlen
  - Make the cracklib check optional but on by default
  - Add implicit support for parsing  <cfgfile>.d/*.conf files
  - Add libpwquality API manual page


author: Tomáš Mráz <tmraz@redhat.com> 1.4.0-1
changelog:
  - Do not try to check presence of too short username in password
  - Make the user name check optional (via usercheck option)
  - Add an 'enforcing' option to make the checks to be warning-only
    in PAM
  - The difok = 0 setting will disable all old password similarity
    checks except new and old passwords being identical
  - Updated translations from Zanata


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0.2-4
changelog:
  - Mitigate changed treatment of orphaned sections in ld.bfd/binutils-2.29,
    resulting in logging facility silently out of order (rhbz#1478089)


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0.2-6
changelog:
  - Better approach so as to mitigate changed treatment of orphaned sections
    in ld.bfd/binutils-2.29, resulting in logging facility silently out of order
    (rhbz#1478089)
  - Related to that, build commands now shown in full to ease the sanity checking
  - Adapt spec file per the upstream version (conditionalizing build through
    --enable-syslog-tests no longer relevant since v1.0.2)


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0.2-8
changelog:
  - Evolution of the previous (rhbz#1478089, rhbz#1487787)
  - New test included in check phase (as per upsteam)


author: Parag Nemade <paragn AT fedoraproject DOT org> - 3.4-3
changelog:
  - Don't use Arched BR: as written in Guidelines
  - fix build failure as cpumaker dropped -BURC option


author: Tomas Mlcoch <tmlcoch@redhat.com> - 1.7.20-1
changelog:
  - Tests: Disable test_download_packages_with_resume_02 test
  - Update build utils to match new fedora spec schema


author: Matej Habrnal <mhabrnal@redhat.com> 2.9.1-1
changelog:
  - build: do not upload tarball to fedorahosted.org
  - spec: do not use fedorahosted.org as source
  - build: fix generating list of dependences in autogen.sh
  - build: generate new release entries with date
  - report-newt: free allocated variables, don't close dd twice
  - build: fix scratch-build target
  - changelog: reflect the PR
  - lib: several bug fixes in parsing of mountinfo
  - lib: correctly recognize chroot in container
  - lib: declare CONTAINER_ROOTS element name
  - lib: add more log wrappers for perror
  - reporter-bugzilla: use /etc/os-release for default url
  - configure.ac: Remove nss dependency
  - spec: include testsuite headers in the devel package
  - tests: include testsuite.h in the dist archive
  - maint: check pulled .po files for errors
  - build: fix bug in changelog generating in release target
  - changelog: fix typos


author: Matej Habrnal <mhabrnal@redhat.com> 2.9.1-2
changelog:
  - add journal default entries to reporter-systemd-journal
  - augeas: trim spaces on eol, around value separator
  - Resolves: #1434414


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.9.1-5
changelog:
  - Python 2 binary package renamed to python2-libreport
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.9.1-6
changelog:
  - Python 3 binary package renamed to python3-libreport
  - Missing Provides wihtout %_isa added in python 2 binary package


author: Matej Habrnal <mhabrnal@redhat.com> 2.9.2-1
changelog:
  - Translation updates
  - logging: rename log() to log_warning()
  - reporter-mantisbt: Fix typo in help
  - bugzilla: add check if option -d was entered
  - dd: extend create_dump_dir to allow set pid in dumpdir name
  - wizard: replace deprecated gtk3 functions
  - lib: replace hash table with list
  - fix newline issue with ask_password
  - lib: make cpuinfo files user editable
  - reporter-s-journal: add count to default logs
  - augeas: trim spaces on eol, around value separator
  - reporter-s-journal: add journal default entries


author: Paul Wouters <pwouters@redhat.com> - 3.18-1
changelog:
  - Updated to 3.18 for CVE-2016-5391 rhbz#1361164 and VTI support
  - Remove support for /etc/sysconfig/pluto (use native systemd instead)


author: Paul Wouters <pwouters@redhat.com> - 3.19-2
changelog:
  - Resolves: rhbz#1392191 libreswan: crash when OSX client connects
  - Improved uniqueid and session replacing support
  - Test Buffer warning fix on size_t
  - Re-introduce --configdir for backwards compatibility


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-4
changelog:
  - Fix segfault in selinux_restorecon_sb() (#1433577)
  - Change matchpathcon usage to match with matchpathcon manpage
  - Fix a corner case getsebool return value


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-6
changelog:
  - Don't finalize mount state in selinux_set_policy_root()
  - Follow upstream and rename _selinux.so to _selinux.cpython-36m-x86_64-linux-gnu.so


author: Petr Lautrbach <plautrba@redhat.com> 2.5-8
changelog:
  - Fixes bug preventing the installation of base modules
  - make distclean target work
  - Do not always print a module name warning
  - Use pp module name instead of filename when installing module
  - tests: Do not force using gcc
  - genhomedircon: remove hardcoded refpolicy strings
  - genhomedircon: add support for Development/Debug syntax
  - genhomedircon: generate contexts for logins mapped to the default user
  - Validate and compile file contexts before installing
  - Swap tcp and udp protocol numbers


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-1
changelog:
  - Update to upstream release 2017-08-04
  - Use 'sefcontext_compile -r' when it's run during SELinux policy build


author: Petr Lautrbach <plautrba@redhat.com> 2.5-9
changelog:
  - Warn instead of fail if permission is not resolved
  - Ignore object_r when adding userrole mappings to policydb


author: Petr Lautrbach <plautrba@redhat.com> 2.5-10
changelog:
  - Check for too many permissions in classes and commons in CIL
  - Fix xperm mapping between avrule and avtab
  - tests: Fix mispelling of optimization option
  - Fix unused/uninitialized variables on mac build
  - Produce more meaningful error messages for conflicting type rules in CIL
  - make "make test" fail when a CUnit test fails
  - tests: fix g_b_role_2 test
  - Change which attributes CIL keeps in the binary policy
  - Port str_read() from kernel and remove multiple occurances of similar code
  - Use calloc instead of malloc for all the *_to_val_structs
  - Fix bugs found by AFL
  - Fix memory leak in expand.c
  - Fix invalid read when policy file is corrupt
  - Fix possible use of uninitialized variables


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-3
changelog:
  - Fix neverallow bug when checking conditional policy
  - Destroy the expanded level when mls_semantic_level_expand() fails
  - Do not seg fault on sepol_*_key_free(NULL)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-1
changelog:
  - updated to 1.0.28
  - fix possible buffer overflow when parsing crafted ID3 tags (#1440758, CVE-2017-7586)
  - fix possible buffer overflow when parsing crafted flac file (#1440756, CVE-2017-7585)


author: Tom Callaway <spot@fedoraproject.org>
changelog:
  - api changes between 1.4.4 and 1.5.0, bump sover to 1.0.0
  - fix linking issue to make proper libsrtp.so.1


author: Andreas Schneider <asn@redhat.com> - 0.7.1-1
changelog:
  - Update to version 0.7.1
    * Fixed SSH_AUTH_PARTIAL auth with auto public key
    * Fixed memory leak in session options
    * Fixed allocation of ed25519 public keys
    * Fixed channel exit-status and exit-signal
    * Reintroduce ssh_forward_listen()


author: Andreas Schneider <asn@redhat.com> - 0.7.2-1
changelog:
  - Update to version 0.7.2
    * Fixed OpenSSL detection on Windows
    * Fixed return status for ssh_userauth_agent()
    * Fixed KEX to prefer hmac-sha2-256
    * Fixed sftp packet handling
    * Fixed return values of ssh_key_is_(public|private)
    * Fixed bug in global success reply
  - resolves: #1267346


author: Andreas Schneider <asn@redhat.com> - 0.7.3-1
changelog:
  - resolves: #1311259 - Fix CVE-2016-0739
  - resolves: #1311332 - Update to version 0.7.3
    * Fixed CVE-2016-0739
    * Fixed ssh-agent on big endian
    * Fixed some documentation issues
  - Enabled GSSAPI support


author: Andreas Schneider <asn@redhat.com> - 0.7.4-1
changelog:
  - Update to version 0.7.4
    * Added id_ed25519 to the default identity list
    * Fixed sftp EOF packet handling
    * Fixed ssh_send_banner() to confirm with RFC 4253
    * Fixed some memory leaks
  - resolves: #1419007


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7.4-2
changelog:
  - BR: compat-openssl10-devel (f26+, #1423088)
  - use %license
  - -devel: drop hardcoded pkgconfig dep (let autodeps handle it)
  - %files: track library sonames, simplify -devel
  - %install: use 'install/fast' target
  - .spec cosmetics, drop deprecated %clean section


author: Peter Robinson <pbrobinson@fedoraproject.org> - 1.7.0-4
changelog:
  - Modernise spec (no we really don't care about el4/fc4)
  - Don't ship ChangeLog/NEWS, duplicates of RELEASE-NOTES


author: Paul Howarth <paul@city-fan.org> - 1.7.0-5
changelog:
  - Revert parts of previous change that broke EL-5 compatibility
  - Include NEWS in docs package, it's much more than RELEASE-NOTES


author: Paul Howarth <paul@city-fan.org> - 1.8.0-1
changelog:
  - Update to 1.8.0
    - Added a basic dockerised test suite
    - crypto: Add support for the mbedTLS backend
    - See RELEASE-NOTES for details of bug fixes


author: Paul Howarth <paul@city-fan.org> - 1.8.0-5
changelog:
  - scp: Do not NUL-terminate the command for remote exec (#1489736, GH#208)
  - Make devel package dependency on main package arch-specific
  - Drop EL-5 support
    - noarch sub-packages always available now
    - Drop legacy Group: and BuildRoot: tags
    - Drop explicit buildroot cleaning
    - %{__isa_bits} always defined now


author: Lukas Slebodnik <lslebodn@redhat.com> - 2.1.9-1
changelog:
  - rhbz#1427352 New upstream release - 2.1.9
  - rhbz#1401225 - Rename python packages to match packaging guidelines
    https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages


author: Peter Robinson <pbrobinson@fedoraproject.org> 4.9-2
changelog:
  - Move development related docs to devel sub package
  - Cleanup spec and macros
  - Update valgrind ExclusiveArch


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.3.12-5
changelog:
  - rhbz#1401175 - Missing symbol versioning provided by libtdb.so
  - Fix configure time detection with -Werror=implicit-function-declaration
    -Werror=implicit-int
  - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.3.13-1
changelog:
  - New upstream release 1.3.13
  - removed Group fields (new packaging policy)
  - %defattr() is no longer needed


author: Jiri Pirko <jiri@resnulli.us> - 1.23-1
changelog:
  - 1.23 release
  - dbus: don't do <deny send_interface="..." /> in template dbus s. f.
  - libteam: retry on NLE_DUMP_INTR error


author: Jiri Pirko <jiri@resnulli.us> - 1.24-1
changelog:
  - 1.24 release
  - teamd: lacp: use original hwaddr as source address in lacpdus
  - teamd: do correct l3/l4 tx hashing with vlans
  - libteam: Fix broken links


author: Jiri Pirko <jiri@resnulli.us> - 1.25-1
changelog:
  - 1.25 release
  - teamd: handle vlan 0 packets
  - libteam: fix TEAM_OPTION_TYPE_BOOL type for big endian architectures


author: Jiri Pirko <jiri@resnulli.us> - 1.26-1
changelog:
  - 1.26 release
  - teamd: lacp: Do not unselect port if it changes state to "expired"
  - man: in lacp it's 'port_config', not 'port_options'
  - teamd: fix the issue that network blocks when systemctl stop teamd
  - teamd: change to Before=network-pre.target in systemd service file
  - man teamd.conf: fix indentation
  - misc: fix an out-of-bound write with zero-length hardware address
  - teamd: LACP runner does not set Agg bit on first slave


author: Jiri Pirko <jiri@resnulli.us> - 1.27-1
changelog:
  - 1.27 release
  - teamd: check target host with nap.nah.nd_na_target
  - teamd: check ipv6 packet only with the 4 bits version
  - teamd: set correct bits for standby ports
  - libteam: Add team_get_port_enabled function
  - teamd: check port link_up when a port is added with loadbalance runner
  - libteam: resynchronize ifinfo after lost RTNLGRP_LINK notifications
  - SubmittingPatches: add checkpatch note
  - README: add note regarding pull requests
  - teamd: escape some sensitive characters in ifname with double quotation marks


author: Lukas Slebodnik <lslebodn@redhat.org> - 0.9.31-4
changelog:
  - Fix configure detection with strict CFLAGS - rhbz#1401231
  - Fix few fedora packaging violations - rhbz#1401226


author: Daiki Ueno <dueno@redhat.com> - 0.1.24-1
changelog:
  - Update to 0.1.24
  - Apply patch from upstream, which fixes scim-thai FTBFS with GCC6 (Closes: #1308117)


author: David Shea <dshea@redhat.com> - 0.4.5-3
changelog:
  - Render the map directly from SVG (#1335158)
  - Fix memory leaks in tz.c
  - Fix an invalid memory access
  - Do not modify TZ in the process environment
  - Move all data files to /usr/share/libtimezonemap from .../libtimezonemap/ui
  - Add extra city data so all timezone offsets are clickable
  - Move Venezuela from -04:30 to -04:00
  - Fix the conversion of points just west of 180 longitude
  - Remove the out-of-date Olson map data
  - Update the "backward" file
  - Improve the location selected when setting the timezone by name (#1322648)
  - Remove an extra line in the +10:00 layer
  - Move Chile back an hour


author: Simone Caronni <negativo17@gmail.com> - 1.17-27
changelog:
  - Fix FTBFS (#1307740).
  - Update sources, requires libtommath 1.x, drop upstreamed patches.
  - Update URL.
  - Use license macro.
  - Clean up SPEC file.


author: Simone Caronni <negativo17@gmail.com> - 1.17-28
changelog:
  - Fix shared object name:
    https://github.com/libtom/libtomcrypt/commit/14272976d0615b546e9e0215ec4e2f01854a2dc9


author: Simone Caronni <negativo17@gmail.com> - 1.17-31.20170327git7532b89
changelog:
  - Update to latest snapshot.
  - Use correct format for snapshots as per packaging guidelines.
  - Use default compiler flags.


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.6-14
changelog:
  - remove duplicate Requires: entry
  - use bcond_without instead of PostgreSQL-packaging 'runselftest'


author: Hans de Goede <hdegoede@redhat.com> - 1.0.21-0.1.git448584a
changelog:
  - Update to a pre 1.0.21 git snapshot to bring in libusb_interrupt_event_handler
    which chromium needs (rhbz#1270324)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.62-7
changelog:
  - Fix FTBFS on Fedora 26+
  - Add patch to fix issues with -Werror=format-security
  - Ensure that the python 3 tests use a locale guaranteed to be present


author: Cole Robinson <crobinso@redhat.com> - 3.7.0-2
changelog:
  - Fix TPM2 passthrough (bz #1486240)
  - Fix spice GL qemu:///system rendernode permissions (bz #1460804)


author: Daniel P. Berrange <berrange@redhat.com> - 3.6.0-2
changelog:
  - Rename sub-RPMs to python2-libvirt & python3-libvirt
  - Re-add py3 conditionals for benefit of RHEL/CentOS builds


author: David King <amigadave@amigadave.com> - 1.3.5-1
changelog:
  - Update to 1.3.5 (#1197923)
  - Use license macro for COPYING
  - Tighten subpackage dependencies
  - Use make_install and make_build macros
  - Use pkgconfig for BuildRequires
  - Remove unnecessary Requires from devel subpackage
  - Remove obsolete Obsoletes


author: Caolán McNamara <caolanm@redhat.com> - 0.2.8.4-45
changelog:
  - Related: rhbz#1227244 CVE-2015-4695 meta_pen_create heap buffer overflow
  - Related: rhbz#1227244 CVE-2015-4696 wmf2gd/wmf2eps use after free


author: Caolán McNamara <caolanm@redhat.com> - 0.2.8.4-49
changelog:
  - Resolves: rhbz#1388451 (CVE-2016-9011) check max claimed record len
              against max seekable position


author: Kevin Fenzi <kevin@scrye.com> - 2.9.4-1
changelog:
  - Update to 2.9.4.
  - Apply very hacky patch that removes the no longer in python-3.6 PyVerify_fd symbol.


author: Jon Ciesla <limburgher@gmail.com> - 1.4.43-3
changelog:
  - Require fedora-logos-httpd, BZ 1387752.
  - Move some configs to subpackages, BZ 1387763.
  - Create filesystem subpackage for php-fpm integration, BZ 117282.


author: Chris Leech <cleech@redhat.com> - 1.0.1-3.git986eb2e
changelog:
  - 1303439 package should not attempt to own /etc/bash_completion.d
  - fix more build warning in rawhide


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.5.2-11.D20160817git699c1695c2
changelog:
  - Update to the latest git
  - Never free buffer returned by gtk_entry_get_text()
    (bug 1334064, github:lxsession#10)


author: Robert Scheck <robert@fedoraproject.org> - 1.03-13
changelog:
  - Added patch by Khem Raj to use static inlines as the external
    inline definition has changed with GCC 5 (to fix ppc64 builds)


author: Miloslav Trmač <mitr@redhat.com> - 0.21.1-20
changelog:
  - Fix build with swig-3.0.5
  - Update tests for OpenSSL disabling SSL 2.0 and 3.0 by default
  - Update tests for OpenSSL using SHA-256 instead of SHA-1 in S/MIME signatures
    by default
    Resolves: #1239664


author: Miloslav Trmač <mitr@redhat.com> - 0.21.1-21
changelog:
  - Fix spurious failures of test_cookie_str_changed_mac
    Resolves: #1270016
  - Add support for IP addresses in subjectAltName
    Resolves: #1080142


author: Miloslav Trmač <mitr@redhat.com> - 0.23.0-1
changelog:
  - Update to M2Crypto-0.23.0
  - Filter out __REGISTER_PREFIX__ to allow building on MIPS.  Based on a patch by
    Michal Toman <michal.toman@gmail.com>.


author: Than Ngo <than@redhat.com> - 0.23.0-2
changelog:
  - Filter out __GNUC__ to fix build failure on powerpc
  - EXP ciphers is disable in openssl-1.0.2g, so remove test_ssl.MiscSSLClientTestCase.test_no_weak_cipher


author: Patsy Franklin <pfrankli@redhat.com> 1:4.1-2
changelog:
  - Include patches dropped in last update as they fix reported bugs and
    update the spec file to include more info on the patches.


author: Honza Horak <hhorak@redhat.com> - 3:10.2.8-2
changelog:
  - Fix paths in galera_recovery and galera_new_cluster
    Resolves: #1403416
  - Support --defaults-group-suffix properly in systemd unit file
    Resolves: #1485777
  - Allow 4567 port for tcp as well
  - Install mysql-wait-ready on RHEL-6 for the SysV init
  - Run mysql-prepare-db-dir as non-root
  - Sync mysql.init with community-mysql


author: Michal Schorm <mschorm@redhat.com> - 3:10.2.8-5
changelog:
  - Fix building without client library part
  - Start building mariadb without client library part,
    use mariadb-connector-c package >= 3.0 instead
  - Use obosletes of "-libs" in "-common", if built without client library part


author: Michal Schorm <mschorm@redhat.com> - 3:10.2.9-1
changelog:
  - Rebase to 10.2.9
  - Testsuite temorarly disabled in order to fast deploy critical fix
    Related: #1497234


author: Michal Schorm <mschorm@redhat.com> - 3:10.2.9-2
changelog:
  - Fix of "with" and "without" macros, so they works
  - Use 'iproute' dependency instead of 'net-tools'
    Related: #1496131
  - Set server package to own /usr/lib64/mysql directory
  - Use correct obsolete, so upgrade from maridb 10.1 to 10.2 is possible
    with dnf "--allowerasing" option
    Related: #1497234
  - Fix building with client library
  - Build with client library and testsuite, since this is F27 branch


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.4-2
changelog:
  - Fix i686 build error
  - Fix problem where it was not possible to stop an IMSM array during reshape
  - Fix Degraded Raid1 array becomes inactive after rebooting
  - Fix problem with raid0 arrays not being detected by Anaconda due to it
    setting MALLOC_PERTURB_
  - Fix problem with reshaping IMSM arrays, where a new reshape could be
    launched before the first reshape had fully completed, leading to
    unpected results.
  - Fix problem with mdadm large device names overflowing an internal buffer
  - Fix problem about reshape stuck at beginning
  - Resolves bz1303380


author: Paul Howarth <paul@city-fan.org> - 2.0-1
changelog:
  - Update to 2.0
    - Add -l option to specify maximum log level
  - Drop upstreamed cleanup and starttls patches


author: Pavel Raiskup <praiskup@redhat.com> - 1.2.11-1
changelog:
  - latest upstream release (rhbz#1409372)
  - cleanup rpmlint
  - revert fix for rhbz#985344
  - requires with %_isa tag
  - drop zlib Z_BLOCK flush patch (rhbz#1417355)


author: Michal Sekletar <msekleta@redhat.com> - 0.26-9
changelog:
  - mlocate.db is ghost file created with non-default attrs, list them explicitly so rpm --verify doesn't report errors


author: Michal Sekletar <msekleta@redhat.com> - 0.26-14
changelog:
  - start timer after the installation (#1278587)
  - make mlocate-updatedb.service of the type simple, systemd will then not wait for its completion (#1282232)


author: Adam Williamson <awilliam@redhat.com> - 0.26-15
changelog:
  - add correct systemd requirements for scriptlets (using 
  Requires(post): systemd 
  Requires(preun): systemd 
  Requires(postun): systemd 
  )


author: Paul Howarth <paul@city-fan.org> 2.3.9-1
changelog:
  - Update to 2.3.9
    - SECURITY: Fix possible heap buffer overwrite (CVE-2013-4365)
    - Add experimental cmake-based build system for Windows
    - Correctly parse quotation and escaped spaces in FcgidWrapper and the AAA
      Authenticator/Authorizor/Access directives' command line argument, as
      currently documented (PR#51194)
    - Honor quoted FcgidCmdOptions arguments (notably for InitialEnv
      assignments) (PR#51657)
    - Conform script response parsing with mod_cgid and ensure no response body
      is sent when ap_meets_conditions() determines that request conditions are
      met
    - Improve logging in access control hook functions
    - Avoid making internal sub-requests and processing Location headers when in
      FCGI_AUTHORIZER mode, as the auth hook functions already treat Location
      headers returned by scripts as an error since redirections are not
      meaningful in this mode
    - Revert fix for PR#53693, added in 2.3.8 but undocumented
    - Fix issues with a minor optimization added in 2.3.8


author: Paul Howarth <paul@city-fan.org> - 2.3.9-7
changelog:
  - Use /usr/bin/sed rather than /bin/sed for fixconf script on modern releases
  - Drop %defattr, redundant since rpm 4.4
  - Use %license where possible


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.7-1
changelog:
  - 1347490 - Rebase to upstream version 0.9.7.
  - Ensure lookup_user_by_certificate runs after mod_nss as well.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.9-1
changelog:
  - 1434814 - Rebase to upstream version 0.9.9.
  - Add support for multiple users mapped to single certificate.


author: Jan Pazdziora <jpazdziora@redhat.com> - 1.0.0-1
changelog:
  - 1439711 - Rebase to upstream version 1.0.0.
  - Make LookupUserGECOS optional (no default) to support non-POSIX
    user identities.


author: Rob Crittenden <rcritten@redhat.com> - 1.0.11-5
changelog:
  - Fix logical AND in cipher string parsing CVE-2015-3277
    (#1243518)
  - Add missing BuildRequires and some other changes so that
    make check passes


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.5.1-5
changelog:
  - Append -stdc=gnu89 to CFLAGS (Work-around to c11 compatibility
    issues. Fix F23FTBFS, RHBZ#1239701).
  - Append V=1 to make-call to make building verbose.


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-19
changelog:
  - Fix issue with undefined symbol my_progname when try to load NetSNMP::TrapReceiver in perl script. (#1470004)


author: Adam Williamson <awilliam@redhat.com> -1:5.7.3-20
changelog:
  - Edit fix of issue with undefined symbol my_progname when try to load
    NetSNMP::TrapReceiver in perl script (#1470004)


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-0.35.20150915git
changelog:
  - ether-wake: add interface into message (#1149502)
  - latest upstream snapshot (ipx.patch & sctp-statistics.patch merged)


author: Zdenek Dohnal <zdohnal@redhat.com> - 2.0-0.37.20160329git
changelog:
  - latest upstream snapshot
  - adding HAVE_PLIP_TOOLS=1, HAVE_SERIAL_TOOLS=1, HAVE_ARP_TOOLS=1 into net-tools-config.h and net-tools-config.make
  - commenting out "/builddir/build/BUILDROOT/net-tools-2.0-0.44.20160912git.fc27.i386/usr/share/man/man8/rarp.8*" and its language alternatives in spec
  - adding "rm -rf /builddir/build/BUILDROOT/net-tools-2.0-0.44.20160912git.fc27.i386/usr/share/man/pt/man5" in spec


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.3-5
changelog:
  - Removed executables from the library to allow parallel installation
    of x86-64 and x86 packages. The executables had testing purpose, and
    may be re-introduced in a separate package if needed.


author: Steve Dickson <steved@redhat.com> 2.1.1-4.rc2
changelog:
  - Updated to the latest RC release: nfs-utils-2-1-2-rc2 (bz 1419351)
  - Fixed typo in nfs.sysconfig  (bz 1422249)


author: Steve Dickson <steved@redhat.com> 2.1.1-5.rc2
changelog:
  - Conditionally restart gssproxy now that config file is installed (bz 1440885)
  - systemd: Afters are also needed for the Wants=network-online.target (bz 1419351)
  - nfsdcltrack: silence some expected errors (bz 1445863)
  - Cleaned up fuzzy patches


author: Steve Dickson <steved@redhat.com> 2.1.1-5.rc4
changelog:
  - Updated to the latest RC releease: nfs-utils-2-1-2-rc4 (bz 1462218)
  - rpc.c: added include file so UINT16_MAX is defined


author: Paul Wouters <pwouters@redhat.com> - 4.1.10-2
changelog:
  - Do not use db files anymore, use --with-zonelistfile
  - Documentation utf fixes are upstreamed
  - Empty sysconfig file removed (still supported on epel6)
  - Remove timer/cron entry - now done by nsd itself
  - Update nsd.conf file


author: Paul Wouters <pwouters@redhat.com> - 4.1.16-1
changelog:
  - Updated to 4.1.16 (minimum response option)
  - Disable on-disk database per default (use ram only)
  - Minor updates to nsd.conf


author: Daiki Ueno <dueno@redhat.com> - 3.31.0-3
changelog:
  - Move signtool to %_libdir/nss/unsupported-tools, for:
    https://fedoraproject.org/wiki/Changes/NSSSigntoolDeprecation


author: Tom Callaway <spot@fedoraproject.org> - 2:2016.2.22-4
changelog:
  - apply patch for CVE-2017-0358
  - NOTE: Fedora does not setuid ntfs-3g, so it should not be vulnerable 
    but some users might make this change so we applied the patch anyways


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-40
changelog:
  - don't allow spoofed packet to enable symmetric interleaved mode
    (CVE-2016-1548)
  - don't crash on duplicate address in unconfig command (CVE-2016-2516)
  - check mode of new source in config command (CVE-2016-2518)
  - make MAC check resilient against timing attack (CVE-2016-1550)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-41
changelog:
  - don't disclose sensitive timestamps in ntpq/ntpdc responses (CVE-2015-8139)
  - drop spoofed packets sooner (CVE-2016-4954)
  - don't allow spoofed packets to reset associations using autokey
    (CVE-2016-4955)
  - check authentication before switching broadcast interleaved mode
    (CVE-2016-4956)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-43
changelog:
  - don't limit rate of packets from sources (CVE-2016-7426)
  - don't change interface from received packets (CVE-2016-7429)
  - fix calculation of root distance again (CVE-2016-7433)
  - require authentication for trap commands (CVE-2016-9310)
  - fix crash when reporting peer event to trappers (CVE-2016-9311)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.8p9-3
changelog:
  - replace ntpstat with shell script using ntpq
  - remove broadcast/multicast examples from default config
  - use pool directive in default config


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.8p10-1
changelog:
  - update to 4.2.8p10 (CVE-2016-9042 CVE-2017-6451 CVE-2017-6458 CVE-2017-6460
    CVE-2017-6462 CVE-2017-6463 CVE-2017-6464)


author: Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 1.0.3-5
changelog:
  - Use __isa_bits macro instead of list of 64-bit architectures - rhbz#1262388
  - drop duplicated libdir in configure call


author: Patrick Monnerat <pm@datasphere.ch> 1.9.0-2
changelog:
  - Patch "stealthy" fixes handling of stealthy connections.
    https://bugzilla.redhat.com/show_bug.cgi?id=1037717


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34-1
changelog:
  - open a connection to the bus for every service we're serving, instead of
    using just one for the lot of them, so that we can tell which service a
    client was attempting to contact if it sends a message to our unique
    connection address instead of a well-known name, like dbus-python does
  - tweak the logic for guessing which interface name is right when a request
    doesn't include one, so that it has a better chance of finding the right one
  - increase the initial size of the buffer that we pass to getpwnam_r in the
    pam_oddjob_mkhomedir module (#1198812)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.2-1
changelog:
  - fix a crasher in pam_oddjob_mkhomedir.so: remove an initialization step that
    should have been removed when the module was modified to accept larger
    replies (#1236970)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.3-1
changelog:
  - tweak initialization so that we set up for providing our D-Bus APIs before we
    register our names with the bus, so that we can handle any requests that
    arrive before the acknowledgement of that registration, which should make
    system activation a viable option


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.4-1
changelog:
  - when "prepend_user_name" is used, the user name is now added to the helper's
    command line after arguments that were specified in the helper "exec"
    attribute
  - resync with Fedora packaging


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 2.0.8-17
changelog:
  - Append -std=gnu89 to CFLAGS (Fix F23FTBFS, RHBZ#1239743).
  - Add %license.
  - Modernize spec.
  - Fix bogus changelog entry.


author: Petr Pisar <ppisar@redhat.com> - 2.0.8-18
changelog:
  - Modernize the specification file
  - License tag corrected to (GPLv2 and LGPLv2+ and BSD and MIT and GFDL)
  - Enable NAT support
  - Migrate from System V to systemd service (bug #1082236)


author: Petr Pisar <ppisar@redhat.com> - 2.0.8-20
changelog:
  - Log errors when opening conntracking table (bug #1316308)
  - Open conntracking table only if masquerading feature is requested
    (bug #1316308)


author: Ravindra Kumar <ravindrakumar@vmware.com> - 10.1.10-1
changelog:
  - Package new upstream version open-vm-tools-10.1.10-6082533.
  - Remove the patches that are no longer needed.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 10.1.10-3
changelog:
  - Replaced 'net-tools' dependency with 'iproute' (RHBZ#1496134).
  - Added resolutionKMS-wayland-2.patch with some new fixes.


author: Steve Jenkins <steve@stevejenkins.com> - 1.4.6-4
changelog:
  - Added Group: info for package and sub-packages (for EL5 and EL6)
  - Added ncurses-devel to BuildRequires (for EL5)
  - Added BuildRoot (for EL5)


author: Steve Jenkins <steve@stevejenkins.com> - 1.4.6-5
changelog:
  - Applied patch for Doxyfile.in issue (similar to Debian bug #759951)
  - Create symlink in prep to work around doxygen issue (Bugzilla #1208902)


author: Paul Wouters <pwouters@redhat.com> - 1.4.7-2
changelog:
  - Resolves rhbz#1219746 ods-signerd.service misplaced After= in section Service
  - Resolves rhbz#1220443 OpenDNSSEC fails to initialise a slot in softhsm on first install


author: Paul Wouters <pwouters@redhat.com> - 1.4.9-3
changelog:
  - Resolves: rbz#1303965 upgrade to opendnssec-1.4.9-1.fc23 breaks old installations
  - On initial install, after token init, also run ods-ksmutil setup


author: Matus Honek <mhonek@redhat.com> - 2.4.44-9
changelog:
  - NSS: Enhance OpenLDAP to support TLSv1.3 protocol with NSS (#1435692)
  - NSS: Rearrange ciphers-, parsing-, and protocol-related patches (#1435692)


author: Matus Honek <mhonek@redhat.com> - 2.4.45-1
changelog:
  - Rebase to version 2.4.45 (#1458081)
    * fixes CVE-2017-9287 (#1456712, #1456713)
  - Update the 'sources' file with new SHA512 hashes


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-1 + 0.10.2-5
changelog:
  - New upstream release (#1406204)
  - Cache supported OIDs for GSSAPI key exchange (#1395288)
  - Fix typo causing heap corruption (use-after-free) (#1409433)
  - Prevent hangs with long MOTD


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-2 + 0.10.2-5
changelog:
  - Fix ssh-agent cert signing error (#1416584)
  - Fix wrong path to crypto policies
  - Attempt to resolve issue with systemd


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-3 + 0.10.3-1
changelog:
  - Properly report errors from included files (#1408558)
  - New pam_ssh_agent_auth 0.10.3 release
  - Switch to SD_NOTIFY to make systemd happy


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-4 + 0.10.3-1
changelog:
  - Avoid sending the SD_NOTIFY messages from wrong processes (#1427526)
  - Address reports by coverity


author: Jakub Jelen <jjelen@redhat.com> - 7.5p1-2 + 0.10.3-2
changelog:
  - Fix various after-release typos including failed build in s390x (#1434341)
  - Revert chroot magic with SELinux


author: Tomáš Mráz <tmraz@redhat.com> 1.1.0e-1
changelog:
  - update to upstream version 1.1.0e
  - add documentation of the PROFILE=SYSTEM special cipher string (#1420232)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.0f-1
changelog:
  - update to upstream version 1.1.0f
  - SRP and GOST is now allowed, note that GOST support requires
    adding GOST engine which is not part of openssl anymore


author: Hedayat Vatankhah <hedayat.fwd+rpmchlog@gmail.com> - 1.68-1
changelog:
  - Update to upstream version 1.68, bug #1267779
  - Support a case where a kernel named vmlinuz/x is used under Gentoo, bug #1223237


author: Hedayat Vatankhah <hedayat.fwd+rpmchlog@gmail.com> - 1.70-1
changelog:
  - Update to upstream version 1.70, fixes #1275641
  - Fix bug #1236358 - os-prober duplicates grub entries for read/write btrfs
    subvolumes, thanks to Helmut Horvath
  - Fix bug #1236649 - os-prober does not detect os on btrfs partition without
    any subvolume


author: Neal Gompa <ngompa13@gmail.com> - 1.74-1
changelog:
  - Update to upstream version 1.74
  - Drop merged patches
  - Rediff remaining patches
  - Move newns to /usr/libexec/os-prober (debuginfo generation works)
  - Mark copyright file as license file


author: Daiki Ueno <dueno@redhat.com> - 0.23.4-2
changelog:
  - Split out command line tools to -tools subpackage, to avoid a
    multilib issue with the main package.  Suggested by Yanko Kaneti.


author: Sérgio Basto <sergio@serjux.com> - 15.14-1
changelog:
  - Update to 15.14 .
  - Rebase norar_cmake.patch
  - Minor improvement in snippet of documentation.
  - Drop patch1, from changelog build on s390 is fixed.
  - Drop p7zip-15.09-CVE-2015-1038.patch, from changelog if fixed.
  - Drop upstreamed p7zip_15.09-incorrect-fsf-address.patch .
  - Drop p7zip_15.09-no7zG_and_7zFM.patch, p7zip build is fixed.
  - Add sub-package p7zip-gui with 7zG.


author: Sérgio Basto <sergio@serjux.com> - 15.14-2
changelog:
  - Fix non-executable-in-bin for p7zipForFilemanager.
  - Remove p7zip_compress2.desktop to not duplicate the menu entries.
  - Also build 7zFM, rebuild p7zip_15.14_src_all-norar.tar.bz2, to build 7zFM
    instead 7zFM_do_not_use.


author: Sérgio Basto <sergio@serjux.com> - 15.14.1-1
changelog:
  - Update to 15.14.1
  - Revert 7zFM build, upstream recomends not build it
    http://sourceforge.net/p/p7zip/bugs/175/


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.16-1
changelog:
  - Update for new upstream tarball: Pacemaker-1.1.16,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.16
  - Adapt spec file more akin to upstream version including:
    . clarify licensing, especially for -doc (f01f734)
    . fix pacemaker-remote upgrade (779e0e3)
    . require python >= 2.6 (31ef7f0)
    . older libqb is sufficient (based on 30fe1ce)
    . remove openssl-devel and libselinux-devel as BRs (2e05c17)
    . make systemd BR pkgconfig-driven (6285924)
    . defines instead of some globals + error suppression (625d427)
  - Rectify -nagios-plugins-metadata declared license and install
    also respective license text


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.16-2.a39ea6491.git
changelog:
  - Update for (slightly stabilized) snapshot beyond Pacemaker-1.1.16
    (commit a39ea6491), including:
    . prevent FTBFS with new GCC 7 (a7476dd96)
  - Adapt spec file more akin to upstream version including:
    . better pre-release vs. tags logic (4581d4366)


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.17-0.1.rc1
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-1.1.17-rc1,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.17-rc1


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.17-0.1.rc2
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-1.1.17-rc2,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.17-rc2


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.17-0.1.rc3
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-1.1.17-rc3,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.17-rc3


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.17-0.1.rc4
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-1.1.17-rc4,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.17-rc4
  - Add an imposed lower bound for glib2 BuildRequires


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.17-1
changelog:
  - Update for new upstream tarball: Pacemaker-1.1.17,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.17


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.17-2
changelog:
  - Rebuilt to fix libqb vs. ld.bfd/binutils-2.29 incompatibility making
    some CLI executables unusable under some circumstances (rhbz#1503843)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.10-1
changelog:
  - don't close descriptors when we fork but don't exec to call kuserok(),
    because that can really confuse libraries that won't know we did that (should
    fix #1263745)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.12-1
changelog:
  - learn to set AFS tokens by deriving DES keys from session keys that aren't
    single-key DES keys, for better compatibility with OpenAFS 1.4.15/1.6.5 and
    later (ticket #2, #1076197)


author: Brian C. Lane <bcl@redhat.com> 3.2-19
changelog:
  - libparted: Remove fdasd geometry code from alloc_metadata (#1244833) (bcl)
  - parted: Display details of partition alignment failure (#726856) (bcl)
  - docs: Add list of filesystems for fs-type (#1311596) (bcl)
  - Use disk geometry as basis for ext2 sector sizes. (Steven.Lang)
  - parted: fix the rescue command (psusi)


author: Brian C. Lane <bcl@redhat.com> - 3.2-22
changelog:
  - tests: t3310-flags.sh: skip pc98 when sector size != 512 (bcl)
  - tests: Set optimal blocks to 64 for scsi_debug devices (bcl)
  - tests: t3310-flags.sh: Add tests for remaining table types (mike.fleetwood)
  - tests: t3310-flags.sh: Add test for dvh table flags (mike.fleetwood)
  - tests: t3310-flags.sh: Add test for mac table flags (mike.fleetwood)
  - libparted: Remove commented local variable from bsd_partition_set_flag()
    (mike.fleetwood)
  - libparted: Fix to report success when setting lvm flag on bsd table
    (mike.fleetwood)
  - tests: t3310-flags.sh: Add test for bsd table flags (mike.fleetwood)
  - tests: t3310-flags.sh: Stop excluding certain flags from being tested
    (mike.fleetwood)
  - tests: t3310-flags.sh: Query libparted for all flags to be tested
    (mike.fleetwood)
  - libparted: only IEC units are treated as exact (petr.uzel)
  - docs: Improve partition description in parted.texi (gareth.randall)
  - Add support for NVMe devices (petr.uzel)
  - libparted/dasd: correct the offset where the first partition begins
    (dongdwdw)


author: Brian C. Lane <bcl@redhat.com> - 3.2-25
changelog:
  + Updating to upstream patches
  - tests/t1701-rescue-fs wait for the device to appear. (bcl)
  - Increase timeout for rmmod scsi_debug and make it a framework failure (bcl)
  - libparted/dasd: add test cases for the new fdasd functions (dongdwdw)
  - libparted/dasd: add an exception for changing DASD-LDL partition table
    (dongdwdw)
  - libpartd/dasd: improve flag processing for DASD-LDL (dongdwdw)
  - parted/ui: remove unneccesary information of command line (dongdwdw)
  - parted: check the name of partition first when to name a partition (dongdwdw)
  - Add support for RAM drives (sparschauer)
  - Fix crash when localized (psusi)
  - libparted: Fix typo in hfs error message (sebras)
  - libparted: Fix MacOS boot support (laurent)
  - mac: copy partition type and name correctly (saproj)
  - libparted: Add support for atari partition tables (glaubitz)
  - libparted:tests: Move get_sector_size() to common.c (glaubitz)
  - tests: Update t0220 and t0280 for the swap flag. (bcl)
  - libparted: set swap flag on GPT partitions (aschnell)
  - libparted/dasd: add test cases for the new fdasd functions (dongdwdw)
  - libparted/dasd: add new fdasd functions (dongdwdw)
  - libparted/dasd: update and improve fdasd functions (dongdwdw)
  - libparted/dasd: unify vtoc handling for cdl/ldl (dongdwdw)
  - libparted: Don't warn if no HDIO_GET_IDENTITY ioctl (sparschauer)
  - libparted: Fix starting CHS in protective MBR (petr.uzel)
  - tests: Stop timing t9040 (#1172675) (bcl)


author: Lukas Berk <lberk@redhat.com> - 3.11.8-1
changelog:
  - Support newer kernels /proc/vmstat file contents (BZ 1396148)
  - Added pcp-selinux policy (BZs 1214090, 1381127, 1337968, 1398147)


author: Nathan Scott <nathans@redhat.com> - 3.11.9-1
changelog:
  - Fix pmchart chart legends toggling behaviour (BZ 1359961)
  - Improve multiple local context attr handling (BZ 1430248)
  - Fix error during installation of pcp-selinux (BZ 1433271)
  - Update to latest PCP sources.


author: Dave Brolley <brolley@redhat.com> - 3.11.10-1
changelog:
  - python api: handle non-POSIXLY_CORRECT getopt cases (BZ 1289912)
  - Fix pmchart reaction to timezone changes from pmtime (BZ 968823)
  - Require Qt5 for Fedora.
  - Update to latest PCP sources.


author: Lukas Berk <lberk@redhat.com> - 3.12.0-1
changelog:
  - Fix pcp-atop failure in open-ended write mode (BZ 1431292)
  - Resolve additional selinux policy issues (BZ 1317515)
  - Improve poor pmlogconf performance (BZ1376857)
  - Update to latest PCP sources.


author: Petr Pisar <ppisar@redhat.com> - 8.40-2
changelog:
  - Fix pcregrep multi-line matching --only-matching option (upstream bug #1848)
  - Fix CVE-2017-6004 (a crash in JIT compilation) (upstream bug #2035)
  - Fix a potenial buffer overflow in formatting a pcregrep error message
    (upstream bug #2037)


author: Petr Pisar <ppisar@redhat.com> - 8.40-5
changelog:
  - Fix a crash in pcretest when \O directive was supplied with too big number
    (upstream bug #2044)
  - Document pcretest input cannot contain binary zeroes (upstream bug #2045)
  - Fix CVE-2017-7244 (a crash when finding a Unicode property for a character
    with a code point greater than 0x10ffff in UTF-32 library while UTF mode is
    disabled) (upstream bug #2052)


author: Petr Pisar <ppisar@redhat.com> - 8.40-7
changelog:
  - Fix a buffer overflow in pcretest tool when copying a string in UTF-32 mode
  - Fix CVE-2017-7186 in JIT mode (a crash when finding a Unicode property for
    a character with a code point greater than 0x10ffff in UTF-32 library while
    UTF mode is disabled) (bug #1434504)


author: Petr Pisar <ppisar@redhat.com> - 10.23-8
changelog:
  - Fix DFA matching a lookbehind assertion that has a zero-length branch
    (PCRE2 oss-fuzz issue 1859)
  - Fix returned offsets from regexec() when REG_STARTEND is used with starting offset
    greater than zero (upstream bug #2128)


author: Petr Pisar <ppisar@redhat.com> - 10.30-0.1.RC1
changelog:
  - 10.30-RC1 bump
  - Heap-based matching implementation replaced stack-based one
  - SELinux-friendly JIT enabled


author: Adam Williamson <awilliam@redhat.com> - 0.9.155-1
changelog:
  - Latest release 0.9.155
  - Fix tests with Python 3.6 and lxml 3.7
  - Package the license as license, not doc
  - Use -f param for rm when wiping test directories as they are nested now


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.156-2
changelog:
  - Fixed Cross-site scripting (XSS) vulnerability in web UI CVE-2017-2661
  - Re-added support for clufter as it is now available for Python 3


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.156-3
changelog:
  - Fixed python locales issue preventing build-time tests to pass
  - Bundle rubygem-tilt which is being retired from Fedora


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 1.4.23-1
changelog:
  - Updated to 1.4.23 (#1328849, #1330087)
  - Added gpg verification of package as part of build process


author: Paul Howarth <paul@city-fan.org> - 0.55-1
changelog:
  - Update to 0.55
    - Error opening ErrFile with PerlIO_findFILE (CPAN RT#101883)
    - Minor updates for BDB 6.1
  - Classify buildreqs by usage


author: Paul Howarth <paul@city-fan.org> - 2.070-1
changelog:
  - Update to 2.070
    - Fix wrong APPEND_OUTPUT logic (CPAN RT#119005, CPAN RT#119141)
    - Fix some gcc warnings (CPAN RT#100817, CPAN RT#105647)
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2.070-1
changelog:
  - Update to 2.070
    - Fix compilation warning from inflate.c (CPAN RT#107642)
    - Fix wrong FLAG_APPEND logic, analog to Bzip2 (CPAN RT#119007)
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2.071-1
changelog:
  - Update to 2.071
    - One (last?) compilation warning in bundled inflate.c (CPAN RT#119580,
      https://github.com/madler/zlib/issues/111)


author: Paul Howarth <paul@city-fan.org> - 3.0230-1
changelog:
  - Update to 3.0230
    - Fix minor gcc compilation warnings
    - Add some core compat. warnings for gcc/clang compat. compilers


author: Paul Howarth <paul@city-fan.org> - 3.0232-1
changelog:
  - Update to 3.0232
    - Fix for MSVC 2015/14.0 and newer with changed nan/inf (GH#85)
    - Added appveyor CI
    - Silence 32bit debugging format warning
    - Stabilize decode_hv hook (Coverity)
    - Ignore sv_utf8_downgrade errors (Coverity)
  - BR: perl-generators unconditionally


author: Paul Howarth <paul@city-fan.org> - 3.0233-1
changelog:
  - Update to 3.0233
    - 5.6 test fixes, silence some cc warnings, add coverage and release targets,
      fix appveyor


author: Paul Howarth <paul@city-fan.org> - 3.0236-1
changelog:
  - Update to 3.0236
    - Fix and unify utf8 handling with 5.6.2, improve many utf8 tests (GH#88)
    - Add tests for boolean sv_yes and sv_no (GH#88)
    - Check for correct module in %INC (GH#89)
    - Fix appveyor smoke with latest strawberry, use $Config{make} (GH#91)
    - Fix inf/nan for strawberry 5.26
    - Disallow duplicate keys by default; only allow them in relaxed mode (GH#75)
    - De-fragilize t/96_mojo.t false test to ""
    - Stringify true again as "1", not as "true" due to popular demand (GH#87)


author: Paul Howarth <paul@city-fan.org> - 3.0237-1
changelog:
  - Update to 3.0237
    - Relax inf/nan tests as in t/op/infnan.t for windows: we cannot know if
      msvcrt.dll or the new ucrt.dll is used, so try a list of valid values


author: Paul Howarth <paul@city-fan.org> - 3.0239-1
changelog:
  - Update to 3.0239
    - Make printing of numbers on perls earlier than 5.22 locale-insensitive, to
      produce a dot as decimal separator (#96)
    - Fix compilation under Windows (#98)


author: Petr Pisar <ppisar@redhat.com> - 1.50-2
changelog:
  - Adjust to sqlite-3.11.0 (bug #1309675)
  - Rebase Remove-bundled-source-extentions.patch to prevent from packing backup
    files


author: Paul Howarth <paul@city-fan.org> - 0.05-10
changelog:
  - Classify buildreqs by usage
  - Simplify find commands using -empty and -delete
  - Make %files list more explicit


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.0-392
changelog:
  - 5.26.0 bump (see <http://search.cpan.org/dist/perl-5.26.0/pod/perldelta.pod>
    for release notes)
  - Update sub-packages
  - Update or remove patches
  - Enable hardening (bug #1238804)
  - Use 64 bit ints on 32 bit platforms (bug #1268828)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-394
changelog:
  - Make File::Glob more resistant against degenerative matching (RT#131211)
  - Fix a crash when calling a subroutine from a stash (RT#131085)
  - Fix an improper cast of a negative integer to an unsigned 8-bit type (RT#131190)
  - Fix cloning :via handles on thread creation (RT#131221)
  - Fix glob UTF-8 flag on a glob reassignment (RT#131263)
  - Fix a buffer overflow in my_atof2() (RT#131526)
  - Fix handling backslashes in PATH environment variable when executing
    "perl -S" (RT#129183)
  - Fix a conditional jump on uninitilized memory in re_intuit_start() (RT#131575)
  - Fix spurious "Assuming NOT a POSIX class" warning (RT#131522)
  - Provide perl-interpreter RPM dependency symbol
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-395
changelog:
  - perl package installs all core modules, interpreter moved to
    perl-interpreter package, perl-core package is obsolete
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>
    (bug #1464903)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-398
changelog:
  - Fix reporting malformed UTF-8 character (RT#131646)
  - Fix File::Glob rt131211.t test random failures
  - Fix t/op/hash.t test random failures
  - Parse caret variables with subscripts as normal variables inside ${...}
    escaping (RT#131664)
  - Do not display too many bytes when reporting malformed UTF-8 character
  - Fix select called with a repeated magical variable (RT#131645)
  - Fix error message for "our sub foo::bar" (RT#131679)
  - Fix executing arybase::_tie_it() in Safe compartement (RT#131588)
  - Fix handling attribute specification on our variables (RT#131597)
  - Fix splitting non-ASCII strings if unicode_strings feature is enabled (RT#130907)
  - Fix compiler warnings in code generated by ExtUtils::Constant
    (CPAN RT#63832, CPAN RT#101487)
  - Fix GCC version detection for -D_FORTIFY_SOURCE override (RT#131809)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-399
changelog:
  - Fix unreliable Time-HiRes tests (CPAN RT#122819)
  - Do not require $Config{libs} providers by perl-devel package (bug #1481324)


author: Paul Howarth <paul@city-fan.org> - 2.59-1
changelog:
  - Update to 2.59
    - Remove Build.PL, fix permissions, fix for missing gdlib-config
    - Fix feature extraction ≥ 2.2 (CPAN RT#119459)
    - Add alpha method
    - Improve option handling
    - Fix metadata
    - Fix Jpeg magic number detection (CPAN RT#26146)
    - Fix RGB-HSV roundtrips (CPAN RT#120572)
    - Fix -print-search-dirs errors (CPAN RT#106265)
    - Co-maint to RURBAN
    - Add hv_fetchs, CI smokers
    - Add GD::VERSION_STRING API
    - Honor --lib_gd_path specific gdlib-config
    - Loosen the comparison tests with GDIMAGETYPE ne gd2
    - Improve gdlib-config parsing (GH#17), esp. with 2.0.34
    - Error on failing libgd calls
    - Fix colorClosestAlpha, colorAllocateAlpha
    - Add missing documentation
  - This release by RURBAN → update source URL
  - Switch to ExtUtils::MakeMaker flow
  - Drop legacy Group: tag


author: Paul Howarth <paul@city-fan.org> - 2.60-1
changelog:
  - Update to 2.60
    - Add missing methods newFromWBMP, newFromXbm (CPAN RT #68784) and some
      missing docs
    - Add --lib_fontconfig_path, --fcgi options
    - Rewrote most of the XS code
    - Clean up Makefile.PL (GH#20)


author: Paul Howarth <paul@city-fan.org> - 2.64-1
changelog:
  - Update to 2.64
    - Add CONFIGURE_REQUIRES META
    - Add --gdlib_config_path
    - Add Image Filters: scatter, pixelate, negate, grayscale, brightness,
      contrast, color, selectiveBlur, edgeDetectQuick, gaussianBlur, emboss,
      meanRemoval, smooth, copyGaussianBlurred
    - Add palette methods: createPaletteFromTrueColor, neuQuant (but
      discouraged), colorMatch
    - Add interpolation methods: copyScale, copyRotateInterpolated,
      interpolationMethod
    - Add double GD::VERSION
    - Add all gd.h constants
    - Fixed wrong <5.14 code generated with ExtUtils::Constants (CPAN RT#121297);
      only generate const-xs.inc when it's missing
    - Add -liconv on hpux too (our pkgconfig parser cannot handle it)
    - Renamed VERSION() to LIBGD_VERSION() (CPAN RT#121307); it was treated
      magically by "use GD 2.18"
    - Update doc for LIBGD_VERSION()
    - Fix 5.6.2, which does not have float in its typemap


author: Paul Howarth <paul@city-fan.org> - 2.66-1
changelog:
  - Update to 2.66
    - Throw proper error on newFrom* with not-existing file
    - Add t/transp.t from CPAN RT#40525
    - Improve multiple gd.h warning (CPAN RT#54366)
    - Better documentation for GD::Simple->arc
    - Fix ANIMGIF with libgd 2.3.0-dev


author: Paul Howarth <paul@city-fan.org> - 0.418-3
changelog:
  - Incorporate package review feedback (#1437588)
    - Fix URL
    - Unbundle bundled modules except private inc::Config::AutoConf::LMU


author: Paul Howarth <paul@city-fan.org> - 0.421-1
changelog:
  - Update to 0.421
    - Fix a lot of potential memory leaks when callbacks throw exceptions
    - Add some new functions: qsort, binsert, bremove, listcmp, arrayify
      (CPAN RT#17230), samples (CPAN RT#77562), minmaxstr (CPAN RT#106401),
      lower_bound, upper_bound, equal_range, frequencies, occurances, mode
      (CPAN RT#91991), zip6 (CPAN RT#42921), reduce_0, reduce_1, reduce_u
    - Improve tests
    - Make List::MoreUtils::XS independent from List::MoreUtils
      Note that List::MoreUtils::XS doesn't guarantee API stability: this
      feature is only provided through List::MoreUtils as frontend
    - Improve configure toolchain to use Config::AutoConf 0.315
    - Speed up some inner loops by hinting the expected result
    - Fix mind screwed up issue in upper_bound and reduce elements visited in
      equal_range
    - Correct license in META (CPAN RT#122702)
    - Fix issues with -DPERL_IMPLICIT_SYS on Windows with Strawberry-Perl


author: Paul Howarth <paul@city-fan.org> - 0.422-1
changelog:
  - Update to 0.422
    - Rename 'occurances' into 'occurrences' (CPAN RT#91991, CPAN RT#122806)
    - Add DESCRIPTION to Pod clarifying the role of List::MoreUtils::XS
    - Improve Makefile.PL regarding some build artifacts


author: Paul Howarth <paul@city-fan.org> - 0.423-1
changelog:
  - Update to 0.423
    - Fix dealing with lists with one element on bremove/binsert (GH#2)
    - Add support for compilers before C99
    - Fix some 32-bit compiler warnings
    - Add support for compilers without statement expression feature


author: Paul Howarth <paul@city-fan.org> - 0.426-1
changelog:
  - Update to 0.426
    - Fix broken format in part (GH#4)
    - Fix gcc 4.7 sequence point warning (GH#5)
    - Fix incorrect padname resolving for perl > 5.21.6 (CPAN RT#122883)
    - Fix compiling issue on CentOS 4 and CentOS 5


author: Paul Howarth <paul@city-fan.org> - 1.79-1
changelog:
  - Update to 1.79
    - Patch to fix a few inline variable declarations that cause errors for older
      compilers
    - Patch: Generated C code is not compatible with MSVC, AIX cc, probably
      others; added some PREINIT blocks and replaced 2 cases of INIT with PREINIT
    - Fix compile failure if the OpenSSL library it's built against has
      compression support compiled out
    - Added RSA_get_key_parameters() to return a list of pointers to RSA key
      internals (only available prior to OpenSSL 1.1)
    - Fix some documentation typos
    - Testing with openssl-1.1.0b


author: Paul Howarth <paul@city-fan.org> - 1.80-1
changelog:
  - Update to 1.80
    - Fix unexpected changes in the control flow of the Perl program that seemed
      to be triggered by the ticket key callback


author: Paul Howarth <paul@city-fan.org> - 1.81-1
changelog:
  - Update to 1.81
    - Enable RSA_get_key_parameters with LibreSSL - again
    - Fixed memory leak in X509_get_subjectAltNames
    - Added . to lib path in Makefile.PL to accommodate people who are using a
      perl with -Ddefault_inc_excludes_dot
    - Fixed build failure if engine support not present
    - Improvements to get_my_thread_id to work around possibility of ERRSV not
      being defined, e.g. on OpenWRT


author: Paul Howarth <paul@city-fan.org> - 4.077-1
changelog:
  - Update to 4.077
    - Added method is_local() to Lite.pm
    - Fix Util/Makefile.PL to work around bug in Android's sh
    - Add method full6m()
    - Fix Util/Makefile.PL issue with clang compiler (CPAN RT#86831)
  - Classify buildreqs by usage
  - Use %license where possible


author: Paul Howarth <paul@city-fan.org> - 4.079-1
changelog:
  - Update to 4.079
    - Correct non-suppression of leading zeros in certain instances of new_no use
    - Put in missing code to propagate NetAddr::IP::Lite :nofqdn to IP.pm
  - Explicitly BR: perl-devel, needed for EXTERN.h
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 0.28-10
changelog:
  - Classify buildreqs by usage
  - Use %license where possible
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2.2-1
changelog:
  - Update to 2.2
    - Convert to PERL_NO_GET_CONTEXT
      https://github.com/robinhouston/PadWalker/pull/2
  - Explicitly BR: perl-devel, needed for EXTERN.h


author: Paul Howarth <paul@city-fan.org> - 0.116-1
changelog:
  - Update to 0.116
    - Changes rephrasing
    - Restore 5.6 compatibility
    - Replace docs with a link to Ref::Util


author: Paul Howarth <paul@city-fan.org> - 0.116-2
changelog:
  - Incorporate package review feedback (#1450440)
    - Drop EL6-isms as we need Test::More 0.94, which EL-6 will never have


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - gailookup.pl.in: Add -P option to ease specification of port number
    - gailookup.pl.in: Add awareness of AI_ALL and AI_V4MAPPED
    - gailookup.pl.in: Add -r option to do reverse lookup
    - System inet_ntop broken in darwin (CPAN RT#113005)
    - Makefile.PL: Make Socket6 buildable on Android (CPAN RT#98181)
  - Simplify find commands using -delete
  - Explicitly BR: perl-devel, needed for EXTERN.h


author: Paul Howarth <paul@city-fan.org> - 0.28-1
changelog:
  - Update to 0.28
    - aclocal.m4 (IPv6_CHECK_INET_NTOP): inet_ntop(3) may return an
      IPv4-compatible IPv6 address (CPAN RT#113950)
  - BR: perl-generators


author: Petr Pisar <ppisar@redhat.com> - 1:2.56-368
changelog:
  - Fix a stack buffer overflow in deserialization of hooks (RT#130635)
  - Fix a memory leak of a class name from retrieve_hook() on an exception
    (RT#130635)


author: Paul Howarth <paul@city-fan.org> - 0.13-1
changelog:
  - Update to 0.13
    - Reformatted Changes to follow basic format in CPAN::Changes::Spec
    - Make tests pass without . in @INC


author: Paul Howarth <paul@city-fan.org> - 0.15-1
changelog:
  - Update to 0.15
    - Fix uninitialized warning in test on perls < 5.8.6 (CPAN RT#104510)
    - Repository moved to the github p5sagit organization (the primary is on
      shadowcat, mirrored to github)
  - Explicitly BR: perl-devel, needed for EXTERN.h


author: Paul Howarth <paul@city-fan.org> - 0.18-1
changelog:
  - Update to 0.18
    - Support binary and unicode symbol names (PR#8)
    - Fixed parsing error where the name contains a single colon but the last
      separator is ::


author: Paul Howarth <paul@city-fan.org> - 0.21-1
changelog:
  - Update to 0.21
    - Fix occasional segmentation fault on OpenBSD when malloc randomization
      causes nameptr to be at the beginning of the page (CPAN RT#117072)


author: Paul Howarth <paul@city-fan.org> - 1.1-23
changelog:
  - Fix FTBFS due to missing buildreq perl-devel
  - Simplify find commands using -empty and -delete
  - Make %files list more explicit


author: Petr Pisar <ppisar@redhat.com> - 1:2.0129-5
changelog:
  - Fix CVE-2017-10672 (use-after-free by controlling the arguments to
    a replaceChild call) (bug #1470205)


author: Paul Howarth <paul@city-fan.org> - 0.63-1
changelog:
  - Update to 0.63
    - Fix memory leaks (GH#48)
  - BR: perl-generators
  - Simplify find command using -empty


author: Paul Howarth <paul@city-fan.org> - 0.71-1
changelog:
  - Update to 0.71
    - Merge with libyaml 0.1.7 upstream
    - cperl fixes for fake_signatures
    - libyaml fix C++-compat errors
    - Improve Makefile for Win32
    - Improve ppport_sort.h
    - Implement new NonStrict mode (for perl5 compat)
    - libyaml reformat, minor optimizations, fix warnings
    - Update documentation
    - Use error codes, return undef on error
    - Abstract the loader functionality to load_impl(), dump_impl() not yet
    - Rearrange static funcs (not decl in header)
    - DumpFile,LoadFile is now XS only, and do accept mg pv, io objects and
      fileglobs; support filename in error messages
    - Support $YAML::XS::NonStrict loader
    - Add dumper options Indent, BestWidth, Canonical, Unicode, Encoding,
      LineBreak, OpenEnded (kept defaults)
    - Add loader option NonStrict, Encoding (kept defaults)
    - Fix default emitter_set_width (2 ⇒ 80)
    - Fix the tests for the new default IndentlessMap=0 and check also
      IndentlessMap=1
    - Enable 2 more test/glob.t tests
    - Fix dump_yaml in test/TestYAMLTests.pm
    - Avoid duplicate checks against NULL
  - This release by RURBAN → update source URL


author: Paul Howarth <paul@city-fan.org> - 1:0.64-1
changelog:
  - Update to 0.64
    - use lib FindBin::Bin in tests, preparing for perl 5.26 where '.' gets
      removed from @INC (GH#54)
    - Use the latest libyaml sources
    - Lazy load B::Deparse for faster startup time (GH#52, GH#53)
  - Drop redundant Group: tag
  - Add provide for bundled(libyaml)


author: Paul Howarth <paul@city-fan.org> - 1:0.65-1
changelog:
  - Update to 0.65
    - Prevent warning about unused variables (GH#59)
    - Clarify documentation about exported functions


author: Dogtag Team <pki-devel@redhat.com> 10.4.3-1
changelog:
  - dogtagpki Pagure Issue #1359 - dogtag should support GSSAPI based auth in
    conjuction with FreeIPA (ftweedal)
  - dogtagpki Pagure Issue #1408 - Key archival using AES (alee)
  - dogtagpki Pagure Issue #2520 - CA certificate profiles: the startTime
    parameter is not working as expected. (jmagne)
  - dogtagpki Pagure Issue #2588 - profile modification cannot remove existing
    config parameters (ftweedal)
  - dogtagpki Pagure Issue #2610 - PKCS12: upgrade to at least AES and SHA2
    (ftweedal)
  - dogtagpki Pagure Issue #2617 - Allow CA to process pre-signed CMC
    non-signing certificate requests (cfu)
  - dogtagpki Pagure Issue #2642 - Missing ClientIP and ServerIP in audit log
    when pki CLI terminates SSL connection (edewata)
  - dogtagpki Pagure Issue #2643 - Session timeout for PKI console (edewata)
  - updated JSS dependencies


author: Dogtag Team <pki-devel@redhat.com> 10.4.4-1
changelog:
  - dogtagpki Pagure Issue #1663 - Add SCP03 support (jmagne)
  - dogtagpki Pagure Issue #2522 - cannot extract generated private key from
    KRA when HSM is used. (vakwetu)
  - dogtagpki Pagure Issue #2644 - pkispawn returns before tomcat is ready
    (cheimes)
  - dogtagpki Pagure Issue #2665 - CAInfoService: retrieve KRA-related values
    from the KRA (ftweedal)
  - dogtagpki Pagure Issue #2675 - CMC: cmc.popLinkWitnessRequired=false would
    cause error (cfu)
  - dogtagpki Pagure Issue #2777 - pkispawn of clone install fails with
    InvalidBERException (ftweedal)
  - dogtagpki Pagure Issue #2680 - kra unable to extract symmetric keys
    generated on thales hsm (vakwetu)
  - Updated "jss" build and runtime requirements


author: Dogtag Team <pki-devel@redhat.com> 10.4.5-1
changelog:
  - dogtagpki Pagure Issue #2618 - Allow CA to process pre-signed CMC renewal
    non-signing cert requests (cfu)
  - dogtagpki Pagure Issue #2641 - Ensuring common audit log correctness
    (edewata)
  - dogtagpki Pagure Issue #2655 - Adding serial number into
    CERT_REQUEST_PROCESSED audit event. (edewata)
  - dogtagpki Pagure Issue #2673 - allow enrollment key signed CMC with identity
    proof (cfu)
  - dogtagpki Pagure Issue #2674 - CA brought down during separate KRA instance
    creation (mharmsen)
  - dogtagpki Pagure Issue #2683 - exception Invalid module "--ignore-banner"
    when defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help
    (edewata)
  - dogtagpki Pagure Issue #2684 - CA installation with HSM in FIPS mode fails
    (jmagne)
  - dogtagpki Pagure Issue #2685 - Add "is_fips_enabled()" method to Python
    pkispawn logic (mharmsen)
  - dogtagpki Pagure Issue #2690 - Inconsistent CERT_REQUEST_PROCESSED event in
    ConnectorServlet. (edewata)
  - dogtagpki Pagure Issue #2693 - Incorrect audit event outcome for
    agent-rejected cert request. (edewata)
  - dogtagpki Pagure Issue #2694 -Incorrect audit event outcome for
    agent-canceled cert request. (edewata)
  - dogtagpki Pagure Issue #2696 - CA CS.cfg shows default port (mharmsen)


author: Dogtag Team <pki-devel@redhat.com> 10.4.6-1
changelog:
  - dogtagpki Pagure Issue #2540 - Creating symmetric key (sharedSecret)
     using tkstool is failing when operating system is in FIPS mode. (jmagne)
  - dogtagpki Pagure Issue #2651 - Adding CRL_GENERATION audit event.
    (edewata)
  - dogtagpki Pagure Issue #2660 - CA Server installation with HSM fails
    (jmagne)
  - dogtagpki Pagure Issue #2699 - Enabling all subsystems on startup
    (edewata)
  - dogtagpki Pagure Issue #2710 - Key recovery on token fails because
    key record is not marked encrypted (vakwetu)
  - dogtagpki Pagure Issue #2711 - LWCA creation fails (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.4.7-1
changelog:
  - Require "selinux-policy-targeted >= 3.13.1-159" as a runtime requirement
  - Require "tomcatjss >= 7.2.3" as a build and runtime requirement
  - dogtagpki Pagure Issue #1663 - Add SCP03 support (jmagne)
  - dogtagpki Pagure Issue #2556 - pkispawn fails to create PKI subsystem
    on FIPS enabled system (edewata)
  - dogtagpki Pagure Issue #2674 - CA brought down during separate KRA
    instance creation (edewata)
  - dogtagpki Pagure Issue #2676 - pkispawn fails occasionally with this
    failure ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
  - dogtagpki Pagure Issue #2687 - Upgrade script for keepAliveTimeout
    parameter (edewata)
  - dogtagpki Pagure Issue #2707 - SubCA installation failure with 2 step
    installation in fips enabled mode (edewata)
  - dogtagpki Pagure Issue #2713 - Build failure due to Pylint issues (cheimes)
  - dogtagpki Pagure Issue #2714 - Classpath problem while trying to run pki
    CLI (edewata)
  - dogtagpki Pagure Issue #2717 - Certificate import using pki
    client-cert-import is asking for password when already provided (edewata)
  - dogtagpki Pagure Issue #2721 - Key recovery using externalReg fails with
    java null pointer exception on KRA (vakwetu)
  - dogtagpki Pagure Issue #2726 - client-cert-import --ca-cert should import
    CA cert with trust bits "CT,C,C" (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.4.8-1
changelog:
  - dogtagpki Pagure Issue #2540 - Creating symmetric key (sharedSecret)
    using tkstool is failing when operating system is in FIPS mode. (jmagne)
  - dogtagpki Pagure Issue #2617 - Allow CA to process pre-signed CMC
    non-signing certificate requests (cfu)
  - dogtagpki Pagure Issue #2619 - Allow CA to process pre-signed CMC
    revocation non-signing cert requests (cfu)
  - dogtagpki Pagure Issue #2643 - Session timeout for PKI console
    (edewata)
  - dogtagpki Pagure Issue #2719 - change the way aes clients refer to
    aes keysets (vakwetu)
  - dogtagpki Pagure Issue #2722 - dont reuse IVs in the CMC code
    (vakwetu)
  - dogtagpki Pagure Issue #2728 - In keywrap mode, key recovery on
    KRA with HSM causes KRA to crash (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.4.8-2
changelog:
  - dogtagpki Pagure Issue #2721 - Key recovery using externalReg fails
    with java null pointer exception on KRA (vakwetu)
  - dogtagpki Pagure Issue #2737 - CMC: check HTTPS client
    authentication cert against CMC signer (cfu)
  - dogtagpki Pagure Issue #2741 - Unable to find keys in the p12 file
    after deleting the any of the subsystem certs from it (ftweedal)
  - dogtagpki Pagure Issue #2745 - Platform Dependent Python Import (cheimes)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.0-0.rc1.2
changelog:
  - Actually honor with/without libimaevm option
  - ima-evm-utils-devel >= 1.0 is required for rpm >= 4.14.0


author: Ray Strode <rstrode@redhat.com> - 0.9.3-0.6.git
changelog:
  - Fix color palette issue
  - Fix splash at shutdown (if shutdown takes longer than 5 secs)
  - Make sure text based splashes update terminal size when fbcon loads


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-5
changelog:
  - semanage: Unify argument handling (#1398987)
  - setfiles: set up a logging callback for libselinux
  - setfiles: Fix setfiles progress indicator
  - setfiles: stdout messages don't need program prefix
  - setfiles: don't scramble stdout and stderr together (#1435894)
  - restorecond: Decrease loglevel of termination message (#1264505)
  - fixfiles should handle path arguments more robustly
  - fixfiles: handle unexpected spaces in command
  - fixfiles: remove useless use of cat (#1435894)
  - semanage: Add checks if a module name is passed in (#1420707)
  - semanage: fix export of fcontext socket entries (#1435127)
  - selinux-autorelabel: remove incorrect redirection to /dev/null (#1415674)


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-7
changelog:
  - Make 'sepolicy manpage' and 'sepolicy transition' faster
  - open_init_pty: restore stdin/stdout to blocking upon exit
  - fixfiles: do not dereference link files in tmp
  - fixfiles: use a consistent order for options to restorecon
  - fixfiles: don't ignore `-F` when run in `-C` mode
  - fixfiles: remove bad modes of "relabel" command
  - fixfiles: refactor into the `set -u` dialect
  - fixfiles: if restorecon aborts, we should too
  - fixfiles: usage errors are fatal
  - fixfiles: syntax error
  - fixfiles: remove two unused variables
  - fixfiles: tidy up usage(), manpage synopsis
  - fixfiles: deprecate -l option
  - fixfiles: move logit call outside of redirected function
  - fixfiles: fix logging about R/O filesystems
  - fixfiles: clarify exclude_dirs()
  - fixfiles: remove (broken) redundant code


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.113-8
changelog:
  - Use %license, license needs to be in -libs as it's the only guaranteed installed package
  - Move to mozjs38
  - Other upstream fixes
  - Spec cleanups


author: Miloslav Trmač <mitr@redhat.com> - 0.113-12
changelog:
  - Fix a memory leak in PolkitPermission.
    Patch by Rui Matos <tiagomatos@gmail.com>
    Resolves: #1433915


author: Miloslav Trmač <mitr@redhat.com> - 0.1-2
changelog:
  - Add a comment above License about SRPM-only licenses
  - Reword Summary: to avoid a rpmlint warning
  - Move INSTALL= to the %install section


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.2.0-1
changelog:
  - New version
    Resolves: rhbz#1427860
  - De-fuzzified patches
  - Dropped timestamps patch (upstreamed)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.2.1-1
changelog:
  - New version
    Resolves: rhbz#1460474
  - Updated pflogsumm to 1.1.5
  - Fixed warnings if IPv6 addresses are in the log
    Resolves: rhbz#1384871


author: Petr Kubat <pkubat@redhat.com> - 9.6.4-1
changelog:
  - update to 9.6.4 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-4.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.5-1
changelog:
  - update to 9.6.5 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-5.html


author: Petr Kubat <pkubat@redhat.com> - 09.05.0400-1
changelog:
  - rebase to latest upstream version, per release notes:
    https://odbc.postgresql.org/docs/release.html


author: Petr Kubat <pkubat@redhat.com> - 09.05.0400-2
changelog:
  - once again revert upstream commit d5374bcc4d
  - also revert its accompanying testsuite commit eb480e19ee


author: Michal Sekletar <msekleta@redhat.com> - 2.4.7-7
changelog:
  - prevent running into issues caused by undefined behavior (pointers of incompatible types aliasing the same object)


author: Paul Howarth <paul@city-fan.org> - 1.3.5d-3
changelog:
  - Properly allocate (and clear) the UMAC contexts, to fix segfault in mod_sftp
    (#1420365, upstream bug 4287)


author: Paul Howarth <paul@city-fan.org> - 1.3.5e-1
changelog:
  - Update to 1.3.5e
    - SFTP clients using umac-64@openssh.com digest failed to connect
      (upstream bug 4287)
    - SFTP rekeying failure with ProFTPD 1.3.5d, caused by null pointer
      dereference (upstream bug 4288)
    - AllowChrootSymlinks off did not check entire DefaultRoot path for symlinks
      (CVE-2017-7418, upstream bug 4295)
  - Change shellbangs in shipped perl scripts to use system perl
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - /etc/pam.d/password-auth always available now
    - pcre 7.0 or later always available now


author: Paul Howarth <paul@city-fan.org> - 1.3.5e-2
changelog:
  - AllowChrootSymlinks off could cause login failures depending on filesystem
    permissions: use the IDs of the logging-in user to perform the directory
    walk, looking for symlinks, to be more consistent with similar checks done
    during login (#1443507, upstream bug 4306)
  - Crypt::CrackLib always available now


author: Paul Howarth <paul@city-fan.org> - 1.3.6-1
changelog:
  - Update to 1.3.6 (see NEWS for details)
  - Update mod_vroot to 0.9.5 (API compatibility with 1.3.6)
  - Add upstream fixes for flaky API tests
    (https://github.com/proftpd/proftpd/issues/483)
    (https://github.com/proftpd/proftpd/pull/510)
    (https://github.com/proftpd/proftpd/pull/514)
  - Add functionality to disable external network tests
    (https://github.com/proftpd/proftpd/pull/497)
  - Update template TLS configuration
  - PCRE 7.0 always available for use now
  - Disable PCRE support for now as JIT compiler has SELinux issues
    (https://bugs.exim.org/show_bug.cgi?id=1749)
  - Update proftpd.service to use Type=simple rather than Type=forking
    (https://github.com/proftpd/proftpd/pull/506)
  - Remove redundant bind() to controls socket
    (https://github.com/proftpd/proftpd/issues/501)
  - Fix similars functionality and unit test
    (https://github.com/proftpd/proftpd/pull/513)
  - Integration tests can use system Test::Unit now
  - tcpd.h can always be found in tcp_wrappers-devel now


author: Paul Howarth <paul@city-fan.org> - 1.3.6-3
changelog:
  - mod_sftp failed to check shadow password information when publickey
    authentication used (http://bugs.proftpd.org/show_bug.cgi?id=4308)
  - Use of "AllowEmptyPasswords off" broke SFTP/SCP logins
    (http://bugs.proftpd.org/show_bug.cgi?id=4309)


author: Mat Booth <mat.booth@redhat.com> - 3.3.1-2
changelog:
  - Make OSGi dependency on sun.misc package optional. This package is not
    available in all execution environments and will not be available in Java 9.


author: Jan Rybar <jrybar@redhat.com> - 23.1
changelog:
  - Rebase to the newest upstream official release
  - Source0 updated to latest functional SourceForge URL format
  - peekfd manpage now not present if peekfd binary missing on given architecture
  - URL of the project updated
  - new tool pslog added with rebase
  - Resolves: #1460695


author: Kalev Lember <klember@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Switch to new upstream at https://github.com/pygobject/pycairo
  - Switch to distutils build system
  - Tighten subpackage deps with the _isa macro
  - Rename Python 2 package to python2-cairo
  - Enable Python 3 support


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.24.1-4
changelog:
  - Python 2 binary package renamed to python2-pygobject3
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Leigh Scott <leigh123linux@googlemail.com> - 2.24.0-11
changelog:
  - update spec file
  - drop patch (system-config-authentication is a gui app that requires X and I don't give a damn if it segfaults because someone runs it without X)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.4.4-8
changelog:
  - Since we're leaving out the dep on markdown in the rpm requirements we need
    to leave it out of egginfo as well otherwise pkg_resources using code breaks


author: Paul Howarth <paul@city-fan.org> - 2.6.1-13
changelog:
  - AES.new with invalid parameter crashes python (CVE-2013-7459)
    (https://github.com/dlitz/pycrypto/issues/176)


author: Miro Hrončok <mhroncok@redhat.com> - 3.12.2-1
changelog:
  - Update to 3.12.2
  - Add Python 3 subpackage (#1236000)
  - Removed deprecated statements
  - Moved some docs to license
  - Removed pacthes
  - Corrected bogus dates in %changelog
  - Build with -std=gnu89


author: Petr Spacek <pspacek@redhat.com> - 0:2.4.17-1
changelog:
  - New upstream release adds features required in bug 1122486
  - Dependency on pyasn1-modules was added to fix bug 995545


author: John Dennis <jdennis@redhat.com> - 1.0.0-1
changelog:
  - Offical 1.0.0 release, only minor tweaks from 1.0.0beta1

  - Allow custom include root in setup.py as command line arg

  - Remove checks for whether a socket is open for reading. It's not
    possible for the binding to know in all cases, especially if the
    socket is created from an external socket passed in.

    * The following module functions were added:
        - nss.get_all_tokens


author: John Dennis <jdennis@redhat.com> - 1.0.1-1
changelog:
  * Add TLS 1.3 cipher suites.

    * ssl_cipher_info.py now attempts to enable TLS 1.3.

    * Fix build issue in setup.py. python-nss can now be build
      as Python wheel, e.g. `pip wheel -w dist .`

    * The following constants were added:

      - ssl.TLS_AES_128_GCM_SHA256
      - ssl.TLS_AES_256_GCM_SHA384
      - ssl.TLS_CHACHA20_POLY1305_SHA256


author: Igor Gnatenko <ignatenko@redhat.com> - 0.3-17
changelog:
  - Remove completely old stuff
  - Run tests for py2/py3
  - Modernize spec according to guidelines
  - Rename package
  - Backport fixes for new gpgme


author: Alex Wood <awood@redhat.com> 1.19.1-1
changelog:
  - Adjust our C bindings for OpenSSL v1.1 API. (awood@redhat.com)
  - Make python-rhsm Python-3 compatible (khowell@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.19.2-1
changelog:
  - 1423443: Handle IndexError during m2crypto request (khowell@redhat.com)
  - Move python-rhsm into subdirectory (khowell@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.19.3-1
changelog:
  - 1435475: Support older versions of M2Crypto (awood@redhat.com)
  - 1427069: Prioritize content from Basic entitlements (khowell@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.19.4-1
changelog:
  - 1438552: Allows releases to be listed through a proxy (csnyder@redhat.com)
  - 1420533: Add no_proxy option to API, config, UI (khowell@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.19.6-1
changelog:
  - 1426343: fixed rct to display cert without subjectAltName.
    (jhnidek@redhat.com)
  - Add Update subscriptions pools (tcoufal@redhat.com)
  - Add support to list future subscription pools (tcoufal@redhat.com)


author: Alex Wood <awood@redhat.com> 1.20.1-1
changelog:
  - 1472715: Python module rhsm should never call exit() (jhnidek@redhat.com)
  - 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
  - 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
  - 1392709: Display better error msg., when wrong proxy is set up
    (jhnidek@redhat.com)
  - Python 3 compatability changes (awood@redhat.com)
  - 1443159: Added default value for splay configuration (jhnidek@redhat.com)
  - 1451166: Fix Host header when using proxy (khowell@redhat.com)
  - Add preliminary zypper support (khowell@redhat.com)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 231-3
changelog:
  - Split out doc subpackage (#1242619)
  - Do not allow installation of python-systemd in different versions


author: Haïkel Guémar <hguemar@fedoraproject.org> - 16.1.1-3
changelog:
  - Drop tkinter dependency (only required for tkconch)
  - Use python3 conditionals
  - Move BR under the proper subpackage


author: Paul Wouters <pwouters@redhat.com> - 1.6.4-1
changelog:
  - Updated to 1.6.4 full release, patch to allow missing ipsechook
  - Resolves rhbz#1465575 unbound fails to start up, complains about missing ipsecmod-hook


author: Paul Wouters <pwouters@redhat.com> - 1.6.4-4
changelog:
  - Rebuilt with KSK2017 added to root.key and root.anchor
  - Remove noreplace for root key files. We can only improve these files over local copies


author: Paul Wouters <pwouters@redhat.com> - 1.6.6-1
changelog:
  - Resolves: rhbz#1483572 unbound-1.6.6 is available
  - Resolves: rhbz#1465575 unbound fails to start up, complains about missing ipsecmod-hook (edit)


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.13-8
changelog:
  - Enable profile guided optimizations for x86_64 and i686 architectures
  - Update description to reflect that Python 2 is not the default Python


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-9
changelog:
  - Added a dependency to the devel subpackage on python3-rpm-generators which
    have been excised out of rpm-build
  - There is no Python 2 package containing Python RPM generators, therefore
    Python 3 is needed when Python 2 package is to be built, but this was
    decided not to be a problem due to nearing EOL of Python 2
  - Involves: rhbz#1410631, rhbz#1444925


author: Michal Cyprian <mcyprian@redhat.com> - 2.7.13-15
changelog:
  - Revert "Add --executable option to install.py command"
    This enhancement is currently not needed and it can possibly
    collide with `pip --editable`option


author: Florian Weimer <fweimer@redhat.com> - 3.6.2-4
changelog:
  - Do not generate debuginfo subpackages (#1476593)
  - Rebuild with binutils fix for ppc64le (#1475636)


author: Tomas Orsava <torsava@redhat.com> - 3.6.2-5
changelog:
  - Dropped BuildRequires on db4-devel which was useful for Python 2 (module
    bsddb), however, no longer needod for Python 3
  - Tested building Python 3 with and without the dependency, all tests pass and
    filelists of resulting RPMs are identical


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.2-8
changelog:
  - Have /usr/bin/2to3 (rhbz#1111275)
  - Provide 2to3 and idle3, list them in summary and description (rhbz#1076401)


author: Petr Viktorin <pviktori@redhat.com> - 3.6.2-11
changelog:
  - Add bcond for --without optimizations
  - Reword package descriptions
  - Remove Group declarations
  - Skip failing test_float_with_comma


author: Michal Cyprian <mcyprian@redhat.com> - 3.6.2-12
changelog:
  - Use python3 style of calling super() without arguments in rpath
    patch to prevent recursion in UnixCCompiler subclasses
  Resolves: rhbz#1458122


author: Petr Viktorin <pviktori@redhat.com> - 3.6.2-13
changelog:
  - Rename patch files to be consistent
  - Run autotools to generate the configure script before building
  - Merge lib64 patches (104 into 102)
  - Skip test_bdist_rpm using test config rather than a patch (removes patch 137)
  - Remove patches 157 and 186, which had test changes left over after upstreaming
  - Remove patch 188, a temporary workaround for hashlib tests
  - Merge patches 180, 206, 243, 5001 (architecture naming) into new patch 274
  - Move python2-tools conflicts to tools subpackage (it was wrongly in tkinter)


author: Zdenek Dohnal <zdohnal@redhat.com> - 6.0.0-8
changelog:
  - 1477213 - Detect recursions loop resolving objects
  - 1454820 - CVE-2017-9208
  - 1454820 - CVE-2017-9209
  - 1454820 - CVE-2017-9210


author: Peter Gordon <peter@thecodergeek.com> - 3.4.2-1
changelog:
  - Update to new upstream release (3.4.2)
    - Fixes a memory leak, string-splitting, and Micro QR encoding bugs.
  - Run autoconf in %build to add ARM 64 (aarch64) to the configure scripts.
  - Resolves:  #926414 (qrencode: Does not support aarch64 in f19 and rawhide)
  - Update source/homepage URLs.


author: Rex Dieter <rdieter@fedoraproject.org> - 1:4.8.7-24
changelog:
  - namespace QT_VERSION_CHECK to workaround major/minor being pre-defined (#1396755)
  - update QTBUG-22829.patch to define _SYS_SYSMACROS_H (#1396755)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.9.1-6
changelog:
  - enable openssl11 support only for f27+ (for now)
  - Use mariadb-connector-c-devel, f28+ (#1493909)
  - Backport upstream mariadb patch (#1491316)


author: Michal Ruprich <mruprich@redhat.com> - 1.2.1-1
changelog:
  - rebase to 1.2.1(#1431309)
  - added quagga to quaggavt group - resolves #1434028
  - enabled pimd and nhrpd
  - fix bogus date in changelog


author: Petr Pisar <ppisar@redhat.com> - 1:4.03-6
changelog:
  - Correct repquota indentation for file systems with hiden quota files
  - Remove unnecessary quota dependency from quota-devel package
  - Break licenses down to each package


author: Petr Pisar <ppisar@redhat.com> - 1:4.03-9
changelog:
  - Fix disabling features at build time
  - Fix a race between checking for and opening a directory to be scanned
  - Fix an undefined behavior on parsing yes-no answer
  - Check for setuid and setgid calls failure in edquota tool
  - Check for failures when reading edquota input
  - Check for failures when duplicating a file handle


author: Paul Howarth <paul@city-fan.org> 0.997-1
changelog:
  - update to 0.997
    - main feature of this version is ipv6 support
    - feature: ip6trie - new dataset supports listing of arbitrary length ip6
      CIDRs, along with individual A/TXT values for each prefix
    - feature: ip6tset - new dataset supports listing of ip6 /64 subnets and the
      exclusion of /128 subnets; only supports a single A/TXT value for the
      entire dataset
    - optimization: ip4trie - using new trie implementation (developed for the
      ip6trie dataset) decreases memory consumption by roughly a factor of three
    - feature: acl dataset - ip6 addresses are now supported in ACLs
    - feature: added --enable-asserts configure option to enable compilation of
      debugging assertions; assertion checking is disabled by default
    - featurette: zero-length "wildcard" IP4 CIDR prefixes are now allowed in
      ip4trie and acl datasets


author: Paul Howarth <paul@city-fan.org> 0.997a-1
changelog:
  - update to 0.997a
    - minor fixes/changes in packaging, no code changes
    - in particular, fixes a build failure on *BSD introduced in 0.997


author: Paul Howarth <paul@city-fan.org> 0.997a-4
changelog:
  - fix return value from initscript, by using process substitution instead of
    a while loop at the end of a pipe (#1118013)
  - drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 0.998-1
changelog:
  - Update to 0.998
    - Correctly handle V4MAPPED (v4 in v6) addresses; the original v6 prefix was
      wrong
    - Sometimes IP4-based datasets gave false positives when an IP6 dataset was
      present, and it was also possible to have false positives in IP6 datasets;
      both have been fixed


author: Kalev Lember <kalevlember@gmail.com> - 0.7.93-1
changelog:
  - Update to 0.7.93
  - Tighten deps with the _isa macro
  - Don't manually require pkgconfig; rpmbuild generates this automatically
  - Use license macro for the COPYING file


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 5-4
changelog:
  - Build with hardening flags (#1051344)
  - Fail nicely if no hardware generator is found (#892178)
  - Drop unneeded dependency


author: Nils Philippsen <nils@redhat.com> - 0.2.4-8.rc2
changelog:
  - create and formally own the state directory so it is available from the time
    of first installation until reboot


author: Colin Walters <walters@verbum.org> - 2017.7-2
changelog:
  - Enable introspection, rename shared lib to librpmostree
    Due to an oversight, we were not actually building with introspection.
    Fix that.  And while we are here, split out a shared library package,
    so that e.g. containers can do `from gi.repository import RpmOstree`
    without dragging in the systemd service, etc. (RHBZ#1473701)


author: Jonathan Lebon <jlebon@redhat.com> - 2017.7-3
changelog:
  - Tweak new pkg name to rpm-ostree-libs to be more consistent with the main
    package name and ostree's ostree-libs.


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-6
changelog:
  - fixed typo in chdir location
    resolves: rhbz#1422542
  - updated one more directive in default config
    resolves: rhbz#1419625


author: Radovan Sroka <rsroka@redhat.com> - 8.26.0-1
changelog:
  - rebase to 8.26.0
  - added doc patch rhbz#1436113
  - dropped chdir patch, https://github.com/rsyslog/rsyslog/pull/1420 
  - moved dependency libgcrypt to rsyslog core


author: Vít Ondruch <vondruch@redhat.com> - 2.4.1-83
changelog:
  - Fix "IOError: stream closed" errors affecting Puma.
  - Temporary disable checksec on PPC64LE (rhbz#1479302).


author: Jakub Filak <jakub@thefilaks.net> 0.22-1
changelog:
  - New upstream version
    - Added support fof JavaScript (V8) stack traces
    - Most parts of the in-hook core unwinder callable under unprivileged user
    - GDB core unwinder limits number of unwound frames
    - Fixed a pair of compile warnings - Chris Redmon <credmonster@gmail.com>


author: Matej Habrnal <mhabrnal@redhat.com> 0.23-1
changelog:
  - New upstream version
    - Allow rpm to be optional at build time
    - Do not use deprecated fedorahosted.org


author: <andrew@beekhof.net> - 1.2.1-1
changelog:
  - Correctly enable /proc/pid validation for sbd_lock_running()
  - Improved integration with the el7 environment


author: Petr Stodulka <pstodulk@redhat.com> - 4.2.2-14
changelog:
  - remove meaningless redefinition of _bindir - it's standard macro now;
    sed will be store in /usr/bin/sed
    Resovles: #1305835


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-11
changelog:
  - Added SASL AUTH_REALM into default configuration
    Resolves: rhbz#748279
  - Fixed compilation with openssl-1.1.0
    Resolves: rhbz#1400239


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-13
changelog:
  - Removed systemd limit for sendmail restarts to workaround failure due to
    rapid restarts caused by NetworkManager dispatcher script
    Resolves: rhbz#1422771


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-15
changelog:
  - Explicitly enabled sm-client statistics
    Related: rhbz#890585
  - Fixed compilation with -Werror=format-security which seems to be the
    default in f27+


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-19
changelog:
  - Replaced compile-fix patch by format-security patch from Debian not to
    change status codes
    Resolves: rhbz#1482808


author: Petr Lautrbach <plautrba@redhat.com> - 4.1.0-2
changelog:
  - Move python networkx dependency to -gui and -console-analyses
  - Ship sedta and seinfoflow in setools-console-analyses


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.5-4
changelog:
  - allow switching to secondary group without checking the membership
    explicitly (patch from upstream)


author: Bastien Nocera <bnocera@redhat.com> - 1.6-3
changelog:
  - Remove file-roller as handler for cbz/cbr files
    See https://bugzilla.gnome.org/show_bug.cgi?id=767244


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.55-1
changelog:
  - Support external members of IPA groups in schema compat
  - Support bind over ID overrides when uid is not overridden
  - Populate schema compat trees in parallel to LDAP server startup


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.4-2
changelog:
  - Rebuilt with https://github.com/google/snappy/archive/1.1.4.tar.gz since
    %{source0} contains different and buggy code.
    https://groups.google.com/forum/#!topic/snappy-compression/uhELq553TrI


author: Paul Wouters <pwouters@redhat.com> - 2.0.0-1
changelog:
  - Resolves: rhbz#1244461 Update to softhsm-2.0.0
  - Resolves: rhbz#1177086 A marked as trusted certificate cannot be written in a softhsmv2 db
  - Resolves: rhbz#1159827 Typo in homedir in /etc/passwd
  - Added global prever to toggle snapshot vs full release build changes


author: Paul Wouters <pwouters@redhat.com> - 2.1.0-1
changelog:
  - Resolves: rhbz#1244461 Updated to 2.1.0
  - Resolves: rhbz#1272423 Softhsm PKCS#11 module not visible to NSS becasue it is not in the search path
  - Resolves: rhbz#1177086 A marked as trusted certificate cannot be written in a softhsmv2 db
  - Resolves: rhbz#1272453 - A marked as CA certificate cannot be written in a softhsmv2 db
  - Removed merged in bug#162 patch
  - Temporarily disable make check because cppunit is broken


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.2.0-2
changelog:
  - Increased the level of messages that go to syslog, thus softhsm
    will no longer write on syslog when it cannot open the shared DB (#1425135)
  - Allow users in the 'ods' group to store their keys in /var/lib/softhsm/tokens/
    while at the same time disallow deleting other users' keys (using the
    sticky bit). Prevent users in the 'ods' group from writing in /var/lib/softhsm.


author: Sérgio Basto <sergio@serjux.com> - 1.9.2-1
changelog:
  - Update to 1.9.2 (#961876).
  - Modernize spec file.
  - Makefile.am handles mmx and sse flags well, so no need patch 01 and sed anymore.
  - Patch 02 disabled, I hope we already have asm fixed on X86_64.


author: Sérgio Basto <sergio@serjux.com> - 1.9.2-2
changelog:
  - Add license tag.
  - Add back sed on -O3 .
  - Not modify soundtouch_config.h because looks correct, just have one line !.


author: Paul Howarth <paul@city-fan.org> - 0.4.0-1
changelog:
  - Update to 0.4.0
    - New options:
      -C option to change the default reject code
      -S option to specify a path to sendmail (for the -x option)
      -R option to specify the rejection message
      -a option to skip messages that were authenticated
    - IPv6 address support
    - Syntax clean-ups
  - Drop upstreamed syntax, rejection text and IPv6 patches
  - Update authuser patch: note that upstream has introduced a -a option that
    does pretty much the same as the -I option added by this patch, so this
    patch is deprecated and will not be included in builds for Fedora 22 onwards
  - Clean up other patches to apply cleanly


author: Kevin Fenzi <kevin@scrye.com> - 3.4.1-9
changelog:
  - Add perl-Razor-Agent and perl-Net-Patricia To Requires, they might help processing. Fixes bug #1337924
  - Add patch for netdns 1.0.1+ dns lookups.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.4-1
changelog:
  - Update to 2.0.4
  - Addresses a potential race-condition when the key and certificate share the
    same file.


author: Radovan Sroka <rsroka@redhat.com> 1.8.19-0.1.20160923git90e4538
changelog:
  - we were not able to update from rc and beta versions to stable one
  - so this is a new snapshot package which resolves it


author: Jiri Vymazal <jvymazal@redhat.com> - 1.8.20-0.1.b1
changelog:
  - update to latest development version 1.8.20b1
  - added sudo to dnf/yum protected packages
    Resolves: rhbz#1418756


author: Noriko Hosoi <nhosoi@redhat.com> - 4.1.0-1
changelog:
  - Release 4.1.0-1
  - Resolves: Bug 1324983 - Rebase: svrcore
              Added systemd ask password support (DS 48450)


author: Mark Reynolds <mreynolds@redhat.com> - 4.1.3-1
changelog:
  - release 4.1.3-1
  - Ticket 18 - Remove configure outputs
  - Ticket 17 - update stdc to c99 to match other projects
  - Ticket 16 - with systemd should unset have systemd if pkgconfig not found
  - Ticket 14 - svrcore does not detect tty


author: Robert Scheck <robert@fedoraproject.org> - 6.04-0.3
changelog:
  - Own %{_datadir}/syslinux/diag directory (#894529)
  - Allow rebuilding on RHEL/CentOS 6 and 7 (#1291428)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 234-3
changelog:
  - Fix x-systemd.timeout=0 in /etc/fstab (#1462378)
  - Minor patches (memleaks, --help fixes, seccomp on arm64)


author: Pavel Raiskup <praiskup@redhat.com> - 1.28-6
changelog:
  - fix --files-from and -T cooperation (rhbz#1230762)
  - avoid two testsuite false alarms related to --files-from option


author: Pavel Raiskup <praiskup@redhat.com> - 1.29-3
changelog:
  - revert back some docs
  - fix --create to use --xattrs-include/exclude (rhbz#1341787)
  - don't hang with '-x --skip-old-files --xattrs' (rhbz#1399036)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.6-2
changelog:
  - Splitted documentation to the doc subpackage
    Resolves: rhbz#1380291
  - Fixed whitespace
  - Dropped obsoleted defattr


author: Pavel Raiskup <praiskup@redhat.com> - 2.1.0-1
changelog:
  - rebase to recent upstream relase (#1094731), per release notes:
    http://sourceforge.net/projects/pgtclng/files/pgtclng/2.1.0/
  - spec cleanup per fedora-review


author: Pavel Raiskup <praiskup@redhat.com> - 2.1.1-1
changelog:
  - rebase to recent upstream release (#1144394), per release notes:
    http://sourceforge.net/projects/pgtclng/files/pgtclng/2.1.1/


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-69
changelog:
  - Resolves: #1445259 - telnet won't build with latest gcc
  - added note about address resolution in manpage


author: Jan Grulich <jgrulich@redhat.com> - 1.7.1-3
changelog:
  - Bug 1438704 - CVE-2017-7392 CVE-2017-7393 CVE-2017-7394
                  CVE-2017-7395 CVE-2017-7396 tigervnc: various flaws
    + other upstream related fixes


author: Miloslav Trmač <mitr@redhat.com> - 2.11-3
changelog:
  - Drop the cron.daily script, systemd default configuration handles the same
    places.
    Resolves: #906455


author: David Brown <david.brown@pnnl.gov> - 4.2.10-3
changelog:
  - Bugfix - #1215207 create/install service files for these
  - Bugfix - #1117263 qmgr aborts in some instances
  - Bugfix - #1144396 Hey! Version Bump!
  - Bugfix - #1215992 more service scripts
  - Bugfix - #1216037 fixed permissions on directories
  - Bugfix - #1149045 hopefully these are all fixed now
  - Bugfix - #965513 calling this one fixed...


author: David Brown <david.brown@pnnl.gov> - 4.2.10-4
changelog:
  - Bugfix - #1227003 test system in cluster environment
  - Bugfix - #1216049 add --enable-cpuset and hwloc
  - Bugfix - #1176080 this maybe a duplicate of #1216037


author: David Brown <david.brown@pnnl.gov> - 4.2.10-9
changelog:
  - Resolve dependencies for rawhide (#1308192)
  - Fix port and args environment variables for el5/6 (#1254301)


author: Kamil Dudka <kdudka@redhat.com> - 1.7.0-11
changelog:
  - do not escape UTF-8 chars in file names by default in UTF-8 locale (#1480778)
  - modernize spec file (Group, BuildRoot, autosetup, clean, defattr)


author: Steve Grubb <sgrubb@redhat.com> 0.3.11.2-3
changelog:
  - Fix crash when linking libgnutls and libmysqlclient (#1069079)
  - Don't order tcsd after syslog.target (#1055198)


author: Tomáš Mráz <tmraz@redhat.com> 0.3.13-4
changelog:
  - Split libtspi to a trousers-lib subpackage (#1225062)
  - Fix FTBFS with current gcc (drop inline keyword when bogus)


author: Peter Robinson <pbrobinson@fedoraproject.org> 2017.09-3
changelog:
  - Fix regression in i.MX6 and omap4 devices
  - Improve DT detection support on aarch64
  - uEFI fixes and improvements
  - ENable Sinovoip BPI devices


author: Jan Stanek <jstanek@redhat.com> - 2.3.3-1
changelog:
  - Update to version 2.3.3
  - Removed patches and sources included upstream
  - Recreated so-version-bump.patch


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-29
changelog:
  - added build parameter "-DNO_LCHMOD" because lchmod isn't provided on Linux
    system
    Resolves: #1350627


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-30
changelog:
  - rename patch unzip-6.0-nostrip.patch to unzip-6.0-configure.patch
    so linking is now configurable from the spec file
  - define __global_ldflags on EL <= 7
  - set LFLAGS2 with __global_ldflags for hardened build
    Resolves: #1330519


author: John W. Linville <linville@redhat.com> - 4.4-16
changelog:
  - Replace strcpy/strcat with strncpy/strncat to avoid some buffer overflows
  - Check for backward-pointing directory entries to avoid endless looping
  - Fix _most_ of the compiler warnings


author: Chris Adams <linux@cmadams.net> - 1.2.8-0.1.20130726svn14389
changelog:
  - Update to upstream Subversion snapshot to get bug fixes
  - Apply autoconf patch to handle aarch64
  - Update spec to latest startup script handling, also conditionalize
    RHEL SysV init handle for EPEL to make it easier to handle both


author: Miloslav Trmač <mitr@redhat.com> - 1.111-10
changelog:
  - Fix a FBFS with  -Werror=format-security
    Resolves #1444750
  - Fix inconsistent dates in %changelog


author: Matias Kreder <mkreder@gmail.com> - 1.6.2-34
changelog:
  - Removed uuid-php subpackage since php(api) is no longer provided on
  - PHP 7 and there is a replacement (pecl/uuid extension)


author: Petr Pisar <ppisar@redhat.com> - 1.9-14
changelog:
  - Fix a security warning by compiler (bug #1037376)
  - Move the executable to /usr/sbin
  - Modernize the spec file


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-3
changelog:
  - Suppress warning message on Amazon EC2:
    "grep: /proc/xen/capabilities: No such file or directory"


author: Richard W.M. Jones <rjones@redhat.com> - 1.18-1
changelog:
  - New upstream version 1.18.
  - Update RPM description section with complete list of supported guests.
  - If ‘make check’ fails, dump ‘test-suite.log’.


author: Martin Sehnoutka <msehnout@redhat.com> - 3.0.3-2
changelog:
  - Applied patches:
  - Readd seccomp disabled by default
  - vsftpd local_max_rate option doesn't work as expected
  - The vsftpd hangs in a SIGCHLD handler when the pam_exec.so is used in pam.d 
  - configuration
  - The vsftpd doesn't remove failed upload when the delete_failed_uploads is 
  - enabled and the network cable is unplagged
  - man pages bug
  - vsftpd segfaults in vsf_sysutil_strndup
  - Fix logging when syslog is used


author: Martin Sehnoutka <msehnout@redhat.com> - 3.0.3-3
changelog:
  - Review patches
  - Add TLSv1.{1,2} options
  - Fix question mark wildcard within a file name
  - Seccomp patch removed


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-8
changelog:
  - Build against OpenSSL 1.1
  - Redefine VSFTP_COMMAND_FD to 1 to get errors generated during
  - startup picked up by systemd
  - Resolves: rhbz#1443055


author: Tomas Popela <tpopela@redhat.com> - 2.17.4-2
changelog:
  - Take two on increasing the DIE limit as the _dwz_max_die_limit is being
    overridden by the arch specific ones from the redhat-rpm-config


author: Richard W.M. Jones <rjones@redhat.com> - 2.17.4-3
changelog:
  - Bump release and rebuild to attempt to fix _ZSt11__once_call
    dynamic linking problem (RHBZ#1470692).


author: Richard W.M. Jones <rjones@redhat.com> - 2.18.0-2
changelog:
  - Rebuild to try to fix: libwebkit2gtk-4.0.so.37: undefined symbol:
    soup_auth_manager_clear_cached_credentials


author: Till Maas <opensource@till.name> - 2.20-10
changelog:
  - Use alias instead of exported function for which to avoid bashism,
  http://unix.stackexchange.com/questions/59360/#59431


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-6
changelog:
  - Fix use-after-free when macsec secure channels are deleted
  - Fix segmentation fault in case macsec module is not loaded (rh#1428937)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:2.6-8
changelog:
  - OpenSSL: use system ciphers by default (rh #1462262)
  - OpenSSL: fix private key password callback (rh #1465138)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:2.6-11
changelog:
  - hostapd: Avoid key reinstallation in FT handshake (CVE-2017-13082)
  - Fix PTK rekeying to generate a new ANonce
  - Prevent reinstallation of an already in-use group key and extend
    protection of GTK/IGTK reinstallation of WNM-Sleep Mode cases
    (CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081,
    CVE-2017-13087, CVE-2017-13088)
  - Prevent installation of an all-zero TK
  - TDLS: Reject TPK-TK reconfiguration
  - WNM: Ignore WNM-Sleep Mode Response without pending request
  - FT: Do not allow multiple Reassociation Response frames


author: Dan Horák <dan[at]danny.cz> - 2.8.12-23
changelog:
  - fix FTBFS (#1308243)
  - skip tests as they depend on cppunit-config which was removed from cppunit-devel


author: Scott Talbert <swt@techie.net> - 3.0.3-5
changelog:
  - Add upstream patch for avoiding destruction of TLWs that were never created
  - Fixes assert during Filezilla startup (#1484955)


author: Michael Young <m.a.young@durham.ac.uk> - 4.9.0-3
changelog:
  - Qemu: serial: host memory leakage 16550A UART emulation [CVE-2017-5579]
  	(#1416162)
  - Qemu: display: cirrus: OOB read access issue [CVE-2017-7718] (#1443444)
  - package some files now in /usr/lib/debug


author: Michael Young <m.a.young@durham.ac.uk> - 4.9.0-7
changelog:
  - xen: various flaws (#1481765)
    multiple problems with transitive grants [XSA-226, CVE-2017-12135]
    x86: PV privilege escalation via map_grant_ref [XSA-227, CVE-2017-12137]
    grant_table: Race conditions with maptrack free list handling
  	[XSA-228, CVE-2017-12136]
    grant_table: possibly premature clearing of GTF_writing / GTF_reading
  	[XSA-230, CVE-2017-12855]


author: Michael Young <m.a.young@durham.ac.uk> - 4.9.0-8
changelog:
  - full fix for XSA-226, replacing workaround
  - drop conflict of xendomain and libvirtd as can cause problems (#1398590)
  - add-to-physmap error paths fail to release lock on ARM [XSA-235] (#1484476)
  - Qemu: audio: host memory leakage via capture buffer [CVE-2017-8309]
  	(#1446521)
  - Qemu: input: host memory leakage via keyboard events [CVE-2017-8379]
  	(#1446561)


author: Michael Young <m.a.young@durham.ac.uk> - 4.9.0-9
changelog:
  - Qemu: usb: ohci: infinite loop due to incorrect return value [CVE-2017-9330]
  	(#1457698)
  - Qemu: nbd: segmentation fault due to client non-negotiation [CVE-2017-9524]
  	(#1460173)
  - Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [CVE-2017-10664]
  	(#1466466)
  - Qemu: exec: oob access during dma operation [CVE-2017-11334] (#1471640)
  - revised full fix for XSA-226 (regressed 32-bit Dom0 or backend domains)


author: Michael Young <m.a.young@durham.ac.uk> - 4.9.0-10
changelog:
  - xen: various flaws (#1490884)
    Missing NUMA node parameter verification [XSA-231, CVE-2017-14316]
    Missing check for grant table [XSA-232, CVE-2017-14318]
    cxenstored: Race in domain cleanup [XSA-233, CVE-2017-14317]
    insufficient grant unmapping checks for x86 PV guests
  	[XSA-234, CVE-2017-14319]


author: Michael Young <m.a.young@durham.ac.uk> - 4.9.0-11
changelog:
  - ARM: Some memory not scrubbed at boot [XSA-245]
  - Qemu: vga: reachable assert failure during during display update
  	[CVE-2017-13673] (#1486591)
  - Qemu: vga: OOB read access during display update [CVE-2017-13672] (#1486562)


author: Paul Wouters <pwouters@redhat.com> - 1.3.8-1
changelog:
  - Upgraded to 1.3.8 and updated existing patches still required
  - Fix kernel mode breaking the closing tunnels


author: Paul Wouters <pwouters@redhat.com> - 1.3.8-2
changelog:
  - Very reluctantly add a Suggests: tag to work around dnf/kernel bug
  - Resolves: rhbz#1192189 Both kernel-debug-core and kernel-core are installed


author: Simo Sorce <simo@redhat.com> - 1.2.20-1
changelog:
  - Update to new upstream release 1.2.20
  - This release fixes a number of miscellaneous bugs and updates expired or
    soon-to-be-expired certificates in the test suite.
  - Also drops the no-ecdsa patch


author: Simone Caronni <negativo17@gmail.com> - 7.7-12
changelog:
  - Clean up SPEC file, fix rpmlint warnings.
  - Simplify build requirements.
  - Xprint has been removed everywhere.
  - xclipboard 1.1.3
  - xclock 1.0.7
  - xconsole 1.0.6
  - xfd 1.1.2
  - xfontsel 1.0.5
  - xload 1.1.2
  - xwd 1.0.6
  - xwud 1.0.4


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-12
changelog:
  - Drop 0001-startx-Pass-nolisten-tcp-by-default.patch this is the
    server default now
  - Check for SSH_AUTH_SOCK not SSH_AGENT in xinitrc-common (rhbz#1352339)


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-13
changelog:
  - Check for all 3 of SSH_AGENT, SSH_AGENT_PID and SSH_AUTH_SOCK to fix
    a regression introduced by the previous fix (rhbz#1352339)


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.1-1
changelog:
  - bugfix rebase to 5.2.1, per release notes
    http://www.mail-archive.com/xz-devel@tukaani.org/msg00226.html


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.2-1
changelog:
  - rebase to stable 5.2.2 per release notes:
    http://www.mail-archive.com/xz-devel@tukaani.org/msg00244.html


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.3-1
changelog:
  - rebase to stable 5.2.3 per release notes:
    http://www.mail-archive.com/xz-devel@tukaani.org/msg00285.html


author: David King <amigadave@amigadave.com> - 3.16.3-1
changelog:
  - Update to 3.16.3
  - Use pkgconfig for BuildRequires
  - Preserve timestamps during install
  - Update man page glob in files section


