# changelog

author: Michal Schorm <mschorm@redhat.com> - 1:5.5.66-1
changelog:
- Rebase to 5.5.66
- Related to: rhbz#1834835
- CVE's fixed: rhbz#1769276 rhbz#1830110
  CVE-2019-2974 CVE-2020-2780


author: Michal Schorm <mschorm@redhat.com> - 1:5.5.68-1
changelog:
- Rebase to 5.5.68
  This is the last upstream release. This major version reached upstream EOL
- Related to: rhbz#1834835


author: Daiki Ueno <dueno@redhat.com> - 0.2.1-2
changelog:
- remove unnesseary BR
- don't embed rpath in executables
- add docs
- drop buildroot cleanup
- preserve timestamp when make install


author: Daiki Ueno <dueno@redhat.com> - 0.2.2-1
changelog:
- new upstream release
- for Fedora 19 or later, use 'ruby(release)' instead of 'ruby(abi)',
  and also update the required Ruby ABI/release version to 2.0.0


author: Daiki Ueno <dueno@redhat.com> - 0.2.4-1.1
changelog:
- use 'ruby(release)' on RHEL 7 as well as Fedora 19 (Closes: #1002870)
- disable workaround for ruby bindings needed for earlier Fedora 19


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.2.1-44
changelog:
- Don't depend on plexus-container-default
- Unset M2_HOME before calling mvn-rpmbuild
- Remove test dependencies


author: Michal Srb <msrb@redhat.com> - 2.2.1-45
changelog:
- Add missing BR: maven-install-plugin (Resolves: #979504)
- Migrate to plexus-containers-container-default


author: Tomas Radej <tradej@redhat.com> - 1:1.0-4
changelog:
- Installing folders separately with -m 755
- Installing NOTICE in javadoc subpackage
- Fixed changelog


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.8-1
changelog:
- Update to upstream version 2.8
- Convert patches to POM macros
- Install LICENSE and NOTICE files
- Remove rpm bug workaround


author: Tomas Radej <tradej@redhat.com> - 2.4-1
changelog:
- Updated to the upstream version
- Partially removed a test because of a legacy class use
- Removed exception checking as it has already been done


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.7-7
changelog:
- Drop patch for maven-compat
- Add missing requires on maven2 artifact and model
- Explictly set helpPackageName in maven-plugin-plugin configuration
- Resolves: rhbz#914167


author: Michal Srb <msrb@redhat.com> - 1.3-1
changelog:
- Update to upstream version 1.3
- Migrate from maven-doxia to doxia subpackages (#889145)
- Build with xmvn
- Replace patches with pom_ macros
- Remove unnecessary depmap


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.7-3
changelog:
- Don't use legacy plexus-container-default, resolves: rhbz#878557
- Install license files, resolves: rhbz#880268


author: Tomas Radej <tradej@redhat.com> - 1:1.2.1-2
changelog:
- Added licence text
- Changed maven target from install to package
- Creating directories in Install


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.4-2
changelog:
- Add missing requires on maven2 artifact and model
- Add maven-core to test dependencies
- Resolves: rhbz#914169


author: Michal Srb <msrb@redhat.com> - 1.8-4
changelog:
- Migrate from maven-doxia to doxia subpackages (Resolves: #909238)
- Remove unnecessary BR on maven-doxia-tools


author: Jaromir Capik <jcapik@redhat.com> - 1.2-5
changelog:
- Introducing NOTICE in the javadoc subpackage
- Minor spec file changes according to the latest guidelines


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.9-2
changelog:
- Add LICENSE and NOTICE files to packages (#879605)
- Add dependency exclusion to make enforcer happy


author: Michal Srb <msrb@redhat.com> - 2.6-2
changelog:
- Migrated to plexus-containers-container-default (Resolves: #878559)
- Removed build dependency on netbeans-cvsclient


author: Tomas Radej <tradej@redhat.com> - 1.7-8
changelog:
- Remove dep on mockito
- Remove MavenScmCli as plexus-container-default is not present
- Remove maven-assembly-plugin's configuration as it uses MavenScmCli


author: Mat Booth <fedora@matbooth.co.uk> - 1.7-10
changelog:
- Remove use of deprecated macros, rhbz #992204
- Don't ship test jars in main package
- Install NOTICE file


author: Mat Booth <fedora@matbooth.co.uk> - 1.8.1-1
changelog:
- Fix removal of cvs java provider, rhbz #962273
- Update to latest upstream
- Drop upstreamed patches


author: Tomas Radej <tradej@redhat.com> - 15-27
changelog:
- Removed ant, artifact-resolver, common-artifact-filters, dependency-tree, model-converter, runtime
- Replaced patches with pom macros


author: Jindrich Novy <jnovy@redhat.com> 4.8.7-3
changelog:
- attempt to fix segfault while passing messages to widgets (#907045, #912033)
- fix possible segfault when freeing a VFS (#923415)


author: Prarit Bhargava <prarit@redhat.com> - 3:144.1.94d853b2ea81
changelog:
- update NVR to 144 to match upstream
- add Denverton SoC support [1273768]
- add Kabylake U/Y support, 0x8E [1310954]
- add Kabylake H/S support, 0x9E [1310955]
- add Knights Mill support [1381316]
- mcelog didn't remove /var/run/mcelog-client when exitting [1362123]


author: Prarit Bhargava <prarit@redhat.com> - 3:144.10.94d853b2ea81
changelog:
- mcelog: Deduce channel number for Haswell/Broadwell/Skylake systems [1641043]
- mcelog: Add decoding for Optane DC persistent memory mode [1645345]


author: Dan Walsh <dwalsh@redhat.com> - 0.3.3-7
changelog:
- Add secolor.conf.5 man page
- Make mcstransd watch for content being written to /run/setrans for files names containing translations.
-- This will allow apps like libvirt to write content nameing randomly selected MCS labels
- Fix memory leak in mcstransd


author: Simone Caronni <negativo17@gmail.com> - 1.1.0-9
changelog:
- Added patches for file transfer and status time workaround:
  http://www.lilotux.net/~mikael/pub/meanwhile/
- Spec file formatting.


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.15-10
changelog:
- fix binding to IPv6 address (#1298603)
- enable SASL support (#1263696)
- don't allow authentication with bad SASL credentials (CVE-2013-7239)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.15-10.el7_3.1
changelog:
- fix vulnerabilities allowing remote code execution (CVE-2016-8704,
  CVE-2016-8705, CVE-2016-8706)


author: Rafael Aquini <aquini@linux.com> - 0.3.0-4
changelog:
- Update upstream fixes for memkind-0.3.0
- Switch old init.d scripts for systemd unit service
- Fix fc24 build error


author: Jeff Law <law@redhat.com> 0.1.4-2
changelog:
- Remove commands/directives automatically handled by rpm
- Add comment on how to build the tarball
- Change Requires to reference package rather than file
- Add comments on licensing issues
- Add autoconf and automake to BuildRequires


author: Jeff Law <law@redhat.com> 0.1.4-3
changelog:
- Change %define to %global for git hash
- Remove git hash from version # in changelog
- Build with -fno-strict-aliasing
- Fix minor spelling error in description


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.20-6
changelog:
- Fixed path in 20_memtest86+ not to generate error on grub2-mkconfig
  Resolves: rhbz#805542
- Temporal fix for 7th test failure
  Resolves: rhbz#805813


author: Michal Sekletar <msekleta@redhat.com> - 1.1.36-20
changelog:
- resolves: #754235 #947919
- improvement to systemd configuration for vgetty
- added systemd unit for mgetty
- implemented device locking using lockdev library


author: Michal Sekletar <msekleta@redhat.com> - 1.1.36-22
changelog:
- disable strict-aliasing optimizations
- fix dates in changelog
- fix device locking in other tools than mgetty (#982711)


author: Michal Sekletar <msekleta@redhat.com> - 1.1.36-24
changelog:
- enable hardeninig on every architecture
- add uucp group and user to mgetty package since we no longer ship uucp in RHEL7


author: Michal Sekletar <msekleta@redhat.com> - 1.1.36-27
changelog:
- Fix [Install] section of unit file. Enable mgetty and vgetty under getty.target (#1127898)
- Declare conflict with hylafax+ only for mgetty-sendfax subpackage (#1129054)


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-64
changelog:
- Re-generate initramfs not only for the currently running kernel,
  but for several recently installed kernels as well (#1773347).


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-66
changelog:
- Update Intel CPU microcode to microcode-20200508 release (#1835549):
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46
    up to 0x78.
- Change the URL in the intel-microcode2ucode.8 to point to the GitHub
  repository since the microcode download section at Intel Download Center
  does not exist anymore.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-67
changelog:
- Update Intel CPU microcode to microcode-20200520 release (#1783103):
  - Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f
    up to 0x621;
  - Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718
    up to 0x71a.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-68
changelog:
- Update Intel CPU microcode to microcode-20200602 release, addresses
  CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795352, #1795355, #1827190):
  - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
  - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
    up to 0x2f;
  - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
    up to 0x26;
  - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
  - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
    up to 0x22;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
    up to 0x1000157;
  - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
    (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
    up to 0x2006906;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
    up to 0x4002f01;
  - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
    up to 0x5002f01;
  - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
    from revision 0xca up to 0xd6;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
    0xca up to 0xd6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
  - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-70
changelog:
- Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
  0xdc, use 0xd6 by default (#1846133).


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-73
changelog:
- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.


author: <jsafrane@redhat.com> - 47-14
changelog:
- Fixed importing /etc/hosts and /etc/services, duplicate entries
  are now skipped. (#916623)
- Added missing patches.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.5.5-3
changelog:
- Added license file into package
- Fixed rpmlint warning
- Added sparc64 to ExclusiveArch
  Resolves: rhbz#226145


author: Thorsten Glaser <tg@mirbsd.org> 45-1
changelog:
- Upgrade mksh to R45 and the other files to the accompanying versions
- Drop workaround for GCC PR55009 (no longer needed)
- Use https for homepage


author: Miloslav Trmač <mitr@redhat.com> - 0.26-1
changelog:
- Update to mlocate-0.26
- Drop no longer necessary %clean and %defattr commands.
- Enable hardened build
  Resolves: #853189


author: Miloslav Trmač <mitr@redhat.com> - 0.26-3
changelog:
- Update cron packaging for https://fedoraproject.org/wiki/Packaging:CronFiles
  Notably, the cron script (previously not %config) was renamed.


author: Michal Sekletar <msekleta@redhat.com> - 0.26-6
changelog:
- index zfs filesystems despite the fact they are marked as nodev (#1304416)
- add gpfs to PRUNEFS (#1180672)
- mlocate.db is ghost file created with non-default attrs, list them explicitly so rpm --verify doesn't report errors (#1182306)
- use more strict permissions for cron script (#1179633)


author: Michal Sekletar <msekleta@redhat.com> - 0.26-7
changelog:
- don't index fuse.glusterfs filesystems (#1331870)
- don't index files on ceph filesystem (#1333152)
- update link to upstream repository (#1502361)


author: Matěj Cepl <mcepl@redhat.com> - 1.20101231-1
changelog:
- Update to latest upstream checkout including:
	Afghanistan, Argentina, Armenia, Australia, Austria, Bahrain, Canada,
	Croatia, Denmark, Dominican Republic, Finland, France, French Polynesia,
	Germany, Greece, Hong Kong, Hungary, China, Iceland, India, Indonesia,
	Iran, Israel, Israel, Italy, Latvia, Luxembourg, Mexico, Montenegro,
	Netherlands, New Zealand, Nicaragua, Norway, Paraguay, Philippines,
	Poland, Portugal, Romania, Rwanda/Burundi, Slovakia, Slovenia, Spain,
	Sudan, Sweden, Switzerland, Thailand, Tunisia, Uganda, United Arab
,


author: Matěj Cepl <mcepl@redhat.com> - 1.20110218-1
changelog:
- Update to latest upstream checkout including:
	* south africa: add 8.ta (Telkom) provider (bgo #641916),
	  remove username for Cell-C (bgo #640794)
	* switzerland: update Orange plans and APNs (bgo #638115)
	* tanzania: add Sasatel and TTCL, add CDMA for Zantel (bgo #634609)
	* india: new unified BSNL APNs (rh #667280)
	* ec: add Movistar Ecuador (bgo #638223)


author: Simo Sorce <simo@redhat.com> 1.3.1-1
changelog:
- Various bugfixes and minor new features
- resolves: #1258168
- resolves: #1258171
- resolves: #1258172
- resolves: #1258456


author: Jan Kaluza <jkaluza@redhat.com> - 5.4-25
changelog:
- don't fail with error 500 when ticket is expired and Authorization header is
  provided by client (#982521)


author: John Dennis <jdennis@redhat.com> - 0.13.1-1
changelog:
- Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
- Adds the following upstream bug fixes on top of 0.13.1:
  * ee97812 Add Mellon User Guide
  * daa5d1e If no IdP's are defined explicitly log that fact
  * c291232 Make MellonUser case-insensitive.
  * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
  * 5c5ed1d Fix segmentation fault with POST field without a value.
  * 4c924d9 Fix some log message typos
  * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
    show both the expected and received values.
- Add new mellon user guide to installed docdir


author: John Dennis <jdennis@redhat.com> - 0.13.1-2
changelog:
- Resolves: rhbz#1481330 Add diagnostic logging
- Resolves: rhbz#1295472 Add MellonSignatureMethod config option to set
  signature method used to sign SAML messages sent by Mellon.
  Defaults to original sha1.


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-3
changelog:
- Resolves: rhbz#1652980 - mod_auth_mellon Cert files name wrong when
                           hostname contains a number


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-4
changelog:
- Resolves: rhbz#1576719 - ECP flow not triggering, instead client access
                           secured resources without ECP authentication


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-5
changelog:
- Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-6
changelog:
- Apply the patch from the previous commit
- Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-7
changelog:
- Resolves: rhbz#1727789 - mod_auth_mellon fix for AJAX header name
                           X-Requested-With


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-8
changelog:
- Resolves: rhbz#1731052 - CVE-2019-13038 mod_auth_mellon: an Open Redirect via
                           the login?ReturnTo= substring which could facilitate
                           information theft [rhel-7]


author: John Dennis <jdennis@redhat.com> - 1.8.8-3
changelog:
- fix unit test failure caused by apr_jwe_decrypt_content_aesgcm()
  failing to null terminate decrypted string
  Resolves: bug#1292561 New package: mod_auth_openidc


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.8-4
changelog:
- Resolves: rhbz#1626299 - CVE-2017-6059 mod_auth_openidc: Shows
                           user-supplied content on error pages [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.8-5
changelog:
- Resolves: rhbz#1626297 - CVE-2017-6413 mod_auth_openidc: OIDC_CLAIM and
                           OIDCAuthNHeader not skipped in an "AuthType oauth20"
                           configuration [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.8-6
changelog:
- Resolves: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
                           issue exists in URLs with slash and backslash [rhel-7]
- Resolves: rhbz#1805067 - CVE-2019-14857 mod_auth_openidc: Open redirect
                           in logout url when using URLs with leading slashes
                           [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.8-7
changelog:
- Fix a regression in the previous patches
- Related: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
                          issue exists in URLs with slash and backslash [rhel-7]


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.6-1
changelog:
- Make pam_authenticate_with_login_password available for other modules.
- Reformat documentation to make the Basic Auth usage less prominent.


author: Joe Orton <jorton@redhat.com> - 1.7.14-13
changelog:
- fix mod_authz_svn regression with mod_auth_kerb (#1306431)
- fix "svn diff" property handling (#1378178)
- fix permissions of /run/svnserve to match tmpfiles (#1496243)


author: Paul Howarth <paul@city-fan.org> 2.3.9-1
changelog:
- Update to 2.3.9
  - SECURITY: Fix possible heap buffer overwrite (CVE-2013-4365)
  - Add experimental cmake-based build system for Windows
  - Correctly parse quotation and escaped spaces in FcgidWrapper and the AAA
    Authenticator/Authorizor/Access directives' command line argument, as
    currently documented (PR#51194)
  - Honor quoted FcgidCmdOptions arguments (notably for InitialEnv
    assignments) (PR#51657)
  - Conform script response parsing with mod_cgid and ensure no response body
    is sent when ap_meets_conditions() determines that request conditions are
    met
  - Improve logging in access control hook functions
  - Avoid making internal sub-requests and processing Location headers when in
    FCGI_AUTHORIZER mode, as the auth hook functions already treat Location
    headers returned by scripts as an error since redirections are not
    meaningful in this mode
  - Revert fix for PR#53693, added in 2.3.8 but undocumented
  - Fix issues with a minor optimization added in 2.3.8


author: Luboš Uhliarik <luhliari@redhat.com> - 2.3.9-5
changelog:
- Resolves: #1486653 - mod_fcgid cause Segmentation fault error while doing
  large file uploads over HTTPS


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.7-1
changelog:
- No longer call lookup_identity_hook explicitly, hook order does
  the same.
- Silence compile warnings by specifying C99.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.8-1
changelog:
- 1109923 - Fix module loading/configuration for Apache 2.4.
- Document the runtime dependency on pam_authenticate_with_login_password.
- Comment/code cleanup.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.0-1
changelog:
- Add support for '+'-prefixed note/variable names.
- Silence compile warnings by specifying C99.
- Fix format of logs of dbus calls.


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-6
changelog:
- Check the NSS certificate database directory for read permissions
  by the Apache user. (#1312583)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-8
changelog:
- Fail start start when there are invalid Protocols defined (#1389114)
- Handle group membership when testing NSS database filesystem
  permissions (#1395300)
- Add OCSP cache tuning directives (#1392582) 
- Don't share mod_nss NSS database with nss_pcache (#1382102)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-9
changelog:
- Update nss_pcache.8 to drop directory and prefix options (#1382102)

- Don't share mod_nss NSS database with nss_pcache (#1382102)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-12
changelog:
- Correct URL and Source entries to point to pagure.io (#1502362)
- Remove deprecated NSSSessionCacheTimeout from default config (#1257662)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-14
changelog:
- Bugzilla Bug #861999 - mod_revocator exec CLR URIs fail to load: unable to
  load Revocation module, NSS error -8187 - stephen.capstick64@gmail.com
  (mod_revocator-waitpid.patch)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-16
changelog:
- Bugzilla Bug #948875 - Man page scan results for mod_revocator
- Moved 'ldapget' from %bindir to %sbindir (provided compatibility link)
- Moved 'crlhelper' from %bindir to %libexecdir (provided compatibility link)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-17
changelog:
- Add the following explanation to the 'Brewtap results' textbox in rpmdiff:
  The '/etc/httpd/conf.d/revocator.conf' file does not require a man page
  because its parameters are sufficiently documented within the
  configuration file itself.
  The '/etc/httpd/conf.modules.d/11-revocator.conf' file does not require
  a man page because the file merely contains the line
  'LoadModule rev_module modules/mod_rev.so' to support httpd
  loading of Dynamic Shared Objects ('/etc/httpd/conf/httpd.conf').


author: Rob Crittenden <rcritten@redhat.com> - 1.0.3-20
changelog:
- Clean up semaphore in crlhelper on shutdown (#1326840)
- Update URL to https://fedorahosted.org/mod_revocator/


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.1-3
changelog:
- Add some missing directives RHBZ #569360
- Fix multipart/invalid part ruleset bypass issue (CVE-2012-4528)
  (RHBZ #867424, #867773, #867774)


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.1-5
changelog:
- Use conditional for loading mod_unique_id (rhbz #879264)
- Fix syntax errors on httpd 2.4.x by using IncludeOptional (rhbz #879264, comment #2)


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.3-2
changelog:
- Fix NULL pointer dereference (DoS, crash) (CVE-2013-2765) (RHBZ #967615)
- Fix a possible memory leak.


author: Daniel Kopecek <dkopecek@redhat.com> - 2.9.2-1
changelog:
- RHEL-7.5 erratum
 - Update to 2.9.2
 - Fixed bogus dates in the spec file
 - Enabled mlogc subpackage
 - Enabled collection global lock to prevent collection
   removal failures
  Resolves: rhbz#1388656
  Resolves: rhbz#1139728
  Resolves: rhbz#1473420


author: Jan Kaluza <jkaluza@redhat.com> - 3.4-7
changelog:
- compile with -fno-strict-aliasing to workaround Python
  bug http://www.python.org/dev/peps/pep-3123/


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.5-5
changelog:
- Add JPP depmap for maven-project to override versionless depmap
- Add missing BR/R: maven-project
- Remove unneeded BR: jpa_api


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.7-2
changelog:
- Build with xmvn
- Use better description
- Simplify build-requires
- Update to current packaging guidelines


author: Peter Jones <pjones@redhat.com> - 12-2
changelog:
- Fix /boot/efi/... permissions to match the filesystem's requirements
  Related: rhbz#1512749
- Minor .spec cleanups
  Related: rhbz#1512749


author: Peter Jones <pjones@redhat.com> - 15-7
changelog:
- New signing keys
  Related: CVE-2020-10713
  Related: CVE-2020-14308
  Related: CVE-2020-14309
  Related: CVE-2020-14310
  Related: CVE-2020-14311


author: Thomas Woerner <twoerner@redhat.com> - 2.3.4-8
changelog:
- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)


author: Thomas Woerner <twoerner@redhat.com> - 2.3.4-9
changelog:
- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)


author: Carlos Soriano <csoriano@redhat.com> - 2.3.4-10
changelog:
- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509


author: Carlos Soriano <csoriano@redhat.com> - 2.3.4-13
changelog:
- Fix motifzone 1665. Motif was deactivating shorcuts in cascade menus when
  closing them by mouse.
  Resolves: RHBZ#1467303


author: Colin Walters <walters@redhat.com> - 17.0.0-12
changelog:
- Add patch for aarch64
- Fix for aarch64 64k pagesize. BZ#1076181 (Mark Salter <msalter@redhat.com>)
- Resolves: #1027067


author: Colin Walters <walters@redhat.com> - 17.0.0-16
changelog:
- Add patch for aarch64 48bit VA limits
  This changes the API/ABI only on aarch64, and hence we also bump
  the soname solely on those architectures.  We do retain the same pkg-config
  file name though, so dependencies should only need a rebuild.
- Resolves: #1324216


author: Yaakov Selkowitz <yselkowi@redhat.com> - 17.0.0-20
changelog:
- Switch to upstream aarch64 48bit VA patch
  This reverts the previous API/ABI break on aarch64, so dependencies
  must be rebuilt again.
- Resolves: #1393548


author: Björn Esser <besser82@fedoraproject.org> - 52.5.0-3
changelog:
- SpiderMonkey tests do not fail on any arch
- Basic JIT tests are failing on s390 arches, only
- Use macro for ppc64 arches
- Run tests using Python2 explicitly
- Simplify %check
- Use the %{major} macro consequently
- Replace %define with %global


author: Wim Taymans <wtaymans@redhat.com> - 1.23.8-3
changelog:
- Remove pointless Enhances:
- Fix splelling mistake
- change package name from libs-devel to devel and add Obsolete:
- see rhbz#1394147


author: Michal Schmidt <mschmidt@redhat.com> - 3.2-1
changelog:
- Update to upstream version mpich-3.2 with patches from Fedora.
- Keep 3.0.4 as 'mpich-3.0' for backwards compatibility.
- Resolves: rhbz1091532
- Resolves: rhbz1142117
- Resolves: rhbz1148992


author: Michal Schmidt <mschmidt@redhat.com> - 3.2-2
changelog:
- Remove bad rpath in two binaries in mpich-3.2.
- Restore trimming of shebang lines in config files in mpich-3.0-devel.
- Related: rhbz1091532


author: Jay Fenlason <fenlason@redhat.com> 3.2-10
changelog:
- Add BuildRequires for libibmad-devel
- Build against mpich, now that we have a mpi-3 version of it.
- rebuild against new mvapich2
  Resolves: rhbz1011910, rhbz1011915


author: Michal Schmidt <mschmidt@redhat.com> - 4.1-1
changelog:
- Update IMB to 4.1.
- Update OSUMB to 5.3.
- Add subpackages for new mpich and mvapich2 versions and variants.
- Resolves: rhbz961885
- Resolves: rhbz1093466


author: Michal Schmidt <mschmidt@redhat.com> - 5.4-1
changelog:
- Update IMB to 2018.0.
- Update OMB to 5.4.
- Add builds for openmpi 3 and mvapich 2.3.
- Build IMB NBC and RMA tests.
- Build OSUMB collective async tests.
- Add precise Requires.
- Resolves: rhbz1358437


author: Honggang Li <honli@redhat.com> - 4.11.0-5
changelog:
- Rebase to latest upstream release v4.11.0-5
- mstconfig support for prio_tag and ttl_wa
- Resolves: bz1694703


author: Michal Srb <msrb@redhat.com> - 1:2013.5.1-3
changelog:
- Do not build module with unclear licensing (relames)
- Replace %add_to_maven_depmap with %add_maven_depmap


author: Michal Sekletar <msekleta@redhat.com> - 2:0.85-3
changelog:
- migrate from consolehelper to policykit (#1014074)
- introduce grace period (#1014073)
- query all ipv6 nameservers (#1014075)
- add missing documentation (#949030)
- enable hardened build (#1018907)
- specfile cleanup


author: Dan Horák <dan[at]danny.cz> 1.3.12-5
changelog:
- dropped debug output when tools are called with wrong number of arguments (#538403)
- added patch to support DESTDIR for installing


author: Matej Muzila <mmuzila@redhat.com> - 5:1.5.21-27
changelog:
- Resolves #1388511 (System default CA bundle not set as default in compiled-in
  default or config)
- Resolves #1388512 (mutt sends e-mail with broken "From" header, which has no
  host part)


author: Matej Muzila <mmuzila@redhat.com> - 5:1.5.21-29
changelog:
- Fix IMAP header caching path traversal vulnerability
- Resolves: #1608011
- Resolves: CVE-2018-14355


author: Jarod Wilson <jarod@redhat.com> - 2.2-1.5
changelog:
- Update mvapich23 (TrueScale) bits to 2.3 release
- Fix libmpi.a being built w/o -fPIC
- Resolves: #1625672


author: Tom Lane <tgl@redhat.com> 1:5.1.17-5
changelog:
- Switch to noarch (non-GCJ) build
Resolves: #688937, #819139
- Fix mysql-connector-java-jdbc-4.1.patch to cover both driver classes
Related: #816696


author: Honza Horak <hhorak@redhat.com> - 5.2.5-1
changelog:
- Update to 5.2.5
- Enlarge buffer size for query string when getting info about tables
  Related: #948619


author: Marcin Juszkiewicz <mjuszkiewicz redhat com> - 5.2.5-4
changelog:
- Build failed because whether to use lib64 or not is done by checking
  list of known 64-bit architectures. So added AArch64 to that list.
  Resolves: #1041348


author: Mathieu Bridon <bochecha@fedoraproject.org> - 1.2-2
changelog:
- added comment explaining how the source is obtained (as it is modified from upstream)
- temporary fix for RHBZ#490830 while not fixed upstream


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.5-1
changelog:
- New stable version 1.2.5.
- Enable VDDK plugin on x86-64 only.
- Small refactorings in the spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.0-3
changelog:
- Fix for CVE-2019-14850 denial of service due to premature opening
  of back-end connection
  resolves: rhbz#1757261


author: Miroslav Lichvar <mlichvar@redhat.com> 5.9-8.20130126
changelog:
- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-44
changelog:
- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-49
changelog:
- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.18.20131004git
changelog:
- Resolves: #1063913 - netstat doesn't list sctp servers in -A mode
- Resolves: #1257549 - netstat tool does not throw correct exit code on wrong parameter
- Resolves: #1392910 - ifconfig inaccurately rounds exabytes


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.25.20131004git
changelog:
- Resolves: #1632905 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Laine Stump <laine@redhat.com> - 0.2.3-6
changelog:
- resolves rhbz#961184
- wait for IFF_UP and IFF_RUNNING after calling ifup
- resolves rhbz#1020204
- remove extraneous quotes from BONDING_OPTS
- resolves rhbz#1044681
- eliminate use of uninitialized data when getting mac
- resolves rhbz#1046594
- support systemd based netcf transaction


author: Laine Stump <laine@redhat.com> - 0.2.3-8
changelog:
- resolves rhbz 1060076
- Transform STP value from yes/no to on/off
- resolves rhbz 1060317
- Require bridge-utils for netcf-libs in the specfile


author: Laine Stump <laine@redhat.com> - 0.2.6-1
changelog:
- resolves rhbz#1115176
 - rebase to upstream 0.2.6
 - allow interleaved elements in interface XML schema
 - allow <link> element in vlan and bond interfaces
 - report link state/speed in interface status
 - change DHCPv6 to DHCPV6C in ifcfg files
 - max vlan id is 4095, not 4096


author: - Laine Stump <laine@redhat.com> 0.2.6-2
changelog:
- resolves rhbz#1138196
 - report file path and reason when aug_save fails
 - resolves rhbz#1147650
 - recognize IPADDR0/PREFIX0/NETMASK0/GATEWAY0
 - use git to apply patches to source tree


author: Laine Stump <laine@redhat.com> - 0.2.8-1
changelog:
- Rebase to netcf-0.2.8
 - resolve rhbz#1165965 - CVE-2014-8119
 - resolve rhbz#1159000
 - support multiple IPv4 addresses in interface config (redhat driver)
 - resolve rhbz#1113983
 - allow static IPv4 config simultaneous with DHCPv4 (redhat driver)
 - resolve rhbz#1170941
 - remove extra quotes from IPV6ADDR_SECONDARIES (redhat+suse drivers)
 - resolve rhbz#1090011
 - limit names of new interfaces to IFNAMSIZ characters
 - resolve rhbz#761246
 - properly parse ifcfg files with comments past column 1


author: Paul Moore <pmoore@redhat.com> - 0.20-0
changelog:
- Version bump to match latest upstream
- Cleanups in the specfile due to changes in the upstream package


author: Paul Moore <pmoore@redhat.com> - 0.20-3
changelog:
- Fix a problem when adding a CIPSO DOI with a large number of translations
- Remove old patches
  Resolves: #1053687


author: Josef Ridky <jridky@redhat.com> - 10.79.00-4
changelog:
- Resolves: #1523176 - add manual page for ppmtopga
- Resolves: #1530606 - pbmtoepson command line option fix


author: Daniel Borkmann <dborkman@redhat.com> - 0.5.8-1
changelog:
- Initial netsniff-ng spec file for RHEL, import of 0.5.8-rc1. Note that
  RHEL packaging differs significantly from Fedora as we only do a partial
  build and have a small fraction of dependencies that are available on
  RHEL.


author: Daniel Borkmann <dborkman@redhat.com> - 0.5.8-3
changelog:
- Package Wrangler feedback from Thomas Graf
- Note: 
  CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CFLAGS ; 
  CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CXXFLAGS ; 
  FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
  FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
  LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
  [ "1" == 1 ] && [ "x86_64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
  for i in $(find . -name config.guess -o -name config.sub) ; do 
      [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
  done ; 
  ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu \
	--program-prefix= \
	--disable-dependency-tracking \
	--prefix=/usr \
	--exec-prefix=/usr \
	--bindir=/usr/bin \
	--sbindir=/usr/sbin \
	--sysconfdir=/etc \
	--datadir=/usr/share \
	--includedir=/usr/include \
	--libdir=/usr/lib64 \
	--libexecdir=/usr/libexec \
	--localstatedir=/var \
	--sharedstatedir=/var/lib \
	--mandir=/usr/share/man \
	--infodir=/usr/share/info does not work with upstream's build system here as CFLAGS
  will be overwritten. Changes would need to be proposed to upstream first.


author: Daniel Borkmann <dborkman@redhat.com> - 0.5.8-4
changelog:
- GeoIP was added to RHEL7, so we can make use of that to enable
  astraceroute and features in netsniff-ng.
- For this we also need zlib in order to make the updater work.


author: Eric Garver - 0.5.8-7
changelog:
- netsniff-ng: add packet fanout support
- doc: authors: add Michal as contributor
- man: netsniff-ng: document fanout options
- netsniff-ng: add example for fanout into man page


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.7.1-5
changelog:
- Fixed SHA-3 implementation to conform to final standard (#1252936)
- Fixed CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 which caused issues
  in secp256r1 and secp384r1 calculations (#1314374)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.7.1-8
changelog:
- Use a cache-silent version of mpz_powm to prevent cache-timing
  attacks against RSA and DSA in shared VMs. (#1364897,CVE-2016-6489)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.13-1
changelog:
- add support for changing colors in individual labels, scrollbars, entries,
  textboxes and scales, add custom colorsets 
- add support for NEWT_COLORS and NEWT_COLORS_FILE variables (#689903)
- allow resizing of form
- fix errors found by coverity
- fix va_list usage (Gwenole Beauchesne)
- fix building and installing on Mac OS X (#652479)
- check for slang.h header, support DESTDIR variable, add --without-python
  option (Otavio Salvador)
- add Persian, Low German translations


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.14-1
changelog:
- fix returning strings in whiptail and whiptcl (#752818)
- fix configure to work with multiple python versions (#737998)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.15-1
changelog:
- fix errors found by gcc-with-cpychecker (#800075)
- fix building with tcl8.6 (#902561)
- add fallback to python-config (#783627)
- replace tabs in snack.py (#870647)
- compile snackmodule.c with flag -fPIC (Kang Kai)
- include new translations from transifex
- allow newtWinMenu and newtWinEntries with no buttons or items
- don't draw scale when not mapped
- build with large-file support for stat64
- remove unused variables in test code
- update FSF address
- remove obsolete macros
- make some dependencies arch-specific


author: Steve Dickson <steved@redhat.com> 1.3.0-0.63
changelog:
- nfs.conf: Fixed manage-gids option typo (bz 1677403)
- sm-notify: Added -f flag to nfs.conf parsing (bz 1688932)
- Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1688918)
- nfs-server: Use reload not restart to start gssproxy (bz 1644169)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.67
changelog:
- rpc.gssd: removed a number memory leaks (bz 1807110)
- mount: Report correct error in the fall_back cases (bz 1752329)
- gssd: daemonize earlier (bz 1645083)


author: Steve Dickson <steved@redhat.com> 0.3.3-15
changelog:
- Allow spaces in group principal names (bz 1284597)
- Fixed FD leak in edit_ACL() (bz 1284608)
- Added the RELRO check (bz 1092556)


author: Phil Sutter <psutter@redhat.com> [0.8-6.el7]
changelog:
- netlink_linearize: exthdr op must be u32 (Phil Sutter) [1524246]
- src: fix protocol context update on big-endian systems (Phil Sutter) [1523016]


author: Phil Sutter <psutter@redhat.com> [0.8-9.el7]
changelog:
- evaluate: explicitly deny concatenated types in interval sets (Phil Sutter) [1576426]
- Deprecate add/insert rule 'position' argument (Phil Sutter) [1571968]
- doc: reword insert position, this expects rule handle to insert, not a relative postition (Phil Sutter) [1571968]
- nft.8: Fix reject statement documentation (Phil Sutter) [1571938]
- netlink_delinearize: Fix resource leaks (Phil Sutter) [1504157]
- netlink: Complain if setting O_NONBLOCK fails (Phil Sutter) [1504157]
- hash: Fix potential null-pointer dereference in hash_expr_cmp() (Phil Sutter) [1504157]
- evaluate: Fix memleak in stmt_reject_gen_dependency() (Phil Sutter) [1504157]
- erec: Avoid passing negative offset to fseek() (Phil Sutter) [1504157]
- cli: Drop pointless check in cli_append_multiline() (Phil Sutter) [1504157]
- monitor: Make JSON/XML output respect output_fp (Phil Sutter) [1504157]
- monitor: Make trace events respect output_fp (Phil Sutter) [1504157]
- Review switch statements for unmarked fall through cases (Phil Sutter) [1504157]


author: Phil Sutter <psutter@redhat.com> [0.8-11.el7]
changelog:
- src: Reject 'export vm json' command (Phil Sutter) [1646336]
- monitor: Drop fake XML support (Phil Sutter) [1646336]
- src: bail out when exporting ruleset with unsupported output (Phil Sutter) [1646336]


author: Phil Sutter <psutter@redhat.com> [0.8-13.el7]
changelog:
- doc: Add minimal description of (v)map statements (Phil Sutter) [1628974]
- nft.8: Update meta pkt_type value description (Phil Sutter) [1628694]


author: Daiki Ueno <dueno@redhat.com> - 3.020-1
changelog:
- new upstream release
- update the priority
  nhn-nanum-fonts -> 65-0, un-core-fonts -> 65-1, baekmuk-ttf-fonts -> 65-2


author: Elio Maldonado <emaldona@redhat.com> - 4.10.6-3
changelog:
- Restore s390x related patch as it hasn't been applied upstream yet
- Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption


author: Elio Maldonado <emaldona@redhat.com> - 4.11.0-1
changelog:
- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45


author: Daiki Ueno <dueno@redhat.com> - 3.43.0-7
changelog:
- Don't override date in man-pages
- Revert the change to use XDG basedirs (mozilla#818686)
- Enable SSL2 compatible ClientHello by default
- Disable SSL3 and RC4 by default


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-1
changelog:
- Rebase to NSS 3.44
- Restore fix-min-library-version-in-SSLVersionRange.patch to keep
  SSL3 supported in the code level while it is disabled by policy
- Skip TLS 1.3 tests under FIPS mode


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-2
changelog:
- Skip sysinit gtests properly
- Fix shell syntax error in tests/ssl/ssl.sh
- Regenerate manual pages


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-3
changelog:
- Disable TLS 1.3 under FIPS mode
- Disable RSASSA-PKCS1-v1_5 in TLS 1.3
- Fix post-handshake auth transcript calculation if
  SSL_ENABLE_SESSION_TICKETS is set


author: Bob Relyea <rrelyea@redhat.com> - 3.44.0-6
changelog:
- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)


author: Bob Relyea <rrelyea@redhat.com> - 3.44.0-7
changelog:
- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-16
changelog:
- Resolves: rhbz#1151675 - NSLCD WRAPS LDAP USER UIDNUMBER > 2^31 SO UID
                           IS WRONG (AND A NEGATIVE NUMBER)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-18
changelog:
- Resolves: rhbz#1612543 - Password expiration notification is not sent if
                           the LDAP user doesn't have the objectClass shadowAccount.


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-20
changelog:
- Resolves: rhbz#1714763 - [RHEL7] Correct startup dependencies for cgcred service for nslcd/LDAP clients


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-21
changelog:
- Resolves: rhbz#1618558 - AD authentication on RHEL using nslcd fails
                           with error "pwdLastSet: password changed in the
                           future"


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-22
changelog:
- Do not enable the password expiration controls by default
- Document the option and its default
- Resolves: rhbz#1612543 - Password expiration notification is not sent
                           if the LDAP user doesn't have the objectClass
                           shadowAccount.


author: Tomas Halman <thalman@redhat.com> - 0.8.13-23
changelog:
- Extend password buffer length to allow modern hashes
- Resolves: rhbz#1773506 - Truncated shadowPasswords in nslcd 0.8.13


author: Tomas Halman <thalman@redhat.com> - 0.8.13-24
changelog:
- Extend dns name buffers to allow long dns names
- Resolves: rhbz#1685610 - nslcd aborts when rhost is large and UseDNS is true


author: Tomas Halman <thalman@redhat.com> - 0.8.13-24
changelog:
- Unify password expire message
- Resolves: rhbz#1771439 - Different password expiration message for LDAP users
                           with and without ObjectClass ShadowAccount


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-20
changelog:
- validate lengths of values in extension fields (CVE-2014-9297)
- drop packets with spoofed source address ::1 (CVE-2014-9298)
- reject packets without MAC when authentication is enabled (CVE-2015-1798)
- protect symmetric associations with symmetric key against DoS attack (CVE-2015-1799)
- fix generation of MD5 keys with ntp-keygen on big-endian systems (CVE-2015-3405)
- add option to set Differentiated Services Code Point (DSCP) (#1202828)
- add nanosecond support to SHM refclock (#1117702)
- allow creating all SHM segments with owner-only access (#1122012)
- allow different thresholds for forward and backward step (#1193154)
- allow symmetric keys up to 32 bytes again (#1191111)
- don't step clock for leap second with -x option (#1191122)
- don't drop packets with source port below 123 (#1171640)
- retry joining multicast groups (#1207014)
- increase memlock limit again (#1053569)
- warn when monitor can't be disabled due to limited restrict (#1191108)
- use larger RSA exponent in ntp-keygen (#1191116)
- fix crash in ntpq mreadvar command (#1180721)
- move sntp kod database to allow SELinux labeling (#1082934)
- fix typos in ntpd man page (#1195211)
- improve documentation of restrict command (#1213953)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-22
changelog:
- check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
- allow only one step larger than panic threshold with -g (CVE-2015-5300)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-24
changelog:
- fix crash with invalid logconfig command (CVE-2015-5194)
- fix crash when referencing disabled statistic type (CVE-2015-5195)
- don't hang in sntp with crafted reply (CVE-2015-5219)
- don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
  CVE-2015-7702)
- fix memory leak with autokey (CVE-2015-7701)
- don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
- don't crash in ntpq with crafted packet (CVE-2015-7852)
- check key ID in packets authenticated with symmetric key (CVE-2015-7974)
- fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)
- don't allow spoofed packets to demobilize associations (CVE-2015-7979,
  CVE-2016-1547)
- don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
- fix infinite loop in ntpq/ntpdc (CVE-2015-8158)
- fix resetting of leap status (#1242553)
- extend rawstats log (#1242877)
- report clock state changes related to leap seconds (#1242935)
- allow -4/-6 on restrict lines with mask (#1304492)
- explain synchronised state in ntpstat man page (#1309594)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-25
changelog:
- don't allow spoofed packet to enable symmetric interleaved mode
  (CVE-2016-1548)
- check mode of new source in config command (CVE-2016-2518)
- make MAC check resilient against timing attack (CVE-2016-1550)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-26
changelog:
- don't limit rate of packets from sources (CVE-2016-7426)
- don't change interface from received packets (CVE-2016-7429)
- fix calculation of root distance again (CVE-2016-7433)
- require authentication for trap commands (CVE-2016-9310)
- fix crash when reporting peer event to trappers (CVE-2016-9311)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-28
changelog:
- fix buffer overflow in datum refclock driver (CVE-2017-6462)
- fix crash with invalid unpeer command (CVE-2017-6463)
- fix potential crash with invalid server command (CVE-2017-6464)
- add Spectracom TSYNC driver (#1491797)
- fix initialization of system clock status (#1493452)
- fix typos in ntpd man page (#1420453)
- use SHA1 request key by default (#1442083)
- use network-online target in ntpdate and sntp services (#1466947)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-29
changelog:
- fix CVE-2016-7429 patch to restore default ttl configuration (#1550637)
- fix buffer overflow in parsing of address in ntpq and ntpdc (CVE-2018-12327)
- fix crash in parsing of received address in ntpq (#1616250)
- avoid reading freed memory after disabling netlink socket (#1555401)
- don't disable netlink socket on ENOBUFS error (#1555413)
- replace ntpstat with shell script using ntpq and supporting chrony (#1592871)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-29.el7_8.2
changelog:
- don't update transmission time on invalid response (CVE-2020-11868)
- randomize transmit timestamp in client requests (CVE-?, #1813787)


author: Ade Lee <alee@redhat.com> - 1.0.1-10
changelog:
- Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch
- reverted the previous change.  ppc64le now removed from ExcludeArch


author: Ade Lee <alee@redhat.com> 1.0.2-1
changelog:
- Allow passwords to be retrieved post-init phase
- Fix null termination issue on returned stored passwords


author: Dogtag Team <pki-devel@redhat.com> 1.0.5-1
changelog:
- Resolves: rhbz #1509040 - nuxwdog spec file has outdated
  source for tarballs (dmoluguw)
- Rebase to upstream nuxwdog 1.0.5-1


author: gil cattaneo <puntogil@libero.it> 0:4.0-1
changelog:
- Upgrade to 4.0
- Rename objectweb-asm4
- Adapt to current guidelines
- Fixed poms groupId org.ow2.asm
- Fixed Group field


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-22
changelog:
- Update to last 4.01 version from OCaml git.
- Fix bug in argument parsing
  resolves: rhbz#1139803


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-22.2
changelog:
- Use -fno-strict-aliasing when building the compiler
- ppc, ppc64, ppc64le: Mark stack as non-executable.
  resolves: rhbz#990521
- Provides ocaml(runtime) 4.01.1.
  related: rhbz#1098459


author: Richard W.M. Jones <rjones@redhat.com> - 4.05.0-4
changelog:
- Rebase to 4.05.0 (same as Fedora Rawhide).
- Adds support for POWER, z/VM.
- Improves support for aarch64.
  resolves: rhbz#1447988


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.3-2
changelog:
- New upstream version 1.2.3.
- New upstream location.
- Clean up the spec file.
- Remove patches since they are no longer relevant.
- New setup appears to require ocamldoc.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.3-7
changelog:
- Rebuild for OCaml 4.05.0
- Add missing/implicit dependency on ocamlbuild.
  resolves: rhbz#1447992


author: Richard W.M. Jones <rjones@redhat.com> - 1.5.3-1
changelog:
- New upstream version 1.5.3.
- Remove patch, now upstream.
- Clean up the spec file.
- Rebuild for OCaml 4.00.1.


author: Richard W.M. Jones <rjones@redhat.com> - 0.4.4-2
changelog:
- New upstream version 0.4.4.
- Clean up the spec file.
- Fix homepage and download URLs.
- Don't use configure macro.  Upstream are using some sort of non-autoconf
  brokenness.
- Rename text files as *.txt.  There is no 'api' directory any more.


author: Richard W.M. Jones <rjones@redhat.com> - 0.4.4-8
changelog:
- Rebuild for OCaml 4.05.0
- Remove bogus dependency on camlp4.
- Add missing/implicit dependency on ocamlbuild.
  resolves: rhbz#1447989


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-1
changelog:
- New upstream version 1.3.3.
- Remove patch for OCaml 4 which has been obsoleted by upstream changes.


author: Richard W.M. Jones <rjones@redhat.com> - 1.7.3-6
changelog:
- Remove BRs on ocaml-camlp4 and ocaml-labltk.
- Enable stripping and debuginfo on s390x.
- Use ocaml_native_compiler macro instead of opt test.
  related: rhbz#1447988


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.7-1
changelog:
- Update to new upstream version 0.3.7.
- New URL.
- Include upstream patches since 0.3.7 was released.
- Rebuild for OCaml 4.05.0
- ExcludeArch s390, but build for s390x.
  resolves: rhbz#1447987


author: Richard W.M. Jones <rjones@redhat.com> - 0.6.1.2-5
changelog:
- Modernise the spec file.
- Add upstream patch to remove unnecessary get_cpu_stats second parameter
  (thanks Hu Tao).


author: Richard W.M. Jones <rjones@redhat.com> - 4-1
changelog:
- s390x is now a native architecture with OCaml 4.04 in Fedora >= 26.
- Add riscv64 as a native arch using out of tree backend.


author: Richard W.M. Jones <rjones@redhat.com> - 2.3-0.1.svn234
changelog:
- Update to latest version (subversion release 234).
- Includes fix for CVE-2012-3514 - moderate impact hash table collisions
  (resolves: rhbz#787890).
- Clean up the spec file and bring up to modern standards.
- Add tests.


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.2-2
changelog:
- add missing requires(post) on killall, which we use to poke the message
  bus daemon to get it to reload its configuration, spotted by rcritten


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.3-2
changelog:
- use %systemd_postun_with_restart instead of plain old %systemd_postun,
  because we can be restarted in the %postun


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.4-1
changelog:
- add an [Install] section containing WantedBy=sysinit.target to the systemd
  unit file (#963722), allowing it to actually be "enabled"


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.5-1
changelog:
- add man(5) pages for the configuration files that we include which get
  included by others, just to be tidy (#884552)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.31.5-4
changelog:
- correctly check the error returned from getpwnam_r(), so that we don't
  miss an ERANGE error (#1098616, part of #1108398)
- add a note to pam_oddjob_mkhomedir's manual pointing to where the
  configuration would actually go (part of #1108398)
- stop overriding the system-wide UMASK default in our default
  oddjobd-mkhomedir.conf file (#995097,#1123860), and stop using its
  proprocessor-input file as a reference, since we're patching it now


author: Honggang Li <honli@redhat.com> - 10.3.1.0-9
changelog:
- Rebase to latest upstream branch v10_3_1 as required.
- Clean up change log.
- Apply Epoch tag.
- Resolves: bz1382796


author: Honggang Li <honli@redhat.com> - 10.7.0.0.133-1
changelog:
- Rebase to upstream release v10.7.0.0.133
- Delete opapacketcapture
- Resolves: bz1483552, bz1457762


author: Honggang Li <honli@redhat.com> - 10.0.0.0-443
changelog:
- Apply one missed patch to fix various /tmp races
- Revert the script for building (S)RPMs
- Resolves: bz1262327


author: Honggang Li <honli@redhat.com> - 10.3.1.0-8
changelog:
- Rebase to upstream branch v10_3_1 as required.
- Clean up change log.
- Apply Epoch tag.
- Resolves: bz1257452, bz1382792


author: Ravindra Kumar <ravindrakumar@vmware.com> - 10.2.5-1
changelog:
- Package new upstream version open-vm-tools-10.2.5-8068406 (RHBZ#1431376).
- Added use-tirpc.patch to use libtirpc instead of deprecated Sun RPC.
- Removed wayland-crash.patch which is no longer needed.


author: Miroslav Rezanina <mrezanin@redhat.com> - 10-2.5-3
changelog:
- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.3.0-2
changelog:
- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.3.10-1
changelog:
- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.3.10-2
changelog:
- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-1
changelog:
- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-2.el7
changelog:
- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-3.el7
changelog:
- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)


author: Sinny Kumari <skumari@redhat.com> - 3.10.0-1
changelog:
- Rebase to 3.10.0
- Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
- Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
- Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0


author: Than Ngo <than@redhat.com> - 3.11.0-1
changelog:
- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now


author: Than Ngo <than@redhat.com> - 3.11.0-3
changelog:
- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key


author: Nicolas Chauvet <kwizart@gmail.com> - 2.4.4-0.1.beta
changelog:
- Update to 2.4.4 beta
- Drop python-imaging also from requires
- Drop merged patch for additionals codecs
- Disable the java binding for now (untested)


author: Paul Wouters <pwouters@redhat.com> - 1.4.6-2
changelog:
- Changed conf.xml to reference softhsm at /usr/lib64/pkcs11/libsofthsm2.so
- Updated Requires: to softhsm >= 2.0.0b1-2


author: Dan Horák <dhorak@redhat.com> - 3.7.0-1
changelog:
- rebased to 3.7.0 (#1507619)
- fix test-suite run under root (#1267928)
- Resolves: #1507619, #1267928


author: Matus Honek <mhonek@redhat.com> - 2.4.44-12
changelog:
- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction


author: Matus Honek <mhonek@redhat.com> - 2.4.44-13
changelog:
- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-17
changelog:
- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-18
changelog:
- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-22
changelog:
- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)


author: Jan Synáček <jsynacek@redhat.com> - 0.4.2-3
changelog:
- Correctly fill FSCreationClassName and FSName
- Replace thread-unsafe functions
- Resolves: rhbz#1042843 rhbz#1050841


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.4.2-4
changelog:
- Fix service methods report success before the action is actually finished
- Add description to service methods
- Fan provider made thread-safe
- Resolves: rhbz#1049819 rhbz#1049816 rhbz#1031650


author: Radek Novacek <rnovacek@redhat.com> 0.2.2-3
changelog:
- Fix LMI_IPElementSettingData refering bridging master setting instead of slave setting
- Support connections that has interface-name option specified
- Fix that bond slave names are not going above 2
- allow virtual device name change for bonds
- Resolves: #1064215, #1064324, #1064280, #1064334


author: Radek Novacek <rnovacek@redhat.com> 0.2.2-4
changelog:
- Fix IPv6Type property of LMI_IPAssignmentSettingData class for DHCPv6
- React to IP configuration change
- Resolves: #1066853, #1069169


author: Jan Safranek <jsafrane@redhat.com> - 0.7.0-8
changelog:
- Added dist tag to Release.
- Removed unimplemented classed from MOF files (#1042743).
- Fixed LMI_MDRAIDElementCapabilities.GetInstance call (#1043932).


author: Jan Safranek <jsafrane@redhat.com> - 0.7.1-2
changelog:
- Fix CreateOrModifyStoragePool exception (#1054144).
- Fixed reloading of blivet after mount (#1054177).


author: Jan Safranek <jsafrane@redhat.com> - 0.7.1-3
changelog:
- The provider now removes physical volume metadata from all member devices
  when a volume group is destroyed (#1057692).
- Fixed listing of mounts of MD RAID volumes (#1057666).


author: Peter Hatina <phatina@redhat.com> - 0.9-21
changelog:
- CWD is by default appended in search path
- introduced CLI option --cwd-first-in-path which prepends
  CWD in search path
- Related: #1072252


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.5-3
changelog:
- Drop obex_test program, as it is just for testing purposes
  and has some problems with multiple stack overflows etc.
  Resolves: #521663


author: Tomas Hozza <thozza@redhat.com> - 1.5-6
changelog:
- changing not working Source0 URL and some minor changes in %prep
- new source archive openobex-1.5.0-Source.zip


author: Jakub Jelen <jjelen@redhat.com> - 0.16.0-6.20170227git
changelog:
- Use label from certificate DN if there is none (#1448555)
- Use Cardholder name in the token label (#1449740)
- Avoid infinite loop when reading CAC cards (#1473335)
- Workaround for CAC Alt tokens (#1473418)


author: Jakub Jelen <jjelen@redhat.com> - 0.16.0-8.20170227git
changelog:
- Copy labels from certificate (#1448555)
- Avoid infinite loop in CAC driver when reading non-CAC cards (#1473335)
- Properly parse Simple TLV structures in CAC driver (#1473418)


author: Jakub Jelen <jjelen@redhat.com> - 0.16.0-9.20170227git
changelog:
- make ECPoint behavior standards compliant by default (#1562572)
- allow mechanism to be specified in hexadecimal (#1562572)
- Disable pinpad by default (#1547117, #1547744)


author: Jakub Jelen <jjelen@redhat.com> - 0.19.0-1
changelog:
- Rebase to new upstream release (#1656791)
  - Add Support for HID Crescendo 144K (#1612372)
  - Add Support for CAC Alt tokens (#1645581)
  - Fix usage detection from certificates (#1672898)
  - Fix security issues:
    - CVE-2018-16391
    - CVE-2018-16392
    - CVE-2018-16393
    - CVE-2018-16418
    - CVE-2018-16419
    - CVE-2018-16420
    - CVE-2018-16421
    - CVE-2018-16422
    - CVE-2018-16423
    - CVE-2018-16426
    - CVE-2018-16427


author: Jan Černý <jcerny@redhat.com> - 1.2.17-3
changelog:
- Fix unwanted recursion into mounted remote filesystems (#1655943)
- Evaluate SCAP 1.3 datastreams without downloading remote data (#1709423)


author: Matěj Týč <matyc@redhat.com> - 1.2.17-6
changelog:
- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).


author: Jan Černý <jcerny@redhat.com> - 1.2.17-10
changelog:
- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1:2.0.0-8
changelog:
- Fix a heap-based buffer overflow vulnerability leading to
  remote code execution, CVE-2019-5544
  Resolves: #1781701


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-15 + 0.10.3-2
changelog:
- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-18 + 0.10.3-2
changelog:
- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-12
changelog:
- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-13
changelog:
- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-16
changelog:
- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-17
changelog:
- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-18
changelog:
- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One & done EM side channel (#1619558)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-27
changelog:
- fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
- fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
- enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
  environment variable is set (fixes CVE-2012-4929 #857051)
- use secure_getenv() everywhere instead of getenv() (#839735)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-29.3
changelog:
- fix CVE-2015-0293 - triggerable assert in SSLv2 server
- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
- disable SSLv2 in the generic TLS method


author: William Cohen <wcohen@redhat.com> - 0.9.9-22
changelog:
- Update ppc64/ppc64le support. rhbz1385007
- Add recognition check for POWER8NV and POWER8NVL. rhbz1426426


author: Wim Taymans <wtaymans@redhat.com> - 0.4.22-2
changelog:
- Don't run tests during build
- add new source
- remove old patches, add new patch
- Resolves: #1174391


author: Wim Taymans <wtaymans@redhat.com> - 0.4.22-5
changelog:
- Run backup functions on s390x instead of emulation
- Fix load of parameters smaller than 64 bits
- Related: rhbz#1249506


author: Jan Grulich <jgrulich@redhat.com> - 1:0.20.0-10
changelog:
- Add check for user UID when connecting to pipe (#1005261)
- Add length check in stunEncodeMessage (#1005218)
- Add sign and overflow checks (#1005219)
- Remove hardcoded username and password (#1005216)


author: Hedayat Vatankhah <hedayat.fwd+rpmchlog@gmail.com> - 1.57-2
changelog:
- Fix a bug in recent btrfs patch when an extended partition is examined. 
  (H.J. Lu) (bug #906847)
- Fix naming of /boot partitions according to their fstab entry (bug #893472)
- Don't generate .btrfsfix files which will be included in final rpm
- Fix wrong boot partition set by linux-boot-prober when / and /boot are
  mounted (bug #906886)
- Factor out 'logger', so that it is run once and logs are piped to it (John
  Reiser) (bug #875356)


author: rmarshall@redhat.com - 1.58-6
changelog:
- Adding handling to skip probing extended dos partitions
  Resolves: rhbz#1322957
- Improve Windows detection for dual boot and support Windows 10
  Resolves: rhbz#1322956
- Suppress non-blocking dmraid sector size warning message
  Resolves: rhbz#1198918


author: rmarshall@redhat.com - 1.58-7
changelog:
- Do not resolve device mapper links when generating stanzas
  for bootloader.
  Resolves: rhbz#1300262


author: rmarshall@redhat.com - 1.58-8
changelog:
- Resolve some coverity concerns with how the previous patch detected
  whether or not a partition was a device mapper device.
  Related: rhbz#1300262


author: rmarshall@redhat.com - 1.58-9
changelog:
- Fix regular expression that missed a corner case when detecting
  extended dos partitions.
  Resolves: rhbz#1322957


author: Martin Preisler <mpreisle@redhat.com> - 0.7-13
changelog:
- Avoid long delay before a GeoIP related timeout in case internet is not available
  Resolves: rhbz#1379479


author: Watson Sato <wsato@redhat.com> - 0.8-2
changelog:
- Add japanese translation
- Update other translations
  Resolves: rhbz#1481190
- Fix selection of RHEL datastream
  Resolves: rhbz#1520358


author: Watson Yuuma Sato <wsato@redhat.com> - 0.9-1
changelog:
- Rebase to the upstream version 0.9
- Drop patch that fixed selection of RHEL Alternate Architecture datastream
  Resolves: rhbz#1564903
- Update project URL
  Resolves: rhbz#1502379


author: Jan Černý <jcerny@redhat.com> - 0.9-3
changelog:
- Enable translation of title 'SECURITY POLICY' at Installation Summary screen
  Resolves: rhbz#1543318


author: John Kacur - 0.13-3
changelog:
- Display usage instead of traceback when -c missing args or args is incorrect
Resolves: rhbz#1268287


author: John Kacur - 0.13-4
changelog:
- CLI-start-a-process-from-tuna
- docs: upgrade tuna.8 man page with option -r
Resolves: rhbz#1235829


author: John Kacur - 0.13-5
changelog:
- Rebuild to document
  tuna thows an exception instead of an error message when sched_setaffinity returns EINVAL
  This was actually fixed in v0.13-1
Resolves: rhbz#1290445


author: John Kacur - 0.13-6
changelog:
- Use errno codes instead of plain numbers
- Exit with a message instead of a traceback in isolate_cpus
Resolves: rhbz#1472840


author: Fabiano Fidêncio <fidencio@redhat.com> - 20190805-1
changelog:
- Resolves: rhbz#1737367 - Update to latest upstream release
- Resolves: rhbz#1737369 - Add 7.8 to the osinfo-db which will be used on 7.8


author: Fabiano Fidêncio <fidencio@redhat.com> - 20190805-2
changelog:
- Resolves: rhbz#1750807 - Fedora/RHEL/CentOS JeOS kickstart files for
                           unattended installation are broken


author: Fabiano Fidêncio <fidencio@redhat.com< - 20200529-1
changelog:
- Resolves: rhbz#1839905 - [RHEL7.9] "virt-install --os-variant rhel7.9"i
                           fails with error
- Resolves: rhbz##1840085 - Rebase to the latest upstream release


author: Pravin Satute <psatute AT redhat DOT com> - 2.1-1
changelog:
- Resolves: rhbz#1284772 - Upstream new release with ttfautohint
- Changed url to https://github.com/RedHatBrand/overpass/, https://overpassfont.org looks dead.
- Add Light variant font.
- Add metainfo file to show this font in gnome-software.


author: Rex Dieter <rdieter@fedoraproject.org> 1.1.1-2
changelog:
- workaround anaconda main menu not visible in F18 Beta TC2 KDE Live (#864058)
- -DENABLE_INNER_SHADOWS_HACK=0


author: Stef Walter <stefw@redhat.com> - 0.20.7-1
changelog:
- Update to upstream stable 0.20.7 release
- Expose pkcs11x.h header and defines for attached extensions rhbz#1142305


author: Daiki Ueno <dueno@redhat.com> - 0.23.5-3
changelog:
- Avoid reference to thread-unsafe strerror rhbz#1378947
- Fix PKCS#11 OAEP interface rhbz#1191209
- Update documentation to follow RFC7512 rhbz#1165977


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-2
changelog:
- Assume unprivileged ACL if unable to get user information from host
- Delay 2 seconds before re-attempting a failed node attribute write
- SNMP alert sample script now sends all OIDs with every alert
- Recover dependent resources correctly with asymmetric ordering
- Rebase on upstream 1.1.20 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1597695
- Resolves: rhbz#1608979
- Resolves: rhbz#1628966
- Resolves: rhbz#1644864


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-3
changelog:
- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-4
changelog:
- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.21-1
changelog:
- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.21-3
changelog:
- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.22-1
changelog:
- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.23-1
changelog:
- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492


author: Naveen Kumar <nkumar@redhat.com> - 3.0-8
changelog:
- add ur-in, ur-pk & pa-pk locale-specific overrides rule in 67-paktype-naskh-basic.conf
- add ur-in, ur-pk & pa-pk locale-specific overrides rule in 67-paktype-naskh-basic-sa.conf
- resolves bug #586789


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-14
changelog:
- pam_unix: add no_pass_expiry option for ignoring password
  expiration in crond and sshd with public key authentication
- add manual page for environment(5) (#1110257)
- pam_loginuid: log if auditd not detected
- always ignore audit error when -EPERM is returned (#1287800)
- pam_lastlog: fix possible NULL dereference when localtime fails (#1313537)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-19
changelog:
- pam_access: (group) match syntax is prioritized over network@netgroup
  match (#1358881), add support for additional /etc/security/access.d/*.conf
  files, improve documentation (#1421735)
- pam_lastlog: fix pt_BR translation (#1185697)
- pam_faillock: support admin_group with users equivalent to root in
  faillock handling (#1285550)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-23
changelog:
- pam_get_authtok_verify: ensure no double verification happens
- manual page fixes for pam_tty_audit and pam_wheel
- pam_unix: lower the excessive maximum number of closed fd descriptors
  when spawning handlers
- pam_loginuid: do not prevent login in unprivileged containers


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.6-1
changelog:
- handle ccache creation correctly for users who are mapped to principal
  names in realms other than the default (#999604)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.7-1
changelog:
- drop some no-longer-necessary code to cede ownership of keyring ccaches
  to an unprivileged user at login-time to work better with upcoming changes
  to libkrb5's keyring ccache support (libkrb5: #991148, this one's #1005376)
- if we don't have a ccname_template, if we're built against a libkrb5 that
  provides interfaces for reading its configuration files, try to read the
  default_ccache_name value from the [libdefaults] section before falling
  back to the default we've set at compile-time (#more of #1005376)
- stop specifying a default ccache location at compile-time on F21 and later,
  to make our unconfigured default better line up with libkrb5's unconfigured
  default


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.8-4
changelog:
- fix to only prompt for passwords when obtaining credentials for performing
  password changes by toggling the subsequent_prompt default to off when
  called to perform a password change (#1063933)


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-22
changelog:
- Don't rebuild documentation for each platform. Doing so creates unique 
document files which are shared and conflict on multilib installations.


author: Bob Relyea <rrelyea@redhat.com> 0.6.2.29
changelog:
- Coverity and compilier warning fixes
- Use the PKIX validator
- Fix crash when ldap connection fails and debugging is enabled.


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-5
changelog:
- patch: Fix failure in invoking btrfs internal comparison of subvolumes
- patch: Remove references to missing programs from man pages
- Resolves: #1060806, #1063844


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-6
changelog:
- patch: Add norecovery option mounting XFS read-only snapshot
- patch: Fix ACL modification failure with XFS filesystem
- patch: Sync SELinux context of .snapshots subvolume (btrfs only)
- Resolves: #1064111, #1065969, #1069312


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-7
changelog:
- patch: fix empty-pre-post cleanup algorithm
- patch: add conditionals for btrfs library versions
- Resolves: #1071973 #1142954


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-9
changelog:
- patch: fix snapperd abort while passing large data over dbus
- patch: workaround linkage issue on s390 and ppc64le
- Resolves: #1229353


author: Ondrej Kozina <okozina@redhat.com> - 0.2.8-1
changelog:
- Update to snapper 0.2.8
- patch: rule out race while mounting lvm snapshot
- Resolves: #1250371 #1262370


author: William Cohen <wcohen@redhat.com> - 5.2.0-25
changelog:
- Update IBM Power 9 events. rhbz1510684
- Make lmsensor dynamically size internal array. rhbz1510497


author: Akira TAGOH <tagoh@redhat.com> - 0.6.8-23
changelog:
- the spec file cleanup
- Fix the undefined symbol issue in libpaps.so.0
- Correct FSF address in the COPYING.LIB


author: Nathan Scott <nathans@redhat.com> - 0.4.0-5
changelog:
- Use RPM macros to ease dropwizard metrics enablement.
- Correct the dependency on systems.uom:systems-unicode-java8


author: Brian C. Lane <bcl@redhat.com> 3.1-23
changelog:
- libparted: Use read only when probing devices on linux
  Resolves: rhbz#1245144
- tests: Use wait_for_dev_to_ functions
  Related: rhbz#1245144


author: Brian C. Lane <bcl@redhat.com> 3.1-24
changelog:
- tests: Add udevadm settle to wait_for_ loop
  Related: rhbz#1260664
- tests: Add-wait-to-t9042
  Resolves: rhbz#1257415
- tests: Fix t1700 failing on a host with a 4k xfs file
  Related: rhbz#1260664


author: Brian C. Lane <bcl@redhat.com> 3.1-25
changelog:
- docs: Add list of filesystems for fs-type
  Resolves: rhbz#1311596
- libparted: Remove fdasd geometry code from alloc_metadata
  Resolves: rhbz#1244833


author: Brian C. Lane <bcl@redhat.com> - 3.1-29
changelog:
- Add support for NVMe devices
  Resolves: rhbz#1316239
- Backport partition resize command
  Resolves: rhbz#1423357


author: Brian C. Lane <bcl@redhat.com> - 3.1-30
changelog:
- partprobe: always close dev when probing disks
  Resolves: rhbz#1551411
- tests: Add t4201 to test partprobe with 1025 devices
  Related: rhbz#1551411


author: Brian C. Lane <bcl@redhat.com> - 3.1-31
changelog:
- Backport patches for dasd on virtio
  fdasd: geometry handling updated from upstream s390-tools
  dasd: enhance device probing
  parted: fix build error on s390
  fdasd.c: Safeguard against geometry misprobing
  Resolves: rhbz#1676604
- Add part-label documentation to mkpart command
  Resolves: rhbz#1686659


author: Tomas Mraz <tmraz@redhat.com> 0.78.99-1
changelog:
- use better (auditable) libselinux calls for checking
  the access to passwd (#518268)
- add support for the -e option as seen on Debian passwd
- make the binary PIE and full RELRO (#784483)


author: Jiri Kucera <jkucera@redhat.com> - 0.79-5
changelog:
- Backport ca46cac (allow passwords longer than 79 characters)
  Backport Steve Grubb's patches
  - stop double auditing, use appropriate record types, update op field in
    audit events, don't audit status check, fix password aging logging
  Backport 02d4478 (better document -S option)
  Fix URL and Source tags
  Resolves: #1276570, #1489086, #1638105, #1145256, #1472567


author: Jiri Kucera <jkucera@redhat.com> - 0.79-6
changelog:
- Fix incorrect -S output when password field in /etc/passwd is empty but the
  password information in /etc/shadow is set
  Resolves: #1686436


author: Than Ngo <than@redhat.com> - 2.7.1-11
changelog:
- Fixed CVE-2016-10713 - Out-of-bounds access in pch_write_line function 
- Fixed CVE-2018-6952 - Double free of memory
- Resolves: #1626473, honor new file mode 100755 when applying patches
- Resolves: #1653294, Added virtual provides for bundled gnulib library


author: Hans de Goede <hdegoede@redhat.com> - 2.0-8
changelog:
- Add a patch fixing various crashes due to referencing freed memory (#1133339)
- Cherry-pick some other fixes from upstream git


author: Kalev Lember <kalevlember@gmail.com> - 3.0-1
changelog:
- Update to 3.0
- Use license macro for the LICENCE file
- Use desktop-file-validate instead of desktop-file-install


author: Nathan Scott <nathans@redhat.com> - 4.3.2-1
changelog:
- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)


author: Nathan Scott <nathans@redhat.com> - 4.3.2-2
changelog:
- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue


author: Nathan Scott <nathans@redhat.com> - 4.3.2-4
changelog:
- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)


author: Nathan Scott <nathans@redhat.com> - 4.3.2-7
changelog:
- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)


author: Nathan Scott <nathans@redhat.com> - 4.3.2-8
changelog:
- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)


author: Petr Pisar <ppisar@redhat.com> - 8.32-13
changelog:
- Disable unsupported JIT mode on little-endian 64-bit PowerPC platform
  (bug #1125642)
- Raise optimization level to 3 on little-endian 64-bit PowerPC (bug #1123498)


author: Petr Pisar <ppisar@redhat.com> - 8.32-15
changelog:
- Fix compiling expression where start-anchored character with more than one
  other case follows circumflex in multiline UTF mode (bug #1110621)
- Fix character class with a literal quotation (bug #1111091)
- Fix empty-matching possessive zero-repeat groups in interpreted mode
  (bug #1119320)
- Fix compiler crash for zero-repeated groups with a recursive back reference
  (bug #1119356)
- Reset non-matched groups within capturing group up to forced match
  (bug #1161597)
- Fix static linking (bug #1217111)
- Package pcredemo.c as a documentation for pcre-devel (bug #1217118)


author: Petr Pisar <ppisar@redhat.com> - 8.32-16
changelog:
- Fix CVE-2015-2328 (infinite recursion compiling pattern with recursive
  reference in a group with indefinite repeat) (bug #1330509)
- Fix CVE-2015-8385 (buffer overflow caused by named forward reference to
  duplicate group number) (bug #1330509)
- Fix CVE-2015-8386 (buffer overflow caused by lookbehind assertion)
  (bug #1330509)
- Fix CVE-2015-3217 (stack overflow caused by mishandled group empty match)
  (bug #1330509)
- Fix CVE-2015-5073 and CVE-2015-8388 (buffer overflow for forward reference
  within backward assertion with excess closing parenthesis) (bug #1330509)
- Fix CVE-2015-8391 (inefficient posix character class syntax check)
  (bug #1330509)
- Fix CVE-2016-3191 (workspace overflow for (*ACCEPT) with deeply nested
  parentheses) (bug #1330509)


author: Petr Pisar <ppisar@redhat.com> - 8.32-17
changelog:
- Let [:graph:], [:print:], and [:punct:] POSIX classes to handle Unicode
  characters in UCP mode to match Perl behavior (bug #1400267)
- Fix matching Unicode ranges in JIT mode (bug #1402288)


author: Petr Pisar <ppisar@redhat.com> - 10.22-7
changelog:
- Fix pcre2-config --libs-posix output (upstream bug #1924)
- Fix a memory leak and a typo in a documentation (upstream bug #1973)
- Fix a buffer overflow in partial match test for CRLF in an empty buffer
  (upstream bug #1975)
- Fix a crash in pcre2test when displaying a wide character with a set locate
  (upstream bug #1976)


author: Petr Pisar <ppisar@redhat.com> - 10.22-8
changelog:
- Fix a crash when doing an extended substitution for \p, \P, or \X
  (upstream bug #1977)
- Fix a crash in substitution if starting offest was specified beyond the
  subject end (upstream bug #1992)


author: Petr Pisar <ppisar@redhat.com> - 10.23-2
changelog:
- Handle memmory allocation failures in pcre2test tool
- Fix a crash when finding a Unicode property for a character with a code
  point greater than 0x10ffff in UTF-32 library while UTF mode is disabled
  (upstream bug #2052)


author: Ivan Devat <idevat@redhat.com> - 0.9.167-1
changelog:
- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1649732 rhbz#1554302 rhbz#1447349 rhbz#1647640 rhbz#1594738 rhbz#1676956 rhbz#1474747 rhbz#1679534 rhbz#1642514 rhbz#1389140 rhbz#1522858 rhbz#1676944 rhbz#1638376 rhbz#1515021 rhbz#1598197


author: Ivan Devat <idevat@redhat.com> - 0.9.168-1
changelog:
- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829


author: Ivan Devat <idevat@redhat.com> - 0.9.168-2
changelog:
- Do not generate custom DH key if it was not requested by setting its custom length
- Resolves: rhbz#1760434


author: Ivan Devat <idevat@redhat.com> - 0.9.168-3
changelog:
- More fixes for the case when PATH environment variable is not set
- Pcsd no longer sends Server HTTP header
- Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
- Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174


author: Ondrej Mular <omular@redhat.com> - 0.9.168-4
changelog:
- Added command 'pcs resource relations'
- Added command 'pcs resource safe-disable'
- Resolves: rhbz#1770975 rhbz#1770973


author: Ivan Devat <idevat@redhat.com> - 0.9.169-1
changelog:
- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569


author: Ivan Devat <idevat@redhat.com> - 0.9.169-2
changelog:
- Keep autogenerated IDs of set constraints reasonably short
- Use fixed version of python module subprocess (package python2-subprocess32)
- Resolves: rhbz#1820813 rhbz#1824206


author: Ivan Devat <idevat@redhat.com> - 0.9.169-3
changelog:
- Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
- Fixed race-condition when removing multiple resources from web UI
- Resolves: rhbz#1833115 rhbz#1843593


author: Robert Relyea <rrelyea@redhat.com> - 1.8.8-7
changelog:
- Don't hang if the daemon is blocked by systemd
- Make sure we have a new enough systemd-devel to have the udev headers


author: Robert Relyea <rrelyea@redhat.com - 1.4.10-13
changelog:
- Add support for missing readers (broadcom, cherry).
- mark deprecated readers as unsupported and needing an update


author: Jarod Wilson <jarod@redhat.com> - 3.0-6
changelog:
- Update to upstream 3.0-3.1.gb36a595 tarball for upstream fixes
- Add in manpages
- Related: rhbz#1365750
- Resolves: rhbz#948476


author: Jarod Wilson <jarod@redhat.com> - 3.0-7
changelog:
- Address a myriad more coverity/clang warnings
- Add raw_ethernet_* man page symlinks
- Related: rhbz#1273176
- Related: rhbz#948476


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-288
changelog:
- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-291
changelog:
- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-293
changelog:
- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)


author: Paul Howarth <paul@city-fan.org> - 1.11-1
changelog:
- Update to 1.11
  - Add new keywords for 5.16: __SUB__ and evalbytes
- Use DESTDIR rather than PERL_INSTALL_ROOT


author: Paul Howarth <paul@city-fan.org> - 1.12-1
changelog:
- Update to 1.12
  - Add new keyword fc (Unicode casefolding) for 5.16
  - Added diag before each big t/11keywords.t loop
- This release by RURBAN -> update source URL
- Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 1.13-1
changelog:
- Update to 1.13
  - Removed diag before each big t/11keywords.t loop
  - Added lots of suggested keywords from CPAN RT#62382
  - Moved exp from @Barewords to @Functions
  - Added $^CHILD_ERROR_NATIVE $^GLOBAL_PHASE $^LAST_FH $^MATCH $^PREMATCH
    $^POSTMATCH $^UTF8CACHE $^WIN32_SLOPPY_STAT to @Scalars
  - Added English names for %!, @F (perlrun) and @ARG for @_
  - Added %+ %- and $LAST_SUBMATCH_RESULT
- BR: perl(Test::Pod)
- Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 2.05.03-3
changelog:
- Don't BR: perl(LWP::Simple) for optional tests when bootstrapping; this is a
  cleaner fix than nobbling perl-URI's runtime dependencies


author: Paul Howarth <paul@city-fan.org> - 20081208-8
changelog:
- Clean up for modern rpmbuild:
  - Drop BuildRoot specification
  - Drop %clean section
  - Don't bother cleaning buildroot in %install section
  - Make %files list more explicit
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Replace provides filter with version that works with rpm ≥ 4.9
- Include tests as %doc since they're referred to by examples/README


author: Paul Howarth <paul@city-fan.org> - 20120719-1
changelog:
- Update to 20120719:
  - Support using data from RangeMessage.xml, so you can use the latest data
    from ISBN without updating this module
- Fix shellbang and permissions of make_data.pl script to placate rpmlint
- Filter dependency on perl(LWP::Simple), required only by make_data.pl script,
  not in normal operation
- Don't need to remove empty directories from the buildroot
- BR: perl(Carp), perl(File::Spec::Functions) and perl(Test::Manifest) ≥ 1.14
- BR: at least version 1.00 of perl(Test::Pod)


author: Paul Howarth <paul@city-fan.org> - 20120719.001-1
changelog:
- Update to 20120719.001:
  - Require Test::More ≥ 0.95 for subtest support
  - No code or feature changes
- Bump Test::Manifest version requirement to 1.21
- Bump Test::More version requirement to 0.95
- Drop redundant buildreq perl(Test::Prereq)


author: Paul Howarth <paul@city-fan.org> - 0.18-1
changelog:
- Update to 0.18:
  - Expand changes_file_ok() to accept arguments so that a specific version may
    be checked
  - Add $VERSION to Test::CPAN::Changes so it plays nice with the toolchain
    e.g. Module::Install::AuthorRequires


author: Paul Howarth <paul@city-fan.org> - 0.19-1
changelog:
- Update to 0.19:
  - Test::CPAN::Changes now accepts version entries ending in '-TRIAL'
    (CPAN RT#76882)
  - releases() in CPAN::Changes also accepts entries ending in '-TRIAL'
- Don't need to remove empty directories from buildroot
- Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 0.20-1
changelog:
- Update to 0.20:
  - 'delete_empty_groups' shouldn't erronously delete default group
  - Add tidy_changelog utility script
  - Minor pod fix
- Bump Test::More version requirement to 0.96 (CPAN RT#84994)


author: Paul Howarth <paul@city-fan.org> - 0.008-7
changelog:
- Run the extra tests in a separate test run, and only when not bootstrapping
- Don't BR: perl(Test::Spelling) with RHEL ≥ 7 as we don't have the other
  dependencies needed do the spell check test


author: Paul Howarth <paul@city-fan.org> - 0.008-12
changelog:
- Never BR: perl(Test::Version) for EL builds as perl(version) is too old
  prior to EL-7 and this package is included in RHEL ≥ 7 but Test::Version
  is only in EPEL


author: Paul Howarth <paul@city-fan.org> - 0.08-12
changelog:
- BR:/R: perl(Carp)
- BR: perl(base)
- Use DESTDIR rather than PERL_INSTALL_ROOT
- Use %{_fixperms} macro rather than our own chmod incantation
- Don't need to remove empty directories from the buildroot
- Don't use macros for commands
- Make %files list more explicit
- Fix typos in %description


author: Paul Howarth <paul@city-fan.org> - 0.19-7
changelog:
- New upstream re-release of 0.19 by DROLSKY
  - The load_class() subroutine now returns the class name on success
    (CPAN RT#76931)
  - Exceptions and errors from Class::Load no longer contain references to line
    numbers in Class::Load or Module::Runtime; this applies to exceptions
    thrown by load_class, load_first_existing_class, and load_optional_class,
    as well as the error returned by try_load_class
  - Exceptions are now croaked properly so they appear to come from the calling
    code, not from an internal subroutine; this makes the exceptions look more
    like the ones thrown by Perl's require (CPAN RT#68663)
- This release by DROLSKY -> update source URL
- BR: perl(Scalar::Util) for the module
- BR: perl(lib) for the test suite
- Drop buildreqs perl(strict) and perl(warnings) - not dual-lived


author: Paul Howarth <paul@city-fan.org> - 0.04-1
changelog:
- Update to 0.04:
  - Some small test changes for the latest Module::Implementation and
    Class::Load
- Bump Class::Load version requirement to 0.15
- BR: perl(constant), perl(Module::Implementation) ≥ 0.04, 
  perl(Test::Requires), perl(Test::Without::Module) and perl(version) for test 
  suite


author: Paul Howarth <paul@city-fan.org> - 0.06-1
changelog:
- Update to 0.06:
  - Require Class::Load 0.20 in the code, not just the distro metadata
    (CPAN RT#80002)
  - Weird classes with either an ISA or VERSION constant would cause the XS to
    blow up badly (CPAN RT#79998)
  - Fixed some broken logic that lead to a segfault from the
    014-weird-constants.t test on some Perls (CPAN RT#80059)
- Bump perl(Class::Load) version requirement to 0.20
- Drop explicit requirement for perl(Class::Load), no longer needed


author: Paul Howarth <paul@city-fan.org> - 2.055-1
changelog:
- Update to 2.055
  - Fix misuse of magic in API (CPAN RT#78080)
- Drop redundant explicit requires for perl(Exporter) and perl(File::Temp)


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
- Update to 2.058
  - Compress::Raw::Bzip2 needs to use PERL_NO_GET_CONTEXT (CPAN RT#80318)
  - Install to 'site' instead of 'perl' when perl version is 5.11+
    (CPAN RT#79811)
  - Update to ppport.h that includes SvPV_nomg_nolen (CPAN RT#78080)


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
- Update to 2.058
  - Compress::Raw::Zlib needs to use PERL_NO_GET_CONTEXT (CPAN RT#80319)
  - Install to 'site' instead of 'perl' when perl version is 5.11+
    (CPAN RT#79812)
  - Update to ppport.h that includes SvPV_nomg_nolen (CPAN RT#78079)


author: Paul Howarth <paul@city-fan.org> - 2.061-1
changelog:
- Update to 2.061
  - Include zlib 1.2.8 source
  - Typo fix (CPAN RT#85431)
  - Silence compiler warning by making 2nd parameter to DispStream a const char*


author: Paul Howarth <paul@city-fan.org> - 2.14-3
changelog:
- Reinstate compatibility with older distributions like EL-5
- Run release tests as well as the regular test suite
- BR: perl(Test::CPAN::Meta) and perl(Test::More)
- Only drop perl(Test::MinimumVersion) as a buildreq when bootstrapping, and
  add a comment about why that's needed
- Use DESTDIR rather than PERL_INSTALL_ROOT
- Don't use macros for commands
- Make %files list more explicit
- No longer need to fix permissions of Tiny.pm
- Use tabs


author: Paul Howarth <paul@city-fan.org> - 2.29-10
changelog:
- BR: perl(bytes), perl(constant), perl(Digest::MD5) - required by module
- BR: perl(Crypt::Blowfish), perl(Crypt::Blowfish_PP), perl(Crypt::DES),
  perl(Crypt::Rijndael) for improved test coverage, except when bootstrapping


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.29-11
changelog:
- Do not build-require Crypt::Blowfish, Crypt::Blowfish_PP, and Crypt::Rijndael
  on RHEL >= 7
- Resolves: rhbz#822812


author: Paul Howarth <paul@city-fan.org> - 2.33-1
changelog:
- Update to 2.33
  - Fixes to regular expressions to avoid rare failures to correctly strip
    padding in decoded messages
  - Add padding type = "none"
  - Fix "Taint checks are turned on and your key is tainted" error when
    autogenerating salt and IV
  - Fix minor bugs CPAN RT#83175 and CPAN RT#86455
- Don't need to remove empty directories from the buildroot
- Drop %defattr, redundant since rpm 4.4
- Use %{_fixperms} macro rather than our own chmod incantation
- Use DESTDIR rather than PERL_INSTALL_ROOT


author: Petr Šabata <psabata@redhat.com> - 1.3-12
changelog:
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
- Spec cleanup, fix dependencies


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.3-16
changelog:
- Add license Beerware
- Use DESTDIR rather than PERL_INSTALL_ROOT
- Don't use macros for commands
- Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.64-3
changelog:
- Remove circular BR: perl(Net::SSL) provided by this package
- Placate rpmlint regarding file permissions
- Don't need to remove empty directories from the buildroot


author: Marcela Mašláňová <mmaslano@redhat.com> 1.34-1
changelog:
- update by Fedora::App::MaintainerTools 0.006
- updating to latest GA CPAN version (1.34)
- replaced old BR on perl(Test::Simple) with Test::More
- added a new req on perl(DBI) (version 1.21)


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.135.07-240
changelog:
- update the version to override the module from perl.srpm
- bump release to override sub-package from perl.spec


author: Paul Howarth <paul@city-fan.org> - 0.107-3
changelog:
- package LICENSE file
- run test suite even when bootstrapping, as it should still pass
- run release tests too
- enhance %description so it makes sense
- BR: perl(Test::More)


author: Paul Howarth <paul@city-fan.org> - 0.107-4
changelog:
- drop -tests subpackage (general lack of interest in this), but include
  them as documentation for the main package
- drop redundant %{?perl_default_filter}
- don't use macros for commands
- can't find any dependency cycle so drop %{?perl_bootstrap} usage
- drop ExtUtils::MakeMaker version requirement to 6.30, actual working minimum


author: Marcela Mašláňová <mmaslano@redhat.com> 0.33-1
changelog:
- Specfile autogenerated by cpanspec 1.79.
- apply patch to automatically create alias -> DP on Data::Peek


author: Petr Pisar <ppisar@redhat.com> - 2:1.04-6
changelog:
- Restore object after failed truncate() call (bug #1095111)
- Add 2015-06-30 and 2016-12-31 leap seconds (bug #1353509)


author: Petr Pisar <ppisar@redhat.com> - 1.70-1
changelog:
- 1.70 bump (bug #1101251)
- Regenerate Perl code from timezone sources (bug #1101251)
- Update time zone data to Olson 2017b (bug #1101251)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.11-12
changelog:
- Update dependencies
- Use DESTDIR rather than PERL_INSTALL_ROOT
- Don't use macros for commands
- Don't need to remove empty directories from the buildroot


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.03-20
changelog:
- Remove BuildRoot definition.
- Remove BuildRoot cleaning.
- Replace PERL_INSTALL_ROOT with DESTDIR.
- Remove cleaning empty directories.
- Remove %defattr.
- Do not export private library (Leak.so()).


author: Paul Howarth <paul@city-fan.org> - 1:2.08-8
changelog:
- Spec clean-up:
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - BR: perl(Carp)
  - BR: perl(Test::Pod) and perl(Test::Pod::Coverage) if not bootstrapping
  - Use %{_fixperms} macro instead of our own chmod incantation
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.06-1
changelog:
- Update to 0.06
  - Add optional runtime conflict warnings
  - Require 5.8.1, clean up a few things and add a few more tests
  - Use Exporter instead of Sub::Exporter
- Update patch for building with Test::More < 0.88
- Drop patch for building with old ExtUtils::MakeMaker, no longer needed
- Don't need to remove empty directories from the buildroot


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.898-2
changelog:
- Specify all dependencies
- Drop %defattr, remove %clean section
- Don't need to remove empty directories from the buildroot
- Use DESTDIR rather than PERL_INSTALL_ROOT


author: Petr Pisar <ppisar@redhat.com> - 2.51-6
changelog:
- Rebuild against "file" package fixed by Jan Kaluza to correct run-time
  dependencies (bug #1048910)


author: Paul Howarth <paul@city-fan.org> - 1:0.17020-1
changelog:
- Update to 0.17020
  - Change to Shlomi Fish's new E-mail and web address
  - Clarify the licence of lib/Error/Simple.pm (CPAN RT#81277)
  - Correct typos (CPAN RT#85023)
- Don't use macros for commands
- Don't need to remove empty directories from the buildroot
- Make %files list more explicit
- Drop %defattr, redundant since rpm 4.4
- Avoid provides/requires from examples


author: Paul Howarth <paul@city-fan.org> - 1.37-1
changelog:
- Update to 1.37
  - I now recommend you use Throwable instead of this module; it has a nicer,
    more modern interface
  - Fixed warning from basic.t on 5.17.x (CPAN RT#79121)
  - 1.33 did not declare any prereqs (CPAN RT#79677)
  - Require Class::Data::Inheritable ≥ 0.02
  - Fixed some stupidity in the tests that appears to have been highlighted by
    recent changes to Devel::StackTrace (CPAN RT#81245)
  - Fixed various bugs and confusion in the docs
- Don't need to remove empty directories from the buildroot
- Don't use macros for commands
- Make the %files list more explicit
- Use DESTDIR rather than PERL_INSTALL_ROOT
- Drop release testing (now more extensive and would fail anyway)
- Drop support for distributions older than EL-6 (test suite would need
  patching for EL-5 anyway)


author: Petr Šabata <contyk@redhat.com> - 2.46-1
changelog:
- 2.46 bump
- Specify all dependencies
- Drop command macros
- Modernize the spec and clean whitespace


author: Paul Howarth <paul@city-fan.org> - 3.20-10
changelog:
- Clean up spec file for modern rpmbuild:
  - Drop BuildRoot definition
  - Drop %defattr
  - Drop %clean section
  - Drop cleaning of buildroot in %install
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Don't use macros for commands
- Break build dependency loop by only using perl(Test::Pod) if we're not
  bootstrapping
- BR: perl(Test::More)


author: Paul Howarth <paul@city-fan.org> - 1:5.02-4
changelog:
- Don't BR: perl(Test::LeakTrace) when bootstrapping
- Don't use macros for commands
- Don't need to remove empty directories from the buildroot
- Drop explicit provides for perl(HTML::Tree) now that CPAN and RPM versions
  are back in sync


author: Petr Pisar <ppisar@redhat.com> 6.00-1
changelog:
- Specfile autogenerated by cpanspec 1.78.
- Remove BuildRoot stuff
- Conflicts with perl-libwww-perl-5* and older


author: Petr Pisar <ppisar@redhat.com> - 0.033-2
changelog:
- Croak on failed write into a file (bug #1031096)
- Do not use already existing temporary files (bug #1031096)


author: Paul Howarth <paul@city-fan.org> - 0.24-1
changelog:
- Update to 0.24
  - Add Build.PL
  - Better support for debugger
  - Makefile.PL fixed
  - New test added
- BR: perl(Carp)
- Include demo files as %doc
- Fix line endings on documentation
- Upstream release is now a tarball rather than a zipfile
- Drop %defattr, redundant since rpm 4.4
- Don't need to remove empty directories from the buildroot
- Use DESTDIR rather than PERL_INSTALL_ROOT
- Use %{_fixperms} macro rather than our own chmod incantation
- Don't use macros for commands
- Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 2.055-1
changelog:
- Update to 2.055
  - FAQ: added a few paragraphs on how to deal with pbzip2 files
    (CPAN RT#77743)
  - Compress::Zip: speed up compress, uncompress, memGzip and memGunzip
    (CPAN RT#77350)
- BR: perl(lib)
- Drop BR: perl(Test::Builder) and perl(Test::More) as they're bundled
- Drop BR: perl(Config), perl(Fcntl), perl(File::Copy), perl(File::Glob),
  perl(POSIX) and perl(Symbol) as they're not dual-lived
- Drop redundant explicit require for perl(Exporter)
- Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
- Update to 2.058
  - IO::Compress::Zip
    - Allow member name and Zip Comment to be "0"
  - IO::Compress::Base::Common
    - Remove "-r" test - the file open will catch this
    - IO::Compress::Base::Common returned that it could not read readable files
      in NFS (CPAN RT#80855)
  - Install to 'site' instead of 'perl' when perl version is 5.11+
    (CPAN RT#79820)
  - General performance improvements
  - Fix failing 01misc.t subtest introduced in 2.057 (CPAN RT#81119)
- Explicitly install to 'perl' directories


author: Paul Howarth <paul@city-fan.org> - 2.059-1
changelog:
- Update to 2.059
  - IO::Compress::Base
    - Added "Encode" option (fixes the encoding half of CPAN RT#42656)


author: Paul Howarth <paul@city-fan.org> - 2.060-1
changelog:
- Update to 2.060
  - Updated POD
    - CPAN RT#82138: Example code not clear - gunzip() takes filenames!
  - IO::Compress::Base
    - Remove the flush call when opening a filehandle


author: Paul Howarth <paul@city-fan.org> - 2.061-1
changelog:
- Update to 2.061
  - zipdetails (1.06)
    - Get it to cope with Android 'zipalign' non-standard extra fields; these
      are used to make sure that a non-compressed member starts on a 4 byte
      boundary
  - unzip example with IO::Uncompress::Unzip (CPAN RT#84647)


author: Paul Howarth <paul@city-fan.org> - 2.66-1
changelog:
- Update to 2.66
  - Fix inet_pton/inet_ntop import warnings (CPAN RT#55901)
  - Fix listening on :: or 0.0.0.0 (CPAN RT#54656)
  - Add test listen_port_only.t
  - Solved problems with multihomed and family order (CPAN RT#57676)
  - Fix select timeout issue in t/io_multihomed6.t
  - Fix t/io_multihomed6.t on systems with broken getaddrinfo() (CPAN RT#58198)
  - Made the "use Socket" call import constants selectively, and not rely on
    @EXPORT's whims


author: Paul Howarth <paul@city-fan.org> - 2.69-1
changelog:
- Update to 2.69:
  - Solved symbol clashes in t/io_multihomed6.t (CPAN RT#72769)
  - Fix the imports on t/io_multihomed6.t (CPAN RT#72769)
  - Update the link to the repository in Build.PL
- BR: perl(IO::Socket)
- BR: perl(Socket)
- Use %{_fixperms} macro instead of our own chmod incantation


author: Paul Howarth <paul@city-fan.org> - 1.92-1
changelog:
- Update to 1.92
  - Intercept: use sha1-fingerprint of original cert for id into cache unless
    otherwise given
  - Fix pod error in IO::Socket::SSL::Utils (CPAN RT#85733)


author: Paul Howarth <paul@city-fan.org> - 1.93-1
changelog:
- Update to 1.93
  - Need at least OpenSSL version 0.9.8 now, since last 0.9.7 was released 6
    years ago; remove code to work around older releases
  - Changed AUTHOR in Makefile.PL from array back to string, because the array
    feature is not available in MakeMaker shipped with 5.8.9 (CPAN RT#85739)
- Set openssl version requirement to 0.9.8
- Drop ExtUtils::MakeMaker version requirement back to 6.46


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
- Update to 1.94
  - Makefile.PL reported wrong version of openssl if Net::SSLeay was not
    installed, instead of reporting a missing dependency of Net::SSLeay


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-4
changelog:
- Respect OpenSSL default ciphers and protocol versions (bug #1127322)
- Fix typo in Utils.pm (bug #1097710)


author: Paul Howarth <paul@city-fan.org> 2.110-17
changelog:
- spec clean-up:
  - nobody else likes macros for commands
  - use DESTDIR rather than PERL_INSTALL_ROOT
  - add buildreqs for core perl modules, which may be dual-lived


author: Paul Howarth <paul@city-fan.org> 2.110-18
changelog:
- don't build-require modules that this package provides (problem stupidly
  introduced in previous release)
- don't need to remove empty directories from buildroot
- drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 2.27200-241
changelog:
- BR: perl(base), perl(constant) and perl(lib)
- Install to vendor directories
- Drop %defattr, redundant since rpm 4.4
- Don't need to remove empty directories from the buildroot


author: Petr Šabata <contyk@redhat.com> - 2.27200-242
changelog:
- Correct the URL
- Add a few missing buildtime dependencies
- Drop Getopt::Long dep; json_pp isn't tested


author: Paul Howarth <paul@city-fan.org> - 2.27202-1
changelog:
- Update to 2.27202
  - Fix test failures due to hash iterator randomization in perl 5.17.6 onwards
    (CPAN RT#83421)


author: Petr Pisar <ppisar@redhat.com> - 1:0.56-3
changelog:
- Do not set SSL ciphers at all by default (bug #1091316)
- Pass actual length to syswrite() instead of default 1500 B (bug #1104243)


author: Petr Pisar <ppisar@redhat.com> 6.01-1
changelog:
- Specfile autogenerated by cpanspec 1.78.
- Remove BuildRoot stuff
- Conflicts with perl-libwww-perl 5* and older


author: Paul Howarth <paul@city-fan.org> - 0.33-1
changelog:
- Update to 0.33
  - Updated can_xs to fix a bug in it
- Reinstate compatibility with old distributions like EL-5
- Drop Test::More version requirement to 0.42
- BR: perl(ExtUtils::MakeMaker)
- BR: perl(Test::LeakTrace) except on EL-4/EL-5 where it's not available
- BR: perl(Pod::Simple), perl(Test::CPAN::Meta), perl(Test::MinimumVersion)
  (if we're not bootstrapping) and perl(Test::Pod), and run the developer tests
  too
- Don't use macros for commands
- Use %{_fixperms} macro rather than our own chmod incantation
- Make %files list more specific
- Use tabs


author: Paul Howarth <paul@city-fan.org> - 0.33-7
changelog:
- BR:/R: perl(Carp)
- BR: perl(constant), perl(Exporter) and perl(ExtUtils::CBuilder)
- Add commentary regarding non-use of Test::LeakTrace for EL-7 builds
- Use Test::LeakTrace for EL-5 builds
- Drop support for EL-4 builds since it was EOL-ed ages ago
- Drop %defattr, redundant since rpm 4.4
- Don't need to remove empty directories from the buildroot
- Remove more command macros


author: Petr Šabata <contyk@redhat.com> - 0.39-7.1
changelog:
- Add a few more missing build-time deps
- Correct the licence tag
- Modernize the spec a bit
- Package the example scripts in their directory


author: Paul Howarth <paul@city-fan.org> - 2.8.0-3
changelog:
- Fix broken POD (CPAN RT#86060)
- Work around test suite failures with Net::DNS ≥ 0.68 (CPAN RT#78214)


author: Paul Howarth <paul@city-fan.org> - 2.08-3
changelog:
- Use DESTDIR rather than PERL_INSTALL_ROOT
- One buildreq per line for readability
- Add buildreqs for core perl modules, which might be dual-lived


author: Paul Howarth <paul@city-fan.org> - 2.09-1
changelog:
- Update to 2.09
  - Remove dependency to Test::Pod by moving 99pod.t from t/ to xt/
    (CPAN RT#69918)
- BR: perl(Net::Domain) ≥ 1.05 and perl(Net::SMTP) ≥ 1.03
- Explicitly run xt/ tests


author: Paul Howarth <paul@city-fan.org> 2.10-1
changelog:
- Update to 2.10
  - Mail::Mailer::smtp set from address twice (CPAN RT#77161)
  - Mail::Mailer::smtps did not support the From option (CPAN RT#77161)
  - Mail::Util::mailaddress has now an optional parameter to set the returned
    value explicitly (CPAN #75975)
- BR: perl(base)
- Drop BR: perl(Config) and perl(POSIX), not dual-lived
- Drop %defattr, redundant since rpm 4.4
- Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> 2.12-1
changelog:
- Update to 2.12
  - Default for Mail::Header::new(Modify) is 'false', not 'true'
    (CPAN RT#79985)
  - Mail::Address take username with rindex(), a bit better than index() but
    still poor (CPAN RT#82056)
  - Check for bad folding of header lines (CPAN RT#79993)
  - Add a note about better to avoid Mail::Address->name() (CPAN RT#81459)
- Drop UTF8 patch, no longer needed


author: Paul Howarth <paul@city-fan.org> - 0.03-3
changelog:
- Incorporate feedback from package review (#788258)
  - Correct License tag, which should be Artistic 2.0
  - BR: perl(lib) for test suite
  - Explicitly require perl(Carp), not automatically detected


author: Paul Howarth <paul@city-fan.org> - 0.04-1
changelog:
- Update to 0.04
  - This module no longer installs an _implementation() subroutine in callers;
    instead, you can call Module::Implementation::implementation_for($package)
    to get the implementation used for a given package
- Update patch for building with old Test::More versions


author: Paul Howarth <paul@city-fan.org> - 0.05-1
changelog:
- Update to 0.05
  - Make Test::Taint an optional dependency; it requires XS, and requiring a
    compiler for Module::Implementation defeats its purpose (CPAN RT#74817)
- BR: perl(Test::Requires)
- Update patch for building with old Test::More versions


author: Paul Howarth <paul@city-fan.org> - 0.06-3
changelog:
- Drop %defattr, redundant since rpm 4.4
- Don't need to remove empty directories from buildroot
- Add commentary regarding conditionalized buildreqs


author: Paul Howarth <paul@city-fan.org> - 1.000012-1
changelog:
- Update to 1.000012
  - Improved package detection heuristics
  - Fix ->contains_pod (CPAN RT#84932)
  - Fix detection of pod after __END__ (CPAN RT#79656)
- This release by ETHER -> update source URL
- Package new upstream README file


author: Paul Howarth <paul@city-fan.org> - 1.000014-1
changelog:
- Update to 1.000014
  - Fix reliance on recent Test::Builder
  - Make tests perl 5.6 compatible
- This release by BOBTFISH -> update source URL


author: Paul Howarth <paul@city-fan.org> - 1.000016-1
changelog:
- Update to 1.000016
  - Re-release to fix prereqs and other metadata
- This release by ETHER -> update source URL
- Specify all dependencies


author: Paul Howarth <paul@city-fan.org> - 1.000018-1
changelog:
- Update to 1.000018
  - Re-release of de-tainting fix without unstated non-core test dependencies
- Drop BR: perl(Test::Fatal)


author: Paul Howarth <paul@city-fan.org> - 0.68-5
changelog:
- BR: perl(constant), perl(Data::Dumper) and perl(lib)
- Don't need to remove empty directories from the buildroot
- Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 0.69-1
changelog:
- Update to 0.69
  - Support for gpg under these alternate names: gpg gpg2 gnupg gnupg2
- This release by AUDREYT -> update source URL
- BR:/R: perl(Text::Diff)
- Include Andreas Koenig's GPG key in the SRPM and import it in %prep so
  that we don't need to get it from a keyserver in %check


author: Paul Howarth <paul@city-fan.org> - 0.73-1
changelog:
- Update to 0.73
  - Constrain the user-specified digest name to /^\w+\d+$/
  - Only allow loading Digest::* from absolute paths in @INC (CVE-2013-2145)


author: Paul Howarth <paul@city-fan.org> - 1.51-1
changelog:
- update to 1.51
  - fixed a problem where SSL_set_SSL_CTX is not available with
    OpenSSL < 0.9.8f (CPAN RT#81940)
- fix bogus date in spec changelog


author: Paul Howarth <paul@city-fan.org> - 1.52-1
changelog:
- update to 1.52
  - rebuild package with gnu format tar, to prevent problems with unpacking on
    other systems such as old Solaris


author: Paul Howarth <paul@city-fan.org> - 1.54-1
changelog:
- update to 1.54
  - added support for SSL_export_keying_material where present (i.e. in OpenSSL
    1.0.1 and later)
  - changed t/handle/external/50_external.t to use www.airspayce.com instead of
    perldition.org, who no longer have an https server
  - patch to fix a crash: P_X509_get_crl_distribution_points on an X509
    certificate with values in the CDP extension that do not have an ia5 string
    would cause a segmentation fault when accessed
  - change in t/local/32_x509_get_cert_info.t to not use
    Net::SSLeay::ASN1_INTEGER_get, since it works differently on 32 and 64 bit
    platforms
  - updated author and distribution location details to airspayce.com
  - improvement to test 07_sslecho.t so that if set_cert_and_key fails we can
    tell why


author: Paul Howarth <paul@city-fan.org> - 1.55-1
changelog:
- update to 1.55
  - added support for TLSV1_1 and TLSV1_2 methods with SSL_CTX_tlsv1_1_new(),
    SSL_CTX_tlsv1_2_new(), TLSv1_1_method() and TLSv1_2_method(), where
    available in the underlying openssl
  - added CRL support functions X509_CRL_get_ext(), X509_CRL_get_ext_by_NID(),
    X509_CRL_get_ext_count()
  - fixed a problem that could cause content with a value of '0' to be
    incorrectly encoded by do_httpx3 and friends (CPAN RT#85417)
  - added support for SSL_get_tlsa_record_byname() required for DANE support in
    openssl-1.0.2 and later
  - testing with openssl-1.0.2-stable-SNAP-20130521
  - added X509_NAME_new and X509_NAME_hash


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.55-6
changelog:
- Deleted support for SSL_get_tlsa_record_byname (bug #1422435)
- Removed tests which fails due to changes openssl 1.0.1h and later


author: Paul Howarth <paul@city-fan.org> - 4.064-1
changelog:
- Update to 4.064
  - Updated GPL v2.0 text and address in all modules
  - Added support for rfc3021 /31 networks to hostenum
- Update UTF8 patch


author: Paul Howarth <paul@city-fan.org> - 4.067-1
changelog:
- Update to 4.067
  - Improved diagnostic message for "die" with bad mask for hostenum,
    hostenumref, split, splitref, rsplit, rsplitref
- Include new docfile About-NetAddr-IP.txt


author: Paul Howarth <paul@city-fan.org> - 4.069-1
changelog:
- Update to 4.069
  - Add proper pod encoding in Lite.pm
  - Changed Makefile.PL to check for config.h when building for XS with 'gcc',
    try building with 'cc', and check again; if config.h is not found, force
    Pure Perl mode
  - Kill XS in winduhs and Darwin, both of which misbehave when compiling XS
    code
- Drop UTF8 patch, no longer needed


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 0.01-15
changelog:
- Apply https://rt.cpan.org/Ticket/Attachment/792151/410599/Number-Compare-0.01-uninitialized.patch
  to address https://bugzilla.redhat.com/show_bug.cgi?id=607982.


author: Paul Howarth <paul@city-fan.org> - 1.215-9
changelog:
- classify buildreqs by usage
- BR: perl(Time::HiRes) for the test suite
- BR: perl(Pod::Simple) ≥ 3.14 for the release tests
- BR: at least version 0.17 of perl(Test::CPAN::Meta)
- bump perl(Test::Pod) version requirement to 1.44
- don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.12-1
changelog:
- Update to 0.12:
  - Fix tests to pass with Carp 1.25 (CPAN RT#75520)
- BR: perl(Test::Spelling), aspell-en
- Add patch to accept "deprecations" as a valid dictionary word
- Update patches to apply cleanly
- Don't need to remove empty directories from buildroot
- Don't use macros for commands
- Drop EPEL-4 support:
  - Drop patch supporting build with ExtUtils::MakeMaker < 6.30


author: Paul Howarth <paul@city-fan.org> - 0.13-1
changelog:
- Update to 0.13:
  - Fix dist.ini to not add Test::Spelling as a requirement
- Drop %defattr, redundant since rpm 4.4
- Test::Requires available on all supported distributions


author: Paul Howarth <paul@city-fan.org> - 0.103-8
changelog:
- Run Perl::Critic test in %check too
- BR: perl(Test::Perl::Critic)
- BR: perl(Carp) and perl(Symbol), which might be dual-lived
- Use DESTDIR rather than PERL_INSTALL_ROOT
- Drop version requirement for perl(ExtUtils::MakeMaker); older versions work
  without problems, e.g. version 6.17 on EL-4
- Make %files list more explicit
- Don't use macros for commands
- Use tabs


author: Paul Howarth <paul@city-fan.org> - 0.32-1
changelog:
- Update to 0.32
  - Bring the behavior of has_symbol for nonexistant scalars into line with the
    XS version
  - Invalid package names (for instance, Foo:Bar) are not allowed
  - Invalid stash entry names (anything containing ::) are not allowed
- Update patches to apply cleanly
- Bump perl(Package::Stash::XS) version requirement to 0.24


author: Paul Howarth <paul@city-fan.org> - 0.33-6
changelog:
- Drop EPEL-4 support
  - Drop %defattr, redundant since rpm 4.4
  - Test::LeakTrace, Test::Requires and Test::Script are now universally available
  - A suitably recent version of ExtUtils::MakeMaker is now universally available
- Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.34-1
changelog:
- Update to 0.34
  - Support anonymous stashes on newer perl versions
  - Prevent harmful effects from invalid settings for
    $ENV{PACKAGE_STASH_IMPLEMENTATION}
  - Switch to Module::Implementation
- BR: perl(Module::Implementation) ≥ 0.06
- BR: perl(base) for test suite
- Bump Package::Stash::XS version requirement to 0.26
- Explicitly run extra tests (except on RHEL ≥ 7, where the necessary
  build dependencies may not be available)
- Update patch for building with old Test::More version in EPEL-5


author: Paul Howarth <paul@city-fan.org> - 0.25-1
changelog:
- Update to 0.25
  - Invalid package names (for instance, Foo:Bar) are not allowed
  - Invalid stash entry names (anything containing ::) are not allowed
- Update patches to apply cleanly


author: Paul Howarth <paul@city-fan.org> - 0.25-6
changelog:
- Drop EPEL-4 support
  - Test::LeakTrace now universally available
  - Suitably recent version of ExtUtils::MakeMaker now universally available
  - Drop %defattr, redundant since rpm 4.4
- BR: perl(File::Temp)
- Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
- Update to 0.26
  - Internal refactorings to support Package::Anon stashes
- BR: perl(base) and perl(Test::Requires) for test suite
- Update patch for old distro compatibility
- Explicitly run the release/author tests


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.08-1
changelog:
- Upstream update.
- Update patch.
- Update BRs.
- Add %bcond --with network.
- Fix up %changelog dates.


author: Petr Šabata <contyk@redhat.com> - 1.967003-1
changelog:
- 1.967003 bump (backwards-incompatible changes)
- Spec cleanup and modernization
- New Source URL
- Install to vendor


author: Paul Howarth <paul@city-fan.org> - 1.967006-1
changelog:
- Update to 1.967006 (#789560)
  - Localize the OUT filehandle during Precompile
  - Document the <autotree:Base::Class> form of the <autotree> directive
  - Provide a simple test for the <autotree> directive, t/autotree.t; renamed
    basics.t to ensure it runs before autotree.t
  - Allow a global <skip:> directive that functions the same as modifying
    $Parse::RecDescent::skip prior to compiling a grammar
  - Require that the $file returned by caller() be eq '-', rather than merely
    starting with '-'
  - Warn on empty productions followed by other productions: the empty
    production always matches, so following productions will never be reached
  - NON-BACKWARDS COMPATIBLE CHANGE: a repetition directive such as 'id(s /,/)'
    correctly creates a temporary @item variable to hold the 'id's that are
    matched. That @item variable is then used to set the real $item[] entry for
    that repetition. The same treatment is now given to %item. Formerly, in a
    production like:
      id ',' id(s /,/)
    matched against:
      xxx, yyy, zzz
    The $item{id} entry that should be 'xxx' is overwritten by 'yyy' and then
    'zzz' prior to the action being executed. Now 'yyy' and 'zzz' set
    $item{id}, but in the private %item, which goes out of scope once the
    repetition match completes.
  - EXPERIMENTAL: when precompiling, optionally create a standalone parser by
    including most of the contents of Parse::RecDescent in the resulting
    Precompiled output
  - Accept an optional $options hashref to Precompile, which can be used to
    specify $options->{-standalone}, which currently defaults to false
  - The subroutines import, Precompile and Save are not included in the
    Precompile'd parser
  - The included Parse::RecDescent module is renamed to
    Parse::RecDescent::_Runtime to avoid namespace conflicts with an installed
    and use'd Parse::RecDescent
  - Add a new t/precompile.t to test precompilation
  - Add a new $_FILENAME global to Parse::RecDescent to make it easy for the
    Precompile method to find the module
  - Remove the prototype from _generate; it is not required, and it caused
    t/precompile.t (which ends up re-defining a lot of Parse::RecDescent
    subroutines) to fail needlessly, as the calls to _generate in Replace and
    Extend normally do not see the prototype, but do when re-defined
  - POD documentation for standalone parsers added
  - Added ExtUtils::MakeMaker build/configure version requirements
    (CPAN RT#74787)
- BR: perl(Test::Pod) and perl(Test::Warn) for additional test coverage
- Use a patch rather than scripted iconv to fix character encoding
- Improve %summary
- Tidy %description
- Make %files list more explicit
- Don't use macros for commands
- Don't need to specify compiler flags for pure-perl package
- Drop redundant 'find' commands from %install


author: Paul Howarth <paul@city-fan.org> - 1.118-1
changelog:
- update to 1.118
  Policy Changes:
  - CodeLayout::RequireTidyCode: revise to work with incompatible changes in
    Perl::Tidy 20120619 (CPAN RT#77977)
  - TestingAndDebugging::ProhibitNoWarnings: correct the parse of the
    'no warnings' statement, so that 'no warnings "qw"' is recognized as
    suppressing just 'qw' warnings (CPAN RT#74647)
  - Miscellanea::RequireRcsKeywords has been moved to the Perl-Critic-More
    distribution (CPAN RT#69546)
  Other Changes:
  - make all unescaped literal "{" characters in regexps into character
    classes; these are deprecated, and became noisy with Perl 5.17.0
    (CPAN RT#77510)
- drop now-redundant patch for Perl::Tidy compatibility
- BR: perl(lib) for the build process
- BR: perl(base), perl(PPIx::Utilities::Node) and perl(Test::Builder) ≥ 0.92
  for the module (Test::Builder required by Test::Perl::Critic::Policy)
- BR: perl(Exporter) ≥ 5.58; with older versions we get:
  ":color_severity" is not exported by the Perl::Critic::Utils::Constants module
- BR: perl(File::Spec::Functions) for the test suite
- drop buildreqs for perl(charnames), perl(File::Basename), perl(File::Find),
  perl(overload), perl(strict) and perl(warnings) - not dual lived


author: Petr Pisar <ppisar@redhat.com> - 1.000-6
changelog:
- Add Miscellanea::RequireRcsKeywords droped from Perl::Critic. Credits to Paul
  Howarth. (bug #839815)


author: Ralf Corsépius <ralf.corsepius@fedoraproject.org> - 1.28-1
changelog:
- Upstream update.
- Remove maintainer test (Upstream doesn't want us to find his bugs).
- Update BR's.


author: Paul Howarth <paul@city-fan.org> - 1.002-241
changelog:
- Drop %defattr, redundant since rpm 4.4
- Don't need to remove empty directories from the buildroot
- Don't delete the extra tests when bootstrapping, but don't run them either


author: Paul Howarth <paul@city-fan.org> - 1.003-1
changelog:
- Update to 1.003
  - Fixed detection of VOS; $^O reports 'vos', not 'VOS'
  - Additional release tests
- BR: perl(File::Spec::Functions), perl(List::Util),
  perl(Perl::Critic::Policy::Lax::ProhibitStringyEval::ExceptForRequire),
  perl(Pod::Wordlist::hanekomu), perl(Test::MinimumVersion),
  perl(Test::Perl::Critic), perl(Test::Spelling) and perl(Test::Version)
- Identify purpose of each build requirement
- Update patches for building on old distributions
- Don't run extra tests for EPEL-5/6 builds


author: Petr Pisar <ppisar@redhat.com> 0.003-1
changelog:
- Specfile autogenerated by cpanspec 1.78.
- Do not build-require File::Find, Socket, and warnings::register which are
  not exercised by tests
- Sort provides by English rules


author: Paul Howarth <paul@city-fan.org> - 1.03-18
changelog:
- Drop -tests subpackage (general lack of interest in this), but include
  them as documentation for the main package
- No need to remove empty directories from buildroot
- Add buildreqs for Perl core modules that might be dual-lived
- Fix script interpreter for test suite since we're packaging it
- Drop redundant %{?perl_default_filter}
- Don't use macros for commands
- Make %files list more explicit
- Use tabs


author: Paul Howarth <paul@city-fan.org> - 1.05-10
changelog:
- Drop -tests subpackage (general lack of interest in this), but include
  them as documentation for the main package
- Don't use macros for commands
- No need to remove empty directories from buildroot
- Add buildreqs for Perl core modules that might be dual-lived
- Rename makefile patch to include module name and version
- Fix script interpreter for test suite since we're packaging it
- Add filter for doc-file dependencies if we don't have %perl_default_filter
- Make %files list more explicit
- Use tabs


author: Paul Howarth <paul@city-fan.org> - 0.982-10
changelog:
- Explicitly require perl(Package::Generator)
- Make %files list more explicit
- Mark POD files as %doc
- Use DESTDIR rather than PERL_INSTALL_ROOT
- Don't need to remove empty directories from buildroot
- Don't use macros for commands
- Use tabs


author: Paul Howarth <paul@city-fan.org> - 0.984-1
changelog:
- Update to 0.984 (documentation fixes)
- Add filters for provides/requires from the test suite
- BR: perl(base) and perl(Exporter) for the test suite


author: Paul Howarth <paul@city-fan.org> - 0.985-1
changelog:
- Update to 0.985 (documentation fixes)
- Add patch to support building with Test::More < 0.88
- Run the extra tests too
- BR: perl(File::Find) and perl(File::Temp) for test suite
- BR: perl(Test::Pod) for the extra tests


author: Petr Pisar <ppisar@redhat.com> - 0.54-4
changelog:
- Support cpu_type on ARM and AArch64 (bug #1093266)
- Accept undefined cpu_clock on ARM and AArch64 (bug #1093266)


author: Daniel P. Berrangé <berrange@redhat.com> - 4.5.0-2
changelog:
- Fix typed parameter memory handling (rhbz#1613227)
- Fix missing NWFilterBinding module (rhbz#1608755)


author: Petr Pisar <ppisar@redhat.com> - 2.30-17
changelog:
- Modernize spec file
- Specify all dependencies
- Change license to "(Copyright only) and (Artistic or GPL+)" because of
  ppport.h


author: Paul Howarth <paul@city-fan.org> - 0.23-1
changelog:
- Update to 0.23
  - Updated INSTALL instructions
  - Added minimum perl version (5.006)
  - Reworked Makefile.PL for clarity
  - Implemented Perl::Critic suggestions
  - Added meta_yaml_ok test and example
  - Several Version.pm updates, including new() parameter name change:
    'yaml' is now 'data'
  - Changes file dates changed to meet W3CDTF standards
- Don't use macros for commands
- Don't need to remove empty directories from the buildroot
- Make %files list more explicit
- Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 0.110-1
changelog:
- Update to 0.110
  - Allow methods() and listmethods() to work again on class methods
    (CPAN RT#77804)
- Drop redundant BR: perl(Data::Dumper)
- Drop arrayeach patch - similar change introduced upstream
- Drop %defattr, redundant since rpm 4.4
- Don't need to remove empty directories from the buildroot
- Don't use macros for commands
- Use DESTDIR rather than PERL_INSTALL_ROOT
- Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.5000-1
changelog:
- Update to 0.500
  - Add support for all diff styles supplied by Text::Diff (CPAN RT#23579)
  - Add Build.PL
  - Convert to universally use Test::More instead of Test
  - Convert to modern Perl distribution.
  - Applied doc suggestion from CPAN RT#24297
  - Fix the { a => 1 } versus { a => '1' } bug (CPAN RT#3029)
- Upstream dropped eg/ docs
- Bump perl(Text::Diff) requirement to 0.35
- BR: perl(Test::Pod) and perl(Test::Pod::Coverage) for extra test cover


author: Paul Howarth <paul@city-fan.org> - 1.1-1
changelog:
- Update to 1.1
  - Fix test fails on < 5.8 perls
  - Fix t/13-latin1.t failures on Win32 and under TB1.5
- Add buildreqs for required core modules, which might be dual-lived


author: Paul Howarth <paul@city-fan.org> - 1.2-1
changelog:
- Update to 1.2
  - Fix bad regex matching directories containing 'svn', not just '.svn'
    directories (CPAN RT#75968)
- BR: perl(Cwd)
- Drop non-dual-lived buildreqs perl(File::Find) and perl(FindBin)
- This release by BOBTFISH -> update source URL
- Remove tabs from bundled Module::Install that break release tests
- Don't need to remove empty directories from the buildroot
- Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 1.3-1
changelog:
- Update to 1.3
  - Fix to ignore inc/ directory used by Module::Install
- Drop hack to remove tabs from bundled Module::Install
- Bump version requirement for perl(Test::NoTabs) to 1.2 to avoid failing
  release tests due to tabs in bundled Module::Install


author: Paul Howarth <paul@city-fan.org> - 1.3-6
changelog:
- Reinstate EPEL-5 compatibility
- Drop redundant patch for building with ExtUtils::MakeMaker < 6.30


author: Paul Howarth <paul@city-fan.org> - 0.32-1
changelog:
- Update to 0.32
  - Fixed tests that broke due to diagnostic changes in Test::More 0.99
- Don't use macros for commands
- Don't need to remove empty directories from the buildroot
- Drop %defattr, redundant since rpm 4.4
- Make %files list more explicit
- Remove bogus exec permission on Changes file


author: Paul Howarth <paul@city-fan.org> 0.006-1
changelog:
- Update to 0.006
  - Crank back the Test::More and Exporter requirements (CPAN RT#62699)
  - Add lives_ok and dies_ok emulation (CPAN RT#67598)
- Versions patch replaced by workaround for old ExtUtils::MakeMaker
- BR: perl(Test::Builder::Tester)


author: Paul Howarth <paul@city-fan.org> 0.008-1
changelog:
- Update to 0.008
  - Revert the mistake by which 0.004 allowed blocks after "exception" as well
    as "success"
- BR: perl(Carp)
- Update patch for building with ExtUtils::MakeMaker < 6.30


author: Paul Howarth <paul@city-fan.org> 0.010-1
changelog:
- Update to 0.010
  - Avoid tickling an overloading bug in perl 5.6 during testing
    (CPAN RT#74847)


author: Paul Howarth <paul@city-fan.org> - 1.23-1
changelog:
- Update to 0.23
  - Fix bug for missing file (should warn and skip, not pass to run_t_files)
  - File path and unlink fixes for VMS (CPAN RT#32061)
- Add patch to reinstate manpage, dropped upstream
- BR:/R: perl(File::Spec) and perl(Test::Harness)
- BR: perl(base), perl(Carp), perl(Exporter) and perl(File::Spec::Functions)
- Don't use macros for commands
- Reformat %description
- Don't need to remove empty directories from the buildroot
- Use DESTDIR rather than PERL_INSTALL_ROOT
- Use %{_fixperms} macro rather than our own chmod incantation
- Drop %defattr, redundant since rpm 4.4
- Make %files list more explicit
- Package LICENSE and README files


author: Paul Howarth <paul@city-fan.org> 1.1-1
changelog:
- Update to 1.1
  - Fix test fails if cwd or perl has a space in its path (CPAN RT#67376)
- Remove remaining uses of macros for commands


author: Paul Howarth <paul@city-fan.org> - 1.2-1
changelog:
- Update to 1.2
  - Fix to ignore inc/ for Module::Install
- BR: perl(Cwd), perl(ExtUtils::MakeMaker), perl(File::Spec), perl(File::Temp)
  and perl(Test::Builder)
- Don't need to remove empty directories from the buildroot
- Use DESTDIR rather than PERL_INSTALL_ROOT
- Drop %defattr, redundant since rpm 4.4


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.3-4
changelog:
- Remove BR: perl(ExtUtils::MakeMaker)
- Replace bundled modules Module::Install* by BR perl(inc::Module::Install)


author: Steven Pritchard <steve@kspei.com> 1.02-1
changelog:
- Update to 1.02.
- Update Source0 URL.
- BR Test::Builder and Test::More, plus update versioned Test::Tester BR.
- CHANGES renamed to Changes, and LGPL renamed to LICENSE.


author: Jitka Plesnikova <jplesnik@redhat.com> - 0.07-16
changelog:
- Specify all dependencies.
- Remove patch, because it is not needed (current version of Test::Builder
  is 0.98)


author: Iain Arnell <iarnell@gmail.com> 1.01-1
changelog:
- update to latest upstream version
- clean up spec for modern rpmbuild
- doesn't require Test::Tester


author: Paul Howarth <paul@city-fan.org> - 1.02-7
changelog:
- Drop -tests subpackage (general lack of interest in this), but include
  them as documentation for the main package
- Drop redundant BR: perl(ExtUtils::MakeMaker)
- Drop redundant unversioned explicit requires
- Drop %defattr, redundant since rpm 4.4
- Make %files list more explicit
- Don't use macros for commands
- Run the author tests in %check
- BR: perl(Test::Pod) and perl(Test::Pod::Coverage)
- Use tabs


author: Petr Pisar <ppisar@redhat.com> - 1.48-3
changelog:
- Clarify license (bug #1065946)
- Remove run-time dependency on Test::Builder::Tester (bug #1065944)
- Declare run-time dependency on File::Find (bug #1066006)


author: Paul Howarth <paul@city-fan.org> - 0.06-2
changelog:
- Run release tests as well as standard test suite in %check
- Drop no-longer-needed buildreq perl(Filter::Util::Call)
- New buildreqs perl(Test::Perl::Critic), perl(Test::Pod), perl(Test::Spelling)


author: Paul Howarth <paul@city-fan.org> - 0.06-4
changelog:
- Drop -tests subpackage (general lack of interest in this), but include
  them as documentation for the main package
- Don't need explicit runtime dependency on perl(Test::Builder::Module) if we
  have rpm ≥ 4.9 as it can auto-detect it
- BR: at least version 0.61 of perl(Test::More) as per upstream
- Drop unnecessary version requirement for perl(ExtUtils::MakeMaker)
- Drop redundant %{?perl_default_filter}
- BR: aspell-en rather than hunspell-en on old distributions where
  Test::Spelling uses aspell instead of hunspell
- Don't BR: perl(Test::Perl::Critic) when bootstrapping
- Don't use macros for commands
- Don't need to remove empty directories from buildroot
- Make %files list more explicit
- Drop %defattr, redundant since rpm 4.4
- Use tabs


author: Paul Howarth <paul@city-fan.org> - 0.06-9
changelog:
- BR: perl(base), perl(Cwd), perl(Data::Dumper)
- RHEL builds don't use Test::Spelling so they don't need dictionaries either


author: Paul Howarth <paul@city-fan.org> - 0.98-241
changelog:
- Merge tests sub-package back into main package
- Don't need to remove empty directories from the buildroot
- Drop %defattr, redundant since rpm 4.4
- Make %files list more explicit
- Don't use macros for commands
- Mark Tutorial.pod as %doc
- Drop explicit dependency on perl-devel


author: Paul Howarth <paul@city-fan.org> - 0.15-1
changelog:
- Update to 0.15:
  - Begin adding actual tests (hilariously, adding the suggested t/pod-spell.t
    to this dist to test itself found a typo: "stopwards")
- BR: perl(Test::Tester) and hunspell-en


author: Jitka Plesnikova <jplesnik@redhat.com> - 0.15-5
changelog:
- Update dependencies
- Don't need to remove empty directories from the buildroot
- Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 0.16-1
changelog:
- Update to 0.16:
  - Allow use of a custom POD parser rather than Pod::Spell using
    set_pod_parser
- Re-diff patch to avoid shipping .orig file


author: Paul Howarth <paul@city-fan.org> - 0.18-1
changelog:
- Update to 0.18:
  - Work around Pod::Spell limitations
  - Improve case handling
  - Improve test failure reporting
  - Include more useful info in Test-Spelling's own test suite


author: Paul Howarth <paul@city-fan.org> - 0.19-1
changelog:
- Update to 0.19:
  - For more consistent results, avoid using the user's local aspell dictionary
    (CPAN RT#56483)
- Update hunspell preference patch


author: Paul Howarth <paul@city-fan.org> - 1.09-8
changelog:
- Don't run the release tests when bootstrapping, to avoid circular build deps
- Sync buildreqs with upstream:
  - BR: perl(Exporter)
  - BR: perl(ExtUtils::MakeMaker) ≥ 6.42
  - BR: perl(File::Spec) ≥ 0.80
  - Bump perl(Pod::Simple) version requirement to at least 3.07
  - BR: perl(Test::Builder)
  - Drop perl(Test::More) version requirement to a minimum of 0.42
- Make %files list more explicit
- Drop %defattr, redundant since rpm 4.4
- Use %{_fixperms} macro rather than our own chmod incantation
- Don't need to remove empty directories from the buildroot
- Use DESTDIR rather than PERL_INSTALL_ROOT
- Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 0.06-9
changelog:
- Can run spelling test unconditionally now
- BR: perl(ExtUtils::Manifest)
- Don't BR: perl(Test::Perl::Critic) if we're bootstrapping
- Use %{_fixperms} macro rather than our own chmod incantation
- Run developer tests in a separate test run
- Drop redundant %{?perl_default_filter}
- Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 0.06-11
changelog:
- Separate bootstrap and RHEL conditionals
- Drop %defattr, redundant since rpm 4.4
- Don't need to remove empty directories from buildroot
- BR: perl(base)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.04-19
changelog:
- Specify all dependencies
- Drop %defattr, redundant since rpm 4.4
- Fix mixed use of spaces and tabs


author: Paul Howarth <paul@city-fan.org> - 0.001-5
changelog:
- Fix compatibility with Perl 5.16 (CPAN RT#72133)
- Don't need to remove empty directories from buildroot


author: Paul Howarth <paul@city-fan.org> - 0.002-1
changelog:
- Update to 0.002
  - Fix compatibility with Perl 5.16 (CPAN RT#72133)
- Drop upstreamed patch for 5.16 compatibility


author: Paul Howarth <paul@city-fan.org> - 0.004-1
changelog:
- Update to 0.004
  - Re-package with Module::Build
  - Remove an unnecessary use of smart match operator
- Switch to Module::Build flow
- Classify buildreqs by usage
- Drop Test::Spelling requirement, no longer used


author: Paul Howarth <paul@city-fan.org> - 0.24-1
changelog:
- Update to 0.24 (compatibility with Carp 1.25) (#808856)
- BR: Perl core modules that might be dual-lived
- BR/R: at least version 1.02 of perl(Tree::DAG_Node)
- Drop redundant buildreq perl(Test::Exception)
- Don't need to remove empty directories from buildroot
- Drop explicit versioned runtime dependency on Test::Builder, satisfied in
  all distributions since the dawn of time (nearly)
- Use DESTDIR rather than PERL_INSTALL_ROOT
- Drop %defattr, redundant since rpm 4.4
- Drop redundant %{?perl_default_filter}
- Make %files list more explicit
- Don't use macros for commands


author: Jitka Plesnikova <jplesnik@redhat.com> - 0.04-18
changelog:
- Update dependencies
- Use DESTDIR rather than PERL_INSTALL_ROOT
- Remove build root cleaning, BuildRoot definition and %defattr


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:1.20-10
changelog:
- Remove perl(base) from BR
- Package README and ChangeLog
- Replace PERL_INSTALL_ROOT with DESTDIR
- Remove deleting empty directories


author: Jitka Plesnikova <jplesnik@redhat.com> - 804.030-2
changelog:
- Update license - add SWL
- Specify all dependencies
- Replace PERL_INSTALL_ROOT with DESTDIR
- Drop removing of empty directory
- Package COPYING


author: Petr Pisar <ppisar@redhat.com> - 804.030-4
changelog:
- Fix file modes changed while building (bug #1017322)
- Correct change log entry date (bug #1017322)


author: Paul Howarth <paul@city-fan.org> - 1.07-1
changelog:
- Update to 1.07
  - New maintainer: Ron Savage
  - Pre-emptive apologies for any changes which are not back-compatible; no
    such problems are expected, but the introduction of new methods may
    disconcert some viewers
  - Fix CPAN RT#78858 and audit code for similar problems
  - Fix CPAN RT#79506
  - Rename ChangeLog to CHANGES, and add Changelog.ini
  - Replace all uses of cyclicity_fault() and Carp::croak with die
  - Remove unused methods: decommission_root(), cyclicity_allowed(),
    cyclicity_fault(), inaugurate_root(), no_cyclicity() and _update_links();
    OK - cyclicity_fault() was called once - it just died
  - Add methods: format_node(), hashref2string(), is_root(), node2string(),
    tree2string()
  - Reformat the POD big-time
  - Add Build.PL
  - Re-write Makefile.PL
  - Remove use vars(@ISA $Debug $VERSION), and replace latter 2 with 'our ...'
  - Rename t/00_about_verbose.t to t/about.perl.t
  - Add scripts/cut.and.paste.subtrees.pl (Warning: Some trees get into an
    infinite loop)
  - Add t/cut.and.paste.subtrees.t (Warning: Some trees get into an infinite
    loop)
  - Document the options (discouraged by Sean) supported in the call to
    new($hashref)
- This release by RSAVAGE -> update source URL
- BR: perl(Test::More) and perl(Test::Pod) ≥ 1.00
- Modernize spec file:
  - Drop %clean section
  - Drop buildroot definition and cleaning
  - Don't use macros for commands
  - Don't need to remove empty directories from the buildroot
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 1.09-1
changelog:
- Update to 1.09
  - No code changes
  - For pre-reqs such as strict, warnings, etc., which ship with Perl, set the
    version requirement to 0 (CPAN RT#80663)


author: Paul Howarth <paul@city-fan.org> - 1.12-1
changelog:
- Update to 1.12
  - Change text in README referring to licence to match text in body of source,
    since it was in conflict with the Artistic Licence V 2.0
  - Rename CHANGES to Changes as per CPAN::Changes::SPEC
  - Various spelling fixes in the docs


author: Paul Howarth <paul@city-fan.org> - 0.11-4
changelog:
- BR: perl(Carp)
- Don't need to remove empty directories from buildroot
- Don't use macros for commands
- Drop redundant %{?perl_default_filter}
- Enhance %description
- Reinstate EPEL-5 compatibility:
  - Define buildroot
  - Clean buildroot in %install and %clean
- Use tabs


author: Paul Howarth <paul@city-fan.org> - 1.59-3
changelog:
- Break build dependency loop by only using perl(Business::ISBN) if we're not
  bootstrapping
- BR: perl(Carp) and perl(Exporter)
- Make %files list more explicit
- Use DESTDIR rather than PERL_INSTALL_ROOT
- Use %{_fixperms} macro rather than our own chmod incantation
- Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 1.60-1
changelog:
- Update to 1.60
  - Do not reverse the order of new parameters
  - Avoid test failure if the local hostname is 'foo' (CPAN RT#75519)
  - Work around a stupid join bug in 5.8.[12] (CPAN RT#59274)
  - Updated repository URL
- Don't need to remove empty directories from buildroot
- BR: perl(constant)


author: Paul Howarth <paul@city-fan.org> - 1.60-8
changelog:
- Retain runtime dependency of perl(Business::ISBN) when bootstrapping; a
  better fix for the build dependency cycle was to drop LWP::Simple as a
  buildreq of perl-Business-ISBN (needed only for optional tests) when
  bootstrapping


author: Petr Pisar <ppisar@redhat.com> - 1:2.0016-1
changelog:
- 2.0016 bump (disable XML_PARSE_HUGE by default to prevent from
  CVE-2003-1564, a recursive XML entity expansion leads to memory exhaustion
  in a XML parser)


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.41-8
changelog:
- Update dependencies and summary
- Remove pre-RPM-4.9 filters
- Remove deleting empty directories
- Update REC-xml-19980210.xml to match new encoding


author: Paul Howarth <paul@city-fan.org> - 0.99-3
changelog:
- Drop redundant runtime dependencies on perl(XML::LibXML) and
  perl(XML::LibXML::Common), which cause circular build dependencies (#720974)
- Simplify provides and requires filters
- Don't need to remove empty directories from buildroot
- Mark POD files as %doc


author: Jitka Plesnikova <jplesnik@redhat.com> - 0.99-7
changelog:
- Update dependencies and summary
- Remove xmltest.xml due to copyright
- Replace PERL_INSTALL_ROOT with DESTDIR


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.08-6
changelog:
- Update dependencies
- Replace PERL_INSTALL_ROOT with DESTDIR
- Update description and summary
- Remove deleting empty directories
- Remove dist.ini from %doc


author: Petr Šabata <contyk@redhat.com> - 0.621-1
changelog:
- 0.621 bump
- Lots of bugfixes
- Packaging examples
- Fixing build-time deps and removing unneeded lines
- Fixing changelog issues


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.13-17
changelog:
- 680418 - missing man page for xpath
- applied debian patch, which added POD into xpath code, but also fix debian bug(#185292)


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.13-22
changelog:
- revert the patch. It breaks backward compatibility for some apps. 
- the xpath has still man page installed.
- Resolves: rhbz#1067903


author: Paul Howarth <paul@city-fan.org> - 0.81-2
changelog:
- R: perl(Carp) and perl(Data::Dumper)
- BR: perl(Carp), perl(constant) and perl(Exporter)
- Release tests no longer shipped, so drop buildreqs for them and don't bother
  setting AUTOMATED_TESTING; run tests even when bootstrapping


author: Paul Howarth <paul@city-fan.org> - 0.84-2
changelog:
- Haven't needed to fix documentation character encoding since 0.79
- Drop Test::Base build dependency again to avoid a BR loop (#215637)
- Filter private provides perl(yaml_mapping), perl(yaml_scalar) and
  perl(yaml_sequence)
- Don't need to remove empty directories from the buildroot
- This release by MSTROUT -> update source URL


author: Paul Howarth <paul@city-fan.org> 1.23-1
changelog:
- Update to 1.23
  - Synchronize JSON::Syck with YAML::Syck version number
  - Add DumpInto functions (YAML+Syck), which dump into a provided scalar
    instead of a newly-allocated one
  - Modify DumpFile functions to output directly to the specified
    file/filehandle instead of buffering all output in memory
  - Avoid modifying numbers into strings when emitting
  - Fix error message typo: s/existant/existent/g
  - Fix for non-printable character detection
  - Quote if non-printable characters are present
  - Make sure that LoadBlessed=0 blocks all blessing
  - Start listing primary repo as http://github.com/toddr/YAML-Syck
  - README refreshed via perldoc -t
- Require perl(XSLoader) at runtime
- Drop %defattr, redundant since rpm 4.4
- Don't need to remove empty directories from the buildroot
- Don't use macros for commands
- Use DESTDIR rather than PERL_INSTALL_ROOT
- Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> 1.24-1
changelog:
- Update to 1.24
  - Implement $JSON::Syck::MaxDepth
  - Prevent failure when the same object is seen twice during Dump
  - Prevent YAML from being influenced by the previous change
  - MinGW64 compatibility (CPAN RT#78363)


author: Paul Howarth <paul@city-fan.org> 1.27-1
changelog:
- Update to 1.27
  - Fix for hash randomization in yaml-alias.t on perl 5.18.0 (CPAN RT#84882,
    CPAN RT#84466)


author: Petr Šabata <contyk@redhat.com> - 1.05-26.2
changelog:
- Fix the package for el7
- Modernize the spec
- Correct a bogus date in changelog
- Unify spec whitespace


author: Petr Šabata <contyk@redhat.com> - 0.08-18
changelog:
- Correct buildtime dependencies
- Correct the licence tag
- Update the provides filter
- Drop command macros
- Modernize spec


author: Marcela Mašláňová <mmaslano@redhat.com> - 1:0.225-4
changelog:
- Install to vendor directories rather than perl core directories so as to
  avoid conflicts between our debuginfo and the main perl-debuginfo package


author: Paul Howarth <paul@city-fan.org> - 1:0.225-6
changelog:
- Reinstate compatibility with old distributions like EL-5
  - Add back buildroot definition and cleaning
- Use DESTDIR rather than PERL_INSTALL_ROOT
- Make %files list more explicit
- Drop redundant %{?perl_default_filter}
- Don't use macros for commands
- Use tabs


author: Paul Howarth <paul@city-fan.org> - 1:0.225-242
changelog:
- Don't need to remove empty directories from the buildroot
- Drop %defattr, redundant since rpm 4.4


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.42-2
changelog:
- Add BR perl(File::Spec)
- Replace PERL_INSTALL_ROOT with DESTDIR
- Remove deleting empty directories
- Remove defattr


author: Remi Collet <rcollet@redhat.com> - 5.4.16-41
changelog:
- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768


author: Remi Collet <rcollet@redhat.com> - 5.4.16-43
changelog:
- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168


author: Remi Collet <rcollet@redhat.com> - 5.4.16-44
changelog:
- fix php should provide php(httpd) #1215429
- fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
  default value is "yes", preserving previous behaviour
- openssl: fix default_socket_timeout does not work with SSL #1378196


author: Remi Collet <rcollet@redhat.com> - 5.4.16-47
changelog:
- fix stack-buffer-overflow while parsing HTTP response CVE-2018-7584
- fix out-of-bounds read in base64_decode_xmlrpc CVE-2019-9024
- fix reflected XSS in phar 404 page CVE-2018-5712
- fix reflected XSS in phar 403 and 404 error pages CVE-2018-10547


author: Remi Collet <remi@fedoraproject.org> 1:1.9.4-14
changelog:
- add explicit requires on all needed extensions (phpci)
- fix pecl launcher (need ini to be parsed for some
  extenstions going to be build as shared, mainly simplexml)
- add fix for new unpack format (php 5.5)


author: Remi Collet <remi@fedoraproject.org> - 3.0.7-5
changelog:
- add patch for https://bugs.php.net/59602
  segfault in getExtendedStats
- also provides php-memcache


author: Stefan Becker <chemobejk@gmail.com> - 1.18.1-1
changelog:
- update to 1.18.1:
    - fixes crash when gstreamer nice plugin is missing (bz #1071710)
    - fixes false "not delivered" errors in conference
    - fixes incorrect HTML escaping for URLs
    - fixes conference call ending in error message
    - fixes endless loop with failed HTTP Basic authentication
    - fixes EWS autodiscover for some Office 365 users
    - fixes missing "Copy to" in buddy menu


author: Stefan Becker <chemobejk@gmail.com> - 1.18.2-1
changelog:
- update to 1.18.2:
    - fixes crash when PersistentChat sends BYE
    - fixes joining of conference for some users
    - fixes conference call ending in error message
    - fixes EWS autodiscover for some Office 365 users
    - UCS now honors email URL set by user


author: Stefan Becker <chemobejk@gmail.com> - 1.18.3-1
changelog:
- update to 1.18.3:
    - fixes audio/video call if host has IPv6 address (bz #1124510)
    - fixes assert triggered by EWS autodiscover in older libxml2 versions
    - fixes crash triggered by EWS autodiscover when glib2 < 2.30.0


author: Stefan Becker <chemobejk@gmail.com> - 1.18.4-1
changelog:
- update to 1.18.4:
    - fixes ADFS failure when user and login name differ
    - fixes a longstanding issue that the Pidgin user status sometimes
      didn't switch back to "Available" after the end of a meeting
    - fixes some memory leaks


author: Stefan Becker <chemobejk@gmail.com> - 1.18.5-1
changelog:
- update to 1.18.5:
    - fixes Pidgin user status being stuck in "Away"
    - fixes RealmInfo request when user and login name differ


author: Stefan Becker <chemobejk@gmail.com> - 1.19.0-1
changelog:
- update to 1.19.0:
    - added support for automatic authentication scheme selection
    - added support for Multi-Factor Authentication (MFA)
    - added support for buddy photos from contact card
    - added support for SIP ID in contact search
    - added support for EWS based contact search when UCS is used
    - improves user experience for [MS-DLX] based contact search
    - fixes calendar state machine when EWS URL is set


author: Stefan Becker <chemobejk@gmail.com> - 1.19.1-1
changelog:
- update to 1.19.1:
    - add workaround for farstream 0.1.x with libnice >= 0.1.10
    - fix SIP re-authentication timeout to be max. 8 hours


author: Stefan Becker <chemobejk@gmail.com> - 1.20.0-1
changelog:
- update to 1.20.0:
    - add support for SRTP (requires libpurple >= 3.0.0)
    - parse HTML from Lync conference URL
    - fixes Office365 authentication failure (bz #1257485)


author: Stefan Becker <chemobejk@gmail.com> - 1.20.1-1
changelog:
- update to 1.20.1:
    - add support for another type of ADFS response
    - improve configure check for back-ported features


author: Dogtag Team <pki-devel@redhat.com> 10.5.17-5
changelog:
- ##########################################################################
- # RHEL 7.8:
- ##########################################################################
- Bugzilla Bug #1523330 - CC: missing audit event for CS acting as TLS client
  (cfu)
- ##########################################################################
- # RHCS 9.6:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.17-6
changelog:
- ##########################################################################
- # RHEL 7.8:
- ##########################################################################
- Bugzilla Bug #1723008 - ECC Key recovery failure with
  CKR_TEMPLATE_INCONSISTENT (cfu)
- Bugzilla Bug #1774282 - pki-server-nuxwdog template has pid file name with
  non-breakable space char encoded instead of 0x20 space char (ascheel)
- ##########################################################################
- # RHCS 9.6:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.18-1
changelog:
- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1774174 - Rebase pki-core from 10.5.17 to 10.5.18 (RHEL)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  - # Bugzilla Bug #1774181 - Update RHCS version of CA, KRA, OCSP, and TKS so


author: Dogtag Team <pki-devel@redhat.com> 10.5.18-3
changelog:
- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)


author: Dogtag Team <pki-devel@redhat.com> 10.5.18-4
changelog:
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new


author: Dogtag Team <pki-devel@redhat.com> 10.5.18-6
changelog:
- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.18-7
changelog:
- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.0-0.8.a2.1.2
changelog:
- Update to maven 3
- Replace nonstandard groups names with standard ones
- Drop support for non-maven build
- Add workarounds for RPM bug
- Cleanup according to Fedora Packaging Guidelines
- Include missing copyright file in javadoc package


author: Michal Srb <msrb@redhat.com> - 0:1.0-0.9.a2.1
changelog:
- migrated to plexus-containers-container-default (#878580)
- using global is preferred over define when defining macros
- removed not used custom depmap file and its occurrence in spec file
- removed unused Ant buildfile
- fixed release number


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:2.3-1
changelog:
- Update to upstream version 2.3
- Use apache-commons-compress for bzip2 (de)compression
- Resolves: CVE-2012-2098


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:2.4.2-2
changelog:
- Update to latest packaging guidelines
- Remove MIT license (only applies to test cases not binary rpm)


author: Michal Srb <msrb@redhat.com> - 0:1.0-0.15.a14
changelog:
- Removed dependency to plexus-container-default (Resolves: #878570)
- Removed forgotten older tarball from sources file
- Fixed various rpmlint warnings


author: Michal Srb <msrb@redhat.com> - 1.0-0.2.alpha11
changelog:
- Use direct link in Source0
- Improved prep/setup section
- mvn-rpmbuild verify is now in check section
- More specific files section
- add_maven_depmap macro now with -a option


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.5.5-7
changelog:
- Fix license tag (Plexus license was replaced by MIT some time ago)
- Update javadoc plugin BR version


author: Jaromir Capik <jcapik@redhat.com> - 1.0-0.6.a7
changelog:
- Removal of plexus-maven-plugin dependency (not needed)
- Minor spec file changes according to the latest guidelines


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.4-4
changelog:
- Fixes according to new guidelines
- Add spice-parent to Requires
- Versionless jars & javadocs
- Use maven3 to build


author: Jaromir Capik <jcapik@redhat.com> - 0:1.1.8-7
changelog:
- Migration to maven3
- Removal of plexus-maven-plugin (not needed)
- Minor spec file changes according to the latest guidelines


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.26.20140113
changelog:
- Fix color of text progress bar
  Related: #1167735
- Fix escape key during media check of live image
  Resolves: #1167735


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.28.20140113
changelog:
- Don't change file mode of boot.log.  Instead, remember what mode
  the admin set it to.
  Related: #916704
- Don't unlink boot.log before opening it.
  Related: #916704


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.29.20140113
changelog:
- Fall back to text mode if /dev/dri/card0 can't modeset
  Resolves: #1431141
- Remove unnecessary post scripts that rpm -V output
  Resolves: #1266085


author: Tim Waugh <twaugh@redhat.com> - 1:1.04-19
changelog:
- Consistent use of macros.
- Removed ancient obsoletes tag.
- Clean buildroot in install section not prep section.
- Make setup quiet.
- Use noreplace for config files.


author: Richard W.M. Jones <rjones@redhat.com> - 0.44-1
changelog:
- New upstream version 0.44.
- Fix incorrect use of File::Temp->tempfile (RHBZ#953066).
- Tidy up the spec file.
- po4a-build.conf.5 and po4a-runtime.7 man pages are no longer
  installed in the English version for some (unknown) reason.


author: Richard W.M. Jones <rjones@redhat.com> - 0.44-9
changelog:
- Fix bang path /usr/bin/env perl -> /usr/bin/perl (RHBZ#987035).
- Increase verbosity of po4a when building to help diagnose build errors.
- +BR Pod::Parser.
- Disable 24-tex.t which does not run and does not produce any
  useful diagnostics either.


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-30
changelog:
- semanage/seobject: Fix listing boolean values (#1391605)
- sepolicy: Make policy files sorting more robust
- semanage: Fix setting alternative policy store (#1558033)
- semanage: Load a store policy and set the store SELinux policy root
- sepolicy: Add sepolicy.load_store_policy(store)
- semanage: import sepolicy only when it's needed
- semanage: move valid_types initialisations to class constructors
- semanage/seobject: Fix indentation issues
- scripts/fixfiles: Do not fail on file_contexts.local (#1647714)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-31
changelog:
- semanage: Start exporting "ibendport" and "ibpkey" entries (#1657196)
- semanage: Do not show "None" levels when using a non-MLS policy (#1400482)
- semanage: Include MCS/MLS range when exporting local customizations (#1400482)


author: Rex Dieter <rdieter@fedoraproject.org> 0.99.0-3
changelog:
- patch to bring polkit auth dialog to front
- patch restart polkit-kde on crash 
- patch to remove unimplimented 'remember authorization' checkbox


author: Miloslav Trmač <mitr@redhat.com> - 0.1-2
changelog:
- Add a comment above License about SRPM-only licenses
- Reword Summary: to avoid a rpmlint warning
- Move INSTALL= to the %install section


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-38
changelog:
- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417


author: Panu Matilainen <pmatilai@redhat.com> - 1.13-12
changelog:
- Hack poptBadOption() to return something semi-meaningful on exec alias
  failures (#697435, #710267)
- Run internal test-suite on build, minimal as it might be


author: Tim Waugh <twaugh@redhat.com> - 0.0.5-8
changelog:
- Avoid a race during start-up if there are no configured ports (bug #1034139).
- Moved tmpfiles configuration file to correct location.
- Don't use %ghost in manifest for state directory, in order to make
  sure it is ready to use after installation.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.10.0-2
changelog:
- Fixed systemd error message regarding chroot-update, patch provided
  by John Heidemann <johnh@isi.edu>
  Resolves: rhbz#917463


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.10.1-7
changelog:
- Fixed haproxy with TLS
  Resolves: rhbz#1370455
- Fixed documentation about canonical maps
  Resolves: rhbz#1381871
- Fixed build with kernel-4.*
  Resolves: rhbz#1575658


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.10.1-9
changelog:
- Compiled with USE_LDAP_SASL if both "ldap" and "sasl" options are enabled
  Resolves: rhbz#1733938


author: Petr Kubat <pkubat@redhat.com> - 9.2.18-1
changelog:
- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.21-1
changelog:
- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.22-1
changelog:
- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.23-1
changelog:
- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.1002-4
changelog:
- don't use removed macro %add_to_maven_depmap (#992816)
- lint: trim-lines, reuse %{name} macro, fedora-review fixes
- merge cleanup changes by Stano Ochotnicky


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.1002-6
changelog:
- fix incompatibility with 9.6+ (rhbz#1547424)
- it's unnecessary to depend on whole java (rhbz#1406931)


author: Tom Lane <tgl@redhat.com> 09.01.0200-1
changelog:
- Update to version 09.01.0200
- Minor specfile cleanup per suggestions from Tom Callaway
Related: #845110


author: <sshedmak@redhat.com> - 1.3.2-1
changelog:
- Fixed FSType, Preferred Style, UinqueID and Fullname
- Fixed Invalid Glyph Names reported by fontlint
- with exceptions string added in License


author: Sandeep Shedmake <sshedmak@redhat.com> - 1.3.3-1
changelog:
- Added Indian Rupee Sign (U+20B9)
- Modified URL to fedorahosted.org domain
- Updated Source0 link
- Added BuildRequires fontforge
- Modified doc section


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-5
changelog:
- Fixed some possible unregistered parameters errors
  (by reg-net-param patch)
  Resolves: rhbz#1014662
- Unlimit FDs (by unlimit-fds patch)
  Printed friendly error message if the system is running out
  of FDs (by fd-limit-err patch)
  Resolves: rhbz#1017668


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-8
changelog:
- Fixed buffer overflow in cpufreq tunables on systems with many CPUs
  (by tunable-overflow-fix patch)
  Resolves: rhbz#1080191


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-9
changelog:
- MSR read errors are no more fatal (by msr-check patch)
  Resolves: rhbz#1102088
- Backported --auto-tune feature and added one-shot systemd service
  (by auto-tune patch)
  Resolves: rhbz#1143014
- Improved handling of reporting filenames (by improve-reporting patch)
  Resolves: rhbz#1039822


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-10
changelog:
- Reintroduced -d, --dump option and added plain report mode,
  fixed parameters and manual page
  Resolves: rhbz#1333495


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-29
changelog:
- make radius plugin config parser less strict
- add creation of dip system group
- resolves : #906913, #918296


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-30
changelog:
- don't ship /var/lock/ppp in rpm payload and create it in %post instead
- fix installation of tmpfiles.d configuration
- enable hardened build
- fix bogus dates in changelog
- compile all binaries with hardening flags
- fix possible NULL pointer dereferencing


author: Miroslav Lichvar <mlichvar@redhat.com> 0-0.7.20120407git0deb9c
changelog:
- update to 20120407git0deb9c
- move timepps.h to sys (#852950)
- include license files in devel subpackage
- remove obsolete macros


author: Paul Howarth <paul@city-fan.org> 1.7.2-13.2
changelog:
- Add patch to fix highly-parallel build (e.g. -j16)
- Add additional compiler warning flags to highlight questionable code
- Add patch to fix comparisons between signed and unsigned integers
- Add patch to fix const usage
- Add patch to fix missing field initializers
- Add patch to suppress warnings about possibly unused variables
- Add patch to fix declarations that are not prototypes
- Add patch to fix warnings about nested externs
- Add patch to fix dubious typecasts that violate strict-aliasing rules
- Update the FSF address references and GPLv2 license text
- Use default optimization level (-O2) again


author: Paul Howarth <paul@city-fan.org> 1.7.2-14
changelog:
- Build with warning-fix patches to address occasional segfaults (#749455)
- Patches have all now been merged upstream


author: Paul Howarth <paul@city-fan.org> 1.7.2-17
changelog:
- Add note in options.pptp about MPPE not being available in FIPS mode
  (#845112)
- Add note in options.pptp about PPTP with MSCHAP-V2 being insecure


author: Jakub Jelinek <jakub@redhat.com> 0.5.0-3
changelog:
- fix R_390_IRELATIVE handling on s390/s390x (#973259, #1010392, #1010398)
- change cron.daily/prelink permissions to rwxr-x--- (#1012538)


author: Jan Rybar <jrybar@redhat.com> - 3.3.10-28
changelog:
- pgrep: uid/gid conversion overflow
- vmstat: manpage line about I/O blocked procs unclear
- Resolves: rhbz#1624514, rhbz#1796043


author: Conrad Meyer <cemeyer@uw.edu> - 2.5.0-2
changelog:
- Remove changelog history from before 2010
- This spec already runs autoreconf -fi during %build, but bump build for
  rhbz #926374


author: Adrian Reber <areber@redhat.com> - 1.0.2-1
changelog:
- new upstream release
- split off protoc-c into protobuf-c-compiler to reduce runtime
  dependencies of the main package


author: Jan Rybar <jrybar@redhat.com> 22.20-13
changelog:
- fuser manpage: note about invisible other PIDs moved to RESTRICTIONS section
- Resolves: rhbz#1400126


author: Jiri Popelka <jpopelka@redhat.com> - 1.17-40
changelog:
- fix dist tag and URL
- put psutils-copyright.patch among sources as it's used only in
  psutils-remove-copyrighted-files
- no need to define BuildRoot and clean it in %clean and %install anymore
- %defattr no longer needed in %files


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.7-19
changelog:
- Build with -D_FILE_OFFSET_BITS=64 to get stat64 in pth_high.c
- Guard the ARM CFLAGS sed substitution.


author: Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.10.2-4
changelog:
* Sat Aug 25 2012 Peter Robinson <pbrobinson@fedoraproject.org> - 2.10.7-1
- New 2.10.7 stable release


author: Jeff Fearn <jfearn@redhat.com> 3.1.2-0
changelog:
- Fix tests failing when publican not installed. BZ #908956
- Fix broken mr-IN/Conventions.po. BZ #908956
- Fix footnote link unclickable. BZ #909006
- Fix missing translations for common files. BZ #908976
- Fix using edition for version on cover pages. BZ #912180
- Fix nested entities causing XML::TreeBuilder to fail. BZ #912187


author: Jeff Fearn <jfearn@redhat.com> 3.1.3-1
changelog:
- Fix add_revision breaking XML parser. BZ #912985
- Stronger fix for cover pages causing page number overrun. BZ #912967
- Fix CSS for article front page subtile. BZ #913016


author: Jeff Fearn <jfearn@redhat.com> 3.1.4-0
changelog:
- Fix entities in Book_Info braking build. BZ #917898
- add translations of "Revision History". BZ #918365
- Fix TOC title not translated in PDF. BZ #918365
- Fix translated strings with parameters. BZ #891166
- update translations
- add it-IT translation of PUG via <fedora@marionline.it> BZ #797515


author: Jeff Fearn <jfearn@redhat.com> 3.2.0-0
changelog:
- Add spaces to web-spec.xsl to work around newer libxml2 eating white space in spec files  BZ #982424
  - Fix typos in common content BZ #952490 #974918
  - Stop menu bouncing. BZ #953716
  - Fix ID missing from admonitions. BZ #966494
  - Support corpauthor for PDF. BZ #908666
  - Fix nested block tags breaking translation flow. BZ #909728
  - Fix multiple calls to update_po breaking packaging. BZ #891167
  - Add website labels and translations. BZ #979885
  - Add orgname to block/inline code. BZ #872955
  - Fix get_keywords not using correct info file. BZ #957956
  - Improve web print CSS. BZ #927513
  - Fix pre border in PDF. BZ #905752
  - Fix epub DOCTYPE. BZ #875129
  - Fix step first child style. BZ #971221
  - Fix long link word wrap in PDF. BZ #923481
  - Support case-insensitive "language" attribute. BZ #919474
  - Apply title style patch from Jaromir Hradilek. BZ #924518
  - Expose %book_ver_list to products/versions_index.tmpl. BZ #962643
  - Allow brands to ship web templates. Add site config toc_js. BZ #956935
  - Add pdftool option to build for pdf tool control. BZ #953728
  - Add default mapping for language to locale. BZ #844202
  - Fix ID missing from translated Revision History. BZ #911462
  - Add pub_dir option to override publish directory. BZ #830062
  - Removed show_unknown parameter and associated code. BZ #915428
  - Add img_dir parameter to override images directory. BZ #919481
  - Support all DocBook conditionals. BZ #919486
  - Flag spaces in product number as invalid. BZ #973895
  - Standardized prompts in commands. BZ #880456sources
  - Updated web_formats publican.cfg info BZ #839141
  - Replaced 'home page' with 'product or version page' BZ #921803
  - Replaced a broken link to CPAN with a working link BZ# 973461
  - Remove duplicate brand files from base install. BZ #966143
  - Add extras_dir parameter to override extras directory. BZ #953998
  - Fix PDF ignoring cover logo. BZ #974353
  - Add trans_drop action to freeze source language for translation. BZ #887707
  - Fix empty pot files not being deleted. BZ #961413
  - Fix long title layout on cover page in PDF. BZ #956934
  - Add Mac OS X Lion installation instructions. BZ# 979229
  - Add file handle limit workaround to FAQ BZ #952476
  - Support CDATA tags. BZ #958343
  - Fix UTF8 image names getting mangled in publish. BZ #953618
  - Add wkhtmltopdf_opts parameter to pass options to wkhtmltopdf. BZ #951290
  - Fix edition missing on PDF cover pages. BZ #956940
  - Support XML in add_revision member. BZ #862465
  - Fix duplicate footnotes in bibliography. BZ #653447
  - Fix Link from footlink to footlink-ref not working in PDF. BZ #909786
  - Fix TOC draft watermark in PDF. BZ #905271
  - Add common-db5 sub package. BZ #958495
  - Support decimals in colwidth & convert exact measures to pixels. BZ #913775
  - Tweak equation formatting. BZ #804531
  - Fix POT-Creation-Date format. BZ #985836
  - Fix site stats report swapping languages and products.
  - Fix web_dir not used for home page packages. BZ #988191
  - Updated web site instructions - BZ#979224


author: Wim Taymans <wtaymans@redhat.com> - 6.0-4
changelog:
- Add more Requires to avoid testing multiple versions
- enable hardened build
- Fix missing %endif
- Resolves: #1174548


author: Rex Dieter <rdieter@fedoraproject.org> - 6.0-7
changelog:
- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104


author: Wim Taymans <wtaymans@redhat.com> - 10.0-4
changelog:
- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385


author: Tomáš Mráz <tmraz@redhat.com> - 0.13-6
changelog:
- Check for error returns which cause segfaults in FIPS mode
- Fix missing error check and leak found by gcc-with-cpychecker (#800086)


author: Tomáš Mráz <tmraz@redhat.com> - 0.13.1-1
changelog:
- new upstream release fixing a security issue with string
  formatting subjectAltName of a certificate


author: Tomáš Mráz <tmraz@redhat.com> - 0.13.1-4
changelog:
- fix various testsuite failures
- fix exception propagation from private key passphrase callback (#1227505)
- add optional digest parameter to CRL.export method (#1523772)


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.6-2
changelog:
- disable introspection in anticipation of pygobject3
- https://bugzilla.redhat.com/show_bug.cgi?id=731851
- pygobject2 now becomes legacy for static binding support (e.g. PyGTK)


author: Colin Walters <walters@redhat.com> - 2.28.6-8
changelog:
- Add various missing BuildRequires, switch to pkgconfig() syntax
- Backport upstream patch which fixes a crasher in some applications


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.3-1
changelog:
- New upstream release
- Build a python3 subpackage
- Run the test suite even though we ignore the output


author: Miloslav Trmač <mitr@redhat.com> - 0.3-5
changelog:
- Disable -fstrict-aliasing (see http://www.python.org/dev/peps/pep-3123/ for
  rationale)
- Don't ship .pyc files from the test suite in %doc, to avoid multilib
  conflicts


author: Chris Lumens <clumens@redhat.com> - 1.99.66.18-1
changelog:
- Add tests for the new firewall option. (clumens)
  Related: rhbz#1526486
- Use RHEL7_Firewall instead of F28_Firewall. (clumens)
  Related: rhbz#1526486
- Port the F20 firewall test from master. (clumens)
  Related: rhbz#1526486
- firewall: add --use-system-defaults arg to command (dusty)
  Resolves: rhbz#1526486


author: David Cantrell <dcantrell@redhat.com> - 1.99.66.19-1
changelog:
- Add use action to nvdimm command. (rvykydal)
  Resolves: rhbz#1590319
- Add nvdimm command (rvykydal)
  Resolves: rhbz#1590319


author: Brian C. Lane <bcl@redhat.com> - 1.99.66.22-1
changelog:
- travis-ci: Install libgnutls28-dev for pycurl (bcl)
  Related: rhbz#1790572
- Switch to using Weblate for translations (bcl)
  Resolves: rhbz#1790572
- po: Remove pykickstart.pot (bcl)
  Related: rhbz#1790572


author: David Cantrell <dcantrell@redhat.com> - 1:3.9-9
changelog:
- Disable python-coverage tests on s390x
  Related: rhbz#1057626
- Fix python-coverage tests (some disabled that are not working)
  Resolves: rhbz#1057626


author: David Cantrell <dcantrell@redhat.com> - 1:3.9-14
changelog:
- Update URLs to point to github.com since that's where upstream lives
  these days
  Resolves: rhbz#1502389


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.3.1-1
changelog:
- Update to 2.3.1.
- Re-enable some tests, ignore others.
- Docs are available in English and Japanese now.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.3.5-1
changelog:
- Update to 2.3.5.
- Docutils needed now to build README.html.
- Add some BR optionally used by the testsuite.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.3.5-2
changelog:
- Use python-sphinx for rhel > 6 (rhbz#973318).
- Update BR to use python-pexpect instead of pexpect.


author: Victor Stinner <vstinner@redhat.com> - 2.7.5-80
changelog:
- Security fix for CVE-2019-5010: crash on parsing a specially crafted X509 certificate
  (resolves: rhbz#1666788)


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-84
changelog:
- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530


author: Matt Domsch <mdomsch@fedoraproject.org> - 0.70-1
changelog:
- Version 0.70 (2009-10-29)
  * New "major" version because it may break compatibility
  * Fix __cmp__(): IP('0.0.0.0/0') and IP('0.0.0.0') are not equal
  * Fix IP.net() of the network "::/0": "::" instead of "0.0.0.0".
    IPy 0.63 should fix this bug, but it wasn't.


author: Matt Domsch <mdomsch@fedoraproject.org> - 0.75-1
changelog:
- Version 0.75 (2011-04-12)
 * IP('::/0').netmask() gives IP('::') instead of IP('0.0.0.0') (BZ#690625)
 * Fix tests for Python 3.1 and 3.2
 * ip.__nonzero__() and (ipa in ipb) return a bool instead of 0 or 1
 * IP('0.0.0.0/0') + IP('0.0.0.0/0') raises an error, fix written by Arfrever
 * Support Python 3: setup.py runs 2to3
 * Update the ranges for IPv6 IPs
 * Fix reverseName() and reverseNames() for IPv4 in IPv6 addresses
 * Drop support of Python < 2.5
 * Include examples and MANIFEST.in in source build (add them to MANIFEST.in)
 * Remove __rcsid__ constant from IPy module
 * Use xrange() instead of range()
 * Use isinstance(x, int) instead of type(x) == types.IntType
 * Prepare support of Python3 (use integer division: x // y)
 * Fix IP(long) constructor: ensure that the address is not too large
 * Constructor raise a TypeError if the type is not int, long, str or unicode
 * 223.0.0.0/8 is now public (belongs to APNIC)


author: Mohamed El Morabity <melmorabity@fedoraproject.org> - 2.0.0-2
changelog:
- Use python2- prefix for Fedora dependencies if possible
- Use parallel make to build documentation


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.0.0-3
changelog:
- Remove examples-directory from Source tarball due to possible
  licensing issues
- Append python-keyring bundled directory to search path where needed

  Resolves: rhbz#1511222


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.5.4-1
changelog:
- Update to 1.5.4
- Fix for python3 module and anydbm
- Tried enabling unittests on python3 -- still no joy


author: Robert Kuska <rkuska@redhat.com> - 1.5.4-8
changelog:
- Change beaker.session to use sha1 instead of md5 because of failures in fips mode
Resolves: rhbz#996219


author: David Lehman <dlehman@redhat.com> - 0.61.15.66-1
changelog:
- mkfs.ext4 no longer hangs on confirmation (japokorn)
  Resolves: rhbz#1461459
- Stop enforcing obsolete limits on partition count. (dlehman)
  Resolves: rhbz#1460668
- Do not try to use protected disks for autopart (vtrefny)
  Resolves: rhbz#1456409


author: David Lehman <dlehman@redhat.com> - 0.61.15.67-1
changelog:
- fcoe: remove /etc/fcoe dir if it exists before copying configuration
  (rvykydal)
  Resolves: rhbz#1482512
- Find and remove stale LVM metadata immediately after creating md array.
  (dlehman)
  Resolves: rhbz#1223564
- Add ability to specify vg by uuid for vgremove. (dlehman)
  Related: rhbz#1223564


author: David Lehman <dlehman@redhat.com> - 0.61.15.68-1
changelog:
- Catch lvm metadata lookup failure in md post create. (dlehman)
  Related: rhbz#1223564
  Resolves: rhbz#1543579


author: David Lehman <dlehman@redhat.com> - 0.61.15.70-1
changelog:
- Deactivate incomplete VGs along with everything else. (dlehman)
  Resolves: rhbz#1554224
- Work around udev timing issues. (dlehman)
  Resolves: rhbz#1592253
  Resolves: rhbz#1592191
- nvdimm: don't crash on non-block devices (rvykydal)
  Related: rhbz#1280500
- Add NVDIMM detection to "addUdevDiskDevice" (vtrefny)
  Related: rhbz#1558942
- Add 'NVDIMMNamespaceDevice' device representing NVDIMM namespaces (vtrefny)
  Related: rhbz#1558942
- Add a function for identifying NVDIMM namespaces (vtrefny)
  Related: rhbz#1558942
- Add a singleton for NVDIMM namespaces management (vtrefny)
  Resolves: rhbz#1558942
- Backport DependencyGuard from master (vtrefny)
  Related: rhbz#1558942
- Ignore nvdimm devices unless configured in kickstart (rvykydal)
  Related: rhbz#1280500
- Do not ignore nvdimm (pmemX) devices (rvykydal)
  Related: rhbz#1280500


author: David Lehman <dlehman@redhat.com> - 0.61.15.71-1
changelog:
- Remove dependency on libblockdev-nvdimm (vtrefny)
  Resolves: rhbz#1601557
- Do not try to load NVDIMM plugin on non-x86_64 architectures (vtrefny)
  Related: rhbz#1601557
- Add version to the LUKS format (vtrefny)
  Resolves: rhbz#1607830


author: Vojtech Trefny <vtrefny@redhat.com> - 0.61.15.72-1
changelog:
- Install ndctl when NVDIMMs are used. (dlehman)
  Related: rhbz#1600496
- Escape dots in lvm filter devices (vtrefny)
  Resolves: rhbz#1614039


author: Vojtech Trefny <vtrefny@redhat.com> - 0.61.15.73-1
changelog:
- Use --yes when calling pvresize (vtrefny)
  Related: rhbz#1657000
- Fix typo in partitioning test cleanup. (dlehman)
  Related: rhbz#1657000
- Remove selinux test that doesn't do anything meaningful. (dlehman)
  Related: rhbz#1657000
- Improve parsing of mdadm detail output. (dlehman)
  Related: rhbz#1657000
- Update btrfs tests to use sufficiently large loop devices. (dlehman)
  Related: rhbz#1657000
- vfat labels apparently cannot contain lower case characters. (dlehman)
  Related: rhbz#1657000
- Check label format regardless of mechanism used to set it. (dlehman)
  Related: rhbz#1657000
- Adapt to presence or absence of python-mock. (dlehman)
  Related: rhbz#1657000
- Fixed KS forcing zerombr onto RO disk (japokorn)
  Resolves: rhbz#1544425
- Tell LVM to wipe cachepool metadata when attaching the cachepool (vtrefny)
  Resolves: rhbz#1643531
- Add dependency on python-six (vtrefny)
  Resolves: rhbz#1647173


author: David Lehman <dlehman@redhat.com> - 0.61.15.74-1
changelog:
- Handle exceptions raised from parted.Disk ctor. (dlehman)
  Related: rhbz#1677383
- Recommend DASD disk label for disks with an existing DASD label (vtrefny)
  Resolves: rhbz#1677383


author: Vojtech Trefny <vtrefny@redhat.com> - 0.61.15.75-1
changelog:
- Always set default key size to 512 bits for ciphers with XTS mode (vtrefny)
  Resolves: rhbz#1716674


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.4.6-4
changelog:
- Append python-botocore and python-jmespath bundled directories to
  search path where needed

  Resolves: rhbz#1509439


author: Luke Macken <lmacken@redhat.com> - 4.7.0-2
changelog:
- Merge a bunch of changes from Gareth Armstrong <gareth.armstrong@hp.com>
    - The src zip file should come either from http://www.voidspace.org.uk/
      downloads/ or http://code.google.com/p/configobj/ as the PyPI tarball is
      not complete.  No docs and no test code.
    - Added docs
    - Remove BR on python-setuptools-devel


author: Maurizio Lombardi <mlombard@redhat.com> - 1:1.1.fb23-4
changelog:
- Fix failure when parsing parameters
- Add 0003-Fix-failing-to-pasre-par-val-parameters.patch
- Add 0004-Fix-failing-to-pasre-param-like-cfgstr-par-val.patch


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.5.3-2
changelog:
- Patch from upstream for traceback when people use this with python2 and
  python3 in the same directory


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.5-1
changelog:
- New upstream release
- Fix UTF8 encoding correctly
- Drop buildroot, clean, defattr and use macro for Source


author: Slavek Kabrda <bkabrda@redhat.com> - 1.11.1-1
changelog:
- Rebase to version 1.11.1
- Remove downstream patch that was merged upstream
Resolves: rhbz#1112999


author: Slavek Kabrda <bkabrda@redhat.com> - 1.11.1-2.20140901git9329daf
changelog:
- Rebase to latest upstream commit
- Remove unnecessary sources and patches
- Specfile cleanup
Resolves: rhbz#1112999


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-2
changelog:
- fix broken link to "Global Module Index", and add a %check, verifying the
absence of broken links (rhbz#670493)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-2
changelog:
- make link checking optional, to avoid needing to pull in linkchecker and
its dependencies (rbhz#823930)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.10-0.5.20120824svn7502
changelog:
- Rebase to new snapshot with some fixes integrated
- Reenable one test that I can't replicate the failure with.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.8-2
changelog:
- Fixed reporting of more IPv4 addresses per interface
Resolves: rhbz#1027685
- Make get_active_devices() return IPv6-only devices, too
Resolves: rhbz#1027678


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.2-1
changelog:
- Reverted flawed patch for #1051427 (this reintroduces #1052102).
- Spec cleanup (removed rhel < 7 specific stuff).
- Update to 2.7.2.
Resolves: rhbz#1052777


author: Miro Hrončok <mhroncok@redhat.com> - 2.7.2-3
changelog:
- Replace lambda for 'dict' with dict itself to support all dict constructors
Resolves: rhbz#1697237


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.2.4-1
changelog:
- Upstream update 0.2.4
  - Changes i18n.easy_gettext_setup() to return lgettext functions when
    byte strings are requested.


author: Mike Bonnet <mikeb@redhat.com> - 1.0.90-1
changelog:
- return the contents of the AP_REP message from rd_rep()
- improved memory handling
- removed use of KRB_PRIVATE


author: Matthew Barnes <mbarnes@redhat.com> - 0:2.4.15-2
changelog:
- Add syncrepl_refreshdone() method to SyncreplConsumer class.
  Need by FreeIPA, subsequently accepted upstream.
- Resolves: rhbz#1122495


author: John Kacur <jkacur@redhat.com> - 0.4.6-3
changelog:
- procfs-Add-a-__contains__-method-to-dict-classes.patch
- pidstat-Add-PF_NO_SETAFFINITY-const.patch
- interrupts-Do-not-refrain-from-parsing-the-irq-affin.patch
- pidstat-Fix-process_flags-method.patch
- pidstat-Add-missing-PF_-flags.patch
- pflags-Add-command-line-utility-to-print-processor-f.patch
- pidstat-Support-COMM-names-with-spaces.patch
Resolves: rhbz#1232394


author: Jeffrey Ollie <jeff@ocjtech.us> - 2.3.5-1
changelog:
- Bugs fixed
-
-  * Crash when merging text nodes in element.remove().
-  * Crash in sax/target parser when reporting empty doctype.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.0-1
changelog:
- 3.0 (2012-10-08)
- ================
-
- Features added
- --------------
-
- Bugs fixed
- ----------
-
- * End-of-file handling was incorrect in iterparse() when reading from
-   a low-level C file stream and failed in libxml2 2.9.0 due to its
-   improved consistency checks.
-
- Other changes
- -------------
-
- * The build no longer uses Cython by default unless the generated C files
-   are missing.  To use Cython, pass the option "--with-cython".  To ignore
-   the fatal build error when Cython is required but not available (e.g. to
-   run special setup.py commands that do not actually run a build), pass
-   "--without-cython".
-
-
- 3.0beta1 (2012-09-26)
- =====================
-
- Features added
- --------------
-
- * Python level access to (optional) libxml2 memory debugging features
-   to simplify debugging of memory leaks etc.
-
- Bugs fixed
- ----------
-
- * Fix a memory leak in XPath by switching to Cython 0.17.1.
-
- * Some tests were adapted to work with PyPy.
-
- Other changes
- -------------
-
- * The code was adapted to work with the upcoming libxml2 2.9.0 release.
-
-
- 3.0alpha2 (2012-08-23)
- ======================
-
- Features added
- --------------
-
- * The .iter() method of elements now accepts tag arguments like "{*}name"
-   to search for elements with a given local name in any namespace.  With
-   this addition, all combinations of wildcards now work as expected:
-   "{ns}name", "{}name", "{*}name", "{ns}*", "{}*" and "{*}*".  Note that
-   "name" is equivalent to "{}name", but "*" is "{*}*".  The same change
-   applies to the .getiterator(), .itersiblings(), .iterancestors(),
-   .iterdescendants(), .iterchildren() and .itertext() methods,  the
-   strip_attributes(), strip_elements() and strip_tags() functions as well
-   as the iterparse() function.
-
- * C14N allows specifying the inclusive prefixes to be promoted to
-   top-level during exclusive serialisation.
-
- Bugs fixed
- ----------
-
- * Passing long Unicode strings into the feed() parser interface failed to
-   read the entire string.
-
- Other changes
- -------------
-
-
- 3.0alpha1 (2012-07-31)
- ======================
-
- Features added
- --------------
-
- * Initial support for building in PyPy (through cpyext).
-
- * DTD objects gained an API that allows read access to their
-   declarations.
-
- * xpathgrep.py gained support for parsing line-by-line (e.g.
-   from grep output) and for surrounding the output with a new root
-   tag.
-
- * E-factory in lxml.builder accepts subtypes of known data
-   types (such as string subtypes) when building elements around them.
-
- * Tree iteration and iterparse() with a selective tag
-   argument supports passing a set of tags.  Tree nodes will be
-   returned by the iterators if they match any of the tags.
-
- Bugs fixed
- ----------
-
- * The .find*() methods in lxml.objectify no longer use XPath
-   internally, which makes them faster in many cases (especially when
-   short circuiting after a single or couple of elements) and fixes
-   some behavioural differences compared to lxml.etree.  Note that
-   this means that they no longer support arbitrary XPath expressions
-   but only the subset that the ElementPath language supports.
-   The previous implementation was also redundant with the normal
-   XPath support, which can be used as a replacement.
-
- * el.find('*') could accidentally return a comment or processing
-   instruction that happened to be in the wrong spot.  (Same for the
-   other .find*() methods.)
-
- * The error logging is less intrusive and avoids a global setup where
-   possible.
-
- * Fixed undefined names in html5lib parser.
-
- * xpathgrep.py did not work in Python 3.
-
- * Element.attrib.update() did not accept an attrib of
-   another Element as parameter.
-
- * For subtypes of ElementBase that make the .text or .tail
-   properties immutable (as in objectify, for example), inserting text
-   when creating Elements through the E-Factory feature of the class
-   constructor would fail with an exception, stating that the text
-   cannot be modified.
-
- Other changes
- --------------
-
- * The code base was overhauled to properly use 'const' where the API
-   of libxml2 and libxslt requests it.  This also has an impact on the
-   public C-API of lxml itself, as defined in etreepublic.pxd, as
-   well as the provided declarations in the lxml/includes/ directory.
-   Code that uses these declarations may have to be adapted.  On the
-   plus side, this fixes several C compiler warnings, also for user
-   code, thus making it easier to spot real problems again.
-
- * The functionality of "lxml.cssselect" was moved into a separate PyPI
-   package called "cssselect".  To continue using it, you must install
-   that package separately.  The "lxml.cssselect" module is still
-   available and provides the same interface, provided the "cssselect"
-   package can be imported at runtime.
-
- * Element attributes passed in as an attrib dict or as keyword
-   arguments are now sorted by (namespaced) name before being created
-   to make their order predictable for serialisation and iteration.
-   Note that adding or deleting attributes afterwards does not take
-   that order into account, i.e. setting a new attribute appends it
-   after the existing ones.
-
- * Several classes that are for internal use only were removed
-   from the lxml.etree module dict:
-   _InputDocument, _ResolverRegistry, _ResolverContext, _BaseContext,
-   _ExsltRegExp, _IterparseContext, _TempStore, _ExceptionContext,
-   __ContentOnlyElement, _AttribIterator, _NamespaceRegistry,
-   _ClassNamespaceRegistry, _FunctionNamespaceRegistry,
-   _XPathFunctionNamespaceRegistry, _ParserDictionaryContext,
-   _FileReaderContext, _ParserContext, _PythonSaxParserTarget,
-   _TargetParserContext, _ReadOnlyProxy, _ReadOnlyPIProxy,
-   _ReadOnlyEntityProxy, _ReadOnlyElementProxy, _OpaqueNodeWrapper,
-   _OpaqueDocumentWrapper, _ModifyContentOnlyProxy,
-   _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy,
-   _AppendOnlyElementProxy, _SaxParserContext, _FilelikeWriter,
-   _ParserSchemaValidationContext, _XPathContext,
-   _XSLTResolverContext, _XSLTContext, _XSLTQuotedStringParam
-
- * Several internal classes can no longer be inherited from:
-   _InputDocument, _ResolverRegistry, _ExsltRegExp, _ElementUnicodeResult,
-   _IterparseContext, _TempStore, _AttribIterator, _ClassNamespaceRegistry,
-   _XPathFunctionNamespaceRegistry, _ParserDictionaryContext,
-   _FileReaderContext, _PythonSaxParserTarget, _TargetParserContext,
-   _ReadOnlyPIProxy, _ReadOnlyEntityProxy, _OpaqueDocumentWrapper,
-   _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy,
-   _AppendOnlyElementProxy, _FilelikeWriter, _ParserSchemaValidationContext,
-   _XPathContext, _XSLTResolverContext, _XSLTContext,
-   _XSLTQuotedStringParam, _XSLTResultTree, _XSLTProcessingInstruction


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.0.1-1
changelog:
- 3.0.1 (2012-10-14)
- Bugs fixed
-
-  * LP#1065924: Element proxies could disappear during garbage collection
-    in PyPy without proper cleanup.
-  * GH#71: Failure to work with libxml2 2.6.x.
-  * LP#1065139: static MacOS-X build failed in Py3.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.1.0-1
changelog:
- 3.1.0 (2013-02-10)
- ==================
-
- Features added
- --------------
-
- * GH#89: lxml.html.clean allows overriding the set of attributes that it
-   considers 'safe'.  Patch by Francis Devereux.
-
- Bugs fixed
- ----------
-
- * LP#1104370: ``copy.copy(el.attrib)`` raised an exception.  It now returns
-   a copy of the attributes as a plain Python dict.
-
- * GH#95: When used with namespace prefixes, the  ``el.find*()`` methods
-   always used the first namespace mapping that was provided for each
-   path expression instead of using the one that was actually passed
-   in for the current run.
-
- * LP#1092521, GH#91: Fix undefined C symbol in Python runtimes compiled
-   without threading support.  Patch by Ulrich Seidl.
-
- Other changes
- -------------
-
-
- 3.1beta1 (2012-12-21)
- =====================
-
- Features added
- --------------
-
- * New build-time option ``--with-unicode-strings`` for Python 2 that
-   makes the API always return Unicode strings for names and text
-   instead of byte strings for plain ASCII content.
-
- * New incremental XML file writing API ``etree.xmlfile()``.
-
- * E factory in lxml.objectify is callable to simplify the creation of
-   tags with non-identifier names without having to resort to getattr().
-
- Bugs fixed
- ----------
-
- * When starting from a non-namespaced element in lxml.objectify, searching
-   for a child without explicitly specifying a namespace incorrectly found
-   namespaced elements with the requested local name, instead of restricting
-   the search to non-namespaced children.
-
- * GH#85: Deprecation warnings were fixed for Python 3.x.
-
- * GH#33: lxml.html.fromstring() failed to accept bytes input in Py3.
-
- * LP#1080792: Static build of libxml2 2.9.0 failed due to missing file.
-
- Other changes
- -------------
-
- * The externally useless class ``_ObjectifyElementMakerCaller`` was
-   removed from the module API of lxml.objectify.
-
- * LP#1075622: lxml.builder is faster for adding text to elements with
-   many children.  Patch by Anders Hammarquist.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.2.0-1
changelog:
- 3.2.0 (2013-04-28)
- ==================
-
- Features added
- --------------
-
- Bugs fixed
- ----------
-
- * LP#690319: Leading whitespace could change the behaviour of the string
-   parsing functions in ``lxml.html``.
-
- * LP#599318: The string parsing functions in ``lxml.html`` are more robust
-   in the face of uncommon HTML content like framesets or missing body tags.
-   Patch by Stefan Seelmann.
-
- * LP#712941: I/O errors while trying to access files with paths that
-   contain non-ASCII characters could raise ``UnicodeDecodeError`` instead
-   of properly reporting the ``IOError``.
-
- * LP#673205: Parsing from in-memory strings disabled network access in the
-   default parser and made subsequent attempts to parse from a URL fail.
-
- * LP#971754: lxml.html.clean appends 'nofollow' to 'rel' attributes instead
-   of overwriting the current value.
-
- * LP#715687: lxml.html.clean no longer discards scripts that are explicitly
-   allowed by the user provided whitelist.  Patch by Christine Koppelt.
-
- 3.1.2 (2013-04-12)
- ==================
-
- Bugs fixed
- ----------
-
- * LP#1136509: Passing attributes through the namespace-unaware API of
-   the sax bridge (i.e. the ``handler.startElement()`` method) failed
-   with a ``TypeError``.  Patch by Mike Bayer.
-
- * LP#1123074: Fix serialisation error in XSLT output when converting
-   the result tree to a Unicode string.
-
- * GH#105: Replace illegal usage of ``xmlBufLength()`` in libxml2 2.9.0
-   by properly exported API function ``xmlBufUse()``.
-
- 3.1.1 (2013-03-29)
- ==================
-
- Features added
- --------------
-
- Bugs fixed
- ----------
-
- * LP#1160386: Write access to ``lxml.html.FormElement.fields`` raised
-   an AttributeError in Py3.
-
- * Illegal memory access during cleanup in incremental xmlfile writer.
-
- Other changes
- -------------
-
- * The externally useless class ``lxml.etree._BaseParser`` was removed
-   from the module dict.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.2.1-1
changelog:
- 3.2.1 (2013-05-11)
- ==================
-
- Features added
- --------------
-
- * The methods ``apply_templates()`` and ``process_children()`` of XSLT
-   extension elements have gained two new boolean options ``elements_only``
-   and ``remove_blank_text`` that discard either all strings or
-   whitespace-only strings from the result list.
-
- Bugs fixed
- ----------
-
- * When moving Elements to another tree, the namespace cleanup mechanism
-   no longer drops namespace prefixes from attributes for which it finds
-   a default namespace declaration, to prevent them from appearing as
-   unnamespaced attributes after serialisation.
-
- * Returning non-type objects from a custom class lookup method could lead
-   to a crash.
-
- * Instantiating and using subtypes of Comments and ProcessingInstructions
-   crashed.


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 1.2.0-8
changelog:
- Update fontconfig patch to apply issue found by upstream
- Update fontconfig patch to apply issue with missing afm fonts (#896182)


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 1.2.0-10
changelog:
- Use stix fonts avoid problems with missing cm fonts (#908717)
- Correct type mismatch in python3 font_manager (#912843, #928326)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.21-1
changelog:
- New purely textual text interface (vpodzime)
- Add dumb enableNetwork implementation to GraphicalIntf (vpodzime)
- Destroy main window after running it (vpodzime)
- Get rid of the accountManager and use new libreport API (vpodzime)
- Add a way to override previously registered callback (vpodzime)
- Allow callbacks marked as attachment only (vpodzime)
- Add support for callbacks providing additional data (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.22-1
changelog:
- Some more stuff for ABRT/libreport (#929181) (vpodzime)
- Tell ABRT we are reporting a Python excetion (vpodzime)
- Use named tuples instead of our magic tuples (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.23-1
changelog:
- Use Sphinx syntax for docstrings (vpodzime)
- Allow a change of the I/O functions (vpodzime)
- Reword the 'Debug' button warning (#948256) (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.25-1
changelog:
- Add and use the safe_string module and the SafeStr class (vpodzime)
- Give translators hint about the cryptic strings (vpodzime)


author: Martin Kolman <mkolman@redhat.com> - 0.25.3-1
changelog:
- Update translations
  Resolves: rhbz#1688260
- Switch from Transifex to Zanata for pulling translations (mkolman)
  Related: rhbz#1688260


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 0.4.16-3
changelog:
- Bundle python-keyring
- Append python-keyring bundled directory to search path where needed

  Resolves: rhbz#1511228


author: John Eckersberg <jeckersb@redhat.com> - 0.7.5-1
changelog:
- New upstream release 0.7.5
- Updated summary and description to match upstream README
- Updated URL and source to reflect upstream move to github


author: Jakub Hrozek <jhrozek@redhat.com> - 0.7.5-3
changelog:
- Do not traceback on invalid IPNetwork input (upstream issues #2, #6, #5, #8)
- Remove executable bit from documentation files to make rpmlint happy


author: Pavel Vomacka <pvomacka@redhat.com> - 0.7.5-8
changelog:
- Resolves: #1438668 DNS forwarder address added during IPA installation
  shouldn't add IP-Address '0.0.0.0'


author: David Malcolm <dmalcolm@redhat.com> - 1.1.2-5
changelog:
- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3
- disable selftests that fail under 3.3


author: John Dennis <jdennis@redhat.com> - 0.14-1
changelog:
External Changes:
  -----------------

  The primary enhancements in this version is support of certifcate
  validation, OCSP support, and support for the certificate "Authority
  Information Access" extension.

  Enhanced certifcate validation including CA certs can be done via
  Certificate.verify() or Certificate.is_ca_cert(). When cert
  validation fails you can now obtain diagnostic information as to why
  the cert failed to validate. This is encapsulated in the
  CertVerifyLog class which is a iterable collection of
  CertVerifyLogNode objects. Most people will probablby just print the
  string representation of the returned CertVerifyLog object. Cert
  validation logging is handled by the Certificate.verify() method.
  Support has also been added for the various key usage and cert type
  entities which feature prominently during cert validation.


  * Certificate() constructor signature changed from

    Certificate(data=None, der_is_signed=True)

    to

    Certificate(data, certdb=cert_get_default_certdb(), perm=False, nickname=None)

    This change was necessary because all certs should be added to the
    NSS temporary database when they are loaded, but earlier code
    failed to to that. It's is not likely that an previous code was
    failing to pass initialization data or the der_is_signed flag so
    this change should be backwards compatible.

  * Fix bug #922247, PKCS12Decoder.database_import() method. Importing into
    a NSS database would sometimes fail or segfault.

  * Error codes and descriptions were updated from upstream NSPR & NSS.

  * The password callback did not allow for breaking out of a password
    prompting loop, now if None is returned from the password callback
    the password prompting is terminated.

  * nss.nss_shutdown_context now called from InitContext destructor,
    this assures the context is shutdown even if the programmer forgot
    to. It's still best to explicitly shut it down, this is just
    failsafe.

  * Support was added for shutdown callbacks.

  * The following classes were added:
    - nss.CertVerifyLogNode
    - nss.CertVerifyLog
    - error.CertVerifyError (exception)
    - nss.AuthorityInfoAccess
    - nss.AuthorityInfoAccesses


  * The following class methods were added:
    - nss.Certificate.is_ca_cert
    - nss.Certificate.verify
    - nss.Certificate.verify_with_log
    - nss.Certificate.get_cert_chain
    - nss.Certificate.check_ocsp_status
    - nss.PK11Slot.list_certs
    - nss.CertVerifyLogNode.format_lines
    - nss.CertVerifyLog.format_lines
    - nss.CRLDistributionPts.format_lines

  * The following class properties were added:
    - nss.CertVerifyLogNode.certificate
    - nss.CertVerifyLogNode.error
    - nss.CertVerifyLogNode.depth
    - nss.CertVerifyLog.count

  * The following module functions were added:
    - nss.x509_cert_type
    - nss.key_usage_flags
    - nss.list_certs
    - nss.find_certs_from_email_addr
    - nss.find_certs_from_nickname
    - nss.nss_get_version
    - nss.nss_version_check
    - nss.set_shutdown_callback
    - nss.get_use_pkix_for_validation
    - nss.set_use_pkix_for_validation
    - nss.enable_ocsp_checking
    - nss.disable_ocsp_checking
    - nss.set_ocsp_cache_settings
    - nss.set_ocsp_failure_mode
    - nss.set_ocsp_timeout
    - nss.clear_ocsp_cache
    - nss.set_ocsp_default_responder
    - nss.enable_ocsp_default_responder
    - nss.disable_ocsp_default_responder

  * The following files were added:
      src/py_traceback.h
      doc/examples/verify_cert.py
      test/test_misc.py

  * The following constants were added:
    - nss.KU_DIGITAL_SIGNATURE
    - nss.KU_NON_REPUDIATION
    - nss.KU_KEY_ENCIPHERMENT
    - nss.KU_DATA_ENCIPHERMENT
    - nss.KU_KEY_AGREEMENT
    - nss.KU_KEY_CERT_SIGN
    - nss.KU_CRL_SIGN
    - nss.KU_ENCIPHER_ONLY
    - nss.KU_ALL
    - nss.KU_DIGITAL_SIGNATURE_OR_NON_REPUDIATION
    - nss.KU_KEY_AGREEMENT_OR_ENCIPHERMENT
    - nss.KU_NS_GOVT_APPROVED
    - nss.PK11CertListUnique
    - nss.PK11CertListUser
    - nss.PK11CertListRootUnique
    - nss.PK11CertListCA
    - nss.PK11CertListCAUnique
    - nss.PK11CertListUserUnique
    - nss.PK11CertListAll
    - nss.certUsageSSLClient
    - nss.certUsageSSLServer
    - nss.certUsageSSLServerWithStepUp
    - nss.certUsageSSLCA
    - nss.certUsageEmailSigner
    - nss.certUsageEmailRecipient
    - nss.certUsageObjectSigner
    - nss.certUsageUserCertImport
    - nss.certUsageVerifyCA
    - nss.certUsageProtectedObjectSigner
    - nss.certUsageStatusResponder
    - nss.certUsageAnyCA
    - nss.ocspMode_FailureIsVerificationFailure
    - nss.ocspMode_FailureIsNotAVerificationFailure

  * cert_dump.py extended to print NS_CERT_TYPE_EXTENSION

  * cert_usage_flags, nss_init_flags now support optional repr_kind parameter

  Internal Changes:
  -----------------

  * Reimplement exception handling
    - NSPRError is now derived from StandardException instead of
      EnvironmentError. It was never correct to derive from
      EnvironmentError but was difficult to implement a new subclassed
      exception with it's own attributes, using EnvironmentError had
      been expedient.

    - NSPRError now derived from StandardException, provides:
      * errno (numeric error code)
      * strerror (error description associated with error code)
      * error_message (optional detailed message)
      * error_code (alias for errno)
      * error_desc (alias for strerror)

    - CertVerifyError derived from NSPRError, extends with:
      * usages (bitmask of returned usages)
      * log (CertVerifyLog object)

  * Expose error lookup to sibling modules

  * Use macros for bitmask_to_list functions to reduce code
    duplication and centralize logic.

  * Add repr_kind parameter to cert_trust_flags_str()

  * Add support for repr_kind AsEnumName to bitstring table lookup.

  * Add cert_type_bitstr_to_tuple() lookup function

  * Add PRTimeConvert(), used to convert Python time values
    to PRTime, centralizes conversion logic, reduces duplication

  * Add UTF8OrNoneConvert to better handle unicode parameters which
    are optional.

  * Add Certificate_summary_format_lines() utility to generate
    concise certificate identification info for output.

  * Certificate_new_from_CERTCertificate now takes add_reference parameter
    to properly reference count certs, should fix shutdown busy problems.

  * Add print_traceback(), print_cert() debugging support.


author: John Dennis <jdennis@redhat.com> - 0.14.0-2
changelog:
- resolves: bug#1002589
- resolves: bug#1003979

- Rewrite setup_certs.py. No longer behaves like an expect script
  which was fragile. By default now creates a sql style database.
- By default all examples & tests use new sql format for NSS database
- db-name is now used instead of dbdir to provide distinction between
  the database directory and it's scheme (e.g. 'sql:')
- all examples and tests now default db-name to 'sql:pki'
- replaced legacy getopt & optparse command line argument handling
  with modern argparse.


author: John Dennis <jdennis@redhat.com> - 0.14.0-3
changelog:
- resolves: bug#1003979
- In coordination with QE with regards to bz 1019934 it was requested
  the unittest patches be enhanced with a more robust version of
  test_pkcs12, no actual bug, just better testing.


author: John Dennis <jdennis@redhat.com> - 0.15.0-1
changelog:
- resolves: bug#1109769 rebase to 0.15.0
- includes fixes for 1087031 and 1060314
  See doc/Changelog for details


author: John Dennis <jdennis@redhat.com> - 0.16.0-1
changelog:
- resolves: bug#1155703 - Add API call for SSL_VersionRangeSet (rebase)
  rebased to 0.16.0
- The primary enhancements in this version is adding support for the
  setting trust attributes on a Certificate, the SSL version range API,
  information on the SSL cipher suites and information on the SSL connection.

  * The following module functions were added:

    - ssl.get_ssl_version_from_major_minor
    - ssl.get_default_ssl_version_range
    - ssl.get_supported_ssl_version_range
    - ssl.set_default_ssl_version_range
    - ssl.ssl_library_version_from_name
    - ssl.ssl_library_version_name
    - ssl.get_cipher_suite_info
    - ssl.ssl_cipher_suite_name
    - ssl.ssl_cipher_suite_from_name

  * The following deprecated module functions were removed:

    - ssl.nssinit
    - ssl.nss_ini
    - ssl.nss_shutdown

  * The following classes were added:

    - SSLCipherSuiteInfo
    - SSLChannelInfo

  * The following class methods were added:

    - Certificate.trust_flags
    - Certificate.set_trust_attributes

    - SSLSocket.set_ssl_version_range
    - SSLSocket.get_ssl_version_range
    - SSLSocket.get_ssl_channel_info
    - SSLSocket.get_negotiated_host
    - SSLSocket.connection_info_format_lines
    - SSLSocket.connection_info_format
    - SSLSocket.connection_info_str
	
    - SSLCipherSuiteInfo.format_lines
    - SSLCipherSuiteInfo.format

    - SSLChannelInfo.format_lines
    - SSLChannelInfo.format

  * The following class properties were added:

    - Certificate.ssl_trust_flags
    - Certificate.email_trust_flags
    - Certificate.signing_trust_flags

    - SSLCipherSuiteInfo.cipher_suite
    - SSLCipherSuiteInfo.cipher_suite_name
    - SSLCipherSuiteInfo.auth_algorithm
    - SSLCipherSuiteInfo.auth_algorithm_name
    - SSLCipherSuiteInfo.kea_type
    - SSLCipherSuiteInfo.kea_type_name
    - SSLCipherSuiteInfo.symmetric_cipher
    - SSLCipherSuiteInfo.symmetric_cipher_name
    - SSLCipherSuiteInfo.symmetric_key_bits
    - SSLCipherSuiteInfo.symmetric_key_space
    - SSLCipherSuiteInfo.effective_key_bits
    - SSLCipherSuiteInfo.mac_algorithm
    - SSLCipherSuiteInfo.mac_algorithm_name
    - SSLCipherSuiteInfo.mac_bits
    - SSLCipherSuiteInfo.is_fips
    - SSLCipherSuiteInfo.is_exportable
    - SSLCipherSuiteInfo.is_nonstandard

    - SSLChannelInfo.protocol_version
    - SSLChannelInfo.protocol_version_str
    - SSLChannelInfo.protocol_version_enum
    - SSLChannelInfo.major_protocol_version
    - SSLChannelInfo.minor_protocol_version
    - SSLChannelInfo.cipher_suite
    - SSLChannelInfo.auth_key_bits
    - SSLChannelInfo.kea_key_bits
    - SSLChannelInfo.creation_time
    - SSLChannelInfo.creation_time_utc
    - SSLChannelInfo.last_access_time
    - SSLChannelInfo.last_access_time_utc
    - SSLChannelInfo.expiration_time
    - SSLChannelInfo.expiration_time_utc
    - SSLChannelInfo.compression_method
    - SSLChannelInfo.compression_method_name
    - SSLChannelInfo.session_id

  * The following files were added:

    - doc/examples/cert_trust.py
    - doc/examples/ssl_version_range.py

  * The following constants were added:
    - nss.CERTDB_TERMINAL_RECORD
    - nss.CERTDB_VALID_PEER
    - nss.CERTDB_TRUSTED
    - nss.CERTDB_SEND_WARN
    - nss.CERTDB_VALID_CA
    - nss.CERTDB_TRUSTED_CA
    - nss.CERTDB_NS_TRUSTED_CA
    - nss.CERTDB_USER
    - nss.CERTDB_TRUSTED_CLIENT_CA
    - nss.CERTDB_GOVT_APPROVED_CA
    - ssl.SRTP_AES128_CM_HMAC_SHA1_32
    - ssl.SRTP_AES128_CM_HMAC_SHA1_80
    - ssl.SRTP_NULL_HMAC_SHA1_32
    - ssl.SRTP_NULL_HMAC_SHA1_80
    - ssl.SSL_CK_DES_192_EDE3_CBC_WITH_MD5
    - ssl.SSL_CK_DES_64_CBC_WITH_MD5
    - ssl.SSL_CK_IDEA_128_CBC_WITH_MD5
    - ssl.SSL_CK_RC2_128_CBC_EXPORT40_WITH_MD5
    - ssl.SSL_CK_RC2_128_CBC_WITH_MD5
    - ssl.SSL_CK_RC4_128_EXPORT40_WITH_MD5
    - ssl.SSL_CK_RC4_128_WITH_MD5
    - ssl.SSL_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA
    - ssl.SSL_FORTEZZA_DMS_WITH_NULL_SHA
    - ssl.SSL_FORTEZZA_DMS_WITH_RC4_128_SHA
    - ssl.SSL_RSA_OLDFIPS_WITH_3DES_EDE_CBC_SHA
    - ssl.SSL_RSA_OLDFIPS_WITH_DES_CBC_SHA
    - ssl.TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
    - ssl.TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA
    - ssl.TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
    - ssl.TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA
    - ssl.TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA
    - ssl.TLS_DHE_DSS_WITH_DES_CBC_SHA
    - ssl.TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
    - ssl.TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
    - ssl.TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
    - ssl.TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
    - ssl.TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
    - ssl.TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
    - ssl.TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
    - ssl.TLS_DHE_RSA_WITH_DES_CBC_SHA
    - ssl.TLS_DH_ANON_WITH_CAMELLIA_128_CBC_SHA
    - ssl.TLS_DH_ANON_WITH_CAMELLIA_256_CBC_SHA
    - ssl.TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA
    - ssl.TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA
    - ssl.TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA
    - ssl.TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA
    - ssl.TLS_DH_DSS_WITH_DES_CBC_SHA
    - ssl.TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA
    - ssl.TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA
    - ssl.TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA
    - ssl.TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA
    - ssl.TLS_DH_RSA_WITH_DES_CBC_SHA
    - ssl.TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA
    - ssl.TLS_DH_anon_EXPORT_WITH_RC4_40_MD5
    - ssl.TLS_DH_anon_WITH_3DES_EDE_CBC_SHA
    - ssl.TLS_DH_anon_WITH_AES_128_CBC_SHA
    - ssl.TLS_DH_anon_WITH_AES_256_CBC_SHA
    - ssl.TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA
    - ssl.TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA
    - ssl.TLS_DH_anon_WITH_DES_CBC_SHA
    - ssl.TLS_DH_anon_WITH_RC4_128_MD5
    - ssl.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
    - ssl.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
    - ssl.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
    - ssl.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
    - ssl.TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
    - ssl.TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
    - ssl.TLS_EMPTY_RENEGOTIATION_INFO_SCSV
    - ssl.TLS_FALLBACK_SCSV
    - ssl.TLS_NULL_WITH_NULL_NULL
    - ssl.TLS_RSA_EXPORT_WITH_DES40_CBC_SHA
    - ssl.TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5
    - ssl.TLS_RSA_EXPORT_WITH_RC4_40_MD5
    - ssl.TLS_RSA_WITH_3DES_EDE_CBC_SHA
    - ssl.TLS_RSA_WITH_AES_128_CBC_SHA256
    - ssl.TLS_RSA_WITH_AES_128_GCM_SHA256
    - ssl.TLS_RSA_WITH_AES_256_CBC_SHA256
    - ssl.TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
    - ssl.TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
    - ssl.TLS_RSA_WITH_DES_CBC_SHA
    - ssl.TLS_RSA_WITH_IDEA_CBC_SHA
    - ssl.TLS_RSA_WITH_NULL_MD5
    - ssl.TLS_RSA_WITH_NULL_SHA
    - ssl.TLS_RSA_WITH_NULL_SHA256
    - ssl.TLS_RSA_WITH_RC4_128_MD5
    - ssl.TLS_RSA_WITH_RC4_128_SHA
    - ssl.TLS_RSA_WITH_SEED_CBC_SHA
    - ssl.SSL_VARIANT_DATAGRAM
    - ssl.SSL_VARIANT_STREAM
    - ssl.SSL_LIBRARY_VERSION_2
    - ssl.SSL_LIBRARY_VERSION_3_0
    - ssl.SSL_LIBRARY_VERSION_TLS_1_0
    - ssl.SSL_LIBRARY_VERSION_TLS_1_1
    - ssl.SSL_LIBRARY_VERSION_TLS_1_2
    - ssl.SSL_LIBRARY_VERSION_TLS_1_3
    - ssl.ssl2
    - ssl.ssl3
    - ssl.tls1.0
    - ssl.tls1.1
    - ssl.tls1.2
    - ssl.tls1.3

   * The following methods were missing thread locks, this has been fixed.

     - nss.nss_initialize
     - nss.nss_init_context
     - nss.nss_shutdown_context


author: John Dennis <jdennis@redhat.com> - 0.16.0-3
changelog:
- Resolves: #1225212
  Reads from file like objects actually only worked for file objects
- Resolves: #1179573
  python-nss-doc package is missing the run_tests script
- Resolves: #1194349
  test_pkcs12.py does not works in FIPS mode


author: Pavel Cahyna <pcahyna@redhat.com> - 2.1.1-3
changelog:
- Fix a security flaw (CVE-2018-7750) in Paramiko's server
  mode (emphasis on **server** mode; this does **not** impact *client* use!)
  Backported from 2.1.5.
  Resolves #1557142


author: Pavel Cahyna <pcahyna@redhat.com> - 2.1.1-4
changelog:
- Add a dependency on python2-pyasn1. It used to be a dependency
  of python2-cryptography, but it is not the case with newer versions.
  (RHBZ #1559133)


author: Jake Hunsaker <jhunsake@redhat.com> - 2.1.1-9
changelog:
- Fix a security flaw (CVE-2018-1000805) in Paramiko's server
  mode (does not effect client mode).
  Backported from 2.1.6
  Resolves rhbz#1637366


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.7.5.1-3
changelog:
- Ugh.  Enable unittests and make a note that the python3 module is totally
  non-functional.  Open a bug for that for the actual package maintainers to
  make a decision on.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.7.5.1-4.20111221hg1498
changelog:
- Tarball is missing files, use a snapshot to get those files and also pick up
  several bug fixes (one related to serving CGI scripts, another for http
  Continue requests, and a third regarding digest authentication and internet
  explorer)


author: Roman Rakus <rrakus@redhat.com> - 2.0.0-12
changelog:
- Mark doc subpackage arch dependent. Docs are built depending on supported
  features, which are different across archs.
  Resolves: rhbz#987839


author: Ralph Bean <rbean@redhat.com> - 0.6.1-1
changelog:
- New upstream version
- Added support for python3
- Included README, COPYING, and CHANGELOG in docs


author: Devrim Gündüz <devrim@gunduz.org> 2.5-1
changelog:
- Update to 2.5, per changes described at:
  http://www.psycopg.org/psycopg/articles/2013/04/07/psycopg-25-released/


author: Thomas Moschny <thomas.moschny@gmx.de> - 1.4.14-2
changelog:
- Use python-sphinx for rhel > 6 (rhbz#973321).
- Update URL.
- Fix changelog entry with an incorrect date (rhbz#973325).


author: Eric Smith <brouhaha@fedoraproject.org> 2.09.1-3
changelog:
- Run _build_tables.py to build the lextab.py and yacctab.py; otherwise
  they have to be regenerated at runtime for no benefit.


author: Eric Smith <brouhaha@fedoraproject.org> 2.09.1-4
changelog:
- Upstream repository is now on github.
- Fix rpmlint strange-permission complaint.
- Rename patches, Source1 to all start with pycparser-{version}, to
  simplify updating patches for future upstream releases.


author: Eric Smith <brouhaha@fedoraproject.org> 2.09.1-5
changelog:
- Renumbered Fedora-specific Patch1 to Patch100
- Added new Patch1 to fix table generation when the build system
  already has a python-pycparser package installed.
- Submitted Patch0 and Patch1 as upstream issues.
- Added comments about patches.


author: Kamil Dudka <kdudka@redhat.com> - 7.19.0-15
changelog:
- allow to return -1 from the write callback (#857875) 
- remove the patch for curl-config --static-libs no longer needed
- run the tests against the just built pycurl, not the system one


author: Steve Milner <smilner@fedoraproject.org> - 1.4-1
changelog:
- update for upstream release
- Add python2.6 support done by Steve Traylen <steve.traylen@cern.ch>. BZ#662755.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.4-2
changelog:
- Fix python main package having dependencies for the python2.6 subpackage
- Fix places that used the default python instead of python26
- Attempt to make byte compilation more robust in case we add python3 to EPEL5
- Run unittests on python3 in F15+


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.15-9
changelog:
- The libudev library loaded in context to workaround cleanup problems
  Resolves: rhbz#1252833
- Retry interrupted calls
  Resolves: rhbz#1108921


author: Michel Salim <salimma@fedoraproject.org> - 2.4.1-2
changelog:
- Clean up spec, removing unnecessary declarations
- Rename tool in %{_bindir} to the less ambiguous qrcode


author: Tomas Orsava <torsava@redhat.com> - 2.6.0-7
changelog:
- Modify tests to run in pytest
- Add a bcond online_tests to enable the tests
Related: rhbz#1745417


author: Charalampos Stratakis <cstratak@redhat.com> - 2.6.0-9
changelog:
- Bring back the requests.packages aliasing of its submodules
Resolves: rhbz#1785607, rhbz#1785666, rhbz#1785696, rhbz#1787679


author: Charalampos Stratakis <cstratak@redhat.com> - 2.6.0-10
changelog:
- Fix test_urllib3_retries by having it import urllib3 from the global namespace
Resolves: rhbz#1771567


author: Alex Wood <awood@redhat.com> 1.19.1-1
changelog:
- Adjust our C bindings for OpenSSL v1.1 API. (awood@redhat.com)
- Make python-rhsm Python-3 compatible (khowell@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.19.2-1
changelog:
- 1423443: Handle IndexError during m2crypto request (khowell@redhat.com)
- Move python-rhsm into subdirectory (khowell@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.19.3-1
changelog:
- 1435475: Support older versions of M2Crypto (awood@redhat.com)
- 1427069: Prioritize content from Basic entitlements (khowell@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.19.4-1
changelog:
- 1438552: Allows releases to be listed through a proxy (csnyder@redhat.com)
- 1420533: Add no_proxy option to API, config, UI (khowell@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.19.6-1
changelog:
- 1426343: fixed rct to display cert without subjectAltName.
  (jhnidek@redhat.com)
- Add Update subscriptions pools (tcoufal@redhat.com)
- Add support to list future subscription pools (tcoufal@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.19.7-1
changelog:
- 1443159: Added default value for splay configuration (jhnidek@redhat.com)
- 1451166: Fix Host header when using proxy (khowell@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.19.9-1
changelog:
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)


author: Tomas Orsava <torsava@redhat.com> - 3-28
changelog:
- Fix the %py_dist_name macro to not convert dots (".") into dashes, so that
  submodules can be addressed as well Resolves: rhbz#1564095


author: Lumír Balhar <lbalhar@redhat.com> - 3-31
changelog:
- Converting specfile from F28 to RHEL7
- Move the macros to the standard RHEL7 macro location at /etc/rpm/,
  instead of Fedora's location at /usr/lib/rpm/macros.d/
- Import the macros.python{,2} files from the python-devel package where they
  resided until now, and Conflict with that old version of python-devel
- Import the macros.pybytecompile from Fedora rawhide / RHEL8
Resolves: rhbz#1660579


author: Miro Hrončok <mhroncok@redhat.com> - 3-32
changelog:
- %python_provide: Obsolete and provide python36- from python3-
- %python_provide: Provide python3- from python36-
Resolves: rhbz#1702719


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 0.1.13-1
changelog:
- Fix "python2-s3transfer" from EPEL issue by adding it to Obsoletes
- Rebase to v0.1.13 to fix missing "max_bandwidth" issue

  Resolves: rhbz#1576985
  Resolves: rhbz#1578083


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.2-1
changelog:
- Add get_priority_{min,max} methods
- Add constants for SCHED_{BATCH,FIFO,OTHER,RR}
- Implement get_priority method
- Add pchrt utility for testing the bindings, chrt clone
- Add ptaskset utility for testing the bindings, taskset clone


author: John Kacur <jkacur@redhat.com> - 0.4-5
changelog:
- Add man pages for pchrt and ptaskset
- Fix and update usage messages for pchrt and ptaskset
- Resolves:rhbz#948381


author: John Kacur <jkacur@redhat.com> - 0.4-6
changelog:
- python-schedutils-Update-URL-in-python-schedutils.sp.patch
- schedutils.c-added-support-for-SCHED_DEADLINE.patch
Resolves: rhbz#1298388


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.8-1
changelog:
- Switch source from distribute to setuptools, that are now uptodate and supported.
- Update to setuptools 0.8.0.
- Specfile cleanup (unnecessary Python 3 logic, old RPM stuff, bogus changelog dates)


author: Nils Philippsen <nils@redhat.com> - 0.2.19-1
changelog:
- allow service object methods to be called locally
- preserve signature, docstrings, etc. of decorated methods


author: Nils Philippsen <nils@redhat.com> - 0.4.0-1
changelog:
- version 0.4.0:
  - get rid of (ancient) PolicyKit-0.x support
  - add basic (experimental, unstable) dbus introspection support
  - learn to cope with polkitd being restarted


author: Charalampos Stratakis <cstratak@redhat.com> - 0.4.0-3
changelog:
- Make firewalld to not log errors when running commands as root
in the absence of polkitd.
Resolves: rhbz#1393488


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0.13-8
changelog:
- Fix memory leak in the auth_fn callback.
- Make sure auth info is NUL-terminated.
Resolves: rhbz#1248519


author: jortel <jortel@redhat.com> - 0.3.7-1
changelog:
- Better soap header support
- Added new transport HttpAuthenticated for active (not passive) basic authentication.
- New options (prefixes, timeout, retxml)
- WSDL processing enhancements.
- Expanded builtin XSD type support.
- Fixed <xs:iniclude/>
- Better XML date/datetime conversion.
- Client.clone() method added for lightweight copy of client object.
- XSD processing fixes/enhancements.
- Better <simpleType/> by <xs:restriction/> support.
- Performance enhancements. 
- Fixed tickets: #65, #232, #233, #235, #241, #242, #244, #247, #254, #254, #256, #257, #258


author: jortel <jortel@redhat.com> - 0.3.8-1
changelog:
- Includeds Windows NTLM Transport.
- Add missing self.messages in Client.clone().
- Changed default behavior for WSDL PartElement to be optional.
- Add support for services/ports defined without <address/> element in WSDL.
- Fix sax.attribute.Element.attrib() to find by name only when ns is not specified; renamed to Element.getAttribute().
- Update HttpTransport to pass timeout parameter to urllib2 open() methods when supported by urllib2.
- Add null class to pass explicit NULL values for parameters and optional elements.
- Soap encoded array (soap-enc:Array) enhancement for rpc/encoded.
  Arrays passed as python arrays - works like document/literal now.
  No more using the factory to create the Array.
  Automatically includes arrayType attribute.  Eg: soap-enc:arrayType="Array[2]".
  Reintroduced ability to pass complex (objects) using python dict instead of suds object via factory.
- Fixed tickets: #84, #261, #262, #263, #265, #266, #278, #280, #282.


author: jortel <jortel@redhat.com> - 0.3.9-1
changelog:
- Bumped python requires to 2.4
- Replaced stream-based caching in the transport package with document-based caching.
- Caches pickled Document objects instead of XML text. 2x Faster!
- No more SAX parsing exceptions on damaged or incomplete cached files. 
- Cached WSDL objects. Entire Definitions object including contained Schema object cached via pickle.
- Copy of soap encoding schema packaged with suds.
- Refactor Transports to use ProxyHandler instead of urllib2.Request.set_proxy().
- Added WSSE enhancements <Timestamp/> and <Expires/> support. See: Timestamp token. 
- Fixed Tickets: #256, #291, #294, #295, #296


author: jortel <jortel@redhat.com> - 0.4-1
changelog:
- Fix spelling errors in spec description.
- Fix source0 URL warning.
- Updated caching to not cache intermediate wsdls.
- Added DocumentCache which caches verified XML documents as text. User can choose.
- Added cachingpolicy option to allow user to specify whether to cache XML documents or the WSDL object.
- Provided for repeating values in reply for message parts consistent with way handled in nested objects.
- Added charset=utf-8 to stock content-type http header.
- Added <?xml version="1.0" encoding="UTF-8"?> to outgoing SOAP messages.
- Detection of faults in successful (http=200) replies and raise WebFault. Search for <soapenv:Fault/>.
- Add plugins facility. 
- Fixed Tickets: #251, #313, #314, #334


author: William Poteat <wpoteat@redhat.com> 1.24.33-1
changelog:
- 1796833: RHEL 7.9 Tier 0 Localization (wpoteat@redhat.com)
- 1818932: Using 'Simple Content Access' for access mode
  (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.24.36-1
changelog:
- 1831104: When in Simple Content Access mode, subscription-manager should not
  complain that subscriptions aren't attached (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.24.37-1
changelog:
- 1830994: Fix warning messages in dnf/yum (jhnidek@redhat.com)
- 1823523: Detect rhsm-icon running without psutil (csnyder@redhat.com)
- 1771921: Package profiles sends too early when registering a client
  (wpoteat@redhat.com)
- 1688702: Generate redhat.repo in off-line mode; ENT-2302 (jhnidek@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.24.38-1
changelog:
- 1837244: Fix wrong version provided by subscription-manager version; ENT-2388
  (jhnidek@redhat.com)
- 1834792: Try to terminate rhsmd after timeout; ENT-2368 (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.39-1
changelog:
- 1789457: Syspurpose exception message parsing (wpoteat@redhat.com)
- 1725525: Mark one string for translation; ENT-1680 (jhnidek@redhat.com)
- 1796833: Fix a few broken fr translations (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.24.41-1
changelog:
- 1842474: Update local and cache file during sync(); ENT-2433
  (jhnidek@redhat.com)
- 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.42-1
changelog:
- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)


author: Julian Sikorski <belegdol@fedoraproject.org> - 11.1.0-1
changelog:
- Updated to 11.1.0
- Obsoleted zsh subpackage (upstream ticket #3078)
- mktap is gone (upstream ticket #5293)
- Dropped obsolete Group, Buildroot, %clean and %defattr


author: Lumír Balhar <lbalhar@redhat.com> - 12.1.0-7
changelog:
- Fix CVE-2020-10108 and CVE-2020-10109 multiple HTTP request smuggling vulnderabilities
Resolves: rhbz#1813439 rhbz#1813447
- Remove useless macros definitions


author: Ralph Bean <rbean@redhat.com> - 1.5-3
changelog:
- Renamed patches to python-urllib3-*
- Fixed ssl check patch to use the correct cert path for Fedora.
- Included dependency on ca-certificates
- Cosmetic indentation changes to the .spec file.


author: Ralph Bean <rbean@redhat.com> - 1.5-4
changelog:
- Upstream patch to fix Accept header when behind a proxy.
- Reorganize patch numbers to more clearly distinguish them.


author: bkabrda <bkabrda@redhat.com> - 1.10.2-2
changelog:
- Fix the way we unbundle six to make ovirt work even when they remove .py files
Resolves: rhbz#1247093


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.9.1-1
changelog:
- Update to upstream 1.9.1 because of security issues with the bundled
  python-pip in older releases.  This is just a quick fix until a
  python-virtualenv maintainer can unbundle the python-pip package
  see: https://bugzilla.redhat.com/show_bug.cgi?id=749378


author: Tomas Orsava <torsava@redhat.com> - 1.10.1-3
changelog:
- Added a patch that shows a custom error message when a FILE passed to
  virtualenv to be used as 'home dir' already exists and is NOT a directory.
Resolves: rhbz#1306513


author: Charalampos Stratakis <cstratak@redhat.com> - 15.1.0-1
changelog:
- Rebase to version 15.1.0
- Disable automatic downloads from pypi on new venv creation
Resolves: rhbz#1461154


author: Lumír Balhar <lbalhar@redhat.com> - 15.1.0-3
changelog:
- Add three new patches for CVEs in bundled urllib3 and requests
CVE-2018-20060, CVE-2019-11236, CVE-2018-18074
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829


author: Jiri Kucera <jkucera@redhat.com> - 0.3.9-9
changelog:
- Backport ecef526 (Stop using crypt_get_error)
  Backport 23a1ff0 (Fix nonsensical error messages on missing keys)
  Fix License, URL and Source0 tags
  Resolves: #1502399, #1574988, #1593855, #1454358


author: Christian Heimes <cheimes@redhat.com> - 1.7.2-1
changelog:
- Update to 1.7.2
- Disable pytest.deprecated_call() tests
- Remove versioned pytest
- Add build requirements pytz


author: Christian Heimes <cheimes@redhat.com> - 1.7.2-2
changelog:
- Ignore errors on OpenSSL's error stack when initializing, fixes RHBZ#1402235
- Add depenency on python-setuptools, fixes RHBZ#1459947
- Fix parsing of long OIDs, fixes RHBZ#1455755


author: John Dennis <jdennis@redhat.com> - 2.0.1-8
changelog:
- add missing Obsoletes for prior python-oauthlib package,
  replaced by python2-oauthlib
  Resolves: rhbz#1401784


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 0.1.6-1
changelog:
- update to upstream release 0.1.6
- update modules to 0.0.4
- update description
- add python3-pyasn1 subpackage
- add versioned Requires for the module subpackages
- add %check section


author: John Dennis <jdennis@redhat.com> - 0.8.0-5
changelog:
- BuildRequires had python-requests but the Requires was still referencing
  python2-requests which is not yet provided in RHEL 7.4.,
  also add the missing version dependency on python-requests.
  Resolves: rhbz#1401783


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.2.6-9
changelog:
- Python 2 binary package renamed to python2-subprocess32
  See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Marcel Plch <mplch@redhat.com> - 3.2.6-14
changelog:
- Backport upstream patch for heap overflow when parsing too many arguments
- Resolves: rhbz#1619386


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-8
changelog:
- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1703535 and rhbz#1704364


author: Miro Hrončok <mhroncok@redhat.com> - 9.0.3-2
changelog:
- Allow to import pip10's main from pip9's /usr/bin/pip
- Do not show the "new version of pip" warning outside of venv
Resolves: rhbz#1569488
Resolves: rhbz#1571650
Resolves: rhbz#1573755


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-3
changelog:
- Converting pip specfile from F28 to RHEL7
- Disabled building of the Python 2 subpackage
- Disabled building of docs, because we don't ship its build dependencies in
  RHEL7
- Updated to a newer version of tests to match the package version
- Backported Patch3 and Patch4 from Fedora
Resolves: rhbz#1660573


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-6
changelog:
- Add four new patches for CVEs in bundled urllib3 and requests
CVE-2018-20060, CVE-2019-11236, CVE-2019-11324, CVE-2018-18074
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1702473
Resolves: rhbz#1643829


author: Tomas Orsava <torsava@redhat.com> - 4.14.0-1
changelog:
- Rebase to rpm 4.14.0 final (http://rpm.org/wiki/Releases/4.14.0)
- Re-synchronize version/release macros with the rpm Fedora package


author: Tomas Orsava <torsava@redhat.com> - 6-2
changelog:
- Modifying python-rpm-generators from F29 to be used in RHEL7
- The regex in pythondist.attr has been modified to only match Python 3
  modules, so that we do not affect the building of python2 files in RHEL7 at
  this late stage
- Removed python.attr and pythondeps.sh files, because they are contained in
  rpm-build in RHEL7 and we do not want to modify them
- the pythondist.attr and pythondistdeps.py are completely new, therefore we
  don't need to conflict with anything in RHEL7
Resolves: rhbz#1660578


author: Lumír Balhar <lbalhar@redhat.com> - 39.2.0-7
changelog:
- Converting specfile from F28 to RHEL7
- Tests disabled because the minimal RHEL7 Python 3 stack does not contain test
  dependencies
- Disabled building of the Python 2 subpackage
Resolves: rhbz#1660563


author: Lumír Balhar <lbalhar@redhat.com> - 39.2.0-8
changelog:
- SRPM renamed from python-setuptools to python3-setuptools
- Package prepared to contain only Python 3 version
Resolves: rhbz#1660563


author: Tomas Orsava <torsava@redhat.com> - 0.30.0a0-8
changelog:
- Switch macros to bcond's and make Python 2 optional to facilitate building
  the Python 2 and Python 3 modules


author: Lumír Balhar <lbalhar@redhat.com> - 0.31.1-4
changelog:
- Converting specfile from F29 to RHEL7
- Disabled building of the Python 2 subpackage
- Disabled tests (by setting the bootstrap on - see note)
- Removed python-wheel-wheel package with the wheel of wheel
Resolves: rhbz#1660574


author: Marcin Zajaczkowski <mszpak ATT wp DOTT pl> - 0.5.0-5
changelog:
- remove prodive/obsolete of python-xattr (bug 781838)
- fix problem with mixed use of tabs and spaces


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0-2.el7
changelog:
- synchronized with qemu-kvm-rhev-2.3.0-9.el7
- qemuga-Change-fsreeze-hook-default-location.patch [bz#1210707]
- qemuga-qga-commands-posix-Fix-bug-in-guest-fstrim.patch [bz#1211973]
- Resolves: bz#1210707
  (The default path '/etc/qemu/fsfreeze-hook' for 'fsfreeze-hook' script doesn't exist)
- Resolves: bz#1211973
  ('guest-fstrim' failed for guest with os on spapr-vscsi disk)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0-3.el7
changelog:
- qemuga-Do-not-stop-qemu-guest-agent-service-on-target-switc.patch [bz#1160930]
- Resolves: bz#1160930
  (The guest agent service in rhel7 guest will be stopped after run the init command)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.5.0-2.el7
changelog:
- qemuga-redhat-blacklist-guest-exec-commands.patch [bz#1340346]
- Resolves: bz#1340346
  (blacklist guest-exec in newer version of qemu-guest-agent)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.5.0-3.el7
changelog:
- qemuga-spec-add-qemu-ga-man-page.patch [bz#1101556]
- Resolves: bz#1101556
  ([RFE] qemu-ga should have a config file)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.8.0-1.el7
changelog:
- Rebase to 2.8.0 base [bz#1414676]
- Resolves: bz#1414676
  (Rebase qemu-guest-agent to 2.8.0 base)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.8.0-2.el7
changelog:
- qemuga-Remove-unnecessary-dependencies.patch [bz#1441999]
- Resolves: bz#1441999
  (Clean qemu-ga dependencies)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-1.el7
changelog:
- Rebase to 2.12.0 base [bz#1562218]
- Resolves: bz#1562218
  (Rebase qemu-guest-agent for RHEL-7.6)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-2.el7
changelog:
- qemuga-qemu-ga-make-get-fsinfo-work-over-pci-bridges.patch [bz#1567041]
- qemuga-qga-fix-driver-leak-in-guest-get-fsinfo.patch [bz#1567041]
- Resolves: bz#1567041
  (qemu-guest-agent does not parse PCI bridge links in "build_guest_fsinfo_for_real_device" (q35))


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-3.el7
changelog:
- qemuga-qga-ignore-non-present-cpus-when-handling-qmp_guest_.patch [bz#1611062]
- qemuga-qemu-guest-agent.spec-add-systemd-devel-dependency.patch [bz#1635571]
- qemuga-configure-add-test-for-libudev.patch [bz#1635571]
- qemuga-qga-linux-report-disk-serial-number.patch [bz#1635571]
- qemuga-qga-linux-return-disk-device-in-guest-get-fsinfo.patch [bz#1635571]
- Resolves: bz#1611062
  ("virsh vcpucount --guest" fails after hotunplug a vcpu with intermediate order by "setvcpu")
- Resolves: bz#1635571
  ([RFE] Report disk device name and serial number (qemu-guest-agent on Linux))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-166.el7
changelog:
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-167.el7
changelog:
- Reverting kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-168.el7
changelog:
- kvm-qxl-check-release-info-object.patch [bz#1712703]
- kvm-bswap.h-Remove-cpu_to_be16wu.patch [bz#1270166]
- kvm-net-Transmit-zero-UDP-checksum-as-0xFFFF.patch [bz#1270166]
- kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734749]
- Resolves: bz#1270166
  (UDP packet checksum is not converted from 0x0000 to 0xffff with Qemu e1000 emulation.)
- Resolves: bz#1712703
  (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-7])
- Resolves: bz#1734749
  (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-7.8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-169.el7
changelog:
- kvm-target-i386-Support-invariant-tsc-flag.patch [bz#1626871]
- kvm-target-i386-block-migration-and-savevm-if-invariant-.patch [bz#1626871]
- kvm-i386-Don-t-copy-host-virtual-address-limit.patch [bz#1706658]
- Resolves: bz#1626871
  ([RFE] request for using TscInvariant feature with qemu-kvm.)
- Resolves: bz#1706658
  ([Intel 7.8 Bug] qemu-kvm fail with "err:kvm_init_vcpu() invalidate argumant" on ICX platform)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-170.el7
changelog:
- kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749735]
- kvm-target-i386-Merge-feature-filtering-checking-functio.patch [bz#1709971]
- kvm-target-i386-Isolate-KVM-specific-code-on-CPU-feature.patch [bz#1709971]
- kvm-i386-Add-new-MSR-indices-for-IA32_PRED_CMD-and-IA32_.patch [bz#1709971]
- kvm-i386-Add-CPUID-bit-and-feature-words-for-IA32_ARCH_C.patch [bz#1709971]
- kvm-Add-support-to-KVM_GET_MSR_FEATURE_INDEX_LIST-an.patch [bz#1709971]
- kvm-x86-Data-structure-changes-to-support-MSR-based-feat.patch [bz#1709971]
- kvm-x86-define-a-new-MSR-based-feature-word-FEATURE_WORD.patch [bz#1709971]
- kvm-Use-KVM_GET_MSR_INDEX_LIST-for-MSR_IA32_ARCH_CAP.patch [bz#1709971]
- kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1709971]
- kvm-Remove-arch-capabilities-deprecation.patch [bz#1709971]
- kvm-target-i386-add-MDS-NO-feature.patch [bz#1714791]
- Resolves: bz#1709971
  ([Intel 7.8 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM qemu-kvm)
- Resolves: bz#1714791
  ([Intel 7.8 FEAT] MDS_NO exposure to guest - qemu-kvm)
- Resolves: bz#1749735
  (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-171.el7
changelog:
- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-172.el7
changelog:
- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-173.el7
changelog:
- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-174.el7
changelog:
- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)


author: Jon Maloy <jmaloy@redhat.com> - 1.5.3-175.el7
changelog:
- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])


author: Rex Dieter <rdieter@fedoraproject.org> - 0.0.4-2
changelog:
- update summary/description/Source_url
- %files: track soname
- cleaner cmake-fu
- upstream noexecstack patch


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.0.4-3
changelog:
- require the main package with exact version-release in -examples
- remove explicit Requires: qt4-devel pkgconfig from -devel, now autodetected


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7.1-8
changelog:
- skip stripping some compiler flags (undocumented)
- %files: track files closer (lib soname in particular)
- -devel: avoid dep on cmake 
- %check: +make test, pkgconfig check


author: Doug Ledford <dledford@redhat.com> - 0.4.6-6
changelog:
- Fix the fact that qperf was using the wrong PF_RDS define now that RDS
  is integrated upstream and its assigned number is no longer temporary


author: Matthieu Saulnier <fantom@fedoraproject.org> - 3.2.0-1
changelog:
- update to 3.2.0
- remove BuildRoot tag in spec file
- remove "rm -rf $RPM_BUILD_ROOT" at the beginning of %install section
- remove %clean section
- remove %defattr lines
- add a joker for libqrencode.so.* files


author: Peter Gordon <peter@thecodergeek.com> - 3.2.0-2
changelog:
- Add patch to fix improper LIBPTHREAD macro in the pkgconfig file:
  + fix-LIBPTHREAD-macro.patch
- Resolves: #795582 (qrencode-devel: Malformed pkgconfig file causes build to
  fail ("@LIBPTHREAD@: No such file or directory"))


author: Matthieu Saulnier <fantom@fedoraproject.org> - 3.3.1-1
changelog:
- update to 3.3.1
- remove "Group" tag in spec file
- fix manfile suffix
- remove patch to fix improper LIBPTHREAD macro in the pkgconfig file:
  - upstream issue


author: Jan Grulich <jgrulich@redhat.com> - 1:4.8.7-8
changelog:
- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862


author: Jan Grulich <jgrulich@redhat.com> - 5.9.7-3
changelog:
- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680


author: Jan Grulich <jgrulich@redhat.com> - 5.9.7-4
changelog:
- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685


author: Michal Sekletar <msekleta@redhat.com> - 0.99.22.1-7
changelog:
- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883


author: Michal Sekletar <msekleta@redhat.com> - 0.99.22.3-1
changelog:
- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532


author: Michal Sekletar <msekleta@redhat.com> - 0.99.22.4-4
changelog:
- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)


author: Ondřej Lysoněk <olysonek@redhat.com> - 0.99.22.4-5
changelog:
- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-12
changelog:
- Do not warn if rquotad RPC service is not registered (bug #1155584)
- Query kernel for next quota on XFS or file system with hidden quota files
  (bug #1305968)
- Add rpc-rquotad.service file which was known as nfs-rquotad.service
  in nfs-utils (bug #1207239)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-14
changelog:
- Add nfs-rquotad.service alias for backward compatibility (bug #1207239)
- Start rpc-rquotad.service when starting nfs-server.service (bug #1207239)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-18
changelog:
- Distinguish between none quota limits and no allocated resources in quota(1)
  tool (bug #1601109)


author: Prarit Bhargava <prarit@redhat.com>
changelog:
- Initial import from https://github.com/andikleen/mce-inject.git
- Initial import from git://git.kernel.org/pub/scm/linux/kernel/git/gong.chen/aer-inject.git


author: Prarit Bhargava <prarit@redhat.com>
changelog:
- Initial import from git://git.kernel.org/pub/scm/utils/cpu/mce/mce-test.git
- updated mce-inject to commit 4cbe4632


author: Sumit Bose <sbose@redhat.com> - 0.16.1-6
changelog:
- Resolves: rhbz#1258745
- Resolves: rhbz#1258488
- Resolves: rhbz#1267563
- Resolves: rhbz#1293390
- Resolves: rhbz#1273924
- Resolves: rhbz#1274368
- Resolves: rhbz#1291924


author: Sumit Bose <sbose@redhat.com> - 0.16.1-10
changelog:
Use current Samba options and read NetBIOS name from keytab
- Resolves: rhbz#1484072
- Resolves: rhbz#1370457


author: Sumit Bose <sbose@redhat.com> - 0.16.1-12
changelog:
Fixes for RHEL-7.9
- Resolves: rhbz#1625001
- Resolves: rhbz#1625005
- Resolves: rhbz#1638396
- Resolves: rhbz#1714223
- Resolves: rhbz#1832134


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-3
changelog:
- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-7
changelog:
- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-8
changelog:
- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-9
changelog:
- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-11
changelog:
- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608


author: Zoltan Kota <z.kota[AT]gmx.net> 3.6-29
changelog:
- Fix build on x86_64. Run autoreconf to update config files.
  autoconf >= 2.64 needs to patch the flex.m4 file.
  Fixing FTBFS bug #564601.


author: Neil Horman <nhorman@tuxdriver.com> - 0.1-2
changelog:
- Updated requires for python3
- Removed unneeded BuildRequires
- Globed the inclusion of man page
- Fixed license file tagging


author: Ondrej Vasik <ovasik@redhat.com> - 4.1-18
changelog:
- Require sil-abyssinica-fonts in supplemental(#994341)
- Fully specify requirements on subpackages(#971386)


author: Matthias Clasen <mclasen@redhat.com> - 12.0.1-1
changelog:
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 10.0.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 9.1.0-84
changelog:
- Revert dropping brp-java-repack-jars
- fix generating group owner name when processing a jar file (#1460628)


author: Eugene Syromiatnikov <esyr@redhat.com> - 9.1.0-85
changelog:
- Fix generation of kernel module versioned symbol dependencies for the case
  when module depends on a symbol with the same name as the one present
  in kernel but with a different version (#1619235)


author: Eugene Syromiatnikov <esyr@redhat.com> - 9.1.0-86
changelog:
- Add support for compressed kernel modules to find-provides,
  find-provides.ksyms, find-requires, find-requires.ksyms (#1619891)


author: Eugene Syromiatnikov <esyr@redhat.com> - 9.1.0-87
changelog:
- Revert to usage of join instead of comm in find-requires.ksym:mod_requires()
  as generated "Requires:" and "Provides:" lists have different format
  and unsuitable for processing with comm (#1619235)


author: Mark Huth <mhuth@redhat.com> - 0.9.7-6
changelog:
- Resolves: rhbz#1314606 - show progress with addattachment
- Resolves: rhbz#1314607 - problem with addattachment -s switch


author: Mark Huth <mhuth@redhat.com> - 0.9.7-2
changelog:
- bz1161141 - search plugin output gives URLs to the XML page, not html
- bz1122161 - rfe for comment numbers and public/private markers in Case Discussion in getcase
- bz1122164 - rfe for ability to add private comments and attachments to a case


author: Mark Huth <mhuth@redhat.com> - 0.9.7-3
changelog:
- Resolves: rhbz#1168414 - rhel7 vmcore offset
- Resolves: rhbz#1174461 - skip already downloaded attachments
- Resolves: rhbz#1176473 - fix addattachment via FTP and proxy
- Make debug_repos configurable via config option


author: Mark Huth <mhuth@redhat.com> - 0.9.7-4
changelog:
- Resolves: rhbz#1196297 - typos in opencase
- Resolves: rhbz#1196316 - change menus when closing a case
- Fallback to ownerSSOName if associateSSOName filter gets 404 error in listcases
- Other small fixes


author: Mark Huth <mhuth@redhat.com> - 0.9.8-6
changelog:
- Resolves: rhbz#1104344 - add soscleaner
- Resolves: rhbz#1273976 - caches bad password
- Resolves: rhbz#1284306 - improve ? help
- Resolves: rhbz#1284308 - show attachment sizes
- Resolves: rhbz#1284309 - show attachment full path
- Resolves: rhbz#1284314 - differentiate diagnose and analyze
- Resolves: rhbz#1290909 - change case internal status
- Resolves: rhbz#1351141 - reverse severity list


author: Vikas Rathee <vrathee@redhat.com> - 0.9.9-1
changelog:
- Resolves: rhbz#1380109 - Include creation date and last modified date in Solution title details.
- Resolves: rhbz#1342628 - When opening a new case, offer a default product.
- Resolves: rhbz#1342632 - When opening a new case, offer to use the default case group of that user.


author: Vikas Rathee <vrathee@redhat.com> - 0.9.10-1
changelog:
- Resolves: rhbz#1342627 - List cases by group.
- Resolves: rhbz#1379619 - Inform when http_proxy environment variable is used.


author: Pranita Ghole <pghole@redhat.com> - 0.9.11-1
changelog:
- Resolves: rhbz#1418701 - [RFE] Add functionality to generate and send sosreport after selecting the case
- Resolves: rhbz#1592850 - [RFE] Generate and upload sosreport to case from cli
- Resolves: rhbz#1678347 - Update redhat-support-tool to use latest soscleaner
- Resolves: rhbz#1670033 - redhat-support-tool env var http_proxy does not work with user and password
- Resolves: rhbz#1457436 -  [RFE][RHEL7] Include Reason in cases of failed proxy


author: Pranita Ghole <pghole@redhat.com> - 0.12.2-1
changelog:
- Resolves: rhbz#1547763 - redhat-support-tool: UnboundLocalError: local variable 'timer' referenced before assignment


author: David Shea <dshea@redhat.com> - 0.8.9-1
changelog:
- backup old product id certificates before installation of new ones (jdornak)
  Resolves: rhbz#1148783


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.5-9
changelog:
- Install LICENSE file with javadoc package
- Add maven POM file
- Update to current packaging guidelines
- Convert versioned JAR to unversioned


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.0-10.5
changelog:
- Install license file with javadoc package
- Convert versioned javadoc to versionless
- Update to current packaging guidelines
- Remove msv provides and obsoletes


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-53
changelog:
- redis: fix validate-all action and run it during start-action
- ocf-shellfuncs: ocf_is_clone(): fix to return true when clone-max
  is set to 0
- Filesystem: add symlink support
- azure-events: new resource agent for Azure
- pgsql: get correct status during start-action, and set initial
  score for primary and hot standby

  Resolves: rhbz#1792241
  Resolves: rhbz#1818035
  Resolves: rhbz#1624203
  Resolves: rhbz#1640575
  Resolves: rhbz#1744431


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-54
changelog:
- aws-vpc-route53: new resource agent for AWS
- aws-vpc-move-ip: add "routing_table_role" parameter
- aws-vpc-move-ip: delete remaining route entries

  Resolves: rhbz#1759113
  Resolves: rhbz#1810466
  Resolves: rhbz#1828895


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-56
changelog:
- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081


author: Ade Lee <alee@redhat.com> - 2.3.2-11
changelog:
- Removed unneeded maven-checkstyle-plugin BR
- Removed Tomcat 6 dependency
- Replaced maven BR with maven-local


author: Ade Lee <alee@redhat.com> - 2.3.2-12
changelog:
- Removed modules not needed for pki-core
- Bugzilla # 973224 - resteasy-base must be split into subpackages to 
  simplify dependencies.  With help from msrb.


author: Tom Lane <tgl@redhat.com> 9.0.0-1
changelog:
- Update pg_filedump to version 9.0.0, to support PostgreSQL 9.0.
- Relabel license as PostgreSQL now that that's separately recognized by OSI.


author: Tom Lane <tgl@redhat.com> 9.1.0-1
changelog:
- Update pg_filedump to version 9.1.0, to support PostgreSQL 9.1.
- Point to new upstream home at pgfoundry.org.


author: Elliott Baron <ebaron@redhat.com> - 1.7R5-1
changelog:
- Update to 1.7R5.
- Add rhino-backout-686806.patch for backward compatibility.
- Resolves: rhbz#1350331


author: Gennadii Altukhov <galt@redhat.com> 2.0.2-15
changelog:
- Related: #1378903 - fix keywords in a changelog1378903 - fix keywords in a
  changelog (galt@redhat.com)


author: Gennadii Altukhov <galt@redhat.com> 2.0.2-16
changelog:
- Resolves: #1415742 - rhn-search traceback - immediateTrigger-server exists
  with certain identification1415742 - rhn-search traceback - immediateTrigger-
  server exists with certain identification (eherget@redhat.com)


author: Tomas Lestach <tlestach@redhat.com> 2.0.2-17
changelog:
- Reverts: bz 1415742 - rhn-search traceback - immediateTrigger-server exists with certain identification" (michael.mraka@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.2-18
changelog:
- Resolves: #1430298 - rhnreg_ks man page missing documentation for some
  options (ogajduse@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.2-19
changelog:
- Related: #1494389 - detect if action has been picked up for 2nd time
  (tkasparek@redhat.com)
- Resolves: #1494389 - revert previous reboot loop changes
  (tkasparek@redhat.com)


author: Gennadii Altukhov <galt@redhat.com> 2.5.65-2
changelog:
- fix except in rhnlib to make it compatible with Python 2.4 (galt@redhat.com)
- 1409577 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.5.65-5
changelog:
- Resolves: #1471045 - check a state of handshake before shutdown SSL
  connection (grinrag@gmail.com)


author: Michael Mraka <michael.mraka@redhat.com> 5.0.10-1
changelog:
- let rhnsd.service be enabled after installation
- Purging %changelog entries preceding Spacewalk 1.0, in active packages.


author: Grant Gainey 5.0.13-5
changelog:
- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
- Revert changes in order to clean up tagging issues with brew
  (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
  (ggainey@redhat.com)
- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
  (ggainey@redhat.com)
- Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)


author: Gennadii Altukhov <galt@redhat.com> 5.0.13-6
changelog:
- 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
- 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.13-8
changelog:
- Resolves: #1480306 - change permissions for rhnsd.pid (grinrag@gmail.com)
- Resolves: #1489989 - umask(0) does not reset to default umask
  (tkasparek@redhat.com)
- Resolves: #1475039 - close and reopen syslog when redirecting child output
  (martin.matuska@axelspringer.de)


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.13-9
changelog:
- Related: #1499793 - revert previous reboot loop changes
  (tkasparek@redhat.com)
- Resolves: #1499793 - Revert "1260527 RHEL7 rhnsd reload doesn't work"
  (tkasparek@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-1
changelog:
- rebase to most up2date upstream tarball, remove patches already upstream, fix
  code movements in patches (#928758)
- fix man-page-day objections (private #948866)
- fix the build for aarch64 (#926571)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-2
changelog:
- package spax and scpio separately (#959917)
- fedora-review fixes, unapplied patch
- make the spax to be pax alternative (#960007)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-7
changelog:
- we should provide /etc/rmt symlink for a while (related to #968980)
- use the ssh as the default remote access method


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-2
changelog:
- Add dist tag, fix a few rpmlint issues, rebuild due to
  wrong vendor (#451229)
- Added ncurses requirement(#469390)


author: Phil Knirsch <pknirsch@redhat.com> - 8.1-4
changelog:
- Added the "we-are-upstream" comments according to Fedora review (#226376)
- Added -p option to install to preserve timestamps (#226376)


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-5
changelog:
- removed clear from dot-bash_logout (synchronized with bash,
  related to #429406)
- removed unset USERNAME from dot-bash_profile (synchronized with
  bash, related to #196735)


author: Than Ngo <than@redhat.com> - 3.11-1
changelog:
- 3.11
- bz#540763, add IP allocation by pppd ability to pppoe-server
- bz#808676, add missing % symbol for triggerun


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 4.11.3-36
changelog:
- Add popt-based options --setcaps and --restore (#1550745)
- Improve hardlink handling in disk space calculation (#1491786)
- Remove perl dependencies that are provided in the same file (#1570181)


author: Tom Callaway <spot@fedoraproject.org> - 1.4-10
changelog:
- fix handling of ruby RI files as text files (they are binary files)
- apply upstream fix for macro regexp


author: Thomas Woerner <twoerner@redhat.com> - 1.5-4
changelog:
- enable bash-completion again, fixes (RHBZ#495529)
- fixed rpmlint reports missing-lsb-keyword Default-Stop (rhbz#976341)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.8-1
changelog:
- New version
  Resolves: rhbz#966639
- Updated and defuzzified patches
- Still use lua-5.1 (fedoras < f20)


author: Michal Sekletar <msekleta@redhat.com> - 0.17-71
changelog:
- resolves: RHBZ #737244 #896583 #947213
- migrate from xinetd to systemd configuration
- close pam session correctly when client does not ask for separate error channel
- fix pty handling which was broken by changes in /bin/login


author: Michal Sekletar <msekleta@redhat.com> - 0.17-72
changelog:
- unit files must not be marked as config files
- fix handling of non-native IPv6 connections via AF_INET6 socket


author: Michal Ruprich <mruprich@redhat.com> - 0.17-78
changelog:
- Resolves: #1502657 - Copying remote file to local dir fails with "rcp: protocol screwup: expected control record"
- Resolves: #1338037 - rsh/rlogin sessions ignore SIGPIPE due to systemd
- Resolves: #1477207 - rlogin killed when changing run level
- Resolves: #1503112 - rexecd Could not allocate space for cmdbuf
- Resolves: #1505226 - have a proposed patch for rsh-0.17-76.el7_1.1


author: Luboš Uhliarik <luhliari@redhat.com> - 3.0.9-17
changelog:
- Resolves: #1082496 - socket activation for rsync doesn't work (added missing
  rsyncd@.service file)


author: Michal Ruprich - 3.1.2-4
changelog:
- Related: #1432899 - removing dependencies on perl
- using the bundled zlib.h(#1491582)
- turning on upstream tests


author: Michal Ruprich <mruprich@redhat.com> - 3.1.2-10
changelog:
- Resolves: #1672779 - Rsync bug resets modification time of every destination file that has not changed


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-44
changelog:
RHEL 7.8 ERRATUM
- added patch and doc-patch for new caseSensitive imUDP/TCP option
  resolves: rhbz#1309698


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-46
changelog:
RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-47
changelog:
RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-48
changelog:
RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-49
changelog:
RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-52
changelog:
RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-53
changelog:
RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-55
changelog:
RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-30
changelog:
- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-31
changelog:
- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-32
changelog:
- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903


author: Jun Aruga <jaruga@redhat.com> - 2.0.0.648-35
changelog:
- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-36
changelog:
- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch


author: <vondruch@redhat.com> - 1.7.8-2
changelog:
- Update to Bundler 1.7.8.
  Resolves: rhbz#1194243
- Use symlinks for vendored libraries.
  Resolves: rhbz#1163076


author: Vít Ondruch <vondruch@redhat.com> - 0.16.0-1
changelog:
- Update to thor 0.16.0.
- Remove rubygem(diff-lcs) dependency, since it is just optional.
- Remove rubygem(ruby2ruby) dependnecy, since it is just optional, to allow
  conversion of Rakefiles to Thorfiles (but it doesnt work withou ParseTree anyway).


author: Honza Horak <hhorak@redhat.com> - 0.17-77
changelog:
- Free already alocated memory when parsing of RPC request failed
- Require systemd instead of systemd-units
- Remove SysV init converting


author: Petr Kubat <pkubat@redhat.com> - 0.17-81
changelog:
- Remove execute permissions from *.service files (#1422022)
- Fix wrong Source url (#1418690)
- Add BSD license text (#1418686)


author: Nils Philippsen <nils@redhat.com> - 1.0.14-10
changelog:
- add missing documentation files AUTHORS, COPYING, README
- don't distribute sane-style.rc
- use %buildroot consistently
- explain missing xcam.desktop file


author: Nils Philippsen <nils@redhat.com> - 1.0.14-14
changelog:
- clean up:
  - don't BR: gimp-devel, R: sane-backends
  - get rid of buildroot, %makeinstall and %clean section
  - dont obsolete/provide "sane" (ancient)


author: Matej Habrnal <mhabrnal@redhat.com> - 0.13-13
changelog:
- add support for Ruby
  - Related: #1334604
- actualize list of normalization function in satyr
  - Related: #1332869
- fix defects found by coverity
  - Related: #1336390


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.0-2
changelog:
- rebuild against pacemaker 1.20 to make sbd actually use
  the new libpengine API

  Resolves: rhbz#1661233


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.0-3
changelog:
- finalize cmap connection if disconnected from cluster
- make handling of cib-connection loss more robust

  Resolves: rhbz#1691484


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.0-11
changelog:
- synchronize with rhel-8.1.0

  Resolves: rhbz#1718297
  Resolves: rhbz#1713023
  Resolves: rhbz#1732368


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.0-12
changelog:
- rebuild with updated brew-root

  Resolves: rhbz#1718297
  Resolves: rhbz#1713023
  Resolves: rhbz#1732368


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.0-13
changelog:
- properly increment release

  Resolves: rhbz#1718297
  Resolves: rhbz#1713023
  Resolves: rhbz#1732368


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.1-11
changelog:
- Fix mounted filesystem is shown as disabled when fstab entry uses link, UUID or LABEL
  Resolves: #921487


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.0-5
changelog:
- Add support for arbitrary names of network devices in Linux_NetworkPortImplementsIPEndpoint
  association
  Resolves: #682386
- Remove macros from changelog, register to sfcb


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.2.0-3
changelog:
- Fix provider segfaults when enumerating instances of Linux_SysfsAttribute class
- Fix provider doesn't show much sysfs entries
- Add mofs registration for various CIMOMs


author: Tomas Bzatek <tbzatek@redhat.com> - 0.8.0-10.20120315cvs
changelog:
- Add support for rsyslog $IncludeConfig directive (#971807)
- Add support for filter definitions (#971807)
- Various rsyslog compatibility fixes (#971807)


author: Roman Rakus <rrakus@redhat.com> - 2.2.7-3
changelog:
- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-7
changelog:
- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-8
changelog:
- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-9
changelog:
- Use Pegasus root/interop instead of root/PG_Interop
- Enable System Z specific providers for s390 and s390x architecture
  Resolves: #1545811


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.16-3
changelog:
- Fix indCIMXmlHandler crash in IndCIMXMLHandlerInvokeMethod with Embedded Instances 
  Resolves: #957747
- Fix sfcb creates invalid XML with embedded object inside embedded object
  Resolves: #957742


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.16-11
changelog:
- Fix connection fails to openwsman with sfcbLocal frontend
  Resolves: #1047781
- Fix multilib issue with man page and config file
  Resolves: #1067842


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.5-6
changelog:
- Move libcimcClientXML.so from -devel to main package - it's needed for proper function
  Resolves: #1056407


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.2-7
changelog:
- Fix wrong usage of libcurl API, which caused segfaults when wbemcli was used
  with https scheme (patch by kdudka@redhat.com)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.2-10
changelog:
- Backport (slightly modified) configurable SSL version feature from upstream,
  update man page accordingly
  Resolves: #1239115


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.2-11
changelog:
- Update default CA certificate file path due to recent changes in tog-pegasus
  Resolves: #1320077
- Fix wbemcli dont accept dot (.) as password character on command line
  Resolves: #1103368
- Fix bogus date in %changelog


author: Matěj Týč <matyc@redhat.com> - 0.1.49-5
changelog:
- Added a patch warning about non-local users/groups are not considered by some rules (RHBZ#1721439, RHBZ#1544765, RHBZ#1829743)


author: Watson Sato <wsato@redhat.com> - 0.1.49-7
changelog:
- Bug fixes on CIS profile (RHBZ#1821633)
  Added Ansible remediations
  Fixed CIS references
  Fixed integration issues with CIS profile


author: Watson Sato <wsato@redhat.com> - 0.1.49-9
changelog:
- CIS Profile fixes (RHBZ#1821633)
  - Fix Ansible mount_option template
  - Add Ansible for ensure_logrotate_activated
  - Add warnings to rpm_verify_permissions and ownership about findindings that may need further inspection


author: Watson Sato <wsato@redhat.com> - 0.1.49-10
changelog:
- CIS Profile fixes (RHBZ#1821633)
  - Fix Ansible mount_option template
  - Re-order rpm_verify_permissions to avoid file permission conflicts


author: Watson Sato <wsato@redhat.com> - 0.1.49-11
changelog:
- HIPAA Profile improvement (RHBZ#1513087)
  - Add Ansible remediation for audit_rules_system_shutdown


author: Watson Sato <wsato@redhat.com> - 0.1.49-12
changelog:
- CIS Profile (RHBZ#1821633)
  - Make sure boot target is multi-user.target when xorg package is removed
  - Add CIS Profile content attribution to Center for Internet Security


author: Martin Preisler <mpreisle@redhat.com> 1.1.1-1
changelog:
- Require English fonts (bz#1134418)
- Updated with latest upstream URLs
- Reorganized the spec a little
- Removed SCL related parts from the spec
- Updated to new upstream release 1.1.1


author: Watson Sato <wsato@redhat.com> 1.1.4-1
changelog:
- Updated to new upstream release 1.1.4 (rhbz#1404394)
- UX improvements
- Fixed fetch remote resources warning (rhbz#1367923)
- Improved error message when scanning a remote machine in which openscap-scanner
  is not installed (rhbz#1368463)
- Fixed search on disabled item (rhbz#1368493)
- Fixed multi benchmark tailoring use case
- Fixed a bug that caused tailored profiles to have titles duplicated (rhbz#1320197)
- Fixed path of tailoring file in dry run output (rhbz#1368516)
- Now Workbench doesn't allow edit of values with prohibitedChanges attribute
- Added --version and --help command line options (rhbz#1368527)
- Improved workflow of dry run execution (rhbz#1385549)
- Check capabilities of oscap with propper arguments (rhbz#1368463)
- Show number of selected rules in profile listing


author: Martin Preisler <mpreisle@redhat.com> 1.1.6-1
changelog:
- Updated to new upstream release 1.1.6
- Tri-state checkboxes for tailoring
- Fixed remote host and port being cleared when scan starts
- Fiixed formating of Profile html description in Tailoring Window
- Fixed oscap message "Downloading ... ok" appearing as an error
- Fixed tab order of widgets in main window
- Load Content as the default button of the SSG integration dialog
- New validation of the customization file name
- Generate bash and Ansible remediation roles from profiles
- Generate bash and Ansible remediation roles from results after scanning
- Fixed a short integer overflow when using ssh port numbers higher than 32k
- Fixed long loading times on OSX
- Open tailoring file directly via command line


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.0-4
changelog:
- Add patch to use build_dir argument in build_extension
- Fix rpmlint warnings
- License Updated
- Don't build with python3


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.1-1
changelog:
- Update to 0.12.1 - fixes CVE-2013-4251 (rhbz#997579)
- change working directory to build directory when building ext (rhbz#916695)
- use SHA-256 instead of md5 -- FIPS mode (rhbz#877920)
- unbundle python-six (bug rhbz#1019642)


author: Jan Zeleny <jzeleny@redhat.com> - 20130529-13
changelog:
- bump the version to get in sync with 7.1 branch
- Reflect the state of %nfsmountable macro in collections' rpm macro files
- escape all the % chars in changelog


author: Petr Hracek <phracek> - 4.1.0-0.20.20120314git3c2946
changelog:
- Multiple packages are installing files under /etc/tmpfiles.d
- comply http://fedoraproject.org/wiki/Packaging:Guidelines#Tmpfiles.d
- Resolves: rhbz#1121958


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.1-5.el7_3.1
changelog:
- seabios-vgabios-Reorder-video-modes-to-work-around-a-Windows.patch [bz#1392028]
- Resolves: bz#1392028
  ([virtio-win][svvp][ws2016] cannot generate dump file when using nmi on ws2016 and win10-32/64)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.10.1-2.el7
changelog:
- seabios-smm-disable-by-default.patch [bz#1378006]
- seabios-ahci-Set-upper-32-bit-registers-to-zero.patch [bz#1418320]
- Resolves: bz#1378006
  (guest paused on target host sometimes when do migration during guest boot)
- Resolves: bz#1418320
  (Seabios does not fully reset AHCI adapters)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.10.2-2.el7
changelog:
- seabios-resume-Don-t-attempt-to-use-generic-reboot-mechanism.patch [bz#1428347]
- Resolves: bz#1428347
  (reboot hangs on rhel6 machine types (~1/20 times))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.10.2-3.el7
changelog:
- seabios-blockcmd-accept-only-disks-and-CD-ROMs.patch [bz#1020622]
- seabios-blockcmd-generic-SCSI-luns-enumeration.patch [bz#1020622]
- seabios-virtio-scsi-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
- seabios-usb-uas-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
- Resolves: bz#1020622
  (seabios fail to recognize virtio-scsi device if specify LUN not 0)


author: Wainer dos Santos Moschetta <wainersm@redhat.com> - 1.10.2-4.el7
changelog:
- seabios-virtio-IOMMU-support.patch [bz#1463163, bz#1467811]
- Resolves: bz#1463163
  (Guest OS will down when disk enable the IOMMU for Virtio)
- Resolves: bz#1467811
  (Guest OS will down when disk enable the IOMMU for virtio-scsi)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.10.2-5.el7
changelog:
- seabios-boot-Rename-drive_g-to-drive.patch [bz#1452603]
- seabios-disk-Don-t-require-the-struct-drive_s-to-be-in-the-f.patch [bz#1452603]
- seabios-block-Rename-disk_op_s-drive_gf-to-drive_fl.patch [bz#1452603]
- seabios-virtio-Allocate-drive_s-storage-in-low-memory.patch [bz#1452603]
- Resolves: bz#1452603
  (can't bootup from image when attached multi-virtio-scsi disks with multi-luns)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.11.0-2.el7
changelog:
- seabios-pci-fix-io-hints-capability-for-RedHat-PCI-bridges.patch [bz#1523166]
- Resolves: bz#1523166
  ([Q35] guest kernel panic when boot with 9 nics)


author: Rui Matos <rmatos@redhat.com> - 3.8.0-5
changelog:
- Fix for "seahorse-nautilus broken by glib2 regression related to
  SIGCHLD warnings"
- Resolves: #1093123


author: Martin Briza <mbriza@redhat.com> - 4.2.1-9
changelog:
- Backported commit from upstream to fix treating "x26" as "&" character
- Added virtual provide for gnulib according to http://fedoraproject.org/wiki/Packaging:No_Bundled_Libraries 
  Resolves: #812067 #821776


author: Martin Briza <mbriza@redhat.com> - 4.2.2-1
changelog:
- New release
- Dropping included patches: sed-4.2.1-data-loss.patch sed-4.2.1-fix-0x26-on-RHS.patch sed-4.2.1-makecheck.patch
- Dropping unused patch sed-4.2.1-dummyparam.diff
- Regenerated sed-4.2.{1,2}-copy.patch
- Minor change to patching (creating backup files)


author: Jan Pacner <jpacner@redhat.com> - 4.2.2-5
changelog:
- Related: #948598 (Man page scan results for sed; introduce -c argument, add
  help for -b --binary arguments, cleanup arguments & help)


author: Jakub Martisko <jamartis@redhat.com> - 4.2.2-7
changelog:
- Fix: "in-place edits on FUSE filesystems create files with all-zero mode bits"
  Resolves: #1836317


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-259
changelog:
- Allow ganesha_t domain to read system network state and connect to cyphesis_port_t
Resolves: rhbz#1653857
- Label /var/log/collectd.log as collectd_log_t
- Update gnome_role_template() interface to make working sysadm_u SELinux able to login to X sessions
Resolves: rhbz#1688729
- Update collectd policy to allow daemon create /var/log/collectd with collectd_log_t label
Resolves: rhbz#1658319
- Update sbd policy to allow manage cgroups
Resolves: rhbz#1715136
- Allow sudo userdomain to run rpm related commands
- Update rpm_run() interface to avoid duplicate role transition in sudo_role_template
Resolves: rhbz#1651253


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-261
changelog:
- Update sudo_role_template() to allow caller domain to read syslog pid files
Resolves: rhbz#1651253


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-264
changelog:
- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command
Resolves: rhbz#1765063


author: Zdenek Pytela <zpytela@redhat.com> - 3.13.1-267
changelog:
- Allow chronyd_t domain to exec shell
Resolves: rhbz#1775573
- Allow pmie daemon to send signal pcmd daemon
Resolves: rhbz#1770123
- Allow auditd poweroff or switch to single mode
Resolves: rhbz#1780332


author: Zdenek Pytela <zpytela@redhat.com> - 3.13.1-268
changelog:
- Allow rhsmd read process state of all domains and kernel threads
Resolves: rhbz#1837461
- Allow ipa-adtrust-install restart sssd and dirsrv services
Resolves: rhbz#1820298
- Allow nagios_plugin_domain execute programs in bin directories
Resolves: rhbz#1824625
- selinux policy: add the right context for org.freeipa.server.trust-enable-agent
Related: rhbz#1820298


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.6-2
changelog:
- Fixed milter_helo regression (milter-helo-fix patch)
  Resolves: rhbz#895552
- Fixed bogus dates in changelog


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.7-5
changelog:
- Explicitly enabled sm-client statistics
  Resolves: rhbz#890585
- Enable ECDHE support
  Resolves: rhbz#1124827
- Properly set {client_port} value on little endian machines,
  patch by Kelsey Cumminngs <kgc@corp.sonic.net>
  Resolves: rhbz#1210914
- Added makemap and its manual page into alternatives
  Resolves: rhbz#1225891
- Modified nm-dispatcher script to asynchronously restart sendmail and
  not block the connection activation
  Resolves: rhbz#1237070
- Added config options allowing disablement of TLS 1.1/2
  Resolves: rhbz#1281476
- Fixed problem with e-mails not sending from IPv6 enabled server
  to servers with MX record pointing to CNAME
  Resolves: rhbz#1294870
- Added editmap
  Resolves: rhbz#1342393
- Removed systemd limit for sendmail restarts to workaround failure due to
  rapid restarts caused by NetworkManager dispatcher script
  Resolves: rhbz#1395102
- Fixed op.pdf
  Resolves: rhbz#1401070


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.7-6
changelog:
- Use SSL_CTX_use_certificate_chain_file() to handle intermediate
  certificates passed additionally in confSERVER_CERT
  Resolves: rhbz#1596725


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.30-1
changelog:
- Fix summary and "if" text for AVCs with unknown target path (#1437772)
- Remove unused booleans.py file
- src/sealert: Finish dbus communication after error (#1461486)


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.30-3
changelog:
- Check for the existence of setroubleshoot group separately (#1478118)
- Fix AVC.__typeMatch to handle aliases properly (#1459844, #1459835, #1459875)
- Fix allowed_target_types (#1460642, #1460648)


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.30-4
changelog:
- Catch exceptions caused by lookup_signature (#1636369, #1627908)
- Fix translation of hex values in AVCs (#1477236)


author: Petr Lautrbach <plautrba@redhat.com> - 3.0.65-1
changelog:
- Remove duplicated strings from sys_resource.py
- Spelling fixes
- Fix catchall plugin message for capability2
- Stop executing restorecon plugin on specified path prefixes


author: Vit Mojzis <vmojzis@redhat.com> - 3.0.66-1
changelog:
- Fix catchall plugin message for process2 (#1507909)
- Correct grammatical errors (#1331780)
- Do not split If sentences to framework and plugins (#1177347)
- Fix typo in "lt" translation header (#1468985)
- catchall_boolean.py - 'None' man page is None man page
- Fix restorecon "then" text (#1332097)


author: Vit Mojzis <vmojzis@redhat.com> - 3.0.67-1
changelog:
- bind_ports: Do not use when there are no allowed_target_types (#1255627)
- Fix summary and "if" text for AVCs with unknown target path (#1437772)
- Update translations


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-3
changelog:
- add more securetty required for mainframes (#1067347)
- set SHELL envvar to /bin/bash in bashrc (#1063552)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-5
changelog:
- reserve uidgid pair 142:142 for activemq (#1086923)
- add xfs to /etc/filesystems, fallback to /proc/filesystems
  (#1123832)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-6
changelog:
- change reservation of 185:185 to jboss user (#1192413)
- reserve uidgid pair 167:167 for ceph (#1221043)
- reserve uidgid for systemd-network(192:192) (#1213820)
- reserve uidgid for systemd-resolve(193:193) (#1213820)
- mention systemd-jounal-gateway can be dynamic (#1213820)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-7
changelog:
- add basic empty subuid/subgid files for docker (#1311278)
- specify full path to utilities in /etc/profile and /etc/bashrc
  (#1331871)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-8
changelog:
- fix group id for tape in /etc/group (should be 33) (#1433020)
- provide a way how to override set envvars through sh.local file(#1344007)
- provide a way how to override set ennvars through csh.local file


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-10
changelog:
- fix crudp name in /etc/protocols (#1566469)
- do not list /sbin/nologin and /usr/sbin/nologin in /etc/shells
  (#1571104)


author: Gris Ge <fge@redhat.com> 1.37-17
changelog:
- Fix help documents of sg_requests, sg_senddiag and sg_write_buffer.
  (RHBZ #1359282, #1359286, #1359292)


author: Tomas Bzatek <tbzatek@redhat.com> 1:1.37-19
changelog:
- Reorder 59-fc-wwpn-id.rules to run after 60-persistent-storage.rules (#1785303)
- Fix the 59-fc-wwpn-id.rules syntax (#1750417)
- Add 59-fc-wwpn-id.rules (#1684302)


author: Richard W.M. Jones <rjones@redhat.com> - 0-1.1.20110622svn
changelog:
- Fix date in release string.
  NB: To make this version > than the previous, I had to use 1.1.20110622
  instead of 0.1.20110622, since the old second field was 20110623.
- Unset MAKEFLAGS, since parallel make breaks the build.
- Bring the spec file up to modern standards.


author: Jan Synáček <jsynacek@redhat.com> - 1.2.0.10-9
changelog:
- dos2unix'ed the patch
- Call dos2unix before patching and dos2unix Makefile as well
- Use %{_sbindir} instead of '/sbin'


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-25
changelog:
- prevent creating users ".." or "." or with all numeric usernames (#1373645)
- raise limit for passwd and shadow entry length but also prevent
  writing longer entries (#1422497)
- consider also supplementary group membership in newgrp (#1425078)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-1
changelog:
- rebase to current upstream release to bring newuidmap and newgidmap
- re-allow all numeric usernames when SHADOW_ALLOW_ALL_NUMERIC_USER
  environment variable is set


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-2
changelog:
- ignore LOGIN_PLAIN_PROMPT variable in login.defs
- correct wrong SUB_UID/GID_COUNT default in manual page (#1690522)


author: Bastien Nocera <bnocera@redhat.com> - 1.8-3
changelog:
+ shared-mime-info-1.8-3
- Remove triggers, they're not supported in RHEL 7.4's RPM
Resolves: #1433916


author: Bastien Nocera <bnocera@redhat.com> - 1.8-4
changelog:
+ shared-mime-info-1.8-4
- Fix CSV files being associated with LibreOffice Math instead
  of LibreOffice Calc
- Resolves: #1438589


author: Petr Pisar <ppisar@redhat.com> - 4.13.3-2
changelog:
- Fix decoding from positional argument while overriding output file
  (bug #901895)
- Fix decoding to standard output when output file is - or /dev/stdout
  (bug #901895)


author: Peter Jones <pjones@redhat.com> - 11-1
changelog:
- Update to 11-1
  Related: rhbz#1310766
- Fix regression in PE loader
  Related: rhbz#1310766
- Fix case where BDS invokes us wrong and we exec shim again as a result
  Related: rhbz#1310766


author: Peter Jones <pjones@redhat.com> - 15-3
changelog:
- Fight with binutils to try to get a binary without timestamps in it.  Again.
  Related: rhbz#1649270


author: Peter Jones <pjones@redhat.com> - 15-4
changelog:
- Fight with binutils to try to get a binary without timestamps in it.
  Again, but without breaking aarch64 this time.
  Related: rhbz#1649270


author: Peter Jones <pjones@redhat.com> - 15-5
changelog:
- Fix a couple more things that are breaking reproducability, and thus
  breaking external review.
  Related: rhbz#1649270


author: Peter Jones <pjones@redhat.com> - 15-6
changelog:
- Rebuild for bug fixes and new signing keys
  Related: CVE-2020-10713
  Related: CVE-2020-14308
  Related: CVE-2020-14309
  Related: CVE-2020-14310
  Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-7
changelog:
- Implement Lenny's workaround.
  Related: CVE-2020-10713
  Related: CVE-2020-14308
  Related: CVE-2020-14309
  Related: CVE-2020-14310
  Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-8.el7
changelog:
- Fix a load-address-dependent forever loop.
  Resolves: rhbz#1862045
  Related: CVE-2020-10713
  Related: CVE-2020-14308
  Related: CVE-2020-14309
  Related: CVE-2020-14310
  Related: CVE-2020-14311
  Related: CVE-2020-15705
  Related: CVE-2020-15706
  Related: CVE-2020-15707


author: Nathan Scott <nathans@redhat.com> - 0.6.2-1
changelog:
- Switch to enabling the Java 8+ maven modules only now.
- Add unitsofmeasurement prefix to package name.
- Update to latest upstream sources.


author: Mathieu Bridon <bochecha@fedoraproject.org> - 1.0-8
changelog:
- Fix Obsolete: that was wrong when renaming the package.
- The font base folder was listed twice (one was hidden in the font macro)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.3.0-6
changelog:
- Add ASM dependency only to a single module, not all of them
- Disable animal-sniffer plugin
- Don't generate auto-requires for optional dependencies


author: Michal Srb <msrb@redhat.com> - 2.3.0-7
changelog:
- sisu-inject-bean: add dependency on asm
- Fix dependencies on javax.inject and javax.enterprise.inject
- Remove bundled JARs and .class files from tarball


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.3.0-8
changelog:
- Remove unneeded animal-sniffer BuildRequires
- Add forge-parent to BuildRequires to ensure it's present


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-8
changelog:
- Fixed: #1473572
- Changes of ID overrides now force clearing of affected SSSD cache entries on IPA master
- Related: #1473577
- Synchronize timeout-enabled code with ipa-extdom-extop


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
changelog:
- Upstream release 0.56.5
- Resolves: rhbz#1820124 When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
- Resolves: rhbz#1820122 ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED
- Resolves: rhbz#1819018 ipa slapi-nis stack traces review request for LDAP server deadlock
- Resolves: rhbz#1830894 Memory leak during search of idview overrides


author: Michal Hlavinka <mhlavink@redhat.com> - 1:6.5-1
changelog:
- smartmontools updated to 6.5
- adds support for NVMe devices (#1369731)
- minor spec cleanup (#1463148)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:7.0-1
changelog:
- smartmontools updated to 7.0 (#1588532)
- fixed detection of Device Statistics log with 256 sectors (#1590190)


author: Rajeesh K Nambiar <rajeeshknambiar@gmail.com> 5.0.1-1
changelog:
- New upstream release 5.0.1 introducing Unicode 5.1 compatibility
- Resolves Meera size issues
- Drop upstreamed patches for RHBZ# 545683, 616324 and 781938
- Resolves RHBZ# 803183
- Spec cleanup


author: Pravin Satpute <psatpute@redhat.com> 5.0.1-2
changelog:
- Resolved bug 803234
- Updated panose for Meera, RaghuMalayalam and Kalyani
- Changed conf file of Rachana from Sans to Serir


author: Pravin Satpute <psatpute@redhat.com> 6.0-1
changelog:
- Resolves: rh#1023847 - Upstream new release with fix against Harfbuzz NG
- New release 6.0 with many new features and bug fixes
- v2 opentype spec support for Malayalam (mlm2) for Meera, Rachana, Raghumalayalam
- Full support to Harfbuzz, Adobe and Uniscribe shaping engines
- Cleaned up and updated lookup tables
- Meaningful names to glyphs to help with Lookup tables reusability
- Old Figures and other Typographical glyphs to Rachana
- Dotreph positioning using GPOS 'abvm' lookup
- Unicode 6.1 Malayalam glyphset for many fonts


author: Michal Srb <msrb@redhat.com> - 1.11-5
changelog:
- Replace bundled base64 implementation
- Replace bundled gdata-java-client classes with apache-commons-codec


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.2-2
changelog:
- Resolves: rhel#1017015 Use readline, not compat-readline5-devel
- Added two patches fixing -Wformat issues
- Enable hardened build
- Cleanup obsolete spec file lines


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-2
changelog:
- Change install directory to /usr/lib*/pkcs11/
- Install pkcs11 module file
- Use official upstream tar ball
- Create ods user to own softhsm/token files
- Enable migration tools (for epel6 softhsm-v1 installs)
- Require p11-kit, nss-tools, for SoftHSM PKCS #11 Module file
- Copy pk11install.c from coolkey package which is not built on all arches
- Enable hardened build
- Add upstream official source url
- Add devel package
- Excluding i686/ppc (make check fails and we are a leave package)
- (thanks to Petr for jumping in for the initial build while I was too busy)


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-3
changelog:
- Fix softhsm2-pk11install buid and post call
- Do not use --with-objectstore-backend-db (causes issues on i686)


author: Petr Spacek <pspacek@redhat.com> - 2.0.0rc1-1
changelog:
- Resolves: rhbz#1193892 Rebase to latest upstream version
- i686/ppc/s390 architectures are now included in the build


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.0-3
changelog:
- Resolves: rhbz#1507409 ObjectStore.cpp(59): Failed to enumerate object store in /var/lib/softhsm/tokens/
- Resolves: rhbz#1540010 gnome-settings-daemon: gnome-settings-daemon killed by SIGSEGV


author: Pavel Moravec <pmoravec@redhat.com> = 3.8-3
changelog:
- [gluster] process files only from a statedump dir
  Resolves: bz1699381
- [kernel] Don't collect trace file by default
  Resolves: bz1757662


author: Jan Jansky <jjansky@redhat.com> = 3.8-8
changelog:
- Added Obsolete for leapp-repository-sos-plugin to solve
  conflicts during install/upgrade/downgrade of RPM.


author: Jake Hunsaker <jhunsake@redhat.com> - 1.6-3
changelog:
- Fix local command execution
- Fix quoting for non-root commands
- Backport Satellite support
- Backport RHCOS support


author: Jake Hunsaker <jhunsake@redhat.com> - 1.7-2
changelog:
- Fix 'none' cluster type enablement
- Update RHCOS image to use RHEL 8 support-tools
- Fix execution from within a container


author: Adrian Reber <adrian@lisas.de> - 3.1.6-1
changelog:
- updated to 3.1.6
- removed buildroot and clean section
- fixed "missing c++ source language detection for .cxx extension" (#728311)
- fixed "source-highlight : Conflicts with autoconf-archive" (#797794)


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 14.4.1-4
changelog:
- removed liblpc10 from source tarball due to licensing uncertainity
- added license file to libgsm
- fixed bogus dates in changelog


author: Jiri Kucera <jkucera@redhat.com> - 14.4.1-7
changelog:
- Fix CVE-2017-18189
  Upstream patch: https://sourceforge.net/p/sox/code/ci/09d7388c8ad5701ed9c59d1d600ff6154b066397/
  Resolves: #1553590


author: Petr Lautrbach <plautrba@redhat.com> 3.3.2-17
changelog:
- document rawbody's split into chunks (#892350)
- avoid using array of cleaned uris <fkrska@redhat.com> (#892348)


author: Petr Lautrbach <plautrba@redhat.com> 3.4.0-1
changelog:
- update to 3.4.0
- Apply fix for amavisd and spampd reloading after rules updates. Fixes bug #1145654


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-3
changelog:
- Fix CVE-2018-11781 - Local user code injection in the meta rule syntax
- Fix CVE-2017-15705 - Certain unclosed tags in crafted emails allow for
- scan timeouts and resulting denial of service
- Resolves: rhbz#1632999


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-4
changelog:
- Add missing Requires for perl(XSLoader) and perl(ExtUtils::MakeMaker),
- which are no longer auto-generated due to a (expected) change in rpm-build
- Related: rhbz#1632999


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2-0.17.rc1
changelog:
- update config.guess and config.sub for aarch64 (#926562)
- make some dependencies arch-specific
- remove obsolete macros


author: Victor Toso <victortoso@redhat.com> - 0.35-5
changelog:
- Keepalive fix
  Resolves: rhbz#1719736
- Fix hang on migration after password expired
  Resolves: rhbz#1761776


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 15-7
changelog:
- Fix build requires and requires (#884632)
- Cleanup specfile for latest guidelines 
- Add ASL license text


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-4
changelog:
- Revert back to spice 0.12 behaviour where QXL guest resources for cursor
  commands are only released when the current cursor is replaced. This avoids
  a QEMU regression causing crashes during migration
  Resolves: rhbz#1567944


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-5
changelog:
- Don't mute Record channel on client reconnection
  Resolves: rhbz#1549132
- Allow to configure TLS protocol versions and ciphers which SPICE will use for
  TLS communications
  Resolves: rhbz#1562213
- Enable ECDH ciphers with OpenSSL 1.0
  Resolves: rhbz#1566597


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-7
changelog:
- Fix off-by-one error during guest-to-host memory address conversion
  Resolves: CVE-2019-3813
- Add patch for upstream commit 48179332d9da0. This should help with corrupted
  spice-html5 displays
  Resolves: rhbz#1573739
- Add missing minimum openssl version Requires for patch #24
  Resolves: rhbz#1627693


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-9
changelog:
- Don't install rsyslog config file. This can cause duplicate logging
  to syslog in rhel6->rhel7 upgrades, and is not really useful anyway
  as the same functionality can be achieved with journald
  Resolves: rhbz#1136881


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-11
changelog:
- Add client to guest audio volume synchronization
  Resolves: rhbz#1264102
- Exit with error when virtio channel device is missing
  Resolves: rhbz#1256704


author: Victor Toso <victortoso@redhat.com> - 0.14.0-14
changelog:
- Do not allow drag-and-drop on (gdm) login screen
  Resolves: rhbz#1328761
- Do not allow drag-and-drop on locked screen
  Resolves: rhbz#1323623


author: Victor Toso <victortoso@redhat.com> - 0.14.0-17
changelog:
- Fix 'Dependency failed for Activation socket' message
  Resolves: rhbz#1545212
- Fix socket leak
  Resolves: rhbz#1650596


author: Victor Toso <victortoso@redhat.com> - 0.14.0-18
changelog:
- Fix clipboard logs on requests for targets on grab from client
  Resolves: rhbz#1594876
- Make some clipboard logs debug instead of error
  Resolves: rhbz#1686008


author: Christophe Fergeau <cfergeau@redhat.com> 2.8-7
changelog:
- Adjust selinux policy to allow use of USB redirection
  Resolves: rhbz#1075173
- Add test page to package
  Resolves: rhbz#959194


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.17.git5c6f0024
changelog:
- Latest pre 4.3 snapshot
- Includes fix for mksquashfs hangs
- Switch to get pre-release updates from the stable branch at kernel.org


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.18.gitaae0aff4
changelog:
- Latest pre 4.3 stable snapshot
- A few minor bug fixes
- Improvements in getting status info while running unsquashfs


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-15
changelog:
- Resolves: #1690551 - Squid cache_peer DNS lookup failed when not all lower
  case
- Resolves: #1680022 - squid can't display download/upload packet size for HTTPS
  sites
- Resolves: #1717430 - Excessive memory usage when running out of descriptors
- Resolves: #1676420 - Cache siblings return wrongly cached gateway timeouts
- Resolves: #1729435 - CVE-2019-13345 squid: XSS via user_name or auth parameter
  in cachemgr.cgi
- Resolves: #1582301 - CVE-2018-1000024 CVE-2018-1000027 squid: various flaws


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-15.1
changelog:
- Resolves: #1828359 - CVE-2020-11945 squid: improper access restriction upon
  Digest Authentication nonce replay could lead to remote code execution
- Resolves: #1828360 - CVE-2019-12519 squid: improper check for new member in
  ESIExpression::Evaluate allows for stack buffer overflow
- Resolves: #1829772 - CVE-2019-12525 squid: parsing of header
  Proxy-Authentication leads to memory corruption


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
- 1.1.0-1
— Update to new stable release
— Major refactoring now that some sanity prevailed upstream in font naming
  Be careful if you used the old font family names


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-2
changelog:
- Copy over changes in tests/ioctl_evdev-success.c (from cdd8206a
  "tests: test evdev bitset decoding more thoroughly")
  to tests-m32/ioctl_evdev-success.c and tests-mx32/ioctl_evdev-success.c
- Copy over changes in tests/ioctl_evdev.c (from 5ee385e2
  "evdev: fix decoding of EVIOCGBIT(0, ...)") to tests-m32/ioctl_evdev.c
  and tests-mx32/ioctl_evdev.c
- Resolves: #1746478


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-4
changelog:
- Include upstream patches that fix issues reported by covscan:
  91281fec "v4l2: avoid shifting left a signed number by 31 bit",
  522ad3a0 "syscall.c: avoid infinite loop in subcalls parsing", and
  9446038e "kvm: avoid bogus vcpu_info assignment in vcpu_register".
- Resolves: #1747524


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-5
changelog:
- Fix printing stack traces for early syscalls on process attach (#1790052):
  69b2c33a "unwind-libdw: fix initialization of libdwfl cache" and
  8e515c74 "tests: add strace-k-p test".
- Add commit v5.4~97 "xlat: use unsgined type for mount_flags fallback values"
  (A leftover for #1747524).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-6
changelog:
- Fix expected alignment for IPC tests (#1795261):
  4377e3a1 "tests: fix expected output for some ipc tests", and
  a75c7c4b "tests: fix -a argument in ipc_msgbuf-Xraw test".


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.0-2
changelog:
- Fixed initialization crash of IMV and IMC particularly
  attestation imv/imc as libstrongswas was not getting initialized.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-1
changelog:
Resolves: #1049523
Resolves: #1036846
Resolves: #1007548
- Modified spec file significantly to reflect the current state of
  the package, as this rebase enables several major modules: TNC
  client and server (IF-TNCCS), IMC-IMV (IF-M), PT-TLS (RFC 6876),
  SWID IMC/IMV, charon daemon and it related libs and modules,
  tnc-pdp, tnc-ifmap plugins.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-2
changelog:
Resolves: #1049523
Resolves: #1036846
Resolves: #1007548
- A typo caused a patch not being applied, so fixed that and
  bumping the number number.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-4
changelog:
Resolves:#1067119
- Fixed full hardening for strongswan (full relro and PIE).
  The previous macros had a typo and did not work
  (see bz#1067119).
- Fixed files permissions for executables and config files to
  correctly reflect their intent.
- Fixed tnc package description to eliminate rpmlint errors.
- Fixed pki binary and moved it to /usr/libexece/strongswan as
  others binaries are there too to eliminate rpmlint errors.
- Fixed systemd service name to "strongimv TNC".
- Removed the dependency on gmp-devel


author: Avesh Agarwal <avagarwa@redhat.com> - 5.2.0-1
changelog:
Resolves: #1120371
- Rebase to new upstream release 5.2.0
- IMA/TPM based remote attestation
- Aikgen tool to generate an Attestation Identity Key bound
  to a TPM
- PT-EAP transport protocol (RFC 7171) for TNC
- Enabled support for acert for checking X509 attribute certificate
- Updates local patches
- Spec file update
- openac tool replaced with pki --acert


author: Avesh Agarwal <avagarwa@redhat.com> - 4.55-1
changelog:
- New upstream realease 4.55
- Updated local patches
- enabled fips mode
- Fixed for pod2man as it build-requires perl-podlators


author: Avesh Agarwal <avagarwa@redhat.com> - 4.56-1
changelog:
- New upstream realease 4.56.
- Updated local patches.
- Fixed upstream URL in spec file.
- Sourced URL of sha256 hash file in spec file.


author: Tomáš Mráz <tmraz@redhat.com> - 4.56-5
changelog:
- Allow TLS 1.1 and TLS 1.2 in FIPS mode
- Documentation fixes of curve and accept/connect options (#1197340)
- Add negotiated protocol version to the logs (#1275613)


author: Daniel Kopecek <dkopecek@redhat.com> 1.8.23-1
changelog:
- RHEL-7.6 erratum
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version (1.8.23)
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
  Resolves: rhbz#1548380 - RFE: Create flag to filter to sudo -l output
  Resolves: rhbz#1510002 - Ensure that the command input (stdin) eating behaviour of Default log_input is documented
  Resolves: rhbz#1596032 - Why does sudo package depend on vim-minimal?


author: Daniel Kopecek <dkopecek@redhat.com> 1.8.23-2
changelog:
- RHEL-7.6 erratum
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets


author: Radovan Sroka <rsroka@redhat.com> 1.8.23-4
changelog:
- RHEL-7.7 erratum
  Resolves: rhbz#1672876 - Backporting sudo bug with expired passwords
  Resolves: rhbz#1665285 - Problem with sudo-1.8.23 and 'who am i'


author: Marek Tamaskovic <mtamasko@redhat.com> 1.8.23-5
changelog:
- RHEL-7.8 erratum
  Resolves: rhbz#1711997 sudo is super slow when /etc/security/limits.conf contains many entries


author: Marek Tamaskovic <mtamasko@redhat.com> 1.8.23-6
changelog:
- RHEL-7.8 erratum
  Resolves: rhbz#1647678 sudo access denied with pam_access and pts terminal configurations


author: Nils Philippsen <nils@redhat.com> - 4.0.2-10
changelog:
- ship licenses as documentation in the base package (#1019315)
- hardlink duplicate documentation/license files


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.9-1.4
changelog:
- Completely remove dependency on prelink/execstack (RHBZ#1093261).
- Rebuild for aarch64 and ppc64le (1125690).


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.15-1
changelog:
- Rebase to supermin 5.1.15.
  resolves: rhbz#1271255
- Create supermin5-devel package containing RPM dependency generator.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.15-3
changelog:
- Add all upstream patches since 5.1.15 was released.
- These should improve boot performance and initrd size.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.19-1
changelog:
- Rebase to supermin 5.1.19.
- Build on s390x.
- Add upstream signature.
- Remove upstream patches.
  resolves: rhbz#1484890, rhbz#1484973


author: Noriko Hosoi <nhosoi@redhat.com> - 4.1.0-1
changelog:
- release 4.1.0-1
- Resolves: Bug 1324983 - Rebase: svrcore
            Added systemd ask password support (DS 48450)


author: Adam Tkac <atkac redhat com> 2.0.8-1
changelog:
- update to 2.0.8 (#851364)
- swig207-rh830660.patch merged
- swig207-r13128.patch merged
- swig-rh841245.patch merged


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.0.10-1
changelog:
- Update to 2.0.10
- swig203-rh706140.patch merged
- swig204-rh752054.patch merged
- Create swig-2.0.10-Fix-x390-build.patch


author: Tim Waugh <twaugh@redhat.com> 1.4-4
changelog:
- Applied patches from Jiri Popelka:
  - Fix off-by-one error in call to readlink.
  - Fix possible buffer overrun found by coverity.


author: Peter Jones <pjones@redhat.com> - 4.05-12
changelog:
- Toolchain changes between when this originally got built and 4.05-9 means
  4.05-9 - 4.05-11 don't actually work.
  Related: rhbz#1085434


author: Michal Sekletár <msekleta@redhat.com> - 10.1.5-18
changelog:
- add -f flag to force fdatasync() after sa file update (#1662094)
- don't call filesystem count functions when we are not collecting fs statistics (#1670060)
- skip autofs when gathering filesystem statistics (#1670060)
- fix use of incorrect preposition in sar man page (#1624410)
- fix CPU usage reporting (#1618688)


author: Nils Philippsen <nils@redhat.com> - 1.10.0-1
changelog:
- use pkexec instead of consolehelper
- read/write /etc/localtime as symbolic link and only fall back to using
  /etc/sysconfig/clock if it is present (#824033)


author: Nils Philippsen <nils@redhat.com> - 1.10.1-1
changelog:
- don't trip over missing /etc/sysconfig/network file (#857412)
- pull updated translations
- install and use timezone translations properly


author: Nils Philippsen <nils@redhat.com> - 1.10.5-1
changelog:
- pull updated and new translations (#878319)
- catch (rare) errors from fork()
- catch unavailable display (#766936)
- pull updated time zones


author: Jan Synáček <jsynacek@redhat.com> - 1.10.6-3
changelog:
- remove invalid source links (#1502430)
- system-config-date can't enable ntp because /bin/systemd doesn't exist (#1381321)


author: Thomas Woerner <twoerner@redhat.com> 1.2.29-4
changelog:
- fixed possible privilege escalation flaw via use of python pickle
  (CVE-2011-2520), replaced pickle by json (rhbz#717985) and (rhbz#722991)
- stop D-BUS firewall mechanism on update


author: Than Ngo <than@redhat.com> - 2.0.13-17
changelog:
- Resolves: bz#1258363 - gtkWarning showing in terminal while launch kdump
- Resolves: bz#1279298 - system-config-kdump throws traceback on keyboard interruption
- Resolves: bz#1082420 - error display Basic Settings option "Current kdkump Memory" value
- Resolves: bz#1077470 - target settings option "Raw device" does not list VirtIO devices
- Resolves: bz#1384943 - add fadump memory reservation support in system-config-kdump (fadump)
- Resolves: bz#1404780 - add support variable amount of memory as crashkernel value


author: Ville Skyttä <ville.skytta@iki.fi> - 1.3.1-11
changelog:
- Add dependency on newt-python (#845391, Sandro Mani).
- Fix bogus dates in %changelog and rpmlint tabs vs spaces warning.


author: Nils Philippsen <nils@redhat.com> - 1.3.1-12
changelog:
- use consistent names for patches, create backup files
- use polkit/pkexec instead of consolehelper
- add man page


author: Nils Philippsen <nils@redhat.com> - 1.4.0-1
changelog:
- version 1.4.0
- remove ancient obsoletes and bogus requirements
- require systemd >= 30 for localed
- update gtk-update-icon-cache scriptlets


author: Chris Lumens <clumens@redhat.com> - 2.9.1-1
changelog:
- Fix an error reading the timezone in generate mode (#916346, #924764). (clumens)
- Remove the documentation (#915737). (clumens)
- Display hidden groups in the package selection UI (#915029). (clumens)
- Default to SHA512, same as anaconda (#915013). (clumens)
- Add the system-config-keyboard dep back in (#909355). (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.9.2-1
changelog:
- Transifex has moved, so update the config. (clumens)
- Remove the Japanese-specific man page. (clumens)
- Update the system-config-kickstart man page to something useful (#948447). (clumens)
- Fix a typo. (clumens)


author: Parag Nemade <pnemade AT redhat DOT com> - 1.4.0-2
changelog:
- Resolves:rh#1040298 - OK button should be disabled always for the default selected language
- Resolves:rh#1040309 - Fix 'No Group named...exists' dialog produced traceback & warning messages
- Resolves:rh#1045993 - Change language name from Oriya to Odia.


author: Tim Waugh <twaugh@redhat.com> 1.4.1-17
changelog:
- Applied upstream patch to fix job retrieval (bug #1119227).
- Applied upstream patch to fix Gdk.color traceback (bug #1112334).


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.4.1-20
changelog:
- 1145739 - cannot add samba printer without python-smbc
- 1203219 - Tracebacks due to selection/cursor handling
- 1296815 - system-config-printer should require gtk3 instead of gtk2
- 1164188 - ImportError: No module named cairo
- 1140627 - Nested class are not allowed


author: Nils Philippsen <nils@redhat.com> - 1.3.4-1
changelog:
- don't ask libuser to create a home directory over an existing one (#908852,
  patch by Miloslav Trmač)
- correct check if SELinux is enabled


author: Lukas Czerner <lczerner@redhat.com> 0.4-2
changelog:
- Remove btrfs resize support (#986116)
- Unmount all btrfs subvolumes when removing a filesystem
- Fix size argument parsing for create and snapshot command
- Fix list output for some cases
- Add support to create encrypted volumes with crypt backend (#1012523)
- Add dry-run option
- Fix removing volumes with crypt backend
- Add raid1 and raid10 support for lvm backend (#1012518)
- Allow to check btrfs volumes (#986105)
- Fix error handling when trying to resize btrfs subvolume (#986111)
- Fix ssm mount command so it detects directory properly


author: Lukas Czerner <lczerner@redhat.com> 0.4-4
changelog:
- Suppress backtrace when a command fails (#1054349)
- Fix ssm to recognize units in new btrfs output properly (#1052327)
- Use correct sysfs file to get size for a partition (#1053651)
- Fix ssm to be able add a device with signature to btrfs file system (#1053741)
- Resognize btrfs devices from new btrfs output properly (#1052330)


author: Lukas Czerner <lczerner@redhat.com> 0.4-6
changelog:
- Fix listing of snapshots created by yum-fs-snapshot (#1094646)
- Provide lvm thin provisioning support (#1115131)
- Create mount point if it does not exist (#1134983)
- Support percentage size argumetns (#1139263)
- Fix bug when deleting inactive lv (#1142292)
- Fix bug when listing empty dm tables (#1113584)


author: Jan Tulak <jtulak@redhat.com> 0.4-9
changelog:
- Fix unhandled exception for some locales set through LC_ALL (#1679591)
- Fix ssm resize fails with python stack trace (#1654583)
- Fix poor luks password throwing an error (#1141871)
- Fix unable to list thinpools with the same name (#1619476)
- Fix ssm list delay in detecting xfs growth (#1664652)
- Fix exported lvm volumes issue
- Send udev change events for btrfs operations and on all fs creations
- Fix issues with partitions on loopback devices
- Better error reporting for some situations


author: Deepak Bhole <dbhole@redhat.com> - 1.1.5-1
changelog:
- Resolves: rhbz#663322
- Sync with F14:
  - Update to 1.1.5 which fixes rhbz 493898 and adds more translations


author: Jiri Vanek <jvanek@redhat.com> - 1.1.5-4
changelog:
- added jre-java patch to work corectly with java directories and not
  just with  jre  symlinks
  backward compatibility preserved
- added correct recognition of icedtea-web plugin
- added disabledUnderline patch
- added tuiWidth patch
- Resolves: rhbz#731039
- Resolves: rhbz#725718


author: Omair Majid <omajid@redhat.com> - 1.1.5-9
changelog:
- Remove libuser-python dependency
- Update to work with newer alternatives
 - added new-jdk-paths.patch
 - this patch is disabled, untill more work is done in upstream
- Resolves: rhbz#1070976


author: Jiri Vanek <jvanek@redhat.com> - 1.1.5-10
changelog:
- Renamed (to baseurl) url macro to prevent shadowing
- Added BSD license to list of Licenses
 - (COPYING.icon says it's a 2-clause BSD license)
- removed buildroot definition and manual removing of it
- Resolves: rhbz#1070976


author: Jiri Vanek <jvanek@redhat.com> - 1.1.6-1
changelog:
- updated to upstream release of 1.1.6
- removed all upstreamed patches
- Resolves: rhbz#1283904
- Resolves: rhbz#1080838


author: Jiri Vanek <jvanek@redhat.com> - 1.1.7.1-1
changelog:
- updated to latest upstream, removed upstreamed patches
- Resolves: rhbz#1283904
- Resolves: rhbz#1080838


author: Frank Ch. Eigler <fche@redhat.com> - 3.3-2
changelog:
- Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
- Fix vfs.add_to_page_cache probe (rhbz1547238)
- Fix foreach_limit.exp compilability (rhbz1591267)


author: Serhei Makarov <smakarov@redhat.com> - 3.3-3
changelog:
- Add BPF left-operand fix (rhbz1560044) (x86-64 only)
- Add stap.1 note on missing stapbpf.8 (rhbz1560044)
- Fix RHEL-ALT build (rhbz1544689)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-9
changelog:
- Add patch to fix CVE-2010-2642, CVE-2011-0433 (afm-fix patch)
- New version of patch for CVE-2011-0764, also fixes CVE-2011-1552,
  CVE-2011-1553, CVE-2011-1554 (type1-inv-rw-fix patch)
  Resolves: rhbz#772899
- Add explicit NVR requires to apps subpackage (consumes libt1(x).so)
- Fix rpmlint warning (mixed-use-of-spaces-and-tabs)


author: Rex Dieter <rdieter@fedoraproject.org> 1.8-1
changelog:
- taglib-1.8

-* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.2-2
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild


author: gil cattaneo <puntogil@libero.it> 0:1.2.1-1
changelog:
- Upgraded to 1.2.1
- remove ant-nodeps reference
- changed group in javadoc sub package (from Development/Documentation in Documentation)
- add maven metadata
- add manual
- Adapt to current guidelines.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.17-37
changelog:
- Improve message with response directions to reflect new option
  for user names with dot character


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.17-42
changelog:
- Add systemd support (thanks to Zbigniew Jędrzejewski-Szmek and Jóhann B. Guðmundsson)
  Resolves: #737219


author: Nathaniel McCallum <npmccallum@redhat.com> - 4-1
changelog:
- Import SRPM from Fedora (tang-4-3.fc26)
- Remove nagios dependency
- Adjust http-parser version for RHEL


author: Tomas Repik <trepik@redhat.com> - 2:1.26-32
changelog:
- restore incremental backups correctly, files were not being removed (rhbz#1184697)
- fix the behavior of tar when --directory option is used together with
  --remove-files
- repair the ignorance of --xattrs-exclude/include options (rhbz#1341786)
- Intorduce new option '--keep-directory-symlink'


author: Pavel Raiskup <praiskup@redhat.com> - 1.26-33
changelog:
- extract: deterministic archive type detection (rhbz#1437297)
- avoid hang when extracting with --xattrs --skip-old-files (rhbz#1408168)
- fix listing of large sparse members (rhbz#1347229)


author: Maurizio Lombardi <mlombard@redhat.com> - 2.1.fb46-4
changelog:
- Properly detect errors when writing backup files. (Closes: #80) (#81)
- Read number of backup files to keep from file
- config: defend on '/etc/target/backup' directory
- config: backup when current config is different from recent backup copy
- config: rename key 'kept_backups' as 'max_backup_files'
- backup: global option to tune max no. of backup conf files


author: Andy Grover <agrover@redhat.com> - 0.3.1-5
changelog:
- Update require-password.patch
- Change target.yaml to not include a commented-out default password


author: Andy Grover <agrover@redhat.com> 0.6.1-1
changelog:
- Update to latest version, make needed changes
- Drop patches:
  * require-password.patch
  * use-std-ssl.patch
- Change requires from python-lvm to lvm2-python-libs


author: Petr Machata <pmachata@redhat.com> - 4.1-2.20130314
changelog:
- Fix mfence patch.  Since the __TBB_full_memory_fence macro was
  function-call-like, it stole () intended for function invocation.


author: Petr Machata <pmachata@redhat.com> - 4.1-6.20130314
changelog:
- Drop ExclusiveArch altogether. TBB has a fallback code that works
  irrespective of the architecture.


author: Tony Camuso <tcamuso@redhat.com> - 1:1.9.4-1
changelog:
- Upgrade 1.9.4 release
- Fixed bad day-of-week of first entry in changelog
- Do not install on systems with efi partition
  See https://access.redhat.com/articles/2217041
  Resolves: rhbz#1275031
  Resolves: rhbz#1293526
  Resolves: rhbz#1307176
  Resolves: rhbz#1313876
  Resolves: rhbz#1332691


author: Tony Camuso <tcamuso@redhat.com> - 1:1.9.4-2
changelog:
- Test for UEFI system with /sys/firmware/efi, rather than looking in
  the boot directory for an efi directory.
- Allow install on UEFI platform, but with warning message, in order to
  permit completion of provisioning.
  Resolves: rhbz#1356571


author: Tony Camuso <tcamuso@redhat.com> - 1:1.9.6-3
changelog:
Apply patches from upstream since realease of 1.9.6
  Resolves: rhbz#1515081
  Resolves: rhbz#1511798


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.5.13-5
changelog:
- Fixed fork, enabled threading (by notifier-thread-fork-fix patch)
  Resolves: rhbz#869315
- Rebuild to fix systemtap on aarch64
  Resolves: rhbz#1238479


author: Tom Lane <tgl@redhat.com> 1.8.0-1
changelog:
- Update to pgtcl 1.8.0.
- Relabel license as PostgreSQL now that that's separately recognized by OSI.


author: Martin Sehnoutka <msehnout@redhat.com> - 14:4.9.0-4
changelog:
- Drop downstream patch (drop root privileges)
- Add libcap-ng as a new build dependency
- Related: #1262283


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-4
changelog:
- Resolves: #1664648 - tcpdump post creates user and groups unconditionally, raising alerts in corporate environment


author: David Kaspar <dkaspar@redhat.com> - 6.18.01-8
changelog:
- Upstream's $anyerror variable re-introduced. (#1123854)
- Fix for hang inside the 'wait' built-in of tcsh added. (#1181682)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.18.01-9
changelog:
- 'if statement' parsing fixed when the space is missing after ')'. (#1273892)
- Quote backslashes properly to preserve them in `...` expressions. (#1319816)
- Fix for tcsh being interruptible while waiting for child process. (#1269370)
- Fix of memory leak when using the 'source' built-in command.      (#1273513)
- Print error message on stderr (instead of stdout).                (#1273498)
- Use GLIBC's malloc instead of builtin malloc.                     (#1315713)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.18.01-12
changelog:
- Fix another regression in tcsh-6.18.01-quote-backslashes-properly.patch
  Related: #1334751

- Fix regression in tcsh-6.18.01-use-stderr-upon-error.patch
  Related: #1273498


author: Brian Pepple <bpepple@fedoraproject.org> - 0.6.0-1
changelog:
- Update to 0.6.0
- Drop python subpackage. gobject-introspection is used now.
- Drop unnecessary buildroot cleaning in install section.
- Update BR for farstream02-devel.


author: Kalev Lember <klember@redhat.com> - 0.24.1-1
changelog:
- Update to 0.24.1
- Fix the build with glib 2.46 and later
- Rebuild against gobject-introspection 1.54
- Resolves: #1507813


author: Debarshi Ray <rishi@fedoraproject.org> - 1:5.14.1-5
changelog:
- Add %check to run the upstream test suite on each build (Red Hat #1000705)
- Resort to using chrpath for removing rpaths instead of hacking libtool


author: Martin Sehnoutka <msehnout@redhat.com> - 1:0.17-60
changelog:
- Introduce new -i switch
- ip addresses will be logged into utmp instead of hostname
- Resolves: #1323094


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-63
changelog:
- Related: #1367415 - No option to specify IPv6 or IPv4 explicitly must be used
                    - additional info added to manpage


author: Michal Ruprich - 1:0.17-64
changelog:
- Related: #1367415 - No option to specify IPv6 or IPv4 explicitly must be used
                    - more clear formulation of man page note - previous note was a bit ambiguous


author: Dan Kenigsberg <danken@cs.technion.ac.il> - 0.1-12
changelog:
- Rebuilt against existing David Type1 fonts. Bug #509697
- Require specific culmus font packages and obsolete tetex-fonts-hebrew-0.1-9. Bug #485639


author: Parag Nemade <pnemade AT redhat DOT com> - 0.1-20
changelog:
- Resolves:rh#921852 - Four culmus subpackages are not listed in build require
- Added BR: and R: for the following packages
- culmus-hadasim-clm-fonts, culmus-simple-clm-fonts
- culmus-stamashkenaz-clm-fonts, culmus-stamsefarad-clm-fonts


author: Than Ngo <than@redhat.com> - 2:2012-39.20130427_r30134
changelog:
- Resolves: #1320337 - dependiency on texlive-xetex-def
- Resolves: #1350485 - updmap from texlive-tetex-bin cannot be executed
- Resolves: #1337925 - scriptlet errors
- Resolves: #1186825 - add coreutils for post/unpost


author: Daiki Ueno <dueno@redhat.com> - 0.5.0-2
changelog:
- fix <test> usage in fontconfig files (Closes: #837538)
- refresh fontconfig files with the latest upstream version


author: Daiki Ueno <dueno@redhat.com> - 0.5.0-4
changelog:
- disable X fonts.dir generation
- remove obsolete -compat subpackage
- remove %defattr from %files
- add missing "make" in %build


author: Jan Grulich <jgrulich@redhat.com> - 1.8.0-14
changelog:
- Fix rendering on big endian system
  Resolves: bz#1618777

  Do not automatically kill sessions
  Resolves: bz#1646889


author: Jan Grulich <jgrulich@redhat.com> - 1.8.0-20
changelog:
- Fix stack buffer overflow in CMsgReader::readSetCursor
  Resolves: bz#1791773

- Fix heap buffer overflow in DecodeManager::decodeRect
  Resolves: bz#1791768

- Fix heap buffer overflow in TightDecoder::FilterGradient
  Resolves: bz#1791763

- Fix heap-based buffer overflow triggered from CopyRectDecoder
  Resolves: bz#1791747

- Fix stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder
  Resolves: bz#1791759

- Add option to fallback to empty port when the specified one is taken
  Resolves: bz#1791996


author: Petr Pisar <ppisar@redhat.com> - 1.7-39
changelog:
- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.5.13-5
changelog:
- Enabled threading
  Resolves: rhbz#676880
- Fixed crash if there are no fonts installed (by no-fonts-fix patch)
  Resolves: rhbz#1218943


author: Miloslav Trmač <mitr@redhat.com> - 2.11-3
changelog:
- Drop the cron.daily script, systemd default configuration handles the same
  places.
  Resolves: #906455


author: Jiri Kucera <jkucera@redhat.com> - 2.11-6
changelog:
- Added --fuser option support.
- Fixed bad URL, Source0, and bogus date in spec.
  Resolves: #1330328


author: Sven Lankes <sven@lank.es> 1.5-1
changelog:
- New upstream release
- Do the right thing (tm) and revert to $upstream-behaviour: 
   No longer install tmux setgid and no longer use /var/run/tmux 
   for sockets. Use "tmux -S /var/run/tmux/tmux-`id -u`/default attach"
   if you need to access an "old" tmux session
- tmux can be used as a login shell so add it to /etc/shells


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.3-8
changelog:
- Fix build failure in fedora rawhide. It was caused due to 
  removal of CMAKE_INSTALL_LIBDIR macro from /etc/rpm/cmake.macros 
  that was present in previous fedora releases.


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.3-12
changelog:
- Fixes for rhbz #985785 to fix crash issue in Filecert manager
  in platidimv.
- Fixed crashing of attestation imv so while loading due to
  wrong static initialization order in attestation imv.
- Fixes some coverity scan errors.
- Fixed comilation when sysconf dir variable is not defined on a
  local system. Added some messaging outputs during compilations.
- Fixed erroneous data type conversion issues causing wrong outputs
  and with potential for data corruption.
- Fixes tncutil build issue from upstream commit
- Fixes typo in assignment in platidimv from upstream commit
- Fixes Fix typo in variable declaraction in hostscannerimv
  from upstream commit
- Fixes imcv shared library build issue from upstream commit


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.3-13
changelog:
- Implemented support for dlopen
- Removed libtool support
- Fixed imv and imc build issues arising from a
  previous upstream patch
- Fixed a few coverity scan error issues


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-1
changelog:
- Fix packaging of tmpfiles
  Resolves: #1180993
- Add install Platform_LINUX_XSCALE_GNU.h, Linkage.h and CIMListener.h to -devel
  because of lmiwbem (CIMListener class), add symlink to libpeglistener.so.1
  Resolves: #1120701
- Update to upstream version 2.14.1
  Resolves: #1097187, #1039050, #1007386
- Fix sending of SNMPv3 traps
  Resolves: #1218954


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-2
changelog:
- Remove files created in %check
  Resolves: #1232341
- Fix setupSDK in -devel
  Resolves: #1127399
- Add snmp tests to the -test rpm and enable them, configure snmptrapd
  in test setup phase
  Related: #1218954


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-4
changelog:
- Fix ppc64le SDK
  Resolves: #1266235
- Move SSL certificates to more convenient place, update related scripts
  and README.RedHat.SSL
  Resolves: #1308809
- Change repository update to get rid of warning messages during cleanup
  Resolves: #1257085
- Remove TESTID environment variable which breaks automatic testing in Beaker
  Resolves: #1266655
- Add CIMEnumerationContext.h and UintArgs.h to -devel
  Resolves: #1335873
- Fix wrong formatting in cimconfig man page
  Resolves: #1263895
- Add missing description of httpSessionTimeout to cimconfig man page
  Resolves: #1263894


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-9
changelog:
- Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet
- Resolves: rhbz#1552375 CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources
- Resolves: rhbz#1552374 CVE-2018-1305 tomcat: Late application of security constraints can lead to resource exposure for unauthorised users
- Resolves: rhbz#1590182 CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins
- Resolves: rhbz#1608609 CVE-2018-8034 tomcat: host name verification missing in WebSocket client
- Resolves: rhbz#1588703 Backport of Negative maxCookieCount value causes exception for Tomcat
- Resolves: rhbz#1472950 shutdown_wait option is not working for Tomcat
- Resolves: rhbz#1455483 Add support for characters "<" and ">" to the possible whitelist values


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-12
changelog:
- Resolves: rhbz#1367492 harden package permissions
- Resolves: rhbz#1523112 tomcat systemd does not cope with - in service names
- Resolves: rhbz#1629162 tomcat-dbcp.jar is missing from tomcat package
- Resolves: rhbz#1822453 Tomcat parses a request having an absolute URI path incorrectly and returns 404 Not Found
- Resolves: rhbz#1795645 connection leak with StatementCache, SlowQueryReport or StatementDecoratorInterceptor
- Resolves: CVE-2019-17563 tomcat: session fixation when using FORM authentication


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-14
changelog:
- Revert rhbz#1814315 because it caused other issues with ipa-server, see rhbz#1831127
- Resolves: CVE-2020-9484 tomcat: Apache Tomcat Remote Code Execution via session persistence


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-15
changelog:
- Resolves: CVE-2020-13935 tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS


author: Matthew Harmsen <mharmsen@redhat.com> - 7.2.1-3
changelog:
- Bugzilla Bug #1394416 - Rebase tomcatjss to 7.2.x in RHEL 7.4 (mharmsen)
- ## 'tomcatjss-support-for-event-API.patch' resolves the following issues
  - tomcatjss Pagure Issue #4 - Support for Event API (edewata)


author: Matthew Harmsen <mharmsen@redhat.com> 7.2.1-7
changelog:
- Updated jss build and runtime dependencies
- Bugzilla Bug #1596769 - Tomcatjss: Add support for TLS_*_SHA384
  ciphers (cfu)


author: Jack Magne <jmagne@redhat.com> 7.2.1-8
changelog:
- Bugzilla Bug #1632618 - CC: tomcatjss: unable to enable OCSP checking
  from peer AIA extension [rhel-7.6.z] (jmagne)


author: Bastien Nocera <bnocera@redhat.com> 3.14.3-1
changelog:
- Update to 3.14.3
- Re-add opensubtitles plugin, as it doesn't depend on PyXDG anymore
Resolves: #1174589


author: Bastien Nocera <bnocera@redhat.com> 3.14.3-4
changelog:
- Remove Python3 plugins, they're mostly accessory plugins,
  and RHEL 7.2 only support Python2 for now
Resolves: #1259643


author: Ray Strode <rstrode@redhat.com> 3.14.3-5
changelog:
- Add more goo to the compat desktop file to prevent them
  from exposing in control-center
Related: #1259292


author: John D. Ramsdell <ramsdell@mitre.org> - 1.0-6
changelog:
- Changed URL to SourceForge development site.
- Changed source to NEU site.
- Quoted % references in macros within changelog.
- README: Note tpm-tools only needed to take ownership of a TPM.


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.3.9-3
changelog:
- Fix garbage being printed in tpm_version output
- backport spec file cleanups
Resolves: rhbz#1654985


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-2
changelog:
- Removed BuildRequires for gcc
- Move tpm2-abrmd systemd service to /usr/lib/systemd/system
- Added scriptlet for tpm2-abrmd systemd service
- Use autoreconf instead of bootstrap


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-4
changelog:
- Rename and relocate udev rules file to _udevrulesdir
- Update scriptlet to add service name after systemd_postrun


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.1.0-11
changelog:
- Fix Requires to be against tpm2-tss instead of tpm2-tss-devel
- Add BuildRequires to specify version tpm2-tss-devel needed
- Add Requires to tpm2-abrmd-devel for tpm2-tss-devel
resolves: rhbz#1627827


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-4
changelog:
- Dependency check failed for Requires again, here to fix this
- Update release version and changelog


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.1.0-5
changelog:
- Remove epel dependencies
- Change tpm2-tss dependency to not be tied to 1 version
- Fix resource leak in InitSysContext
- Clean up HashEKPublicKey
- Add needed null checks to tpm2_getmanufec
- clean up resource leak in tpm2_getmanufec
- use strdup to get server address in tpm2_getmanufec
- change preparePcrSelections_g to void
- return on success in print_rc_tpm_error_code
- Update release version
resolves: rhbz#1275029 - Add tpm2.0-tools package


author: Sun Yunying <yunying.sun@intel.com> - 1.0-2
changelog:
- Remove global macro pkg_version to avoid duplicate of version
- Use ExclusiveArch instead of ExcludeArch
- Use less wildcard in %files section to be more specific
- Add trailing slash at end of added directory in %file section
- Remove autoconf/automake/pkgconfig(cmocka) from BuildRequires
- Increase release version to 2


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.0-3
changelog:
- Add systemd unit for resourcemgr
- Add utils subpackage
- Add Makefile.am patch to install test programs
- Add patch to swap out AX_PTHREAD for different check
- Increase release version to 3
resolves: rhbz#1275027 - Add TPM 2.0 System API (SAPI) library


author: John Kacur <jkacur@redhat.com> - 2.6.0-7
changelog:
- Updated to latest upstream, which among many fixes also includes
- external library for other programs to link to trace-cmd
- bash completion
Resolves: rhbz#1445825


author: Kamil Dudka <kdudka@redhat.com> - 1:3.2.5d-11
changelog:
- install man pages using the correct file name suffix
- provide the fig2ps2tex.sh man page as a symlink


author: Pravin Satpute <psatpute@redhat.com> 3.0.9-42
changelog:
- Resolves: rh#1125703 ttmkfdir fails to build on arch: ppc64le (Generic build failure)
- Patch from Peter Robinson <pbrobinson@redhat.com>


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-0.1.rc1
changelog:
- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1643654
  - disable KSM only once, re-enable it only on full rollback
    resolves: rhbz#1622239
  - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
    resolves: rhbz#1649408
  - updated virtual-host profile
    resolves: rhbz#1569375
  - added log message for unsupported parameters in plugin_net
    resolves: rhbz#1533852
  - added range feature for cpu exclusion
    resolves: rhbz#1533908
  - make a copy of devices when verifying tuning
    resolves: rhbz#1592743
  - fixed disk plugin/plugout problem
    resolves: rhbz#1595156
  - fixed unit configuration reading
    resolves: rhbz#1613379
  - reload profile configuration on SIGHUP
    resolves: rhbz#1631744
  - use built-in functionality to apply system sysctl
    resolves: rhbz#1663412


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-1
changelog:
- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-7
changelog:
- plugin_sysctl: fixed traceback when assignments modifiers ('<', '>')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739418


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-9
changelog:
- Fixed SIGHUP handling
  Resolves: rhbz#1702724
- Tune irqbalance service
  Resolves: rhbz#1720042
- Added netcat requirement
  Resolves: rhbz#1746436
- sysctl: made reapply_sysctl ignore configs from /usr
  Resolves: rhbz#1776149
- profiles: define variables before use
  Resolves: rhbz#1781664


author: Patsy Franklin <pfrankli@redhat.com> - 2018e-2
changelog:
- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018e-4
changelog:
- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018f-1
changelog:
- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018g-1
changelog:
- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018i-1
changelog:
- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.


author: Patsy Griffin Franklin <patsy@redhat.com> - 2019a-1
changelog:
- Rebase to tzdata-2019a
  - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
    previously predicted.
  - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
    of Pacific standard time.


author: Patsy Griffin <patsy@redhat.com> - 2019b-1
changelog:
- Rebase to tzdata-2019b
  - Brazil will no longer observe DST going forward.
  - The 2019 spring transition for Palestine occurred 03-29, not 03-30.


author: Patsy Griffin <patsy@redhat.com> - 2019c-1
changelog:
- Rebase to tzdata-2019c
  - Fiji will observe DST from 2019-11-10 to 2020-01-12.
  - Norfolk Island will begin observing Australian-style DST on 2019-10-06.


author: Patsy Griffin <patsy@redhat.com> - 2020a-1
changelog:
- Rebase to tzdata-2020a
  - Morocco will spring forward on 2020-05-31 rather than
    previously predicted 2020-05-24.
  - Canada's Yukon region changed to year round UTC -07
    effective 2020-03-08.
  - America/Godthab was renamed to America/Nuuk.


author: Petr Menšík <pemensik@redhat.com> - 1.6.6-1
changelog:
- Rebase to 1.6.6
- Enable RFC 8145 Trust Anchor Signaling to help the root zone get keytag statistics
- Enable ipsecmod support


author: Martin Osvald <mosvald@redhat.com> - 1.6.6-2
changelog:
- Do not search for DNSSEC info when domain-insecure is set
  for stub zone (#1678550)
- Remove KSK-2010 from configuration files - it has been revoked (#1665503)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.6.6-4
changelog:
- Fix amplifying an incoming query into a large number of queries directed to a target
- Resolves: rhbz#1839172 (CVE-2020-12662), rhbz#1840258 (CVE-2020-12663)


author: Kamil Dudka <kdudka@redhat.com> - 2.01-3
changelog:
- provide a man page for units_cur as a symlink to units.1
- mention the --check-verbose option in units.1 man page


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-15
changelog:
- Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
  Resolves: #1196134 #1196122 #1196126 #1196130


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-16
changelog:
- Added patch for build option "-Werror=format-security"
- Added support of non-unicode non-latin charset
- Fix print of non-ascii filenames
- Fix troubles with symlinks for archives with many files
  Resolves: rhbz#1276746, rhbz#1286165, rhbz#1276744


author: Jakub Martisko <jamartis@redhat.com> - 6.0-19
changelog:
- rename patch unzip-6.0-nostrip.patch to unzip-6.0-configure.patch
- make linking flags configurable from the specc file
- set linking flags to use relro hardening
  Related: #1531116


author: Richard Hughes <rhughes@redhat.com> - 0.9.20-7
changelog:
- Mark the devel-docs subpackage as noarch to silence a rpmdiff false positive.
- Resolves: #1070661


author: Bastien Nocera <bnocera@redhat.com> - 0.99.7-1
changelog:
- Update to 0.99.7
- Add Bluetooth LE battery support
- Fix critical action after resume from hibernate
  Resolves: #1584245


author: Rakesh Pandit <rakesh@fedoraproject.org> 0.7.5-1
changelog:
- Upgrade to 0.7.5:
-  Improved docs
-  Test suite
- 0.7.4
-  Cleaned up code and fixed memory leaks
- 0.7.3
-  Builds for Cygwin, minor bug fix
-  Changes in build system.
-  Added: Qt Assistant documentation output
- 0.7.2
-  Improved and cleaned API


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 20170801-1
changelog:
- rebase to 20170801 version
- removed urw-* string from subpackages
- fontconfig priority value updated to 35
- error messages from 'xset fp rehash' suppressed (bug #1466254)
- AppStream files added into (sub)packages
- fontconfig files added into (sub)packages
- fixed fonts path during %install
- source location updated to point at github.com


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 20170801-2
changelog:
- urw-base35-fonts-20170801-000-split-urw-fallback.patch added
- decrease the fontconfig priority/ordering value to 60 (bug #1494850)
- set same priority value for urw-fallback.conf as for other files (bug #1495199)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> 20170801-3
changelog:
- *-devel subpackage added
- typos & syntax fixed for AppStream files
- NimbusSansNarrow-BdOblique.* renamed to *-BoldOblique
- *-nimbus-sans-narrow subpackage dropped
- priority/ordering decreased [60->61]
- ship *.otf format files as well


author: Thomas Haller <thaller@redhat.com> 1.2.7-3
changelog:
- Add manual page for usb_modeswitch_dispatcher and fix errors in
  manual page of usb_modeswitch (rhbz#948451, rhbz#884203).


author: Lubomir Rintel <lkundrak@v3.sk> - 2.4.0-2
changelog:
- Add the previously omitted systemd service file (rh #1352055)
- Fix crash with invalid arguments (rh #1358472)


author: Daniel Kopeček <dkopecek@redhat.com> 0.7.0-7
changelog:
- RHEL 7.5 erratum
  - Fixed usbguard-daemon on systems with kernel >= 4.13
  - Use distribution specific usbguard-daemon.conf instead
    of the upstream version
  Resolves: rhbz#1516930


author: Daniel Kopeček <dkopecek@redhat.com> 0.7.0-8
changelog:
- RHEL 7.5 erratum
  - Require a lower version of libaudit during build-time
  Resolves: rhbz#1491313


author: Daniel Kopeček <dkopecek@redhat.com> - 0.7.4-1
changelog:
- RHEL 7.6 erratum
  - Replaced asciidoctor dependency with asciidoc
  Resolves: rhbz#1508878 - Rebase USBGuard to latest upstream
  Resolves: rhbz#1487229 - [RFE] improve log error messages for invalid usbguard-daemon.conf values
  Resolves: rhbz#1487233 - invalid path for AuditFilePath in usbguard-daemon.conf is ignored


author: Daniel Kopeček <dkopecek@redhat.com> - 0.7.4-2
changelog:
- RHEL 7.6 erratum
  - Restore old behavior for loading IPC access control files
  Resolves: rhbz#1487229 - [RFE] improve log error messages for invalid usbguard-daemon.conf values


author: Radovan Sroka <rsroka@redhat.com> - 0.7.4-3
changelog:
- RHEL 7.8 erratum
  - "usbguard add-user" commands fails with "Error: parsed key is not in key set: 'RuleFile'"
  Resolves: rhbz#1689048


author: Hans de Goede <hdegoede@redhat.com> - 0.6-3
changelog:
- Fix usbredirserver not listening for ipv6 connections (rhbz#957470)
- Fix a few (harmless) coverity warnings


author: Hans de Goede <hdegoede@redhat.com> - 0.6-5
changelog:
- Use the new libusb autodetach kernel driver functionality
- Fix a usbredirparser bug which causes tcp/ip redir to not work (rhbz#1005015)


author: Victor Toso <victortoso@redhat.com> - 0.6-8
changelog:
- Fix migration due lack of capabilities from source host
  Resolves: rhbz#1185167
- New callback to drop isoc packets in order to avoid high memory
  consumption in the client
  Resolves: rhbz#1312913


author: Miloslav Trmač <mitr@redhat.com> - 1.110-1
changelog:
- Update to usermode-1.110.
  Note that this drops halt/poweroff/reboot helpers, the respective
  implementations in systemd now include PolicyKit support.  Spec file change
  based on a patch by Lennart Poettering <lpoetter@redhat.com>.
  Resolves: #804088, #849208


author: Jiri Kucera <jkucera@redhat.com> - 1.111-6
changelog:
- Fix inconsistent capitalization in userhelper.8
  Fix URL and Source
  Fix bogus dates
  Resolves: #1349840, #1502441


author: Michal Hlavinka <mhlavink@redhat.com> - 1.6.2-20
changelog:
- drop last man page change, that option is just for compatibility
- fix NAME section of man pages to be whatis friendly


author: Michal Hlavinka <mhlavink@redhat.com> - 1.6.2-23
changelog:
- drop uuid-pgsql subpackage, it is outdated and does not work, use 
  uuid-ossp module from postgresql-contrib instead


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-8
changelog:
- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-9
changelog:
- valgrind 3.13.0 (fedora).
- Update description.
- Drop all upstreamed patches.
- Add valgrind-3.13.0-ppc64-check-no-vsx.patch
- Add valgrind-3.13.0-epoll_pwait.patch (#1462258)
- Add valgrind-3.13.0-ppc64-diag.patch
- Add valgrind-3.13.0-arm64-hwcap.patch (#1464211)
- Add valgrind-3.13.0-arm-index-hardwire.patch (#1466017)
- Add valgrind-3.13.0-ucontext_t.patch
- Add valgrind-3.13.0-gdb-8-testfix.patch
- Add valgrind-3.13.0-disable-vgdb-child.patch
- Add --error-exitcode=1 to /bin/true check.
- Add valgrind-3.13.0-xml-socket.patch
- Add valgrind-3.13.0-ppc64-vex-fixes.patch
- Add valgrind-3.13.0-amd64-eflags-tests.patch
- Add valgrind-3.13.0-suppress-dl-trampoline-sse-avx.patch
- Add valgrind-3.13.0-static-tls.patch
- Workaround gdb/python bug in testsuite (#1434601)


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-11
changelog:
- Make building of libmpi wrapper explicit (#1530219)
- Add valgrind-3.13.0-debug-alt-file.patch
  and valgrind-3.13.0-build-id-phdrs.patch (#1589844)
- Add valgrind-3.13.0-s390-cgijnl.patch (#1589848)
- Add valgrind-3.13.0-ppc64-mtfprwa-constraint.patch (#1589852)


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-13
changelog:
- Improved valgrind-3.13.0-arm64-hwcap.patch (#1593686)
- Add valgrind-3.13.0-arm64-ptrace.patch (#1593682)


author: - Andy Walsh <awalsh@redhat.com> - 6.1.1.24-1
changelog:
- Rebased to 6.1.1 branch from github
- Resolves: rhbz#1576701
- Removed obsolete nagios module.
- Modified spec files to use systemd macros
- Resolves: rhbz#1531111
- Updated the vdo.8 man page
- Resolves: rhbz#1547786
- Improved some error messages


author: - Andy Walsh <awalsh@redhat.com> - 6.1.1.84-1
changelog:
- Improved and corrected man pages.
- Improved error handling in vdo script when stopping volumes in use.
- Resolves: rhbz#1511106
- Modified the vdo script to return more specific error exit codes.
- Resolves: rhbz#1543954
- Improved detection of existing formats when creating new volumes.
- Resolves: rhbz#1557464
- Improved VDO Ansible testing playbooks.
- Fixed compilation errors on newer versions of GCC.
- Removed the --physical-size option to vdoformat since VDO now always uses
  the entire device on which it resides.
- Modified vdo script to use /dev/disk/by-id to describe the location of
  VDO volumes when possible.
- Fixed a bug where VDO would always be created with a dense index even
  when a sparse index was requested.
- Resolves: rhbz#1570156
- Modified the vdo script to accept decimal points or commas when
  specifying the --indexMem option.
- Resolves: rhbz#1552146
- Changed vdo script to not accept --vdoSlabSize=0 as a way of specifying
  the default since it was confusing. The default can be obtained by merely
  omitting the parameter entirely.
- Resolves: rhbz#1564181
- Modified the vdo script to require the --force option to remove a VDO
  whose underlying device is not present.
- Resolves: rhbz#1535476


author: - Andy Walsh <awalsh@redhat.com> - 6.1.1.99-2
changelog:
- Modified the vdo script to not allow creation of a VDO device on top of
  an already running VDO device.
- Resolves: rhbz#1572640
- Made the ordering of the output of vdo list stable.
- Resolves: rhbz#1589363
- Added the proper dist tag
- Resolves: rhbz#1588043


author: - Andy Walsh <awalsh@redhat.com> - 6.1.1.111-3
changelog:
- Added support for issuing fullness warnings via dmeventd
- rhbz#1519307
- Provided missing error code to text translation for vdoDumpConfig.
- Resolves: rhbz#1595129
- Improved error reporting when using pvcreate in the vdo script to check
  for pre-existing devices when creating a VDO volume.
- Resolves: rhbz#1557464


author: - Andy Walsh <awalsh@redhat.com> - 6.1.1.120-3
changelog:
- Improved error messages in the vdo script when failing to stop a device.
- Resolves: rhbz#1511106
- Improved man pages.
- Resolves: rhbz#1572640
- Modified vdo script to ignore (but preserve) unrecognised parameters in
  the vdo config file so that config files are compatible across versions.
- Resolves: rhbz#1604060
- Updated Ansible module to change block map cache size on existing volumes
- Resolves: rhbz#1541170


author: - Andy Walsh <awalsh@redhat.com> - 6.1.2.38-3
changelog:
- Fixed more error path memory leaks.
  - Resolves: rhbz#1609426
- Improved man pages.
  - Resolves: rhbz#1636047
- Improved checking for existing LVM physical volumes when formatting a new
  VDO volume.
  - Resolves: rhbz#1687797
- Fixed a bug which would cause the default logical size to be 480 KB
  smaller than it could be without causing over-provisioning.
  - Resolves: rhbz#1532697
- Removed extraneous man pages.
  - Resolves: rhbz#1643284
- Allowed VDO backing devices to be specified by major:minor device number.
  - Resolves: rhbz#1637762
- Improved behavior when attempting to create a VDO volume whose name conflicts
  with an existing dm target.
  - Resolves: rhbz#1588140
- Modified vdo script to report fewer errors when removing a VDO which
  sits atop a missing device.
  - Resolves: rhbz#1535476


author: - Andy Walsh <awalsh@redhat.com> - 6.1.2.41-4
changelog:
- Removed the VDO Ansible module and associated examples from this package.
  - Resolves: rhbz#1536515
- Improved error messages from the vdo script.
  - Resolves: rhbz#1688481


author: - Andy Walsh <awalsh@redhat.com> - 6.1.3.4-4
changelog:
- Added UUID filtering of underlying devices when running vdo create with
  the --force flag as this failed when run on certain PVs.
  - Resolves: rhbz#1707481


author: - Andy Walsh <awalsh@redhat.com> - 6.1.3.23-5
changelog:
- Updated systemd integration to allow more flexible startup configuration.
- Resolves: rhbz#1706154


author: <sshedmak@redhat.com> - 1.1.2-1
changelog:
- Fixed FSType, Preferred Styles, UniqueID and Fullname
- Fixed Invalid Glyph Names reported by fontlint
- with exceptions string added in License


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.160-2
changelog:
- 1383902 - CPU spikes to 100% and timeouts observed in strace when opening yaml extensions using vim


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.160-3
changelog:
- 1267826 - Include c++11 syntax highlighting in vim
- 1319760 - [RFE] Vim should support blowfish2, plus ensure that RHEL6 encrypted files can be opened in RHEL7


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.629-1
changelog:
- 1563419 - Vim in RHEL 7 is older than VIM in RHEL 6 (Rebase)
- 1377316 - [RFE] make _remote_ vim doing the right decisions about 'set background'


author: Marek Kasik <mkasik@redhat.com> - 3.22.0-14
changelog:
- Rebuild due to new version of FreeRDP
- Fix an issue when RDP connection shows just black screen
- Resolves: #1839745


author: Ondrej Holy <oholy@redhat.com> - 3.22.0-6
changelog:
- Do not restart service after unclean exit code
- Do not listen all if invalid interface is provided
- Resolves: #1546043, #1580577


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.3-1
changelog:
- Rebased to virt-manager-1.4.3 (rhbz#1472271)
- The rebase also fixes the following bugs:
    rhbz#1486313, rhbz#1461684, rhbz#1456185, rhbz#1455491, rhbz#1453094
    rhbz#1446486, rhbz#1441127, rhbz#1430642


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.3-2
changelog:
- domain: don't add URI into params for tunneled migration (rhbz#1456185)
- diskbackend: convert to long the calculated size (rhbz#1450908)
- diskbackend: get a proper size of existing block device while cloning (rhbz#1450908)


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.3-3
changelog:
- delete: undefine only persistent domain (rhbz#1517119)
- localization: update Japanese translations (rhbz#1481239)


author: Pavel Hrdina <phrdina@redhat.com> - 1.5.0-1
changelog:
- Rebased to virt-manager-1.5.0 (rhbz#1562102)
- The rebase also fixes the following bugs:
    rhbz#1527834, rhbz#1544479


author: Pavel Hrdina <phrdina@redhat.com> - 1.5.0-2
changelog:
- virtinst: Remove only auto-generated channel source path (rhbz#1591670)
- virtinst: read CPU model from domain capabilities (rhbz#1525337)
- virtinst: compare host and domain cpu models (rhbz#1525337)
- virtinst: Trivial spelling fix (rhbz#1525337)
- domain: cpu: Add set_defaults (rhbz#1525337)
- guest: Add DomainCapabilities caching (rhbz#1525337)
- guest: Default to cpu mode=host-model if libvirt is new enough (rhbz#1525337)
- virt-manager: Wire up support for default mode=host-model (rhbz#1525337)
- cpu: Have host-copy use domcaps if qemu is new enough (bz 1637767) (rhbz#1525337)
- domain.numatune: Remove cpuset_str_to_tuple (rhbz#1566818)
- domain.numatune: Remove MEMORY_MODES (rhbz#1566818)
- domain.numatune: Drop cpuset validation (rhbz#1566818)
- graphics: move all listen code into one place (rhbz#1565968)
- cli: fix typos in virt-install --help output (rhbz#1533015)
- cli: Fix --boot smbios_mode=sysinfo (bz 1570549) (rhbz#1570549)
- virt-clone: fix force-copy of empty cdrom or floppy disk (rhbz#1564863)
- cli: Drop clear_attr property (rhbz#1550513)
- virtinst: cli: fix ParserBoot to return the parsed object (rhbz#1550513)
- virtManager: clone: check which storage pools supports volume cloning (rhbz#1463066)
- virtManager: domain: override rename_domain in vmmDomainVirtinst (rhbz#1667308)
- virtManager: createinterface: don't delete ip-config window (rhbz#1563638)
- virtManager: clone: build default clone path if we know how (rhbz#1565106)
- prefs: Add a setting to enable/disable libguestfs inspection (rhbz#1566187)


author: Pavel Hrdina <phrdina@redhat.com> - 1.5.0-3
changelog:
- domcapabilities: fix detection if host-model is safe to use (rhbz#1525337)
- cloner: don't fail to clone VM if nvram file doesn't exist (rhbz#1679021)
- domcapabilities: actually fix detection if host-model is safe to use (rhbz#1525337)
- domcapabilities: introduce get_cpu_security_features (rhbz#1582667)
- domain: cpu: introduce set_model function (rhbz#1582667)
- domain: cpu: automatically add CPU security features for "custom" mode (rhbz#1582667)
- domcapabilities: remove recommended CPU features from security features (rhbz#1582667)
- domcapabilities: fix typo in function name (rhbz#1582667)
- cli: introduce CPU secure parameter (rhbz#1582667)
- domcapabilities: add caching of CPU security features (rhbz#1582667)
- virt-manager: add new checkbox to control CPU security features (rhbz#1582667)
- DomainCpu: fix detection of CPU security features (rhbz#1582667)
- DomainCpu: check CPU model name only if model exists (rhbz#1582667)


author: Pavel Hrdina <phrdina@redhat.com> - 1.5.0-5
changelog:
- clone: Fix inverted --nonsparse check (rhbz#1675743)
- cli: fix sysinfo type parsing (rhbz#1707380)
- domcapabilities: detect MDS new vulnerability (rhbz#1582667)


author: Pavel Hrdina <phrdina@redhat.com> - 1.5.0-6
changelog:
- manager: Fix mem, disk, net stats graphs (bz 1543896) (rhbz#1710772)
- cli: fix cpu secure option to actually work (rhbz#1582667)


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.8-2
changelog:
- New upstream version 1.0.8.
- Requires tiny change to ocaml-libvirt, hence dep bump.
- Clean up the spec file.
- Remove explicit BR ocaml-camomile (not used AFAIK).


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.8-6
changelog:
- Include processcsv.py script and man page, but on RHEL only
  (RHBZ#665817, RHBZ#912020)
- Clear executable stack flag on PPC, PPC64 (RHBZ#605124).


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.8-23
changelog:
- Use libvirt virConnectGetAllDomainStats API for better performance, accuracy
- Include all changes from Fedora Rawhide
  resolves: rhbz#1422795


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 5.0-9
changelog:
- Drop downstream specific patch reverting string change
  Related: rhbz#1481243
- Fix scope declaration of enable_autotools macro
  Resolves: rhbz#1504132
- Fix wrong date in previous changelog entry
  Resolves: rhbz#1504132
- Save oVirt uri after connecting to guest
  Resolves: rhbz#1459792
- Adjust reference to spice-gtk man page
  Resolves: rhbz#1477966


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 5.0-10
changelog:
- Adjust reference to spice-gtk man page for remote-viewer
  Resolves: rhbz#1477966
- Update translations
  Resolves: rhbz#1481243


author: Victor Toso <victortoso@redhat.com> - 5.0-12
changelog:
- Centralize recent dialog
  Resolves: rhbz#1508274
- Always add guest name as comment
  Resolves: rhbz#1623756
- Mark PrintScreen as translatable
  Resolves: rhbz#1510411
- Remove symlink to spice-xpi-client-remote-viewer on update (it was dropped)
  Resolves: rhbz#1658325


author: Victor Toso <victortoso@redhat.com> - 5.0-17
changelog:
- Fix double free on migration
  Resolves: rhbz#1713600
- Prioritize certificate data from display over proxy
  Resolves: rhbz#1402909


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-3
changelog:
- Suppress warning message on Amazon EC2:
  "grep: /proc/xen/capabilities: No such file or directory"


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-7
changelog:
- Add support for detecting POWER KVM and LPAR
  resolves: rhbz#1147876
- Detect RHEV/oVirt
  resolves: rhbz#1249438
- Detect ACPI boot aarch64 guest
  resolves: rhbz#1275349
- Fix typo in manual page
  resolves: rhbz#1099289


author: Richard W.M. Jones <rjones@redhat.com> - 1.18-2
changelog:
- Rebase to Fedora Rawhide / upstream version.
- Include upstream patches since 1.18 was released.
  resolves: rhbz#1476878


author: William Poteat <wpoteat@redhat.com> 0.28.1-1
changelog:
- 1780467: Validate rhevm password when unicode is not allowed
  (wpoteat@redhat.com)
- 1751441: Add command line path parameter (piotr.kliczewski@gmail.com)
- 1762780: fix bug, when reporter_id is empty; ENT-1706 (jhnidek@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.28.3-1
changelog:
- 1775535: config option to override api version (piotr.kliczewski@gmail.com)
- Update releasers for new version (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.28.4-1
changelog:
- 1806572: virt-who using V3 APIs for communication with RHEVM which is
  deprecated (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.28.6-1
changelog:
- 1806572: RHEVM should only use version 4 (wpoteat@redhat.com)
- Update to tests to match changes in Subscription Manager (jhnidek@redhat.com)


author: Akira TAGOH <tagoh@redhat.com> - 20121230-2
changelog:
- Drop -common package and keep consistent state of the directory
  by using the macro. (#893789)
- Drop old Obsoletes and Provides line.


author: Martin Sehnoutka <msehnout@redhat.com> - 3.0.2-20
changelog:
- Resolves: #1147551 - Missing isolate_* options, incorrect default values of
  max_clients, max_per_ip in man vsftpd.conf


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.0.2-22
changelog:
- Resolves: #1432054 - secure ftp stopped working with default TLS settings in the new vsftpd package


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.2-23
changelog:
- Redefine VSFTP_COMMAND_FD to 1
- Resolves: rhbz#1443055
- Document the relationship of text_userdb_names and chroot_local_user
- Resolves: rhbz#1508021
- Document allow_writeable_chroot in the man page
- Resolves: rhbz#1508022
- Improve documentation of ascii_* options
- Resolves: rhbz#1517227
- Add new filename generation algorithm for STOU command
- Resolves: rhbz#1479237


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.2-25
changelog:
- Add config option log_die allowing to pass error messages to syslog
- Add config option bind_retries allowing to change the max number
- of attempts to find a listening port for the PASV/EPSV command
- Resolves: rhbz#1318198


author: Debarshi Ray <rishi@fedoraproject.org> - 0.46.1-1
changelog:
- Update to 0.46.1
- Drop upstreamed patches
- Drop workaround for old GTK+ bug (#1238315)
- Rebase downstream patches
Resolves: #1387056


author: Debarshi Ray <rishi@fedoraproject.org> - 0.46.1-2
changelog:
- Restore gnome-pty-helper
- Add git.mk and other dependencies to regenerate the build scripts
Resolves: #1443504


author: Richard W.M. Jones <rjones@redhat.com> - 5.13-2
changelog:
- Enable /etc/watchdog.d directory for storing test binaries
  (RHBZ#657750, RHBZ#831190).
- Missing BR systemd-units.
- Update .gitignore.
- Drop Group line, not required by modern RPM.


author: Ales Ledvinka <aledvink@redhat.com> - 5.13-9
changelog:
- SELinux: Add /usr/libexec/watchdog/scripts/ for test-bin and repair-bin to inherit from.
- systemd: service with network available dependency
- systemd: correct cgroup for realtime settings
- Document SELinux and systemd.


author: Josef Ridky <jridky@redhat.com> - 5.13-12
changelog:
- Resolves: #1092523 - add PIE and RELRO check 
- Resolves: #1133135 - add ipmi.service dependency to watchdog.service file
- Resolves: #1259816 - remove deprecated stanza in unit files


author: Peter Lemenkov <lemenkov@gmail.com> 4.60.1-1
changelog:
- Version 4.60.1 (bugfix release)
- Added man-pages
- The only patch was rebased
- Small cosmetic spec-file cleanups


author: Tomas Popela <tpopela@redhat.com> - 2.4.9-2
changelog:
- Compile with -fno-strict-aliasing
- Resolves: rhbz#1174556
- Update translations
- Resolves: rhbz#1223643


author: Tomas Popela <tpopela@redhat.com> - 2.20.4-1
changelog:
- Update to 2.20.4
- Resolves: rhbz#1576544
- WebKitWebProcess crashes when a11y is active
- Resolves: rhbz#1591638


author: Tomas Popela <tpopela@redhat.com> - 2.20.4-2
changelog:
- webkitgtk4: Crash on Google login page when a11y is active
- Resolves: rhbz#1503624
- Revert patch causing rendering glitches


author: Tomas Popela <tpopela@redhat.com> - 2.20.5-1
changelog:
- Update to 2.20.5 - technically it was not necessary as the only difference
  between 2.20.4 and .5 was the revert of one change, that we already reverted
  while building 2.20.4. But it's better to stay with upstream.
- Update the labels patch with the version that was pushed upstream.
- Resolves: rhbz#1576544


author: Tomas Hozza <thozza@redhat.com> - 1.14-12
changelog:
- Fix wget to include Host header on CONNECT as required by HTTP 1.1 (#1203384)
- Run internal test suite during build (#1295846)
- Fix -nv being documented as synonym for two options (#1147572)


author: Tomas Hozza <thozza@redhat.com> - 1.14-15
changelog:
- Added TLSv1_1 and TLSv1_2 as secure-protocol values to help (#1439811)
- Fixed synchronization in randomly failing unit test Test-proxied-https-auth (#1448440)


author: Michal Ruprich <mruprich@redhat.com> - 1.10.14-17
changelog:
- Resolves: #1557212 - CVE-2018-7418 SIGCOMP dissector crash in packet-sigcomp.c
- Resolves: #1588208 - CVE-2018-11362 Out-of-bounds Read in packet-ldss.c
- Resolves: #1612146 - CVE-2018-14340 Multiple dissectors could crash
- Resolves: #1613032 - CVE-2018-14341 DICOM dissector infinite loop
- Resolves: #1613034 - CVE-2018-14368 Bazaar dissector infinite loop
- Resolves: #1633330 - CVE-2018-16057 Radiotap dissector crash
- Resolves: #1660148 - CVE-2018-19622 Infinite loop in the MMSE dissector


author: Michal Ruprich <mruprich@redhat.com> - 1.10.14-21
changelog:
- Related: #1254543 - removing endian shift in packetlogger because it failed to recognize bluetooth hci packet


author: Petr Pisar <ppisar@redhat.com> - 3.0-18
changelog:
- wnb requires a font to start
- Move Tk browser to sub-package wordnet-browser
- Move alternative manual pages to wordnet-doc package
- Do not package INSTALL instructions and correct URL
- Modernize spec file


author: Karel Zak <kzak@redhat.com> - 3.0-13
changelog:
- fix #428582 - linux.words contains misspelled word "flourescent"
- fix #440146 - misspelled word in /usr/share/dict/words (architecure)


author: Karel Zak <kzak@redhat.com> - 3.0-14
changelog:
- fix #457309 - contains both 'unnecessary' and 'unneccesary'
- fix #470921 -"Barack" and "Obama" are not in /usr/share/dict/words
- update spec file (#226542 - Merge Review)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-5
changelog:
- macsec: Fix segmentation fault in case macsec.ko is not loaded (rh #1440646)
- nl80211: Fix race condition in detecting MAC change (rh #1447073)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-7
changelog:
- avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
  CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,
  CVE-2017-13087, CVE-2017-13088)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-10
changelog:
- Fix memory leak when macsec MKA/PSK is used (rh #1500442)
- Fix authentication failure when the MAC is updated externally (rh #1490885)
- Let the kernel discard EAPOL if packet type is PACKET_OTHERHOST (rh #1434434)
- Don't restart wpa_supplicant.service on package upgrade (rh #1505404)
- Don't own a directory in /run/ (rh #1507919)


author: Peng Wu <pwu@redhat.com> - 0.2.0-0.3.beta
changelog:
- get rid of binding="same", fixes [rhbz#578050] (New: lang-specific overrides rule doesn't work as expected).


author: Peng Wu <pwu@redhat.com> - 0.2.0-0.4.beta
changelog:
- Improves Simplified Chinese and Traditional Chinese fonts.
  In order to keep the WenQuanYi Zen Hei as default Simplified Chinese font,
  the fontconfig file of this WenQuanYi Micro Hei font is removed.


author: Roland Grunberg <rgrunber@redhat.com> 0:0.5.2-1
changelog:
- Update to 0.5.2.
- Remove xmldb-api due to deprecation.
- Fix ws-jaxme-ant-scripts.patch to apply cleanly.


author: Gerard Ryan <galileo@fedoraproject.org> - 0:1.6.2-5
changelog:
- Fix file encoding for wsdl4j-MANIFEST.MF
- Update Bundle-Version in OSGi manifest
- Fix installation of jars in specfile
- Clean up specfile - remove javadoc dir version; remove clean section


author: Ondrej Vasik <ovasik@redhat.com> - 1.61-2
changelog:
- Merge review cleanup (#226546), comment patches, license
  to LGPLv2+, specify names in files section...


author: Parag Nemade <paragn AT fedoraproject DOT org> - 3.3.12ga11-5
changelog:
- Remove vendor tag from desktop file as per https://fedorahosted.org/fesco/ticket/1077
- Cleanup spec as per recently changed packaging guidelines


author: Samantha N. Bueno <sbueno[at]redhat.com> - 3.3.12ga12-1
changelog:
- updated to 3.3.12ga12
- fixes CVE-2012-5662 (#889373, #924228)
- add support for aarch64 to build system (#926737)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:2.7.1-15
changelog:
- Add NOTICE.txt file to subpackages
- Remove bundled sources of other packages used to build javadocs


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:2.7.1-17
changelog:
- Remove classpaths from manifests, resolves: rhbz#575635
- Remove jlex from classpath
- Fix source URL to archive.apache.org
- Don't mix spaces and tabs in spec file
- Fix end-of-line encoding of some documentation files


author: Thomas Moschny <thomas.moschny@gmx.de> - 0.3.8-2
changelog:
- Specfile cleanups as suggested in the review.
- Remove unneeded BR on pkgconfig.
- Remove unneeded chrpath call.


author: Debarshi Ray <rishi@fedoraproject.org> - 1:2.8.8-19
changelog:
- Use XDG_CONFIG_HOME instead of home for config files
  (http://sourceforge.net/p/xchat/bugs/1506/)
- Use name and generic name correctly in desktop file
  (http://sourceforge.net/p/xchat/bugs/1397/)


author: Pavel Raiskup <praiskup@redhat.com> - 3.0.7-2
changelog:
- really remove the gcc-warning patch & remove old Makefile from git
- s/Url/URL/, for both fixes thanks to pshiffer


author: Kalev Lember <kalevlember@gmail.com> - 0.9-1
changelog:
- Update to 0.9
- Adjust BuildRequires to build with gtk3
- Drop lxde patch, merged upstream
- Validate the desktop file


author: Rex Dieter <rdieter@fedoraproject.org> 1.1.0-0.10.20110714git
changelog:
- fix gnome-screensaver detection bogosity (#702540,#736159)
- xdg-open: x-www-browser: command not found (#755553)
- drop htmlview hackage


author: Kalev Lember <kalev@smartlink.ee> - 3.1.1-1
changelog:
- Update to 3.1.1
- Dropped CVE-2009-1885 patch.
- Use dos2unix -k instead of unrecognized option -U
- Removed the multilib conflict workaround as Xerces_autoconf_config.hpp
  no longer contains the conflicting XERCES_SIZEOF_LONG define.


author: Eric Sandeen <sandeen@redhat.com> 3.1.3-2
changelog:
- Preserve xattrs on multi-part stream restores (#1034014)
- Prevent segfault on multi-part stream restores (#1034015)


author: Eric Sandeen <sandeen@redhat.com> 3.1.7-1
changelog:
- Rebase to build against current RHEL7 xfsprogs headers
- Fix race condition between lseek() and read()/write() (#1086532)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-13
changelog:
- mkfs.xfs: clarify ftype defaults in manpage (#1488124)
- mkfs.xfs: allow specification of 0 data stripe width (#1444166)
- mkfs.xfs: Don't stagger AG for a single disk (#1492552)
- xfs_db: xfs_db-update-buffer-size-when-new-type-is-set (#1458670)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-16
changelog:
- xfs_db: fix the source command when passed as -c option (#1510279)
- xfs_metadump: allow much larger extent counts (#1502927)
- xfs_db: fix crash when field list selector has garbage (#1532271)
- mkfs.xfs, others: don't stat non-block devices on startup (#1573974)
- Update project URLs throughout the pkg, code and docs (#1550798)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-20
changelog:
- xfs_quota: fix errors if project flag is not set on regular files (#1663502)
- xfs_repair: initialize non-leaf finobt blocks with correct magic (#1670154)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-21
changelog:
- mkfs.xfs: make device discard interruptable, print notice (#1769786)
- xfs_io: remove +/-x flag from chattr, not supported in kernel (#1630112)
- xfs_metadump: fix symlink handling (#1693138)


author: Ismael Olea <ismael@olea.org> 20051222-1
changelog:
- updating to last version of sample-xsl-xhtml2fo.zip
- fixing spec for contributing to Fedora and rpmlinting with 0.82


author: Jan Synáček <jsynacek@redhat.com> - 2:2.3.15-13
changelog:
- modify the xinetd man page to make it more clear on what happens to services on xinetd reload (#1147538)


author: Peter Hutterer <peter.hutterer@redhat.com> 2.24-1
changelog:
- xkeyboard-config 2.24 (#1564615)
- Revert the high-keycode patches to avoid conflicts with xkbcomp < 1.4


author: Mat Booth <fedora@matbooth.co.uk> - 1.0-0.5.b3_xalan2.svn313293
changelog:
- Link to local java API docs properly and fix requires on javadoc package.
- Build with source and target levels of 1.5 so we don't have to require 1.6.


author: Alexander Kurtakov <akurtako@redhat.com> 1:3.1.3-5
changelog:
- Remove javax.xml.bind from osgi imports - it's part of the JVM now.
- Drop the ws-jaxme dependency for the same reason.


author: Simo Sorce <simo@redhat.com> - 1.2.20-1
changelog:
- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.24-1
changelog:
- new release 0.0.24, basic support for docbook->epub
  conversion, use backend extensions by default
  (--noextensions) to disable it


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 1.5-1
changelog:
- Address review commentary https://bugzilla.redhat.com/show_bug.cgi?id=226569
- Update to 1.5, solving license issue.  This adds a few new files and requires
  a pkgconfig dependency.
- Add dependency on xml-common to fix unowned directory issue. 
- Remove some bits (buildroot tag and cleaning) no longer required in Fedora.


author: Peter Hutterer <peter.hutterer@redhat.com> 7.7-3
changelog:
- luit 1.1.1
- oclock 1.0.3
- xclock 1.0.6
- xbiff 1.0.3
- xpr 1.0.4
- xcursorgen 1.0.5
- xclipboard 1.1.2
- xfontsel 1.0.4
- xfd 1.1.1
- xlogo 1.0.4
- xvidtune 1.0.3


author: Ben Crocker <bcrocker@redhat.com> - 7.7-7
changelog:
- Resolves: #1401684
- (Rebase for RHEL 7.4)
- Update the following tarballs:
- x11perf	1.5.4	=>	1.6.0
- xclipboard	1.1.2	=>	1.1.3
- xclock	1.0.6	=>	1.0.7
- xconsole	1.0.5	=>	1.0.6
- xcursorgen	1.0.5	=>	1.0.6
- xfd		1.1.1	=>	1.1.2
- xfontsel	1.0.4	=>	1.0.5
- xload		1.1.1	=>	1.1.2
- xmag		1.0.5	=>	1.0.6
- xwd		1.0.4	=>	1.0.6
- xwud		1.0.3	=>	1.0.4


author: Hans de Goede <hdegoede@redhat.com> 7.7.1-1
changelog:
- Update to latest git, this is the equivalent of 7.7.1 + fixes for use
  with xserver-1.19 (rhbz#1325613)
- Rebuild against xserver-1.19


author: Peter Hutterer <peter.hutterer@redhat.com> 0.22.0-3
changelog:
- Provide xorg-x11-drv-synaptics. The actual content is now provided by
  xorg-x11-drv-synaptics-legacy (#1394836). For details, see
  https://fedoraproject.org/wiki/Changes/RetireSynapticsDriver


author: Peter Hutterer <peter.hutterer@redhat.com> 0.23.0-2
changelog:
- Ignore LED updates for disabled devices, avoids a null-pointer dereference
  when an AccessX timeout is set


author: Peter Hutterer <peter.hutterer@redhat.com> 0.25.0-2
changelog:
- Don't provide xorg-x11-drv-synaptics (#1413811)
- Don't reassign libinput to wacom touchpads, that's left to the user
- Don't assign to wacom tablets, tablets behave differently on RHEL7.4


author: Hans de Goede <hdegoede@redhat.com> - 1.0.12-4
changelog:
- Fix the crtc not being turned off, causing the dgpu to not suspend,
  after using a dgpu attached output


author: Lyude Paul <lyude@redhat.com> 1.0.13-2
changelog:
- nouveau-1.0.13-fix-pageflipping-with-atomic.patch:
  Fix broken pageflipping with RHEL 7.4 DRM backport kernel (#1428214)


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.1.1-16
changelog:
- Fix glitches when restarting X server
  Resolves: rhbz#1102175
- Fix restarting X server
  Resolves: rhbz#1185807


author: Christophe Fergeau <cfergeau@redhat.com> 0.1.1-17
changelog:
- Fix freeze in xfig when entering space character
  Resolves: rhbz#1221909
- Fix memory leak
  Resolves: rhbz#1222038
- Fix cursor leak causing a crash when running RHEL6 anaconda in a VM
  Resolves: rhbz#1222040


author: Victor Toso <victortoso@redhat.com> - 0.1.5-5
changelog:
- Fix crash due uninitialized pointer
  Resolves: rhbz#1690453
- Call LeaveVt on shutdown to avoid racy situations
  Resolves: rhbz#1640918


author: Peter Hutterer <peter.hutterer@redhat.com> 0.34.2-2
changelog:
- Add Pressure2K option for backwards-compatibility with applications that
  hardcode the previous pressure range (#1457024)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.34.2-3
changelog:
- Fix hang after unplugging a device (#1496650)
- Correct device flags for some Cintiqs and Intuos pros (#1496659)


author: Peter Hutterer <peter.hutterer@redhat.com> 1:7.5-14
changelog:
- mkfontscale 1.1.0
- mkfontdir 1.0.7
- bdftopcf 1.0.4
- Document mkfontscale's -u/-U in the man page (#948841)


author: Peter Hutterer <peter.hutterer@redhat.com> 7.2-11
changelog:
- Require xorg-x11-font-utils >= 7.2-11 for font-utils 1.1.0
- Fix bashism in spec file (&>)
- Remove perl hack for DEFAULT_FONTS_DIR, fixed upstream 
- Remove perl and autoconf requirement.
- Create %ghost files {misc|705dpi|...}/fonts.scale.
- Drop fontdir alias patches
- Update a few fonts (well, all of them)
    - encodings-1.0.3
    - font-adobe-100dpi-1.0.1
    - font-adobe-75dpi-1.0.1
    - font-adobe-utopia-100dpi-1.0.2
    - font-adobe-utopia-75dpi-1.0.2
    - font-adobe-utopia-type1-1.0.2
    - font-alias-1.0.2
    - font-arabic-misc-1.0.1
    - font-bh-100dpi-1.0.1
    - font-bh-75dpi-1.0.1
    - font-bh-lucidatypewriter-100dpi-1.0.1
    - font-bh-lucidatypewriter-75dpi-1.0.1
    - font-bitstream-100dpi-1.0.1
    - font-bitstream-75dpi-1.0.1
    - font-bitstream-type1-1.0.1
    - font-cronyx-cyrillic-1.0.1
    - font-cursor-misc-1.0.1
    - font-daewoo-misc-1.0.1
    - font-dec-misc-1.0.1
    - font-isas-misc-1.0.1
    - font-jis-misc-1.0.1
    - font-micro-misc-1.0.1
    - font-misc-cyrillic-1.0.1
    - font-misc-ethiopic-1.0.1
    - font-misc-misc-1.1.0
    - font-mutt-misc-1.0.1
    - font-schumacher-misc-1.1.0
    - font-screen-cyrillic-1.0.2
    - font-sony-misc-1.0.1
    - font-sun-misc-1.0.1
    - font-winitzki-cyrillic-1.0.1
    - font-xfree86-type1-1.0.2


author: Peter Hutterer <peter.hutterer@redhat.com> 7.5-12
changelog:
- Update sources for latest tarballs, some changes got lost before the commit
- require gettext-devel for AM_ICONV (now required by xwininfo)


author: Adam Jackson <ajax@redhat.com> - 7.5-21
changelog:
- Sync with F25: xdpyinfo 1.3.2, xev 1.2.2, xlsatoms 1.1.2, xlsclients 1.1.3,
  xlsfonts 1.0.5, xvinfo 1.1.3


author: Hans de Goede <hdegoede@redhat.com> - 1.3.2-14
changelog:
- Xclients: only try to start gnome classic session if installed
- Resolves: rhbz#1078948
- startx: Only specify vt argument automatically when run from a vt
- Resolves: rhbz#1083188


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-1
changelog:
- xinit 1.3.4
- Drop xorg-x11-xinit-1.3.2-systemd-logind.patch (included upstream in 1.3.4)
- Add patches from Fedora to fix automatically finding a free display-number
- Resolves: rhbz#1194894


author: Peter Hutterer <peter.hutterer@redhat.com> 7.7-4
changelog:
- xkbcomp: Fix generation of XKB directory listing, missing reset on file
  handler caused parse errors and incomplete directory listings


author: Pavel Cahyna <pcahyna@redhat.com> - 1.4.8-3
changelog:
- Disable libjte to make the build more similar to the libisofs builds
- Remove unneeded files from sources


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.1.3.8-4
changelog:
- Fix pom filenames (Resolves rhbz#655829)
- Changes according to new guidelines (versionless jars)
- Fix few packaging problems (post/postun deps)


author: Nils Philippsen <nils@redhat.com> - 0.998-21
changelog:
- don't dereference NULL preview objects when quitting (#963696)
- fix vendor tag logic in a prettier way


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.12.3-1
changelog:
- update to 0.12.3
- drop upstreamed immodule patch
- rewrite Net/ThemeName handling: set it based on .gtkrc-2.0-kde4 (kcm-gtk)


author: Pavel Raiskup <praiskup@redhat.com> - 5.1.2-5alpha
changelog:
- fix manual page inconsistencies with help output (private #948533)
- enable/fix the 'xzgrep -h' (private #850898)


author: Mikolaj Izdebski <mizdebsk@redhat.com> 1.0-2
changelog:
- Fix issues found during package review
- Include missing COPYING files.
- Add missing RPM group.
- Comment on touching package-list.


author: Daniel P. Berrange <berrange@redhat.com> - 2.0.4-1
changelog:
- Update to 2.0.4 release (rhbz #845777)
- Fix License tag to reflect change in 2.0.0 series from BSD to ISC


author: Honza Horak <hhorak@redhat.com> - 3:1.37.1-5
changelog:
- Remove SysV init conversion and systemd macros compatible code
- Require systemd instead systemd-units
- Remove systemd-sysv


author: Petr Kubat <pkubat@redhat.com> - 3:1.37.1-8
changelog:
- Do not restart ypbind when domain is unchanged (#1301708)
- Load ypbind.service before nss-user-lookup.target (#1217435)


author: Honza Horak <hhorak@redhat.com> - 2.31-4
changelog:
- Remove systemd-units and systemd-sysv requirements
- Clean-up SysV init conversion code
- Clean-up systemd preset macros compatibility code
- Remove fedora-releated stuff for maps upgrading


author: Matej Mužila <mmuzila@redhat.com> - 2.31-9
changelog:
- Do not update NIS map when master's version is older
- Open correct _temporary_ db with tokyocabinet
- Resolves #1305137, #1331882


author: Michal Domonkos <mdomonko@redhat.com> - 3.4.3-162
changelog:
- downloadonly: unlink .tmp files on ctrl-c
- Resolves: bug#1410234
- Fix calculation of uncleaned disk space after "yum clean all"
- Resolves: bug#1645173
- Speed up depsolving in Anaconda for large transactions
- Resolves: bug#1600383


author: Michal Domonkos <mdomonko@redhat.com> - 3.4.3-164
changelog:
- Do not reinstall local installonly packages
- Resolves: bug#1689025
- Fix traceback when every provider conflicts with requiring package
- Resolves: bug#1713649
- Gracefully handle empty RPM error list during transaction test
- Resolves: bug#1690376
- Gracefully handle self-conflicts during reinstall
- Resolves: bug#1564747
- yumRepo: migrate more prints to logging
- Resolves: bug#1510495


author: Michal Domonkos <mdomonko@redhat.com> - 3.4.3-166
changelog:
- docs: yum command argument is not optional
- Resolves: bug#1573154
- updateinfo: suggest command for --verbose if bad duplicate
- Resolves: bug#1645618


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.4.3-168
changelog:
- Fix typo sig_typ -> sig_type
- Resolves: bug#1778763
- Check for revoked subkeys before checking the signature
- Resolves: bug#1778784


author: CentOS Sources <bugs@centos.org> - 3.4.3-168.el7.centos
changelog:
- CentOS yum config
-  use the CentOS bug tracker url
-  retain installonly limit of 5
-  ensure distrover is always from centos-release
- Make yum require yum-plugin-fastestmirror


author: Michal Domonkos <mdomonko@redhat.com> - 1.1.31-47
changelog:
- repotrack: add --repofrompath option
- Resolves: bug#1506205
- reposync: check for .. in remote paths
- Resolves: bug#1552328


author: Michal Domonkos <mdomonko@redhat.com> - 1.1.31-50
changelog:
- yum-config-manager: additional fixes for --add-repo
- Related: bug#1493489
- repotrack: print error instead of traceback on unavailable --repofrompath
- Related: bug#1506205
- versionlock: note default value of show_hint in man page
- Related: bug#1497351


author: Michal Domonkos <mdomonko@redhat.com> - 1.1.31-53
changelog:
- repotrack: fix --repofrompath for non-root users
- Related: bug#1659588
- repotrack: copy local packages
- Related: bug#1463723
- needs-restarting: clarify exit code in help and man page
- Related: bug#1630197


author: Parag Nemade <pnemade AT redhat DOT com> - 0.4.2-5
changelog:
- Resolves:rh#1192870 - Fix langlist when installed_langpacks not available
- Resolves:rh#1263241 - Add parser for Release_Notes packages
- Resolves:rh#1251388 - Add parser for libreoffice langpacks


