# changelog

author: Kristian Høgsberg <krh@redhat.com> 0.5.0-2
changelog:
  - Spec file update from Brian Pepple <bdpepple@ameritech.net> (#123527):
    - Drop Requires for gtk2 & poppler, devel soname pulls these in.
    - Disable GConf schema install in install section.
    - Add BR for gnome-doc-utils, nautilus & libXt-devel.
    - Use smp_mflags.
    - Drop BR for desktop-file-utils,gcc & gcc-c++.
    - Add URL & full source.
    - Use more macros.
    - Fix ownership of some directories.
    - Drop depreciated prereq, and use requires.
    - Use fedora extras preferred buildroot.
    - Various formatting changes.


author: Kristian Høgsberg <krh@redhat.com> 0.5.3-1
changelog:
  - Bump poppler_version to 0.5.2.
  - Package icons and add %post and %postun script to update icon cache.


author: Matthias Clasen <mclasen@redhat.com> - 2.20.1-5
changelog:
  - Fix a problem in the tiff patch
  - Turn off the dvi backend for now, since the tetex kpathsea 
    gives linker errors on x86_64


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.27.1-2
changelog:
  - Include /usr/include/evince directory (#483306).
  - Don't run /sbin/ldconfig in post scriptlet (no shared libs in that pkg).
  - Let -libs post/postun run /sbin/ldconfig directly.


author: Marek Kasik <mkasik@redhat.com> - 2.29.91-2
changelog:
  - Use Type 1 fonts when viewing DVI files
  - Use correct name when the font is mapped
  - Related: #562648


author: Marek Kasik <mkasik@redhat.com> - 2.30.0-6
changelog:
  - rpmlint related changes:
  -   Don't define RPATH
  -   Remove static libs
  -   Avoid expansion of some macros in changelog


author: Marek Kasik <mkasik@redhat.com> - 2.30.1-2
changelog:
  - Make sure dot_dir exists before creating last_settings file
  - backported from upstream
  - Related: #586343


author: Marek Kasik <mkasik@redhat.com> - 2.31.3-5.20100621git
changelog:
  - Don't try to install evince.schemas file (it doesn't exist anymore)
  - Remove unused patches
  - Resolves: #595217


author: Marek Kasik <mkasik@redhat.com> - 2.31.5-3
changelog:
  - Move %doc files to evince-libs subpackage
  -   see Subpackage Licensing in Packaging:LicensingGuidelines


author: Marek Kasik <mkasik@redhat.com> - 2.31.5-4
changelog:
  - Restore io mode when returning from opening of synctex file
  - Patch by David Tardon
  - Resolves: #613916


author: Marek Kasik <mkasik@redhat.com> - 2.31.5-5
changelog:
  - Don't sigsegv when a page is manually entered
  - Remove 0001-pdf-Fix-build-when-text_layout-is-not-available.patch


author: Marek Kasik <mkasik@redhat.com> - 2.91.1-1
changelog:
  - Update to 2.91.1
  - Remove evince-2.91.0-introspection-build-fix.patch
  - Add evince-2.91.1-requires.patch


author: Marek Kasik <mkasik@redhat.com> - 2.91.5-2
changelog:
  - Remove evince-CVE-2010-2640_CVE-2010-2641_CVE-2010-2642_CVE-2010-2643.patch
  - Change the way thumbnailer is integrated with system


author: Marek Kasik <mkasik@redhat.com> - 3.3.5-1
changelog:
  - Update to 3.3.5
  - Remove evince-t1font-mapping.patch (committed upstream)
  - Solve build issues by running autogen.sh


author: Marek Kasik <mkasik@redhat.com> - 3.8.0-2
changelog:
  - Don't remove the NoDisplay key from evince.desktop because
  - it has been already removed
  - Related: gnome#634245


author: Marek Kasik <mkasik@redhat.com> - 3.14.1-6
changelog:
  - Scroll to page on which is the search result selected by user
  - when not in continuous mode.
  - Resolves: #1162254


author: Marek Kasik <mkasik@redhat.com> - 3.15.4-2
changelog:
  - Revert fix of centering of documents when printing with a manual scale.
  - This caused problems with printing of landscape documents.
  - Resolves: #1173832


author: David King <amigadave@amigadave.com> - 3.17.4-1
changelog:
  - Update to 3.17.4
  - Update URL
  - Use pkgconfig for BuildRequires
  - Use license for COPYING
  - Update man page glob in files section


author: Florian Weimer <fweimer@redhat.com> - 3.25.4-2
changelog:
  - Rebuild with binutils fix for ppc64le (#1475636)
  - Fix s390x build issue related to MY_CPU_BE preprocessor conditional


author: Marek Kasik <mkasik@redhat.com> - 3.28.2-3
changelog:
  - Change build requirement of kpathsea-devel to texlive-lib-devel
  - Require gcc and gcc-c++
  - Resolves: #1600511


author: Marek Kasik <mkasik@redhat.com> - 3.29.90-1
changelog:
  - Update to 3.29.90
  - Remove unneeded patches
  - Handle renamed evince* files
  - Don't list missing README


author: Marek Kasik <mkasik@redhat.com> - 3.30.0-1
changelog:
  - Update to 3.30.0
  - Remove browser-plugin, it was disabled by default
  - by upstream (see upstream issue #968)


author: Felipe Borges <feborges@redhat.com> - 3.38.0-2
changelog:
  - Split evince-thumbnailer into its own package
  - See https://github.com/fedora-silverblue/issue-tracker/issues/98


author: Kalev Lember <klember@redhat.com> - 40.1-1
changelog:
  - Update to 40.1
  - Remove various minimum version requires
  - Remove old obsoletes
  - Don't use ldconfig_scriptlets
  - Filter private library provides


author: Felipe Borges <feborges@redhat.com> - 40.1-3
changelog:
  - Split evince-previewer into its own package
  - See https://github.com/fedora-silverblue/issue-tracker/issues/122


author: David Malcolm <dmalcolm@redhat.com> - 0.0.99-1
changelog:
  - update from 0.0.98 to 0.0.99
  - increased libsoup requirement to 2.2.0 to match configuration script


author: David Malcolm <dmalcolm@redhat.com> - 1.0.0-2
changelog:
  - fixed various warnings in the calendar code 
    (filed upstream here: http://bugzilla.ximian.com/show_bug.cgi?id=66383)


author: David Malcolm <dmalcolm@redhat.com> - 1.0.1-1
changelog:
  - update from 1.0.0 to 1.0.1
  - removed patch that fixed warnings in calendar code (now in upstream tarball)


author: David Malcolm <dmalcolm@redhat.com> - 1.0.2-2
changelog:
  - added patch to fix build on x86_64 (had multiple definitions of mutex code in libdb/dbinc.mutex.h)


author: David Malcolm <dmalcolm@redhat.com> - 1.0.2-3
changelog:
  - added workaround for a backend leak that causes the "contacts" calendar 
  backend to hold open an EBook for the local contacts (filed upstream at:
  http://bugzilla.ximian.com/show_bug.cgi?id=68533 ); this was causing e-d-s to
  never lose its last addressbook, and hence never quit.  We workaround this by
  detecting this condition and exiting when it occurs, fixing bug #134851 and #134849.


author: David Malcolm <dmalcolm@redhat.com> - 1.0.2-4
changelog:
  - Added patch to fix usage of GINT_TO_POINTER/GPOINTER_TO_INT for calendar backend GType hash table, breaking on ia64  (#136914)


author: David Malcolm <dmalcolm@redhat.com> - 1.0.2-5
changelog:
  - Added fix for #141283 (upstream bugzilla XB 59904), a backported calendar 
  optimisation patch posted to upstream development mailing list here:
  http://lists.ximian.com/archives/public/evolution-patches/2004-November/008139.html


author: David Malcolm <dmalcolm@redhat.com> - 1.0.2-6
changelog:
  - Amortize writes to a local cache of a webcal calendar, fixing further aspect of #141283 (upstream bugzilla #70267), as posted to mailing list here:
  http://lists.ximian.com/archives/public/evolution-patches/2004-December/008338.html
  (The groupwise part of that patch did not cleanly apply, so I removed it).


author: David Malcolm <dmalcolm@redhat.com> - 1.0.3-1
changelog:
  - update from upstream 1.0.2 to 1.0.3:
    * Address Book
      - prevent e_book_commit_contact from crashing on multiple calls (Diego Gonzalez)
      - prevent file backend from crashing if uid of vcard is NULL (Diego Gonzalez)

    * Calendar
              - fix libical build for automake 1.9 (Rodney)
      - fix putenv usage for portability (Julio M. Merino Vidal)

    * Updated Translations:
      - sv (Christian Rose)

  - Removed patches to fix build on x86_64 and calendar optimisation for XB59004 as these are in the upstream tarball


author: David Malcolm <dmalcolm@redhat.com> - 1.0.3-2
changelog:
  - fixed packaging of translation files to reflect upstream change to GETTEXT_PACKAGE being evolution-data-server-1.0 rather than -1.5


author: David Malcolm <dmalcolm@redhat.com> - 1.1.4.1-1
changelog:
  - Update from 1.0.3 to 1.1.4.1
  - Updated eds_major from 1.0 to 1.2; fixed translation search path.
  - Removed 64-bit patch for calendar backend hash table; upstream now stores pointers to ECalBackendFactory, rather than GType
  - Removed calendar optimisation patch for part of part of bug #141283 as this is now in the upstream tarball
  - Added /usr/lib/evolution-data-server-%{eds_major} to cover the extensions, plus the camel code now in e-d-s, rather than evolution
  - Added /usr/share/pixmaps/evolution-data-server-%{eds_major} to cover the category pixmaps
  - Camel code from evolution is now in evolution-data-server:
    - Added camel-index-control and camel-lock-helper to packaged files
    - Added mozilla dependency code from the evolution package
    - Ditto for LDAP
    - Ditto for krb5
    - Ditto for NNTP support handling
    - Ditto for --enable-file-locking and --enable-dot-locking
  - Added requirements on libbonobo, libgnomeui, gnome-vfs2, GConf2, libglade2
  - Updated libsoup requirement from 2.2.1 to 2.2.2
  - Enabled gtk-doc


author: David Malcolm <dmalcolm@redhat.com> - 1.1.6-4
changelog:
  - added macro use_gtk_doc; added missing BuildRequires on gtk-doc; enabled gtk-doc generation on all platforms (had been disabled on ia64)


author: David Malcolm <dmalcolm@redhat.com> - 1.2.0-3
changelog:
  - Removed explicit run-time spec-file requirement on mozilla.
    The Mozilla NSS API/ABI stabilised by version 1.7.3
    The libraries are always located in the libdir
    However, the headers are in /usr/include/mozilla-%{mozilla_build_version}
    and so they move each time the mozilla version changes.
    So we no longer have an explicit mozilla run-time requirement in the specfile; 
    a requirement on the appropriate NSS and NSPR .so files is automagically generated on build.
    We have an explicit, exact build-time version, so that we can find the headers (without
    invoking an RPM query from the spec file; to do so is considered bad practice)
  - Introduced mozilla_build_version, to replace mozilla_version
  - Set mozilla_build_version to 1.7.6 to reflect current state of tree


author: David Malcolm <dmalcolm@redhat.com> - 1.2.2-3
changelog:
  - bumped libsoup requirement to 2.2.3; removed mozilla_build_version, using
    pkg-config instead for locating NSPRS and NSS headers/libraries (#158085)


author: David Malcolm <dmalcolm@redhat.com> - 1.3.5-1
changelog:
  - 1.3.5
  - Split eds_major (was 1.2) into eds_base_version (1.4) and eds_api_version
    (1.2) to correspond to BASE_VERSION and API_VERSION in configure.in; updated
    rest of specfile accordingly.
  - Removed upstreamed patch: 
    evolution-data-server-1.2.0-cope-with-a-macro-called-read.patch


author: David Malcolm <dmalcolm@redhat.com> - 1.3.5-2
changelog:
  - Added patch to use nspr rather than mozilla-nspr when doing pkg-config tests
    (Patch5: evolution-data-server-1.3.5-nspr_fix.patch)


author: David Malcolm <dmalcolm@redhat.com> - 1.3.8-1
changelog:
  - 1.3.8
  - Add -Werror-implicit-function-declaration to CFLAGS, to avoid 64-bit issues
    and add patch to fix these where they occur (patch 102)


author: David Malcolm <dmalcolm@redhat.com> - 1.3.8-4
changelog:
  - Remove -Werror-implicit-function-declaration from CFLAGS; this broke the
    configuration test for fast mutexes in the internal copy of libdb, and hence
    broke access to local addressbooks (#166742)
  - Introduce static_ldap macro; use it to link to static evolution-openldap 
    library, containing NTLM support for LDAP binds (needed by Exchange support)


author: David Malcolm <dmalcolm@redhat.com> - 1.3.8-5
changelog:
  - Add -Werror-implicit-function-declaration back to CFLAGS at the make stage, 
    after the configure, to spot 64-bit problems whilst avoiding breaking 
    configuration tests; expand patch 102 to avoid this breaking libdb's CFLAGS


author: David Malcolm <dmalcolm@redhat.com> - 1.4.0-1
changelog:
  - 1.4.0
  - Removed evolution-data-server-1.3.8-fix-libical-vsnprintf.c.patch; a version
    of this is now upstream (was patch 103, added in 1.3.8-2)


author: David Malcolm <dmalcolm@redhat.com> - 1.4.1-2
changelog:
  - Updated patch 102 (fix-implicit-function-declarations) to include fix for 
    http calendar backend (thanks to Peter Robinson)


author: David Malcolm <dmalcolm@redhat.com> - 1.4.1.1-2
changelog:
  - Updated license field to reflect change from GPL to LGPL
  - Remove all static libraries, not just those in /usr/lib; avoid listing libdir
    subdirectory so that we can be more explicit about the package payload (bug


author: David Malcolm <dmalcolm@redhat.com> - 1.5.3-2
changelog:
  - Update specfile and patch 5 (evolution-data-server-1.3.5-nspr_fix.patch) to
    use nss rather than mozilla-nss throughout


author: David Malcolm <dmalcolm@redhat.com> - 1.5.4-2
changelog:
  - added patch from David Woodhouse to validate reverse DNS domain before using 
    in SMTP greeting (patch 103, #151121)


author: David Malcolm <dmalcolm@redhat.com> - 1.5.4-3
changelog:
  - added patch to make the "imap4"/"IMAP4rev1" backend optional; disable it in 
    our packages; re-run automake since we have touched various Makefile.am 
    files; rerun intltoolize to avoid incompatibilities between tarball copy of
    intltool-merge.in and intltool.m4 in intltool package (@EXPANDED_LIBDIR@
    renamed to @INTLTOOL_LIBDIR@) (#167574)
  - explicitly list the camel providers and e-d-s extension files in the spec file


author: David Malcolm <dmalcolm@redhat.com> - 1.5.4-4
changelog:
  - updated patch 300 to remove usage of GNOME_COMPILE_WARNINGS from configure.in
    (since gnome-common might not be available when we rerun the autotools)


author: Matthew Barnes <mbarnes@redhat.com> - 1.7.1-1
changelog:
  - Update to 1.7.1
  - Bump eds_base_version from 1.6 to 1.8.
  - Disable evolution-data-server-1.2.0-validatehelo.patch (accepted upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.7.1-2
changelog:
  - Add temporary patch evolution-data-server-1.7.1-nss_auto_detect.patch
    to help `configure' detect the SSL modules (closes #191567).


author: Matthew Barnes <mbarnes@redhat.com> - 1.7.4-2
changelog:
  - Dynamically link to BDB.
  - Add patch to make --with-db configure option work.
  - Add Requires for db4 and BuildRequires for db4-devel.
  - Clean up spec file, renumber patches.


author: Matthew Barnes <mbarnes@redhat.com> - 1.7.90.1-1
changelog:
  - Update to 1.7.90.1
  - Add patch for Gnome.org bug #348725.
  - Remove patch to make --with-db configure option work (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.7.4-3
changelog:
  - Revert to version 1.7.4 to prevent API/ABI breakage.
  - Add back patch to make --with-libdb configure option work.


author: Matthew Barnes <mbarnes@redhat.com> - 1.7.4-5
changelog:
  - Remove patches for Gnome.org bug #309079 (rejected upstream).
  - One of these patches was causing RH bug #167157.


author: Matthew Barnes <mbarnes@redhat.com> - 1.8.0-1.fc6
changelog:
  - Update to 1.8.0
  - Remove evolution-data-server-1.5.4-make_imap4_optional.patch (fixed upstream)
    and save remaining hunk as evolution-data-server-1.8.0-no-gnome-common.patch.
  - Remove patch for RH bug #202329 (fixed upstream).
  - Remove patch for Gnome.org bug #349847 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.8.1-1.fc7
changelog:
  - Update to 1.8.1
  - Use stricter build settings.
  - Add patch for Gnome.org bug #360240 ("unused variable" warnings).
  - Add patch for Gnome.org bug #360619 ("incompatible pointer type" warnings).
  - Add patch for Gnome.org bug #362638 (deprecate EThread).
  - Remove patch for RH bug #198935 (fixed upstream).
  - Remove patch for RH bug #205187 (fixed upstream).
  - Remove patch for Gnome.org bug #353478 (fixed upstream).
  - Remove patch for Gnome.org bug #356828 (fixed upstream).
  - Remove patch for Gnome.org bug #357666 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.9.1-2.fc7
changelog:
  - Update to 1.9.1
  - Add patch for Gnome.org bug #356177 (deprecate EMutex).
  - Add patch for Gnome.org bug #363695 (deprecate EMemPool, EStrv, EPoolv).
  - Remove Jerusalem.ics timezone file (fixed upstream).
  - Remove patch for RH bug #198935 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.9.1-4.fc7
changelog:
  - Add patch for Gnome.org bug #369168, #369259, and #369261
    (misc camel bugs reported by Hans Petter Jansson).


author: Matthew Barnes <mbarnes@redhat.com> - 1.9.2-1.fc7
changelog:
  - Update to 1.9.2
  - Remove patch for Gnome.org bugs #369168, #369259, and #369261
    (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.9.4-1.fc7
changelog:
  - Update to 1.9.4
  - Add patch for GNOME bug #373117 (storing color settings).
  - Add patch for GNOME bug #387638 (implicit function declaration).


author: Matthew Barnes <mbarnes@redhat.com> - 1.9.5-1.fc7
changelog:
  - Update to 1.9.5
  - Remove patch for GNOME bug #362638 (fixed upstream).
  - Remove patch for GNOME bug #387638 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.9.5-4.fc7
changelog:
  - Revise evolution-data-server-1.8.0-no-gnome-common.patch so that we no
    longer have to run autoconf before building.


author: Matthew Barnes <mbarnes@redhat.com> - 1.9.91-1.fc7
changelog:
  - Update to 1.9.91
  - Add flag to disable deprecated Pango symbols.
  - Remove patch for GNOME bug #359979 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.9.92-1.fc7
changelog:
  - Update to 1.9.92
  - Remove patch for GNOME bug #356177 (fixed upstream).
  - Add minimum version to intltool requirement (current >= 0.35.5).


author: Matthew Barnes <mbarnes@redhat.com> - 1.9.92-3.fc7
changelog:
  - Add patch for GNOME bug #415891 (introduce EFlag API).
  - Add patch for GNOME bug #376991 (refactor password handling).


author: Matthew Barnes <mbarnes@redhat.com> - 1.10.0-2.fc7
changelog:
  - Modify patch for GNOME bug #376991 to fix RH bug #231994.
  - Add patch for GNOME bug #417999 (avoid deprecated GTK+ symbols).
  - Remove evolution-data-server-1.0.2-workaround-cal-backend-leak.patch.
  - Remove evolution-data-server-1.2.2-fix_open_calendar_declaration.patch.
  - Remove evolution-data-server-1.3.8-fix-implicit-function-declarations.


author: Matthew Barnes <mbarnes@redhat.com> - 1.10.0-4.fc7
changelog:
  - Link to static evolution-openldap library (RH bug #210126).
  - Require openssl-devel when statically linking against openldap.
  - Add -Wdeclaration-after-statement to strict build settings.


author: Matthew Barnes <mbarnes@redhat.com> - 1.11.2-1.fc8
changelog:
  - Update to 1.11.2
  - Bump eds_base_version to 1.12.
  - Add patch to fix implicit function declarations.
  - Remove patch for RH bug #203058 (fixed upstream).
  - Remove patch for RH bug #210142 (fixed upstream).
  - Remove patch for RH bug #235290 (fixed upstream).
  - Remove patch for GNOME bug #360240 (fixed upstream).
  - Remove patch for GNOME bug #360619 (fixed upstream).
  - Remove patch for GNOME bug #373117 (fixed upstream).
  - Revise patch for GNOME bug #415891 (partially fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.11.4-1.fc8
changelog:
  - Update to 1.11.4
  - Remove patch for RH bug #202309 (fixed upstream).
  - Remove patch for GNOME bug #312854 (fixed upstream).
  - Remove patch for GNOME bug #447414 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.11.90-1.fc8
changelog:
  - Update to 1.11.90
  - Add patch for GNOME bug #466987 (glibc redefines "open").
  - Remove patch for GNOME bug #415891 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.11.90-3.fc8
changelog:
  - Revise patch for GNOME bug #417999 to fix GNOME bug #447591
    (Automatic Contacts combo boxes don't work).


author: Adam Jackson <ajax@redhat.com> 1.11.90-4.fc8
changelog:
  - Add Requires: glib2 >= 2.14.0, since it's in the buildroot now, and
    forcibly introduces deps on symbols that don't exist in 2.13.  If
    only we had working symbol versioning.


author: Milan Crha <mcrha@redhat.com> - 1.11.91-1.fc8
changelog:
  - Update to 1.11.91
  - Removed patch for RH bug #215634 (fixed upstream).
  - Removed patch for GNOME bug #466987 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.12.1-2.fc8
changelog:
  - Disable patch for GNOME bug #376991 for now.  It may be contributing
    to password prompting problems as described in RH bug #296671.


author: Matthew Barnes <mbarnes@redhat.com> - 1.12.1-3.fc9
changelog:
  - Porting a couple patches over from RHEL5:
  - Add patch for RH bug #212106 (address book error on fresh install).
  - Add patch for RH bug #215702 (bad search filter for LDAP address books).


author: Matthew Barnes <mbarnes@redhat.com> - 1.12.1-4.fc9
changelog:
  - Remove the use_gtk_doc macro.
  - Remove redundant requirements.
  - Use the name tag where appropriate.
  - Add an evolution-data-server-doc subpackage.


author: Matthew Barnes <mbarnes@redhat.com> - 2.21.1-1.fc9
changelog:
  - Update to 2.21.1
  - Bump eds_base_version to 2.22.
  - Remove patch for RH bug #212106 (fixed upstream).
  - Remove patch for GNOME bug #417999 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.21.5-2.fc9
changelog:
  - Add patch for GNOME bug #509644 (password dialog breakage).
  - Remove patch for RH bug #384741 (fixed upstream).
  - Remove patch for GNOME bug #363695 (obsolete).
  - Remove patch for GNOME bug #376991 (obsolete).


author: Matthew Barnes <mbarnes@redhat.com> - 2.21.5-3.fc9
changelog:
  - Rename evolution-1.4.4-ldap-x86_64-hack.patch to avoid namespace
    collision with similarly named patch in evolution (RH bug #395551).


author: Matthew Barnes <mbarnes@redhat.com> - 2.22.1-1.fc9
changelog:
  - Update to 2.22.1
  - Remove patch for RH bug #296671 (fixed upstream).
  - Remove patch for GNOME bug #523023 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.23.1-1.fc10
changelog:
  - Update to 2.23.1
  - Bump eds_base_version to 2.24.
  - Bump glib2 requirement to 2.16.1.
  - Drop gnome-vfs2 requirement.


author: Matthew Barnes <mbarnes@redhat.com> - 2.23.2-1.fc10
changelog:
  - Update to 2.23.2
  - Add files for new libebackend library.
  - Remove patch for RH bug #202309 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.25.1-1.fc11
changelog:
  - Update to 2.25.1
  - Bump eds_base_version to 2.26.
  - Remove patch for RH bug #467804 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.25.90-5.fc11
changelog:
  - Update BuildRoot, License, Source and URL tags.
  - Require gnome-common so we don't have to patch it out.


author: Matthew Barnes <mbarnes@redhat.com> - 2.26.0-1.fc11
changelog:
  - Update to 2.26.0
  - Remove patch for RH bug #568332 (fixed upstream).
  - Remove patch for GNOME bug #573240 (reverted upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.29.1-1.fc13
changelog:
  - Update to 2.29.1
  - Bump eds_base_version to 2.30.
  - Add dbus-glib build requirement.
  - Drop Bonobo + ORBit dependency (yay!).
  - Remove option to use OpenSSL instead of NSS.
  - Drop eds_api_version definition since it will never change.
  - Remove patch for GNOME bug #373146 (deviates from upstream).


author: Milan Crha <mcrha@redhat.com> - 2.31.1-1.fc14
changelog:
  - Update to 2.31.1
  - Update BuildRequires.
  - Remove imap4 camel provider support (dropped upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.31.2-2.fc14
changelog:
  - Enable largefile support in Camel, to help debug GNOME bug #612082.
    Debian turned this on recently and is experiencing problems, and I
    want to get to the bottom of it and finally break this 2 GB barrier.


author: Matthew Barnes <mbarnes@redhat.com> - 2.31.6-1.fc14
changelog:
  - Update to 2.31.6
  - Resume GSEAL usage.
  - Drop dbus-glib requirement.
  - Bump glib2 requirement to 2.25.12.
  - Roll back eds_base_version to 2.32.


author: Matthew Barnes <mbarnes@redhat.com> - 3.1.3-1
changelog:
  - Update to 3.1.3
  - Remove patch for libgdata-0.9.0 (fixed upstream).
  - Disable SMP flags; some source directories are racy.
  - Remove keyring option; gnome-keyring is mandatory now.
  - Add BR: gnome-online-accounts-devel and liboauth-devel


author: Matthew Barnes <mbarnes@redhat.com> - 3.7.3-1
changelog:
  - Update to 3.7.3
  - Remove obsolete BuildRequires:
      bison
      dbus-glib-devel
      libgnome-keyring-devel
      liboauth-devel


author: Milan Crha <mcrha@redhat.com> - 3.7.90-3
changelog:
  - Add patch gor GNOME bug #693101 (IMAPx vanishes folder summary)
  - Add patch for Red Hat bug #912503 (incorrect G_BEGIN/END_DECLS)


author: Milan Crha <mcrha@redhat.com> - 3.7.91-1
changelog:
  - Update to 3.7.91
  - Remove an upstream .pc files fix for a libebook split (fixed upstream)
  - Remove patch gor GNOME bug #693101 (fixed upstream)
  - Remove patch for Red Hat bug #912503 (fixed upstream)


author: Milan Crha <mcrha@redhat.com> - 3.11.2-1
changelog:
  - Update to 3.11.2
  - Conditionally build devel documentation
  - Disable compiler warnings about deprecated symbols


author: Milan Crha <mcrha@redhat.com> - 3.13.4-1
changelog:
  - Update to 3.13.4
  - Introduce tests subpackage with installed tests
  - Remove patch for GNOME bug 733081 (fixed upstream)


author: Milan Crha <mcrha@redhat.com> - 3.29.1-1
changelog:
  - Update to 3.29.1
  - Remove fix to strip closing > from URLs when linkifying (BGO#795108) (Fixed upstream)
  - Drop build dependency on python


author: Milan Crha <mcrha@redhat.com> - 3.30.0-1
changelog:
  - Update to 3.30.0
  - Add patch for GNOME Evolution issue #86 (Quoting of plain text mail into HTML mode mangles deeper levels)


author: Adam Williamson <awilliam@redhat.com> - 3.37.2-2
changelog:
  - Rebuild with newer protobuf and libphonenumber
  - Backport several fixes for annoying bugs from mainline


author: Milan Crha <mcrha@redhat.com> - 3.38.1-2
changelog:
  - Correct D-Bus service file name - it can change when _eds_dbus_services_prefix is defined
  - Replace perl-generators build time dependency with perl-interpreter install time dependency


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.40.4-2
changelog:
  - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-4
changelog:
  - CVE-2021-29458 exiv2: out-of-bounds read in Exiv2::Internal::CrwMap::encode
    Resolves: bz#1953758

  - CVE-2021-29457 exiv2: heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1953772


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-5
changelog:
  - CVE-2021-29473 exiv2: out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1954065

  - CVE-2021-29470 exiv2: out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1955014


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-6
changelog:
  - CVE-2021-29623 exiv2: a read of uninitialized memory may lead to information leak
    Resolves: bz#1964182

  - CVE-2021-32617 exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
    Resolves: bz#1964188


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-3
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993282

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993245


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018422

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003673


author: Radovan Sroka <rsroka@redhat.com> - 1.0-2
changelog:
  RHEL 8.3 ERRATUM
  - rebase to v1.0
  - installed multiple policies to /usr/share/fapolicyd
    - known-libs (default)
    - restrictive
  - installed fapolicyd.trust file
  - enhanced fapolicyd-cli
  Resolves: rhbz#1817413
  - introduced fapolicyd-selinux that provides SELinux policy module
  Resolves: rhbz#1714529


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-3
changelog:
  RHEL 8.4.0 ERRATUM
  - rebase to 1.0.2
  - strong dependency on rpm/rpm-plugin-fapolicyd
  - installed dnf-plugin is dummy and we are not using it anymore
  - enabled integrity setting
  Resolves: rhbz#1887451
  - added make check
  - Adding DISA STIG during OS installation causes 'ipa-server-install' to fail
  - fixed java detection
  Resolves: rhbz#1895435
  - dnf update fails when fapolicyd is enabled
  Resolves: rhbz#1876975
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1896875


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-7
changelog:
  - fapolicyd abnormally exits by executing sosreport
  - fixed multiple problems with unlink()
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1943251


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-2
changelog:
  RHEL 8.6.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespace in trust files
  - use full paths in trust files
  Resolves: rhbz#1939379
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#1989272
  - fix fapolicyd-dnf-plugin reporting as '<invalid>'
  Resolves: rhbz#1997414
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014445


author: Radovan Sroka <rsroka@redhat.com> - 1.1-1
changelog:
  RHEL 8.6.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#1939379
  - introduce rules.d feature
  Resolves: rhbz#2054741
  - remove pretrans scriptlet
  Resolves: rhbz#2051485


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-8
changelog:
  RHEL 8.7.0 ERRATUM
  - rebase fapolicyd to the latest stable vesion
  Resolves: rhbz#2100087
  - fapolicyd does not correctly handle SIGHUP
  Resolves: rhbz#2070639
  - fapolicyd often breaks package updates
  Resolves: rhbz#2111243
  - drop libgcrypt in favour of openssl
  Resolves: rhbz#2111935
  - fapolicyd.rules doesn't advertise that using a username/groupname instead of uid/gid also works
  Resolves: rhbz#2103914
  - fapolicyd gets way too easily killed by OOM killer
  Resolves: rhbz#2100089
  - compiled.rules file ownership and mode
  Resolves: rhbz#2066653
  - Faulty handling of static applications
  Resolves: rhbz#2084497
  - Introduce ppid rule attribute
  Resolves: rhbz#2102563
  - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path [rhel-8.7.0]
  Resolves: rhbz#2069121
  - Fapolicyd denies access to /usr/lib64/ld-2.28.so [rhel-8.7.0]
  Resolves: rhbz#2068105


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-12
changelog:
  RHEL 8.8.0 ERRATUM
  - statically linked app can execute untrusted app
  Resolves: rhbz#2088349
  - Starting manually fapolicyd while the service is already running breaks the system
  Resolves: rhbz#2103352
  - Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
  Resolves: rhbz#2087040
  - fapolicyd: Introduce filtering of rpmdb
  Resolves: rhbz#2165645


author: Radovan Sroka <rsroka@redhat.com> - 1.3.2-1
changelog:
  RHEL 8.9.0 ERRATUM
  - Rebase fapolicyd to the latest stable version
  Resolves: RHEL-519
  - RFE: send rule number to fanotify so it gets audited
  Resolves: RHEL-628
  - Default q_size doesn't match manpage's one
  Resolves: RHEL-629
  - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  Resolves: RHEL-632
  - fapolicyd needs to make sure the FD limit is never reached
  Resolves: RHEL-631
  - fapolicyd still allows execution of a program after "untrusting" it
  Resolves: RHEL-630
  - Fix broken backwards compatibility backend numbers
  Resolves: RHEL-731
  - fapolicyd can create RPM DB files /var/lib/rpm/__db.xxx with bad ownership causing AVCs to occur
  Resolves: RHEL-829
  - SELinux prevents the fapolicyd from reading symlink (cert_t)
  Resolves: RHEL-820


author: Java SIG <java-devel@lists.fedoraproject.org> - 4-2
changelog:
  - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
  - Replace maven BuildRequires with maven-local


author: Roland Grunberg <rgrunber@redhat.com> - 1.1.0-6
changelog:
  - Set source/target to 1.8 for Java 11 build.
  - Disable Java API link detection for javadoc generation as this fails.
  - Disable some assertions in TestParser.testPipe() that fail on Java 11.


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-73
changelog:
  - fence_vmware_rest: detect if the API user has sufficient rights to
    manage the fence device
    Resolves: RHEL-25256


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-76.1
changelog:
  - fence_scsi: preempt clears all devices on the mpath device, so only
    run it for the first device
    Resolves: RHEL-59882


author: Chang Gao <gc-taifu@linux.alibaba.com> - 4.10.0-76.0.1.1
changelog:
  - Replace some packages with build env
  - Update CVE-2007-4559 patches
  - Change Jinja2 require python version
  - fix CVE-2024-6345 (gc-taifu@linux.alibaba.com)


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.23-1
changelog:
  - new upstream release
  - new package fence-agents-amt-ws
  - new package fence-agents-compute
  - new package fence-agents-drac
  - new package fence-agents-hds-cb
  - new package fence-agents-mpath
  - new package fence-agents-sanbox2
  - new package fence-agents-sbd
  - new package fence-agents-vbox
  - new package fence-agents-vmware
  - new package fence-agents-xenapi


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.24-12
changelog:
  - fence-agents-common: remove fence_scsi_check files
  - fence-scsi: add "fence_scsi_check_hardreboot"


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-1
changelog:
  - new upstream release
  - fence_vmware_soap / fence_ovh: use Python 2 till python3-suds bug
    is fixed


author: Jan Pokorný <jpokorny+rpm-booth@fedoraproject.org> - 4.2.1-4
changelog:
  - mark non-compiled packages properly as noarch, restructure excludes
  - move azure_fence.py and XenAPI.py to respective subpackages from -common
  - sanitize allfenceagents internally defined enumeration
  - sanitize BuildRequires with respect to packaging guidelines
  - bytecompile native Python modules and ship these bytecodes properly
  - only refer to Python binary symbolically, drop buildroot cleanup
  - cleanup package summaries/descriptions, order agent subpackages properly


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-23
changelog:
  - fence_ibm_vpc: remove unused instance parameter and make limit
    optional
    Resolves: rhbz#2081235


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-25
changelog:
  - all agents: unify ssl parameters to avoid having to use --ssl when
    using --ssl-secure/--ssl-insecure for some agents
    Resolves: rhbz#2072420


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-27
changelog:
  - fence_ibm_powervs: add support for proxy, private API servers and
    get token via API key
    Resolves: rhbz#2093216


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-30
changelog:
  - fence_openstack: add support for reading config from clouds.yaml
    and openrc
    Resolves: rhbz#2041933, rhbz#2041935


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-33
changelog:
  - fence_virt: add note that reboot-action doesnt power on nodes that
    are powered off
    Resolves: rhbz#2132008


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-36
changelog:
  - fence_virtd: add link to uri examples and uri w/socket path
    example for when VMS are run as non-root user to manpage
    Resolves: rhbz#2138823


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-42
changelog:
  - fencing/fence_wti: add --plug-separator to be able to avoid
    characters that are in node name(s)
    Resolves: rhbz#2152107


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-43
changelog:
  - fence_vmware_soap: set login_timeout lower than default
    pcmk_monitor_timeout (20s) to remove tmp dirs
    Resolves: rhbz#2122944


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-45
changelog:
  - fence_aws: add --skip-race-check parameter to allow running outside
    of AWS network
    Resolves: rhbz#2183162


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-55
changelog:
  - bundled dateutil: fix tarfile CVE-2007-4559
    Resolves: rhbz#2217902
  - fence_ipmilan: fix typos in metadata
    Resolves: rhbz#2224267


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-56
changelog:
  - fence_scsi: fix registration handling if ISID conflicts
    Resolves: RHEL-5396
  - bundled certifi: fix CVE-2023-37920
    Resolves: RHEL-9446


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-60
changelog:
  - all agents: update metadata in non-I/O agents to Power or Network
    fencing
    Resolves: RHEL-14030


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-62
changelog:
  - bundled urllib3: fix CVE-2023-45803
    Resolves: RHEL-18139
  - bundled pycryptodome: fix CVE-2023-52323
    Resolves: RHEL-20917
  - bundled jinja2: fix CVE-2024-22195
    Resolves: RHEL-21345


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-66
changelog:
  - Add missing licenses to spec-file
    Resolves: RHEL-27929
  - ha-cloud-support: fix aliyun-cli
    Resolves: RHEL-28097


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-69
changelog:
  - ha-cloud-support: upgrade bundled pyroute2 libs to fix issue in
    gcp-vpc-move-route's stop-action
    Resolves: RHEL-29649


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-70
changelog:
  - fence_aliyun: add credentials file support, filter parameter, and
    optimize log output
    Resolves: RHEL-31488, RHEL-31485, RHEL-31483


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 0.4.0-6
changelog:
  - Harden with -fPIE and -Wl,-z,now
    Resolves: rhbz#1624110
  - Add CI gating tests
    Resolves: rhbz#1682883


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.26-17
changelog:
  - Remove unnecessary python-devel dependency
    (disables build of fetchmailconf, but we don't pack it into rpm anyway)
    Resolves: #1591710


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #1999275, #2002698


author: Jan Horak <jhorak@redhat.com> - 60.1.0-8
changelog:
  - Fixed homepage and bookmarks (rhbz#1606778)
  - Fixed missing file associations in RHEL6 (rhbz#1613565)


author: Jan Horak <jhorak@redhat.com> - 60.1.0-9
changelog:
  - Do not set user agent (rhbz#1608065)
  - GTK dialogs are localized now (rhbz#1619373)
  - JNLP association works again (rhbz#1607457)


author: Jan Grulich <jgrulich@redhat.com - 128.4.0-2
changelog:
  - Enable PipeWire camera support for RHEL 10
    + backport upstream fixes for PipeWire camera support
    Fixes: RHEL-64749


author: Liwei Ge <geliwei@openanolis.org> - 128.10.0-1.0.1
changelog:
  - Add firefox-anolis-default-prefs.js
  - Remove bookmarks and loongarch64
  - Add BuildRequires gcc-toolset-13-gcc-c++


author: Jan Grulich <jgrulich@redhat.com - 128.4.0-2
changelog:
  - Enable PipeWire camera support for RHEL 10
    + backport upstream fixes for PipeWire camera support
    Resolves: RHEL-64749


author: Kalev Lember <klember@redhat.com> - 1.12.9-2
changelog:
  - Backport upstream patches for CVE-2024-42472
  - Require bubblewrap version that has new --bind-fd option backported for
    addressing CVE-2024-42472


author: Adam Jackson <ajax@redhat.com> - 0.11.7-2
changelog:
  - Remove Requires: kernel >= 4.0.4-202, which corresponds to rawhide
    somewhere before Fedora 22 which this spec file certainly no longer
    supports.


author: Jan Grulich <jgrulich@redhat.com> - 1.12.9-4
changelog:
  - Fix arbitrary code execution via crafted symlinks in sandbox-expose options
    Resolves: RHEL-165633
  - Fix arbitrary file deletion on host via improper cache file path validation
    Resolves: RHEL-170160


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-1
changelog:
  - Rebase to 2.6.4
  - Fix build failure due to missing include and `reallocarray' prototype
  - Add gettext-devel, automake and libtool to build dependencies, and
    execute `autoreconf -i' to regenerate files after patching configure.ac


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Fabio Alessandro Locati <fale@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.1
  - Update the brand icons list using a new script
  - Add the script to create brand icons list


author: Marius L. Jøhndal <mariuslj at ifi.uio.no> 0:0.0-0.fdr.1.031012
changelog:
  - Updated to 031012.
  - Removed .so links.
  - Removed empty AUTHORS file.
  - Removed the samples subpackage.


author: Marius L. Jøhndal <mariuslj at ifi.uio.no> 0:0.0-0.fdr.2.031012
changelog:
  - Patched to use dynamic linking instead of dlopen'ing (bug 497).
  - Patched to use htmlview and use installed documentation (bug 497).
  - Added build req libxml2-devel (bug 497).
  - Disabled parallell make (bug 497).
  - Added desktop entry (bug 497).


author: Marius L. Jøhndal <mariuslj at ifi.uio.no> 0:0.0-0.fdr.3.031012
changelog:
  - Fixed non-standard value in desktop file (bug 497).
  - Added libuninameslist support.
  - Removed separate documentation tarball; mostly identical to those in source (bug 497).


author: Marius L. Jøhndal <mariuslj at ifi.uio.no> 0:0.0-0.fdr.6.031110
changelog:
  - Updated to 031110.
  - Eliminated build patch; incorporated in upstream tarball.
  - Re-added documentation tarball since no longer included in source tarball.
  - Added pfaicon.gif as Packaging directory disappeared from tarball.


author: Marius L. Jøhndal <mariuslj at ifi.uio.no> - 0:0.0-0.fdr.1.20040321
changelog:
  - Updated to 20040321.
  - Changed package name from pfaedit to fontforge.
  - Added Obsoletes: pfaedit.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:0.0-2.20041231
changelog:
  - Avoid RPATH.
  - Convert man pages to UTF-8.
  - Fix pkgconfig and doc file permissions.
  - Use updated upstream icon.
  - Don't include installation documentation.


author: Roozbeh Pournader <roozbeh@farsiweb.info> - 20060125-1
changelog:
  - Update to 20060125 (bug #170177)
  - Update docs to 20060114
  - Change versioning to reflect upstream and follow packaging guidelines
  - Provide pfaedit (bug #176548)
  - Use %{?dist} tag (bug #176472)
  - Add localizations
  - No need to remove CVS subdir: fixed upstream
  - No need to covert man pages to UTF-8: fixed upstream
  - Fixed DOS line terminators
  - Use parallel build


author: Kevin Fenzi <kevin@tummy.com> - 20080828-1
changelog:
  - Upgrade to 20080828
  - Add Requires on autotrace. Fixes 460668
  - Confirm patch from 459451 is upstream here.


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 20080927-1
  ☢ quick & dirty version bump to start working on F11 font packages
  ⟲ time to forget about pfaedit
  ⤑ take care of rpmlint warnings


author: Kevin Fenzi <kevin@tummy.com> - 20090224-2
changelog:
  - Apply patch for python modules loading (fixes #489109)
  - use install -p to fix multiarch issue (fixes #480685)


author: Parag Nemade <pnemade AT redhat DOT com> - 20120731b-9
changelog:
  - Added cflags -Wstrict-aliasing
  - Fixed some compile-time errors from invalid Makefile rules
  - Fixed bogus date in changelog


author: Parag Nemade <pnemade AT redhat DOT com> - 20120731b-10
changelog:
  - Revert previously added -Wstrict-aliasing cflags
  - We actaully need -fno-strict-aliasing (rh#903288)
  - Remove %defattr() (rh#1003518)
  - fontforge.xml should not be executable (rh#1003518)


author: Parag Nemade <pnemade AT redhat DOT com> - 20140813-1
changelog:
  - Update to fontforge 2.0 snapshot 20140813
  - corrected some scriptlets as per packaging guidelines
  - Added new subpackage -doc


author: Parag Nemade <pnemade AT redhat DOT com> - 20140813-2
changelog:
  - Add gnulib source for bootstrap as koji don't have network
  - Patch Makefile.am to use system uthash-devel
  - We also need gnulib-devel


author: Parag Nemade <pnemade AT redhat DOT com> - 20160404-3
changelog:
  - Rebuild for new libuninameslist-20160701 build
  - Add BuildRequires: shared-mime-info
  - Add BuildRequires: gcc


author: Parag Nemade <pnemade AT redhat DOT com> - 20161012-6
changelog:
  - Resolves:rh#1429574 - [abrt] fontforge: PyFF_OpenFont(): fontforge killed by signal 6
  - Added patch to fix python module for python3.6


author: Parag Nemade <pnemade AT redhat DOT com> - 20200314-7
changelog:
  - Resolves: RHEL-138168
    CVE-2025-15270 SFD File Parsing Remote Code Execution Vulnerability
  - Resolves: RHEL-138174
    CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138190
    CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138140	
    CVE-2025-15269 SFD File Parsing Use-After-Free


author: Benjamin Berg <bberg@redhat.com> - 1.94.0-3
changelog:
  - Use GFDL abbreviation as GFDLv1.1+ is not listed
  - Install PAM module into /usr
  - Pull in further test fixes


author: José Expósito <jexposit@redhat.com> - 3.2.1-10
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25176
    Resolves: https://issues.redhat.com/browse/RHEL-25178


author: Antonio Torres <antorres@redhat.com> - 3.0.20-13
changelog:
  - Fix multiple CVEs
  - Add rpminspect configuration
    Resolves: #2151702
    Resolves: #2151704
    Resolves: #2151706


author: Ondrej Holy <oholy@redhat.com> - - 2:2.2.0-9
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136151)
  - CVE-2022-39283: Add missing length check in video channel (#2136153)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145139)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145139)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145139)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145139)
  - CVE-2022-39347: Fix path validation in drive channel (#2145139)
  - CVE-2022-41877: Add missing length check in drive channel (#2145139)


author: Simone Caronni <negativo17@gmail.com> - 2:2.0.0-36.20180115git8f52c7e
changelog:
  - Update to latest snapshot.
  - Make GSS support optional and disable it for now (#1534094 and FreeRDP #4348,


author: Karsten Hopp <karsten@redhat.com> - 2.0.0-37git}
changelog:
  - use versioned build requirement on pkgconfig(openssl) to prevent using
    compat-openssl10-devel instead of openssl-devel


author: Simone Caronni <negativo17@gmail.com> - 2:2.0.0-39.20180314gitf8baeb7
changelog:
  - Update to latest snapshot.
  - Fixes connection to RDP servers with the latest Microsoft patches:
    https://github.com/FreeRDP/FreeRDP/issues/4449


author: Ondrej Holy <oholy@redhat.com> - 2:2.0.0-47.rc4
changelog:
  - Fix SCARD_INSUFFICIENT_BUFFER error (rhbz#1803054)
  - Do not advertise /usb in help output (rhbz#1761144)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-2
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-142417, RHEL-142401, RHEL-142385, RHEL-142369, RHEL-142353
    Resolves: RHEL-142337, RHEL-142321


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-5
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-147954, RHEL-147955, RHEL-147970, RHEL-147977, RHEL-147980
    Resolves: RHEL-148002, RHEL-148014, RHEL-148031, RHEL-148906, RHEL-148996
    Resolves: RHEL-149007, RHEL-149056, RHEL-155984


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-7
changelog:
  - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
  - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
    Resolves: RHEL-162949, RHEL-162965


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-8
changelog:
  - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
  - Fix growth of preallocated buffers (CVE-2026-27951)
  - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
  - Add DSP format checks (CVE-2026-31884)
  - Fix DSP array bounds checks (CVE-2026-31883)
  - Fix DSP array bounds checks (CVE-2026-31885)
  - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
    Resolves: RHEL-159806, RHEL-155468, RHEL-161037, RHEL-161472
    Resolves: RHEL-161508, RHEL-161075, RHEL-167794


author: Tomas Popela <tpopela@redhat.com> - 1.6.1-7
changelog:
  - Rebuild with newer annobin to fix rpmdiff problems
  - Fix the build with a newer opencv
  - Resolves: rhbz#1703994


author: Akira TAGOH <tagoh@redhat.com> - 1.0.4-9
changelog:
  - Fix security issues CVE-2022-25308, CVE-2022-25309, CVE-2022-25310.
    Resolves: rhbz#2050085, rhbz#2050068, rhbz#2050062
  - Drop --disable-docs from %configure. no such options available.


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-13
changelog:
  - Resolves: RHEL-2263 - eBGP multihop peer flapping due to delta miscalculation of new configuration


author: lutw <lutw@ieisystem.com> - 7.5.1-16.0.3
changelog:
  - fix CVE-2023-46752
  - fix CVE-2023-46753
  - fix CVE-2023-31490
  - fix CVE-2023-41909
  - fix CVE-2023-41358
  - fix CVE-2023-47234 because in 7.5.1-16.0.2  CVE-2023-47234 CVE-2023-47235 is not suitable to fix CVE-2023-46752 CVE-2023-46753, so change to use rehl patch


author: Michal Ruprich <mruprich@redhat.com> - 7.5-5
changelog:
  - Resolves: #1979426 - Unable to configure OSPF in multi-instance mode
  - Resolves: #1917269 - vtysh running-config output not showing bgp ttl-security hops option


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-1
changelog:
  - Resolves: #2018451 - Rebase of frr to version 7.5.1
  - Resolves: #1975361 - the dynamic routing setup does not work any more


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-2
changelog:
  - Resolves: #1941765 - AVCs while running frr tests on RHEL 8.4.0 Beta-1.2
  - Resolves: #1714984 - SELinux policy (daemons) changes required for package


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-6
changelog:
  - Resolves: #1939516 - frr service cannot reload itself, due to executing in the wrong SELinux context


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-7
changelog:
  - Resolves: #2128737 - out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-14
changelog:
  - Resolves: RHEL-6617 - Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-16
changelog:
  - Resolves: RHEL-15916 - Flowspec overflow in bgpd/bgp_flowspec.c
  - Resolves: RHEL-15919 - Out of bounds read in bgpd/bgp_label.c
  - Resolves: RHEL-15869 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  - Resolves: RHEL-15868 - crash from malformed EOR-containing BGP UPDATE message


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-17
changelog:
  - Resolves: RHEL-6583 - Routes are not refreshed after changing the inbound route rules from deny to permit


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 7.5.1-24
changelog:
  - Fix off-by-one error in FlowSpec operator array bounds checking (CVE-2026-37457)
  - Resolves: RHEL-174676


author: Jindrich Novy <jnovy@redhat.com> - 0.7.2-4
changelog:
  - replace "fuse-overlayfs segfault" patch with improved one
    due to application to a different context
  - Resolves: #1805015


author: Jindrich Novy <jnovy@redhat.com> - 0.7.2-4
changelog:
  - replace "fuse-overlayfs segfault" patch with improved one
    due to application to a different context
  - Resolves: #1805017


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-3
changelog:
  - fix "error bind mounting /dev from host into mount namespace"
    (the openat2 syscall is not yet supported by the RHEL8 kernel)
  - Resolves: #1867447


author: Jindrich Novy <jnovy@redhat.com> - 1.13-1
changelog:
  - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.13
  - Related: Jira:RHEL-2110


author: Lukas Javorsky <ljavorsk@redhat.com> - 25.3.34-3
changelog:
  - Use downstream garbd-wrapper and garbd.service to ensure compatibility
  - Add upstream versions of garbd-wrapper (called garbd-systemd) and garbd.service
    in case user want's to use them


author: Lukas Javorsky <ljavorsk@redhat.com> - 25.3.34-4
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Richard W.M. Jones <rjones@redhat.com> - 25.3.12-1
changelog:
  - Update to 25.3.12.
  - Should fix the build on 32 bit ARM (RHBZ#1241164).
  - Remove ExcludeArch (should have read the BZ more closely).


author: Nick Clifton <nickc@redhat.com> - 9.21-1
changelog:
  - Initial check-in for scl-gcc-toolset-10 branch.  (#1817171)
  - Fix stack clash protection problem. (#1803173)


author: Nick Clifton <nickc@redhat.com> - 9.29-1
changelog:
  - Fix AArch64 checks in annobin plugin.  (#1873416)
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.
  - Improved target pointer size discovery.
  - Add support for installing clang and llvm plugins.
  - Temporary suppression of aarch64 pointer size check.  (#1860549)


author: Nick Clifton <nickc@redhat.com> - 2.35-3
changelog:
  - Do not enable debuginfod support by default.
  - Add run-time dependency on libdebuginfod library when debuginfod support is enabled.


author: Nick Clifton <nickc@redhat.com> - 2.35-5
changelog:
  - Fix building with LTO enabled.
  - Set the sh_entsize field of the AArch64's PLT section to 0.  (PR 26312)


author: Nick Clifton <nickc@redhat.com> - 2.35-9
changelog:
  - Add ability to control the display of unicode characters.  (#2009178)
  - Backport some more speed up patches.  (#1978174)
  - Remove a quadratic performance penalty processing files.  (#1978174)
  - Extend vulnerability fix again.  (#1925779)


author: Mark Wielaard <mjw@redhat.com> - 0.177-1
changelog:
  - New upstream release.
    - elfclassify: New tool to analyze ELF objects.
    - readelf: Print DW_AT_data_member_location as decimal offset.
               Decode DW_AT_discr_list block attributes.
    - libdw: Add DW_AT_GNU_numerator, DW_AT_GNU_denominator and DW_AT_GNU_bias.
    - libdwelf: Add dwelf_elf_e_machine_string.
                dwelf_elf_begin now only returns NULL when there is an error
                reading or decompressing a file. If the file is not an ELF file
                an ELF handle of type ELF_K_NONE is returned.


author: Mark Wielaard <mjw@redhat.com> - 0.178-1
changelog:
  - New upstream release.
    - debuginfod: New server, client tool and library to index and fetch
                  ELF/DWARF files addressed by build-id through HTTP.
    - doc: There are now some manual pages for functions and tools.
    - backends: The libebl libraries are no longer dynamically loaded
                through dlopen, but are now compiled into libdw.so directly.
    - readelf: -n, --notes now takes an optional "SECTION" argument.
               -p and -x now also handle section numbers.
               New option --dyn-sym to show just the dynamic symbol table.
    - libdw: Abbrevs and DIEs can now be read concurrently by multiple
             threads through the same Dwarf handle.
    - libdwfl: Will try to use debuginfod when installed as fallback to
               retrieve ELF and DWARF debug data files by build-id.


author: Mark Wielaard <mjw@redhat.com> - 0.182-1
changelog:
  - Upgrade to upstream 0.182
    - backends: Support for tilegx has been removed.
    - config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
    - debuginfod: More efficient package traversal, tolerate various
      errors during scanning, grooming progress is more visible and
      interruptible, more prometheus metrics.
    - debuginfod-client: Now supports compressed (kernel) ELF images.
    - libdwfl: Add ZSTD compression support.


author: Marek Polacek <polacek@redhat.com> 10.2.1-2
changelog:
  - update from Fedora gcc 10.2.1-2
  - emit debug info for C/C++ external function declarations used in the TU
    (PR debug/96383)
  - discard SHN_UNDEF global symbols from LTO debuginfo (PR lto/96385)
  - strip also -flto=auto from optflags


author: Marek Polacek <polacek@redhat.com> 10.2.1-8
changelog:
  - update from Fedora gcc 10.2.1-8 (#1878887)
  - emit DW_AT_declaration on declaration-only DIEs (#1897272, PR debug/97060)
  - add BuildRequires: make and Requires: make, the latter for -flto reasons


author: Marek Polacek <polacek@redhat.com> 10.3.1-1
changelog:
  - update from Fedora gcc 10.3.1-1 (#1929382)
  - drop gcc10-pr97060.patch
  - use --enable-cet
  - ship gcc-accel-nvptx-none-lto-dump
  - backport PR96939 fixes


author: Sergio Durigan Junior <sergiodj@redhat.com> - 9.1-3
changelog:
  - Fix 'Recursive call to 'missing_rpm_list_print' when pagination is
    on and missing RPM list is big' (RHBZ 1801974, Sergio Durigan
    Junior).


author: Kevin Buettner <kevinb@redhat.com> - 9.1-6
changelog:
  - Fix build breakage of gdb/python/python.c due to use of deprecated
    Python function (RHBZ 1822715, Kevin Buettner)


author: Keith Seitz <keiths@redhat.com> - 9.2-1
changelog:
  - Rebase to FSF GDB 9.2.
  - Add explicit python bytecode compilation.
  - Change included files to patches to quell error from rpminspect.
  - Fix attach-32.exp from gdb-6.3-inferior-notification-20050721.patch.


author: Keith Seitz <keiths@redhat.com> - 9.2-3
changelog:
  - Fix missing debuginfo messages. (Keith Seitz, RH BZ 1894703)
  - Add debuginfod.m4 patch to use pkg-config. 
  - Backport "Corefile memory access problems" patches.
    (Kevin Buettner, RH BZ 1886602)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)


author: Keith Seitz <keiths@redhat.com> - 9.2-4
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Fortran dynamic type related fixes"
    (Andrew Burgess, RH BZ 1905702)


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-3
changelog:
  - Use SPDX abbreviations for licenses.
  - Add library directories to existing LDFLAGS and not override them.


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-4
changelog:
  - Pull upstream fix for ioctl evdev bitset decoding, fix the tests (#1747213).
  - Include upstream patches that fix issues reported by covscan (#1747530):
    91281fec "v4l2: avoid shifting left a signed number by 31 bit",
    522ad3a0 "syscall.c: avoid infinite loop in subcalls parsing",
    9446038e "kvm: avoid bogus vcpu_info assignment in vcpu_register", and
    2b64854e "xlat: use unsgined type for mount_flags fallback values".


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-5
changelog:
  - Fix printing stack traces for early syscalls on process attach (#1790054):
    69b2c33a "unwind-libdw: fix initialization of libdwfl cache",
    35e080ae "syscall: do not capture stack trace while the tracee executes
             strace code", and
    8e515c74 "tests: add strace-k-p test".
  - Properly decode struct sockaddr_hci without hci_channel field.


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-6
changelog:
  - Fix expected alignment for IPC tests (#1794490):
    4377e3a1 "tests: fix expected output for some ipc tests", and
    a75c7c4b "tests: fix -a argument in ipc_msgbuf-Xraw test".


author: Frank Ch. Eigler <fche@redhat.com> - 4.3-7
changelog:
  - Fix rhbz1857749 with rhel8.3 baseos patch
  - Fix rhbz1852021 with more complete rhel8.3 baseos patch


author: Frank Ch. Eigler <fche@redhat.com> - 4.4-3
changelog:
  - rhbz1898288: stability for exhausted UTRACE_TASK_WORK_POOL
  - rhbz1873492 related: mokutil parser robustness for RH keys
  - rhbz1873492 related: rhel8 kernel_is_locked_down detection


author: Mark Wielaard <mjw@redhat.com> - 3.16.0-4
changelog:
  - Add valgrind-3.16.1-REX-prefix-JMP.patch
  - Add valgrind-3.16.1-epoll.patch
  - Add valgrind-3.16.1-sched_getsetattr.patch
  - Add valgrind-3.16.1-dl_runtime_resolve.patch


author: Nick Clifton <nickc@redhat.com> - 9.72-1
changelog:
  - Rebase to 9.72.  (#1957319)
  - annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
  - gcc-plugin: Add support for ARM and RISCV targets.
  - timing: do not initialise the clock if the timing tool is disabled.
  - gcc-plugin: Replace ICE messsages with verbose messages.
  - Fix the testsuite so that it can be run in parallel.
  - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)
  - Obsolete annobin < 9.66-1 (bug #1949570)
  - Annocheck: Improve detection of missing GNU-stack support.
  - Correct a package rename (bug #1949570)
  - Require docs subpackage by the other ones because of a license
  - Build-requiring perl-interpreter is enough
  - Fix bz1949570
  - Fix anomolies reported by covscan.
  - Move documentation into a sub-package.
  - gcc-plugin: Use a fixed filename when running in LTO mode.
  - Annocheck: Fix detection of special function names.  (#1934189)
  - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)
  - Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)
  - Annocheck: Fix some problems with tests for missing notes.
  - Split plugins into separate sub-packages
  - Add some GO tests to annocheck.
  - Add a future fail for the presence of RPATH in the dynamic tags.
  - Add the ability to disable the warning message about -D_FORTIFY_SOURCE being missing.
  - Workaround for elflint problems with PPC compiled files.  (#1880634)
  - Fix bogus AArch64 test failures.
  - Improved testing by annocheck.  Add fixed format message mode.
  - Fix inconsistency reporting -fcf-protection and -fstack-clash-protection results.
  - Add support for -D_FORTIFY_SOURCE=3.
  - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)
  - annocheck: Improve test for LTO compiled binaries that do not have -Wall annotations.  (#1906171)
  - annocheck: Mark a missining -D_FORTIFY_SOURCE as a FAIL.
  - annocheck: Fix notes analyzer to accept empty PPC64 notes.
  - gcc plugin: Tweak generation of end symbols for PPC64 when LTO is active.  (#1898075)
  - gcc plugin: Add support for GCC 11's cl_vars array.
  - Annocheck: Support enabling/disabling future fails.
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.
  - Clang plugin: Add -lLLVM to the build command line.
  - Annocheck: Improve reporting of missing -D_FORTIFY_SOURCE option.  (#1898075)
  - Annocheck: Improve reporting of missing LTO option.
  - Add detecting of gimple compiled binaries.
  - Add --without-gcc-plugin option.
  - Annocheck: Fix bug parsing DW_AT_producer.
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.
  - NVR bump for another ELN sidetag rebuild.
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.
  - Correct the directory chosen for 32-bit LLVM and Clang plugins.  (#1884951)
  - Allow the use of the SHF_LINK_ORDER section flag to discard unused notes.  (Experimental).
  - Enable the build and installation of the LLVM and Clang plugins.  (Experimental).
  - gcc-plugin: Fix test for empty PowerPC sections.  (#1880634)
  - annocheck: Add tests for the AArch64 BTI and PAC security features.  (#1862478)
  - gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.
  - gcc plugin: Correct the detection of 32-bit x86 builds.  (#1876197)
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.


author: Nick Clifton <nickc@redhat.com> - 9.79-1
changelog:
  - Annocheck: Fix spelling mistake in -mstack-realign failure message.  (#1977349)
  - gcc-plugin: Do not record global versions of stack protection settings in LTO mode, if not set.  (#1958954)
  - Annocheck: Remove limit on number of input files.
  - Annocheck: Conditionalize test of DF_PIE_1 flag.
  - clang/llvm plugins: Build with correct security options.
  - Annocheck: Better detection of GO compiler version.
  - Annocheck: Better support for symbolic links.
  - Annocheck: In verbose mode, report the reason for skipping specific tests.  (#1969584)


author: Nick Clifton <nickc@redhat.com> - 9.85-1
changelog:
  - Annocheck: Detect a missing CET note.  (#1991931)
  - Annocheck: Do not report future fails for AArch64 notes.
  - Annocheck: Warn about multiple --debug-file, --debug-rpm and --debug-dir options.
  - Annocheck: Process files in command line order.  (#1988714)
  - Annocheck: Reverse AArch64 PAC+BTI check, ie fail if they are enabled.  (#1984995)
  - Annocheck: Add another test exceptions.
  - Annocheck: Add some more test exceptions.
  - Tests: Skip glibc-notes test if the assembler does not support --generate-missing-build-notes.  (#1978573)
  - Tests: Skip objcopy test if objcopy does not support --merge-notes.


author: Nick Clifton <nickc@redhat.com> - 10.23-1 (#2020405)
changelog:
  - Annocheck: Add a test for unicode characters in identifiers.
  - gcc-plugin: Default to link-order grouping for PPC64LE.  (#2016458)
  - Annocheck: Do not fail if a --skip-<name> option does not match a known test.
  - ldconfig-test: Skip the LTO check.
  - Annocheck: Add more glibc function names.
  - gcc-plugin: Fix attaching the .text section to the .text.group section.
  - Complain about DT_RPATH for Fedora binaries.
  - Better reporting of problems in object files.  (#2013708)
  - Add a requirement on llvm-libs for clang and llvm plugins.  (#2014573)
  - Fix configuring annocheck without gcc-plugin.
  - Annocheck: Better reporting of debuginfod problems.
  - Tests: Fix bugs in debuginfod test.
  - Annocheck: Add tests based upon recent bug fixes.
  - Annocheck: Another tweak to glibc detection code.
  - Annocheck: Fix memory corruptions when using --debug-path and when a corrupt note is found.  (#20011438)
  - Annocheck: Fix MAYB results for mixed GO/C files.
  - Annocheck: Move some messages from VERBOSE to VERBOSE2.
  - Annocheck: Scan zero-length tool notes.
  - Annocheck: Fix covscan detected flaws.
  - plugins: Add more required build options.
  - Annocheck: Fix cf-prot test to fail if the CET notes are missing.
  - Annocheck: Skip gaps in the .plt section.
  - Plugins: Add -g option when building LLVM and Clang.
  - Annocheck: Add more cases of glibc startup functions.
  - Annocheck: Fix covscan detected problems.
  - Annocheck: Add --profile=el8.
  - gcc-plugin: Conditionalize generation of branch protection note.
  - Annocheck: Ignore gaps containing NOP instructions.
  - GCC Plugin: Fix detection of running inside the LTO compiler.  (#2004917)
  - Annocheck: Do not insist on the DT_AARCH64_PAC_PLT flag being present in AArch64 binaries.
  - Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result.
  - Annocheck: Do not set CFLAGS/LDFLAGS when building.  Take from environment instead.
  - Annocheck: Fix exit code when tests PASS.
  - Documentation: Add node for each hardening test.
  - Documentation: Install online.
  - Annocheck: Annote FAIL and MAYB results with URL to documentation
  - Annocheck: Add --no-urls and --provide-urls options
  - Annocheck: Add --help-<tool> option.
  - Annocheck: Fix fuzzing detected failures.
  - Annocheck: Add --profile option.
  - Docs: Document --profile option and rpminspect.yaml.
  - Annocheck: Skip GO/CET checks.  Fix fuzzing detected failures.
  - LLVM Plugin: Automatically choose the correct tests to run, based upon the version of Clang installed. (#1997444)
  - Annocheck: Fix memory corruption.  (#1996963)
  - Annocheck: Fix conditionalization of AArch64's PAC+BTI detection.
  - Annocheck: Add linker generated function for ppc64le exceptions.  (#1981410)
  - LLVM Plugin: Allow checks to be selected from the command line.
  - Annocheck: Examine DW_AT_producer for -flto.    
  - Annocheck: Conditionalize detection of AArch64's PAC+BTI protection.
  - Annocheck: Add linker generated function for s390x exceptions.  (#1981410)
  - Annocheck: Generate MAYB results for gaps in notes covering the .text section.  (#1991943)
  - Annocheck: Close DWARF file descriptors once the debug info is no longer needed.  (#1981410)
  - LLVM Plugin: Update to build with Clang v13.  (Thanks to: Tom Stellard <tstellar@redhat.com>)
  - Annocheck: Fix memory corruption.  (#1988715)
  - Annocheck: Skip certain tests for kernel modules.


author: Yara Ahmad <yahmad@redhat.com> - 2.36.1-4
changelog:
  - Fix addr2line from gcc-toolset-11-binutils having errors while compiling code 
    using LTO and Dwarf5  (#2153811)


author: Marek Polacek <polacek@redhat.com> 11.2.1-7
changelog:
  - update from releases/gcc-11-branch (#1996862)
    - PRs ada/100486, c++/70796, c++/92746, c++/93286, c++/94490, c++/102642,
  	c++/102786, debug/101378, debug/103046, debug/103315, fortran/87711,
  	fortran/87851, fortran/97896, fortran/99061, fortran/99348,
  	fortran/102521, fortran/102685, fortran/102715, fortran/102745,
  	fortran/102816, fortran/102817, fortran/102917, fortran/103137,
  	fortran/103138, fortran/103392, gcov-profile/100520, ipa/102714,
  	ipa/102762, ipa/103052, ipa/103246, ipa/103267, libstdc++/96416,
  	libstdc++/98421, libstdc++/100117, libstdc++/100153, libstdc++/100748,
  	libstdc++/101571, libstdc++/101608, libstdc++/102894,
  	libstdc++/103022, libstdc++/103086, libstdc++/103133,
  	libstdc++/103240, libstdc++/103381, middle-end/64888,
  	middle-end/101480, middle-end/102431, middle-end/102518,
  	middle-end/103059, middle-end/103181, middle-end/103248,
  	middle-end/103384, preprocessor/103130, rtl-optimization/102356,
  	rtl-optimization/102842, target/101985, target/102976, target/102991,
  	target/103205, target/103274, target/103275, testsuite/102690,
  	tree-optimization/100393, tree-optimization/102139,
  	tree-optimization/102505, tree-optimization/102572,
  	tree-optimization/102788, tree-optimization/102789,
  	tree-optimization/102798, tree-optimization/102970,
  	tree-optimization/103192, tree-optimization/103204,
  	tree-optimization/103237, tree-optimization/103255,
  	tree-optimization/103435
  - fix up #__VA_OPT__ handling (PR preprocessor/103415)


author: Marek Polacek <polacek@redhat.com> 11.2.1-8
changelog:
  - update from releases/gcc-11-branch (#2047286)
    - PRs ada/103538, analyzer/101962, bootstrap/103688, c++/85846, c++/95009,
  	c++/98394, c++/99911, c++/100493, c++/101715, c++/102229, c++/102933,
  	c++/103012, c++/103198, c++/103480, c++/103703, c++/103714,
  	c++/103758, c++/103783, c++/103831, c++/103912, c++/104055, c/97548,
  	c/101289, c/101537, c/103587, c/103881, d/103604, debug/103838,
  	debug/103874, fortran/67804, fortran/83079, fortran/101329,
  	fortran/101762, fortran/102332, fortran/102717, fortran/102787,
  	fortran/103411, fortran/103412, fortran/103418, fortran/103473,
  	fortran/103505, fortran/103588, fortran/103591, fortran/103606,
  	fortran/103607, fortran/103609, fortran/103610, fortran/103692,
  	fortran/103717, fortran/103718, fortran/103719, fortran/103776,
  	fortran/103777, fortran/103778, fortran/103782, fortran/103789,
  	ipa/101354, jit/103562, libfortran/103634, libstdc++/100017,
  	libstdc++/102994, libstdc++/103453, libstdc++/103501,
  	libstdc++/103549, libstdc++/103877, libstdc++/103919,
  	middle-end/101751, middle-end/102860, middle-end/103813, objc/103639,
  	preprocessor/89971, preprocessor/102432, rtl-optimization/102478,
  	rtl-optimization/103837, rtl-optimization/103860,
  	rtl-optimization/103908, sanitizer/102911, target/102347,
  	target/103465, target/103661, target/104172, target/104188,
  	tree-optimization/101615, tree-optimization/103523,
  	tree-optimization/103603, tree-optimization/103995


author: Marek Polacek <polacek@redhat.com> 11.2.1-9
changelog:
  - update from releases/gcc-11-branch (#2047286)
    - PRs fortran/104127, fortran/104212, fortran/104227, target/101529
  - fix up va-opt-6.c testcase


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.2
changelog:
  - fix wstring conversions in filesystem::path (PR libstdc++/95048, #2220896)
  - mark non-exported function always_inline (PR libstdc++/105671, #2221740)


author: Keith Seitz <keiths@redhat.com> - 10.1-14
changelog:
  - Backport "Save/restore file offset while reading notes in core file"
    (Keith Seitz, RHBZ 1931344)


author: Kevin Buettner <kevinb@redhat.com> - 10.2-1
changelog:
  - Rebase to FSF GDB 10.2.
  - Drop gdb-6.3-test-pie-20050107.patch.
  - Drop gdb-6.3-test-self-20050110.patch.
  - Drop gdb-6.5-bz218379-ppc-solib-trampoline-test.patch.
  - Drop gdb-6.6-buildid-locate-core-as-arg.patch.
  - Drop gdb-6.8-quit-never-aborts.patch.
  - Drop gdb-archer-pie-addons-keep-disabled.patch.
  - Drop gdb-archer-pie-addons.patch.
  - Drop gdb-archer-vla-tests.patch.
  - Drop gdb-archer.patch.
  - Drop gdb-attach-fail-reasons-5of5.patch.
  - Drop gdb-btrobust.patch.
  - Drop gdb-bz1219747-attach-kills.patch.
  - Drop gdb-bz533176-fortran-omp-step.patch.
  - Drop gdb-dts-rhel6-python-compat.patch.
  - Drop gdb-gnat-dwarf-crash-3of3.patch.
  - Drop gdb-jit-reader-multilib.patch.
  - Drop gdb-moribund-utrace-workaround.patch.
  - Drop gdb-rhbz1930528-fix-gnulib-build-error.patch.
  - Drop gdb-rhbz1932645-aarch64-ptrace-header-order.patch.
  - Drop gdb-vla-intel-fix-print-char-array.patch.
  - Drop gdb-vla-intel-fortran-strides.patch.
  - Drop gdb-vla-intel-stringbt-fix.patch.
  - Drop gdb-vla-intel-tests.patch.
  - Drop process_psymtab_comp_unit-type-unit.patch.
  - Drop gdb-testsuite-readline63-sigint-revert.patch.
  - Drop gdb-config.patch.
  - Add following upstream patches for Fortran stride / slice support:
    gdb-rhbz1964167-convert-enum-range_type.patch
    gdb-rhbz1964167-fortran-array-slices-at-prompt.patch
    gdb-rhbz1964167-fortran-array-strides-in-expressions.patch
    gdb-rhbz1964167-fortran-clean-up-array-expression-evaluation.patch
    gdb-rhbz1964167-fortran-range_type-to-range_flag.patch
    gdb-rhbz1964167-fortran-whitespace_array.patch
    gdb-rhbz1964167-move-fortran-expr-handling.patch


author: Keith Seitz <keiths@redhat.com> - 10.2-2
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Fix crash when expanding partial symtab..."
    (Tom Tromey. gdb/27743)


author: Keith Seitz <keiths@redhat.com> - 10.2-3.el8
changelog:
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnez, RH BZ 1903375)


author: Keith Seitz <keiths@redhat.com> - 10.2-4.el8
changelog:
  - Backport "Fix gdb.fortran/array-slices.exp with -m32"
    (Tom de Vries, testsuite/269970)
  - Backport "adjust gdb.python/flexible-array-member.exp expected pattern"
    (Simon Marchi)


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-4
changelog:
  - Work around unknown msgctl/semctl/shmctl cmd check issue in tests-m32
    and tests-mx32 as well (#1997082).


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-4
changelog:
  - Update to upstream 3.17.0 final.
  - Add valgrind-3.17.0-ppc64-isa-3.1{,tests}.patch
  - Add valgrind-3.17.0-s390_insn_as_string.patch
  - Add valgrind-3.17.0-debuginfod.patch
  - Add valgrind-3.17.0-clone-parent-res.patch


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-12-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Florian Weimer <fweimer@redhat.com> - 10.94-1
changelog:
  - Rebase to 10.94, brining in support for LLVM 15.  (#2118992)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.com> - 10.98-1
changelog:
  - GCC Plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Use real filename rather than debuginfo filename.  (#2152280)


author: Nick Clifton <nickc@redhat.com> - 11.05-1
changelog:
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158182)
  - Annocheck: Add more special glibc filenames.  (#2158100)


author: Nick Clifton <nickc@redhat.com> - 11.06-1
changelog:
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160701)
  - Spec file: Enable annotated building.


author: Nick Clifton <nickc@redhat.comn> - 2.38-15
changelog:
  - Adjust Provides and Requires fields of the sub-packages.
  - Use GTS-12 gcc to build static libraries.


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-29952)


author: Haochen Jiang <haochen.jiang@intel.com> 12.2.1-7.8.0.1
changelog:
  - Add attribute hot judgement for INLINE_HINT_known_hot hint
  - Enable small loop unrolling for O2
  - i386: Only enable small loop unrolling in backend [PR 107692]


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 2.0-1
changelog:
  - Fixes for problems reported by the package submission review:
     * Add %license entry to %file section.
     * Update License and BuildRequires tags.
     * Add Requires tag.
     * Remove %clean.
     * Add %check.
     * Clean up the %changelog.
  - Update to use version 2 of the specification and sources.


author: Nick Clifton <nickc@redhat.com> - 2.3-1
changelog:
  - Add annobin-tests subpackage containing some preliminary tests.
  - Remove link-time test for unsupported targets.


author: Nick Clifton <nickc@redhat.com> - 3.4-1
changelog:
  - Change type and size of symbols to STT_NOTYPE/0 so that they do not confuse GDB.  (#1539664)
  - Add run-on-binaries-in.sh script to allow the other scripts to be run over a repository.


author: Nick Clifton <nickc@redhat.com> - 3.6-1
changelog:
  - Add --ignore-gaps option to check-abi.sh script.
  - Use this option in the abi-test check.
  - Tweak hardening test to skip pic and stack protection checks.


author: Nick Clifton <nickc@redhat.com> - 5.0-1
changelog:
  - Bias file start symbols by 2 in order to avoid them confused with function symbols.  (#1554332)
  - Version jump is to sync the version number with the annobin plugins internal version number.


author: Nick Clifton <nickc@redhat.com> - 5.6-1
changelog:
  - Skip the isa_flags check in the ABI test because the crt[in].o files are compiled with different flags from the test files.


author: Nick Clifton <nickc@redhat.com> - 7.0-1
changelog:
  - Add -debug-rpm= option to annocheck.
  - Only use a 2 byte offset for the initial symbol on PowerPC.


author: Nick Clifton <nickc@redhat.com> - 7.1-1
changelog:
  - Skip some checks for relocatable object files, and dynamic objects.
  - Stop bogus complaints about stackrealignment not being enabled.


author: Nick Clifton <nickc@redhat.com> - 8.0-1
changelog:
  - Use a prefix for all annobin generated symbols, and make them hidden.
  - Only generate weak symbol definitions for linkonce sections.


author: Nick Clifton <nickc@redhat.com> - 8.11-1
changelog:
  - Handle function sections properly.  Handle .text.startup and .text.unlikely sections.  Improve gap detection and reporting.  (#1601055)


author: Nick Clifton <nickc@redhat.com> - 8.22-1
changelog:
  - Reduce version check to gcc major version number only.  Skip compiler option checks if binary not built with gcc.  (#1603089)


author: Nick Clifton <nickc@redhat.com> - 8.28-1
changelog:
  - Skip gaps covered by _x86.get_pc_thunk and _savegpr symbols. (#1619267)
  - Merge ranges where one is wholly covered by another.


author: Nick Clifton <nickc@redhat.com> - 8.31-1
changelog:
  - Fix bug in hardened tool which would skip gcc compiled files if the notes were too small.
  - Fix bugs in section-size tool.
  - Fix bug in built-by tool.


author: Nick Clifton <nickc@redhat.com> - 8.33-1
changelog:
  - Add timing tool to report on speed of the checks.
  - Add check for conflicting use of the -fshort-enum option.
  - Add check of the GNU Property notes.
  - Skip check for -O2 if compiled with -Og.  (#1624162)


author: Nick Clifton <nickc@redhat.com> - 8.38-1
changelog:
  - Generate notes and groups for .text.hot and .text.unlikely sections.
  - When -ffunction-sections is active, put notes for startup sections into .text.startup.foo rather than .text.foo.
  - Similarly put exit section notes into .text.exit.foo.  (#1630574)
  - Change annocheck's maybe result for GNU Property note being missing into a PASS if it is not needed and a FAIL if it is needed.


author: Nick Clifton <nickc@redhat.com> - 8.46-1
changelog:
  - Annobin:   Fix section name selection for startup sections.
  - Annocheck: Improve gap skipping heuristics.   (#1630574)


author: Nick Clifton <nickc@redhat.com> - 8.66-1
changelog:
  - Annocheck: Do not ignore -Og when checking to see if an optimization level has been set.  (#1624162)


author: Nick Clifton <nickc@redhat.com> - 8.67-1
changelog:
  - Annocheck: Only skip specific checks for specific symbols.  (#1666823)
  - Annobin: Record the setting of the -fomit-frame-pointer option.


author: Nick Clifton <nickc@redhat.com> - 8.68-1
changelog:
  - Annocheck: Skip checks for -D_FORTIFY_SOURCE and -D_GLIBCXX_ASSERTIONS if there is no compiler generated code in the binary.


author: Nick Clifton <nickc@redhat.com> - 8.69-1
changelog:
  - Annobin: Add support for .text.startup and .text.exit sections generated by gcc 9.
  - Annocheck: Add a note displaying tool.


author: Nick Clifton <nickc@redhat.com> - 8.76-1
changelog:
  - Report a missing -D_FORTIFY_SOUCRE option if -D_GLIBCXX_ASSERTIONS was detected.  (#1703499)
  - Do not report problems with -fstack-protection if the binary was not built by gcc or clang.  (#1703788)


author: Nick Clifton <nickc@redhat.com> - 8.77-1
changelog:
  - Another attempt at fixing the detection and reporting of missing -D_FORTIFY_SOURCE options.  (#1703500)


author: Nick Clifton <nickc@redhat.com> - 8.81-1
changelog:
  - Improve detection of GO binaries.
  - Add gcc version information to annobin notes.
  - Do not complain about missing FORTIFY_SOURCE and GLIBCXX_ASSERTIONS in LTO compilations.


author: Nick Clifton <nickc@redhat.com> - 8.83-1
changelog:
  - If notes cannot be found in the executable look for them in the debuginfo file, if available.
  - Generate a FAIL if notes are missing from the executable/debuginfo file.
  - Record and report the setting of the AArcht64 specific -mbranch-protection option.


author: Nick Clifton <nickc@redhat.com> - 9.06-1
changelog:
  - Annobin: Note when stack clash notes are generated.
  - Annocheck: Handle multiple builder IDs in the .comment section.


author: Nick Clifton <nickc@redhat.com> - 9.11-1
changelog:
  - Fix infinite loop hangup in annocheck.
  - Disable debuginfod support by default.
  - Improve parsing of .comment section.


author: Nick Clifton <nickc@redhat.com> - 9.12-1
changelog:
  - Improve builtby tool.
  - Stop annocheck complaining about missing notes when the binary is not compiled by either gcc or clang.
  - Skip the check of the ENTRY instruction for binaries not compiled by gcc or clang.  (#1809656)


author: Nick Clifton <nickc@redhat.com> - 9.13-1
changelog:
  - Rename gcc plugin directory to gcc-plugin.
  - Stop annocheck from complaining about missing options when the binary has been built in a mixed environment.


author: Nick Clifton <nickc@redhat.com> - 9.14-1
changelog:
  - Annobin: Use offsets stored in gcc's cl_option structure to access the global_options array, thus removing the need to check for changes in the size of this structure.


author: Nick Clifton <nickc@redhat.com> - 9.24-1
changelog:
  - Add support for installing clang and llvm plugins.
  - Temporary suppression of aarch64 pointer size check.  (#1860549)


author: Nick Clifton <nickc@redhat.com> - 9.28-1
changelog:
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)


author: Nick Clifton <nickc@redhat.com> - 9.31-1
changelog:
  - gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.


author: Nick Clifton <nickc@redhat.com> - 9.36-1
changelog:
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.


author: Nick Clifton <nickc@redhat.com> - 9.37-1
changelog:
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.


author: Nick Clifton <nickc@redhat.com> - 9.45-1
changelog:
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.


author: Nick Clifton <nickc@redhat.com> - 9.52-1
changelog:
  - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)


author: Nick Clifton <nickc@redhat.com> - 9.62-1
changelog:
  - Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)


author: Nick Clifton <nickc@redhat.com> - 9.63-1
changelog:
  - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)


author: Petr Pisar <ppisar@redhat.com> - 9.66-3
changelog:
  - Correct a package rename (bug #1949570)
  - Require docs subpackage by the other ones because of a license
  - Build-requiring perl-interpreter is enough


author: Nick Clifton <nickc@redhat.com> - 9.68-1
changelog:
  - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)


author: Nick Clifton <nickc@redhat.com> - 9.72-1
changelog:
  - Annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
  - gcc-plugin: Add support for ARM and RISCV targets.


author: Nick Clifton <nickc@redhat.com> - 9.74-1
changelog:
  - Annocheck: Better support for symbolic links.
  - Annocheck: In verbose mode, report the reason for skipping specific tests.  (#1969584)


author: Nick Clifton <nickc@redhat.com> - 9.78-1
changelog:
  - gcc-plugin: Do not record global versions of stack protection settings in LTO mode, if not set.  (#1958954)


author: Nick Clifton <nickc@redhat.com> - 9.80-1
changelog:
  - Tests: Skip glibc-notes test if the assembler does not support --generate-missing-build-notes.  (#1978573)
  - Tests: Skip objcopy test if objcopy does not support --merge-notes.


author: Nick Clifton <nickc@redhat.com> - 9.85-1
changelog:
  - Annocheck: Detect a missing CET note.  (#1991931)
  - Annocheck: Do not report future fails for AArch64 notes.
  - Annocheck: Warn about multiple --debug-file, --debug-rpm and --debug-dir options.


author: Nick Clifton <nickc@redhat.com> - 9.88-1
changelog:
  - Annocheck: Generate MAYB results for gaps in notes covering the .text section.  (#1991943)
  - Annocheck: Close DWARF file descriptors once the debug info is no longer needed.  (#1981410)
  - LLVM Plugin: Update to build with Clang v13.  (Thanks to: Tom Stellard <tstellar@redhat.com>)


author: Nick Clifton <nickc@redhat.com> - 9.89-1
changelog:
  - Annocheck: Conditionalize detection of AArch64's PAC+BTI protection.
  - Annocheck: Add linker generated function for s390x exceptions.  (#1981410)


author: Nick Clifton <nickc@redhat.com> - 9.90-1
changelog:
  - Annocheck: Add linker generated function for ppc64le exceptions.  (#1981410)
  - LLVM Plugin: Allow checks to be selected from the command line.
  - Annocheck: Examine DW_AT_producer for -flto.


author: Nick Clifton <nickc@redhat.com> - 9.92-1
changelog:
  - Annocheck: Fix memory corruption.  (#1996963)
  - spec file: Add the creation of a gcc-plugin version info file in /usr/lib/rpm/redhat.


author: Nick Clifton <nickc@redhat.com> - 9.93-1
changelog:
  - LLVM Plugin: Automatically choose the correct tests to run, based upon the version of Clang installed. (#1997444)
  - spec file: Add the installation of the annobon sources into /usr/src/annobin.


author: Nick Clifton <nickc@redhat.com> - 9.95-1
changelog:
  - Annocheck: Fix fuzzing detected failures.
  - Annocheck: Add --profile option.
  - Docs: Document --profile option and rpminspect.yaml.


author: Nick Clifton <nickc@redhat.com> - 10.01-1
changelog:
  - Documentation: Add node for each hardening test.
  - Documentation: Install online.
  - Annocheck: Annote FAIL and MAYB results with URL to documentation
  - Annocheck: Add --no-urls and --provide-urls options
  - Annocheck: Add --help-<tool> option.


author: Nick Clifton <nickc@redhat.com> - 10.04-1
changelog:
  - Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result.


author: Nick Clifton <nickc@redhat.com> - 10.08-1
changelog:
  - Annocheck: Fix covscan detected problems.
  - Annocheck: Add --profile=el8.
  - gcc-plugin: Conditionalize generation of branch protection note.


author: Nick Clifton <nickc@redhat.com> - 10.10-1
changelog:
  - Annocheck: Fix cf-prot test to fail if the CET notes are missing.
  - Annocheck: Skip gaps in the .plt section.
  - Plugins: Add -g option when building LLVM and Clang.


author: Nick Clifton <nickc@redhat.com> - 10.12-1
changelog:
  - Annocheck: Fix MAYB results for mixed GO/C files.
  - Annocheck: Move some messages from VERBOSE to VERBOSE2.
  - Annocheck: Scan zero-length tool notes.


author: Nick Clifton <nickc@redhat.com> - 10.13-1
changelog:
  - Annocheck: Fix memory corruptions when using --debug-path and when a corrupt note is found.  (#20011438)


author: Nick Clifton <nickc@redhat.com> - 10.16-1
changelog:
  - Fix configuring annocheck without gcc-plugin.
  - Annocheck: Better reporting of debuginfod problems.
  - Tests: Fix bugs in debuginfod test.


author: Nick Clifton <nickc@redhat.com> - 10.21-1
changelog:
  - Annocheck: Do not fail if a --skip-<name> option does not match a known test.
  - ldconfig-test: Skip the LTO check.


author: Nick Clifton <nickc@redhat.com> - 10.29-1
changelog:
  - gcc-plugin: Fix bug creating empty attachments.
  - Annocheck: Change MAYB result to SKIP for DT_RPATH.  (#2026300)


author: Nick Clifton <nickc@redhat.com> - 10.39-1
changelog:
  - Annocheck: Add /usr/lib/ld-linux-aarch64.so.1 to the list of known glibc binaries.  (#2033255)
  - Doc: Note that ENDBR is only needed as the landing pad for indirect branches/calls.  (#28705)
  - Spec File: Store full	gcc version release string in plugin info file.  (#2030671)


author: Nick Clifton <nickc@redhat.com> - 10.40-1
changelog:
  - Annocheck: Do not complaining about missing stack clash notes if the compilation used LTO.  (#2034946)


author: Nick Clifton <nickc@redhat.com> - 10.41-1
changelog:
  - Annocheck: Ignore gaps that contain the _start symbol (for AArch64).  (#1995224)
  - Annocheck: Ignore more glibc special binaries.  (#2037220)


author: Nick Clifton <nickc@redhat.com> - 10.47-1
changelog:
  - Annocheck: Improve detection of kernel modules.
  - GCC Plugin: Only default to link-once when using gcc-12 or later.  (#2039297)


author: Nick Clifton <nickc@redhat.com> - 10.51-1
changelog:
  - Annocheck: Add an option to disable the use of debuginfod (if available).
  - Annocheck: Add more glibc special file names.
  - Annocheck: Skip some tests for BPF binaries.


author: Nick Clifton <nickc@redhat.com> - 10.66-1
changelog:
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled in LTO mode.


author: Nick Clifton <nickc@redhat.com> - 10.67-1
changelog:
  - Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled by golang.


author: Nick Clifton <nickc@redhat.com> - 10.69-1
changelog:
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)


author: Nick Clifton <nickc@redhat.com> - 10.72-1
changelog:
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Nick Clifton <nickc@redhat.com> - 10.74-1
changelog:
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.


author: Nick Clifton <nickc@redhat.com> - 10.76-3
changelog:
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.com> - 10.85-1
changelog:
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.


author: Nick Clifton <nickc@redhat.com> - 10.91-1
changelog:
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.


author: Nick Clifton <nickc@redhat.com> - 10.93-1
changelog:
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.


author: Nick Clifton <nickc@redhat.com> - 11.02-1
changelog:
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158182)


author: Nick Clifton <nickc@redhat.com> - 11.09-1
changelog:
  - Libannocheck: Fix thinko in debugging code.
  - Annocheck: Fix LTO test.
  - Notes: Display notes held in separate dbeuginfo files.


author: Nick Clifton <nickc@redhat.com> - 12.02-1
changelog:
  - gcc plugin: Add filenames to string notes.  Allow use of ANNOBIN environment variable.
  - llvm plugin: Add workaround for building with LLVM-16.
  - clang plugin: Fix for building with Clang-16.


author: Nick Clifton <nickc@redhat.com> - 12.04-1
changelog:
  - configure: More improvements.
  - annocheck: Fix seg-fault when checking for glibc components in string format notes.


author: Nick Clifton <nickc@redhat.com> - 12.07-1
changelog:
  - gcc-plugin: generate warnings about misspelt -D_FORTIFY_SOURCE and/or -D_GLIBCXX_ASSERTIONS options.


author: Nick Clifton <nickc@redhat.com> - 12.14-1
changelog:
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)
  - Annocheck: Check for string notes in separate debug info files.  (#2211694)
  - Annocheck: Add support for el10 and rhel-10 profiles.  (RHEL-526)


author: Nick Clifton <nickc@redhat.com> - 12.16-1
changelog:
  - Spec File: Rebuild with annobin annotation.  (#2217812)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.
  - Annocheck: Remove dependency upon libiberty.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51018)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53572)


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Rebase to bring in improvements for locating string notes.  (RHEL-79974)
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.
  - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217911)
  - Spec File: Build static libraries with -fno-lto.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22817)
  - [2.40-18: was a failed attempt to fix RHEL-22817]


author: Marek Polacek <polacek@redhat.com> 13.2.1-4
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/110488, ada/111434, c++/99631, c++/111471, c++/111485, c++/111493,
  	c++/111512, fortran/68155, fortran/92586, fortran/111674,
  	libstdc++/108046, libstdc++/111050, libstdc++/111102,
  	libstdc++/111511, middle-end/111699, modula2/111510, target/111121,
  	target/111411, tree-optimization/110315, tree-optimization/110386,
  	tree-optimization/111331, tree-optimization/111519


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-16940)


author: Marek Polacek <polacek@redhat.com> 13.3.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.3 release
    - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
  	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
  	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
  	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
  	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
  	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
  	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
  	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
  	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
  	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
  	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
  	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
  	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
  	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
  	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
  	fortran/114825, fortran/115039, gcov-profile/114115,
  	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
  	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
  	libquadmath/114533, libstdc++/66146, libstdc++/93672,
  	libstdc++/104606, libstdc++/107800, libstdc++/108976,
  	libstdc++/110050, libstdc++/110054, libstdc++/113841,
  	libstdc++/114147, libstdc++/114316, libstdc++/114359,
  	libstdc++/114367, libstdc++/114401, libstdc++/114750,
  	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
  	middle-end/110027, middle-end/111151, middle-end/111632,
  	middle-end/111683, middle-end/112684, middle-end/112732,
  	middle-end/113396, middle-end/113622, middle-end/114070,
  	middle-end/114348, middle-end/114552, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/114907,
  	rtl-optimization/54052, rtl-optimization/114415,
  	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
  	sanitizer/114687, sanitizer/114743, sanitizer/114956,
  	sanitizer/115172, target/88309, target/101865, target/105522,
  	target/110621, target/111234, target/111600, target/111610,
  	target/111822, target/112397, target/113095, target/113233,
  	target/113950, target/114049, target/114130, target/114160,
  	target/114172, target/114175, target/114272, target/114747,
  	target/114752, target/114794, target/114837, target/114848,
  	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
  	testsuite/114036, testsuite/114662, tree-optimization/91838,
  	tree-optimization/109925, tree-optimization/110838,
  	tree-optimization/111009, tree-optimization/111268,
  	tree-optimization/111407, tree-optimization/111736,
  	tree-optimization/111882, tree-optimization/112281,
  	tree-optimization/112303, tree-optimization/112793,
  	tree-optimization/112961, tree-optimization/112991,
  	tree-optimization/113552, tree-optimization/113630,
  	tree-optimization/113670, tree-optimization/113831,
  	tree-optimization/113910, tree-optimization/114027,
  	tree-optimization/114115, tree-optimization/114121,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114246, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114485,
  	tree-optimization/114566, tree-optimization/114672,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114787,
  	tree-optimization/114799, tree-optimization/114876,
  	tree-optimization/114965, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154
  - add --without-clang-plugin --without-llvm-plugin to annobin configure
    options


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-39736)


author: Nick Clifton <nickc@redhat.com> - 9.07-1
changelog:
  - Rebase to 9.07 release:
  - Annobin: Add checks of the exact location of the examined switches.
  - Annobin: Note when stack clash notes are generated.
  - Annocheck: Handle multiple builder IDs in the .comment section.
  - Add configure option to suppress building annocheck.
  - Fix debuginfod test.
  - Correct the build requirement for building with debuginfod support.
  - Add debuginfod support.
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Rebuild againt latest gcc-10.
  - Add clang plugin (experimental).
  - Have annocheck ignore notes with an end address of 0.
  - Improve checking of gcc versions.
  - Do not skip positive results.
  - Generate a WARN result for code compiled with instrumentation enabled.  (#1753918)
  - Replace address checks with dladdr1.
  - Use libabigail like checking to ensure variable address consistency.
  - Skip generation of global notes for hot/cold sections.
  - Generate FAIL results if -Wall or -Wformat-security are missing.
  - If notes cannot be found in the executable look for them in the debuginfo file, if available.
  - Generate a FAIL if notes are missing from the executable/debuginfo file.
  - Record and report the setting of the AArcht64 specific -mbranch-protection option.
  - Improve detection of GO binaries.
  - Add gcc version information to annobin notes.
  - Do not complain about missing FORTIFY_SOURCE and GLIBCXX_ASSERTIONS in LTO compilations.
  - Allow compiler used to run tests to be specified on the command line.  (#1723401)


author: Nick Clifton <nickc@redhat.com> - 2.32-7
changelog:
  - Stop gold from aborting when it encounters input sections with the same name and different flags.  (#1722715)


author: Nick Clifton <nickc@redhat.com> - 2.32-17
changelog:
  - Fix a potential seg-fault in the BFD library when parsing pathalogical debug_info sections.  (#1779255)
  - Fix a potential memory exhaustion in the BFD library when parsing corrupt DWARF debug information.
  - Backport H.J.Lu's patch to add a workaround for the JCC Errata to the assembler. (#1779417)
  - Fix potential integer overflow in readelf.  (#1740470)
  - Fix potential integer overflow in GOLD.  (#1739491)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-11
changelog:
  - Add explict libstdc++-devel BuildRequires for demangle support.
  - Add elfutils-0.170-unwind.patch. (#1555726)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.171-1
changelog:
  - New upstream release.
    - DWARF5 and split dwarf, including GNU DebugFission, support.
    - readelf: Handle all new DWARF5 sections.
      --debug-dump=info+ will show split unit DIEs when found.
      --dwarf-skeleton can be used when inspecting a .dwo file.
      Recognizes GNU locviews with --debug-dump=loc.
    - libdw: New functions dwarf_die_addr_die, dwarf_get_units,
      dwarf_getabbrevattr_data and dwarf_cu_info.
      libdw will now try to resolve the alt file on first use
      when not set yet with dwarf_set_alt.
      dwarf_aggregate_size() now works with multi-dimensional arrays.
    - libdwfl: Use process_vm_readv when available instead of ptrace.
    - backends: Add a RISC-V backend.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.172-1
changelog:
  - New upstream release.
    - No functional changes compared to 0.171.
    - Various bug fixes in libdw and eu-readelf dealing with bad DWARF5
      data. Thanks to running the afl fuzzer on eu-readelf and various
      testcases.
    - eu-readelf -N is ~15% faster.


author: Mark Wielaard <mjw@redhat.com> - 0.173-1
changelog:
  - New upstream release
    - More fixes for crashes and hangs found by afl-fuzz. In particular
      various functions now detect and break infinite loops caused by bad
      DIE tree cycles.
    - readelf: Will now lookup the size and signedness of constant value
      types to display them correctly (and not just how they were encoded).
    - libdw: New function dwarf_next_lines to read CU-less .debug_line data.
      dwarf_begin_elf now accepts ELF files containing just .debug_line
      or .debug_frame sections (which can be read without needing a DIE
      tree from the .debug_info section).
      Removed dwarf_getscn_info, which was never implemented.
    - backends: Handle BPF simple relocations.
      The RISCV backends now handles ABI specific CFI and knows about
      RISCV register types and names.

  - Add scl macros and elfutils-0.173-dts.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.174-1
changelog:
  - New upstream release
    - libelf, libdw and all tools now handle extended shnum and shstrndx
      correctly
    - elfcompress: Don't rewrite input file if no section data needs
      updating.  Try harder to keep same file mode bits (suid) on rewrite.
    - strip: Handle mixed (out of order) allocated/non-allocated sections.
    - unstrip: Handle SHT_GROUP sections.
    - Fixes CVE-2018-16062, CVE-2018-16402 and CVE-2018-16403.


author: Mark Wielaard <mjw@redhat.com> - 0.176-1
changelog:
  - Update to elfutils-0.176.
    - Fixes CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
            CVE-2019-7664, CVE-2019-7665.


author: Mark Wielaard <mjw@redhat.com> - 0.176-4
changelog:
  - Add elfutils-0.176-gcc-pr88835.patch
  - Add elfutils-0.176-xlate-note.patch
  - Add elfutils-0.176-elf-update.patch


author: Marek Polacek <polacek@redhat.com> 9.1.1-2
changelog:
  - update from Fedora 9.1.1-2 (#1728745)
  - apply Fortran patches (#1722881)
  - do not include libasan5 and libubsan1 on RHEL 8 and use the system
    version (#1722892)


author: Marek Polacek <polacek@redhat.com> 9.2.1-2
changelog:
  - update from Fedora gcc-9.2.1-2 (#1747158)
  - fix ABI change in deque iterators (PR libstdc++/92267)
  - fix up sink select_best_block (PR tree-optimization/91355)
  - revert PR tree-optimization/91790 fix
  - allow MODE_PARTIAL_INT modes for integer constant input operands
    (PR other/92090)
  - fix adjust_unroll_factor (PR middle-end/90796)
  - fixes for SVE Vector PCS on AArch64: emit .variant_pcs for
    aarch64_vector_pcs symbol references (#1726641)


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.90.20190304-19
changelog:
  - Rebase to FSF GDB 8.2.90.20190301 (8.3pre).
  - Rewrite gdb-6.6-buildid-locate.patch.
  - Add (temporarily) gdb-fix-aarch64-enable-unittests.patch.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.90.20190320-21
changelog:
  - Rebase to FSF GDB 8.2.90.20190320 (8.3pre).
  - Fix 'New gdb terminal colors are unreadable on GNOME Terminal "dark"
    theme.' (Tom Tromey, RH BZ 1688372).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-1
changelog:
  - Release GDB 8.3.
  - Fix 'gcore does not support COREFILTER_ELF_HEADERS' (Sergio Durigan
    Junior, RH BZ 1371380).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-2
changelog:
  - "Fix" segfault that happens on parse_macro_definition because
    debugedit corrupts the .debug_macro section (Sergio Durigan Junior,
    RH BZ 1708192).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-3
changelog:
  - Complement previous fix of a segfault that happens on
    parse_macro_definition (RHBZ 1715008, Sergio Durigan Junior).


author: Keith Seitz <keiths@redhat.com> - gcc-toolset-9 8.3-1
changelog:
  - Add Buildrequire for boost-devel.
  - Include guile support for RHEL.
  - Add gating for gcc-toolset-9.
  - Define global __python to workaround scl python issue.


author: DJ Delorie <dj@redhat.com> - 0.7.91-27
changelog:
  - Fix aarch64 long parameters (via $r8) support.
  - Make system_call_params test compare more exactly.


author: Patsy Griffin Franklin <pfrankli@redhat.com> 1:4.2.1-9
changelog:
  - Fix build failure caused by automake versioning differences related
    to the glob changes.
  - Fix testing failure due to Perl changes related to expanding paths.


author: Frank Ch. Eigler <fche@redhat.com> - 4.1-2
changelog:
  - Disable various host-service-related options.
  - Correct GNU_parameter_ref dwarf feature typo.
  - Upstream release.


author: Mark Wielaard <mjw@redhat.com> - 3.14.0-8
changelog:
  - Update valgrind-3.14.0-jm-vmx-constraints.patch for ppc64. (#1658680)
  - Show all diff files in check, not just the main/default one.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-5
changelog:
  - Add valgrind-3.15.0-exp-sgcheck-no-aarch64.patch
  - Add valgrind-3.15.0-scalar-arm64.patch
  - Add valgrind-3.15.0-scalar-x86.patch


author: Mark Wielaard <mjw@redhat.com> - 3.15.0-6
changelog:
  - Update valgrind-3.15.0-copy_file_range.patch.
  - Update valgrind-3.15.0-some-stack-protector.patch to include getoff.
  - Add valgrind-3.15.0-some-Wl-z-now.patch
  - Add valgrind-3.15.0-s390x-wrap-drd.patch


author: Remi Collet <remi@fedoraproject.org> - 2.2.5-1
changelog:
  - Update to 2.2.5
  - fix double-free in gdImagePngPtr(). CVE-2017-6362
  - fix buffer over-read into uninitialized memory. CVE-2017-7890


author: mskalick@redhat.com - 2.2.5-6
changelog:
  - Check return value in gdImageBmpPtr to avoid double free (CVE-2018-1000222)
    Resolves: RHBZ#1621956


author: fjanus@redhat.com - 2.2.5-7
changelog:
  - Fix CVE-2018-14553 - Potential Null pointer dereference in gdImageClone
    Resolves: RHBZ#1811788
  - Fixed heap based buffer overflow in gd_color_match.c:gdImageColorMatch() in libgd as used in imagecolormatch()
    Resolves: RHBZ#1678104 (CVE-2019-6977)
  - Fixed potential double-free in gdImage*Ptr()
    Resolves: RHBZ#1679002 (CVE-2019-6978)


author: Kevin Buettner <kevinb@redhat.com> - 9.1-6
changelog:
  - Backport patches fixing abort when working directory is deleted.
    (RHBZ 1869484, Sergio Durigan Junior)


author: Deji Akingunola <dakingun@gmail.com> - 0.0.15-1.svn20080117
changelog:
  - Update to a svn snapshot for gnome-scan
  - Apply patch to fix extensions loading on 64bit systems
  - Building the docs on ppc64 segfaults, avoid it for now.


author: Nils Philippsen - 0.0.22-2
changelog:
  - use the same timestamps for certain documentation files on all architectures
    to avoid multi-lib conflicts (#481404)
  - consolidate spec files between OS releases
  - reenable building documentation on ppc64
  - explicitly list more build requirements and/or versions to catch eventual
    problems during future builds


author: Nils Philippsen
changelog:
  - version 0.1.0
  - use "--disable-gtk-doc" to avoid rebuilding documentation (#481404)
  - remove *.la files in %{_libdir}/gegl-*/ (#509292)


author: Deji Akingunola <dakingun@gmail.com> - 0.1.0-3
changelog:
  - Rebuild for babl-0.1.2
  - Backport upstream patch that removed babl processing time instrumentation


author: Nils Philippsen <nils@redhat.com> - 0.1.2-1
changelog:
  - version 0.1.2
  - remove obsolete cflags, babl-instrumentation, autoreconf patches
  - backported: don't leak each node set on a GeglProcessor


author: Nils Philippsen <nils@redhat.com>
changelog:
  - avoid buffer overflow in gegl_buffer_header_init()
  - correct gegl library version, use macro for it


author: Nils Philippsen <nils@redhat.com> - 0.1.2-3
changelog:
  - build with -fno-strict-aliasing
  - use PIC/PIE because gegl is likely to deal with data coming from untrusted
    sources


author: Nils Philippsen <nils@redhat.com> - 0.1.6-1
changelog:
  - version 0.1.6
  - remove obsolete patches
  - fix erroneous use of destdir
  - correct source URL
  - add BR: exiv2-devel, jasper-devel, suitesparse-devel
  - update BR versions
  - update --with-*/--without-* configure flags
  - replace tabs with spaces for consistency


author: Nils Philippsen <nils@redhat.com> - 0.1.8-1
changelog:
  - version 0.1.8
  - drop all patches
  - add BRs: gdk-pixbuf2-devel, lensfun-devel
  - update BR version: glib2-devel
  - use %_hardened_build macro instead of supplying our own hardening flags


author: Nils Philippsen <nils@redhat.com> - 0.2.0-1
changelog:
  - version 0.2.0
  - split off workshop (i.e. experimental) operations
  - don't build/package workshop operations on EL


author: Nils Philippsen <nils@redhat.com> - 0.2.0-11
changelog:
  - replace lua-5.2 patch by upstream commit
  - fix buffer overflow in and add plausibility checks to ppm-load op
    (CVE-2012-4433)
  - fix multi-lib issue in generated documentation


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.2.0-30
changelog:
  - Fixed building with libopenraw-0.1
  - Added rubygems to BuildRequires to fix build error
  - Modernised the .spec file a bit
  - Disabled silent build


author: Kalev Lember <klember@redhat.com> - 0.4.18-1
changelog:
  - Update to 0.4.18
  - Switch to meson build system
  - Build against SDL2 instead of SDL 1
  - Enable gexiv2 support


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 0.4.62-1.0.1.1
changelog:
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 build (songmingliang@uniontech.com)
  - Exclude loongarch64 (rb01097748@alibaba-inc.com)


author: Kalev Lember <kalevlember@gmail.com> - 1.99.2-1
changelog:
  - Update to 1.99.2
  - The shared library is gone in this release and all users should use the
    dbus service directly


author: Kalev Lember <kalevlember@gmail.com> - 1.99.2-2
changelog:
  - Review fixes (#999153)
  - Drop ldconfig calls that are unnecessary now that the shared library is gone
  - Drop the build dep on gobject-introspection-devel
  - Include API-Documentation.txt in the -server subpackage


author: Kalev Lember <klember@redhat.com> - 2.4.0-1
changelog:
  - Update to 2.4.0
  - Package new libgeoclue-2.0 library in -libs subpackage
  - Fix directory ownership for /usr/libexec/geoclue-2.0/demos/
  - Use license macro for COPYING


author: Kalev Lember <klember@redhat.com> - 2.5.0-1
changelog:
  - Update to 2.5.0
  - Switch to the meson build system
  - Build gtk-doc documentation
  - Remove ldconfig scriptlets


author: Milan Crha <mcrha@redhat.com> - 2.6.0-8
changelog:
  - Backport Fedora change to provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format)
  - Resolves: RHEL-78739


author: Paul Howarth <paul@city-fan.org> - 2.3.1-1
changelog:
  - Update to 2.3.1
    - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
      greater
    - Previously, on an invalid gzip file, geoipupdate would output binary data
      to stderr; it now displays an appropriate error message
    - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
    - $(sysconfdir) is now created if it doesn't exist (GH#33)
    - The sample config file is now usable (GH#33)


author: Paul Howarth <paul@city-fan.org> - 2.4.0-1
changelog:
  - Update to 2.4.0
    - geoipupdate now checks that the database directory is writable: if it is
      not, it reports the problem and aborts
    - geoipupdate now acquires a lock when starting up to ensure only one
      instance may run at a time: a new option, 'LockFile', exists to set the
      file to use as a lock ('.geoipupdate.lock' in the database directory by
      default)
    - geoipupdate now prints out additional information from the server when a
      download request results in something other than HTTP status 2xx; this
      provides more information when the API does not respond with a database
      file
    - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
    - Previously, a variable named 'ERROR' was used, which caused issues building
      on Windows (GH#36)
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - noarch subpackages always available now
    - libcurl-devel always available now


author: Paul Howarth <paul@city-fan.org> - 2.5.0-1
changelog:
  - Update to 2.5.0
    - Replace use of strnlen() due to lack of universal availability (GH#71)
    - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
    - Remove unused base64 library (GH#68)
    - Add the new configuration option 'PreserveFileTimes'; if set, the
      downloaded files will get the same modification times as their original on
      the server (default is '0') (GH#63)
    - Use the correct types when calling 'curl_easy_setopt()'; this fixes
      warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
    - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
      'ProductIds' option was renamed to 'EditionIDs'; the old options will
      continue to work, but upgrading to the new names is recommended for
      forward compatibility


author: Jens Petersen <petersen@redhat.com> - 1.3-2
changelog:
  - add pkg git as URL (#1093541)
  - downgrade license tag to GPLv2+ in line with rpm (redhat-rpm-config is GPL+)
  - sync with current ghc-rpm-macros: add ghc_arches for backwards compatibility


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 5.50 at last...
  - hpdj 2.6
  - Added 3rd party drivers:
    - Lexmark 5700 (lxm5700m)
    - Alps MD-* (md2k, md5k)
    - Lexmark 2050, 3200, 5700 and 7000 (lex2050, lex3200, lex5700, lex7000)


author: Michael Stefaniuc <mstefani@redhat.com>
changelog:
  - added the stp driver from the gimp-print project.
    It supports high quality printing especialy with Epson Stylus Photo.


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - merged in some patches that got away:
    * Fri Sep  1 2000 Mitsuo Hamada <mhamada@redhat.com>
    - add support JIS B size
    - fix the problem of reconverting GNUPLOT output


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - upgraded to 6.51, a major version upgrade
  - rewrote spec file, threw out some patches
  - turned on IBM's Omni print drivers interface
  - turned on HP's hpijs print drivers interface
  - turned on every driver that looked usable from linux
  - sacrificed a chicken to integrate the old Japanese drivers
  - - This didn't work. The japanese patches are turned off, pending review.
  - - I can do loops with C, but the bugs are in Postscript init files


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-2
changelog:
  - luckily, I had a spare chicken. Thanks to some work by Nakai, and one last
  - desperate search through google, everything /seems/ to be working. I know
  - that there are going to be problems in the japanese code, and I need to turn
  - on the cjk font map from adobe, but it /works/ at the moment.


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-4
changelog:
  - applied drepper@redhat.com's patch for #50300
  - fixed build deps on zlib-devel and libpng-devel, #49853
  - made gs_init.ps a config file; #25096
  - O\^/nZ the daTa directorieZ now; #50693


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-9
changelog:
  - applied IBM's glib patches for Omni, which now works.
  - BE AWARE: we now link against libstdc++ and glib for this, and use a c++
  - link stage to do the dirty.
  - added glib-devel buildreq and glib req, I don't think we require everything
  - yet, I could pull in sasl.


author: Bernhard Rosenkraenzer <bero@redhat.com> 6.52-1
changelog:
  - Updates:
    - ghostscript 6.52
    - hpdj 2.6 -> pcl3 3.3
    - CJK Patchlevel 3, adobe-cmaps 200109
    - gimp-print 4.2.0
  - Adapt patches
  - Fix various URLs
  - Begin cleaning up spec file
  - Fix bugs #21879 and #50923


author: Tim Waugh <twaugh@redhat.com> 6.52-6
changelog:
  - Fix config patch so that gs --help displays the right thing.
  - Don't ship sysvlp.sh.
  - Fix some shell scripts.
  - Ship escputil man page (bug #58919).


author: Tim Waugh <twaugh@redhat.com> 7.05-1
changelog:
  - 7.05.
  - No longer need mkstemp, vflib.fixup, quoting, or PARANOIDSAFER
    patches.
  - Don't apply CJK patches any more (no longer needed).
  - Updated Source15, Patch0, Patch10, Patch5, Patch24, Patch14, Patch12.
  - Made gdevdmpr.c compile again.
  - Move gimp-print to a separate package.
  - Ship the shared object too (and a .so file that is dlopened).
  - Update Omni patch.  No longer need Omni_path, Omni_quiet, Omni_glib patches.
  - Require Omni >= 0.6.1.
  - Add patch to fix gtk+ initial window size.
  - Add devel package with header files.
  - Turn on IJS support.
  - Update hpijs to 1.1.
  - Don't ship the hpijs binary in the ghostscript package.
  - Use -fPIC when building ijs.


author: Tim Waugh <twaugh@redhat.com> 7.05-2
changelog:
  - Don't apply bogus parts of vflib patch (bug #65268).
  - Work around Omni -sPAPERSIZE=a4 problem (bug #65269).


author: Tim Waugh <twaugh@redhat.com> 7.05-8
changelog:
  - Requires recent version of patchutils (bug #65947).
  - Don't ship broken man page symlinks (bug #66238).


author: Tim Waugh <twaugh@redhat.com> 7.05-25
changelog:
  - Fix level 1 PostScript output (bug #78450).
  - No need to carry gomni.c, since it comes from the patch.


author: Tim Waugh <twaugh@redhat.com> 7.05-26
changelog:
  - Don't ship the shared object yet (part of bug #79340).
  - Don't make the gtk package, since that needs the shared object.


author: Tim Waugh <twaugh@redhat.com> 7.05-33
changelog:
  - Add some missing font aliases (bug #73342).
  - Use the system jpeg library.
  - Update hpijs to 1.3.1.
  - Update gdevcups.c from cups-1.1.18.


author: Tim Waugh <twaugh@redhat.com> 7.05-34
changelog:
  - Apply fix for CJK font search method when the fonts are not available
    (bug #83516).
  - The gb18030 patch no longer applies here.


author: Tim Waugh <twaugh@redhat.com> 7.06-1
changelog:
  - 7.06.
  - Updated config, vflib.fixup patches.
  - No longer need dx6, jpeg patches.
  - No longer need to add in missed GNU drivers.
  - Turn off dj970 driver (hpijs drives that).


author: Tim Waugh <twaugh@redhat.com> 7.07-1
changelog:
  - 7.07.
  - Parametrize build_libgs.
  - Remove Omni requirement (bug #88177).
  - Fix ghostscript-gtk obsoletes: line (bug #88175).


author: Tim Waugh <twaugh@redhat.com> 7.07-15
changelog:
  - Build for Fedora Core 1 printer drivers update.
  - Conflicts with foomatic before hpijs 1.5 data.
  - Make fontconfig optional.


author: Tim Waugh <twaugh@redhat.com> 7.07-17
changelog:
  - Removed stp driver.  Use the IJS version (ijsgimpprint) instead.
  - No longer conflicts with foomatic for hpijs versioning.


author: Tim Waugh <twaugh@redhat.com> 7.07-19
changelog:
  - Attempt to fix gdevcups crash (bug #114256).
  - Make gs dynamically link to libgs (bug #114276).
  - Fix gdevesmv.c's misuse of const (bug #114250).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Run /sbin/ldconfig in %post/%postun.
  - Stricter requirements for the main package in the subpackages.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.1
changelog:
  - Switch to ESP Ghostscript.
  - 8.15rc3.
  - Lots of patches dropped.  Perhaps some will need to be re-added.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.2
changelog:
  - Drop 'Provides: libijs.so' because it is incorrect.
  - Build igcref.c with -O0 to work around bug #150771.
  - Renumber patches.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.4
changelog:
  - Add Japanese fonts to FAPIcidfmap (bug #161187).
  - Moved Resource directory.
  - Added use-external-freetype patch (bug #161187).


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.5
changelog:
  - Split font configuration (bug #161187).
  - Reverted this change:
    - Build requires xorg-x11-devel, not XFree86-devel.


author: Tim Waugh <twaugh@redhat.com> 8.15.2-9
changelog:
  - Apply CJKV patch from svn164:165 plus the fix from svn173:174 (bug #194592,
    bug #203712, possibly bug #167596).


author: Tim Waugh <twaugh@redhat.com> 8.15.3-2
changelog:
  - 8.15.3.  No longer need gtk2, ps2epsi, badc, pagesize,
    use-external-freetype, split-font-configuration or cjkv patches.
  - Renumbered patches.


author: Tim Waugh <twaugh@redhat.com> 8.15.3-6
changelog:
  - Configure with --with-drivers=ALL since the advertised default is not
    what gets used (bug #223819).


author: Tim Waugh <twaugh@redhat.com> 8.15.3-7
changelog:
  - dvipdf script fixes (bug #88906).
  - Moved libijs.so and libgs.so into devel package (bug #203623).


author: Tim Waugh <twaugh@redhat.com> 8.15.4-3
changelog:
  - Apply fonts in CIDFnmap even if the same fontnames are already registered
    (bug #163231).
  - New file CIDFmap (bug #233966).
  - Allow local overrides for FAPIcidfmap, cidfmap and Fontmap (bug #233966).


author: Tim Waugh <twaugh@redhat.com> 8.60-0.r8112.1
changelog:
  - 8.60 snapshot from svn.  Patches dropped:
    - big-cmap-post
    - split-cidfnmap
    - exactly-enable-cidfnmap
    - Fontmap.local
    No longer needed:
    - gxcht-64bit-crash


author: Tim Waugh <twaugh@redhat.com> 8.61-2
changelog:
  - Add /usr/share/fonts to fontpath (bug #402551).
  - Restore cidfmap-switching bits, except for FAPIcidfmap which is no
    longer used.
  - Add runlibfileifexists to gs_init.ps.
  - Build with --disable-compile-inits (bug #402501).


author: Tim Waugh <twaugh@redhat.com> 8.61-9
changelog:
  - Build with jasper again (bug #433897).  Build requires jasper-devel, and
    a patch to remove jas_set_error_cb reference.


author: Tim Waugh <twaugh@redhat.com> 8.62-4
changelog:
  - Applied patch to work around bug #229174.
  - Applied patch from upstream to fix box_fill_path for shfill (bug #452348).


author: Tim Waugh <twaugh@redhat.com> 8.63-1
changelog:
  - 8.63.  No longer need r8591 or incomplete-ccittfax patches.
  - Compile without strict aliasing opts due to warnings across several
    files.
  - Don't run autogen.sh for main package, just for ijs which doesn't
    ship with a configure script.


author: Tim Waugh <twaugh@redhat.com> 8.64-6
changelog:
  - Applied patch to fix CVE-2009-0792 (bug #491853).
  - Applied patch to fix CVE-2009-0196 (bug #493379).


author: Tim Waugh <twaugh@redhat.com> 8.64-11
changelog:
  - Fixed CVE-2009-0583,0584 patch by using 255 as the maximum number of
    points, not 100, and by not treating a missing black point tag as an
    error (bug #487744).


author: Tim Waugh <twaugh@redhat.com> 8.70-1
changelog:
  - 8.70.
  - License has changed to GPLv3+.  Packages containing programs that
    link to libgs/libijs are:
    - foomatic (GPLv2+)
    - libspectre (GPLv2+)
    - ImageMagick (ImageMagick, listed on Licensing wiki page under
      "Good Licenses" and marked as GPLv3 compat)
    - gutenprint (GPLv2+)


author: Tim Waugh <twaugh@redhat.com> 8.70-3
changelog:
  - Don't ship libtool la files (bug #542674).
  - Fix debugging output from gdevcups (CVE-2009-4270, bug #540760).
  - Harden ghostscript's debugging output functions (bug #540760).


author: Tim Waugh <twaugh@redhat.com> 8.70-6
changelog:
  - Fixed pdftoraster so that it waits for its sub-process to exit.
  - Another gdevcups duplex fix from upstream revision 10631
    (bug #541604).


author: Tim Waugh <twaugh@redhat.com> 8.71-4
changelog:
  - Actually revert the upstream gdevcups changes (bug #563313).
  - Fixed pdf2dsc.ps (bug #565935).
  - Use fixed patch for LDFLAGS to make sure libgs.so gets a soname
    (bug #565935).


author: Tim Waugh <twaugh@redhat.com> 8.71-6
changelog:
  - Fixed summary.
  - Fixed macros in changelog.
  - Avoid mixed spaces and tabs.
  - Ship COPYING file.
  - Added comments for all patches.
  - More consistent macro use.


author: Tim Waugh <twaugh@redhat.com> 8.71-7
changelog:
  - Don't own the %{_datadir}/ghostscript or
    %{_datadir}/ghostscript/conf.d directories as the filesystem
    package already does (bug #569442).


author: Tim Waugh <twaugh@redhat.com> 8.71-8
changelog:
  - Restore the TIFF default strip size of 0 (bug #571520).
  - Don't segfault closing tiffg3 device if opening failed (bug #571520).
  - Don't revert gdevcups y-axis change (bug #541604).
  - Reallocate memory in gdevcups when color depth changes (bug #563313).


author: Tim Waugh <twaugh@redhat.com> 8.71-9
changelog:
  - Backported some more TIFF fixes (bug #573970).
  - Use upstream fix for TIFF default strip size (bug #571520).


author: Tim Waugh <twaugh@redhat.com> 8.71-12
changelog:
  - Change SEARCH_HERE_FIRST default to make -P- default instead of -P
    (bug #599564).
  - Removed redundant gs-executable patch (bug #502550).


author: Tim Waugh <twaugh@redhat.com> 8.71-15
changelog:
  - Restored Fontmap.local patch, incorrectly dropped after
    ghostscript-8.15.4-3 (bug #610301).
  - Applied patch to let gdevcups use automatic memory allocation.  Use
    RIPCache=auto in /etc/cups/cupsd.conf to enable.
  - Applied patch to fix NULL dereference in bbox driver (bug #591624).
  - Applied upstream patch to fix iname.c segfault (bug #465311).


author: Tim Waugh <twaugh@redhat.com> 9.00-1
changelog:
  - Updated to 9.00.  No longer need -P-, CVE-2009-4270, CVE-2010-1628,
    SEARCH_HERE_FIRST, bbox-close, cups-realloc-color-depth,
    epstopdf-failure, fPIC, gdevcups-ripcache, iname-segfault, ldfalgs,
    pdf2dsc, pdftoraster-exit, tif-fail-close, tiff-default-strip-size,
    or tiff-fixes patches.


author: Tim Waugh <twaugh@redhat.com> 9.00-3
changelog:
  - Don't use carriage return in ps2epsi output (bug #635786).
  - Include more documentation (bug #634354).


author: Tim Waugh <twaugh@redhat.com> 9.00-8
changelog:
  - Applied upstream ICC fix (bug #655449).
  - gdevcups: use correct width and height values when allocating memory
    (upstream bug 691733).


author: Tim Waugh <twaugh@redhat.com> 9.01-1
changelog:
  - 9.01.  No longer needed gdevcups-691733, glyph-stretch-691920,
    icc-fix, scan_token, or system-jasper patches.


author: Tim Waugh <twaugh@redhat.com> - 9.05-3
changelog:
  - Removed more bundled packages (bug #816747).
  - Fixed missing error check when setting ICC profile.


author: Tim Waugh <twaugh@redhat.com> - 9.06-5
changelog:
  - Updated build requirement from gtk2-devel to gtk3-devel so that gsx
    gets built using the correct loader (bug #884483).


author: Tim Waugh <twaugh@redhat.com> 9.07-10
changelog:
  - Added in missing part of gs_sprintf backport: add in the header to
    stdio_.h. Without this there are problems with va_args on some
    platforms (bug #979681).


author: Tim Waugh <twaugh@redhat.com> 9.14-3
changelog:
  - Applied patch from upstream to fix memory handling issue that could
    lead to crashes (bug #1087071).


author: Tim Waugh <twaugh@redhat.com> 9.15-3
changelog:
  - Avoid shipping ramfs source as its license is unclear. Similarly
    with some documentation and example code (bug #1149617).


author: Tim Waugh <twaugh@redhat.com> 9.15-4
changelog:
  - New ghostscript-x11 package for X11 driver (bug #148939).
  - Ghostscript not requiring X11 is now in ghostscript-core.
  - The 'ghostscript' package requires both of these.


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.16-5
changelog:
  - [TEMPORARY] Support for OpenJPEG disabled for builds to pass.
  - Security fix for BZ #1380416 backported.


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-1
changelog:
  - Rebase to latest ghostscript-9.20. Major changes in this rebase:
    - OpenJPEG support has been re-enabled
    - ijs-config custom tool has been removed (pkg-config is used by default)
    - old irrelevant patches removed (changes are part of upstream release now)
    - remaining patches has been updated & renamed
    - no API/ABI changes according to upstream


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-2
changelog:
  - Added security fixes for:
    - CVE-2016-7979 (bug #1382305)
    - CVE-2016-7976 (bug #1382294)
    - CVE-2016-7978 (bug #1382300)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-5
changelog:
  - Added fix to avoid SIGSEGV for some *.ps files. More info here:
    <http://bugs.ghostscript.com/show_bug.cgi?id=697286>


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-6
changelog:
  - Remove and (re-implement) ConvertUTF.c (bug #1404933)
  - Added security fix for CVE-2016-9601 (bug #1410021)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-9
changelog:
  - Added security fixes for:
    - CVE-2016-10217 (bug #1441564)
    - CVE-2016-10218 (bug #1441568)
    - CVE-2016-10219 (bug #1441569)
    - CVE-2016-10220 (bug #1441571)
    - CVE-2017-5951  (bug #1441572)
    - CVE-2017-8291  (bug #1446063)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.22-4
changelog:
  - complete cleanup in ghostscript specfile according to FPG
  - libgs -- new separate package (Ghostscript library)
  - libgs-devel -- new separate subpackage (devel files for Ghostscript library)
  - libijs -- now shipped as a separate package on Pagure
  - ghostscript-tools-fonts -- new subpackage
  - ghostscript-tools-printing -- new subpackage
  - ghostscript-core -- changed to transitional metapackage
  - package is now completely debundled from already packaged software/resources
  - versioned paths for documentation, resources, etc. are no longer used
  - LPR setup scripts removed (no longer shipped)
  - added symlinks for direct resources location to speedup Ghostscript startup times
  - Ghostscript's search path updated to include only fonts locations as a backup
  - support for /usr/share/ghostscript/conf.d dropped (using Google Droid Sans Fallback instead)
  - examples/ folder dropped from *-doc subpackage


author: Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 9.22-8
changelog:
  - Switch to %ldconfig_scriptlets
    >> https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.24-1
changelog:
  - rebase to latest upstream version, which contains important CVE fixes
  - additional ZER0-DAY fixes added


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.24-3
changelog:
  - ghostscript-9.24-002-icc-PermitReading.patch removed
  - ghostscript-9.24-002-fix-for-Canon-and-Kyocera-printers.patch added (bug #1626818)
  - ghostscript-9.24-003-CVE-2018-16802.patch added (bug #1627960)


author: Martin Osvald <mosvald@redhat.com> - 9.26-1
changelog:
  - rebase to latest upstream version 9.26
  - spec change to remove gsdoc.el due to upstream 8bc783cb586


author: Martin Osvald <mosvald@redhat.com> - 9.27-1
changelog:
  - rebase to latest upstream version 9.27
  - security fixes added for:
    - CVE-2019-14811 (bug #1747908)
    - CVE-2019-14812 (bug #1747907)
    - CVE-2019-14813 (bug #1747906)
    - CVE-2019-14817 (bug #1747909)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18
changelog:
  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-15
changelog:
  - RHEL-39110 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Toshio Kuratomi <toshio@tiki-lounge.com> 4.1.3-4
changelog:
  - Modify the way we provide libungif compatibility by building an empty
    library that requires libgif.
  - Remove chmod in install.  It doesn't seem to be necessary.
  - Add a patch to fix a problem with long being 64 bit on x86_64 but the code
    assuming it was 32 bit.


author: Toshio Kuratomi <toshio@tiki-lounge.com> 4.1.3-5
changelog:
  - Merge an option on the empty library link line.
  - Obsolete libungif progs package.
  - Rename -progs to -utils as FC packages seem to have moved in this direction
    for subpackages.


author: Robert Scheck <robert@fedoraproject.org> 4.1.6-2
changelog:
  - Solved multilib problems with documentation (#465208, #474538)
  - Removed static library from giflib-devel package (#225796 #c1)


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Masahiro Matsuya <mmatsuya@redhat.com> - 2:2.8.22-25
changelog:
  - fix CVE-2023-44442
  - fix CVE-2023-44444
  - disable gimp-2.8.22-python-path.patch required for flatpak
  - partially cherry-pick from upstream commit 2987f012 to fix fclose leak
    Resolves: RHEL-17048 RHEL-17060


author: Matt Wilson <msw@redhat.com>
changelog:
  - include subdirs in the help find
  - remove gimp-help-files generation
  - both gimp and gimp-perl own prefix/lib/gimp/1.1/plug-ins
  - both gimp and gimp-devel own prefix/lib/gimp/1.1/modules


author: Matt Wilson <msw@redhat.com>
changelog:
  - disable aa plugin
  - moved the group back to Applications/Multimedia
  - added desktop entry back into the file list


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't include embedxpm, as it depends on a non-included perl module (#=33249)
  - move gimpdoc and xcftopnm to gimp-perl, as they are dependant on the perl Gimp
    module


author: Matt Wilson <msw@redhat.com>
changelog:
  - added gimp-1.2.1-locale.patch, which I've checked in to gimp CVS, to
    correctly set up the locale in plug-ins (#34214)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - leave gtk-doc documentation in place
  - move gimptool to main package
  - own some directories previously not owned


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - build as gimp, not gimp-beta
  - remove all the beta blurbs
  - fix automake dependency
  - fix libtool usage


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - fix binary name in desktop file ("gimp-1.3" until gimp-2.0 becomes final, to
    allow coexistence with old gimp-1.x packages)
  - system intltool buildrequires perl-XML-Parser, work around that, yay


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - set epoch to 1 to upgrade old gimp rpms
  - obsolete gimp2-devel, gimp-beta-devel to allow upgrade of 3rd party repo
    packages, gimp-perl to upgrade old package


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - require %{epoch}:%{version}-%{release} of base package in sub packages
  - rather use %{?smp_mflags} to actually exploit SMP build systems


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - version 2.0pre3
  - update buildroot patch
  - enable building static libs (old default)
  - have '--define'able enable_*
  - disable building of print plugin, it's in another package


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - add libjpeg-devel to BuildRequires (#121236)
  - spit out slightly more informative help message if gimp-help is missing
    (#124307)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - use included desktop (#126723), application-registry, mime-info and
    icon files
  - remove perl cruft (Gimp-Perl is an external package now)
  - further spec file cleaning


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - add MimeType to desktop file
  - run update-desktop-database in %post/%postun
  - don't make stunts with -32 or -64 postfixed binaries anymore
  - require /sbin/ldconfig and /usr/bin/update-desktop-database


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - obsolete fixed gimp-perl version to be able to reintroduce it at a
    later point
  - use correct dir in source URL


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - clip thumbnail quality at 75 and don't barf on saving images at quality 0
    (fix patch for #145100)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - prevent gifload plugin from crashing when loading files with bogus frame size
    (#150677, #150678)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - version 2.2.7, fixes bug in SSE2 assembly for Lighten Only layer mode
    (#145771) and various other bugs
  - on x86 and x86_64, use -msse and -msse2 to accomodate newer compilers


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - use -mmmx/sse/sse2/... only for the relevant source files so that extended
    instruction sets only get used on suitable CPUs (#157409)


author: Nils Philippsen <nphilipp@redhat.com> - 2.2.8
changelog:
  - version 2.2.8
  - clean up file list generation a bit
  - gimptool manpage is in section 1 not 5
  - list auto-generated .pyc and .pyo files


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.10-4
changelog:
  - use htmlview as default web browser (#183730, patch by Ben Levenson)
  - require hicolor-icon-theme (#182784, #182785)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.11-3
changelog:
  - only use pkgconfig if needed in gimptool, require pkgconfig in devel
    subpackage (#189314, #189371)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.12-1
changelog:
  - version 2.2.12
  - use %dist/%fedora/%redhat
  - remove obsolete gcc4, libpng patches
  - show build options in %prep
  - require gettext for building


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.13-3
changelog:
  - use gutenprint per default for current development/future distribution
    versions (Fedora >= 7, RHEL >= 6)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.14-1
changelog:
  - version 2.2.14
    
    Bugs fixed in GIMP 2.2.14
    =========================
    
    - avoid crashing on newer versions of the winicon format (bug #352899)
    - fixed crash in Postscript plug-in (bug #353381)
    - fixed handling of TABs in the text tool (bug #353132)
    - fixed bug in Depth Merge plug-in (bug #355219)
    - fixed bug in GimpDrawablePreview widget (bug #353639)
    - fixed bug in Line Nove script (bug #357433)
    - fixed bug in Ripple plug-in (bug #357431)
    - save locale independent files from Fractal Explorer plug-in (bug #360095)
    - fixed bug in Super Nova plug-in (bug #340073)
    - be more robust against broken XCF files (bug #357809)
    - fixed drawing issues in Image Map plug-in (bug #311621)
    - fixed smoothing option in Fractal Explorer plug-in (bug #372671)
    - load channels in the proper order when opening an XCF file (bug #378003)
    - deal with floating selections in the Burn-In Animation script (bug #384096)
    - fixed clipping in the GimpPreviewArea widget (bug #392692)
    - fixed a potential crash in gimp-remote (bug #392111)
    - work around a file-chooser problem on Windows (bug #398726)
    - fixed markup of the gimp(1) manual page (bug #401145)
    - fixed the fix for the right-to-left layout in layers dialog (bug #348347)
    - fixed PSD save plug-in on 64bit architectures (bug #335130)
    - added missing dependency in gimpui-2.0.pc file (bug #356394)
    - fixed a crash in the PSD save plug-in (bug #395385)
    - improved robustness of transform tool preview code (bug #420595)
    - improved forward compatibility of XCF loader (bug #316207)
    - don't crash in the Compressor plug-in if files can't be opened (bug #422444)
    - fixed sensitivity of input fields in the Lighting plug-in (bug #359833)

  - don't BuildRequire gimp-print/gutenprint anymore


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.15-1
changelog:
  - version 2.2.15

    Bugs fixed in GIMP 2.2.15
    =========================
    
    - fixed parsing of GFig files with CRLF line endings (bug #346988)
    - guard against a possible stack overflow in the Sunras loader (bug #433902)
    - fixed definition of datarootdir in gimptool-2.0 (bug #436386)
    - fixed Perspective tool crash on Mac OS X (bug #349483)
    - fixed area resizing in the Image Map plug-in (bug #439222)
    - added missing library in gimptool-2.0 --libs output
    - added new localizations: Occitan and Persian

  - remove obsolete sunras-overflow patch


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.16-1
changelog:
  - version 2.2.16

    Bugs fixed in GIMP 2.2.16
    =========================

    - improved input value validation in several file plug-ins (bug #453973)
    - improved handling of corrupt or invalid XCF files
    - guard against integer overflows in several file plug-ins (bug #451379)
    - fixed handling of background alpha channel in XCF files (bug #443097)
    - improved forward compatibility of the config parser
    - fixed crash when previewing some animated brushes (bug #446005)

  - remove obsolete psd-invalid-dimensions patch


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.17-1
changelog:
  - version 2.2.17

    Bugs fixed in GIMP 2.2.17
    =========================

    - fixed regression in PSD load plug-in (bug #456042)
    - fixed crash when loading a corrupt PSD file (bug #327444)
    - work around for Pango appending " Not-Rotated" to font names


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.0-0.rc1.1
changelog:
  - version 2.4.0-rc1
  - change license tags to GPLv2+ (main app), LGPLv2+ (libs and devel)
  - drop libXt-devel build requirement
  - build-require pygobject2-devel directly
  - don't let %postun fail
  - remove obsolete buildroot, gimphelpmissing, icontheme, gifload, gimptool
    patches
  - update htmlview patch
  - use more distinct build root
  - use %buildroot consistently
  - explicitely enable configure options
  - more versionized build requirements
  - don't rebuild autofoo files
  - reformat spec file a bit


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.0-1
changelog:
  - version 2.4.0
  - use xdg-open instead of htmlview on Fedora 7 and later
  - change hicolor-icon-theme requirement to be "uncolored" (without
    "(post)"/"(postun)")
  - don't let gtk-update-icon-cache fail scriptlets


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.1-1
changelog:
  - version 2.4.1

    Changes in GIMP 2.4.1
    =====================

    - fixed a minor display rendering problem
    - improved the workaround for broken graphics card drivers (bug #421466)
    - fixed a crash with broken scripts and plug-ins (bug #490055)
    - fixed potential syntax error in configure script (bug #490068)
    - fixed parsing of floating point numbers in Script-Fu (bug #490198)
    - fixed potential crash when converting an indexed image to RGB (bug #490048)
    - update the histogram while doing color corrections (bug #490182)
    - fixed another crash with broken plug-ins (bug #490617).
    - translation updates


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.2-1
changelog:
  - version 2.4.2

    Changes in GIMP 2.4.2
    =====================

    - removed broken and useless HSV Graph script (bug #491311)
    - update the histogram when a color correction tool is cancelled (bug #493639)
    - fixed a crash with certain plug-in or script descriptions (bug #492718)
    - corrected a tooltip (bug #495564)
    - fixed a crash when GIMP is run without any modules (bug #495863)
    - fixed error handling in the TIFF plug-in
    - fixed a problem with Sample points
    - fixed a crash when merging layers in indexed image (bug #495990)
    - update the histogram when painting (bug #494049)
    - fixed another problem with merge operations on indexed images (bug #496437)
    - fixed crash in TIFF plug-in when saving indexed images (bug #497103)
    - changed defaults so that a system monitor profile is only used when the
      user explicitely enabled this feature (bug #496890)
    - fixed endless loop when running equalize on transparent areas (bug #497291)
    - fixed heap corruption in GimpColorScale widget that caused a crash in the
      Compose plug-in (bug #399484)
    - fixed use of background color in Particle Trace script (bug #498282)
    - set the image menu insensitive when there's no image opened (bug #498511)
    - translation updates (ca, et, it, lt, pt, pt_BR, sr, sv)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.3-1
changelog:
  - version 2.4.3

    Changes in GIMP 2.4.3
    =====================

    - avoid filename encoding problems in the WMF import plug-in (bug #499329)
    - fixed horizontal flipping of linked layers (bug #499161)
    - fixed a missing update in the Lighting plug-in UI (bug #500317)
    - fixed a potential crash in the projection code (bug #500178)
    - fixed a minor Makefile issue (bug #500826)
    - removed some pointless warnings from the JPEG and TIFF load plug-ins
    - fixed size calculation for the image size warning dialog (bug #329468)
    - fixed loading of tool options for the rectangle tools (bug #498948)
    - push/pop a context in the Fog filter
    - fixed potential crashes in the Python binding
    - corrected grid drawing with non-integer spacing (bug #502374)
    - fixed grid snapping for coordinates less than the grid offset
    - made the healing brush work properly when dragged (bug #492575)
    - update tool state when a device change happens (bug #493176)
    - improved validation of strings sent over the wire (bug #498207)
    - fixed integer check in Script-Fu (bug #498207)
    - fixed potential out-of-memory problem in Script-Fu
    - translation updates (ca, cs, de, gl, it, ko, lt, sv, uk)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.4-1
changelog:
  - version 2.4.4

    Changes in GIMP 2.4.4
    =====================

    - fixed typo in stock icon name
    - fixed handling of PSD files with empty layer names (bug #504149)
    - merged TinyScheme bug-fixes
    - removed duplicate entry from Tango palette
    - corrected parameter range in Chip Away script (bug #506110)
    - reduced redraw priority and speed of the marching ants (bug #479875)
    - fixed out-of-bounds array access in Convolution Matrix plug-in
    - reduced rounding errors in Convolution Matrix plug-in (bug #508114)
    - fixed potential crash on missing CMYK color profile
    - fixed crash in Bumpmap plug-in when called from some scripts (bug #509608)
    - Equalize should not equalise the alpha channel (bug #510210)
    - increased the number of points the ImageMap plug-in can handle (bug #511072)
    - adjusted the priority of the projection renderer (bug #511214)
    - smooth the brush mask to get a simpler cursor boundary (bug #304798)
    - show the selection even if the image window is invisible (bug #505758)
    - allow to commit a pending rectangular selection using Enter (bug #511599)
    - fixed bug in image dirty state logic (bug #509822)
    - improved GIMPressionist preformance and reduced startup time (bug #512126)
    - fixed a crash in the Convert to Color Profile plug-in (bug #512529)
    - merged some other minor fixes from trunk
    - translation updates (de, it, lt, ru, sv, uk)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.5-1
changelog:
  - version 2.4.5

    Changes in GIMP 2.4.5
    =====================

    - fixed a regression introduced by the brush cursor optimization
      (bug #514309)
    - fixed bug in transform tool preview (bug #340965)
    - fixed PSD export of images with layer masks
    - fixed base64 encoding routine of the Mail plug-in
    - use the correct background color when creating a new image
      (bug #514082)
    - explicitly link libgimpthumb with GLib (bug #515566)
    - improved selection of the font sample string (bug #514021)
    - unified handling of "Enter" and "Space" keysyms (bug #516544)
    - fixed bug in the Glossy script when used with a pattern (bug #517285)
    - correctly record dimensions in Exif data when saving as JPEG
      (bug #517077)
    - fixed sensitivity of plug-in menu items (bug #517683)
    - fixed potential crashes in Wind, Warp, Small Tiles and Apply Canvas
      plug-ins (bug #516369)
    - added default keyboard shortcut for "Paste As New Image"
      (Ctrl-Shift-V)
    - added default keyboard shortcut for "Copy Visible" (Ctrl-Shift-C)
    - fixed missing preview update in Curves tool (bug #518012)
    - fixed a bug in the Frosty Logo script (bug #472316)
    - fixed backward transformations using the PDB (bug #518910)
    - translation fixes and updates (de, eu, eo, fr, he, hu, it, ja, ko)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.6-1
changelog:
  - version 2.4.6

    Changes in GIMP 2.4.6
    =====================

    - fixed handling of the "antialias" tool option (bug #521069)
    - when loading a TIFF image, always set a filename on it (bug #521436)
    - fixed initial state of curve type in Curves tool (bug #523873)
    - fixed potential crash in the Dicom load plug-in
    - respect the brush mask in the Heal tool (bug #521433)
    - plugged some minor memory leaks
    - fixed a glitch in the DND code (bug #317992)
    - gimp-image-convert() must not accept palettes with > 256 colors (bug
        - fixed parameter description in the Map Object plug-in (bug #526679)
    - fixed compilation of unit tests on Mac OS X (bug #528160)
    - fixed handling of "argc-lower-val-y" PDB parameter in Curve Bend plug-in
    - fixed overlap problem in Hue-Saturation tool (bug #527085)
    - fixed asymmetry in Unsharp Mask plug-in (bug #530077)
    - don't show non-existant color profiles in the selector (bug #528958)
    - fixed issues with default aspect ratio in the Crop tool (bug #532057)
    - fixed compilation of the PDF import plug-in with libpoppler 0.8
    - fixed bug in clipboard brush code (bug #532886)
    - corrected layer mask flag in PSD save plug-in (bug #526811)
    - fixed an issue with tablets and newer X.Org releases
    - keep the JPEG save plug-in from writing an empty EXIF tag (bug #529469)
    - fixed crash in Selective Gaussion Blur plug-in (bug #529280)
    - added new translations (Belarusian, Catalan, Norwegian Nynorsk)
    - translation fixes and updates
      (ar, ca, de, el, es, fi, fr, hu, it, ko, pl, pt_BR, ro, sv)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.7-1
changelog:
  - version 2.4.7

    Changes in GIMP 2.4.7
    =====================

    - fixed issue in GIF load plug-in (bug #535888)
    - fixed event handling in MIDI controller (bug #537960)
    - fixed handling of the 'Highlight' tool option in Crop and Rectangle
      Select tools (bug #536582)
    - various fixes to the Python bindings:
      - fixed crash with Python 2.5 on 64 bit systems (bug #540629)
      - added missing validity checks (bug #536403)
      - allow to pass None for PDB_DISPLAY
    - plugged a memory leak in gimp-text-get-extents-fontname PDB call
    - fixed potential timeout issues in org.gimp.GIMP.UI D-Bus service
    - fixed endianness issue in the ICO save plug-in (bug #529629)
    - translation fixes and updates (be, it, lt, nn, vi)


author: Nils Philippsen <nils@redhat.com> - 2:2.4.7-2
changelog:
  - Merge review:
    - convert spec file to UTF-8
    - remove unneeded gimp2, gimp-beta obsoletes
    - quote macros in changelog
    - use only spaces, not tabs
    - make pyconsole.py plug-in executable (upstream bug #552601)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.0-1
changelog:
  - version 2.6.0
  - remove obsolete htmlview patch
  - remove obsolete distro version dependent defaults
  - don't use custom CFLAGS


author: Nils Philippsen <nils@redhat.com> - 2:2.6.0-2
changelog:
  - move gimptool to devel subpackage
  - make gimp-plugin-mgr not require gimptool/pkg-config (#465869)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.0-3
changelog:
  - split off help browser plugin
  - let gimp and gimp-help-browser obsolete older gimp versions to allow seamless
    upgrades


author: Nils Philippsen <nils@redhat.com> - 2:2.6.1-1
changelog:
  - version 2.6.1

    Overview of Changes from GIMP 2.6.0 to GIMP 2.6.1
    =================================================

    * Bugs fixed:

     555587 - PSD file crashes PSD plug-in
     555222 - PSD Load Plugin: unsupported compression mode
     555362 - gimp-remote is not working properly
     555280 - some gif files will not be open
     554890 - JPEG Save Options Dialog does not remember
     554966 - Gimp crashes creating a new image using a template
     554785 - Compile failure on uri-backend-libcurl
     554646 - Opening Help crashes GIMP with lqr-plugin installed
     553534 - centering issues after image scaling and setting zoom
     554898 - Compile failure on uri-backend-wget.c

    * Updated translations:

     Belarusian (be)
     Catalan (ca)
     Finnish (fi)
     French (fr)
     Japanese (ja)
     Macedonian (mk)
     Punjab (pa)
     Brazilian Portuguese (pt_BR)
     Romanian (ro)
     Slovenian (sl)
     Swedish (sv)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.2-1
changelog:
  - version 2.6.2

    Overview of Changes from GIMP 2.6.1 to GIMP 2.6.2
    =================================================

    * Bugs fixed:

     557950 - Scaling in Gimp 2.6 is much slower than in Gimp 2.4
     558215 - unit and zoom entries in Statusbar not visible
     558451 - Cannot build GIMP using Sun CC on Solaris 2.8
     558420 - projection incorrect with alpha-less layers
     556603 - Zoom region always zooms in center of image
     557870 - "Qmask" message popping up here and there
     557705 - compatibility with GEGL > 0.0.20
     556248 - Scaling gives 'jagged' edges
     556804 - Zoom drop down doesn't update
     524615 - Print not to scale
     555246 - gimp crashes when a file is opened while a preview is generating
     556741 - Alpha layer automatically added (in psd format)
     556182 - Could you please explain a few strings [I18N]
     555697 - build fails if configured with --without-libjpeg
     134956 - Curves tool doesn't save free curves

    * Updated translations:

     Czech (cs)
     Danish (da)
     Finnish (fi)
     French (fr)
     Japanese (ja)
     Polish (pl)
     Brazilian Portuguese (pt_BR)
     Swedish (sv)
     Simplified Chinese (zh_CN)
  - update xdg-open patch


author: Nils Philippsen <nils@redhat.com> - 2:2.6.3-1
changelog:
  - version 2.6.3

    Overview of Changes from GIMP 2.6.2 to GIMP 2.6.3
    =================================================

    * Bugs fixed:

     558454 - Plugin Map Color Range disappears from GIMP
     559239 - Error while loading psd-data
     560903 - Explicit zooming with e.g. '1' should handle
              zoom-focus better
     560245 - Zoom selection always centered in the Navigation tab
     559490 - Wrong lang tags for 'no'
     559292 - SOTA Chrome cannot accept different textures
     560375 - Clearing an already empty document history crashes GIMP
     559580 - Image windows need better default locations
     560283 - "Scale image..." causes distortion around edges
     559716 - Changing crop size in Crop Tool Options can make UI
              unresponsive
     558549 - Stroking a single-point path with a paint tool
              crashes GIMP
     559015 - Move tool gives bad information about px moved
     558660 - help behavior for locales without manual translation

    * Updated translations:

     Belarusian (be)
     Dutch (nl)
     German (de)
     Japanese (ja)
     Lithuanian (lt)
     Norwegian Bokmål (nb)
     Norwegian Nynorsk (nn)
     Polish (pl)
     Romanian (ro)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.4-1
changelog:
  - version 2.6.4

    Overview of Changes from GIMP 2.6.3 to GIMP 2.6.4
    =================================================
    
    * Bugs fixed:
    
     565223 - Perspective transformation jagged edges / comb effect
     563985 - jpg save dialog: "cancel" is treated like "commit"
              for settings
     564087 - Using clone tool on a layer with a part out of canvas
              causes crashes
     564593 - crash when the drawable is changed while a color tool
              is active
     564869 - GIMP crashes on selecting Tools->GEGL operation
     565138 - python-fu-foggify does not check if image is in rgb mode
     563130 - Hue selection mode does not cross the 0-360 degrees line
     563179 - Scrollbars not resized when we extend the canvas size
     562459 - PF_PALETTE: 'TypeError' when used in a plugin that is
              registered in <Image>
     562427 - Compilation with --as-needed
     562386 - PF_SLIDER and PF_SPINNER 'Step' values do not change
              consistently...
     562366 - Default image dimensions are not correctly
              transferred in the file/new dialog box
     561899 - GIMP can't save to mounted filesystem if file exists
    
    * Updated translations:
    
     Greek (el)
     Hindi (hi)
     Hungarian (hu)
     Italian (it)
     Japanese (ja)
     Korean (ko)
     Slovenian (sl)
     Swedish (sv)
     Tamil (ta)
     Simplified Chinese (zh_CN)
  - add BuildRequires: aalib-devel


author: Nils Philippsen <nils@redhat.com> - 2:2.6.4-3
changelog:
  - split off gimptool into new gimp-devel-tools subpackage to avoid multilib
    conflicts (#477789)
  - require poppler-glib-devel for building from F9 on (#478691)
  - fix gimp-devel package group


author: Nils Philippsen <nils@redhat.com> - 2:2.6.5-1
changelog:
  - version 2.6.5

    Overview of Changes from GIMP 2.6.4 to GIMP 2.6.5
    =================================================

    * Bugs fixed:

     571628 - Scaling image to 25% turn background from white to grey
     567840 - GIMP's GtkScaleButton conflicts with GTK's
     569043 - GEGL tool - missing Operation Settings for all sub-tools
     568890 - don't rely on GtkAction implementation details
     568909 - wrong RGB values for color names in libgimpcolor/gimprgb-parse.c
     568839 - wrong hex RGB value for the color names slategrey and slategray
     559408 - Brushes dragged to the image window look strange
     563337 - Rectangle Select Tool does not allow 1:1 fixed ratio
     568016 - Black pullout parameter of plug-in-newsprint has no effect
     562818 - First image opened in GIMP offset
     562213 - Align Tool doesn't work properly if it is the active tool
              at startup

    * Updated translations:

     Spanish (es)
     Estonian (et)
     Hindi (hi)
     Italian (it)
     Brazilian Portuguese (pt_BR)
     Romanian (ro)
     Russian (ru)
     Serbian (sr)
     Tamil (ta)
     Simplified Chinese (zh_CN)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.5-4
changelog:
  - use correct fix from upstream to avoid crashes (#486122)
  - use -fno-strict-aliasing, PIC/PIE compilation flags


author: Nils Philippsen <nils@redhat.com> - 2:2.6.6-1
changelog:
  - version 2.6.6

    Overview of Changes from GIMP 2.6.5 to GIMP 2.6.6
    =================================================

    * Bugs fixed:

     571117 - lcms plug-in crashes on broken profile
     575154 - changing the help browser preference may not work
     573542 - blur plugin: bug in the first line
     572403 - gimp-2.6 crashed with SIGSEGV in IA__g_object_get()
     573695 - 1-bit white background saved as PBM becomes all black
     573488 - Small bug in Filter>Distorts>Ripple
     572156 - top left pixel position/coordinate is not 0,0 but 1,1
     472644 - Rotate with clipping crops the whole layer

    * Updated translations:

     German (de)
     Spanish (es)
     Estonian (et)
     Basque (eu)
     French (fr)
     Italian (it)
     Portuguese (pt)
     Simplified Chinese (zh_CN)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.6-2
changelog:
  - minimize dialogs with single image window (#492796, backported from trunk,
    original patch by Sven Neumann)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.7-1
changelog:
  - version 2.6.7

    Overview of Changes from GIMP 2.6.6 to GIMP 2.6.7
    =================================================

    * Bugs fixed:

     591017 - Tablet pan is not working as fast as it should
     577581 - Crashes when using any colors tool/function on Windows
     589667 - GIMP crashes when clicking GEGL Operation on Windows
     569833 - file-jpeg-save erroneous with small quality values
     590638 - Changing palettes from list to grid view loses "locked to dock"
              status
     589674 - "Send by Email" does not update "Filename"
     589674 - "Send by Email" does not update "Filename"
     586851 - Transparent BMP files fail to load
     589205 - help-browser uses deprecated (and sometimes broken) webkit call
     582821 - 'Sphere Designer' does not reset correctly...
     570353 - first time open of .svg file ignores the requested units
     555777 - Export to MNG animation fails
     577301 - Dithering with transparency is broken for "positioned" method
     493778 - metadata plug-in crashes on some images
     567466 - PNG comment not found if more than 1 tEXt chunks
     585665 - Exporting to PSD with a blank text layer creates a corrupt file
     586316 - Levels tool does not adjust output levels correctly if input
              levels are changed
     569661 - Import from PDF throws errors when entering resolution in
              pixels per millimetre
     567262 - Black pixels appear in "Spread" filter preview
     554658 - Path Dialog: Path preview pics not to see constantly
     167604 - gimp_gradient_get_color_at() may return out-of-bounds values
     567393 - Rectangle select tool size shrinks to 0 if size is larger than
              the image and the up or down arrow is pressed
     587543 - crash when invoking certain actions by keyboard shortcut
     563029 - Closing maximized image doesn't restore document window size
     585488 - Perspective transformation on a layer with a mask causes crash
     586008 - GIMP crashes when right-click canceling a drawing action initiated
              outside layer boundaries
     584345 - when printing, the number of copies should be reset to 1
     557061 - Alpha to Logo
     472644 - Rotate with clipping crops the whole layer
     577575 - transform tool fills underlying extracted area wrongly
     555738 - Image display is wrong after undoing canvas size
     577024 - help-browser plugin crashes when used with webkit 1.1.3
     555025 - Action GEGL box widgets weirdness

    * Updated and new translations:

     Czech (cs)
     Danish (da)
     German (de)
     Spanish (es)
     Basque (eu)
     Finnish (fi)
     Hungarian (hu)
     Italian (it)
     Gujarati (gu)
     Japanese (ja)
     Kannada (kn)
     Marathi (mr)
     Norwegian bokmål (nb)
     Oriya (or)
     Portuguese (pt)
     Romanian (ro)
     Sinhala (si)
     Swedish (sv)
     Simplified Chinese (zh_CN)
     Traditional Chinese - Hong Kong (zh_HK)
     Traditional Chinese - Taiwan (zh_TW)

  - remove obsolete gegl-babl-versions-check, help-browser-webkit patches
  - comment/explain patches


author: Nils Philippsen <nils@redhat.com> - 2:2.6.7-3
changelog:
  - avoid overflow in the BMP image file plugin (#537356)
  - avoid overflow in the PSD image file plugin (#537370)
  - update jpeg-units patch


author: Nils Philippsen <nils@redhat.com> - 2:2.6.8-1
changelog:
  - version 2.6.8

    Overview of Changes from GIMP 2.6.7 to GIMP 2.6.8
    =================================================

    * Bugs fixed:

     470698 - MapObject cannot modify highlight
     593848 - FG color changed to black when FG-BG Editor tab created
     594651 - layer.scale() raises RuntimeError
     594998 - Keyboard shortcuts does not work for first image when dock
              is focused
     599765 - F1 key on gimp-tool-align in menu have wrong link and it
              open gimp-tool-move
     600484 - Gimp BMP Integer Overflow Vulnerability
     600741 - "read_channel_data()" Integer Overflow Vulnerability
     601891 - gimp_image_get_selection returns None
     602761 - plug-in-grid: Parameters Horizontal/Vertical Spacing and
              Horizontal/Vertical Offset are reversed.
     603995 - PCX plugin doesn't sanitize input to avoid allocation overflows.
     603998 - PCX: Calculating amount of memory to allocate may overflow.
     604000 - SGI: sanitize input
     604001 - SGI: Calculating amount of memory to allocate may overflow.
     604002 - SGI: RLE encoded input data may write beyond allocated buffers
     604004 - SGI: allocate memory consistently
     604008 - GBR, PAT: sanitize input data
     604078 - Crash when pressing Backspace with Free Select Tool

    * Updated and new translations:

     Basque (eu)
     British English (en_GB)
     Czech (cs)
     French (fr)
     Greek (el)
     Italian (it)
     Japanese (ja)
     Norwegian Nynorsk (nn)
     Polish (pl)
     Romanian (ro)
     Russian (ru)
     Simplified Chinese (zh_CN)

  - remove obsolete bmp-hardening, psd-hardening patches


author: Nils Philippsen <nils@redhat.com> - 2:2.6.9-1
changelog:
  - version 2.6.9

    Overview of Changes from GIMP 2.6.8 to GIMP 2.6.9
    =================================================

    * Bugs fixed:

     612618 - Font selection remains visible
     622234 - gimp.desktop: image/x-psd in MimeTypes twice
     622196 - Unportable test(1) construct in configure script
     620604 - Description of "histogram" procedure is slightly inaccurate
     541586 - Tool options not saved/loaded correctly?
     614153 - Importing PDF files with long titles
     600112 - blur-gauss-selective.exe crashes
     599233 - Dialog of "Save as BMP" ignores changes which are not made
              with a mous
     565001 - Text-Tool crashes when edit a 2.4.2 version xcf
     610478 - Layer preview suddenly stops getting updated
     609026 - leaks shared memory
     609056 - Exporting to Alias PIX format fails
     608188 - a few strings in Save as... > Raw image data dialog are always
              in English
     604820 - GEGL Operation "path" crashes GIMP
     603711 - Crashes when using path tool
     607242 - GIMP 2.7.0 fails to build against libpng 1.4.0
     606372 - Saving to .ppm fails on indexed colorspace
     605237 - the "Antialiasing..." message in the progress bar does not show
              translated
     604508 - gimp-layer-new-from-visible should work from updated projection

    * Updated and new translations:

     Asturian (ast)
     Basque (eu)
     Burmese (my)
     Catalan (ca)
     Chinese (Hong Kong) (zh_HK)
     Chinese (Taiwan) (zh_HK)
     German (de)
     Italian (it)
     Latvian (lv)
     Low German (nds)
     Romanian (ro)
     Simplified Chinese (zh_CN)
     Slovenian (sl)
     Ukrainian (uk)
     Valencian (ca@valencia)

  - remove obsolete gtk219, never-stack-trace-desktop, indexed-pnm patches
  - don't manually provide "gimp-libs%{?_isa}" in gimp-libs
  - don't package %{_datadir}/gtk-doc/html, but dirs beneath


author: Nils Philippsen <nils@redhat.com> - 2:2.6.10-1
changelog:
  - version 2.6.10

    Overview of Changes from GIMP 2.6.9 to GIMP 2.6.10
    ==================================================

    * Bugs fixed:

     613328 - TGA files saved with incorrect header yOrigin data
     623290 - Save As... does not save Windows Bitmap as default in dialog
     621363 - CMYK decompose broken
     595170 - brush - color from gradient works wrong in greyscale
     613838 - Error in gimp-hue-saturation PDB call
     622608 - GIMP crashes when clicking any scroll bar from combo boxes
     565459 - newly opened images are put into the background

    * Updated translations:

     German (de)
     Italian (it)
     Romanian (ro)
     Portuguese (pt)

  - remove obsolete combo-popup patch
  - update script-fu-ipv6 patch


author: Nils Philippsen <nils@redhat.com> - 2:2.6.11-1
changelog:
  - version 2.6.11

    Overview of Changes from GIMP 2.6.10 to GIMP 2.6.11
    ===================================================

    * Bugs fixed:

     631199 - Printing and Print preview broken with cairo 1.10
     572865 - Parasite handling had problems and can cause crashing
     628893 - Error with string-append and gimp-drawable-get-name
     623850 - (Paco) Recursive Gaussian Filter error
     624487 - Fix incorrect "wrap mode" documentation values in Edge plug-in
     557380 - Difference of Gaussians gives blank doc if "Invert" selected
     627009 - Image type filter doesn't include .rgba SGI files
     626020 - Console window opening on file-ps-load
     624698 - Wood 1 and Wood 2 have bad alpha value
     624275 - Image saved from google docs generates a
              'gimp-image-set-resolution' error message

    * Updated translations:

     German (de)
     Spanish (es)
     Italian (it)
     Japanese (ja)
     Romanian (ro)
     Chinese (Hong Kong) (zh_HK)
     Chinese (Taiwan) (zh_HK)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.11-10
changelog:
  - don't use poppler/gdk_pixbuf API removed in poppler >= 0.17 (#698157)
  - remove obsolete configure options


author: Nils Philippsen <nils@redhat.com> - 2:2.6.11-14
changelog:
  - fix buffer overflows in sphere-designer (CVE-2010-4541),
    gfig (CVE-2010-4542), lighting (CVE-2010-4540) plugins


author: Nils Philippsen <nils@redhat.com> - 2:2.6.11-21
changelog:
  - actually apply startup-warning patch
  - fix heap corruption and buffer overflow in file-gif-load plugin
    (CVE-2011-2896)


author: Nils Philippsen <nils@redhat.com> - 2:2.7.3-1
changelog:
  - version 2.7.3 (unstable, see http://developer.gimp.org/NEWS for details)
    - change license to GPLv3+/LGPLv3+
    - update required versions of dependencies
    - build with cairo-pdf, jasper, require jasper-devel for building
    - build without poppler as that currently is GPLv2 only, thus incompatible
      with LGPLv3 gimp libraries (use postscript plugin for PDF import
      meanwhile), future poppler versions will be "GPLv2 or GPLv3", i.e.
      compatible again
    - clean up configure options, compiler/linker flags
    - suppress abrt bug reporting for unstable releases
    - remove all patches (obsolete, woo!)
    - add new files, remove files that are not installed any longer
  - use %global instead of %define
  - replace hal, minorver, microver, interfacever, gimp_lang_ver macros with
    gudev, lib_minor, lib_micro, lib_api_version, gettext_version macros
  - compute more version macros (ugly, but convenient)
  - use gudev from Fedora 15 on
  - use convenience macro for hardening binaries from F-16 on


author: Nils Philippsen <nils@redhat.com> - 2:2.7.4-1
changelog:
  - version 2.7.4 (unstable, see http://developer.gimp.org/NEWS for details)
  - update dependency versions
  - don't suppress abrt reporting, don't redirect bug reports to upstream


author: Nils Philippsen <nils@redhat.com> - 2:2.7.5-1
changelog:
  - version 2.7.5 (unstable, see http://developer.gimp.org/NEWS for details)
  - add BR: atk >= 2.0.1, bzip2-devel, ghostscript-devel, zlib-devel
  - package tool presets


author: Nils Philippsen <nils@redhat.com> - 2:2.8.0-0.1.RC1
changelog:
  - version 2.8.0-RC1 (release candidate):
   - Add our own GimpOperationBrightnessContrast because GEGL one is different
   - Fix some GFig rendering issues
   - Depend on Babl 0.1.10, GEGL 0.2.0 and some other new library versions
   - Bug fixes
   - Translation updates


author: Nils Philippsen <nils@redhat.com> - 2:2.8.0-3
changelog:
  - fix crash in fits loader (#834627)
  - fix overflow in CEL plug-in (CVE-2012-3403)
  - fix overflow in GIF loader (CVE-2012-3481)


author: Nils Philippsen <nils@redhat.com> - 2:2.8.2-3
changelog:
  - don't trip over too much installed memory, reenable all tests
  - realign selection after "Crop to Selection" (#873212, fix by Michael
    Natterer)


author: Nils Philippsen <nils@redhat.com> - 2:2.8.4-4
changelog:
  - fix upstream commit ids
  - fix double-free crashes when selecting gradients from script-fu (#964470)
  - fix crash in unsharp-mask plug-in (#966987)
  - hardcode python interpreter in python plug-ins (#952227)
  - fix crash when selecting text with multiple colors etc. (#919795, #951815)
  - don't crash upon not applying a color profile to a grayscale image (#922622)


author: Nils Philippsen <nils@redhat.com> - 2:2.8.10-5
changelog:
  - remove BRs contained in the minimal build environment
  - group BRs into libraries and tools
  - remove various old cruft
  - ship RPM macros for packaging plug-ins e.a. (#1063144)


author: Nils Philippsen <nils@redhat.com> - 2:2.8.18-2
changelog:
  - build without help-browser from Fedora 26 on (#1375809)
  - use %license for license text
  - remove some cruft from the spec file


author: Josef Ridky <jridky@redhat.com> - 2:2.8.22-3
changelog:
  - Fix for CVE-2017-17784, CVE-2017-17785, CVE-2017-17786,
    CVE-2017-17787, CVE-2017-17788 and CVE-2017-17789 (#1529149)


author: Josef Ridky <jridky@redhat.com> - 2:2.8.22-4
changelog:
  - Fix dependencies for F28+ (ghostscript-devel => libgs-devel) #1534656
  - Update spec file for F28+/RHEL purposes


author: Josef Ridky <jridky@redhat.com> - 2:2.8.22-7
changelog:
  - add missing dependency for automake and libtool
  - explicitly use python2 as default python interpreter


author: Josef Ridky <jridky@redhat.com> - 2:2.8.22-26.3
changelog:
  - fix CVE-2025-10920
  - fix CVE-2025-10921
  - fix CVE-2025-10922
  - fix CVE-2025-10923
  - fix CVE-2025-10924
  - fix CVE-2025-10925
  - fix CVE-2025-10934


author: Horst H. von Brand <vonbrand@inf.utfsm.cl>
changelog:
  - Redid the description
  - Cut overlong make line, loosened changelog a bit
  - I think Junio (or perhaps OSDL?) should be vendor...


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.99.4-3
changelog:
  - use dist tag to differentiate between branches
  - use rpm optflags by default (patch0)
  - own %{_datadir}/git-core/


author: Chris Wright <chrisw@osdl.org> 0.99.4-4
changelog:
  - drop sh_utils, sh-utils, diffutils, mktemp, and openssl Requires
  - use RPM_OPT_FLAGS in spec file, drop patch0


author: H. Peter Anvin <hpa@zytor.com> 0.99.9j-1
changelog:
  - Change subpackage names to git-<name> instead of git-core-<name>
  - Create empty root package which brings in all subpackages
  - Rename git-tk -> gitk


author: Chris Wright <chrisw@redhat.com> 1.1.0-1
changelog:
  - Update to latest git-1.1.0 (drop git-email for now)
  - Now creates multiple packages:
  -        git-core, git-svn, git-cvs, git-arch, gitk


author: Josh Boyer <jwboyer@gmail.com> 1.5.3.6-1
changelog:
  - git-1.5.3.6
  - git-core requires perl(Error) (bug 367861)
  - git-svn requires perl(Term:ReadKey) (bug 261361)
  - git-email requires perl-Git (bug 333061)


author: Jeremy Katz <katzj@redhat.com> - 1.5.4.1-2
changelog:
  - Add upstream patch (e62a641de17b172ffc4d3a803085c8afbfbec3d1) to have 
    gitweb rss feeds point be commitdiffs instead of commit


author: James Bowes <jbowes@redhat.com> 1.5.4.4-3
changelog:
  - Include the sample hooks from contrib/hooks as docs (bug 321151).
  - Install the bash completion script from contrib (bug 433255).
  - Include the html docs in the 'core' package again (bug 434271).


author: Josh Boyer <jwboyer@gmail.com> 1.6.0.3-1
changelog:
  - git-1.6.0.3
  - Drop curl requirement in favor of libcurl (bug 449388)
  - Add requires for SMTP-SSL perl module to make git-send-email work (bug 443615)


author: Todd Zullinger <tmz@pobox.com> 1.6.0.6-1
changelog:
  - git-1.6.0.6
  - Fixes a local privilege escalation bug in gitweb
    (http://article.gmane.org/gmane.comp.version-control.git/103624)
  - Add gitk Requires to git-gui (bug 476308)


author: Todd Zullinger <tmz@pobox.com> 1.6.1-1
changelog:
  - Install git-* commands in %{_libexecdir}/git-core, the upstream default
  - Remove libcurl from Requires, rpm will pick this up automatically
  - Consolidate build/install options in %make_git (Roland McGrath)
  - Include DirectoryIndex in gitweb httpd-config (bug 471692)
  - Define DOCBOOK_XSL_172 to fix minor manpage issues
  - Rename %{_var}/lib/git-daemon to %{_var}/lib/git
  - Preserve timestamps on installed files
  - Quiet some rpmlint complaints
  - Use macros more consistently


author: Todd Zullinger <tmz@pobox.com> 1.6.1.3-1
changelog:
  - git-1.6.1.3
  - Set htmldir so "git help -w <command>" works
  - Patch git-web--browse to not use "/sbin/start" to browse
  - Include git-daemon documentation in the git-daemon package


author: Todd Zullinger <tmz@pobox.com> - 1.6.1.3-2
changelog:
  - Require perl(Authen::SASL) in git-email (bug 483062)
  - Build many of the subpackages as noarch
  - Update URL field


author: Todd Zullinger <tmz@pobox.com> - 1.6.2-1
changelog:
  - git-1.6.2
  - Include contrib/emacs/README in emacs subpackage
  - Drop upstreamed git-web--browse patch


author: Todd Zullinger <tmz@pobox.com> - 1.6.2.2-1
changelog:
  - git-1.6.2.2
  - Include contrib/ dir in %doc (bug 492490)
  - Don't set DOCBOOK_XSL_172, fix the '\&.ft' with sed (bug 485161)
  - Ignore Branches output from cvsps-2.2b1 (bug 490602)
  - Remove shebang from bash-completion script
  - Include README in gitweb subpackage


author: Todd Zullinger <tmz@pobox.com> - 1.6.3.2-1
changelog:
  - git-1.6.3.2
  - Require emacs >= 22.2 for emacs support (bug 495312)
  - Add a .desktop file for git-gui (bug 498801)
  - Set ASCIIDOC8 and ASCIIDOC_NO_ROFF to correct documentation issues,
    the sed hack to fix bug 485161 should no longer be needed
  - Escape newline in git-daemon xinetd description (bug 502393)
  - Add xinetd to git-daemon Requires (bug 504105)
  - Organize BuildRequires/Requires, drop redundant expat Requires
  - Only build noarch subpackages on Fedora >= 10
  - Only build emacs and arch subpackages on Fedora
  - Handle curl/libcurl naming for EPEL and Fedora


author: Todd Zullinger <tmz@pobox.com> - 1.6.3.3-1
changelog:
  - git-1.6.3.3
  - Move contributed hooks to %{_datadir}/git-core/contrib/hooks (bug 500137)
  - Fix rpmlint warnings about Summary and git-mergetool--lib missing shebang


author: Todd Zullinger <tmz@pobox.com> - 1.6.5.2-1
changelog:
  - git-1.6.5.2
  - Drop asciidoc --unsafe option, it should not be needed anymore
  - Don't use install -t/-T, they're not compatible with older coreutils
  - Don't use -perm /a+x with find, it's incompatible with older findutils


author: Todd Zullinger <tmz@pobox.com> - 1.6.5.3-1
changelog:
  - git-1.6.5.3
  - Only BR perl(Error) on Fedora and RHEL >= 5
  - Use config.mak to set build options
  - Improve compatibility with EPEL
  - Replace $RPM_BUILD_ROOT with %{buildroot}
  - Fix Obsoletes for those rebuilding on EL-4


author: Todd Zullinger <tmz@pobox.com> - 1.6.6.1-1
changelog:
  - git-1.6.6.1
  - Use %{gitcoredir}/git-daemon as xinetd server option, for SELinux (#529682)
  - Make %{_var}/lib/git the default gitweb projectroot (#556299)
  - Include gitweb/INSTALL file as documentation, the gitweb README refers to it
  - Ship a short example gitweb config file (%{_sysconfdir}/gitweb.conf)
  - Remove long fixed xinetd IPv6 workaround on Fedora (#557528)
  - Install missing gitweb.js (#558740)


author: Todd Zullinger <tmz@pobox.com> - 1.7.0-1
changelog:
  - git-1.7.0
  - Link imap-send with libcrypto (#565147)
  - Disable building of unused python remote helper libs


author: Todd Zullinger <tmz@pobox.com> - 1.7.1-1
changelog:
  - git-1.7.1
  - Fix conditionals for EL-6
  - Comply with Emacs add-on packaging guidelines (#573423), Jonathan Underwood
    - Place elisp source files in separate emacs-git-el package
    - Place git support files in own directory under site-lisp
    - Use Emacs packaging macros


author: Todd Zullinger <tmz@pobox.com> - 1.7.4.1-1
changelog:
  - Update to 1.7.4.1
  - Clean up documentation settings (the defaults changed in 1.7.4)
  - Improve EL-5 compatibility, thanks to Kevin Fenzi for emacs testing


author: Adam Tkac <atkac redhat com> - 1.7.4.2-1
changelog:
  - update to 1.7.4.2
  - move man3/Git.3pm file to perl-Git subpkg (#664889)
  - add perl-DBD-SQLite dependency to git-cvs (#602410)


author: Todd Zullinger <tmz@pobox.com> - 1.7.6-4
changelog:
  - Drop git-arch on fedora >= 16, the tla package has been retired
  - Rework most spec file dist conditionals to make future changes easier


author: Todd Zullinger <tmz@pobox.com> - 1.7.6.2-1
changelog:
  - Update to 1.7.6.2
  - Fixes incompatibility caused by git push --quiet fix
    http://thread.gmane.org/gmane.comp.version-control.git/180652


author: Adam Tkac <atkac redhat com> - 1.8.0-1
changelog:
  - update to 1.8.0
  - include git-credential-gnome-keyring helper in git pkg
  - 0001-cvsimport-strip-all-inappropriate-tag-strings.patch was merged


author: Todd Zullinger <tmz@pobox.com> - 1.8.1.4-2
changelog:
  - Update asciidoc requirements, drop unsupported ASCIIDOC7
  - Define GNU_ROFF to force ASCII apostrophes in manpages (so copy/paste works)
  - Install tcsh completion (requires manual setup by users)
  - Clean up dist conditionals, don't pretend to support EL-4 builds
  - Use prebuilt documentation on EL-5, where asciidoc is too old
  - Respect gitexecdir variable in git-subtree install


author: Todd Zullinger <tmz@pobox.com> - 1.8.2-2
changelog:
  - Require perl(Term::ReadKey) for git add --interactive (#928328)
  - Drop DESTDIR from python instlibdir
  - Fix bogus changelog dates


author: Todd Zullinger <tmz@pobox.com> - 1.8.5.3-2
changelog:
  - Drop unused python DESTIR patch
  - Consolidate settings for Fedora 19+ and EL 7+
  - Use new rpm filtering on Fedora 19+ and EL 7+
  - Rebuild with file-5.14-14 (#1026760)


author: Petr Stodulka <pstodulk@redhat.com> - 2.4.2-2
changelog:
  - split create subpackage git-core (perl-less) from git package
  - git package requires git-core and it has same tool set as
    before
  - relevant docs are part of git-core package too
  - removed proved and obsoletes in git for git-core


author: Petr Stodulka <pstodulk@gmail.com> - 2.4.4-2
changelog:
  - git-svn - added requires for perl-Digest-MD5 (#1218176)
  - solve troubles with infinite loop due to broken symlink (probably
    shouldn't be problem here, but it's reproducible manually)
    (#1204193)


author: Jonathan Underwood <jonathan.underwood@gmail.com> - 2.4.5-2
changelog:
  - Comply with modern Emacs packaging guidelines on recent Fedora
    No longer split out emacs-git and emacs-git-el sub-packages on recent Fedora
    Require emacs-filesystem on recent Fedora (#1234552)


author: Konrad Scherer <Konrad.Scherer@windriver.com>
changelog:
  - Workaround missing git subtree documentation in prebuilt docs (bug 1320210)
  - Only add git-cvsserver binary once if the core dir matches the bin dir as it
    does on el5 (bug 1320210)


author: Todd Zullinger <tmz@pobox.com> - 2.8.2-4
changelog:
  - Use perl(MOD::NAME) format for perl-DBD-SQLite and perl-Digest-MD5 deps
  - Define __global_ldflags on EL < 7 (#1337137)


author: Todd Zullinger <tmz@pobox.com> - 2.11.1-3
changelog:
  - Remove unnecessary rsync requirement from git-core
  - Move gnome-keyring credential helper from git-core to git
  - Enable libsecret credential helper
  - Run git test suite
  - Use %{_mandir} in git/git-core file list filters
  - Fix version of emacs-git and emacs-git-el provides
  - Clean up contrib/{credential,subtree} to avoid cruft in git-core-doc
  - Fix a number of macro-in-comment warnings from rpmlint


author: Petr Stodulka <pstodulk@redhat.com> - 2.11.1-3
changelog:
  - remove non-ASCII characters from description and title of packages
  - fix requiremets
  - fix spec to be compatible for other systems
  - remove deprecated credential-gnome-keyring


author: Petr Stodulka <pstodulk@redhat.com> - 2.13.3-2
changelog:
  - Move documentation files from all subpackages into the %{_pkgdocdir}
    directory, so links inside doc and man files are correct
    Resolves: #1357438
  - Quiet a few rpmlint complaints regarding hidden files in contrib dir
  - Remove explicit libcurl requirement from git-core


author: Iryna Shcherbina <ishcherb@redhat.com> - 2.14.0-2
changelog:
  - Add a build-time dependency on python2-devel for p4
    Resolves: #1479713
  - Skip all grep tests on s390x for now because it failes intermittently


author: Todd Zullinger <tmz@pobox.com> - 2.15.0-2
changelog:
  - Fix git-clone memory exhaustion (CVE-2017-15298)
    Resolves: #1510455, #1510457
  - Disable cross-directory hardlinks
  - Drop ancient obsoletes for git and git-arch
  - Update summary/description of numerous subpackages
  - Fix shebang in a few places to silence rpmlint complaints
  - Fix t9020-remote-svn failure when setting PYTHON_PATH
  - Rename %gitcoredir to %gitexecdir; upstream uses the latter
  - Move commands which no longer require perl into git-core
  - Move filter-branch out of core, it needs perl now
  - Improve test suite coverage


author: Todd Zullinger <tmz@pobox.com> - 2.15.1-3
changelog:
  - Include verbose logs in build output for 'make test' failures
  - Use %autosetup macro to unpack and patch source
  - Remove second make invocation for doc build/install
  - Fix builds using '--without docs'
  - Mark git-core-docs sub-package noarch
  - Avoid failures in svnserve tests when run in parallel
  - Run tests in parallel by default on Fedora
  - Skip 'git svn branch' tests which fail intermittently
  - Re-enable grep tests on s390x


author: Todd Zullinger <tmz@pobox.com>
changelog:
  - Avoid excluding non-existent .py[co] files in %doc
  - Remove obsolete gnome-keyring credential helper


author: Todd Zullinger <tmz@pobox.com>
changelog:
  - Add %{emacs_filesystem} to simplify emacs support
  - Use .in template for git@.service to ensure paths are substituted


author: Todd Zullinger <tmz@pobox.com> - 2.16.0-1
changelog:
  - Update to 2.16.0
  - Use 'prove' as test harness, enable shell tracing
  - Disable t5000-tar-tree.sh on x86 in f28


author: Todd Zullinger <tmz@pobox.com> - 2.16.1-2
changelog:
  - git-svn: avoid segfaults in 'git svn branch', re-enable t9128, t9141, and
    t9167
  - Drop obsolete BuildRoot, Group, %clean, and buildroot cleanup


author: Todd Zullinger <tmz@pobox.com> - 2.16.1-3
changelog:
  - Order %files and %packages sections by name
  - Remove obsolete %defattr
  - Don't package contrib/svn-fe in %doc
  - Split git-subtree into a separate package


author: Todd Zullinger <tmz@pobox.com> - 2.17.0-0.0.rc0
changelog:
  - Update to 2.17.0-rc0
  - Adjust for simplified perl install
  - Require git-core rather than git for git-daemon
  - Rename gitweb httpd config file
  - Install contrib/diff-highlight (#1550251)


author: Todd Zullinger <tmz@pobox.com> - 2.17.0-0.1.rc1.1
changelog:
  - Drop .py extension from contrib/hooks/multimail/git_multimail.py
  - Remove unnecessary "chmod +x contrib/hooks/*"


author: Todd Zullinger <tmz@pobox.com>
changelog:
  - Allow git-p4 subpackage to be toggled via --with/--without
  - Use %bcond_(with|without) to enable/disable python3
  - Add support for disabling python2


author: Todd Zullinger <tmz@pobox.com>
changelog:
  - daemon: use --log-destination=stderr with systemd
  - daemon: fix condition for redirecting stderr
  - git-svn: avoid uninitialized value warning


author: Pavel Cahyna <pcahyna@redhat.com>
changelog:
  - Use BuildRequires: perl-interpreter per the packaging guidelines
  - Update conditions for future RHEL


author: Todd Zullinger <tmz@pobox.com> - 2.17.0-4
changelog:
  - Fix segfault in rev-parse with invalid input (#1581678)
  - Move TEST_SHELL_PATH setting to config.mak


author: Todd Zullinger <tmz@pobox.com> - 2.17.1-3
changelog:
  - Use %apply_patch for aarch64 zlib patch, return to %autosetup
  - Disable jgit tests on s390x, they're unreliable
  - Use %make_build and %make_install


author: Sebastian Kisela <skisela@redhat.com> - 2.18.0-4
changelog:
  - Fix %{perllibdir} path
  - %{perllibdir} now points to where perl-git modules are installed.
    This was introduced in fedora commit:
    f3c13faa206935a844e09c7dc9d78d6325100ced.


author: Sebastian Kisela <skisela@redhat.com> - 2.18.0-5
changelog:
  - Add %{?scl_prefix} macros for services + desktop files.
  - Add tests, checking hardcoded content of dist git sources,
  written by pstodulk.
  - Make git-gui.desktop, git@.service and gitweb-httpd.conf content
  point to the correct scl paths.
  - Move instaweb to separate subpackage
  - Switch instaweb default HTTP daemon to httpd
  - Use the correct apache module directory in instaweb.
  - Build docs with TZ=UTC to make results deterministic.
    Inspired by https://wiki.debian.org/ReproducibleBuilds/TimestampsInDocumentationGeneratedByAsciidoc


author: Pavel Cahyna <pcahyna@redhat.com> - 2.18.1-2
changelog:
  - Fix build when apr-util does not pull in apr-util-bdb, adapt the existing Fedora condition.
    Problem caused by changes in #1633973 and #1491151.
  - Fix builds without docs and without cvs and/or p4 (from skisela)
  - Fix smart-http test due to changes in cookie sort order in curl-7.61.1


author: Pavel Cahyna <pcahyna@redhat.com> - 2.18.1-3
changelog:
  - apply upstream run-command PATH fix (CVE-2018-19486)
  - config: document value 2 for protocol.version (upstream patch)


author: Ondrej Pohorelsky <opohorel@redhat.com> - 2.18.2-1
changelog:
  - Update to release 2.18.2
  - Remote code execution in recursive clones with nested submodules
    Resolves: CVE-2019-1387
  - Fixes CVE-2019-1348, CVE-2019-1349, CVE-2019-1350, CVE-2019-1351,	
    CVE-2019-1352, CVE-2019-1353, CVE-2019-1354


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 1.5.5-1
changelog:
  - Update to latest release
  - Add -devel and -unit-test-devel subpackages
  - Add post/preun scriptlets for global enablement


author: Carl George <carl@george.computer> - 2.3.4-4
changelog:
  - Use vendored libraries on RHEL
  - Skip test on RHEL
  - Don't build man pages on RHEL due to missing ronn
  - Don't build html versions of man pages


author: Ondrej Pohorelsky <opohorel@redhat.com> - 2.13.3-1
changelog:
  - Update to version 2.13.3
  - Fixed round brackets in Provides
  - Moved manpages.tgz to look-a-side cache
  - Resolves: rhbz#2021549, rhbz#1870080, rhbz#1866441


author: Weisson <wenshu.hx@alibaba-inc.com> - 3.4.1-10.0.1
changelog:
  - Add doc sub package
  - Disable pie mode for loongarch64 (geliwei@openanolis.org)
  - Support loongarch build (geliwei@openanolis.org)


author: Karsten Hopp <karsten@redhat.com> - 3.20.0-6
changelog:
  - apply upstream patch from Jonh Wendell to fix g_ptr_array_find types and make it
    build with latest glib2


author: Rafal Luzynski <digitalfreak@lingonborough.com> 1.2.5-4
changelog:
  - New translations: Friulian, Kazakh, Norwegian Nynorsk
  - Translation updates: Dutch, Finnish, Marathi


author: Julius Milan <jmilan@redhat.com> 1.2.6-1
changelog:
  - Translation updates
  - Satisfy pylint v1.7.1 warnings
  - pylintrc: disable pylint no-else-return warnings
  - Add fur, kk, nn languages into LINGUAS


author: Matej Habrnal <mhabrnal@redhat.com> - 1.2.6-5
changelog:
  - pylint(R0205): Remove explicit object inheritance
  - Fix incorrect parsing of reported_to file
  - Apply the new packaging guidelines
  - Mark the `--help' command line descriptions for translation
  - Remove Expert mode and the remaining Analyze code


author: Kalev Lember <klember@redhat.com> - 40~rc-1
changelog:
  - Update to 40.rc
  - Make -extras subpackage require the main package
  - Drop move-adwaita-backgrounds.patch
  - Remove old obsoletes


author: Felipe Borges <feborges@redhat.com> - 40.0-25
changelog:
  - Backport translations for Multitasking panel
  - Make Multitasking panel capable of handling Right-to-Left locales
    Resolves: #2105228


author: Benjamin Berg <bberg@redhat.com> - 3.30.1-3
changelog:
  - Add patch to improve background loading. The patch is not acceptable
    upstream as is, but is also a good improvement on the current situation
    (#1631002)


author: David Herrmann <dh.herrmann@gmail.com> - 3.30.1-4
changelog:
  - Reduce 'dbus-x11' dependency to 'dbus'. The xinit scripts are no longer the
    canonical way to start dbus, but the 'dbus' package is nowadays required to
    provide a user and system bus to its dependents.


author: Kevin Fenzi <kevin@scrye.com> - 3.31.90-2
changelog:
  - Add https://gitlab.gnome.org/GNOME/gnome-control-center/merge_requests/387.patch 
    to fix udisks crash


author: Michael Catanzaro <mcatanzaro@gnome.org> - 3.34.0.1-3
changelog:
  - Add patch to fix editing wired connection settings (rhbz#1750805)
  - Remove broken remote printers patch


author: Michael Catanzaro <mcatanzaro@gnome.org> - 3.34.2-2
changelog:
  - Drop nm-connection-editor requires, per gnome-control-center#512
  - To edit mobile broadband connections, install nm-connection-editor


author: Felipe Borges <feborges@redhat.com> - 40.0-38
changelog:
  - Scale up monitors drawing in display arrangment settings when multiple monitors
    Related: RHEL-4196


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.0-1
changelog:
  - Update to 3.40.0
  - Disable the Facebook, Flickr and Foursquare providers
  - Remove Photos support from the Google provider
  Resolves: #1913641


author: Milan Crha <mcrha@redhat.com> - 3.40.0-4
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.40.0-5
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Owen Taylor <otaylor@redhat.com> - 3.29.4-2
changelog:
  - Remove Requires: gettext-libs - it is extraneous
  - Use a glob for man page, to handle variations in man page compression.


author: Jonas Ådahl <jadahl@redhat.com> - 0.1.2-1
changelog:
  - Update to 0.1.2
  - Changed tabs to spaces
  - Added systemd user macros
  - Install to correct systemd user unit directory
  - Compile gsettings schemas after install and uninstall


author: Havoc Pennington <hp@redhat.com>
changelog:
  - put in new default session with pam-panel-icon
  - disable schema install in make install, fixes rebuild failure.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - put gdm session in here, conflict with old gdm
  - use DITHER_MAX for dithering to make splash screen look good in 16
    bit


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Up purge delay for session manager to 5 minutes to avoid problem 
    with openoffice.org timing out


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 2.1.90
  - drop purgedelay patch, as it was increased upstream (though only to 2 minutes instead of 5)


author: Mark McLoughlin <markmc@redhat.com> 2.5.90-1
changelog:
  - Update to 2.5.90
  - Remove extraneous fontconfig BuildRequires
  - Resolve conflicts with the icons and splash-repaint patches


author: Ray Strode <rstrode@redhat.com> 2.6.0-4
changelog:
  - Use desktop-file-install instead of patching 
    session-properties.desktop.  Add X-Red-Hat-Base category.


author: Ray Strode <rstrode@redhat.com> 2.7.4-3
changelog:
  - Change folder name from "autostart" to more aptly named
    "session-upgrades" from suggestion by Colin Walters.
  - put non-upstream gconf key in rh_extensions


author: Ray Strode <rstrode@redhat.com> 2.7.91-2
changelog:
  - Fix from Federico for infamous hanging splash screen problem.
    (http://bugzilla.gnome.org/show_bug.cgi?id=151664)


author: Ray Strode <rstrode@redhat.com> 2.8.0-4
changelog:
  - Add g-v-m to default session since it wasn't already (?).
  - Remove g-v-m from default session on s390


author: Ray Strode <rstrode@redhat.com> 2.8.0-6
changelog:
  - Rebuild for devel branch

   * Tue Nov 02 2004 Ray Strode <rstrode@redhat.com> 2.8.0-5
  - Convert Tamil translation to UTF8 
    (Patch from Lawrence Lim <llim@redhat.com>, bug 135351)


author: Ray Strode <rstrode@redhat.com> - 2.12.0-3
changelog:
  - fix up the dummy client ids to match the id passed initially
    passed to the programs in the default session 
    (broke in last update).


author: Ray Strode <rstrode@redhat.com> - 2.13.92-3
changelog:
  - Patch from Vincent Untz to fix session editing (upstream bug 333641)
  - Desensitize buttons for operations that the user isn't allowed
    to do (bug 179479).


author: Soren Sandmann <sandmann@redhat.com> - 2.15.4-3
changelog:
  - Add patch to (a) add configuration option for window manager, (b) start the window
    manager, and (c) disable splash screen by default.


author: Ray Strode <rstrode@redhat.com> - 2.16.1-2.fc7
changelog:
  - don't hose users with a stale http_proxy variable if they
    use autoconfiguration and uses to use manual configuration.
    Patch by Mark McLoughlin (bug 212319)


author: Kristian Høgsberg <krh@redhat.com> - 2.17.90.1-3
changelog:
  - Update gnome-session-2.15.90-window-manager.patch to start
    gtk-window-decorator instead of gnome-window-decorator for compiz.

    [ Update: the patch is not applied and upstream gnome-session does
      the right thing. ]


author: Kristian Høgsberg <krh@redhat.com> - 2.19.92-2
changelog:
  - Update gnome-session-2.17.5-window-manager.patch to apply (remove
    chunks that are now upstream).


author: - Bastien Nocera <bnocera@redhat.com> - 2.21.90-2
changelog:
  - Add patch to make login sounds work
  - Remove unneeded patch to launch gnome-user-share, it launches
    using autostart now


author: Ray Strode <rstrode@redhat.com> - 2.24.0-11
changelog:
  - Remove some dubious code to fix panel race at startup that
    would make shutdown menu item disappear for some users.


author: Matthias Clasen <mclasen@redhat.com> - 2.26.1-1
changelog:
  - Update to 2.26.1
  - See http://download.gnome.org/sources/gnome-session/2.26/gnome-session-2.26.1.news


author: Adam Jackson <ajax@redhat.com> 3.8.0-2
changelog:
  - gnome-session-3.6.2-swrast.patch: Allow running on the classic software
    renderer.  No effect on arches where we build llvmpipe, but on ppc/s390
    classic swrast is marginally less painful than softpipe.


author: Kalev Lember <kalevlember@gmail.com> - 3.8.1-2
changelog:
  - Use the upstream xsession desktop file
  - Drop the fallback mode authentication agent autostart file


author: Bastien Nocera <bnocera@redhat.com> 3.15.90-2
changelog:
  - Fix SessionIsActive property thereby fixing screens not going to sleep
  - Disable GConf autostart support


author: Kalev Lember <kalevlember@gmail.com> - 3.15.92-1
changelog:
  - Update to 3.15.92
  - Remove patch fuzz 2 and drop two upstreamed patches
  - Tighten deps with the _isa macro


author: Ray Strode <rstrode@redhat.com> - 3.24.1-2
changelog:
  - Kill bus clients at log out
    Resolves: #1340203

  - Address crash in fail whale
    Related: #1384508


author: Bastien Nocera <bnocera@redhat.com> - 3.27.4-1
changelog:
  - Update to 3.27.4
  - Use meson as build system
  - Adjust required session components for gnome-settings-daemon 3.27.90


author: Hans de Goede <hdegoede@redhat.com> - 3.30.1-2
changelog:
  - Add downstream patches implementing the "Boot Options" menu from:
    https://wiki.gnome.org/Design/OS/BootOptions


author: Benjamin Berg <bberg@redhat.com> - 3.34.0-3
changelog:
  - Stop certain environment variables from leaking betweens sessions
    https://gitlab.gnome.org/GNOME/gnome-session/merge_requests/23
  - Resolves: #1753191


author: Benjamin Berg <bberg@redhat.com> - 3.34.1-2
changelog:
  - Add patch to strip blacklisted variables from autostart applications environment
    https://gitlab.gnome.org/GNOME/gnome-session/merge_requests/27


author: Benjamin Berg <bberg@redhat.com> - 3.34.1-3
changelog:
  - Add patches to ensure proper unit unloading after session shutdown
    https://gitlab.gnome.org/GNOME/gnome-session/merge_requests/28
  - Resolves: #1760366


author: Benjamin Berg <bberg@redhat.com> - 3.34.2-2
changelog:
  - Add patches to run applications in transient scopes
    https://gitlab.gnome.org/GNOME/gnome-session/merge_requests/36
  - Add patches to quit gnome-session quickly if gnome-shell cannot start
    https://gitlab.gnome.org/GNOME/gnome-session/merge_requests/35


author: Hans de Goede <hdegoede@redhat.com> - 3.37.0-2
changelog:
  - Remove downstream patch for the "Boot Options" menu
  - Simplify downstream patch for the "Hidden Grub Menu" integration


author: Felipe Borges <feborges@redhat.com> - 40.0.1-10
changelog:
  - Default power-button-action to poweroff on servers
    (except when power-button-action=nothing)
    Resolves: #1885639


author: Ray Strode <rstrode@redhat.com> - 40.0.1-13
changelog:
  - Revert hard dependency on subscription-manager since we're going to put it in gnome-session instead
    Related: #2175675


author: Ray Strode <rstrode@redhat.com> - 40.0.1-15
changelog:
  - Fix crashers in g-s-d and control-center related to
    making subscription-manager a soft dep
    Related: RHEL-20449


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 40.0.1-17.0.1
changelog:
  - Add doc sub package
  - Modify systemd buildrequirement to version 239 and rebuild with systemd-239 (<gc-taifu@linux.alibaba.com>)


author: Soren Sandmann <sandmann@redhat.com> - 2.21.91-3
changelog:
  - Add patch to make the xrandr plugin listen for client messages from
    the control panel and reread the configuration file.


author: Ray Strode <rstrode@redhat.com> - 2.21.92-3
changelog:
  - Don't set keyboard model on startup from gconf if evdev is being used.
    Evdev needs to use its own keyboard model to work right.


author: - Ray Strode <rstrode@redhat.com> - 2.22.1-0.2008.03.26.4
changelog:
  - Over the releases we've accumulated default.png, default-wide.png default-5_4.png
    and default.jpg.  We haven't been able to drop them because it would leave some
    users with white backgrounds on upgrade.  This patch just falls back to the
    default image if the user's background doesn't exist.


author: Colin Walters <walters@redhat.com> - 2.23.3-2
changelog:
  - Add (now upstreamed) patch to legacy ESD preference; see
    http://bugzilla.gnome.org/show_bug.cgi?id=533198
    https://bugzilla.redhat.com/show_bug.cgi?id=430624


author: Lennart Poettering <lpoetter@redhat.com> - 2.23.6-2
changelog:
  - Apply patch from gnome bug 545386. This hasn't been accepted in this form yet
    by upstream, will however very likely be merged in a similar form.
  - Disable esd/sounds module since we don't need it to start PA anymore


author: Ray Strode <rstrode@redhat.com> - 2.25.2-6
changelog:
  - Listen for DeviceAdded signals when configuring mouse
    (in addition to DeviceEnabled).  This may help with
    bug 474758.


author: Ray Strode <rstrode@redhat.com> - 2.25.2-9
changelog:
  - Don't call SetPointerMapping when using Xinput since
    it duplicates effort but gets touchpads wrong (bug 324721)


author: Bastien Nocera <bnocera@redhat.com> 2.26.1-3
changelog:
  - Don't set touchpads to be left-handed, otherwise the tap
    behaves like the 2nd mouse button (#483639)


author: Peter Hutterer <peter.hutterer@redhat.com> 2.27.91-2
changelog:
  - buttonmapping.patch: Don't check for IsXExtensionDevice, only skip button
    mappings for core devices instead (#502129).


author: Peter Hutterer <peter.hutterer@redhat.com> 2.28.1-2
changelog:
  - left-handed-touchpad.patch: change physical touchpad buttons to
    left-handed, not tapping though (#498249)


author: Adam Williamson <awilliam@redhat.com> - 3.2.0-2
changelog:
  - backport some greatest hits from git to stop the same bugs being
    reported over and over (all will be in 3.2.1)


author: Kalev Lember <kalevlember@gmail.com> - 3.9.2-1
changelog:
  - Update to 3.9.2
  - Drop the ibus-kkc-libpinyin patch; the hardcoded input sources
    list is gone from g-s-d
  - Set the minimum required gnome-desktop3 version


author: Kalev Lember <kalevlember@gmail.com> - 3.9.5-1
changelog:
  - Update to 3.9.5
  - Remove empty /etc/gnome-settings-daemon directory
  - Install new rfkill plugin and add back the smartcard plugin


author: Richard Hughes <rhughes@redhat.com> - 3.9.91.1-2
changelog:
  - Grab a patch from upstream so that the offline updates feature can
    actually work when reboot returns with success.


author: Richard Hughes <rhughes@redhat.com> - 3.10.0-2
changelog:
  - Grab a patch from upstream to fix the multiple notifications about updates.
  - Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1009132


author: Bastien Nocera <bnocera@redhat.com> - 3.26.2-3
changelog:
  - Fix gdm session trying to change the backlight, resulting in a lot
    of spurious error messages (#1322588)


author: Bastien Nocera <bnocera@redhat.com> - 3.27.90-3
changelog:
  + gnome-settings-daemon-3.27.90-3
  - Really fix gsd-* helper linkage
  - Build fix for highly parallel builds


author: Owen Taylor <otaylor@redhat.com> - 2.27.2-1
changelog:
  - Update to 2.27.2
  - Add an explicit dep on gobject-introspection 0.6.5 which is required 
    for the new version


author: Adam Miller <maxamillion@fedoraproject.org> - 2.28.0.20101015git-1
changelog:
  - Added dependency on a git build of gobject-introspect to solve some breakage
  - Also went ahead and made a new git tarball


author: Adam Miller <maxamillion@fedoraproject.org> - 2.29.1-2
changelog:
  - Bumped for new version of mutter and clutter
  - Added version requirement to gjs-devel because of dependency of build


author: Adam Miller <maxamillion@fedoraproject.org> - 2.31.2-2
changelog:
  - Added new version requirements for dependencies based on upstream releases
  - Added new file listings for gnome-shell-clock-preferences binary and .desktop
  - Added gnome-shell man page file listing


author: Owen Taylor <otaylor@redhat.com> - 2.91.1-1
changelog:
  - Update to 2.91.1
  - Add libcroco-devel to BuildRequires, apparently it was getting
    pulled in indirectly before
  - Add libcanberra-devel and pulseaudio-libs-devel BuildRequires


author: Nils Philippsen <nils@redhat.com> - 3.0.0.2-1
changelog:
  - Update to 3.0.0.2 (fixes missing import that was preventing extensions from
    loading.)
  - Update source URL


author: Dan Williams <dcbw@redhat.com> - 3.0.1-4
changelog:
  - Fix initial connections to WPA Enterprise access points (#699014)
  - Fix initial connections to mobile broadband networks


author: Owen Taylor <otaylor@redhat.com> - 3.4.0-2
changelog:
  - Change gnome-shell-favourite-apps-firefox.patch to also patch the JS code
    to handle the transition from mozilla-firefox.desktop to firefox.desktop.
    (#808894, reported by Jonathan Kamens)


author: Florian Müllner <fmuellner@redhat.com> - 3.6.1-2
changelog:
  - Remove avoid-redhat-menus patch

    The standard way of supporting a desktop-specific menu layout is
    to set XDG_MENU_PREFIX (which we made gnome-session do now).


author: Kalev Lember <kalevlember@gmail.com> - 3.9.1-2
changelog:
  - Add missing telepathy-logger runtime dep
  - Depend on gnome-session-xsession so that it gets pulled in for
    typical GNOME installs


author: Florian Müllner <fmuellner@redhat.com> - 3.11.90-3
changelog:
  - Add dependency on gnome-control-center - several panels are referenced
    by a number of menu items


author: Ray Strode <rstrode@redhat.com> 3.15.91-2
changelog:
  - Drop dep on NetworkManager-config-connectivity-fedora
    It's already required by fedora-release-workstation


author: Kalev Lember <klember@redhat.com> - 3.17.4-2
changelog:
  - Create empty directories for extensions and search providers
  - Move desktop file validation to %check section
  - Use make_install macro


author: Florian Müllner <fmuellner@redhat.com> - 3.21.90.1-1
changelog:
  - Update to 3.21.90.1
    (Fixes a corrupt .desktop file that made it from the build directory into
     the 3.21.90 tarball)


author: Adam Williamson <awilliam@redhat.com> - 3.30.0-7
changelog:
  - Replace dnd fix from -5 with upstream version (GGO MR #209)
  - Fix a window destroy crash which can occur with new gjs (GGO #539)
  - Fix a window menu issue on multi-monitor systems (GGO MR #227)
  - Fix hover and active states for some buttons (GGO #523)


author: Ray Strode <rstrode@redhat.com> - 3.36.0-4
changelog:
  - Clear environment on logout
    Fixes log in to Xorg right after log out from wayland
    Resolves: #1815487


author: Ray Strode <rstrode@redhat.com> - 40.8-3
changelog:
  - Backport latest, working, version of ChoiceList extension
  - Regenerate stylesheet patch
    Related: #1993954


author: Florian Müllner <fmuellner@redhat.com> - 40.9-3
changelog:
  - Fix markup handling in highlighter
    Resolves: #2049194
  - Fix warning on restacking
    Resolves: #2053638


author: Florian Müllner <fmuellner@redhat.com> - 40.10-4
changelog:
  - Fix struts on login screen
    Resolves: #2145185
  - Allow gnome portal to access introspection API
    Resolves: #2079194


author: Joan Torres <joantolo@redhat.com> - 40.10-27
changelog:
  - session-opened signature is reverted to keep ABI compatibility,
    use session-opened-with-session-id instead
    Related: RHEL-92307


author: Joan Torres <joantolo@redhat.com> - 40.10-30
changelog:
  - Fix regression on multiple remote sessions and same user
    Also, add missing fix to keep API/ABI compatibility on GDM greeter proxy.
    Resolves: RHEL-109190


author: Timur Kristóf <venemo@fedoraproject.org> - 3.0.2-1.g63dd27cgit
changelog:
  - Update to a newer git snapshot
  - Fix RHBZ bug #708230
  - Enabled systemMonitor extension, but commented out since the requirements are not available


author: Michel Salim <salimma@fedoraproject.org> - 3.1.4-1
changelog:
  - Update to 3.1.4
  - Enable systemMonitor extension
  - Prepare xrandr-indicator, commenting out since it does not seem to work yet
  - Rename subpackages in line with new guidelines (# 715367)
  - Sort subpackages in alphabetical order


author: Mohamed El Morabity <melmorabity@fedoraproject.org> - 3.1.91-3.20111001gite102c0c6
changelog:
  - Update to a newer git snapshot
  - Fix GNOME Shell version to work with GS 3.2.0
  - Add Requires on GS 3.2.0 or above to gnome-shell-common


author: Mohamed El Morabity <melmorabity@fedoraproject.org> - 3.7.3-1
changelog:
  - Update to 3.7.3
  - Enable new default-min-max and static-workspaces extensions
  - Provide new subpackage gnome-classic-session
  - Revamp summaries and descriptions


author: Mohamed El Morabity <melmorabity@fedoraproject.org> - 3.7.5.1-1
changelog:
  - Update to 3.7.5
  - Enable new launch-new-instance and window-list extensions, and add them in the
    classic-mode extension set
  - Re-add places-menu in the classic-mode extension set


author: Rahul Sundaram <sundaram@fedoraproject.org> - 3.9.3-1
changelog:
  - Update to 3.9.3
  - Obsolete default-min-max and static workspaces extensions
  - Use make_install macro
  - Fix bogus dates in spec changelog


author: Florian Müllner <fmuellner@redhat.com> - 40.0~alpha.1-3.20210212git9fa522c
changelog:
  - Build snapshot of current upstream
  - Drop horizontal-workspaces subpackage
    (removed upstream, because horizontal workspaces are the default now)


author: Florian Müllner <fmuellner@redhat.com> - 40.7-4
changelog:
  - Adjust classification banner position in fullscreen
    Resolves: #2153524
  - Don't grab focus when clicking desktop grid
    Resolves: #2150001
  - Make desktop icons resilient to background reloads
    Resolves: #2139895
  - Allow disabling workspace switch gesture
    Resolves: #2154358


author: Debarshi Ray <rishi@fedoraproject.org> - 3.28.3-3
changelog:
  - Support using the '0', '+' and '-' keys from the numeric keypad as
    accelerators
  - Resolves: #837035


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Milan Crha <mcrha@redhat.com> - 3.28.1-7
changelog:
  - extensions: Incorrectly shows enabled extensions as disabled after enable-all
  - Resolves: #1804123


author: Peter Jones <pjones@redhat.com> - 3.0.11-1
changelog:
  - Update to 3.0.11 (via patches generated from git)
  - Plus newer upstream fixes (also via patches generated from git)
  - Fix shell exit failures in make
  - Fix .reloc section generation
  - Fix CHAR8 definition
  - Fix "make DESTDIR=..."
  - Change the installed .a/.o layout
  - Provide makefiles for consumers to use.
  - Make the -devel noarch since it's just headers.
  - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout
    These will go away once we've migrated everything using them in fedora
    to use the newer make system...


author: Peter Jones <pjones@redhat.com> - 3.0.11-2
changelog:
  - Make a compat subpackage to provide the old paths to our libraries, linker
    script, and includes.


author: Parag Nemade <pnemade AT redhat DOT com> - 20120503-10
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove %clean section which is optional now
  - Remove buildroot which is optional now
  - Remove removal of buildroot in %install
  - Remove %defattr
  - Remove group tag


author: Pavel Cahyna <pcahyna@redhat.com> - 5.2.4-1
changelog:
  - Rebase to upstream release 5.2.4
  - Add workaround for broken info generation (upstream bug
    https://sourceforge.net/p/gnuplot/bugs/1963/) from Debian
  - Use explicit path for texdir
  - Correct the description of command line options in manpage, bz#1612690
  - Install gnuplot-qt and gnuplot-wx manpage links, bz#1612690


author: Pavel Cahyna <pcahyna@redhat.com> - 5.2.4-2
changelog:
  - Add --with-bitmap-terminals to configure flags, among others this enables
    the pbm terminal, bz#2122652


author: Alejandro Sáez <asm@redhat.com> - 2-17
changelog:
  - Add and update the go-compiler functionality (gobuild macro)
  - Deprecate ix86
  - Update Source0
  - Resolves: rhbz#1905383


author: Alejandro Sáez <asm@redhat.com> - 1.21.7-1
changelog:
  - Update to Go 1.21.7
  - Add aarch64 and ppc64le for Delve
  - Resolves: RHEL-24082
  - Resolves: RHEL-18363
  - Resolves: RHEL-18382


author: David Benoit <dbenoit@redhat.com> - 1.22.3-1
changelog:
  - Update to Go 1.22.3
  - Resolves: RHEL-35884
  - Resolves: RHEL-35075
  - Resolves: RHEL-35632
  - Resolves: RHEL-35901


author: David Benoit <dbenoit@redhat.com> - 1.22.7-1
changelog:
  - Update to Go 1.22.7
  - Resolves: RHEL-58223
  - Resolves: RHEL-57961
  - Resolves: RHEL-57847
  - Resolves: RHEL-57860


author: David Benoit <dbenoit@redhat.com> - 1.15.2-1
changelog:
  - Rebase to 1.15.2
  - Related: rhbz#1870531
  - Related: rhbz#1872622
  - Related: rhbz#1888673
  - Related: rhbz#1889437
  - Related: rhbz#1891095


author: David Benoit <dbenoit@redhat.com> - 1.16.7-1
changelog:
  - Rebase to Go 1.16.7
  - Resolves: rhbz#1994079
  - Add reject leading zeros patch
  - Resolves: rhbz#1993314


author: David Benoit <dbenoit@redhat.com> - 1.17.4-1
changelog:
  - Rebase Go to 1.17.4
  - Add vdso_s390x_gettime patch
  - Add remove_waitgroup_misuse_tests patch
  - Related: rhbz#2014088
  - Resolves: rhbz#2028570
  - Resolves: rhbz#2022828
  - Resolves: rhbz#2024686
  - Resolves: rhbz#2028662


author: David Benoit <dbenoit@redhat.com> - 1.19.4-1
changelog:
  - Rebase to Go 1.19.4
  - Fix ppc64le linker issue
  - Remove defunct patches
  - Remove downstream generated FIPS mode patches
  - Add golang-fips/go as the source for FIPS mode patches
  - Resolves: rhbz#2144542


author: Archana <aravinda@redhat.com> - 1.22.11-1
changelog:
  - Rebase to Go1.22.11 to pick up fixes for CVEs 2024-45341 and 2024-45336
  - Go rebase addresses test failures with expired certificates
  - Resolves: RHEL-73752


author: Adam Goode <adam@spicenitz.org> - 1.1.1-3
changelog:
  - Use lua for pretrans (http://fedoraproject.org/wiki/Packaging:Guidelines#The_.25pretrans_scriptlet)


author: Adam Goode <adam@spicenitz.org> - 1.1.1-4
changelog:
  - Move src to libdir for now (#973842) (upstream issue https://code.google.com/p/go/issues/detail?id=5830)
  - Eliminate noarch data package to work around RPM bug (#975909)
  - Try to add runtime-gdb.py to the gdb safe-path (#981356)


author: Adam Miller <maxamillion@fedoraproject.org> - 1.1.2-5
changelog:
  - Pull upstream patches for BZ#1010271
  - Add glibc requirement that got dropped because of meta dep fix


author: Vincent Batts <vbatts@redhat.com> - 1.1.2-6
changelog:
  - don't symlink /usr/bin out to ../lib..., move the file
  - seperate out godoc, to accomodate the go.tools godoc


author: Adam Miller <maxamillion@fedoraproject.org> 1.2-7
changelog:
  - Remove  _BSD_SOURCE and _SVID_SOURCE, they are deprecated in recent
    versions of glibc and aren't needed


author: Vincent Batts <vbatts@fedoraproject.org> 1.2.1-3
changelog:
  - including more to macros (%go_arches)
  - set a standard goroot as /usr/lib/golang, regardless of arch
  - include sub-packages for compiler toolchains, for all golang supported architectures


author: Vincent Batts <vbatts@fedoraproject.org> - 1.3-10
changelog:
  - more work to get cgo.a timestamps to line up, due to build-env
  - explicitly list all the files and directories for the source and packages trees
  - touch all the built archives to be the same


author: Vincent Batts <vbatts@fedoraproject.org> - 1.5-3
changelog:
  - bz1256910 only allow the golang zoneinfo.zip to be used in tests
  - bz1166611 add golang.org/x directory
  - bz1256525 include stdlib shared object. This will let other libraries and binaries
    build with `go build -buildmode=shared -linkshared ...` or similar.


author: Vincent Batts <vbatts@fedoraproject.org> - 1.5-6
changelog:
  - starting a shared object subpackage. This will be x86_64 only until upstream supports more arches shared objects.


author: Jakub Čajka <jcajka@redhat.com> - 1.5.2-1
changelog:
  - bz1288263 rebase to 1.5.2
  - spec file clean up
  - added build options
  - scrubbed "Project Gutenberg License"


author: Jakub Čajka <jcajka@redhat.com> - 1.5.3-1
changelog:
  - rebase to 1.5.3
  - resolves bz1293451, CVE-2015-8618
  - apply timezone patch, avoid using bundled data
  - print out rpm build system info


author: Jakub Čajka <jcajka@redhat.com> - 1.6-0.1.rc1
changelog:
  - Resolves bz1292640, rebase to pre-release 1.6
  - bootstrap for PowerPC
  - fix rpmlint errors/warning


author: Jakub Čajka <jcajka@redhat.com> - 1.6-1
changelog:
  - Resolves: bz1304701 - rebase to go1.6 release
  - Resolves: bz1304591 - fix possible stack miss-alignment in callCgoMmap


author: Jakub Čajka <jcajka@redhat.com> - 1.6.1-1
changelog:
  - rebase to 1.6.1
  - Resolves: bz1324344 - CVE-2016-3959
  - Resolves: bz1324951 - prelink is gone, /etc/prelink.conf.d/* is no longer used
  - Resolves: bz1326366 - wrong epoll_event struct for ppc64le/ppc64


author: Jakub Čajka <jcajka@redhat.com> - 1.7-0.0.rc2
changelog:
  - rebase to 1.7rc2
  - added s390x build
  - improved shared lib packaging
  - Resolves: bz1357602 - CVE-2016-5386
  - Resolves: bz1342090, bz1342090


author: Jakub Čajka <jcajka@redhat.com> - 1.7-0.3.rc5
changelog:
  - Obsolete golang-vet and golang-cover from golang-googlecode-tools package
    vet/cover binaries are provided by golang-bin rpm (thanks to jchaloup)
  - clean up exclusive arch after s390x boostrap
  - resolves: #1268206


author: Jakub Čajka <jcajka@redhat.com> - 1.8-0.rc3.2
changelog:
  - make possible to override default traceback level at build time
  - add sub-package race containing std lib built with -race enabled
  - Related: BZ#1411242


author: Derek Parker <deparker@redhat.com> - 1.10.3-15
changelog:
  - Remove usage of redhat hardening flag file, just pass a select few manually
  - Resolves: rhbz#1642798


author: David Benoit <dbenoit@redhat.com> - 1.15.2-1
changelog:
  - Rebase to 1.15.2
  - fix rhbz#1872622 in commit af9a1b1f6567a1c5273a134d395bfe7bb840b7f8
  - Resolves: rhbz#1872622
  - add net/http graceful shutdown patch
  - Resolves: rhbz#1888673
  - add x509warnCN patch
  - Resolves: rhbz#1889437


author: Alejandro Sáez <asm@redhat.com> - 1.16.1-1
changelog:
  - Rebase to go-1.16.1-2-openssl-fips
  - Resolves: rhbz#1938071
  - Adds a workaround for rhbz#1939923
  - Removes Patch224, it's on upstream -> rhbz#1888673
  - Removes Patch225, it's on upstream -> https://go-review.googlesource.com/c/text/+/238238
  - Removes old patches for cleaning purposes


author: Alejandro Sáez <asm@redhat.com> - 1.16.5-1
changelog:
  - Rebase to 1.16.5
  - Removes rhbz#1955032 patch, it's already included in this release
  - Removes rhbz#1956891 patch, it's already included in this release
  - Related: rhbz#1979677
  - Related: rhbz#1968738
  - Related: rhbz#1972420


author: Alejandro Sáez <asm@redhat.com> - 1.17.2-1
changelog:
  - Rebase to Go 1.17.2
  - Related: rhbz#2014088
  - Remove golang-1.15-warnCN.patch
  - Remove reject-leading-zeros.patch
  - Remove favicon.ico and robots.txt references
  - Exclude TestEd25519Vectors test


author: David Benoit <dbenoit@redhat.com> - 1.17.4-1
changelog:
  - Rebase Go to 1.17.4
  - Add remove_waitgroup_misuse_tests patch
  - Related: rhbz#2014088
  - Resolves: rhbz#2028570
  - Resolves: rhbz#2022828
  - Resolves: rhbz#2024686
  - Resolves: rhbz#2028662


author: David Benoit <dbenoit@redhat.com> - 1.17.5-1
changelog:
  - Rebase to Go 1.17.5
  - Remove vdso_s390x_gettime patch
  - Resolves: rhbz#2031112
  - Related: rhbz#2028570


author: Archana Ravindar <aravinda@redhat.com> - 1.21.3-2
changelog:
  - Rebase disable_static_tests_part2.patch to Go 1.21.3
  - Add missing strict fips runtime detection patch
  - Temporarily disable FIPS tests on aarch64 due to builder kernel bugs
  - Remove fix-memory-leak patch as it is fixed upstream
  - Resolves: RHEL-12620


author: Alejandro Sáez <asm@redhat.com> - 1.21.7-1
changelog:
  - Rebase to Go 1.21.7
  - Add release information
  - Set GOTOOLCHAIN to local
  - Skip TestOverlongMessagePKCS1v15
  - Resolves: RHEL-24082
  - Resolves: RHEL-18363
  - Resolves: RHEL-18382


author: Archana <aravinda@redhat.com> - 1.22.11-1
changelog:
  - Rebase to Go1.22.11 to pick up fixes for CVE 2024-45341 and 2024-45336
  - Fix test failures with expired certificates
  - Resolves: RHEL-73752


author: David Benoit <dbenoit@redhat.com> - 1.25.3-1
changelog:
  - Update to Go 1.25.3 (sync from CentOS Stream 9)
  - Build go-toolset as a subpackage
  - Preserve GOAMD64=v1 for RHEL 8
  - Resolves: RHEL-121223


author: Chang Gao <gc-taifu@linux.alibaba.com> - 1.25.10-1.0.1
changelog:
  - disable DISABLE_BoringCertAlgs_TEST test
  - Add uapi support for Linux 4.19 on loong64
  - internal/bytealg: optimize Index/IndexString on loong64
  - crypto/sha256: use const table for key loading on loong64
  - crypto/sha512: use const table for key loading on loong64
  - cmd/compile: fold negation into multiplication on loong64
  - cmd/compile: avoid extending when already sufficiently masked on loong64
  - cmd/compile: optimize multiplication rules on loong64
  - cmd/compile/internal/ssa: optimise more branches with SGTconst/SGTUconst on loong64
  - cmd/compile/internal/ssa: use BEQ/BNE to optimize the combination of XOR and EQZ/NEZ on loong64
  - cmd/compile/internal/ssa: eliminate unnecessary extension operations
  - cmd/compile/internal: optimize SGT operation using R0 in case of constant zero
  - cmd/compile/internal: optimize multiplication use new operation 'ADDshiftLLV' on loong64
  - cmd/compile: convert branch with zero to more optimal branch zero on loong64
  - cmd/compile: optimize some patterns into revb2h/revb4h instruction on loong64
  - cmd/compile: optimize rule (x + x) << c to x << c+1 on loong64
  - cmd/compile: use zero register instead of specialized *zero instructions on loong64
  - cmd/compile: simplify zerorange on loong64
  - cmd/compile: simplify the support for 32bit high multiply on loong64
  - cmd/compile: simplify specific addition operations using the ADDV16 instruction
  - cmd/compile: fold constant in ADDshift op on loong64
  - cmd/internal/obj/loong64: use the MOVVP instruction to optimize prologue
  - cmd/internal/obj, cmd/asm: reclassify the offset of memory access operations on loong64
  - cmd/compile: implement jump table on loong64
  - runtime/cgo: save and restore R31 for crosscall1 on loong64
  - runtime: save and restore all fcc registers in async preempt on loong64
  - runtime: add reference to debugPinnerV1
  - internal/chacha8rand: replace WORD with instruction VMOVQ
  - cmd/internal/obj/loong64: adjust the case number of the Optab entry
  - cmd/internal/obj/loong64: add MULW.D.W[U] instructions
  - cmd/internal/obj/loong64: add [X]VLDREPL.{B/H/W/D} instructions support
  - cmd/internal/obj/loong64: add support for FSEL instruction
  - cmd/internal/obj/loong64: add new instructions ALSL{W/WU/V} for loong64
  - cmd/internal/obj/loong64: add LDPTR.{W/D} and STPTR.{W/D} instructions support
  - cmd/internal/obj/loong64: add ADDU16I.D instruction support


author: chenguoqi <chenguoqi@loongson.cn> - 1.25.3-1.0.2
changelog:
  - Add uapi support for Linux 4.19 on loong64
  - internal/bytealg: optimize Index/IndexString on loong64
  - crypto/sha256: use const table for key loading on loong64
  - crypto/sha512: use const table for key loading on loong64
  - cmd/compile: fold negation into multiplication on loong64
  - cmd/compile: avoid extending when already sufficiently masked on loong64
  - cmd/compile: optimize multiplication rules on loong64
  - cmd/compile/internal/ssa: optimise more branches with SGTconst/SGTUconst on loong64
  - cmd/compile/internal/ssa: use BEQ/BNE to optimize the combination of XOR and EQZ/NEZ on loong64
  - cmd/compile/internal/ssa: eliminate unnecessary extension operations
  - cmd/compile/internal: optimize SGT operation using R0 in case of constant zero
  - cmd/compile/internal: optimize multiplication use new operation 'ADDshiftLLV' on loong64
  - cmd/compile: convert branch with zero to more optimal branch zero on loong64
  - cmd/compile: optimize some patterns into revb2h/revb4h instruction on loong64
  - cmd/compile: optimize rule (x + x) << c to x << c+1 on loong64
  - cmd/compile: use zero register instead of specialized *zero instructions on loong64
  - cmd/compile: simplify zerorange on loong64
  - cmd/compile: simplify the support for 32bit high multiply on loong64
  - cmd/compile: simplify specific addition operations using the ADDV16 instruction
  - cmd/compile: fold constant in ADDshift op on loong64
  - cmd/internal/obj/loong64: use the MOVVP instruction to optimize prologue
  - cmd/internal/obj, cmd/asm: reclassify the offset of memory access operations on loong64
  - cmd/compile: implement jump table on loong64
  - runtime/cgo: save and restore R31 for crosscall1 on loong64
  - runtime: save and restore all fcc registers in async preempt on loong64
  - runtime: add reference to debugPinnerV1
  - internal/chacha8rand: replace WORD with instruction VMOVQ
  - cmd/internal/obj/loong64: adjust the case number of the Optab entry
  - cmd/internal/obj/loong64: add MULW.D.W[U] instructions
  - cmd/internal/obj/loong64: add [X]VLDREPL.{B/H/W/D} instructions support
  - cmd/internal/obj/loong64: add support for FSEL instruction
  - cmd/internal/obj/loong64: add new instructions ALSL{W/WU/V} for loong64
  - cmd/internal/obj/loong64: add LDPTR.{W/D} and STPTR.{W/D} instructions support
  - cmd/internal/obj/loong64: add ADDU16I.D instruction support


author: Parag Nemade <pnemade AT redhat DOT com> - 20120715-8
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove %clean section which is optional now
  - Remove removal of buildroot in %install
  - Remove group tag


author: Peng Wu <pwu@redhat.com> - 20230817-1
changelog:
  - Update Noto CJK to Sans 2.004 and Serif 2.002
  - Drop some Noto CJK Language Specific OTFs sub packages
  - Resolves: RHEL-13738


author: Mike FABIAN <mfabian@redhat.com> - 20200402-1
changelog:
  - Update to upstream snapshot tarball (fixes U+1F9D1 U+200D U+1F3A8 "artist"
    and many other sequences)


author: Akira TAGOH <tagoh@redhat.com> - 20201206-1
changelog:
  - Updates to 20201206.
    Resolves: rhbz#1899847
  - Refactoring spec file.
  - Fix invalid metainfo files.
    Resolves: rhbz#1830709


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-12
changelog:
  - Resolves RHEL-7503
  - Adds a selinux policy for grafana
  - Resolves RHEL-12650
  - fix CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-14
changelog:
  - Resolves RHEL-19596
  - Fixes coredump issue introduced by selinux
  - Patches out call to panic when trying to walk "/" directory
  - Fixes postgresql AVC denial


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-15
changelog:
  - Resolves RHEL-23466
  - Resolves RHEL-21027
  - Allows for gid to be 0
  - Allows for postgreSQL datasource in selinux policy


author: Mark Goodwin <mgoodwin@redhat.com> 5.4.3-2
changelog:
  - add patch to be standard FHS compliant, remove phantomjs
  - update to v5.4.3 upstream community sources


author: Mark Goodwin <mgoodwin@redhat.com> 5.4.3-7
changelog:
  - further refinement for spec doc section from Xavier Bachelot
  - disable debug_package to avoid empty debugsourcefiles.list


author: Mark Goodwin <mgoodwin@redhat.com> 5.4.3-8
changelog:
  - add BuildRequires (and unbundle) vendor sources available in Fedora
  - declare Provides for remaining (bundled) vendor go sources
  - do not attempt to unbundle anything on RHEL < 7 or Fedora < 28


author: Xavier Bachelot <xavier@bachelot.org> 5.4.3-9
changelog:
  - Remove extraneous slash (cosmetic)
  - Create directories just before moving stuff in them
  - Truncate long lines
  - Group all golang stuff
  - Simplify BuildRequires/bundled Provides
  - Sort BuildRequires/bundled Provides
  - Fix bundled go packages Provides


author: Mark Goodwin <mgoodwin@redhat.com> 5.4.3-11
changelog:
  - tweak after latest feedback, bump to 5.4.3-11 (BZ 1670656)
  - build debuginfo package again
  - unbundle BuildRequires for golang-github-hashicorp-version-devel
  - remove some unneeded development files
  - remove macros from changelog and other rpmlint tweaks


author: Mark Goodwin <mgoodwin@redhat.com> 6.0.1-1
changelog:
  - update to v6.0.1 upstream sources, tweak distro config, re-do patch
  - simplify make_webpack.sh script (Elliott Sales de Andrade)
  - vendor/github.com/go-ldap is now gone, so don't unbundle it


author: Mark Goodwin <mgoodwin@redhat.com> 6.0.2-1
changelog:
  - bump to latest upstream stable release 6.0.2-1
  - unbundle almost all remaining vendor code, see linked blockers in BZ#1670656


author: Mark Goodwin <mgoodwin@redhat.com> 6.1.3-1
changelog:
  - update to latest upstream stable release 6.1.3, see CHANGELOG
  - unbundle all vendor sources, replace with BuildRequires, see
    the long list of blocker BZs linked to BZ#1670656
  - BuildRequires go-plugin >= v1.0.0 for grpc_broker (thanks eclipseo)
  - tweak make_webpack to no longer use grunt, switch to prod build
  - add ExclusiveArch lua script (thanks quantum.analyst)
  - move db directory and plugins to /var/lib/grafana
  - split out into 6 patches, ready for upstream PRs
  - add check to run go tests for gating checks


author: Mark Goodwin <mgoodwin@redhat.com> 6.1.4-1
changelog:
  - update to latest upstream stable release 6.1.4, see CHANGELOG
  - use gobuild and gochecks macros, eliminate arch symlinks
  - re-enable grafana-debugsource package
  - fix GRAFANA_GROUP typo
  - fix more modes for brp-mangle-shebangs
  - vendor source unbundling now done in prep after patches
  - remove all rhel and fedora conditional guff


author: Mark Goodwin <mgoodwin@redhat.com> 6.1.6-1
changelog:
  - update to latest upstream stable release 6.1.6, see CHANGELOG
  - includes jQuery 3.4.0 security update


author: Mark Goodwin <mgoodwin@redhat.com> 6.2.2-1
changelog:
  - split out some datasource plugins to sub-packages
  - update to latest upstream community sources, see CHANGELOG


author: Mark Goodwin <mgoodwin@redhat.com> 6.3.4-1
changelog:
  - include fix for CVE-2019-15043
  - add patch for uaparser on 32bit systems
  - update to latest upstream community sources, see CHANGELOG


author: Mark Goodwin <mgoodwin@redhat.com> 6.3.5-1
changelog:
  - drop uaparser patch now it's upstream
  - add xerrors patch, see https://github.com/golang/go/issues/32246
  - use vendor sources on rawhide until modules are fully supported
  - update to latest upstream community sources, see CHANGELOG


author: Mark Goodwin <mgoodwin@redhat.com> 6.3.6-1
changelog:
  - add weak depenency on grafana-pcp
  - add patch to mute shellcheck SC1090 for grafana-cli
  - update to 6.3.6 upstream community sources, see CHANGELOG


author: Mark Goodwin <mgoodwin@redhat.com> 6.6.2-1
changelog:
  - added patch0 to set the version string correctly
  - removed patch 004-xerrors.patch, it's now upstream
  - added several patches for golang vendored vrs build dep differences
  - added patch to move grafana-cli binary to libexec dir
  - update to 6.6.2 tagged upstream community sources, see CHANGELOG


author: Andreas Gerstmayr <agerstmayr@redhat.com> 6.7.3-1
changelog:
  - update to 6.7.3 tagged upstream community sources, see CHANGELOG
  - add scripts to list Go dependencies and bundled npmjs dependencies
  - set Grafana version in Grafana UI and grafana-cli --version
  - declare README.md as documentation of datasource plugins
  - create grafana.db on first installation (fixes RH BZ #1805472)
  - change permissions of /var/lib/grafana to 750 (CVE-2020-12458)
  - change permissions of /var/lib/grafana/grafana.db to 640 and
    user/group grafana:grafana (CVE-2020-12458)
  - change permissions of grafana.ini and ldap.toml to 640 (CVE-2020-12459)


author: Andreas Gerstmayr <agerstmayr@redhat.com> 6.7.4-1
changelog:
  - update to 6.7.4 tagged upstream community sources, see CHANGELOG
  - security fix for CVE-2020-13379


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.3.4-1
changelog:
  - update to 7.3.4 tagged upstream community sources, see CHANGELOG
  - bundle golang dependencies
  - optionally bundle node.js dependencies and build and test frontend as part of the specfile
  - merge all datasources into main grafana package
  - change default provisioning path to /etc/grafana/provisioning
  - resolve https://bugzilla.redhat.com/show_bug.cgi?id=1843170


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.3.6-1
changelog:
  - update to 7.3.6 tagged upstream community sources, see CHANGELOG
  - remove dependency on SAML (not supported in the open source version of Grafana)


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.3.6-2
changelog:
  - change working dir to $GRAFANA_HOME in grafana-cli wrapper (fixes Red Hat BZ #1916083)
  - add pcp-redis-datasource to allow_loading_unsigned_plugins config option


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.7-2
changelog:
  - remove unused cryptographic implementations
  - use cryptographic functions from OpenSSL if FIPS mode is enabled


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.8-1
changelog:
  - update to 7.5.8 tagged upstream community sources, see CHANGELOG
  - remove unused dependencies selfsigned, http-signature and gofpdf


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.11-2
changelog:
  - resolve CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache
  - resolve CVE-2021-43813 grafana: directory traversal vulnerability for *.md files


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-1
changelog:
  - update to 7.5.15 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-21673 grafana: Forward OAuth Identity Token can allow users to access some data sources
  - resolve CVE-2022-21702 grafana: XSS vulnerability in data source handling
  - resolve CVE-2022-21703 grafana: CSRF vulnerability can lead to privilege escalation
  - resolve CVE-2022-21713 grafana: IDOR vulnerability can lead to information disclosure
  - resolve CVE-2021-23648 sanitize-url: XSS
  - resolve CVE-2022-21698 prometheus/client_golang: Denial of service using InstrumentHandlerCounter
  - declare Node.js dependencies of subpackages
  - make vendor and webpack tarballs reproducible


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-3
changelog:
  - resolve CVE-2022-1962 golang: go/parser: stack exhaustion in all Parse* functions
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode
  - resolve CVE-2022-28131 golang: encoding/xml: stack exhaustion in Decoder.Skip
  - resolve CVE-2022-30633 golang: encoding/xml: stack exhaustion in Unmarshal


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-4
changelog:
  - resolve CVE-2022-39229 grafana: using email as a username can block other users from signing in
  - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY
  - resolve CVE-2022-41715 golang: regexp/syntax: limit memory used by parsing regexps
  - resolve CVE-2022-2880 golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters
  - run integration tests in check phase
  - update FIPS patch with latest changes in Go packaging


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-26
changelog:
  - Resolves RHEL-125664: CVE-2025-58183
  - Resolves RHEL-132759: Grafana-selinux prevents plugins from searching cgroups


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-28
changelog:
  - Resolves RHEL-145418: CVE-2025-61728
  - Resolves RHEL-146095: CVE-2025-61726
  - Resolves RHEL-149271: CVE-2025-68121


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-30
changelog:
  - Resolves RHEL-166519: CVE-2026-32282
  - Resolves RHEL-167380: CVE-2026-32280
  - Resolves RHEL-167542: CVE-2026-32283


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-32
changelog:
  - Resolves RHEL-191816: CVE-2026-44740
  - Resolves RHEL-188279: Remove Lua ExclusiveArch macro for Konflux build


author: Liwei Ge <geliwei@openanolis.com> - 9.2.10-32.0.1
changelog:
  - build: use cn proxy for go build (songmingliang@uniontech.com)
  - spec: support loongarch build (geliwei@openanolis.org)


author: Mark Goodwin <mgoodwin@redhat.com> 0.0.4-1
changelog:
  - add suggested pmproxy URL in config html
  - updated instructions and README.md now that grafana is in Fedora


author: Andreas Gerstmayr <agerstmayr@redhat.com> 0.0.7-1
changelog:
  - converted into a Grafana app plugin, renamed to grafana-pcp
  - redis: support for instance domains, labels, autocompletion, automatic rate conversation
  - live and bpftrace: initial commit of datasources


author: Andreas Gerstmayr <agerstmayr@redhat.com> 1.0.0-1
changelog:
  - bpftrace: support for Flame Graphs
  - bpftrace: context-sensitive auto completion for bpftrace probes, builtin variables and functions incl. help texts
  - bpftrace: parse output of bpftrace scripts (e.g. using `printf()`) as CSV and display it in the Grafana table panel
  - bpftrace: sample dashboards (BPFtrace System Analysis, BPFtrace Flame Graphs)
  - vector: table output: show instance name in left column
  - vector: table output: support non-matching instance names (cells of metrics which don't have the specific instance will be blank)
  - vector & bpftrace: if the metric/script gets changed in the query editor, immeditately stop polling the old metric/deregister the old script
  - vector & bpftrace: improve pmwebd compatibility
  - misc: help texts for all datasources (visible with the **[ ? ]** button in the query editor)
  - misc: renamed PCP Live to PCP Vector
  - misc: logos for all datasources
  - misc: improved error handling


author: Andreas Gerstmayr <agerstmayr@redhat.com> 1.0.2-1
changelog:
  - handle counter wraps (overflows)
  - convert time based counters to time utilization
  - flame graphs: aggregate stack counts by selected time range in the Grafana UI
  - flame graphs: add option to hide idle stacks
  - vector: fix container dropdown in query editor
  - vector: remove container setting from datasource settings page
  - redis: fix value transformations (e.g. rate conversation of counters)
  - request more datapoints from the datasource to fill the borders of the graph panel


author: Andreas Gerstmayr <agerstmayr@redhat.com> 1.0.3-2
changelog:
  - remove node_modules/node-notifier directory from webpack (due to licensing issues)
  - upgrade copy-webpack-plugin, terser-webpack-plugin and remove uglifyjs-webpack-plugin to mitigate XSS vulnerability in serialize-javascript dependency


author: Andreas Gerstmayr <agerstmayr@redhat.com> 1.0.5-1
changelog:
  - upgrade to upstream 1.0.5
  - flame graphs: clean flame graph stacks every 5s (reduces CPU load)
  - general: implement PCP version checks
  - redis: set default sample interval to 60s (fixes empty graph borders)


author: Andreas Gerstmayr <agerstmayr@redhat.com> 2.0.2-2
changelog:
  - vector: do not show all cgroups in the container overview dashboard in case no containers are present on the system


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.0.0-1
changelog:
  - update to 3.0.0 tagged upstream community sources, see CHANGELOG
  - bundle golang dependencies and (optionally) node.js dependencies


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0 tagged upstream community sources, see CHANGELOG
  - remove unused cryptographic implementations


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.2.0-2
changelog:
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode


author: Sam Feifer <sfeifer@redhat.com> - 5.1.1-14
changelog:
  - Resolves RHEL-166520: CVE-2026-32282
  - Resolves RHEL-167381: CVE-2026-32280
  - Resolves RHEL-167543: CVE-2026-32283


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.40.1-43
changelog:
  - Fixed races during pdf documentation build which should build docs correctly
    Related: CVE-2020-18032


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.14.0-1
changelog:
  - Release 0.14.0 (Peter Robinson)
  - Updated testing documentation (Jose Noguera)
  - README updated with TOC and improved explanations (Jose Noguera)
  - Add watchdog-triggered boot check #2 (Jose Noguera)
  - Update specfile and README to reflect changes in subpackage layout. (Jose Noguera)
  - Ensure all required health checks are run #52 (Jose Noguera)


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 2.5-1
changelog:
  - Update to 2.5.
  - Updated license tag (the license that applies to the binaries) to GPLv3+.
  - Bring spec file up to date by relying on recommended macros in build phase.
  - Arched requires for base package in gsl-devel.


author: Yanko Kaneti <yaneti@declera.com> - 1.0.0-2
changelog:
  - Initial spec for review - 0.98.0-0.1.a648648
  - Additional patch + references + using %autopatch - 0.98.0-0.2.a648648
  - Update to 1.0.0. drop upstreamed paches - 1.0.0-1
  - Own some more directories as per review (#1167482) - 1.0.0-2


author: Julien Rische <jrische@redhat.com> - 1.2.0-1
changelog:
  - New release 1.2.0
  - Fix CVE-2023-25563: multiple out-of-bounds read when decoding NTLM fields
  - Fix CVE-2023-25564: memory corruption when decoding UTF16 strings
  - Fix CVE-2023-25565: incorrect free when decoding target information
  - Fix CVE-2023-25566: memory leak when parsing usernames
  - Fix CVE-2023-25567: out-of-bounds read when decoding target information
  - Resolves: rhbz#2181313


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-3
changelog:
  - %build: --disable-fatal-warnings --disable-silent-rules
  - fix rpath harder
  - use %ldconfig_scriptlets, %make_build, %make_install
  - -devel: tighten deps with %{_isa}


author: Wim Taymans <wtaymans@redhat.com> - 1.14.1-2
changelog:
  - Update gstreamer1.prov file: Only scan in plugin directories
    and relax file name and type. (#1581325)


author: Wim Taymans <wtaymans@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1
  - Update to meson build
  - Disable docs because it needs Hotdoc, which is not in Fedora yet
  - remove BuildRequires: for gtk-doc and autoconf related things
  - Add BuildRequires: for libunwind-devel, elfutils-devel, bash-completion


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-2
changelog:
  - Patch CVE-2023-44429: AV1 codec parser heap-based buffer overflow
  - Patch CVE-2023-44446: MXF demuxer use-after-free
  - Resolves: RHEL-17030, RHEL-17039


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-4
changelog:
  - CVE-2023-40474: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40475: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40476: Integer overflow in H.265 video parser
  - ZDI-CAN-22300: buffer overflow vulnerability
  - Resolves: RHEL-19501, RHEL-19505, RHEL-19506, RHEL-20201


author: Brian Pepple <bpepple@fedoraproject.org> - 0.11.93-2
changelog:
  - Fix permission on tarball clean-up script.
  - Re-enable soundtouch-devel.
  - Add COPYING.LIB to package.
  - Use %global instead of %define.


author: Hans de Goede <hdegoede@}redhat.com> - 1.2.3-3
changelog:
  - Put the fluidsynth plugin in its own subpackage and make it require
    soundfont2-default (rhbz#1078925)


author: Kalev Lember <klember@redhat.com> - 1.6.0-1
changelog:
  - Update to 1.6.0
  - Remove lib64 rpaths from a few more libraries
  - Use license macro for COPYING and COPYING.LIB


author: Wim Taymans <wtaymans@redhat.com> - 1.7.1-1
changelog:
  - Update to 1.7.1
  - rename fragmented -> hls
  - remove liveadder
  - add gstplayer
  - add teletextdec and videoframe_audiolevel


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.7.1-4
changelog:
  - Append --disable-fatal-warnings to %configure to prevent
    building from aborting for negligible warnings (Fix F24FTBFS)
  - Append --disable-silent-rules to %configure to make
    building verbose.
  - Don't remove buildroot before installing.


author: Wim Taymans <wtaymans@redhat.com> - 1.7.91-1
changelog:
  - Update to 1.7.91
  - The opus parse was not moved so we still need opus-devel and we still
    ship a plugin.
  - the plugin was renamed to opusparse


author: Wim Taymans <wtaymans@redhat.com> - 1.9.1-2
changelog:
  - Merge patches from Kevin Kofler (#1267665)
  - Split gtksink into a -gtk subpackage (#1295444)
  - Split wildmidi plugin into a -wildmidi subpackage (#1267665)
  - BR mesa-libGLES-devel to enable OpenGL ES 2 support in GstGL (#1308290)


author: Wim Taymans <wtaymans@redhat.com> - 1.11.90-1
changelog:
  - Update to 1.11.90
  - Update plugin names
  - Remove old rawparse plugin
  - Add new allocator lib and legacyrawparse


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-1
changelog:
  - 1.13.1
  - use %ldconfig_scriptlets %make_build %make_install
  - fix rpath in gst-p-bad-cleanup.sh
  - tighten subpkg deps with %{?_isa}
  - -gtk subpkg now empty.  FIXME


author: Stephen Gallagher <sgallagh@redhat.com> - 1.20.4-2
changelog:
  - Drop vdpau configure option
  - The libgstva plugin is now excluded from file listings when disabled
  - Resolves: rhbz#2141093


author: Sérgio Basto <sergio@serjux.com> - 1.22.2-4
changelog:
  - Remove obsolete of plugins-bad-freeworld to workaround a dnf bug
    https://bugzilla.redhat.com/show_bug.cgi?id=1867376#c9


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1.22.12-4.1
changelog:
  - Fix for CVE-2026-52720: validate framebuffer update rectangles
    in librfb plugin
    Resolves: RHEL-184459


author: Tomas Pelka <tpelka@redhat.com> - 1.22.12-7.1
changelog:
  - Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082
    in dvbsuboverlay and jpegparser
    Resolves: RHEL-156242, RHEL-156255


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1.22.12-7.2
changelog:
  - Fix buffer overflow in DTLS connection peer certificate
    subject DN handling (CVE-2026-59692)
    Resolves: RHEL-193572


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1.22.12-7.3
changelog:
  - Fix incorrect bytes-per-pixel handling in rfbsrc plugin
    (CVE-2026-59691)
    Resolves: RHEL-193557


author: Liwei Ge <geliwei@openanolis.org> - 1.22.12-7.0.1.3
changelog:
  - spec: fix build issue on anolis8
  - spec: update bcond and patch format (wb-zh951434@alibaba-inc.com)


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-5
changelog:
  - Handle both compressed and uncompressed man pages
  - Fix build with small patch
  - Resolves: rhbz#2005247


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-3
changelog:
  - Fixes for CVE-2024-47538, CVE-2024-47607, CVE-2024-47615
    Resolves: RHEL-70979, RHEL-71015, RHEL-70991


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-2
changelog:
  - tigten subpkg deps
  - fix rpaths
  - update %files
  - use %ldconfig_scriptlets %make_build %make_install
  - %build: --disable-fatal-warnings --disable-silent-rules
  - Conflicts: gstreamer1-plugins-bad-free < 1.13


author: Tomas Popela <tpopela@redhat.com> - 1.14.0-2
changelog:
  - Enable Wayland support (previously disabled due to missing wayland-devel
    as a BR - before it was probably brought in by something else).


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Bump version
  - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542,
    CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835
    Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037
    Resolves: RHEL-71019, RHEL-70995, RHEL-71163


author: wxiat <nijie@wxiat.com> - 1.22.12-4.0.1
changelog:
  - cherry-pick `add sw arch #fad368622f5593cd4a508ce291e7598e9139eaf3`.
  - Update bcond format (wb-zh951434@alibaba-inc.com)


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-4
changelog:
  - CVE-2023-37327: integer overflow leading to heap overwrite in
    FLAC image tag handling
  - Resolves: RHEL-19469


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-5
changelog:
  - CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606,
    CVE-2024-47613
    Resolves: RHEL-70949, RHEL-70962, RHEL-70936, RHEL-71022
    Resolves: RHEL-70998


author: Brian Pepple <bpepple@fedoraproject.org> - 0.11.93-1
changelog:
  - Update to 0.11.93.
  - Add batch to fix build with recent kernels, the v4l2_buffer input field was removed.
  - Use %global instead of %define.


author: Wim Taymans <wtaymans@redhat.com> - 1.13.1-2
changelog:
  - The gtk plugin was moved from -bad, make a new subpackage for it.
  - the mp3 plugins were moved from -ugly, add BuildRequires.
  - build requires GL now for gtkglsink


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-3
changelog:
  - -gtk: Obsoletes/Provides: gstreamer1-plugins-bad-free-gtk
  - Obsoletes/Provides: gstreamer1-plugin-mpg123


author: Neal Gompa <ngompa13@gmail.com> - 1.8.0-3
changelog:
  - Add patch to fix gmock segfaults (rhbz#1513522)
  - Add patch to properly version the libraries
  - Move the documentation to the right place
  - Drop unneeded ldconfig scriptlets:
      https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets
  - Some clean up


author: Kalev Lember <klember@redhat.com> - 1.33-1
changelog:
  - Update to 1.33
  - Switch to meson build system
  - Explicitly byte-compile python files using py_byte_compile macro


author: Daniel P. Berrangé <berrange@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0 release
  - Drop outdated conditionals
  - Drop outdated ldconfig script
  - Use versioned obsoletes tags
  - Resolves: rhbz#1949474


author: Kalev Lember <klember@redhat.com> - 2.24.5-1
changelog:
  - Update to 2.24.5
  - Use license macro for COPYING
  - Don't set group tags
  - Tighten -devel requires with the _isa macro


author: Rex Dieter <rdieter@fedoraproject.org> - 5:2.0.14-7
changelog:
  - avoid linking all guile-devel consumers to libgc
  - BR: gcc
  - use %{make_build},%{make_install}
  - %check: make non-fatal


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.12.8-1
changelog:
  - 0.12.8 release
  - http://ftp.gnome.org/pub/GNOME/sources/gupnp-av/0.12/gupnp-av-0.12.8.news
  - Use %license


author: Kalev Lember <klember@redhat.com> - 0.12.9-1
changelog:
  - Update to 0.12.9
  - Don't set group tags
  - Tighten subpackage deps with the _isa macro
  - Use make_install macro


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.2.4-6
changelog:
  - Python 2 binary package renamed to python2-gupnp-igd
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Kalev Lember <klember@redhat.com> - 0.2.5-1
changelog:
  - Update to 0.2.5
  - Update inter-package dependencies after python2-gupnp-igd rename
  - Tighten deps with the _isa macro
  - Update source URLs
  - Use license macro for COPYING


author: Bastien Nocera <bnocera@redhat.com> - 0.2.5-3
changelog:
  + gupnp-igd-0.2.5-3
  - Remove python2-gupnp-igd sub-package, nothing uses it in Fedora
    and gobject-introspection supports both Python2 and Python3


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.3-22
changelog:
  - Elimitate race condition when injecting JAR manifest
  - Resolves: rhbz#1495234
  - Remove bogus hamcrest-text JAR


author: Jeremy Hinegardner <jeremy@hinegardner.org> - 1.3.12.1-1
changelog:
  - switch to 1.3.12.1 branch
  - add patch from upstream with O'Reilly licensing updates.
  - convert ISO-8859-1 doc files to UTF-8


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.2-1
changelog:
  - update to 1.3.14.2
  - update make flags that changed with this upstream release
  - added man page installation


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.6-1
changelog:
  - update to 1.3.14.6
  - remove gcc 4.3 patch, it has been applied upstream
  - remove MIT license as that code has been removed from upstream


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.15.6-1
changelog:
  - update to 1.3.15.6
  - use new build targets from upstream
  - add in recommended build options for x86 from upstream


author: Robin Lee <cheeselee@fedoraproject.org> - 1.4.22-1
changelog:
  - Update to 1.4.22 (CVE-2012-2942, #824544)
  - Use linux2628 build target
  - No separate x86_64 build target for halog
  - halog build honors rpmbuild optflags
  - Specfile cleanup


author: Ryan O'Hara <rohara@redhat.com> - 1.4.23-1
changelog:
  - Update to 1.4.23 (CVE-2013-1912, #947697)
  - Drop supplementary groups after setuid/setgid (#894626)


author: Florian Weimer <fweimer@redhat.com> - 1.8.3-5
changelog:
  - Build halog and iprange with linker flags from redhat-rpm-config
  - Tell build to include <crypt.h>


author: Ryan O'Hara <rohara@redhat.com> - 1.8.15-1
changelog:
  - Update to 1.8.15
  - Fix denial of service attack via infinite recursion (CVE-2018-20103, #1658881)
  - Fix out-of-bound reads in dns_validate_dns_response (CVE-2018-20102, #1658882)


author: Ryan O'Hara <rohara@redhat.com> - 1.8.17-1
changelog:
  - Update to 1.8.17
  - Fix handling of priority flag in HEADERS frame in HTTP/2 decoder (CVE-2018-20615)


author: Ryan O'Hara <rohara@redhat.com> - 2.4.7-1
changelog:
  - Update to 2.4.7 (#1966688)
  - Fix domain parts in :scheme and :path fields (CVE-2021-39240, #1998196)
  - Fix spaces in the :method field (CVE-2021-39241, #1998198)
  - Fix mismatch between :authority and Host fields (CVE-2021-39242, #1998200)
  - Fix request smuggling attack or response splitting (CVE-2021-40346, #2000621)


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.4.22-3.1
changelog:
  - Always clear retry flags in read/write functions to avoid CPU
    usage spikes
  - Fix "unable to load certificate chain from file" issue
    Resolves: RHEL-72955, RHEL-72952


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.4.22-4
changelog:
  - Always clear retry flags in read/write functions to avoid CPU
    usage spikes
  - Fix "unable to load certificate chain from file" issue
    Resolves: RHEL-71925, RHEL-68780


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Danilo de Paula <ddepaula@redhat.com> - 1.3.15-7
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1695587
    (Ensure modular RPM upgrade path)


author: Davide Caratti <dcaratti@redhat.com> - 2.9-16
changelog:
  - disable 'badfuncs' rpminspect test
  - change default value of CONFIG_TLS_DEFAULT_CIPHERS to allow using OpenSSL
    to compute 3DES


author: Tim Waugh <twaugh@redhat.com> 0.9.3-1
changelog:
  - Use /usr/share/applications for putting desktop files in (bug #159932).
  - Requires PyQt (bug #159932).


author: Tim Waugh <twaugh@redhat.com> 0.9.3-4
changelog:
  - Conflicts: hpijs from before this package provided it.
  - Conflicts: system-config-printer < 0.6.132 (i.e. before HPLIP support
    was added)


author: Tim Waugh <twaugh@redhat.com> 0.9.10-4
changelog:
  - Use case-insensitive matching.  0.9.8 gave all-uppercase in some
    situations.
  - Last known working hpijs comes from 0.9.8, so use that.


author: Tim Waugh <twaugh@redhat.com> 0.9.10-5
changelog:
  - Patchlevel 1.
  - Fixed another case-sensitive match.
  - Require hpijs sub-package (bug #189140).
  - Don't package unneeded files (bug #189162).
  - Put fax PPD in the right place (bug #186213).


author: Tim Waugh <twaugh@redhat.com> 1.6.7-2
changelog:
  - 1.6.7.
  - Conflict with selinux-policy < 2.3.4 to make sure new port numbers are
    known about (bug #201357).


author: Tim Waugh <twaugh@redhat.com> 1.6.10-2
changelog:
  - 1.6.10.  No longer need compile patch.
  - Fixed default config file (bug #211072).
  - Moved libhpip to hpijs sub-package (bug #212531).


author: Tim Waugh <twaugh@redhat.com> 1.6.10-3
changelog:
  - IPv6 support (bug #198377).  Local-only sockets are IPv4, and ought
    to be changed to unix domain sockets in future.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Change 'Hidden' to 'NoDisplay' in the desktop file, and use the System
    category instead of Utility (bug #170762).
  - Link libsane-hpaio against libsane (bug #234813).


author: Tim Waugh <twaugh@redhat.com> 1.7.2-6
changelog:
  - Fixed dangling symlinks (bug #236156).
  - Move all fax bits to the gui package (bug #236161).
  - Don't ship fax PPD and backend twice (bug #236092).
  - Run update-desktop-database in the gui package's %post scriptlet
    (bug #236163).
  - Moved desktop-file-utils requirement to gui package (bug #236163).
  - Bumped selinux-policy conflict version (bug #236092).


author: Tim Waugh <twaugh@redhat.com> 1.7.2-7
changelog:
  - Some parts can run without GUI support after all (bug #236161).
  - Added /sbin/service and /sbin/chkconfig requirements for the scriptlets
    (bug #236445).
  - Fixed %post scriptlet's condrestart logic (bug #236445).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Moved hp-setup to the ui package (bug #243273).
  - Prevent SELinux audit message from the CUPS backends (bug #241776)


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't ship hp-check (bug #243273).
  - Moved hp-setup back to the base package, and put code in
    utils.checkPyQtImport() to check for the gui sub-package as well as
    PyQt (bug #243273).


author: Tim Waugh <twaugh@redhat.com> 1.7.4a-1
changelog:
  - Don't put the version in the desktop file; let desktop-file-install do it.
  - 1.7.4a.  No longer need marker-supply or faxing-with-low-supplies
    patches.  Cheetah and cherrypy directories no longer shipped in source
    tarball.


author: Tim Waugh <twaugh@redhat.com> 2.7.6-2
changelog:
  - Main package requires python-reportlab for hp-sendfax (bug #189030).
  - Explicitly enable scanning.
  - Main package requires python-imaging for hp-scan (bug #247210).


author: Tim Waugh <twaugh@redhat.com> 2.7.6-9
changelog:
  - Remove hplip service on upgrade.
  - Updated selinux-policy conflict for bug #249014.
  - Fixed the udev rules file (bug #248740, bug #249025).


author: Tim Waugh <twaugh@redhat.com> 2.7.7-4
changelog:
  - Reverted udev rules change.
  - Ship a HAL FDI file to get correct access control on the USB device
    nodes (bug #251470).
  - Make libsane-hpaio requires the main hplip package, needed for
    libhpip.so (bug #280281).


author: Tim Waugh <twaugh@redhat.com> 2.7.9-1
changelog:
  - 2.7.9.
  - Adjusted udev rules to be less permissive.  We use ConsoleKit to add
    ACLs to the device nodes, so world-writable device nodes can be avoided.


author: Tim Waugh <twaugh@redhat.com> 2.7.9-2
changelog:
  - Use raw instead of 1284.4 communication for LJ4000 series (bug #249191).
  - Build requires openssl-devel.


author: Tim Waugh <twaugh@redhat.com> 2.7.12-2
changelog:
  - Ship installer directory (bug #428246).
  - Avoid multilib conflict (bug #341531).
  - The hpijs sub-package requires net-snmp (bug #376641).


author: Tim Waugh <twaugh@redhat.com> 2.8.2-1
changelog:
  - 2.8.2.  No longer need alloc, unload-traceback or media-empty patches.
  - Ship cupsddk driver.  The hpijs sub-package now requires cupsddk-drivers.


author: Tim Waugh <twaugh@redhat.com> 2.8.2-2
changelog:
  - Update hplip.fdi for Fedora 9: info.bus -> info.subsystem.
  - Images in docdir should not be executable (bug #440552).


author: Tim Waugh <twaugh@redhat.com> 2.8.5-1
changelog:
  - 2.8.5.
  - Configure with --enable-dbus.  Build requires dbus-devel.
  - Fix chmod 644 line.
  - Ship hp-systray in the gui sub-package, but don't ship the desktop
    launcher yet as the systray applet is quite broken.
  - Don't run autoconf.


author: Tim Waugh <twaugh@redhat.com> 2.8.5-2
changelog:
  - Make --qt4 the default for the systray applet, so that it appears
    in the right place.  Requires PyQt4.


author: Tim Waugh <twaugh@redhat.com> 2.8.12-3
changelog:
  - Make --qt4 the default for the systray applet, so that it appears
    in the right place, again (bug #479751).
  - Removed hal preprobe rules as they were causing breakage
    (bug #479648).


author: Tim Waugh <twaugh@redhat.com> 2.8.12-4
changelog:
  - Prevent crash when DEVICE_URI/PRINTER environment variables are not
    set (bug #479808 comment 6).


author: Tim Waugh <twaugh@redhat.com> 3.9.6b-4
changelog:
  - Fixed ui-optional patch for qt4 code path (bug #500473).
  - Fixed HWResolution for 'Normal' output from the hpcups driver
    (laundpad bug #405400).


author: Tim Waugh <twaugh@redhat.com> 3.9.8-5
changelog:
  - Use upstream udev rules instead of hal policy (bug #518172).
  - Removed unnecessary dependency on PyQt as we only use PyQt4 now.


author: Tim Waugh <twaugh@redhat.com> 3.9.8-8
changelog:
  - Fixed typos in page sizes (bug #515469).
  - Build no longer requires libudev-devel.
  - Fixed state reasons handling problems (bug #501338).


author: Tim Waugh <twaugh@redhat.com> 3.9.8-9
changelog:
  - New common sub-package for udev rules and config file (bug #516459).
  - Don't install base/*.py with executable bit set.


author: Tim Waugh <twaugh@redhat.com> 3.9.8-13
changelog:
  - Use dll.d file instead of post scriptlet for hpaio (bug #519988).
  - Fixed RequiresPageRegion patch (bug #518756).


author: Tim Waugh <twaugh@redhat.com> 3.9.8-19
changelog:
  - Retry when connecting to device fails (bug #528483).
  - Avoid busy loop in hpcups when backend has exited (bug #525944).


author: Tim Waugh <twaugh@redhat.com> 3.9.10-1
changelog:
  - 3.9.10.  No longer need clear-previous-state-reasons,
    hpcups-reorder, non-scripts, parenths, plugin-error,
    requirespageregion or state-reasons-newline patches.


author: Tim Waugh <twaugh@redhat.com> 3.9.10-3
changelog:
  - Removed duplex constraints on page sizes with imageable areas larger
    than possible when duplexing (bug #541572).
  - Fixed duplex reverse sides being horizontally flipped (bug #541604).


author: Tim Waugh <twaugh@redhat.com> - 3.9.12-2
changelog:
  - Retry when connecting to device fails (bug #532112).
  - Don't ship PolicyKit mechanism (bug #551773).


author: Tim Waugh <twaugh@redhat.com> - 3.10.2-1
changelog:
  - 3.10.2.  No longer need preferences-crash patch.
  - The pstotiff filter is rubbish so replace it (launchpad #528394).
  - Stopped hpcups pointlessly trying to read spool files
    directly (bug #552572).


author: Tim Waugh <twaugh@redhat.com> - 3.10.2-2
changelog:
  - Removed SYSFS use in udev rules and actually made them work
    (bug #560754).
  - Use a temporary file in pstotiff to allow gs random access.


author: Jiri Popelka <jpopelka@redhat.com> - 3.10.2-9.1
changelog:
  - Added/Corrected several IEEE 1284 Device IDs
    (bugs #577262, #577282, #577282, #577288, #577292, #577302,
    ,#577306, #577308, #577898, #579920, #580231)


author: Jiri Popelka <jpopelka@redhat.com> - 3.10.2-10
changelog:
  - Fixed black/blank lines in ljcolor hpcups output (bug #579461).
    Work-around is to send entire blank raster lines instead of skipping them.


author: Tim Waugh <twaugh@redhat.com> - 3.10.2-11
changelog:
  - Added/corrected more IEEE 1284 Device IDs:
    - HP Color LaserJet CM1312nfi (bug #581005).
    - HP Color LaserJet 3800 (bug #581935).
    - HP Color LaserJet 2840 (bug #582215).
    - HP PSC 2400 (bug #583103).


author: Jiri Popelka <jpopelka@redhat.com> - 3.10.2-15
changelog:
  - Added/corrected more IEEE 1284 Device IDs:
    - HP LaserJet 4250 (bug #585499).
    - HP Color LaserJet 2605dn (bug #583953).
    - HP LaserJet P1007 (bug #585272).


author: Jiri Popelka <jpopelka@redhat.com> - 3.10.5-1
changelog:
  - 3.10.5.   No longer need tray-icon-crash.patch
  - Increase the timeout for system tray availability checking (bug #569969).


author: Jiri Popelka <jpopelka@redhat.com> - 3.10.6-1
changelog:
  - 3.10.6.
  - Changed shebang /usr/bin/env python -> /usr/bin/python (bug #618351).
  - Corrected IEEE 1284 Device IDs:
    - HP Color LaserJet CP1518ni (bug #613689).
    - HP Color LaserJet 2600n (bug #613712).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fixes from package review:
    - Main package and hpijs sub-package require cups for directories.
    - The common sub-package requires udev for directories.
    - The libs sub-package requires python for directories.
    - Avoided macro in comment.
    - The lib sub-package now runs ldconfig for post/postun.
    - Use python_sitearch macro.


author: Tim Waugh <twaugh@redhat.com> - 3.10.6-7
changelog:
  - More fixes from package review:
    - Avoided another macro in comment.
    - Use python_sitearch macro throughout.


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-3
changelog:
  - Fixed traceback on error condition in device.py (bug #628125).
  - Fixed bogus low ink warnings from hpijs driver (bug #643643).


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-6
changelog:
  - Call cupsSetUser in cupsext's addPrinter method before connecting so
    that we can get an authentication callback (bug #538352).
  - Prevent hp-fab traceback when run as root.


author: Jiri Popelka <jpopelka@redhat.com> 3.10.9-7
changelog:
  - The pycups requirement is now python-cups.
  - Corrected IEEE 1284 Device IDs:
    HP LaserJet 4050/4100/2100 Series/2420/4200/4300/4350/5100/8000
                M3027 MFP/M3035 MFP/P3005/P3010/P4014/P4515 (bug #659039).
    HP Color LaserJet 2500/2550 series/3700/4550/4600/4650/4700/5550
                      CP1515n/CP3525/CP4520/CM2320nf MFP (bug #659040).
    HP Color LaserJet CM4730 MFP (bug #658831).


author: Jiri Popelka <jpopelka@redhat.com> 3.10.9-8
changelog:
  - Corrected IEEE 1284 Device IDs:
    HP Color LaserJet CP2025dn (bug #651509).
    HP Color LaserJet CM3530 MFP (bug #659381).


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-9
changelog:
  - Enable D-Bus threading (and require pygobject2) (bug #600932).
  - Fixed incorrect signal name in setup dialog (bug #653626).
  - Another missing newline in filter output (Ubuntu #418053).
  - Prevent hpaio segfaulting on invalid URIs (bug #649092).
  - Catch D-Bus exceptions in fax dialog (bug #645316).


author: Tim Waugh <twaugh@redhat.com> - 3.11.1-2
changelog:
  - Fixed typo causing ";marker-supply-low-warning" state reason to be
    reported by hpijs (bug #675151).


author: Jiri Popelka <jpopelka@redhat.com> 3.11.1-5
changelog:
  - Avoid KeyError in ui4/wifisetupdialog.py (bug #680939).
  - Corrected IEEE 1284 Device IDs:
    LaserJet 1300 (bug #670548)
    LaserJet 3390 (bug #678565)
    LaserJet P1505 (bug #680951)


author: Tim Waugh <twaugh@redhat.com> 3.11.5-4
changelog:
  - Added Device ID for HP LaserJet Professional P1606dn (bug #708472).
  - Update IEEE 1284 Device IDs in hpijs.drv from hpcups.drv.


author: Jiri Popelka <jpopelka@redhat.com> 3.11.10-1
changelog:
  - 3.11.10
  - Use _cups_serverbin macro from cups-devel for where to put driver executables.
  - No need to define BuildRoot and clean it in clean and install section anymore.
  - Corrected IEEE 1284 Device IDs:
    Officejet 6300 series (bug #689378)
    LaserJet Professional M1212nf MFP (bug #742490)


author: Tim Waugh <twaugh@redhat.com> 3.11.10-2
changelog:
  - Corrected IEEE 1284 Device IDs:
    - LaserJet M1536dnf MFP (bug #743915)
    - PSC 1600 series (bug #743821)


author: Tim Waugh <twaugh@redhat.com> 3.11.12-2
changelog:
  - When copying Device IDs from hpcups to hpijs, use ModelName as the
    key instead of ShortNickName (bug #651509 comment #7).


author: Tim Waugh <twaugh@redhat.com> 3.12.2-3
changelog:
  - Added another IEEE 1284 Device ID for Color LaserJet CP2025dn to
    cope with its DNS-SD response, which has no usb_* keys (bug #651509).


author: Tim Waugh <twaugh@redhat.com> 3.12.4-2
changelog:
  - The hpijs sub-package no longer requires cupsddk-drivers (which no
    longer exists as a real package), but cups >= 1.4.


author: Jiri Popelka <jpopelka@redhat.com> 3.12.9-5
changelog:
  - remove useless Conflicts:, Obsoletes: and Provides: fields
  - remove %pre section (stopping&disabling of hplip service on upgrade)
  - make hplip_cron work with non-english locale


author: Jiri Popelka <jpopelka@redhat.com> - 3.12.11-7
changelog:
  - No need to run update-desktop-database (and require desktop-file-utils)
    because there are no MimeKey lines in the desktop files.


author: Tim Waugh <twaugh@redhat.com> - 3.13.4-2
changelog:
  - Fixed changelog dates.
  - Device ID for HP LaserJet P1005 (bug #950776).
  - mark cron job file as config(noreplace)


author: Jiri Popelka <jpopelka@redhat.com> - 3.13.6-1
changelog:
  - 3.13.6
  - hplip-ipp-accessors.patch merged upstream
  - /etc/cron.daily/hplip_cron -> /usr/share/hplip/hplip_clean.sh


author: Tim Waugh <twaugh@redhat.com> - 3.13.8-2
changelog:
  - Moved hpps filter to hpijs sub-package (bug #996852).
  - Fixed typo in systemtray.py (bug #991638).


author: Tim Waugh <twaugh@redhat.com> - 3.13.9-2
changelog:
  - Applied patch to avoid unix-process authorization subject when using
    polkit as it is racy (bug #1009541, CVE-2013-4325).


author: Jaromír Končický <jkoncick@redhat.com> - 3.13.10-1
changelog:
  - 3.13.10: 8 patches applied upstream, big changes in tmp and log dirs, removed hp-mkuri
  - Fixed Incorrect IEEE 1284 MFG value for LaserJet Professional P1102 (bug #1018826).


author: Tim Waugh <twaugh@redhat.com> - 3.14.6-5
changelog:
  - Main package requires gnupg (bug #1118724).
  - Fixed version comparisons for x.y.z-style versions such as
    reportlab (bug #1121433).


author: Tim Waugh <twaugh@redhat.com> - 3.14.10-2
changelog:
  - Fixed incorrect name in function call in makeURI when a parallel
    port device is used (bug #1159161).


author: Tim Waugh <twaugh@redhat.com> - 3.14.10-4
changelog:
  - IEEE 1284 Device ID for HP LaserJet Professional M1132 MFP
    (bug #1158743 comment #5).
  - IEEE 1284 Device ID for HP LaserJet Color M451dn (bug #1159380).


author: Tim Waugh <twaugh@redhat.com> - 3.15.2-3
changelog:
  - Move PPDs requiring hpps to the main package along with the filter
    itself (bug #1194186).
  - Don't try to write bytecode cache for hpfax backend (bug #1192761).


author: Jiri Popelka <jpopelka@redhat.com> - 3.15.7-2
changelog:
  - merge hpijs into main package (#1033952#14)
  - ship hp-config_usb_printer in main package along with
    udev rule and unit file (#1033952#11)


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.16.7-2
changelog:
  - hplip license problem - removing proprietary ErnieFilters.{cpp,h} + ernieplatform.h, disabling PCL3GUI2 driver (because of using proprietary ErnieFilters)


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.17.4-3
changelog:
  - added appdata.xml, several tools moved into gui subpackage because they don't have CLI variant and use only GUI, hp-pqdiag was removed because it is deprecated and not functional


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.17.6-1
changelog:
  - rebase to 3.17.6
  - adding hplip-rebase.sh script for testing if plugin is available - removing its testing from spec


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.18.4-10
changelog:
  - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
    via OS command injection in Is_Process_Running()


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.18.4-11
changelog:
  - CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation
    via integer overflow in hpcups


author: Mat Booth <mat.booth@redhat.com> - 4.5.6-2
changelog:
  - Add a patch to allow building with mockito 2
  - Don't package tests jars, the tests jars have the same OSGi metadata as the
    main jars, which can cause tycho to resolve the wrong one when building
    eclipse plugins


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 4.5.10-4
changelog:
  - Fix incorrect handling of malformed authority component in request URIs
  - Resolves: CVE-2020-13956


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-62
changelog:
  - Resolves: #2221083 - Apache Bug 57087: mod_proxy_fcgi doesn't send cgi 
    CONTENT_LENGTH variable when the client request used Transfer-Encoding:chunked


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.1
changelog:
  - Resolves: RHEL-45812 - httpd:2.4/httpd: Substitution encoding issue
    in mod_rewrite (CVE-2024-38474)
  - Resolves: RHEL-45785 - httpd:2.4/httpd: Encoding problem in
    mod_proxy (CVE-2024-38473)
  - Resolves: RHEL-45777 - httpd:2.4/httpd: Improper escaping of output
    in mod_rewrite (CVE-2024-38475)
  - Resolves: RHEL-45758 - httpd:2.4/httpd: null pointer dereference
    in mod_proxy (CVE-2024-38477)
  - Resolves: RHEL-45743 - httpd:2.4/httpd: Potential SSRF
    in mod_rewrite (CVE-2024-39573)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.2
changelog:
  - Resolves: RHEL-46040 - httpd:2.4/httpd: Security issues via backend
    applications whose response headers are malicious or exploitable (CVE-2024-38476)
  - Resolves: RHEL-53022 - Regression introduced by CVE-2024-38474 fix


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.3
changelog:
  - Resolves: RHEL-56068 - Apache HTTPD no longer parse PHP files with
    unicode characters in the name


author: zhangbinchen <zhangbinchen@openanolis.org> - 2.4.37-65.0.1.3
changelog:
  - Rebrand for Anolis OS
  - Requires system-logos-httpd
  - Support loongarch64 platform(Liwei Ge)
    cherry-pick `add sw patch #400077d851a81ce23aa39db271e26c3df254ae53`. (nijie@wxiat.com)
    cherry-pick `change sw patch #bdacf2efe00d8445328f798df8c5520728801e8c`. (nijie@wxiat.com)


author: Joe Orton <jorton@redhat.com> - 2.2.15-3
changelog:
  - default config tweaks:
   * harden httpd.conf w.r.t. .htaccess restriction (#591293)
   * load mod_substitute, mod_version by default
   * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf
   * add commented list of shipped-but-unloaded modules
   * bump up worker defaults a little
   * drop KeepAliveTimeout to 5 secs per upstream
  - fix LSB compliance in init script (#522074)
  - bundle NOTICE in -tools
  - use init script in logrotate postrotate to pick up PIDFILE
  - drop some old Obsoletes/Conflicts


author: Joe Orton <jorton@redhat.com> - 2.2.17-7
changelog:
  - generate dummy mod_ssl cert with CA:FALSE constraint (#667841)
  - add man page stubs for httpd.event, httpd.worker
  - drop distcache support
  - add STOP_TIMEOUT support to init script


author: Joe Orton <jorton@redhat.com> - 2.2.21-6
changelog:
  - complete conversion to systemd, drop init script (#770311)
  - fix comments in /etc/sysconfig/httpd (#771024)
  - enable PrivateTmp in service file (#781440)
  - set LANG=C in /etc/sysconfig/httpd


author: Joe Orton <jorton@redhat.com> - 2.4.1-1
changelog:
  - update to 2.4.1
  - adopt upstream default httpd.conf (almost verbatim)
  - split all LoadModules to conf.modules.d/*.conf
  - include conf.d/*.conf at end of httpd.conf
  - trim %changelog


author: Joe Orton <jorton@redhat.com> - 2.4.1-2
changelog:
  - clean docroot better
  - ship proxy, ssl directories within /var/cache/httpd
  - default config:
   * unrestricted access to (only) /var/www
   * remove (commented) Mutex, MaxRanges, ScriptSock
   * split autoindex config to conf.d/autoindex.conf
  - ship additional example configs in docdir


author: Joe Orton <jorton@redhat.com> - 2.4.1-3
changelog:
  - add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc)
  - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage


author: Joe Orton <jorton@redhat.com> - 2.4.2-4
changelog:
  - pull from upstream:
    * use TLS close_notify alert for dummy_connection (r1326980+)
    * cleanup symbol exports (r1327036+)


author: Joe Orton <jorton@redhat.com> - 2.4.2-15
changelog:
  - move tmpfiles.d fragment into /usr/lib per new guidelines
  - package /run/httpd not /var/run/httpd
  - set runtimedir to /run/httpd likewise


author: Joe Orton <jorton@redhat.com> - 2.4.2-18
changelog:
  - avoid use of "core" GIF for a "core" directory (#168776)
  - drop use of "syslog.target" in systemd unit file


author: Joe Orton <jorton@redhat.com> - 2.4.3-7
changelog:
  - use systemd scriptlets if available (#850149)
  - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists


author: Joe Orton <jorton@redhat.com> - 2.4.3-13
changelog:
  - filter mod_*.so auto-provides (thanks to rcollet)
  - pull in syslog logging fix from upstream (r1344712)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-5
changelog:
  - execute systemctl reload as result of apachectl graceful
  - mod_ssl: ignore SNI hints unless required by config
  - mod_cache: forward-port CacheMaxExpire "hard" option
  - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy
    is not configured.


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-6
changelog:
  - htpasswd/htdbm: fix hash generation bug (#956344)
  - do not dump vhosts twice in httpd -S output (#928761)
  - mod_cache: fix potential crash caused by uninitialized variable (#954109)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-12
changelog:
  - mod_unique_id: replace use of hostname + pid with PRNG output (#976666)
  - apxs: mention -p option in manpage


author: Joe Orton <jorton@redhat.com> - 2.4.6-4
changelog:
  - load mod_macro by default (#998452)
  - add README to conf.modules.d
  - mod_proxy_http: add possible fix for threading issues (r1534321)
  - core: add fix for truncated output with CGI scripts (r1530793)


author: Joe Orton <jorton@redhat.com> - 2.4.10-2
changelog:
  - enable mod_request by default for mod_auth_form
  - move disabled-by-default modules from 00-base.conf to 00-optional.conf


author: Joe Orton <jorton@redhat.com> - 2.4.10-6
changelog:
  - mod_ssl: treat "SSLCipherSuite PROFILE=..." as special (#1109119)
  - switch default ssl.conf to use PROFILE=SYSTEM (#1109119)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.10-7
changelog:
  - mod_systemd: updated to the latest version
  - use -lsystemd instead of -lsystemd-daemon (#1125084)
  - fix possible crash in SIGINT handling (#958934)


author: Joe Orton <jorton@redhat.com> - 2.4.10-8
changelog:
  - pull in httpd-filesystem as Requires(pre) (#1128328)
  - fix cipher selection in default ssl.conf, depend on new OpenSSL (#1134348)
  - require hostname for mod_ssl post script (#1135118)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.10-15
changelog:
  - core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704)
  - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)
  - mod_proxy_fcgi: fix a potential crash with long headers (CVE-2014-3583)
  - mod_lua: fix handling of the Require line when a LuaAuthzProvider is used
    in multiple Require directives with different arguments (CVE-2014-8109)


author: Joe Orton <jorton@redhat.com> - 2.4.17-1
changelog:
  - update to 2.4.17 (#1271224)
  - build, load mod_http2
  - don't build mod_asis, mod_file_cache
  - load mod_cache_socache, mod_proxy_wstunnel by default
  - check every built mod_* is configured
  - synch ssl.conf with upstream; disable SSLv3 by default


author: Joe Orton <jorton@redhat.com> - 2.4.18-3
changelog:
  - remove httpd pre script (duplicate of httpd-filesystem's)
  - in httpd-filesystem pre script, create group/user iff non-existent


author: Joe Orton <jorton@redhat.com> - 2.4.23-1
changelog:
  - update to 2.4.23 (#1325883, #1353203)
  - load mod_proxy_hcheck
  - recommend use of "systemctl edit" in httpd.service


author: Joe Orton <jorton@redhat.com> - 2.4.23-2
changelog:
  - restore build of mod_proxy_fdpass (#1325883)
  - improve check tests to catch configured-but-not-built modules


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.23-7
changelog:
  - Resolves: #1401530 - CVE-2016-8740 httpd: Incomplete handling of
    LimitRequestFields directive in mod_http2


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.25-7
changelog:
  - Resolves: #1397243 - Backport Apache Bug 53098 - mod_proxy_ajp:
    patch to set worker secret passed to tomcat


author: Joe Orton <jorton@redhat.com> - 2.4.27-9
changelog:
  - use sscg defaults; append CA cert to generated cert
  - document httpd-init.service in httpd-init.service(8)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.28-2
changelog:
  - Resolves: #1512563 - httpd: update welcome page branding
  - Resolves: #1511123 - RFE: httpd use event MPM by default
  - Resolves: #1493510 - RFE: httpd, add IP_FREEBIND support for Listen


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.35-4
changelog:
  - Resolves: #1635681 - sync with Fedora 28/29 httpd
  - comment-out SSLProtocol, SSLProxyProtocol from ssl.conf in default
    configuration; now follow OpenSSL system default (#1468322)
  - dropped NPN support
  - mod_md: change hard-coded default MdStoreDir to state/md (#1563846)
  - don't block on service try-restart in posttrans scriptlet
  - build and load mod_brotli
  - mod_systemd: show bound ports in status and log to journal
    at startup
  - updated httpd.service.xml man page
  - tweak wording in privkey passphrase prompt
  - drop sslmultiproxy patch
  - apachectl: don't read /etc/sysconfig/httpd
  - drop irrelevant Obsoletes for devel subpackage
  - move instantiated httpd@.service to main httpd package


author: Joe Orton <jorton@redhat.com> - 2.4.35-7
changelog:
  - mod_ssl: drop SSLRandomSeed from default config (#1638730)
  - mod_ssl: follow OpenSSL protocol defaults if SSLProtocol
       is not configured (Rob Crittenden, #1638738)


author: Joe Orton <jorton@redhat.com> - 2.4.37-7
changelog:
  - add DefaultStateDir/ap_state_dir_relative() (#1653009)
  - mod_dav_fs: use state dir for default DAVLockDB
  - mod_md: use state dir for default MDStoreDir


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-11
changelog:
  - Resolves: #1695432 - CVE-2019-0211 httpd: privilege escalation
    from modules scripts
  - Resolves: #1696091 - CVE-2019-0215 httpd:2.4/httpd: mod_ssl: access control 
    bypass when using per-location client certification authentication


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-13
changelog:
  - Resolves: #1696142 - CVE-2019-0217 httpd:2.4/httpd: mod_auth_digest: access
    control bypass due to race condition
  - Resolves: #1696097 - CVE-2019-0220 httpd:2.4/httpd: URL normalization
    inconsistency
  - Resolves: #1669221 - `ExtendedStatus Off` directive when using mod_systemd
    causes systemctl to hang
  - Resolves: #1673022 - httpd can not be started with mod_md enabled


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-16
changelog:
  - Resolves: #1744999 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745086 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
    headers leads to denial of service
  - Resolves: #1745154 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request for
    large response leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-18
changelog:
  - Resolves: #1744121 - Unexpected OCSP in proxy SSL connection
  - Resolves: #1725031 - htpasswd: support SHA-x passwords for FIPS compatibility
  - Resolves: #1633224 - mod_cgid logging issues


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-21
changelog:
  - Resolves: #1775158 - POST request with TLS 1.3 PHA client auth fails:
    Re-negotiation handshake failed: Client certificate missing


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-27
changelog:
  - Resolves: #1823259 - CVE-2020-1927 httpd:2.4/httpd: mod_rewrite configurations
    vulnerable to open redirect
  - Resolves: #1747284 - CVE-2019-10098 httpd:2.4/httpd: mod_rewrite potential
    open redirect
  - Resolves: #1747281 - CVE-2019-10092 httpd:2.4/httpd: limited cross-site 
    scripting in mod_proxy error page
  - Resolves: #1747291 - CVE-2019-10097 httpd:2.4/httpd: null-pointer dereference
    in mod_remoteip
  - Resolves: #1771847 - BalancerMember ping parameter for mod_proxy_http
    doesn't work
  - Resolves: #1794728 - Backport of SessionExpiryUpdateInterval directive


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-29
changelog:
  - Resolves: #1823263 (CVE-2020-1934) - CVE-2020-1934 httpd: mod_proxy_ftp use of
    uninitialized value


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-31
changelog:
  - Resolves: #1677590 - CVE-2018-17199 httpd:2.4/httpd: mod_session_cookie does
    not respect expiry time
  - Resolves: #1869075 - CVE-2020-11984 httpd:2.4/httpd: mod_proxy_uswgi buffer
    overflow
  - Resolves: #1872828 - httpd: typo in htpasswd, contained in httpd-tools package
  - Resolves: #1869576 - httpd : mod_proxy should allow to specify
    Proxy-Authorization in ProxyRemote directive
  - Resolves: #1875844 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
  - Resolves: #1891829 - mod_proxy_hcheck Doesn't perform checks when in
    a balancer


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-33
changelog:
  - Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
    concurrency issues
  - Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
    a client cert to backend server
  - Resolves: #1680118 - unorderly connection close when client attempts
    renegotiation


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-36
changelog:
  - Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
    mod_proxy_wstunnel
  - Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-37
changelog:
  - Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
    to be able to handle certs without matching private key


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-40
changelog:
  - Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
  - Resolves: #1937334 - SSLProtocol with based virtual hosts


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-41
changelog:
  - Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
  - Resolves: #1905613 - mod_ssl does not like valid certificate chain
  - Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
    usertrack
  - Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
  - Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
    dereference in parser
  - Resolves: #1934741 - Apache trademark update - new logo


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-42
changelog:
  - Resolves: #2007236 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
    a crafted request uri-path
  - Resolves: #1969229 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
    mod_session


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-43
changelog:
  - Related: #2007236 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
    a crafted request uri-path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-44
changelog:
  - Resolves: #1968278 - CVE-2020-35452 httpd:2.4/httpd: Single zero byte stack
    overflow in mod_auth_digest
  - Resolves: #2001046 - Apache httpd OOME with mod_dav in RHEL 8
  - Resolves: #2005128 (CVE-2021-34798) - CVE-2021-34798 httpd: NULL pointer
    dereference via malformed requests
  - Resolves: #1984828 - mod_proxy_hcheck piles up health checks leading to high
    memory consumption
  - Resolves: #2005119 - CVE-2021-39275 httpd: out-of-bounds write in
    ap_escape_quotes() via malicious input


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-45
changelog:
  - Resolves: #2007199 - CVE-2021-36160 httpd:2.4/httpd: mod_proxy_uwsgi:
    out-of-bounds read via a crafted request uri-path
  - Resolves: #1972491 - CVE-2021-33193 httpd:2.4/mod_http2: Request splitting via
    HTTP/2 method injection and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-46
changelog:
  - Resolves: #2035063 - CVE-2021-44790 httpd:2.4/httpd: mod_lua: possible buffer
    overflow when parsing multipart content


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-47
changelog:
  - Resolves: #2035030 - CVE-2021-44224 httpd:2.4/httpd: possible NULL dereference
    or SSRF in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-48
changelog:
  - Resolves: #2065249 - CVE-2022-22720 httpd:2.4/httpd: HTTP request smuggling
    vulnerability in Apache HTTP Server 2.4.52 and earlier


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-50
changelog:
  - Resolves: #2065237 - CVE-2022-22719 httpd:2.4/httpd: mod_lua: Use of
    uninitialized value of in r:parsebody
  - Resolves: #2065267 - CVE-2022-22721 httpd:2.4/httpd: core: Possible buffer
    overflow with very large or unlimited LimitXMLRequestBody
  - Resolves: #2065324 - CVE-2022-23943 httpd:2.4/httpd: mod_sed: Read/write
    beyond bounds


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-51
changelog:
  - Resolves: #2097015 - CVE-2022-28614 httpd:2.4/httpd: out-of-bounds read via
    ap_rwrite()
  - Resolves: #2097031 - CVE-2022-28615 httpd:2.4/httpd: out-of-bounds read in
    ap_strcmp_match()
  - Resolves: #2097458 - CVE-2022-30522 httpd:2.4/httpd: mod_sed: DoS
    vulnerability
  - Resolves: #2097480 - CVE-2022-30556 httpd:2.4/httpd: mod_lua: Information
    disclosure with websockets
  - Resolves: #2098247 - CVE-2022-31813 httpd:2.4/httpd: mod_proxy:
    X-Forwarded-For dropped by hop-by-hop mechanism
  - Resolves: #2097451 - CVE-2022-29404 httpd:2.4/httpd: mod_lua: DoS in
    r:parsebody
  - Resolves: #2096997 - CVE-2022-26377 httpd:2.4/httpd: mod_proxy_ajp: Possible
    request smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-56
changelog:
  - Resolves: #2162499 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write
    of zero byte
  - Resolves: #2162485 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting
  - Resolves: #2162509 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request
    smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-56.4
changelog:
  - Resolves: #2177748 - CVE-2023-25690 httpd:2.4/httpd: HTTP request splitting
    with mod_rewrite and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.5
changelog:
  - Resolves: RHEL-99944 - CVE-2025-49812 httpd: HTTP Session Hijack via a TLS upgrade
  - Resolves: RHEL-99969 - CVE-2024-47252 httpd: insufficient escaping of
    user-supplied data in mod_ssl
  - Resolves: RHEL-99961 - CVE-2025-23048 httpd: access control bypass by trusted
    clients is possible using TLS 1.3 session resumption


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.6
changelog:
  - Resolves: RHEL-127073 - mod_ssl: allow more fine grained SSL SNI vhost check
    to avoid unnecessary 421 errors after CVE-2025-23048 fix
  - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.7
changelog:
  - Resolves: RHEL-135054 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
    via AllowOverride FileInfo (CVE-2025-66200)
  - Resolves: RHEL-135039 - httpd: Apache HTTP Server: CGI environment variable
    override (CVE-2025-65082)
  - Resolves: RHEL-134471 - httpd: Apache HTTP Server: Server Side Includes adds
    query string to #exec cmd=... (CVE-2025-58098)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.8
changelog:
  - Resolves: RHEL-173558 - httpd:2.4/httpd: Apache HTTP Server mod_proxy_ajp:
    Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780)
  - Resolves: RHEL-175074 - httpd:2.4/httpd: NULL pointer dereference can
    cause a child process crash (CVE-2026-33007)
  - Resolves: RHEL-175088 - httpd:2.4/httpd: off-by-one out-of-bounds reads
    in AJP getter functions (CVE-2026-33857)
  - Resolves: RHEL-175620 - httpd:2.4/httpd: NULL pointer dereference via
    specially crafted request (CVE-2026-29169)
  - Resolves: RHEL-175055 - httpd: heap-based buffer over-read and memory
    disclosure in ajp_parse_data() (CVE-2026-34059)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.9
changelog:
  - Resolves: RHEL-186198 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
    via untrusted content in mod_xml2enc (CVE-2026-42536)
  - Resolves: RHEL-186166 - httpd: Apache HTTP Server: Buffer Over-read via
    outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
  - Resolves: RHEL-175620 - httpd:2.4/httpd: NULL pointer dereference via
    specially crafted request (CVE-2026-29169)
  - Resolves: RHEL-186176 - httpd: Apache HTTP Server: Buffer overflow in
    mod_proxy_html allows security bypass (CVE-2026-34355)
  - Resolves: RHEL-192751 - mod_proxy_html regression in CVE-2026-34355 fix
  - Resolves: RHEL-193114 - httpd: Apache HTTP Server: Denial of Service
    in mod_proxy_ftp via attacker-controlled FTP server (CVE-2026-44186)
  - Resolves: RHEL-186219 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
    via malicious backend servers (CVE-2026-34356)
  - Resolves: RHEL-191243 - httpd: Apache HTTP Server: Out-of-bounds Read in
    mod_headers and mod_mime (CVE-2026-43951)
  - Resolves: RHEL-184307 - httpd: Apache HTTP Server: Denial of Service via
    crafted regular expressions (CVE-2026-44631)
  - Resolves: RHEL-182577 - httpd: incomplete fix
    for CVE-2023-38709 (CVE-2024-42516)


author: zhangbinchen <zhangbinchen@openanolis.org> - 1:2.4.37-65.0.1.9
changelog:
  - Rebrand for Anolis OS (wb-zh951434@alibaba-inc.com)
  - Requires system-logos-httpd (wb-zh951434@alibaba-inc.com)
  - Support loongarch64 platform(Liwei Ge)
  - Requires system-logos-httpd (wb-zh951434@alibaba-inc.com)
  - - cherry-pick `add sw patch #400077d851a81ce23aa39db271e26c3df254ae53`. - cherry-pick `change sw patch #bdacf2efe00d8445328f798df8c5520728801e8c`. (nijie@wxiat.com)


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20080825-12
changelog:
  - Add Supplements: tag for langpacks naming guidelines
  - Clean the specfile to follow current packaging guidelines


author: Michael Stahl <mstahl@redhat.com> - 0.20151222-1
changelog:
  - upgrade to latest version
  - upstream removed "OASIS distribution license agreement 0.1", only GPLv2/v3 now
  - remove needless use of percent-defattr


author: Michael Stahl <mstahl@redhat.com> - 0.20160407-1
changelog:
  - Resolves: rhbz#1344662 upgrade to latest release
  - switch source URL to https
  - revert the GNU grep 2.23 LANG=C bug workaround
  - added explicit build dependency on perl, now required on rawhide


author: Parag Nemade <pnemade AT redhat DOT com> - 5.1-3
changelog:
  - Resolves:rhbz#1967646 - Correct the License: tag to LGPLv3+ based on LICENSE.txt file
  - Added gating tests


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.36.20190303git
changelog:
  - Synchronize RHEL 8 changes [rhbz#1957651]
  - Resolves: rhbz#1957651
    ([Hyper-V][RHEL-9] Update build to rhel format and syncup RHEL 8 content for hyperv-daemons.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.38.20190303git
changelog:
  - hpvd-Enable-build-on-aarch64.patch [bz#2020148]
  - Resolves: bz#2020148
    ([Hyper-V][RHEL9.0][ARM] No hyperv-daemons package built for aarch64 platform)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.39.20190303git
changelog:
  - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [bz#2026371]
  - hpvd-Use-filename-for-connection-profile.patch [bz#2026371]
  - Resolves: bz#2026371
    ([RHEL9][Hyper-V]The /usr/libexec/hypervkvpd/hv_set_ifconfig need update for RHEL9 since the ifdown/ifup was not supported on RHEL9)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.40.20190303git
changelog:
  - hpvd-hypervkvpd.service-ordering-fixes.patch [bz#2103188]
  - Resolves: bz#2103188
    ([Hyper-V][RHEL-9] hypervkvpd.service service ordering)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.41.20190303git
changelog:
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [bz#2122115]
  - hpvd-tools-hv-Remove-an-extraneous-the.patch [bz#2139457]
  - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [bz#2139457]
  - Resolves: bz#2122115
    ([Hyper-V][RHEL-9] Cannot set gateway properly when set static IPADDR0,NETMASK0,GATEWAY in ifcfg-eth0)
  - Resolves: bz#2139457
    ([Hyper-V][RHEL9.2] Update Hyper-V-Daemons)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.42.20190303git
changelog:
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [bz#2218931]
  - Resolves: bz#2218931
    ([Hyper-V] [RHEL-9] /usr/sbin/vmbus_testing python script prints: "SyntaxWarning: "is" with a literal.")


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.43.20190303git
changelog:
  - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-9902]
  - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-9902]
  - Resolves: RHEL-9902
    ([Hyper-V][RHEL-9] hyperv-daemons write incompatible IPv6 prefix (IPV6NETMASK) in ifcfg)


author: Caolán McNamara <caolanm@redhat.com> - 0.20140727-1
changelog:
  - rhbz#2085482 update to latest available hyphenation rules
  - rhbz#2084587 add Supplements: langpacks-pt_BR


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.24-5
changelog:
  - Fix covscan reviews. Related: rhbz#1963071

  - Implement ibus_im_context_set_surrounding_with_selection()


author: Mike FABIAN <mfabian@redhat.com> - 1.9.18-1
changelog:
  - update to 1.9.18
  - validate ibus-table.appdata.xml in %check
  - Update translations from zanata (pt_BR updated, es new)
  - Don't query user database if user define phrase and
    dynamic adjust are disabled (thanks to heiher)
  - Enable hash map based cache for user database enabled
    (thanks to heiher)
  - Import hash map based cache for table database (thanks to
    heiher)
  - Install appstream metadata to /usr/share/metainfo/ (thanks
    to jbicha)
  - Fix some appdata validation issues (thanks to jbicha)
  - Fix bug in Unihan_Variants.txt, 著 U+8457 is both
    simplified *and* traditional Chinese (thanks to heiher)


author: Mike FABIAN <mfabian@redhat.com> - 2.0.0-1
changelog:
  - Update to 2.0.0
  - Update translations because of the merge of the engines (de, pl, uk updated)
  - Update emoji annotations from CLDR
  - Do not hardcode icon names in desktop files
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/17)
  - Change the default for “Unicode symbols and emoji predictions” to “False”
  - Merge all typing-booster engines into one
  - Change the UI of the setup tool to make it possible to select
    multiple input methods and dictionaries
  - Move the buttons to learn from a file and to delete learned data to the options tab
  - Use the same “About” dialog in the setup tool as in emoji-picker


author: Mike FABIAN <mfabian@redhat.com> - 2.0.2-1
changelog:
  - Update to 2.0.2
  - Better Tab handling, use Tab to switch to the next candidate, not to commit
  - Update to 2.0.1
  - Update translations from zanata (ja updated)
  - Update emoji annotations from CLDR
  - Fix some bugs in the usage of “prefix” for prefixes other than “/usr” (For FreeBSD)
  - Make itb_util.get_ime_help() work on FreeBSD
  - Update UnicodeData.txt to Unicode 11.0.0
  - Remove useless 't-nil vi-base': 'vi-base.mim', from M17N_INPUT_METHODS
  - Remove extra space in entry for sa-IAST input method to make it work
  - Show in the setup tool in the input listbox whether minput_open_im() succeeded.
  - Use the rocket icon emoji_u1f680.svg from the “Noto Color Emoji” font


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - emoji-picker: Show a concise description of a selected emoji in the header bar
  - Update the setup UI when settings are changed outside of the setup UI
  - Migrate IBusConfig to GSettings (The old settings are
    unfortunately lost, so one has to open the setup tool
    and recreate ones favourite settings).
  - Read emoji data files always in UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-3
changelog:
  - Make “make check“ test cases work again when building the rpm
    (To avoid that rpmdiff in the errata tool reports a problem)
  - Related: rhbz#1619153


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-5
changelog:
  - Prevent also BackSpace from reopening a preedit when the
    option “Arrow keys can reopen a preedit” is off
  - Resolves: rhbz#1925030


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-7
changelog:
  - Avoid verbatim bidi formatting characters in source comments
    to make rpminspect complain less.
  - Resolves: RHEL-2237


author: Jiri Vanek <jvanek@redhat.com> 1.7.1-16
changelog:
  - added patch1, patch4 and patch11 to fix CVE-2019-10182
  - added patch2 to fix CVE-2019-10181
  - added patch3 and patch33 to fix CVE-2019-10185
  - Resolves: rhbz#1724958 
  - Resolves: rhbz#1725928 
  - Resolves: rhbz#1724989


author: - Jiri Vanek <jvanek@redhat.com> -1.8.4-2
changelog:
  - added native launchers, via separate subpackage, but efectively changed main package to arched one
  - removed policyeditor man page, it was link to itself
  - Resolves: rhbz#1900043


author: - Jiri Vanek <jvanek@redhat.com> -1.8.4-4
changelog:
  - added patch2, fed2f5b-22402bb.patch containing important fixes from future 1.8.5
  - Resolves: rhbz#1900043


author: Richard W.M. Jones <rjones@redhat.com> - 0.31.3-1
changelog:
  - New upstream version 0.31.3.
  - This includes all the previous upstream patches, and reverts the
    check which broke processing of PE binaries.


author: Martin Gieseking <martin.gieseking@uos.de> - 0.32.3-1
changelog:
  - Updated to version 0.32.3.
  - Dropped patch to fix https://savannah.nongnu.org/bugs/?52319 (applied upstream)


author: Martin Kolman <mkolman@redhat.com> - 0.3.80-1
changelog:
  - Do not call a task which has been moved into install keyboard task (rvykydal)
  - Adapt to changes in localization module (rvykydal)
  - Fix Zanata client detection in Makefile (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.3.81-1
changelog:
  - Use macro for Python 3 requirement in spec file (mkolman)
  - Remove outdated dependency on python3-libreport (vslavik)
  - Fix a typo in Zanata CLI invocation (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.3.81.5-1
changelog:
  - Disable multi TTY handler when running in SSH session (mkolman)
  - Add CLI option to disable multi TTY handler (mkolman)
  - Add PEP8 Speaks configuration (mkolman)
  - Add missing branch config to manifest file (jkonecny)
  - Add translation badge to the README file (jkonecny)
  - Remove unused PREFIX variable from Makefile (jkonecny)
  - Use new po-push instead of Zanata (jkonecny)
  - Add po-push using localization repository (jkonecny)
  - Use translation repository to pull the translations (jkonecny)


author: Colin Walters <walters@redhat.com> - 0.51.0-4
changelog:
  - Add patch to hopefully close race condition in systemd builds
  - Related to https://bugzilla.redhat.com/show_bug.cgi?id=1249051
  - And the test suite is failing but the logs are hidden under
    test-suite.log, so copy some code I had in dbus.spec to cat them.


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-5
changelog:
  - kdb: PAC generator: do not fail if canonical principal is missing
    Resolves: RHEL-23630
  - ipa-kdb: Fix memory leak during PAC verification
    Resolves: RHEL-22644
  - Fix session cookie access
    Resolves: RHEL-23622
  - Do not ignore staged users in sidgen plugin
    Resovlves: RHEL-23626
  - ipa-kdb: Disable Bronze-Bit check if PAC not available
    Resolves: RHEL-22313
  - krb5kdc: Fix start when pkinit and otp auth type are enabled
    Resolves: RHEL-4874
  - hbactest was not collecting or returning messages
    Resolves: RHEL-12780


author: Julien Rische <jrische@redhat.com> - 4.9.13-6
changelog:
  - ipa-kdb: Rework ipadb_reinit_mspac()
    Resolves: RHEL-25742
  - ipatests: wait for replica update in test_dns_locations
    Resolves: RHEL-22373
  - ipatests: fix tasks.wait_for_replication() method
    Resolves: RHEL-25708


author: Julien Rische <jrische@redhat.com> - 4.9.13-7
changelog:
  - ipa-kdb: Fix double free in ipadb_reinit_mspac()
    Resolves: RHEL-25742
  - kra: set RSA-OAEP as default wrapping algo when FIPS is enabled
    Resolves: RHEL-12153
  - Vault: improve vault server archival/retrieval calls error handling
    Resolves: RHEL-12153
  - Vault: add support for RSA-OAEP wrapping algo
    Resolves: RHEL-12153


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-8
changelog:
  - rpcserver: validate Kerberos principal name before running kinit
    Resolves: RHEL-26153
  - Vault: add additional fallback to RSA-OAEP wrapping algo
    Resolves: RHEL-28259


author: Rafael Jeffman <rjeffman@redhat.com> - 9.4.13-9
changelog:
  - dcerpc: invalidate forest trust intfo cache when filtering out realm domains
    Resolves: RHEL-28559
  - Backport latests test fixes in python3-tests
    ipatests: add xfail for autoprivate group test with override
    ipatests: remove xfail thanks to sssd 2.9.4
    ipatests: adapt for new automembership fixup behavior
    ipatests: Fixes for test_ipahealthcheck_ipansschainvalidation testcases
    test_xmlrpc: adopt to automember plugin message changes in 389-ds
    Resolves: RHEL-29908


author: Julien Rische <jrische@redhat.com> - 4.9.13-10
changelog:
  - kdb: apply combinatorial logic for ticket flags (CVE-2024-3183)
    Resolves: RHEL-29927
  - kdb: fix vulnerability in GCD rules handling (CVE-2024-2698)
    Resolves: RHEL-29692


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-12
changelog:
  - Allow the admin user to be disabled
    Resolves: RHEL-34756
  - ipa-otptoken-import: open the key file in binary mode
    Resolves: RHEL-39616
  - ipa-crlgen-manage: manage the cert status task execution time
    Resolves: RHEL-30280
  - idrange-add: add a warning because 389ds restart is required
    Resolves: RHEL-28996
  - PKINIT certificate: fix renewal on hidden replica
    Resolves: RHEL-4913, RHEL-45908


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-13
changelog:
  - Add ipa-idrange-fix
    Resolves: RHEL-56920
  - Unconditionally add MS-PAC to global config on update
    Resolves: RHEL-49437
  - ipatests: Update ipa-adtrust-install test
    Resolves: RHEL-40894
  - Require python-qrcode version 5.3 or later
    Related: RHEL-15090


author: lihaipeng <lihaipeng@openanolis.org> - 4.9.13-14.0.1
changelog:
  - Set IPAPLATFORM=rhel when build on anolis
  - Remove loongarch64 arch
  - Fix CVE-2020-17049 (zhaozhiyuan05@ieisystem.com)
  - Fix CVE-2023-5455 (zhaozhiyuan05@ieisystem.com)


author: Rob Crittenden <rcritten@redhat.com> - 0.1.0-2
changelog:
  - Add mod_auth_kerb and cyrus-sasl-gssapi to Requires
  - Remove references to admin server in ipa-server-setupssl
  - Generate a client certificate for the XML-RPC server to connect to LDAP with
  - Create a keytab for Apache
  - Create an ldif with a test user
  - Provide a certmap.conf for doing SSL client authentication


author: Karl MacMillan <kmacmill@redhat.com> - 0.4.0-2
changelog:
  * Fri Sep 7 2007 Karl MacMillan <kmacmill@redhat.com> - 0.3.0-1
  - Added support for libipa-dna-plugin


author: Rob Crittenden <rcritten@redhat.com> - 0.4.1-2
changelog:
  - Broke invididual Requires and BuildRequires onto separate lines and
    reordered them
  - Added python-tgexpandingformwidget as a dependency
  - Require at least fedora-ds-base 1.1


author: Rob Crittenden <rcritten@redhat.com> 0.99-3
changelog:
  - Included LICENSE and README in all packages for documentation
  - Move user-modifiable content to /etc/ipa and linked back to
    /usr/share/ipa/html
  - Changed some references to /usr to the {_usr} macro and /etc
    to {_sysconfdir}
  - Added popt-devel to BuildRequires for Fedora 8 and higher and
    popt for Fedora 7
  - Package the egg-info for Fedora 9 and higher for ipa-python


author: Rob Crittenden <rcritten@redhat.com> 0.99-7
changelog:
  - Ensure that /etc/ipa exists before moving user-modifiable html files there
  - Put html files into /etc/ipa/html instead of /etc/ipa


author: Rob Crittenden <rcritten@redhat.com> 0.99-9
changelog:
  - Pull upstream changelog 641
  - Require minimum version of krb5-server on F-7 and F-8
  - Package some new files


author: Rob Crittenden <rcritten@redhat.com> 0.99-10
changelog:
  - Pull upstream changelog 678
  - Add new subpackage, ipa-server-selinux
  - Add Requires: authconfig to ipa-python (bz #433747)
  - Package i18n files


author: Rob Crittenden <rcritten@redhat.com> 0.99-11
changelog:
  - Pull upstream changelog 698
  - Fix ownership of /var/log/ipa_error.log during install (435119)
  - Add pwpolicy command and man page


author: Rob Crittenden <rcritten@redhat.com> - 1.0.0-2
changelog:
  - Fix Requires for krb5-server that was missing for Fedora versions > 9
  - Remove quotes around test for fedora version to package egg-info


author: Rob Crittenden <rcritten@redhat.com> - 1.0.0-4
changelog:
  - Add missing entry for /var/cache/ipa/kpasswd (444624)
  - Added patch to fix permissions problems with the Apache NSS database.
  - Added patch to fix problem with DNS querying where the query could be
    returned as the answer.
  - Fix spec error where patch1 was in the wrong section


author: Rob Crittenden <rcritten@redhat.com> - 1.0.0-5
changelog:
  - Set fedora-ds-base minimum version to 1.1.0.1-4 and mod_nss minimum
    version to 1.0.7-4 so we pick up the NSS fixes.
  - Add selinux-policy-base(post) to Requires (446496)


author: Rob Crittenden <rcritten@redhat.com> - 1.1.0-1
changelog:
  - Update to upstream version 1.1.0
  - Patch for indexing memberof attribute
  - Patch for indexing uidnumber and gidnumber
  - Patch to change DNA default values for replicas
  - Patch to fix uninitialized variable in ipa-getkeytab


author: Simo Sorce <ssorce@redhat.com> - 1.1.0-3
changelog:
  - Fix for CVE-2008-3274
  - Fix segfault in ipa-kpasswd in case getifaddrs returns a NULL interface
  - Add fix for bug #453185
  - Rebuild against openldap libraries, mozldap ones do not work properly
  - TurboGears is currently broken in rawhide. Added patch to not build
    the UI locales and removed them from the ipa-server files section.


author: Rob Crittenden <rcritten@redhat.com> - 1.2.0-1
changelog:
  - Update to upstream version 1.2.0
  - Set fedora-ds-base minimum version to 1.1.3 for winsync header
  - Set the minimum version for SELinux policy
  - Remove references to Fedora 7


author: Simo Sorce <ssorce@redhat.com> - 1.2.0-3
changelog:
  - Respin after the tarball has been re-released upstream
    New hash is 506c9c92dcaf9f227cba5030e999f177


author: Jason Gerard DeRose <jderose@redhat.com> - 1.99-8
changelog:
  - Removed python-cherrypy from BuildRequires and Requires
  - Added Requires python-assets, python-wehjit


author: Rob Crittenden <rcritten@redhat.com> - 1.99-23
changelog:
  - Change Requires from fedora-ds-base to 389-ds-base
  - Set minimum level of 389-ds-base to 1.2.6 for the replication
    version plugin.


author: Rob Crittenden <rcritten@redhat.com> - 1.99-27
changelog:
  - Set minimum version of certmonger to 0.26 (to pck up #621670)
  - Set minimum version of pki-silent to 1.3.4 (adds -key_algorithm)
  - Set minimum version of pki-ca to 1.3.6
  - Set minimum version of sssd to 1.2.1


author: Rob Crittenden <rcritten@redhat.com> - 1.99-28
changelog:
  - Drop conflicts on mod_nss
  - Require nss-pam-ldapd on F-14 or higher instead of nss_ldap (#606847)
  - Drop a slew of conditionals on older Fedora releases (< 12)
  - Add a few conditionals against RHEL 6
  - Add Requires of nss-tools on ipa-client


author: Rob Crittenden <rcritten@redhat.com> - 1.99-29
changelog:
  - Drop requires on python-configobj (not used any more)
  - Drop ipa-ldap-updater message, upgrades are done differently now


author: Simo Sorce <ssorce@redhat.com> - 1.99-39
changelog:
  - Remove dependency on nss_ldap/nss-pam-ldapd
  - The official client is sssd and that's what we use by default.


author: Rob Crittenden <rcritten@redhat.com> - 1.99-41
changelog:
  - Re-arrange doc and defattr to clean up rpmlint warnings
  - Remove conditionals on older releases
  - Move some man pages into admintools subpackage
  - Remove some explicit Requires in client that aren't needed
  - Consistent use of buildroot vs RPM_BUILD_ROOT


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.2.beta.git80e87e7
changelog:
  - Remove unnecessary moving of v1 CA serial number file in post script
  - Add Obsoletes for server-selinxu subpackage
  - Using git snapshot 442d6ad30ce1156914e6245aa7502499e50ec0da


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.1.beta2
changelog:
  - Set min version of 389-ds-base to 1.2.8
  - Set min version of mod_nss 1.0.8-10
  - Set min version of selinux-policy to 3.9.7-27
  - Add dogtag themes to Requires
  - Update to upstream freeipa-2.0.0.pre2


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.1.rc1
changelog:
  - Set minimum version of sssd to 1.5.1
  - Update to upstream freeipa-2.0.0.rc1
  - Move server-only binaries from admintools subpackage to server


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.4.rc2
changelog:
  - Update to upstream freeipa-2.0.0.rc2
  - Set minimum version of python-nss to 0.11 to make sure IPv6 support is in
  - Set minimum version of sssd to 1.5.1
  - Patch to include SuiteSpotGroup when setting up 389-ds instances
  - Move a lot of BuildRequires so this will build with ONLY_CLIENT enabled


author: Rob Crittenden <rcritten@redhat.com> - 2.0.1-1
changelog:
  - Update minimum selinux-policy to 3.9.16-18
  - Update minimum pki-ca and pki-selinux to 9.0.7
  - Update minimum 389-ds-base to 1.2.8.0-1
  - Update to upstream 2.0.1


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.3-6
changelog:
  - Introduce upgrade script to recover existing configuration after systemd migration
    as user has no means to recover FreeIPA from systemd migration
  - Upgrade script:
    - recovers symlinks in Dogtag instance install
    - recovers systemd configuration for FreeIPA's directory server instances
    - recovers freeipa.service
    - migrates directory server and KDC configs to use proper keytabs for systemd services


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.4-2
changelog:
  - Allow longer dirsrv startup with systemd:
    - IPAdmin class will wait until dirsrv instance is available up to 10 seconds
    - Helps with restarts during upgrade for ipa-ldap-updater
  - Fix pylint warnings from F16 and Rawhide


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.4-3
changelog:
  - Allow Web-based migration to work with tightened SE Linux policy (#769440)
  - Rebuild slapi plugins against re-enterant version of libldap


author: Martin Kosek <mkosek@redhat.com> - 2.1.4-4
changelog:
  - Fix ipa-replica-install crashes
  - Fix ipa-server-install and ipa-dns-install logging
  - Set minimum version of pki-ca to 9.0.17 to fix sslget problem
    caused by FEDORA-2011-17400 update (#771357)


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.4-5
changelog:
  - Force to use 389-ds 1.2.10-0.8.a7 or above
  - Improve upgrade script to handle systemd 389-ds change
  - Fix freeipa to work with python-ldap 2.4.6


author: Rob Crittenden <rcritten@redhat.com> - 2.1.90-0.2
changelog:
  - Update to upstream 2.2.0 beta 1 (2.1.90.rc1)
  - Set minimum n-v-r for pki-ca and pki-silent to 9.0.18.
  - Add Conflicts on mod_ssl
  - Update minimum n-v-r of 389-ds-base to 1.2.10.4
  - Update minimum n-v-r of sssd to 1.8.0
  - Update minimum n-v-r of slapi-nis to 0.38
  - Update minimum n-v-r of pki-* to 9.0.18
  - Update conflicts on bind-dyndb-ldap to < 1.1.0-0.9.b1
  - Update conflicts on bind to < 9.9.0-1
  - Drop requires on krb5-server-ldap
  - Add patch to remove escaping arguments to pkisilent


author: Rob Crittenden <rcritten@redhat.com> - 2.2.0-1
changelog:
  - Updated to upstream 2.2.0 GA
  - Update minimum n-v-r of certmonger to 0.53
  - Update minimum n-v-r of slapi-nis to 0.40
  - Add Requires in client to oddjob-mkhomedir and python-krbV
  - Update minimum selinux-policy to 3.10.0-110


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-0.8
changelog:
  - Updated to upstream 3.0.0 rc 1
  - Update BR for 389-ds-base to 1.2.11.14
  - Update BR for krb5 to 1.10
  - Update BR for samba4-devel to 4.0.0-139 (rc1)
  - Add BR for python-polib
  - Update BR and Requires on sssd to 1.9.0
  - Update Requires on policycoreutils to 2.1.12-5
  - Update Requires on 389-ds-base to 1.2.11.14
  - Update Requires on selinux-policy to 3.11.1-21
  - Update Requires on dogtag to 10.0.0-0.33.a1
  - Update Requires on certmonger to 0.60
  - Update Requires on tomcat to 7.0.29
  - Update minimum version of bind to 9.9.1-10.P3
  - Update minimum version of bind-dyndb-ldap to 1.1.0-0.16.rc1
  - Remove Requires on authconfig from python sub-package


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-0.10
changelog:
  - Updated to upstream 3.0.0 rc 2
  - Include new FF configuration extension
  - Set minimum Requires of selinux-policy to 3.11.1-33
  - Set minimum Requires dogtag to 10.0.0-0.43.b1
  - Add new optional strict sub-package to allow users to limit other
    package upgrades.


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-1
changelog:
  - Updated to upstream 3.0.0 GA
  - Set minimum for samba to 4.0.0-153.
  - Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so
    plugin to /dev/null since they cannot be used when trusts are configured
  - Restrict krb5-server to 1.10.
  - Update BR for 389-ds-base to 1.3.0
  - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca
  - Add Requires on zip for generating FF browser extension


author: Rob Crittenden <rcritten@redhat.com> - 3.1.0-1
changelog:
  - Updated to upstream 3.1.0 GA
  - Set minimum for sssd to 1.9.2
  - Set minimum for pki-ca to 10.0.0-1
  - Set minimum for 389-ds-base to 1.3.0
  - Set minimum for selinux-policy to 3.11.1-60
  - Remove unneeded dogtag package requires


author: Martin Kosek <mkosek@redhat.com> - 3.1.0-2
changelog:
  - Remove redundat Requires versions that are already in Fedora 17
  - Replace python-crypto Requires with m2crypto
  - Add missing Requires(post) for client and server-trust-ad subpackages
  - Restart httpd service when server-trust-ad subpackage is installed
  - Bump selinux-policy Requires to pick up PKI/LDAP port labeling fixes


author: Rob Crittenden <rcritten@redhat.com> - 3.1.2-1
changelog:
  - Update to upstream 3.1.2
  - CVE-2012-4546: Incorrect CRLs publishing
  - CVE-2012-5484: MITM Attack during Join process
  - CVE-2013-0199: Cross-Realm Trust key leak
  - Updated strict dependencies to 389-ds-base = 1.3.0.2 and
    pki-ca = 10.0.1


author: Martin Kosek <mkosek@redhat.com> - 3.2.0-0.1.pre1
changelog:
  - Update to upstream 3.2.0 Prerelease 1
  - Use upstream reference spec file as a base for Fedora spec file


author: Rob Crittenden <rcritten@redhat.com> - 3.2.0-0.3.beta1
changelog:
  - Add a Requires for java-atk-wrapper until we can determine which package
    should be pulling it in, dogtag or tomcat.


author: Rob Crittenden <rcritten@redhat.com> - 3.2.0-1
changelog:
  - Update to upstream 3.2.0 GA
  - ipa-client-install fails if /etc/ipa does not exist (#961483)
  - Certificate status is not visible in Service and Host page (#956718)
  - ipa-client-install removes needed options from ldap.conf (#953991)
  - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957)
  - Add triggerin scriptlet to support OpenSSH 6.2 (#953617)
  - Require nss 3.14.3-12.0 to address certutil certificate import
    errors (#953485)
  - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6
    environments. (#953464)
  - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453)
  - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432)
  - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for
    socket based connections (#960222)
  - Require libsss_nss_idmap-python
  - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to
    member is now done automatically and having it in the config file raises
    an error.
  - Add backup and restore tools, directory.
  - require at least systemd 38 which provides the journal (we no longer
    need to require syslog.target)
  - Update Requires on policycoreutils to 2.1.14-37
  - Update Requires on selinux-policy to 3.12.1-42
  - Update Requires on 389-ds-base to 1.3.1.0
  - Remove a Requires for java-atk-wrapper


author: Martin Kosek <mkosek@redhat.com> - 3.2.2-1
changelog:
  - Update to upstream 3.2.2
  - Drop ipa-server-selinux subpackage
  - Drop redundant directory /var/cache/ipa/sessions
  - Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost
  - Run ipa-upgradeconfig and server restart in posttrans to avoid inconsistency
    issues when there are still old parts of software (like entitlements plugin)


author: Martin Kosek <mkosek@redhat.com> - 3.3.0-2
changelog:
  - Remove ipa-server-selinux obsoletes as upgrades from version prior to
    3.3.0 are not allowed
  - Wrap server-trust-ad subpackage description better
  - Add (noreplace) flag for %{_sysconfdir}/tmpfiles.d/ipa.conf
  - Change permissions on default_encoding_utf8.so to fix ipa-python Provides


author: Martin Kosek <mkosek@redhat.com> - 3.3.0-4
changelog:
  - ipa-server-install fails if --subject parameter is other than default
    realm (#983075)
  - do not allow configuring bind-dyndb-ldap without persistent search (#967876)


author: Martin Kosek <mkosek@redhat.com> - 3.3.1-2
changelog:
  - Unable to remove replica by ipa-replica-manage (#1001662)
  - Before uninstalling a server, warn about active replicas (#998069)


author: Martin Kosek <mkosek@redhat.com> - 3.3.1-3
changelog:
  - Replica installation fails for RHEL 6.4 master (#1004680)
  - Server uninstallation crashes if DS is not available (#998069)


author: Martin Kosek <mkosek@redhat.com> - 3.3.1-5
changelog:
  - Remove dependency on python-paramiko (#1002884)
  - Broken redirection when deleting last entry of DNS resource
    record (#1006360)


author: Martin Kosek <mkosek@redhat.com> - 3.3.2-1
changelog:
  - Update to upstream 3.3.2 (#991064)
  - Add delegation info to MS-PAC (#915799)
  - Warn about incompatibility with AD when IPA realm and domain
    differs (#1009044)
  - Allow PKCS#12 files with empty password in install tools (#1002639)
  - Privilege "SELinux User Map Administrators" did not list
    permissions (#997085)
  - SSH key upload broken when client joins an older server (#1009024)


author: Martin Kosek <mkosek@redhat.com> - 3.3.2-2
changelog:
  - Deprecate --serial-autoincrement option (#1016645)
  - CA installation always failed on replica (#1005446)
  - Re-initializing a winsync connection exited with error (#994980)


author: Martin Kosek <mkosek@redhat.com> - 3.3.2-4
changelog:
  - Server install failure during client enrollment shouldn't
    roll back (#1023086)
  - nsds5ReplicaStripAttrs are not set on agreements (#1023085)
  - ipa-server conflicts with mod_ssl (#1018172)


author: Martin Kosek <mkosek@redhat.com> - 3.3.2-5
changelog:
  - Temporarily move ipa-backup and ipa-restore functionality
    back to make them available in public Beta (#1003933)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-3
changelog:
  - Installer did not detect different server and IPA domain (#1026845)
  - Allow kernel keyring CCACHE when supported (#1026861)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-5
changelog:
  - Trust add tries to add same value of --base-id for sub domain,
    causing an error (#1033068)
  - Improved error reporting for adding trust case (#1029856)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-6
changelog:
  - Remove "Listen 443 http" hack from deployed nss.conf (#1029046)
  - Re-adding existing trust fails (#1033216)
  - IPA uninstall exits with a samba error (#1033075)
  - Added RELRO hardening on /usr/libexec/ipa-otpd (#1026260)
  - Fixed ownership of /usr/share/ipa/ui/js (#1026260)
  - ipa-tests: support external names for hosts (#1032668)
  - ipa-client-install fail due fail to obtain host TGT (#1029354)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-8
changelog:
  - Fix status trust-add command status message (#910453)
  - NetBIOS was not trimmed at 15 characters (#1030517)
  - Harden CA subsystem certificate renewal on CA clones (#1040018)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-12
changelog:
  - Missing objectclasses when empty password passed to host-add (#1052979)
  - sudoOrder missing in sudoers (#1052983)
  - Missing examples in sudorule help (#1049464)
  - Client automount does not uninstall when fstore is empty (#910899)
  - Error not clear for invalid realm given to trust-fetch-domains (#1052981)
  - trust-fetch-domains does not add idrange for subdomains found (#1049926)
  - Add option to show if an AD subdomain is enabled/disabled (#1052973)
  - ipa-adtrust-install still failed with long NetBIOS names (#1030517)
  - Error not clear for invalid relam given to trustdomain-find (#1049455)
  - renewed client cert not recognized during IPA CA renewal (#1033273)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-13
changelog:
  - Do not add krbPwdPolicyReference for new accounts, hardcode it (#1045218)
  - Increase default timeout for IPA services (#1033273)
  - Error while running trustdomain-find (#1054376)
  - group-show lists SID instead of name for external groups (#1054391)
  - Fix IPA server NetBIOS name in samba configuration (#1030517)
  - dnsrecord-mod produces missing API version warning (#1054869)
  - Hide trust-resolve command as internal (#1052860)
  - Add Trust domain Web UI (#1054870)
  - ipasam cannot delete multiple child trusted domains (#1056120)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-16
changelog:
  - Fallback to global policy in ipa lockout plugin (#912725)
  - Migration does not add users to default group (#903232)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-18
changelog:
  - Display server name in ipa command's verbose mode (#1061703)
  - Remove sourcehostcategory from default HBAC rule (#1061187)
  - dnszone-add cannot add classless PTR zones (#1058688)
  - Move ipa-otpd socket directory to /var/run/krb5kdc (#1063850)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-20
changelog:
  - trustdomain-find with pkey-only fails (#1068611)
  - Invalid credential cache in trust-add (#1069182)
  - ipa-replica-install prints unexpected error (#1069722)
  - Too big font in input fields in details facet in Firefox (#1069720)
  - trust-add for POSIX AD does not fetch trustdomains (#1070925)
  - Misleading trust-add error message in some cases (#1070926)
  - Access is not rejected for disabled domain (#1070924)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-22
changelog:
  - ipa-replica-install never checks for 7389 port (#1075165)
  - Non-terminated string may be passed to LDAP search (#1075091)
  - ipa-sam may fail to translate group SID into GID (#1073829)
  - Excessive LDAP calls by ipa-sam during Samba FS operations (#1075132)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-26
changelog:
  - When IdM server trusts multiple AD forests, IPA client returns invalid group
    membership info (#1079498)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-28
changelog:
  - ipa-client-automount fails with incompatibility error when installed against
    older IPA server (#1083108)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-29
changelog:
  - Server installation fails using external signed certificates with
    "IndexError: list index out of range" (#1111320)
  - Add rhino to BuildRequires to fix Web UI build error


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-4
changelog:
  - Update Requires on pki-ca to 10.1.2-4 (#1129558)
  - build: increase java stack size for all arches
  - Add ipaSshPubkey and gidNumber to the ACI to read ID user overrides (#891984)
  - Fix dns zonemgr validation regression (#1056202)
  - Handle profile changes in dogtag-ipa-ca-renew-agent (#886645)
  - Do not wait for new CA certificate to appear in LDAP in ipa-certupdate
    (#886645)
  - Add bind-dyndb-ldap working dir to IPA specfile
  - Fail if certmonger can't see new CA certificate in LDAP in ipa-cacert-manage
    (#886645)
  - Investigate & fix Coverity defects in IPA DS/KDC plugins (#1160756)
  - Deadlock in schema compat plugin (#1161131)
  - ipactl stop should stop dirsrv last (#1161129)
  - Upgrade 3.3.5 to 4.1 failed (#1161128)
  - CVE-2014-7828 freeipa: password not required when OTP in use (#1160877)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-5
changelog:
  - Update slapi-nis dependency to pull 0.54-2 (#891984)
  - ipa-restore: Don't crash if AD trust is not installed (#951581)
  - Prohibit setting --rid-base for ranges of ipa-trust-ad-posix type (#1138791)
  - Trust setting not restored for CA cert with ipa-restore command (#1159011)
  - ipa-server-install fails when restarting named (#1162340)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-6
changelog:
  - Fix: DNS installer adds invalid zonemgr email (#1056202)
  - ipaplatform: Use the dirsrv service, not target (#951581)
  - Fix: DNS policy upgrade raises asertion error (#1161128)
  - Fix upgrade referint plugin (#1161128)
  - Upgrade: fix trusts objectclass violationi (#1161128)
  - group-add doesn't accept gid parameter (#1149124)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-7
changelog:
  - ipa-csreplica-manage connect fails (#1157735)
  - error message which is not understandable when IDNA2003 characters are
    present in --zonemgr (#1163849)
  - Fix warning message should not contain CLI commands (#1114013)
  - Renewing the CA signing certificate does not extend its validity period end
    (#1163498)
  - RHEL7.1 ipa-server-install --uninstall Could not set SELinux booleans for
    httpd (#1159330)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-8
changelog:
  - Improve otptoken help messages (#919228)
  - Ensure users exist when assigning tokens to them (#919228)
  - Enable QR code display by default in otptoken-add (#919228)
  - Show warning instead of error if CA did not start (#1158410)
  - CVE-2014-7850 freeipa: XSS flaw can be used to escalate privileges (#1165774)
  - Traceback when adding zone with long name (#1164859)
  - Backup & Restore mechanism (#951581)
  - ignoring user attributes in migrate-ds does not work if uppercase characters
    are returned by ldap (#1159816)
  - Allow ipa-getkeytab to optionally fetch existing keys (#1007367)
  - Failure when installing on dual stacked system with external ca (#1128380)
  - ipa-server should keep backup of CS.cfg (#1059135)
  - Tracebacks with latest build for --zonemgr cli option (#1167270)
  - webui: use domain name instead of domain SID in idrange adder dialog
    (#891984)
  - webui: normalize idview tab labels (#891984)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-9
changelog:
  - schema update on RHEL-6.6 using latest copy-schema-to-ca.py from RHEL-7.1
    build fails (#1167196)
  - Investigate & fix Coverity defects in IPA DS/KDC plugins (#1160756)
  - "ipa trust-add ... " cmd says : (Trust status: Established and verified)
    while in the logs we see "WERR_ACCESS_DENIED" during verification step.
    (#1144121)
  - POODLE: force using safe ciphers (non-SSLv3) in IPA client and server
    (#1156466)
  - Add support/hooks for a one-time password system like SecureID in IPA
    (#919228)
  - Tracebacks with latest build for --zonemgr cli option (#1167270)
  - ID Views: Support migration from the sync solution to the trust solution
    (#891984)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-11
changelog:
  - Throw zonemgr error message before installation proceeds (#1163849)
  - Winsync: Setup is broken due to incorrect import of certificate (#1169867)
  - Enable last token deletion when password auth type is configured (#919228)
  - ipa-otp-lasttoken loads all user's tokens on every mod/del (#1166641)
  - add --hosts and --hostgroup options to allow/retrieve keytab methods
    (#1007367)
  - Extend host-show to add the view attribute in set of default attributes
    (#1168916)
  - Prefer TCP connections to UDP in krb5 clients (#919228)
  - [WebUI] Not able to unprovisioning service in IPA 4.1 (#1168214)
  - webui: increase notification duration (#1171089)
  - RHEL7.1 ipa automatic CA cert renewal stuck in submitting state (#1166931)
  - RHEL7.1 ipa-cacert-manage cannot change external to self-signed ca cert
    (#1170003)
  - Improve validation of --instance and --backend options in ipa-restore
    (#951581)
  - RHEL7.1 ipa replica unable to replicate to rhel6 master (#1167964)
  - Disable TLS 1.2 in nss.conf until mod_nss supports it (#1156466)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-12
changelog:
  - RHEL7.1 ipa-cacert-manage renewed certificate from MS ADCS not compatible
    (#1169591)
  - CLI doesn't show SSHFP records with SHA256 added via nsupdate (regression)
    (#1172578)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-13
changelog:
  - Expand the token auth/sync windows (#919228)
  - Access is not rejected for disabled domain (#1172598)
  - krb5kdc crash in ldap_pvt_search (#1170695)
  - RHEL7.1 IPA server httpd avc denials after upgrade (#1164896)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-14
changelog:
  - IPA Replicate creation fails with error "Update failed! Status: [10 Total
    update abortedLDAP error: Referral]" (#1166265)
  - running ipa-server-install --setup-dns results in a crash (#1072502)
  - DNS zones are not migrated into forward zones if 4.0+ replica is added
    (#1175384)
  - gid is overridden by uid in default trust view (#1168904)
  - When migrating warn user if compat is enabled (#1177133)
  - Clean up debug log for trust-add (#1168376)
  - No error message thrown on restore(full kind) on replica from full backup
    taken on master (#1175287)
  - ipa-restore proceed even IPA not configured (#1175326)
  - Data replication not working as expected after data restore from full backup
    (#1175277)
  - IPA externally signed CA cert expiration warning missing from log (#1178128)
  - ipa-upgradeconfig fails in CA-less installs (#1181767)
  - IPA certs fail to autorenew simultaneouly (#1173207)
  - More validation required on ipa-restore's options (#1176034)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-16
changelog:
  - PassSync does not sync passwords due to missing ACIs (#1181093)
  - ipa-replica-manage list does not list synced domain (#1181010)
  - Do not assume certmonger is running in httpinstance (#1181767)
  - ipa-replica-manage disconnect fails without password (#1183279)
  - Put LDIF files to their original location in ipa-restore (#1175277)
  - DUA profile not available anonymously (#1184149)
  - IPA replica missing data after master upgraded (#1176995)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-17
changelog:
  - Wrong directories created on full restore (#1186398)
  - ipa-restore crashes if replica is unreachable (#1186396)
  - idoverrideuser-add option --sshpubkey does not work (#1185410)


author: Martin Kosek <mkosek@redhat.com> - 4.1.0-18
changelog:
  - Fix ipa-pwd-extop global configuration caching (#1187342)
  - group-detach does not add correct objectclasses (#1187540)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-18.1
changelog:
  - "an internal error has occurred" during ipa host-del --updatedns (#1198431)
  - Renamed patch 1013 to 0114, as it was merged upstream
  - Fax number not displayed for user-show when kinit'ed as normal user.
    (#1198430)
  - Replication agreement with replica not disabled when ipa-restore done without
    IPA installed (#1199060)
  - Limit deadlocks between DS plugin DNA and slapi-nis (#1199128)


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.1.0-18.2
changelog:
  - IPA extdom plugin fails when encountering large groups (#1193759)
  - CVE-2015-0283 ipa: slapi-nis: infinite loop in getgrnam_r() and getgrgid_r()
    (#1202998)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-18.3
changelog:
  - [ipa-python] ipalib.errors.LDAPError: failed to decode certificate:
    (SEC_ERROR_INVALID_ARGS) security library: invalid arguments. (#1194312)


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-0.1.alpha1
changelog:
  - Resolves: #805188  [RFE] "ipa migrate-ds" ldapsearches with scope=1
  - Resolves: #1019272 With 20000+ users, adding a user to a group intermittently
    throws Internal server error
  - Resolves: #1035494 Unable to add Kerberos principal via kadmin.local
  - Resolves: #1045153 ipa-managed-entries --list -p <badpassword> still requires
    DM password
  - Resolves: #1125950 ipa-server-install --uinstall doesn't remove port 7389
    from ldap_port_t
  - Resolves: #1132540 [RFE] Expose service delegation rules in UI and CLI
  - Resolves: #1145584 ipaserver/install/cainstance.py creates pkiuser not
    matching uidgid
  - Resolves: #1176036 IDM client registration failure in a high load environment
  - Resolves: #1183116 Remove Requires: subscription-manager
  - Resolves: #1186054 permission-add does not prompt to enter --right option in
    interactive mode
  - Resolves: #1187524 Replication agreement with replica not disabled when
    ipa-restore done without IPA installed
  - Resolves: #1188195 Fax number not displayed for user-show when kinit'ed as
    normal user.
  - Resolves: #1189034 "an internal error has occurred" during ipa host-del
    --updatedns
  - Resolves: #1193554 ipa-client-automount: failing with error LDAP server
    returned UNWILLING_TO_PERFORM. This likely means that minssf is enabled.
  - Resolves: #1193759 IPA extdom plugin fails when encountering large groups
  - Resolves: #1194312 [ipa-python] ipalib.errors.LDAPError: failed to decode
    certificate: (SEC_ERROR_INVALID_ARGS) security library: invalid arguments.
  - Resolves: #1194633 Default trust view can be deleted in lower case
  - Resolves: #1196455 ipa-server-install step [8/27]: starting certificate
    server instance - confusing CA staus message on TLS error
  - Resolves: #1198263 Limit deadlocks between DS plugin DNA and slapi-nis
  - Resolves: #1199527 [RFE] Use datepicker component for datetime fields
  - Resolves: #1200867 [RFE] Make OTP validation window configurable
  - Resolves: #1200883 [RFE] Switch apache to use mod_auth_gssapi
  - Resolves: #1202998 CVE-2015-1827 ipa: memory corruption when using
    get_user_grouplist() [rhel-7.2]
  - Resolves: #1204637 slow group operations
  - Resolves: #1204642 migrate-ds: slow add o users to default group
  - Resolves: #1208461 IPA CA master server update stuck on checking getStatus
    via https
  - Resolves: #1211602 Hide ipa-server-install KDC master password option (-P)
  - Resolves: #1211708 ipa-client-install gets stuck during NTP sync
  - Resolves: #1215197 ipa-client-install ignores --ntp-server option during time
    sync
  - Resolves: #1215200 ipa-client-install configures IPA server as NTP source
    even if IPA server has not ntpd configured
  - Resolves: #1217009 OTP sync in UI does not work for TOTP tokens
  - Related:  #1204809 Rebase ipa to 4.2
    - Update to upstream 4.2.0.alpha1


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-0.2.alpha1
changelog:
  - Resolves: #1228671 pkispawn fails in ipa-ca-install and ipa-kra-install
  - Related:  #1204809 Rebase ipa to 4.2
    - Fix minimum version of slapi-nis
    - Require python-sss and python-sss-murmur (provided by sssd-1.13.0)


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-1
changelog:
  - Resolves: #846033  [RFE] Documentation for JSONRPC IPA API
  - Resolves: #989091  Ability to manage IdM/IPA directly from a standard LDAP
    client
  - Resolves: #1072383 [RFE] Provide ability to map CAC identity certificates to
    users in IdM
  - Resolves: #1115294 [RFE] Add support for DNSSEC
  - Resolves: #1145748 [RFE] IPA running with One Way Trust
  - Resolves: #1199520 [RFE] Introduce single upgrade tool - ipa-server-upgrade
  - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities
  - Resolves: #1200694 [RFE] Support for multiple cert profiles
  - Resolves: #1200728 [RFE] Replicate PKI Profile information
  - Resolves: #1200735 [RFE] Allow issuing certificates for user accounts
  - Resolves: #1204054 SSSD database is not cleared between installs and
    uninstalls of ipa
  - Resolves: #1204205 [RFE] ID Views: Automated migration tool from Winsync to
    Trusts
  - Resolves: #1204501 [RFE] Add Password Vault (KRA) functionality
  - Resolves: #1204504 [RFE] Add access control so hosts can create their own
    services
  - Resolves: #1206534 [RFE] Offer Kerberos over HTTP (kdcproxy) by default
  - Resolves: #1206613 [RFE] Configure IPA to be a trust agent by default
  - Resolves: #1209476 package ipa-client does not require package dbus-python
  - Resolves: #1211589 [RFE] Add option to skip the verify_client_version
  - Resolves: #1211608 [RFE] Generic support for unknown DNS RR types (RFC 3597)
  - Resolves: #1215735 ipa-replica-prepare automatically adds a DNS zone
  - Resolves: #1217010 OTP Manager field is not exposed in the UI
  - Resolves: #1222475 krb5kdc : segfault at 0 ip 00007fa9f64d82bb sp
    00007fffd68b2340 error 6 in libc-2.17.so
  - Related:  #1204809 Rebase ipa to 4.2
    - Update to upstream 4.2.0
    - Move /etc/ipa/kdcproxy to the server subpackage


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-2
changelog:
  - Resolves: #1131907 [ipa-client-install] cannot write certificate file
    '/etc/ipa/ca.crt.new': must be string or buffer, not None
  - Resolves: #1195775 unsaved changes dialog internally inconsistent
  - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities
    - Stageusedr-activate: show username instead of DN
  - Resolves: #1200694 [RFE] Support for multiple cert profiles
    - Prevent to rename certprofile profile id
  - Resolves: #1222047 IPA to AD Trust: IPA ERROR 4016: Remote Retrieve Error
  - Resolves: #1224769 copy-schema-to-ca.py does not overwrites schema files
    - copy-schema-to-ca: allow to overwrite schema files
  - Resolves: #1241941 kdc component installation of IPA failed
    - spec file: Update minimum required version of krb5
  - Resolves: #1242036 Replica install fails to update DNS records
    - Fix DNS records installation for replicas
  - Resolves: #1242884 Upgrade to 4.2.0 fails when enabling kdc proxy
    - Start dirsrv for kdcproxy upgrade


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-3
changelog:
  - Resolves: #1170770 [AD TRUST]IPA should detect inconsistent realm domains
    that conflicts with AD DC
    - trusts: Check for AD root domain among our trusted domains
  - Resolves: #1195339 ipa-client-install changes the label on various files
    which causes SELinux denials
    - sysrestore: copy files instead of moving them to avoind SELinux issues
  - Resolves: #1196656 [ipa-client][rhel71] enable debugging for spawned
    commands / ntpd -qgc $tmpfile hangs
    - enable debugging of ntpd during client installation
  - Resolves: #1205264 Migration UI Does Not Work When Anonymous Bind is Disabled
    - migration: Use api.env variables.
  - Resolves: #1212719 abort-clean-ruv subcommand should allow
    replica-certifyall: no
    - Allow value 'no' for replica-certify-all attr in abort-clean-ruv subcommand
  - Resolves: #1216935 ipa trust-add shows ipa: ERROR: an internal error has
    occurred
    - dcerpc: Expand explanation for WERR_ACCESS_DENIED
    - dcerpc: Fix UnboundLocalError for ccache_name
  - Resolves: #1222778 idoverride group-del can delete user and user-del can
    delete group
    - dcerpc: Add get_trusted_domain_object_type method
    - idviews: Restrict anchor to name and name to anchor conversions
    - idviews: Enforce objectclass check in idoverride*-del
  - Resolves: #1234919 Be able to request certificates without certmonger service
    running
    - cermonger: Use private unix socket when DBus SystemBus is not available.
    - ipa-client-install: Do not (re)start certmonger and DBus daemons.
  - Resolves: #1240939 Please add dependency on bind-pkcs11
    - Create server-dns sub-package.
    - ipaplatform: Add constants submodule
    - DNS: check if DNS package is installed
  - Resolves: #1242914 Bump minimal selinux-policy and add booleans to allow
    calling out oddjobd-activated services
    - selinux: enable httpd_run_ipa to allow communicating with oddjobd services
  - Resolves: #1243261 non-admin users cannot search hbac rules
    - fix hbac rule search for non-admin users
    - fix selinuxusermap search for non-admin users
  - Resolves: #1243652 Client has missing dependency on memcache
    - do not import memcache on client
  - Resolves: #1243835 [webui] user change password dialog does not work
    - webui: fix user reset password dialog
  - Resolves: #1244802 spec: selinux denial during kdcproxy user creation
    - Fix selinux denial during kdcproxy user creation
  - Resolves: #1246132 trust-fetch-domains: Do not chown keytab to the sssd user
    - oddjob: avoid chown keytab to sssd if sssd user does not exist
  - Resolves: #1246136 Adding a privilege to a permission avoids validation
    - Validate adding privilege to a permission
  - Resolves: #1246141 DNS Administrators cannot search in zones
    - DNS: Consolidate DNS RR types in API and schema
  - Resolves: #1246143 User plugin - user-find doesn't work properly with manager
    option
    - fix broken search for users by their manager


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-4
changelog:
  - Resolves: #1072383 [RFE] Provide ability to map CAC identity certificates to
    users in IdM
    - store certificates issued for user entries as
    - user-show: add --out option to save certificates to file
  - Resolves: #1145748 [RFE] IPA running with One Way Trust
    - Fix upgrade of sidgen and extdom plugins
  - Resolves: #1195339 ipa-client-install changes the label on various files
    which causes SELinux denials
    - Use 'mv -Z' in specfile to restore SELinux context
  - Resolves: #1198796 Text in UI should describe differing LDAP vs Krb behavior
    for combinations of "User authentication types"
    - webui: add LDAP vs Kerberos behavior description to user auth
  - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities
    - ULC: Fix stageused-add --from-delete command
  - Resolves: #1200694 [RFE] Support for multiple cert profiles
    - certprofile-import: do not require profileId in profile data
    - Give more info on virtual command access denial
    - Allow SAN extension for cert-request self-service
    - Add profile for DNP3 / IEC 62351-8 certificates
    - Work around python-nss bug on unrecognised OIDs
  - Resolves: #1204501 [RFE] Add Password Vault (KRA) functionality
    - Validate vault's file parameters
    - Fixed missing KRA agent cert on replica.
  - Resolves: #1225866 display browser config options that apply to the browser.
    - webui: add Kerberos configuration instructions for Chrome
    - Remove ico files from Makefile
  - Resolves: #1246342 Unapply idview raises internal error
    - idviews: Check for the Default Trust View only if applying the view
  - Resolves: #1248102 [webui] regression - incorrect/no failed auth messages
    - webui: fix regressions failed auth messages
  - Resolves: #1248396 Internal error in DomainValidator.__search_in_dc
    - dcerpc: Fix UnboundLocalError for ccache_name
  - Resolves: #1249455 ipa trust-add failed CIFS server configuration does not
    allow access to \\pipe\lsarpc
    - Fix selector of protocol for LSA RPC binding string
    - dcerpc: Simplify generation of LSA-RPC binding strings
  - Resolves: #1250192 Error in ipa trust-fecth-domains
    - Fix incorrect type comparison in trust-fetch-domains
  - Resolves: #1251553 Winsync setup fails with unexpected error
    - replication: Fix incorrect exception invocation
  - Resolves: #1251854 ipa aci plugin is not parsing aci's correctly.
    - ACI plugin: correctly parse bind rules enclosed in
  - Resolves: #1252414 Trust agent install does not detect available replicas to
    add to master
    - adtrust-install: Correctly determine 4.2 FreeIPA servers


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-5
changelog:
  - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities
    - user-undel: Fix error messages.
  - Resolves: #1200694 [RFE] Support for multiple cert profiles
    - Prohibit deletion of predefined profiles
  - Resolves: #1232819 testing ipa-restore on fresh system install fails
    - Backup/resore authentication control configuration
  - Resolves: #1243331 pkispawn fails when migrating to 4.2 server from 3.0
    server
    - Require Dogtag PKI >= 10.2.6
  - Resolves: #1245225 Asymmetric vault drops traceback when the key is not
    proper
    - Asymmetric vault: validate public key in client
  - Resolves: #1248399 Missing DNSSEC related files in backup
    - fix typo in BasePathNamespace member pointing to ods exporter config
    - ipa-backup: archive DNSSEC zone file and kasp.db
  - Resolves: #1248405 PassSync should be disabled after ipa-winsync-migrate is
    finished
    - winsync-migrate: Add warning about passsync
    - winsync-migrate: Expand the man page
  - Resolves: #1248524 User can't find any hosts using "ipa host-find $HOSTNAME"
    - adjust search so that it works for non-admin users
  - Resolves: #1250093 ipa certprofile-import accepts invalid config
    - Require Dogtag PKI >= 10.2.6
  - Resolves: #1250107 IPA framework should not allow modifying trust on AD trust
    agents
    - trusts: Detect missing Samba instance
  - Resolves: #1250111 User lifecycle - preserved users can be assigned
    membership
    - ULC: Prevent preserved users from being assigned membership
  - Resolves: #1250145 Add permission for user to bypass caacl enforcement
    - Add permission for bypassing CA ACL enforcement
  - Resolves: #1250190 idrange is not added for sub domain
    - idranges: raise an error when local IPA ID range is being modified
    - trusts: harden trust-fetch-domains oddjobd-based script
  - Resolves: #1250928 Man page for ipa-server-install is out of sync
    - install: Fix server and replica install options
  - Resolves: #1251225 IPA default CAACL does not allow cert-request for services
    after upgrade
    - Fix default CA ACL added during upgrade
  - Resolves: #1251561 ipa vault-add Unknown option: ipavaultpublickey
    - validate mutually exclusive options in vault-add
  - Resolves: #1251579 ipa vault-add --user should set container owner equal to
    user on first run
    - Fixed vault container ownership.
  - Resolves: #1252517 cert-request rejects request with correct
    krb5PrincipalName SAN
    - Fix KRB5PrincipalName / UPN SAN comparison
  - Resolves: #1252555 ipa vault-find doesn't work for services
    - vault: Add container information to vault command results
    - Add flag to list all service and user vaults
  - Resolves: #1252556 Missing CLI param and ACL for vault service operations
    - Added CLI param and ACL for vault service operations.
  - Resolves: #1252557 certprofile: improve profile format documentation
    - certprofile-import: improve profile format documentation
    - certprofile: add profile format explanation
  - Resolves: #1253443 ipa vault-add creates vault with invalid type
    - vault: validate vault type
  - Resolves: #1253480 ipa vault-add-owner does not fail when adding an existing
    owner
    - baseldap: Allow overriding member param label in LDAPModMember
    - vault: Fix param labels in output of vault owner commands
  - Resolves: #1253511 ipa vault-find does not use criteria
    - vault: Fix vault-find with criteria
  - Resolves: #1254038 ipa-replica-install pk12util error returns exit status 10
    - install: Fix replica install with custom certificates
  - Resolves: #1254262 ipa-dnskeysync-replica crash cannot contact kdc
    - improve the handling of krb5-related errors in dnssec daemons
  - Resolves: #1254412 when dirsrv is off ,upgrade from 7.1 to 7.2 fails with
    starting CA and named-pkcs11.service
    - Server Upgrade: Start DS before CA is started.
  - Resolves: #1254637 Add ACI and permission for managing user userCertificate
    attribute
    - add permission: System: Manage User Certificates
  - Resolves: #1254641 Remove CSR allowed-extensions restriction
    - cert-request: remove allowed extensions check
  - Resolves: #1254693 vault --service does not normalize service principal
    - vault: normalize service principal in service vault operations
  - Resolves: #1254785 ipa-client-install does not properly handle dual stacked
    hosts
    - client: Add support for multiple IP addresses during installation.
    - Add dependency to SSSD 1.13.1
    - client: Add description of --ip-address and --all-ip-addresses to man page


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-6
changelog:
  - Resolves: #1249226 IPA dnssec-validation not working for AD dnsforwardzone
    - DNSSEC: fix forward zone forwarders checks
  - Resolves: #1250190 idrange is not added for sub domain
    - trusts: format Kerberos principal properly when fetching trust topology
  - Resolves: #1252334 User life cycle: missing ability to provision a stage user
    from a preserved user
    - Add user-stage command
  - Resolves: #1252863 After applying RHBA-2015-1554 errata, IPA service fails to
    start.
    - spec file: Add Requires(post) on selinux-policy
  - Resolves: #1254304 Changing vault encryption attributes
    - Change internal rsa_(public|private)_key variable names
    - Added support for changing vault encryption.
  - Resolves: #1256715 Executing user-del --preserve twice removes the user
    pernamently
    - improve the usability of `ipa user-del --preserve` command


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-7
changelog:
  - Resolves: #1256840 [webui] majority of required fields is no longer marked as
    required
    - fix missing information in object metadata
  - Resolves: #1256842 [webui] no option to choose trust type when creating a
    trust
    - webui: add option to establish bidirectional trust
  - Resolves: #1256853 Clear text passwords in KRA install log
    - Removed clear text passwords from KRA install log.
  - Resolves: #1257072 The "Standard Vault" MUST not be the default and must be
    discouraged
    - vault: change default vault type to symmetric
  - Resolves: #1257163 renaming certificatte profile with --rename option leads
    to integrity issues
    - certprofile: prevent rename (modrdn)


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-8
changelog:
  - Resolves: #1254689 Storing big file as a secret in vault raises traceback
    - vault: Limit size of data stored in vault
  - Resolves: #1255880 ipactl status should distinguish between different
    pki-tomcat services
    - ipactl: Do not start/stop/restart single service multiple times


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-9
changelog:
  - Resolves: #1257074 The KRA agent cert is stored in a PEM file that is not
    tracked
    - cert renewal: Include KRA users in Dogtag LDAP update
    - cert renewal: Automatically update KRA agent PEM file
  - Resolves: #1257163 renaming certificatte profile with --rename option leads
    to integrity issues
    - certprofile: remove 'rename' option
  - Resolves: #1257968 kinit stop working after ipa-restore
    - Backup: back up the hosts file
  - Resolves: #1258926 Remove 'DNSSEC is experimental' warnings
    - DNSSEC: remove "DNSSEC is experimental" warnings
  - Resolves: #1258929 Uninstallation of IPA leaves extra entry in /etc/hosts
    - Installer: do not modify /etc/hosts before user agreement
  - Resolves: #1258944 DNSSEC daemons may deadlock when processing more than 1
    zone
    - DNSSEC: backup and restore opendnssec zone list file
    - DNSSEC: remove ccache and keytab of ipa-ods-exporter
    - DNSSEC: prevent ipa-ods-exporter from looping after service auto-restart
    - DNSSEC: Fix deadlock in ipa-ods-exporter <-> ods-enforcerd interaction
    - DNSSEC: Fix HSM synchronization in ipa-dnskeysyncd when running on DNSSEC
      key master
    - DNSSEC: Fix key metadata export
    - DNSSEC: Wrap master key using RSA OAEP instead of old PKCS v1.5.
  - Resolves: #1258964 revert to use ldapi to add kra agent in KRA install
    - Using LDAPI to setup CA and KRA agents.
  - Resolves: #1259848 server closes connection and refuses commands after
    deleting user that is still logged in
    - ldap: Make ldap2 connection management thread-safe again
  - Resolves: #1259996 AttributeError: 'NameSpace' object has no attribute
    'ra_certprofile' while ipa-ca-install
    - load RA backend plugins during standalone CA install on CA-less IPA master


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-10
changelog:
  - Resolves: #1260663 crash of ipa-dnskeysync-replica component during
    ipa-restore
    - IPA Restore: allows to specify files that should be removed
  - Resolves: #1261806 Installing ipa-server package breaks httpd
    - Handle timeout error in ipa-httpd-kdcproxy
  - Resolves: #1262322 Failed to backup CS.cfg message in upgrade.
    - Server Upgrade: backup CS.cfg when dogtag is turned off


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-11
changelog:
  - Resolves: #1258965 ipa vault: set owner of vault container
    - baseldap: make subtree deletion optional in LDAPDelete
    - vault: add vault container commands
    - vault: set owner to current user on container creation
    - vault: update access control
    - vault: add permissions and administrator privilege
    - install: support KRA update
  - Resolves: #1261586 ipa config-mod addattr fails for ipauserobjectclasses
    - config: allow user/host attributes with tagging options
  - Resolves: #1262315 Unable to establish winsync replication
    - winsync: Add inetUser objectclass to the passsync sysaccount


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-12
changelog:
  - Resolves: #1204205 [RFE] ID Views: Automated migration tool from Winsync to
    Trusts
    - winsync-migrate: Convert entity names to posix friendly strings
    - winsync-migrate: Properly handle collisions in the names of external groups
  - Resolves: #1261074 Adjust Firefox configuration to new extension signing
    policy
    - webui: use manual Firefox configuration for Firefox >= 40
  - Resolves: #1263337 IPA Restore failed with installed KRA
    - ipa-backup: Add mechanism to store empty directory structure
  - Resolves: #1264793 CVE-2015-5284 ipa: ipa-kra-install includes certificate
    and private key in world readable file [rhel-7.2]
    - install: fix KRA agent PEM file permissions
  - Resolves: #1265086 Mark IdM API Browser as experimental
    - WebUI: add API browser is experimental warning
  - Resolves: #1265277 Fix kdcproxy user creation
    - install: create kdcproxy user during server install
    - platform: add option to create home directory when adding user
    - install: fix kdcproxy user home directory
  - Resolves: #1265559 GSS failure after ipa-restore
    - destroy httpd ccache after stopping the service


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-13
changelog:
  - Resolves: #1217009 OTP sync in UI does not work for TOTP tokens
    - Fix an integer underflow bug in libotp
  - Resolves: #1262996 ipa vault internal error on replica without KRA
    - install: always export KRA agent PEM file
    - vault: select a server with KRA for vault operations
  - Resolves: #1269777 IPA restore overwrites /etc/passwd and /etc/group files
    - do not overwrite files with local users/groups when restoring authconfig
  - Renamed patch 1011 to 0138, as it was merged upstream


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-14
changelog:
  - Resolves: #1262996 ipa vault internal error on replica without KRA
    - upgrade: make sure ldap2 is connected in export_kra_agent_pem
  - Resolves: #1270608 IPA upgrade fails for server with CA cert signed by
    external CA
    - schema: do not derive ipaVaultPublicKey from ipaPublicKey


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15
changelog:
  - Resolves: #1252556 Missing CLI param and ACL for vault service operations
    - vault: fix private service vault creation


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-16
changelog:
  - Resolves: #1277696 IPA certificate auto renewal fail with "Invalid
    Credential"
    - cert renewal: make renewal of ipaCert atomic
  - Resolves: #1278330 installer options are not validated at the beginning of
    installation
    - install: fix command line option validation
  - Resolves: #1282845 sshd_config change on ipa-client-install can prevent sshd
    from starting up
    - client install: do not corrupt OpenSSH config with Match sections
  - Resolves: #1282935 ipa upgrade causes vault internal error
    - install: export KRA agent PEM file in ipa-kra-install
  - Resolves: #1283429 Default CA ACL rule is not created during
    ipa-replica-install
    - TLS and Dogtag HTTPS request logging improvements
    - Avoid race condition caused by profile delete and recreate
    - Do not erroneously reinit NSS in Dogtag interface
    - Add profiles and default CA ACL on migration
    - disconnect ldap2 backend after adding default CA ACL profiles
    - do not disconnect when using existing connection to check default CA ACLs
  - Resolves: #1283430 ipa-kra-install: fails to apply updates
    - suppress errors arising from adding existing LDAP entries during KRA
      install
  - Resolves: #1283748 Caching of ipaconfig does not work in framework
    - fix caching in get_ipa_config
  - Resolves: #1283943 IPA DNS Zone/DNS Forward Zone details missing after
    upgrade from RHEL 7.0 to RHEL 7.2
    - upgrade: fix migration of old dns forward zones
    - Fix upgrade of forwardzones when zone is in realmdomains
  - Resolves: #1284413 ipa-cacert-manage renew fails on nonexistent ldap
    connection
    - ipa-cacert-renew: Fix connection to ldap.
  - Resolves: #1284414 ipa-otptoken-import fails on nonexistent ldap connection
    - ipa-otptoken-import: Fix connection to ldap.
  - Resolves: #1286635 IPA server upgrade fails from RHEL 7.0 to RHEL 7.2 using
    "yum update ipa* sssd"
    - Set minimal required version for openssl
  - Resolves: #1286781 ipa-nis-manage does not update ldap with all NIS maps
    - Upgrade: Fix upgrade of NIS Server configuration
  - Resolves: #1289311 umask setting causes named-pkcs11 issue with directory
    permissions on /var/lib/ipa/dnssec
    - DNS: fix file permissions
    - Explicitly call chmod on newly created directories
    - Fix: replace mkdir with chmod
  - Resolves: #1290142 Broken 7.2.0 to 7.2.z upgrade - flawed version comparison
    - Fix version comparison
    - use FFI call to rpmvercmp function for version comparison
  - Resolves: #1292595 In IPA-AD trust environment some secondary IPA based Posix
    groups are missing
    - ipa-kdb: map_groups() consider all results
  - Resolves: #1293870 User should be notified for wrong password in password
    reset page
    - Fixed login error message box in LoginScreen page
  - Resolves: #1296196 Sysrestore did not restore state if a key is specified in
    mixed case
    - Allow to used mixed case for sysrestore
  - Resolves: #1296214 DNSSEC key purging is not handled properly
    - DNSSEC: Improve error reporting from ipa-ods-exporter
    - DNSSEC: Make sure that current state in OpenDNSSEC matches key state in
      LDAP
    - DNSSEC: Make sure that current key state in LDAP matches key state in BIND
    - DNSSEC: remove obsolete TODO note
    - DNSSEC: add debug mode to ldapkeydb.py
    - DNSSEC: logging improvements in ipa-ods-exporter
    - DNSSEC: remove keys purged by OpenDNSSEC from master HSM from LDAP
    - DNSSEC: ipa-dnskeysyncd: Skip zones with old DNSSEC metadata in LDAP
    - DNSSEC: ipa-ods-exporter: add ldap-cleanup command
    - DNSSEC: ipa-dnskeysyncd: call ods-signer ldap-cleanup on zone removal
    - DNSSEC: Log debug messages at log level DEBUG
  - Resolves: #1296216 ipa-server-upgrade fails if certmonger is not running
    - prevent crash of CA-less server upgrade due to absent certmonger
    - always start certmonger during IPA server configuration upgrade
  - Resolves: #1297811 The ipa -e skip_version_check=1 still issues
    incompatibility error when called against RHEL 6 server
    - ipalib: assume version 2.0 when skip_version_check is enabled
  - Resolves: #1298289 install fails when locale is "fr_FR.UTF-8"
    - Do not decode HTTP reason phrase from Dogtag
  - Resolves: #1300252 shared certificateProfiles container is missing on a
    freshly installed RHEL7.2 system
    - upgrade: unconditional import of certificate profiles into LDAP
  - Resolves: #1301674 --setup-dns and other options is forgotten for using an
    external PKI
    - installer: Propagate option values from components instead of copying them.
    - installer: Fix logic of reading option values from cache.
  - Resolves: #1301687 issues with migration from RHEL 6 self-signed to RHEL 7 CA
    IPA setup
    - ipa-ca-install: print more specific errors when CA is already installed
    - cert renewal: import all external CA certs on IPA CA cert renewal
    - CA install: explicitly set dogtag_version to 10
    - fix standalone installation of externally signed CA on IPA master
    - replica install: validate DS and HTTP server certificates
    - replica install: improvements in the handling of CA-related IPA config
      entries
  - Resolves: #1301901 [RFE] compat tree: show AD members of IPA groups
    - slapi-nis: update configuration to allow external members of IPA groups
  - Resolves: #1305533 ipa trust-add succeded but after that ipa trust-find
    returns "0 trusts matched"
    - upgrade: fix config of sidgen and extdom plugins
    - trusts: use ipaNTTrustPartner attribute to detect trust entries
    - Warn user if trust is broken
    - fix upgrade: wait for proper DS socket after DS restart
    - Insure the admin_conn is disconnected on stop
    - Fix connections to DS during installation
    - Fix broken trust warnings
  - Resolves: #1321092 Installers fail when there are multiple versions of the
    same certificate
    - certdb: never use the -r option of certutil
  - Related: #1317381 Crash during IPA upgrade due to slapd
    - spec file: update minimum required version of slapi-nis
  - Related: #1322691 CVE-2015-5370 CVE-2016-2110 CVE-2016-2111 CVE-2016-2112
    CVE-2016-2113 CVE-2016-2114 CVE-2016-2115 CVE-2016-2118 samba: various flaws
    [rhel-7.3]
    - Rebuild against newer Samba version


author: Jan Cholasta <jcholast@redhat.com> - 4.3.1-0.201605191449GITf8edf37
changelog:
  - Resolves: #837369 [RFE] Switch to client promotion to replica model
  - Resolves: #1199516 [RFE] Move replication topology to the shared tree
  - Resolves: #1206588 [RFE] Visualize FreeIPA server replication topology
  - Resolves: #1211602 Hide ipa-server-install KDC master password option (-P)
  - Resolves: #1212713 ipa-csreplica-manage: it could be nice to have also
    list-ruv / clean-ruv / abort-clean-ruv for o=ipaca backend
  - Resolves: #1267206 ipa-server-install uninstall should warn if no
    installation found
  - Resolves: #1295865 The Domain option is not correctly set in idmapd.conf when
    ipa-client-automount is executed.
  - Resolves: #1327092 URI details missing and OCSP-URI details are incorrectly
    displayed when certificate generated using IPA on RHEL 7.2up2.
  - Resolves: #1332809 ipa-server-4.2.0-15.el7_2.6.1.x86_64 fails to install
    because of missing dependencies
  - Related: #1292141 Rebase to FreeIPA 4.4+
    - Rebase to 4.3.1.201605191449GITf8edf37


author: Jan Cholasta <jcholast@redhat.com> - 4.3.1-0.201605191449GITf8edf37.1
changelog:
  - Resolves: #1332809 ipa-server-4.2.0-15.el7_2.6.1.x86_64 fails to install
    because of missing dependencies
    - Rebuild with krb5-1.14.1


author: Jan Cholasta <jcholast@redhat.com> - 4.3.1-0.201605241723GIT1b427d3
changelog:
  - Resolves: #1339233 CA installed on replica is always marked as renewal master
  - Related: #1292141 Rebase to FreeIPA 4.4+
    - Rebase to 4.3.1.201605241723GIT1b427d3


author: Jan Cholasta <jcholast@redhat.com> - 4.3.1-0.201605241723GIT1b427d3.1
changelog:
  - Resolves: #1339483 ipa-server-install fails with ERROR pkinit_cert_files
    - Fix incorrect rebase of patch 1001


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-0.1.alpha1
changelog:
  - Resolves: #712109 "krbExtraData not allowed" is logged in DS error log while
    setting password for default sudo binddn.
  - Resolves: #747612 [RFE] IPA should support and manage DNS sites
  - Resolves: #768316 [RFE] ipa-getkeytab should auto-detect the ipa server name
  - Resolves: #825391 [RFE] Replica installation should provide a means for
    inheriting nssldap security access settings
  - Resolves: #921497 Incorrect *.py[co] files placement
  - Resolves: #1029640 RHEL7 IPA to add DNA Plugin config for dnaRemote support
  - Resolves: #1029905 389 DS cache sizes not replicated to IPA replicas
  - Resolves: #1196958 IPA replica installation failing with high number of users
    (160000).
  - Resolves: #1219402 IPA suggests to uninstall a client when the user needs to
    uninstall a replica
  - Resolves: #1224057 [RFE] TGS authorization decisions in KDC based on
    Authentication Indicator
  - Resolves: #1234222 [WebUI] UI error message is not appropriate for "Kerberos
    principal expiration"
  - Resolves: #1234223 [WebUI] General invalid password error message appearing
    for "Locked user"
  - Resolves: #1254267 ipa-server-install failure applying ldap updates with
    limits exceeded
  - Resolves: #1258626 realmdomains-mod --add-domain command throwing error when
    doamin already is in forwardzone.
  - Resolves: #1259020 ipa-server-adtrust-install doesn't allow
    NetBIOS-name=EXAMPLE-TEST.COM (dash character)
  - Resolves: #1260993 DNSSEC signing enablement on dnszone should throw error
    message when DNSSEC master not installed
  - Resolves: #1262747 dnssec options missing in ipa-dns-install man page
  - Resolves: #1265900 Fail installation immediately after dirsrv fails to
    install using ipa-server-install
  - Resolves: #1265915 idoverrideuser-find fails if any SID anchor is not
    resolvable anymore
  - Resolves: #1268027 ipa-dnskeysync-replica crash with backtrace -
    LimitsExceeded: limits exceeded for this query
  - Resolves: #1269089 Certificate of managed-by host/service fails to resubmit
  - Resolves: #1269200 ipa-server crashing while trying to preserve admin user
  - Resolves: #1271321 Reduce ioblocktimeout and idletimeout defaults
  - Resolves: #1271579 Automember rule expressions disappear from tables on
    single expression delete
  - Resolves: #1275816 Incomplete ports for IPA ad-trust
  - Resolves: #1276351 [RFE] Remove
    /usr/share/ipa/updates/50-lockout-policy.update file from IPA releases
  - Resolves: #1277109 Add tool tips for Revert, Refresh, Undo, and Undo All in
    the IPA UI
  - Resolves: #1278426 Better error message needed for invalid ca-signing-algo
    option
  - Resolves: #1279932 ipa-client-install --request-cert needs workaround in
    anaconda chroot
  - Resolves: #1282521 Creating a user w/o private group fails when doing so in
    WebUI
  - Resolves: #1283879 ipa-winsync-migrate: Traceback message should be replaced
    by "IPA is not configured on this system"
  - Resolves: #1285071 ipa-kra-install fails on replica looking for admin cert
    file
  - Resolves: #1287194 [RFE] Support of UPN for trusted domains
  - Resolves: #1288967 Normalize Manager entry in ipa user-add
  - Resolves: #1289487 Priority field missing in Password Policy detail tab
  - Resolves: #1291140 ipa client should configure kpasswd_server directive in
    krb5.conf
  - Resolves: #1292141 Rebase to FreeIPA 4.4+
    - Rebase to 4.4.0.alpha1
  - Resolves: #1298848 [RFE] Centralized topology management
  - Resolves: #1300576 Browser setup page includes instructions for Internet
    Explorer
  - Resolves: #1301586 ipa host-del --updatedns should remove related dns
    entries.
  - Resolves: #1304618 Residual Files After IPA Server Uninstall
  - Resolves: #1305144 ipa-python does not require its dependencies
  - Resolves: #1309700 Process /usr/sbin/winbindd was killed by signal 6
  - Resolves: #1313798 Console output post ipa-winsync-migrate command should be
    corrected.
  - Resolves: #1314786 [RFE] External Trust with Active Directory domain
  - Resolves: #1319023 Include description for 'status' option in man page for
    ipactl command.
  - Resolves: #1319912 ipa-server-install does not completely change hostname and
    named-pkcs11 fails
  - Resolves: #1320891 IPA Error 3009: Validation error: Invalid 'ptrrecord':
    Reverse zone in-addr.arpa. requires exactly 4 IP address compnents, 5 given
  - Resolves: #1327207 ipa cert-revoke --help doesn't provide enough info on
    revocation reasons
  - Resolves: #1328549 "ipa-kra-install" command reports incorrect message when
    it is executed on server already installed with KRA.
  - Resolves: #1329209 ipa-nis-manage enable: change service name from 'portmap'
    to 'rpcbind'
  - Resolves: #1329275 ipa-nis-manage command should include status option
  - Resolves: #1330843 'man ipa' should be updated with latest commands
  - Resolves: #1333755 ipa cert-request causes internal server error while
    requesting certificate
  - Resolves: #1337484 EOF is not handled for ipa-client-install command
  - Resolves: #1338031 Insufficient 'write' privilege on some attributes for the
    members of the role which has "User Administrators" privilege.
  - Resolves: #1343142 IPA DNS should do better verification of DNS zones
  - Resolves: #1347928 Frontpage exposes runtime error with no cookies enabled in
    browser


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-0.2.alpha1
changelog:
  - Resolves: #1348948 IPA server install fails with build
    ipa-server-4.4.0-0.el7.1.alpha1
    - Revert "Increased mod_wsgi socket-timeout"


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-1
changelog:
  - Resolves: #747612 [RFE] IPA should support and manage DNS sites
  - Resolves: #826790 Disabling password expiration (--maxlife=0 and --minlife=0)
    in the default global_policy in IPA sets user's password expiration
    (krbPasswordExpiration) to be 90 days
  - Resolves: #896699 ipa-replica-manage -H does not delete DNS SRV records
  - Resolves: #1084018 [RFE] Add IdM user password change support for legacy
    client compat tree
  - Resolves: #1117306 [RFE] Allow multiple Principals per host entry (Kerberos
    aliases)
    - Fix incorrect check for principal type when evaluating CA ACLs
  - Resolves: #1146860 [RFE] Offer OTP generation for host enrollment in the UI
  - Resolves: #1238190 ipasam unable to lookup group in directory yet manual
    search works
  - Resolves: #1250110 search by users which don't have read rights for all attrs
    in search_attributes fails
  - Resolves: #1263764 Show Certificate displays in useless format
  - Resolves: #1272491 [WebUI] Certificate action dropdown does not display all
    the options after adding new certificate
  - Resolves: #1292141 Rebase to FreeIPA 4.4+
    - Rebase to 4.4.0
  - Resolves: #1294503 IPA fails to issue 3rd party certs
  - Resolves: #1298242 [RFE] API compatibility - compatibility of clients
  - Resolves: #1298848 [RFE] Centralized topology management
  - Resolves: #1298966 [RFE] Extend Smart Card support
  - Resolves: #1315146 Multiple clients cannot join domain simultaneously:
    /var/run/httpd/ipa/clientcaches race condition?
  - Resolves: #1318903 ipa server install failing when SUBCA signs the cert
  - Resolves: #1319003 ipa-winsync-migrate: Traceback should be fixed with proper
    console output
  - Resolves: #1324055 IPA always qualify requests for admin
  - Resolves: #1328552 [RFE] Allow users to authenticate with alternative names
  - Resolves: #1334582 Inconsistent UI and CLI options for removing certificate
    hold
  - Resolves: #1346321 Exclude o=ipaca subtree from Retro Changelog (syncrepl)
  - Resolves: #1349281 Fix `Conflicts` with ipa-python
  - Resolves: #1350695 execution of copy-schema script fails
  - Resolves: #1351118 upgrade failed for RHEL-7.3 from RHEL-7.2.z
  - Resolves: #1351153 AVC seen on Replica during ipa-server upgrade test
    execution to 7.3
  - Resolves: #1351276 ipa-server-install with dns cannot resolve itself to
    create ipa-ca entry
  - Related: #1343422 [RFE] Add GssapiImpersonate option


author: Petr Vobornik <pvoborni@redhat.com> - 4.4.0-2
changelog:
  - Resolves: #1356102 Server uninstall does not stop tracking lightweight sub-CA
    with certmonger
    - uninstall: untrack lightweight CA certs
  - Resolves: #1351807 ipa-nis-manage config.get_dn missing
    - ipa-nis-manage: Use server API to retrieve plugin status
  - Resolves: #1353452 ipa-compat-manage command failed,
    exception: NotImplementedError: config.get_dn()
    - ipa-compat-manage: use server API to retrieve plugin status
  - Resolves: #1353899 ipa-advise: object of type 'type' has no len()
    - ipa-advise: correct handling of plugin namespace iteration
  - Resolves: #1356134 'kinit -E' does not work for IPA user
    - kdb: check for local realm in enterprise principals
  - Resolves: #1353072 ipa unknown command vault-add
    - Enable vault-* commands on client
    - vault-add: set the default vault type on the client side if none was given
  - Resolves: #1353995 Default CA can be used without a CA ACL
    - caacl: expand plugin documentation
  - Resolves: #1356144 host-find should not print SSH keys by default, only
    SSH fingerprints
    - host-find: do not show SSH key by default
  - Resolves: #1353506 ipa migrate-ds command fails for IPA in RHEL 7.3
    - Removed unused method parameter from migrate-ds


author: Petr Vobornik <pvoborni@redhat.com> - 4.4.0-2.1
changelog:
  - Resolves: #1274524 [RFE] Qualify up to 60 IdM replicas
  - Resolves: #1320838 [RFE] Support IdM Client in a DNS domain controlled by AD
  - Related: #1356134 'kinit -E' does not work for IPA user


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-3
changelog:
  - Resolves: #1296140 Remove redhat-access-plugin-ipa support
    - Obsolete and conflict redhat-access-plugin-ipa
  - Resolves: #1351119 Multiple issues while uninstalling ipa-server
    - server uninstall fails to remove krb principals
  - Resolves: #1351758 ipa commands not showing expected error messages
    - frontend: copy command arguments to output params on client
    - Show full error message for selinuxusermap-add-hostgroup
  - Resolves: #1352883 Traceback on adding default automember group and hostgroup
    set
    - allow 'value' output param in commands without primary key
  - Resolves: #1353888 Fix the help for ipa otp and other topics
    - schema: Fix subtopic -> topic mapping
  - Resolves: #1354348 ipa trustconfig-show throws internal error.
    - allow 'value' output param in commands without primary key
  - Resolves: #1354381 ipa trust-add with raw option gives internal error.
    - trust-add: handle `--all/--raw` options properly
  - Resolves: #1354493 Replica install fails with old IPA master
    - DNS install: Ensure that DNS servers container exists
  - Resolves: #1354628 ipa hostgroup-add-member does not return error message
    when adding itself as member
    - frontend: copy command arguments to output params on client
  - Resolves: #1355856 ipa otptoken-add --type=totp gives internal error
    - messages: specify message type for ResultFormattingError
  - Resolves: #1356063 "ipa radiusproxy-add" command needs to prompt to enter
    secret key
    - expose `--secret` option in radiusproxy-* commands
    - prevent search for RADIUS proxy servers by secret
  - Resolves: #1356099 Bug in the ipapwd plugin
    - Heap corruption in ipapwd plugin
  - Resolves: #1356899 com.redhat.idm.trust.fetch_domains need update after thin
    client changes
    - Use server API in com.redhat.idm.trust-fetch-domains oddjob helper
  - Resolves: #1356964 Renaming a user removes all of his principal aliases
    - Preserve user principal aliases during rename operation


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-4
changelog:
  - Resolves: #1117306 [RFE] Allow multiple Principals per host entry (Kerberos
    aliases)
    - harden the check for trust namespace overlap in new principals
  - Resolves: #1351142 CLI is not using session cookies for communication with
    IPA API
    - Fix session cookies
  - Resolves: #1353888 Fix the help for ipa otp and other topics
    - help: Add dnsserver commands to help topic 'dns'
  - Resolves: #1354406 host-del updatedns options complains about missing ptr
    record for host
    - Host-del: fix behavior of --updatedns and PTR records
  - Resolves: #1355718 ipa-replica-manage man page example output differs actual
    command output
    - Minor fix in ipa-replica-manage MAN page
  - Resolves: #1358229 Traceback message should be fixed, seen while editing
    winsync migrated user information in Default trust view.
    - baseldap: Fix MidairCollision instantiation during entry modification
  - Resolves: #1358849 CA replica install logs to wrong log file
    - unite log file name of ipa-ca-install
  - Resolves: #1359130 ipa-server-install command fails to install IPA server.
    - DNS Locations: fix update-system-records unpacking error
  - Resolves: #1359237 AVC on dirsrv config caused by IPA installer
    - Use copy when replacing files to keep SELinux context
  - Resolves: #1359692 ipa-client-install join fail with traceback against
    RHEL-6.8 ipa-server
    - compat: fix ping call
  - Resolves: #1359738 ipa-replica-install --domain=<IPA primary domain> option
    does not work
    - replica-install: Fix --domain
  - Resolves: #1360778 Vault commands are available in CLI even when the server
    does not support them
    - Revert "Enable vault-* commands on client"
    - client: fix hiding of commands which lack server support
  - Related: #1281704 Rebase to softhsm 2.1.0
    - Remove the workaround for softhsm bug #1293340
  - Related: #1298288 [RFE] Improve performance in large environments.
    - Create indexes for krbCanonicalName attribute


