# changelog

author: Kevin Howell <khowell@redhat.com> 1.20.3-1
changelog:
  - Cockpit: Implement modal dialog (khowell@redhat.com)
  - Implement bootstrap-select component (khowell@redhat.com)
  - Port cockpit subscriptions-client to dbus (khowell@redhat.com)
  - Move python-rhsm build into subscription-manager (khowell@redhat.com)
  - 1354667: Add identity cert detection to proxy error message generation
    (wpoteat@redhat.com)
  - 1501889: Enable yum plugins after sub-man subcommand is executed
    (jhnidek@redhat.com)
  - 1477958: Use inotify for checking changes of consumer certs
    (jhnidek@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.20.5-1
changelog:
  - Sync zanata translations (khowell@redhat.com)
  - Cockpit - listing of installed products using patternfly-react
    (jhnidek@redhat.com)
  - 1508457: Bump versions in python-rhsm obsoletes (khowell@redhat.com)
  - Implement fallback for settimeout on old m2crypto (khowell@redhat.com)
  - Cockpit: reconcile translated strings (khowell@redhat.com)
  - Cockpit: use translations from root dir (khowell@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.20.6-1
changelog:
  - Sync zanata translations (khowell@redhat.com)
  - 1514067: Call virt-what using absolute path (jhnidek@redhat.com)
  - 1487688: Load config settings for cockpit plugin (khowell@redhat.com)
  - Added dependencies to cockpit-bridge and cockpit-shell. (jhnidek@redhat.com)
  - 1462456: Flush stdout and stderr on more places (jhnidek@redhat.com)
  - 1491842: fixed typo in man page. (jhnidek@redhat.com)
  - 1508591: Removed python-rhsm from subscription-manager version
    (jhnidek@redhat.com)
  - 1421010: Subman-GUI shows error dialog (wrong proxy settings)
    (jhnidek@redhat.com)
  - 1500106: subscription-manager status --ondate do not ignore date
    (jhnidek@redhat.com)
  - 1506970: Fixed default custom URL in cockpit plugin (jhnidek@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.20.8-1
changelog:
  - Sync zanata translations (khowell@redhat.com)
  - Add parameter to D-Bus API to pass locale for localization of errors
    (jhnidek@redhat.com)
  - 1463765: Fix wrong Indic-language translations (khowell@redhat.com)
  - 1487600: Cockpit - Save configuration from register dialog
    (jhnidek@redhat.com)
  - 1464571: Improve multiple product certs errors (khowell@redhat.com)
  - Replace cockpit-subscriptions (khowell@redhat.com)
  - 1507158: Provide Host: in http CONNECT header (jhnidek@redhat.com)
  - 1319927: Remove newline from auto enable message (khowell@redhat.com)


author: Alex Wood <awood@redhat.com> 1.21.1-1
changelog:
  - Do not enable gpgcheck if the only a metadata gpg key is configured
    (git@PaulSD.com)
  - 1448313: Do not log error, when rhsmcertd is restarted (jhnidek@redhat.com)
  - Support configuration of a repo metadata signing key (git@PaulSD.com)
  - Generate bin scripts via setuptools entry_points (khowell@redhat.com)
  - 1304056: Fix D-Bus path of com.redhat.RHSM1.Facts (jhnidek@redhat.com)
  - 1516439: Cockpit reports error during unregister when candlepin unavailable
    (jhnidek@redhat.com)
  - 1510727: Enable starting of subman GUI, when consumer has been deleted
    (jhnidek@redhat.com)


author: Alex Wood <awood@redhat.com> 1.21.2-1
changelog:
  - 1547354: Add missing requires for python-kitchen (awood@redhat.com)
  - 1528625: Prevent dmidecode failure from returning None (awood@redhat.com)
  - 1543639: Properly encode package profile data (jturel@redhat.com)
  - 1527396: Subman cockpit plugin - fix registration using act. keys
    (jhnidek@redhat.com)
  - 1535974: Close register dialog, when status is changed (jhnidek@redhat.com)
  - Add start date to available pool listing (wpoteat@redhat.com)
  - Condition requiring --after and --all is unnecessary (wpoteat@redhat.com)
  - 1510024: Handle rhel-alt product tags properly (khowell@redhat.com)
  - 1540204: Raise RateLimitExceededException with headers (jhnidek@redhat.com)
  - 1533905: Remove dependency on yum and chkconfig. (jhnidek@redhat.com)
  - 1479353: Add --after option to list command (csnyder@redhat.com)
  - 1537473: Subman rpm requires python-setuptools (jhnidek@redhat.com)
  - 1525238: Do not protect rhel prod. cert with special case
    (jhnidek@redhat.com)
  - 1526622: Do not delete product certificates in protected directory
    (jhnidek@redhat.com)
  - 1519512: Handle non-UTF8 RPM vendors (khowell@redhat.com)
  - 1487600: Fix registration success detection (khowell@redhat.com)
  - 1527813: subman-gui use new URL of Online Documentation (jhnidek@redhat.com)
  - 1527392: Clear credential data in register dialog (jhnidek@redhat.com)
  - rct cat-manifest: show Web and API urls from consumer.json (evgeni@golov.de)
  - Use dnf on RHEL or Fedora w/ using Python 3 (khowell@redhat.com)
  - 1507030: RestlibExceptions should show they originate server-side
    (awood@redhat.com)
  - Package for Python 3 on Fedora (khowell@redhat.com)


author: Alex Wood <awood@redhat.com> 1.21.2-2
changelog:
  - Remove %clean section (ignatenkobrain@fedoraproject.org)
  - Remove BuildRoot definition (ignatenkobrain@fedoraproject.org)


author: Christopher Snyder <csnyder@redhat.com> 1.21.3-1
changelog:
  - 1439645: Perform a full entitlement refresh in the yum/dnf/zypper plugins
    (csnyder@redhat.com)
  - 1527727: Add proc_stat.btime fact (csnyder@redhat.com)
  - 1568214: rhsmcertd no longer uses reload on py3 (csnyder@redhat.com)
  - 1559227: Do not use str format for python 2.6 (csnyder@redhat.com)
  - 1425766: Additional message in status to indicate content access
    (wpoteat@redhat.com)
  - Adds a new cli utility 'syspurpose' (csnyder@redhat.com)
  - 1559227: Do not log Error messages for missing identity cert/key
    (csnyder@redhat.com)
  - 1458159: python-dmidecode bug fix requires specific RPM release.
    (awood@redhat.com)
  - fix for proxy-server provisioning - resolving of 'candlepin.example.com'
    (jstavel@redhat.com)
  - 1458159: Require latest version of python-dmidecode (awood@redhat.com)
  - 1551044: Add the option to build both python{3,2}-subscription-manager-rhsm
    (csnyder@redhat.com)
  - 1559743: Reduce log level of network address fact collection to debug
    (csnyder@redhat.com)
  - added a vagrant section for a VM for proxy-server (jstavel@redhat.com)
  - ansible role rhsm-services and TESTING.md document (jstavel@redhat.com)
  - Fix updates.img to include required Python packages (jhnidek@redhat.com)
  - Do not remove existing zypper repos when disconnected (csnyder@redhat.com)
  - Apply updates.img druing PXE boot (jhnidek@redhat.com)
  - Do not use private network addresses for vagrant hostmanager
    (csnyder@redhat.com)
  - Adds tool to make updates.img file for use with anaconda (csnyder@redhat.com)
  - 1554482: Reenable RHUI support (csnyder@redhat.com)
  - Fix building on SLES 11 (jhnidek@redhat.com)
  - Added PXE BOOT client to the Vagrant setup (jhnidek@redhat.com)
  - New Vagrant file for creating PXEBOOT server (jhnidek@redhat.com)
  - 1551386: Cannot put unicode into gtk for button label (wpoteat@redhat.com)
  - 1551465: Fix unicode decode issue on py 2.6 (csnyder@redhat.com)
  - Remove unneeded spec file directives (awood@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.21.4-1
changelog:
  - Stop building subscription-manager-gui, when Python 3 is used
    (jhnidek@redhat.com)
  - Remove kitchen from install_requires (khowell@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.21.5-1
changelog:
  - Fix python-rhsm Provides and Obsoletes (csnyder@redhat.com)
  - 1568609: Updated man page for --after list option (aparadka@redhat.com)
  - Get Initial Setup Addon to run during installation in Vagrant
    (jhnidek@redhat.com)
  - ENT-447 Create .desktop file that opens web page with our cockpit plugin
    (jhnidek@redhat.com)
  - ENT-481 service-level command & options now update syspurpose metadata
    (nmoumoul@redhat.com)
  - 1560727: Search for proxy auth message in whole error string
    (aria.paradkar@gmail.com)
  - 1555384: get_libexecdir now returns a string instead of bytes
    (aria.paradkar@gmail.com)
  - Added generic set/unset and add/remove commands to syspurpose
    (crog@redhat.com)
  - ENT-488 syspurpose now warns if running in container (nmoumoul@redhat.com)
  - 1574706: Create python2-subscription-manager-rhsm properly
    (jhnidek@redhat.com)
  - Automatic rebuilding of updates.img on PXE Server (jhnidek@redhat.com)
  - 1574529: Fix rhsmcertd integer overflow on i386 & i686 (csnyder@redhat.com)
  - Respecting proxy port configured in rhsm.conf (oskar@wycislak.pl)


author: Christopher Snyder <csnyder@redhat.com> 1.22.1-1
changelog:
  - 1571998: Ignore HTB repos (nmoumoul@redhat.com)
  - 1589296: subman list option --after now named --afterdate
    (aparadka@redhat.com)
  - 1558411: Begin building dnf-plugin-subscription-manager for RHEL 7
    (csnyder@redhat.com)
  - Use constant defined in cerdirectory.py. (jhnidek@redhat.com)
  - 1553266: When d-bus methods are unavailable, show appropriate message. *
    Added a "safe call" mechanism that makes the initial dbus calls
    (entitlementService, configService, productsService) only if the service is
    available, tries to restart the rhsm service if possible, and otherwise
    failing gracefully. * Added new UI curtain that provides a meaningful message
    and advice to the end user. * Re-added utility method statusUpdateFailed that
    was accidentally deleted. (nmoumoul@redhat.com)
  - 1580996: Fix comparision of objects in Python 3 (ENT-578)
    (jhnidek@redhat.com)
  - Make xauth Idempotent again (csnyder@redhat.com)
  - Fixes missing locale issues while running nosetests (csnyder@redhat.com)
  - Remove freezegun (khowell@redhat.com)
  - 1576582: Make rhsm.full_fresh_on_yum=1 working again (ENT-534)
    (jhnidek@redhat.com)
  - ansible-fix: fixed ansible failing during vagrant up (aparadka@redhat.com)
  - Update the license of the subman-cockpit-plugin to GPLv2 (csnyder@redhat.com)
  - 1510920: Allow access to job cancellation API (wpoteat@redhat.com)
  - ENT-447 Add icons to RPM package for subman cockpit plugin
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.23.1-1
changelog:
  - Integrate Syspurpose DBus Signal with Cockpit (aparadka@redhat.com)
  - Change usage_type to usage (csnyder@redhat.com)
  - ENT-715 Sync syspurpose with server (csnyder@redhat.com)
  - 1609052: DNF Plugin needs config initiated earlier (wpoteat@redhat.com)
  - 1608963: Minimize packaging for python 3 (wpoteat@redhat.com)
  - Improve test setup for syspurpose tests. (awood@redhat.com)
  - Two simple fixes for syspurpose (jhnidek@redhat.com)
  - Raise ioerr when necessary during sp read (csnyder@redhat.com)
  - ENT-720 Adds the addons subcommand (csnyder@redhat.com)
  - 1602056: Added role subcommand ENT-719 (jhnidek@redhat.com)
  - Replace lsb-release in spec and Makefile (khowell@redhat.com)
  - Mock out syspurpose code from being executed in subman tests
    (csnyder@redhat.com)
  - ENT-584 syspurpose UTF-8 support & better formatting - All syspurpose
    operations now support UTF-8 - syspurpose.json now has user-friendly
    indentation (nmoumoul@redhat.com)
  - ENT-446 Report systempurpose on registration (csnyder@redhat.com)
  - 1512944: Fix up remaining python2 deps ENT-724 (csnyder@redhat.com)
  - ENT-721: Usage command (wpoteat@redhat.com)
  - ENT-590 Enhanced SyspurposeStore add/remove operations - 'add' will now not
    override an existing value that was added by the 'set' command, but it will
    be maintained and added in a list along with the newly added value. - 'add'
    will now not add an element to a list if the list already contains it (no
    duplicates). - 'remove' will now unset the current value, if that turns out
    to be scalar instead of being contained in a list. (nmoumoul@redhat.com)
  - Move syspurpose out of packages directory. (awood@redhat.com)
  - Correct small problems in syspurpose. (awood@redhat.com)
  - ansible vagrant QOL fixes (khowell@redhat.com)
  - ENT-723: Add System Purpose Status to System Status output
    (wpoteat@redhat.com)
  - Improve debug logging for release listing (khowell@redhat.com)
  - Remove other references to python-kitchen. (awood@redhat.com)
  - Make build_ext a proper dependency. (awood@redhat.com)
  - Add zanata.xml configuration file and gettext keys.pot (awood@redhat.com)
  - Move clean command to common build_ext module. (awood@redhat.com)
  - Only gather optparse strings in subscription-manager. (awood@redhat.com)
  - Move syspurpose source files to be under package directory.
    (awood@redhat.com)
  - Look for source files based on package directory locations.
    (awood@redhat.com)
  - Add gettext calls to syspurpose. (awood@redhat.com)
  - Load build_ext i18n commands in setup.py (awood@redhat.com)
  - Integrate Dbus signals with Cockpit GUI (aparadka@redhat.com)
  - Do not install subman-gui from setup.py by default (khowell@redhat.com)
  - ENT-591 Handle when syspurpose.json is missing & create it.
    (nmoumoul@redhat.com)
  - Fix indeterminate unit test failure. (awood@redhat.com)
  - Removal of python-kitchen (wpoteat@redhat.com)
  - ENT-731 Replaced syspurpose 'offerings' commands with 'role': - Removed
    commands 'add-offerings', 'remove-offerings', 'unset-offerings' - Added
    commands 'set-role' and 'unset-role' (nmoumoul@redhat.com)
  - ENT-589 Intentctl -> syspurpose (csnyder@redhat.com)
  - ENT-710: Add three_way_merge utility function (csnyder@redhat.com)
  - ENT-477: Add signal EntitlementsChanged (aparadka@redhat.com)
  - ENT-476: Add signal InstalledProductsChanged (aparadka@redhat.com)
  - 1594733: Fix GetStatus in com.redhat.RHSM1.Entitlement ENT-641
    (jhnidek@redhat.com)
  - Make vagrant setup more flexible (khowell@redhat.com)
  - ENT-475: Add signal ConfigChanged (aparadka@redhat.com)
  - 1581777: Reraise exception properly. ENT-566 (jhnidek@redhat.com)
  - Replace curly quote with straight quote (khowell@redhat.com)
  - Add implementation of filesystem watcher (aparadka@redhat.com)
  - 1581410: ENT-572: subman should require dnf-plugin-subscription-manager
    (adarshvritant@gmail.com)
  - ENT-478 com.redhat.RHSM1.Consumer D-Bus service object (jhnidek@redhat.com)
  - 1576423: Polished changes provided in #1816 and added unit test.
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.23.3-1
changelog:
  - 1606435: Rename the async module for compatibility with python 3.7; ENT-737
    (csnyder@redhat.com)
  - Cockpit/Syspurpose service integration fix (aparadka@redhat.com)
  - Display both new and old value in syspurpose diff message
    (csnyder@redhat.com)
  - Fix sending single value of addons. (jhnidek@redhat.com)
  - Fix synchronization of usage with candlepin (jhnidek@redhat.com)
  - 1596294: Fix displayin RHSM Spoke in Initial Setup (jhnidek@redhat.com)
  - Syspurpose field value lists [ENT-766] (wpoteat@redhat.com)
  - ENT-717: Syncing of syspurpose store with candlepin (jhnidek@redhat.com)
  - 1609048: Replacement of imp module with importlib; ENT-758
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.23.4-1
changelog:
  - 1600694: Log dbus exception tracebacks at the debug level
    (csnyder@redhat.com)
  - 1623368: Register a system without a syspurpose.json file
    (jhnidek@redhat.com)
  - Revert "Add sles version to dist" (cnsnyder@users.noreply.github.com)
  - 1596699: Handle non-existant rhsm-debug destination (ENT-780)
    (nmoumoul@redhat.com)
  - Sync system purpose for sub-man subcommands (jhnidek@redhat.com)
  - Add man page for syspurpose. (awood@redhat.com)
  - 1613968: DNF product-id plugin can install product cert; ENT-789
    (jhnidek@redhat.com)
  - Add sles version to dist (jsherril@redhat.com)
  - Remove extraneous include in setup() (khowell@redhat.com)
  - Updated translations (csnyder@redhat.com)
  - 1596001: Change syspurpose import error log level to debug level
    (csnyder@redhat.com)
  - 1602702: rhsmcertd did not close lock file; ENT-736 (jhnidek@redhat.com)
  - Adds the addons set of commands to syspurpose (csnyder@redhat.com)
  - 1581445: ENT-564: rhsm configuration manage_repos is not working on RHEL8
    (jhnidek@redhat.com)
  - Fix time stamps of pyc files (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.0-1
changelog:
  - Use the "service_level_agreement" attribute for the SlaCommand
    (csnyder@redhat.com)
  - 1623262: Make automatic enablement of yum plugins working again; ENT-820
    (jhnidek@redhat.com)
  - Start releasing to f29 (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.1-1
changelog:
  - Rename zypper plugin to rhsm (khowell@redhat.com)
  - 1632384: Sync SLA regardless of capability: (nmoumoul@redhat.com)
  - 1621783: Updated syspurpose fields to match expected values (crog@redhat.com)
  - 1633575: Update error message when syspurpose is not supported by server
    (csnyder@redhat.com)
  - 1614925: Fix grammar (csnyder@redhat.com)
  - Added support of modulemd to combined profile; ENT-834 (jhnidek@redhat.com)
  - 1620136: dnf plugin deletes prod cert as expected; ENT-773
    (jhnidek@redhat.com)
  - 1615944: Show help when no args are provided (csnyder@redhat.com)
  - 1614943: Fix bytes/unicode handling of dmi data (khowell@redhat.com)
  - 1618825: Rename de_DE.po and es_ES.po (awood@redhat.com)
  - Combined profile: WIP enabled repos (jhnidek@redhat.com)
  - Added list of enabled repos to combined profile; ENT-833 (jhnidek@redhat.com)
  - 1607955: WIP: polishing PR with bug fix of release --list
    (jhnidek@redhat.com)
  - Fixed name of capability and added two unit tests. (jhnidek@redhat.com)
  - Explict requires added for package we use directly (wpoteat@redhat.com)
  - 1581410: Eliminate potential for circular dependency (awood@redhat.com)
  - 1631076: subscription-manager rpm now requires python3-syspurpose
    (nmoumoul@redhat.com)
  - For tito build, clean the yarn cache (khowell@redhat.com)
  - Fix ubuntu compat for virt-who travis runs (khowell@redhat.com)
  - Fix RPMDiff issue with multilib (jhnidek@redhat.com)
  - Use Combined Profile reporting (jhnidek@redhat.com)
  - 1629073: No python3-dmidecode on aarch64, ppc64le (khowell@redhat.com)
  - Simplify and fix subpackages logic (khowell@redhat.com)
  - 1614653: Update intermediate CA (khowell@redhat.com)
  - Fix spelling to capitalize Workstation properly (bcourt@redhat.com)
  - 1607955: Try to use all entitlement certs for connection with CDN
    (jhnidek@redhat.com)
  - Use pre-provisioned centos7 box (khowell@redhat.com)
  - Vagrant: use ansible-role-subman-devel via galaxy (khowell@redhat.com)
  - Vagrant: skip provisioning if var needs_provision is false
    (khowell@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.2-1
changelog:
  - 1645205: Do not update ent certs inside containers (csnyder@redhat.com)
  - 1633304: Disable zypper product-id plugin. (awood@redhat.com)
  - Fedora documentation guidelines favor global over define. (awood@redhat.com)
  - Show installed profiles only for enabled modules (paji@redhat.com)
  - 1631339: Fix os.errno issue (rob@sandersmail.eu)
  - Add a missing comma in test_cache (nmoumoul@redhat.com)
  - Add module enabled and disabled information (paji@redhat.com)
  - 1636381: Fix up our detection of missing org for service-level list
    (csnyder@redhat.com)
  - 1616403: Better handling of missing locale use (wpoteat@redhat.com)
  - 1636381: Handle case of nonexistant org (nmoumoul@redhat.com)
  - Add scripts to setup local development environment (khowell@redhat.com)
  - 1633380: Add syspurpose compliance status cache - Altered the syspurpose
    compliance status connection call to use the
    /consumers/{uuid}/purpose_compliance API instead of fetching the consumer
    object and reading the syspurpose compliance field off of it. - Added new
    syspurpose compliance status cache saved in
    /var/lib/rhsm/cache/syspurpose_compliance_status.json similar to the
    entitlement status cache. - When the server is unreachable, we don't
    traceback, but rather use the new cache value instead. (nmoumoul@redhat.com)
  - 1639625: Tolerate server missing syspurpose fields (khowell@redhat.com)
  - 1639086: Fix vendor comparison (hyu@redhat.com)
  - Includes the installed module profiles (paji@redhat.com)
  - 1623390: Fix unregistered messaging in syspurpose (khowell@redhat.com)
  - 1637183: Replace redhat-uep.pem properly (khowell@redhat.com)
  - 1632797: Only save SLA set during register or attach if specified
    (csnyder@redhat.com)
  - Updated how syspurpose handles unsetting values (crog@redhat.com)
  - Update man page for report_package_profile option (nmoumoul@redhat.com)
  - Automatic commit of package [subscription-manager] release [1.24.1-1].
    (csnyder@redhat.com)
  - 1616366: Use LANG from environment (csnyder@redhat.com)
  - syspurpose no longer supresses JSON malformation errors (crog@redhat.com)
  - Rename zypper plugin to rhsm (khowell@redhat.com)
  - 1632384: Sync SLA regardless of capability: (nmoumoul@redhat.com)
  - 1621783: Updated syspurpose fields to match expected values (crog@redhat.com)
  - 1632248: User should be able to set/unset while not registered
    (csnyder@redhat.com)
  - 1633575: Update error message when syspurpose is not supported by server
    (csnyder@redhat.com)
  - 1614925: Fix grammar (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.3-1
changelog:
  - Add rhel 7.7 releaser (csnyder@redhat.com)
  - 1654531: Add proxy_scheme to rhsm.conf (csnyder@redhat.com)
  - 1665409: Update syspurpose status in cockpit addon (nmoumoul@redhat.com)
  - 1673838: Set trailing character '\0' at the end of cert content
    (jhnidek@redhat.com)
  - 1666516: Allow reporting of profile info on dnf transactions
    (csnyder@redhat.com)
  - 1633216: Use new libdnf API to reuse connection to repo; ENT-1111
    (jhnidek@redhat.com)
  - 1668947: set enable_metadata to 0 for disabled repos; ENT-1146
    (jhnidek@redhat.com)
  - 1666512: Add some details on dnf uploadprofile to rhsm.conf man page
    (csnyder@redhat.com)
  - More reliable PXE server and PXE client (jhnidek@redhat.com)
  - 1666516: Don't send package list, when report_package_profile=0; ENT-1097
    (jhnidek@redhat.com)
  - 1671734: Dont traceback on status syspurpose sync - Do not show an error or
    traceback when running the status command and the server is unreachable
    during syncing of syspurpose data. (nmoumoul@redhat.com)
  - 1668152: take into account syspurpose during initial-setup - Registering
    through initial-setup will now persist & use the syspurpose values that were
    set during the anaconda installation process. (nmoumoul@redhat.com)
  - 1661414: No message display when set service level by subscription
    manager[ENT-1106] (ojanus@redhat.com)
  - 1661400: Incorrect handling of response message (wpoteat@redhat.com)
  - 1652870: Stay consistent with Katello list (wpoteat@redhat.com)
  - ENT-978: Upgrade pxe-server/client to fedora29 - Also, now the RHSM spoke in
    anaconda initializes and logs in the rhsm.log. (nmoumoul@redhat.com)
  - 1660520: Modify spec file to require right version of libdnf.
    (jhnidek@redhat.com)
  - 1582317: Do not collect hardware facts twice; ENT-653 (jhnidek@redhat.com)
  - 1666373: Do not delete product certs for disabled repos; ENT-1034
    (jhnidek@redhat.com)
  - Supplements keyword is not available on rhel7 or centos7.
    (jhnidek@redhat.com)
  - 1634033: do not install conf file for non-existant dnf plugin
    (csnyder@redhat.com)
  - 1652870: handle new syspurpose status states - Now, the new syspurpose
    statuses 'matched', 'mismatched' and 'not specified' returned by the server
    will also be handled and shown. - In addition, for backwards compatibility,
    if the server returns one of 'valid', 'invalid' or 'partial' status, those
    will still be handled and shown too by subscription-manager.
    (nmoumoul@redhat.com)
  - 1632394: Supplement initial-setup-gui with our addon (csnyder@redhat.com)
  - 1654531: Make default repolist proxy to http protocol when not specified
    (wpoteat@redhat.com)
  - 1655083: Sync syspurpose on status command (csnyder@redhat.com)
  - 1658383: Ensure syspurpose has translations (csnyder@redhat.com)
  - 1624859: Simplify syspurpose bash completion (csnyder@redhat.com)
  - 1656598: Treat false as disabled when listing repos (csnyder@redhat.com)
  - 1663254: Remove "Red Hat Enterprise Linux Client/Desktop" role option
    (csnyder@redhat.com)
  - 1591399: Stop throwing exception on timeout to avoid stacktrace
    (wpoteat@redhat.com)
  - 1658409: Stop redhat.repo from growing exponentially (awood@redhat.com)
  - 1661219: Do not delete product certs for disabled repos; ENT-1034
    (jhnidek@redhat.com)
  - 1660224: Allow setting and unsetting of addons and service level
    (csnyder@redhat.com)
  - 1618901: Module name unknown (wpoteat@redhat.com)
  - 1643128: Do not execute subscription-manager dnf plugin twice; ENT-987
    (jhnidek@redhat.com)
  - 1660224: Use the result from SyncResult objects for showing syspurpose
    (csnyder@redhat.com)
  - Added several unit tests and refactoring of code to libdnf product ID plugin
    (jhnidek@redhat.com)
  - 1633277: syspurpose tool will now log in rhsm.log - The syspurpose tool will
    now log all communication with the server   in the rhsm.log - Added a lot of
    log statements in the key actions of the syspurpose   tool itself, to help
    with debugging. (nmoumoul@redhat.com)
  - 1636852 & 1646384: better auth handling when listing service-levels - When
    running service-level --list with invalid credentials,   dont traceback, but
    show the proper error to the user. - This is handled when either the
    --serverurl, or --username   and --password options are used.
    (nmoumoul@redhat.com)
  - 1654491: Use new API of DNF (jhnidek@redhat.com)
  - 1633264: Ensure we sync syspurpose on register (csnyder@redhat.com)
  - 1625214: send ConfigChanged event when file replaced - Now, the ConfigChanged
    event will be sent not only when a monitored   file is edited in place, but
    also when the whole file is replaced   with another who is moved/renamed to
    the same location & name. (nmoumoul@redhat.com)
  - 1654873: Add man entry for rhsmcertd.disable (csnyder@redhat.com)
  - 1654868: Add man page docs of the package_profile_on_trans option
    (csnyder@redhat.com)
  - 1638153: Restore service-level command for older servers (csnyder@redhat.com)
  - 1624859: Add bash completion for syspurpose aspects (csnyder@redhat.com)
  - 1633380: show syspurpose status Unknown when cache missing - When the server
    is unreachable and the syspurpose status cache   is missing, then don't
    traceback, but show status as 'Unknown'. - Also, when the server is
    reachable, but the system is unregisted,   show the 'Unknown' syspurpose
    status, but don't cache it. (nmoumoul@redhat.com)
  - 1642888: Add semanage advice on setting non-default proxy_port
    (csnyder@redhat.com)
  - 1651621: use cockpit-desktop to launch cockpit based gui (csnyder@redhat.com)
  - Bug fix: include debuginfo in RPM with debuginfo information
    (jhnidek@redhat.com)
  - Sync changes with Entitlement Server from both subman and syspurpose
    (csnyder@redhat.com)
  - 1618372: Print accessible content paths from X509 extension using rct
    (awood@redhat.com)
  - 1650323: dnf subcommand for profile uploads; ENT-984 (jhnidek@redhat.com)
  - 1599801: fix Python2 and Python3 incompatibility; ENT-776
    (jhnidek@redhat.com)
  - 1649125: setuptools naming change (wpoteat@redhat.com)
  - 1618498: cockpit will notify activation keys require org - When trying to
    register with activation keys in cockpit, now the proper message   will be
    displayed to the user when he doesn't also provide an organisation.
    (nmoumoul@redhat.com)
  - 1651669: Remove dbus-python from egg requirements (khowell@redhat.com)
  - Fix issue with Python 3.7 on Fedora 29. (jhnidek@redhat.com)
  - Fix several issues with os.errno (jhnidek@redhat.com)
  - 1650941: Fix value of Self-Support SLA in valid_fields.json
    (csnyder@redhat.com)
  - Fix builds of product-id plugin (khowell@redhat.com)
  - Fixed bug that caused crashes of PackageKit daemon. (jhnidek@redhat.com)
  - Small fixes of libdnf product-id plugin (jhnidek@redhat.com)
  - Disable rhsmcertd by config entry (wpoteat@redhat.com)
  - Typo fixes (khowell@redhat.com)
  - Add fixes from @kahowell (dellweg@atix.de)
  - Add dpkg-post-invoke hook deb_package_profile_upload (dellweg@atix.de)
  - Add apt-transport-katello (dellweg@atix.de)
  - Fall back to python package version (dellweg@atix.de)
  - Make AptRepoFile dependent on the existence of python-deb822
    (dellweg@atix.de)
  - Add dependencies (dellweg@atix.de)
  - Multiplex server_value_repo_logic for all packet managers (dellweg@atix.de)
  - Factor out repofile.py from repolib.py (dellweg@atix.de)
  - Make apt, yum and zypper equal siblings in repolib (dellweg@atix.de)
  - Add AptRepoFile (dellweg@atix.de)
  - Rename modules to use underscore instead of hyphen. (awood@redhat.com)
  - Remove zypper productid tests (for now) (khowell@redhat.com)
  - Fix service name in zypper tests (khowell@redhat.com)
  - Do not build libdnf plugin on RHEL 7 or Fedora 28. (awood@redhat.com)
  - Uniquify the module list (paji@redhat.com)
  - ENT-949: run the package profile reporting on the post_trans_hook for each
    transaction (wpoteat@redhat.com)
  - Add module that can be invoked to force package profile upload.
    (awood@redhat.com)
  - Polished libdnf product-id plugin accorind feedback from PR.
    (jhnidek@redhat.com)
  - 1632394 Fix error caused by changes in pyanaconda API. ENT-906
    (jhnidek@redhat.com)
  - Package product-id plugin (awood@redhat.com)
  - Remove macro forms of system executables (awood@redhat.com)
  - Change in-source build message to a warning. (awood@redhat.com)
  - Correct a few issues from code review. (awood@redhat.com)
  - Remove "hello world" plugin (awood@redhat.com)
  - Fixed almost all memory leaks from product-id plugin (jhnidek@redhat.com)
  - Make "Debug" default built type. (jhnidek@redhat.com)
  - Solve some warnings. (awood@redhat.com)
  - Added documentation about product-id plugin. (jhnidek@redhat.com)
  - Add docs. Deduplicate repo IDs. (awood@redhat.com)
  - Added some unit tests for reading product certificate. (jhnidek@redhat.com)
  - Get rid of remaining compile warnings. (jhnidek@redhat.com)
  - Incorporate productDB code. (awood@redhat.com)
  - Add option to make production ready code, added some more strict gcc options.
    (jhnidek@redhat.com)
  - Added more unit tests and fixed one bug. (jhnidek@redhat.com)
  - Added some basic test for creating handle and hook. (jhnidek@redhat.com)
  - Add incomplete method to write database. (awood@redhat.com)
  - Added basic support for testing product-id.c (jhnidek@redhat.com)
  - Fixed some memory leaks from productdb and unit tests. (jhnidek@redhat.com)
  - Additional product db work (awood@redhat.com)
  - Fix memory leaks and logging messages. (jhnidek@redhat.com)
  - Fixed issue with list of installed packages and small changes
    (jhnidek@redhat.com)
  - More productdb functions and tests. (awood@redhat.com)
  - Removing of unused product certs and productdb (jhnidek@redhat.com)
  - Code and tests for product-db. (awood@redhat.com)
  - Basic refactoring, add unit framework. (awood@redhat.com)
  - Fixed issue with variable substitution. (jhnidek@redhat.com)
  - Removed more memory leaks and improved printError(). (jhnidek@redhat.com)
  - Write the map of product ID to repos into JSON. (awood@redhat.com)
  - Added support for JSON-C into CMakeLists.txt. (jhnidek@redhat.com)
  - Fixed several memory leaks using Valgrind (jhnidek@redhat.com)
  - Rename method to denote it actually installs a cert. (awood@redhat.com)
  - Move hook method up to be with its friends. (awood@redhat.com)
  - Only install product certs from active repos. (awood@redhat.com)
  - Switch to CMake for product-id plugin by removing Makefile.
    (awood@redhat.com)
  - Make reading of product certificate more robust. (jhnidek@redhat.com)
  - Loging of productid plugin and put decompressed cert to /etc/pki/product
    (jhnidek@redhat.com)
  - Figure out what file name to use for the product cert. (awood@redhat.com)
  - Link product-id.so with zlib, libcrypto and libssl libraries.
    (jhnidek@redhat.com)
  - Gunzip the product certificate. (awood@redhat.com)
  - Find active packages (awood@redhat.com)
  - Faster method of fetching active repos. (jhnidek@redhat.com)
  - Look for active packages (awood@redhat.com)
  - Fetch productid file. (awood@redhat.com)
  - Ignore cmake build directories (awood@redhat.com)
  - Rename using hyphen (awood@redhat.com)
  - Add CMake file (awood@redhat.com)
  - Makefile and trivial version of product id plugin (awood@redhat.com)
  - Add note about using a local build. (awood@redhat.com)
  - Added debug printing to log file (testing of pkcon). (jhnidek@redhat.com)
  - Added more notes to README.md. (jhnidek@redhat.com)
  - Added README.md; fixed bug in plugin and added some \n to printf.
    (jhnidek@redhat.com)
  - Added initial test/example libdnf plugin (crog@redhat.com)
  - Clean up temp files after unit tests. (awood@redhat.com)
  - Add an environment variable to disable package profile reporting
    (awood@redhat.com)
  - 1642271: Do not set a None lang (csnyder@redhat.com)
  - Detect sles11 via /etc/SuSE-release (khowell@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.4-2
changelog:
  - 1685037: Ignore null repos when running using packagekit (csnyder@redhat.com)
  - 1666845: Always submit empty string for reset (csnyder@redhat.com)
  - 1666845: Always submit empty string for reset (csnyder@redhat.com)
  - 1666845: Do not set role or usage to the empty string (csnyder@redhat.com)
  - 1673973: Do not override sla on auto-attach (csnyder@redhat.com)
  - 1673973: Read syspurpose on register using cockpit (csnyder@redhat.com)
  - 1673934, 1673931: Two bug fixes of productid libdnf plugin; ENT-1165
    (jhnidek@redhat.com)
  - 1655778: Increase RHEL major version detection reliability
    (csnyder@redhat.com)
  - 1676982: Do not make duplicate sync calls on syspurpose show
    (csnyder@redhat.com)
  - 1654531: Add default for proxy_scheme in rhsm.conf (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.6-1
changelog:
  - 1700445: Do not disabled repos in redhat.repo; ENT-1261 (jhnidek@redhat.com)
  - 1591704: Handle disabled status when golden ticket is in play
    (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.7-1
changelog:
  - 1704662: Do not create corrupted redhat.repo (wrong scheme); ENT-1306
    (jhnidek@redhat.com)
  - 1703768: Display 'Status Details' correctly in GUI; ENT-1305
    (jhnidek@redhat.com)
  - 1699345: Do not perform proxy check under some circumstances.
    (awood@redhat.com)
  - 1698645: Ensure we use local syspurpose when there are network issues
    (csnyder@redhat.com)
  - 1698443: Proper callbacks in cert sorter (wpoteat@redhat.com)
  - 1697563: Suppress output when collecting profile (khowell@redhat.com)
  - 1696428: use enabled_metadata = 0 for disabled repositories
    (jhnidek@redhat.com)
  - 1669994: Use on_date on syspurpose status if specified (nmoumoul@redhat.com)
  - 1668152: Remove the Select SLA screen from initial-setup
    (nmoumoul@redhat.com)
  - 1660883: Better feedback for repo commands when not registered
    (wpoteat@redhat.com)
  - 1657173: Install cron service properly on SLES; ENT-1250 (jhnidek@redhat.com)
  - 1657171: Bug fix of .spec file specific for SuSE; ENT-1056
    (jhnidek@redhat.com)
  - 1637090: Do not send Host header twice, when m2crypto is used; ENT-1100
    (jhnidek@redhat.com)
  - 1621275: Less communication with candlepin server from sub-man plugin;
    ENT-923 (jhnidek@redhat.com)
  - 1708722: Only show syspurpose usage when necessary (csnyder@redhat.com)
  - 1688221: Update translations (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.10-1
changelog:
  - 1688221: update translations (csnyder@redhat.com)
  - Revert "1700445: Do not disabled repos in redhat.repo; ENT-1261"
    (csnyder@redhat.com)
  - Revert "1621275: Less communication with candlepin server from sub-man
    plugin; ENT-923" (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.11-1
changelog:
  - 1709728: Dialog with proxy conf didn't pop-up; ENT-1333 (jhnidek@redhat.com)
  - 1704421: Install only one prod cert, when RPM is available in more repos.
    (jhnidek@redhat.com)
  - 1710564: Make entitlement certs and keys world-readable (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.14-1
changelog:
  - 1739706: Proper messaging of syspurpose add-addons
    (jhnidek@redhat.com)
  - 1739707: GUI: Do not auto-attach, when golden ticket is used
    (jhnidek@redhat.com)
  - 1705017: Show in man page that --installed is the default for the list
    command (wpoteat@redhat.com)
  - 1737894: syspurpose attributes in list --consumed
    (jhnidek@redhat.com)
  - 1737894: Print roles and usage in list of subscriptions
    (jhnidek@redhat.com)
  - 1739705: Don't print traceback during list --available
    (jhnidek@redhat.com)
  - 1724712: Updating from System Type to Entitlement Type (waldirio@gmail.com)
  - 1739699: Fixed unsetting syspurpose attributes (jhnidek@redhat.com)
  - 1723803: Print reasons, why syspurpose status is mismatch
    (jhnidek@redhat.com)
  - 1652549: Addition of tests for heartbeat method (wpoteat@redhat.com)
  - 1652549: Connection method for hypervisor heartbeat (wpoteat@redhat.com)
  - 1739695: Add in a last_boot fact for parity with spacewalk facts
    (bryan.kearney@gmail.com)
  - 1702239: Fix traceback for syspurpose on rhel7 (jhnidek@redhat.com)
  - 1703054: Do not crash sub-man during unregistering
    (jhnidek@redhat.com)
  - 1739697: Syspurpose client to have the same behavior as SubMan when in
    conflict with server (wpoteat@redhat.com)
  - 1591315: Fewer warning messages when golden ticket is used
    (jhnidek@redhat.com)
  - 1520383: Use more appropriate log levels instead of info (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.19-1
changelog:
  - 1752059: corrected cron receving stdout mail for rhsmd run (crag@redhat.com)
  - 1733992: Update translations (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.25-1
changelog:
  - 1786236: Update repos quickly enough to allow yum install -y $package
    immediately in containers (csnyder@redhat.com)
  - 1788293: Update repos in postconfig_hook to see new repos immediately
    (csnyder@redhat.com)
  - 1788297: Duplicate messages are being reported by the yum plugin for
    subscription-manager (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.24.27-1
changelog:
  - 1796088: Added option --force for command refresh; ENT-2033
    (jhnidek@redhat.com)
  - Update releasers for new release (wpoteat@redhat.com)
  - 1702753: Fix cockpit plugin, when golden ticket is used; ENT-1287
    (jhnidek@redhat.com)
  - Bump sshpk from 1.13.1 to 1.16.1 in /cockpit
    (dependabot[bot]@users.noreply.github.com)
  - Bump eslint from 3.19.0 to 4.18.2 in /cockpit
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump stringstream from 0.0.5 to 0.0.6 in /cockpit
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump macaddress from 0.2.8 to 0.2.9 in /cockpit
    (dependabot[bot]@users.noreply.github.com)
  - Bump is-my-json-valid from 2.16.0 to 2.20.0 in /cockpit
    (dependabot[bot]@users.noreply.github.com)
  - 1719709: cockpit - Improve behavior when connection to D-Bus fails
    (mvollmer@redhat.com)
  - 1719702: cockpit - Fix overlapping update requests (mvollmer@redhat.com)
  - 1719697: cockpit - Fix detection of proxy while attaching
    (mvollmer@redhat.com)
  - Bump sshpk from 1.13.1 to 1.16.1 in /cockpit
    (dependabot[bot]@users.noreply.github.com)
  - Bump tar from 2.2.1 to 2.2.2 in /cockpit
    (dependabot[bot]@users.noreply.github.com)
  - cockpit plugin: Fix alignment and layout issues in register dialog
    (anilsson@redhat.com)
  - Fix subscription-manager-cockpit AppStream data (martin@piware.de)


author: William Poteat <wpoteat@redhat.com> 1.24.28-1
changelog:
  - 1794653: corrected missing quotes for config check; ENT-2010
    (crag@redhat.com)
  - Update to releasers (wpoteat@redhat.com)
  - 1803783: Added copytruncate option to logrotate conf file; ENT-2114
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.29-1
changelog:
  - 1569491: rhn-migrate-classic-to-rhsm should try to resolve product ID
    collisions (wpoteat@redhat.com)
  - 1688702: allow offline repo management (code@james.cassell.me)


author: William Poteat <wpoteat@redhat.com> 1.24.30-1
changelog:
  - 1816926: Fix "attach --auto" command; ENT-2242 (jhnidek@redhat.com)
  - 1775714: Do not install rhsmd and rhsm-icon on rhel8; ENT-1959
    (jhnidek@redhat.com)
  - 1763271: Golden ticket: do not print list of products; ENT-2017
    (jhnidek@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.24.32-1
changelog:
  - 1821830: Registration fails with a message "Restlib' object has no attribute
    '_get_cert_key_list' (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.24.33-1
changelog:
  - 1796833: RHEL 7.9 Tier 0 Localization (wpoteat@redhat.com)
  - 1818932: Using 'Simple Content Access' for access mode
    (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.24.36-1
changelog:
  - 1831104: When in Simple Content Access mode, subscription-manager should not
    complain that subscriptions aren't attached (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.24.37-1
changelog:
  - 1830994: Fix warning messages in dnf/yum (jhnidek@redhat.com)
  - 1823523: Detect rhsm-icon running without psutil (csnyder@redhat.com)
  - 1771921: Package profiles sends too early when registering a client
    (wpoteat@redhat.com)
  - 1688702: Generate redhat.repo in off-line mode; ENT-2302 (jhnidek@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.24.38-1
changelog:
  - 1837244: Fix wrong version provided by subscription-manager version; ENT-2388
    (jhnidek@redhat.com)
  - 1834792: Try to terminate rhsmd after timeout; ENT-2368 (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.39-1
changelog:
  - 1789457: Syspurpose exception message parsing (wpoteat@redhat.com)
  - 1725525: Mark one string for translation; ENT-1680 (jhnidek@redhat.com)
  - 1796833: Fix a few broken fr translations (csnyder@redhat.com)
  - 1796833: Update translations (csnyder@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.24.41-1
changelog:
  - 1842474: Update local and cache file during sync(); ENT-2433
    (jhnidek@redhat.com)
  - 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.42-1
changelog:
  - 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
  - 1796833: Update translations (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.43-1
changelog:
  - 1826300: Ignore auto-attach, when SCA mode is used
    (jhnidek@redhat.com)
  - 1850919: False positive log "rhsmd process exceeded runtime and was killed."
    (wpoteat@redhat.com)
  - 1868936: Do not print traceback, when profile upload failed
    (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.46-1
changelog:
  - 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
  - 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.49-1
changelog:
  - 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
  - [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.24.51-1
changelog:
  - 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
  - 1.24 Fix of automatic registration (jhnidek@redhat.com)
  - [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
  - [1.24] Backported automatic registration (jhnidek@redhat.com)
  - Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.24.52-1
changelog:
  - tito: update rhel-7.9 releaser (ptoscano@redhat.com)
  - managercli: fix RestlibException reporting for get_current_owner()
    (ptoscano@redhat.com)
  - refresh: avoid ExceptionMapper in case of RestlibException
    (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)
  - 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
  - 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
    (jhnidek@redhat.com)
  - 2097672: [RFE][1.28] Improve the message, when SCA is enabled
    (jhnidek@redhat.com)
  - Reverting disabling AutoAttach() and PoolAttach() in SCA mode
    (jhnidek@redhat.com)
  - cache: fix typo in debug message (ptoscano@redhat.com)
  - 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
  - 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
  - 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
  - managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
  - [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
  - Make code Python 2 compatible. (jhnidek@redhat.com)
  - 2060101: [1.24] Print correct status, when access mode has changed
    (jhnidek@redhat.com)
  - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
  - Fix failing tests (mhorky@redhat.com)
  - tests: drop test_po_files.py (ptoscano@redhat.com)
  - Ignore failing tests (mhorky@redhat.com)
  - ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
  - Alter import of rhsm.config functions (mhorky@redhat.com)
  - Add dependency constraints (mhorky@redhat.com)
  - Handle tests in containers better (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.24.53-1
changelog:
  - 2229752: [1.24] Hotfix of D-Bus policy (jhnidek@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - Stop requiring M2crypto (ptoscano@redhat.com)
  - tests: make M2Crypto optional (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com>
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - fix: 1.24 Add python-requests to the list of required RPMs
    (jhnidek@redhat.com)
  - fix: Pin lxml to last version supporting Python 2 (mhorky@redhat.com)
  - fix: Add missing package intltool to test script (jhnidek@redhat.com)


author: Lumír Balhar <lbalhar@redhat.com> - 12.1.0-7
changelog:
  - Fix CVE-2020-10108 and CVE-2020-10109 multiple HTTP request smuggling vulnderabilities
  Resolves: rhbz#1813439 rhbz#1813447
  - Remove useless macros definitions


author: Steve 'Ashcrow' Milner <me@stevemilner.org> - 1.4.6-1
changelog:
  - allow script creation without setuptools
  - fix problem with --relocate when bin/ has subdirs (fixes #12)
  - Allow more flexible .pth file fixup
  - make nt a required module, along with posix. it may not be a builtin module on jython
  - don't mess with PEP 302-supplied __file__, from CPython, and merge in a small startup optimization for Jython, from Jython


author: Steve 'Ashcrow' Milner <me@stevemilner.org> - 1.4.8-1
changelog:
  - update pip to 0.7
  - move regen-docs into bin/
  - Fix #31, make activate_this.py work on Windows (use Lib/site-packages)
  unset PYTHONHOME envioronment variable -- first step towards fixing the PYTHONHOME issue; see e.g. https://bugs.launchpad.net/virtualenv/+bug/290844
  - unset PYTHONHOME in the (Unix) activate script (and reset it in deactivate())
  - use the activate.sh in virtualenv.py via running bin/rebuild-script.py
  - add warning message if PYTHONHOME is set


author: Steve 'Ashcrow' Milner <me@stevemilner.org> - 1.5.1-1
changelog:
  - Added _weakrefset requirement for Python 2.7.1.
  - Add support for PyPy.
  - Uses a proper temporary dir when installing environment requirements.
  - Add --prompt option to be able to override the default prompt prefix.
  - Add fish and csh activate scripts.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.9.1-1
changelog:
  - Update to upstream 1.9.1 because of security issues with the bundled
    python-pip in older releases.  This is just a quick fix until a
    python-virtualenv maintainer can unbundle the python-pip package
    see: https://bugzilla.redhat.com/show_bug.cgi?id=749378


author: Tomas Orsava <torsava@redhat.com> - 1.10.1-3
changelog:
  - Added a patch that shows a custom error message when a FILE passed to
    virtualenv to be used as 'home dir' already exists and is NOT a directory.
  Resolves: rhbz#1306513


author: Charalampos Stratakis <cstratak@redhat.com> - 15.1.0-1
changelog:
  - Rebase to version 15.1.0
  - Disable automatic downloads from pypi on new venv creation
  Resolves: rhbz#1461154


author: Lumír Balhar <lbalhar@redhat.com> - 15.1.0-3
changelog:
  - Add three new patches for CVEs in bundled urllib3 and requests
  CVE-2018-20060, CVE-2019-11236, CVE-2018-18074
  Resolves: rhbz#1649153
  Resolves: rhbz#1700824
  Resolves: rhbz#1643829


author: Orion Poplawski <orion@cora.nwra.com> - 2.5.1-3
changelog:
  - Enable python3 builds for EPEL (bug #1395653)
  - Ship python2-jsonschema
  - Modernize spec
  - Use %license


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-2
changelog:
  - disable invocation of brp-python-bytecompile in postprocessing, since
  it would be with the wrong version of python (adapted from ivazquez'
  python3000 specfile)
  - use a custom implementation of __find_provides in order to filter out bogus
  provides lines for the various .so modules
  - fixup distutils/unixccompiler.py to remove standard library path from rpath
  (patch 1, was Patch0 in ivazquez' python3000 specfile)
  - split out libraries into a -libs subpackage
  - update summaries and descriptions, basing content on ivazquez' specfile
  - fixup executable permissions on .py, .xpm and .xbm files, based on work in
  ivazquez's specfile
  - get rid of DOS batch files
  - fixup permissions for shared libraries from non-standard 555 to standard 755
  - move /usr/bin/python*-config to the -devel subpackage
  - mark various directories as being documentation


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-3
changelog:
  - remove executable flag from various files that shouldn't have it
  - fix end-of-line encodings
  - fix a character encoding


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-4
changelog:
  - update patch0's setup of the crypt module to link it against libcrypt
  - update patch0 to comment "datetimemodule" back out, so that it is built
  using setup.py (see Setup, option 3), thus linking it statically against
  timemodule.c and thus avoiding a run-time "undefined symbol:
  _PyTime_DoubleToTimet" failure on "import datetime"


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-5
changelog:
  - fixup importlib/_bootstrap.py so that it correctly handles being unable to
  open .pyc files for writing (patch 2, upstream issue 7187)
  - actually apply the rpath patch (patch 1)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-6
changelog:
  - reword description, based on suggestion by amcnabb
  - fix the test_email and test_imp selftests (patch 3 and patch 4 respectively)
  - fix the test_tk and test_ttk_* selftests (patch 5)
  - fix up the specfile's handling of shebang/perms to avoid corrupting
  test_httpservers.py (sed command suggested by amcnabb)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-7
changelog:
  - remove commented-away patch 51 (python-2.6-distutils_rpm.patch): the -O1
  flag is used by default in the upstream code
  - "Makefile" and the config-32/64.h file are needed by distutils/sysconfig.py
  _init_posix(), so we include them in the core package, along with their parent
  directories (bug 531901)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-8
changelog:
  - add a provides of "python(abi)" (see bug 532118)
  - fix issues identified by a.badger in package review (bug 526126, comment 39):
    - use "3" thoughout metadata, rather than "3.*"
    - remove conditional around "pkg-config openssl"
    - use standard cleanup of RPM_BUILD_ROOT
    - replace hardcoded references to /usr with _prefix macro
    - stop removing egg-info files
    - use /usr/bin/python3.1 rather than /use/bin/env python3.1 when fixing
  up shebang lines
    - stop attempting to remove no-longer-present .cvsignore files
    - move the post/postun sections above the "files" sections


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-9
changelog:
  - add macros.python3 to the -devel subpackage, containing common macros for use
  when packaging python3 modules


author: Andrew McNabb <amcnabb@mcnabbs.org> - 3.1.1-10
changelog:
  - switched a few instances of "find |xargs" to "find -exec" for consistency.
  - made the description of __os_install_post more accurate.


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-11
changelog:
  - add %check section (thanks to Thomas Spura)
  - update patch 4 to use correct shebang line
  - get rid of stray patch file from buildroot


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-12
changelog:
  - remove build-time requirements on tix and tk, since we already have
  build-time requirements on the -devel subpackages for each of these (Thomas
  Spura)
  - replace usage of %define with %global (Thomas Spura)
  - remove forcing of CC=gcc as this old workaround for bug 109268 appears to
  longer be necessary
  - move various test files from the "tools"/"tkinter" subpackages to the "test"
  subpackage


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-14
changelog:
  - replace references to /usr with %{_prefix}; replace references to
  /usr/include with %{_includedir} (Toshio)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-15
changelog:
  - fix the URLs output by pydoc so they point at python.org's 3.1 build of the
  docs, rather than the 2.6 build


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-16
changelog:
  - use the %{_isa} macro to ensure that the python-devel dependency on python
  is for the correct multilib arch (#555943)
  - delete bundled copy of libffi to make sure we use the system one


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-19
changelog:
  - add %py3dir macro to macros.python3 (to be used during unified python 2/3
  builds for setting up the python3 copy of the source tree)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-20
changelog:
  - change python-3.1.1-config.patch to remove our downstream change to curses
  configuration in Modules/Setup.dist, so that the curses modules are built using
  setup.py with the downstream default (linking against libncursesw.so, rather
  than libncurses.so), rather than within the Makefile; add a test to %install
  to verify the dso files that the curses module is linked against the correct
  DSO (bug 539917; changes _cursesmodule.so -> _curses.so)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-21
changelog:
  - introduce %{dynload_dir} macro
  - explicitly list all lib-dynload files, rather than dynamically gathering the
  payload into a temporary text file, so that we can be sure what we are
  shipping
  - introduce a macros.pybytecompile source file, to help with packaging python3
  modules (Source3; written by Toshio)
  - rename "2to3-3" to "python3-2to3" to better reflect python 3 module packaging
  plans


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-22
changelog:
  - update python-3.1.1-config.patch to remove downstream customization of build
  of pyexpat and elementtree modules
  - add patch adapted from upstream (patch 7) to add support for building against
  system expat; add --with-system-expat to "configure" invocation
  - remove embedded copies of expat and zlib from source tree during "prep"


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-25
changelog:
  - split configure options into multiple lines for easy of editing
  - add systemtap static markers (wcohen, mjw, dmalcolm; patch 8), a systemtap
  tapset defining "python.function.entry" and "python.function.return" to make
  the markers easy to use (dmalcolm; source 5), and an example of using the
  tapset to the docs (dmalcolm; source 6) (rhbz:545179)


author: Thomas Spura <tomspur@fedoraproject.org> - 3.1.1-26
changelog:
  - rebuild for new package of redhat-rpm-config (rhbz:564527)
  - use 'install -p' when running 'make install'


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-27
changelog:
  - add pyfuntop.stp example (source 7)
  - convert usage of $$RPM_BUILD_ROOT to %{buildroot} throughout, for
  consistency with python.spec


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-1
changelog:
  - update to 3.1.2: http://www.python.org/download/releases/3.1.2/
  - drop upstreamed patch 2 (.pyc permissions handling)
  - drop upstream patch 5 (fix for the test_tk and test_ttk_* selftests)
  - drop upstreamed patch 200 (path-fixing script)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-5
changelog:
  - exclude test_http_cookies when running selftests, due to hang seen on
  http://koji.fedoraproject.org/koji/taskinfo?taskID=2088463 (cancelled after
  11 hours)
  - update python-gdb.py from v5 to py3k version submitted upstream


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-6
changelog:
  - build and install two different configurations of Python 3: debug and
  standard, packaging the debug build in a new "python3-debug" subpackage
  (patch 103)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-7
changelog:
  - add configure-time support for COUNT_ALLOCS and CALL_PROFILE debug options
  (patch 104); enable them and the WITH_TSC option within the debug build


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-10
changelog:
  - ensure that the compiler is invoked with "-fwrapv" (rhbz#594819)
  - reformat whitespace in audioop.c (patch 106)
  - CVE-2010-1634: fix various integer overflow checks in the audioop
  module (patch 107)
  - CVE-2010-2089: further checks within the audioop module (patch 108)
  - CVE-2008-5983: the new PySys_SetArgvEx entry point from r81399 (patch 109)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-11
changelog:
  - Fix an incompatibility between pyexpat and the system expat-2.0.1 that led to
  a segfault running test_pyexpat.py (patch 110; upstream issue 9054; rhbz#610312)


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.0.a1
changelog:
  - 3.2a1; add alphatag
  - rework %files in the light of PEP 3147 (__pycache__)
  - drop our configuration patch to Setup.dist (patch 0): setup.py should do a
  better job of things, and the %files explicitly lists our modules (r82746
  appears to break the old way of doing things).  This leads to various modules
  changing from "foomodule.so" to "foo.so".  It also leads to the optimized build
  dropping the _sha1, _sha256 and _sha512 modules, but these are provided by
  _hashlib; _weakref becomes a builtin module; xxsubtype goes away (it's only for
  testing/devel purposes)
  - fixup patches 3, 4, 6, 8, 102, 103, 105, 111 for the rebase
  - remove upstream patches: 7 (system expat), 106, 107, 108 (audioop reformat
  plus CVE-2010-1634 and CVE-2010-2089), 109 (CVE-2008-5983)
  - add machinery for rebuilding "configure" and friends, using the correct
  version of autoconf (patch 300)
  - patch the debug build's usage of COUNT_ALLOCS to be less verbose (patch 125)
  - "modulator" was removed upstream
  - drop "-b" from patch applications affecting .py files to avoid littering the
  installation tree


author: Thomas Spura <tomspur@fedoraproject.org> - 3.2-0.1.a1
changelog:
  - on 64bit "stdlib" was still "/usr/lib/python*" (modify *lib64.patch)
  - make find-provides-without-python-sonames.sh 64bit aware


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.3.a1
changelog:
  - Move test.support to core package (rhbz#596258)
  - Add various missing __pycache__ directories to payload


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.4.a1
changelog:
  - move most of the content of the core package to the libs subpackage, given
  that the libs aren't meaningfully usable without the standard libraries


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.5.b2
changelog:
  - 3.2b2
  - rework patch 3 (removal of mimeaudio tests), patch 6 (no static libs),
  patch 8 (systemtap), patch 102 (lib64)
  - remove patch 4 (rendered redundant by upstream r85537), patch 103 (PEP 3149),
  patch 110 (upstreamed expat fix), patch 111 (parallel build fix for grammar
  fixed upstream)
  - regenerate patch 300 (autotool intermediates)
  - workaround COUNT_ALLOCS weakref issues in test suite (patch 126, patch 127,
  patch 128)
  - stop using runtest.sh in %check (dropped by upstream), replacing with
  regrtest; fixup list of failing tests
  - introduce "pyshortver", "SOABI_optimized" and "SOABI_debug" macros
  - rework manifests of shared libraries to use "SOABI_" macros, reflecting
  PEP 3149
  - drop itertools, operator and _collections modules from the manifests as py3k
  commit r84058 moved these inside libpython; json/tests moved to test/json_tests
  - move turtle code into the tkinter subpackage


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.8.b2
changelog:
  - set EXTRA_CFLAGS to our CFLAGS, rather than overriding OPT, fixing a linker
  error with dynamic annotations (when configured using --with-valgrind)
  - fix the ppc build of the debug configuration (patch 130; rhbz#661510)


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.9.rc1
changelog:
  - 3.2rc1
  - rework patch 6 (static lib removal)
  - remove upstreamed patch 130 (ppc debug build)
  - regenerate patch 300 (autotool intermediates)
  - updated packaging to reflect upstream rewrite of "Demo" (issue 7962)
  - added libpython3.so and 2to3-3.2


author: David Malcolm <dmalcolm@redhat.com> - 3.2.1-1
changelog:
  - 3.2.1; refresh lib64 patch (102), subprocess unit test patch (129), disabling
  of static library build (due to Modules/_testembed; patch 6), autotool
  intermediates (patch 300)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.1-5
changelog:
  - re-enable and fix the --with-tsc option on ppc64, and rework it on 32-bit
  ppc to avoid aliasing violations (patch 130; rhbz#698726)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.2-2
changelog:
  - rewrite of "check", introducing downstream-only hooks for skipping specific
  cases in an rpmbuild (patch 132), and fixing/skipping failing tests in a more
  fine-grained manner than before; (patches 106, 133-142 sparsely, moving
  patches for consistency with python.spec: 128 to 134, 126 to 135, 127 to 141)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.2-3
changelog:
  - renumber and rename patches for consistency with python.spec (8 to 55, 106
  to 104, 6 to 111, 104 to 113, 105 to 114, 125, 131, 130 to 143)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.2-5
changelog:
  - support OpenSSL FIPS mode in _hashlib and hashlib; don't build the _md5 and
  _sha* modules, relying on _hashlib in hashlib (rhbz#563986; patch 146)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.3-1
changelog:
  - 3.2.3; refresh patch 102 (lib64); drop upstream patches 148 (gdbm magic
  values), 149 (__pycache__ fix); add patch 152 (test_gdb regex)


author: David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.1.b1
changelog:
  * Fri Jun 22 2012 David Malcolm <dmalcolm@redhat.com> - 3.2.3-10
  - use macro for power64 (rhbz#834653)


author: David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.1.b1
changelog:
  - 3.2 -> 3.3: https://fedoraproject.org/wiki/Features/Python_3.3
  - 3.3.0b1: refresh patches 3, 55, 102, 111, 113, 114, 134, 157; drop upstream
  patch 147; regenenerate autotools patch; drop "--with-wide-unicode" from
  configure (PEP 393); "plat-linux2" -> "plat-linux" (upstream issue 12326);
  "bz2" -> "_bz2" and "crypt" -> "_crypt"; egg-info files are no longer shipped
  for stdlib (upstream issues 10645 and 12218); email/test moved to
  test/test_email; add /usr/bin/pyvenv[-3.3] and venv module (PEP 405); add
  _decimal and _lzma modules; make collections modules explicit in payload again
  (upstream issue 11085); add _testbuffer module to tests subpackage (added in
  upstream commit 3f9b3b6f7ff0); fix test failures (patches 160 and 161);
  workaround erroneously shared _sysconfigdata.py upstream issue #14774; fix
  distutils.sysconfig traceback (patch 162); add BuildRequires: xz-devel (for
  _lzma module); skip some tests within test_socket (patch 163)


author: David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.3.b2
changelog:
  - 3.3b1 -> 3.3b2; drop upstreamed patch 152; refresh patches 3, 102, 111,
  134, 153, 160; regenenerate autotools patch; rework systemtap patch to work
  correctly when LANG=C (patch 55); importlib.test was moved to
  test.test_importlib upstream


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.3.0-8
changelog:
  - Fix error in platform.platform() when non-ascii byte strings are decoded to
    unicode (rhbz#922149)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.1-1
changelog:
  - Updated to Python 3.3.1.
  - Refreshed patches: 55 (systemtap), 111 (no static lib), 146 (hashlib fips),
  153 (fix test_gdb noise), 157 (uid, gid overflow - fixed upstream, just
  keeping few more downstream tests)
  - Removed patches: 3 (audiotest.au made it to upstream tarball)
  - Removed workaround for http://bugs.python.org/issue14774, discussed in
  http://bugs.python.org/issue15298 and fixed in revision 24d52d3060e8.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.1-3
changelog:
  - Add patch that enables building on ppc64p7 (replace the sed, so that
  we get consistent with python2 spec and it's more obvious that we're doing it.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.2-1
changelog:
  - Updated to Python 3.3.2.
  - Refreshed patches: 153 (gdb test noise)
  - Dropped patches: 175 (configure -Wformat, fixed upstream), 182 (gdb
  test threads)
  - Synced patch numbers with python.spec.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.4.0-0.1.a4
changelog:
  - Update to Python 3.4 alpha 4.
  - Refreshed patches: 55 (systemtap), 102 (lib64), 111 (no static lib),
  114 (statvfs flags), 132 (unittest rpmbuild hooks), 134 (fix COUNT_ALLOCS in
  test_sys), 143 (tsc on ppc64), 146 (hashlib fips), 153 (test gdb noise),
  157 (UID+GID overflows), 173 (ENOPROTOOPT in bind_port), 186 (dont raise
  from py_compile)
  - Removed patches: 129 (test_subprocess nonreadable dir - no longer fails in
  Koji), 142 (the mock issue that caused this is fixed)
  - Added patch 187 (remove thread atfork) - will be in next version
  - Refreshed script for checking pyc and pyo timestamps with new ignored files.
  - The fips patch is disabled for now until upstream makes a final decision
  what to do with sha3 implementation for 3.4.0.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.4.0-0.1.b1
changelog:
  - Update to Python 3.4 beta 1.
  - Refreshed patches: 102 (lib64), 111 (no static lib), 125 (less verbose COUNT
  ALLOCS), 141 (fix COUNT_ALLOCS in test_module), 146 (hashlib fips),
  157 (UID+GID overflows), 173 (ENOPROTOOPT in bind_port)
  - Removed patch 00187 (remove pthread atfork; upstreamed)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.4.0-0.1.b2
changelog:
  - Update to Python 3.4 beta 2.
  - Refreshed patches: 55 (systemtap), 146 (hashlib-fips), 154 (test_gdb noise)
  - Dropped patches: 114 (statvfs constants), 177 (platform unicode)


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.0-5
changelog:
  - Don't add Werror=declaration-after-statement for extension
    modules through setup.py (PyBT#21121)


author: Dan Horák <dan[at]danny.cz> - 3.4.1-7
changelog:
  - update the arch list where valgrind exists - %power64 includes also
      ppc64le which is not supported yet


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.2-1
changelog:
  - Update to 3.4.2
  - Refreshed patches: 156 (gdb autoload)
  - Removed: 195 (Werror declaration), 197 (CVE-2014-4650)


author: Till Maas <opensource@till.name> - 3.4.2-6
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.2-7
changelog:
  - Fixed undefined behaviour in faulthandler which caused test to hang on x86_64
    (http://bugs.python.org/issue23433)


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.3-1
changelog:
  - Updated to 3.4.3
  - BuildPython now accepts additional build options
  - Temporarily disabled test_gdb on arm (rhbz#1196181)


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.3-4
changelog:
  - Use 1024bit DH key in test_ssl
  - Use -O0 when compiling -debug build
  - Update pip version variable to the version we actually ship


author: Thomas Spura <tomspur@fedoraproject.org> - 3.4.3-4
changelog:
  - python3-devel: Require python-macros for version independant macros such as
    python_provide. See fpc#281 and fpc#534.


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-9
changelog:
  - Fix for: CVE-2016-0772 python: smtplib StartTLS stripping attack
  - Raise an error when STARTTLS fails
  - rhbz#1303647: https://bugzilla.redhat.com/show_bug.cgi?id=1303647
  - rhbz#1346345: https://bugzilla.redhat.com/show_bug.cgi?id=1346345
  - Fixed upstream: https://hg.python.org/cpython/rev/d590114c2394


author: Tomas Orsava <torsava@redhat.com> - 3.5.2-1
changelog:
  - Rebased to version 3.5.2
  - Set to work with pip version 8.1.2
  - Removed patches 207, 237, 241 as fixes are already contained in Python 3.5.2
  - Removed arch or environment specific patches 194, 196, 203, and 208
    as test builds indicate they are no longer needed
  - Updated patches 102, 146, and 242 to work with the new Python codebase
  - Removed patches 200, 201, 5000 which weren't even being applied


author: Tomas Orsava <torsava@redhat.com> - 3.5.2-2
changelog:
  - Updated .pyc 'bytecompilation with the newly installed interpreter' to also
    recompile optimized .pyc files
  - Removed .pyo 'bytecompilation with the newly installed interpreter', as .pyo
    files are no more
  - Resolves rhbz#1373635


author: Charalampos Stratakis <cstratak@redhat.com> - 3.5.2-6
changelog:
  - Use proper patch numbering and base upstream branch for
  porting ssl and hashlib modules to OpenSSL 1.1.0
  - Drop hashlib patch for now
  - Add riscv64 arch to 64bit and no-valgrind arches


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.0-7
changelog:
  - Fix error check, so that Random.seed actually uses OS randomness (rhbz#1412275)
  - Skip test_aead_aes_gcm during rpmbuild


author: Tomas Orsava <torsava@redhat.com> - 3.6.0-8
changelog:
  - Modify the runtime dependency of python3-libs on system-python-libs to use
    just the version and release number, but not the dist tag due to Modularity


author: Tomas Orsava <torsava@redhat.com> - 3.6.0-9
changelog:
  - Modify the runtime dependency of python3-libs on system-python-libs again,
    because previous attempt didn't work properly with dnf resolving mechanism


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.0-12
changelog:
  - BuildRequire the new dependencies of setuptools when rewheel mode is enabled
  in order for the virtualenvs to work properly


author: Michal Cyprian <mcyprian@redhat.com> - 3.6.0-18
changelog:
  - Set values of prefix and exec_prefix to /usr/local for
    /usr/bin/python* executables
  - Use new %_module_build macro


author: Michal Cyprian <mcyprian@redhat.com> - 3.6.0-19
changelog:
  - Revert "Set values of prefix and exec_prefix to /usr/local for
    /usr/bin/python* executables..." to prevent build failures
    of packages using alternate build tools


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.0-21
changelog:
  - Use proper command line parsing in _testembed
  - Backport of PEP 538: Coercing the legacy C locale to a UTF-8 based locale
    https://fedoraproject.org/wiki/Changes/python3_c.utf-8_locale


author: Iryna Shcherbina <ishcherb@redaht.com> - 3.6.1-0.1.rc1
changelog:
  - Update to Python 3.6.1 release candidate 1
  - Add patch 264 to skip a known test failure on aarch64


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.1-6
changelog:
  - Enable profile guided optimizations for x86_64 and i686 architectures
  - Update to a newer implementation of PEP 538
  - Update description to reflect that Python 3 is now the default Python


author: Tomas Orsava <torsava@redhat.com> - 3.6.1-7
changelog:
  - Added a dependency to the devel subpackage on python3-rpm-generators which
    have been excised out of rpm-build
  - Updated notes on bootstrapping Python on top of this specfile accordingly
  - Involves: rhbz#1410631, rhbz#1444925


author: Florian Weimer <fweimer@redhat.com> - 3.6.2-4
changelog:
  - Do not generate debuginfo subpackages (#1476593)
  - Rebuild with binutils fix for ppc64le (#1475636)


author: Tomas Orsava <torsava@redhat.com> - 3.6.2-5
changelog:
  - Dropped BuildRequires on db4-devel which was useful for Python 2 (module
    bsddb), however, no longer needod for Python 3
  - Tested building Python 3 with and without the dependency, all tests pass and
    filelists of resulting RPMs are identical


author: Michal Cyprian <mcyprian@redhat.com> - 3.6.2-7
changelog:
  - Revert "Add --executable option to install.py command"
    This enhancement is currently not needed and it can possibly
    collide with `pip --editable`option


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.2-8
changelog:
  - Have /usr/bin/2to3 (rhbz#1111275)
  - Provide 2to3 and idle3, list them in summary and description (rhbz#1076401)


author: Petr Viktorin <pviktori@redhat.com> - 3.6.2-11
changelog:
  - Add bcond for --without optimizations
  - Reword package descriptions
  - Remove Group declarations
  - Skip failing test_float_with_comma


author: Michal Cyprian <mcyprian@redhat.com> - 3.6.2-12
changelog:
  - Use python3 style of calling super() without arguments in rpath
    patch to prevent recursion in UnixCCompiler subclasses
  Resolves: rhbz#1458122


author: Petr Viktorin <pviktori@redhat.com> - 3.6.2-13
changelog:
  - Rename patch files to be consistent
  - Run autotools to generate the configure script before building
  - Merge lib64 patches (104 into 102)
  - Skip test_bdist_rpm using test config rather than a patch (removes patch 137)
  - Remove patches 157 and 186, which had test changes left over after upstreaming
  - Remove patch 188, a temporary workaround for hashlib tests
  - Merge patches 180, 206, 243, 5001 (architecture naming) into new patch 274
  - Move python2-tools conflicts to tools subpackage (it was wrongly in tkinter)


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.2-14
changelog:
  - Expat >= 2.1.0 is everywhere, remove explicit requires
  - Conditionalize systemtap-devel BuildRequires
  - For consistency, require /usr/sbin/ifconfig instead of net-tools


author: Petr Viktorin <pviktori@redhat.com> - 3.6.2-16
changelog:
  - Specfile cleanup
  - Make the main description also applicable to the SRPM
  - Add audiotest.au to the test package


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.2-19
changelog:
  - Move pathfix.py to bindir, https://github.com/fedora-python/python-rpm-porting/issues/24
  - Make the -devel package require redhat-rpm-config
  Resolves: rhbz#1496757


author: Björn Esser <besser82@fedoraproject.org> - 3.6.4-8
changelog:
  - Add patch to explicitly link _ctypes module with -ldl (#1537489)
  - Refactored patch for libxcrypt
  - Re-enable strict symbol checks in the link editor


author: Tomas Orsava <torsava@redhat.com> - 3.6.4-10
changelog:
  - Disable test_gdb for all arches and test_buffer for ppc64le in anticipation
    of the F28 mass rebuild
  - Re-enable these tests after the mass rebuild when they can be properly
    addressed


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.6.4-14
changelog:
  - Remove the python3-tools package (#rhbz 1312030)
  - Move /usr/bin/2to3 to python3-devel
  - Move /usr/bin/idle and idlelib to python3-idle
  - Provide python3-tools from python3-idle


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.4-15
changelog:
  - Filter out automatic /usr/bin/python3.X requirement,
    recommend the main package from libs instead
  Resolves: rhbz#1547131


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.4-18
changelog:
  - Fix the py_byte_compile macro to work on Python 2
  - Remove the pybytecompile macro file from the flat package
  Resolves: rhbz#1484993


author: Tomas Orsava <torsava@redhat.com> - 3.6.5-2
changelog:
  - Fix %py_byte_compile macro: when invoked with a Python 2 binary it also
    mistakenly ran py3_byte_compile


author: Lumir Balhar & Tomas Orsava <lbalhar@redhat.com> - 3.6.8-2
changelog:
  - Converting F28 python3 specfile to RHEL7
  - Updated the bootstrapping sequence
  - Disabled LTO because of buggy support for it in gcc on RHEL7
  - Removed deprecated system-python and platform-python tags and files
  - Removed a tag from `python3-libs` that recommended the `python3` package,
    because the Recommends tag doesn't work in RHEL7
  - Remove unnecessary unversioned requires on glibc and gdbm
  - Changes from RHEL8:
    - Move macros.pybytecompile to python-rpm-macros
    - Enable test_gdb, test_faulthandler
  - Changes from Fedora:
    - Security fix for CVE-2019-5010 (#1666519, #1666522)
    - Make sure we don't ship any exe files (not needed an prebuilt)
  Resolves: rhbz#1597718


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-4
changelog:
  - Add explicit conflicts with python34 < 3.4.9-3, which was the main python3
    package in EPEL before that version and contained conflicting files,
    e.g. /usr/bin/python3
  Resolves: rhbz#1597718


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-8
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1703535 and rhbz#1704364


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-18
changelog:
  - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
  Resolves: rhbz#1856481
  - Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
  Resolves: rhbz#1854926


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-19
changelog:
  - Security fix for CVE-2023-24329
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2173917


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-42.el7
changelog:
  - kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1779530]
  - kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1779530]
  - Resolves: bz#1779530
    (CVE-2019-11135 qemu-kvm-rhev: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-43.el7
changelog:
  - kvm-tcp_emu-Fix-oob-access.patch [bz#1791563 bz#1791570]
  - kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791570]
  - kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791570]
  - Resolves: bz#1791570
    (CVE-2020-7039 qemu-kvm-ma: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-44.el7
changelog:
  - kvm-iscsi-Avoid-potential-for-get_status-overflow.patch [bz#1794505]
  - kvm-iscsi-Cap-block-count-from-GET-LBA-STATUS-CVE-2020-1.patch [bz#1794505]
  - Resolves: bz#1794505
    (CVE-2020-1711 qemu-kvm-ma: QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server [rhel-7.8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-44.el7_8.1
changelog:
  - kvm-util-add-slirp_fmt-helpers.patch [bz#1798974]
  - kvm-tcp_emu-fix-unsafe-snprintf-usages.patch [bz#1798974]
  - Resolves: bz#1798974
    (CVE-2020-8608 qemu-kvm-ma: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.8.z])


author: Jon Maloy <jmaloy@redhat.com> - 2.12.0-45.el7
changelog:
  - kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802216]
  - kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802216]
  - kvm-target-i386-kvm-initialize-feature-MSRs-very-early.patch [bz#1791653]
  - kvm-target-i386-add-a-ucode-rev-property.patch [bz#1791653]
  - kvm-target-i386-kvm-initialize-microcode-revision-from-K.patch [bz#1791653]
  - kvm-target-i386-fix-TCG-UCODE_REV-access.patch [bz#1791653]
  - kvm-target-i386-check-for-availability-of-MSR_IA32_UCODE.patch [bz#1791653]
  - kvm-target-i386-enable-monitor-and-ucode-revision-with-c.patch [bz#1791653]
  - kvm-clean-up-callback-when-del-virtqueue.patch [bz#1721403]
  - kvm-virtio-add-ability-to-delete-vq-through-a-pointer.patch [bz#1721403]
  - kvm-virtio-reset-region-cache-when-on-queue-deletion.patch [bz#1721403]
  - kvm-virtio-net-delete-also-control-queue-when-TX-RX-dele.patch [bz#1721403]
  - Resolves: bz#1721403
    (After hot unplug virtio-net and vfio nic, hot plug vfio-pci device fails in Win2019 guest)
  - Resolves: bz#1791653
    (Backport: Passthrough host CPU microcode version to KVM guest if using CPU passthrough to RHEL 7.7/7.8)
  - Resolves: bz#1802216
    (Add support for newer glusterfs)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-46.el7
changelog:
  - kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1622976]
  - Resolves: bz#1622976
    (CVE-2018-15746 qemu-kvm-ma: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-47.el7
changelog:
  - kvm-file-posix-Use-max-transfer-length-segment-count-onl.patch [bz#1819253]
  - Resolves: bz#1819253
    (Fix overzealous I/O request splitting performance regression)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-48.el7
changelog:
  - kvm-vnc-add-magic-cookie-to-VncState.patch [bz#1810409]
  - kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810409]
  - Resolves: bz#1810409
    (CVE-2019-20382 qemu-kvm-rhev: QEMU: vnc: memory leakage upon disconnect [rhel-7])


author: Jon Maloy <jmaloy@redhat.com> - ma-2.12.0-48.el7_9.1
changelog:
  - kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869706]
  - Resolves: bz#1869706
    (CVE-2020-14364 qemu-kvm-ma: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])


author: Jon Maloy <jmaloy@redhat.com> - ma-2.12.0-48.el7_9.2
changelog:
  - kvm-hw-net-net_tx_pkt-fix-assertion-failure-in-net_tx_pk.patch [bz#1860961]
  - kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837568]
  - Resolves: bz#1860961
    (CVE-2020-16092 qemu-kvm-ma: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])
  - Resolves: bz#1837568
    (CVE-2020-1983 qemu-kvm-ma: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7.9.z]


author: Jan Grulich <jgrulich@redhat.com> - 5.9.7-3
changelog:
  - Fix multilib issue with qtcore-config.h header file
    Resolves: bz#1534528

  - Move libQt5EglFSDeviceIntegration lib into correct subpackage
    Resolves: bz#1792680


author: Jan Grulich <jgrulich@redhat.com> - 5.9.7-4
changelog:
  - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
    Resolves: bz#1814740
    Resolves: bz#1814685


author: Jan Grulich <jgrulich@redhat.com> - 5.9.7-2
changelog:
  - libwebp security fixes:
    Resolves: bz#1961742
    Resolves: bz#1961743
    Resolves: bz#1961744
    Resolves: bz#1961745


author: Sumit Bose <sbose@redhat.com> - 0.16.1-6
changelog:
  - Resolves: rhbz#1258745
  - Resolves: rhbz#1258488
  - Resolves: rhbz#1267563
  - Resolves: rhbz#1293390
  - Resolves: rhbz#1273924
  - Resolves: rhbz#1274368
  - Resolves: rhbz#1291924


author: Sumit Bose <sbose@redhat.com> - 0.16.1-10
changelog:
  Use current Samba options and read NetBIOS name from keytab
  - Resolves: rhbz#1484072
  - Resolves: rhbz#1370457


author: Sumit Bose <sbose@redhat.com> - 0.16.1-12
changelog:
  Fixes for RHEL-7.9
  - Resolves: rhbz#1625001
  - Resolves: rhbz#1625005
  - Resolves: rhbz#1638396
  - Resolves: rhbz#1714223
  - Resolves: rhbz#1832134


author: Petr Hracek <phracek@redhat.com> - 1.17.2-2
changelog:
  - rear does not require syslinux
  - changing to arch package so that syslinux is installed
  - Resolves: #1283927


author: Pavel Cahyna <pcahyna@redhat.com> - 2.00-5
changelog:
  - cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
    Upstream PR#1685, bz1532676


author: Pavel Cahyna <pcahyna@redhat.com> - 2.00-6
changelog:
  - Ensure that NetBackup is started automatically upon recovery (PR#1544)
    Also do not kill daemons spawned by sysinit.service at the service's end
    (PR#1610, applies to NetBackup and also to dhclient)
    Resolves #1506231
  - Print a warning if grub2-mkimage is about to fail and suggest what to do.
    bz#1492177
  - Update the patch for #1388653 to the one actually merged upstream (PR1418)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-1
changelog:
  - Rebase to version 2.4, drop patches integrated upstream
    Resolves #1534646 #1484051 #1498828 #1571266 #1496518


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-3
changelog:
  - Backport fixes for upstream bugs 1974 and 1975
  - Apply upstream PR1954 (record permanent MAC address for bond members)
  - Apply upstream PR2004 (support for custom network interface naming)
  - Backport fix for upstream bug 1926 (support for LACP bonding and teaming)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-7
changelog:
  - Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
    Resolves: rhbz1631183
  - Apply upstream patch PR1885
    Partition information recorded is unexpected when disk has 4K block size
    Resolves: rhbz1610638
  - Apply upstream patch PR1887
    LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
    Resolves: rhbz1610647
  - Apply upstream patch PR1993
    Automatically exclude $BUILD_DIR from the backup
    Resolves: rhbz1655956
  - Require xorriso instead of genisoimage, it is now the preferred method
    and supports files over 4GB in size.
    Resolves: rhbz1462189


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-8
changelog:
  - Backport fix for upstream issue 2187 (disklayout.conf file contains
    duplicate lines, breaking recovery in migration mode or when
    thin pools are used). PR2194, 2196.
    Resolves: rhbz1732328


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-9
changelog:
  - Apply upstream PR2173 - Cannot restore using Bacula method
    due to "bconsole" not showing its prompt
    Resolves: rhbz1726982


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-11
changelog:
  - Apply upstream PR2122: add additional NBU library path to fix support for
    NetBackup 8.
    Resolves: rhbz1700807
  - Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
    Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
    because it thinks that the Docker daemon is running and hits the problem
    with empty docker_root_dir.
  - Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
    list of users to clone, which can lead to bash overflow with lots of users
    and groups per user and to wrong passwd/group files in the rescue system.
    Resolves: rhbz1692575
  - Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
    chroot, which causes LVM to hang, especially if rebuilding initramfs.
    Resolves: rhbz1697815
  - Backport upstream PR 2218: avoid keeping build dir on errors
    by default when used noninteractively
    Resolves: rhbz1693608


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-15
changelog:
  - Backport PR2608:
    Fix setting boot path in case of UEFI partition (ESP) on MD RAID
    Resolves: rhbz1945869
  - Backport PR2625 & 2675
    Prevents accidental backup removal in case of errors
    Resolves: rhbz1843585
  - Fix rsync error and option handling
    Fixes metadata storage when rsync user is not root
    Resolves: rhbz1947064
  - Changes for NetBackup (NBU) support, upstream PR2544
    Resolves: rhbz2031833
  - On POWER add bootlist & ofpathname to the list of required programs
    conditionally (bootlist only if running under PowerVM, ofpathname
    always except on PowerNV) - upstream PR2665, add them to package
    dependencies
    Resolves: rhbz1983008
  - On POWER mount /sys in the chroot, otherwise ofpathname does not work
    and we risk ending up with not instlaling the bootloader properly
    Resolves: rhbz1983000


author: Nigel Jones <nigjones@redhat.com> - 0.9.2-1
changelog:
  - API update to bring in line with current version of Strata.
    Changes include:
     - Update to Recommendations API
     - Pagination of Cases
  - Additional fixes for proxy handling, and traceability of exceptions


author: Nigel Jones <nigjones@redhat.com> - 0.9.4-1
changelog:
  - Downloads:
    - Fixes to download handling to avoid excessive memory use
  - Localization/Internationalization:
    - Changes to support non-ASCII character input from character sets used in
      Red Hat GSS supported languages.


author: Mark Huth <mhuth@redhat.com> - 0.9.7-6
changelog:
  - Resolves: rhbz#1314606 - show progress with addattachment
  - Resolves: rhbz#1314607 - problem with addattachment -s switch


author: Pranita Ghole <pghole@redhat.com> - 0.13.0-0
changelog:
  - Resolves: rhbz#1653574- Add support for handling JSON response from API's
  - Resolves: rhbz#1765391- Add support to upload to and download from S3
  - Resolves: rhbz#2030066- RHST should use new Red Hat Secure FTP instead of dropbox for attachments


author: Nigel Jones <nigjones@redhat.com> - 0.9.2-1
changelog:
  - Various updates to source, including:
    - Pagination of 'listcases'
    - Better debugability
    - Splitfile abilities to 'addattachment'
    - Recommendations support
    - Changes to 'downloadall' attachment handling


author: Nigel Jones <nigjones@redhat.com> - 0.9.3-1
changelog:
  - Pagination bug fix to fix an offsetting bug that could contribute
    to missing, or duplicate results.


author: Nigel Jones <nigjones@redhat.com> - 0.9.4-1
changelog:
  - Diagnostics:
    - Opening a case will now trigger the case recommendations engine
      prior to opening the case.
    - Extracted backtraces from kernel vmcores can be passed to
      Ask Shadowman at the users request
  - Case Handling:
    - modifycase can be triggered on a selected case
    - Per above, opencase/diagnostics support
  - Plugins:
    - Ability for Vendor/L3 plugins
    - Sample 'ACMECorp' plugin + README.plugins in documentation directory.
  - Localization/Internationalization:
    - Changes to support non-ASCII character input from character sets used in
      Red Hat GSS supported languages.


author: Keith Robertson <kroberts@redhat.com> - 0.9.5-2
changelog:
  - Various updates including;
    - Filtering and pagination of listcases
    - casegroup command
    - opencase is in the analyze and diagnose commands


author: Keith Robertson <kroberts@redhat.com> - 0.9.5-4
changelog:
  - Resolves: rhbz#983909
  - Resolves: rhbz#983896
  - Resolves: rhbz#983903
  - Also various issues with btextract


author: Keith Robertson <kroberts@redhat.com> - 0.9.7-1
changelog:
  - Allow the CLI to return more than 50 results
  - TypeError: Incorrect padding with a specific password and not working further.
  - diagnose filename output gives URLs to the XML file, not html, and XML displays author sso name
  - getcase subcommand of redhat-support-tool doesn't show the group name


author: Mark Huth <mhuth@redhat.com> - 0.9.7-2
changelog:
  - bz1161141 - search plugin output gives URLs to the XML page, not html
  - bz1122161 - rfe for comment numbers and public/private markers in Case Discussion in getcase
  - bz1122164 - rfe for ability to add private comments and attachments to a case


author: Mark Huth <mhuth@redhat.com> - 0.9.7-3
changelog:
  - Resolves: rhbz#1168414 - rhel7 vmcore offset
  - Resolves: rhbz#1174461 - skip already downloaded attachments
  - Resolves: rhbz#1176473 - fix addattachment via FTP and proxy
  - Make debug_repos configurable via config option


author: Mark Huth <mhuth@redhat.com> - 0.9.7-4
changelog:
  - Resolves: rhbz#1196297 - typos in opencase
  - Resolves: rhbz#1196316 - change menus when closing a case
  - Fallback to ownerSSOName if associateSSOName filter gets 404 error in listcases
  - Other small fixes


author: Mark Huth <mhuth@redhat.com> - 0.9.8-6
changelog:
  - Resolves: rhbz#1104344 - add soscleaner
  - Resolves: rhbz#1273976 - caches bad password
  - Resolves: rhbz#1284306 - improve ? help
  - Resolves: rhbz#1284308 - show attachment sizes
  - Resolves: rhbz#1284309 - show attachment full path
  - Resolves: rhbz#1284314 - differentiate diagnose and analyze
  - Resolves: rhbz#1290909 - change case internal status
  - Resolves: rhbz#1351141 - reverse severity list


author: Vikas Rathee <vrathee@redhat.com> - 0.9.9-1
changelog:
  - Resolves: rhbz#1380109 - Include creation date and last modified date in Solution title details.
  - Resolves: rhbz#1342628 - When opening a new case, offer a default product.
  - Resolves: rhbz#1342632 - When opening a new case, offer to use the default case group of that user.


author: Vikas Rathee <vrathee@redhat.com> - 0.9.10-1
changelog:
  - Resolves: rhbz#1342627 - List cases by group.
  - Resolves: rhbz#1379619 - Inform when http_proxy environment variable is used.


author: Pranita Ghole <pghole@redhat.com> - 0.9.11-1
changelog:
  - Resolves: rhbz#1418701 - [RFE] Add functionality to generate and send sosreport after selecting the case
  - Resolves: rhbz#1592850 - [RFE] Generate and upload sosreport to case from cli
  - Resolves: rhbz#1678347 - Update redhat-support-tool to use latest soscleaner
  - Resolves: rhbz#1670033 - redhat-support-tool env var http_proxy does not work with user and password
  - Resolves: rhbz#1457436 -  [RFE][RHEL7] Include Reason in cases of failed proxy


author: Pranita Ghole <pghole@redhat.com> - 0.12.2-1
changelog:
  - Resolves: rhbz#1547763 - redhat-support-tool: UnboundLocalError: local variable 'timer' referenced before assignment


author: Pranita Ghole <pghole@redhat.com> - 0.13.0-0
changelog:
  - Resolves: rhbz#2030063- Add support for handling JSON response from API's 
  - Resolves: rhbz#1765392- Add support to upload to and download from S3
  - Resolves: rhbz#2030065- RHST should use new Red Hat Secure FTP instead of dropbox for attachments


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-14
changelog:
  - Merge Pacemaker cluster resource agents:
    * Add Source1.
    * Drop noarch. We have real binaries now.
    * Update BuildRequires.
    * Update all relevant prep/build/install/files/description sections.


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.0-16
changelog:
  - Create an ldirectord package
  - Update Pacameker agents to upstream version: 2198dc90bec4
    + Build: Import ldirectord.
    + Ensure HA_VARRUNDIR has a value to substitute
    + High: Add findif tool (mandatory for IPaddr/IPaddr2)
    + High: IPv6addr: new nic and cidr_netmask parameters
    + High: postfix: new resource agent
    + Include license information
    + Low (LF 2159): Squid: make the regexp match more precisely output of netstat
    + Low: configure: Fix package name.
    + Low: ldirectord: add dependency on $remote_fs.
    + Low: ldirectord: add mandatory required header to init script.
    + Medium (LF 2165): IPaddr2: remove all colons from the mac address before passing it to send_arp
    + Medium: VirtualDomain: destroy domain shortly before timeout expiry
    + Medium: shellfuncs: Make the mktemp wrappers work.
    + Remove references to Echo function
    + Remove references to heartbeat shellfuncs.
    + Remove useless path lookups
    + findif: actually include the right header. Simplify configure.
    + ldirectord: Remove superfluous configure artifact.
    + ocf-tester: Fix package reference and path to DTD.


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.3-3
changelog:
  - Update Pacameker agents to upstream version: 099c0e5d80db
    + Add the ha_parameter function back into .ocf-shellfuncs.
    + Bug bnc#534803 - Provide a default for MAILCMD
    + Fix use of undefined macro @HA_NOARCHDATAHBDIR@
    + High (LF 2138): IPsrcaddr: replace 0/0 with proper ip prefix (thanks to Michael Ricordeau and Michael Schwartzkopff)
    + Import shellfuncs from heartbeat as badly written RAs use it
    + Medium (LF 2173): nfsserver: exit properly in nfsserver_validate
    + Medium: RA: Filesystem: implement monitor operation
    + Medium: RA: VirtualDomain: loop on status if libvirtd is unreachable
    + Medium: RA: VirtualDomain: loop on status if libvirtd is unreachable (addendum)
    + Medium: RA: iSCSILogicalUnit: use a 16-byte default SCSI ID
    + Medium: RA: iSCSITarget: be more persistent deleting targets on stop
    + Medium: RA: portblock: add per-IP filtering capability
    + Medium: mysql-proxy: log_level and keepalive parameters
    + Medium: oracle: drop spurious output from sqlplus
    + RA: Filesystem: allow configuring smbfs mounts as clones


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.4-2
changelog:
  - Update Pacameker agents to upstream version: e2338892f59f
    + High: send_arp - turn on unsolicited mode for compatibilty with the libnet version's exit codes
    + High: Trap sigterm for compatibility with the libnet version of send_arp
    + Medium: Bug - lf#2147: IPaddr2: behave if the interface is down
    + Medium: IPv6addr: recognize network masks properly
    + Medium: RA: VirtualDomain: avoid needlessly invoking "virsh define"


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.5-2
changelog:
  - Update Pacameker agents to upstream version: bc00c0b065d9
    + High: RA: introduce OCF_FUNCTIONS_DIR, allow it to be overridden (LF2239)
    + High: doc: add man pages for all RAs (LF2237)
    + High: syslog-ng: new RA
    + High: vmware: make meta-data work and several cleanups (LF 2212)
    + Medium: .ocf-shellfuncs: add ocf_is_probe function
    + Medium: Dev: make RAs executable (LF2239)
    + Medium: IPv6addr: ifdef out the ip offset hack for libnet v1.1.4 (LF 2034)
    + Medium: add mercurial repository version information to .ocf-shellfuncs
    + Medium: build: add perl-MailTools runtime dependency to ldirectord package (LF 1469)
    + Medium: iSCSITarget, iSCSILogicalUnit: support LIO
    + Medium: nfsserver: use check_binary properly in validate (LF 2211)
    + Medium: nfsserver: validate should not check if nfs_shared_infodir exists (thanks to eelco@procolix.com) (LF 2219)
    + Medium: oracle/oralsnr: export variables properly
    + Medium: pgsql: remove the previous backup_label if it exists
    + Medium: postfix: fix double stop (thanks to Dinh N. Quoc)
    + RA: LVM: Make monitor operation quiet in logs (bnc#546353)
    + RA: Xen: Remove instance_attribute "allow_migrate" (bnc#539968)
    + ldirectord: OCF agent: overhaul


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.6-1
changelog:
  - New rgmanager resource agents upstream release
  - spec file update:
    * use global instead of define
    * use new Source0 url
    * use resource-agents macro more aggressively


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.6-2
changelog:
  - Update Pacameker agents to upstream version: c76b4a6eb576
    + High: RA: VirtualDomain: fix forceful stop (LF 2283)
    + High: apache: monitor operation of depth 10 for web applications (LF 2234)
    + Medium: IPaddr2: CLUSTERIP/iptables rule not always inserted on failed monitor (LF 2281)
    + Medium: RA: Route: improve validate (LF 2232)
    + Medium: mark obsolete RAs as deprecated (LF 2244)
    + Medium: mysql: escalate stop to KILL if regular shutdown doesn't work


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.8-1
changelog:
  - New rgmanager resource agents upstream release
    Resolves: rhbz#548133, rhbz#565907, rhbz#545602, rhbz#555901
    Resolves: rhbz#564471, rhbz#515717, rhbz#557128, rhbz#536157
    Resolves: rhbz#455300, rhbz#561416, rhbz#562237, rhbz#537201
    Resolves: rhbz#536962, rhbz#553383, rhbz#556961, rhbz#555363
    Resolves: rhbz#557128, rhbz#455300, rhbz#557167, rhbz#459630
    Resolves: rhbz#532808, rhbz#556603, rhbz#554968, rhbz#555047
    Resolves: rhbz#554968, rhbz#555047
  - spec file update:
    * update spec file copyright date
    * use bz2 tarball


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.9-1
changelog:
  - New rgmanager resource agents upstream release
    Resolves: rhbz#455300, rhbz#568446, rhbz#561862, rhbz#536902
    Resolves: rhbz#512171, rhbz#519491


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.9-2
changelog:
  - Resolves: rhbz#572993 - Patched build process to correctly generate ldirectord man page
  - Resolves: rhbz#574732 - Add libnet-devel as a dependancy to ensure IPaddrv6 is built


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.10-1
changelog:
  - New rgmanager resource agents upstream release
    Resolves: rhbz#519491, rhbz#570525, rhbz#571806, rhbz#574027
    Resolves: rhbz#574215, rhbz#574886, rhbz#576322, rhbz#576335
    Resolves: rhbz#575103, rhbz#577856, rhbz#577874, rhbz#578249
    Resolves: rhbz#578625, rhbz#578626, rhbz#578628, rhbz#578626
    Resolves: rhbz#579621, rhbz#579623, rhbz#579625, rhbz#579626
    Resolves: rhbz#579059


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.10-2
changelog:
  - New pacemaker agents upstream release
    + High: RA: vmware: fix set_environment() invocation (LF 2342)
    + High: RA: vmware: update to version 0.2
    + Medium: Filesystem: prefer /proc/mounts to /etc/mtab for non-bind mounts (lf#2388)
    + Medium: IPaddr2: don't bring the interface down on stop (thanks to Lars Ellenberg)
    + Medium: IPsrcaddr: modify the interface route (lf#2367)
    + Medium: ldirectord: Allow multiple email addresses (LF 2168)
    + Medium: ldirectord: fix setting defaults for configfile and ldirectord (lf#2328)
    + Medium: meta-data: improve timeouts in most resource agents
    + Medium: nfsserver: use default values (lf#2321)
    + Medium: ocf-shellfuncs: don't log but print to stderr if connected to a terminal
    + Medium: ocf-shellfuncs: don't output to stderr if using syslog
    + Medium: oracle/oralsnr: improve exit codes if the environment isn't valid
    + Medium: RA: iSCSILogicalUnit: fix monitor for STGT
    + Medium: RA: make sure that OCF_RESKEY_CRM_meta_interval is always defined (LF 2284)
    + Medium: RA: ManageRAID: require bash
    + Medium: RA: ManageRAID: require bash
    + Medium: RA: VirtualDomain: bail out early if config file can't be read during probe (Novell 593988)
    + Medium: RA: VirtualDomain: fix incorrect use of __OCF_ACTION
    + Medium: RA: VirtualDomain: improve error messages
    + Medium: RA: VirtualDomain: spin on define until we definitely have a domain name
    + Medium: Route: add route table parameter (lf#2335)
    + Medium: sfex: don't use pid file (lf#2363,bnc#585416)
    + Medium: sfex: exit with success on stop if sfex has never been started (bnc#585416)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.11-1
changelog:
  - new upstream release
    Resolves: rhbz#583945, rhbz#581047, rhbz#576330, rhbz#583017
    Resolves: rhbz#583019, rhbz#583948, rhbz#584003, rhbz#582017
    Resolves: rhbz#555901, rhbz#582754, rhbz#582573, rhbz#581533
  - Switch to file based Requires.
    Also address several other problems related to missing runtime
    components in different agents.
    With the current Requires: set, we guarantee all basic functionalities
    out of the box for lvm/fs/clusterfs/netfs/networking.
    Resolves: rhbz#570008


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.12-1
changelog:
  - New pacemaker agents upstream release: a7c0f35916bf
    + High: pgsql: properly implement pghost parameter
    + High: RA: mysql: fix syntax error
    + High: SAPInstance RA: do not rely on op target rc when monitoring clones (lf#2371)
    + High: set the HA_RSCTMP directory to /var/run/resource-agents (lf#2378)
    + Medium: IPaddr/IPaddr2: add a description of the assumption in meta-data
    + Medium: IPaddr: return the correct code if interface delete failed
    + Medium: nfsserver: rpc.statd as the notify cmd does not work with -v (thanks to Carl Lewis)
    + Medium: oracle: reduce output from sqlplus to the last line for queries (bnc#567815)
    + Medium: pgsql: implement "config" parameter
    + Medium: RA: iSCSITarget: follow changed IET access policy


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-1
changelog:
  - new upstream release
    Resolves: rhbz#585217, rhbz#586100, rhbz#581533, rhbz#582753
    Resolves: rhbz#582754, rhbz#585083, rhbz#587079, rhbz#588890
    Resolves: rhbz#588925, rhbz#583789, rhbz#589131, rhbz#588010
    Resolves: rhbz#576871, rhbz#576871, rhbz#590000, rhbz#589823


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.13-1
changelog:
  - new upstream release
    Resolves: rhbz#592103, rhbz#593108, rhbz#578617, rhbz#594626
    Resolves: rhbz#594511, rhbz#596046, rhbz#594111, rhbz#597002
    Resolves: rhbz#599643


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.14-1
changelog:
  - new upstream release
    Resolves: rhbz#553383, rhbz#557563, rhbz#578625, rhbz#591003
    Resolves: rhbz#593721, rhbz#593726, rhbz#595455, rhbz#595547
    Resolves: rhbz#596918, rhbz#601315, rhbz#604298, rhbz#606368
    Resolves: rhbz#606470, rhbz#606480, rhbz#606754, rhbz#606989
    Resolves: rhbz#607321, rhbz#608154, rhbz#608887, rhbz#609181
    Resolves: rhbz#609866, rhbz#609978, rhbz#612097, rhbz#612110
    Resolves: rhbz#612165, rhbz#612941, rhbz#614127, rhbz#614356
    Resolves: rhbz#614421, rhbz#614457, rhbz#614961, rhbz#615202
    Resolves: rhbz#615203, rhbz#615255, rhbz#617163, rhbz#617566
    Resolves: rhbz#618534, rhbz#618703, rhbz#618806, rhbz#618814


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.16-1
changelog:
  - new upstream release
    Resolves: rhbz#619096, rhbz#614046, rhbz#620679, rhbz#619680
    Resolves: rhbz#621562, rhbz#621694, rhbz#608887, rhbz#622844
    Resolves: rhbz#623810, rhbz#617306, rhbz#623816, rhbz#624691
    Resolves: rhbz#622576


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.17-1
changelog:
  - new upstream release
    Resolves: rhbz#632595, rhbz#633856, rhbz#632385, rhbz#628013
    Resolves: rhbz#621313, rhbz#595383, rhbz#580492, rhbz#605733
    Resolves: rhbz#636243, rhbz#591003, rhbz#637913, rhbz#634718
    Resolves: rhbz#617247, rhbz#617247, rhbz#617234, rhbz#631943
    Resolves: rhbz#639018


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.1.0-1
changelog:
  - new upstream release
  - spec file update:
    Update upstream URL
    Update source URL
    use standard configure macro
    use standard make invokation


author: Chris Feist <cfeist@redhat.com> - 3.9.2-3.8
changelog:
  - Remove cluster-glue-libs-devel
  - Disable IPv6addr & sfex to fix deps on libplumgpl & libplum (due to
    disappearance of cluster-glue in F18)


author: David Vossel <dvossel@redhat.com> - 3.9.5-5
changelog:
  - Merges redhat provider into heartbeat provider. Remove
    rgmanager's redhat provider.

    Resolves: rhbz#917681
    Resolves: rhbz#928890
    Resolves: rhbz#952716
    Resolves: rhbz#960555


author: David Vossel <dvossel@redhat.com> - 3.9.5-7
changelog:
  - Detect duplicate resources with the same volgrpname
    name when using exclusive activation with tags

    Resolves: # rhbz984054


author: David Vossel <dvossel@redhat.com> - 3.9.5-8
changelog:
  - Add runtime dependencies section for Heartbeat agents.
  - Fix multi-lib inconsistencies found during rpm diff testing.
  - Add dist field back to rpm release name.


author: David Vossel <dvossel@redhat.com> - 3.9.5-10
changelog:
  - Removes ldirectord package
  - Puts sap agents and connector script in subpackage
  - exclude unsupported packages
  - symlink ipaddr to ipaddr2 so only a single agent is supported


author: David Vossel <dvossel@redhat.com> - 3.9.5-14
changelog:
  - Add ability for apache agent to perform simple monitoring
    of server request/response without requiring server-status
    to be enabled.
  - Fixes invalid return statement in LVM agent.
  - Oracle TNS_ADMIN option 

    Resolves: rhbz#917806
    Resolves: rhbz#917681
    Resolves: rhbz#799065


author: David Vossel <dvossel@redhat.com> - 3.9.5-15
changelog:
  - Update VirtualDomain heartbeat agent for heartbeat merger.
  - Includes upstream fixes for pacemaker_remote lxc test case.

    Resolves: rhbz#917681


author: David Vossel <dvossel@redhat.com> - 3.9.5-16
changelog:
  - Fixes issue with mysql agent not being able to set transient
    attributes on local node correctly.
  - Fixes bash syntax error in VirtualDomain during 'stop'
  - Fixes VirtualDomain default hypervisor usage.
  - Fixes VirtualDomain 'start' of pre-defined domain

    Resolves: rhbz#917681
    Resolves: rhbz#1014641
    Resolves: rhbz#1016140


author: David Vossel <dvossel@redhat.com> - 3.9.5-17
changelog:
  - Split send_ua utility out of IPv6addr.c source so it can be
    re-used in IPaddr2 without requiring cluster-glue.
  - Fixes issue with pgsql and SAPInstance not setting transient
    attributes correctly when local corosync node name is not
    equal to 'uname -n'
  - High: ocft: Fedora supported test cases

    Resolves: rhbz#917681


author: David Vossel <dvossel@redhat.com> - 3.9.5-18
changelog:
  - Remove support for (nginx, mysql-proxy, rsyslog). nginx and
    mysql-proxy are not a supported projects. Rsyslog is not an
    agent we will be supporting in an HA environment.

    Resolves: rhbz#917681


author: David Vossel <dvossel@redhat.com> - 3.9.5-20
changelog:
  - tomcat agent updates for pacemaker support
  - slapd agent updates for pacemaker support
  - Fixes missing etab file required for nfsserver

    Resolves: rhbz#1033016
    Resolves: rhbz#917681


author: David Vossel <dvossel@redhat.com> - 3.9.5-24
changelog:
  - Addition of the clvmd resource-agent
  - Support monitoring qemu based VirtualDomain resources without
    requiring libvirtd to be running.

    Resolves: rhbz#1064512
    Resolves: rhbz#1060367


author: David Vossel <dvossel@redhat.com> - 3.9.5-25
changelog:
  - Rename clvmd agent to clvm to avoid problems associated
    with having a resource-agent named the same exact name
    as the binary the agent manages.

    Resolves: rhbz#1064512


author: David Vossel <dvossel@redhat.com> - 3.9.5-26
changelog:
  - Handle monitor qemu based VirtualDomain resources without
    requiring libvirtd even if configuration file does not
    contain an 'emulator' value pointing to the emulator binary.

    Resolves: rhbz#1060367


author: David Vossel <dvossel@redhat.com> - 3.9.5-28
changelog:
  - Updates to nfs server related agent.
  - Introduces nfsnotify for sending NFSv3 NSM state change
    notifications allowing NFSv3 clients to reclaim locks.

    Resolves: rhbz#1091101


author: David Vossel <dvossel@redhat.com> - 3.9.5-29
changelog:
  - Support the check_user and check_passwd galera resource-agent
    options.
  - Minor NFS agent updates.

    Resolves: rhbz#1116166
    Resolves: rhbz#1091101


author: David Vossel <dvossel@redhat.com> - 3.9.5-30
changelog:
  - Support monitor of lxc without requiring libvirt.
  - Wait for filesystem modules to load during start.
  - Warn users managing clustered LVM when lvmetad is in use.
  - Restore VirtualDomain default start stop timeout values.
  - Support exit reason string
  - Auto set lvm locking type to clustered when clvmd is in use.

  Resolves: rhbz# 1083041
  Resolves: rhbz# 1083231
  Resolves: rhbz# 1097593
  Resolves: rhbz# 1105655
  Resolves: rhbz# 1128933
  Resolves: rhbz# 773395


author: David Vossel <dvossel@redhat.com> - 3.9.5-31
changelog:
  - Man page updates give pcs config examples
  - add iscsi agent support
  - add infiniband support to ethmonitor
  - add resource-agent support of exit reason string
  - add safe umount option to Filesystem resource agent

    Resolves: rhbz#1058102
    Resolves: rhbz#1118029
    Resolves: rhbz#1122285
    Resolves: rhbz#1128933
    Resolves: rhbz#1095944


author: David Vossel <dvossel@redhat.com> - 3.9.5-32
changelog:
  - Fixes iSCSILogicalUnit syntax error
  - Fixes mysql stop operation when db storage is unavailable

    Resolves: rhbz#1118029
    Resolves: rhbz#1138871


author: David Vossel <dvossel@redhat.com> - 3.9.5-33
changelog:
  - Merges latest upstream patches for galera agent
  - Merges latest upstream patchs for exit reason string

    Resolves: rhbz#1116166
    Resolves: rhbz#1128933


author: David Vossel <dvossel@redhat.com> - 3.9.5-34
changelog:
  - Fixes mysql agents behavior when monitoring resource instance
    when environment validation fails.

    Resolves: rhbz#1138871


author: David Vossel <dvossel@redhat.com> - 3.9.5-35
changelog:
  - Introduces docker resource-agent for managing docker containers.
    The docker agent is being released as tech preview.

    Resolves: rhbz#1135026


author: David Vossel <dvossel@redhat.com> - 3.9.5-36
changelog:
  - Fixes cleaning up stale docker containers during stop if
    container instance failed.

    Resolves: rhbz#1135026


author: David Vossel <dvossel@redhat.com> - 3.9.5-37
changelog:
  - Rename docker agent's 'container' arg to 'name' to avoid confusion
    with pacemaker's metadata 'container' argument.
  - Introduce monitor_cmd into docker agent.

    Resolves: rhbz#1135026


author: David Vossel <dvossel@redhat.com> - 3.9.5-42
changelog:
  - Improve galera resource-agent to not require use of read-only
    mode to retrieve last known write sequence number.

    Resolves: rhbz#1170376


author: David Vossel <dvossel@redhat.com> - 3.9.5-44
changelog:
  - For IPsrcaddr, properly handle misconfiguration in a way that
    doesn't result in fencing.
  - Return exit reason for invalid netmask in IPaddr2

    Resolves: rhbz#1200756
    Resolves: rhbz#773399


author: David Vossel <dvossel@redhat.com> - 3.9.5-45
changelog:
  - Fix clvmd usage of daemon_options
  - Use better default nfsserver start timeouts
  - Make nfsserver preserve options in /etc/sysconfig/nfs
  - Add link_status_only option to ethmonitor agent
  - Add support for nginx agent
  - Add support for db2 agent
  - CTDB agent updates

    Resolves: rhbz#1171162
    Resolves: rhbz#1173193
    Resolves: rhbz#1182787
    Resolves: rhbz#1213971
    Resolves: rhbz#1183136
    Resolves: rhbz#1059988
    Resolves: rhbz#1077888


author: David Vossel <dvossel@redhat.com> - 3.9.5-46
changelog:
  - iface-vlan agent
  - Allow partial activation when physical volumes are missing.
  - Properly handle 'includes' during apache config parsing
  - Support for NovaCompute resource-agent

    Resolves: rhbz#1160365
    Resolves: rhbz#1214781
    Resolves: rhbz#1223615
    Resolves: rhbz#1214360


author: David Vossel <dvossel@redhat.com> - 3.9.5-47
changelog:
  - NovaCompute and NovaEvacuate updates
  - dhcpd chroot fix
  - redis 0byte error fix

    Resolves: rhbz#1214360
    Resolves: rhbz#1227293
    Resolves: rhbz#1231032


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-55
changelog:
  - NovaCompute/NovaEvacuate: Fix 'evacute' typo
  - NovaEvacuate invoke off action

    Resolves: rhbz#1282723
    Resolves: rhbz#1287303


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-57
changelog:
  - Replace NovaCompute with nova-compute-wait which lets systemd
    manage the nova-compute process

    Resolves: rhbz#1304011


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-60
changelog:
  - rabbitmq-cluster: fix to forget stopped cluster nodes
  - nfsserver: fix systemd status detection

    Resolves: rhbz#1247303
    Resolves: rhbz#1126073


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-62
changelog:
  - tomcat: fix for SELinux enforced mode
  - send_arp: fix buffer overflow on infiniband devices
  - mysql: fix tmpfile leak
  - VirtualDomain: add migrate_options parameter
  - VirtualDomain: fix issue where config file might get removed
  - VirtualDomain: fix locale in stop and status functions()

    Resolves: rhbz#1249430
    Resolves: rhbz#1250728
    Resolves: rhbz#1263348
    Resolves: rhbz#1242181
    Resolves: rhbz#1242558
    Resolves: rhbz#1301189


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-63
changelog:
  - IPaddr2: use IPv6 DAD for collision detection
  - nagios: new resource agent

    Resolves: rhbz#1276699
    Resolves: rhbz#1212632


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-67
changelog:
  - sap_redhat_cluster_connector: add support for hostnames with "-"
  - NovaEvacuate: simplify nova check
  - portblock: new resource agent

    Resolves: rhbz#1265527
    Resolves: rhbz#1287314
    Resolves: rhbz#1303037


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-69
changelog:
  - SAP HANA: add Multiple Components One System (MCOS) support
  - VirtualDomain: add migration_speed and migration_downtime options
  - VirtualDomain: fix unnecessary error when probing nonexistent domain
  - oralsnr: fix status check fail when username is more than 8 characters long
  - oracle: fix unable to start because of ORA-01081

    Resolves: rhbz#1289107
    Resolves: rhbz#1296406
    Resolves: rhbz#1307160
    Resolves: rhbz#1317578
    Resolves: rhbz#1318985


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-70
changelog:
  - nfsserver: fix nfs-idmapd fails to start due to
    var-lib-nfs-rpc_pipefs.mount being active

    Resolves: rhbz#1325453


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-73
changelog:
  - portblock: fix tickle_tcp bug
  - nfsserver: use rpcpipefs_dir variable
  - mysql: use replication_port variable
  - oracle: inform user that monprofile must start with C## for
    container databases

    Resolves: rhbz#1337109
    Resolves: rhbz#1337615
    Resolves: rhbz#1337124
    Resolves: rhbz#1328386


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-78
changelog:
  - nfsserver: fix monitor issues causing NFS to start on
    "debug-monitor" and "resource cleanup"
  - nfsserver: remove "up to 10 tries" on start to avoid issues with
    some services taking longer to start
  - nfsserver: stop rpc-gssd to allow unmounting of "rpcpipefs_dir"

    Resolves: rhbz#1356866
    Resolves: rhbz#1126073
    Resolves: rhbz#1346733


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-81
changelog:
  - oracle: fix issue with C## in monprofile and inform user that
    monuser must start with C## as well for container databases

    Resolves: rhbz#1328386


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-82
changelog:
  - portblock: create tickle_dir if it doesn't exist
  - tomcat: use systemd if available

    Resolves: rhbz#1303037
    Resolves: rhbz#1249430


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-83
changelog:
  - nfsserver: keep options in /etc/sysconfig/nfs
  - redis: fix SELinux permissions
  - redis: notify clients of master being demoted

    Resolves: rhbz#1387491
    Resolves: rhbz#1390974
    Resolves: rhbz#1305549


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-84
changelog:
  - galera: prevent promote after demote
  - iSCSITarget: properly create portals for lio-t
  - nfsserver: dont stop rpcbind
  - Filesystem: submount check
  - Delay: change startdelay
  - galera: last commit fix for MariaDB 10.1.18+
  - portblock: return success on stop with invalid IP
  - portblock: use iptables wait

    Resolves: rhbz#1360768
    Resolves: rhbz#1376588
    Resolves: rhbz#1384955
    Resolves: rhbz#1387363
    Resolves: rhbz#1388854
    Resolves: rhbz#1391470
    Resolves: rhbz#1391580
    Resolves: rhbz#1395596


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-85
changelog:
  - exportfs: fix for IPv6 addresses
  - SAPHana/SAPHanaTopology: update to version 0.152.17
  - Add netstat dependency

    Resolves: rhbz#1406152
    Resolves: rhbz#1395142
    Resolves: rhbz#1402370


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-86
changelog:
  - SAPDatabase: fix process count for SUSER
  - rabbitmq-cluster: reset Mnesia before join

    Resolves: rhbz#1260713
    Resolves: rhbz#1397393


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-87
changelog:
  - LVM: fix for "partial vg activates when partial_activation=false"
  - redis: notify clients of master being demoted
  - SAP/SAP HANA: ppc64le build

    Resolves: rhbz#1392432
    Resolves: rhbz#1305549
    Resolves: rhbz#1371088


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-88
changelog:
  - clvm: remove reload action
  - iSCSILogicalUnit: add IPv6-support
  - IPsrcaddr: fix issue with duplicate routes
  - pgsql: don't use crm_failcount
  - ocf_log: use same log format as Pacemaker

    Resolves: rhbz#1359252
    Resolves: rhbz#1389300
    Resolves: rhbz#1400172
    Resolves: rhbz#1420565
    Resolves: rhbz#1427611


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-89
changelog:
  - NodeUtilization: new resource agent
  - iSCSILogicalUnit, iSCSITarget: make concurrent-safe
  - IPaddr2: send gratuitious ARP packets during monitor action
  - named: add support for rndc options
  - CTDB: fix logging
  - IPaddr2: add option to detect duplicate IP

    Resolves: rhbz#1430304
    Resolves: rhbz#1430385
    Resolves: rhbz#1434351
    Resolves: rhbz#1435171
    Resolves: rhbz#1077888
    Resolves: rhbz#1393189


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-93
changelog:
  - rabbitmq-cluster: allow to run on Pacemaker remote nodes
  - oraasm: new resource agent for Oracle ASM

    Resolves: rhbz#1435982
    Resolves: rhbz#1411225


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-102
changelog:
  - LVM: update metadata on start/relocate
  - LVM: warn when cache mode is not writethrough

    Resolves: rhbz#1451933


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-106
changelog:
  - sybaseASE: new resource agent
  - OCF: improve locking
  - SAPInstance: add "IS_ERS" parameter for ASCS ERS Netweaver
  - VirtualDomain: fix "migrate_options" parsing
  - systemd: use tmpfiles.d to create temp directory on boot
  - findif: improve IPv6 NIC detection
  - support per-host and per-bundle attributes

    Resolves: rhbz#1436189
    Resolves: rhbz#1465822
    Resolves: rhbz#1466187
    Resolves: rhbz#1455305
    Resolves: rhbz#1462802
    Resolves: rhbz#1445628
    Resolves: rhbz#1489734


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-111
changelog:
  - docker: dont ignore stopped containers
  - docker: improve exit reasons

    Resolves: rhbz#bz1508366
    Resolves: rhbz#bz1508362


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-112
changelog:
  - ethmonitor: VLAN fix
  - nfsserver: allow stop to timeout
  - portblock: suppress dd output
  - LVM: dont use "vgscan --cache"

    Resolves: rhbz#1484473
    Resolves: rhbz#1504112
    Resolves: rhbz#1457382
    Resolves: rhbz#1486888


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-116
changelog:
  - azure-lb: new resource agent
  - CTDB: fix initial probe

    Resolves: rhbz#1516435
    Resolves: rhbz#1512580


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-117
changelog:
  - ocf_attribute_target: add fallback for Pacemaker versions without
    bundle support

    Resolves: rhbz#1520574


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 3.9.5-127
changelog:
  - LVM-activate/lvmlockd: new resource agents
  - oracle log warning when using sysdba user
  - metadata: consistent "s"-suffix for timeout/interval values
  - oracle: fix "alter user" syntax
  - exportfs: fix IPv6 bracket issue
  - SAPHana: improve multiple SR pair supporta (MCOS)
  - SAPInstance: add monitored services for ENSA2
  - LVM: add "volume_group_check_only" parameter to avoid timeouts

    Resolves: rhbz#1513957
    Resolves: rhbz#1515354
    Resolves: rhbz#1523318
    Resolves: rhbz#1524429
    Resolves: rhbz#1555464
    Resolves: rhbz#1594153
    Resolves: rhbz#1594246
    Resolves: rhbz#1470840


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-1
changelog:
  - rebase to v4.1.1
  - IPaddr2: add "monitor_retries" parameter

    Resolves: rhbz#1596139
    Resolves: rhbz#1484920


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-3
changelog:
  - gcp-vpc-move-vip: new resource agent for Google Cloud
  - vdo-vol: new resource agent
  - LVM-activate: fix issue with dashes
  - dont use attribute_target for metadata

    Resolves: rhbz#1568588
    Resolves: rhbz#1538689
    Resolves: rhbz#1513957
    Resolves: rhbz#1602783


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-8
changelog:
  - lvmlockd: add cmirrord support
  - LVM-activate: warn about incorrect vg_access_mode

    Resolves: rhbz#1606316
    Resolves: rhbz#1619428


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-10
changelog:
  - aws-vpc-move-ip: avoid false positive monitor result on initial probe
  - timeout/interval add "s"-suffix

    Resolves: rhbz#1624741
    Resolves: rhbz#1523318


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-12.5
changelog:
  - rabbitmq-cluster: get cluster status from mnesia during monitor
  - rabbitmq-cluster: fail monitor when node is in minority partition

    Resolves: rhbz#1641944
    Resolves: rhbz#1641946


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-14
changelog:
  - rabbitmq-cluster: fix stop regression
  - vdo-vol: fix monitor-action
  - tomcat: use systemd when catalina.sh is unavailable

    Resolves: rhbz#1639826
    Resolves: rhbz#1647252
    Resolves: rhbz#1646770


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-15
changelog:
  - rabbitmq-cluster: ensure node attributes are removed
  - ocf_log: do not log debug messages when HA_debug unset
  - LVM-activate: dont fail initial probe
  - rabbitmq-cluster: retry start when cluster join fails

    Resolves: rhbz#1656368
    Resolves: rhbz#1655655
    Resolves: rhbz#1643306
    Resolves: rhbz#1575095


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-16
changelog:
  - rabbitmq-cluster: suppress additional output
  - docker: fix stop issues

    Resolves: rhbz#1659072
    Resolves: rhbz#1629357


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-18
changelog:
  - SAPInstance: add reload-action
  - LVM-activate: support LVs from same VG
  - Remove grpc from bundle

    Resolves: rhbz#1642069
    Resolves: rhbz#1667413
    Resolves: rhbz#1683629


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-22
changelog:
  - IPsrcaddr: make proto optional to fix regression when used without
    NetworkManager

    Resolves: rhbz#1504055


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-23
changelog:
  - aws-vpc-move-ip: add multi route-table support and fix issue
    w/multiple NICs

    Resolves: rhbz#1697558


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-31
changelog:
  - dhcpd: keep SELinux context in chroot
  - CTDB: add support for v4.9+
  - LVM-activate: fix monitor to avoid hang caused by validate-all call

    Resolves: rhbz#1716418
    Resolves: rhbz#1719443
    Resolves: rhbz#1732873


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-32
changelog:
  - iSCSITarget/iSCSILogicalUnit: only create iqn/acls when it doesnt
    exist

    Resolves: rhbz#1598969


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-47
changelog:
  - LVM-activate: detect systemid volume without reboot
  - Filesystem: avoid corrupt mount-list and dont kill incorrect processes
  - LVM-activate: add partial-activation support
  - exportfs: allow multiple exports with same fsid
  - IPaddr2: add noprefixroute parameter

    Resolves: rhbz#1759067
    Resolves: rhbz#1744145
    Resolves: rhbz#1759068
    Resolves: rhbz#1764886
    Resolves: rhbz#1772337


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-53
changelog:
  - redis: fix validate-all action and run it during start-action
  - ocf-shellfuncs: ocf_is_clone(): fix to return true when clone-max
    is set to 0
  - Filesystem: add symlink support
  - azure-events: new resource agent for Azure
  - pgsql: get correct status during start-action, and set initial
    score for primary and hot standby

    Resolves: rhbz#1792241
    Resolves: rhbz#1818035
    Resolves: rhbz#1624203
    Resolves: rhbz#1640575
    Resolves: rhbz#1744431


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-54
changelog:
  - aws-vpc-route53: new resource agent for AWS
  - aws-vpc-move-ip: add "routing_table_role" parameter
  - aws-vpc-move-ip: delete remaining route entries

    Resolves: rhbz#1759113
    Resolves: rhbz#1810466
    Resolves: rhbz#1828895


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-56
changelog:
  - sap-hana-scaleout: set default timeouts based on recommendations
    and a couple of bugfixes

    Resolves: rhbz#1829081


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-61.1
changelog:
  - gcp-vpc-move-vip: add support for multiple alias IPs
  - sybaseASE: run verify action during start action only
  - azure-events: handle exceptions in urlopen

    Resolves: rhbz#1846732
    Resolves: rhbz#1848673
    Resolves: rhbz#1862121


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-61.8
changelog:
  - gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
    make vpc_network parameter optional

    Resolves: rhbz#1913936


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-61.13
changelog:
  - SAPHana: use actual_mode from global.ini and fallback to mode when
    it's not set

    Resolves: rhbz#1855888


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-61.15
changelog:
  - gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
    configuration rc when it might be a network hickup

    Resolves: rhbz#2042070


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-61.18
changelog:
  - db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check

    Resolves: rhbz#2127477


author: John A. Martin <jam@jamux.com>
changelog:
  - Built 1.6.3-2 after finding no rsync-1.6.3-1.src.rpm although there
    was an ftp://ftp.redhat.com/pub/contrib/alpha/rsync-1.6.3-1.alpha.rpm
    showing no packager nor signature but giving 
    "Source RPM: rsync-1.6.3-1.src.rpm".
  - Changes from 1.6.2-1 packaging: added '$RPM_OPT_FLAGS' to make, strip
    to '%build', removed '%prefix'.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix some signed/unsigned issues (<krahmer@suse.de>)
  - tweak ipv6 patch (#55337, <john.l.villalovos@intel.com>)
  - make xinetd file %config(noreplace)


author: Bill Nottingham <notting@redhat.com> 2.5.4-2
changelog:
  - upstream patches: fix accidental use of --whole-file, fix
    minor memory leak, and bad worst-case child kill behavior
  - make passing -e to rsync:// URLs not cause an error exit (#62489)


author: Hardy Merrill <hmerrill@redhat.com> 2.5.6-6
changelog:
  - removed patch rsync-2.5.4-maxdel.patch
  - removed patch rsync-2.4.6-segv.patch
     - current 2.5.6 properly handles (no segfault) the situation
       (rsync '[a]') that caused a need for this patch.
  - added patch rsync-2.5.6-sign.patch, which is a working
    subset of patches (that still apply) included in the original
    rsync-2.5.4-moresignage.patch


author: Hardy Merrill <hmerrill@redhat.com> 2.5.6-15
changelog:
  - add rsync-2.5.6-signal.patch to fix kernel warnings that
    appear because socket.c sets SIGCHLD to SIG_IGN and then
    calls wait.  This is in response to bug#98740.  This patch
    *has* been committed to CVS upstream and will be in
    upstream rsync-2.5.7.


author: Jay Fenlason <fenlason@redhat.com> 2.6.1-1
changelog:
  - Rsync 2.6.1 final.
  - Add a patch from Wayne Davison <wayned@samba.org> that fixes a
    use of uninitilized memory in the map_uid and map_gid functions.
  - Add another patch from Wayne Davidson that fixes the -R option.
  - Add a patch (extracted from a patch by Sami Farin
    <safari-rsync@safari.iki.fi>) to not ignore the return value
    of close().


author: Jay Fenlason <fenlason@redhat.com> 2.6.2-0
changelog:
  - New upstream version to correct the problems with 2.6.1.
    This obsoletes all the patches to 2.6.1


author: Jay Fenlason <fenlason@redhat.com> 2.6.3-0.pre1
changelog:
  - New upstream version with security fix for CAN-2004-0792
  - This obsoletes the -lastdir-corruption patch.


author: Jay Fenlason <fenlason@redhat.com> 2.6.4-3
changelog:
  - Include the -address patch from upstream, to close
    bz#154752 Unable to use --address in client mode


author: Jay Fenlason <fenlason@redhat.com> 2.6.8-2
changelog:
  - New upstream release
  - Use the upstream xattr patch instead of mine.  This closes
    bz#190208 CVE-2006-2083 rsync buffer overflow issue


author: Jay Fenlason <fenlason@redhat.com> 2.6.8-3
changelog:
  - Add my xattrs_bug patch to fix a bug where xattrs don't get sent correctly.
  - Add BuildRequires to make sure libattr-devel and libacl-devel are avaliable
  - replace --with... with --enable... so they actually work
  - Add make, autoconf and gcc to BuildRequires


author: Simo Sorce <ssorce@redhat.com> 3.0.0-0.pre8.fc9
changelog:
  - Eight prerelease
  - Add second source, now patches are in a separate file
  - Add temporary fix to the xattrs.diff patch line as, in this version
    the patch contains one extra humk already contained in acls.diff


author: Michal Luscon <mluscon@redhat.com> 3.0.9-4
changelog:
  - Fixed: #823088 - rsync loses track of files with different directory prefixes
  - Fixed: #495310 - rsync contains forked copy of zlib


author: Pavel Šimerda <psimerda@redhat.com> - 3.0.9-14
changelog:
  - Resolves: #1052814 - rsync command is terminated with SIGSEGV
  - Resolves: #1052814 - add missing patch file


author: Luboš Uhliarik <luhliari@redhat.com> - 3.0.9-17
changelog:
  - Resolves: #1082496 - socket activation for rsync doesn't work (added missing
    rsyncd@.service file)


author: Michal Ruprich - 3.1.2-4
changelog:
  - Related: #1432899 - removing dependencies on perl
  - using the bundled zlib.h(#1491582)
  - turning on upstream tests


author: Michal Ruprich <mruprich@redhat.com> - 3.1.2-10
changelog:
  - Resolves: #1672779 - Rsync bug resets modification time of every destination file that has not changed


author: Peter Vrabec <pvrabec@redhat.com> 1.17.1-1
changelog:
  - upstream bug fix release
  - include html docs (#248712)
  - make "-r" option compatible with sysklogd config (248982)


author: Tomas Heinrich <theinric@redhat.com> 3.21.3-3
changelog:
  - fix a wrong module name in the rsyslog.conf manual page (#455086)
  - expand the rsyslog.conf manual page (#456030)


author: Peter Vrabec <pvrabec@redhat.com> 3.21.3-4
changelog:
  - use RPM_OPT_FLAGS
  - use same pid file and logrotate file as syslog-ng (#441664)
  - mark config files as noreplace (#428155)


author: Tomas Heinrich <theinric@redhat.com> 4.4.2-1
changelog:
  - upgrade to new upstream stable version 4.4.2
  - add support for arbitrary number of open file descriptors


author: Tomas Heinrich <theinric@redhat.com> 4.4.2-6
changelog:
  - modify rsyslog-4.4.2-unlimited-select.patch so that
    running autoreconf is not needed
  - remove autoconf, automake, libtool from BuildRequires
  - change exec-prefix to nil


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-1
changelog:
  - upgrade to new upstream stable version 4.6.2
  - correct the default value of the OMFileFlushOnTXEnd directive


author: Tomas Heinrich <theinric@redhat.com> 5.5.7-1
changelog:
  - upgrade to upstream version 5.5.7
  - update configuration and init files for the new major version
  - add several directories for storing auxiliary data
  - add ChangeLog to documentation
  - drop unlimited-select.patch; integrated upstream
  - add rsyslog-5.5.7-remove_include.patch to fix compilation


author: Tomas Heinrich <theinric@redhat.com> 5.6.2-1
changelog:
  - upgrade to new upstream stable version 5.6.2
  - drop rsyslog-5.5.7-remove_include.patch; applied upstream
  - provide omsnmp module
  - use correct name for lock file (#659398)
  - enable specification of the pid file (#579411)
  - init script adjustments


author: Tomas Heinrich <theinric@redhat.com> 5.7.9-1
changelog:
  - upgrade to new upstream version 5.7.9
  - enable compilation of several new modules,
    create new subpackages for some of them
  - integrate changes from Lennart Poettering
    to add support for systemd
    - add rsyslog-5.7.9-systemd.patch to tweak the upstream
      service file to honour configuration from /etc/sysconfig/rsyslog


author: Tomas Heinrich <theinric@redhat.com> 5.8.7-1
changelog:
  - upgrade to new upstream version 5.8.7
  - change license from 'GPLv3+' to '(GPLv3+ and ASL 2.0)'
    http://blog.gerhards.net/2012/01/rsyslog-licensing-update.html
  - use a specific version for obsoleting sysklogd
  - add patches for better sysklogd compatibility (taken from upstream)


author: Tomas Heinrich <theinric@redhat.com> 5.8.11-1
changelog:
  - upgrade to new upstream stable version 5.8.11
  - add impstats and imptcp modules
  - include new license text files
  - consider lock file in 'status' action
  - add patch to update information on debugging in the man page
  - add patch to prevent debug output to stdout after forking
  - add patch to support ssl certificates with domain names longer than 128 chars


author: Tomas Heinrich <theinric@redhat.com> 7.2.2-1
changelog:
  - upgrade to upstream version 7.2.2
    update BuildRequires
  - remove patches merged upstream
    rsyslog-5.8.7-sysklogd-compat-1-template.patch
    rsyslog-5.8.7-sysklogd-compat-2-option.patch
    rsyslog-5.8.11-close-fd1-when-forking.patch
  - add patch from Milan Bartos <mbartos@redhat.com>
    rsyslog-7.2.1-msg_c_nonoverwrite_merge.patch
  - remove the rsyslog-sysvinit package
  - clean up BuildRequires, Requires
  - remove the 'BuildRoot' tag
  - split off a doc package
  - compile additional modules (some of them in separate packages):
    elasticsearch
    hiredis
    mmjsonparse
    mmnormalize
    mmaudit
    mmsnmptrapd
    mongodb
  - correct impossible timestamps in older changelog entries
  - correct typos, trailing spaces, etc
  - s/RPM_BUILD_ROOT/{buildroot}/
  - remove the 'clean' section
  - replace post* scriptlets with systemd macros


author: Tomas Heinrich <theinric@redhat.com> 7.3.10-1
changelog:
  - rebase to 7.3.10
  - add a patch to resolve #950088 - ratelimiter segfault, merged upstream
    rsyslog-7.3.10-ratelimit-segv.patch
  - add a patch to correct a default value, merged upstream
    rsyslog-7.3.10-correct-def-val.patch
  - drop patch 5 - fixed upstream


author: Tomas Heinrich <theinric@redhat.com> 7.3.15-1.20130604git6e72fa6
changelog:
  - rebase to an upstream snapshot, effectively version 7.3.15
    plus several more changes
  - drop patches 3, 4 - merged upstream
  - add a patch to silence warnings emitted by the imuxsock module
  - drop the imkmsg plugin
  - enable compilation of additional modules
    imjournal, mmanon, omjournal, omrabbitmq
  - new subpackages: crypto, rabbitmq
  - add python-docutils and autoconf to global BuildRequires
  - drop the option for backwards compatibility from the
    sysconfig file - it is no longer supported
  - call autoreconf to prepare the snapshot for building
  - switch the local message source from imuxsock to imjournal
    the imuxsock module is left enabled so it is easy to swich back to
    it and because systemd drops a file into /etc/rsyslog.d which only
    imuxsock can parse


author: Tomas Heinrich <theinric@redhat.com> 7.4.0-1
changelog:
  - rebase to 7.4.0
  - drop autoconf automake libtool from BuildRequires
  - depends on systemd >= 201 because of the sd_journal_get_events() api
  - add a patch to prevent a segfault in imjournal caused by a bug in
    systemd journal
  - add a patch to prevent an endless loop in the ratelimiter
  - add a patch to prevent another endless loop in the ratelimiter
  - add a patch to prevent a segfault in imjournal for undefined state file
  - add a patch to correctly reset state in the ratelimiter


author: Tomas Heinrich <theinric@redhat.com> 7.4.1-1
changelog:
  - rebase to 7.4.1
    this release adds code that somewhat mitigates damage in cases
    where large amounts of messages are received from systemd
    journal (see rhbz#974132)
  - regenerate patch 0
  - drop patches merged upstream: 4..8
  - add a dependency on the version of systemd which resolves the bug
    mentioned above
  - update option name in rsyslog.conf


author: Tomas Heinrich <theinric@redhat.com> 7.4.2-1
changelog:
  - rebase to 7.4.2
    most importantly, this release fixes a potential vulnerability,
    see http://www.lsexperts.de/advisories/lse-2013-07-03.txt
    the impact should be low as only those using the omelasticsearch
    plugin with a specific configuration are exposed


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-1
changelog:
  - rebase to 7.4.7
    add requirement on libestr >= 0.1.9
    resolves: #836485
    resolves: #1020854
    resolves: #1040036
  - drop patch 4; not needed anymore
    rsyslog-7.4.2-imuxsock-rfc3339.patch
  - install the rsyslog-recover-qi.pl tool
  - fix a typo in a package description
  - add missing defattr directives
  - add a patch to remove references to Google ads in the html docs
    rsyslog-7.4.7-bz1030044-remove-ads.patch
    Resolves: #1030043
  - add a patch to allow numeric specification of UIDs/GUIDs
    rsyslog-7.4.7-numeric-uid.patch
    resolves: #1032198
  - change the installation prefix to "/usr"
    resolves: #1032223
  - fix a bad date in the changelog
    resolves: #1043622
  - resolve a build issue with missing mysql_config by adding
    additional BuildRequires for the mysql package
  - add a patch to resolve build issue on ppc
    rsyslog-7.4.7-omelasticsearch-atomic-inst.patch


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-3
changelog:
  - replace rsyslog-7.3.15-imuxsock-warning.patch
    with rsyslog-7.4.7-bz1053669-imuxsock-wrn.patch
    resolves: #1053669
  - add rsyslog-7.4.7-bz1052266-dont-link-libee.patch to prevent
    linking the main binary with libee
    resolves: #1052266
  - add rsyslog-7.4.7-bz1054171-omjournal-warning.patch to fix
    a condition for issuing a warning in omjournal
    resolves: #1054171
  - drop the "v5" string from the conf file as it's misleading
    resolves: #1040036


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-5
changelog:
  - move the rscryutil man page to the crypto subpackage
    resolves: #1056565
  - add a patch to prevent message loss in imjournal
    rsyslog-7.4.7-bz1038136-imjournal-message-loss.patch
    resolves: #1038136


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-6
changelog:
  - disable the imklog plugin by default
    the patch for rhbz#1038136 caused duplication of kernel messages since the
    messages read by the imklog plugin were now also pulled in from journald
    resolves: #1078654


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-8
changelog:
  - modify the service file to automatically restart rsyslog on failure
    resolves: rhbz#1061322
  - add explicitly versioned dependencies on libraries which do not have
    correctly versioned sonames
    resolves: rhbz#1107839
  - make logrotate tolerate missing log files
    resolves: rhbz#1144465
  - backport the mmcount plugin
    resolves: rhbz#1151037
  - set the default service umask to 0066
    resolves: rhbz#1228192
  - add a patch to make imjournal sanitize messages as imuxsock does it
    resolves: rhbz#743890
  - add a patch to fix a bug preventing certain imuxsock directives from
    taking effect
    resolves: rhbz#1184410
  - add a patch to fix a race condition in directory creation
    resolves: rhbz#1202489


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-9
changelog:
  - update the patch fixing a race condition in directory creation
    resolves: rhbz#1202489
  - improve provided documentation
    - move documentation from all subpackages under a single directory
    - add missing images
    - remove doc files without content
    - add a patch making various corrections to the HTML documentation
    resolves: rhbz#1238713
  - add a patch to prevent division-by-zero errors
    resolves: rhbz#1078878
  - add a patch to clarify usage of the SysSock.Use option
    resolves: rhbz#1143846
  - add a patch to support arbitrary number of listeners in imuxsock
    - drop patch for rhbz#1053669 as it has been merged into this one
    resolves: rhbz#1151041


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-10
changelog:
  - add a patch to prevent field truncation in imjournal
    resolves: rhbz#1101602
  - add a patch to enable setting a default TAG
    resolves: rhbz#1188503
  - add a patch to fix a nonfunction hostname setting in imuxsock
    resolves: rhbz#1184402


author: Radovan Sroka <rsroka@redhat.com> 7.4.7-11
changelog:
  - add patch that resolves config.guess system-recognition on ppc64le architecture
    resolves: rhbz:1254511


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-13
changelog:
  - add a patch to prevent crashes when using multiple rulesets
    resolves: rhbz#1224336
  - add a patch to keep the imjournal state file updated
    resolves: rhbz#1216957
  - add a patch to fix an undefined behavior caused by the maxMessageSize directive
    resolves: rhbz#1214257
  - add a patch to prevent crashes when using rulesets with a parser
    resolves: rhbz#1282687


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-14
changelog:
  - add a patch to prevent loss of partial messages
    resolves: rhbz#1312459
  - add a patch to allow multiple rulesets in imrelp
    resolves: rhbz#1223566
  - add a patch to fix a race condition during shutdown
    resolves: rhbz#1295798
  - add a patch to backport the mmutf8fix plugin
    resolves: rhbz#1146237
  - add a patch to order service startup after the network
    resolves: rhbz#1263853


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-15
changelog:
  - add a patch to make state file handling in imjournal more robust
    resolves: rhbz#1245194
  - add a patch to support wildcards in imfile
    resolves: rhbz#1303617


author: Radovan Sroka <rsroka@redhat.com> - 8.24.0-6
changelog:
  - RHEL 7.4 ERRATUM
  - rsyslog rebase to 8.24
  - added patch to prevent segfault while setting aclResolveHostname
    config options
    resolves: rhbz#1422414
  - added patch to check config variable names at startup
    resolves: rhbz#1427828
  - added patch for str2num to handle empty strings
    resolves: rhbz#1427821
  - fixed typo in added-chdir patch
    resolves: rhbz#1422789
  - added patch to log source process when beginning rate-limiting
    resolves: rhbz#1196230
  - added patch to chdir after chroot
    resolves: rhbz#1422789
  - added patch to remove "inputname" imudp module parameter 
    deprecation warnings
    resolves: rhbz#1403907
  - added patch which resolves situation when time goes backwards
    and statefile is invalid
    resolves rhbz#1088021
  - added a patch to bring back deprecated cmd-line switches and
    remove associated warnings
    resolves: rhbz#1403831
  - added documentation recover_qi.pl
    resolves: rhbz#1286707
  - add another setup for doc package
  - add --enable-generate-man-pages to configure parameters;
    the rscryutil man page isn't generated without it
    https://github.com/rsyslog/rsyslog/pull/469
  - enable mmcount, mmexternal modules
  - remove omruleset and pmrfc3164sd modules


author: Radovan Sroka <rsroka@redhat.com> - 8.24.0-8
changelog:
  RHEL 7.4 ERRATUM
  - added dependency automake autoconf libtool due to yum-builddep
  - reenable omruleset module
    resolves: rhbz#1431615
    resolves: rhbz#1428403
    resolves: rhbz#1427821(fix regression, failed QA)
    resolves: rhbz#1432069
  - resolves: rhbz#1165236
    resolves: rhbz#1419228
    resolves: rhbz#1431616 
    resolves: rhbz#1196230(failed QA)


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-9
changelog:
  RHEL 7.4 ERRATUM
  - added autoreconf call
  - added patch to replace gethostbyname with getaddrinfo call
    resolves: rhbz#1056548(failed QA)


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-10
changelog:
  RHEL 7.4 ERRATUM
  - edited patches Patch19 and Patch21
    resolves: rhbz#1419228(coverity scan problems)
    resolves: rhbz#1056548(failed QA, coverity scan problems)


author: Radovan Sroka <rsroka@redhat.com> - 8.24.0-11
changelog:
  RHEL 7.4 ERRATUM
  - added new patch that backports num2ipv4 due to rhbz#1427821
    resolves: rhbz#1427821
  - enable pmrfc3164sd module
    resolves: rhbz#1431616


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-13
changelog:
  RHEL 7.5 ERRATUM
  - added patch to properly resolve FQDN
    resolves: rhbz#1401456
  - added documentation patch correcting qeues default values
    resolves: rhbz#1459896
  - added patch adjusting log level of journal reloaded msg
    resolves: rhbz#1497985 
  - added patch to prevent crash with invalid set statement
    this also obsoletes patch2 (for 1188503) 
    resolves: rhbz#1462160
  - added patch with nullptr check to prevent ABRT
    resolves: rhbz#1488186


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-14
changelog:
  RHEL 7.5 ERRATUM
  - renamed patch for undocumented recover_qi script to correct bz number
    resolves: rhbz#1507028
  - added patch ensuring relp conneciton is active before closing it
    resolves: rhbz#1505103


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-15
changelog:
  RHEL 7.5 ERRATUM
  - made rsyslog-doc noarch and fixed search on doc regeneration
    resolves: rhbz#1507028


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-16
changelog:
  RHEL 7.5 ERRATUM
  - edited the patch to conform to latest upstream doc
    resolves: rhbz#1459896 (failedQA)
  - disabled 32-bit builds on all arches as they are not shipped
    anymore in RHEL7


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-17
changelog:
  RHEL 7.6 ERRATUM
  - fixed imjournal duplicating messages on log rotation
    resolves: rhbz#1538372
  - re-enabled 32-bit arches to not break dependent packages
    resolves: rhbz#1571850


author: Radovan Sroka <rsroka@redhat.com> - 8.24.0-18
changelog:
  - caching the whole sockaddr structure instead of sin_addr causing memory leak
    resolves: rhbz#1512551


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-19
changelog:
  RHEL 7.6 ERRATUM
  - added new kafka sub-package with enabling of omkafka module
    resolves: rhbz#1482819


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-20
changelog:
  RHEL 7.6 ERRATUM
  - added a patch backporting imfile module rewrite and 
    adding symlink support
  	resolves: rhbz#1531295


author: Noriko Hosoi <nhosoi@redhat.com> - 8.24.0-21
changelog:
  RHEL 7.6 ERRATUM
  resolves: rhbz#1582517 - Buffer overflow in memcpy() in parser.c
  resolves: rhbz#1539193 - RFE: Support for mm kubernetes plugin
  resolves: rhbz#1589924 - RFE: Several fixes for mmkubernetes
  resolves: rhbz#1590582 - mmkubernetes - use version=2 in rulebase files to avoid memory leak
  resolves: rhbz#1507145 - RFE: omelasticsearch support client cert authentication
  resolves: rhbz#1565214 - omelasticsearch needs better handling for bulk index rejections and other errors
  Disables Patch32: rsyslog-8.24.0-rhbz1531295-imfile-rewrite-with-symlink.patch
  Disables Patch34: rsyslog-8.24.0-rhbz1565219-parse-json-into-top-level-fields-in-mess.patch; It BuildRequires/Requires: libfastjson >= 0.99.4-3


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-21
changelog:
  RHEL 7.6 ERRATUM
  - fixed imfile rewrite backport patch, added few more bugfixes
    resolves: rhbz#1531295
  - added also doc patch for omelastic client certs
    resolves: rhbz#1507145
  - cleaned and shortened patch for omelastic error handling
    resolves: rhbz#1565214
  - enabled patch for json top-level parsing
    resolves: rhbz#1565219
  - merged mmkubernetes patches into one and enabled the module
    resolves: rhbz#1539193
    resolves: rhbz#1589924
    resolves: rhbz#1590582


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-22
changelog:
  RHEL 7.6 ERRATUM
  - edited patch for top-level json parsing with bugfix
    resolves: rhbz#1565219
  - renamed doc patches and added/updated new ones for mmkubernetes
    omelasticsearch and json parsing
  - renamed patch fixing buffer overflow in parser - memcpy()
    resolves: rhbz#1582517


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-23
changelog:
  RHEL 7.6 ERRATUM
  - added backport of leading $ support to json-parsing patch
    resolves: rhbz#1565219
  - The required info is already contained in rsyslog-doc package
    so there is no patch for this one
    resolves: rhbz#1553700


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-24
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch with fixes from covscan
    resolves: rhbz#1531295
  - updated mmkubernetes patch with fixes from covscan
    resolves: rhbz#1539193
  - updated imjournal duplicates patch with fixes from covscan
    resolves: rhbz#1538372
  - updated omelastic enhancement patch with fixes from covscan
    resolves: rhbz#1565214


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-26
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch according to early testing
    resolves: rhbz#1531295
  - added patch fixing pid file name in manpage
    resolves: rhbz#1597264
  - updated json-parsing patch with one more bugfix
    resolves: rhbz#1565219


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-27
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch fixing last update regressions
    resolves: rhbz#1531295
  - added patch fixing deadlock in async logging
    resolves: rhbz#1559408
  - added patch fixing NULL access in worktable create
    resolves: rhbz#1600462
  - now putting release number into configure to have it present
    in error messages


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-28
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch fixing next round of regressions
    resolves: rhbz#1531295
    resolves: rhbz#1602156
  - updated mmkubernetes patch with NULL ret-check
    resolves: rhbz#1539193


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-30
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch with next bugfix
    resolves: rhbz#1531295
  - updated imjournal duplicates patch making slower code optional
    and added corresponding doc patch
    resolves: rhbz#1538372


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-31
changelog:
  RHEL 7.6 ERRATUM
  - added new patch fixing ompipe dropping messages when pipe full
    resolves: rhbz#1591819
  - updated mmkubernetes patch to accept non-kubernetes containers
    resolves: rhbz#1539193
    resolves: rhbz#1609023
  - removed json-parsing patches as the bug is now fixed in liblognorm


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-32
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch with no log on EACCES
    resolves: rhbz#1531295
  - removed now needless build-deps


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-33
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch with extended symlink watching
    resolves: rhbz#1531295
  - updated mmkubernetes patch to accept dots in pod name
    resolves: rhbz#1539193


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-35
changelog:
  RHEL 7.7 ERRATUM
  - added patch fixing memory corruption in omfwd module
    resolves: rhbz#1632659
  - added patch fixing imfile sopping monitor after rotation
    resolves: rhbz#1649250
  - added patch addressing imptcp CVE-2018-16881
    resolves: rhbz#1658288


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-36
changelog:
  RHEL 7.7 ERRATUM
  - added patch fixing mmkubernetes halt after pod deletition
    resolves: rhbz#1622767


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-37
changelog:
  RHEL 7.7 ERRATUM
  - edited patch fixing mmkubernetes halt after pod deletition
    (covscan found an issue in previous version)
    resolves: rhbz#1622767
  - added patch stopping flooding logs with journald errors
    resolves: rhbz#1632211
  - added patch stopping flooding logs with symlink false-positives
    resolves: rhbz#1685901
  - added patch stopping memory leak when processing internal msgs
    resolves: rhbz#1666365
  - added documentation patch with info about CRI-O to mmkubernetes
    resolves: rhbz#1625935


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-38
changelog:
  RHEL 7.7 ERRATUM
  - added patch increasing max path size preventing buffer overflow
    with too long paths
    resolves: rhbz#1656860


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-41
changelog:
  RHEL 7.8 ERRATUM
  - added patch and doc-patch with new "fsync" imjournal option
    resolves: rhbz#1696686
  - added patch resolving omelasticsearch crash on "nothing" reply
    resolves: rhbz#1684236


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-44
changelog:
  RHEL 7.8 ERRATUM
  - added patch and doc-patch for new caseSensitive imUDP/TCP option
    resolves: rhbz#1309698


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-46
changelog:
  RHEL 7.8 ERRATUM
  - Support Intermediate Certificate Chains in rsyslog
    resolves: rhbz#1627799
  - fixed WorAroundJournalBug patch to not cause leaks
    resolves: rhbz#1744617
  - added patch fixing possible segfault in rate-limiter
    resolves: rhbz#1744682


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-47
changelog:
  RHEL 7.8 ERRATUM
  - edited imfile truncation detection patch with reression fix
    resolves: rhbz#1744856


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-48
changelog:
  RHEL 7.8 ERRATUM
  - added patch resolving crash on wrong MsgProperty
    resolves: rhbz#1549706
  - added patch resolving CVE in pmaixforward module
    resolves: rhbz#1768320
  - added patch resolving CVE in pmcisconames module
    resolves: rhbz#1768323
  - added patch implementing file ID for imfile
    resolves: rhbz#1763746
  - added patch fixing omelasticsearch with ES 6.X
    resolves: rhbz#1600171


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-49
changelog:
  RHEL 7.8 ERRATUM
  - fixed fsync patch to actually revognize the new option
    resolves: rhbz#1696686 (failedQA)


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-52
changelog:
  RHEL 7.8 ERRATUM
  - edited patch file ID for imfile to not log useless errors
    also improved file-id behavior to adress newly found problems
    resolves: rhbz#1763746


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-53
changelog:
  RHEL 7.9 ERRATUM
  - one more fix for file ID patch to extend to offline behavior
    resolves: rhbz#1806493
  - added patch resoving race in serialization resulting in crash
    resolves: rhbz#1778841


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-55
changelog:
  RHEL 7.9 ERRATUM
  - edited imfile file-id patch to not segfault on selinux block
    resolves: rhbz#1843992


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-57
changelog:
  RHEL 7.9 ERRATUM
  - added patch resolving buffer overflows in select() function
    resolves: rhbz#1858297


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-30
changelog:
  - Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
    failures with newest openssl.
    Resolves: rhbz#1416123
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Extend 'gem_' macros for pre-release version support.
    Resolves: rhbz#1397390
  - Make symlinks for json gem.
    Resolves: rhbz#1308992


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-31
changelog:
  - Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
    * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
    Resolves: CVE-2017-0903
  - Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
    Resolves: CVE-2017-0899
  - Fix a DOS vulernerability in the query command (CVE-2017-0900).
    Resolves: CVE-2017-0900
  - Fix a vulnerability in the gem installer that allowed a malicious gem
      to overwrite arbitrary files (CVE-2017-0901).
    Resolves: CVE-2017-0901
  - Fix a DNS request hijacking vulnerability (CVE-2017-0902).
    * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
    Resolves: CVE-2017-0902
  - Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
    * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
    Resolves: CVE-2017-0898
  - Escape sequence injection vulnerability in the Basic
      authentication of WEBrick (CVE-2017-10784).
    * ruby-2.2.8-sanitize-any-type-of-logs.patch
    Resolves: CVE-2017-10784
  - Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
    * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
    Resolves: CVE-2017-14064
  - Command injection vulnerability in Net::FTP (CVE-2017-17405).
    * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
    Resolves: CVE-2017-17405
  - Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
    * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
    Resolves: CVE-2017-14033
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Resolves: CVE-2017-17790


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-32
changelog:
  - Add Psych.safe_load
    * ruby-2.1.0-there-should-be-only-one-exception.patch
    * ruby-2.1.0-Adding-Psych.safe_load.patch
    Related: CVE-2017-0903
  - Disable Tokyo TZ tests broken by recen tzdata update.
    * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
    Related: CVE-2017-0903


author: Jun Aruga <jaruga@redhat.com> - 2.0.0.648-35
changelog:
  - Kill bundled certificates.
  - Add macros to edit files lists in .gemspec
  - Fix buffer under-read in String#unpack
    Resolves: CVE-2018-8778
  - Fix HTTP response splitting in WEBrick
    Resolves: CVE-2017-17742
  - Fix DoS by large request in WEBrick
    Resolves: CVE-2018-8777
  - Fix directory traversal by poisoned NULL byte in Dir.
    Resolves: CVE-2018-8780
  - Fix file and directory creation with directory traversal.
    Resolves: CVE-2018-6914
  - Fix socket creation by poisoned NULL byte.
    Resolves: CVE-2018-8779
  - Fix: return default path with nonexistent home dir
  - Fix flags not propagated in Array#pack and String#unpack.
    Resolves: CVE-2018-16396
  - Fix strictly interpret octal fields in tar headers.
    Resolves: CVE-2018-1000075
  - Fix a security error for duplicate files in a package.
    Resolves: CVE-2018-1000076
  - Enforce URL validation on spec homepage attribute.
    Resolves: CVE-2018-1000077
  - Mitigate XSS vulnerability in homepage attribute.
    Resolves: CVE-2018-1000078
  - Prevent Path Traversal issue during gem installation.
    Resolves: CVE-2018-1000079
  - Fix unsafe Object Deserialization Vulnerability in gem owner.
    Resolves: CVE-2018-1000074
  - Refresh expired certificates.
  - Fix path traversal when writing to a symlinked basedir outside of the root
    Resolves: CVE-2018-1000073


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-36
changelog:
  - Introduce `Gem::UserInteraction#verbose` method as precondition to fix
    CVE-2019-8321.
    * rubygems-2.3.0-refactor-checking-really_verbose.patch
  - Fix escape sequence injection vulnerability in verbose.
  - Fix escape sequence injection vulnerability in gem owner.
    Resolves: CVE-2019-8322
  - Fix escape sequence injection vulnerability in API response handling.
    Resolves: CVE-2019-8323
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324
  - Fix escape sequence injection vulnerability in errors.
    Resolves: CVE-2019-8325
    * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch


author: Shawn Wells <shawn@redhat.com> 0.1-6
changelog:
  - Corrected RPM versioning, we're on 0.1 release 6 (not version 1 release 6)
  - Updated RPM includes feedback received from DoD Consensus meetings


author: Shawn Wells <shawn@redhat.com> 0.1-7
changelog:
  - Corrected XCCDF content errors
  - OpenSCAP now supports CPE dictionaries, important to
    utilize --cpe-dict when scanning machines with OpenSCAP,
    e.g.:
    $ oscap xccdf eval --profile stig-server \
     --cpe-dict ssg-rhel6-cpe-dictionary.xml ssg-rhel6-xccdf.xml


author: Shawn Wells <shawn@redhat.com> 0.1-8
changelog:
  - Significant copy editing to XCCDF rules per community
    feedback on the DISA RHEL/6 STIG Initial Draft


author: Shawn Wells <shawn@redhat.com> 0.1-14
changelog:
  - Formal RPM release
  - Inclusion of rht-ccp profile
  - OVAL unit testing patches
  - Bash remediation patches
  - Bugfixes


author: Shawn Wells <shawn@redhat.com> 0.1-15.rc3
changelog:
  - [bugfix] Updated rsyslog_remote_loghost to scan /etc/rsyslog.conf and /etc/rsyslog.d/*
  - Numberous XCCDF->OVAL naming schema updates
  - All rules now have CCE


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-15.rc5
changelog:
  - Point the spec's source to proper remote tarball location
  - Modify the main Makefile to use remote tarball when building RHEL/6's SRPM


author: Shawn Wells <shawn@redhat.com> 0.1-16.rc1
changelog:
  - [bugfix] RHEL6 no_empty_passwords remediation script overwrote
    system-auth symlink. Added --follow-symlink to sed command.


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.19-1
changelog:
  - Include RHEL-7 content (RHT-CCP profile only)
  - Drop RHEL-7 restorecond XCCDF rule since policycoreutils-restorecond in Optional channel
  - Drop RHEL-7 cpuspeed XCCDF rule since obsoleted by cpupower from kernel-tools
  - Update manual page to be more appropriate for RHEL-7
  - Drop RHEL-6 C2S profile update patch since merged upstream


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.19-2
changelog:
  - Fix Limit Password Reuse remediation script error
  - Fix Set Deny For Failed Password Attempts remediation script error
  - Use RHT-CCP profile name when generating HTML guide
  - Describe RHT-CCP profile in the manual page


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.23-1
changelog:
  - Rebase to upstream scap-security-guide-0.1.23 version
  - Update upstream tarball source URL to GitHub archive location
  - Drop the following patches that have been accepted upstream:
    * scap-security-guide-0.1.19-rhel7-include-only-rht-ccp-profile.patch
    * scap-security-guide-0.1.19-rhel7-drop-restorecond-since-in-optional.patch
    * scap-security-guide-0.1.19-update-man-page-for-rhel7-content.patch
    * scap-security-guide-0.1.19-rhel7-update-pam-XCCDF-to-use-pam_pwquality.patch
    * scap-security-guide-0.1.20-rhel7-shared-fix-limit-password-reuse-remediation.patch
    * scap-security-guide-0.1.20-rhel6-rhel7-PR#280-set-deny-prerequisite-#1.patch
    * scap-security-guide-0.1.20-rhel6-rhel7-set-deny-prerequisite-#2.patch
    * scap-security-guide-0.1.20-shared-fix-set-deny-for-failed-password-attempts-remediation.patch
    * scap-security-guide-0.1.20-rhel7-specify-exact-profile-name-when-generating-guide.patch
  - Include the datastream versions of Firefox and Java Runtime Environment (JRE) benchmarks
  - Include USGCB and DISA STIG profile kickstart files for Red Hat Enterprise Linux 6


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.24-1
changelog:
  - Rebase to upstream scap-security-guide-0.1.24 version
  - Start producing the -doc subpackage to provide the HTML formatted
    documents containing security guides generated from shipped XCCDF benchmarks


author: Martin Preisler <mpreisle@redhat.com> 0.1.24-2
changelog:
  - Break-down firewalld rule description for Red Hat Enterprise Linux 7 product
    into multiple lines, prevents HTML guide UX issues


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.24-3
changelog:
  - Add remediation script for 'accounts_passwords_pam_faillock_unlock_time' rule
    for Red Hat Enterprise Linux 7 product
  - Override title and description for all existing profiles for Red Hat
    Enterprise Linux 6 product that are extending another SCAP profile
    (RHBZ#1246529)
  - Correct various issues in the included Oscap Anaconda Addon PCI-DSS profile
    kickstart file for Red Hat Enterprise Linux 7 product
  - Add remediation script for 'audit_rules_time_clock_settime' rule for
    Red Hat Enterprise Linux 7 product
  - Add remediation scripts for 'audit_rules_time_adjtimex',
    'audit_rules_time_settimeofday', and 'audit_rules_time_stime' rules for
    Red Hat Enterprise Linux 7 product
  - Tag current PCI-DSS profile for Red Hat Enterprise Linux 7 product with
    "Draft" label
  - Disable the following rules in the PCI-DSS profile for the Red Hat Enterprise
    Linux 7 product:
    * dconf_gnome_screensaver_idle_delay -- missing remediation script,
    * dconf_gnome_screensaver_idle_activation -- missing remediation script,
    * dconf_gnome_screensaver_lock_enabled -- missing remediation script,
    * audit_rules_login_events -- incorrect OVAL check (upstream issue #607),
    * audit_rules_privileged_commands -- missing remediation script, and
    * audit_rules_immutable -- missing remediation script.


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.25-3
changelog:
  - Drop "Verify and Correct File Permissions with RPM" rule from the PCI-DSS
    profile for Red Hat Enterprise Linux 7 (RH BZ#1267861)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.30-1
changelog:
  - Update to upstream's 0.1.30 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.30
    (RH BZ#1289533)
  - Drop remediation functions library since starting from 0.1.30 release
    remediation scripts are part of the benchmarks directly
  - Drop three patches that have been accepted upstream in the meantime
  - Update drop-rpm-verify-permissions-rule patch to work properly against
    0.1.30 release


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.30-2
changelog:
  - Fix issue of two STIG profiles for Red Hat Enterprise Linux 6 benchmark
    having the identical title (RH BZ#1351541)
  - Enhance the shared OVAL check for 'Set Deny For Failed Password Attempts'
    rule and also Red Hat Enterprise Linux 7 OVAL check for 'Configure the root
    Account for Failed Password Attempts' rule to report correct system status
    WRT to these requirements also in the case the SSSD daemon is used
    (RH BZ#1344581)
  - Include currently available kickstart files and produced HTML tables for
    Red Hat Enterprise Linux 6 and 7 products into the produced RPM package
    (RH BZ#1351751)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.30-3
changelog:
  - Correct the remediation script for 'Enable Smart Card Login' rule
    for Red Hat Enterprise Linux 7 (RH BZ#1357019)


author: Watson Sato <wsato@redhat.com> 0.1.30-5
changelog:
  - Fix template remediation function used by SSHD remediation
  - Reduce scope of patch that fixes SSHD remediation (RH BZ#1415152)


author: Watson Sato <wsato@redhat.com> 0.1.32-1
changelog:
  - Update to upstream version 0.1.32
  - New CMake build system
  - Improved NIST 800-171 profile
  - Initial RHVH profile
  - New CPE to identify systems like machines (bare-metal and VM) and containers (image and container)
  - Template clean up in lots of remediations


author: Watson Sato <wsato@redhat.com> 0.1.33-1
changelog:
  - Update to upstream version 0.1.33
  - DISA RHEL7 STIG profile alignment improved
  - Introduction of remediation roles
  - RPM and DEB test packages are built by CMake with CPack
  - Lots of remediation fixes


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.35-1
changelog:
  - Update to upstream release 0.1.35
  - Remove Red Hat Enterprise Linux 5 content due to being End-of-Life March 31, 2017
  - Added several templates for OVAL checks
  - Many optimizations in build process
  - Different title for PCI-DSS Benchmark variants
  - Remediation roles moved to /usr/share/scap-security
  - Fix duplicated roles and guides (RHBZ#1465691)


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.36-1
changelog:
  - Update to upstream release 0.1.36
  - Introduction of SCAP Security Guide Test Suite
  - Better alignment of RHEL6 and RHEL7 with DISA STIG
  - Remove JBoss EAP5 content due to being End-of-Life
  - New STIG Profile for JBOSS EAP 6
  - Updates in C2S Profile for RHEL 7
  - Variables can be directly tailored in Ansible roles
  - Content presents less false positives in containers
  - Changes in directory layout


author: Matěj Týč <matyc@redhat.com> - 0.1.36-5
changelog:
  - Patched not to check library ownership in libexec.
  - Patched to fix title of DISA STIG profile.
  - Patched to deprecate RhostsRSAAuthentication.
  - Patched to fix umask_for_daemons.


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.36-7
changelog:
  - Fix sshd_required unset (RHBZ#1522956)
  - Fix missing bash remediation functions include (RHBZ#1524738)
  - Fix empty columns in SRG HTML Table (RHBZ#1531105)
  - Fix reference to oudated PAM config manual (RHBZ#1447760)


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.39-1
changelog:
  - Update to upstream release 0.1.39
  - Profile IDs simplified
  - Common Profile removed in favor of Standard Profile
  - RHEL7 STIG reference updated to V1R4
  - RHEL6 STIG reference updated to V1R18
  - New License - BSD-3 Clause
  - Several remediation fixes
  - Better content support for DISA STIG Viewer (#2418)


author: Matěj Týč <matyc@redhat.com> - 0.1.40-1
changelog:
  - Update to upstream release 0.1.40
  - Underlying code has been deduplicated and unified, which fixes countless subtle bugs.
  - Updated Ansible playbooks, so they don't use deprecated constructs.
  - Service disable family of rules take the corresponding socket deactivation into account if applicable in check and in remediations.


author: Matěj Týč <matyc@redhat.com> - 0.1.40-3
changelog:
  - Don't generate remediations for Anaconda for /dev/cdrom mount point (RHBZ#1618840)
  - Install dracut-fips when fips mode is enabled in the profile (RHBZ#1587911)


author: Matěj Týč <matyc@redhat.com> - 0.1.40-6
changelog:
  - Applied a batch of patches that improve OSPP 4.2 profile support for RHEL7 (RHBZ#1619689)
  - Fixed the xccdf_org.ssgproject.content_rule_dconf_gnome_screensaver_lock_enabled check (RHBZ#1609122)


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.40-8
changelog:
  - Add Bash remediation for rule grub2_audit_arguments (RHBZ#1619689)
  - Allow remediation for rule dconf_gnome_screensaver_lock_delay to fix commented settings (RHBZ#1609122)
  - Select missing audit rules for privileged commands for OSPP4.2 Profile (RHBZ#1619689)


author: Matěj Týč <matyc@redhat.com> - 0.1.40-11
changelog:
  - Fixes for RHBZ#1619689:
  - Added support for kernel parameters yama.ptrace_scope, kptr_restrict, dmesg_restrict and kexec_load_disabled.
  - Added support for boot parameters audit_backlog_limit=8192, slub_debug=P, page_poison=1 and vsyscall=none.
  - Added support for proper /dev/shm handling (noexec,nosuid,nodev,mode=1777)
  - Added support for checking that sendmail and abrt are not installed.
  - Introduced OSPP to the OSPP profile title.
  - Disabled linkcheck tests during the build.


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.43-2
changelog:
  - Fixes for smooth Ansible playbooks run (RHBZ#1647189)
  - Fix Ansible template for file permissions (RHBZ#1686007)
  - Fix remediation of rule rpm_verify_permissions (RHBZ#1686005)
  - Fix remediation of audit rules for privileged commands (RHBZ#1687826)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.43-3
changelog:
  - Mark rules which were not applicable for containers as machine only (RHBZ#1630739)
  - Fix content support for UBI-Minimal (RHBZ#1695213)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.43-4
changelog:
  - Mark SELinux rules as machine only (RHBZ#1630739)
  - Mark service disabled rules as machine only (RHBZ#1630739)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.43-5
changelog:
  - Remove ensure_gpgcheck_repo_metadata rule from profiles (RHBZ#1703010)
  - Deduplicate CCE assigned to rules (RHBZ#1703092)


author: Jan Černý <jcerny@redhat.com> - 0.1.43-12
changelog:
  - Make aide and smart card rules not applicable to containers (RHBZ#1711893)
  - Added rule dconf_db_up_to_date to ensure dconf databases are up-to-date (RHBZ#1631378)


author: Jan Černý <jcerny@redhat.com> - 0.1.46-4
changelog:
  - Fix evaluation and remediation of audit rules in PCI-DSS profile (RHBZ#1754550)
  - Fixed mtab handling of remediation of /dev/shm/noexec (RHBZ#1754553)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.46-5
changelog:
  - Fixed grub2_enable_fips_mode rule when installing RHEL on machines with AES-enabled processors. (RHBZ#1754532)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.46-6
changelog:
  - Updated ansible playbooks to use modules in favor of shell. (RHBZ#1726698)
  - Removed rule directory_access_var_log_audit from OSPP profile. (RHBZ#1726698)
  - Fixed ansible playbooks failing when running in --check mode. (RHBZ#1726698)


author: Matěj Týč <matyc@redhat.com> - 0.1.46-7
changelog:
  - Added support for the Essential Eight (e8) profile. (RHBZ#1755192)
  - Fixed issues with sshd rules used in the e8 profile. (RHBZ#1755192)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.46-9
changelog:
  - Fixed missing CCE for OSPP, E8 and STIG profiles. (RHBZ#1726698)
  - Added kickstart file for the Essential Eight (e8) profile. (RHBZ#1755192)


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.46-10
changelog:
  - Added missing CCE for rule sudo_require_authentication. (RHBZ#1755192)
  - fix check and remediation for rule aide_periodic_cron_checking (RHBZ#1658036)


author: Watson Sato <wsato@redhat.com> - 0.1.49-2
changelog:
  - Fix remediation of dconf_gnome_login_banner_text (RHBZ#1776780)
  - Fix misleading sysctl rules description (RHBZ#1494606)
  - Update STIG FIPS approved SSHD ciphers (RHBZ#1781244)


author: Matěj Týč <matyc@redhat.com> - 0.1.49-5
changelog:
  - Added a patch warning about non-local users/groups are not considered by some rules (RHBZ#1721439, RHBZ#1544765, RHBZ#1829743)


author: Watson Sato <wsato@redhat.com> - 0.1.49-7
changelog:
  - Bug fixes on CIS profile (RHBZ#1821633)
    Added Ansible remediations
    Fixed CIS references
    Fixed integration issues with CIS profile


author: Watson Sato <wsato@redhat.com> - 0.1.49-9
changelog:
  - CIS Profile fixes (RHBZ#1821633)
    - Fix Ansible mount_option template
    - Add Ansible for ensure_logrotate_activated
    - Add warnings to rpm_verify_permissions and ownership about findindings that may need further inspection


author: Watson Sato <wsato@redhat.com> - 0.1.49-10
changelog:
  - CIS Profile fixes (RHBZ#1821633)
    - Fix Ansible mount_option template
    - Re-order rpm_verify_permissions to avoid file permission conflicts


author: Watson Sato <wsato@redhat.com> - 0.1.49-11
changelog:
  - HIPAA Profile improvement (RHBZ#1513087)
    - Add Ansible remediation for audit_rules_system_shutdown


author: Watson Sato <wsato@redhat.com> - 0.1.49-12
changelog:
  - CIS Profile (RHBZ#1821633)
    - Make sure boot target is multi-user.target when xorg package is removed
    - Add CIS Profile content attribution to Center for Internet Security


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.52-1
changelog:
  - Update to the latest upstream release (RHBZ#1665233)
  - Update RHEL7 DISA STIG to V2R8 (RHBZ#1665233)


author: Watson Sato <wsato@redhat.com> - 0.1.54-1
changelog:
  - Rebase to incorporate ANSSI Profile (RHBZ#1497415)
  - Update RHEL7 STIG profile to V3R2 (RHBZ#1921643)
  - Add Minimal, Intermediary and Enhanced ANSSI Profiles (RHBZ#1497415)


author: Watson Sato <wsato@redhat.com> - 0.1.54-2
changelog:
  - Remove Kickstart for not shipped profile (RHBZ#1497415)
  - Fix STIG id reference format for sshd_x11_use_localhost (RHBZ#1921643)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.54-5
changelog:
  - Create subpackage to hold ansible playbooks per rule (RHBZ#1966589)
  - Fix Bash remediation of dconf_gnome_login_retries (RHBZ#1967566)


author: Jan Černý <jcerny@redhat.com> - 0.1.57-1
changelog:
  - Rebase to the 0.1.57 upstream release
  - Update RHEL7 DISA STIG profile to v3r4 (RHBZ#1996678)
  - Split CIS profile (RHBZ#1953787)


author: Watson Sato <wsato@redhat.com> - 0.1.57-7
changelog:
  - Add warning how to override audit buffer (RHBZ#1993822)
  - Fix name of antivirus package in STIG profile (RHBZ#2066321)
  - Update RHEL7 DISA STIG profile to v3r7 (RHBZ#2079217)


author: Watson Sato <wsato@redhat.com> - 0.1.63-1
changelog:
  - Update to the latest upstream release (RHBZ#2116359)
  - Fix SSH Key permissions (RHBZ#2021258)
  - Remove PCI-DSS Benchmark(RHBZ2038165)
  - Updated source of CVE data feed(RHBZ#2028432)
  - Improved alignment with DISA's RHEL7 STIG(RHBZ#1967950)
  - Update RHEL7 STIG profile to v3r8 (RHBZ#2112939)
  - Add warning how to override audit buffer (RHBZ#1993822)
  - Fix smartcard_auth rule for systems installed without authconfig (RHBZ#2116359)
  - Fix check of enable_fips_mode on s390x (RHBZ#2116359)
  - Fix applicability of pam_pkcs11 and grub2 rules on s390x (RHBZ#2116359)


author: Watson Sato <wsato@redhat.com> - 0.1.66-1
changelog:
  - Rebase to a new upstream release 0.1.66 (RHBZ#2158410)
  - Update RHEL7 STIG profile to V3R10 (RHBZ#2152657)
  - Align file_permissions_sshd_private_key with DISA Benchmark (RHBZ#2123284)
  - Fix remediation of audit watch rules (RHBZ#2123367)
  - Fix check firewalld_sshd_port_enabled (RHBZ#2158410)
  - Fix accepted control flags for pam_pwhistory (RHBZ#2158410)
  - Unselect rule logind_session_timeout (RHBZ#2158410)
  - Add support rainer scripts in rsyslog rules (RHBZ#2170038)


author: Jan Černý <jcerny@redhat.com> - 0.1.69-1
changelog:
  - Rebase to the latest upstream release (RHBZ#2221694)
  - Make IPv6 related rules applicable only in case IPv6 is actually enabled. (RHBZ#2210276)
  - update ANSSI BP-028 profiles to be aligned with version 2.0 (RHBZ#2155793)
  - Correct URL used to download CVE checks. (RHBZ#2223817)


author: Marcus Burghardt <maburgha@redhat.com> - 0.1.72-1
changelog:
  - Rebase to a new upstream release 0.1.72 (RHEL-25251)
  - Include filter to dracut files in audit_rules_privileged_commands rule (RHEL-11938)


author: Petr Hracek <phracek> - 4.1.0-0.20.20120314git3c2946
changelog:
  - Multiple packages are installing files under /etc/tmpfiles.d
  - comply http://fedoraproject.org/wiki/Packaging:Guidelines#Tmpfiles.d
  - Resolves: rhbz#1121958


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-261
changelog:
  - Update sudo_role_template() to allow caller domain to read syslog pid files
  Resolves: rhbz#1651253


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-264
changelog:
  - Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command
  Resolves: rhbz#1765063


author: Zdenek Pytela <zpytela@redhat.com> - 3.13.1-267
changelog:
  - Allow chronyd_t domain to exec shell
  Resolves: rhbz#1775573
  - Allow pmie daemon to send signal pcmd daemon
  Resolves: rhbz#1770123
  - Allow auditd poweroff or switch to single mode
  Resolves: rhbz#1780332


author: Zdenek Pytela <zpytela@redhat.com> - 3.13.1-268
changelog:
  - Allow rhsmd read process state of all domains and kernel threads
  Resolves: rhbz#1837461
  - Allow ipa-adtrust-install restart sssd and dirsrv services
  Resolves: rhbz#1820298
  - Allow nagios_plugin_domain execute programs in bin directories
  Resolves: rhbz#1824625
  - selinux policy: add the right context for org.freeipa.server.trust-enable-agent
  Related: rhbz#1820298


author: Zdenek Pytela <zpytela@redhat.com> - 3.13.1-268.2
changelog:
  - Allow certmonger add new entries in a generic certificates directory
  Resolves: rhbz#1879496
  - Allow slapd add new entries in ldap certificates directory
  Resolves: rhbz#1879496
  - Add miscfiles_add_entry_generic_cert_dirs() interface
  Resolves: rhbz#1879496


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.3-1
changelog:
  - update to 0.8.3 to also notice and reflect changes caused by internal
    add/modify/modrdn/delete operations


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.4-1
changelog:
  - update to 0.8.4 to fix:
    - problems updating references, particularly those for %referred() (#474478)
    - inability to notice internal add/modify/modrdn/delete operations (really
      this time) (#474426)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.5-2
changelog:
  - make the example nsslapd-pluginpath values the same on 32- and 64-bit
    systems, because we can depend on the directory server "knowing" which
    directory to search for the plugins


author: Nalin Dahyabhai <nalin@redhat.com> - 0.15-1
changelog:
  - fix %deref and %referred to fail rather than return a valid-but-empty
    result when they fail to evaluate (reported by Rob Crittenden)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.16-1
changelog:
  - fix NIS server startup problem when no port is explicitly configured and
    we're using portmap instead of rpcbind (#500903)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.17-3
changelog:
  - change buildreq from fedora-ds-base-devel to 389-ds-base-devel, which
    should avoid multilib conflicts from installing both arches of the new
    package (#511504)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.18-1
changelog:
  - update to 0.18
    - add a deref_rf function
    - schema-compat: don't respond to search requests for which there's no backend
    - schema-compat: add the ability to do standalone compat containers


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-1
changelog:
  - update to 0.21
    - schema-compat: don't look at standalone compat containers for a search,
      since we'll already have looked at the group container


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-2
changelog:
  - make sure we always pull in nss-devel and nspr-devel, and the right
    ldap toolkit for the Fedora or RHEL version


author: Nalin Dahyabhai <nalin@redhat.com> - 0.24-1
changelog:
  - carry our own yp.x, so that we don't get bitten if libc doesn't include
    yp client routines
  - we need rpcgen at build-time now


author: Nalin Dahyabhai <nalin@redhat.com> - 0.25-1
changelog:
  - speed up building compat entries which reference thousands of other entries
    (more of #692690)
  - 389-ds-base is apparently exclusive to x86_64 and %{ix86} on EL, so we have
    to be, too


author: Nalin Dahyabhai <nalin@redhat.com> - 0.26-1
changelog:
  - when building for 389-ds, use libpthread's read-write locks instead of
    NSPR's (part of #730394/#730403)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.27-1
changelog:
  - when building for 389-ds, use Slapi_RWLocks if they appear to be available
    (the rest of #730394/#730403)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.28-1
changelog:
  - when configured with --with-ldap=openldap, link with -lldap_r rather
    than -lldap (rmeggins, #769107)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.29-1
changelog:
  - add regmatchi/regsubi formatting functions which work like regmatch/regsub,
    but do matching in a case-insensitive manner
  - update NIS map defaults to match {CRYPT} userPassword values in a
    case-insensitive manner so that we also use {crypt} userPassword values
  - fix inconsistencies in the NIS service stemming from using not-normalized DNs
    in some places where it should have used normalized DNs


author: Nalin Dahyabhai <nalin@redhat.com> - 0.30-1
changelog:
  - skip recalculations when the attributes which changed don't factor into
    our calculations (part of #771493)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.33-1
changelog:
  - get more aggressive about skipping unnecessary calculations (most of
    the problem in #771444, though not the approach described there)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34-1
changelog:
  - do entry comparisons ourselves, albeit less throughly, to avoid the worst
    case in pathological cases (more of #771444)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.35-1
changelog:
  - add mmatch/mregmatch[i]/mregsub[i] formatting functions which work like
    match/regmatch[i]/regsub[i], but which can handle and return lists of
    zero or more results (part of #783274)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.36-1
changelog:
  - take steps to avoid making yp_first/yp_next clients loop indefinitely
    when a single LDAP entry produces multiple copies of the same NIS key
    for a given map


author: Nalin Dahyabhai <nalin@redhat.com> - 0.37-1
changelog:
  - fix a compile error on systems where LDAP_SCOPE_SUBORDINATE isn't defined
    (reported by Christian Neuhold)
  - conditionalize whether we have a build dependency on tcp_wrappers (older
    releases) or tcp_wrappers-devel (newer releases)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.39-1
changelog:
  - add a "default" function for trying to evaluate one expression, then
    another, then another... (part of #767372)
  - when creating a compat entry based on a real entry, set an entryUSN based on
    the source entry or the rootDSE (freeipa #864); the "scaffolding" entries
    won't have them


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-1
changelog:
  - treat padding values passed to the "link" function as expressions to be
    evaluated rather than simply as literal values (part of #767372)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.41-1
changelog:
  - log errors evaluating pad expressions in %link rather than continuing on
    until we hit an arithmetic exception (#810258)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a leak due to us assuming that slapi_mods_add_smod() not taking ownership
    of an smod along with its contents, when it just keeps the contents


author: Nalin Dahyabhai <nalin@redhat.com> - 0.43-1
changelog:
  - reintroduce support for directory server transactions (nhosoi, IPA#3046)
  - control transaction support at run-time, deciding when to do things based
    on the value of the nsslapd-pluginbetxn attribute in the plugin's entry
  - NIS: add default settings for shadow.byname and passwd.adjunct.byname maps


author: Nalin Dahyabhai <nalin@redhat.com> - 0.44-1
changelog:
  - add missing newline to a couple of debug log messages
  - note whether or not betxn support is compiled in as part of the
    nsslapd-pluginVersion value we report to the server
  - register callbacks in the same order in both plugins, so that
    their log messages are logged in the same order


author: Nalin Dahyabhai <nalin@redhat.com> - 0.44-2
changelog:
  - set betxn support to be disabled by default on Fedora 17 or EL 5 or older,
    which have versions of IPA < 3.0, per mkosek on freeipa-devel


author: Nalin Dahyabhai <nalin@redhat.com> - 0.46-1
changelog:
  - when checking if we can skip processing for a given change, pay attention to
    whether or not the changes cause the entry to need to be added or removed
    from a map (#912673)
  - check SLAPI_PLUGIN_OPRETURN in post-change hooks, in case the backend failed
    to update things but the server called us anyway


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.5-1
changelog:
  - merge Alexander Bokovoy's patches to
    - teach the schema compatibility plugin to optionally serve user and group
      information retrieved from libc as part of a set of compat entries
    - handle simple bind requests for those entries by calling out to PAM
    - to rewrite the DN of incoming bind requests to compat entries to point
      at the source entries, instead of returning a referral which most clients
      won't handle
  - include IPA-specific docs as docs


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.6-1
changelog:
  - only buildrequire libsss_nss_idmap-devel on releases that included SSSD
    version 1.10 or later, where it first appeared


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.7-1
changelog:
  - fix building against versions of directory server older than 1.3.0, which
    first introduced slapi_escape_filter_value()


author: Nalin Dahyabhai <nalin@redhat.com> - 0.48-1
changelog:
  - try to gracefully handle failures obtaining internal locks
  - fix locating-by-name of entries with names that require escaping
  - add self-tests for nsswitch and PAM functionality
  - make nsswitch mode properly handle user and group names with commas in them
  - handle attempts to PAM authenticate to compat groups (i.e., with failure)
  - drop the "schema-compat-origin" attribute


author: Nalin Dahyabhai <nalin@redhat.com> - 0.49-1
changelog:
  - add {nis,schema-compat}-ignore-subtree and -restrict-subtree settings,
    which should let us avoid deadlocks when tasks are modifying data in
    the backend database (#1007451)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.50-1
changelog:
  - if we get an EPIPE while registering with rpcbind, try to reconnect and
    retransmit before giving up


author: Nalin Dahyabhai <nalin@redhat.com> - 0.51-1
changelog:
  - fix another request argument memory leak in NIS server (#1040159)
  - fix miscellaneous items found by static analysis


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-1
changelog:
  - correctly reflect whether or not we're built with transaction support in
    the module's nsslapd-pluginVersion attribute
  - fix a couple of should've-used-memmove()-instead-of-memcpy() cases which
    would hit when removing maps or groups of maps (#1043546/#1043638)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-3
changelog:
  - remove ExclusiveArch if %{rhel} is 7 or higher, because 389-ds-base gets
    built for everything now (#1055711)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-5
changelog:
  - backport correction to the default settings for hosts.byname and
    hosts.byaddr NIS maps, so that their data items start with the host's
    address rather than a name (#1090948)


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-1
changelog:
  - Add support for IDM's ID views
  - Allow searching SSSD-provided users as memberUid case-insensitevly
  - Resolves: #1151436


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-2
changelog:
  - Complete ID views support to BIND operation
  - Ignore ID views outside schema-compat subtrees
  - Use 389-ds API compatible with RHEL 7.0
  - Resolves: #1151436


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-6
changelog:
  - delay sending responses from compat tree after map cache search
  - Resolves: #1273587
  - fix processing of ID views
  - Resolves: #1277576, #1265465


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-1
changelog:
  - New upstream release:
    - support updating passwords for the users from the primary tree
    - populate map cache in a separate thread to avoid blocking the DS
  - Resolves: #1292148


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-2
changelog:
  - Fix reported coverity issues
  - Make sure slapi-nis continue to work with SSSD 1.14 when default domain is defined
  - Resolves: #1292148


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-4
changelog:
  - Fixed: UPN-based search for AD users does not match an entry in slapi-nis map cache
  - Resolves: #1361123
  - Fixed: slapi-nis plugin modifies DS data
  - Resolves: #1360245


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-5
changelog:
  - Resolves: #1473572
  - Fixed: Make changes in overrides available in the compat tree at runtime
  - Resolves: #1473577
  - Fixed: slapi-nis should use requests to SSSD with ability to cancel them with a timeout


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-8
changelog:
  - Fixed: #1473572
  - Changes of ID overrides now force clearing of affected SSSD cache entries on IPA master
  - Related: #1473577
  - Synchronize timeout-enabled code with ipa-extdom-extop


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
changelog:
  - Upstream release 0.56.5
  - Resolves: rhbz#1820124 When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
  - Resolves: rhbz#1820122 ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED
  - Resolves: rhbz#1819018 ipa slapi-nis stack traces review request for LDAP server deadlock
  - Resolves: rhbz#1830894 Memory leak during search of idview overrides


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-4
changelog:
  - CVE 2021-3480:  slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
  - Resolves: rhbz#1942937


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - upstream release 0.60.0
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Resolves: rhbz#1978748
    Release adds following fixes:
    - Fix ID views integration
    - Fix base scope lookups
    - Bump NIS max dgram size to 8KB by default instead of 1KB
    - Allow to rebuild the compat tree


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog
  - Resolves: RHEL-11869


author: Adam Stokes <ajs at redhat dot com> = 1.8-21
changelog:
  - more sanitizing options for log files
  - rhbz fixes from RHEL version merged into trunk
  - progressbar update


author: Adam Stokes <ajs at redhat dot com> = 1.9-1
changelog:
  - version bump 1.9
  - replaced compression utility with xz
  - strip threading/multiprocessing
  - simplified progress indicator
  - pylint update
  - put global vars in class container
  - unittests
  - simple profiling
  - make use of xgettext as pygettext is deprecated


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-3
changelog:
  - Fix cluster plugin dlm lockdump for el6
  - Add sssd plugin to collect configuration and logs
  - Collect /etc/anacrontab in system plugin
  - Correct handling of redhat-release for el6


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-4
changelog:
  - Fix collection of logs and config files in sssd.py
  - Add support for collecting entitlement certificates in rhn.py


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-6
changelog:
  - Fix collection of chkconfig output in startup.py
  - Collect /etc/dhcp in dhcp.py plugin
  - Collect dmsetup ls --tree output in devicemapper.py
  - Collect lsblk output in filesys.py


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-9
changelog:
  - Collect yum repository list by default
  - Add basic Infiniband plugin
  - Add plugin for scsi-target-utils iSCSI target
  - Fix autofs plugin LC_ALL usage
  - Fix collection of lsusb and add collection of -t and -v outputs
  - Extend data collection by qpidd plugin
  - Add ethtool pause, coalesce and ring (-a, -c, -g) options to network plugin


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-10
changelog:
  - Fix collection of data from LVM2 reporting tools in devicemapper plugin
  - Add /proc/vmmemctl collection to vmware plugin


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-11
changelog:
  - Truncate files that exceed specified size limit
  - Add support for collecting Red Hat Subscrition Manager configuration
  - Collect /etc/init on systems using upstart
  - Don't strip whitespace from output of external programs
  - Collect ipv6 neighbour table in network module
  - Collect basic cgroups configuration data


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-15
changelog:
  - Fix brctl collection when a bridge contains no interfaces
  - Fix up2dateclient path in hardware plugin


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-16
changelog:
  - Fix execution of RHN hardware.py from hardware plugin
  - Fix hardware plugin to support new lsusb path


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-18
changelog:
  - Collect fence_virt.conf in cluster module
  - Fix collection of /proc/net directory tree
  - Gather output of cpufreq-info when present
  - Fix brctl showstp output when bridges contain multiple interfaces
  - Add /etc/modprobe.d to kernel module
  - Ensure relative symlink targets are correctly handled when copying
  - Fix satellite and proxy package detection in rhn plugin
  - Collect stderr output from external commands
  - Collect /proc/cgroups in the cgroups module
    Resolve: bz784874
  - Collect /proc/irq in the kernel module
  - Fix installed-rpms formatting for long package names
  - Add symbolic links for truncated log files
  - Collect non-standard syslog and rsyslog log files
  - Use correct paths for tomcat6 in RHN module
  - Obscure root password if present in anacond-ks.cfg
  - Do not accept embedded forward slashes in RHN usernames
  - Add new sunrpc module to collect rpcinfo for gluster systems


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-19
changelog:
  - Collect additional diagnostic information for realtime systems
  - Improve sanitization of RHN user and case number in report name
  - Fix verbose output and debug logging
  - Add basic support for CloudForms data collection
  - Add support for Subscription Asset Manager diagnostics


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-22
changelog:
  - Correct aeolus debug invocation in CloudForms module
  - Update gluster module for gluster-3.3
  - Add additional command output to gluster module
  - Add support for collecting gluster configuration and logs


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-29
changelog:
  - Collect the swift configuration directory in gluster module
  - Update IPA module and related plug-ins


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-31
changelog:
  - Avoid calling volume status when collecting gluster statedumps
  - Use a default report name if --name is empty
  - Quote tilde characters passed to shell in RPM module
  - Collect KDC and named configuration in ipa module
  - Sanitize hostname characters before using as report path
  - Collect /etc/multipath in device-mapper module
  - New plug-in for PostgreSQL
  - Add OpenStack module
  - Avoid deprecated sysctls in /proc/sys/net
  - Fix error logging when calling external programs
  - Use ip instead of ifconfig to generate network interface lists


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-32
changelog:
  - Collect /proc/pagetypeinfo in memory module
  - Strip trailing newline from command output
  - Add sanlock module
  - Do not collect archived accounting files in psacct module
  - Call spacewalk-debug from rhn module to collect satellite data


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-33
changelog:
  - Add Red Hat Update Infrastructure module
  - Collect /proc/iomem in hardware module
  - Collect subscription-manager output in general module
  - Collect rhsm log files in general module
  - Fix exception in gluster module on non-gluster systems
  - Fix exception in psql module when dbname is not given


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-35
changelog:
  - Report --name and --ticket values as defaults
  - Fix device-mapper command execution logging
  - Fix data collection and rename PostreSQL module to pgsql


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-3
changelog:
  - Add crm_report support to cluster plug-in
    Resolves: bz839342
  - Fix rhel_version() usage in cluster and s390 plug-ins
    Resolves: bz916705
  - Strip trailing newline from command output
    Resolves: bz971420


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-4
changelog:
  - Do not attempt to read RPC pseudo files in networking plug-in
    Resolves: bz996992, bz996994
  - Restrict wbinfo collection to the current domain
    Resolves: bz997101
  - Add obfuscation of luci secrets to cluster plug-in
    Resolves: bz997090
  - Add XFS plug-in
    Resolves: bz997094
  - Fix policy class handling of --tmp-dir
    Resolves: bz997083
  - Do not set batch mode if stdin is not a TTY
    Resolves: bz1002943
  - Attempt to continue when reading bad input in interactive mode
    Resolves: bz1002943


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-5
changelog:
  - Include /etc/yaboot.conf in boot plug-in
    Resolves: bz1001966
  - Fix collection of brctl output in networking plug-in
    Resolves: bz1019235
  - Verify limited set of RPM packages by default
    Resolves: bz1019863
  - Do not strip newlines from command output
    Resolves: bz1019338
  - Limit default sar data collection
    Resolves: bz1001599


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-6
changelog:
  - Remove version checks in gluster plug-in
    Resolves: bz1015606
  - Check for usable temporary directory
    Resolves: bz1019517
  - Fix --alloptions command line option
    Resolves: bz1019356
  - Fix configuration fail regression
    Resolves: bz1019516


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-7
changelog:
  - Add domainname output to NIS plug-in
    Resolves: bz1026906
  - Collect /var/log/squid in squid plug-in
    Resolves: bz1026829
  - Collect mountstats and mountinfo in filesys plug-in
    Resolves: bz1026869
  - Add PowerPC plug-in from upstream
    Resolves: bz1025236


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-9
changelog:
  - Restore --build command line option
    Resolves: bz1015599
  - Collect saved vmcore-dmesg.txt files
    Resolves: bz1026959
  - Normalize temporary directory paths
    Resolves: bz829069


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-10
changelog:
  - Add nfs client plug-in
    Resolves: bz1028072
  - Fix traceback when sar module force-enabled
    Resolves: bz1028125


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-12
changelog:
  - Fix typo in yum plug-in add_forbidden_paths
    Resolves: bz829297
  - Add krb5 plug-in and drop collection of krb5.keytab
    Resolves: bz1028150


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-15
changelog:
  - Remove debug statements from logs plugin
    Resolves: bz1030042
  - Make ethernet interface detection more robust
    Resolves: bz1030824
  - Fix specifying multiple plugin options on the command line
    Resolves: bz1031124
  - Make log and message levels match previous versions
    Resolves: bz1031126
  - Log a warning message when external commands time out
    Resolves: bz1034956
  - Remove --upload command line option
    Resolves: bz1028484
  - Update sos UI text to match upstream
    Resolves: bz1034970


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-16
changelog:
  - Add new plugin to collect OpenHPI configuration
    Resolves: bz1028121
  - Fix cluster plugin crm_report support
    Resolves: bz1030553
  - Fix file postprocessing in ldap plugin
    Resolves: bz1030602
  - Remove collection of anaconda-ks.cfg from general plugin
    Resolves: bz1034865


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-17
changelog:
  - Fix get_option use in cluster plugin
    Resolves: bz1030553
  - Fix debug logging to file when given '-v'
    Resolves: bz1031126
  - Always treat rhevm plugin's vdsmlogs option as a string
    Resolves: bz1030617
  - Run the rhsm-debug script from yum plugin
    Resolves: bz1039036


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-18
changelog:
  - Prevent file descriptor leaks when using Popen
    Resolves: bz1051009
  - Disable zip archive creation when running rhsm-debug
    Resolves: bz1039036
  - Include volume geo-replication status in gluster plugin
    Resolves: bz1036752


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-19
changelog:
  - Fix generation of volume names in gluster plugin
    Resolves: bz1036752
  - Add distupgrade plugin
    Resolves: bz1059760


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-3
changelog:
  - [pam] add pam_tally2 and faillock support
    Resolves: bz1127631
  - [postgresql] obtain db password from the environment
    Resolves: bz1126001
  - [pcp] add Performance Co-Pilot plugin
    Resolves: bz1119833
  - [nfsserver] collect /etc/exports.d
    Resolves: bz1118921
  - [sosreport] handle --compression-type correctly
    Resolves: bz1118152
  - [anaconda] redact passwords in kickstart configurations
    Resolves: bz1112175
  - [haproxy] add new plugin
    Resolves: bz1107865
  - [keepalived] add new plugin
    Resolves: bz1105247
  - [lvm2] set locking_type=0 when calling lvm commands
    Resolves: bz1102285
  - [tuned] add new plugin
    Resolves: bz1095447
  - [cgroups] collect /etc/sysconfig/cgred
    Resolves: bz1083677
  - [plugins] ensure doc text is always displayed for plugins
    Resolves: bz1065473
  - [sosreport] fix the distribution version API call
    Resolves: bz1028111
  - [docker] add new plugin
    Resolves: bz1084990
  - [openstack_*] include broken-out openstack plugins
    Resolves: bz1140756
  - [mysql] support MariaDB
    Resolves: bz1106600
  - [openstack] do not collect /var/lib/nova
    Resolves: bz1106423
  - [grub2] collect grub.cfg on UEFI systems
    Resolves: bz1086648
  - [sosreport] handle out-of-space errors gracefully
    Resolves: bz1087977
  - [firewalld] new plugin
    Resolves: bz1100505
  - [networking] collect NetworkManager status
    Resolves: bz1100505
  - [kpatch] new plugin
    Resolves: bz1110918
  - [global] update to upstream 3.2 release
    Resolves: bz1026962


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-4
changelog:
  - [yum] call rhsm-debug with --no-subscriptions
    Resolves: bz1116349
  - [powerpc] allow PowerPC plugin to run on ppc64le
    Resolves: bz1140427
  - [package] add Obsoletes for sos-plugins-openstack
    Resolves: bz1140756


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-5
changelog:
  - [corosync] add postprocessing for corosync-objctl output
    Resolves: bz1087515
  - [ovirt_hosted_engine] fix exception when force-enabled
    Resolves: bz1148551


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-6
changelog:
  - [tomcat] add support for tomcat7 and default log size limits
    Resolves: bz1148375
  - [mysql] obtain database password from the environment
    Resolves: bz1126001


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-8
changelog:
  - [kpatch] do not attempt to collect data if kpatch is not installed
    Resolves: bz1110918
  - [archive] drop support for Zip archives
    Resolves: bz1118152


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-9
changelog:
  - [navicli] catch exceptions if stdin is unreadable
    Resolves: bz1166039
  - [docs] update man page for new options
    Resolves: bz1171658
  - [sosreport] make all utf-8 handling user errors=ignore
    Resolves: bz1164267


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-11
changelog:
  - [sosreport] do not make logging calls after OSError
    Resolves: bz1087977
  - [sosreport] catch OSError exceptions in SoSReport.execute()
    Resolves: bz1087977
  - [anaconda] make useradd password regex tolerant of whitespace
    Resolves: bz1112175


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-12
changelog:
  - [plugin] limit path names to PC_NAME_MAX
    Resolves: bz1026962
  - [squid] collect files from /var/log/squid
    Resolves: bz1026962
  - [sosreport] log plugin exceptions to a file
    Resolves: bz1026962
  - [ctdb] fix collection of /etc/sysconfig/ctdb
    Resolves: bz1026962
  - [sosreport] fix silent exception handling
    Resolves: bz1026962


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-17
changelog:
  - [openstack_neutron] neutron configuration and logs files not captured
    Resolves: bz1213315
  - [ovirt] remove ovirt-engine setup answer file password leak
    Resolves: bz1162788
  - [networking] network plugin fails if NetworkManager is disabled
    Resolves: bz1206633


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-20
changelog:
  - [cluster] crm_report fails to run because dir already exists
    Resolves: bz1200526
  - [foreman] Skip collection of generic resources
    Resolves: bz1135317
  - [apache] Added collection of conf.modules.d dir for httpd 2.4
    Resolves: bz1183265
  - [pcp] collect /etc/pcp.conf
    Resolves: bz1183297
  - [puppet] adding new plugin for puppet
    Resolves: bz1183768
  - [block] Don't use parted human readable output
    Resolves: bz1183770
  - [general] Better handling --name and --ticket-number in
    Resolves: bz1185093
  - [networking] additional ip, firewall and traffic shaping
    Resolves: bz1194554
  - [infiniband] add opensm and infiniband-diags support
    Resolves: bz1194556
  - [plugins/rabbitmq] Added cluster_status command output
    Resolves: bz1197006
  - [networking] re-add 'ip addr' with a root symlink
    Resolves: bz1209454
  - [kimchi] add new plugin
    Resolves: bz1209840
  - [iprconfig] add plugin for IBM Power RAID adapters
    Resolves: bz1221932
  - [ovirt] Collect engine tunables and domain information.
    Resolves: bz1236101
  - [activemq] Honour all_logs and get config on RHEL
    Resolves: bz1236111
  - [cluster] Add luci to packages for standalone luci servers
    Resolves: bz1236124
  - [hpasm] hpasmcli commands hang under timeout
    Resolves: bz1214209
  - [mysql] Collect log file
    Resolves: bz1210906
  - [chrony] add chrony plugin
    Resolves: bz1165418


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-21
changelog:
  - [cluster] enable crm_report password scrubbing
    Resolves: bz1164864
  - [sosreport] fix command-line report defaults
    Resolves: bz1219720
  - [virsh] add new plugin, add listing of qemu
    Resolves: bz1195086
  - [sap*,vhostmd] new plugins for SAP
    Resolves: bz1195608


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-22
changelog:
  - [general] verify --profile contains valid plugins only
    Resolves: bz1184602
  - [kernel,mpt,memory] additional kernel-related diagnostics
    Resolves: bz1194159


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-23
changelog:
  - [ceph] add calamari and ragos logs and configs
    Resolves: bz1210527
  - [iprconfig] enable plugin for ppc64* architectures
    Resolves: bz1238726


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-25
changelog:
  - [openstack] New Openstack Trove (DBaaS) plugin
    Resolves: bz1238349
  - [services] Add more diagnostics to applications
    Resolves: bz1195087
  - [openstack_neutron] Obscure passwords and secrets
    Resolves: bz1240666


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-27
changelog:
  - [plugin] pass stderr through _collect_cmd_output
  - split dependencies of bz1185990 fix from bz1185990 patch
    Resolves: bz1185990


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-29
changelog:
  - [openvswitch] capture the logs, db and OVS bridges details
    Resolves: bz1242507
  - [logs] fix reference to missing 'rsyslog_conf' variable
    Resolves: bz1249705
  - [sapnw] Add check if saphostctrl is not present, dont use Set
    Resolves: bz1195608
  - [Plugin] fix handling of symlinks in non-sysroot environments
    Resolves: bz1248672


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-36
changelog:
  - [ceph] collect /var/lib/ceph and /var/run/ceph
    Resolves: bz1260607
  - [sosreport] prepare report in a private subdirectory
    Resolves: bz1290955


author: Pavel Moravec <pmoravec@redhat.com> = 3.3-2
changelog:
  - [grub2] grub2-mkconfig loads ext4 and brctl kernel
    Resolves: bz1116670
  - [ceph] skip collecting of all keyring and bindpass files
    Resolves: bz1260607
  - [omsa] add omreport storage controller
    Resolves: bz1299603
  - [atomichost] fix collection of 'docker info' output
    Resolves: bz1302146
  - [monit] fix add_copy_spec() arguments
    Resolves: bz1356945
  - [virtwho] add new plugin for virt-who agent
    Resolves: bz1353552


author: Pavel Moravec <pmoravec@redhat.com> = 3.3-3
changelog:
  - [nodejs][nms]: new plugins
    Resolves: bz1368393
  - [docker]: Gather more data and expand plugin options
    Resolves: bz1351647


author: Pavel Moravec <pmoravec@redhat.com> = 3.4-3
changelog:
  - [ceph] fix list formatting
    Resolves: bz1438269
  - [virsh] Handle properly cases when virsh commands fail
    Resolves: bz1444641
  - [openstack_*] fix issue with --verify option, extend pkglist for instack
    Resolves: bz1250346
  - [policies/redhat] accept 'oci' as a valid container type
    Resolves: bz1442078
  - [pacemaker] Collect user-defined logfile
    Resolves: bz1416535


author: Pavel Moravec <pmoravec@redhat.com> = 3.4-4
changelog:
  - [libvirt] fix per-process cgroup collection
    Resolves: bz1148381
  - [ceph] exclude temporary mount locations from collection
    Resolves: bz1449904
  - [policies/redhat] make missing 'filesystem' package non-fatal
    Resolves: bz1393961


author: Pavel Moravec <pmoravec@redhat.com> = 3.4-7
changelog:
  - [openstack plugins] Tripleo specific containerized services
    Resolves: bz1463635
  - [jars] Scan only /usr/{share,lib}/java by default
    Resolves: bz1482574
  - [gluster_block] Added new plugin gluster_block
    Resolves: bz1491964


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-2
changelog:
  - [vdo] revise collected files
    Resolves: bz1509079
  - further updates to OSP plugins in containerized environment
    Resolves: bz1506908
  - [opendaylight] new plugin
    Resolves: bz1483414
  - collect all keystone domains
    Resolves: bz1491042
  - haproxy, etcd and docker tracebacks
    Resolves: bz1519267
  - [origin] fix typo in oc adm diagnostics
    Resolves: bz1463509
  - [postgresql] Call SCL pg_dump with proper path
    Resolves: bz1494420


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-4
changelog:
  - [pcp] really apply sizelimit to logs collected
    Resolves: bz1353873
  - [opendaylight] collect more logs and puppet config
    Resolves: bz1483414
  - [plugins] allow add_cmd_output to collect binary output
    Resolves: bz1494420
  - [openstack_ironic] collect drivers, ports and much more
    Resolves: bz1517767
  - [openstack_cinder] check for api service running
    Resolves: bz1506908


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-5
changelog:
  - [rabbitmq] Log collection when run in containerized OSP
    Resolves: bz1525620
  - [ipa] add KRA logs and correct PKI directories
    Resolves: bz1535390
  - [opendaylight] Enable plugin by puppet-opendaylight package
    Resolves: bz1483414
  - [etcd] Do not collect private etcd keys
    Resolves: bz1539038


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-7
changelog:
  - [kernel] Disable gathering /proc/timer* statistics
    Resolves: bz1566933
  - [openstack_octavia] Add new plugin
    Resolves: bz1541100
  - [ovirt-provider-ovn] A new plugin
    Resolves: bz1547544


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-8
changelog:
  - [docker] backport three container related patches
    Resolves: bz1573907
  - [ovn] add two OpenVSwitch plugins
    Resoles: bz1560845


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-2
changelog:
  - [archive] fix add_string()/do_*_sub() regression
    Resolves: bz1474976
  - [kernel] handle case when bpftool installed but not implemented
    Resolves: bz1559756


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-3
changelog:
  - [sosreport] Add mechanism to encrypt final archive
    Resolves: bz1594327
  - [archive] fix stat typo
    Resolves: bz1597532
  - [rhui] Fix detection of CDS for RHUI3
    Resolves: bz1596494


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-4
changelog:
  - [apparmor,ceph] fix typo in add_forbidden_path
    Resolves: bz1609135
  - [policies] sanitize report label
    Resolves: bz1608384
  - [policies,process] make lsof execution optional, dont call on RHOSP
    Resolves: bz1613806


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-5
changelog:
  - [rhv-log-collector-analyzer] Add new plugin for RHV
    Resolves: bz1600158
  - [kubernetes|etcd] Support OpenShift 3.10 deployments
    Resolves: bz1616030


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-6
changelog:
  - [archive] fix leading path creation
    Resolves: bz1624043
  - [atomic] Define valid preset for RHEL Atomic
    Resolves: bz1626159
  - [utilities] wait till AsyncReader p.poll() returns None
    Resolves: bz1623070


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-12
changelog:
  - [ovirt_node] New plugin for oVirt Node
    Resolves: bz1591433
  - [podman] Add support for gathering information on podman
    Resolves: bz1646698
  - [postgresql] Do not limit dump size
    Resolves: bz1656278


author: Pavel Moravec <pmoravec@redhat.com> = 3.7-2
changelog:
  - [sos] bump release
    Resolves: bz1656812
  - [pcp] collect pmlogger without a sizelimit
    Resolves: bz1639166
  - [maas,mysql,npm,pacemaker,postgresql] fix plugopts data types
    Resolves: bz1697854
  - [foreman,satellite] increase plugin default timeouts
    Resolves: bz1697813
  - [sosreport] update sos.conf manpages
    Resolves: bz1311129
  - [openstack_instack] add ansible.log
    Resolves: bz1702802


author: Pavel Moravec <pmoravec@redhat.com> = 3.7-3
changelog:
  - [katello] support both locations of qpid SSL certs
    Resolves: bz1711305
  - [plugins] add vdsm plugin
    Resolves: bz1706060


author: Pavel Moravec <pmoravec@redhat.com> = 3.7-6
changelog:
  - [utilities] Fix high CPU usage and slow command collection
    Resolves: bz1733367
  - [sosreport,plugins] Stop plugin execution after timeout hit
    Resolves: bz1731007


author: Pavel Moravec <pmoravec@redhat.com> = 3.8-3
changelog:
  - [gluster] process files only from a statedump dir
    Resolves: bz1699381
  - [kernel] Don't collect trace file by default
    Resolves: bz1757662


author: Jan Jansky <jjansky@redhat.com> = 3.8-8
changelog:
  - Added Obsolete for leapp-repository-sos-plugin to solve
    conflicts during install/upgrade/downgrade of RPM.


author: Jan Jansky <jjansky@redhat.com> = 3.9-3
changelog:
  - [gluster] fix gluster volume splitlines iteration
    Resolves: bz1843520
  - [block] proper parsing of luks partition on self device
    Resolves: bz1850544
  - [pci] Update gating for lspci commands
    Resolves: bz1853701
  - [foreman] collects stats of some tables from foreman DB
    Resolves: bz1853235
  - [logs] collect also non-persistent journal logs
    Resolves: bz1850925


author: Jan Jansky <jjansky@redhat.com> = 3.9-5
changelog:
  - [gluster] remove generated state files
    Resolves: bz1857697
  - [kubernetes] ignore blank+empty lines
    Resolves: bz1859885
  - [networking] remove 'ethtool -e' option for bnx2x NICs
    Resolves: bz1870379
  - [auditd] collect /etc/audisp
    Resolves: bz1871207
  - [policy] Fix several failure conditions with upload
    Resolves: bz1886432
  - [postgresql] reorganize postgres from SCL
    Resolves: bz1897903


author: Jan Jansky <jjansky@redhat.com> = 3.9-5.3
changelog:
  - [candlepin/foreman] psql with --no-password
    Resolves: bz1932772
  - [foreman] proxy_password scrub in installer logs
    Resolves: bz1785813


author: Jan Jansky <jjansky@redhat.com> = 3.9-5.4
changelog:
  - [candlepin/foreman] psql with --no-password
    Resolves: bz1932772
  - [pacemaker] password scrub fix
    Resolves: bz1903144
  - [filesys] never collect panfs
    Resolves: bz1886784
  - [openstack_ceilometer] backend_url protected
    Resolves: bz1892692


author: Jan Jansky <jjansky@redhat.com> = 3.9-5.5
changelog:
  - [sssd] Add individual SSSD log files
    Resolves: bz1938932
  - [sssd] sssd plugin when sssd-common
    Resolves: bz1946641
  - [foreman] fix unmatched group in scrubbing installer logs
    Resolves: bz1956817
  - [foreman] Sizelimit foreman-maintain and installer logs
    Resolves: bz1964000
  - [pulpcore] add plugin for pulp-3
    Resolves: bz1956672


author: Barbora Vassova <bvassova@redhat.com> = 3.9-5.12
changelog:
  - [redhat] Change authentication method for RHEL
    Resolves: RHEL-21176
  - [rpm] Capture the output of 'rpm --showrc'
    Resolves: RHEL-2357
  - [candlepin] collect information about SCA
    Resolves: RHEL-22263
  - [foreman] scrub admin init password in installer logs
    Resolves: RHEL-22264


author: Victor Toso <victortoso@redhat.com> - 0.35-5
changelog:
  - Keepalive fix
    Resolves: rhbz#1719736
  - Fix hang on migration after password expired
    Resolves: rhbz#1761776


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-16
changelog:
  - Resolves: #1738582 - CVE-2019-12525 squid: parsing of header 
    Proxy-Authentication leads to memory corruption


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-17
changelog:
  - Resolves: #1828361 - CVE-2020-11945 squid: improper access restriction upon
    Digest Authentication nonce replay could lead to remote code execution
  - Resolves: #1828362 - CVE-2019-12519 squid: improper check for new member in
    ESIExpression::Evaluate allows for stack buffer overflow [rhel


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-17.2
changelog:
  - Resolves: #1802516 - CVE-2020-8449 squid: Improper input validation issues
    in HTTP Request processing
  - Resolves: #1802515 - CVE-2020-8450 squid: Buffer overflow in a Squid acting
    as reverse-proxy
  - Resolves: #1853129 - CVE-2020-15049 squid: request smuggling and poisoning
    attack against the HTTP cache
  - Resolves: #1802517 - CVE-2019-12528 squid: Information Disclosure issue in
    FTP Gateway


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-17.4
changelog:
  - Resolves: #1872349 - CVE-2020-24606 squid: Improper Input Validation could
    result in a DoS
  - Resolves: #1872327 - CVE-2020-15810 squid: HTTP Request Smuggling could
    result in cache poisoning
  - Resolves: #1872342 - CVE-2020-15811 squid: HTTP Request Splitting could
    result in cache poisoning


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-17.6
changelog:
  - Resolves: #1944256 - CVE-2020-25097 squid: improper input validation may allow
    a trusted client to perform HTTP Request Smuggling


author: Stepan Broz <sbroz@redhat.com> - 7:3.5.20-17.10
changelog:
  - Resolves: RHEL-16779 - squid: NULL pointer dereference in the gopher protocol
    code -- Remove support for Gopher protocol (CVE-2023-46728)
  - Resolves: RHEL-18176 - squid: Buffer over-read in the HTTP Message processing
    feature (CVE-2023-49285)
  - Resolves: RHEL-18171 - squid: Incorrect Check of Function Return Value In
    Helper Process management (CVE-2023-49286)
  - Resolves: RHEL-16758 - squid: Denial of Service in SSL Certificate validation
    (CVE-2023-46724)
  - Resolves: RHEL-19557 - squid: denial of service in HTTP request parsing
    (CVE-2023-50269)
  - Resolves: RHEL-26082 - squid: denial of service in HTTP header parser
    (CVE-2024-25617)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - first build against glibc
  - patched out the use of setresuid(), which is available only on kernels
    2.1.44 and later


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated the init script to use reconfigure option to restart squid instead
    of shutdown/restart (both safer and quicker)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - cache & log dirs shouldn't be world readable
  - remove preun script (leave logs & cache @ uninstall)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - switch to using group squid
  - turn off icmp (insecure)
  - update to 2.2.DEVEL3
  - build FAQ docs from source


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix compliance with ftp RFCs
    (http://www.wu-ftpd.org/broken-clients.html)
  - Work around a bug in some versions of autoconf
  - BuildPrereq sgml-tools - we're using sgml2html


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix init script again (#11699)
  - add --enable-delay-pools (#11695)
  - update to STABLE3
  - update FAQ


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix path references in QUICKSTART (#15114)
  - fix initscript translations (#24086)
  - fix shutdown logic (#24234), patch from <jos@xos.nl>
  - add /etc/sysconfig/squid for daemon options & shutdown timeouts
  - three more bugfixes from the Squid people
  - update FAQ.sgml
  - build and ship auth modules (#23611)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.STABLE1 + patches
  - enable some more configure options (#24981)
  - oops, ship /etc/sysconfig/squid


author: Bill Nottingham <notting@redhat.com>
changelog:
  - 2.4.STABLE3 + patches
  - turn off HTCP at request of maintainers
  - leave SNMP enabled in the build, but disabled in the default config


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE3-0
changelog:
  - Spec file change to enable the nul storage module. bugzilla #74654
  - Upgrade to 2.5STABLE3 with current official patches.
  - Added --enable-auth="basic,ntlm": closes bugzilla #90145
  - Added --with-winbind-auth-challenge: closes bugzilla #78691
  - Added --enable-useragent-log and --enable-referer-log, closes
  - bugzilla #91884


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-1
changelog:
  - New upstream version.
  - Fix the Source: line in this spec file to point to the correct URL.
  - redo the -location patch to work with the new upstream version.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Incorporate many upstream patches
  - Include many spec file changes from D.Johnson <dj@www.uk.linux.org>


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-3
changelog:
  - Clean up the spec file to work on 64-bit platforms (use %{_libdir}
    instead of /usr/lib, etc)
  - Make the release number in the changelog section agree with reality.
  - use -fPIE rather than -fpie.  s390 fails with just -fpie


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-1
changelog:
  - New upstream version, obsoletes many patches.
  - Fix --datadir passed to configure.  Configure automatically adds /squid
    so we shouldn't.
  - Remove the problematic triggerpostun trigger, since is's broken, and FC2
    never shipped with that old version.
  - add %{?_smp_mflags} to make line.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-2
changelog:
  - Include the first 10 upstream patches
  - Add a patch for the correct location of the winbindd pipe.  This closes
    bugzilla #107561
  - Remove the change to ssl_support.c from squid-2.5.STABLE3-build patch
    This closes #117851
  - Include /etc/pam.d/squid .  This closes #113404
  - Include a patch to close #111254 (assignment in assert)
  - Change squid.init to put output messages in /var/log/squid/squid.out
    This closes #104697
  - Only useradd the squid user if it doesn't already exist, and error out
    if the useradd fails.  This closes #118718.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5STABLE5-5
changelog:
  - Merge current upstream patches.
  - Fix the -pipe patch to have the correct name of the winbind pipe.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-1
changelog:
  - New upstream version, with 32 upstream patches.
    This closes #133970, #133931, #131728, #128143, #126726

  - Change the permissions on /etc/squid/squid.conf to 640.  This closes
    bugzilla #125007


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3
changelog:
  - include patch from Ulrich Drepper <drepper@redhat.com> to stop
    problems with O_NONBLOCK.  This closes #136049


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-1
changelog:
  - new upstream version, with 3 upstream patches.
    Updated the -build and -config patches
  - Include patch from Ulrich Drepper <frepper@redhat.com> to more
    intelligently close all file descriptors.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-2
changelog:
  - Add a triggerin on samba-common to make /var/cache/samba/winbindd_privileged
    accessable so that ntlm_auth will work.  It needs to be in this rpm,
    because the Samba RPM can't assume the squid user exists.
    Note that this will only work if the Samba RPM is recent enough to create
    that directory at install time instead of at winbindd startup time.
    That should be samba-common-3.0.0-15 or later.
    This fixes bugzilla #103726
  - Clean up extra whitespace in this spec file.
  - Add additional upstream patches. (Now 18 upstream patches).
  - patch #112 closes CAN-2005-0096 and CAN-2005-0097, remote DOS security holes.
  - patch #113 closes CAN-2005-0094, a remote buffer-overflow DOS security hole.
  - patch #114 closes CAN-2005-0095, a remote DOS security hole.
  - Remove the -nonbl (replaced by #104) and -close (replaced by #111) patches, since
    they're now fixed by upstream patches.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-4
changelog:
  - Include two more upstream patches for security vulns:
    bz#146783 Correct handling of oversized reply headers
    bz#146778 CAN-2005-0211 Buffer overflow in WCCP recvfrom() call


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE8-2
changelog:
  - new upstream version with 4 upstream patches.
  - Reorganize spec file to apply upstream patches first


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-4
changelog:
  - More upstream patches, including the fixed 2GB patch.
  - include the -libbind patch, which prevents squid from using the optional
    -lbind library, even if it's installed.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-6
changelog:
  - More upstream patches, including a fix for
    bz#157456 CAN-2005-1519 DNS lookups unreliable on untrusted networks


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-1
changelog:
  - new upstream version
  - enabled fakeauth utility (#154020)
  - enabled digest authentication scheme (#155882)
  - all error pages marked as config (#127836)
  - patch for 64bit statvfs interface (#153274)
  - added httpd config file for cachemgr.cgi (#112725)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-3
changelog:
  - removed "--enable-truncate" option (#165948)
  - added "--enable-cache-digests" option (#102134)
  - added "--enable-ident-lookups" option (#161640)
  - some clean up (#165949)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE11-5
changelog:
  - fix for #171213 - CVE-2005-3258 Squid crash due to malformed FTP response
  - more fixes from upstream


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE12-2
changelog:
  - rewriten patch squid-2.5.STABLE10-64bit.patch, it works with
    "--with-large-files" option now
  - fix for #72896 - squid does not support > 1024 file descriptors,
    new "--enable-fd-config" option for it.


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE1-1
changelog:
  - new upstream + the latest CVS snapshot from 2006/07/18
  - updated fd config patch
  - enabled epoll
  - fixed release format (#197405)
  - enabled WCCPv2 support (#198642)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-2
changelog:
  - upstream fixes:
    * Accept 00:00-24:00 as a valid time specification (upstream BZ #1794)
    * aioDone() could be called twice
    * Squid reconfiguration (upstream BZ #1800)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-3
changelog:
  - added fix for #183869 - squid can abort when getting status
  - added upstream fixes:
      * Bug #1796: Assertion error HttpHeader.c:914: "str"
      * Bug #1779: Delay pools fairness, correction to first patch
      * Bug #1802: Crash on exit in certain conditions where cache.log is not writeable
      * Bug #1779: Delay pools fairness when multiple connections compete for bandwidth
      * Clarify the select/poll/kqueue/epoll configure --enable/disable options
  - reworked fd patch for STABLE4


author: Martin Bacovsky <mbacovsk@redhat.com> - 7:2.6.STABLE16-2
changelog:
  - our fd_config patch was replaced by upstream's version 
  - Source1 (FAQ.sgml) points to local source (upstream's moved to wiki)


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE2-1
changelog:
  - upgrade to latest upstream 3.0.STABLE2
  - check config file before starting (#428998)
  - whitespace unification of init script
  - some minor path changes in the QUICKSTART file
  - configure with the --with-filedescriptors=16384 option


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE5-2
changelog:
  - fix configure detection of netfilter kernel headers (#435499),
    patch by aoliva@redhat.com
  - add support for negotiate authentication (#445337)


author: Jiri Skala <jskala@redhat.com> - 7:3.0.STABLE7-2
changelog:
  - used ncsa_auth.8 from man-pages. there will be this file removed due to conflict
  - fix #458593 noisy initscript
  - fix #463129 init script tests wrong conf file
  - fix #450352 - build.patch patches only generated files


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE13-2
changelog:
  - backported logfile.cc syslog parameters patch from 3.1 (b9443.patch)
  - GCC-4.4 workaround in src/wccp2.cc


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE17-2
changelog:
  - Bug #514014, update to 3.0.STABLE17 fixing the denial of service issues
    mentioned in Squid security advisory SQUID-2009_2.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-1
changelog:
  - Upgrade to next upstream release 3.1.0.13 with many new features
    * IPv6 support
    * NTLM-passthru
    * Kerberos/Negotiate authentication scheme support
    * Localized error pages based on browser language preferences
    * Follow X-Forwarded-For capability
    * and more..


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-7
changelog:
  - Include upstream patches fixing important operational issues
  - Enable ESI support now that it does not conflict with normal operation


author: Jiri Skala <jskala@redhat.com> 7:3.1.0.14-2
changelog:
  - fixed #532930 Syntactic error in /etc/init.d/squid
  - fixed #528453 cannot initialize cache_dir with user specified config file


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.15-3
changelog:
  - fixed #551302 PROXY needs libcap. Also increases security a little.
  - merged relevant upstream bugfixes waiting for next 3.1 release


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.16-4
changelog:
  - spec file modified to be fedora packaging guidline compliant
  - little shifting lines in init script header due to rpmlint complaint
  - fixes assertion during start up


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.16-6
changelog:
  - Patch for Squid security advisory SQUID-2010:2, denial of service
    issue in HTCP processing (CVE-2010-0639)


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.1-2
changelog:
  - Update to 3.1.1 Squid bug #2827 crash with assertion failed:
    FilledChecklist.cc:90: "conn() != NULL" under high load.


author: Jiri Skala <jskala@redhat.com>
changelog:
  - fixes #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.3-2
changelog:
  - Fully fix #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled
  - Various IPv6 related issues fixed, making tcp_outgoing_address behave
    as expected and no commResetFD warnings when using tproxy setups.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.4-1
changelog:
  - Upstream 3.1.4 bugfix release, issues relating to IPv6, TPROXY, Memory
    management, follow_x_forwarded_for, and stability fixes


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.5-2
changelog:
  - Upstream 3.1.5 bugfix release
  - Upstream patch for Bug #614665: Squid crashes with  ident auth
  - Upstream patches for various memory leaks


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.9-1
changelog:
  - upgrade to squid-3.2
  - fixes #720445 - Provide native systemd unit file
  - SysV initscript moved to subpackage
  - temproary disabled eCap


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.13-2
changelog:
  - fixes #747103 - squid does not start if /var/spool/squid is empty
  - fixes #747110 - squid does not start adding "memory_pools off"


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.2.0.14-6
changelog:
  - upstream gcc-4.7 patch
  - fix for bug #772483 running out of memory, mem_node growing out of bounds


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.3-2
changelog:
  - Resolved: #854356 - squid.service use PIDFile
  - Resolved: #859393 - Improve cache_swap script
  - Resolved: #791129 - disk space warning
  - Resolved: #862252 - reload on VPN or network up/down
  - Resolved: #867531 - run test suite during build
  - Resolved: #832684 - missing after dependency nss-lookup.target
  - Removed obsolete configure options


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.9-1
changelog:
  - Update to latest upstream version 3.2.9
  - Fixed: CVE-2013-1839
  - Removed: makefile-patch (+make check)


author: Michal Luscon <mluscon@redhat.com> - 7:3.3.8-1
changelog:
  - Update to latest upstream version 3.3.8
  - Fixed: active ftp crashing
  - Fix basic auth and log daemon DB helper builds.
  - Use xz compressed tarball, fix source URLs.
  - Fix bogus dates in %changelog.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-22
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Creation of this directory was moved to service file.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-23
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Creation of this directory was moved to tmpfiles.d conf file.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-24
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Creation of /var/run/squid was also needed to be in SPEC file.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-25
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Squid needs write access to /var/run/squid.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-28
changelog:
  - Related: #1330577 - CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 squid: multiple
    issues in ESI processing


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-30
changelog:
  - Related: #1334509 - CVE-2016-4553 squid: Cache poisoning issue in
    HTTP Request handling
  - Related: #1334492 - CVE-2016-4554 CVE-2016-4555 CVE-2016-4556 
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.10-1
changelog:
  - Resolves: #1273942 - Rebase squid to latest mature 3.5 version (3.5.10)
  - Resolves: #1322770 - CVE-2016-2569 CVE-2016-2570 CVE-2016-2571 CVE-2016-2572
    CVE-2016-3948 squid: various flaws
  - Resolves: #1254016 - IPv4 fallback is not working when connecting
    to a dualstack host with non-functional IPv6
  - Resolves: #1254018 - should BuildRequire: g++
  - Resolves: #1262456 - Squid delays on FQDNs that don't contains AAAA record
  - Resolves: #1336940 - Disable squid systemd unit start/stop timeouts
  - Resolves: #1344197 - /usr/lib/firewalld/services/squid.xml conflicts between
    attempted installs of squid-7:3.3.8-31.el7.x86_64 and
    firewalld-0.4.2-1.el7.noarch
  - Resolves: #1299972 - squid file descriptor limit hardcoded to 16384 via 
    compile option in spec file


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.10-4
changelog:
  - Resolves: #1349775 - Provide migration tools needed due to rebase
    to squid 3.5 as a separate sub-package


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.10-5
changelog:
  - Related: #1349775 - Provide migration tools needed due to rebase
    to squid 3.5 as a separate sub-package


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.20-5
changelog:
  - Resolves: #1404817 - SIGSEV in TunnelStateData::handleConnectResponse()
    during squid reconfigure and restart


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-15
changelog:
  - Resolves: #1690551 - Squid cache_peer DNS lookup failed when not all lower
    case
  - Resolves: #1680022 - squid can't display download/upload packet size for HTTPS
    sites
  - Resolves: #1717430 - Excessive memory usage when running out of descriptors
  - Resolves: #1676420 - Cache siblings return wrongly cached gateway timeouts
  - Resolves: #1729435 - CVE-2019-13345 squid: XSS via user_name or auth parameter
    in cachemgr.cgi
  - Resolves: #1582301 - CVE-2018-1000024 CVE-2018-1000027 squid: various flaws


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-2
changelog:
  - Copy over changes in tests/ioctl_evdev-success.c (from cdd8206a
    "tests: test evdev bitset decoding more thoroughly")
    to tests-m32/ioctl_evdev-success.c and tests-mx32/ioctl_evdev-success.c
  - Copy over changes in tests/ioctl_evdev.c (from 5ee385e2
    "evdev: fix decoding of EVIOCGBIT(0, ...)") to tests-m32/ioctl_evdev.c
    and tests-mx32/ioctl_evdev.c
  - Resolves: #1746478


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-4
changelog:
  - Include upstream patches that fix issues reported by covscan:
    91281fec "v4l2: avoid shifting left a signed number by 31 bit",
    522ad3a0 "syscall.c: avoid infinite loop in subcalls parsing", and
    9446038e "kvm: avoid bogus vcpu_info assignment in vcpu_register".
  - Resolves: #1747524


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-5
changelog:
  - Fix printing stack traces for early syscalls on process attach (#1790052):
    69b2c33a "unwind-libdw: fix initialization of libdwfl cache" and
    8e515c74 "tests: add strace-k-p test".
  - Add commit v5.4~97 "xlat: use unsgined type for mount_flags fallback values"
    (A leftover for #1747524).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-6
changelog:
  - Fix expected alignment for IPC tests (#1795261):
    4377e3a1 "tests: fix expected output for some ipc tests", and
    a75c7c4b "tests: fix -a argument in ipc_msgbuf-Xraw test".


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-7
changelog:
  - Fix incorrect ifname printing buffer size (#2028146):
    e27b0677 "print_ifindex: fix IFNAME_QUOTED_SZ definition".


author: yangxianzhao <yangxianzhao@uniontech.com> - 4.24-7.0.1
changelog:
  - Fix nsyscalls check error
  - Sync from https://github.com/strace/strace (version 5.10)
  - Fix failed tests clone_ptrace, ioctl_nsfs.gen:
    7b942af "tests: increase the child stack size in some tests that invoke clone"
  - Wire up rseq and kexec_file_load on aarch64 (#1676045).


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.6-2
changelog:
  - remove absolute path names from the PAM configuration, ensuring that the
    right modules get used for whichever arch we're built for
  - don't try to install the FAQ, which isn't there any more


author: Colin Walters <walters@redhat.com> 1.6.7p5-24
changelog:
  - Enhance sesh.c to fork/exec children itself, to avoid
    having sudo reap all domains.
  - Only reinstall default signal handlers immediately before
    exec of child with SELinux patch


author: Karel Zak <kzak@redhat.com> 1.6.8p9-1
changelog:
  - new version 1.6.8p9 (resolve #161116 - CAN-2005-1993 sudo trusted user arbitrary command execution)


author: Dan Walsh <dwalsh@redhat.com> 1.6.8p12-3
changelog:
  - Remove selinux patch.  It has been decided that the SELinux patch for sudo is
  - no longer necessary.  In tageted policy it had no effect.  In strict/MLS policy
  - We require the person using sudo to execute newrole before using sudo.


author: Karel Zak <kzak@redhat.com> 1.6.8p12-7
changelog:
  - fix #198755 - make login processes (sudo -i) initialise session keyring
    (thanks for PAM config files to David Howells)
  - add IPv6 support (patch by Milan Zazrivec)


author: Peter Vrabec <pvrabec@redhat.com> 1.6.9p17-2
changelog:
  - adjust audit patch, do not scream when kernel is
    compiled without audit netlink support (#401201)


author: Daniel Kopecek <dkopecek@redhat.com> 1.6.9p17-6
changelog:
  - fixed building with new libtool
  - fix for incorrect handling of groups in Runas_User
  - added /usr/local/sbin to secure-path


author: Daniel Kopecek <dkopecek@redhat.com> 1.7.1-4
changelog:
  - moved the closefrom() call before audit_help_open() (sudo-1.7.1-auditfix.patch)
  - epoch number sync


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-1
changelog:
  - new upstream version 1.7.2p2-1
  - commented out unused aliases in sudoers to make visudo happy (#550239)


author: Ville Skyttä <ville.skytta@iki.fi> - 1.7.2p2-2
changelog:
  - Add /etc/sudoers.d dir and use it in default config (#551470).
  - Drop *.pod man page duplicates from docs.


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-4
changelog:
  - audit related Makefile.in and configure.in corrections
  - added --with-audit configure option
  - removed call to libtoolize


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p6-1
changelog:
  - update to new upstream version
  - merged .audit and .libaudit patch
  - added sudoers.ldap.5* to files


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p4-1
changelog:
  - update to new upstream version
  - new command available: sudoreplay
  - use native audit support
  - corrected license field value: BSD -> ISC


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p4-5
changelog:
  - anybody in the wheel group has now root access (using password) (rhbz#656873)
  - sync configuration paths with the nss_ldap package (rhbz#652687)


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.1p2-1
changelog:
  - rebase to 1.8.1p2
  - removed .sudoi patch
  - fixed typo: RELPRO -> RELRO
  - added -devel subpackage for the sudo_plugin.h header file
  - use default ldap configuration files again


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.5-4
changelog:
  - added patches that fix & improve SSSD support (thanks to pbrezina@redhat.com)
  - re-enabled SSSD support
  - removed libsss_sudo dependency


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-2
changelog:
  - added upstream patch for a regression
  - don't include arch specific files in the -devel subpackage
  - ship only one sample plugin in the -devel subpackage


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-1
changelog:
  - update to 1.8.6p7
  - fixes CVE-2013-1775 and CVE-2013-1776
  - fixed several packaging issues (thanks to ville.skytta@iki.fi)
    - build with system zlib.
    - let rpmbuild strip libexecdir/*.so.
    - own the %{_docdir}/sudo-* dir.
    - fix some rpmlint warnings (spaces vs tabs, unescaped macros).
    - fix bogus %changelog dates.


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-3
changelog:
  - synced sudoers, configure options & configuration files with
    expected RHEL configuration
    Resolves: rhbz#969373
    Resolves: rhbz#971009
    Resolves: rhbz#965124
    Resolves: rhbz#971013
    Resolves: rhbz#839705


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-5
changelog:
  - added standalone manpage for sudo.conf and sudo-ldap.conf
  - spec file cleanup
    Resolves: rhbz#881258


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-6
changelog:
  - fixed alias cycle detection code
  - added debug messages for tracing of netgroup matching
  - fixed aborting on realloc when displaying allowed commands
  - sssd: filter netgroups in the sudoUser attribute
  - parse uids/gids more strictly
  - added debug messages to trace netgroup matching
    Resolves: rhbz#1026904
    Resolves: rhbz#1026890
    Resolves: rhbz#1007014
    Resolves: rhbz#1026894
    Resolves: rhbz#1000389
    Resolves: rhbz#994566


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-11
changelog:
  - Fixed incorrect login shell path construction in sesh
    (thanks fkrska@redhat.com for the patch)
    Resolves: rhbz#1065418


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-12
changelog:
  - RHEL 7.1 erratum
    - don't retry authentication when ctrl-c pressed
    - fix double-quote processing in Defaults options
    - handle the "(none)" hostname correctly
    - SSSD: fix sudoUser netgroup specification filtering
    - SSSD: list correct user when -U <user> -l specified
    - SSSD: show rule names on long listing (-ll)
    - fix infinite loop when duplicate entries are specified on the
      sudoers nsswitch.conf line
    Resolves: rhbz#1084488
    Resolves: rhbz#1088464
    Resolves: rhbz#1088825
    Resolves: rhbz#1092499
    Resolves: rhbz#1093099
    Resolves: rhbz#1096813
    Resolves: rhbz#1147497
    Resolves: rhbz#1147557


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-14
changelog:
  - RHEL 7.2 erratum
    - backported command digest specification
    - fixed CVE-2014-9680 sudo: unsafe handling of TZ environment variable
    - fixed typos in sudoers.ldap man page
    - fixed handling of double-quoted sudoOption values in ldap, sssd sources
    - fixed numeric uid specification support in ldap source
    - fixed authentication flag logic in ldap source
    - added the systemctl command to the SERVICES alias in the default sudoers file
    Resolves: rhbz#1144446
    Resolves: rhbz#1235570
    Resolves: rhbz#1138259
    Resolves: rhbz#1183818
    Resolves: rhbz#1233607
    Resolves: rhbz#1144419
    Resolves: rhbz#1135539
    Resolves: rhbz#1215400


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-15
changelog:
  - RHEL 7.2 erratum
    - fixed compilation of testing binaries during make check
    - added legacy group processing patch
    - replaced buggy base64 decoder with a public domain implementation
    Resolves: rhbz#1254621
    Resolves: rhbz#1183818
    Resolves: rhbz#1247591


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-18
changelog:
  - RHEL 7.3 erratum
    - removed requiretty flag from the default sudoers policy
    - backported pam_service and pam_login_service defaults options
    - implemented netgroup_tuple defaults option for changing netgroup
      processing semantics
    - fixed user matching logic in the LDAP nss backend
    - don't allow visudo to accept an invalid sudoers file
    - fixed a bug causing that non-root users can list privileges of
      other users
    - modified digest check documentation to mention the raciness of
      the checking mechanism
    Resolves: rhbz#1196451
    Resolves: rhbz#1247230
    Resolves: rhbz#1334331
    Resolves: rhbz#1334360
    Resolves: rhbz#1261998
    Resolves: rhbz#1313364
    Resolves: rhbz#1312486
    Resolves: rhbz#1268958
    Resolves: rhbz#1335039
    Resolves: rhbz#1335042
    Resolves: rhbz#1335045
    Resolves: rhbz#1273243
    Resolves: rhbz#1299883


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-19
changelog:
  - RHEL 7.3 erratum
    - removed INPUTRC from env_keep to prevent a potential info leak
    Resolves: rhbz#1340700


author: Tomas Sykora <tosykora@redhat.com> - 1.8.19p2-1
changelog:
  - RHEL 7.4 erratum
    - Resolves: rhbz#1360687 - rebase to 1.8.19p2
    - Resolves: rhbz#1123526 - performance improvement
    - Resolves: rhbz#1308789 - add MAIL and NOMAIL tags
    - Resolves: rhbz#1348504 - sudo now parses sudoers with sudoers locale
    - Resolves: rhbz#1374417 - "sudo -l command" indicated that the command
      was runnable even if denied by sudoers when using LDAP or SSSD backend.
    - Resolves: rhbz#1387303 - add ignore_iolog_errors option
    - Resolves: rhbz#1389360 - wrong log file group ownership
    - Resolves: rhbz#1389735 - add iolog_group, iolog_mode, iolog_user options
    - Resolves: rhbz#1397169 - maxseq and ignore_iolog_errors options
    - Resolves: rhbz#1403051 - add support for querying netgroups directly via LDAP
    - Resolves: rhbz#1410086 - race condition while creating /var/log/sudo-io dir
    - Resolves: rhbz#1413160 - add ignore_unknown_defaults flag
    - Resolves: rhbz#1254772 - ability to export sudoers in json format
    - Resolves: rhbz#1417187 - wrong reference to config file in systax error message
    - Resolves: rhbz#1424575 - visudo was not printing severity of error/warning message


author: Tomas Sykora <tosykora@redhat.com> - 1.8.19p2-2
changelog:
  - RHEL 7.4 erratum
  - Fixes coverity scan issues created by our patches:
    - fixed resource leaks and a compiler warning in digest backport patch
    - removed needless code from cmnd_no_wait patch causing clang warning
    - format of the last changelog message causes problems to rhpkg push,
      so don't use that as a commit message
    Resolves: rhbz#1360687


author: Tomas Sykora <tosykora@redhat.com> - 1.8.19p2-3
changelog:
  - RHEL 7.4 eratum
  - Fixes semicolon typo in digest backport patch from the previous build
    Resolves: rhbz#1360687


author: Tomas Sykora <tosykora@redhat.com> - 1.8.19p2-4
changelog:
  - RHEL 7.4 erratum
  - fixed cmnd_no_wait patch
  - backported iolog_flush sudoers default
    Resolves: rhbz#1369856
    Resolves: rhbz#1425853


author: Radovan Sroka <rsroka@redhat.com> - 1.8.19p2-5
changelog:
  - RHEL 7.4 erratum
  - added doc patch about sudo lookup issue
    Resolves: rhbz#1293306
  - added test suite patch
    Resolves: rhbz#1360687
  - fixed use after free fqdn problem
    Resolves: rhbz#1360687


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.19p2-7
changelog:
  - RHEL 7.4 erratum
  - added patch to fix output truncation (in some cases) when log_output
    option is enabled
    Resolves: rhbz#1454571


author: Jakub Jelen <jjelen@redhat.com> - 1.8.19p2-8
changelog:
  - RHEL 7.4 erratum
  - Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
    Resolves: rhbz#1455402


author: Radovan Sroka <rsroka@redhat.com> - 1.8.19p2-9
changelog:
  - RHEL 7.4 erratum
  - removed patch for output truncation (1454571) which introduced regression
    Resolves: rhbz#1360687


author: Radovan Sroka <rsroka@redhat.com> 1.8.19p2-12
changelog:
  - RHEL 7.5 erratum
  - Fixed exit codes for `sudo -l -U <user>`
  - Fixed truncated output when log_output is enabled
  - Updated use_pty and IO logging manpage

    Resolves: rhbz#1458696
    Resolves: rhbz#1454571
    Resolves: rhbz#1490358

  - Fixed second pass LDAP filter expression in the sudoers ldap backend
    - inclomplete patch for rhbz#1485397


author: Radovan Sroka <rsroka@redhat.com> 1.8.19p2-13
changelog:
  - RHEL 7.5 erratum
  - Fixed sudo -l checking results whether user should be authenticated
  - Enabled LDAP filter patch
  - Fixed double free in sssd

    Resolves: rhbz#1505409
    Resolves: rhbz#1511850
    Resolves: rhbz#1518104


author: Daniel Kopecek <dkopecek@redhat.com> 1.8.23-1
changelog:
  - RHEL-7.6 erratum
    Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version (1.8.23)
    Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets
    Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
    Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
    Resolves: rhbz#1548380 - RFE: Create flag to filter to sudo -l output
    Resolves: rhbz#1510002 - Ensure that the command input (stdin) eating behaviour of Default log_input is documented
    Resolves: rhbz#1596032 - Why does sudo package depend on vim-minimal?


author: Daniel Kopecek <dkopecek@redhat.com> 1.8.23-2
changelog:
  - RHEL-7.6 erratum
    Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
    Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
    Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets


author: Radovan Sroka <rsroka@redhat.com> 1.8.23-4
changelog:
  - RHEL-7.7 erratum
    Resolves: rhbz#1672876 - Backporting sudo bug with expired passwords
    Resolves: rhbz#1665285 - Problem with sudo-1.8.23 and 'who am i'


author: Marek Tamaskovic <mtamasko@redhat.com> 1.8.23-5
changelog:
  - RHEL-7.8 erratum
    Resolves: rhbz#1711997 sudo is super slow when /etc/security/limits.conf contains many entries


author: Marek Tamaskovic <mtamasko@redhat.com> 1.8.23-6
changelog:
  - RHEL-7.8 erratum
    Resolves: rhbz#1647678 sudo access denied with pam_access and pts terminal configurations


author: Radovan Sroka <rsroka@redhat.com> - 1.8.23-10.2
changelog:
  - RHEL 7.9.Z ERRATUM
  - defaults use_pty plus SELinux ROLE in user specification breaks terminal
    Resolves: rhbz#1972820


author: Radovan Sroka <rsroka@redhat.com> - 1.8.23-10.3
changelog:
  RHEL 7.9.Z ERRATUM
  - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
  Resolves: rhbz#2161222


author: Michal Sekletár <msekleta@redhat.com> - 10.1.5-18
changelog:
  - add -f flag to force fdatasync() after sa file update (#1662094)
  - don't call filesystem count functions when we are not collecting fs statistics (#1670060)
  - skip autofs when gathering filesystem statistics (#1670060)
  - fix use of incorrect preposition in sar man page (#1624410)
  - fix CPU usage reporting (#1618688)


author: Nils Philippsen <nils@redhat.com> - 1.3.4-1
changelog:
  - don't ask libuser to create a home directory over an existing one (#908852,
    patch by Miloslav Trmač)
  - correct check if SELinux is enabled


author: Maurizio Lombardi <mlombard@redhat.com> - 2.1.fb46-4
changelog:
  - Properly detect errors when writing backup files. (Closes: #80) (#81)
  - Read number of backup files to keep from file
  - config: defend on '/etc/target/backup' directory
  - config: backup when current config is different from recent backup copy
  - config: rename key 'kept_backups' as 'max_backup_files'
  - backup: global option to tune max no. of backup conf files


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.18.01-9
changelog:
  - 'if statement' parsing fixed when the space is missing after ')'. (#1273892)
  - Quote backslashes properly to preserve them in `...` expressions. (#1319816)
  - Fix for tcsh being interruptible while waiting for child process. (#1269370)
  - Fix of memory leak when using the 'source' built-in command.      (#1273513)
  - Print error message on stderr (instead of stdout).                (#1273498)
  - Use GLIBC's malloc instead of builtin malloc.                     (#1315713)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.18.01-12
changelog:
  - Fix another regression in tcsh-6.18.01-quote-backslashes-properly.patch
    Related: #1334751

  - Fix regression in tcsh-6.18.01-use-stderr-upon-error.patch
    Related: #1273498


author: Martin Sehnoutka <msehnout@redhat.com> - 1:0.17-60
changelog:
  - Introduce new -i switch
  - ip addresses will be logged into utmp instead of hostname
  - Resolves: #1323094


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-63
changelog:
  - Related: #1367415 - No option to specify IPv6 or IPv4 explicitly must be used
                      - additional info added to manpage


author: Michal Ruprich - 1:0.17-64
changelog:
  - Related: #1367415 - No option to specify IPv6 or IPv4 explicitly must be used
                      - more clear formulation of man page note - previous note was a bit ambiguous


author: Martin Stransky <stransky@redhat.com> - 60.7.2-3
changelog:
  - Rebuild to fix rhbz#1725919 - Thunderbird fails to authenticate
    with gmail with ssl/tls and OAuth2.


author: Tomas Popela <tpopela@redhat.com> - 78.12.0-3
changelog:
  - Add script to process the official tarball to comply with PELC review
  - Fix the build with newer glibc


author: David Hill <djh[at]ii.net>
changelog:
  - update to latest CVS (0.4a)
  - update Enigmail to 0.82.2
  - alter mozconfig for new build requirements
  - add missing BuildReq (#987)


author: Warren Togami <warren@togami.com> 0:0.4-0.fdr.3
changelog:
  - open-browser.sh release 3
  - patch broken /usr/bin/mozilla script during install
  - dir ownership
  - XXX: Source fails build on x86_64... fix later


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.1
changelog:
  - update Enigmail to 0.83.3
  - use official source tarball (after removing the CRLFs)
  - package renamed to thunderbird


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.4
changelog:
  - add Mozilla x86_64 patch (Oliver Sontag)
  - Enigmail source filenames now include the version
  - modify BuildRoot


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.6
changelog:
  - update open-browser script, modify BuildRequires (Warren)
  - add Blizzard's x-remote patch
  - initial attempt at x-remote-enabled startup script


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.8
changelog:
  - minor improvements to open-browser.sh and startup script
  - update to latest version of Blizzard's x-remote patch


author: David Hill <djh[at]ii.net> 0.6-0.fdr.0.20040415
changelog:
  - update to latest CVS, update mozconfig and %build accordingly
  - update to Enigmail 0.83.6
  - remove x-remote and x86_64 patches
  - build with -Os


author: David Hill <djh[at]ii.net> 0.6-0.fdr.3
changelog:
  - installation directory now versioned
  - allow root to run the program (for installing extensions)
  - remove unnecessary %pre and %post
  - remove separators, update mozconfig and launch script (M. Schwendt, #1460)


author: David Hill <djh[at]ii.net> 0.7-0.fdr.0
changelog:
  - update to 0.7
  - temporarily disable Enigmail 0.84.1, make ftp links work (#1634)
  - specify libdir, change BR for apt (V. Skyttä, #1617)


author: David Hill <djh[at]ii.net> 0.7-0.fdr.1
changelog:
  - re-enable Enigmail 0.84.1
  - add gcc-3.4 patch (Kaj Niemi)
  - use official branding (with permission)


author: David Hill <djh[at]ii.net> 0.7.2-0.fdr.0
changelog:
  - update to 0.7.2, just because it's there
  - update gcc-3.4 patch (Kaj Niemi)
  - add EM registration patch and remove instdir hack


author: David Hill <djh[at]ii.net> 0.7.3-0.fdr.1
changelog:
  - update to Thunderbird 0.7.3 and Enigmail 0.85.0
  - remove XUL.mfasl on startup, add Debian enigmail patches
  - add Xvfb hack for -install-global-extension


author: Warren Togami <wtogami@redhat.com> 0.7.3-3
changelog:
  - rawhide import
  - apply NetBSD's freetype 2.1.8 patch
  - apply psfonts patch
  - remove BR on /usr/bin/ex, breaks beehive


author: Christopher Aillon <caillon@redhat.com> 0.8.0-1
changelog:
  - Update to 0.8.0
  - Remove enigmail
  - Update BuildRequires
  - Remove gcc34 and extension manager patches -- they are upstreamed.
  - Fix for gnome-vfs2 error at component registration


author: Christopher Blizzard <blizzard@redhat.com> 0.8.0-8
changelog:
  - Pull over patches from firefox build:
    - disable default application dialog
    - don't include software update since it doesn't work
    - make external app support work


author: Christopher Aillon <caillon@redhat.com> 1.0.2-3
changelog:
  - Don't have downloads "disappear" when downloading to desktop (#139015)
  - Fix for some more cursor issues in textareas (149991, 150002, 152089)
  - Add upstream patch to fix bidi justification of pango
  - Add patch to fix launching of helper applications
  - Add patch to properly link against libgfxshared_s.a
  - Fix multilib conflicts


author: Kristian Høgsberg <krh@redhat.com> 1.0.2-7
changelog:
  - Add firefox-1.0-pango-cairo.patch to get rid of the last few Xft
    references, fixing the "no fonts" problem.


author: Christopher Aillon <caillon@redhat.com> - 1.5-0.5.3.rc1
changelog:
  - Once again, disable ppc64 because of a new issue.
    See https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175944

  - Use the system NSS libraries
  - Build on ppc64


author: Christopher Aillon <caillon@redhat.com> - 1.5-0.5.6.rc1
changelog:
  - Fix crash when deleting highlighted text while composing mail within
    plaintext editor with spellcheck enabled.


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.5-5
changelog:
  - Update nopangoxft.patch
  - Fix rendering of MathML thanks to Behdad Esfahbod.
  - Update start page text to reflect the MathML fixes.
  - Enable pango by default on all locales
  - Build using -rpath
  - Re-enable GCC visibility


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.7-2
changelog:
  - Fix crash when changing gtk key theme
  - Prevent UI freezes while changing GNOME theme
  - Remove verbiage about pango; no longer required by upstream.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.8-1
changelog:
  - Update to 1.5.0.8
  - Allow choosing of download directory
  - Take the user to the correct directory from the Download Manager.
  - Patch to add support for printing via pango from Behdad.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.9-7
changelog:
  - Updated cursor position patch from tagoh to fix issue with "jumping"
    cursor when in a textfield with tabs.


author: Christopher Aillon <caillon@redhat.com> 2.0.0.0-0.5.rc1
changelog:
  - Fix the desktop file
  - Clean up the files list
  - Remove the default client stuff from the pref window


author: Christopher Aillon <caillon@redhat.com> 2.0.0.6-4
changelog:
  - Fix crashes when using GTK+ themes containing a gtkrc which specify
    GtkOptionMenu::indicator_size and GtkOptionMenu::indicator_spacing


author: Jan Horak <jhorak@redhat.com> - 3.0-2.beta2
changelog:
  - Fixed clicked link does not open in browser (#489120)
  - Fixed missing help in thunderbird (#488885)


author: Remi Collet <fedora@famillecollet.com> - 3.1.6-8
changelog:
  - fix cairo + nspr required version
  - lightning: fix thunderbird version required
  - lightning: fix release (b3pre)
  - lightning: clean install


author: Christopher Aillon <caillon@redhat.com> - 3.1.9-7
changelog:
  - Make gvfs-open launch a compose window (salimma)
  - Spec file cleanups (salimma, caillon)
  - Split out mozilla crashreporter symbols to its own debuginfo package (caillon)


author: Jan Horak <jhorak@redhat.com> - 8.0-2
changelog:
  - Enable Mozilla's crash reporter again for all archs
  - Temporary workaround for langpacks
  - Disabled addon check UI (#753551)


author: Martin Stransky <stransky@redhat.com> - 14.0-4
changelog:
  - Removed StartupWMClass (rhbz#844863)
  - Fixed -g parameter
  - Removed thunderbird-devel before packing to avoid debugsymbols duplicities (rhbz#823940)


author: Martin Stransky <stransky@redhat.com> - 24.2.0-4
changelog:
  - Fixed rhbz#1024232 - thunderbird: squiggly lines used
    for spelling correction disappear randomly


author: Adam Tkac <atkac redhat com> 0.0.90-0.4.20090403svn3751
changelog:
  - update to r3751
  - patches merged
    - tigervnc-xclients.patch
    - tigervnc-clipboard.patch
    - tigervnc-rh212985.patch
  - basic RandR support in Xvnc (resize of the desktop)
  - use built-in libjpeg (SSE2/MMX accelerated encoding on x86 platform)
  - use Tight encoding by default
  - use TigerVNC icons


author: Adam Tkac <atkac redhat com> 0.0.90-0.6.20090427svn3789
changelog:
  - update to r3789
    - tigervnc-rh494801.patch merged
  - tigervnc-newfbsize.patch is no longer needed
  - fix problems when vncviewer and Xvnc run on different endianess (#496653)
  - UltraVNC and TightVNC clients work fine again (#496786)


author: Adam Tkac <atkac redhat com> 0.0.90-0.10
changelog:
  - rebuild against 1.6.1.901 X server (#497835)
  - disable i18n, vncviewer is not UTF-8 compatible (#501832)


author: Adam Tkac <atkac redhat com> 0.0.91-0.11
changelog:
  - update to 0.0.91 (1.0.0 RC1)
  - patches merged
    - tigervnc10-rh499401.patch
    - tigervnc10-rh497592.patch
    - tigervnc10-rh501832.patch
  - after discusion in upstream drop tigervnc-bounds.patch
  - configure flags cleanup


author: Adam Tkac <atkac redhat com> 0.0.91-0.13
changelog:
  - temporary use F11 Xserver base to make Xvnc compilable
  - BuildRequires: libXi-devel
  - don't ship tigervnc-server-module on s390/s390x


author: Adam Tkac <atkac redhat com> 1.0.0-2
changelog:
  - update underlying X source to 1.6.4-0.3.fc11
  - remove bogus '-nohttpd' parameter from /etc/sysconfig/vncservers (#525629)
  - initscript LSB compliance fixes (#523974)
  - improve -LowColorSwitch documentation and handling (#510185)
  - honor dotWhenNoCursor option (and it's changes) every time (#524340)


author: Adam Tkac <atkac redhat com> 1.0.90-0.1.20091221svn3929
changelog:
  - update to 1.0.90 snapshot
  - patches merged
    - tigervnc10-compat.patch
    - tigervnc10-rh510185.patch
    - tigervnc10-rh524340.patch
    - tigervnc10-rh516274.patch


author: Adam Tkac <atkac redhat com> 1.0.90-0.2.20091221svn3929
changelog:
  - add patch for upstream X.Org issue #25909
  - add libXdmcp-devel to build requires to build Xvnc with XDMCP support (#552322)


author: Adam Tkac <atkac redhat com> 1.0.90-0.4.20091221svn3929
changelog:
  - mark stack as non-executable in jpeg ASM code
  - add xorg-x11-xauth to Requires
  - add support for X.Org 1.8
  - drop shave sources, they are no longer needed


author: Adam Tkac <atkac redhat com> 1.0.90-0.6.20100219svn3993
changelog:
  - add mesa-dri-drivers and xkeyboard-config to -server Requires
  - update to r3993 1.0.90 snapshot
    - tigervnc11-noexecstack.patch merged
    - tigervnc11-xorg18.patch merged
    - xserver18.patch is no longer needed


author: Adam Tkac <atkac redhat com> 1.0.90-0.9.20100219svn3993
changelog:
  - add server-applet subpackage which contains Java vncviewer applet
  - fix Java applet; it didn't work when run from web browser
  - add xorg-x11-xkb-utils to server Requires


author: Adam Tkac <atkac redhat com> 1.0.90-0.10.20100420svn4030
changelog:
  - update to r4030 snapshot
  - patches merged to upstream
    - tigervnc11-rh522369.patch
    - tigervnc11-rh551262.patch
    - tigervnc11-r4002.patch
    - tigervnc11-r4014.patch


author: Adam Tkac <atkac redhat com> 1.0.90-0.11.20100420svn4030
changelog:
  - link libvnc.so "now" to catch "undefined symbol" errors during Xorg startup
  - use always XkbConvertCase instead of XConvertCase (#580159, #586406)
  - don't link libvnc.so against libXi.la, libdix.la and libxkb.la; use symbols
    from Xorg instead


author: Adam Tkac <atkac redhat com> 1.0.90-0.14.20100420svn4030
changelog:
  - fix memory leak in Xvnc input code (#597172)
  - don't crash when receive negative encoding (#600070)
  - explicitly disable udev configuration support
  - add gettext-autopoint to BR


author: Adam Tkac <atkac redhat com> 1.0.90-0.17.20100721svn4113
changelog:
  - update to r4113
  - patches merged
    - tigervnc11-rh586406.patch
    - tigervnc11-libvnc.patch
    - tigervnc11-rh597172.patch
    - tigervnc11-rh600070.patch
    - tigervnc11-options.patch
  - don't own %{_datadir}/icons directory (#614301)
  - minor improvements in the .desktop file (#616340)
  - bundled libjpeg configure requires nasm; is executed even if system-wide
    libjpeg is used


author: Adam Tkac <atkac redhat com> 1.0.90-0.19.20100813svn4123
changelog:
  - separate Xvnc, vncpasswd and vncconfig to -server-minimal subpkg (#626946)
  - move license to separate subpkg and Requires it from main subpkgs
  - Xvnc: handle situations when no modifiers exist well (#611677)


author: Adam Tkac <atkac redhat com> 1.0.90-0.20.20100813svn4123
changelog:
  - press fake modifiers correctly (#633931)
  - supress unneeded debug information emitted from initscript (#633645)


author: Adam Tkac <atkac redhat com> 1.0.90-0.24.20100813svn4123
changelog:
  - rebuild against xserver 1.10.X
  - 0001-Return-Success-from-generate_modkeymap-when-max_keys.patch merged


author: Adam Tkac <atkac redhat com> 1.0.90-0.25.20101208svn4225
changelog:
  - update to r4225
  - patches merged
    - tigervnc11-rh611677.patch
    - tigervnc11-rh633931.patch
    - tigervnc11-xorg1.10.patch
  - enable VeNCrypt and PAM support


author: Adam Tkac <atkac redhat com> - 1.0.90-3
changelog:
  - fix wrong usage of memcpy which caused screen artifacts (#652590)
  - don't point to inaccessible link in sysconfig/vncservers (#644975)


author: Adam Tkac <atkac redhat com> - 1.1.0-1
changelog:
  - update to 1.1.0
  - update the xorg11 patch
  - patches merged
    - tigervnc11-glx.patch
    - tigervnc11-CVE-2011-1775.patch
    - 0001-Use-memmove-instead-of-memcpy-in-fbblt.c-when-memory.patch


author: Adam Tkac <atkac redhat com> - 1.1.0-3
changelog:
  - don't build X.Org devel docs (#755782)
  - applet: BR generic java-devel instead of java-gcj-devel (#755783)
  - use runuser to start Xvnc in systemd service file (#754259)
  - don't attepmt to restart Xvnc session during update/erase (#753216)


author: Adam Tkac <atkac redhat com> - 1.1.0-5
changelog:
  - clean Xvnc's /tmp environment in service file before startup
  - fix building against the latest JAVA 7 and X.Org 1.12


author: Adam Tkac <atkac redhat com> 1.2.80-0.1.20120905svn4996
changelog:
  - update to 1.2.80
  - remove deprecated patches
    - tigervnc-102434.patch
    - tigervnc-viewer-reparent.patch
    - tigervnc11-java7.patch
  - patches merged
    - tigervnc11-xorg111.patch
    - tigervnc11-xorg112.patch


author: Adam Tkac <atkac redhat com> - 1.2.80-0.12.20130314svn5065
changelog:
  - include /etc/X11/xorg.conf.d/10-libvnc.conf sample configuration (#712482)
  - vncserver now honors specified -geometry parameter (#755947)


author: Tim Waugh <twaugh@redhat.com> 1.2.80-0.14.20130314svn5065
changelog:
  - Use systemd rpm macros (bug #850340).  Moved systemd requirements
    from main package to server sub-package.
  - Applied Debian patch to fix busy loop when run from inetd in nowait
    mode (bug #920373).
  - Added dependency on xorg-x11-xinit to server sub-package so that
    default window manager can be found (bug #896284, bug #923655).
  - Fixed bogus changelog date.


author: Tim Waugh <twaugh@redhat.com> 1.2.80-0.18.20130314svn5065
changelog:
  - Avoid PIDFile problems in systemd unit file (bug #983232).
  - Don't use shebang in vncserver script.


author: Jan Grulich <jgrulich@redhat.com> - 1.3.1-1
changelog:
  - Drop unecessary patches
  - Re-base to 1.3.1 (bug #1199453)
  - Re-build against re-based xserver (bug #1194898)
  - Check the return value from XShmAttach (bug #1072733)
  - Add missing part of xserver114.patch (bug #1140603)
  - Keep pointer in sync (bug #1100661)
  - Make input device class global (bug #1119640)
  - Add IPv6 support (bug #1162722)
  - Set initial mode as prefered (bug #1181287)
  - Do not mention that display number is required in the file name (bug #1195266)
  - Enable Xinerama extension (bug #1199437)
  - Specify full path for runuser command (bug #1208817)


author: Jan Grulich <jgrulich@redhat.com> - 1.3.1-6
changelog:
  - Do not fail to bind a network socket
    Resolves: bz#1332575
  - Do not die when port is already taken
    Resolves: bz#1322155


author: Jan Grulich <jgrulich@redhat.com> - 1.7.1-1
changelog:
  - Update to 1.7.1
    Resolves: bz#1388620
    Resolves: bz#1343899
    Resolves: bz#1410164
    Resolves: bz#1415547
    Resolves: bz#1418945
    Resolves: bz#1416290
    Resolves: bz#1342956
  - Fix shared memory leakage
    Resolves: bz#1358090
  - Added systemd unit file for xvnc
    Resolves: bz#1393971


author: Jan Grulich <jgrulich@redhat.com> - 1.7.1-2
changelog:
  - Be more restrictive with shared memory mode bits
    Resolves: bz#1152552
    Limit max username/password size in SSecurityPlain [CVE-2017-7394]
    Resolves: bz#1438737
    Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
    Resolves: bz#1438742


author: Jan Grulich <jgrulich@redhat.com> - 1.7.1-3
changelog:
  - Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
    Resolves: bz#1439127
    Prevent double free by crafted fences [CVE-2017-7393]
    Resolves: bz#1439134


author: Jan Grulich <jgrulich@redhat.com> - 1.8.0-6
changelog:
  - Kill session after user logs out
    Resolves: bz#1259757

    Build against Xorg 1.20
    Resolves: bz#1564061


author: Jan Grulich <jgrulich@redhat.com> - 1.8.0-14
changelog:
  - Fix rendering on big endian system
    Resolves: bz#1618777

    Do not automatically kill sessions
    Resolves: bz#1646889


author: Jan Grulich <jgrulich@redhat.com> - 1.8.0-20
changelog:
  - Fix stack buffer overflow in CMsgReader::readSetCursor
    Resolves: bz#1791773

  - Fix heap buffer overflow in DecodeManager::decodeRect
    Resolves: bz#1791768

  - Fix heap buffer overflow in TightDecoder::FilterGradient
    Resolves: bz#1791763

  - Fix heap-based buffer overflow triggered from CopyRectDecoder
    Resolves: bz#1791747

  - Fix stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder
    Resolves: bz#1791759

  - Add option to fallback to empty port when the specified one is taken
    Resolves: bz#1791996


author: Jan Grulich <jgrulich@redhat.com> - 1.8.0-23
changelog:
  - Rebuild for xorg-x11-server CVEs
    Resolves: CVE-2022-4283 (bz#2154267)
    Resolves: CVE-2022-46340 (bz#2154261)
    Resolves: CVE-2022-46341 (bz#2154264)
    Resolves: CVE-2022-46342 (bz#2154262)
    Resolves: CVE-2022-46343 (bz#2154265)
    Resolves: CVE-2022-46344 (bz#2154266)


author: Jan Grulich <jgrulich@redhat.com> - 1.8.0-26
changelog:
  - Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
    Resolves: RHEL-15235
  - Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
    Resolves: RHEL-15223


author: Jan Grulich <jgrulich@redhat.com> - 1.8.0-27
changelog:
  - Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
    Resolves: RHEL-18415
  - CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
    Resolves: RHEL-18427


author: Jan Grulich <jgrulich@redhat.com> - 1.8.0-28
changelog:
  - Updated fix for CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
    Resolves: RHEL-18415


author: Jan Grulich <jgrulich@redhat.com> - 1.8.0-29
changelog:
  - Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
    Resolves: RHEL-20436
  - Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
    Resolves: RHEL-20427
  - Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
    Resolves: RHEL-20587
  - Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
    Resolves: RHEL-21212


author: Jan Grulich <jgrulich@redhat.com> - 1.8.0-30
changelog:
  - Don't try to get pointer position when the pointer becomes a floating device
    Resolves: RHEL-20436


author: Jan Grulich <jgrulich@redhat.com> - 1.8.0-31
changelog:
  - Fix use after free related to CVE-2024-21886
    Resolves: RHEL-20436
  - Fix copy/paste error in the DeviceStateNotify
    Resolves: RHEL-20587


author: Jan Grulich <jgrulich@redhat.com> - 1.8.0-32
changelog:
  - Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
    Resolves: RHEL-31006
  - Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
    Resolves: RHEL-30976
  - Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
    Resolves: RHEL-30993


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-9
changelog:
  - Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet
  - Resolves: rhbz#1552375 CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources
  - Resolves: rhbz#1552374 CVE-2018-1305 tomcat: Late application of security constraints can lead to resource exposure for unauthorised users
  - Resolves: rhbz#1590182 CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins
  - Resolves: rhbz#1608609 CVE-2018-8034 tomcat: host name verification missing in WebSocket client
  - Resolves: rhbz#1588703 Backport of Negative maxCookieCount value causes exception for Tomcat
  - Resolves: rhbz#1472950 shutdown_wait option is not working for Tomcat
  - Resolves: rhbz#1455483 Add support for characters "<" and ">" to the possible whitelist values


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-12
changelog:
  - Resolves: rhbz#1367492 harden package permissions
  - Resolves: rhbz#1523112 tomcat systemd does not cope with - in service names
  - Resolves: rhbz#1629162 tomcat-dbcp.jar is missing from tomcat package
  - Resolves: rhbz#1822453 Tomcat parses a request having an absolute URI path incorrectly and returns 404 Not Found
  - Resolves: rhbz#1795645 connection leak with StatementCache, SlowQueryReport or StatementDecoratorInterceptor
  - Resolves: CVE-2019-17563 tomcat: session fixation when using FORM authentication


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-14
changelog:
  - Revert rhbz#1814315 because it caused other issues with ipa-server, see rhbz#1831127
  - Resolves: CVE-2020-9484 tomcat: Apache Tomcat Remote Code Execution via session persistence


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-15
changelog:
  - Resolves: CVE-2020-13935 tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS


author: Hui Wang <huwang@redhat.com> 0:7.0.76-16
changelog:
  - Resolves: rhbz#1814315 CVE-2020-1935 tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling


author: Jan Vcelak <jvcelak@redhat.com> 2.1.0-1
changelog:
  - new release:
    - daemon: allow running without selected profile
    - daemon: fix profile merging, allow only safe characters in profile names
    - daemon: implement missing methods in DBus interface
    - daemon: implement profile recommendation
    - daemon: improve daemonization, PID file handling
    - daemon: improved device matching in profiles, negation possible
    - daemon: various internal improvements
    - executables: check for EUID instead of UID
    - executables: run python with -Es to increase security
    - plugins: cpu - fix cpupower execution
    - plugins: disk - fix option setting
    - plugins: mounts - new, currently supports only barriers control
    - plugins: sysctl - fix a bug preventing settings application
    - powertop2tuned: speedup, fix crashes with non-C locales
    - powertop2tuned: support for powertop 2.2 output
    - profiles: progress on replacing scripts with plugins
    - tuned-adm: bash completion - suggest profiles from all supported locations
    - tuned-adm: complete switch to D-bus
    - tuned-adm: full control to users with physical access


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.1.2-1
changelog:
  - new release:
    - systemtap {disk,net}devstat: fix typo in usage
    - switched to configobj parser
    - latency-performance: disabled THP
    - fixed fd leaks on subprocesses


author: Jan Vcelak <jvcelak@redhat.com> 2.2.0-1
changelog:
  - new release:
    - remove nobarrier from virtual-guest (data loss prevention)
    - devices enumeration via udev, instead of manual retrieval
    - support for dynamically inserted devices (currently disk plugin)
    - dropped rfkill plugins (bluetooth and wifi), the code didn't work


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.2.1-1
changelog:
  - new release:
    - audio plugin: fixed error handling in _get_timeout
    - removed cpupower dependency, added sysfs fallback
    - powertop2tuned: fixed parser crash on binary garbage
      resolves: rhbz#914933
    - cpu plugin: dropped multicore_powersave as kernel upstream already did
    - plugins: options manipulated by dynamic tuning are now correctly saved and restored
    - powertop2tuned: added alias -e for --enable option
    - powertop2tuned: new option -m, --merge-profile to select profile to merge
    - prefer transparent_hugepage over redhat_transparent_hugepage
    - recommend: use recommend.conf not autodetect.conf
    - tuned.service: switched to dbus type service
      resolves: rhbz#911445
    - tuned: new option --pid, -P to write PID file
    - tuned, tuned-adm: added new option --version, -v to show version
    - disk plugin: use APM value 254 for cleanup / APM disable instead of 255
      resolves: rhbz#905195
    - tuned: new option --log, -l to select log file
    - powertop2tuned: avoid circular deps in include (one level check only)
    - powertop2tuned: do not crash if powertop is not installed
    - net plugin: added support for wake_on_lan static tuning
      resolves: rhbz#885504
    - loader: fixed error handling
    - spec: used systemd-rpm macros
      resolves: rhbz#850347


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.2.2-1
changelog:
  - new-release:
    - cpu plugin: fixed cpupower workaround
    - cpu plugin: fixed crash if cpupower is installed


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.2.2-4
changelog:
  - lock CPU to C1 instead of C0 in latency-performance profile
    resolves: rhbz#1013085
  - readahed multiply set to 4 in throughput-performance profile
    resolves: rhbz#987570
  - packaged pmqos-static script for debugging purposes
    resolves: rhbz#1015676
  - added global configuration file with the possibility to globally
    disable the dynamic tuning and it is by default disabled on RHEL
    resolves: rhbz#1006427


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3.0-1
changelog:
  - new-release
    resolves: rhbz#1020743
    - audio plugin: fixed audio settings in standard profiles
    - video plugin: fixed tunings
    - daemon: fixed crash if preset profile is not available
    - man: various updates and corrections
    - functions: fixed usb and bluetooth handling
    - tuned: switched to lightweighted pygobject3-base
    - daemon: added global config for dynamic_tuning
    - utils: added pmqos-static script for debug purposes
    - throughput-performance: various fixes
    - tuned: added global option update_interval
    - plugin_cpu: added support for x86_energy_perf_policy
      resolves: rhbz#1015675
    - dbus: fixed KeyboardInterrupt handling
    - plugin_cpu: added support for intel_pstate
      resolves: rhbz#996722
    - profiles: various fixes
    - profiles: added desktop profile
      resolves: rhbz#996723
    - tuned-adm: implemented non DBus fallback control
    - profiles: added sap profile
    - tuned: lowered CPU usage due to python bug


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3.0-2
changelog:
  - fixed race condition in the start/stop code
    resolves: rhbz#1028119
  - improved tuned responsiveness
    resolves: rhbz#1028122


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3.0-7
changelog:
  - throughput-performance is default for the server
    resolves: rhbz#1063481
  - THP not disabled in the latency-performance profile
    resolves: rhbz#1064510
  - added network-latency profile
    resolves: rhbz#1052418
  - added network-throughput profile
    resolves: rhbz#1052421


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3.0-10
changelog:
  - added requirement to kernel-tools
    resolves: rhbz#1073008
  - made cpupower.service conflicting
    resolves: rhbz#1073392


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3.0-15
changelog:
  - updated man page to include atomic-host and atomic-guest profiles
    related: rhbz#1091977, rhbz#1091979


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.4.0-1
changelog:
  - new-release
    resolves: rhbz#1093883
    - fixed traceback if profile cannot be loaded
      related: rhbz#953128
    - powertop2tuned: fixed traceback if rewriting file instead of dir
    - daemon: fixed race condition in start/stop
    - balanced: used medium_power ALPM policy
    - balanced: used conservative CPU governor
      resolves: rhbz#1124125
    - plugins: added selinux plugin
    - plugin_net: added nf_conntrack_hashsize parameter
    - profiles: included sap-hana and sap-hana-vmware profiles
    - profiles: sap-profiles in individual subpackages
      resolves: rhbz#1058483
    - man: structured profiles manual pages according to sub-packages
    - improved error handling of switch_profile
    - tuned-adm: active: detect whether tuned deamon is running
    - removed active_profile from RPM verification
      resolves: rhbz#1104126
    - plugin_disk: readahead value can be now specified in sectors
      resolves: rhbz#1127127
    - plugins: added bootloader plugin
      resolves: rhbz#1044111
    - plugin_disk: added error counter to hdparm calls
    - plugins: added scheduler plugin
      resolves: rhbz#1100826
    - added tuned-gui


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.0-1
changelog:
  - new-release
    resolves: rhbz#1155052
    - add support for ethtool -C to tuned network plugin
      resolves: rhbz#1152539
    - add support for ethtool -K to tuned network plugin
      resolves: rhbz#1152541
    - add support for calculation of values for the kernel command line
      resolves: rhbz#1191595
    - no error output if there is no hdparm installed
      resolves: rhbz#1191775
    - do not run hdparm on hotplug events if there is no hdparm tuning
      resolves: rhbz#1193682
    - add oracle tuned profile
      resolves: rhbz#1196298
    - fix bash completions for tuned-adm
      resolves: rhbz#1207668
    - add glob support to tuned sysfs plugin
      resolves: rhbz#1212831
    - add tuned-adm verify subcommand
      resolves: rhbz#1212836
    - do not install tuned kernel command line to rescue kernels
      resolves: rhbz#1223864
    - add variables support
      resolves: rhbz#1225124
    - add built-in support for unit conversion into tuned
      resolves: rhbz#1225135
    - fixed vm.max_map_count setting in sap-netweaver profile
      resolves: rhbz#1228562
    - create tuned profile for RHEL-RT
      resolves: rhbz#1228801
    - plugin_scheduler: added support for runtime tuning of processes
      resolves: rhbz#1148546
    - add support for changing elevators on xvd* devices (Amazon EC2)
      resolves: rhbz#1170152
    - add workaround to be run after systemd-sysctl
      resolves: rhbz#1189263
    - do not change settings of transparent hugepages if set in kernel cmdline
      resolves: rhbz#1189868
    - add tuned profiles for RHEL-NFV
      resolves: rhbz#1228803
    - plugin_bootloader: apply $tuned_params to existing kernels
      resolves: rhbz#1233004
    - add support for no daemon mode
      resolves: rhbz#1068663


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-1
changelog:
  - new-release
    related: rhbz#1155052
    - plugin_scheduler: work with nohz_full
      resolves: rhbz#1247184
    - fixed realtime-virtual-guest/host profiles packaged twice
      resolves: rhbz#1249028
    - fixed requirements of realtime and nfv profiles
    - fixed tuned-gui not starting
    - various other minor fixes
    - defuzzified gtk-3.8 patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-5
changelog:
  - fixed various verification issues (by verification-fixes patch)
    resolves: rhbz#1252153
  - realtime profile now sets cpumask of unbound workqueues
    (by realtime-set-unbound-workqueues patch)
    resolves: rhbz#1259043
  - fixed lapic_timer_adv_ns cache in realtime-virtual-host profile
    (by lapic-timer-adv-ns-cache-fix patch)
    resolves: rhbz#1259452
  - fixed find-lapictscdeadline-optimal-fix in realtime-virtual-host profile
    (by find-lapictscdeadline-optimal-fix patch)
    resolves: rhbz#1267284
  - removed nohz_full from the realtime profile (by realtime-remove-nohz-full
    patch)
    resolves: rhbz#1274486


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-6
changelog:
  - fixed race in modprobe in realtime-virtual-host profile and extended
    stop action to have hint why it is called
    resolves: rhbz#1292117


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7.0-1
changelog:
  - new-release
    - rebase tuned to latest upstream
      resolves: rhbz#1289048
    - gui: fixed save profile
      resolves: rhbz#1242491
    - tuned-adm: added --ignore-missing parameter
      resolves: rhbz#1243807
    - plugin_vm: added transparent_hugepage alias
      resolves: rhbz#1249610
    - plugins: added modules plugin
      resolves: rhbz#1249618
    - plugin_cpu: do not show error if cpupower or x86_energy_perf_policy are
      missing
      resolves: rhbz#1254417
    - tuned-adm: fixed restart attempt if tuned is not running
      resolves: rhbz#1258755
    - nfv: avoided race condition by using synchronous mode
      resolves: rhbz#1259039
    - realtime: added check for isolcpus sanity
      resolves: rhbz#1264128
    - pm_qos: fixed exception if PM_QoS is not available
      resolves: rhbz#1296137
    - plugin_sysctl: reapply system sysctl after Tuned sysctl are applied
      resolves: rhbz#1302953
    - atomic: increase number of inotify watches
      resolves: rhbz#1322001
    - realtime-virtual-host/guest: added rcu_nocbs kernel boot parameter
      resolves: rhbz#1334479
    - realtime: fixed kernel.sched_rt_runtime_us to be -1
      resolves: rhbz#1346715
    - tuned-adm: fixed detection of no_daemon mode
      resolves: rhbz#1351536
    - plugin_base: correctly strip assignment modifiers even if not used
      resolves: rhbz#1353142
    - plugin_disk: try to workaround embedded '/' in device names
      related: rhbz#1353142
    - sap-hana: explicitly setting kernel.numa_balancing = 0 for better performance
      resolves: rhbz#1355768
    - libexec: fixed listdir and isdir in defirqaffinity.py
      resolves: rhbz#1252160
    - plugin_cpu: save and restore only intel pstate attributes that were changed
      resolves: rhbz#1252156
    - functions: fixed sysfs save to work with options
      resolves: rhbz#1251507
    - functions: fixed restore_logs_syncing to preserve SELinux context on rsyslog.conf
      resolves: rhbz#1268901
    - spec: correctly remove tuned footprint from /etc/default/grub
      resolves: rhbz#1268845
    - gui: fixed creation of new profile
      resolves: rhbz#1274609


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7.1-1
changelog:
  - - new-release
    - rebase tuned to latest upstream
      resolves: rhbz#1289048
    - gui: fixed traceback caused by DBus paths copy&paste error
      related: rhbz#1356369
    - tuned-adm: fixed traceback of 'tuned-adm list' if daemon is not running
      resolves: rhbz#1358857


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.8.0-1
changelog:
  - new release
    - rebase tuned to latest upstream
      resolves: rhbz#1388454
    - cpu-partitioning: enabled timer migration
      resolves: rhbz#1408308
    - cpu-partitioning: disabled kvmclock sync and ple
      resolves: rhbz#1395855
    - spec: muted error if there is no selinux support
      resolves: rhbz#1404214
    - units: implemented instance priority
      resolves: rhbz#1246172
    - bootloader: added support for initrd overlays
      resolves: rhbz#1414098
    - cpu-partitioning: set CPUAffinity early in initrd image
      resolves: rhbz#1394965
    - cpu-partitioning: set workqueue affinity early
      resolves: rhbz#1395899
    - scsi_host: fixed probing of ALPM, missing ALPM logged as info
      resolves: rhbz#1416712
    - added new profile cpu-partitioning
      resolves: rhbz#1359956
    - bootloader: improved inheritance
      resolves: rhbz#1274464
    - units: mplemented udev-based regexp device matching
      resolves: rhbz#1251240
    - units: introduced pre_script, post_script
      resolves: rhbz#1246176
    - realtime-virtual-host: accommodate new ktimersoftd thread
      resolves: rhbz#1332563
    - defirqaffinity: fixed traceback due to syntax error
      resolves: rhbz#1369791
    - variables: support inheritance of variables
      resolves: rhbz#1433496
    - scheduler: added support for cores isolation
      resolves: rhbz#1403309
    - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
      resolves: rhbz#1413111
    - desktop: fixed typo in profile summary
      resolves: rhbz#1421238
    - with systemd don't do full rollback on shutdown / reboot
      resolves: rhbz#1421286
    - builtin functions: added virt_check function and support to include
      resolves: rhbz#1426654
    - cpulist_present: explicitly sorted present CPUs
      resolves: rhbz#1432240
    - plugin_scheduler: fixed initialization
      resolves: rhbz#1433496
    - log errors when applying a profile fails
      resolves: rhbz#1434360


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.8.0-2
changelog:
  - respin
    related: rhbz#1388454
  - systemd: added support for older systemd CPUAffinity syntax
    resolves: rhbz#1441791
  - scheduler: added workarounds for low level exceptions from
    python-linux-procfs
    resolves: rhbz#1441792
  - bootloader: workaround for adding tuned_initrd to new kernels on restart
    resolves: rhbz#1441797
  - cpu-partitioning: use tuna for cores isolation
    related: rhbz#1403309


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.9.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1467576
    - added recommend.d functionality
      resolves: rhbz#1459146
    - recommend: added support for matching of processes
      resolves: rhbz#1461838
    - cpu-partitioning: used tuned instead of tuna for cores isolation
      resolves: rhbz#1442229
    - bootloader: splitted string for removal from cmdline
      resolves: rhbz#1461279
    - network-latency: added skew_tick=1 kernel command line parameter
      resolves: rhbz#1451073
    - bootloader: accepted only certain values for initrd_remove_dir
      resolves: rhbz#1455161
    - increased udev monitor buffer size, made it configurable
      resolves: rhbz#1442306
    - bootloader: don't add nonexistent overlay image to grub.cfg
      resolves: rhbz#1454340
    - plugin_cpu: don't log error in execute() if EPB is not supported
      resolves: rhbz#1443182
    - sap-hana: fixed description of the sap-hana profiles
      resolves: rhbz#1482005
    - plugin_systemd: on full_rollback notify about need of initrd regeneration
      resolves: rhbz#1469258
    - don't log errors about missing files on verify with ignore_missing set
      resolves: rhbz#1451435
    - plugin_scheduler: improved logging
      resolves: rhbz#1474961
    - improved checking if we are rebooting or not
      resolves: rhbz#1475571
    - started dbus exports after a profile is applied
      resolves: rhbz#1443142
    - sap-hana: changed force_latency to 70
      resolves: rhbz#1501252
    - plugin_video: added support for the 'dpm' power method
    - list available profiles on 'tuned-adm profile'


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.9.0-0.2.rc2
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#1467576
    - fixed expansion of the variables in the 'devices' section
      related: rhbz#1490399
    - cpu-partitioning: add no_rebalance_cores= option
      resolves: rhbz#1497182


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.10.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1546598
    - script: show stderr output in the log
    - realtime-virtual-host: script.sh: add error checking
    - man: improved tuned-profiles-cpu-partitioning.7
    - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
    - plugin_scheduler: whitelist/blacklist processed also for thread names
    - bootloader: patch all GRUB2 config files
    - profiles: added mssql profile
    - tuned-adm: print log excerpt when changing profile
    - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
    - sysctl: support assignment modifiers as other plugins do
    - oracle: fixed ip_local_port_range parity warning
      resolves: rhbz#1527219
    - Fix verifying cpumask on systems with more than 32 cores
      resolves: rhbz#1528368
    - oracle: updated the profile to be in sync with KCS 39188
      resolves: rhbz#1447323


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.10.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#1546598
    - IRQ affinity handled by scheduler plugin
      resolves: rhbz#1590937


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.10.0-3
changelog:
  - realtime-virtual-guest/host: start/stop rt-entsk daemon on
    initialization/shutdown
    resolves: rhbz#1616043


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1643654
    - disable KSM only once, re-enable it only on full rollback
      resolves: rhbz#1622239
    - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
      resolves: rhbz#1649408
    - updated virtual-host profile
      resolves: rhbz#1569375
    - added log message for unsupported parameters in plugin_net
      resolves: rhbz#1533852
    - added range feature for cpu exclusion
      resolves: rhbz#1533908
    - make a copy of devices when verifying tuning
      resolves: rhbz#1592743
    - fixed disk plugin/plugout problem
      resolves: rhbz#1595156
    - fixed unit configuration reading
      resolves: rhbz#1613379
    - reload profile configuration on SIGHUP
      resolves: rhbz#1631744
    - use built-in functionality to apply system sysctl
      resolves: rhbz#1663412


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#1643654
    - used dmidecode only on x86 architectures
      resolves: rhbz#1688371
    - recommend: fixed to work without tuned daemon running
      resolves: rhbz#1687397


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-7
changelog:
  - plugin_sysctl: fixed traceback when assignments modifiers ('<', '>')
    are used with sysctl and the current sysctl value is the same as
    the new value
    Resolves: rhbz#1739418


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-9
changelog:
  - Fixed SIGHUP handling
    Resolves: rhbz#1702724
  - Tune irqbalance service
    Resolves: rhbz#1720042
  - Added netcat requirement
    Resolves: rhbz#1746436
  - sysctl: made reapply_sysctl ignore configs from /usr
    Resolves: rhbz#1776149
  - profiles: define variables before use
    Resolves: rhbz#1781664


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-10
changelog:
  - realtime-virtual-host: remove lapic advancement calculation and
    related qemu-kvm-tools-rhev requirement
    Resolves: rhbz#1852253


author: Jakub Jelinek <jakub@redhat.com> 2005g-2
changelog:
  - 2005g
    - fixes for Uruguay
  - include README and Theory from tzcode tarball in %{_docdir};
    Theory includes a good summary of how the timezone data files
    are supposed to be named


author: Jakub Jelinek <jakub@redhat.com> 2005m-2
changelog:
  - 2005m
    - changes for USA (extending DST by 4 weeks since 2007), Tunisia,
      Australia, Kazakhstan
    - historical timezone data changes for Japan, Poland, Northern Ireland and
      Mali
    - timezone name change for East Timor


author: Jakub Jelinek <jakub@redhat.com> 2005n-2
changelog:
  - 2005n
    - changes for Kyrgyzstan and Uruguay
  - fix a typo in the Makefile (used TZDATA env var instead of TZDIR during
    make check), update tst-timezone.c from glibc CVS (#172102)


author: Jakub Jelinek <jakub@redhat.com> 2005q-2
changelog:
  - 2005q
    - changes for Georgia, Azerbaijan, Jordan, Palestine, Cuba, Nicaragua
    - SystemV timezone changes


author: Petr Machata <pmachata@redhat.com> 2005r-2
changelog:
  - 2005r
    - Zones EST, MST, HST, EST5EDT, CST6CDT, MST7MDT, PST8PDT moved to
      northamerica to guard against old files with obsolete information
      being left in the time zone binary directory.
    - Changes for countries that are supposed to join 2007 US DST
      change.  This includes most of Canada, however entries already in
      the database (Alberta, British Columbia, Newfoundland, Northwest
      Territories, and Yukon) were left alone for the time being.
    - Fixes in zdump.c (abbrok): conditions are chained, and the string
      is checked for emptiness.


author: Petr Machata <pmachata@redhat.com> 2005r-3
changelog:
  - 2005r-3
    - Meta changes.  Renaming tzdata.tar.bz2 file to tzdata$ver-base,
      so that it won't clash across updates.


author: Petr Machata <pmachata@redhat.com> 2006a-1
changelog:
  - Upstream 2006a:
    - private.h(scheck): changing char* to char const*
    - Rule changes for Palestine, zone changes for Indiana/US, both
      changes for Canada.
    - Many related doc changes.
  - Naming scheme in spec file doesn't use %{name}, but tzdata.


author: Petr Machata <pmachata@redhat.com> 2006b-1
changelog:
  - Upstream 2006b:
    - using tz64code version, as 32 is legacy according to tzdata ML
    - new manual pages for ctime, strftime, tzset
    - some source code reorganizations
    - no timezone/dst rule updates


author: Petr Machata <pmachata@redhat.com> - 2006c-1
changelog:
  - Upstream 2006c
    - Time-related changes:
      - dozens of historical and commentary changes
      - Iran stopped observing DST
      - Sri Lanka switches from UTC+6 to UTC+5:30
      - America/Thule and America/Edmonton will adopt new US rules,
        starting 2007
      - Tunisia is adopting regular DST
    - Code:
      - asctime.c: Chages in format strings to silent gcc warnings
      - removing K&R notation from function signatures
      - few fixes across the code


author: Petr Machata <pmachata@redhat.com> - 2006d-1
changelog:
  - Upstream 2006d
    - Haiti observes DST
    - Sri Lanka change actually took effect Apr/15
    - All Canada is now scheduled for 2007 US DST rules
    - Some historical fixes


author: Petr Machata <pmachata@redhat.com> - 2006f-1
changelog:
  - Upstream 2006f
    - America/Guatemala observes DST between Apr/30 and Oct/1
    - Historical changes for Nicaragua
    - Update of America/Indiana/Vincennes in zone table


author: Petr Machata <pmachata@redhat.com> - 2006j-1
changelog:
  - Upstream 2006j
    - Honduras stopped observing DST on Monday at 00:00
    - America/Bermuda will follow the US's lead next year
    - America/Moncton will use US-style rules next year
    - New Zone America/Blanc-Sablon, for Canadians who observe AST all
      year
    - New zone: America/Atikokan instead of America/Coral_Harbour
    - New zones: Europe/Jersey, Europe/Guernsey, Europe/Isle_of_Man
    - Historical changes
    - Commentary updates
  - Upstream 2006i
    - localtime.c fixes
  - Upstream 2006h
    - zic leapsecond fix


author: Petr Machata <pmachata@redhat.com> - 2006l-1
changelog:
  - Upstream 2006k, 2006l:
    - Adjustments for Egypt, Palestine, Cuba, Honduras
    - Documentation changes


author: Petr Machata <pmachata@redhat.com> - 2006m-1
changelog:
  - Upstream 2006m:
    - Adjustments for Egypt, Palestine, Uruguay
    - Better description of `until' field in zic (8) manpage


author: Petr Machata <pmachata@redhat.com> - 2006m-2
changelog:
  - Proposed upstream patch (#210058)
    - Jordan will switch to winter time on October 27, not September 29
    - Brazil's DST this year is the first Sunday in November to the last
      Sunday in February.  (Thanks to Frederico A. C. Neves.)
    - ISO 3166 codes for Serbia and Montenegro, zone Europe/Podgorica
    - Commentary and past timestamps changes


author: Petr Machata <pmachata@redhat.com> - 2006p-1
changelog:
  - Upstream 2006p
    - Official version of Western Australia DST trial changes
    - Latitude/longitude changes for Europe/Jersey and Europe/Podgorica


author: Petr Machata <pmachata@redhat.com> - 2007a-1
changelog:
  - Upstream 2007a
    - Updates to Bahamas, they will be in sync with 2007 US DST change
    - New zone Australia/Eucla
    - Africa/Asmera renamed to Africa/Asmara, link created
    - Atlantic/Faeroe renamed to Atlantic/Faroe, link created
  - Packaging
    - Adding BuildRequires: glibc-common >= 2.5.90-7 to build tzdata
      with extended 64-bit format necessary for dates beyond 2037


author: Petr Machata <pmachata@redhat.com> - 2007c-1
changelog:
  - Upstream 2007c
    - Pulaski County, Indiana, switched back to eastern time.
    - Turkey switches at 01:00 standard time, not at 01:00 UTC.
  - Upstream 2007b
    - Changes to the commentary in "leapseconds".


author: Petr Machata <pmachata@redhat.com> - 2007d-1
changelog:
  - Upstream 2007d
    - Mongolia has abolished DST.
    - Turkey will use EU rules this year, changing at 01:00 UTC rather
      than 01:00 standard time.
    - Cuba observed DST starting Sunday.
    - Resolute, Nunavut switched from Central to Eastern time last
      November.


author: Petr Machata <pmachata@redhat.com> - 2007e-1
changelog:
  - Upstream 2007e
    - Syria switched to summer time at Mar/29.
    - Honduras will not enter DST this year.


author: Petr Machata <pmachata@redhat.com> - 2007f-1
changelog:
  - Upstream 2007f
    - New Zealand is extending DST, starting later this year.
    - Haiti no longer observes DST.
    - The Turks and Caicos switch at 02:00, not at 00:00, and have
      adopted US DST rules.


author: Petr Machata <pmachata@redhat.com> - 2007g-1
changelog:
  - Fix licensing tag.
  - Upstream 2007g
    - Egypt switches the September 7, not September 28
    - Daviess, Dubous, Knox, Martin, and Pike Counties, Indiana, switch
      from central to eastern time in November
    - South Australia, Tasmania, Victoria, New South Wales and Lord Howe
      Island are changing their DST rules effective next year
    - Sync several Antarctic station's rules with the New Zealand
    - leapseconds contain changes from the most recent IERS bulletin


author: Petr Machata <pmachata@redhat.com> - 2007h-1
changelog:
  - Upstream 2007h
    - Brazil will observe DST from 2007-10-14 to 2008-02-17
    - Egypt and Gaza switched earlier than we expected
    - Iran will resume DST next year
    - Venezuela is scheduled to change TZ to -4:30 on January 1


author: Petr Machata <pmachata@redhat.com> - 2007i-1
changelog:
  - Upstream 2007i
    - Syria DST will take place at Midnight between Thursday and Friday.
    - Cuba will end DST on the last Sunday of October.
  - Update tst-timezone.c from glibc CVS


author: Petr Machata <pmachata@redhat.com> - 2007j-1
changelog:
  - Upstream 2007j
    - New links America/St_Barthelemy and America/Marigot
    - Venezuela is changing their clocks on December 9 at 03:00


author: Petr Machata <pmachata@redhat.com> - 2008b-1
changelog:
  - Upstream 2008b
    - DST changes for Syria, Cuba; Iraq abandons DST
    - Saigon zone renamed Ho_Chi_Minh; backward link provided
    - Add America/Argentina/San_Luis information


author: Petr Machata <pmachata@redhat.com> - 2008c-1
changelog:
  - Upstream 2008c
    - Mongolia changes zone
    - Pakistan DST is scheduled until Sep/1, instead of Aug/31
  - Drop Morocco and Pakistan patches that are superseded by upstream
  - Fix a typo in Java subpackage name


author: Petr Machata <pmachata@redhat.com> - 2008e-1
changelog:
  - Upstream 2008e
    - Changes for Mauritius
    - Leap second coverage for 31/Dec 2008
    - Corrections of historical dates


author: Petr Machata <pmachata@redhat.com> - 2008f-1
changelog:
  - Upstream 2008f
    - Changes for Mauritius (extends DST to years to come)
    - Palestine changes clocks for the duration of Ramadan
    - Argentina will start DST on Sunday October 19, 2008
    - Brazil will start DST on 2008-10-19
  - Drop Pakistan and Morocco patches


author: Petr Machata <pmachata@redhat.com> - 2008h-1
changelog:
  - Upstream 2008h
    - Fix exact DST transition hour for Mauritius
    - Syria will leave the period of DST on Nov 1
    - Fix coordinates of Pacific/Niue


author: Petr Machata <pmachata@redhat.com> - 2008i-1
changelog:
  - Upstream 2008i
    - Updates for Argentina: Drop DST in zones America/Argentina/Jujuy,
      La_Rioja, San_Juan, Catamarca, Mendoza, Rio_Gallegos, Ushuaia; new
      zone America/Argentina/Salta (for provinces SA, LP, NQ, RN).


author: Petr Machata <pmachata@redhat.com> - 2009a-1
changelog:
  - Upstream 2009a
    - Fix Asia/Kathmandu spelling
    - Historical timestamps for Switzerland and Cuba
    - DST update for America/Resolute


author: Petr Machata <pmachata@redhat.com> - 2009d-1
changelog:
  - Upstream 2009d
    - Morocco will observe DST from 2009-06-01 00:00 to 2009-08-21 00:00
    - Tunisia will not observe DST this year.
    - Syria will start DST on 2009-03-27 00:00 this year
    - Cuba will start DST on midnight between 2009-03-07 and 2009-03-08
    - Province of San Luis, Argentina, went to UTC-04:00 on 2009-03-15


author: Petr Machata <pmachata@redhat.com> - 2009e-1
changelog:
  - Upstream 2009e
    - Historical changes for Jordan
    - Palestine will start DST on 2009-03-26 and end 2009-09-27
  - Egypt ends DST on 2009-09-24


author: Petr Machata <pmachata@redhat.com> - 2009f-1
changelog:
  - Upstream 2009f
    - Pakistan will observe DST between 2009-04-15 and (probably) 2009-11-01
  - Drop Pakistan patch


author: Petr Machata <pmachata@redhat.com> - 2009h-2
changelog:
  - Upstream 2009h
    - Convert use of 00:00 stamps to 24:00 of the previous day
    - Clarify that the data is Public Domain
  - Drop Cairo patch


author: Petr Machata <pmachata@redhat.com> - 2009k-1
changelog:
  - Upstream 2009k
    - Mauritius will not continue to observe DST the coming summer
    - Arbitrarily end DST at the end of 2009 so that a POSIX-style time
      zone string can appear in the Dhaka binary file


author: Petr Machata <pmachata@redhat.com> - 2009m-1
changelog:
  - Upstream 2009m
    - Palestine will will revert back to winter time on Friday, 2009-09-04
    - Samoa passed the DST Bill that fixes DST dates for 2009 and 2010
  - Drop Egypt patch


author: Petr Machata <pmachata@redhat.com> - 2009m-2
changelog:
  - Add markers for autoupdate of spec file
  - Pakistan leaves the period of DST on October 1 (tzdata-2009m-karachi.patch)


author: Petr Machata <pmachata@redhat.com> - 2009o-1
changelog:
  - Upstream 2009o
    - Bangladesh won't go back to Standard Time from October 1, 2009
    - Pakistan leaves DST on October 1, 2009
  - Dropped tzdata-2009m-karachi.patch
  - Argentina does not enter DST on October 18 (tzdata-2009o-argentinas.patch)


author: Petr Machata <pmachata@redhat.com> - 2009u-1
changelog:
  - Upstream 2009p
    - Argentina does not enter DST on October 18
    - San Luis switched from UTC-4 to UTC-3 on October 11th
  - Upstream 2009q
    - Change DST end in Syria from November 1 to last Friday in October
    - Changes to past Hong Kong transitions
    - Kemerovo oblast' in Russia will change current time zone on March 28, 2010.
      Asia/Novokuznetsk is the new time zone name
  - Upstream 2009r
    - Changes to local times of three Australian research stations in Antarctica
  - Upstream 2009s
    - Fiji plans to re-introduce DST from November 29th 2009 to April 25th 2010
  - Upstream 2009u
    - Bangladesh changed their clock back to Standard Time on December 31, 2009
  - Dropped tzdata-2009o-argentinas.patch


author: Petr Machata <pmachata@redhat.com> - 2010c-1
changelog:
  - Upstream 2010a
    - Source code cleanups
    - Historical timestamps for Bangladesh
  - Upstream 2010b
    - Northern Mexico's border cities share the DST schedule with the
      United States
  - Upstream 2010c
    - Paraguay DST now in effect from 2nd Sunday of April to 1st Sunday
      of October


author: Petr Machata <pmachata@redhat.com> - 2010e-1
changelog:
  - Upstream 2010d
    - The DST change in Bangladesh takes place a minute earlier
    - Fiji to end DST on 2010-03-28 at 03:00, about a month earlier
    - Samoa to observe DST this year; they didn't observe DST last year
    - DST in Chile extended to 3 April
  - Upstream 2010e:
    - Fix a typo in Bangladesh DST rule


author: Petr Machata <pmachata@redhat.com> - 2010f-1
changelog:
  - Upstream 2010f:
    - Changes to Australian stations in Antarctica
    - Correct 2010 Samoa DST start date
    - New zone Antarctica/Macquarie
    - Change Syria DST start from last Friday in March to first Friday
      in April in 2010 and forward
  - Upstream 2010g proposal (tzdata-2010f-g.patch):
    - No Bangladesh DST in 2010 and forward.
    - Gaza DST starts last Saturday in March at 12:01 a.m. in 2010 and forward
    - Kamchatka and Anadyr change to Moscow+8 on 2010-03-28
    - Samara changes to Moscow+0 on 2010-03-28
    - Related zone.tab updates


author: Petr Machata <pmachata@redhat.com> - 2010f-3
changelog:
  - Tunisia not to observe DST in 2010 (tzdata-2010g-tunis.patch)
  - Pakistan not to observe DST in 2010 (tzdata-2010g-karachi.patch)


author: Petr Machata <pmachata@redhat.com> - 2010h-2
changelog:
  - Upstream 2010g:
    - No Bangladesh DST in 2010 and forward.
    - Gaza DST starts last Saturday in March at 12:01 a.m. in 2010 and forward
    - Kamchatka and Anadyr change to Moscow+8 on 2010-03-28
    - Samara changes to Moscow+0 on 2010-03-28
    - Related zone.tab updates
  - Upstream 2010h:
    - No DST in Tunisia in 2010 and forward
    - No DST in Pakistan in 2010 and forward
  - Dropped tzdata-2010g-tunis.patch
  - Dropped tzdata-2010f-g.patch
  - Dropped tzdata-2010g-karachi.patch


author: Petr Machata <pmachata@redhat.com> - 2010i-1
changelog:
  - Upstream 2010i:
    - Morocco will have DST from 2010-05-02 to 2010-08-08
    - San Luis, Argentina will keep permanent DST after April 11, 2010
    - Updates of historical stamps for Taiwan


author: Petr Machata <pmachata@redhat.com> - 2010j-1
changelog:
  - Upstream 2010j:
    - Bahia de Banderas (Mexican state of Nayarit) changed time zone
      UTC-7 to new time zone UTC-6 on April 4, 2010


author: Tom "spot" Callaway <tcallawa@redhat.com> - 2010k-1
changelog:
  - Upstream 2010k:
   - Egypt has announced that DST will be off during Ramadan, but
     DST will resume afterwards (August 10, 2010 - September 9, 2010)


author: Petr Machata <pmachata@redhat.com> - 2010l-2
changelog:
  - Upstream 2010l:
    - Change Cairo's 2010 reversion to DST from the midnight between
      September 8 and 9 to the midnight between September 9 and 10.
    - Change Gaza's 2010 return to standard time to the midnight between
      August 10 and 11.
    - Bahia de Banderas (Mexican state of Nayarit) changed time zone
      UTC-7 to new time zone UTC-6 on April 4, 2010


author: Petr Machata <pmachata@redhat.com> - 2010n-1
changelog:
  - Upstream 2010m:
    - Hong Kong didn't observe DST in 1977
    - In zone.tab, remove obsolete association of Vostok Station with
      South Magnetic Pole; add association with Lake Vostok
  - Upstream 2010n:
    - Change end of DST in Samoa in 2011 from 2011-04-03 0:00 to
      2011-04-03 1:00


author: Petr Machata <pmachata@redhat.com> - 2011b-1
changelog:
  - Upstream 2011b:
    - America/North_Dakota/Beulah: Mercer County, North Dakota, changed
      from the mountain time zone to the central time zone


author: Petr Machata <pmachata@redhat.com> - 2011b-2
changelog:
  - Update of historical stamps for Juneau, Sitka, and histcurrent stamps
    for Metlakatla.  Sitka and Metlakatla are new zones.
  - Delay end of DST in Chile in 2011 until first Sunday in April. (tzdata-2011b-c.patch)


author: Petr Machata <pmachata@redhat.com> - 2011d-1
changelog:
  - Upstream 2011d:
    - Change end of DST in Samoa in 2011.
    - Change start of DST in Cuba in 2011.
    - Move start of DST in Turkey by one day in 2011.
  - Dropped tzdata-2011b-c.patch


author: Petr Machata <pmachata@redhat.com> - 2011g-1
changelog:
  - Upstream 2011e:
    - Morocco introduced DST for 2011 from April 2 to July 31.
    - Delay end of DST in Chile in 2011 until May 7.
  - Upstream 2011f:
    - The Falkland Islands will not turn back clocks this winter, but
      stay on daylight saving time.
  - Upstream 2011g:
    - Egypt abandons DST in 2011 (and forward)
  - Dropped tzdata-2011d-chile.patch
  - Dropped tzdata-2011d-morocco.patch


author: Petr Machata <pmachata@redhat.com> - 2011h-1
changelog:
  - Upstream 2011h:
    - Russia abandons DST in 2011.
    - *.tab: change AN (Netherlands Antilles) to CW (Curacao)


author: Petr Machata <pmachata@redhat.com> - 2011h-2
changelog:
  - Patch for upcoming change in Newfoundland.  The transition time
    changes from 12:01 AM to 2:00 AM.


author: Petr Machata <pmachata@redhat.com> - 2011h-1
changelog:
  - Upstream 2011i:
    - Add Africa/Juba (South Sudan) zone
    - Samoa skips over the date line on 2011-12-30
    - Use KALT as abbreviation for Europe/Kalinigrad
    - Canonical version of the Newfoundland patch
    - Change America/Resolute use of EST to 2006-2007 only
    - Assume Metlakatla abandoned use of daylight saving in 1983
    - Sync iso3166.tab and zone.tab with above
  - Resolved: #734063


author: Petr Machata <pmachata@redhat.com> - 2011k-0.1.20110921
changelog:
  - Upstream 2011j:
    - Fix the Samoa date line skip
    - Changes in past timestamp typos several Africa zones
  - Proposed upstream 2011k:
    - Belarus and Ukraine adopt permanent DST in 2011
    - Palestine suspends DST during Ramadan in 2011
    - Gaza and West Bank split in 2011.  West Bank is tracked in the
      timezone Asia/Hebron.  zone.tab update accordingly.
  - Resolves: #737896


author: Petr Machata <pmachata@redhat.com> - 2011l-1
changelog:
  - Upstream 2011l:
    - Fix ancient stamps for America/Sitka
    - Asia/Hebron transitioned to standard time already on Sep 30, not Oct 3
    - Fiji will introduce DST on Oct 22


author: Petr Machata <pmachata@redhat.com> - 2011l-2
changelog:
  - State of Bahia, Brazil, to resume Summer Time on Oct 16
  - The project moved, reflect this in URL
  - Resolves: #746183


author: Petr Machata <pmachata@redhat.com> - 2011l-1
changelog:
  - Rebase to 2011n
    - Drop all patches, including the Kemerovo patch, which is not in
      upstream
    - Cuba postponed DST by two weeks to Nov 13
    - Fiji will enter DST on Jan 21
  - Resolved: #748778


author: Petr Machata <pmachata@redhat.com> - 2012b-1
changelog:
  - Rebase to 2012b; changes vs. 2011n-5:
    - Changes to zones for Antarctica stations
    - Armenia abolished DST in 2012 and forward
    - Cuba enters DST on 31st March
    - Falkland Islands will stay on permanent Summer Time
    - New zone for Creston Valley, Canada, which differs from Dawson
      Creek in past stamps.  Changes to historical stamps in Canada.
    - Last year, Tokelau skipped over the date line together with Samoa


author: Petr Machata <pmachata@redhat.com> - 2012b-2
changelog:
  - Morocco DST starts on the last Sunday of March (March 25, 2012) and
    ends on last Sunday of September, except the month of Ramadan.  It
    is currently unclear what that Ramadan bit means, so this is not
    covered by the patch as of now.


author: Petr Machata <pmachata@redhat.com> - 2012c-1
changelog:
  - Upstream 2012c
    - Haiti observes DST from 2012 on
    - Gaza Strip and Hebron observe DST in 2012
    - Change start of DST in Syria to last Friday in March


author: Petr Machata <pmachata@redhat.com> - 2012d-1
changelog:
  - Upstream 2012d
    - Morocco will not observe DST during the month of Ramadan.
      DST cessation end date was corrected.


author: Petr Machata <pmachata@redhat.com> - 2012f-1
changelog:
  - Fiji will start daylight savings at 2 am on Sunday 21st October 2012
    and end at 3 am on Sunday 20th January 2013.  Guess it will be like
    that in following years as well.
  - Resolves: #857231


author: Petr Machata <pmachata@redhat.com> - 2012g-1
changelog:
  - Upstream 2012g
    - Adjust the packaging for new Makefile
    - Palestine: Fall transition was Sep 21, not Sep 28
    - Samoa: Daylight Saving Time commences on Sunday 30th September
      2012 and ends on Sunday 7th of April 2013.
  - Resolves: #868173


author: Petr Machata <pmachata@redhat.com> - 2012h-1
changelog:
  - Upstream 2012h
    - Brazilian state Bahia no longer has DST.
    - Brazilian state Tocantins now has DST.
    - Israel has new DST rules next year.
    - Jordan stays on DST this winter.


author: Petr Machata <pmachata@redhat.com> - 2012h-2
changelog:
  - Switch back to using system zic, ignore upstream Makefile at all.
    We do so for java anyway.
  - Drop Factory from distribution


author: Petr Machata <pmachata@redhat.com> - 2013b-1
changelog:
  - Upstream 2013b
    - Paraguay will end DST on March 24 this year
    - Haiti uses US daylight-saving rules this year
    - Morocco does not observe DST during Ramadan
  - Upstream 2013a
    - Retire Chile patch, 2013a has the data
    - New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen
    - Many changes in historical timestamps


author: Petr Machata <pmachata@redhat.com> - 2013c-1
changelog:
  - Upstream 2013c
    - Sync past stamps for Palestine and West Bank with timeanddate.com
    - Assume that the recent change to Paraguay's DST rules is permanent
    - Macquarie was uninhabited between 1919 and 1948.  It's also part
      of Australia (update in zone.tab).


author: Patsy Franklin <pfrankli@redhat.com> 2013h-1
changelog:
  - Rebase to 2013h
    - Libya switched to using UTC+2 without DST
    - Western Sahara (Africa/ElAaiun) uses Morocco's DST rules
    - Acres and Amazon swithc to UTC-4 and UTC-5 on 2013-11-10
    - Add entries for DST transition in Morocco in the year 2038


author: Patsy Franklin <pfrankli@redhat.com> 2013i-1
changelog:
  - Rebase with early release of 2013i from Paul Eggert github.
    - Jordan switches back to standard time at 00:00 on December 20,2013.
    - The 2006-2011 transition schedule is planned to resume in 2014.
    - The compile-time flag NOSOLAR has been removed.
    - The files solar87, solar88, and solar89 are no longer distributed.
    - tz-link.htm now mentions Noda Time.


author: Patsy Franklin <pfrankli@redhat.com> - 2014b-1
changelog:
  - Rebase to 2014b
    - Crimea switches to Moscow time on 2014-03-30 at 02:00 local time.
    - New entry for Troll station, Antarctica.


author: Patsy Franklin <pfrankli@redhat.com> - 2014d-1
changelog:
  - Rebase to 2014d
    - zic no longer generates files containing time stamps before
      the Big Bang.  This works around GNOME bug 730332


author: Patsy Franklin <pfrankli@redhat.com> - 2014e-1
changelog:
  - Rebase to 2014e
    - Morrocco suspends DTS for Ramadan 
         June 28 at 03:00 and August 2 at 02:00
    - Egypt suspends DTS for Ramadan
         June 26 and July 31 at 24:00


author: Patsy Franklin <pfrankli@redhat.com> - 2014f-1
changelog:
  - Rebase to 2014f
    - Several Russian time zones changes effective on 2014-10-26 
      at 02:00 local time.  See NEWS file for additional details.


author: Patsy Franklin <pfrankli@redhat.com> - 2014g-1
changelog:
  - Rebase to 2014g
    - Turks & Caicos is switching from US eastern time to UTC-4
      year-round, modeled as a switch from EST/EDT to AST
      on 2014-11-02 at 02:00.


author: Petr Machata <pmachata@redhat.com> - 2014h-1
changelog:
  - Rebase to 2014h
    - Changes to historical transitions in America/Jamaica and
      Asia/Novokuznetsk.
    - Africa/{Blantyre, Bujumbura, Gaborone, Harare, Kigali, Lubumbashi,
      Lusaka} now alias Africa/Maputo, because they don't differ in
      post-1970 stamps.
    - Africa/Maseru and Africa/Mbabane now alias Africa/Johannesburg for
      the same reason.


author: Patsy Franklin <pfrankli@redhat.com> - 2014i-1
changelog:
  - Rebase to 2014i
    - Pacific/Fiji will observe DST from 2014-11-02 02:00 to 2015-01-18 03:00.
    - A new Zone Pacific/Bougainville, for the part of Papua New Guinea
      that plans to switch from UTC+10 to UTC+11 on 2014-12-28 at 02:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2014j-1
changelog:
  - Rebase to 2014j
    - Turks & Caicos' switch from US eastern time to UTC-4 year-round
      did not occur on 2014-11-02 at 02:00.  It's currently scheduled
      for 2015-11-01 at 02:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2015a-1
changelog:
  - Rebase to 2015a
    - New leap second 2015-06-30 23:59:60 UTC as per IERS Bulletin C 49.
    - The Mexican state of Quintana Roo, represented by America/Cancun,
      will shift from Central Time with DST to Eastern Time without DST
      on 2015-02-01 at 02:00.
    - Chile will not change clocks in April or thereafter; its new
      standard time will be its old daylight saving time.  This affects
      America/Santiago, Pacific/Easter, and Antarctica/Palmer.


author: Patsy Franklin <pfrankli@redhat.com> - 2015b-1
changelog:
  - Rebase to 2015b
    - Mongolia will start observing DST again this year, from the last
      Saturday in March at 02:00 to the last Saturday in September at 00:00.
    - Palestine will start DST on March 28, not March 27.  Also,
      correct the fall 2014 transition from September 26 to October 24.
      Adjust future predictions accordingly.


author: Patsy Franklin <pfrankli@redhat.com> - 2015c-1
changelog:
  - Rebase to 2015c
    - Egypt's spring-forward transition is at 24:00 on April's last Thursday,
      not 00:00 on April's last Friday.  2015's transition will therefore be on
      Thursday, April 30 at 24:00, not Friday, April 24 at 00:00.  Similar fixes
      apply to 2026, 2037, 2043, etc.


author: Patsy Franklin <pfrankli@redhat.com> - 2015d-1
changelog:
  - Rebase to 2015d:
    - The Egyptian Cabinet announced that DST will be cancelled for 2015.
    - The abbreviations for Hawaii-Aleutian standard and daylight times
      have been changed from HAST/HADT to HST/HDT, as per US Government
      Printing Office style. This affects only America/Adak since 1983,
      as America/Honolulu was already using the new style.


author: Patsy Franklin <pfrankli@redhat.com> - 2015d-3
changelog:
  -  Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
     not 06-13 and 07-18 as we had guessed.


author: Patsy Franklin <pfrankli@redhat.com> - 2015e-1
changelog:
  - Rebase to 2015e:
    - Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
      not 06-13 and 07-18 as we had guessed.  (Thanks to Milamber.)
    - Assume Cayman Islands will observe DST starting next year, using US rules.
      Although it isn't guaranteed, it is the most likely.


author: Patsy Franklin <pfrankli@redhat.com> - 2015f-1
changelog:
  - Rebase to 2015f
    - North Korea switches to +0830 on 2015-08-15. 
      The abbreviation remains "KST". 
    - Uruguay no longer observes DST.


author: Patsy Franklin <pfrankli@redhat.com> - 2015g-1
changelog:
  - Rebase to 2015g
    - Turkey's 2015 fall-back transition is scheduled for Nov. 8, not Oct. 25.
    - Norfolk moves from +1130 to +1100 on 2015-10-04 at 02:00 local time.
    - Fiji's 2016 fall-back transition is scheduled for January 17, not 24.
    - Fort Nelson, British Columbia will not fall back on 2015-11-01.  It has
      effectively been on MST (-0700) since it advanced its clocks on 2015-03-08.
      New zone America/Fort_Nelson.


author: Patsy Franklin <pfrankli@redhat.com> - 2016a-1
changelog:
  - Rebase to 2016a
    - America/Cayman will not observe daylight saving this year after all.
      Revert our guess that it would.
    - Asia/Chita switches from +0800 to +0900 on 2016-03-27 at 02:00.
    - Asia/Tehran now has DST predictions for the year 2038 and later,
      to be March 21 00:00 to September 21 00:00.  This is likely better
      than predicting no DST, albeit off by a day every now and then.


author: Patsy Franklin <pfrankli@redhat.com> - 2016b-1
changelog:
  - Rebase to 2016b
    - New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan and
      Ulyanovsk Oblasts, Russia, both of which will switch from +03 to +04 on
      2016-03-27 at 02:00 local time.  They need distinct zones since their
      post-1970 histories disagree.  New zone Asia/Barnaul for Altai Krai and
      Altai Republic, Russia, which will switch from +06 to +07 on the same date
      and local time.  The Astrakhan change is already official; the others have
      passed the first reading in the State Duma and are extremely likely.
      Also, Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
    - As a trial of a new system that needs less information to be made up,
      the new zones use numeric time zone abbreviations like "+04"
      instead of invented abbreviations like "ASTT".
    - Haiti will not observe DST in 2016.
    - Palestine's spring-forward transition on 2016-03-26 is at 01:00, not 00:00.
      Guess future transitions will be March's last
      Saturday at 01:00, not March's last Friday at 24:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2016c-1
changelog:
  - Rebase to 2016c
    - Azerbaijan no longer observes DST.
    - Chile reverts from permanent to seasonal DST.


author: Patsy Franklin <pfrankli@redhat.com> - 2016d-1
changelog:
  - Rebase to 2016d 
    - America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
    - Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
    - New zone Asia/Tomsk, split off from Asia/Novosibirsk.  It covers
      Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
      at 02:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2016d-2
changelog:
  - Fix java conditionals to always build all the java tzdata. OpenJDK 7 is the
    default/base Java. It is sufficient for building everything. (#1230903)


author: Patsy Franklin <pfrankli@redhat.com> - 2016f-1
changelog:
  - Rebase to 2016f
    - Egypt cancelled DST.
    - Asia/Novosibirsk transitions from +06 to +07 on 2016-07-24 at 02:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2016g-1.prerelease
changelog:
  - Rebase to prerelease version of tzdata-2016g.
    - Turkey changed from EET/EEST (+02/+03) to permanent +03,
      on 2016-09-07. 
    - A new leap second will be added on 2016-12-31 23:59:60 UTC.


author: Patsy Franklin <pfrankli@redhat.com> - 2016g-2
changelog:
  - Rebase to tzdata-2016g.
    - Turkey changed from EET/EEST (+02/+03) to permanent +03,
      on 2016-09-07.
    - A new leap second will be added on 2016-12-31 23:59:60 UTC.


author: Patsy Franklin <pfrankli@redhat.com> - 2016i-1
changelog:
  - Rebase to tzdata-2016i:
    - Cyprus is now split into two time zones as of 2016-10-30
    - Tonga will reintroduce DST on 2016-11-06


author: Patsy Franklin <pfrankli@redhat.com> - 2016j-1
changelog:
  - Rebase to tzdata-2016ij
    - Saratov region of Russia is moving from +03 offset to +04 offset
      on 2016-12-04.


author: Patsy Franklin <pfrankli@redhat.com> - 2017a-1
changelog:
  - Rebase to tzdata-2017a.
    - Mongolia no longer observes DST. (BZ #1425214)
    - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
  - Add zone1970.tab file to the install list. (BZ #1414829)


author: Patsy Franklin <pfrankli@redhat.com> - 2017c-1
changelog:
  - Rebase to tzdata-2017c.
    - Northern Cyprus will revert to using EQ rules on October 29, 2017.
    - Sudan will switch from +03 to +02 on November 1, 2017.
    - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
      experiment with DST.
    - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
    - Namibia - starting September 3, 2017 switches from +)1 with DST to
      +02 all year.  This change takes effect April 1, 2018.
    - Turks & Caicos changes from -04 all year to -05 with US DST starting
      on March 11, 2018.  Effective change date is November 4, 2018. 
    - tzdata now includes two text versions of the time zone data - tzdata.zi
      and leapseconds. 
    - Includes two patches to deal with build issues.


author: Patsy Franklin <pfrankli@redhat.com> - 2018b-1
changelog:
  - Rebase to tzdata-2018b
    - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
    - Brazil's DST will start on the first Sunday in November
    - Irish standard time is in the summer now, not the winter.
    - Support for the new zic -t option.
    - Add back pacificnew file omitted in tzdata-2018a


author: Patsy Franklin <pfrankli@redhat.com> - 2018d-1
changelog:
  - Rebase to tzdata-2018d
    - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
    - Antarctica/Casey station changed to UTC+8 on March 11.


author: Patsy Franklin <pfrankli@redhat.com> - 2018e-2
changelog:
  - Rebase to tzdata-2018e
    - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
    - In this update, the upstream project now defaults to using
      the "vanguard" data implementation which includes negative DST offsets.
      However, we are continuing to provide the "rearguard" format
      for data which does not use negative DST offsets to provide
      better compatibility with existing tools.  We intend to transition
      to the "vanguard" data implementation in the future.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018e-4
changelog:
  - Brazil moved the start of DST from the first Sunday in November
    to the third Sunday in November.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018f-1
changelog:
  - Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
  - Add patch to remove use of 25:00.
  - Drop previous change to DST in Brazil.  The government rescinded the
    change.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018g-1
changelog:
  - Rebase to tzdata-2018g
    - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
      planned.  This change is effective Octobober 28, 2018.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018i-1
changelog:
  - Rebase to tzdata-2018i (includes changes from tzdata-2018h)
    - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
    - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
    - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
      transition with the Qyzylorda change.
    - Metlakatla, Alaska will observe PST for this winter only.
    - Predict that Morocco will continue to adjust clocks around Ramadan.
    - Also include predictions for Iran from 2038 through 2090.


author: Patsy Griffin Franklin <patsy@redhat.com> - 2019a-1
changelog:
  - Rebase to tzdata-2019a
    - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
      previously predicted.
    - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
      of Pacific standard time.


author: Patsy Griffin <patsy@redhat.com> - 2019b-1
changelog:
  - Rebase to tzdata-2019b
    - Brazil will no longer observe DST going forward.
    - The 2019 spring transition for Palestine occurred 03-29, not 03-30.


author: Patsy Griffin <patsy@redhat.com> - 2019c-1
changelog:
  - Rebase to tzdata-2019c
    - Fiji will observe DST from 2019-11-10 to 2020-01-12.
    - Norfolk Island will begin observing Australian-style DST on 2019-10-06.


author: Patsy Griffin <patsy@redhat.com> - 2020a-1
changelog:
  - Rebase to tzdata-2020a
    - Morocco will spring forward on 2020-05-31 rather than
      previously predicted 2020-05-24.
    - Canada's Yukon region changed to year round UTC -07
      effective 2020-03-08.
    - America/Godthab was renamed to America/Nuuk.


author: Patsy Griffin <patsy@redhat.com> - 2020b-1
changelog:
  - Rebase to tzdata-2020b
    - Yukon timezones represented by America/Whitehorse and
      America/Dawson will change time zone rules from -08/-07 to
      permanent -07 on 2020-11-01, not on 2020-03-08 as 2020a had it.
    - The most recent winter(+08)/summer(+11) transition for Casey Station,
      Antarctica was 2020-10-04 00:01.
    - Remove obsolete files pacificnew, systemv, and yearistype.sh
      from the distribution.


author: Patsy Griffin <patsy@redhat.com> - 2020b-3
changelog:
  - Include the upstream patch to support pacificnew for java tzupdater.
  - Set POSIXRULES macro to continue installing posixrules file.


author: Patsy Griffin <patsy@redhat.com> - 2020c-1
changelog:
  - Rebase to tzdata-2020c
    - Fiji starts DST later than usual, on 2020-12-20.
    - Rearguard now provides an empty file pacificnew to support
      downstream software that expects it.


author: Patsy Griffin <patsy@redhat.com> - 2020d-1
changelog:
  - Rebase to tzdata-2020d
   - Palestine will end summer time on 2020-10-24 rather than the
     predicted 2020-10-31.


author: Patsy Griffin <patsy@redhat.com> - 2020f-1
changelog:
  - Rebase to tzdata-2020f including changes for tzdata-2020e
    - tzdata-2020f fixes a bug in tzdata-2020e that caused an
      invalid zi file in rearguard format
    - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
    - Australia/Currie is identical to Australia/Hobart for all
      timestamps since 1970 and was therefore created by mistake,
      now moved to the "backward" file.


author: Patsy Griffin <patsy@redhat.com> - 2021b-1
changelog:
  - Rebase to tzdata-2021b
    - Innclude patch for Mayen
    - Jordan now starts DST on February's last Thursday.
    - Samoa no longer observes DST.
    - Merge more location-based Zones whose timestamps agree since 1970.
    - Move some backward-compatibility links to 'backward'.
    - Rename Pacific/Enderbury to Pacific/Kanton.
    - Correct many pre-1993 transitions in Malawi, Portugal, etc.
    - zic now creates each output file or link atomically.
    - zic -L no longer omits the POSIX TZ string in its output.
    - zic fixes for truncation and leap second table expiration.
    - zic now follows POSIX for TZ strings using all-year DST.
    - Fix some localtime crashes and bugs in obscure cases.
    - zdump -v now outputs more-useful boundary cases.
    - tzfile.5 better matches a draft successor to RFC 8536.


author: Patsy Griffin <patsy@redhat.com> - 2021c-1
changelog:
  - Rebase to tzdata-2021c
    - Revert most of 2021b changes to 'backward'.
    - Fix 'zic -b fat' bug in pre-1970 32-bit data.
    - Fix two Link line typos.
    - Distribute SECURITY file.


author: Patsy Griffin <patsy@redhat.com> - 2021d-1
changelog:
  - Rebase to tzdata-2021d
    - Pacific/Fiji suspended DST for the 2021/2022 season.
    - 'zic -r' now marks unspecified timestamps with "-00".


author: Patsy Griffin <patsy@redhat.com> - 2021e-1
changelog:
  - Rebase to tzdata-2021e - supersedes tzdata-2021d
    - Pacific/Fiji suspended DST for the 2021/2022 season.
    - 'zic -r' now marks unspecified timestamps with "-00".
    - Palestine will fall back 2021-10-29 at 01:00, rather
      than the predicted 2021-10-30.


author: Patsy Griffin <patsy@redhat.com> - 2022a-1
changelog:
  - Rebase to tzdata-2022a
    - Palestine springs forward on 2022-03-27, not -03-26.
    - zdump -v now outputs better failure information
    - fixes for code that reads corrupted TZif data


author: Patsy Griffin <patsy@redhat.com> - 2022b-1
changelog:
  - Rebase to tzdata-2022b
    - Chile transitions to DST on 2022-09-11, not 2022-09-04
    - 'make install' now defaults LOCALTIME to Factory rather than GMT
    - More zones that are the same since 1970 have been moved to backzone.
    - Include patch for awk workaround.


author: Patsy Griffin <patsy@redhat.com> - 2022c-1
changelog:
  - Rebase to tzdata-2022c - supersedes tzdata-2022b
    - Add a work-around for an awk bug in FreeBSD, macOS, etc.
    - Improve tzselect with respect to intercontinental Zones.


author: Patsy Griffin <patsy@redhat.com> - 2022d-1
changelog:
  - Rebase to tzdata-2022d
    - Palestine's DST transition will be on October 29, 2022,
      not October 28, 2022.
    - Europe/Uzhgorod and Europe/Zaporozhye are moved to 'backzone'.


author: Patsy Griffin <patsy@redhat.com> - 2022e-1
changelog:
  - Rebase to tzdata-2022e
    - Jordan and Syria cancelled the DST transition planned
      for 2022-10-28, remaining at +03 permanently.


author: Patsy Griffin <patsy@redhat.com> - 2022f-1
changelog:
  - Rebase to tzdata-2022f
    - Mexico will stop observing DST except near the US border.
    - Chihuahua moved to -06 year round starting on 2022-10-30.
    - Fiji no longer observes DST.


author: Patsy Griffin <patsy@redhat.com> - 2022g-1
changelog:
  - Rebase to tzdata-2022g
    - The northern edge of the Mexican state of Chihuahua will
      change time zone to agree with nearby US locations on
      2022-11-30.
    - Added a new Zone America/Ciudad_Juarez that splits from
      America/Ojinaga.


author: Patsy Griffin <patsy@redhat.com> - 2023a-1
changelog:
  - Rebase to tzdata-2023a
    - Egypt reintroduced DST, from April through October.
    - Morocco springs forward April 23, not April 30.
    - Palestine delayed the start of DST this year.


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-15
changelog:
  - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
    Resolves: #1196134 #1196122 #1196126 #1196130


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-16
changelog:
  - Added patch for build option "-Werror=format-security"
  - Added support of non-unicode non-latin charset
  - Fix print of non-ascii filenames
  - Fix troubles with symlinks for archives with many files
    Resolves: rhbz#1276746, rhbz#1286165, rhbz#1276744


author: Jakub Martisko <jamartis@redhat.com> - 6.0-19
changelog:
  - rename patch unzip-6.0-nostrip.patch to unzip-6.0-configure.patch
  - make linking flags configurable from the specc file
  - set linking flags to use relro hardening
    Related: #1531116


author: Jakub Martisko <jamartis@redhat.com> - 6.0-23
changelog:
  - Disable the zipbomb detection patches
  - There were too many false positives for now, will reenable this later with an option to opt-out
  - Resolves: rhbz#2020318


author: Jakub Martisko <jamartis@redhat.com> - 6.0-24
changelog:
  - Reenable the zipbomb detection patches
  - Add environment variable that disables the zipbomb detection
  - Resolves: rhbz#2020318


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.160-3
changelog:
  - 1267826 - Include c++11 syntax highlighting in vim
  - 1319760 - [RFE] Vim should support blowfish2, plus ensure that RHEL6 encrypted files can be opened in RHEL7


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.629-1
changelog:
  - 1563419 - Vim in RHEL 7 is older than VIM in RHEL 6 (Rebase)
  - 1377316 - [RFE] make _remote_ vim doing the right decisions about 'set background'


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-7
changelog:
  - Add support for detecting POWER KVM and LPAR
    resolves: rhbz#1147876
  - Detect RHEV/oVirt
    resolves: rhbz#1249438
  - Detect ACPI boot aarch64 guest
    resolves: rhbz#1275349
  - Fix typo in manual page
    resolves: rhbz#1099289


author: Richard W.M. Jones <rjones@redhat.com> - 1.18-2
changelog:
  - Rebase to Fedora Rawhide / upstream version.
  - Include upstream patches since 1.18 was released.
    resolves: rhbz#1476878


author: William Poteat <wpoteat@redhat.com> 0.28.1-1
changelog:
  - 1780467: Validate rhevm password when unicode is not allowed
    (wpoteat@redhat.com)
  - 1751441: Add command line path parameter (piotr.kliczewski@gmail.com)
  - 1762780: fix bug, when reporter_id is empty; ENT-1706 (jhnidek@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.28.3-1
changelog:
  - 1775535: config option to override api version (piotr.kliczewski@gmail.com)
  - Update releasers for new version (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.28.4-1
changelog:
  - 1806572: virt-who using V3 APIs for communication with RHEVM which is
    deprecated (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.28.6-1
changelog:
  - 1806572: RHEVM should only use version 4 (wpoteat@redhat.com)
  - Update to tests to match changes in Subscription Manager (jhnidek@redhat.com)


author: Martin Sehnoutka <msehnout@redhat.com> - 3.0.2-20
changelog:
  - Resolves: #1147551 - Missing isolate_* options, incorrect default values of
    max_clients, max_per_ip in man vsftpd.conf


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.0.2-22
changelog:
  - Resolves: #1432054 - secure ftp stopped working with default TLS settings in the new vsftpd package


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.2-23
changelog:
  - Redefine VSFTP_COMMAND_FD to 1
  - Resolves: rhbz#1443055
  - Document the relationship of text_userdb_names and chroot_local_user
  - Resolves: rhbz#1508021
  - Document allow_writeable_chroot in the man page
  - Resolves: rhbz#1508022
  - Improve documentation of ascii_* options
  - Resolves: rhbz#1517227
  - Add new filename generation algorithm for STOU command
  - Resolves: rhbz#1479237


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.2-25
changelog:
  - Add config option log_die allowing to pass error messages to syslog
  - Add config option bind_retries allowing to change the max number
  - of attempts to find a listening port for the PASV/EPSV command
  - Resolves: rhbz#1318198


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.2-29
changelog:
  - Enable support for wide-character strings in logs
  - Replace unprintables with HEX code, not question marks
  - Resolves: rhbz#1922809


author: Tomas Popela <tpopela@redhat.com> - 2.20.4-1
changelog:
  - Update to 2.20.4
  - Resolves: rhbz#1576544
  - WebKitWebProcess crashes when a11y is active
  - Resolves: rhbz#1591638


author: Tomas Popela <tpopela@redhat.com> - 2.20.4-2
changelog:
  - webkitgtk4: Crash on Google login page when a11y is active
  - Resolves: rhbz#1503624
  - Revert patch causing rendering glitches


author: Tomas Popela <tpopela@redhat.com> - 2.20.5-1
changelog:
  - Update to 2.20.5 - technically it was not necessary as the only difference
    between 2.20.4 and .5 was the revert of one change, that we already reverted
    while building 2.20.4. But it's better to stay with upstream.
  - Update the labels patch with the version that was pushed upstream.
  - Resolves: rhbz#1576544


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-5
changelog:
  - macsec: Fix segmentation fault in case macsec.ko is not loaded (rh #1440646)
  - nl80211: Fix race condition in detecting MAC change (rh #1447073)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-7
changelog:
  - avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
    CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,
    CVE-2017-13087, CVE-2017-13088)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-10
changelog:
  - Fix memory leak when macsec MKA/PSK is used (rh #1500442)
  - Fix authentication failure when the MAC is updated externally (rh #1490885)
  - Let the kernel discard EAPOL if packet type is PACKET_OTHERHOST (rh #1434434)
  - Don't restart wpa_supplicant.service on package upgrade (rh #1505404)
  - Don't own a directory in /run/ (rh #1507919)


author: Parag Nemade <paragn AT fedoraproject DOT org> - 3.3.12ga11-5
changelog:
  - Remove vendor tag from desktop file as per https://fedorahosted.org/fesco/ticket/1077
  - Cleanup spec as per recently changed packaging guidelines


author: Samantha N. Bueno <sbueno[at]redhat.com> - 3.3.12ga12-1
changelog:
  - updated to 3.3.12ga12
  - fixes CVE-2012-5662 (#889373, #924228)
  - add support for aarch64 to build system (#926737)


author: Russell Cattelan <cattelan@thebarn.com> - 2.2.38-2
changelog:
  - install removes the makefile installed version of the docs
  	package the docs based in the version specfic directory


author: Russell Cattelan <cattelan@thebarn.com> - 2.2.38-3
changelog:
  - Fix the /usr/sbin sym links to relative links
  - Add the Distribution tag
  - Add ncurses-devel to buildrequires


author: Eric Sandeen <sandeen@redhat.com> 3.1.3-2
changelog:
  - Preserve xattrs on multi-part stream restores (#1034014)
  - Prevent segfault on multi-part stream restores (#1034015)


author: Eric Sandeen <sandeen@redhat.com> 3.1.7-1
changelog:
  - Rebase to build against current RHEL7 xfsprogs headers
  - Fix race condition between lseek() and read()/write() (#1086532)


author: Pavel Reichl <preichl@redhat.com> - 3.1.7-4
changelog:
  - Batch fixing several issues
  - xfsrestore: Files from the backup go to orphanage dir because of xfsdump
  -      issue, Related: RHEL-10529
  - xfsdump/xfsrestore: suggest recovery for false roots may be possible using -x,
  -      Related: RHEL-14912


author: Peter Hutterer <peter.hutterer@redhat.com> 2.24-1
changelog:
  - xkeyboard-config 2.24 (#1564615)
  - Revert the high-keycode patches to avoid conflicts with xkbcomp < 1.4


author: Simo Sorce <simo@redhat.com> - 1.2.20-1
changelog:
  - New upstrema version with memleaks, crl checks and other fixes
  - enable make check during build
  - drop ecdsa patch as it has been included upstream


author: Tomas Halman <thalman@redhat.com> - 1.2.20-8
changelog:
  - xmlsec1 fails to validate XML signatures made using ECDSA algorithm in FIPS mode
  - Resolves: RHEL-3337


author: Adam Jackson <ajax@redhat.com> 1.10.0-2
changelog:
  - Merge from F16:

      * Wed Mar 09 2011 Adam Jackson <ajax@redhat.com> 1.10.0-2
      - Disable filesystem caps in paranoia until module loading is audited

      * Fri Feb 25 2011 Peter Hutterer <peter.hutterer@redhat.com> 1.9.99.902-1
      - xserver 1.10.0
      - server-1.9-99.901-xkb-repeat-issues.patch: drop, merged
      - xserver-1.4.99-pic-libxf86config.patch: drop, see 60801ff8
      - xserver-1.6.99-default-modes.patch: drop, see dc498b4
      - xserver-1.7.1-multilib.patch: drop, see a16e282
      - ABI bumps: xinput to 12.2, extension to 5.0, video to 10.0


author: Adam Jackson <ajax@redhat.com> 1.10.0-4
changelog:
  - xserver-1.10-pointer-barriers.patch: Backport CRTC confinement from master
    and pointer barriers from the development tree for same.
  - xserver-1.10-vbe-malloc.patch: Fix a buffer overrun in the VBE code.


author: Adam Jackson <ajax@redhat.com> 1.10.0-7
changelog:
  - xserver-1.10-glx-pixmap-crash.patch, xserver-1.10-bg-none-revert.patch:
    bugfixes from xserver-next


author: Peter Hutterer <peter.hutterer@redhat.com> 1.10.99.1-2.20110418
changelog:
  - rebase all patches
  - xserver-1.10-vbe-malloc.patch: drop, d8caa782009abf4d
  - "git rm" all unused patches


author: Soren Sandmann <ssp@redhat.com> 1.10.99.1-3.20110418
changelog:
  - xserver-1.10-fix-trapezoids.patch: this patch is necessary to prevent
    trap corruption with pixman 0.21.8.


author: Hans de Goede <hdegoede@redhat.com> 1.10.99.1-4.20110418
changelog:
  - Drop xserver-1.9.0-qxl-fallback.patch, since the latest qxl driver
    supports both revision 1 and 2 qxl devices (#642153)


author: 1.10.99.1-5.20110511
changelog:
  - Today's server from git
  - xserver-1.10-fix-trapezoids.patch: drop, c6cb70be1ed7cf7
  - xserver-1.10-glx-pixmap-crash.patch: drop, 6a433b67ca15fd1
  - xserver-1.10-bg-none-revert.patch: drop, dc0cf7596782087


author: Peter Hutterer <peter.hutterer@redhat.com> 1.11.99.1-1.20111109
changelog:
  - Update to today's git snapshot
  - xserver-1.6.1-nouveau.patch: drop, upstream
  - xserver-1.10.99-config-add-udev-systemd-multi-seat-support.patch: drop,
    upstream
  - 0001-dix-block-signals-when-closing-all-devices.patch: drop, upstream


author: Adam Jackson <ajax@redhat.com> 1.11.99.1-9
changelog:
  - xserver-1.8-disable-vboxvideo.patch: Drop, should be fixed now
  - Drop vesamodes and extramodes, rhpxl is no more
  - Stop building libxf86config, pyxf86config will be gone soon


author: Peter Hutterer <peter.hutterer@redhat.com> 1.11.99.901-1.20120103
changelog:
  - Git snapshot 98cde254acb9b98337ddecf64c138d38c14ec2bf
  - xserver-1.11.99-optionstr.patch: drop
  - 0001-Xext-don-t-swap-CARD8-in-SProcSELinuxQueryVersion.patch: drop


author: Peter Hutterer <peter.hutterer@redhat.com> 1.11.99.901-2.20120103
changelog:
  - xserver-1.12-Xext-fix-selinux-build-failure.patch: fix build error
    triggered by Red Hat-specific patch to libselinux


author: Peter Hutterer <peter.hutterer@redhat.com> 1.11.99.901-4.20120124
changelog:
  - xserver-1.12-dix-reset-last.scroll-when-resetting-the-valuator-45.patch:
    reset last.scroll on the device whenever the slave device switched to
    avoid jumps during scrolling (#788632).


author: Peter Hutterer <peter.hutterer@redhat.com> 1.11.99.901-6.20120124
changelog:
  - Fix installation of xserver-sdk-abi-requires script, if stable_abi is set
    always install the relese one, not the git one


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.0-1
changelog:
  - xserver 1.12
  - xserver-1.12-dix-reset-last.scroll-when-resetting-the-valuator-45.patch:
    drop, 6f2838818


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.1-1
changelog:
  - server 1.12.1
  - force autoreconf to avoid libtool errors
  - update patches for new indentation style.


author: Dave Airlie <airlied@redhat.com> 1.12.1-2
changelog:
  - xserver-fix-pci-slot-claims.patch: backport slot claiming fix from master
  - xserver-1.12-modesetting-fallback.patch: add modesetting to fallback list


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.2-4
changelog:
  - send keycode/event type down the wire when SlowKeys enable, otherwise
    GNOME won't warn about it (#816764)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.99.903-2
changelog:
  - xserver-1.12-os-print-newline-after-printing-display-name.patch: drop,
    014ad46f1b353a95e2c4289443ee857cfbabb3ae


author: Adam Jackson <ajax@redhat.com> 1.12.99.903-4
changelog:
  - Install xserver-sdk-abi-requires.release based on stable_abi not gitdate,
    so drivers built against a server that Provides multiple ABI versions will
    Require the stable version.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.13.0-9
changelog:
  - Fix server crash when a XI 1.x device grab is activated on a disabled
    synaptics touchpad is disabled


author: Adam Jackson <ajax@redhat.com>
changelog:
  - Drop -sdk Prov/Obs, changed to -devel in F9
  - Drop xorg-x11-X* Obsoletes, leftover from the modular transition in FC5


author: Dave Airlie <airlied@redhat.com> 1.14.0-4
changelog:
  - fix bug with GPU hotplugging while VT switched
  - reenable reverse optimus and some missing patch from F18


author: Peter Hutterer <peter.hutterer@redhat.com> 1.14.1-2
changelog:
  - Add -resizeable option to Xephyr, enable by default (#962572)
  - Fix crash on 24bpp host server (#518960)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.14.2-1
changelog:
  - xorg-server 1.4.2
  - drop merged patches
  - Add a quirk to set the synaptics resolution to 0 by default. The pre-scale
    patch in the server clashes with synaptics inaccurate resolution numbers,
    causing the touchpad movement to be stunted.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.14.2-5
changelog:
  - Fix logspam when trying to free a non-existant grab.
  - Update touch patch to upstream version (from fdo #66720)
  - re-add xephyr resizable patch, got lost in rebase (#976995)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.14.2-6
changelog:
  - Add new version of the resolution-based scaling patch - scale y down
    instead of x up. That gives almost the same behaviour as current
    synaptics. Drop the synaptics quirk, this needs to be now removed from the
    driver.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.14.2-7
changelog:
  - Fix erroneous valuator 1 coordinate when an absolute device in relative
    mode doesn't send y coordinates.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.14.2-9
changelog:
  - Fix active touch grabs, second touchpoint didn't get sent to client
  - Fix version mismatch for XI 2.2+ clients (where a library supports > 2.2
    but another version than the originally requested one).


author: Adam Jackson <ajax@redhat.com> 1.14.99.3-1
changelog:
  - xserver 1.14.99.3
  - xwayland branch refresh
  - Drop some F17-era Obsoletes
  - Update BuildReqs to match reality


author: Peter Hutterer <peter.hutterer@redhat.com> 1.15.0-8
changelog:
  - Push the XKB locked state to the attached slaves to keep keyboard LEDs in
    sync (#1047921)
  - Discard events from disabled devices to prevent crash on VT-switch or
    shutdown (#1095964)


author: Adam Jackson <ajax@redhat.com> 1.15.0-23
changelog:
  - Drop vestigial xwayland patch series
  - Sync with RHEL6.6:
    - Fix GrabPointer to not wrongly succeed on redirected windows
    - Enable PAM
    - Xephyr fixes for hardware cursor, 8bpp emulation, and initial size
    - Xorg fixes for X -configure and mixed pci/fbdev setups
    - Remove invalid bug checks
    - Emit DeviceChanged after grab deactivation 
  - Rediff some things to match the above
  - Inflate Release to be ahead of RHEL 6.6


author: Olivier Fourdan <ofourdan@redhat.com> 1.17.1-0.3
changelog:
  - Add missing hw/xfree86/Xorg.sh.in to xorg-x11-server-source package.
    This is needed to build packages depending on xorg-x11-server-source
    (e.g. tigervnc), otherwise the build will fail.


author: Olivier Fourdan <ofourdan@redhat.com> 1.17.1-0.4
changelog:
  - Add a new command line option "--auto-display" to xvfb-run to take
    advantage of the XServer's "-displayfd" option to get the display
    number directly from Xfvb


author: Adam Jackson <ajax@redhat.com> 1.17.2-8
changelog:
  - Add 32->24bpp downconversion and tile-based double buffering to the
    shadow framebuffer support in modesetting


author: Hans de Goede <hdegoede@redhat.com> - 1.17.2-21
changelog:
  - Add missing modesetting-Claim-PCI-devices-as-PCI-not-platform changes to
    really allow prime and slave output support with the modesetting driver
  - Resolves: rhbz#1353505


author: Hans de Goede <hdegoede@redhat.com> - 1.17.2-22
changelog:
  - Replace modesetting-Claim-PCI-devices-as-PCI-not-platform with a new patch
    for the same issue, which also works properly with prime setups
  - Resolves: rhbz#1353505


author: Adam Jackson <ajax@redhat.com> - 1.20.4-11
changelog:
  - Fix a crash when moving an animated cursor between screens
  - Be case-insentive when matching extension names to enable or disable


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.4-12
changelog:
  - CVE fixes for: CVE-2020-14345 (#1872389), CVE-2020-14346 (#1872393),
    CVE-2020-14361 (#1872400), CVE-2020-14362 (#1872407)
  - Temporarily revert fixes from 1.20.4-11 build for delivery of CVE fixes


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.4-17
changelog:
  - CVE fix for: CVE-2021-4008 (#2030161), CVE-2021-4009 (#2030171),
    CVE-2021-4010 (#2030176), CVE-2021-4011 (#2030180)


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.4-18
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2109031, rhbz#2109033


author: Adam Jackson <ajax@redhat.com> 1.15.0-23
changelog:
  - Drop vestigial xwayland patch series
  - Sync with RHEL6.6:
    - Fix GrabPointer to not wrongly succeed on redirected windows
    - Enable PAM
    - Xephyr fixes for hardware cursor, 8bpp emulation, and initial size
    - Xorg fixes for X -configure and mixed pci/fbdev setups
    - Remove invalid bug checks
    - Emit DeviceChanged after grab deactivation
  - Rediff some things to match the above
  - Inflate Release to be ahead of RHEL 6.6


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.20.4-20
changelog:
  - CVE fix for: CVE-2022-4283 (#2151800), CVE-2022-46340 (#2151775),
    CVE-2022-46341 (#2151780), CVE-2022-46342 (#2151787),
    CVE-2022-46343 (#2151790), CVE-2022-46344 (#2151797)


author: José Expósito <jexposit@redhat.com> - 1.20.4-25
changelog:
  - CVE fix for: CVE-2023-6377, CVE-2023-6478
    Resolves: https://issues.redhat.com/browse/RHEL-18416
    Resolves: https://issues.redhat.com/browse/RHEL-18428


author: José Expósito <jexposit@redhat.com> - 1.20.4-26
changelog:
  - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409
    Resolves: https://issues.redhat.com/browse/RHEL-21205
    Resolves: https://issues.redhat.com/browse/RHEL-20578
    Resolves: https://issues.redhat.com/browse/RHEL-20426
    Resolves: https://issues.redhat.com/browse/RHEL-20437
    Resolves: https://issues.redhat.com/browse/RHEL-21192
    Resolves: https://issues.redhat.com/browse/RHEL-21201


author: José Expósito <jexposit@redhat.com> - 1.20.4-28
changelog:
  - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and
    CVE-2024-31083
    Resolves: https://issues.redhat.com/browse/RHEL-31003
    Resolves: https://issues.redhat.com/browse/RHEL-30989
    Resolves: https://issues.redhat.com/browse/RHEL-30973
  - Add util-linux as a dependency of Xvfb
  - Fix compilation error on i686


author: Marian Koncek <mkoncek@redhat.com> - 1.3.1-13
changelog:
  - Fix remote code execution vulnerability
  - Resolves: CVE-2021-21344
  - Resolves: CVE-2021-21345
  - Resolves: CVE-2021-21346
  - Resolves: CVE-2021-21347
  - Resolves: CVE-2021-21350


author: Pavel Raiskup <praiskup@redhat.com> - 5.1.2-5alpha
changelog:
  - fix manual page inconsistencies with help output (private #948533)
  - enable/fix the 'xzgrep -h' (private #850898)


