# changelog

author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103210


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101799
  - Resolves: RHEL-103210


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101799


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102278


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118773
  - Resolves: RHEL-119450


author: Petra Alice Mikova <pmikova@redhat.com> - 1:18.0.0.0.37-1
changelog:
  - Update to ea version of jdk18
  - Adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch
  - Related: rhbz#2192749


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:18.0.2.0.9-1
changelog:
  - Update to jdk-18.0.2 release
  - Update release notes to actually reflect OpenJDK 18
  - Support JVM variant zero following JDK-8273494 no longer installing Zero's libjvm.so in the server directory
  - Rebase FIPS patches from fips-18u branch
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Automatically turn off building a fresh HotSpot first, if the bootstrap JDK is not the same major version as that being built
  - Drop tzdata patches added for 17.0.7 which will eventually appear in the upstream tarball when we reach OpenJDK 21
  - Switch bootjdkver to java-21-openjdk
  - Disable tzdata tests until we are on the latest JDK and things are back in sync
  - Related: rhbz#2192749


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:19.0.1.0.10-1
changelog:
  - Update to jdk-19.0.2 release
  - Update release notes to 19.0.2
  - Rebase FIPS patches from fips-19u branch
  - Remove references to sample directory removed by JDK-8284999
  - Add local patch JDK-8295447 (javac NPE) which was accepted into 19u upstream but not in the GA tag
  - Add local patches for JDK-8296239 & JDK-8299439 (Croatia Euro update) which are present in 8u, 11u & 17u releases
  - Related: rhbz#2192749


author: Jiri Vanek <jvanek@redhat.com> - 1:20.0.0.0.36-1
changelog:
  - Dropped JDK-8295447, JDK-8296239 & JDK-8299439 patches now upstream
  - Adapted rh1750419-redhat_alt_java.patch
  - Related: rhbz#2192749


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:20.0.0.0.36-1
changelog:
  - Update to jdk-20.0.2+9
  - Update release notes to 20.0.2+9
  - Update system crypto policy & FIPS patch from new fips-20u tree
  - Update generate_tarball.sh ICEDTEA_VERSION
  - Update CLDR reference data following update to 42 (Rocky Mountain-Normalzeit => Rocky-Mountain-Normalzeit)
  - Related: rhbz#2192749


author: Petra Alice Mikova <pmikova@redhat.com> - 1:21.0.0.0.35-1
changelog:
  - Replace smoke test files used in the staticlibs test, as fdlibm was removed by JDK-8303798
  - Related: rhbz#2192749


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.0.0.35-1
changelog:
  - Update to jdk-21.0.0+35
  - Update release notes to 21.0.0+35
  - Update system crypto policy & FIPS patch from new fips-21u tree
  - Update generate_tarball.sh to sync with upstream vanilla script inc. no more ECC removal
  - Drop fakefeaturever now it is no longer needed
  - Hardcode buildjdkver while the build JDK is not yet 21
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Use upstream release URL for OpenJDK source
  - Re-enable tzdata tests now we are on the latest JDK and things are back in sync
  - Related: rhbz#2192749


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.0.0.35-2
changelog:
  - Update documentation (README.md, add missing JEP to release notes)
  - Replace alt-java patch with a binary separate from the JDK
  - Drop stale patches that are of little use any more:
  - * nss.cfg has been disabled since early PKCS11 work and long superseded by FIPS work
  - * No accessibility subpackage to warrant RH1648242 patch any more
  - * No use of system libjpeg turbo to warrant RH649512 patch any more
  - Replace RH1684077 pcsc-lite-libs patch with better JDK-8009550 fix being upstreamed
  - Related: rhbz#2192749


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.0.0.35-3
changelog:
  - Re-enable SystemTap support and perform only substitutions possible without final NVR available
  - Depend on graphviz & pandoc for full documentation support
  - Fix typo which stops the EA designator being included in the build
  - Include tapsets in the miscellaneous tarball
  - Drop unused globals for tapset installation


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.0.0.35-4
changelog:
  - Rebuild jmods using the stripped binaries in release builds
  - Make sure the unstripped JDK is customised by the installjdk function
  - Resolves: OPENJDK-1974


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-1
changelog:
  - Update to jdk-21.0.1.0+12 (GA)
  - Update release notes to 21.0.1.0+12
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Synchronise bundled versions with 21u sources (FreeType, LCMS, HarfBuzz, libpng)
  - Sync generate_tarball.sh with 11u & 17u version
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Fix upstream release URL for OpenJDK source
  - Update buildjdkver to match the featurever


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.1.0.12-2
changelog:
  - Invoke xz in multi-threaded mode
  - Remove ppc64le with-jobs=1 workaround
  - Make portable tarball modification times reproducible


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-2
changelog:
  - Use a devkit to build on architectures where we have one (s390x, aarch64, ppc64le, x86_64)
  - Use a dynamic libstdc++ on s390x to workaround failure with static libstdc++
  - Use the devkit tools during the check stage so they can understand the generated binaries
  - Use eu-readelf on devkit and non-devkit builds as debug symbol tests rely on its behaviour
  - Use system gdb for both builds as devkit version fails (needs devkit libraries, then JDK segfaults with them)
  - Filter out annobin plugin when using the devkit
  - Drop static libstdc++ build dependency on devkit builds as it should come from the devkit
  - Introduce tar_opts to avoid repetition of lengthy tar creation options


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-1
changelog:
  - Update to jdk-21.0.2+13 (GA)
  - Update release notes to 21.0.2+13
  - Bump libpng version to 1.6.40 following JDK-8316030
  - Bump HarfBuzz version to 8.2.2 following JDK-8313643


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.3+1 (EA)
  - Update release notes to 21.0.3+1
  - Switch to EA mode
  - Require tzdata 2023d due to upstream inclusion of JDK-8322725
  - Bump FreeType version to 2.13.2 following JDK-8316028
  - Add module build path to stripped directories to catch jpackageapplauncher files
  - Move alt-java man page to the misc tarball so it is not in the JDK image
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - icedtea_sync.sh: Reinstate from rhel-8.9.0 branch
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck
  - Vary reproducible tar creation by version of tar detected
  - Set OPENJDK_UPSTREAM_TAG_EPOCH & VERSION_FILE at start of build section as in 17u
  - Change --with-source-date value to 'version' to match Temurin builds
  - Re-run jlink to regenerate the jmods directory and lib/modules with stripped libraries
  - Rebuild CDS archives against the updated lib/modules
  - Require openjdk-devkit 1.0-4 to bring in fixes for .comment section and deterministic archives
  - Bump devkit requirement to 1.0-5 to bring in the bootstrapped version
  - Set LD_LIBRARY_PATH when calling gcc to build alt-java
  - Set LD_LIBRARY_PATH when calling configure
  - Set LD_LIBRARY_PATH when calling make
  - Bump devkit requirement to 1.0-6 to bring in the AS=<path>/as fix
  - Resolves: OPENJDK-2820
  - Resolves: OPENJDK-2821
  - Resolves: OPENJDK-2585
  - Resolves: OPENJDK-3138


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Fix -ea logic to add dash
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Fix whitespace
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Remove -T0 argument from systemtap tar invocation
  - Use RHEL-7 tar-1.26-compatible invocations for reproducible tarballs
  - createtar: Add exclude option
  - packagejdk: Exclude debuginfo when creating jdkarchive and jrearchive tarballs
  - Resolves: OPENJDK-2995


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
changelog:
  - Update to jdk-21.0.3+7 (EA)
  - Update release notes to 21.0.3+7
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Drop JDK-8009550 which is now available upstream
  - Re-generate FIPS patch against 21.0.3+7 following backport of JDK-8325254


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
changelog:
  - Update to jdk-21.0.3+9 (GA)
  - Update release notes to 21.0.3+9
  - Switch to GA mode.
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.4+1 (EA)
  - Update release notes to 21.0.4+1
  - Switch to EA mode
  - Bump LCMS 2 version to 2.16.0 following JDK-8321489
  - Add zlib build requirement or bundled version (1.3.1), depending on system_libs setting
  - Resolves: OPENJDK-3061
  - Resolves: OPENJDK-3064


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.5-0.1.ea
changelog:
  - Update to jdk-21.0.4+5 (EA)
  - Update release notes to 21.0.4+5
  - Move unstripped, misc and doc tarball handling into normal build / no suffix blocks
  - Limit Java only tests to one architecture using jdk_test_arch
  - Drop unneeded tzdata-java build dependency following 3e3cf8fa2df7bac2f6a60a0ddd596ec39228a3e1
  - Resolves: OPENJDK-3133
  - Resolves: OPENJDK-3237
  - Resolves: OPENJDK-3182
  - Resolves: OPENJDK-3190


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - Sync with RHEL 7 portable build:
    - Conditionally define __os_install_post, dtsversion & pkgos only on RHEL 7
    - Use ExclusiveArch over ExcludeArch
    - Depend on devtoolset only on RHEL 7
    - Use javapackages-filesystem rather than manually defining _jvmdir
    - Restrict pandoc dependency to RHEL/CentOS 8
    - Drop unused component macro
  - Sync ExclusiveArch with devkit_arches on RHEL only
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: OPENJDK-2756
  - Resolves: OPENJDK-3163


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.5+1 (EA)
  - Update release notes to 21.0.5+1
  - Switch to EA mode
  - Bump giflib version to 5.2.2 following JDK-8328999
  - Bump libpng version to 1.6.43 following JDK-8329004
  - Turn off fresh_libjvm following JDK-8329088 which changes jdk.internal.vm.StackChunk in CDS archive
  - Add build scripts to repository to ease remembering all CentOS & RHEL targets and options
  - Make build scripts executable


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-1
changelog:
  - Update to jdk-21.0.5+10 (GA)
  - Update release notes to 21.0.5+10
  - Switch to GA mode.
  - Revert JDK-8327501 & JDK-8328366 backport until more mature.
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Resolves: OPENJDK-3327
  - Resolves: OPENJDK-3084


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-1
changelog:
  - Update to jdk-21.0.5+11 (GA)
  - Update release notes to 21.0.5+11
  - Remove local JDK-8327501 & JDK-8328366 backport as this is now upstream.


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-2
changelog:
  - Bump devkit requirement to 1.0-8 to bring in the gcc with --enable-linker-build-id
  - Related: OPENJDK-3068


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-1
changelog:
  - Update to jdk-21.0.6+7 (GA)
  - Update release notes to 21.0.6+7
  - Build with DWARF 4 debuginfo for compatibility with older toolchains
  - Check for CentOS being defined to determine use of devkit
  - Bump devkit requirement to 1.0-9 to bring in updated sysroot
  - Drop workaround of building s390x with dynamic libstdc++
  - Turn on fresh_libjvm now 21.0.5 with JDK-8329088 is released
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **
  - Resolves: OPENJDK-3556
  - Resolves: OPENJDK-3590
  - Related: OPENJDK-3070


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-1
changelog:
  - Update to jdk-21.0.7+6 (GA)
  - Update release notes to 21.0.7+6
  - Rebase FIPS support against 21.0.7+5
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: OPENJDK-3789


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Resolves: OPENJDK-3949


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: OPENJDK-3949


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-2
changelog:
  - Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
  - Install annobin plugin as gcc-annobin in the same way as the gcc spec file
  - Resolves: OPENJDK-4142


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: OPENJDK-4131


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-1
changelog:
  - Update to jdk-21.0.10+7 (GA)
  - Update release notes to 21.0.10+7
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Add test to ensure blocked.certs is valid (OPENJDK-4362)
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Resolves: OPENJDK-4273
  - Resolves: OPENJDK-4281
  - Resolves: OPENJDK-4357
  - Resolves: OPENJDK-4397
  - Resolves: OPENJDK-4380
  - Resolves: OPENJDK-4388
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.11.0.10-1
changelog:
  - Update to jdk-21.0.11+10 (GA)
  - Update release notes to 21.0.11+10
  - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
  - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158
  - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078
  - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047
  - Bump zlib version to 1.3.2 following JDK-8378631
  - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
  - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
  - Resolves: OPENJDK-4301
  - Resolves: OPENJDK-4521
  - Resolves: OPENJDK-4543
  - Resolves: OPENJDK-4550
  - Resolves: OPENJDK-4653
  - Resolves: OPENJDK-4631
  - Resolves: OPENJDK-4606
  - Resolves: OPENJDK-4676


author: - Jiri Vanek <jvanek@redhat.com> - 0.32.92-1
changelog:
  - first update ever
  - to newest wrapper 32.92 with faith to fix some issues
  - added build requirments of gtk3-devel, at-spi2-atk-devel and at-spi2-core-devel
  - introduced libver macro to avoid duplicated entry


author: David Walluck <david@anti-microsoft.org> 1:0.10-0.k.1jpp
changelog:
  - fix version/release (bump epoch)
  - change License tag from Free to BSD-style
  - add Distribution tag
  - really update for JPackage 1.5


author: Miloš Jakubíček <xjakub@fi.muni.cz> - 1:0.11a-2
changelog:
  - Rebuilt in non-bootstrap mode (removed all prebuilt jars).
  - Added BR: jflex and java_cup >= 1:0.11a for non-bootstrap mode
  - Remove unnecessary R(post,postun): coreutils


author: Lubomir Rintel <lkundrak@v3.sk> 1:0.11a-5
changelog:
  - Require appropriate packages for depmap maintenance in scriptlets
  - Remove classpath from jar manifest


author: Mat Booth <fedora@matbooth.co.uk> - 1:0.11a-14
changelog:
  - Patch so that generated action methods do not exceed the 65535 byte JVM
    method size limit. Supplied by eclipse-pdt project.
  - Drop rpm bug workaround scriptlet.


author: Matthew Wringe <mwringe at redhat.com> - 0:4.0-3jpp_1fc
changelog:
  - Merged with upstream version
  - Changed directory locations to rpm macros
  - Added conditional native compiling


author: Jerry James <loganjerry@gmail.com> - 0:4.1-0.1
changelog:
  - Update to 4.1
  - Also ship the jjrun script
  - Own the appropriate gcj directory
  - Minor spec file changes to comply with latest Fedora guidelines
  - Include the top-level index.html file in the manual


author: Matt Wringe <mwringe@redhat.com> - 0:4.1-0.2
changelog:
  - Update to remove packaged jars in source tar
  - Build with bootstrap jar so that required java source 
    files get generated


author: Jaromir Capik <jcapik@redhat.com> 0:5.0-6
changelog:
  - Fixing #835786 - javacc: Invalid upstream URL
  - Minor spec file changes according to the latest guidelines


author: Michael Simacek <msimacek@redhat.com> - 0:6.1.3-1
changelog:
  - Update to upstream version 6.1.3
  - Use new upstream location
  - Generate scripts with jpackage_script


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.4.3-5
changelog:
  - Fix pom filenames (#655806)
  - Versionless jars/javadocs (new guidelines)
  - Migrate to tomcat6 (#652004)
  - Other cleanups


author: Alexander Kurtakov <akurtako@redhat.com> 3.15.0-1
changelog:
  - Update to latest upstream release.
  - Add javassist:javassist depmap.
  - The project is now triple licensed.


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.18.1-1
changelog:
  - Update to upstream version 3.18.1
  - Remove workaround for rpm bug, can be removed in F-18
  - Update to current packaging guidelines


author: Ralph Apel <r.apel@r-apel.de> 0:1.0-3jpp
changelog:
  - build against dom4j-1.4-1jpp
  - introduce manual and demo subpackages
  - patch org.jaxen.dom4j.DocumentNavigatorTest
  - include LICENSE in main package
  - run tests during build


author: Ralph Apel <r.apel@r-apel.de> 0:1.1-0.b7.1jpp
changelog:
  - Upgrade to 1.1-beta-7
  - Now mavenized
  - Requiring dom4j >= 1.6.1
  - rpmbuild option to inhibit build of manual (needs newer maven)


author: Andrew Overholt <overholt@redhat.com> 0:1.1-1jpp.1
changelog:
  - Bump to 1.1 final
  - Make release Xjpp.Y%{?dist}
  - Remove Distribution, Vendor
  - Fix Group
  - Remove cleaning of buildroot from beginning of %prep
  - Add cleaning of buildroot to beginning of %install
  - Remove %section free
  - Use Fedora buildroot


author: Andrew Overholt <overholt@redhat.com> 0:1.1-1jpp.1
changelog:
  - Add explicit version-release on Provides and Obsoletes
  - Untabify
  - Remove %ghost on versioned javadoc dir
  - Just include %{_javadocdir}/* for javadoc package


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.1.3-7
changelog:
  - Remove unneeded dependency from POM: maven-cobertura-plugin
  - Remove unneeded dependency from POM: maven-findbugs-plugin
  - Resolves: rhbz#880692


author: Michal Srb <msrb@redhat.com> - 0:1.1.6-1
changelog:
  - Update to upstream version 1.1.6
  - Build with Maven
  - Update description
  - Adapt to current guidelines


author: Orion Poplawski <orion@nwra.com> - 0.19-3
changelog:
  - Use autoreconf -f to remove rpath
  - Use --disable-static to disable static builds
  - Use current make macros


author: David Walluck <dwalluck@redhat.com> 0:1.5.2-2
changelog:
  - use excalibur for avalon
  - remove javadoc scriptlets
  - GCJ fixes
  - fix maven directory ownership
  - fix -bc --short-circuit by moving some of %build to %prep


author: Yong Yang <yyang@redhat.com> 0:1.5.8-1
changelog:
  - 1.5.8
  - Replace slf4j-1.5.6-integration-tests-current-only.patch with
    slf4j-1.5.8-skip-integration-tests.patch because of the failure of "testMatch"


author: Alexander Kurtakov <akurtako@redhat.com> 0:1.5.11-2
changelog:
  - Skip installing tests jar that is no longer produced.
  - Use javadoc aggregate.
  - Use mavenpomdir macro.


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.6.1-4
changelog:
  - Specify explicit source encoding to fix build with Java 1.7.
  - Remove no longer needed javadoc dir upgrade hack.


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.7.2-2
changelog:
  - Fix license to ASL 2.0 and MIT
  - Update to add_maven_depmap macro
  - Use generated .mfiles list
  - Small packaging cleanups


author: Matt Wringe <mwringe at redhat.com> - 0:2.6-6jpp.1
changelog:
  - Merge with upstream version
   - Add missing javadoc post and postun
   - Add missing javadoc requires


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 0.6-3
changelog:
  - Add license to javadoc subpackage
  - Change jakarta-commons-io for apache-commons-io
  - Add BR to maven


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 0.7-1
changelog:
  - Update to 0.7
  - Fix BR to not require maven2
  - Fix BR for new package name
  - Adjust spec to new guidelines


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.0-0.b7.1mdk
changelog:
  - Requires and BuildRequires xalan-j2
  - vendor tag
  - packager tag
  - s/Copyright/License/
  - truncated description to 72 columns in spec
  - spec cleanup
  - used versioned jar
  - added demo package


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.0-0.b7.6jpp
changelog:
  - versioned dir for javadoc
  - requires xalan-j2 >= 2.2.0
  - no dependencies for javadoc package
  - stricter dependency for demo package
  - section macro


author: Deepak Bhole <dbhole@redhat.com> - 0:1.0-4jpp.1
changelog:
  - Added missing requirements.
  - Remove jaxen requirement, since we don't have it in fc yet.
  - Merge with fc spec.


author: Mary Ellen Foster <mefoster at gmail.com> 0:1.1.1-1
changelog:
  - Update to 1.1.1 bug#316380
  - Add maven dependency information
  - Make javadoc and demo subpackages noarch


author: Michael Simacek <msimacek@redhat.com> - 2.0.6-12
changelog:
  - Repack tarball without bundled jars
  - The repacked jar contains slightly different source (force push by upstream?)
  - Correct license tag


author: Matt Wringe <mwringe@redhat.com> - 0:1.3.5-2jpp.1
changelog:
  - Remove javadoc post and postun sections due to new jpp standard 
  - Update makefile patch to compress jar
  - Fix rpmlint issues


author: Matt Wringe <mwringe@redhat.com> - 0:1.3.5-2jpp.2
changelog:
  - Add patches jflex-CharSet_java.patch and jflex-StateSet_java.patch
    to allow building with the new gcj


author: Mat Booth <fedora@matbooth.co.uk> - 0.9.94-1
changelog:
  - Remove bundled jars in %prep phase.
  - Tidy up spec file, fix some rpmlint warnings.
  - Add pom and depmaps.


author: Mat Booth <fedora@matbooth.co.uk> - 0.9.94-2
changelog:
  - Remove pre-built Windows-only binary artifacts.
  - Demo package was defined but never built for some reason.
  - Don't also package jar in the javadoc package!
  - Drop versioned java and javadocs.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.9.94-4
changelog:
  - Patch delete to actually behave as delete instead of backspace, include
    keybindings.properties in docs (#720170).
  - Drop executable bit from jar.
  - Crosslink with local javadocs.
  - Include LICENSE.txt in -javadoc.


author: Severin Gehwolf <sgehwolf@redhat.com> - 2.10-9
changelog:
  - Package jline 2.x as jline. Resolves RHBZ#1022915.
  - Part of a large effort to make jline1 a compat package rather than jline2.
    See RHBZ#1022897.
  - Switch to xmvn.


author: Mat Booth <mat.booth@redhat.com> - 2.10-15
changelog:
  - Fix FTBFS due to missing BR on site-plugin
  - Fix directory ownership
  - Fix bogus date in changelog


author: Jerry James <loganjerry@gmail.com> - 0-0.1.20080613svn
changelog:
  - Update to 13 Jun 2008 snapshot
  - Fix broken URLs
  - Include instructions on regenerating the tarball
  - Conditionalize the gcj bits


author: Jerry James <loganjerry@gmail.com> - 0-0.4.20090319svn
changelog:
  - Update to 19 Mar 2009 snapshot
  - Compress with xz instead of bzip2
  - BR tomcat5, a horrible workaround to solve bz 538868


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0-0.5.20090319svn
changelog:
  - Fix pom filename (Resolves rhbz#655811)
  - Remove tomcat5 BR (not needed anymore)
  - Use new maven plugin names
  - Remove gcj support
  - Few tweaks according to new guidelines
  - Make jars and javadocs versionless


author: Michal Srb <msrb@redhat.com> - 0-0.14.20090319svn
changelog:
  - Install license file with javadoc subpackage (Resolves: rhbz#975411)
  - Add file containing link to CC-BY license text


author: Ville Skyttä <ville.skytta at iki.fi> 1:1.0-0.20000804r7dev.1jpp
changelog:
  - Change version to 1.0, put revision to release, add Epoch.
  - Don't use included DOM and SAX, require jaxp_parser_impl.
  - Add non-versioned jar symlink.
  - Add shell script.
  - Vendor, Distribution tags.


author: Ville Skyttä <ville.skytta at iki.fi> - 1:1.0-0.20000804r7dev.2jpp
changelog:
  - Rebuild for JPackage 1.5.
  - Fix Group tags.
  - Include non-versioned javadoc symlink.
  - Scripts subpackage.


author: David Walluck <david@jpackage.org> 1:1.0-0.20000804r7dev.5jpp
changelog:
  - add ant conf
  - own non-versioned javadoc symlink
  - Requires: xml-commons-apis
  - use build-classpath
  - macros


author: Chris Spike <chris.spike@arcor.de> 2:1.0-0.5.r938
changelog:
  - Dropped gcj_support
  - Updated to latest upstream version
  - Moved shell script to main package and obsoleted script subpackage
  - Updated description
  - Removed xml-commons-apis and jaxp_parser_impl from requires and build requires
  - Removed xml-commons-apis from ant config file


author: Chris Spike <chris.spike@arcor.de> 2:1.0-0.8.20100930svn1125
changelog:
  - Updated to latest upstream svn revision
  - Installed pom.xml
  - Added 'net.sf.jtidy:jtidy' to maven depmap
  - Added 'jtidy:jtidy' to maven depmap


author: Michal Srb <msrb@redhat.com> - 0:4.10-7
changelog:
  - Build-time dependency perl-MD5 replaced with perl(Digest::MD5)
  - Description cleanup (Resolves: #888389)


author: Michal Srb <msrb@redhat.com> - 0:4.11-7
changelog:
  - Drop "-SNAPSHOT" from version ID
  - See: https://lists.fedoraproject.org/pipermail/java-devel/2013-August/004923.html


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 4.11-9
changelog:
  - Update to current packaging guidelines
  - Drop old Obsoletes/Provides for junit4 rename
  - Disable test which fails with Java 8


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.38.1.el8_10]
changelog:
  - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891]
  - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385]
  - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385]
  - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451]
  - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451]
  - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451]
  - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451]
  - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387]
  - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.40.1.el8_10]
changelog:
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.41.1.el8_10]
changelog:
  - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886]
  - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.42.1.el8_10]
changelog:
  - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261]
  - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458]
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950]
  - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415]
  - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161]
  - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.43.1.el8_10]
changelog:
  - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999]
  - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999]
  - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894]
  - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971]
  - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229]
  - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229]
  - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229]
  - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229]
  - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229]
  - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229]
  - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807}
  - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756]
  - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.44.1.el8_10]
changelog:
  - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302}
  - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786]
  - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786]
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197}
  - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.45.1.el8_10]
changelog:
  - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269]
  - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269]
  - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269]
  - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269]
  - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269]
  - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269]
  - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937}
  - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269]
  - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922}
  - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694]
  - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694]
  - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810]
  - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.46.1.el8_10]
changelog:
  - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934]
  - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934]
  - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934]
  - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832]
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785}
  - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085]


author: Pingfan Liu <piliu@redhat.com> - 2.0.26-8
changelog:
  - mkdumprd: Use the correct syntax to redirect the stderr to null
  - mkdumprd: call dracut with --add-device to install the drivers needed by /boot partition automatically for FIPS
  - Add NICs that handle DNS queries to the allowlist


author: Pingfan Liu <piliu@redhat.com> - 2.0.26-11
changelog:
  - powerpc: update kdumpctl to load kernel signing key for fadump
  - powerpc: update kdumpctl to remove deletion of kernel signing key once loaded


author: Pingfan Liu <piliu@redhat.com> - 2.0.26-13
changelog:
  - dracut-module-setup.sh: also install the driver of physical NIC for Hyper-V VM with accelerated networking


author: Youling Tang <tangyouling@loongson.cn> - 2.0.26-14.0.1.2
changelog:
  - Add LoongArch support
  - Add doc sub package (wb-zh951434@alibaba-inc.com)
  - Fix kexec error for kexec -s (xiangzao@linux.alibaba.com)
  - Reimplement loongarch64 support
  - Add pstore segment (xiangzao@linux.alibaba.com)
  - Fix loongarch kexec issue cause by pstore segment. (wangming01@loongson.cn)
  - Fix loongarch build faild issue. (wangming01@loongson.cn)


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-16
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1778889


author: Julien Rische <jrische@redhat.com> - 1.18.2-27
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27250
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27244
  - Make TCP waiting time configurable
    Resolves: RHEL-17131


author: Julien Rische <jrische@redhat.com> - 1.18.2-29
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45398 RHEL-45386


author: Julien Rische <jrische@redhat.com> - 1.18.2-30
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-50253
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-17616


author: Julien Rische <jrische@redhat.com> - 1.18.2-31
changelog:
  - Prevent overflow when calculating ulog block size (CVE-2025-24528)
    Resolves: RHEL-78248
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56060


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include %{version}


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to %{_var}/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-8
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-6
changelog:
  - incorporate updated fix for CVE-2007-3999 (CVE-2007-4743)
  - fix incorrect call to "test" in the kadmin init script (#252322,#287291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-7
changelog:
  - also perform PAM session and credential management when ftpd accepts a
    client using strong authentication, missed earlier
  - also label kadmind log files and files created by the db2 plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-9
changelog:
  - apply the fix for CVE-2007-4000 instead of the experimental patch for
    setting ok-as-delegate flags


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5.conf %verify(not md5 size mtime) in addition to
    %config(noreplace), like /etc/nsswitch.conf (#329811)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-1
changelog:
  - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999
    and CVE-2007-4000 (the new pkinit module is built conditionally and goes
    into the -pkinit-openssl package, at least for now, to make a buildreq
    loop with openssl avoidable)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-3
changelog:
  - allocate space for the nul-terminator in the local pathname when looking up
    a file context, and properly free a previous context (Jose Plans, #426085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-4
changelog:
  - some init script cleanups
    - drop unquoted check and silent exit for "$NETWORKING" (#426852, #242502)
    - krb524: don't barf on missing database if it looks like we're using kldap,
      same as for kadmin
    - return non-zero status for missing files which cause startup to
      fail (#242502)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-5
changelog:
  - enable patch for key-expiration reporting
  - enable patch to make kpasswd fall back to TCP if UDP fails (#251206)
  - enable patch to make kpasswd use the right sequence number on retransmit
  - enable patch to allow mech-specific creds delegated under spnego to be found
    when searching for creds


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-7
changelog:
  - drop netdb patch
  - kdb_ldap: add patch to treat 'nsAccountLock: true' as an indication that
    the DISALLOW_ALL_TIX flag is set on an entry, for better interop with Fedora,
    Netscape, Red Hat Directory Server (Simo Sorce)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated
  - in login, signal PAM when we're changing an expired password that it's an
    expired password, so that when cracklib flags a password as being weak it's
    treated as an error even if we're running as root


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove a patch, to fix problems with interfaces which are "up" but which
    have no address assigned, which conflicted with a different fix for the same
    problem in 1.5 (#200979)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to suppress double-processing of /etc/krb5.conf when we build
    with --sysconfdir=/etc, thereby suppressing double-logging (#231147)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-8
changelog:
  - ftp: add patch to fix "runique on" case when globbing fixes applied
  - stop adding a redundant but harmless call to initialize the gssapi internals


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-9
changelog:
  - rework file labeling patch to not depend on fragile preprocessor trickery,
    in another attempt at fixing #428355 and friends


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-10
changelog:
  - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer
    when v4 compatibility is enabled on the KDC (CVE-2008-0062, CVE-2008-0063,
    - add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
    high-numbered descriptors are used (CVE-2008-0947, #433596)
  - add backport bug fix for an attempt to free non-heap memory in
    libgssapi_krb5 (CVE-2007-5901, #415321)
  - add backport bug fix for a double-free in out-of-memory situations in
    libgssapi_krb5 (CVE-2007-5971, #415351)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-11
changelog:
  - libgssapi_krb5: properly export the acceptor subkey when creating a lucid
    context (Kevin Coffman, via the nfs4 mailing list)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-12
changelog:
  - stop exporting kadmin keys to a keytab file when kadmind starts -- the
    daemon's been able to use the database directly for a long long time now
  - belatedly add aes128,aes256 to the default set of supported key types


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-15
changelog:
  - build with -fno-strict-aliasing, which is needed because the library
    triggers these warnings
  - don't forget to label principal database lock files
  - fix the labeling patch so that it doesn't break bootstrapping


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clear fuzz out of patches, dropping a man page patch which is no longer
    necessary
  - quote %{__cc} where needed because it includes whitespace now
  - define ASN1BUF_OMIT_INLINE_FUNCS at compile-time (for now) to keep building


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-19
changelog:
  - libgssapi_krb5: backport fix for some errors which can occur when
    we fail to set up the server half of a context (CVE-2009-0845)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-100
changelog:
  - turn off krb4 support (it won't be part of the 1.7 release, but do it now)
  - use triggeruns to properly shut down and disable krb524d when -server and
    -workstation-servers gets upgraded, because it's gone now
  - move the libraries to /%{_lib}, but leave --libdir alone so that plugins
    get installed and are searched for in the same locations (#473333)
  - clean up buildprereq/prereqs, explicit mktemp requires, and add the
    ldconfig for the -server-ldap subpackage (part of #225974)
  - escape possible macros in the changelog (part of #225974)
  - fixup summary texts (part of #225974)
  - take the execute bit off of the protocol docs (part of #225974)
  - unflag init scripts as configuration files (part of #225974)
  - make the kpropd init script treat 'reload' as 'restart' (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-101
changelog:
  - add patches for read overflow and null pointer dereference in the
    implementation of the SPNEGO mechanism (CVE-2009-0844, CVE-2009-0845)
  - add patch for attempt to free uninitialized pointer in libkrb5
    (CVE-2009-0846)
  - add patch to fix length validation bug in libkrb5 (CVE-2009-0847)
  - put the krb5-user .info file into just -workstation and not also
    -workstation-clients


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-103
changelog:
  - fix a typo in a ksu error message (Marek Mahut)
  - "rev" works the way the test suite expects now, so don't disable tests
    that use it


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-104
changelog:
  - extend PAM support to ksu: perform account and session management for the
    target user
  - pull up and merge James Leddy's changes to also set PAM_RHOST in PAM-aware
    network-facing services


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-1
changelog:
  - update to 1.7
    - no need to work around build issues with ASN1BUF_OMIT_INLINE_FUNCS
    - configure recognizes --enable/--disable-pkinit now
    - configure can take --disable-rpath now
    - no more libdes425, krb524d, krb425.info
    - kadmin/k5srvutil/ktutil are user commands now
    - new kproplog
    - FAST encrypted-challenge plugin is new
  - drop static build logic
  - drop pam_krb5-specific configuration from the default krb5.conf
  - drop only-use-v5 flags being passed to various things started by xinetd
  - put %{krb5prefix}/sbin in everyone's path, too (#504525)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - compile with %{?_smp_mflags} (Steve Grubb)
  - drop the bit where we munge part of the error table header, as it's not
    needed any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a type mismatch in krb5_copy_error_message()
  - ftp: fix some odd use of strlen()
  - selinux labeling: use selabel_open() family of functions rather than
    matchpathcon(), bail on it if attempting to get the mutex lock fails


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-3
changelog:
  - switch buildrequires: and requires: on e2fsprogs-devel into
    buildrequires: and requires: on libss-devel, libcom_err-devel, per
    sandeen on fedora-devel-list


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-4
changelog:
  - try to merge and clean up all the large file support for ftp and rcp
    - ftpd no longer prints a negative length when sending a large file
      from a 32-bit host


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - simplify the man pages patch by only preprocessing the files we care about
    and moving shared configure.in logic into a shared function
  - catch the case of ftpd printing file sizes using %i, when they might be
    bigger than an int now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if the init script fails to start krb5kdc/kadmind/kpropd because it's already
    running (according to status()), return 0 (part of #521772)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-8
changelog:
  - specify the location of the subsystem lock when using the status() function
    in the kadmind and kpropd init scripts, so that we get the right error when
    we're dead but have a lock file - requires initscripts 8.99 (#521772)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-10
changelog:
  - move /etc/pam.d/ksu from krb5-workstation-servers to krb5-workstation,
    where it's actually needed (#538703)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-11
changelog:
  - ksu: move account management checks to before we drop privileges, like
    su does (#540769)
  - selinux: set the user part of file creation contexts to match the current
    context instead of what we looked up
  - configure with --enable-dns-for-realm instead of --enable-dns, which isn't
    recognized any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages that live in the -libs subpackage into the regular
    %{_mandir} tree where they'll still be found if that package is the
    only one installed (#529319)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-15
changelog:
  - add upstream patch for KDC crash during referral processing (CVE-2009-3295),
    via Tom Yu (#545002)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-16
changelog:
  - use %global instead of %define
  - pull up proposed patch for creating previously-not-there lock files for
    kdb databases when 'kdb5_util' is called to 'load' (#551764)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-17
changelog:
  - put the conditional back for the -devel subpackage
  - back down to the earlier version of the patch for #551764; the backported
    alternate version was incomplete


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-18
changelog:
  - add upstream patch for integer underflow during AES and RC4 decryption
    (CVE-2009-4212), via Tom Yu (#545015)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-19
changelog:
  - use portreserve to make sure the KDC can always bind to the kerberos-iv
    port, kpropd can always bind to the krb5_prop port, and that kadmind can
    always bind to the kerberos-adm port (#555279)
  - correct inadvertent use of macros in the changelog (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-20
changelog:
  - krb5_get_init_creds_password: check opte->flags instead of options->flags
    when checking whether or not we get to use the prompter callback (#555875)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-21
changelog:
  - suppress warnings of impending password expiration if expiration is more than
    seven days away when the KDC reports it via the last-req field, just as we
    already do when it reports expiration via the key-expiration field (#556495)
  - link with libtinfo rather than libncurses, when we can, in future RHEL


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-22
changelog:
  - use portreserve correctly -- portrelease takes the basename of the file
    whose entries should be released, so we need three files, not one


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-1
changelog:
  - update to 1.7.1
    - don't trip AD lockout on wrong password (#542687, #554351)
    - incorporates fixes for CVE-2009-4212 and CVE-2009-3295
    - fixes gss_krb5_copy_ccache() when SPNEGO is used
  - move sim_client/sim_server, gss-client/gss-server, uuclient/uuserver to
    the devel subpackage, better lining up with the expected krb5/krb5-appl
    split in 1.8
  - drop kvno,kadmin,k5srvutil,ktutil from -workstation-servers, as it already
    depends on -workstation which also includes them


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-3
changelog:
  - pull up the change to make kpasswd's behavior better match the docs
    when there's no ccache (#563431)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-4
changelog:
  - move the package changelog to the end to match the usual style (jdennis)
  - scrub out references to $RPM_SOURCE_DIR (jdennis)
  - include a symlink to the readme with the name LICENSE so that people can
    find it more easily (jdennis)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-6
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-1
changelog:
  - update to 1.8
    - temporarily bundling the krb5-appl package (split upstream as of 1.8)
      until its package review is complete
    - profile.d scriptlets are now only needed by -workstation-clients
    - adjust paths in init scripts
    - drop upstreamed fix for KDC denial of service (CVE-2010-0283)
    - drop patch to check the user's password correctly using crypt(), which
      isn't a code path we hit when we're using PAM


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-2
changelog:
  - pull up patch to get the client libraries to correctly perform password
    changes over IPv6 (Sumit Bose, RT#6661)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-4
changelog:
  - remove the krb5-appl bits (the -workstation-clients and -workstation-servers
    subpackages) now that krb5-appl is its own package
  - replace our patch for #563431 (kpasswd doesn't fall back to guessing your
    principal name using your user name if you don't have a ccache) with the
    one upstream uses


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-5
changelog:
  - add upstream fix for denial-of-service in SPNEGO (CVE-2010-0628, #576325)
  - kdc.conf: no more need to suggest keeping keys with v4-compatible salting


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - drop patch to suppress key expiration warnings sent from the KDC in
    the last-req field, as the KDC is expected to just be configured to either
    send them or not as a particular key approaches expiration (#556495)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-1
changelog:
  - update to 1.8.1
    - no longer need patches for #555875, #561174, #563431, RT#6661, CVE-2010-0628
  - replace buildrequires on tetex-latex with one on texlive-latex, which is
    the package that provides it now


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-5
changelog:
  - add patch to correct GSSAPI library null pointer dereference which could be
    triggered by malformed client requests (CVE-2010-1321, #582466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-6
changelog:
  - make krb5-server-ldap also depend on the same version-release of krb5-libs,
    as the other subpackages do, if only to make it clearer than it is when we
    just do it through krb5-server
  - drop explicit linking with libtinfo for applications that use libss, now
    that readline itself links with libtinfo (as of readline-5.2-3, since
    fedora 7 or so)
  - go back to building without strict aliasing (compiler warnings in gssrpc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: move session management calls to before we drop privileges, like
    su does (#596887), and don't skip the PAM account check for root or the
    same user (more of #540769)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull up fix for upstream #6745, in which the gssapi library would add the
    wrong error table but subsequently attempt to unload the right one


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-2
changelog:
  - libgssapi: pull in patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605366,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3
changelog:
  - tell krb5kdc and kadmind to create pid files, since they can
  - add logrotate configuration files for krb5kdc and kadmind (#462658)
  - fix parsing of the pidfile option in the KDC (upstream #6750)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-1
changelog:
  - update to 1.8.3
    - drop backports of fixes for gss context expiration and error table
      registration/deregistration mismatch
    - drop patch for upstream #6750


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3
changelog:
  - build with -fstack-protector-all instead of the default -fstack-protector,
    so that we add checking to more functions (i.e., all of them) (#629950)
  - also link binaries with -Wl,-z,relro,-z,now (part of #629950)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-4
changelog:
  - fix reading of keyUsage extensions when attempting to select pkinit client
    certs (part of #629022, RT#6775)
  - fix selection of pkinit client certs when one or more don't include a
    subjectAltName extension (part of #629022, RT#6774)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-6
changelog:
  - pull down patches from trunk to implement k5login_authoritative and
    k5login_directory settings for krb5.conf (#539423)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-8
changelog:
  - incorporate upstream patch to fix uninitialized pointer crash in the KDC's
    authorization data handling (CVE-2010-1322, #636335)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-0.beta1.0
changelog:
  - start moving to 1.9 with beta 1
    - drop patches for RT#5755, RT#6762, RT#6774, RT#6775
    - drop no-longer-needed backport patch for #539423
    - drop no-longer-needed patch for CVE-2010-1322
  - if WITH_NSS is set, built with --with-crypto-impl=nss (requires NSS 3.12.9)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-2
changelog:
  - pkinit: when verifying signed data, use the CMS APIs for better
    interoperability (#636985, RT#6851)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error (MITKRB5-SA-2011-001), a hang or crash
    in the KDC when using the LDAP kdb backend, and an uninitialized pointer
    use in the KDC (MITKRB5-SA-2011-002) (CVE-2010-4022, #664009,
    CVE-2011-0281, #668719, CVE-2011-0282, #668726, CVE-2011-0283, #676126)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-5
changelog:
  - krb5kdc init script: prototype some changes to do a quick spot-check
    of the TGS and kadmind keys and warn if there aren't any non-weak keys
    on file for them (to flush out parts of #651466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-6
changelog:
  - turn on NSS as the backend for libk5crypto, adding nss-devel as a build
    dependency when that switch is flipped


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - throw in a not-applied-by-default patch to try to make pkinit debugging
    into a run-time boolean option named "pkinit_debug"


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-7
changelog:
  - turn off NSS as the backend for libk5crypto for now to work around its
    DES string2key not working (#679012)
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (MITKRB5-SA-2011-003, CVE-2011-0284, #674325)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - override INSTALL_SETUID at build-time so that ksu is installed into
    the buildroot with the right permissions (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't discard the error code from an error message received in response
    to a change-password request (#658871, RT#6893)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696343,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-1
changelog:
  - update to 1.9.1:
    - drop no-longer-needed patches for CVE-2010-4022, CVE-2011-0281,
      CVE-2011-0282, CVE-2011-0283, CVE-2011-0284, CVE-2011-0285


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#576093)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-3
changelog:
  - pull a fix from SVN to get libgssrpc clients (e.g. kadmin) authenticating
    using the old protocol over IPv4 again (RT#6920)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-4
changelog:
  - apply upstream patch by way of Burt Holzman to fall back to a non-referral
    method in cases where we might be derailed by a KDC that rejects the
    canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#715074)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-5
changelog:
  - pull a fix from SVN to try to avoid triggering a PTR lookup in getaddrinfo()
    during krb5_sname_to_principal(), and to let getaddrinfo() decide whether or
    not to ask for an IPv6 address based on the set of configured interfaces
    (#717378, RT#6922)
  - pull a fix from SVN to use AI_ADDRCONFIG more often (RT#6923)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-6
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time (#701446,
    RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-7
changelog:
  - kadmind.init: drop the attempt to detect no-database-present errors (#723723),
    which is too fragile in cases where the database has been manually moved or
    is accessed through another kdb plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-8
changelog:
  - build shared libraries with partial RELRO support (#723995)
  - filter out potentially multiple instances of -Wl,-z,relro from krb5-config
    output, now that it's in the buildroot's default LDFLAGS
  - pull in a patch to fix losing track of the replay cache FD, from SVN by
    way of Kevin Coffman


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-9
changelog:
  - override the default build rules to not delete temporary y.tab.c files,
    so that they can be packaged, allowing debuginfo files which point to them
    do so usefully (#729044)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-10
changelog:
  - handle an assertion failure that starts cropping up when the patch for
    using poll (#701446) meets servers that aren't running KDCs or against
    which the connection fails for other reasons (#727829, #734172)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-12
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth (#734341)
  - pull in build-time deps for the tests


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-16
changelog:
  - kadmin.service: fix #723723 again
  - kadmin.service,krb5kdc.service: remove optional use of $KRB5REALM in command
    lines, because systemd parsing doesn't handle alternate value shell variable
    syntax
  - kprop.service: add missing Type=forking so that systemd doesn't assume simple
  - kprop.service: expect the ACL configuration to be there, not absent
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#739853)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-17
changelog:
  - pull in patch from trunk to rename krb5int_pac_sign() to krb5_pac_sign() and
    make it public (#745533)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-18
changelog:
  - apply upstream patch to fix a null pointer dereference with the LDAP kdb
    backend (CVE-2011-1527, #744125), an assertion failure with multiple kdb
    backends (CVE-2011-1528), and a null pointer dereference with multiple kdb
    backends (CVE-2011-1529) (#737711)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.0
changelog:
  - update to 1.10 alpha 1
  - on newer releases where we can assume NSS >= 3.13, configure PKINIT to build
    using NSS
  - on newer releases where we build PKINIT using NSS, configure libk5crypto to
    build using NSS
  - rename krb5-pkinit-openssl to krb5-pkinit on newer releases where we're
    expecting to build PKINIT using NSS instead
  - during %check, run check in the library and kdc subdirectories, which
    should be able to run inside of the build system without issue


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.2
changelog:
  - apply upstream patch to fix a null pointer dereference when processing
    TGS requests (CVE-2011-1530, #753748)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.3
changelog:
  - pull in patch for RT#7046: tag a ccache containing credentials obtained via
    S4U2Proxy with the principal name of the proxying principal (part of #761317)
    so that the default principal name can be set to that of the client for which
    it is proxying, which results in the ccache looking more normal to consumers
    of the ccache that don't care that there's proxying going on
  - pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
    (more of #761317)
  - pull in patch for RT#7048: allow PAC verification to only bother trying to
    verify the signature with keys that it's given (still more of #761317)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha2.2
changelog:
  - modify the deltat grammar to also tell gcc (4.7) to suppress
    "maybe-uninitialized" warnings in addition to the "uninitialized" warnings
    it's already being told to suppress (RT#7080)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-2
changelog:
  - add patch to accept keytab entries with vno==0 as matches when we're
    searching for an entry with a specific name/kvno (#230382/#782211,RT#3349)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-5
changelog:
  - when removing -workstation, remove our files from the info index while
    the file is still there, in %preun, rather than %postun, and use the
    compressed file's name (#801035)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-1
changelog:
  - update to 1.10.1
    - drop the KDC crash fix
    - drop the KDC lookaside cache fix
    - drop the fix for kadmind RPC ACLs (CVE-2012-1012)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-2
changelog:
  - change back dns_lookup_kdc to the default setting (Stef Walter, #805318)
  - comment out example.com examples in default krb5.conf (Stef Walter, #805320)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-3
changelog:
  - have -server require /usr/share/dict/words, which we set as the default
    dict_file in kdc.conf (#817089)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-1
changelog:
  - update to 1.10.2
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user
    - also package the PDF format admin, user, and install guides
    - drop some PDFs that no longer get built right
  - add a backport of Stef's patch to set the client's list of supported
    enctypes to match the types of keys that we have when we are using a
    keytab to try to get initial credentials, so that a KDC won't send us
    an AS reply that we can't encrypt (RT#2131, #748528)
  - don't shuffle around any shared libraries on releases with no-separate-/usr,
    since /usr/lib is the same place as /lib
  - add explicit buildrequires: on 'hostname', for the tests, on systems where
    it's in its own package, and require net-tools, which used to provide the
    command, everywhere


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-2
changelog:
  - back out this labeling change (dwalsh):
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-3
changelog:
  - backport a fix to allow a PKINIT client to handle SignedData from a KDC
    that's signed with a certificate that isn't in the SignedData, but which
    is available as an anchor or intermediate on the client (RT#7183)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-5
changelog:
  - add upstream patch to fix freeing an uninitialized pointer and dereferencing
    another uninitialized pointer in the KDC (MITKRB5-SA-2012-001, CVE-2012-1014
    and CVE-2012-1015, #844779 and #844777)
  - fix a thinko in whether or not we mess around with devel .so symlinks on
    systems without a separate /usr (sbose)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-6
changelog:
  - go back to not messing with library file paths on Fedora 17: it breaks
    file path dependencies in other packages, and since Fedora 17 is already
    released, breaking that is our fault


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-7
changelog:
  - selinux: hang on to the list of selinux contexts, freeing and reloading
    it only when the file we read it from is modified, freeing it when the
    shared library is being unloaded (#845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-2
changelog:
  - undo rename from krb5-pkinit-openssl to krb5-pkinit on EL6
  - version the Obsoletes: on the krb5-pkinit-openssl to krb5-pkinit rename
  - reintroduce the init scripts for non-systemd releases
  - forward-port %{?_rawbuild} annotations from EL6 packaging


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3
changelog:
  - backport patch to disable replay detection in krb5_verify_init_creds()
    while reading the AP-REQ that's generated in the same function (RT#7229)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-4
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (more of #845125)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
    stopped linking with a symbol which we no longer export (#771687)
  - pull up patch for RT#7063, in which not noticing a prompt for a long
    time throws the client library's idea of the time difference between it
    and the KDC really far out of whack (#773496)
  - add a backport of more patches to set the client's list of supported enctypes
    when using a keytab to be the list of types of keys in the keytab, plus the
    list of other types the client supports but for which it doesn't have keys,
    in that order, so that KDCs have a better chance of being able to issue
    tickets with session keys of types that the client can use (#837855)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-5
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#838548)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.11 alpha 1
    - drop backported patch for RT #7406
    - drop backported patch for RT #7407
    - drop backported patch for RT #7408
    - the new docs system generates PDFs, so stop including them as sources
    - drop backported patch to allow deltat.y to build with the usual
      warning flags and the current gcc
    - drop backported fix for disabling use of a replay cache when verifying
      initial credentials
    - drop backported fix for teaching PKINIT clients which trust the KDC's
      certificate directly to verify signed-data messages that are signed with
      the KDC's certificate, when the blobs don't include a copy of the KDC's
      certificate
    - drop backported patches to make keytab-based authentication attempts
      work better when the client tells the KDC that it supports a particular
      cipher, but doesn't have a key for it in the keytab
    - drop backported fix for avoiding spurious clock skew when a TGT is
      decrypted long after the KDC sent it to the client which decrypts it
    - move the cross-referenced HTML docs into the -libs package to avoid
      broken internal links
    - drop patches to fixup paths in man pages, shouldn't be needed any more


author: Nalin Dahyabhai <nalin@redhat.com> 1.11-0.alpha1.0
changelog:
  - move the rather large pile of html and pdf docs to -workstation, so
    that just having something that links to the libraries won't drag
    them onto a system, and we avoid having to sort out hard-coded paths
    that include %{_libdir} showing up in docs in multilib packages
  - actually create %{_var}/kerberos/kdc/user, so that it can be packaged
  - correct the list of packaged man pages
  - don't dummy up required tex stylesheets, require them
  - require pdflatex and makeindex


author: Nalin Dahyabhai <nalin@redhat.com> 1.11-0.alpha1.1
changelog:
  - handle releases where texlive packaging wasn't yet as complicated as it
    is in Fedora 18
  - fix an uninitialized-variable error building one of the test programs


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-1
changelog:
  - update to 1.11.1
    - drop patch for noticing negative timeouts being passed to the poll()
      wrapper in the client transmit functions


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-2
changelog:
  - prebuild PDF docs to reduce multilib differences (internal tooling, #884065)
  - drop the kerberos-iv portreserve file, and drop the rest on systemd systems
  - escape uses of macros in comments (more of #884065)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a version comparison to expect newer texlive build requirements when
    %{_rhel} > 6 rather than when it's > 7


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-5
changelog:
  - pull up Simo's patch to mark the correct mechanism on imported GSSAPI
    contexts (RT#7592)
  - go back to using reconf to run autoconf and autoheader (part of #925640)
  - add temporary patch to use newer config.guess/config.sub (more of #925640)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-6
changelog:
  - create and own /var/kerberos/krb5/user instead of /var/kerberos/kdc/user,
    since that's what the libraries actually look for
  - add buildrequires on nss-myhostname, in an attempt to get more of the tests
    to run properly during builds
  - pull in Simo's patch to recognize "client_keytab" as a key type which can
    be passed in to gss_acquire_cred_from() (RT#7598)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-7
changelog:
  - when testing the RPC library, treat denials from the local portmapper the
    same as a portmapper-not-running situation, to allow other library tests
    to be run while building the package


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-9
changelog:
  - move the compiled-in default ccache location from the previous default of
    FILE:/tmp/krb5cc_%{uid} to DIR:/run/user/%{uid}/krb5cc (part of #949588)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-1
changelog:
  - update to 1.11.2
    - drop pulled in patch for RT#7586, included in this release
    - drop pulled in patch for RT#7592, included in this release
  - pull in fix for keeping track of the message type when parsing FAST requests
    in the KDC (RT#7605, #951843) (also #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-3
changelog:
  - pull the changing of the compiled-in default ccache location to
    DIR:/run/user/%{uid}/krb5cc back into F19, in line with SSSD and
    the most recent pam_krb5 build


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-6
changelog:
  - pull in upstream fix to start treating a KRB5CCNAME value that begins
    with DIR:: the same as it would a DIR: value with just one ccache file
    in it (RT#7172, #965574)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-7
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)
  - backport fix for not being able to pass an empty password to the
    get-init-creds APIs and have them actually use it (RT#7642, #960001)
  - add backported proposed fix to use the unauthenticated server time
    as the basis for computing the requested credential expiration times,
    rather than the client's idea of the current time, which could be
    significantly incorrect (#961221)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-8
changelog:
  - pull in patches from master to not test GSSRPC-over-UDP and to not
    depend on the portmapper, which are areas where our build systems
    often give us trouble, too


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-9
changelog:
  - don't forget to set the SELinux label when creating the directory for
    a DIR: ccache
  - pull in proposed fix for attempts to get initial creds, which end up
    following referrals, incorrectly trying to always use master KDCs if
    they talked to a master at any point (should fix RT#7650)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-1
changelog:
  - update to 1.11.3
    - drop patch for RT#7605, fixed in this release
    - drop patch for CVE-2002-2443, fixed in this release
    - drop patch for RT#7369, fixed in this release
  - pull upstream fix for breaking t_skew.py by adding the patch for #961221


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-2
changelog:
  - special-case /run/user/0, attempting to create it when resolving a
    directory cache below it fails due to ENOENT and we find that it doesn't
    already exist, either, before attempting to create the directory cache
    (maybe helping, maybe just making things more confusing for #961235)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-3
changelog:
  - specify dependencies on the same arch of krb5-libs by using the %{?_isa}
    suffix, to avoid dragging 32-bit libraries onto 64-bit systems (#980155)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-4
changelog:
  - use (a bundled, for now, copy of) nss_wrapper to let us run some of the
    self-tests at build-time in more places than we could previously (#978756)
  - cover inconsistencies in whether or not there's a local caching nameserver
    that's willing to answer when the build environment doesn't have a
    resolver configuration, so that nss_wrapper's faking of the local
    hostname can be complete


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-6
changelog:
  - tweak configuration files used during tests to try to reduce the number
    of conflicts encountered when builds for multiple arches land on the same
    builder


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-8
changelog:
  - drop a patch we weren't not applying (build tooling)
  - wrap kadmind and kpropd in scripts which check for the presence/absence
    of files which dictate particular exit codes before exec'ing the actual
    binaries, instead of trying to use ConditionPathExists in the unit files
    to accomplish that, so that we exit with failure properly when what we
    expect isn't actually in effect on the system (#800343)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-9
changelog:
  - take another stab at accounting for UnversionedDocdirs for the -libs
    subpackage (spotted by ssorce)
  - switch to just the snapshot of nss_wrapper we were using, since we
    no longer need to carry anything that isn't in the cwrap.org repository
    (ssorce)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-10
changelog:
  - incorporate Simo's backport of his persistent-keyring changes (#991148)
  - restore build-time default DEFCCNAME on Fedora 21 and later and EL, and
    instead set default_ccache_name in the default krb5.conf's [libdefaults]
    section (#991148)
  - on releases where we expect krb5.conf to be configured with a
    default_ccache_name, add it whenever we upgrade from an older version of
    the package that wouldn't have included it in its default configuration
    file (#991148)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-11
changelog:
  - don't let comments intended for one scriptlet become part of the "script"
    that gets passed to ldconfig as part of another one (Mattias Ellert, #1005675)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - only apply the patch to autocreate /run/user/0 when we're hard-wiring the
    default ccache location to be under it; otherwise it's unnecessary


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-15
changelog:
  - add explicit build-time dependency on a version of keyutils that's new
    enough to include keyctl_get_persistent() (more of #991148)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-16
changelog:
  - back out setting default_ccache_name to the new default for now, resetting
    it to the old default while the kernel/keyutils bits get sorted (sgallagh)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-19
changelog:
  - configure --without-krb5-config so that we don't pull in the old default
    ccache name when we want to stop setting a default ccache name at configure-
    time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-20
changelog:
  - pull up fix for not calling a kdb plugin's check-transited-path
    method before calling the library's default version, which only knows
    how to read what's in the configuration file (RT#7709, #1013664)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-21
changelog:
  - switch to the version of persistent-keyring that was just merged to
    master (RT#7711), along with related changes to kinit (RT#7689)
  - go back to setting default_ccache_name to a KEYRING type


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-24
changelog:
  - backport the callback to use the libkrb5 prompter when we can't load PEM
    files for PKINIT (RT#7590, includes part of #965721/#1016690)
  - extract the rest of the fix #965721/#1016690 from the changes for RT#7680


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-25
changelog:
  - pull up fix for importing previously-exported credential caches in the
    gssapi library (RT# 7706, #1019420)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-alpha1.0
changelog:
  - initial update to alpha1
    - drop backport of persistent keyring support
    - drop backport for RT#7689
    - drop obsolete patch for fixing a use-before-init in a test program
    - drop obsolete patch teaching config.guess/config.sub about aarch64-linux
    - drop backport for RT#7598
    - drop backport for RT#7172
    - drop backport for RT#7642
    - drop backport for RT#7643
    - drop patches from master to not test GSSRPC-over-UDP and to not
      depend on the portmapper, which are areas where our build systems
      often give us trouble, too; obsolete
    - drop backports for RT#7682
    - drop backport for RT#7709
    - drop backport for RT#7590 and partial backport for RT#7680
    - drop OTP backport
    - drop backports for RT#7656 and RT#7657
  - BuildRequires: libedit-devel to prefer it
  - BuildRequires: pkgconfig, since configure uses it


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-27
changelog:
  - add some minimal description to the top of the wrapper scripts we use
    when starting krb5kdc and kadmind to describe why they exist (tooling)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-28
changelog:
  - drop patch to add additional access() checks to ksu - they add to breakage
    when non-FILE: caches are in use (#1026099), shouldn't be resulting in any
    benefit, and clash with proposed changes to fix its cache handling


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-29
changelog:
  - incorporate upstream patch for remote crash of KDCs which serve multiple
    realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800,


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-30
changelog:
  - check more thoroughly for errors when resolving KEYRING ccache names of type
    "persistent", which should only have a numeric UID as the next part of the
    name (#1029110)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.4-1
changelog:
  - update to 1.11.4
    - drop patch for RT#7650, obsoleted
    - drop patch for RT#7706, obsoleted as RT#7723
    - drop patch for CVE-2013-1418/CVE-2013-6800, included in 1.11.4


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.4-2
changelog:
  - pull in fix to store KDC time offsets in keyring credential caches (RT#7768,
    - pull in fix to set expiration times on credentials stored in keyring
    credential caches (RT#7769, #1031724)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-beta2.0
changelog:
  - update to beta2
    - drop obsolete backports for storing KDC time offsets and expiration times
      in keyring credential caches


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-2
changelog:
  - pull in fix from master to return a NULL pointer rather than allocating
    zero bytes of memory if we read a zero-length input token (RT#7794, part of
    - pull in fix from master to ignore an empty token from an acceptor if
    we've already finished authenticating (RT#7797, part of #1043962)
  - pull in fix from master to avoid a memory leak when a mechanism's
    init_sec_context function fails (RT#7803, part of #1043962)
  - pull in fix from master to avoid a memory leak in a couple of error
    cases which could occur while obtaining acceptor credentials (RT#7805, part
    of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update a test wrapper to properly handle things that the new libkrad does,
    and add python-pyrad as a build requirement so that we can run its tests


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-5
changelog:
  - pull in fix from master to make reporting of errors encountered by
    the SPNEGO mechanism work better (RT#7045, part of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-8
changelog:
  - add patch from Dhiru Kholia for the AES-NI implementations to allow
    libk5crypto to be properly marked as not needing an executable stack
    on arches where they're used (#1045699, and so many others)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-9
changelog:
  - grab a more-commented version of the most recent patch from upstream
    master
  - make a guess at making the 32-bit AES-NI implementation sufficiently
    position-independent to not require execmod permissions for libk5crypto
    (more of #1045699)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-10
changelog:
  - amend the PIC patch for iaesx86.s to also save/restore ebx in the
    functions where we modify it, because the ELF spec says we need to


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-11
changelog:
  - update the PIC patch for iaesx86.s to not use ELF relocations to the version
    that landed upstream (RT#7815, #1045699)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-1
changelog:
  - update to 1.12.1
    - drop patch for RT#7794, included now
    - drop patch for RT#7797, included now
    - drop patch for RT#7803, included now
    - drop patch for RT#7805, included now
    - drop patch for RT#7807, included now
    - drop patch for RT#7045, included now
    - drop patches for RT#7813 and RT#7815, included now
    - add patch to always retrieve the KDC time offsets from keyring caches,
      so that we don't mistakenly interpret creds as expired before their
      time when our clock is ahead of the KDC's (RT#7820, #1030607)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-2
changelog:
  - pull in multiple changes to allow replay caches to be added to a GSS
    credential store as "rcache"-type credentials (RT#7818/#7819/#7836,


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add currently-proposed changes to teach ksu about credential cache
    collections and the default_ccache_name setting (#1015559,#1026099)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-4
changelog:
  - pull in patch from master to move the default directory which the KDC uses
    when computing the socket path for a local OTP daemon from the database
    directory (/var/kerberos/krb5kdc) to the newly-added run directory
    (/run/krb5kdc), in line with what we're expecting in 1.13 (RT#7859, more
    of #1040056 as #1063905)
  - add a tmpfiles.d configuration file to have /run/krb5kdc created at
    boot-time
  - own /var/run/krb5kdc


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-5
changelog:
  - spnego: pull in patch from master to restore preserving the OID of the
    mechanism the initiator requested when we have multiple OIDs for the same
    mechanism, so that we reply using the same mechanism OID and the initiator
    doesn't get confused (#1066000, RT#7858)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-9
changelog:
  - pull in changes from upstream which add processing of the contents of
    /etc/gss/mech.d/*.conf when loading GSS modules (#1102839)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-10
changelog:
  - pull in fix for denial of service by injection of malformed GSSAPI tokens
    (CVE-2014-4341, CVE-2014-4342, #1116181)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-12
changelog:
  - gssapi: pull in proposed fix for a double free in initiators (David
    Woodhouse, CVE-2014-4343, #1117963)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-1
changelog:
  - update to 1.12.2
    - drop patch for RT#7820, fixed in 1.12.2
    - drop patch for #231147, fixed as RT#3277 in 1.12.2
    - drop patch for RT#7818, fixed in 1.12.2
    - drop patch for RT#7836, fixed in 1.12.2
    - drop patch for RT#7858, fixed in 1.12.2
    - drop patch for RT#7924, fixed in 1.12.2
    - drop patch for RT#7926, fixed in 1.12.2
    - drop patches for CVE-2014-4341/CVE-2014-4342, included in 1.12.2
    - drop patch for CVE-2014-4343, included in 1.12.2
    - drop patch for CVE-2014-4344, included in 1.12.2
    - drop patch for CVE-2014-4345, included in 1.12.2
  - replace older proposed changes for ksu with backports of the changes
    after review and merging upstream (#1015559, #1026099, #1118347)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.13-0.alpha1.2
changelog:
  - kpropd hasn't bothered with -S since 1.11; stop trying to use that flag
    in the systemd unit file


author: Roland Mainz <rmainz@redhat.com> - 1.13-0.alpha1.3
changelog:
  - fix for CVE-2014-5351 (#1145425) "krb5: current keys returned when
    randomizing the keys for a service principal"


author: Roland Mainz <rmainz@redhat.com> - 1.13-1
changelog:
  - Update from krb5-1.13-alpha1 to final krb5-1.13
  - Removed patch for CVE-2014-5351 (#1145425) "krb5: current
    keys returned when randomizing the keys for a service principal" -
    now part of upstream sources
  - Use patch for glibc |eventfd()| prototype mismatch (#1147887) only
    for Fedora > 20


author: Roland Mainz <rmainz@redhat.com> - 1.13-2
changelog:
  - Bump 1%{?dist} to 2%{?dist} to workaround RPM sort issue
    which would lead yum updates to treat the last alpha as newer
    than the final version.


author: Roland Mainz <rmainz@redhat.com> - 1.13-5
changelog:
  - fix for kinit -C loops (#1184629, MIT/krb5 issue 243, "Do not
    loop on principal unknown errors").
  - Added "python-sphinx-latex" to the build requirements
    to fix build failures on F22 machines.


author: Roland Mainz <rmainz@redhat.com> - 1.13-7
changelog:
  - Remove "python-sphinx-latex" and "tar" from the build requirements
    to fix build failures on F22 machines.
  - Minor spec cleanup


author: Roland Mainz <rmainz@redhat.com> - 1.13-8
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9423 (#1179863) "libgssrpc server applications
    leak uninitialized bytes (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-1
changelog:
  - Update to krb5-1.13.1
    - drop patch for CVE_2014_5353_fix_LDAP_misused_policy_name_crash, fixed in krb5-1.13.1
    - drop patch for kinit -C loops (MIT/krb5 bug #243), fixed in krb5-1.13.1
    - drop patch for CVEs { 2014-9421, 2014-9422, 2014-9423, 2014-5352 }, fixed in krb5-1.13.1
  - Minor spec cleanup


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-2
changelog:
  - fix for CVE-2014-5355 (#1193939) "krb5: unauthenticated
    denial of service in recvauth_common() and others"


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-3
changelog:
  - Add temporay workaround for RH bug #1204646 ("krb5-config
    returns wrong -specs path") which modifies krb5-config post
    build so that development of krb5 dependicies gets unstuck.
    This MUST be removed before rawhide becomes F23 ...


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-4
changelog:
  - fix for CVE-2015-2694 (#1216133) "requires_preauth bypass
    in PKINIT-enabled KDC".
    In MIT krb5 1.12 and later, when the KDC is configured with
    PKINIT support, an unauthenticated remote attacker can
    bypass the requires_preauth flag on a client principal and
    obtain a ciphertext encrypted in the principal's long-term
    key.  This ciphertext could be used to conduct an off-line
    dictionary attack against the user's password.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-0
changelog:
  - Update to krb5-1.13.2
    - drop patch for krb5-1.13.2-CVE_2015_2694_requires_preauth_bypass_in_PKINIT_enabled_KDC, fixed in krb5-1.13.2
    - drop patch for krb5-1.12.1-CVE_2014_5355_fix_krb5_read_message_handling, fixed in krb5-1.13.2
  - Add script processing for upcoming Zanata l10n support
  - Minor spec cleanup


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-1
changelog:
  - Add fix for RedHat Bug #1164304 ("Upstream unit tests loads
    the installed shared libraries instead the ones from the build")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-2
changelog:
  - Add patch to fix Redhat Bug #1227542 ("[SELinux] AVC denials may appear
    when kadmind starts"). The issue was caused by an unneeded |htons()|
    which triggered SELinux AVC denials due to the "random" port usage.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-5
changelog:
  - Remove Zanata test glue and related workarounds
    - Bug #1234292 ("IPA server cannot be run in container due to incorrect /usr/sbin/_kadmind")
    - Bug #1234326 ("krb5-server introduces new rpm dependency on ksh")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-6
changelog:
  - Use system nss_wrapper and socket_wrapper for testing.
    Patch by Andreas Schneider <asn@redhat.com>


author: Robbie Harwood <rharwood@redhat.com> - 1.13.2-7
changelog:
  - Support config snippets in /etc/krb5.conf.d/ and /usr/share/krb5.conf.d/
    (#1225792, #1146370, #1145808)


author: Robbie Harwood <rharwood@redhat.com> - 1.13.2-8
changelog:
  - Remove dependency on systemd-sysv which is no longer needed for fedora > 20
    This also fixes a fail-to-build issue.
  - Miscalaneous spec cleanup fixes


author: Robbie Harwood <rharwood@redhat.com> - 1.14-9
changelog:
  - Upstream release.  No actual change from beta, just version bump
  - Clean up unused parts of spec file


author: Robbie Harwood <rharwood@redhat.com> - 1.14-11
changelog:
  - Backport interposer fix (#1284985)
  - Drop workaround pwsize initialization patch (gcc has been fixed)


author: Robbie Harwood <rharwood@redhat.com> - 1.14-14
changelog:
  - Remove WITH_NSS macro (always false)
  - Remove WITH_SYSTEMD macro (always true)
  - Remove WITH_LDAP macro (always true)
  - Remove WITH_OPENSSL macro (always true)


author: Robbie Harwood <rharwood@redhat.com> - 1.14-19
changelog:
  - Replace _kadmin/_kprop with systemd macros
  - Remove traces of upstart from fedora package per policy
  - Resolves: #1290185


author: Robbie Harwood <rharwood@redhat.com> - 1.14-21
changelog:
  - Adjust dependency on crypto-polices to be just the file we want
  - Patch courtesy of lslebodn
  - Resolves: #1308984


author: Robbie Harwood <rharwood@redhat.com> - 1.14.1-1
changelog:
  - New rawhide, new upstream version
  - Drop CVE patches
  - Rename fix_interposer.patch to acquire_cred_interposer.patch
  - Update acquire_cred_interposer.patch to apply to new source


author: Robbie Harwood <rharwood@redhat.com> - 1.14.4-3
changelog:
  - Switch to using autosetup macro.
    - Patches come from git, so it is easiest to just make a git repo


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-5
changelog:
  - Automatically add includedir where not present
  - Try removing sleep statement to see if it is still needed
  - Resolves: #1433083


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-22
changelog:
  * Mon Aug 07 2017 Robbie Harwood <rharwood@redhat.com> - 1.15.1-21
  - Display an error message if ocsp pkinit is requested


author: Robbie Harwood <rharwood@redhat.com> - 1.16-6
changelog:
  - Fix a leak in the previous commit
  - Restore dist macro that was accidentally removed
  - Resolves: #1540939


author: Robbie Harwood <rharwood@redhat.com> - 1.16-15
changelog:
  - Add SPAKE support
  - Improve protections on internal sensitive buffers
  - Improve internal hex encoding/decoding


author: Robbie Harwood <rharwood@redhat.com> - 1.18-1
changelog:
  - New upstream version (1.18)
  - Resolves: #1802334
  - Resolves: #1820311
  - Resolves: #1791062
  - Resolves: #1784655


author: Robbie Harwood <rharwood@redhat.com> - 1.18.2-3
changelog:
  - Match Heimdal behavior for channel bindings
  - Code hygiene + test stability fix included
  - Resolves: #1840518


author: Julien Rische <jrische@redhat.com> - 1.18.2-21
changelog:
  - Backport fix of memory use after free during libkrad cleanup
  - Backport support for larger RADIUS attributes in libkrad
  - Resolves: rhbz#2103125


author: Julien Rische <jrische@redhat.com> - 1.18.2-32
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-86786
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88049
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82648


author: Julien Rische <jrische@redhat.com> - 1.18.2-33
changelog:
  - krad: packet ID fetched from uninitialized variable
    Resolves: RHEL-109220
  - Improving kerberos ulog resize efficiency
    Resolves: RHEL-93333


author: Julien Rische <jrische@redhat.com> - 1.18.2-34
changelog:
  - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
    Resolves: RHEL-171589 RHEL-171594


author: Tomas Smetana <tsmetana@redhat.com> 20070328-2
changelog:
  - fix wrong exit status of spawned process after SIGSTOP
  - fix building of debuginfo package, add %{?dist} to release
  - fix handling of SIGTTOU in non-interactive shell
  - remove useless builtins


author: Tomas Smetana <tsmetana@redhat.com> 20071105-2
changelog:
  - fix #405381 - ksh will not handle $(xxx) when typeset -r IFS
  - fix #386501 - bad group in spec file


author: Michal Hlavinka <mhlavink@redhat.com> - 20100309-4
changelog:
  - fix infinite loop when whence builtin is used with -q option (#587127)
  - fix stdin for double command substitution (#584007)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100924-2
changelog:
  - disable only known to be broken builtins, let other enabled
  - skip regression tests if /dev/fd is missing


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-4
changelog:
  - bind Home, End, Delete,... key correctly for emacs mode
  - do not crash when executed from deleted directory


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-5
changelog:
  - ksh could not enter directories with path containing /.something (#889748)
  - file name autocomplete prevented following numeric input (#889745)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-19
changelog:
  - fix segfault in job list code
  - do not resend signal on termination (#1092132)
  - fix brace expansion on/off
  - fix incorrect rounding of numsers 0.5 < |x| <1.0 in printf (#1080940)
  - fix parser errors related to the end of the here-document marker
  - ksh hangs when command substitution fills out the pipe buffer
  - using typeset -l with a restricted variabled caused segmentation fault
  - monitor mode was documented incorrectly
  - do not crash when unsetting running function from another one (#1105139)
  - should report an error when trying to cd into directory without execution bit
  - job locking mechanism did not survive compiler optimization
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1070308)
  - fix lexical parser crash


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-24
changelog:
  - cd builtin could break IO redirection
  - fix segfault when handling a trap
  - exporting fixed with variable corrupted its data
  - and more fixes


author: Robert Scheck <robert@fedoraproject.org> 1.2.76-13
changelog:
  - Replace patch from openSUSE by the Debian one to not only build
    kyotocabinet with GCC >= 6 but also with GCC >= 7 (#1307706 #c15)


author: Tomas Orsava <torsava@redhat.com> - 2.6.0-5
changelog:
  - Require the Python interpreter directly instead of using the package name
  - Resolves: rhbz#1633617


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-7
changelog:
  - Resolves: rhbz#1634268 - ECP signature check fails with
                             LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when
                             assertion signed instead of response


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-8
changelog:
  - Resolves: rhbz#1730018 - lasso includes "Destination" attribute in SAML
                             AuthnRequest populated with SP
                             AssertionConsumerServiceURL when ECP workflow
                             is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-9
changelog:
  - Resolves: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (coming
                             from lasso)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-10
changelog:
  - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                             vulnerability when parsing SAML responses [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-11
changelog:
  - Bump release to force the package through OSCI as the previous
    build reached CI just in time for an outage
  - Related: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (comingfrom lasso)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-12
changelog:
  - Fix a dead code issue in the signature wrapping patch
  - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                             vulnerability when parsing SAML responses [rhel-8]


author: Simo Sorce <simo@redhat.com> 2.3.6-0.20131125.3
changelog:
  - Initial packaging
  - Based on the spec file by Jean-Marc Liger <jmliger@siris.sorbonne.fr>
  - Code is updated to latest master via a jumbo patch while waiting for
    official upstream release.
  - Jumbo patch includes also additional patches sent to upstream list)
    to build on Fedora 20
  - Perl bindings are disabled as they fail to build
  - Disable doc building as it doesn't ork correctly for now


author: Simo Sorce <simo@redhat.com> 2.4.0-0
changelog:
  - Update to final 2.4.0 version
  - Drop all patches, they are now included in 2.4.0
  - Change Source URI


author: Remi Collet <rcollet@redhat.com> - 2.4.0-4
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/Php56
  - add numerical prefix to extension configuration file
  - drop unneeded dependency on pecl
  - add provides php-lasso


author: Simo Sorce <simo@redhat.com> - 2.4.1-2
changelog:
  - Enable perl bindings
  - Also add support for building with automake 1.15
  - Fix build issues on rawhide due to missing build dep on perl(Error)


author: Rob Crittenden <rcritten@redhat.com> - 2.4.1-3
changelog:
  - Add BuildRequires on libtool
  - Add -fPIC to LDFLAGS
  - Disable perl bindings, it fails to build on x86.


author: John Dennis <jdennis@redhat.com> - 2.5.1-1
changelog:
  - Upgrade to upstream 2.5.1 release
    See Changelog for details, mostly bugs fixes,
    most signficant is proper support of SHA-2
    Resolves: #1295472
    Resolves: #1303573
  - Add java_binding_lasso_log.patch to fix "make check" failure during rpmbuild
    upstream commit d8e3ae8


author: John Dennis <jdennis@redhat.com> - 2.5.1-3
changelog:
  - disbable PHP binding because PHP-7 is now the default and lasso
    only knows how to build with PHP-5


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.5.1-8
changelog:
  - Python 2 binary package renamed to python2-lasso
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: John Dennis <jdennis@redhat.com> - 2.5.1-12
changelog:
  - Resolves: rhbz#1542126, rhbz#1556016
  - xmlsec removed SOAP support, reimplement missing xmlSecSoap* in Lasso


author: <jdennis@redhat.com> - 2.6.0-1
changelog:
  - Upgrade to latest upstream
  - Build using Python3, add python3 subpackage
  - Resolves: rhbz#1592416 Enable perl subpackage


author: <jdennis@redhat.com> - 2.6.0-2
changelog:
  - fix language bindings package names to comply with guidelines,
    instead of lasso-lang use lang-lasso
  - fix conditional logic used to build on rhel
  - Resolves: rhbz#1589856 Drop python2 subpackage from RHEL8


author: Tomas Halman <thalman@redhat.com> - 2.6.0-14
changelog:
  - Fixing CVE-2025-47151
    Resolves: RHEL-126687 CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso


author: Rex Dieter <rdieter@fedoraproject.org> - 2.7-4
changelog:
  - %files: less globs, use %license
  - tighten subpkg deps
  - -devel: use %doc
  - use %version in Source URL
  - simplify %setup
  - %check: make check


author: Petr Menšík <pemensik@redhat.com> - 1.7.0-14
changelog:
  - Add only extra flags to default RPM LDFLAGS
  - Fix multilib conflict of ldns-config (#1463423)
  - Make primary python3 in primary build, python2 in optional


author: Jan Macku <jamacku@redhat.com> - 0.97-1
changelog:
  - update to 0.97 (#2159588)
  - drop downstream patch - ipmi: avoid error messages on non-dell platforms


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: happy_orange <songnannan.snn@alibaba-inc.com> - 1.0.4-1.0.4
changelog:
  - Fix build with xorgproto >= 2019.1, which dropped the xf86misc headers
  - add the pc file for xf86miscproto


author: Sinny Kumari <ksinny@gmail.com> - 1.0-0.2.20150114git63c81f0
changelog:
  - Add python-sphinx-latex as BuildRequires
  - Use license instead of doc macro for license file installation
  - Update checkout value


author: Sinny Kumari <ksinny@gmail.com> - 1.0-0.3.20150114git63c81f0
changelog:
  - Specify only sub-packgae name instead of giving full package name
  - Add info as post and preun Requires for doc sub-package


author: Sinny Kumari <ksinny@gmail.com> - 1.0-0.1.20150420gita9582d8
changelog:
  - Add COPYING-GPLV3 license file as well
  - Remove python-sphinx-latex from BuildRequires
  - Package latest source tar with git revision a9582d8


author: Dodji Seketeli <dodji@seketeli.org> - 1.0-0.3.20150625git43c06a8
changelog:
  - Update to upstream git commit hash 43c06a8 (pre-release of 1.0).
    This brings lots of bug fixes as well as some improvements in change
    report suppression capabilities in the library and in the abidiff
    tool.
  - Tarball name format is now clearer: %{name}-%{version}-git-%{git_revision}
  - Add new macro tarball_name for that
  - Adjust the Source0, git_revision, date, Release macros
  - Adjust the %setup directive to the fact that the tarball now extracts to
    a directory named %{name}-%{version}-git-%{git_revision}
  - Adjust the packaging of the man pages as some of them moved from
    section 7 to section 1.


author: Sinny Kumari <ksinny@gmail.com> - 1.0-0.4.20150720gitab1316b
changelog:
  - Update to upstream git commit hash ab1316b. It brings various bug fixes and a
    new abipkgdiff tool to detect abi changes at package level.
  - Install abipkgdiff binary in bindir
  - Adjust date, git_revision and Release macros


author: Sinny Kumari <ksinny@gmail.com> - 1.0-0.5.20150727gitf0d319a
changelog:
  - Update to upstream git commit hash f0d319a. Returns different exit status code
    when abipkgdiff runs and various other bug fixes in libabigail.
  - Adjust date, git_revision and Release macros


author: Dodji Seketeli <dodji@seketeli.org> - 1.0-0.6.20150909git164d17e
changelog:
  - Update to upstream git commit hash 164d17e
    Bug 18791 - libabigail fails to read the output of abidw
    Bug 18818 - abidw aborts on a class with a non-complete base class
    Bug 18828 - Handle force-resolving of multiple declarations-only of the same type
    Bug 18844 - assert failure in abidw at abg-dwarf-reader.cc:6537
    Bug 18894 - Fix representation of enumerators in abixml format
    Bug 18893 - type degradation from dwarf to abixml on libGLU.so
    Bug 18892 - type degradation from DWARF to abixml on libtsan.so
    Bug 18904 - Fix support for C++ rvalue references
    Numerous additional bug fixes
    Added .deb, tarball and directory support to abipkgdiff
    Several improvements to abidw, abidiff and abilint
  - Added dpkg build dependency to activate support of .deb archives
  - cat tests/test-suite.log when check fails
  - Update description to add abipkgdiff


author: Dodji Seketeli <dodji@seketeli.org> - 1.0-0.7.rc0.20151116gitd8bcceb
changelog:
  - Update to upstream release 1.0.rc0
  - Take a tarball built using make dist now.
  - Update the comments in the spec regarding how the tarball has been generated.
  - Do not run autoreconf -i anymore, during the build.


author: Dodji Seketeli <dodji@redhat.com> - 1.0-0.rc1.1
changelog:
  - Ship man/info pages right into the main package, along with the main
    programs.
  - Update to upstream release 1.0.rc1
  - Significant changes include:
     rhtbz/1283906 - crash in abigail::dwarf_reader::build_reference_type()
     libabigail/19336 - Better handle redundantly qualified reference types
     libabigail/19126 - abidw segv on a dwz compressed version of r300_dri.so
     libabigail/19355 - Libabigail slow on r300_dri.so
     Numerous other bug fixes and cleanups


author: Dodji Seketeli <dodji@seketeli.org> - 1.0-0.rc2.1
changelog:
  - Update to upstream 1.0.rc2
  - This fixes an important regression in the handling of binaries
    which debug info have been compressed with dwz.
  - Fix source tarball URL.


author: Dodji Seketeli <dodji@seketeli.org> - 1.0-0.rc3.1
changelog:
  - Update to upstream 1.0.rc3
  - Add gcc-c++ as BuildRequires
  - Measure the time taken by regression tests


author: Dodji Seketeli <dodji@seketeli.org> - 1.0-0.8.rc4.2
changelog:
  - Fix PIE and ppc64 function aliases handling.
    The exact two upstream bugs fixed are:
      Bug 19961 - Distinguish between PI executable and shared library
      Bug 19964 - Cannot load function aliases on ppc64
    The two upstream patches applied are 8944ceb9ef03a4187 and 2529f84ae0e2ca2a


author: Dodji Seketeli <dodji@seketeli.org> - 1.0-0.8.rc5.1
changelog:
  - Update to upstream 1.0.rc5 tarball
  - Add new build requires for new fedabipkgdiff tool:
    python2-devel, rpm-python, python2-mock, koji, pyxdg, python2-unittest2
  - Add new %{_bindir}/fedabipkgdiff binary and
    %{_libdir}/libabigail/default.abignore configuration file to the set
    of distributed files. 
  - Drop patches that were integrated upstream:
    0001-Bug-19961-Distinguish-between-PI-executable-and-shar.patch
    0002-Bug-19964-Cannot-load-function-aliases-on-ppc64.patch


author: Dodji Seketeli <dodji@redhat.com> - 1.0-0.8.rc6.1
changelog:
  - Update to upstream 1.0.rc6 tarball
  - Add wget as a build and runtime requirement.  It's useful for fedabipkgdiff


author: Dodji Seketeli <dodji@redhat.com> - 1.0-0.8.rc6.2
changelog:
  - Fix an issue where some suppressed diff nodes are still visible in change reports
    This implies applying upstream patch:
     "[PATCH] A suppressed diff node implies suppressing all equivalent nodes too"


author: Dodji Seketeli <dodji@redhat.com> - 1.0-0.8.rc6.3
changelog:
  - Fix upstream Bug 20927 - Segfault when abidiff is invoked with $HOME empty
    Apply the upstream patch here.


author: Dodji Seketeli <dodji@redhat.com> - 1.0-1
changelog:
  - Update to upstream 1.0 tarball
  - Adjust tarball_revision and tarball_name macros
  - Adjust Release macro
  - Remove the koji build require as python2-koji is enough
  - Replace the pyxdg build require with the python2-pyxdg one.
  - Added missing build and runtime require 'mailcap' to allow
    fedabipkgdiff to detect RPM files
  - Update description to account for the new kmidiff tool
  - Remove patches that got applied upstream:
    0001-A-suppressed-diff-node-implies-suppressing-all-equiv.patch
    0001-Bug-20927-Segfault-when-HOME-is-not-set.patch
    0001-Fix-aborting-when-reading-.foo-symbols-from-a-ppc64-.patch
  - Add kmidiff to the RPM


author: Dodji Seketeli <dodji@redhat.com> - 1.1-1
changelog:
  - Update to upstream 1.1
  - Use python2-sphynx, rpm-python2, python2-rpm rather than
    python-sphinx, rpm-python.


author: Dodji Seketeli <dodji@seketeli.org> - 1.5-2
changelog:
  - Apply patches
    Support-having-several-debuginfo-search-dirs-for-a-b.patch and
    Add-a-fail-no-debug-info-to-abidiff.patch


author: Mathieu Bridon <bochecha@daitauha.fr> - 1.5-4
changelog:
  - Remove unnecessary dependencies: python3-unittest2 and wget which
    was referred to twice.
  - Better group dependencies: Many dependencies are only required for
    fedabipkgdiff, so let's put them under the right conditional.
  - Split fedabipkgdiff to its own subpackage
      This tool is very specific, and only useful to Fedora developers,
      not all developers.  It also has lots of dependencies which aren't
      required by the other tools.  Splitting it to its own specialized
      package makes the main package, with its library and utilities,
      much lighter.


author: Dodji Seketeli <dodji@redhat.com> - 1.6-1
changelog:
  - Update to upstream 1.6
  - Removed patches that are now upstream
    Support-having-several-debuginfo-search-dirs-for-a-b.patch
    Add-a-fail-no-debug-info-to-abidiff.patch


author: Dodji Seketeli <dodji@redhat.com> - 1.8-1
changelog:
  - Update to upstream 1.8
  - Add "make check-self-compare" to the regression tests
  - Add BuildRequires python3-koji


author: Dodji Seketeli <dodji@redhat.com> - 1.8.1-1
changelog:
  - Update to upstream fixes up to libabigail-1.8.1
      This encompasses this fixes, compared to the last 1.8 release:
        ir: Add better comments to types_have_similar_structure
        mainpage: Update web page for 1.8 release
        Bug 26992 - Try harder to resolve declaration-only classes
        Bug 27204 -  potential loss of some aliased ELF function symbols
        Ignore duplicated functions and those not associated with ELF symbols
        Bug 27236 - Pointer comparison wrongly fails because of typedef change
        Bug 27233 - fedabipkgdiff fails on package gnupg2 from Fedora 33
        Bug 27232 - fedabipkgdiff fails on gawk from Fedora 33
        dwarf-reader: Support fast DW_FORM_line_strp string comparison
        gen-changelog.py: Update call to subprocess.Popen & cleanup
        Bug 27255 - fedabipkgdiff fails on nfs-utils on Fedora 33
        abidiff: support --dump-diff-tree with --leaf-changes-only
        ir: Arrays are indirect types for type structure similarity purposes
        Add qualifier / typedef / array / pointer test
        abg-ir: Optimize calls to std::string::find() for a single char.
        abipkgdiff: Address operator precedence warning


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.110-12.el8
changelog:
  - Pass in the distro-provided CFLAGS and LFLAGS. (Jeff Moyer)
  - Get rid of -nostartfiles -nostdlib (Jeff Moyer)
  - Resolves: rhbz#1630578


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-34564


author: Liwei Ge <geliwei@openanolis.org> - 7.6.2-3.0.2
changelog:
  - Spec: sync loongson patch and modify in spec (XueZhixin)
    Patch :0001-libatomic_ops-7.6.2-add-loongarch.patch


author: Jesse Keating <jkeating@redhat.com> - 0.2-3.20060823svn
changelog:
  - don't install dupe headers in -devel packages
  - libisofs requires libburn devel for directory ownership


author: Jesse Keating <jkeating@redhat.com> - 0.2.6.3-1
changelog:
  - Update to 0.2.6.3
  - Remove libisofs stuff as it's packaged seperately now.
  - Add a manpage for cdrskin


author: Robert Scheck <robert@fedoraproject.org> 1.4.2-1
changelog:
  - Update to upstream 1.4.2 (#1287345)
  - Add symlink handling via alternatives for cdrecord (#1256240)


author: Robert Scheck <robert@fedoraproject.org> 1.4.4-1
changelog:
  - Update to upstream 1.4.4 (#1352496)
  - Reworked spec file to build libburn1 for RHEL >= 6 (#750009)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Make inline function __comps_objmrtree_all also static (RhBug:1793424)
  - Fix memory leaks and resource leaks
  - Fix: Check result "comps_parse_parsed_init()"


author: Josef Ridky <jridky@redhat.com> - 3.19.1-1
changelog:
  - Update to 3.19.1
  - Add patch to use libtirpc
  - Add BR gcc-c++
  - Resolves: #1580754 - FTBFS in RHEL-8


author: Filip Januš <fjanus@redhat.com> 5.3.28-42
changelog:
  - Apply the previous change only on aarch64 to limit the risk of unwanted impact
  - Resolves: #1992402


author: Richard W.M. Jones <rjones@redhat.com> - 1.14-1
changelog:
  - Rebase to 1.14.
  - Use newer upstream fork at https://github.com/ofalk/libdnet
  - Drop multilib fix now uptream (RHBZ#342001 RHBZ#1915838).
  - Drop unapplied shrext patch, no longer needed.


author: Jaroslav Rohel <jrohel@redhat.com> - 0.63.0-18
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-1244)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-1253)


author: Liu Xiaoping <lxp01404969@alibaba-inc.com> - 0.63.0-21.0.1
changelog:
  - Disable rhsm support in Anolis (geliwei@openanolis.org)
  - rebrand: fix platform compatibility (geliwei@openanolis.org)
  - Add loongarch64 to arch_map (liwei.glw@alibaba-inc.com)
  - cherry-pick `add sw arch #9c8c414fae68cb1faed14be823ab34eb6ff00028`. (nijie@wxiat.com)


author: Jerry James <loganjerry@gmail.com> - 3.1-23.20170329cvs
changelog:
  - Add gcc BR
  - Build verbosely
  - Drop obsolete --enable-widec configure option
  - Fix "unused direct shared library dependency" warning from rpmlint again
  - Fix man page error due to BSD nroff macro that is not available on Linux
  - Drop explicit R on pkgconfig from the -devel package, autogenerated


author: Matthias Saou <matthias.saou@est.une.marmotte.net>
changelog:
  - Use %find_lang macro.
  - Add %doc files, including mandatory copy of the LGPL license.
  - Use %{?_smp_mflags}
  - Improve the descriptions


author: Petr Sabata <psabata@redhat.com> - 0.6.20-1
changelog:
  - 0.6.20 bump
  - Repackaging prehistoric libexif-docs, introducing version string in filename
  - Buildroot cleanup


author: Petr Šabata <contyk@redhat.com> - 0.6.21-1
changelog:
  - 0.6.21 bump
  - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
    CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845)
  - Drop the pre-generated docs and introduce a doc subpackage


author: Jan Grulich <jgrulich@redhat.com> - 0.6.22-6.1
changelog:
  - Fix integer underflow in MakerNote decoding (CVE-2026-40386)
  - Fix integer overflow in Nikon MakerNote handling (CVE-2026-40385)
    Resolves: RHEL-170253, RHEL-170234


author: DJ Delorie <dj@redhat.com> - 3.1-24
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2014228)


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Parag Nemade <paragn AT fedoraproject DOT org> - 1.1.3-13
changelog:
  - ant-nodeps is dropped from ant-1.9.0-2 build in rawhide
  - Drop buildroot, %clean, %defattr and removal of buildroot in %install


author: Tomáš Mráz <tmraz@redhat.com> 1.8.3-2
changelog:
  - make only_urandom a default in non-presence of configuration file
  - run the full FIPS selftests only when the library is called from
    application


author: Tomáš Mráz <tmraz@redhat.com> 1.8.3-3
changelog:
  - add CMAC selftest for FIPS POST
  - add continuous FIPS entropy test
  - disable non-approved FIPS hashes in the enforced FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.8.5-3
changelog:
  - new upstream version 1.8.5
  - AES performance improvements backported from master branch
  - FIPS module is implicit with kernel FIPS flag
  - always run the FIPS selftests if FIPS module is installed


author: Jakub Jelen <jjelen@redhat.com> - 1.8.5-6
changelog:
  - Fix for CVE-2021-40528 (#1971421)
  - Enable HW optimizations in FIPS (#1976137)
  - Performance enchancements for ChaCha20 and Poly1305 (#1855231)


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Brian C. Lane <bcl@redhat.com> - 0.26.4-1
changelog:
  - Update to libgit2-glib-0.26.4
  - Switch to using meson build system
  - Disable SSH so that libssh2 is not required
  - Add README.rhel8 explaining why SSH is disabled


author: Liwei Ge <geliwei@openanolis.org> - 1:1.44.0-9.0.1
changelog:
  - Add REDHAT as compatible distro and anolis info
  - Do not download packages from net
  - Fix build with distro
  - Add buildrequires


author: Richard Hughes <richard@hughsie.com> 0.2.10-1
changelog:
  - New upstream version
  - Correctly detect removed devices when rescanning
  - Fix a memory leak when using control tranfers
  - Fix symbol version table up to version 0.2.9


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Mike FABIAN <mfabian@redhat.com> - 60.2-4
changelog:
  - Add negative-daylight-savings.patch from upstream.
    (see http://bugs.icu-project.org/trac/ticket/13566 and
    http://bugs.icu-project.org/trac/changeset/40954)


author: Parag Nemade <pnemade AT redhat DOT com> - 60.2-7
changelog:
  - Resolves:rh#1602551 - Fix specfile by adding compile options
  - also add BuildRequires for gcc and gcc-c++
  - Correct the upstream URL


author: Mike FABIAN <mfabian@redhat.com> - 60.3-1
changelog:
  - Update to 60.3 maintenance release including support for new Japanese era Reiwa (令和).
  - Resolves: rhbz#1677093


author: Mike FABIAN <mfabian@redhat.com> - 60.3-2
changelog:
  - Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch
  - Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch
  - Resolves: rhbz#1808238


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.2.11-24
changelog:
  - Python 2 binary package renamed to python2-libieee1284
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Bastien Nocera <bnocera@redhat.com> - 1.2.1-0.1
changelog:
  + libimobiledevice-1.2.1-0.1
  - Add support for newer devices
  - This is a snapshot of the in-development 1.2.1 version


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.3-3
changelog:
  - Allow for the tablet mode quirk to apply to touchpads (#1664225)
  - Add a quirk for the Asus VivoBook Flip to keep the
    keyboard and touchpad working in tablet mode


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 1.6.1-6
changelog:
  - Fix v1.6.1-implicit-fallthrough.patch compatibility with gcc < 7.
  - Use %ldconfig_scriptlets.
    https://fedoraproject.org/wiki/Packaging:Scriptlets#Shared_Libraries


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 1.6.1-7
changelog:
  - Add: BuildRequires: gcc
    https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 1.6.1-8
changelog:
  - Enable tests (PTUNIT) and man pages (MAN).
  - Change BuildRequires: gcc -> gcc-c++ as PTUNIT tests require C++.


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-16_1
changelog:
  - [RHEL] Apply 'Add missing dependencies to the tests package'
  - [RHEL] Apply 'Update patch from upstream'


author: Sahana Prasad <sahana@redhat.com> - 1.1.5-3
changelog:
  - Enables building on old kernels [sync fix in Fedora from omosnance].
  - This is required for covscans as they run on RHEL7 machines.


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5366
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2406
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15290
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15300


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15300
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2406


author: Phil Sutter <psutter@redhat.com> - 0.3-2
changelog:
  - Add missing build requirement: gcc.
  - Add source code patches to facilitate following changes.
  - Patches managed in git, so add git as another build requirement.
  - Respect build system compiler flags.
  - Use %make_build instead of plain make in %build.
  - Add %check target which performs unattended runtime test.
  - Use -D install flag instead of manual mkdir.


author: Phil Sutter <psutter@redhat.com> - 0.3-3
changelog:
  - Use %autosetup flag '-p1' instead of '-S git' to get rid of git dependency.
  - Use %license macro in %files section.
  - Added comment about included patches' upstream status.


author: Parag Nemade <pnemade AT redhat DOT com> - 1:0.2.7-11
changelog:
  - Resolves:rh#1615534: libkkc-data FTBFS for missing BuildRequires
  - moved this package to use python3


author: Ana Cabral <acabral@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved
    from the main package to the utils sub package causing a file
    conflict on multilib systems between the old 32 bit main
    package and the new 64 bit utils sub package.


author: Hangbin Liu <haliu@redhat.com> - 1.7-1
changelog:
  - Update to 1.7
  - libndp: apply filter to raw socket to only accept ND messages
  - libndp: move ndp_sock_{open,close}() after msg parsing functions
  - ndptool: Fix compilation on musl libc


author: Hangbin Liu <haliu@redhat.com> - 1.7-2
changelog:
  - ndptool: add -T target support (rhbz 1666194)
  - ndptool: fix target parameter typo (rhbz 1666194)
  - libndp: close sockfd after using to avoid handle leak (rhbz 1666194)
  - libndp: fix nd_msg typo when setting target address (rhbz 1666194)


author: Hangbin Liu <haliu@redhat.com> - 1.7-3
changelog:
  - ndptool: add -D dest support (rhbz 1697595)
  - ndptool: fix potential memory leak caused by strdup (rhbz 1697595)


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: John H Terpstra <jht@samba.anu.edu.au>
changelog:
  - Many optimisations (some suggested by Manoj Kasichainula <manojk@io.com>
  - Use of chkconfig in place of individual symlinks to /etc/rc.d/init/smb
  - Compounded make line
  - Updated smb.init restart mechanism
  - Use compound mkdir -p line instead of individual calls to mkdir
  - Fixed smb.conf file path for log files
  - Fixed smb.conf file path for incoming smb print spool directory
  - Added a number of options to smb.conf file
  - Added smbadduser command (missed from all previous RPMs) - Doooh!
  - Added smbuser file and smb.conf file updates for username map


author: Erik Troan <ewt@redhat.com>
changelog:
  - made the %postun script a tad less agressive; no reason to remove
    the logs or lock file (after all, if the lock file is still there,
    samba is still running)
  - the %postun and %preun should only exectute if this is the final
    removal
  - migrated %triggerpostun from Red Hat's samba package to work around
    packaging problems in some Red Hat samba releases


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add a mount.smb to make smb mounting a little easier.
  - smb filesystems apparently don't work on alpha. Oops.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.0.5
  - fix mount.smb - smbmount options changed again.........
  - fix postun. oops.
  - update some stuff from the samba team's spec file.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - use cp rather than mv to preserve /etc/services perms (#4938 et al).
  - use mktemp to generate /etc/tmp.XXXXXX file name.
  - add prereqs on sed/mktemp/killall (need to move killall to /bin).
  - fix trigger syntax (i.e. "samba < 1.9.18p7" not "samba < samba-1.9.18p7")


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix yp_get_default_domain in autoconf
  - only link against readline for smbclient
  - fix log rotation (#9909)


author: Than Ngo <than@redhat.de>
changelog:
  - add initdir macro to handle the initscript directory
  - add a new macro to handle /etc/pam.d/system-auth


author: Bill Nottingham <notting@redhat.com>
changelog:
  - move initscript back
  - remove 'Using Samba' book from %doc 
  - move stuff to /etc/samba (#13708)
  - default configuration tweaks (#13704)
  - some logrotate tweaks


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix swat only_from line (#18726, others)
  - fix attempt to write outside buildroot on install (#17943)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set a default CA certificate path in smb.conf (#19010)
  - require openssl >= 0.9.5a-20 to make sure we have a ca-bundle.crt file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - i18n-ize initscript
  - add a sysconfig file for daemon options (#23550)
  - clarify smbpasswd man page (#23370)
  - build with LFS support (#22388)
  - avoid extraneous pam error messages (#10666)
  - add Urban Widmark's bug fixes for smbmount (#19623)
  - fix setgid directory modes (#11911)
  - split swat into subpackage (#19706)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak the PAM code some more to try to do a setcred() after initgroups()
  - pull in all of the optflags on i386 and sparc
  - don't explicitly enable Kerberos support -- it's only used for password
    checking, and if PAM is enabled it's a no-op anyway


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to samba 2.2.0
  - moved codepages to %{_datadir}/samba/codepages
  - use all available CPUs for building rpm packages
  - use %{_xxx} defines at most places in spec-file
  - "License:" replaces "Copyright:"
  - dropped excludearch sparc
  - de-activated japanese patches 100 and 200 for now 
    (they need to be fixed and tested wth 2.2.0)
  - separated swat.desktop file from spec-file and added
    german translations
  - moved /etc/sysconfig/samba to a separate source-file
  - use htmlview instead of direct call to netscape in 
    swat.desktop-file


author: Helge Deller <hdeller@redhat.de>
changelog:
  - build as 2.2.0-1 release
  - skip the documentation-directories docbook, manpages and yodldocs
  - don't include *.sgml documentation in package
  - moved codepage-directory to /usr/share/samba/codepages
  - make it compile with glibc-2.2.3-10 and kernel-headers-2.4.2-2


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - (these changes are from the non-head version)
  - Don't include /usr/sbin/samba, it's the same as the initscript
  - unset TMPDIR, as samba can't write into a TMPDIR owned
    by root (#41193)
  - Add pidfile: lines for smbd and nmbd and a config: line
    in the initscript  (#15343)
  - don't use make -j
  - explicitly include /usr/share/samba, not just the files in it


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Use /var/cache/samba instead of /var/lock/samba 
  - Remove "domain controller" keyword from smb.conf, it's 
    deprecated (from #13704)
  - Sync some examples with smb.conf.default
  - Fix password synchronization (#16987)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't include smbpasswd in samba, it's in samba-common (#51598)
  - Add a disabled "obey pam restrictions" statement - it's not
    active, as we use encrypted passwords, but if the admin turns
    encrypted passwords off the choice is available. (#31351)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-3
changelog:
  - Add "--with-utmp" to configure options (#55372)
  - Include winbind, pam_smbpass.so, rpcclient and smbcacls
  - start using /var/cache/samba, we need to keep state and there is
    more than just locks involved


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-5
changelog:
  - Teach smbadduser about "getent passwd" 
  - Fix more pid-file references
  - Add (conditional) winbindd startup to the initscript, configured in
    /etc/sysconfig/samba


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-6
changelog:
  - Move winbind files to samba-common. Add separate initscript for
    winbind 
  - Fixes for winbind - protect global variables with mutex, use
    more secure getenv


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.3a-3
changelog:
  - include interfaces.o in pam_smbpass.so, which needs symbols from interfaces.o
    (patch posted to samba-list by Ilia Chipitsine)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.5-7
changelog:
  - Enable VFS support and compile the "recycling" module (#69796)
  - more selective includes of the examples dir


author: Jay Fenlason <fenlason@redhat.com> 2.2.7a-3
changelog:
  - edited spec file to put .so files in the correct directories
    on 64-bit platforms that have 32-bit compatability issues
    (sparc64, x86_64, etc).  This fixes bugzilla #83782.
  - Added samba-2.2.7a-error.patch from twaugh.  This fixes
    bugzilla #82454.


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.7a-4
changelog:
  - relink libnss_wins.so with SHLD="%{__cc} -lnsl" to force libnss_wins.so to
    link with libnsl, avoiding unresolved symbol errors on functions in libnsl


author: Jay Fenlason <fenlason@redhat.com> 2.2.8-0
changelog:
  - Upgrade to 2.2.8
  - removed commented out patches.
  - removed old patches and .md5 files from the repository.
  - remove duplicate /sbin/chkconfig --del winbind which causes
    warnings when removing samba.
  - Fixed minor bug in smbprint that causes it to fail when called with
    more than 10 parameters: the accounting file (and spool directory
    derived from it) were being set wrong due to missing {}.  This closes
    bug #86473.
  - updated smb.conf patch, includes new defaults to close bug #84822.


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-1
changelog:
  - upgrade to 2.2.8a
  - remove old .md5 files
  - add "pid directory = /var/run" to the smb.conf file.  Fixes #88495
  - Patch from jra@dp.samba.org to fix a delete-on-close regression


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-2
changelog:
  - add libsmbclient.so for gnome-vfs-extras
  - Edit specfile to specify /var/run for pid files
  - Move /tmp/.winbindd/socket to /var/run/winbindd/socket


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-3beta3
changelog:
  - Merge from 3.0.0-2beta3.3E
  - (Correct log file names (#100981).)
  - (Fix pidfile directory in samab.log)
  - (Remove obsolete samba-3.0.0beta2.tar.bz2.md5 file)
  - (Move libsmbclient to the -common package (#99449))


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-15
changelog:
  - New 3.0.0 final release
  - merge nmbd-netbiosname and testparm patches from 3E branch
  - updated the -logfiles patch to work against 3.0.0
  - updated the pie patch
  - update the VERSION file during build
  - use make -j if avaliable
  - merge the winbindd_privileged change from 3E
  - merge the "rm /usr/lib" patch that allows Samba to build on 64-bit
    platforms despite the broken Makefile


author: Felipe Alfaro Solana <felipe_alfaro@linuxmail.org> 3.0.1-1
changelog:
  - Update to 3.0.1
  - Removed testparm patch as it's already merged
  - Removed Samba.7* man pages
  - Fixed .buildroot patch
  - Fixed .pie patch
  - Added new /usr/bin/tdbdump file


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-3rc2
changelog:
  - add %dir entries for %{_libdir}/samba and %{_libdir}/samba/charset
  - Upgrade to new upstream version
  - build mount.cifs for the new cifs filesystem in the 2.6 kernel.


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-5
changelog:
  - New upstream version: 3.0.2 final includes security fix for #114995
    (CAN-2004-0082)
  - Edit postun script for the -common package to restart winbind when
    appropriate.  Fixes bugzilla #114051.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Change all requires lines to list an explicit epoch.  Closes #102715
  - Add an explicit Epoch so that %{epoch} is defined.


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-1.pre1
changelog:
  - New upstream version.
  - Updated -pie and -logfiles patches for 3.0.3pre1
  - add krb5-devel to buildrequires, fixes #116560
  - Add patch from Miloslav Trmac (mitr@volny.cz) to allow non-root to run
    "service smb status".  This fixes #116559


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-2.pre2
changelog:
  - New upstream version  
  - Updated configure line to remove --with-fhs and to explicitly set all
    the directories that --with-fhs was setting.  We were overriding most of
    them anyway.  This closes #118598


author: jay Fenlason <fenlason@redhat.com> 3.0.3-3.rc1
changelog:
  - New upstream version
  - updated spec file to make libsmbclient.so executable.  This closes
    bugzilla #121356


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-5
changelog:
  - Patch to allow password changes from machines patched with
    Microsoft hotfix MS04-011.
  - Include patches for https://bugzilla.samba.org/show_bug.cgi?id=1302
    and https://bugzilla.samba.org/show_bug.cgi?id=1309


author: Jay Fenlason <fenlason@redhat.com> 3.0.5.0pre1.0
changelog:
  - New upstream version
  - use % { SOURCE1 } instead of a hardcoded path
  - include -winbind patch from Gerald (Jerry) Carter (jerry@samba.org)
    https://bugzilla.samba.org/show_bug.cgi?id=1315
    to make winbindd work against Windows versions that do not have
    128 bit encryption enabled.
  - Moved %{_bindir}/net to the -common package, so that folks who just
    want to use winbind, etc don't have to install -client in order to
    "net join" their domain.
  - New upstream version obsoletes the patches added in 3.0.3-5
  - Remove smbgetrc.5 man page, since we don't ship smbget.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-0.pre1.1
changelog:
  - Backport base64_decode patche to close CAN-2004-0500
  - Backport hash patch to close CAN-2004-0686
  - use_authtok patch from Nalin Dahyabhai <nalin@redhat.com>
  - smbclient-kerberos patch from Alexander Larsson <alexl@redhat.com>
  - passwd patch uses "*" instead of "x" for "hashed" passwords for
    accounts created by winbind.  "x" means "password is in /etc/shadow" to
    brain-damaged pam_unix module.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-2
changelog:
  - Upgrade to 3.0.5, which is a regression from 3.0.5pre1 for a
    security fix.
  - Include the 3.0.4-backport patch from the 3E branch.  This restores
    some of the 3.0.5pre1 and 3.0.5rc1 functionality.


author: Jason Vas Dias <jvdias@redhat.com> 3.0.5-3
changelog:
  - Removed '-pie' patch - 3.0.5 uses -fPIC/-PIC, and the combination
  - resulted in executables getting corrupt stacks, causing smbmnt to
  - get a SIGBUS in the mount() call (bug 127420).


author: Jay Fenlason <fenlason@redhat.com> 3.0.6-3
changelog:
  - New upstream version.
  - Include post 3.0.6 patch from "Gerald (Jerry) Carter" <jerry@samba.org>
    to fix a duplicate in the LDAP schema.
  - Include 64-bit timestamp patch from Ravikumar (rkumar@hp.com)
    to allow correct timestamp handling on 64-bit platforms and fix #126109.
  - reenable the -pie patch.  Samba is too widely used, and too vulnerable
    to potential security holes to disable an important security feature
    like -pie.  The correct fix is to have the toolchain not create broken
    executables when programs compiled -pie are stripped.
  - Remove obsolete patches.
  - Modify this spec file to put libsmbclient.{a,so} in the right place on
    x86_64 machines.


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-3
changelog:
  - Upgrade to 3.0.7, which fixes CAN-2004-0807 CAN-2004-0808
    This obsoletes the 3.0.6-schema patch.
  - Update BuildRequires line to include openldap-devel openssl-devel
    and cups-devel


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-4
changelog:
  - Update docs section to not carryover the docs/manpages directory
    This moved many files from /usr/share/doc/samba-3.0.7/docs/* to
    /usr/share/doc/samba-3.0.7/*
  - Modify spec file as suggested by Rex Dieter (rdieter@math.unl.edu)
    to correctly create libsmbclient.so.0 and to use %_initrddir instead
    of rolling our own.  This closes #132642
  - Add patch to default "use sendfile" to no, since sendfile appears to
    be broken
  - Add patch from Volker Lendecke <vl@samba.org> to help make
    ldapsam_compat work again.
  - Add patch from "Vince Brimhall" <vbrimhall@novell.com> for ldapsam_compat
    These two patches close bugzilla #132169


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include patch from Steven Lawrance (slawrance@yahoo.com) that modifies
    smbmnt to work with 32-bit uids.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.2
changelog:
  - Re-enable the x_fclose patch that was accidentally disabled
    in 3.0.8-0.pre1.1.  This closes #135832
  - include Nalin's -fqdn and -salt patches.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.3
changelog:
  - disable the -salt patch, because it causes undefined references in
    libsmbclient that prevent gnome-vfs from building.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-2
changelog:
  - New upstream version fixes CAN-2004-0930.  This obsoletes the
    disable-sendfile, salt, signing-shortkey and fqdn patches.
  - Add my <fenlason@redhat.com> ugly non-ascii-domain patch.
  - Updated the pie patch for 3.0.8.
  - Updated the logfiles patch for 3.0.8.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3
changelog:
  - Include the corrected docs tarball, and use it instead of the
    obsolete docs from the upstream 3.0.8 tarball.
  - Update the logfiles patch to work with the updated docs.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3.1
changelog:
  - Rescue the install.mount.smbfs patch from Juanjo Villaplana
    (villapla@si.uji.es) to prevent building the srpm from trashing your
    installed /usr/bin/smbmount


author: Than Ngo <than@redhat.com> 3.0.8-4
changelog:
  - fix unresolved symbols in libsmbclient which caused applications
    such as KDE's konqueror to fail when accessing smb:// URLs. #139894


author: Jay Fenlason <fenlason@redhat.com> 3.0.9-2
changelog:
  - New upstream release.  This obsoletes the -secret patch.
    Include my changetrustpw patch to make "net ads changetrustpw" stop
    aborting.  This closes #134694
  - Remove obsolete triggers for ancient samba versions.
  - Move /var/log/samba to the -common rpm.  This closes #76628
  - Remove the hack needed to get around the bad docs files in the
    3.0.8 tarball.
  - Change the comment in winbind.init to point at the correct pidfile.
    This closes #76641


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-2
changelog:
  - New upstream release that closes CAN-2004-1154  bz#142544
  - Include the -64bit patch from Nalin.  This closes bz#142873
  - Update the -logfiles patch to work with 3.0.10
  - Create /var/run/winbindd and make it part of the -common rpm to close
    bz#142242


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-4
changelog:
  - Update the -man patch to fix ntlm_auth.1 too.
  - Move pam_smbpass.so to the -common package, so both the 32
    and 64-bit versions will be installed on multiarch platforms.
    This closes bz#143617
  - Added new -delim patch to fix mount.cifs so it can accept
    passwords with commas in them (via environment or credentials
    file) to close bz#144198


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-3
changelog:
  - add -gcc4 patch to compile with gcc 4.
  - remove the now obsolete -smbclient-kerberos.patch
  - Include four upstream patches from
    http://samba.org/~jerry/patches/post-3.0.11/
    (Slightly modified the winbind_find_dc_v2 patch to apply easily with
    rpmbuild).


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-4
changelog:
  - Use the updated filter-requires-samba.sh file, so we don't accidentally
    pick up a dependency on perl(Crypt::SmbHash)


author: Jay Fenlason <fenlason@redhat.com> 3.0.13-2
changelog:
  - New upstream release
  - add my -quoting patch, to fix swat with strings that contain
    html meta-characters, and to use correct quote characters in
    lists, closing bz#134310
  - include the upstream winbindd_2k3sp1 patch
  - include the -smbclient patch.
  - include the -hang patch from upstream.


author: Jay Fenlason <fenlason@redhat.com> 3.0.14a-2
changelog:
  - New upstream release.
  - the -64bit-timestamps, -clitar, -establish_trust, user_rights_v1,
    winbind_find_dc_v2 patches are now obsolete.


author: Jay Fenlason <fenlason@redhat.com> 3.0.20-2
changelog:
  - New upstream release
    Includes five upstream patches -bug3010_v1, -groupname_enumeration_v3,
      -regcreatekey_winxp_v1, -usrmgr_groups_v1, and -winbindd_v1
    This obsoletes the -pie and -delim patches
    the -warning and -gcc4 patches are obsolete too
    The -man, -passwd, and -smbspool patches were updated to match 3.0.20pre1
    Also, the -quoting patch was implemented differently upstream
    There is now a umount.cifs executable and manpage
    We run autogen.sh as part of the build phase
    The testprns command is now gone
    libsmbclient now has a man page
  - Include -bug106483 patch to close
    bz#106483 smbclient: -N negates the provided password, despite documentation
  - Added the -warnings patch to quiet some compiler warnings.
  - Removed many obsolete patches from CVS.


author: Jay Fenlason <fenlason@redhat.com> 3.0.20b-2
changelog:
  - turn on -DLDAP_DEPRECATED to allow access to ldap functions that have
    been depricated in 2.3.11, but which don't have well-documented
    replacements (ldap_simple_bind_s(), for example).
  - Upgrade to 3.0.20b, which includes all the previous upstream patches.
  - Updated the -warnings patch for 3.0.20a.
  - Include  --with-shared-modules=idmap_ad,idmap_rid to close
    bz#156810 --with-shared-modules=idmap_ad,idmap_rid
  - Include the new samba.pamd from Tomas Mraz (tmraz@redhat.com) to close
    bz#170259 pam_stack is deprecated


author: Jay Fenlason <fenlason@redhat.com> 3.0.21b-2
changelog:
  - New upstream version.
  - Since the rawhide kernel has dropped support for smbfs, remove smbmount
    and smbumount.  Users should use mount.cifs instead.
  - Upgrade to 3.0.21b


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-0.RC3
changelog:
  - New upstream RC release.
  - Update the -logfiles, and -passwd patches for
    3.0.23rc3
  - Include the change to smb.init from Bastien Nocera <bnocera@redhat.com>)
    to close
    bz#182560 Wrong retval for initscript when smbd is dead
  - Update this spec file to build with 3.0.23rc3
  - Remove the -install.mount.smbfs patch, since we don't install
    mount.smbfs any more.


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-2
changelog:
  - New upstream release.
  - Use modified filter-requires-samba.sh from packaging/RHEL/setup/
    to get rid of bogus dependency on perl(Unicode::MapUTF8)
  - Update the -logfiles and -smb.conf patches to work with 3.0.23


author: Jay Fenlason <fenlason@redhat.com> 3.0.23a-3
changelog:
  - Fix the -logfiles patch to close
    bz#199607 Samba compiled with wrong log path.
    bz#199206 smb.conf has incorrect log file path


author: Simo Sorce <ssorce@redhat.com> 3.0.24-2.fc7
changelog:
  - New upstream release
  - Fix packaging issue wrt idmap modules used only by smbd
  - Addedd Vista Patchset for compatibility with Windows Vista
  - Change default of "msdfs root", it seem to cause problems with
    some applications and it has been proposed to change it for
    3.0.25 upstream


author: Simo Sorce <ssorce@redhat.com> 3.0.24-3.fc7
changelog:
  - Directories reorg, tdb files must go to /var/lib, not
    to /var/cache, add migration script in %post common
  - Split out libsmbclient, devel and doc packages
  - Remove libmsrpc.[h|so] for now as they are not really usable
  - Remove kill -HUP from rotate, samba use -HUP for other things
    noit to reopen logs


author: Simo Sorce <ssorce@redhat.com> 3.0.24-5.fc7
changelog:
  - actually use the correct samba.pamd file not the old samba.pamd.stack file
  - fix logifles and use upstream convention of log.* instead of our old *.log
    Winbindd creates its own log.* files anyway so we will be more consistent
  - install our own (enhanced) default smb.conf file
  - Fix pam_winbind acct_mgmt PAM result code (prevented local users from
    logging in). Fixed by Guenther.
  - move some files from samba to samba-common as they are used with winbindd
    as well


author: Simo Sorce <ssorce@redhat.com> 3.0.24-6.fc7
changelog:
  - do not put comments inline on smb.conf options, they may be read
    as part of the value (for example log files names)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-7.fc7
changelog:
  - make winbindd start earlier in the init process, at the same time
    ypbind is usually started as well
  - add a sepoarate init script for nmbd called nmb, we need to be able
    to restart nmbd without dropping al smbd connections unnecessarily


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - remove patch for bug 106483 as it introduces a new bug that prevents
    the use of a credentials file with the smbclient tar command
  - move the samba private dir from being the same as the config dir
    (/etc/samba) to /var/lib/samba/private


author: Simo Sorce <ssorce@redhat.com> 3.0.24-9.fc7
changelog:
  - integrate most of merge review proposed changes (bug #226387)
  - remove libsmbclient-devel-static and simply stop shipping the
    static version of smbclient as it seem this is deprecated and
    actively discouraged


author: Simo Sorce <ssorce@redhat.com> 3.0.24-10.fc7
changelog:
  - set passdb backend = tdbsam as default in smb.conf
  - remove samba-docs dependency from swat, that was a mistake
  - put back COPYING and other files in samba-common
  - put examples in samba not in samba-docs
  - leave only stuff under docs/ in samba-doc


author: Guenther Deschner <gdeschner@redhat.com> 3.0.24-11.fc7
changelog:
  - enable PAM and NSS dlopen checks during build
  - fix unresolved symbols in libnss_wins.so (bug #198230)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-12.fc7
changelog:
  - fixes in smb.conf
  - advice in smb.conf to put scripts in /var/lib/samba/scripts
  - create /var/lib/samba/scripts so that selinux can be happy
  - fix Vista problems with msdfs errors


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - fixes in the spec file
  - moved to 3.0.25rc1
  - addedd patches (merged upstream so they will be removed in 3.0.25rc2)


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - update to 3.0.25a as it contains many fixes
  - add a fix for pam_smbpass made by Günther but committed upstream after 3.0.25a was cut.


author: Simo Sorce <ssorce@redhat.com> 3.2.0-0.pre1.fc9
changelog:
  - New major relase, minor switched from 0 to 2
  - License change, the code is now GPLv3+
  - Numerous improvements and bugfixes included
  - package libsmbsharemodes too
  - remove smbldap-tools as they are already packaged separately in Fedora
  - Fix bug 245506


author: Simo Sorce <ssorce@redhat.com> - 3.2.0-0.pre1.3
changelog:
  - Try to fix GCC 4.3 build
  - Add --with-dnsupdate flag and also make sure other flags are required just to
    be sure the features are included without relying on autodetection to be
    successful


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.0-0.25
changelog:
  - Update to 3.3.0 final
  - Add upstream fix for ldap connections to AD (Bug #6073)
  - Remove bogus perl dependencies (resolves: #473051)


author: Simo Sorce <ssorce@redhat.com> - 3.3.1-0.29
changelog:
  - Make the talloc and ldb packages optionsl and disable their build within
    the samba3 package, they are now built as part of the samba4 package
    until they will both be released as independent packages.


author: Simo Sorce <ssorce@redhat.com> - 3.3.2-0.33
changelog:
  - Fix nmbd init script nmbd reload was causing smbd not nmbd to reload the
    configuration
  - Fix upstream bug 6224, nmbd was waiting 5+ minutes before running elections on
    startup, causing your own machine not to show up in the network for 5 minutes
    if it was the only client in that workgroup (fix committed upstream)


author: Guenther Deschner <gdeschner@redhat.com> - 3.4.0-0.41
changelog:
  - Fix Bug #6551 (vuid and tid not set in sessionsetupX and tconX)
  - Specify required talloc and tdb version for BuildRequires


author: Simo Sorce <ssorce@redhat.com> - 3.4.2-47
changelog:
  - Spec file cleanup
  - Fix sources upstream location
  - Remove conditionals to build talloc and tdb, now they are completely indepent
    packages in Fedora
  - Add defattr() where missing
  - Turn all tabs into 4 spaces
  - Remove unused migration script
  - Split winbind-clients out of main winbind package to avoid multilib to include
    huge packages for no good reason


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.3-60
changelog:
  - Update to 3.5.3
  - Make sure nmb and smb initscripts return LSB compliant return codes
  - Fix winbind over ipv6


author: Andreas Schneider <asn@redhat.com> - 2:3.6.5-88
changelog:
  - Move tmpfiles.d config to common package as it is needed for smbd and
    winbind.
  - Make sure tmpfiles get created after installation.


author: Ville Skyttä <ville.skytta@iki.fi> - 2:3.6.6-92
changelog:
  - Call ldconfig at libwbclient and -winbind-clients post(un)install time.
  - Fix empty localization files, use %find_lang to find and %lang-mark them.
  - Escape macros in %changelog.
  - Fix source tarball URL.


author: Andreas Schneider <asn@redhat.com> - 2:4.0.0-154.rc3
changelog:
  - Update to 4.0.0rc3.
  - resolves: #805562 - Unable to share print queues.
  - resolves: #863388 - Unable to reload smbd configuration with systemctl.


author: Andreas Schneider <asn@redhat.com> - 2:4.0.0-160.rc3
changelog:
  - resolves: #867893 - Move /var/log/samba to samba-common package for
                        winbind which requires it.


author: Andreas Schneider <asn@redhat.com> - 2:4.0.2-1
changelog:
  - Update to Samba 4.0.2.
  - Fixes CVE-2013-0213.
  - Fixes CVE-2013-0214.
  - resolves: #906002
  - resolves: #905700
  - resolves: #905704
  - Fix conn->share_access which is reset between user switches.
  - resolves: #903806
  - Add missing example and make sure we don't introduce perl dependencies.
  - resolves: #639470


author: Andreas Schneider <asn@redhat.com> - 2:4.0.3-1
changelog:
  - Update to Samba 4.0.3.
  - resolves: #907544 - Add unowned directory /usr/lib64/samba.
  - resolves: #906517 - Fix pidl code generation with gcc 4.8.
  - resolves: #908353 - Fix passdb backend ldapsam as module.


author: Andreas Schneider <asn@redhat.com> - 2:4.0.4-3
changelog:
  - resolves: #919405 - Fix and improve large_readx handling for broken clients.
  - resolves: #924525 - Don't use waf caching.


author: Andreas Schneider <asn@redhat.com> - 2:4.0.5-1
changelog:
  - Update to Samba 4.0.5.
  - Add UPN enumeration to passdb internal API (bso #9779).
  - resolves: #928947 - samba-doc is obsolete now.
  - resolves: #948606 - LogRotate should be optional, and not a hard "Requires".


author: Andreas Schneider <asn@redhat.com> - 2:4.0.7-2
changelog:
  - resolves: #972692 - Build with PIE and full RELRO.
  - resolves: #884169 - Add explicit dependencies suggested by rpmdiff.
  - resolves: #981033 - Local user's krb5cc deleted by winbind.
  - resolves: #984331 - Fix samba-common tmpfiles configuration file in wrong
                        directory.


author: Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.2
changelog:
  - resolves: #985985 - Fix file conflict between samba and wine.
  - resolves: #985107 - Add support for new default location for Kerberos
                        credential caches.


author: Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.7
changelog:
  - related: #985609 - Update to Samba 4.1.0rc3.
  - resolves: #1005422 - Add support for KEYRING ccache type in pam_winbindd.


author: Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.8
changelog:
  - related: #985609 - Update to Samba 4.1.0rc4.
  - resolves: #1010722 - Split out a samba-winbind-modules package.


author: Andreas Schneider <asn@redhat.com> - 4.1.0-2
changelog:
  - resolves: #1018856 - Fix installation of pam_winbind after upgrade.
  - related: #1010722 - Split out a samba-winbind-modules package.
  - related: #985609


author: Andreas Schneider <asn@redhat.com> - 4.1.0-4
changelog:
  - related: #884169 - Add direct dependency to samba-libs in the
                       glusterfs package.
  - resolves: #996567 - Fix userPrincipalName composition.
  - related: #884169 - Fix memset call with zero length in in ntdb.


author: Andreas Schneider <asn@redhat.com> - 4.1.3-1
changelog:
  - Update to Samba 4.1.3.
  - resolves: #1039454 - CVE-2013-4408.
  - resolves: #1039500 - CVE-2012-6150.


author: Andreas Schneider <asn@redhat.com> - 4.2.0-0.3.rc2
changelog:
  - resolves: #1174412 - Build VFS Ceph module.
  - resolves: #1169067 - Move libsamba-cluster-support.so to samba-libs package.
  - resolves: #1016122 - Move smbpasswd to samba-common package.


author: Michael Adam <madam@redhat.com> - 4.2.0-0.2.rc3
changelog:
  - Improve dependencies of vfs-glusterfs and vfs-cephfs.
  - Remove unused python_libdir.
  - Fix malformed changelog entries.


author: Andreas Schneider <asn@redhat.com> - 4.2.0-2
changelog:
  - Fix the AD build.
  - Create samba-client-libs subpackage.
  - Fix multiarch issues by splitting the samba-common package.


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.2.1-5
changelog:
  - Require samba-common-tools in samba package
  - Require samba-common-tools in samba-client package
  - resolves: #1215631 - /usr/bin/net moved to samba-common-tools but the package is not required by samba


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.2.1-7
changelog:
  - Fix LSASD daemon
  - resolves: #1217346 - FreeIPA trusts to AD broken due to Samba 4.2 failure to run LSARPC pipe externally


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.2.1-8
changelog:
  - Fixes: #1219832: Samba 4.2 broke FreeIPA trusts to AD
  - Remove usage of deprecated API from gnutls


author: Andreas Schneider <asn@redhat.com> - 4.2.2-1
changelog:
  - resolves: #1227911 - Enable tar support for smbclient
  - resolves: #1234908 - Own the /var/lib/samba directory
  - Enable hardened build


author: Guenther Deschner <gdeschner@redhat.com> - 4.3.3-0
changelog:
  - Update to Samba 4.3.3
  - resolves: #1292069
  - CVE-2015-3223 Remote DoS in Samba (AD) LDAP server
  - CVE-2015-5252 Insufficient symlink verification in smbd
  - CVE-2015-5296 Samba client requesting encryption vulnerable to
                  downgrade attack
  - CVE-2015-5299 Missing access control check in shadow copy code
  - CVE-2015-7540 DoS to AD-DC due to insufficient checking of asn1
                  memory allocation


author: Guenther Deschner <gdeschner@redhat.com> - 4.4.0-0.7.rc4
changelog:
  - Update to Samba 4.4.0rc4
  - resolves: #1315942 - CVE-2015-7560 Incorrect ACL get/set allowed on symlink path


author: Guenther Deschner <gdeschner@redhat.com> - 4.4.2-1
changelog:
  - Update to Samba 4.4.2, fix badlock security bug
  - resolves: #1326453 - CVE-2015-5370
  - resolves: #1326453 - CVE-2016-2110
  - resolves: #1326453 - CVE-2016-2111
  - resolves: #1326453 - CVE-2016-2112
  - resolves: #1326453 - CVE-2016-2113
  - resolves: #1326453 - CVE-2016-2114
  - resolves: #1326453 - CVE-2016-2115
  - resolves: #1326453 - CVE-2016-2118


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.6.0-3
changelog:
  - auth/credentials: Always set the the realm if we set the principal from the ccache
  - resolves: #1430761 - credentials_crb5: use gss_acquire_cred for client-side GSSAPI use case


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.6.0-4
changelog:
  - Export arcfour_crypt_blob to Python as samba.crypto.arcfour_encrypt
  - Makes possible to run trust to AD in FreeIPA in FIPS mode


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.7.0-0.5.rc1
changelog:
  - Convert more rpc modules to python3
  - Explicitly specify Python artifacts in the spec to be able to catch unpackaged ones
  - Split 'make test' Python code into separate python2-samba-test/python3-samba-test sub-packages
  - Remove embedded python2-dns version, require python{2,3}-dns instead


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.7.0-0.6.rc1
changelog:
  - Use Python 2 explicitly for samba-tool and other Python-based tools
  - Install samba.service as it is required for the AD DC case


author: Guenther Deschner <gdeschner@redhat.com> - 4.7.0-12
changelog:
  - Update to Samba 4.7.0
  - resolves: #1493441 - Security fix for CVE-2017-12150 CVE-2017-12151 CVE-2017-12163


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.7.0-13
changelog:
  - Move /usr/lib{64,}/samba/libdsdb-garbage-collect-tombstones-samba4.so to samba-dc-libs
  - Rebuild in rawhide against new krb5 1.16 and docbook-xml


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.7.0-18
changelog:
  - Force samba-dc to use the same libldb version as LDB modules compiled
  - resolves: #1507420 - LDB / Samba module version mismatch


author: Guenther Deschner <gdeschner@redhat.com> - 4.8.0-7
changelog:
  - resolves: #1554754, #1554756 - Security fixes for CVE-2018-1050 CVE-2018-1057
  - resolves: #1555112 - Update to Samba 4.8.0


author: Petr Viktorin <pviktori@redhat.com> - 4.8.3-2
changelog:
  - Use %{__python2}, not "python", as the Python2 interpreter
  - Add workaround to allow building with Python 2
  - Change unversioned python macros to python2
  - Disable gluster temporarily


author: Andreas Schneider <asn@redhat.com> - 4.9.0rc3-3
changelog:
  - related: #1614232 - Update to Samba 4.9.0rc3
  - resolves: #1554753 - Fix CVE-2018-1050
  - resolves: #1617912 - Fix CVE-2018-10858
  - resolves: #1617913 - Fix CVE-2018-10918
  - resolves: #1617914 - Fix CVE-2018-10919
  - resolves: #1617915 - Fix CVE-2018-1139
  - resolves: #1612522 - Manpage fixes


author: Andreas Schneider <asn@redhat.com> - 4.9.0rc5-3
changelog:
  - related: #1614232 - Update to Samba 4.9.0rc5
  - resolves: #1610909 - Re-enable glubsterfs vfs module
  - resolves: #1624170 - Build with -fstack-protectore-strong if available
  - resolves: #1602685 - Fixed issues found by covscan


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.9.1-3
changelog:
  - Temporarily remove smbtorture from samba-test due to Python 2 linkage
  - related: #1609661 - samba-test package cannot be installed due to unresolved dependencies


author: Andreas Schneider <asn@redhat.com> - 4.9.1-5
changelog:
  - resolves: #1644327 - Segfault if wrong 'passdb backend' is configured
  - resolves: #1647959 - Segfault in the debug system with hardended build


author: Andreas Schneider <asn@redhat.com> - 4.9.1-6
changelog:
  - resolves: #1642092 - Harden [homes] share export
  - resolves: #1648846 - Fix out of bound array access in ctdb
  - resolves: #1657266 - Fix tmp directory creation in /run


author: Andreas Schneider <asn@redhat.com> - 4.9.1-7
changelog:
  - resolves: #1658690 - Add smbc_setOptionProtocols()
  - resolves: #1658678 - Fix spoolss client operations against Windows


author: Andreas Schneider <asn@redhat.com> - 4.10.4-0
changelog:
  - related: #1638001 - Rebase to Samba version 4.10.4
  - resolves: #1597298 - Build Samba with python3
  - resolves: #1658558 - Add 'net ads leave --keep-account' option
  - resolves: #1669004 - Fix systemd status notifications
  - resolves: #1672167 - Fix printing cache timeout in debug output
  - resolves: #1696525 - Fix CVE-2019-3880


author: Andreas Schneider <asn@redhat.com> - 4.10.4-1
changelog:
  - resolves: #1712378 - Fix smbspool CUPS backend
  - resolves: #1696612 - Fix 'net ads join -U admin@parentdomain'


author: Andreas Schneider <asn@redhat.com> - 4.10.4-100
changelog:
  - resolves: #1754575 - Avoid overlinking with librt and libpthread
  - resolves: #1755440 - Fix forest trusts enumeration
  - resolves: #1755445 - Fix CUPS username/password authentication with smbspool


author: Andreas Schneider <asn@redhat.com> - 4.11.2-1
changelog:
  - resolves: #1754409 - Rebase to Samba version 4.11.2
  - resolves: #1776312 - Winbind is not restarted on upgrade
  - resolves: #1764469 - Fix CVE-2019-10218
  - resolves: #1746241 - Fix CVE-2019-10197
  - resolves: #1710980 - Add support for KCM ccache in pam_winbind


author: Andreas Schneider <asn@redhat.com> - 4.11.2-4
changelog:
  - related: #1754409 - Add patch to avoid overlinking with libnsl and libsocket
  - related: #1754409 - Fix permissions for pidl
  - related: #1754409 - Fix logrotate script
  - related: #1754409 - Add missing README files


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.11.2-10
changelog:
  - resolves: #1790353 - Fix access check in DsRGetForestTrustInformation
  - resolves: #1791209 - Fix CVE-2019-14907


author: Andreas Schneider <asn@redhat.com> - 4.11.2-12
changelog:
  - related: #1781232 - Improve debug output of smbclient
  - resolves: #1794461 - Do not return bogus inode numbers in
                         cli_qpathinfo2()/cli_qpathinfo3() for SMB1
  - resolves: #1794442 - Fix segfault in smbd_do_qfilepathinfo()


author: Andreas Schneider <asn@redhat.com> - 4.12.3-0
changelog:
  - resolves: #1817557 - Rebase to version 4.12.3
  - resolves: #1813833 - Fix 'net ads join createupn='


author: Andreas Schneider <asn@redhat.com> - 4.12.3-1
changelog:
  - resolves: #1666737 - Add a new smbc_readdirplus2() function to libsmbclient
  - resolves: #1842844 - Fix GnuTLS priority list for TLS connections


author: Isaac Boukris <iboukris@redhat.com> - 4.12.3-4
changelog:
  - resolves: #1850980 - Add "additional dns hostname" to keytab
  - resolves: #1850981 - Add net-ads-join dnshostname=fqdn option


author: Andreas Schneider <asn@redhat.com> - 4.12.3-5
changelog:
  - resolves: #1823612 - Fix segfault in 'net ads dns gethostbyname'
  - resolves: #1792553 - Fix 'net ads join createcomputer=OU'


author: Andreas Schneider <asn@redhat.com> - 4.12.3-7
changelog:
  - resolves: #1855711 - Fix 'require_membership_of' documentation in
                         pam_winbind manpage


author: Andreas Schneider <asn@redhat.com> - 4.12.3-9
changelog:
  - related: #1817557 - Move DECRPC mdssvc data files to correct package
  - resolves: #1856676 - Fix lookuprids in winbind


author: Andreas Schneider <asn@redhat.com> - 4.13.2-1
changelog:
  - resolves: #1878109 - Rebase Samba to version 4.13.2
  - resolves: #1872833 - Add samba-winexe subpackage
  - resolves: #1891688 - Fix CVE-2020-14323
  - resolves: #1892633 - Fix CVE-2020-14318
  - resolves: #1892639 - Fix CVE-2020-14383
  - resolves: #1879835 - Fix CVE-2020-1472
  - resolves: #1888990 - Update smb.conf manpages to describe how to apply
                         config changes.
  - resolves: #1869702 - Fix %U substitution for 'valid users' option
  - resolves: #1818038 - Improve FIPS compliance


author: Andreas Schneider <asn@redhat.com> - 4.13.2-2
changelog:
  - related: #1869702 - Fix spoolss crash
  - resolves: #1896736 - Fix name lookups of FreeIPA users
  - resolves: #1899113 - Fix DFS links


author: Andreas Schneider <asn@redhat.com> - 4.13.3-3
changelog:
  - resolves: #1924615 - Fix a memcache bug when cache is full
  - resolves: #1924571 - Ensure that libwbclient has been updated before
                         restarting services


author: Andreas Schneider <asn@redhat.com> - 4.14.4-2
changelog:
  - resolves: rhbz#1944657 - Update to version 4.14.4
  - resolves: rhbz#1949445 - Fix CVE-2021-20254
  - resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
  - resolves: rhbz#1908506 - Fix creating the gencache user directory
  - resolves: rhbz#1901029 - Build the vfs_io_uring module


author: Andreas Schneider <asn@redhat.com> - 4.14.4-0
changelog:
  - related: rhbz#1944657 - Update to version 4.14.5
  - resolves: rhbz#1969787 - Fix memory leak in RPC server
  - resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
  - resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
  - resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
  - resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags


author: Andreas Schneider <asn@redhat.com> - 4.14.4-1
changelog:
  - resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
  - resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message


author: Andreas Schneider <asn@redhat.com> - 4.14.4-3
changelog:
  - resolves: rhbz#2019662 - Fix CVE-2016-2124
  - resolves: rhbz#2019668 - Fix CVE-2021-23192
  - resolves: rbhz#2019674 - Fix CVE-2020-25717


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.2-1
changelog:
  - resolves: rhbz#2013596 - Rebase to version 4.15.2
  - resolves: rhbz#1999294 - Remove noisy error message in winbindd
  - resolves: rhbz#1958881 - Don't require winbind being online for krb5 auth
                             with one-way trusts
  - resolves: rhbz#2019461 - Fix deleting directories with dangling symlinks


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.3-1
changelog:
  - related: rhbz#2013596 - Rebase to version 4.15.3
  - resolves: rhbz#2028029 - Fix possible null pointer dereference in winbind
  - resolves: rhbz#1912549 - Winexe: Kerberos Auth is respected via --use-kerberos=desired


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.4-0
changelog:
  - Update to Samba 4.15.4
  - related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
  - resolves: rhbz#2039153 - Fix CVE-2021-20316
  - resolves: rhbz#1912549 - Winexe: Kerberos flag not invoking Kerberos Auth
  - resolves: rhbz#2039157 - Fix CVE-2021-43566
  - resolves: rhbz#2038148 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7
  - resolves: rhbz#2035528 - [smb] Segmentation fault when joining the domain
  - resolves: rhbz#2038796 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-0
changelog:
  - Update to Samba 4.15.5
  - related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
  - resolves: rhbz#2046127 - Fix CVE-2021-44141
  - resolves: rhbz#2046153 - Fix CVE-2021-44142
  - resolves: rhbz#2044404 - Printing no longer works on Windows 7
  - resolves: rhbz#2043154 - Fix systemd notifications
  - resolves: rhbz#2049602 - Disable NTLMSSP for ldap client connections (e.g. libads)


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-1
changelog:
  - resolves: #1995849 - [RFE] Change change password change prompt phrasing
  - resolves: #2029417 - virusfilter_vfs_openat: Not scanned: Directory or special file


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-6
changelog:
  - resolves: rhbz#2059151 - Fix username map for unix groups
  - resolves: rhbz#2065212 - Fix 'create krb5 conf = yes` when a KDC has a single IP address.


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.3-0
changelog:
  - related: rhbz#2077468 - Rebase Samba to 4.16.3
  - resolves: rhbz#2106672 - The pcap background queue process should not be stopped
  - resolves: rhbz#2106263 - Fix crash in rpcd_classic
  - resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name


author: Andreas Schneider <asn@redhat.com> - 4.17.2-1
changelog:
  - resolves: rhbz#2132051 - Update to version 4.17.2
  - resolves: rhbz#2126174 - Fix CVE-2022-1615
  - resolves: rhbz#2108487 - ctdb: Add dependency to samba-winbind-clients


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.2-2
changelog:
  - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
  - related: rhbz#2132051


author: Pavel Filipenský <pfilipenn@redhat.com> - 4.17.4-0
changelog:
  - related: rhbz#2132051 - Update to version 4.17.4
  - resolves: rhbz#2154370 - Fix CVE-2022-38023
  - resolves: rhbz#2142331 - Fix %U include directive for share listing (netshareenum)
  - resolves: rhbz#2148943 - Fix Winbind to retrieve user groups from Active Directory


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.5-2
changelog:
  - resolves: rhbz#2169339 - Fix winbind memory leak
  - resolves: rhbz#2152899 - Fix Samba shares not accessible issue


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-1
changelog:
  - resolves: rhbz#2221594 - Fix broken symlink for libwbclient
  - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-0
changelog:
  - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-1
changelog:
  - related: rhbz#2190417 - Update to version 4.18.6
  - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command


author: Pavel Filipenský <pfilipen@redhat.com> - 4.19.3-1
changelog:
  - resolves: RHEL-16483 - Update to version 4.19.3
  - resolves: RHEL-11361
              - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-2228  - Logging Format Enhancement
  - resolves: RHEL-1965  - Fix smbget issues with DFS shares
  - resolves: RHEL-2108  - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind


author: Pavel Filipenský <pfilipen@redhat.com> - 4.19.4-2
changelog:
  - Fix error in PREIN scriptlet in rpm package samba-common
  - related: RHEL-16483 - Update to version 4.19.4


author: Pavel Filipenský <pfilipen@redhat.com> - 4.19.4-10
changelog:
  - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up
  - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment


author: Pavel Filipenský <pfilipen@redhat.com> - 4.19.4-16
changelog:
  - resolves: RHEL-156322 - Fix CVE-2026-3012
  - resolves: RHEL-161647 - Fix CVE-2026-4480
  - resolves: RHEL-177933 - Fix CVE-2026-4408
  - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el8]
changelog:
  - chain: Correctly check realloc() call (Phil Sutter) [1778952]
  - flowtable: Correctly check realloc() call (Phil Sutter) [1778952]
  - chain: Fix memleak in error path of nftnl_chain_parse_devs() (Phil Sutter) [1778952]
  - flowtable: Fix memleak in error path of nftnl_flowtable_parse_devs() (Phil Sutter) [1778952]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el8]
changelog:
  - set_elem: Introduce support for NFTNL_SET_ELEM_KEY_END (Phil Sutter) [1795223]
  - set: Add support for NFTA_SET_DESC_CONCAT attributes (Phil Sutter) [1795223]
  - include: resync nf_tables.h cache copy (Phil Sutter) [1795223]


author: Phil Sutter <psutter@redhat.com> [1.1.5-5.el8]
changelog:
  - set: expose nftnl_set_elem_nlmsg_build() (Phil Sutter) [2040754]
  - expr: dynset: release stateful expression from .free path (Phil Sutter) [2040478]
  - set_elem: missing set and build for NFTNL_SET_ELEM_EXPR (Phil Sutter) [2040478]


author: Tomas Hoger <thoger@redhat.com> - 0.1.13-11
changelog:
  - Add conditional for building with(out) gst010 / GStreamer 0.10 support.
  - Disable gst010 plugin by default.


author: Stefan Becker <chemobejk@gmail.com> - 0.1.14-3
changelog:
  - update to 0.1.14-70-gfb2f1f7 with alternate server fixes for SIPE
  - add autoreconf build step
  - remove examples subpackage as examples are no longer installed


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-4.20171128gitfb2f1f7
changelog:
  - enable make check again
  - make tests pass in Koji
  - disable test-new-dribble that sometimes hangs indefinitely
  - make tests compile on i686
  - make the package build on armv7hl
  - make the package build on Fedora 28
  - avoid build failure if gstreamer-plugins-base-devel is installed
  - move autoreconf invocation to %prep
  - use Name Version Release that explicitly identifies an SCM snapshot (#1541646)


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-6.20171128gitfb2f1f7
changelog:
  - temporarily make the upstream test-suite run on Intel arches only
  - disable test-send-recv, which fails in Koji


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-7.20180504git34d6044
changelog:
  - component: accept TURN in nice_component_verify_remote_candidate() (#1541646)
  - update to 0.1.14-85-g34d6044 (#1541646)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.3.0-4
changelog:
  - Python 2 binary package renamed to python2-libnl3
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release (rh #2062686)
  - Include OWE wireless security (rh #2060327)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057514)


author: Michal Ruprich <michalruprich@gmail.com> - 14:1.9.1-1
changelog:
  - Resolves: #1806422 - rebase libpcap to version 1.9.1
  - Resolves: #1743650 - [RFE] enable inbox support for sniffing offloaded (RDMA) traffic with tcpdump
  - Resolves: #1785330 - Invalid IPv4 addresses are accepted without reporting even a warning
  - Resolves: #1792208 - Resource exhaustion while PHB header length validation


author: Bastien Nocera <bnocera@redhat.com> - 1.22.0-6
changelog:
  + libpeas-1.22.0-6
  - Remove python2 loader, all GNOME apps using libpeas were ported to Python3
    when ported to GTK+ 3.x, and obsolete libpeas-loader-python
  - Resolves: #1559090


author: Michal Hlavinka <mhlavink@redhat.com> - 1.2.57-7
changelog:
  - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161345)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.5.30-9
changelog:
  - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161346)


author: Dan Winship <danw@redhat.com> - 0.4.15-5.1
changelog:
  - Drop python2 subpackage (#1559092)
  - Drop PAC runner based on the "pacrunner" package (#1569023)
  - Replace pacrunner-crash-fix patch with version from RHEL7
  - Drop kde subpackage (#1538147)


author: Carl Byington <carl@five-ten-sg.com> 0.6.71-1
changelog:
  - fedora python naming scheme changes
  - Zachary Travis - Add support for the OST 2013 format, and
    Content-Disposition filename key fix for outlook compatibility


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.6.71-4
changelog:
  - Python 2 binary package renamed to python2-libpst
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tomáš Mráz <tmraz@redhat.com> 1.4.4-1
changelog:
  - Translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer
  - pam_pwquality: Abort the retry loop if user requests it
  - Allow setting retry, enforce_for_root, and local_users_only options
    in the pwquality.conf config file


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1.4.4-3
changelog:
  - Resolves: rhbz#1919026 libpwquaily rpm requires cracklib to function but RPM missing requirement [updated]


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Nils Philippsen <nils@tiptoe.de> - 2.1.2-1
changelog:
  - version 2.1.2
  - tidy up spec file
  - use %license for license file
  - require same arch main from devel package


author: Caolán McNamara <caolanm@redhat.com> 3.2.99.1-2
changelog:
  - Related: rhbz#639945 pull in review changes
    + redland build-fix
    + replace awk script
    + validate .destop files


author: Caolán McNamara <caolanm@redhat.com> 3.2.99.2-1
changelog:
  - next LibreOffice milestone
  - drop integrated openoffice.org-2.3.0.ooo76649.httpencoding.patch
  - drop integrated workspace.dtardon03.patch
  - drop integrated openoffice.org-3.1.0.ooo61927.sw.ww6.unicodefontencoding.patch
  - drop integrated workspace.impress195.patch
  - drop integrated workspace.srb1.patch
  - drop integrated openoffice.org-3.2.0.ooo106502.svx.fixspelltimer.patch
  - drop integrated openoffice.org-3.3.0.ooo108246.svx.hide-sql-group-when-inactive.patch
  - drop integrated openoffice.org-3.2.0.ooo95369.sw.sortedobjs.patch
  - drop integrated openoffice.org-3.2.0.ooo110142.svx.safercolornames.patch
  - drop integrated openoffice.org-3.3.0.ooo111758.sd.xerror.patch
  - drop integrated openoffice.org-3.2.0.ooo111741.extras.malformed-xml-file.patch
  - drop integrated openoffice.org-3.3.0.ooo112059.sw.avoid-null-ptr-deref.patch
  - drop integrated openoffice.org-3.3.0.ooo100686.wizards.types.not.mediatypes.patch
  - drop integrated workspace.vcl113.patch
  - drop integrated openoffice.org-3.3.0.ooo112384.sw.export.doc.styledoesntexist.patch
  - drop integrated workspace.cmcfixes77.patch
  - drop integrated workspace.vcl114.patch
  - drop integrated openoffice.org-3.3.0.ooo106591.sal.tradcopy.patch
  - drop integrated workspace.vcl115.patch
  - drop integrated workspace.cmcfixes78.patch
  - drop integrated openoffice.org-3.3.0.ooo114012.sd.bada11ychain.patch
  - drop integrated workspace.cmcfixes79.patch
  - drop integrated openoffice.org-3.3.0.ooo114703.vcl.betterlocalize.font.patch
  - drop integrated openoffice.org-3.3.0.rh638185.editeng.cjkctlhtmlsizes.patch
  - drop integrated openoffice.org-3.3.0.rh637738.libgcrypt.addmutex.patch
  - drop integrated openoffice.org-3.2.0.rh632236.writerfilter.cleanup-cell-props.patch
  - drop workspace.gtk3.patch


author: Caolán McNamara <caolanm@redhat.com 3.2.99.3-1
changelog:
  - next Libreoffice milestone
  - drop integrated openoffice.org-2.0.1.rhXXXXXX.extensions.defaulttoevo2.patch
  - drop integrated openoffice.org-2.2.1.ooo7065.sw.titlepagedialog.patch
  - drop integrated openoffice.org-3.2.0.ooo108846.sfx2.qstartfixes.patch
  - drop integrated openoffice.org-3.3.0.ooo107490.cppu.lifecycle.patch
  - drop integrated libreoffice-buildfix.patch
  - drop integrated libreoffice-xdg632229.gnomeshell.patch
  - drop integrated 0001-strcpy-cannot-be-used-with-overlapping-src-and-dest.patch
  - drop integrated 0001-abort-doesn-t-gain-us-anything-here.patch
  - drop integrated 0001-latest-libX11-changed-header-guards.patch


author: Caolán McNamara <caolanm@redhat.com> 3.2.99.3-2
changelog:
  - Resolves: rhbz#610103 exit quickstarter when libs deleted
  - Resolves: rhbz#652695 release desktop in timeout
  - Resolves: rhbz#657541 don't crash during processing of auto. styles
    when joining paragraphs (dtardon)


author: Caolán McNamara <caolanm@redhat.com> 3.3.0.1-1
changelog:
  - release candidate 1
  - drop integrated qstart.dont-forceenabled-on-post-reg-restart.patch
  - drop integrated exit.quickstarter.when.deleted.patch
  - drop integrated 0001-destroydesktop.in.timeout.patch
  - drop integrated openoffice.org-3.3.0.rhbz657541.join-paragraphs.patch


author: Caolán McNamara <caolanm@redhat.com> 3.3.0.2-2
changelog:
  - Resolves: rhbz#663724 fdo32572-sc-dont-double-paste.patch
  - Resolves: rhbz#660342 Undo/Redo crash with postits


author: Caolán McNamara <caolanm@redhat.com> 3.3.0.3-1
changelog:
  - latest version
  - drop integrated 0001-Resoves-rhbz-663857-font-color-missing-C-FAQ-10.3-do.patch
  - drop integrated 0001-Avoid-double-paste-when-pasting-text-into-cell-comme.patch
  - drop integrated 0001-Resolves-rhbz-660342-Undo-Redo-crash-with-postits.patch
  - drop integrated 0001-Resolves-rhbz-666088-clean-up-search-cache-singleton.patch


author: Caolán McNamara <caolanm@redhat.com> 3.3.0.4-4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
  - Related: rhbz#610103 make this even more robust
  - Related: rhbz#672872 cancel gtk file dialog on terminate
  - Resolves: fdo#33509/ooo#62414 fix CTL spelling popup
  - Resolves: rhbz#673819 crash on changing position of header/footer object
  - Resolves: rhbz#670020 crash in slidesorting
  - Resolves: rhbz#676539 handle missing pWindows from xWindows
  - Resolves: rhbz#649310 don't crash deregistering diff. platform ext.
    (dtardon)
  - Resolves: rhbz#666440 don't pushback and process a corrupt extension


author: Caolán McNamara <caolanm@redhat.com> 3.3.1.1-1
changelog:
  - 3.3.1 rc1
  - drop integrated 0001-don-t-pushback-and-process-a-corrupt-extension.patch
  - drop integrated libreoffice-fdo32561.comphelper.patch
  - drop integrated 0001-Related-rhbz-610103-more-woes-on-rpm-upgrade-vs-rpm-.patch
  - drop integrated 0001-Resolves-rhbz-673819-crash-on-changing-position-of-d.patch
  - drop integrated 0001-rhbz-666440-don-t-pushback-and-process-a-corrupt-extension.patch


author: Caolán McNamara <caolanm@redhat.com> 3.3.1.2-3
changelog:
  - Resolves: rhbz#681159 crash in writer
  - Resolves: rhbz#672818 crash in writer
  - Resolves: fdo#33701 ensure node outlives path
  - Resolves: rhbz#681738 crash on writing config post-main


author: Caolán McNamara <caolanm@redhat.com> 3.3.1.2-8
changelog:
  - Related: rhbz#684477 make sure this is thread safe
  - Resolves: rhbz#684620 crash with NULL pTableBox


author: Caolán McNamara <caolanm@redhat.com> 3.3.2.2-1
changelog:
  - latest version
  - drop integrated 0001-Resolves-fdo-33701-ensure-node-outlives-path.patch
  - drop integrated 0001-valgrind-don-t-leave-an-evil-thread-running-after-ma.patch


author: Caolán McNamara <caolanm@redhat.com> 3.3.99.1-1
changelog:
  - 3.4 beta1
  - drop openoffice.org-1.9.123.ooo53397.prelinkoptimize.desktop.patch
    in favour of ooosplash
  - drop openoffice.org-2.2.0.gccXXXXX.solenv.javaregistration.patch
    because components are passively registered now
  - drop integrated openoffice.org-3.1.0.ooo102061.sc.cellanchoring.patch
  - drop integrated turn-script-providers-into-extensions.patch
  - drop integrated 0001-tidy-this-up-and-don-t-bail-out-on-mislength-records.patch
  - drop integrated 0001-free-ctxt-after-taking-lastError-details.patch
  - drop integrated 0001-Removed-suspect-hack.-Cursor-on-post-it-now-scrolls-.patch
  - drop integrated libreoffice-gcc4.6.0.patch
  - drop integrated 0001-fexceptions-fexceptions.patch
  - drop integrated 0001-Related-rhbz-672872-cancel-gtk-file-dialog-on-deskto.patch
  - drop vbahelper.visibility.patch
  - drop integrated 0001-Resolves-fdo-33509-i62414-out-by-one-breaks-CTL-spel.patch
  - drop integrated 0001-Resolves-rhbz-670020-crash-in-slidesorting.patch
  - drop integrated 0001-Resolves-rhbz-676539-handle-missing-pWindows-from-xW.patch
  - drop integrated 0001-Resolves-fdo-33750-i94623-use-optimal-border-width-w.patch
  - drop integrated 0001-rhbz-649310-don-t-crash-deregistering-diff.-platform.patch
  - drop integrated 0001-Resolves-rhbz-674330-dereference-of-NULL-mpBase.patch
  - drop integrated 0001-rhbz-678284-Get-correct-current-position-when-shift-page-up-and-.patch
  - drop integrated 0001-Resolves-rhbz-681159-bandaid-for-crash.patch
  - drop integrated 0001-Resolves-rhbz-672818-bandaid-for-crash-in-SwTxtNode-.patch
  - drop integrated 0001-install-high-resolution-icons.patch
  - drop integrated 0001-Resolves-rhbz-682716-pa-IN-isn-t-handled-by-fontconf.patch
  - drop integrated 0001-Related-rhbz-684477-make-sure-this-is-thread-safe.patch
  - drop integrated 0001-Resolves-rhbz-682621-better-resizing-of-overtall-gly.patch
  - drop integrated 0001-Resolves-rhbz-684620-crash-with-NULL-pTableBox.patch
  - drop integrated libreoffice-fdo33947.sd.print.crash.patch
  - drop integrated 0001-add-cairo_ft_font_face_create_for_pattern-wrapper.patch
  - drop integrated 0001-Related-rhbz-680460-reorganize-this-to-make-it-inher.patch
  - drop integrated 0001-Related-rhbz-680460-don-t-bother-with-an-interim-Fon.patch
  - drop integrated 0001-Resolves-rhbz-680460-honour-lcdfilter-subpixeling-et.patch
  - drop integrated 0001-Cut-Gordian-Knot-of-who-owns-the-font-options.patch
  - drop integrated 0001-beware-of-invalidated-iterator.patch
  - drop integrated rhbz680766.fix-mdds-crash.patch
  - drop integrated 0001-Resolves-rhbz-684580-X-and-strike-through-escapes-ra.patch
  - drop integrated 0001-set-mime-types-on-flat-xml-filters.patch
  - drop integrated 0001-add-flat-xml-types-to-.desktop-files-etc.patch
  - drop integrated libreoffice-fdo31271.icu.patch


author: Caolán McNamara <caolanm@redhat.com> 3.3.99.1-2
changelog:
  - Resolves: rhbz#695509 crash in RefreshDocumentLB
  - bubble down configure test findings on visibility


author: David Tardon <dtardon@redhat.com> 3.3.99.4-1
changelog:
  - 3.4 beta4
  - drop integrated 0001-Removed-duplicate-code-block-mis-merge-prolly.patch
  - drop integrated 7de0b88ce2dd932915894385b54be1897d5ee053.zip


author: Caolán McNamara <caolanm@redhat.com> - 3.4.0.2-4
changelog:
  - Resolves: rhbz#710556 't crash on missing graphics .pptx export
  - Resolves: rhbz#652604 better survive exceptions in autorecovery


author: Caolán McNamara <caolanm@redhat.com> - 3.4.0.2-5
changelog:
  - Resolves: rhbz#699909 crash in export of .doc in lcl_getField
  - Resolves: fdo#37584 Make a real copy of the text
  - Resolves: rhbz#709503/fdo#37668 bitwise operations on signed values


author: David Tardon <dtardon@redhat.com> - 3.4.1.1-1
changelog:
  - 3.4.1 RC1
  - drop integrated 0001-Resolves-rhbz-707317-avoid-crash-in-getRowSpan.patch
  - drop integrated 0001-Resolves-rhbz-710004-band-aid-for-immediate-crash-in.patch
  - drop integrated 0001-Resolves-rhbz-710556-don-t-crash-on-missing-graphics.patch
  - drop integrated 0001-Resolves-rhbz-699909-crash-in-export-of-.doc-in-lcl_.patch
  - drop integrated 0001-fdo-37584-Make-a-real-copy-of-the-text-where-to-coun.patch
  - drop integrated 0001-Resolves-fdo-37668-bitwise-operations-on-signed-numb.patch


author: Caolán McNamara <caolanm@redhat.com> - 3.4.1.1-4
changelog:
  - Related: rhbz#711087 band aid for crash in sc undo
  - Resolves: rhbz#714338 add a metapackage to install standard bits


author: David Tardon <dtardon@redhat.com> - 3.4.1.1-5
changelog:
  - Resolves: rhbz#714781 add Persian langpack
  - Resolves: rhbz#667082 do not crash importing section containing just
    an empty paragraph


author: David Tardon <dtardon@redhat.com> - 3.4.2.1-1
changelog:
  - 3.4.2 rc1
  - drop 0001-bad-merge-fix-to-enable-extensions-to-build-again.patch
  - drop 0001-fix-regression-in-SvGlobalName-operator.patch


author: Caolán McNamara <caolanm@redhat.com> - 3.4.2.1-2
changelog:
  - Rebuild (poppler-0.17.0), add libreoffice-poppler-0.17.0.patch
    seeing as the API changed for some reason or other


author: Caolán McNamara <caolanm@redhat.com> - 3.4.3.2-2
changelog:
  - Resolves: rhbz#733564 graphite2 now packaged into fedora
  - Related: fdo#37195 migrationoo3 not registered


author: Caolán McNamara <caolanm@redhat.com> - 3.4.3.2-11
changelog:
  - Resolves: rhbz#738133 fix bn discard string
  - Resolves: fdo#35513 avoid crash while processing incorrect print range


author: Caolán McNamara <caolanm@redhat.com> - 3.4.4.2-3
changelog:
  - Related: fdo#42534 0001-Related-i58612-don-t-crash-anyway.patch
  - Resolves: fdo#42749 KDE oxygen theme and scrollbars


author: Caolán McNamara <caolanm@redhat.com> - 3.4.4.2-6
changelog:
  - Resolves: rhbz#761009 IFSD_Equal is asymmetrical
  - Resolves: rhbz#767708 write to mmap'ed file w/o disk space: SIGBUS


author: David Tardon <dtardon@redhat.com> - 3.4.99.1-1
changelog:
  - 3.5.0 beta1
  - drop integrated 0001-Related-fdo-37195-migrationoo3-not-registered.patch
  - drop integrated 0001-Related-i58612-don-t-crash-anyway.patch
  - drop integrated 0001-Related-rhbz-652604-better-survive-exceptions-thrown.patch
  - drop integrated 0001-Related-rhbz-702833-addEventListener-without-removeE.patch
  - drop integrated 0001-Related-rhbz-711087-band-aid.patch
  - drop integrated 0001-Related-rhbz-718976-crash-in-SwTxtSizeInfo-GetMultiC.patch
  - drop integrated 0001-Related-rhbz-730225-avoid-segv-in-ld-this-was-set-to.patch
  - drop integrated 0001-Related-rhbz-753201-fedora-ant-java-1.5.0-gcj-won-t-.patch
  - drop integrated 0001-Resolves-fdo-32665-handle-that-FreeSerif-lacks-some-.patch
  - drop integrated 0001-Resolves-rhbz-693265-fix-crash-from-unhandled-except.patch
  - drop integrated 0001-Resolves-rhbz-695509-crash-in-RefreshDocumentLB.patch
  - drop integrated 0001-Resolves-rhbz-713154-pdf-export-dialog-too-tall-to-f.patch
  - drop integrated 0001-Resolves-rhbz-715549-use-fontconfig-s-detected-forma.patch
  - drop integrated 0001-Resolves-rhbz-738255-avoid-crash-on-NULL-pointer.patch
  - drop integrated 0001-Resolves-rhbz-751290-KDE-black-on-dark-tooltips.patch
  - drop integrated 0001-add-Oracle-Java-1.7.0-recognition.patch
  - drop integrated 0001-avoid-using-com.sun.org-apis.patch
  - drop integrated 0001-bubble-down-configure-test-findings-on-visibility.patch
  - drop integrated 0001-fix-horizontal-scrollbars-with-KDE-oxygen-style-bnc-.patch
  - drop integrated 0001-gtk3-fix-cairo-canvas-crash-for-non-X-or-svp-backend.patch
  - drop integrated 0001-helgrind-Related-rhbz-655686-get-order-of-shutdown-c.patch
  - drop integrated 0001-rhbz-667082-do-not-crash-importing-section-containin.patch
  - drop integrated 0001-rhbz-702635-set-correct-page-number-when-exporting-s.patch
  - drop integrated Backport-reading-AES-encrypted-ODF-1.2-documents.patch
  - drop integrated gdb-pretty-printers.patch
  - drop integrated kde4configure.patch
  - drop integrated libreoffice-ppc64.patch
  - drop integrated openoffice.org-3.3.0.ooo108637.sfx2.uisavedir.patch
  - drop integrated openoffice.org-3.3.0.ooo113273.desktop.resolvelinks.patch
  - drop integrated vbahelper.visibility.patch
  - drop libreoffice-testtools subpackage, because testtool has been
    removed by upstream


author: David Tardon <dtardon@redhat.com> - 3.4.99.2-1
changelog:
  - 3.5.0 beta2
  - drop integrated 0001-Resolves-rhbz-761009-IFSD_Equal-is-asymmetrical.patch
  - drop integrated 0001-Resolves-rhbz-767708-avoid-SIGBUS-writing-to-overcom.patch
  - drop integrated 0001-force-gbuild-stage-for-CustomTargets.patch
  - drop integrated 0001-these-translations-do-already-exist-in-translations-.patch
  - drop integrated 0001-Fix-typo-and-clean-up.patch
  - use system mysql-connector-c++


author: David Tardon <dtardon@redhat.com> - 3.4.99.3-1
changelog:
  - 3.5.0 beta3
  - drop integrated 0001-fix-syntactic-error.patch
  - drop integrated 0001-gcc-trunk-fix-error-unable-to-find-string-literal-op.patch
  - drop integrated 0001-gcc-trunk-avoid-confusion.patch
  - drop integrated 0001-workaround-for-LO-namespace-pollution-breaking-KDE4-.patch
  - drop integrated 0001-smath-does-not-handle-accents-in-MathML.patch
  - Resolves: rhbz#533318 smath does not handle accents in MathML
  - Resolves: rhbz#771108 English menu in writer despite installation of
    libreoffice-langpack-de


author: David Tardon <dtardon@redhat.com> - 3.5.0.1-1
changelog:
  - 3.5.0 rc1
  - drop integrated 0001-workaround-internal-compiler-error-with-gcc-4.7.patch
  - drop integrated 0001-fix-for-gcc-4.7-C-11-these-are-not-string-literal-op.patch
  - drop integrated 0001-fix-for-gcc-4.7-C-11-this-is-not-string-literal-oper.patch
  - drop integrated 0001-Revert-fast_merge-fix-mis-merge-of-first-module-s-st.patch
  - drop integrated 0001-fix-writing-of-strings-from-the-first-module.patch
  - drop integrated 0001-refactor-slightly-to-avoid-link-problems-with-gcc-4..patch


author: David Tardon <dtardon@redhat.com> - 3.5.0.3-1
changelog:
  - 3.5.0 rc3
  - Resolves: rhbz#786328 add nlpsolver subpackage
  - split legacy binary filters into subpackage


author: Stephan Bergmann <sbergman@redhat.com> - 3.5.0.3-2
changelog:
  - junit4 -> junit
  - Resolves: rhbz#788042 skip splashscreen with quickstarter
  - with split binfilter we need fix for fdo#43644


author: Caolán McNamara <caolanm@redhat.com> - 3.5.0.3-4
changelog:
  - ensure gdb .py files have the same timstamps so that multilib
    .pyc's and .pyo's have the same content (timestamp in binary cache)


author: David Tardon <dtardon@redhat.com> - 3.5.1.1-1
changelog:
  - 3.5.1 rc1
  - drop 0001-Resolves-fdo-43644-survive-registered-but-unavailabl.patch
  - drop 0001-Resolves-rhbz-789622-Adapt-SDK-to-changed-paths-in-L.patch
  - drop 0001-Fix-fdo-45177-avoid-linked-undo-for-the-while.patch
  - drop 0001-Fix-some-apparent-misuses-of-RTL_CONSTASCII_USTRINGP.patch
  - drop binfilter-Fix-some-apparent-misuses-of-RTL_CONSTASCII_USTRINGP.patch
  - Resolves: fdo#45177 avoid linked undo crash
  - Fix some apparent misuses of RTL_CONSTASCII_USTRINGPARAM (cherry-picked from
    upstream libreoffice-3-5 branch)


author: Caolán McNamara <caolanm@redhat.com> - 3.5.1.1-2
changelog:
  - Resolves: rhbz#788045 swriter --help doesn't show help
  - Resolves: rhbz#798667 missing .desktop icons


author: Caolán McNamara <caolanm@redhat.com> - 3.5.1.1-3
changelog:
  - Resolves: rhbz#799628 crash with chewing IM with g3g
  - Resolves: rhbz#799525 put flat odf mimetypes into xsltfilter.desktop
  - Resolves: rhbz#800272 complain about unknown commandline options


author: David Tardon <dtardon@redhat.com> - 3.5.3.1-1
changelog:
  - 3.5.3 rc1
  - drop integrated 0001-Introduced-SystemShellExecuteFlags-URIS_ONLY.patch
  - drop integrated 0001-Simplify-code-and-use-proper-register-names-for-linu.patch
  - drop integrated 0001-resolved-rhbz-813280-the-current-document-is-not-alw.patch


author: Caolán McNamara <caolanm@redhat.com> - 3.5.3.2-3
changelog:
  - Resolves: rhbz#805743 a11y crash in impress/draw
  - Resolves: rhbz#813202 opengl slide transitions still a bit
    problematic in Fedora 17


author: David Tardon <dtardon@redhat.com> - 3.5.3.2-4
changelog:
  - Resolves: rhbz#820439 KDE export dialog broken for most formats
  - Resolves: fdo#49365 Libreoffice fails to start on second screen with
    gtk vcl plugin
  - Resolves: rhbz#809019 Impress thinks a machine with 2 monitors in
    clone mode is multihead


author: David Tardon <dtardon@redhat.com> - 3.5.4.1-1
changelog:
  - 3.5.4 rc1
  - drop integrated 0001-do-not-prepend-n-twice-it-confuses-KFileDialog-rhbz-.patch
  - drop integrated 0001-incrementing-index-twice-in-one-run-seems-wrong.patch
  - drop integrated 0001-fdo-49365-correctly-map-monitor-index-back-to-screen.patch
  - drop integrated 0001-rhbz-809019-count-mirrored-monitors-as-one.patch


author: David Tardon <dtardon@redhat.com> - 3.5.5.1-1
changelog:
  - 3.5.5 rc1
  - drop integrated 0001-make-hsqldb-build-with-java-1.7.patch
  - drop integrated 0001-Related-rhbz-799628-crash-with-chewing-IM-with-g3g.patch
  - drop integrated 0001-silence-SolarMutex-not-locked-spew.patch
  - drop integrated 0001-gcc-trunk-fix-unable-to-find-string-literal-operator.patch
  - drop integrated 0001-ppc-yyinput-returns-a-int-truncating-to-unsigned-cha.patch
  - drop integrated 0001-Resolves-rhbz-826609-rhbz-820554-fix-smoketest-on-pp.patch


author: David Tardon <dtardon@redhat.com> - 3.6.0.0-1
changelog:
  - 3.6.0 beta2
  - drop integrated 0001-move-binfilter-mime-types-into-extra-.desktop-file.patch
  - drop integrated 0001-Resolves-rhbz-788042-skip-splashscreen-with-quicksta.patch
  - drop integrated libreoffice-ensure-non-broken-xml-tree.patch
  - drop integrated 0001-preserve-timestamps-for-.py-files.patch
  - drop integrated 0001-Resolves-rhbz-788045-swriter-help-etc-doesn-t-show-h.patch
  - drop integrated 0001-Resolves-rhbz-799525-put-flat-odf-mimetypes-in-xsltf.patch
  - drop integrated 0001-Resolves-rhbz-800272-complain-about-unknown-command-.patch
  - drop integrated 0001-Resolves-rhbz-806663-SlideshowImpl-can-outlive-SdMod.patch
  - drop integrated 0001-desktop-do-not-complain-about-soffice-command-line-o.patch
  - drop integrated 0001-Resolves-fdo-48096-torn-off-popups-trigger-keyboard-.patch
  - drop integrated 0001-fdo-38088-better-CSV-import-default-separators.patch
  - drop integrated 0001-save-register-arguments-first.patch
  - drop integrated 0001-do-not-let-gcc-use-registers-we-are-setting-ourselve.patch
  - drop integrated 0001-wrong-types-used-here-breaks-64bit-bigendian.patch
  - drop integrated 0001-Resolves-rhbz-805743-a11y-call-doShow-after-we-have-.patch
  - drop integrated 0001-Resolves-fdo-49849-implement-Unicode-6.1-hebrew-line.patch
  - drop integrated 0001-use-ure-instead-of-ure-link.patch
  - drop broken 0001-fix-setting-of-paper-tray-from-print-dialog-fdo-4393.patch


author: Caolán McNamara <caolanm@redhat.com> - 1:3.6.1.1-2
changelog:
  - Resolves: rhbz#846775 Clipboard must be disposed before selection
  - Resolves: rhbz#842292 crash in scrolling multiselection in draw


author: Caolán McNamara <caolanm@redhat.com> - 1:3.6.1.2-2
changelog:
  - Related: rhbz#850709 hunspell en-US available standalone so
    make English langpack require hunspell-en and core just
    bare bones hunspell-en-US


author: Caolán McNamara <caolanm@redhat.com> - 1:3.6.3.1-1
changelog:
  - 3.6.3 rc1
  - drop integrated 0001-Resolves-rhbz-855972-crash-on-switching-to-outline-v.patch
  - drop integrated 0001-fdo-52022-Simple-LargeControlPoints-actually-can-hav.patch
  - drop integrated 0001-fdo-46071-Do-not-hide-windows-based-on-nil-Visible-p.patch


author: Caolán McNamara <caolanm@redhat.com> - 1:4.0.0.3-5
changelog:
  - make evolution 3.6 work with address book
  - Resolves: rhbz#910176 cannot select directory with gtk folder picker
  - fixes for building against Boost 1.53.0


author: Eike Rathke <erack@redhat.com> - 1:4.0.0.3-8
changelog:
  - do not access vector elements beyond size, rhbz#847519 related
  - Resolves: rhbz#742780 let make OPT_FLAGS=... override SDK flags
  - Resolves: rhbz#907933 crash on removing second last para


author: Caolán McNamara <caolanm@redhat.com> - 1:4.0.1.2-2
changelog:
  - Related: rhbz#902884 check for NULL GetSelectedMasterPage
  - Resolves: fdo#61241 force area page to size itself
  - Resolves: fdo#61656 use order and orientation combobox
  - Resolves: fdo#56031 RSID attr changes drop content changes


author: Caolán McNamara <caolanm@redhat.com> - 1:4.1.0.0-5.beta1
changelog:
  - Resolves: rhbz#968892 block entire grapheme together for glyph fallback
  - Related: rhbz#968892 discard impossible languages for glyph fallback


author: David Tardon <dtardon@redhat.com> - 1:4.1.0.0-9.beta2
changelog:
  - Resolves: rhbz#971321 failing tests on ppc and s390
  - Resolves: rhbz#974062 incorrect rendering of text in outline blocks in
    Impress


author: Stephan Bergmann <sbergman@redhat.com> - 1:4.1.0.4-5
changelog:
  - Resolves: rhbz#989246 Honor user's JavaDriverClass override in mysql driver
  - Resolves: fdo#67045 fix several nasty screen selection issues


author: David Tardon <dtardon@redhat.com> - 1:4.1.1.2-1
changelog:
  - 4.1.1 rc2
  - Related: rhbz#895690 Always try to do a mount when opening a file via GIO
  - Resolves: rhbz#998136 wrong index to gWidgetData
  - Resolves: rhbz#998046 store last size/position of the base windows


author: Caolán McNamara <caolanm@redhat.com> - 1:4.1.2.3-2
changelog:
  - Resolves: rhbz#1013480 crash in EditLineList::operator[]
  - Resolves: rhbz#1014010 crash on start up
  - Resolves: rhbz#1013844 encrypted OOo 1.0 files don't reopen


author: Caolán McNamara <caolanm@redhat.com> - 1:4.1.2.3-3
changelog:
  - Resolves: rhbz#1015281 crash on clicking custom animation
  - Resolves: rhbz#996162 crash with no bullet font


author: Caolán McNamara <caolanm@redhat.com> - 1:4.1.2.3-4
changelog:
  - Resolves: rhbz#1001768: fix various a11y deadlocks and crashes
  - Resolves: rhbz#1016022 fix cut from impress and paste to writer
  - Resolves: rhbz#1003179 fix AUTOFMT related crashes in Writer Undo


author: Caolán McNamara <caolanm@redhat.com> - 1:4.1.3.1-2
changelog:
  - Resolves: rhbz#1020712 wrong default CTL font shown in editengine
  - Resolves: rhbz#919070 display -1 means span all screens


author: Stephan Bergmann <sbergman@redhat.com> - 1:4.1.3.2-2
changelog:
  - Resolves: fdo#67725 unoidl::AggregatingCursor must wrap modules for aggregation
  - Resolves: rhbz#1021915 force menubar menus to be up/down only
  - Resolves: rhbz#1025201 Incorrect rendering of Devanagari short i


author: Stephan Bergmann <sbergman@redhat.com> - 1:4.1.3.2-5
changelog:
  - Resolves: rhbz#1031989 Accept --pt in addition to deprecated -pt
  - Related: rhbz#1014990 valgrind reports uninitialized variables


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.0.0-2.beta2
changelog:
  - update to 4.2.0 beta2
  - Related: rhbz#1032774 bodge around reported NULL
  - Resolves: rhbz#1035092 no shortcut key for Italian 'Tools' menu
  - Resolves: rhbz#912529 Kerkis SmallCaps shown instead of Kerkis Regular
  - Resolves: rhbz#1038189 refresh printer list when print dialog launched
  - openssl no longer required to build


author: David Tardon <dtardon@redhat.com> - 1:4.2.0.4-2
changelog:
  - split LibreLogo into a separate subpackage
  - create a metapackage depending on all subpackages containing filters,
    for use of packages like unoconv


author: David Tardon <dtardon@redhat.com> - 1:4.2.0.4-3
changelog:
  - Resolves: rhbz#1017379 libreoffice impress imports animated motion paths
    incorrectly from powerpoint
  - Resolves: fdo#33852 Custom animation (Motionpath Left) isn't being
    imported correctly from .ppt


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.2.1-5
changelog:
  - Related: rhbz#1065807 wizards should find the right wizards subdir
    of Template_internal, who knew this stuff was so fragile


author: Michael Stahl <mstahl@redhat.com> - 1:4.2.2.1-6
changelog:
  - Resolves: rhbz#988516: DOCX import: fix context stack when importing header
  - Resolves: rhbz#1072553: Fix deselection problems of template view
  - Resolves: rhbz#1072607: fix crash in SvxRuler::MouseMove()
  - Resolves: rhbz#1043551: sw: avoid division-by-0 in Text Grid painting code
  - RTF import: import field parameters
  - RTF import: fix spurious page breaks at doc end


author: David Tardon <dtardon@redhat.com> - 1:4.2.3.2-2
changelog:
  - Resolves: rhbz#1080196 mdds/multi_type_vector_itr.hpp update_node():
    soffice.bin killed by SIGSEGV


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.3.3-2
changelog:
  - Resolves: rhbz#1081176 don't jump to cursor pos when we don't want to
  - Related: rhbz#1085916 kde startup woes


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.1-2
changelog:
  - every 2nd print job is incorrectly flagged as failed
  - Related: rhbz#1088625 PresenterPaintManager seen as NULL


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.1-3
changelog:
  - sometimes tables in impress don't resize when adding rows
  - Resolves: fdo#71423 crash while editing Impress tables


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.1-6
changelog:
  - Resolves: fdo#37130 use 10pt Default style font for comments
  - Resolves: fdo#60040 crash after undoing master page
  - vertically center printout when including comments


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.2-6
changelog:
  - center current slide after changing zoom
  - add a status bar icon to fit slide to window
  - Related: fdo#50697 reset the cache timeout on GetGraphic


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.2-9
changelog:
  - Resolves: rhbz#1096486 avoid access to nonexisting parent
  - Resolves: rhbz#1096295 hard to distinguish slides in slide pane


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.2-14
changelog:
  - render smart-art with a vector format so it can be scaled nicely
  - fix leak on pasting metafiles into office
  - fix leak on pasting draw items into office
  - fix another leak on scaling metric items


author: David Tardon <dtardon@redhat.com> - 1:4.3.0.0-9.beta2
changelog:
  - Resolves: rhbz#1105376 FlatODF import/export does not work unless
    libreoffice-xsltfilter is installed


author: Caolán McNamara <caolanm@redhat.com> - 1:4.3.1.1-6
changelog:
  - Resolves: rhbz#1131425 move libjawt-using office bean into a subpackage
  - Resolves: rhbz#1125588 port LibreOffice to ppc64le


author: Caolán McNamara <caolanm@redhat.com> - 1:4.3.2.2-2
changelog:
  - make brochure printing of impress/draw work out of the box
  - Resolves: rhbz#1133863 fix looping layout


author: Caolán McNamara <caolanm@redhat.com> - 1:4.3.3.2-4
changelog:
  - Resolves: fdo#60712 Inherits cell styles in inserting rows/columns
  - implement toggling off removeable master elements with delete
  - Resolves: fdo#78151 change underlying style on toggling bullets on/off in master view


author: Caolán McNamara <caolanm@redhat.com> - 1:4.3.4.1-5
changelog:
  - Resolves: rhbz#1164551 we want to ensure that a libjvm.so is available
    but we have no firm interest in which one that is


author: David Tardon <dtardon@redhat.com> - 1:4.4.0.2-2
changelog:
  - Resolves: rhbz#1180114 writerfilter: don't crash on w:customXmlDelRangeStart
    etc.
  - Resolves: rhbz#1175027 fix life cycle of SwConnectionDisposedListener_Impl


author: Stephan Bergmann <sbergman@redhat.com> - 1:4.4.2.2-3
changelog:
  - Resolves: rhbz#1197614 crash when updating extension
  - Resolves: rhbz#1134285 redundant user/password request for WebDAV access


author: Bastien Nocera <bnocera@redhat.com> 1:5.1.0.1-2
changelog:
  - Add GLSL files missing from the package
  - Split up inclusion of latin Serbian files to avoid duplicate listing


author: David Tardon <dtardon@redhat.com> - 1:5.1.0.3-1
changelog:
  - update to 5.1.0 rc3
  - Resolves: rhbz#1168757 Selecting multiple slides is not reflected in Print
    dialog


author: David Tardon <dtardon@redhat.com> - 1:5.1.2.1-1
changelog:
  - update to 5.1.2 rc1
  - split VCL plugins into subpackages
  - rename libreoffice-kde to libreoffice-kde4
  - only recommend fonts
  - remove hard dependency on English spell checker and auto-correction
    rules
  - disable quickstarter
  - move icons and other system-integration stuff to a noarch subpackage
  - disable browser plugin in preparation for its removal in 5.2


author: David Tardon <dtardon@redhat.com> - 1:5.2.0.1-1
changelog:
  - update to 5.1.0 rc1
  - Resolves: rhbz#1343752 wrong radiobutton and checkbutton behavior in
    "view" menu
  - Resolves: rhbz#1349261 do not pull in all variants of english dicts


author: David Tardon <dtardon@redhat.com> - 1:5.2.1.2-2
changelog:
  - Resolves: rhbz#1247399 install public jars according to packaging guidelines
  - Resolves: rhbz#1363874 install LibreOfficeKit headers


author: Caolán McNamara <caolanm@redhat.com> - 1:5.2.2.1-3
changelog:
  - Related: rhbz#1373933 do less on style-updated
  - Related: rhbz#1353069 don't clear XATTR_FILL from in use styles


author: David Tardon <dtardon@redhat.com> - 1:6.0.0.0-1.alpha1
changelog:
  - update to 6.0.0 alpha1
  - update location of appdata files
  - use weak dependencies
  - mark bundled packages


author: Michael Stahl <mstahl@fedoraproject.org> - 1:6.0.0.2-3
changelog:
  - add lots of .abignore files to restrict abipkgdiff to shared objects
    that actually have a stable ABI


author: Stephan Bergmann <sbergman@redhat.com> - 1:6.0.3.2-4
changelog:
  - Resolves: rhbz#1568579 LibreOffice --headless zombie process
  - Related: rhbz#1569331 end should be in terms of unicode chars, not bytes


author: Rex Dieter <rdieter@fedoraproject.org> - 1:6.1.2-6
changelog:
  - -kf5 subpackage: include support for --enable-gtk3-kde5 (#1647233)
  - -kde4: adjust summary/description s/KDE/KDE4/


author: Caolán McNamara <caolanm@redhat.com> - 1:6.1.4.2-1
changelog:
  - latest version
  - Resolves: rhbz#1662616 crash in macro dialog editor
  - Resolves: rhbz#1662512 a11y freeze in calc


author: Caolán McNamara <caolanm@redhat.com> - 1:6.2.3.2-4
changelog:
  - Resolves: rhbz#1712823 crash in extended tooltips over pattern editor
  - Resolves: rhbz#1711143 calc not rounding time calculation correctly


author: Caolán McNamara <caolanm@redhat.com> - 1:6.2.3.2-5
changelog:
  - Resolves: rhbz#1713827 protect against null ViewShell
  - Resolves: rhbz#1713908 stop disabling firebird-sdbc


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.5.2-3
changelog:
  - Related: rhbz#1859588 workaround vcldemo ICE
  - add py_byte_compile call for
    https://fedoraproject.org/wiki/Changes/No_more_automagic_Python_bytecompilation_phase_3


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.5.2-6
changelog:
  - Resolves: rhbz#1745771
    + drop the GTK3-KF5 VCL plugin (formerly subpackage kf5)
    + rename the current -kde5 subpackage (the Qt5/KF5 VCL plugin) to -kf5


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.0.3-1
changelog:
  - bump to 7.1.0 series
  - drop integrated 0001-rhbz-1870501-crash-on-reexport-of-odg.patch
  - drop integrated 0001-rhbz-1882616-move-cursor-one-step-at-a-time-in-the-d.patch
  - drop integrated 0001-export-HYPERLINK-target-in-html-clipboard-export.patch
  - drop integrated 0001-gcc11.patch
  - drop integrated 0001-disable-tests-that-don-t-work-without-pdfium.patch
  - drop integrated 0001-rhbz-1913828-SfxViewFrame-Current-can-return-null.patch
  - drop integrated 0001-Upgrade-liborcus-to-0.16.0.patch


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.3.2-1
changelog:
  - Resolves: rhbz#1962262 Get rid of apache-commons-logging
  - Impress crashes on switch from commenting to slide sorter
  - fix assertion on avmedia volumne control
  - build libreoffice-langpack-fy for libreoffice
  - Adapt to "libstdc++: Implement LWG 1203 for rvalue iostreams"
  - Adapt to hamcrest-2.2-3.fc35.noarch.rpm
  - gtk3: workaround missing gdk_threads_enter calls in gio errordialog callback


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.4.2-3
changelog:
  - rhbz#1977653 drop unneeded bsh build-dependency
  - Remove unused DOCTYPE from odk/examples xcu file
  - drop bsh buildrequires in rhel


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.5.2-5
changelog:
  - replace use of ucpp with gcc cpp
  - Resolves: tdf#132739 two html style tags where there should be just one


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Tomas Popela <tpopela@redhat.com> - 1:7.1.8.1-15.1
changelog:
  - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
    the spec has
  - Resolves: RHEL-176576


author: yangxiaoxuan <yangxiaoxuan@openanolis.org> - 1:7.1.8.1-15.0.1.1
changelog:
  - Add configuration file and vemdor for Anolis OS
  - Fit build on Anolis OS 8 (geliwei@openanolis.org)
  - Remove loongarch64 arch (wb-zh951434@alibaba-inc.com)
  - skip failed tests for anolis (rb01097748@alibaba-inc.com)
  - remove Esperanto (rb01097748@alibaba-inc.com)


author: Tomas Popela <tpopela@redhat.com> - 1:7.1.8.1-15.2
changelog:
  - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
    formula compilation
  - Resolves: RHEL-186062


author: yangxiaoxuan <yangxiaoxuan@openanolis.org> 1:7.1.8.1-15.0.1
changelog:
  - Add configuration file and vemdor for Anolis OS
  - Fit build on Anolis OS 8
  - Remove loongarch64 arch
  - skip failed tests for anolis
  - remove Esperanto


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Fix the key string parsing in url_substitution
  - When zchunk enabled and not using HTTP/S protocol, download the whole file (RhBug:1886706)
  - Add an option LRO_SSLVERIFYSTATUS to check TLS certificate revocation status (using OCSP stapling) (RhBug:1814383)
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for working with certificates used with proxy
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.2-1
changelog:
  - Update to 1.14.2
  - Reduce time to load metadata
  - Fix resource leaks and memory leaks
  - Remove build dependency on python3-flask


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.2-4
changelog:
  - Fix termination of va_list in lr_metadatatarget_append_error()
  - Detailed error message when using non-existing TMPDIR


author: Parag Nemade <paragn AT fedoraproject DOT org> - 1.1.3-9
changelog:
  - Fix bogus date in %changelog
  - ant-nodeps is dropped from ant-1.9.0-2 build in rawhide
  - Drop buildroot, %clean, %defattr and removal of buildroot in %install


author: Sergio Durigan Junior <sergiodj@redhat.com> - 0.0.4-12
changelog:
  - Resolves: rhbz#1786466 Do not use %{?_isa} for GDB dependency. Recommend
    GDB, instead of requiring it.


author: Nils Philippsen <nils@tiptoe.de> - 0.1.9-1
changelog:
  - version 0.1.9
  - change license to BSD (2-clause)
  - require gcc, alsa-lib-devel, fftw-devel for building


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10
changelog:
  - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function
    i2alaw_array in alaw (#1673085)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-11
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985028)


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.0.10-0.fdr.1
changelog:
  - Update to 1.0.10, update URLs, include ALSA support.
  - Disable dependency tracking to speed up the build.
  - Add missing ldconfig invocations.
  - Make -devel require pkgconfig.
  - Include developer docs in -devel.
  - Provide -octave in main package, own more related dirs.
  - Bring specfile up to date with current spec templates.


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-2
changelog:
  - Adding FLAC support to libsndfile courtesy of gentoo, #237575
  - Fixing CVE-2007-4974. Thanks to the gentoo people for the patch, #296221


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-6
changelog:
  - Removed spurious #endif in the libsndfile.h wrapper. Thx to Edward
    Sheldrake for finding it. Fixes #468508.
  - Fix build for autoconf-2.63


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.0.20-3
changelog:
  - Add FLAC/Ogg/Vorbis support (BR: libvorbis-devel)
  - Make build verbose
  - Remove rpath
  - Fix ChangeLog encoding
  - Move the big Changelog to the devel package


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.0.21-1
changelog:
  - Update to 10.0.21
  - Do not include the static library in the package (RHBZ#556074)
  - Remove BR on jack since sndfile-jackplay is not provided anymore


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0.25-2
changelog:
  - Patch to use system libgsm instead of a bundled copy.
  - Make main package dep in -devel ISA qualified.
  - Drop -octave Provides (not actually built with octave > 3.0).
  - Don't build throwaway static lib.
  - Run test suite during build.


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-14
changelog:
  - fix CVE-2014-9496: 2 buffer overruns in sd2_parse_rsrc_fork (#1178840)
  - division by zero leading to denial of service in psf_fwrite (#1177254)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-1
changelog:
  - updated to 1.0.28
  - fix possible buffer overflow when parsing crafted ID3 tags (#1440758, CVE-2017-7586)
  - fix possible buffer overflow when parsing crafted flac file (#1440756, CVE-2017-7585)


author: Pavla Kratochvilova <pkratoch@redhat.org> - 0.7.17-1
changelog:
  - Update to 0.7.17
  - selected bug fixes:
    * repo_write: fix handling of nested flexarray
    * improve choicerule generation a bit more to cover more cases
    * harden testcase parser against repos being added too late
    * support python-3.10
    * check /var/lib/rpm macro in rpmdb code
  - new features:
    * handle default/visible/langonly attributes in comps parser
    * support multiple collections in updateinfo parser
    * add '-D' option in rpmdb2solv to set the dbpath


author: Pavla Kratochvilova <pkratoch@redhat.org> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix error handling in solv_xfopen_fd()
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.20-5
changelog:
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Karel Klíč <kklic@redhat.com> - 0.0.0-2.git857fe28.an8
changelog:
  - Adapted to Ruby 1.9.3 (workaround for broken CMake in Fedora and
    ruby template correction in bindings)


author: Aleš Kozumplik <akozumpl@redhat.com> - 0.0.0-11.gitd39a42b.an8
changelog:
  - Rebase to upstream d39a42b.
  - Fix the epochs.
  - Move the ruby modules into vendorarch dir, where they are expected.


author: Aleš Kozumplík <akozumpl@redhat.com> - 0.0.0-17.git6c9d3eb
changelog:
  - Rebase to upstream 6c9d3eb.
  - Drop the solv.i stdbool.h fix integrated upstream.
  - Dropped the job reasons fix.


author: Aleš Kozumplík <akozumpl@redhat.com> - 0.3.0-5.git228d412
changelog:
  - Rebase to upstream 228d412.
  - Fixes hawkey github issue https://github.com/akozumpl/hawkey/issues/13


author: Jan Silhan <jsilhan@redhat.com> - 0.6.11-1
changelog:
  - new version fixing segfault
  - RbConfig fixed in the upstream (1928f1a), libsolv-ruby22-rbconfig.patch erased


author: Jan Silhan <jsilhan@redhat.com> - 0.6.11-3
changelog:
  - added compile flag to support rich dependencies
  - new version adding MIPS support
  - Distribute testsolv in -tools subpackage (Igor Gnatenko)
  - Enable python3 bindings for fedora (Igor Gnatenko)


author: Jaroslav Mracek <jmracek@redhat.com> - 0.6.14-7
changelog:
  - Rebase to upstream b1ea392
  - Enable bz2 compression support (Mikolaj Izdebski <mizdebsk@redhat.com>) (RhBug:1226647)


author: Igor Gnatenko <ignatenko@redhat.com> - 0.6.20-2
changelog:
  - Backport patch to fix crashing on reading some repos (RHBZ #1318662)
  - Backport patch to fix installing multilib packages with weak deps
    (RHBZ #1325471)


author: Igor Gnatenko <ignatenko@redhat.com> - 0.6.22-1
changelog:
  - Update to 0.6.22
  - Backport patch which will help to not autoremove needed packages
    (RHBZ #1227066, #1284349)


author: Pavla Kratochvilova <pkratoch@redhat.org> - 0.7.4-1
changelog:
  - soname bump to "1"
  - incompatible API changes:
    * bindings: Selection.flags is now an attribute
    * repodata_lookup_num now works like the other lookup_num functions
  - new functions:
    * selection_make_matchsolvable
    * selection_make_matchsolvablelist
    * pool_whatmatchessolvable
    * repodata_search_arrayelement
    * repodata_lookup_kv_uninternalized
    * repodata_search_uninternalized
    * repodata_translate_dir
  - new repowriter interface to write solv files allowing better
    control over what gets written
  - support for filtered file lists with a custom filter
  - dropped support of (since a long time unused) REPOKEY_TYPE_U32
  - selected bug fixes:
    * fix nasty off-by-one error in repo_write
    * do not autouninstall packages because of forcebest updates
    * fixed a couple of null pointer derefs and potential memory
      leaks
    * made disfavoring recommended packages work if strong recommends
      is enabled
    * no longer disable infarch rules when they don't conflict with
      the job
    * repo_add_rpmdb: do not copy bad solvables from the old solv file
    * fix cleandeps updates not updating all packages
  - new features:
    * support rpm's new '^' version separator
    * support set/get_considered_list in bindings
    * new experimental SOLVER_FLAG_ONLY_NAMESPACE_RECOMMENDED flag
    * do favor evaluation before pruning allowing to (dis)favor
      specific package versions
    * bindings: support pool.matchsolvable(), pool.whatmatchessolvable()
      pool.best_solvables() and selection.matchsolvable()
    * experimental DISTTYPE_CONDA and REL_CONDA support


author: Ales Matej <amatej@redhat.org> - 0.7.7-1
changelog:
  - Update to 0.7.7
  - selected bug fixes:
    * fix updating of too many packages in focusbest mode
    * fix handling of disabled installed packages in distupgrade
    * fix repository priority handling for multiversion packages
    * better support of inverval deps in pool_match_dep()
    * support src rpms that have non-empty provides
    * fix favorq leaking between solver runs if the solver is reused
    * fix SOLVER_FLAG_FOCUS_BEST updateing packages without reason
    * be more correct with multiversion packages that obsolete their
      own name
    * allow building with swig-4.0.0
    * lock jobs now take precedence over dup and forcebest jobs
  - new features
    * new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag 
    * bindings: add get_disabled_list() and set_disabled_list()
    * bindings: add whatcontainsdep()
    * bindings: make the selection filters return the self object
    * MSVC compilation support


author: Ales Matej <amatej@redhat.org> - 0.7.11-1
changelog:
  - Update to 0.7.11
  - selected bug fixes:
    * support arch<->noarch package changes when creating patch
      conflicts from the updateinfo data
    * also support other rpm database types
    * fixed solv_zchunk decoding error if large chunks are used
    * treat retracted pathes as irrelevant
    * made add_update_target work with multiversion installs
  - new features
    * support for SOLVER_BLACKLIST jobs that block the installation of matched
      packages unless they are directly selected by an SOLVER_INSTALL job
    * libsolv now also parses the patch status in the updateinfo parser
    * new solvable_matchessolvable() function
    * support conda constrains dependencies
    * new rpm_stat_database() function
    * new rpm_hash_database_state() function


author: Nicola Sella <nsella@redhat.com> - 0.7.16-1
changelog:
  - Update to 0.7.16
  - selected bug fixes:
    * make testcase_mangle_repo_names deal correctly with freed repos
    [bnc#1177238]
    * fix add_complex_recommends() selecting conflicted packages in
      rare cases leading to crashes
    * improve choicerule generation so that package updates are
      prefered in more cases
    * fix deduceq2addedmap clearing bits outside of the map
    * conda: feature depriorization and fix startswith implementation
    * Fix solvable swapping messing up idarrays
    * fix ruleinfo of complex dependencies returning the wrong origin
    * fix solv_zchunk decoding error if large chunks are used
      [bnc#1159314]
  - new features
    * new testcase_mangle_repo_names() function
    * new solv_fmemopen() function
    * Enable zstd compression support for sle15 and sle15-sp2
    * Support blacklisted packages in solver_findproblemrule()
      [bnc#1172135]
    * Support rules with multiple negative literals in choice rule
      generation
    * build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
      multiple rpm database backends
    * added two new function to make libzypp independent of the rpm
      database format
    * support conda constrains dependencies


author: Jeremy Katz <katzj@redhat.com> 0.7.4-3
changelog:
  - fix to not try to include non-existent doc files and remove all 
    unwanted files from the build
  - include api docs 
  - don't build the apache module


author: Jeremy Katz <katzj@redhat.com> 0.7.9-3
changelog:
  - better lib64 patch
  - fix building of libwsdl-build to use libtool so that it gets built 
    with -fPIC as needed


author: Jeremy Katz <katzj@redhat.com> 1.99.17-1
changelog:
  - rename package to libsoup
  - update to 1.99.17
  - don't obsolete soup for now, it's parallel installable


author: David Malcolm <dmalcolm@redhat.com> - 2.2.2-1
changelog:
  - update from 2.2.1 to 2.2.2
  - add explicit devel requirements on glib2-devel, pkgconfig, gtk-doc, gnutls-devel and libxml2-devel


author: David Malcolm <dmalcolm@redhat.com> - 2.2.5-1
changelog:
  - 2.2.5
  - Removed gnome-bug-306877-soup-connection-ntlm.c.patch (#160071) as this is 
    now in upstream tarball


author: Matthew Barnes <mbarnes@redhat.com> - 2.3.0-1
changelog:
  - Update to 2.3.0
  - Bump glib2 requirement to >= 2.15.3.
  - Clean up some redundant dependencies.
  - Remove patch for RH bug #327871 (fixed in glibc).


author: David King <amigadave@amigadave.com> - 2.51.3-1
changelog:
  - Update to 2.51.3
  - Update URL
  - Use pkgconfig for BuildRequires
  - Preserve timestamps during install


author: Milan Crha <mcrha@redhat.com> - 2.62.2-1
changelog:
  - Update to 2.62.2
  - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c:get_cookies() on empty hostnames


author: Tomas Popela <tpopela@redhat.com> - 2.62.3-6
changelog:
  - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names
  - Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data
  - Resolves: RHEL-67076
  - Resolves: RHEL-67067


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.62.3-7
changelog:
  - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict
    Resolves: RHEL-76376


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.62.3-8
changelog:
  - Backport patches for various CVEs, plus test improvements
    Resolves: RHEL-85887
    Resolves: RHEL-85900
    Resolves: RHEL-85901
    Resolves: RHEL-87039
    Resolves: RHEL-87094
    Resolves: RHEL-87114
    Resolves: RHEL-88348
    Resolves: RHEL-88351


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.62.3-9
changelog:
  - Add patches to improve test reliability
  - Backport patches for various CVEs
    Resolves: RHEL-85879
    Resolves: RHEL-92280
    Resolves: RHEL-93031
    Resolves: RHEL-93032


author: Dong Tongliang <dongtongliang.dtl@alibaba-inc.com> - 2.62.3-14.0.1
changelog:
  - Add doc sub package (wenshu.hx@alibaba-inc.com)
  - Fix xmlrpc server tests TAP output errors while GLib >= 2.62


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-6
changelog:
  - Enable client and server testing build time
  - Fix failing rekey test on arch s390x
  - Resolves: rhbz#2126342


author: Liwei Ge <liwei.glw@alibaba-inc.com> - 0.9.6-7
changelog:
  - NULL pointer dereference during rekeying with algorithm guessing (CVE-2023-1667)
  - authorization bypass in pki_verify_data_signature (CVE-2023-2283)


author: - Andreas Schneider <asn@redhat.com> - 0.6.1-1
changelog:
  - Update to version 0.6.1.
  - resolves: #1056757 - Fix scp mode.
  - resolves: #1053305 - Fix known_hosts heuristic.


author: Andreas Schneider <asn@redhat.com> - 0.6.5-1
changelog:
  - resolves: #1213775 - Security fix for CVE-2015-3146
  - resolves: #1218076 - Security fix for CVE-2015-3146


author: Andreas Schneider <asn@redhat.com> - 0.7.0-1
changelog:
  - Update to version 0.7.0
    * Added support for ed25519 keys
    * Added SHA2 algorithms for HMAC
    * Added improved and more secure buffer handling code
    * Added callback for auth_none_function
    * Added support for ECDSA private key signing
    * Added more tests
    * Fixed a lot of bugs
    * Improved API documentation


author: Andreas Schneider <asn@redhat.com> - 0.7.1-1
changelog:
  - Update to version 0.7.1
    * Fixed SSH_AUTH_PARTIAL auth with auto public key
    * Fixed memory leak in session options
    * Fixed allocation of ed25519 public keys
    * Fixed channel exit-status and exit-signal
    * Reintroduce ssh_forward_listen()


author: Andreas Schneider <asn@redhat.com> - 0.7.2-1
changelog:
  - Update to version 0.7.2
    * Fixed OpenSSL detection on Windows
    * Fixed return status for ssh_userauth_agent()
    * Fixed KEX to prefer hmac-sha2-256
    * Fixed sftp packet handling
    * Fixed return values of ssh_key_is_(public|private)
    * Fixed bug in global success reply
  - resolves: #1267346


author: Andreas Schneider <asn@redhat.com> - 0.7.3-1
changelog:
  - resolves: #1311259 - Fix CVE-2016-0739
  - resolves: #1311332 - Update to version 0.7.3
    * Fixed CVE-2016-0739
    * Fixed ssh-agent on big endian
    * Fixed some documentation issues
  - Enabled GSSAPI support


author: Andreas Schneider <asn@redhat.com> - 0.7.4-1
changelog:
  - Update to version 0.7.4
    * Added id_ed25519 to the default identity list
    * Fixed sftp EOF packet handling
    * Fixed ssh_send_banner() to confirm with RFC 4253
    * Fixed some memory leaks
  - resolves: #1419007


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7.4-2
changelog:
  - BR: compat-openssl10-devel (f26+, #1423088)
  - use %license
  - -devel: drop hardcoded pkgconfig dep (let autodeps handle it)
  - %files: track library sonames, simplify -devel
  - %install: use 'install/fast' target
  - .spec cosmetics, drop deprecated %clean section


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.1-2
changelog:
  - Add Provides for libssh_threads.so to unbreak applications
  - Fix ABIMap detection to not depend on python to build


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.3-1
changelog:
  - Update to version 0.8.3
    * Added support for rsa-sha2 (#1610882)
    * Added support to parse private keys in openssh container format (other than
      ed25519) (#1622983)
    * Added support for diffie-hellman-group18-sha512 and
      diffie-hellman-group16-sha512 (#1610885)
    * Added ssh_get_fingerprint_hash()
    * Added ssh_pki_export_privkey_base64()
    * Added support for Match keyword in config file
    * Improved performance and reduced memory footprint for sftp
    * Fixed ecdsa publickey auth
    * Fixed reading a closed channel
    * Added support to announce posix-rename@openssh.com and hardlink@openssh.com
      in the sftp server
    * Use -fstack-protector-strong if possible (#1624135)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.5-1
changelog:
  - Update to version 0.8.5
    * Fixed an issue where global known_hosts file was ignored (#1649321)
    * Fixed ssh_get_fd() to return writable file descriptor (#1649319)
    * Fixed regression introduced in known_hosts parsing (#1649315)
    * Fixed a regression which caused only the first algorithm in known_hosts to
      be considered (#1638790)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.91-0.1
changelog:
  - Update to 0.9.0 pre release version (0.8.91)
  - Added default configuration files for client and server
  - Removed unused patch files left behind
  - Fixed issues found to run upstream test suite with SELinux


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.0-1
changelog:
  - Update to version 0.9.0
    https://www.libssh.org/2019/06/28/libssh-0-9-0/
  - Added explicit Requires for crypto-policies
  - Do not ignore known_hosts keys when SSH_OPTIONS_HOSTKEYS is set
  - Provide the configuration files in a separate libssh-config subpackage


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.0-3
changelog:
  - Add Obsoletes in libssh-config to avoid conflict with old libssh which
    installed the configuration files.


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.4-1
changelog:
  - Update to version 0.9.4
    https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  - Fixed CVE-2019-14889 (#1781782)
  - Fixed CVE-2020-1730 (#1802422)
  - Create missing directories in the path provided for known_hosts files (#1733914)
  - Removed inclusion of OpenSSH server configuration file from
    libssh_server.config (#1821339)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.4-2
changelog:
  - Do not return error when server properly closed the channel (#1849071)
  - Add a test for CVE-2019-14889
  - Do not parse configuration file in torture_knownhosts test


author: Sahana Prasad <sahana@redhat.com> - 0.9.4-3
changelog:
  - Fix CVE-2020-16135 NULL pointer dereference in sftpserver.c if
    ssh_buffer_new returns NULL (#1862646)


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-2021-3634: Fix possible heap-buffer overflow when
    rekeying with different key exchange mechanism (#1978810)


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-2021-3634: Fix possible heap-buffer overflow when
    rekeying with different key exchange mechanism
  - Rebase to version 0.9.6
  - Rename SSHD_EXECUTABLE to SSH_EXECUTABLE in tests/torture.c
  - Resolves: rhbz#1896651, rhbz#1994600


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-7
changelog:
  - Fix NULL dereference during rekeying with algorithm guessing
    GHSL-2023-032 / CVE-2023-1667
  - Fix possible authentication bypass
    GHSL 2023-085 / CVE-2023-2283
  - Resolves: rhbz#2182251, rhbz#2189742


author: Sahana Prasad <sahana@redhat.com> - 0.9.6-14
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Note: version is bumped from 12 to 14 directly, as the z-stream
    version in 8.9 also has 13. So bumping it to 14, will prevent
    upgrade conflicts.
  - Resolves:RHEL-19690, RHEL-17244, RHEL-19312


author: Kalev Lember <klember@redhat.com> - 3.39.92-2
changelog:
  - Split sysprof-capture library and header files out to sysprof-capture-devel
  - Update minimum required glib2 version


author: Kamil Dudka <kdudka@redhat.com> - 1.2.20-16
changelog:
  - fix memory leaks through gnu_long{name,link} (CVE-2021-33645 CVE-2021-33646)
  - fix out-of-bounds read in gnu_long{name,link} (CVE-2021-33643 CVE-2021-33644)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> 0:0.2.5-0.fdr.1
changelog:
  - updated to 0.2.5
  - changed license to LGPL
  - rearranged %check to reflect execution order
  - minor cosmetical changes


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.3-1
changelog:
  - updated to 1.3 (#426488, #431334)
  - use wrapper around libtasn1-config which should make it multilib
    safe (#342411); this implies an untagged 'Requires: pkgconfig' for
    -devel now
  - conditionalized BR of valgrind (#401041)


author: Tomas Mraz <tmraz@redhat.com> - 2.2-1
changelog:
  - updated to new upstream version
  - SMP build should work now
  - drop fix for spurious rpath - no longer necessary


author: Peter Robinson <pbrobinson@fedoraproject.org> 4.9-2
changelog:
  - Move development related docs to devel sub package
  - Cleanup spec and macros
  - Update valgrind ExclusiveArch


author: Isaac Boukris <iboukris@redhat.com> - 1.4.2-2
changelog:
  - Resolves: rhbz#1754420 - Rebase libtdb 1.4.2 for samba
  - Related: rhbz#1754420 - Fix sssd tests (tdb)


author: Xin Long <lxin@redhat.com> - 1.29-1
changelog:
  - man teamd.conf: update some parameter default values [1732587]
  - 1.29 release
  - teamd: add port_master_ifindex_changed for link_watch_port_watch_ops
  - initscripts: fix if/fi align
  - teamd: fix a json object memleak in get_port_obj() [1767685]
  - libteam: set netlink event socket as non-blocking [1684389]
  - libteam: double NETLINK_RCVBUF to fix -ENOMEM error
  - teamd: add a default value 1000 for link_watch.interval


author: Xin Long <lxin@redhat.com> - 1.29-2
changelog:
  - teamd/lacp: fix segfault due to NULL pointer dereference [1758073]
  - teamd: fix build error in expansion of macro teamd_log_dbgx [1758073]
  - teamd: update ctx->hwaddr after setting team dev to new hwaddr
  - libteam: wapper teamd_log_dbg with teamd_log_dbgx [1758073]


author: Xin Long <lxin@redhat.com> - 1.31-1
changelog:
  - 1.31 release
  - utils/bond2team: remove TYPE in ifcfg file [1858518]
  - utils/bond2team: keep delivering config to file if stdout not supplied [1858518]
  - teamd/lacp: silence ignore none LACP frames
  - Send LACP PDU right after the Actor state has been changed
  - Skip setting the same hwaddr to a lag port if not needed
  - Make all netlink socket RCVBUF sizes configurable
  - Don't return an error when timerfd socket return 0
  - Fix ifinfo_link_with_port race condition with newlink
  - teamd: fix possible race in master ifname callback
  - 1.30 release
  - teamd: Disregard current state when considering port enablement [1851460]


author: Xin Long <lxin@redhat.com> - 1.31-4
changelog:
  - teamd: do no remove the ports on shutdown with -N [2148856]
  - teamd: stop iterating callbacks when a loop restart is requested [2148855]


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - enable zip and jpeg codecs
  - change defattr in normal package to 0755
  - add defattr to -devel package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages from devel package to the regular one
  - integrate Frank Warmerdam's fixed .fax handling code (keep until next release
    of libtiff)
  - fix fax2ps breakage (bug #8345)


author: Phil Knirsch <phil@redhat.de>
changelog:
  - Fixed ia64 problem with tiffinfo. Was general 64 bit arch problem where s390x
    and ia64 were missing (#52129).


author: Matthias Clasen <mclasen@redhat.com> - 3.7.1-3
changelog:
  - Drop the largefile patch again
  - Fix a problem with the handling of alpha channels
  - Fix an integer overflow in tiffdump (#143576)


author: Matthias Saou <http://freshrpms.net/> 3.7.4-2
changelog:
  - Remove useless explicit dependencies.
  - Minor spec file cleanups.
  - Move make check to %check.
  - Add _smp_mflags.


author: Matthias Clasen <mclasen@redhat.com>
changelog:
  - Fix several vulnerabilities (CVE-2006-3460 CVE-2006-3461
    CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)


author: Jindrich Novy <jnovy@redhat.com> - 3.8.2-6
changelog:
  - fix CVE-2006-2193, tiff2pdf buffer overflow (#194362)
  - fix typo in man page for tiffset (#186297)
  - use %{?dist}


author: Tom Lane <tgl@redhat.com> 3.8.2-8
changelog:
  - Restore static library to distribution, in a separate -static subpackage
  Resolves: #219905
  - Don't apply multilib header hack to unrecognized architectures
  Resolves: #233091
  - Remove documentation for programs we don't ship
  Resolves: #205079
  Related: #185145


author: Tom Lane <tgl@redhat.com> 3.8.2-11
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Related: #458674
  - Use -fno-strict-aliasing per rpmdiff recommendation


author: Tom Lane <tgl@redhat.com> 3.9.2-1
changelog:
  - Update to libtiff 3.9.2; stop carrying a lot of old patches
  Resolves: #520734
  - Split command-line tools into libtiff-tools subpackage
  Resolves: #515170
  - Use build system's libtool instead of what package contains;
    among other cleanup this gets rid of unwanted rpath specs in executables
  Related: #226049


author: Tom Lane <tgl@redhat.com> 3.9.2-3
changelog:
  - Apply Adam Goode's fix for Warmerdam's fix
  Resolves: #552360
  Resolves: #533353
  - Add some defenses to prevent tiffcmp from crashing on downsampled JPEG
    images; this isn't enough to make it really work correctly though
  Related: #460322


author: Tom Lane <tgl@redhat.com> 3.9.4-1
changelog:
  - Update to libtiff 3.9.4, for numerous bug fixes including fixes for
    CVE-2010-1411, CVE-2010-2065, CVE-2010-2067
  Resolves: #554371
  Related: #460653, #588784, #601274, #599576, #592361, #603024
  - Add fixes for multiple SIGSEGV problems
  Resolves: #583081
  Related: #603081, #603699, #603703


author: Tom Lane <tgl@redhat.com> 3.9.4-3
changelog:
  - Add patch for CVE-2011-0192
  Resolves: #681672
  - Fix non-security-critical potential SIGSEGV in gif2tiff
  Related: #648820


author: Tom Lane <tgl@redhat.com> 3.9.4-4
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #684007
  Related: #688825
  - Add fix for CVE-2011-1167
  Resolves: #689574


author: Tom Lane <tgl@redhat.com> 3.9.5-1
changelog:
  - Update to libtiff 3.9.5, incorporating all our previous patches plus other
    fixes, notably the fix for CVE-2009-5022
  Related: #695885


author: Tom Lane <tgl@redhat.com> 4.0.1-1
changelog:
  - Update to libtiff 4.0.1, adds BigTIFF support and other features;
    library soname is bumped from libtiff.so.3 to libtiff.so.5
  Resolves: #782383
  - Temporarily package 3.9.5 shared library (only) in libtiff-compat subpackage
    so that dependent packages won't be broken while rebuilding proceeds


author: Tom Lane <tgl@redhat.com> 4.0.2-1
changelog:
  - Update to libtiff 4.0.2, includes fix for CVE-2012-2113
    (note that CVE-2012-2088 does not apply to 4.0.x)
  - Update libtiff-compat to 3.9.6 and add patches to it for
    CVE-2012-2088, CVE-2012-2113
  Resolves: #832866


author: Tom Lane <tgl@redhat.com> 4.0.2-5
changelog:
  - Add accessor functions for opaque type TIFFField (backport of not-yet-released
    upstream feature addition; needed to fix freeimage)


author: Tom Lane <tgl@redhat.com> 4.0.2-6
changelog:
  - Remove compat subpackage; no longer needed
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 4.0.3-2
changelog:
  - Add upstream patches for CVE-2012-4447, CVE-2012-4564
    (note: CVE-2012-5581 is already fixed in 4.0.3)
  Resolves: #880907


author: Nikola Forró <nforro@redhat.com> - 4.0.9-9
changelog:
  - Fix CVE-2017-9935, CVE-2017-18013 (#1530441),
    CVE-2018-8905 (#1559705) and CVE-2018-10963 (#1579061)


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: RHEL Packaging Agent <jotnar@redhat.com> - 4.4.0-13.2
changelog:
  - fix CVE-2025-8176 off-by-one error skipping first line in tiffdither
    and tiffmedian
  - Resolves: RHEL-120243


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-14
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-16
changelog:
  - fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543)
  - fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.6-23
changelog:
  - bake in versioned requirement on automake (rhbz#1193591)
  - fix testsuite FTBFS against automake 1.16.1
  - bypass -specs=* to gcc (rhbz#985592)


author: Robert Scheck <robert@fedoraproject.org> 0.9.12-15
changelog:
  - Added patch to avoid a /usr/@DATADIRNAME@/locale/ directory
  - Use %{_udevrulesdir} macro rather /etc/udev/rules.d/ (#1226681)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-17
changelog:
  - Resolves: rhbz#1558151 - libuser needs audit events around the account
                             lifecycle


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-19
changelog:
  - Resolves: rhbz#1602600 -  Please review important issues found by covscan
                              in "libuser-0.62-14.el8+7" package


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-20
changelog:
  - Resolves: rhbz#1637398 - libuser-python3 should be renamed to comply
                             with Packaging Guidelines


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-23
changelog:
  - Actually apply the patch from the previous build
  - Resolves: rhbz#1670997 - Amend the user lifecycle auditing


author: Michal Hlavinka <mhlavink@redhat.com> - 0.62-26
changelog:
  - fix findings from static application security testing (#RHEL-35578)
  - translation update (#RHEL-12111)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.1.6-14
changelog:
  - build with hardening LDFLAGS (#1548717)
  - remove obsolete macro and comments
  - add gcc to build requirements


author: Adam Williamson <awilliam@redhat.com> - 0.31.1-1.sds4
changelog:
  - initial package (based on package from elsewhere by myself and Nic
    Chauvet with i965 driver removed)


author: Adam Williamson <awilliam@redhat.com> - 1.0.6-1
changelog:
  - switch to upstream from sds branch (sds now isn't carrying any very
    interesting changes according to gwenole)
  - pull in the dont-install-test-programs patch from sds
  - split out libva-utils again for multilib purposes
  - drop -devel package obsolete/provides itself too


author: Adam Williamson <awilliam@redhat.com> - 1.0.8-1
changelog:
  - bump to new version
  - fix modded tarball to actually not have i965 dir
  - merge with the other spec I seem to have lying around somewhere


author: Nicolas Chauvet <kwizart@gmail.com> - 1.1.0-3
changelog:
  - Update to official 1.1.0 release
  - Enable Wayland support on f18 - add subpackage
  - Clean spec file


author: Nicolas Chauvet <kwizart@gmail.com> - 1.1.0-5
changelog:
  - Drop wayland support - Lead to suspicious crash
    to reintroduce later using alternates build for vainfo and libs.


author: Nicolas Chauvet <kwizart@gmail.com> - 1.8.0-1
changelog:
  - Update to 1.8.0
  - Switch upstream URL to 01.org and github
  - Split libva-utils into it's own package
  - Clean-up groups


author: Harald Hoyer <harald@redhat.com> - 16-1
changelog:
  - libvarlink 16
  - fixed coverity issues
  - Resolves: #1638294 - Interface name validation rule update


author: Petr Pisar <ppisar@redhat.com> - 0.9.11-9
changelog:
  - Fix CVE-2018-15127 (Heap out-of-bounds write in
    rfbserver.c:rfbProcessFileTransferReadBuffer()) (bug #1662997)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 0.9.11-16
changelog:
  - Fix CVE-2019-20839
    Resolves: #1851032
  - Fix CVE-2018-21247
    Resolves: #1852516
  - Fix CVE-2020-14405
    Resolves: #1860527
  - Fix CVE-2020-14397
    Resolves: #1861152


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.8-6
changelog:
  - Python 2 binary package renamed to python2-libvoikko
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Mike FABIAN <mfabian@redhat.com> - 4.1.1-1
changelog:
  - Rebase to 4.1.1 from Fedora 29 (provides only python3-libvoikko,
    removes python2-libvoikko)
  - Resolves: rhbz#1636062


author: Mike FABIAN <mfabian@redhat.com> - 4.1.1-2
changelog:
  - Fix man file names for Flatpak builds, exclude __pycache__ files from Flatpak builds
  - Resolves: rhbz#1896322


author: Wim Taymans <wtaymans@redhat.com> - 1.7.0-7
changelog:
  - Fix for CVE-2019-9232, CVE-2019-9433, CVE-2019-9371, CVE-2019-2126
  - Resolves: rhbz#1796086, rhbz#1796100, rhbz#1796448, rhbz#1796454
  - Remove php-cli BR


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.9.0-2
changelog:
  - fix permissions on binaries
  - rename generic binaries to v8_*
  - link shared library to -lm, -lpthread to resolve missing weak symbols


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.9.0-7
changelog:
  - update to git revision 8389f1967c5f8b3819cca80705b1b4ba04132b93
  - upstream fix for bz 599147
  - proper shared library support


author: Wim Taymans <wtaymans@redhat.com> - 1.7.0-11
changelog:
  - Add patch to fix integer overflows.
  - Fix compilation by including limits.h
  - Resolves: RHEL-40650


author: Tomas Korbar <tkorbar@redhat.com> - 0.16.105-1
changelog:
  - Change specfile accordingly to mosvald's review
  - Remove obsolete ldconfig scriptlets
  - libyang-devel-doc changed to noarch package
  - Add python_provide macro to python3-libyang subpackage
  - Remove obsolete Requires from libyang-cpp-devel
  - Start using cmake with smp_mflags macro


author: Michal Ruprich <mruprich@redhat.com> - 0.16.105-4
changelog:
  - Resolves: #1780311 - CVE-2019-19333 libyang: stack-based buffer overflow in make_canonical when bits leaf type is used
  - Resolves: #1780313 - CVE-2019-19334 libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used


author: Michal Ruprich <mruprich@redhat.com> - 1.0.184-2
changelog:
  - DoS or arbitrary code execution via maliciously crafted LYB binary blob
  - Resolves: RHEL-177017 - CVE-2026-44673


author: Xin Long <lxin@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.


author: Pravin Satpute <psatpute@redhat.com> - 2.92.1-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423905 - FTBFS in rawhide
  - Migrated from fedorahosted.org to pagure.io


author: Pravin Satpute <psatpute@redhat.com> - 2.92.2-1
changelog:
  - Upstream new release 2.92.2
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Parag Nemade <pnemade AT redhat DOT com> - 2.94.0-7
changelog:
  - Fix the apply_featurefile.py to use fontforge python3 module
  - use %license
  - Drop obsolete Group tag


author: Pravin Satpute <psatpute@redhat.com> - 2.94.1-1
changelog:
  - Upstream new release 2.94.1 with python3 support.
  - Resolves: #1423906 - FTBFS in rawhide
  - Migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.94.2-1
changelog:
  - Upstream new release 2.94.2
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Pravin Satpute <psatpute@redhat.com> - 2.94.1-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423907 - FTBFS in rawhide.
  - Upstream new release, migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.0-1
changelog:
  - Updated with upstream release 2.91.0
  - First release of Lohit Odia after re-writing GSUB rules.
  - Open type rules are available in .fea file for easy reusability.
  - Feature file compiled with AFDKO.
  - Supports orya and ory2 both.
  - Developer friendly glyphs names with AGL syntax format.
  - Corrected glyph class for all glyphs. 
  - Improved shape of ka-viramasignodia-taodia.
  - Added Glyph positioning rules for below based matra.
  - Test file available with release tarball.
  - Auto testing support with harfbuzz hb-shape.
  - Tested with Harfbuzz and Uniscribe (W8 and XP)
  - Corrected feature rules for conjucts ଖ୍ର ଗ୍ର କ୍ଷ୍ଯ


author: Pravin Satpute <psatpute@redhat.com> - 2.91.1-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423908 - FTBFS in rawhide.
  - Upstream new release, migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.2-1
changelog:
  - Upstream new release 2.91.2
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Pravin Satpute <psatpute@redhat.com> - 2.91.2-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423909 - FTBFS in rawhide
  - Upstream new release, migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.3-1
changelog:
  - Upstream new release 2.91.3
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Pravin Satpute <psatpute@redhat.com> - 2.5.4-1
changelog:
  - Upstream release 2.5.4
  - Added support for Unicode 8.0 characters U0C00, U0C34 and U0C5A
  - Added support for Latin characters
  - Using TTFAUTOHINT now while building ttf file.
  - Resolves #985343, #1229213 and #1258123.


author: Pravin Satpute <psatpute@redhat.com> - 2.5.5-1
changelog:
  - Upstream new release 2.5.5
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Lianbo Jiang <lijiang@redhat.com> - B.02.18-22
changelog:
  - Display proper logical name of network device
  - Resolves: rhbz#1724087
  - Add DIMM running speed and Print dimm rank information
  - Resolves: rhbz#1725199


author: Terje Rosten <terjeros@phys.ntnu.no> - 2.10-2
changelog:
  - minor fixes
  - add patch to avoid stripping
  - add desktop file
  - strip changelog
  - move from sbin to bin
  - new url


author: Adam Jackson <ajax@redhat.com> - B.02.14-2
changelog:
  - Requires: hwdata
  - Drop redundant copies of pci.ids and friends, since we'll pick up the
    copies in hwdata at runtime


author: Lianbo Jiang <lijiang@redhat.com> - B.02.18-18
changelog:
  - Fix:59a8e99ab22d ("Porting the code from /CoreOS/lshw/sanity/check-output for the CI gating")
  - Resolves: rhbz#1680623


author: Jan Rybar <jrybar@redhat.com> - 4.93.2-1
changelog:
  - Rebase to lsof-4.93.2
  - Upstream moved to GitHub (original unreachable) and tarball structure changed
  - Manpage patch needed to reflect the tarball changes
  - Resolves: rhbz#1778228


author: Tomas Bzatek <tbzatek@redhat.com> - 0.32-1
changelog:
  - Upgrade to 0.32 upstream snapshot (#1855766)
  - Fix NVMe device parsing (#1687841, #1845977)
  - Fix WWN string reporting (#1846559)
  - Implement SCSI identifier sort priority (#1846566)


author: Omair Majid <omajid@redhat.com> - 2.8.1-9
changelog:
  - Build with standard distro-wide optimization flags even on s390 and s390x
  - Resolves: rhbz#1630591


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 2.8.1-11.0.1
changelog:
  - fix build failed for better compatibility for glibc2.30 and glibc2.28
  - Fix gcc10 -fno-common compile issue for compatible with gcc10&gcc8 build


author: Gao Xiang <hsiangkao@linux.alibaba.com> - 1.9.4-1
changelog:
  - Update to 1.9.4 in sync with Anolis 23
  - Switch back from Meson since its version is too low on Anolis 8.


author: Robert Scheck <robert@fedoraproject.org> - 1.03-13
changelog:
  - Added patch by Khem Raj to use static inlines as the external
    inline definition has changed with GCC 5 (to fix ppc64 builds)


author: Parag Nemade <pnemade AT redhat DOT com> - 1.7.0-7
changelog:
  - Add missing BuildRequires: glibc-locale-source
  - Resolves:rh#996429 - Mapping of ਠ is improper as per standard
  - Resolves:rh#903272 - [gu_IN] use Devanagari U0965 instead of U0AE5 in inscript2 map


author: Parag Nemade <pnemade AT redhat DOT com> - 1.8.0-0.1.RC1
changelog:
  - Update to 1.8.0 (#1523967)
  - Resolves:rh#1487512 - Can't enter words beginning "ld" with Tibetan-ewts keyboard


author: Patsy Griffin Franklin <pfrankli@redhat.com> 1:4.2.1-7
changelog:
  - Fix build failure caused by automake versioning differences related
    to the glob changes. (#1589769)
  - Fix testing failure due to Perl changes related to expanding paths.


author: Nikola Forró <nforro@redhat.com> - 2.7.6.1-18
changelog:
  - schedule interrupted cache update for the next boot, instead of blocking
    system reboot/shutdown
    resolves #1874010


author: Nikola Forró <nforro@redhat.com> - 4.15-7
changelog:
  - remove rpc.3 and xdr.3 man pages documenting deprecated glibc RPC implementation
    resolves: #1980919


author: Parag Nemade <pnemade AT redhat DOT com> - 0.2.4-38
changelog:
  - Resolves:rh#2180735 - move marisa-devel in rhel8 CRB repository
    also fix missing gating test execution


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.0-4
changelog:
  - Add fedora local resolver
  - Fix quoting of arguments to mvn scripts
  - Add javadoc subpackage
  - Make jars versionless and remove unneeded clean section


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.0-5
changelog:
  - Fix bugs #667625 #667614 and #667636
  - Install maven metadata so they are not downloaded when mvn is run
  - Rename mvn3-local to mvn-local
  - Add more comments to resolver patch


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.0.2-2
changelog:
  - Added mvn-rpmbuild script to be used in spec files
  - mvn-local is now mixed mode (online with javadir priority)
  - Changed mvn.jpp to mvn.local


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.0.3-5
changelog:
  - Process fragments directly instead of maven2-depmap.xml
  - Expect fragments in /usr/share/maven-fragments
  - Resolve poms also from /usr/share/maven-poms


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.0.3-6
changelog:
  - Fix handling of fallback default_poms
  - Add empty-dep into maven package to not require maven2 version


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.0.4-2
changelog:
  - Make javadoc noarch
  - Make compilation source level 1.5
  - Fix borked tarball unpacking (reason unknown)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.0.4-12
changelog:
  - Look into maven.repo.local first to handle corner-case packages (#865599)
  - Finish handling of compatibility packages
  - Disable animal-sniffer temporarily in Fedora as well


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.1.0-9
changelog:
  - Synchronize JAR list in lib/ with upstream release
  - Remove test dependencies on aopalliance and cglib


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.1.0-10
changelog:
  - Add dependencies of wagon-http-shaded to plexus.core
  - Remove objectweb-asm from plexus.core
  - Add explicit requires
  - Resolves: rhbz#1023872


author: Deepak Bhole <dbhole@redhat.com> - 0:2.2.1-2
changelog:
  - Added support for dumping mapping info (in debug mode)
  - Add a custom depmap
  - Added empty-dep
  - Added proper requirements
  - Fixed classworlds jar name used at runtime
  - Install individual components
  - Install poms and mappings
  - Remove non maven items from shaded uber jar
  - Create dependency links in $M2_HOME/lib at install time


author: Alexander Kurtakov <akurtako@redhat.com> 2.2.1-10
changelog:
  - Remove buildnumber-maven-plugins deps now that is fixed.
  - Use new package names in BR/R.
  - Use global instead of define.


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.2.1-14
changelog:
  - Remove old depmaps from -depmap.xml file
  - Fix argument quoting for mvn scripts (Resolves rhbz#647945)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.2.1-17
changelog:
  - Add conditional BRs to enable ff merge between f14 and f15
  - Remove jackrabbit dependency from pom files


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.2.1-23
changelog:
  - Split artifact-manager and project into subpackages
  - Fix resolver to process poms and fragments from datadir
  - No more need to update_maven_depmap after this update


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.2.1-44
changelog:
  - Don't depend on plexus-container-default
  - Unset M2_HOME before calling mvn-rpmbuild
  - Remove test dependencies


author: Michal Srb <msrb@redhat.com> - 2.2.1-45
changelog:
  - Add missing BR: maven-install-plugin (Resolves: #979504)
  - Migrate to plexus-containers-container-default


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.2.1-47
changelog:
  - Remove code related to bootstrapping
  - Remove empty-dep JAR and POM
  - Remove local depmap
  - Use mfiles to simplify %files sections
  - Remove handling of custom settings.xml
  - Build with XMvn


author: Tomas Radej <tradej@redhat.com> - 1:1.0-4
changelog:
  - Installing folders separately with -m 755
  - Installing NOTICE in javadoc subpackage
  - Fixed changelog


author: Jaromir Capik <jcapik@redhat.com> 2.2.1-2
changelog:
  - Migration from plexus-maven-plugin to plexus-containers-component-metadata
  - Missing modello dependency added
  - Minor spec file changes according to the latest guidelines


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.3.2-4
changelog:
  - Add few missing (Build)requires
  - Remove post(un) scriptlets with update_maven_depmap
  - Use new add_maven_depmap macro


author: Tomas Radej <tradej@redhat.com> - 2.4-1
changelog:
  - Updated to the upstream version
  - Partially removed a test because of a legacy class use
  - Removed exception checking as it has already been done


author: Tania Bento <tbento@redhat.com> 0:1.0-0.1.a7.3jpp.1
changelog:
  - Fixed %Release.
  - Fixed %BuildRoot.
  - Removed %Vendor.
  - Removed %Distribution.
  - Removed %post and %postun sections for javadoc.
  - Fixed instructios on how to generate source drop.
  - Fixed %Summary.
  - Added gcj support option.
  - Marked configuration file as %config(noreplace) in %files section.


author: Andrew Overholt <overholt@redhat.com> 0:1.0-0.5.a10
changelog:
  - Update to 1.0 alpha 10 courtesy of Deepak Bhole
  - Remove gcj support
  - Add patch to build against iText 2.x (with back-ported XML classes)


author: Mary Ellen Foster <mefoster at gmail.com> 0:1.1.2-1
changelog:
  - Update to 1.1.2
  - Add update_maven_depmap to post and postun
  - Temporarily disable javadoc until maven2-plugin-javadoc is rebuilt against
    the new doxia


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.1.3-1
changelog:
  - New bugfix version
  - Fix javadoc generation error
  - Use %{_mavenpomdir} macro
  - Update BRs to latest maven plugin names
  - Use new plexus-containers components
  - Remove/update old patches


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.1.4-1
changelog:
  - Update to 1.1.4
  - Migrate from tomca5 to tomca6
  - Versionless jars and javadocs
  - Remove old skip-plugin patch
  - Replace add-default-role-hint patch with remove-plexus-component patch
  - Rename few jakarta BRs/Rs to apache names


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.2-1
changelog:
  - Update to latest upstream (1.2)
  - Use maven 3 to build
  - Remove version limits on BR/R (not valid anymore anyway)
  - Remove "assert" patch (no explanation for it's existence)


author: Michal Srb <msrb@redhat.com> - 0:1.2-5
changelog:
  - Migrated to plexus-components-component-default (Resolves: #878553)
  - Removed custom depmap and its occurrence in spec file
  - Fixed various rpmlint warnings


author: Michael Simacek <msimacek@redhat.com> - 0:1.5-1
changelog:
  - Update to upstream version 1.5
  - Move back RenderingContext.java that was moved to doxia-sitetools which
    doesn't have a release yet


author: Mary Ellen Foster <mefoster at gmail.com> 0:1.1.2-1
changelog:
  - Update to 1.1.2
  - Temporarily disable javadoc until maven2-plugin-javadoc is rebuilt against
    the new doxia


author: Mary Ellen Foster <mefoster at gmail.com> 0:1.1.2-2
changelog:
  - Add (Build)Requirement maven-shared-reporting-impl,
    plexus-containers-container-default, jakarta-commons-configuration


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.1.3-1
changelog:
  - Update to 1.1.3
  - Enable javadoc generation again
  - Update maven plugins BRs
  - Make dependency on maven-doxia unversioned


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.2-1
changelog:
  - Update to latest version (1.2)
  - Use maven 3 to build
  - Remove version limits on BR/R (not valid anymore anyway)


author: Jaromir Capik <jcapik@redhat.com> - 1.2-2
changelog:
  - Migration from plexus-maven-plugin to plexus-containers-component-metadata
  - Minor spec file changes according to the latest guidelines


author: Michal Srb <msrb@redhat.com> - 1.3-1
changelog:
  - Update to upstream version 1.3
  - Migrate from maven-doxia to doxia subpackages (#889145)
  - Build with xmvn
  - Replace patches with pom_ macros
  - Remove unnecessary depmap


author: Jaromir Capik <jcapik@redhat.com> - 1.0.1-4
changelog:
  - Migration to plexus-containers-component-metadata
  - Maven3 compatibility patches
  - Minor spec file changes according to the latest guidelines


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.1.1-1
changelog:
  - Update to upstream version 1.1.1
  - Convert patches to POM macro
  - Remove patch for bug 748074, upstreamed


author: Tania Bento <tbento@redhat.com> 0:1.5.3-2jpp.1
changelog:
  - Fixed %Release.
  - Fixed %BuildRoot.
  - Removed %Vendor.
  - Removed %Distribution.
  - Removed period at the end of %Summary.
  - Removed %post and %postun sections for javadoc.
  - Removed %post and %postun sections for booter-javadoc.
  - Added gcj support option.
  - Fixed instructions on how to generate source drop.


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:2.6-1
changelog:
  - Rename subpackages to not repeat "maven" twice
  - Update to latest upstream version
  - Add common jar to files
  - Introduce maven-failsafe-plugin sub-package
  - Cleanups


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:2.7.2-1
changelog:
  - Update to latest version (2.7.2)
  - Add common-junit* jars to distribution
  - Versionless javadocs
  - Use maven 3 to build


author: Tomas Radej <tradej@redhat.com> - 1:1.2.1-2
changelog:
  - Added licence text
  - Changed maven target from install to package
  - Creating directories in Install


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.0.0-1
changelog:
  - Update to upstream version 3.0.0
  - Remove legacy obsoletes/provides
  - Update to current packaging guidelines


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.4-2
changelog:
  - Add missing requires on maven2 artifact and model
  - Add maven-core to test dependencies
  - Resolves: rhbz#914169


author: Weinan Li <weli@redhat.com> -1.5-3
changelog:
  - R: maven-shared-invoker
  - R: maven-shared-reporting-api
  - R: maven-shared-reporting-impl
  - Remove BR: maven2-plugin-changes
  - Add BR: maven-shared-invoker


author: Michal Srb <msrb@redhat.com> - 1.8-4
changelog:
  - Migrate from maven-doxia to doxia subpackages (Resolves: #909238)
  - Remove unnecessary BR on maven-doxia-tools


author: Alexander Kurtakov <akurtako@redhat.com> 2.3.1-1
changelog:
  - Update to 2.3.1.
  - Keep plexus-container-default on the dependency tree.
  - Drop depmap - not needed now.


author: Jaromir Capik <jcapik@redhat.com> - 0:2.7-2
changelog:
  - Removal of plexus-maven-plugin (not needed)
  - Migration to maven3
  - Removal of unwanted file duplicates
  - Minor spec file changes according to the latest guidelines


author: Mat Booth <mat.booth@redhat.com> - 3.0.1-2
changelog:
  - Fix build against new maven-archiver, which removed some deprecated methods
    that this plugin was using


author: Alexander Kurtakov <akurtako@redhat.com> 1:1.2-2
changelog:
  - Fix line lengths and use macroses consistently.
  - Add comment for the tests skip.
  - Add missing requires and set permissions.


author: Yong Yang <yyang@redhat.com> 1:1.2-2.6
changelog:
  - Add more maven depmap for maven-test-tools and maven-plugin-testing-tools for backward compatibility


author: Tomas Radej <tradej@redhat.com> - 2.1-1
changelog:
  - Updated to latest upstream version
  - Cleanup - removed patches, old files etc.
  - Added requires to subpackages


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.0.0-4
changelog:
  - Remove legacy obsoletes/provides
  - Remove dependency on junit-addons
  - Remove build-dependency on maven-invoker-plugin


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 1.4-1
changelog:
  - Update to 1.4
  - Add BR on jdependency >= 0.6
  - Add patch to add dependency on maven-artifact-manager


author: Tania Bento <tbento@redhat.com> 0:1.0-4jpp.1
changelog:
  - Fixed %Release.
  - Fixed %BuildRoot.
  - Removed %Vendor.
  - Removed %Distribution.
  - Removed %post and %postun sections for file-management-javadoc.
  - Removed %post and %postun sections for plugin-testing-harness-javadoc.
  - Defined _with_gcj_support and gcj_support.
  - Fixed %License.
  - Fixed %Group.
  - Marked config file with %config(noreplace) in %files section.
  - Fixed instructions on how to generate source drop.


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 15-16
changelog:
  - Add second groupId for reporting-api to add compatibility
  - Versionless javadocs and remove defattr macros (not needed anymore)
  - Use new maven2 compatibility packages
  - Remove old patches


author: Stanislav Ochotnicky <sochotnicky@redhat.com> 15-23
changelog:
  - Remove exact version dependency on artifact-filters
  - Fix missing plexus-container-default in pom for shared-jar


author: Tomas Radej <tradej@redhat.com> - 15-27
changelog:
  - Removed ant, artifact-resolver, common-artifact-filters, dependency-tree, model-converter, runtime
  - Replaced patches with pom macros


author: Matt Wringe <mwringe@redhat.com> - 0:1.0-0.1.a5.3jpp.1
changelog:
  - Merge in the changes neeeded to build without jetty
  - Fix rpmlint issues
  - Generate new *-build.xml files from pom.xml files as origins of
    *-project files is unknown.
  - Remove maven1 project.xml files from sources
  - Comment out various section requiring maven or javadocs
    (to be re-enabled at a future time). Note that the ant:ant task
    for maven2 does not currently generate javadocs.


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-2
changelog:
  - Revert "mcstransd select correct colour range." (#1731451)
  - Fix mcstrans secolor examples (#1731451)


author: Xiao Ni <xni@redhat.com> - 4.2-9
changelog:
  - Update to latest upstream and fix mdcheck service bug
  - Resolves rhbz#2116418, rhbz#2150862, rhbz#2159584


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 4.2-16.0.1
changelog:
  - Add doc sub package
  - update mdmonitor-onshot.service , ensure that the service starts successfully(lutw@ieisystem.com)


author: <gleblanc@localhost.localdomain>
changelog:
  - beautification
  - made mdadm.conf non-replaceable config
  - renamed Copyright to License in the header
  - added missing license file
  - used macros for file paths


author: Doug Ledford <dledford@redhat.com> 1.5.0-2
changelog:
  - Add a default MAILADDR line to the mdadm.conf file installed by default
    (Bugzilla #92447)
  - Make it build with gcc-3.4


author: Doug Ledford <dledford@redhat.com> 1.5.0-4
changelog:
  - Update mdmonitor script to start daemon more cleanly
  - Repackage mdmpd tarball to include gcc-3.4 changes and to make
    mdmpd properly daemonize at startup instead of forking and leaving
    the child attached to the terminal.


author: Doug Ledford <dledford@redhat.com> 1.5.0-5
changelog:
  - Disable service mdmpd by default to avoid [Failed] messages on
    current 2.6 kernels.  Possibly re-enable it by default once the
    2.6 kernels have the md event interface.


author: Doug Ledford <dledford@redhat.com> 2.5.0-6
changelog:
  - Fix a bug in the postun scriptlet related to downgrading to a version
    of mdadm that doesn't include the mdmpd daemon.


author: Doug Ledford <dledford@redhat.com> - 1.5.0-9
changelog:
  - Fix Makefile and build method to satisfy bz #123769
  - Add mdmpd man page, update mdmpd version to 0.3 - bz #117160
  - Make sure mdadm --monitor closes all md device files so that md devices
    can be stopped while mdadm is still running - bz #119532


author: Doug Ledford <dledford@redhat.com> 1.6.0-1
changelog:
  - Update to newer upstream version
  - Make mdmpd work on kernels that don't have the event interface patch


author: Doug Ledford <dledford@redhat.com> 1.11.0-2.fc4
changelog:
  - Change the default auto= mode so it need not be on the command line to
    work with udev, however it is still supported on the command line (#132706)
  - Add a man page (from Luca Berra) for mdassemble


author: Doug Ledford <dledford@redhat.com> 1.11.0-4.fc4
changelog:
  - Make the mdmonitor init script use the pid-file option, major cleanup
    of the script now possible (#134459)


author: Warren Togami <wtogami@redhat.com> 2.2-1
changelog:
  - 2.2 upgrade (#167897)
  - disable diet because we don't ship it anymore
    and we don't actually use mdassemble now


author: Doug Ledford <dledford@redhat.com> - 2.5.4-1
changelog:
  - Update to 2.5.4 (listed as a bugfix update by upstream)
  - Remove previous bitmap patch that's now part of 2.5.4


author: Doug Ledford <dledford@redhat.com> - 2.6-1
changelog:
  - Update to latest upstream version
  - Remove the mdmpd daemon entirely.  Now that multipath tools from the lvm/dm
    packages handles multipath devices well, this is no longer needed.
  - Various cleanups in the spec file


author: Doug Ledford <dledford@redhat.com> - 2.6.2-1
changelog:
  - Update to latest upstream
  - Remove requirement for /usr/sbin/sendmail - it's optional and not on by
    default, and sendmail isn't *required* for mdadm itself to work, and isn't
    even required for the monitoring capability to work, just if you want to
    have the monitoring capability do the automatic email thing instead of
    run your own program (and if you use the program option of the monitor
    capability, your program could email you in a different manner entirely)


author: Doug Ledford <dledford@redhat.com> - 2.6.2-2
changelog:
  - Fix a file leak issue when mdadm is in monitor mode
  - Update mdadm init script so that status will always run and so
    return codes are standards compliant
  - Fix assembly of version 1 superblock devices
  - Make the attempt to create an already running device have a clearer
    error message
  - Allow the creation of a degraded raid4 array like we allow for raid5
  - Make mdadm actually pay attention to raid4 devices when in monitor mode
  - Make the mdmonitor script use daemon() correctly
  - Fix a bug where manage mode would not add disks correctly under certain
    conditions
  - Resolves: bz244582, bz242688, bz230207, bz169516, bz171862, bz171938
  - Resolves: bz174642, bz224272, bz186524


author: Doug Ledford <dledford@redhat.com> - 2.6.2-3
changelog:
  - Oops, had to update the file leak patch, missed one thing
  - Minor tweak to return codes in init script and add LSB header
  - Resolves: bz244582, bz246980


author: Doug Ledford <dledford@redhat.com> - 2.6.2-4
changelog:
  - Oops, if we call -C -e1, minor_version is no longer properly set, fix that
    up
  - Related: bz230207


author: Bill Nottingham <notting@redhat.com> - 2.6.4-4
changelog:
  - make /dev/md if necessary in incremental mode (#429604)
  - open RAID devices with O_EXCL to avoid racing against other --incremental processes (#433932)


author: Doug Ledford <dledford@redhat.com> - 2.6.7-1
changelog:
  - Update to latest upstream version (should resolve #444237)
  - Drop incremental patch as it's now part of upstream
  - Clean up all the open() calls in the code (#437145)
  - Fix the build process to actually generate mdassemble (#446988)
  - Update the udev rules to get additional info about arrays being assembled
    from the /etc/mdadm.conf file (--scan option) (#447818)
  - Update the udev rules to run degraded arrays (--run option) (#452459)


author: Doug Ledford <dledford@redhat.com> - 2.6.7.1-1
changelog:
  - Updated to latest upstream stable release (#466803)
  - Change udev rule to not assemble degraded arrays (#453314)
  - Fix metadata matching in config file (#466078)
  - Fix assembly of raid10 devices (#444237)
  - Fix incremental assembly of partitioned raid devices (#447818)


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel2.1
changelog:
  - Update to latest upstream devel release
  - Use the udev rules file included with mdadm instead of our own
  - Drop all the no longer relevant patches
  - Fix a build error in mdopen.c
  - Fix the udev rules path in Makefile
  - Fix a compile issue with the __le32_to_cpu() macro usage (bad juju to
    to operations on the target of the macro as it could get executed
    multiple times, and gcc now throws an error on that)
  - Add some casts to some print statements to keep gcc from complaining


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel2.2
changelog:
  - Readd our old mdadm rules file that does incremental assembly
  - Remove the new mdadm rules file from upstream as we already have this in
    our udev package (and the one in the udev package already has a bug fixed)


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.1
changelog:
  - Update to latest devel release
  - Remove the no longer necessary udev patch
  - Remove the no longer necessary warn patch
  - Remove the no longer necessary alias patch
  - Update the mdadm.rules file to only pay attention to device adds, not
    changes and to enable incremental assembly
  - Add a cron job to run a weekly repair of the array to correct bad sectors
  - Resolves: bz474436, bz490972


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.3
changelog:
  - Slightly tweak the udev rules to make sure we don't start arrays
    while running in rc.sysinit...leave array starting to it instead
  - Modify mdadm to put its mapfile in /dev/md instead of /var/run/mdadm
    since at startup /var/run/mdadm is read-only by default and this
    breaks incremental assembly
  - Change how mdadm decides to assemble incremental devices using their 
    preferred name or a random name to avoid possible conflicts when plugging
    a foreign array into a host


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.5
changelog:
  - Fix a few issues with the new code to determine when a device gets to
    keep its name and when it doesn't


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.6
changelog:
  - Only check raid devices automatically, do not attempt to repair them
    during the weekly data scrubbing


author: Doug Ledford <dledford@redhat.com> - 3.0-0.devel3.7
changelog:
  - Move the mdadm.map file from /dev/md/ to /dev/ so the installer doesn't
    need to precreate the /dev/md/ directory in order for incremental
    assembly to work


author: Doug Ledford <dledford@redhat.com> - 3.0-1
changelog:
  - Remove stale patches already accepted by upstream
  - Fix the raid-check script to only try and check a device if it is
    checkable
  - Update to official mdadm-3.0 version
  - Resolves: bz505587, bz505552


author: Doug Ledford <dledford@redhat.com> - 3.0-2
changelog:
  - Improved raid-check script as well as the ability to configure what devices
    get checked
  - Endian patch for uuid generation


author: Doug Ledford <dledford@redhat.com> - 3.0-3
changelog:
  - Update to current head of upstream git repo for various imsm related fixes
    (fixes bz523262)
  - Fix display of metadata version in output of Detail mode
  - Add UUID output to --detail --export (bz523314)


author: Hans de Goede <hdegoede@redhat.com> - 3.0.2-1
changelog:
  - New upstream release 3.0.2
  - Add a patch fixing mdadm --detail -export segfaults (bz526761, bz523862)
  - Add a patch making mdmon store its state under /dev/.mdadm for initrd
    mdmon, rootfs mdmon handover
  - Restart mdmon from initscript (when running) for rootfs mdmon handover


author: Doug Ledford <dledford@redhat.com> - 3.0.3-1
changelog:
  - New upstream release 3.0.3 (bz523320, bz527281)
  - Update a couple internal patches
  - Drop a patch in that was in Neil's tree for 3.0.3 that we had pulled for
    immediate use to resolve a bug
  - Drop the endian patch because it no longer applied cleanly and all attempts
    to reproduce the original problem as reported in bz510605 failed, even up
    to and including downloading the specific package that was reported as
    failing in that bug and trying to reproduce with it on both ppc and ppc64
    hardware and with both ppc and ppc64 versions on the 64bit hardware.
    Without a reproducer, it is impossible to determine if a rehashed patch
    to apply to this code would actually solve the problem, so remove the patch
    entirely since the original problem, as reported, was an easy to detect DOA
    issue where installing to a raid array was bound to fail on reboot and so
    we should be able to quickly and definitively tell if the problem resurfaces.
  - Update the mdmonitor init script for LSB compliance (bz527957)
  - Link from mdadm.static man page to mdadm man page (bz529314)
  - Fix a problem in the raid-check script (bz523000)
  - Fix the intel superblock handler so we can test on non-scsi block devices


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.1
changelog:
  - Update to head of upstream git repo, which contains a significant number
    of bug fixes we need (bz543746)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.3
changelog:
  - Don't run the raid-check script if the kernel doesn't support
    md devices (bz557053)
  - Don't report any mismatch_cnt issues on raid1 devices as there are
    legitimate reasons why the count may not be 0 and we are getting enough
    false positives that it renders the check useless (bz554217, bz547128)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.4
changelog:
  - Fix problem with booting multiple imsm containers when they aren't listed
    "just so" in the mdadm.conf file (bz554974)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.5
changelog:
  - The uuid patch cause a different problem during assembly, so use a gross
    hack to work around the uuid issue that won't break assembly until fixed
    properly upstream (bz567132)


author: Doug Ledford <dledford@redhat.com> - 3.1.1-0.gcd9a8b5.6
changelog:
  - Newer version of imsm patch that leaves warning, but only when there
    actually are too many devices on the command line (bz554974)


author: Doug Ledford <dledford@redhat.com> - 3.1.2-1
changelog:
  - Grab latest upstream release instead of git repo snapshot (bz552344, bz572561)
  - The lack of /dev/md is causing problems, so add code to mapfile.c to cause
    us to create /dev/md if it doesn't exist (bz569019)


author: Doug Ledford <dledford@redhat.com> - 3.1.2-2
changelog:
  - Add a little more paranoia checking to the RebuildMap code to avoid ever
    having the same infinite loop as in bz569019 again even if we change file
    locations to somewhere where we can't create a mapfile


author: Doug Ledford <dledford@redhat.com> - 3.1.2-7
changelog:
  - Fix up directory in mdmonitor init script so that we restart mdmon like we
    are supposed to
  - Add a rule to run incremental assembly on containers in case there are
    multiple volumes in a container and we only started some of them in the
    initramfs
  - Make -If work with imsm arrays.  We had too restrictive of a test in
    sysfs_unique_holder.
  - Make incremental assembly of containers act like incremental assembly of
    regular devices (aka, --run is needed to start a degraded array)


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git07202010.1
changelog:
  - Update to latest git repo (3.1.2 plus pending changes, fixes bz602457)
  - Add in 64-md-raid.rules to compensate for it no longer being in udev
    (bz581905)
  - Remove mdadm.static as its no longer used in initrd creation


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git20100722.1
changelog:
  - Change git date format to the correct format (YYYYMMDD)
  - Update to latest upstream push (fixes bz604023)


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git20100722.2
changelog:
  - Remove the glibc-static buildreq and don't build the static mdadm since
    we don't install it anyway
  - Remove the udev file since adding it was supposed to be a rawhide only change


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git20100804.1
changelog:
  - Update to latest upstream release (resolves an issue with stale lock
    files on the md device map file)


author: Doug Ledford <dledford@redhat.com> - 3.1.5-1
changelog:
  - Update to latest upstream stable release
  - Update mdadm.rules file to honor noiswmd and nodmraid command line options
  - Ghost the directory in /var/run, create /var/run/mdadm in mdmonitor init
    script
  - Don't report mismatch counts on either raid1 or raid10
  - Check both active and idle arrays during raid check runs
  - Move the raid-check script from cron.weekly to /usr/sbin, add a crontab
    file to /etc/cron.d and mark it config(noreplace).  This way users can
    select their own raid-check frequency and have it honored through
    upgrades.
  - Allow the raid-check script to set the process and io priority of the
    thread performing the check in order to preserve responsiveness of the
    machine during the check.
  - Resolves: 633229, 656620. 679843, 671076, 659933


author: Milan Broz <mbroz@redhat.com> - 3.2.2-3
changelog:
  - Use unit files with systemd. (johannbg)
  - Add sub-package sysvinit for SysV init script.
  - Resolves: bz713573


author: Doug Ledford <dledford@redhat.com> - 3.2.2-8
changelog:
  - Rework the 65-md-incremental.rules file to add the following support:
    Nested md raid arrays should now work
    MD on top of LUKS or other lvm based devices should now work
    We should no longer grab multipath paths before multipath can


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-10
changelog:
  - Fix problem where a dirty IMSM RAID isn't assembled correctly during
    boot, preventing booting from this RAID device.
  - Resolves: bz736387 (Fedora 15) bz744217 (Fedora 16)
  - Fix race between udev and mdadm when assembling md device using
    mdadm -I, where udev would spawn an additional mdadm command to
    perform the assembly in parallel.


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-12
changelog:
  - Backport upstream version of fix for IMSM RAID assembly problem,
    which resolves issues when booting off sysvinit based system.
  - Resolves: bz736387 (Fedora 15) bz744217 (Fedora 16)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-14
changelog:
  - Backport upstream fixes to prevent growing v0.90 metadata raid out
    of supported size.
  - Add missing 'disable' argument to systemctl in preun script
  - Resolves: bz735306 (Fedora 15) bz748731 (Fedora 16) bz748732 (rawhide),
    Resolves: bz751716


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-15
changelog:
  - Backport upstream fix for memory leak that can prevent migration to
    RAID5 from completing.
  - Backport upstream fix preventing mounting a device while it is in
    process of reshaping
  - Resolves: bz755005 bz755009


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-1
changelog:
  - Update to upstream 3.2.3
  - Resolves: bz770110 (rawhide) bz771413 (f16) bz759014 (rawhide)
  - Resolves: bz759015 (f16) bz759035 (rawhide) bz759036 (f16)
  - Resolves: bz771608 (f15) bz759016 (f15) bz759039 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-3
changelog:
  - Fix case where we have to retry in case a remove fails due to an array
    being busy
  - Resolves: bz773337 (rawhide) bz773340 (f16) bz773341 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-4
changelog:
  - Add support for --offroot to mdadm/mdmon
  - Resolves: bz785739 (rawhide) bz785737 (f16) bz771405 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-5
changelog:
  - Fix issue with devices failing to be added to a raid using bitmaps,
    due to trying to write the bitmap with mis-aligned buffers using
    O_DIRECT 
  - Resolves: bz789898 (f16) bz791189 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-6
changelog:
  - Fix double free on buggy old kernel sysfs read
  - Fix segfault if trying to write superblock to non existing device
  - Resolves: bz795707 (f17) bz795747 (f16) bz795748 (f15)
  - Resolves: bz795461 (f17) bz795749 (f16) bz795750 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-7
changelog:
  - Fix issue when re-adding drive to a raid1 array with bitmap
  - Resolves: bz807743 (f17) bz769323 (f16) bz791159 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-8
changelog:
  - Fix bug where IMSM arrays stay inactive in case a reboot is
  - performed during the reshape process.
  - Resolves: bz817522 (f17) bz817535 (f16) bz817537 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-9
changelog:
  - Fix Monitor mode sometimes crashes when a resync completes
  - Fix missing symlink for mdadm container device when incremental creates
    the array
  - Make sure when creating a second array in a container that the second
    array uses all available space since leaving space for a third array
    is invalid
  - Validate the number of imsm volumes per controller
  - Fix issues with imsm arrays and disks larger than 2TB
  - Add support for expanding imsm arrays/containers
  - The support for expanding imsm arrays/containers was accepted upstream,
    update to the official patches from there
  - Fix for the issue of --add not being very smart
  - Fix an issue causing rebuilds to fail to restart on reboot (data
    corrupter level problem)
  - Reset the bad flag on map file updates
  - Correctly fix failure when trying to add internal bitmap to 1.0 arrays
  - Resolves: bz817023 (f17) bz817024 (f17) bz817026 (f17) bz817028 (f17)
  - Resolves: bz817029 (f17) bz817032 (f17) bz817038 (f17) bz808774 (f17)
  - Resolves: bz817039 (f17) bz817042 (f17)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.4-2
changelog:
  - Fix mdadm.conf to use 'd' for /var/run/mdadm creation, to avoid the
    map file getting deleted during boot.


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.4-3
changelog:
  - Fix mdadm-3.2.4 introduced bug where --add fails in common cases
  - Resolves bz821717 (f17) bz821718 (f16) bz821719 (f15)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-2
changelog:
  - Fix uninstall script to remove dangling symlink to
    mdmonitor-takeover.service, if the mdadm package is uninstalled from
    the system.
  - Resolves bz828354


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-3
changelog:
  - Fix problem where reshape of RAID volume is broken after trying to
    stop all MD devices.
  - Enhance raid-check to allow the adming to specify the max number of
    concurrent arrays to be checked at any given time.
  - Resolves bz830177, bz820124


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4
changelog:
  - Move /etc/tmpfiles.d/mdadm.conf to /lib/tmpfiles.d/ to comply with
    Fedora tmpfile rules
  - Resolves bz840187


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-7
changelog:
  - Remove bogus rogue patch applied in 3.2.5-5 with justification and
    without following the structure of the mdadm package.


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-13
changelog:
  - Relax installation requirements for abrt script to only depend on
    libreport-filesystem rather than the full abrt package


author: Doug Ledford <dledford@redhat.com> - 3.2.6-2
changelog:
  - Modify mdadm to set the cgroup of mdmon to systemd if it's available
  - Related bz873576 (and others)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-3
changelog:
  - Disallow creating a second IMSM RAID array size 0 (bz880972)
  - Disallow creating IMSM RAIDs that spans multiple controllers (bz880974)
  - Resolves bz880972, bz880974


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-5
changelog:
  - mdadm-sysvinit is obsolete given that we no longer support booting
    using sysvinit scripts
  - Resolves bz884993


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-7
changelog:
  - Fix issue with udev scripts where if an raid volume with one of
    the disks failing, the failed disk is still present in the volume
    and container. The raid volume stays is in normal state (should be
    degraded) and the rebuild cannot start.
  - Resolves bz886123


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-8
changelog:
  - mdmonitor-takeover.service is obsolete with the --offroot support,
    and it is harmful as of 3.2.6
  - Resolves bz834245


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-9
changelog:
  - Reintroduce fix for removing dangling symlink of
    mdmonitor-takeover.service which got lost in the fix introduced in
    3.2.6-8


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-11
changelog:
  - Move code to leave udev cgroup into mdmon and excute it after we
    work, to make sure it actually does the right thing.


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-12
changelog:
  - Launch mdmon via systemctl to avoid it ending up in the wrong cgroup
    and getting killed in the boot process when switching from the
    initrd to the real root.
  - Resolves bz879327


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-14
changelog:
  - Resync with final version of upstream patches for launching mdmon
    via systemctl. Require dracut 024-025 or later to match.
  - Resolves bz879327


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-16
changelog:
  - Rely on rpm macros to place files in correct directories, and match /usr
    move
  - Resolves bz955248


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-18
changelog:
  - Fix problem with IMSM metadata where resync progress would be lost
    if an array was stopped during ongoing expansion of a RAID1/5 volume.
  - Resolves bz948745


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-19
changelog:
  - Fix problem where  rebuild of IMSM RAID5 volume started in OROM,
    does not proceed in OS 
  - Resolves bz956021 (f18), bz956026 (f17), bz956031 (f19)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-21
changelog:
  - Fix pointless rpmbuild noise over mismatching date info
  - Remove Fedora 17 support
  - Fix problem where first stop command doesn't stop container during
    IMSM volume's reshape bz956053 (f18), bz956056 (f19)


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3-3
changelog:
  - Check for DM_UDEV_DISABLE_OTHER_RULES_FLAG instead of
    DM_UDEV_DISABLE_DISK_RULES_FLAG in 65-md-incremental.rules 
  - Resolves bz1015521


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3-4
changelog:
  - Fix byteswap macros return types to allow for building on big endian
    architectures again.
  - Resolves bz1015494


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3-5
changelog:
  - Do not create /var/run/mdadm in the rpm file, since this is sitting on
    tmpfs and is created by tmpfiles during boot.
  - Resolves bz1053176


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3-6
changelog:
  - Revert changes introduced in 3.3-5, they were based on incorrect
    recommendations.
  - Resolves bz1053176


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.1-2
changelog:
  - Revert 'change' event support fix from 3.3.1-1 - this requires a lot
    more testing if we are to go there.


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.1-3
changelog:
  - Improve error message for "--grow -n2" when used on Linear arrays
  - Fix problem where explicitly specified arrays were not assembled if
    they were disabled in /etc/mdadm.conf
  - Resolves bz1122146, bz1124310


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.4-2
changelog:
  - Fix i686 build error
  - Fix problem where it was not possible to stop an IMSM array during reshape
  - Fix Degraded Raid1 array becomes inactive after rebooting
  - Fix problem with raid0 arrays not being detected by Anaconda due to it
    setting MALLOC_PERTURB_
  - Fix problem with reshaping IMSM arrays, where a new reshape could be
    launched before the first reshape had fully completed, leading to
    unpected results.
  - Fix problem with mdadm large device names overflowing an internal buffer
  - Fix problem about reshape stuck at beginning
  - Resolves bz1303380


author: Xiao Ni <xni@redhat.com> - 4.1.12
changelog:
  - Update mdadm to latest upstream && change tmpfiles directory && correct changelog date
  - Resolves rhbz#1800521 and rhbz#1657265


author: Xiao Ni <xni@redhat.com> - 4.2-6
changelog:
  - Keep udev rule close to upstream and update to latest upstream
  - Resolves rhbz#1991596, rhbz#2129088, rhbz#2107150


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest to upstream to fix some bugs
  - Resolves rhbz#2149307, rhbz#2149473, rhbz#2151208, rhbz#2127096


author: Alex Williamson <alex.williamson@redhat.com> - 0.61-1
changelog:
  - d7dfac5f5bfb ("Merge pull request #15 from cohuck/attr_sanity")
  - 28a9fa17b51e ("validate attribute names")


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 1.1.0-2
changelog:
  - Create additonal directories required by installation.
  - Fix sporadic callout test failures
    Related: rhbz#1999687


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 0:1.5.22-2.0.1
changelog:
  - Fix glibc2.32 build issue for better compatible with both glibc2.28 and glibc2.32
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 and gcc8 build


author: Ales Matej <amatej@redhat.com> - 3.4.0-1
changelog:
  - Update to 3.4.0
  - Fix: do not download metadata in remove command
  - Add reinstall command
  - Add "--setopt=tsflags=test" support
  - Add "--setopt=reposdir=<path>" and "--setopt=varsdir=<path1>,<path2>,..." support
  - Add "--config=<path_to_config_file>" support
  - Add "--disableplugin", "--enableplugin" support (RhBug:1781126)
  - Add "--noplugins" support
  - Add "--setopt=cachedir=<path_to_cache_directory>" support
  - Add "--installroot=<path_to_installroot_directory>" support
  - Add "--refresh" support
  - Support "install_weak_deps" conf option and "--setopt=install_weak_deps=0/1"
  - Respect reposdir from conf file
  - Respect "metadata_expire" conf file opton (RhBug:1771147)
  - [repolist] Print padding spaces only if output is terminal


author: Nicola Sella <nsella@redhat.com> - 3.4.0-3
changelog:
  - Patch: Add support for setting a platform module ID
  - Rename "update" command to "upgrade", "update" remain as compatibility alias


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - Don't set default value of "assumeyes" to TRUE
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Add commands: distro-sync, makecache
  - Add subcommands support
  - Add support for command aliases
  - Added alias "update" to "upgrade" command
  - Relicense to GPLv2+
  - Add support for setting allow_vendor_change
  - [download] Support for "--resolve", "--alldeps" and "--archlist=" arguments
  - [download] several optimizations
  - Support "--setopt=keepcache=0/1"
  - Extend "--setopt" to support repository options


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.0.1-10
changelog:
  - Renamed the source package to mingw-expat (RHBZ #800377)
  - Use mingw macros without leading underscore
  - Use the RPM magic to automatically generate provides/requires tags
  - Automatically generate a debuginfo subpackage


author: Lili Zhu <lizhu@redhat.com> - 2.5.0-1
changelog:
  - Rebase to version 2.5.0
  - Fix the following CVEs
    CVE-2023-52425 CVE-2024-28757 CVE-2024-45490
    CVE-2024-45491 CVE-2024-45492 CVE-2024-50602
    CVE-2024-8176 CVE-2025-59375
  - Resolves: RHEL-114628


author: Michal Sekletar <msekleta@redhat.com> - 0.26-14
changelog:
  - start timer after the installation (#1278587)
  - make mlocate-updatedb.service of the type simple, systemd will then not wait for its completion (#1282232)


author: Roman Kennke <rkennke@redhat.com> 1.9.0-2
changelog:
  - Include upstream Maven pom.xml in package
  - Added missing Requires for cglib, junit4, hamcrest, objenesis
  - Added source tarball generating script to sources


author: Roman Kennke <rkennke@redhat.com> 1.9.0-4
changelog:
  - Fix groupId of cglib dependency
  - Add additional depmap for mockito-all
  - Update depmap on post and postun
  - Fix version in pom


author: Roman Kennke <rkennke@redhat.com> 1.9.0-6
changelog:
  - Place JavaDoc in directly under %{_javadocdir}/%{name} instead
    of %{_javadocdir}/%{name}/javadoc


author: Severin Gehwolf <sgehwolf@redhat.com> 1.9.0-10
changelog:
  - More Import-Package fixes. Note that fix-cglib-refs.patch is
    not suitable for upstream: issue id=373


author: Omair Majid <omajid@redhat.com> - 1.9.0-17
changelog:
  - Use .mfiles to pick up xmvn metadata
  - Don't use obsolete _mavenpomdir and _mavendepmapfragdir macros
  - Fix FTBFS


author: Mat Booth <mat.booth@redhat.com> - 1.10.19-10
changelog:
  - Explicitly import more cglib packages in OSGi metadata to prevent mockito
    failing under certain circumstances during Eclipse test suites


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-5
changelog:
  - Resolves: rhbz#1692457 - CVE-2019-3878 mod_auth_mellon: authentication
                             bypass in ECP flow [rhel-8.1.0]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-6
changelog:
  - Resolves: rhbz#1692471 - CVE-2019-3877 appstream/mod_auth_mellon: open
                             redirect in logout url when using URLs with
                             backslashes [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-7
changelog:
  - Apply the patch from the previous commit
  - Resolves: rhbz#1692471 - CVE-2019-3877 appstream/mod_auth_mellon: open
                             redirect in logout url when using URLs with
                             backslashes [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-9
changelog:
  - Just bump the release number
  - Related: rhbz#1718238 - mod_auth_mellon-diagnostics RPM not in product
                            listings


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-10
changelog:
  - Resolves: rhbz#1761774 - mod_auth_mellon fix for AJAX header name
                             X-Requested-With


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-11
changelog:
  - Resolves: rhbz#1731053 - CVE-2019-13038 mod_auth_mellon: an Open Redirect
                             via the login?ReturnTo= substring which could
                             facilitate information theft [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-12
changelog:
  - Resolves: rhbz#1791262 - Backport SameSite=None cookie from upstream to
                             support latest browsers


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-12.1
changelog:
  - Resolves: rhbz#1986805 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                             vulnerability in logout URLs [rhel-8]


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-17
changelog:
  - Resolves: #1876525 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Tania Bento <tbento@redhat.com> 0:1.0-0.1.a8.4jpp.1
changelog:
  - Fixed %Release.
  - Fixed %License.
  - Fixed %BuildRoot.
  - Removed %Vendor.
  - Removed %Distribution.
  - Defined _with_gcj_support and gcj_support.
  - Fixed instructions on how to generate the source drop.


author: Matt Wringe <mwringe@redhat.com> 0:1.0-0.1.a8.4jpp.2
changelog:
  - Change license to MIT to reflex the actual license specified in the
    source headers.
  - fix various rpmlint issues


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.4-3
changelog:
  - Fix pom filenames (remove poms of integration tests) Resolves rhbz#655818
  - Use jpackage_script macro to generate script


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.5-5
changelog:
  - Add JPP depmap for maven-project to override versionless depmap
  - Add missing BR/R: maven-project
  - Remove unneeded BR: jpa_api


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.7-2
changelog:
  - Build with xmvn
  - Use better description
  - Simplify build-requires
  - Update to current packaging guidelines


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.8-2
changelog:
  - Correct License to GPLv2+
  - Move man3 pages to the devel package.
  - Remove +x bit from create-munge-key source.
  - Preserve timestamps when installing files.
  - ldconfig not needed on -devel package.
  - Do a condrestart when upgrading.
  - Remove redundant files from docs.
  - chmod /var/lib/munge /var/log/munge and /etc/munge to 700.
  - Apply patch to not error when GPL_LICENSED is not set.
  - Patch service script to print error on if munge.key not present
    on start only and with a better error. 
  - Remove dont-exit-form-lib.patch. munge is expecting munge to
    do this.
  - Remove libgcrypt-devel from BuildRequires, uses openssl by
    default anyway.
  - Mark the munge.key as a ghost file.


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.8-4
changelog:
  - Expand defattr with 4th argument for default directory perms.
  - Explict attr for non 0644 files and 0755 directories.


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.8-6
changelog:
  - Patch for rhbz #525732 - Loads /etc/sysconfig/munge 
    correctly.
  - Mark pid file as ghost file on oses that support that.
  - Permisions on pid directory to 755


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.8-7
changelog:
  - rhbz#530128 Move runtime libs to a new -libs package.
    ldconfig moved to new -libs package as a result.


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.8-8
changelog:
  - Requirment on munge removed from munge-libs.
  - Explicit exact requirment on munge-libs for munge and munge-devel
    added.


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.9-2
changelog:
  - Remove initd-pass-rpmlint.patch, has been applied upstream.
  - Remove remove-GPL_LICENSED-cpp.patch, has been applied upstream.


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.10-1
changelog:
  - Upstream to 0.5.10
  - Add _isa tags to all build requires.
  - Remove unused patch munge-correct-service-name.patch, upstream fixed.
  - Update and add check-key-exists.patch back.
  - Revert back to default CFLAGS. _GNU_SOURCE not needed any more.


author: Steve Traylen <steve.traylen@cern.ch> - 0.5.11-1
changelog:
  - Upstream 0.5.11
  - Use upstream's systemd files.
  - Fix incorrect dates in changelogs.
  - Fix systemd scriptlets #850219
  - Use buildroot macro everywhere.


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Adam Jackson <ajax@redhat.com> 3.4.1-3
changelog:
  - mutter-never-slice-shape-mask.patch, mutter-use-cogl-texrect-api.patch:
    Fix window texturing on hardware without ARB_texture_non_power_of_two
    (#813648)


author: Kalev Lember <kalevlember@gmail.com> - 3.9.92-2
changelog:
  - Update the description and URL
  - Tighten -devel subpackage deps with _isa
  - Use the make_install macro


author: Hans de Goede <hdegoede@redhat.com> - 3.13.90-3
changelog:
  - Add a patch from upstream fixing gnome-shell crashing non stop on
    multi monitor setups (rhbz#1103221)


author: Ray Strode <rstrode@redhat.com> 3.15.3-2
changelog:
  - Add specific BuildRequires for wayland bits, so we don't
    get wayland support by happenstance.
  - Add BuildRequires for autogoo since ./autogen.sh is run as part of
    the build process


author: Ray Strode <rstrode@redhat.com> 3.18.1-4
changelog:
  - Force the cursor visible on vt switches after setting
    the crtc to workaround that qxl bug from before in a
    different situation
    Related: #1273247


author: David Herrmann <dh.herrmann@gmail.com> - 3.30.1-2
changelog:
  - Reduce 'dbus-x11' dependency to 'dbus'. The xinit script are no longer the
    canonical way to start dbus, but the 'dbus' package is nowadays required to
    provide a user and system bus to its dependents.


author: Kenneth Topp <toppk@bllue.org> - 3.34.0-4
changelog:
  - Backport a patch to prevent crash during animations
  - See upstream issue https://gitlab.gnome.org/GNOME/mutter/issues/815


author: Kenneth Topp <toppk@bllue.org> - 3.34.0-5
changelog:
  - Backport fix for dual special modifier keys bug (#1754867)
  - Backport fix that enables core dumps (#1748145)


author: Adam Williamson <awilliam@redhat.com> - 3.34.1-2
changelog:
  - Backport multiple fixes for F31 FE/blocker bugs:
    MR #832 for #1749433 (also needs change in gnome-shell)
    MR #840 for #1760254
    MR #848 for #1751646 and #1759644
    MR #842 for #1758873


author: Florian Müllner <fmuellner@redhat.com> - 3.35.1-3
changelog:
  - Enable sysprof support
    The required dependency was missing from rawhide when the feature
    landed, but there's no reason for keeping it disabled nowadays


author: Bastien Nocera <bnocera@redhat.com> - 3.35.92-2
changelog:
  + mutter-3.35.92-2
  - Fix wayland session not starting up, see https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/1103


author: Olivier Fourdan <ofourdan@redhat.com> - 40.0~alpha.1.1-3
changelog:
  - Add build dependency on Xwayland-devel package (from Xwayland standalone)
  - Do not explicitly disable initfd support.


author: Kalev Lember <klember@redhat.com> - 40.0-4
changelog:
  - Fix enter, space, backspace keys not working with input methods (#1942294)
  - Drop old obsoletes and conflicts


author: Parag Nemade <pnemade AT redhat DOT com> - 1.1-10
changelog:
  - Add Supplements: tag for langpacks naming guidelines
  - Clean the specfile to follow current packaging guidelines


author: Jeff Moyer <jmoyer@redhat.com> - 67-1.el8
changelog:
  - Rebase to v67.  This brings in the following features:
    - support for the 'security frozen' sysfs attribute
    - support for using pmem as system ram
    - various cleanup and bug fixes
  - Fix load-keys failure in initramfs (Jeff Moyer)
  - Resolves: bz#1724531 bz#1730673 bz#1741164 bz#1741165 bz#1749888 bz#1749889


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-4.el8
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
    - Fix enable-namespace all reporting errors incorrectly
    - Add support for inject-smart on papr scm
  - Related: bz#2090190 bz#1986185 bz#2040074


author: Josef Ridky <jridky@redhat.com> - 1:5.8-27
changelog:
  - fix memory leak due of proc file creating (#2105957)
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141901) and (#2141905)
  - fix memory leak when ipv6 disable set to 1 (#2151537)
  - fix proxy timeout issue (#2160723)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-30
changelog:
  - fix crash when configured as proxy - issue 82 (RHEL-14454)
  - log once truncating issue (RHEL-13597)
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26650)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-12
changelog:
  - snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
  - rather dirty patch fixing conf directory for net-snmp-config


author: Radek Vokal <rvokal@redhat.com> - 5.1.2-3
changelog:
  - patch from CVS - kill extra carriage return (#144917)
  - removed patch for interface indexing - doesn't show virtual interfaces


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-5
changelog:
  - 64bit needed some changes, was causing timeouts on 64bit archs!? 
  - affects bugs #125432 and #132058


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-12
changelog:
  - session free fixed, agentx modules build fine (#157851)
  - fixed dependency for net-snmp libs (#156932)


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-0.rc6.1
changelog:
  - update to rc6, snmpnetstat changes due to license problems
  - persistent files in directory defined by snmp.conf persistentDir are 
    loaded at startup


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-4
changelog:
  - check for header files in configure
  - patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)


author: Radek Vokal <rvokal@redhat.com> 5.3-2
changelog:
  -  Security fix. Bug granting write access to read-only users 
     or communities which were configured  using the "rocommunity" 
     or "rouser" snmpd.conf tokens fixed


author: Radek Vokál <rvokal@redhat.com> 5.3-7
changelog:
  - fix parsing of /proc/diskstats
  - fix disman monitor crash
  - fix perl vendor name
  - fix OID lookup fail


author: Radek Vokal <rvokal@redhat.com> 5.3.1.pre2-1
changelog:
  - update to 5.3.1.pre2
  - fix multilib issues (#192736)
    On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Radek Vokál <rvokal@redhat.com> - 1:5.4-13
changelog:
  - fix overly verbose log message (#221911)
  - few minor tweaks for review - still not perfect
  - fix linking with lcrypto (#231805)


author: Jan Safranek <jsafranek@redhat.com> 5.4-14
changelog:
  - fix snmptrapd hostname logging (#238587)
  - fix udpEndpointProcess remote IP address (#236551)
  - fix -M option of net-snmp-utils (#244784)
  - default snmptrapd.conf added (#243536)
  - fix crash when multiple exec statements have the same name
    (#243536)
  - fix ugly error message when more interfaces share
    one IP address (#209861)


author: Jan Safranek <jsafranek@redhat.com> 5.4-16
changelog:
  - supported lm_sensors on ppc64 (#249255)
  - snmpconf generates config files with proper selinux context
    (#247462)
  - fix leak  in udp transport (#247771)
  - add alpha to supported archs in net-snmp-config (#246825)
  - fix hrSWInst (#250237)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-3
changelog:
  - include these tables: ip-mib/ipv4InterfaceTable
    ip-mib/ipv6InterfaceTable, ip-mib/ipAddressPrefixTable
  - fix Requires of net-snmp-devel to include lmsensors-devel on supported
    architectures


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-5
changelog:
  - move mib2c-update from net-snmp-utils to net-snmp-perl, where
    mib2c is located
  - add tkmib to net-snmp-gui package (#167933)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-6
changelog:
  - add support of lm_sensors v3
  - added procps to build dependencies (#380321)
  - removed beecrypt from dependencies
  - fixed crash on reading xen interfaces (#386611)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-9
changelog:
  - introduce /etc/sysconfig/snmpd. Use it to specify snmpd command line options.
    /etc/snmp/snmpd.options is not used anymore (#431391)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-15
changelog:
  - explicitly require lm_sensor > 3 for build (#442718)
  - create multilib net-snmp-config on multilib architectures only


author: Jan Safranek <jsafranek@redhat.com> 5.4.2-2
changelog:
  - redistribute the perl scripts to the net-snmp package,
    net-snmp-utils doesn't depend on perl now (#462484)


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-1
changelog:
  - explicitly require the right version and release of net-snmp and
    net-snmp-libs
  - update to net-snmp-5.4.2.1 to fix CVE-2008-4309


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-12
changelog:
  - make the default configuration less noisy, i.e. do not print "Connection from
    UDP:" and "Received SNMP packet(s) from UDP:" messages on each connection.
    (#509055)


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-13
changelog:
  - package cleanup, remove unnecessary patches
  - move local state file from /var/net-snmp/ to /var/lib/net-snmp


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-2
changelog:
  - introduce /etc/sysconfig/snmptrapd. Use it to specify snmptrapd command
    line options.  /etc/snmp/snmptrapd.options is not used anymore (#540799)
  - build-in ipAddressPrefixTable, ipDefaultRouterTable, ipv6ScopeZoneIndexTable,
    ipIfStatsTable, SCTP-MIB, RMON-MIB and Etherlike-MIBs
  - remove ucd5820stat helper script, it depends on get5820stats, which is not
    available in Fedora
  - move sample services ipf-mod.pl to documentation
  - remove logrotate config, snmpd logs into syslog


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-3
changelog:
  - prepare the .spec file for review
  - run automatic regression suite after the compilation of the package
    to check for obvious regressions
  - remove unnecessary package dependencies


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-4
changelog:
  - fix udpTable indexes on big-endian systems (#543352)
  - fix snmptrapd init script to survive with empty /etc/sysconfig/snmptrapd
  - lower the default log level of snmpd to get rid of the debug messages


author: Jan Safranek <jsafrane@redhat.com> - 1:5.6-5
changelog:
  - re-create /var/run/net-snmp on boot using tmpfiles.d (#656637)
  - move snmp-bridge-mib and net-snmp-cert utilities to net-snmp-perl
    subpackage, net-snmp-utils subpackage does not depend on Perl now


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7-2
changelog:
  - restored rpath in net-snmp-config output - SNMP subagent won't link
    with libsnmpagent.so without it, linker needs to know location
    of libperl.so
  - fixed check section to make tests pass on machine without DNS


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7-6
changelog:
  - added new net-snmp-agent-libs subpackage with agent libraries
    -> net-snmp-libs do not need perl and lm_sensors libs
  - removed libsnmp.so, it's not used in Fedora (#729811)
  - added README.systemd
  - added new net-snmp-sysvinit subpackage with legacy init scripts
    (#718183)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.1-1
changelog:
  - updated to 5.7.1:
    - Fixed the mib-parsing-bug introduced shortly before 5.7
    - fixed rounding errors for disk percentage calculations
    - Many other miscellaneous minor bug fixes


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.1-10
changelog:
  - Updated RPM scriplets with latest systemd-rpm macros (#850403).
  - Fixed fedora-review tool complaints.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-3
changelog:
  - Added direct dependency on perl-devel with architectute in
    net-snmp-devel package to pull proper dependencies.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-6
changelog:
  - fixed net-snmp-create-v3-user to have the same content on all architectures
  - /var/lib/net-snmp/mib_indexes and cert_indexes added to net-snmp-libs
    (#906761)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-10
changelog:
  - moved agentxtrap utility to net-snmp subpackage,
    it needs libraries provided by net-snmp-agent-libs.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-13
changelog:
  - set permissions of snmpd.conf and snmptrapd conf to 0600 to prevent
    users from reading passwords and community strings.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-16
changelog:
  - Fixed snmpd crashing when AgentX subagent disconnects in the middle of
    request processing (#1038011)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-23
changelog:
  - Fixed CVE-2014-3565
  - Fixed net-snmp-cert tool, now it does not depend on net-snmp-devel (#1134475)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-13
changelog:
  - net-snmp.redhat.conf: update default configuration to conform to the best practices (#1359123)
  - nmp_transport.c: use strtok_r for strtok to avoid a race condition (#1366282)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-15
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
  - Add support for new version of OpenSSL library (#1423984)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-19
changelog:
  - Fix issue with undefined symbol my_progname when try to load NetSNMP::TrapReceiver in perl script. (#1470004)


author: Adam Williamson <awilliam@redhat.com> -1:5.7.3-20
changelog:
  - Edit fix of issue with undefined symbol my_progname when try to load
    NetSNMP::TrapReceiver in perl script (#1470004)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:5.7.3-26
changelog:
  - Python 2 binary package renamed to python2-net-snmp
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-30
changelog:
  - remove Group tag
  - remove sysvinit package and init files (no longer needed)
  - fix python2 references and dependencies in spec file


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-33
changelog:
  - Fix strstr() crash when looking for RPM Group tag
  - Fix wrong usage of structure iterator
  - Fix issue with statistics from autofs


author: Josef Ridky <jridky@redhat.com> - 1:5.8-2
changelog:
  - fix default configuration file (#1589480 and #1594147)
  - modify permissions for config files (#1601060)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-14
changelog:
  - fix double free or corruption error when freeing security context (#1809077)
  - remove deprecated CFLAG


author: Josef Ridky <jridky@redhat.com> - 1:5.8-15
changelog:
  - proxied OIDs unspecified in proxy statement in snmpd.conf (#1658134)
  - UCD-SNMP-MIB::dskTable doesn't update dynamically (#1658185)
  - expand SNMPCONFPATH variable (#1660146)
  - remove file with Apple license (#1690936)
  - log meningful message on duplicate IP address (#1692286)
  - memory reporting adjustment (#1695497 and #1766521)
  - fix typos in man page (#1700262)
  - speedup ipAddressTable loading(#1700391)
  - fix memory leak when shut down librpm (#1763008)
  - services starts after network-online.target (#1775304)
  - add missing part of memory leak patch (#1829860)
  - add support for AES192 and AES256 (#1846252)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-19
changelog:
  - revert permission of config files to 600 (#1601060)
  - fix error message when the address specified by clientaddr option
    is wrong or cannot be bound (#1877375)
  - log error with /proc/net/if_inet6 only when IPv6 is enabled (#1824367)
  - fix issue with quoting empty passphrase (#1817225)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-21
changelog:
  - prevent parsing IP address twice (#1768908)
  - add support for digests detected from ECC certs (#1919714)
  - fix broken ErrorMsg at ucd-snmp (#1933150)
  - add support for intermediate certs (#1914656)
  - fix crash of certs with longer extension (#1908718)


author: Tomáš Mráz <tmraz@redhat.com> - 3.4-4
changelog:
  - Cover the gaps in annotation coverage for assembler sources
  - Add .hmac checksums for FIPS mode integrity checking


author: Daiki Ueno <dueno@redhat.com> - 3.4.1-5
changelog:
  - Backport powerpc64 optimization patches from upstream (#1855228)
    Patch from Christopher M. Riedl.


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Gris Ge <fge@redhat.com> - 2.2.33-1
changelog:
  - Upgrade to 2.2.33
  - Fix validation of controller overbook. RHEL-40683
  - Support DNS and route in kernel mode. RHEL-37665


author: Gris Ge <fge@redhat.com> - 2.2.35-1
changelog:
  - Upgrade to 2.2.35
  - Fix gen_diff on VLAN ID change. RHEL-38623
  - Fix Nmpolicy on mac-address identifier. RHEL-54292
  - Fix reapply. RHEL-50556


author: Gris Ge <fge@redhat.com> - 2.2.38-1
changelog:
  - Upgrade to 2.2.38
  - Fix gc mode on blackhole route. RHEL-58666
  - Only search desired interface for storing route rule. RHEL-60261


author: Wen Liang <wenliang@redhat.com> - 2.2.39-1
changelog:
  - Upgrade to 2.2.39
  - Fix VLAN interface being removed unnecessarily due to route mismatches triggering deactivations. RHEL-65031


author: Till Maas <opensource@till.name> - 0.0.4-2
changelog:
  - Sync with upstream spec
  - Use Recommends for NetworkManager
  - Add Suggests for NetworkManager-ovs
  - package examples as doc


author: Ana Cabral <acabral@redhat.com> - 2.0.0-0.4.alpha3
changelog:
  - Upgrade to 2.0.0 alpha 3. Resolves: RHBZ#1996575
  - Remove connection renaming behaviour. Resolves: RHBZ#1998222
  - Add prefixes to OVS bridges and interfaces connections. Resolves: RHBZ#1998218
  - Improve OVS bridge start with nmstate. Resolves: RHBZ#1660250


author: Gris Ge <fge@redhat.com> - 2.2.27-1
changelog:
  - N/A

   - Support TCP congestion window(cwnd) in route. (59f99632)
   - Support query interface driver. (67817c23)
   - New API to generate changed state. (fe5327a2)

   - Include driver information for `persist-nic-names` subcommand. (1129e46b)
   - nm: Protect global DNS config in checkpoint. (881373ba)
   - route rule: Append rule instead of overriding when iface defined. (88d3d3ef)
  - Resolves RHEL-19409


author: Íñigo Huguet <ihuguet@redhat.com> - 2.2.40-1
changelog:
  - Upgrade to 2.2.40
  - Provide an option to disable only nmstate log in python API (RHEL-76316)
  - Remove down up workaround for route removal in Nmstate (RHEL-75151)


author: Gris Ge <fge@redhat.com> - 2.2.41-1
changelog:
  - Upgrade to 2.2.41.
  - Support nm connection with empty connection.interface-name (RHEL-82661)
  - Fix ovsdb purging issue (RHEL-79176)


author: Gris Ge <fge@redhat.com> - 2.2.36-1
changelog:
  - Upgrade to 2.2.36
  - Support route source. RHEL-56258
  - Fix setting empty MPTCP flags. RHEL-38607
  - Fix gc mode on blackhole route. RHEL-56727
  - Support ipsec require-id-on-certificate. RHEL-50696
  - Reselect iface DNS if desired. RHEL-56557


author: Gris Ge <fge@redhat.com> - 2.2.38-1
changelog:
  - Upgrade to 2.2.38
  - Preserve current IP setting for multiconnect profile. RHEL-61890
  - Fix profile name changing. RHEL-59239
  - IPvlan support. RHEL-43438
  - Handle ipv6.method: ignore. RHEL-58406


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 2.2.40-1
changelog:
  - Upgrade to 2.2.40
  - Do not deactivate connection when removing routes. RHEL-70138
  - Use specific libnmstate logger. RHEL-72016
  - Do not deactivate connection if mptcp flags didn't change. RHEL-53211


author: Gris Ge <fge@redhat.com> - 2.2.41-1
changelog:
  - Upgrade to 2.2.41
  - Fix the lose of OVS DB system-id. RHEL-78652
  - Support overriding interface config. RHEL-59935


author: Wen Liang <wenliang@redhat.com> - 2.2.43-1
changelog:
  - Upgrade to 2.2.43
  - Support ethtool Forward Error Correction (FEC). RHEL-80786
  - Support nm connection with empty connection.interface-name. RHEL-82662


author: Dridi Boukelmoune <dridi@fedoraproject.org>- 2.1-1
changelog:
  - Update to 2.1
  - Upstream moved to github
  - Upstream switched to autotools
  - Disable --as-needed until it's patched upstream
  - Drop defunct 32bit x86 support
  - Add ppc64le support
  - Run the new test suite


author: Ralph Apel <r.apel@r-apel.de> - 0:3.1-3jpp
changelog:
  - Add poms and depmap frags with groupId of org.objectweb.asm !
  - Add asm-all.jar 
  - Add -javadoc Requires post and postun
  - Restore Vendor, Distribution


author: David Walluck <dwalluck@redhat.com> 0:3.1-4
changelog:
  - remove Class-Path from MANIFEST.MF
  - add unversioned javadoc symlink
  - remove javadoc scriptlets
  - fix directory ownership
  - remove build requirement on dos2unix


author: Mat Booth <mat.booth@redhat.com> - 6.1.1-1
changelog:
  - Update to latest upstream relase for Java 10 support
  - Switch to maven build
  - Now executing test suites


author: Guido Grazioli <guido.grazioli@gmail.com> 1.2-4
changelog:
  - Drop buildroot and %clean section
  - Drop use of maven2-settings.xml and jpp-depmap.xml
  - Install unversioned jars
  - Clean up of needed patch and mvn-jpp execution


author: Jiri Vanek <jvanek@redhat.com> 1.2-9
changelog:
  - Added patch2 - JRockitInstantntiatorCharacters.patch to fix unmappable characters
  - Added build requires  apache-resource-bundles and  maven-remote-resources-plugin


author: Danilo de Paula <ddepaula@redhat.com> - 1.3.15-7
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1695587
    (Ensure modular RPM upgrade path)


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.2-1
changelog:
  - New upstream version 1.0.2.
  - Remove patches which are upstream.
  - Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842).
  - Fix previous commit message.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.3-1
changelog:
  - New upstream version 1.0.3.
  - Contains fix for remote code execution vulnerability.
  - Add new libnbd-security(3) man page.


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.4-7
changelog:
  - Drop Python 2 build-time dependency, which hasn't been used since we turned
    off building the python bindings years ago (#1595853, #1642502).


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.5-1
changelog:
  - Upstream release 0.34.5
  - Resolves: rhbz#1833289 - Rebase oddjob to 0.34.5
  - Resolves: rhbz#1833052 - CVE-2020-10737 
    oddjob: race condition in oddjob_selinux_mkdir function in mkhomedir.c can lead to symlink attack


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-1
changelog:
  - Upstream release 0.34.7
  - Force LC_ALL=C.UTF-8 in oddjobd systemd service environment
  - Resolves: rhbz#1907481 - oddjob locale issue
  - Resolves: rhbz#1907541 - rebase oddjob to 0.34.7


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-2
changelog:
  - fix cmakes location
  - remove -DENABLE_PKG_CONFIG=OFF (it was neither defined nor used)
  - remove confusing comment
  - WITH_GDAL=OFF (gdal dependency has been already removed)
    Related: #1694647


author: Jiri Kucera <jkucera@redhat.com> - 3.4.6-5
changelog:
  - Move libopencv_{calib3d,cvv,hfs}.so.* to their proper packages
  - Fix issues found by rpmdiff
    Related: #1694647


author: Jakub Jelen <jjelen@redhat.com> - 0.19.0-6
changelog:
  - Add support for Gemalto IDPrime smart cards (#1657970)
  - Fix 2k RSA key operations with Coolkey (#1766712)


author: Jakub Jelen <jjelen@redhat.com> - 0.20.0-3
changelog:
  - Support PIN change for HID Alt tokens (#1830901)
  - Fix CVE-2020-26570, CVE-2020-26571 and CVE-2020-26572
  - Fix right padding of token labels of some cards (#1877973)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.0.0-15
changelog:
  - Removed dependency on net-tools
    Resolves: #1496138
  - Removed init script, Group tag and macro from changelog in spec file
  - Slightly modified openssl-1.1 fix to be able build the package
    with OpenSSL version lower than 1.1


author: Anderson Sasaki <ansasaki@redhat.com> - 0.4.8-1
changelog:
  - Update to 0.4.8-1
  - RSA key generation on the token
  - RSA-OAEP and RSA-PKCS encryption support
  - RSA-PSS signature support
  - Support for OpenSSL 1.1.1 beta
  - Removed support for OpenSSL 0.9.8
  - Various bug fixes and enhancements


author: Anderson Sasaki <ansasaki@redhat.com> - 0.4.8-2
changelog:
  - Require OpenSSL >= 1.0.2
  - Fixed missing declaration of ERR_get_CKR_code()
  - Add support to use EC keys and tests (#1625338)
  - Exposed check_fork() API
  - Fixed memory leak of RSA objects in pkcs11_store_key()
  - Updated OpenSSL license in eng_front.c
  - Fixed build for old C dialects
  - Allow engine to use private key without PIN
  - Require DEBUG to be defined to print debug messages
  - Changed package description


author: Anderson Sasaki <ansasaki@redhat.com> - 0.4.10-1
changelog:
  - Update to 0.4.10 (#1745082)
  - Add BuildRequires for OpenSSL >= 1.0.2, required for testing
  - Print tests logs if failed during build
  - Small bug fixes such as removal of unused variable
  - Search objects in all matching tokens (#1705505)


author: Christian Kellner <ckellner@redhat.com> - 9-1
changelog:
  - new upstream release: 9
  - Remove host runner link, it now is being auto-detected
  - Cleanup use of mixed use of spaces/tabs


author: Christian Kellner <ckellner@redhat.com> - 10-1
changelog:
  - new upstream release 10
  - build and include man pages, this adds 'make' and 'python3-docutils'
    to the build requirements
  - add NEWS.md file with the release notes


author: Christian Kellner <ckellner@redhat.com> - 12-1
changelog:
  - new upstream release 12
  - Specify the exact version in the 'python3-osbuild' requirement
    to avoid the library and the main binary being out of sync.
  - osbuild-ostree sub-package with the necessary bits to create
    OSTree based images


author: Christian Kellner <christian@kellner.me> - 14-1
changelog:
  - new upstream release 14
  - The directories /usr/lib/osbuild/{assemblers, stages}/osbuild
    got removed. Changes to osbuild made them obsolete.


author: Christian Kellner <christian@kellner.me> - 14-2
changelog:
  - Install schemata to <datadir>/osbuild/schemas and include a
    symlink to it in /usr/lib/osbuild/schemas


author: Christian Kellner <ckellner@redhat.com> - 15-3
changelog:
  - Add a patch to allow org.osbuild.files source in the new format
    but without actually containing the secrets key.
    Taken from merged PR: https://github.com/osbuild/osbuild/pull/416


author: Christian Kellner <ckellner@redhat.com> - 16-1
changelog:
  - new upstream release 16
  - Drop sources-fix-break-when-secrets-is-None.patch included in
    the new upstream reelase.


author: Christian Kellner <ckellner@redhat.com> - 17-1
changelog:
  - new upstream relaese 17
  - Add custom SELinux policy that lets osbuild set labels inside
    the build root that are unknown to the host.


author: Christian Kellner <ckellner@redhat.com> - 18-2
changelog:
  - Add patch to not pass floats to curl in the files source
    https://github.com/osbuild/osbuild/pull/459


author: Christian Kellner <ckellner@redhat.com> - 19-1
changelog:
  - Upstream release 19
  - Drop no-floats-in-sources.patch included in release 19
  - bubblewrap replaced systemd-nspawn for sandboxing; change the
    requirements accordingly.


author: Christian Kellner <ckellner@redhat.com> - 24-1
changelog:
  - Upstream release 24
  - Turn on dependency generator for everything but runners
  - Include new 'input' binaries


author: Christian Kellner <ckellner@redhat.com> - 25-1
changelog:
  - Upstream release 25
  - First tech preview of the new manifest format. Includes
    various new stages and inputs to be able to build ostree
    commits contained in a oci archive.


author: Christian Kellner <ckellner@redhat.com> - 26-1
changelog:
  - Upstream release 26
  - Support for building boot isos
  - Grub stage gained support for 'saved_entry' to fix grub tooling


author: Christian Kellner <ckellner@redhat.com> - 27-1
changelog:
  - Upstream release 27
  - Various bug fixes related to the new container and installer
    stages introdcued in version 25 and 26.


author: Ondřej Budai <ondrej@budai.cz> - 30-1
changelog:
  - Upstream release 30
  - Many new stages for building ostree-based raw images
  - Bootiso.mono stage was deprecated and split into smaller stages
  - Mounts are now represented as an array in a manifest
  - Various bug fixes and improvements to various stages


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Pacemaker Remote nodes can validate against later schema versions
  - Resolves: RHEL-7597
  - Related: RHEL-17224


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7597
  - Related: RHEL-14045


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-14045
  - Resolves: RHEL-17224
  - Resolves: RHEL-23065


author: Andrew Beekhof <andrew@beekhof.net> - 1.1.2-1
changelog:
  - Update the tarball from the upstream 1.1.2 release
  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/main/ChangeLog for full details


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.9-2
changelog:
  - Update for new upstream tarball: 781a388
  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/main/ChangeLog for full details


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.9-3
changelog:
  - Update to upstream 7d8acec
  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/main/ChangeLog for full details

    + Feature: Turn off auto-respawning of systemd services when the cluster starts them
    + Fix: crmd: Ensure operations for cleaned up resources don't block recovery
    + Fix: logging: If SIGTRAP is sent before tracing is turned on, turn it on instead of crashing


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.11-1
changelog:
  - Update for new upstream tarball: Pacemaker-1.1.11 (9d39a6b)
  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/main/ChangeLog for full details


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-1
changelog:
  - Update for new upstream tarball: Pacemaker-1.1.12+ (a9c8177)
  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/main/ChangeLog for full details


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.13-2
changelog:
  - Update for new upstream tarball: Pacemaker-1.1.13
  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/main/ChangeLog for full details


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.13-3
changelog:
  - Update to Pacemaker-1.1.13 post-release + patches (sync)
  - Add nagios-plugins-metadata subpackage enabling support of selected
    Nagios plugins as resources recognized by Pacemaker
  - Several specfile improvements: drop irrelevant stuff, rehash the
    included/excluded files + dependencies, add check scriptlet,
    reflect current packaging practice, do minor cleanups
    (mostly adopted from another spec)


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.14-1
changelog:
  - Update for new upstream tarball: Pacemaker-1.1.14,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.14
  - Disable Fedora crypto policies conformance patch for now (rhbz#1179335)
  - Better align specfile with the upstream version (also fix issue with
    crm_mon sysconfig file not being installed)
  - Further specfile modifications:
    - drop unused gcc-c++ and repeatedly mentioned pkgconfig packages
      from BuildRequires
    - refer to python_sitearch macro first, if defined
    - tolerate license macro not being defined (e.g., for EPEL rebuilds)
  - Prevent console mode not available in crm_mon due to curses library test
    fragility of configure script in hardened build environment (rhbz#1297985)


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.14-2.5a6cdd1.git
changelog:
  - Update for currently stabilized snapshot beyond Pacemaker-1.1.14
    (commit 5a6cdd1), but restore old-style notifications to the state at
    Pacemaker-1.1.14 point release (disabled)
  - Definitely get rid of Corosync v1 (Flatiron) hypothetical support
  - Remove some of the spec file cruft, not required for years
    (BuildRoot, AutoReqProv, "clean" scriptlet, etc.) and adapt the file
    per https://github.com/ClusterLabs/pacemaker/pull/965


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.15-0.1.rc1
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-1.1.15-rc1,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.15-rc1
  - Adapt spec file more akin to upstream version (also to reflect recent
    changes like ability to built explicitly without Publican-based docs)


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.15-0.1.rc2
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-1.1.15-rc2,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.15-rc2


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.15-0.1.rc3
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-1.1.15-rc3,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.15-rc3
  - Drop fence_pcmk (incl. man page) from the package (no use where no CMAN)
  - Drop license macro emulation for cases when not supported natively
    (several recent Fedora releases do not need that)


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.15-1
changelog:
  - Update for new upstream tarball: Pacemaker-1.1.15,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.15
  - Adapt spec file more akin to upstream version:
    . move xml schema files + PCMK-MIB.txt (81ef956), logrotate configuration
      file (ce576cf; drop it from -remote package as well), attrd_updater
      (aff80ae), the normal resource agents (1fc7287), and common directories
      under /var/lib/pacemaker (3492794) from main package under -cli
    . simplify docdir build parameter passing and drop as of now
      redundant chmod invocations (e91769e)


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.15-2
changelog:
  - Stop building with -fstack-protector-all using the upstream patches
    overhauling toolchain hardening (Fedora natively uses
    -fstack-protector-strong so this effectively relaxed stack protection
    is the only effect as hardened flags are already used by default:
    https://fedoraproject.org/wiki/Changes/Harden_All_Packages)


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.16-1
changelog:
  - Update for new upstream tarball: Pacemaker-1.1.16,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.16
  - Adapt spec file more akin to upstream version including:
    . clarify licensing, especially for -doc (f01f734)
    . fix pacemaker-remote upgrade (779e0e3)
    . require python >= 2.6 (31ef7f0)
    . older libqb is sufficient (based on 30fe1ce)
    . remove openssl-devel and libselinux-devel as BRs (2e05c17)
    . make systemd BR pkgconfig-driven (6285924)
    . defines instead of some globals + error suppression (625d427)
  - Rectify -nagios-plugins-metadata declared license and install
    also respective license text


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.16-2.a39ea6491.git
changelog:
  - Update for (slightly stabilized) snapshot beyond Pacemaker-1.1.16
    (commit a39ea6491), including:
    . prevent FTBFS with new GCC 7 (a7476dd96)
  - Adapt spec file more akin to upstream version including:
    . better pre-release vs. tags logic (4581d4366)


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.17-0.1.rc1
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-1.1.17-rc1,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.17-rc1


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.17-0.1.rc2
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-1.1.17-rc2,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.17-rc2


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.17-0.1.rc3
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-1.1.17-rc3,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.17-rc3


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.17-0.1.rc4
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-1.1.17-rc4,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.17-rc4
  - Add an imposed lower bound for glib2 BuildRequires


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.17-1
changelog:
  - Update for new upstream tarball: Pacemaker-1.1.17,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.17


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.17-2
changelog:
  - Rebuilt to fix libqb vs. ld.bfd/binutils-2.29 incompatibility making
    some CLI executables unusable under some circumstances (rhbz#1503843)


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.0-7
changelog:
  - Include upstream main branch commits through 975347d4
  - Resolves: rhbz#1543494
  - Resolves: rhbz#1602650
  - Resolves: rhbz#1608369


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.0-8
changelog:
  - Rebase on upstream commit dd6fd26f77945b9bb100d5a3134f149b27601552
  - Fixes (unreleased) API regression
  - Resolves: rhbz#1543494
  - Resolves: rhbz#1622969


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.0-9
changelog:
  - Rebase on upstream commit c4330b46bf1c3dcd3e367b436efb3bbf82ef51cd
  - Support podman as bundle container launcher
  - Ignore fence history in crm_mon when using CIB_file
  - Resolves: rhbz#1543494
  - Resolves: rhbz#1607898
  - Resolves: rhbz#1625231


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.0-10
changelog:
  - Rebase on upstream commit b67d8d0de9794e59719608d9b156b4a3c6556344
  - Update spec for Python macro changes
  - Resolves: rhbz#1543494
  - Resolves: rhbz#1633612


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.1-1
changelog:
  - Rebase on upstream commit 0eb799156489376e13fb79dca47ea9160e9d4595 (Pacemaker-2.0.1-rc1)
  - Follow upstream change of splitting XML schemas into separate package
  - Resolves: rhbz#1543494


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.1-2
changelog:
  - Move pacemaker-doc installed files to /usr/share/doc/pacemaker-doc
    to avoid conflict with RHEL 8 location of pacemaker subpackage docs
  - Resolves: rhbz#1543494


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.1-5
changelog:
  - Add gating tests for CI
  - Restore correct behavior when live migration is interrupted
  - Improve clients' authentication of IPC servers (CVE-2018-16877)
  - Fix use-after-free with potential information disclosure (CVE-2019-3885)
  - Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
  - Resolves: rhbz#1682116
  - Resolves: rhbz#1684306
  - Resolves: rhbz#1694558
  - Resolves: rhbz#1694560
  - Resolves: rhbz#1694908


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.2-1
changelog:
  - Add stonith_admin option to display XML output
  - Add new crm_rule tool to check date/time rules
  - List any constraints cleared by crm_resource --clear
  - crm_resource --validate can now get resource parameters from command line
  - Rebase on upstream version 2.0.2
  - Default concurrent-fencing to true
  - Resolves: rhbz#1555939
  - Resolves: rhbz#1572116
  - Resolves: rhbz#1631752
  - Resolves: rhbz#1637020
  - Resolves: rhbz#1695737
  - Resolves: rhbz#1715426


author: Klaus Wenninger <kwenning@redhat.com> - 2.0.2-2
changelog:
  - Synchronize fence-history on fenced-restart
  - Cleanup leftover pending-fence-actions when fenced is restarted
  - Improve fencing of remote-nodes
  - Resolves: rhbz#1708380
  - Resolves: rhbz#1708378
  - Resolves: rhbz#1721198
  - Resolves: rhbz#1695737


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.3-1
changelog:
  - Rebase on Pacemaker-2.0.3-rc2
  - Parse crm_mon --fence-history option correctly
  - Put timeout on controller waiting for scheduler response
  - Offer Pacemaker Remote option for bind address
  - Calculate cluster recheck interval dynamically
  - Clarify crm_resource help text
  - Reduce system calls after forking a child process
  - Resolves: rhbz1699978
  - Resolves: rhbz1725236
  - Resolves: rhbz1743377
  - Resolves: rhbz1747553
  - Resolves: rhbz1748805
  - Resolves: rhbz1752538
  - Resolves: rhbz1762025


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.4-1
changelog:
  - Clear leaving node's attributes if there is no DC
  - Add crm_mon --node option to limit display to particular node or tagged nodes
  - Add crm_mon --include/--exclude options to select what sections are shown
  - priority-fencing-delay option bases delay on where resources are active
  - Pending DC fencing gets 'stuck' in status display
  - crm_rule can now check rule expiration when "years" is specified
  - crm_mon now formats error messages better
  - Support for CIB secrets is enabled
  - Rebase on latest upstream Pacemaker release
  - Fix regression introduced in 8.2 so crm_node -n works on remote nodes
  - Avoid infinite loop when topology is removed while unfencing is in progress
  - Resolves: rhbz1300604
  - Resolves: rhbz1363907
  - Resolves: rhbz1784601
  - Resolves: rhbz1787751
  - Resolves: rhbz1790591
  - Resolves: rhbz1793653
  - Resolves: rhbz1793860
  - Resolves: rhbz1828488
  - Resolves: rhbz1830535
  - Resolves: rhbz1831775


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.4-3
changelog:
  - Allow resource and operation defaults per resource or operation type
  - Rebase on upstream 2.0.4 final release
  - Support on-fail="demote" and no-quorum-policy="demote" options
  - Remove incorrect comment from sysconfig file
  - Resolves: rhbz1628701
  - Resolves: rhbz1828488
  - Resolves: rhbz1837747
  - Resolves: rhbz1848789


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.4-4
changelog:
  - Allow crm_node -l/-p options to work from Pacemaker Remote nodes
  - Correct action timeout value listed in log message
  - Fix regression in crm_mon --daemonize with HTML output
  - Resolves: rhbz1796824
  - Resolves: rhbz1856035
  - Resolves: rhbz1857728


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.5-1
changelog:
  - crm_mon --resource option to filter output by resource
  - Avoid filling /dev/shm after frequent corosync errors
  - Allow configurable permissions for log files
  - Ensure ACL write permission always supersedes read
  - Use fence device monitor timeout for starts and probes
  - Allow type="integer" in rule expressions
  - Avoid error messages when running crm_node inside bundles
  - Avoid situation where promotion is not scheduled until next transition
  - crm_mon should show more clearly when an entire group is disabled
  - Rebase on upstream 2.0.5-rc1 release
  - Resolves: rhbz1300597
  - Resolves: rhbz1614166
  - Resolves: rhbz1647136
  - Resolves: rhbz1833173
  - Resolves: rhbz1856015
  - Resolves: rhbz1866573
  - Resolves: rhbz1874391
  - Resolves: rhbz1835717
  - Resolves: rhbz1748139
  - Resolves: rhbz1885645


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.5-2
changelog:
  - Rebase on upstream 2.0.5-rc2 release
  - Prevent ACL bypass (CVE-2020-25654)
  - Resolves: rhbz1885645
  - Resolves: rhbz1889582


author: Klaus Wenninger <kwenning@redhat.com> - 2.0.5-4
changelog:
  - Rebase on upstream 2.0.5 release
  - Make waiting to be pinged by sbd via pacemakerd-api the default
  - Resolves: rhbz1885645
  - Resolves: rhbz1873138


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.5-5
changelog:
  - Allow non-critical resources that stop rather than make another resource move
  - Support crm_resource --digests option for showing operation digests
  - Clean-up of all resources should work from remote nodes
  - Resolves: rhbz1371576
  - Resolves: rhbz1872376
  - Resolves: rhbz1907726


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.5-6
changelog:
  - crm_mon --daemonize should reconnect if cluster restarts
  - crm_mon should show more informative messages when cluster is starting
  - crm_mon should show rest of status if fencing history is unavailable
  - cibsecret now works on remote nodes (as long as name can be reached via ssh)
  - Stop remote nodes correctly when connection history is later than node history
  - Resolves: rhbz1466875
  - Resolves: rhbz1872490
  - Resolves: rhbz1880426
  - Resolves: rhbz1881537
  - Resolves: rhbz1898457


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-1
changelog:
  - Add crm_simulate --show-attrs and --show-failcounts options
  - Retry getting fence agent meta-data after initial failure
  - Add debug option for more verbose ocf:pacemaker:ping logs
  - Rebase on upstream 2.1.0-rc2 release
  - Support OCF Resource Agent API 1.1 standard
  - Fix crm_mon regression that could cause certain agents to fail at shutdown
  - Allow setting OCF check level for crm_resource --validate and --force-check
  - Resolves: rhbz1686426
  - Resolves: rhbz1797579
  - Resolves: rhbz1843177
  - Resolves: rhbz1935464
  - Resolves: rhbz1936696
  - Resolves: rhbz1948620
  - Resolves: rhbz1955792


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-2
changelog:
  - Rebase on upstream 2.1.0 final release
  - Correct schema for crm_resource XML output
  - Resolves: rhbz1935464
  - Resolves: rhbz1967087


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-3
changelog:
  - crm_resource now supports XML output from resource agent actions
  - Correct output for crm_simulate --show-failcounts
  - Avoid remote node unfencing loop
  - Resolves: rhbz1644628
  - Resolves: rhbz1686426
  - Resolves: rhbz1961857


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-4
changelog:
  - Show better error messages in crm_resource with invalid resource types
  - Avoid selecting wrong device when dynamic-list fencing is used with host map
  - Do not schedule probes of unmanaged resources on pending nodes
  - Fix argument handling regressions in crm_attribute and wrappers
  - Resolves: rhbz1447918
  - Resolves: rhbz1978010
  - Resolves: rhbz1982453
  - Resolves: rhbz1984120


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-6
changelog:
  - Fix watchdog agent version information
  - Ensure transient attributes are cleared when multiple nodes are lost
  - Resolves: rhbz1443666
  - Resolves: rhbz1986998


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-1
changelog:
  - Allow per-host fence delays for a single fence device
  - Use OCF 1.1 enum type in cluster option metadata for better validation
  - crm-resource --force-* now works with LSB resources
  - Allow spaces in pcmk_host_map
  - ACL group names are no longer restricted to a unique XML id
  - Rebase on upstream 2.1.2
  - Ensure upgrades get compatible Corosync libraries
  - Resolves: rhbz1082146
  - Resolves: rhbz1281463
  - Resolves: rhbz1346014
  - Resolves: rhbz1376538
  - Resolves: rhbz1384420
  - Resolves: rhbz2011973
  - Resolves: rhbz2027006


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-2
changelog:
  - Correctly get metadata for systemd agent names that end in '@'
  - Use correct OCF 1.1 syntax in ocf:pacemaker:Stateful meta-data
  - Fix regression in displayed times in crm_mon's fence history
  - Resolves: rhbz2003151
  - Resolves: rhbz2027370
  - Resolves: rhbz2032027


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-3
changelog:
  - Improve display of failed actions
  - Handle certain probe failures as stopped instead of failed
  - Update pcmk_delay_base description in option meta-data
  - Avoid crash when using clone notifications
  - Retry Corosync shutdown tracking if first attempt fails
  - Resolves: rhbz1470834
  - Resolves: rhbz1506372
  - Resolves: rhbz2027370
  - Resolves: rhbz2039675
  - Resolves: rhbz2042550


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.3-1
changelog:
  - crm_resource --restart fails to restart clone instances except instance 0
  - Add new multiple-active option for "stop unexpected instances"
  - Unable to show metadata for "service" agents with "@" and "." in the name
  - Resource ocf:pacemaker:attribute does not comply with the OCF 1.1 standard
  - Allow resource meta-attribute to exempt resource from node health restrictions
  - Show node health states in crm_mon
  - Rebase pacemaker on upstream 2.1.3-rc2 release
  - crm_mon API result does not validate against schema if fence event has exit-reason
  - Resolves: rhbz1930578
  - Resolves: rhbz2036815
  - Resolves: rhbz2045096
  - Resolves: rhbz2049722
  - Resolves: rhbz2059638
  - Resolves: rhbz2065812
  - Resolves: rhbz2072107
  - Resolves: rhbz2086230


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.3-2
changelog:
  - crm_attribute works on remote node command line when hostname differs
  - Rebase pacemaker on upstream 2.1.3 final release
  - Resolves: rhbz1384172
  - Resolves: rhbz2072107


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.4-1
changelog:
  - Fencer should not ignore CIB updates when stonith is disabled
  - Rebase pacemaker on upstream 2.1.4 final release
  - Fix typo in ocf:pacemaker:HealthSMART meta-data
  - Resolves: rhbz2055935
  - Resolves: rhbz2072107
  - Resolves: rhbz2094855


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.4-4
changelog:
  - Ensure all nodes are re-unfenced after device configuration change
  - crm_resource --why now checks node health status
  - Resolves: rhbz1872483
  - Resolves: rhbz2065818


author: Chris Lumens <clumens@redhat.com> - 2.1.5-1
changelog:
  - Rebase on upstream 2.1.5-rc2 release
  - Resolves: rhbz1822125
  - Resolves: rhbz2095662
  - Resolves: rhbz2121852
  - Resolves: rhbz2122806
  - Resolves: rhbz2133497
  - Resolves: rhbz2142681


author: Chris Lumens <clumens@redhat.com> - 2.1.5-4
changelog:
  - Rebase pacemaker on upstream 2.1.5 final release
  - Add support for sync points to attribute daemon
  - Resolves: rhbz1463033
  - Resolves: rhbz1866578
  - Resolves: rhbz2122352


author: Chris Lumens <clumens@redhat.com> - 2.1.5-6
changelog:
  - Backport fix for migration history cleanup causing resource recovery
  - Backport fix for SIGABRT during pacemaker-fenced shutdown
  - Resolves: rhbz2166388
  - Resolves: rhbz2168249


author: Chris Lumens <clumens@redhat.com> - 2.1.5-7
changelog:
  - Additional fixes for SIGABRT during pacemaker-fenced shutdown
  - Backport fix for attrd_updater -QA not displaying all nodes
  - Related: rhbz2168249
  - Resolves: rhbz2168675


author: Chris Lumens <clumens@redhat.com> - 2.1.5-8
changelog:
  - Rebuild with new release due to build system problems
  - Related: rhbz2168249
  - Related: rhbz2168675


author: Chris Lumens <clumens@redhat.com> - 2.1.6-1
changelog:
  - Rebase pacemaker on upstream 2.1.6 final release
  - Resolves: rhbz1578820
  - Resolves: rhbz1632951
  - Resolves: rhbz1876173
  - Resolves: rhbz2010084
  - Resolves: rhbz2030869
  - Resolves: rhbz2078611
  - Resolves: rhbz2106642
  - Resolves: rhbz2160206
  - Resolves: rhbz2168633


author: Chris Lumens <clumens@redhat.com> - 2.1.6-3
changelog:
  - Fix moving groups when there's a constraint for a single group member
  - Resolves: rhbz2218232
  - Resolves: rhbz2189300


author: Chris Lumens <clumens@redhat.com> - 2.1.6-4
changelog:
  - Clone instances should not shuffle unnecessarily
  - Fix a bug in clone resource description display
  - Resolves: rhbz1931023
  - Resolves: rhbz1688149
  - Related: rhbz2106642
  - Related: rhbz2189300


author: Chris Lumens <clumens@redhat.com> - 2.1.6-5
changelog:
  - Apply dampening when creating attributes with attrd_updater -U
  - Resolves: rhbz2224046
  - Related: rhbz2189300


author: Chris Lumens <clumens@redhat.com> - 2.1.7-5.6
changelog:
  - Fix integer overflows in remote message decompression code (CVE-2026-10649)
  - Resolves: RHEL-181157


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Brian C. Lane <bcl@redhat.com> - 3.2-33
changelog:
  - Switch gpt-header-move and msdos-overlap to python3 (bcl)
    Resolves: rhbz#1595810
  - Modify gpt-header-move and msdos-overlap to work with py2 or py3 (bcl)
    Related: rhbz#1595810


