# changelog

author: Vít Ondruch <vondruch@redhat.com> - 2.1.0-17
changelog:
  - Upgrade to Ruby 2.1.0.
  - Move RPM macros into /usr/lib/rpm/macros.d directory.
  - Allow MD5 in OpenSSL for tests.


author: Vít Ondruch <vondruch@redhat.com> - 2.1.0-18
changelog:
  - Don't generate documentation on unexpected places.
  - Detect if rubygems are running under rpmbuild and install gem binary
    extensions into appropriate place.
  - Add support for ppc64le arch (rhbz#1053263).
  - Re-enable some test cases, which are passing now with Kernel 3.12.8+.
  - Backport fix for floating point issues on i686.


author: Vít Ondruch <vondruch@redhat.com> - 2.1.1-20
changelog:
  - Remove useless exclude (rhbz#1065897).
  - Extract load macro into external file and include it.
  - Kill bundled certificates.


author: Vít Ondruch <vondruch@redhat.com> - 2.1.4-24
changelog:
  - Update to Ruby 2.1.4.
  - Include only vendor directories, not their content (rhbz#1114071).
  - Fix "invalid regex" warning for non-rubygem packages (rhbz#1154067).
  - Use load macro introduced in RPM 4.12.


author: Vít Ondruch <vondruch@redhat.com> - 2.2.0-1
changelog:
  - Upgrade to Ruby 2.2.0.
  - Explicitly list RubyGems directories to avoid accidentaly packaged content.
  - Split test-unit and power_assert gems into separate sub-packages.
  - Drop libdb dependency in favor of gdbm.


author: Vít Ondruch <vondruch@redhat.com> - 2.2.2-40
changelog:
  - Fix upgrade path (rubygem-io-console's version was recently bumped in F21
    and makes the higher release to win).


author: Vít Ondruch <vondruch@redhat.com> - 2.3.0-50
changelog:
  - Upgrade to Ruby 2.3.0.
  - Move gemified net-telnet into subpackage.
  - Add did_you_mean subpackage.
  - Add virtual provides for CCAN copylibs.
  - Use weak dependencies.


author: Vít Ondruch <vondruch@redhat.com> - 2.3.1-59
changelog:
  - Continue to use OpenSSL 1.0 for the moment.
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Harden package.


author: Vít Ondruch <vondruch@redhat.com> - 2.4.0-70
changelog:
  - Upgrade to Ruby 2.4.0.
  - Move gemified xmlrpc into subpackage.
  - Move gemified openssl into subpackage.
  - Tk is removed from stdlib.
  - Extend 'gem_' macros for pre-release version support.


author: Vít Ondruch <vondruch@redhat.com> - 2.4.1-83
changelog:
  - Fix "IOError: stream closed" errors affecting Puma.
  - Temporary disable checksec on PPC64LE (rhbz#1479302).


author: Vít Ondruch <vondruch@redhat.com> - 2.5.0-89
changelog:
  - Drop obsolete ldconfig scriptlets.
  - Add GMP dependency.
  - Use 'with' operator in RPM dependency generator.
  - Add conflicts RPM generator.
  - Fix thread_safe test suite segfaults.
  - Fix invalid licenses.


author: Pavel Valena <pvalena@redhat.com> - 2.5.0-89
changelog:
  - Fix: Multiple vulnerabilities in RubyGems
    https://bugzilla.redhat.com/show_bug.cgi?id=1547431
    https://www.ruby-lang.org/en/news/2018/02/17/multiple-vulnerabilities-in-rubygems/


author: Florian Weimer <fweimer@redhat.com> - 2.5.0-89
changelog:
  - Rebuild with new LDFLAGS from redhat-rpm-config
  - Use --with-setjmp-type=setjmp on aarch64 to work around gcc issue (#1545239)


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-92
changelog:
  - Conflict requirement needs to generate dependency.
  - Stop using --with-setjmp-type=setjmp on aarch64 (rhbz#1545239).


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-97
changelog:
  - Fix TLS 1.3 issues.
    * ruby-2.6.0-fix-test-failure-with-TLS-1.3.patch
    * ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with-TLS-1.3.patch
    Related: rhbz#1616213


author: Jun Aruga <jaruga@redhat.com> - 2.5.1-99
changelog:
  - Fix generated rdoc template issues.
    * ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch
    Resolves: rhbz#1612026


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-99
changelog:
  - Additional OpenSSL 1.1.1 fixes.
    * ruby-2.6.0-fix-test-failure-with-TLS-1.3-maint.patch
    * ruby-2.6.0-config-support-include-directive.patch
    * ruby-2.6.0-use-larger-keys-for-SSL-tests.patch
    Related: rhbz#1616213


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-100
changelog:
  - Properly harden package using -fstack-protector-strong.
    * ruby-2.6.0-configure-fstack-protector-strong.patch
    Resolves: rhbz#1624168


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-112
changelog:
  - Fix ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755.
    (CVE-2023-36617)
    Resolves: RHEL-5614
  - Fix Buffer overread vulnerability in StringIO.
    (CVE-2024-27280)
    Resolves: RHEL-34125
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    (CVE-2024-27281)
    Resolves: RHEL-34117
  - Fix Arbitrary memory address read vulnerability with Regex search.
    (CVE-2024-27282)
    Resolves: RHEL-33867
  - Fix REXML DoS parsing an XML with many `<`s in an attribute value.
    (CVE-2024-35176)
    Resolves: RHEL-37877


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-105
changelog:
  - Update to Ruby 2.6.3 by merging Fedora master branch (commit: 1cc2a49)
    * Properly generate "ruby(rubygems)" versioned dependencies.
    * Extract composition of dependecy strings into helper.
    * Loosen RDoc dependency.
    * Upstream fix adding -C flag instead of changing directory for gem build.
    * Remove obsolete Group tag
    * Fix ".include =" support in openssl.cnf.
    * Link IRB back to StdLib.
    * Link IRB files instead of directories.
    * Exclude irb.rb from ruby-libs.
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-106
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1672575


author: Jarek Prokop <jprokop@redhat.com> - 2.6.7-107
changelog:
  - Upgrade to Ruby 2.6.7.
    Resolves: rhbz#1757846
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given an address
    containing leading zero
    Resolves: rhbz#1950307
  - Fix: Rubygem-bundler: Don't use insecure tmp directory as home
    allows for execution of malicious code.
    Resolves: CVE-2019-3881


author: Jun Aruga <jaruga@redhat.com> - 2.6.9-108
changelog:
  - Upgrade to Ruby 2.6.9.
  - Skip JIT tests in RHEL 8.
  - Fix the issues required to start the "make test-bundler" itself.
  - Fix Bundler dependency confusion.
    Resolves: CVE-2020-36327


author: Vít Ondruch <vondruch@redhat.com> - 2.6.10-109
changelog:
  - Upgrade to Ruby 2.6.10.
    Resolves: rhbz#2088415
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739
  - Fix FTBFS due to an incompatible load directive.
  - Fix a fiddle import test on an optimized glibc on Power 9.


author: Jun Aruga <jaruga@redhat.com> - 2.7.1-132
changelog:
  - Update to Ruby 2.7.1 by merging Fedora master branch (commit: 2981648)
    * Skip unstable tests on s390x.
    * Skip JIT tests in RHEL 8.
    Resolves: rhbz#1817135


author: Vít Ondruch <vondruch@redhat.com> - 2.7.1-133
changelog:
  - Fix `require` behavior allowing to load libraries multiple times.
    Resolves: rhbz#1842989
  - Add ruby-default-gems dependency on irb.


author: Pavel Valena <pvalena@redhat.com> - 2.7.3-136
changelog:
  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1947938
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1944227


author: Jun Aruga <jaruga@redhat.com> - 2.7.4-137
changelog:
  - Upgrade to Ruby 2.7.4.
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810
  - Fix StartTLS stripping vulnerability in Net::IMAP.
    Resolves: CVE-2021-32066
  - Upgrade to Bundler 2.2.24.
    Resolves: CVE-2020-36327


author: Jarek Prokop <jprokop@redhat.com> - 2.7.6-138
changelog:
  - Upgrade to Ruby 2.7.6.
    Resolves: rhbz#2109424
  - Fix FTBFS due to an incompatible load directive.
    Related: rhbz#2109424
  - Fix a fiddle import test on an optimized glibc on Power 9.
    Related: rhbz#2109424
  - Fix regular Expression Denial of Service Vulnerability of Date Parsing Methods.
    Resolves: CVE-2021-41817
  - Fix cookie prefix spoofing in CGI::Cookie.parse.
    Resolves: CVE-2021-41819
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jarek Prokop <jprokop@redhat.com> - 3.0.1-138
changelog:
  - Upgrade to Ruby 3.0.1 by merging Fedora rawhide branch (commit: 6b2ff68).
    * Add missing `rubygem-` prefix for bundled provide of 'connection_pool'.
    * Pass ldflags to gem install via CONFIGURE_ARGS
    * Remove IRB dependency from rubygem-rdoc.
    * Fix flaky excon test suite.
    * Properly support DWARF5 debug information.
        Related: rhbz#1920533
    * Bundle OpenSSL into StdLib.
    * Fix SEGFAULT in rubygem-shoulda-matchers test suite.
    * Provide `gem.build_complete` file for binary gems.
    * Re-enable test suite.
    * ruby-default-gems have to depend on rubygem(io-console) due to reline.
    * Fix SEGFAULT preventing rubygem-unicode to build on armv7hl.
    * Add support for reworked RubyGems plugins.
    * Use proper path for plugin wrappers.
    * Extract RSS and REXML into separate subpackages, because they were moved from
       default gems to bundled gems.
    * Drop Net::Telnet and XMLRPC packages, because they were dropped from Ruby.
    Resolves: rhbz#1938942
  - Fix FTBFS due to an incompatible load directive.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-139
changelog:
  - Upgrade to Ruby 3.0.2.
    Related: rhbz#1938942
  - Fix command injection vulnerability in RDoc. (CVE-2021-31799)
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    (CVE-2021-31810)
  - Fix StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)
  - Fix dependencies of gems with explicit source installed from a
    different source. (CVE-2020-36327)
  - Pass ldflags to gem install via CONFIGURE_ARGS.
    The same comment on the changelog 3.0.1-138 was wrong.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-140
changelog:
  - Fix rubygem-irb upgrade not working due to directory -> symlink conversion.
    Resolves: rhbz#2010949


author: Jarek Prokop <jprokop@redhat.com> - 3.0.4-141
changelog:
  - Upgrade to Ruby 3.0.4.
    Resolves: rhbz#2109431
    Resolves: rhbz#2110981
  - Fix double free in Regexp compilation.
    Resolves: CVE-2022-28738
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jarek Prokop <jprokop@redhat.com> - 3.0.4-141
changelog:
  - Upgrade to Ruby 3.0.4.
    Resolves: rhbz#2096346
    Resolves: rhbz#2000056
  - Fix double free in Regexp compilation.
    Resolves: CVE-2022-28738
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jun Aruga <jaruga@redhat.com> - 3.0.7-142
changelog:
  - Upgrade to Ruby 3.0.7.
    Resolves: RHEL-36189
  - Fix HTTP response splitting in CGI.
    Resolves: RHEL-36193
  - Fix ReDoS vulnerability in URI.
    Resolves: RHEL-36196
  - Fix ReDoS vulnerability in Time.
    Resolves: RHEL-36205
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-36198
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-36200
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-36203


author: Jarek Prokop <jprokop@redhat.com> - 3.3.1-2
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-37446
  - Fix buffer overread vulnerability in StringIO.
    (CVE-2024-27280)
    Resolves: RHEL-37448
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    (CVE-2024-27281)
    Resolves: RHEL-37449
  - Fix Arbitrary memory address read vulnerability with Regex search.
    (CVE-2024-27282)
    Resolves: RHEL-37447


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-3
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-55409
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57049
    Resolves: RHEL-57054
    Resolves: RHEL-57069
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52783


author: Troy Dawson <tdawson@redhat.com> - 1.4.0-3
changelog:
  - Changed group to Development/Languages
  - Changed the global variables
  - Seperated the doc and test into the doc rpm


author: Jun Aruga <jaruga@redhat.com> - 0.5.2-1
changelog:
  - New upstream release 0.5.2 by merging Fedora master branch (commit: cc15309)
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 0.5.3-1
changelog:
  - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475)
    Resolves: rhbz#1817135


author: Jarek Prokop <jprokop@redhat.com> 0.5.3-2
changelog:
  - Update by merging Fedora rawhide branch (commit: 81e2cc9)
  - Fix Mysql2::Result test for Ruby 3.1.
  - Remove gem_make.out and mkmf.log files from the binary RPM package.
  - Fix test assertion for mariadb-connector-c.
    Related: rhbz#2063772


author: lihaipeng <lihaipeng@openanolis.org> - 1.0.0-3.0.1
changelog:
  - Changed the way how/when parameters are interpret
  - Reference https://github.com/ged/ruby-pg/commit/73cd5e158ba4af73243c22f8918b1754256db17b


author: Jun Aruga <jaruga@redhat.com> - 1.1.4-1
changelog:
  - Update to pg 1.1.4 by merging Fedora master branch (commit: 397796e)
    * BuildRequires: s/postgresql-devel/libpq-devel/
    * Add marking lines at the start and end of the setup.log
    Resolves: rhbz#1672575


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 3.5.0-3
changelog:
  - Always use full tar.gz for installed files and
    keep using gem file for gem spec (ref: bug 1425220)


author: Dan Walsh <dwalsh@redhat.name> - 2:1.0.0-46.dev.gitb4e2ecb
changelog:
  - Add patch https://github.com/opencontainers/runc/pull/1807 to allow
  - runc and podman to work with sd_notify


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-55.rc5.dev.git2abd837
changelog:
  - Resolves: #1665770 - rootfs: umount all procfs and sysfs with --no-pivot
  - Resolves: CVE-2019-5736


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-68.rc92
changelog:
  - update to https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-73.rc95
changelog:
  - fix podman run --pid=host command causes OCI permission error
  - rc95 fixes CVE-2021-30465
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.12-1
changelog:
  - update to https://github.com/opencontainers/runc/releases/tag/v1.1.12
  - fixes CVE-2024-21626
  - Resolves: RHEL-23587


author: Lokesh Mandvekar <lsm5@redhat.com> - 0.0.8-1.git4155b68
changelog:
  - Resolves: rhbz#1277245 - bump to 0.0.8
  - Resolves: rhbz#1302363 - criu is a runtime dep
  - Resolves: rhbz#1302348 - libseccomp-golang is bundled in Godeps
  - manpages included


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-1.rc2
changelog:
  - Resolves: #1412239 - *CVE-2016-9962* - set init processes as non-dumpable,
  runc patch from Michael Crosby <crosbymichael@gmail.com>


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-9.1.gitf8ce01d
changelog:
  - Resolves: #1447078 - change default root path
  - add commit e800860 from runc @projectatomic/change-root-path


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.0.0-24.rc4.dev.gitc6e4a1e.1
changelog:
  - rebase to c6e4a1ebeb1a72b529c6f1b6ee2b1ae5b868b14f
  - https://github.com/opencontainers/runc/pull/1651


author: Dan Walsh <dwalsh@redhat.com> - 2:1.0.0-40.rc5.dev.gitad0f525
changelog:
  - Remove sysclt handling, not needed in RHEL8
  - Make sure package built with seccomp flags
  - Remove rectty
  - Add completions


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.3-6
changelog:
  - Fix every podman run invocation generates two "Couldn't stat device
    /dev/char/10:200: No such file or directory" lines in the journal
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.3-3
changelog:
  - fix "Error: runc: exec failed: unable to start container process:
    open /dev/pts/0: operation not permitted: OCI permission denied"
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.10-1
changelog:
  - update to https://github.com/opencontainers/runc/releases/tag/v1.1.10
  - require container-selinux >= 2.224.0 for dmz feature
  - Related: Jira:RHEL-2110


author: Josh Stone <jistone@redhat.com> - 1.71.0-2
changelog:
  - Relax the suspicious_double_ref_op lint (rhbz2225471)
  - Enable the profiler runtime for native hosts (rhbz2213875)


author: Josh Stone <jistone@redhat.com> - 1.40.0-1
changelog:
  - Update to 1.40.0.
  - Fix compiletest with newer (local-rebuild) libtest
  - Build compiletest with in-tree libtest
  - Fix ARM EHABI unwinding


author: Josh Stone <jistone@redhat.com> - 1.51.0-1
changelog:
  - Update to 1.51.0. Update to 1.51.0. Includes security fixes for
    CVE-2021-28875 and CVE-2021-28877.


author: Josh Stone <jistone@redhat.com> - 1.52.1-1
changelog:
  - Update to 1.52.1. Includes security fixes for CVE-2020-36323,
    CVE-2021-28876, CVE-2021-28878, CVE-2021-28879, and CVE-2021-31162.


author: Matej Habrnal <mhabrnal@redhat.com> 0.21-1
changelog:
  - New upstream version
    - Introduce 'serial' field in uReport
    - normalization: actualize list of functions


author: Jakub Filak <jakub@thefilaks.net> 0.22-1
changelog:
  - New upstream version
    - Added support fof JavaScript (V8) stack traces
    - Most parts of the in-hook core unwinder callable under unprivileged user
    - GDB core unwinder limits number of unwound frames
    - Fixed a pair of compile warnings - Chris Redmon <credmonster@gmail.com>


author: Matej Habrnal <mhabrnal@redhat.com> 0.23-1
changelog:
  - New upstream version
    - Allow rpm to be optional at build time
    - Do not use deprecated fedorahosted.org


author: Julius Milan <jmilan@redhat.com> 0.24-1
changelog:
  - New upstream version
    - Allow to report unpackaged problems
    - apidoc: generate html docs using doxygen
    - Fix parsing of subset of arm kernel oopses


author: Martin Kutlak <mkutlak@redhat.com> 0.25-1
changelog:
  - New upstream version
   - Normalization: actualize list of functions
   - Fix some compilation warnings
   - Allow to build python3 for rhel8
   - Makefile: add make release-* subcommands
   - Elfutils: Add missing stubs from earlier commit


author: Matej Habrnal <mhabrnal@redhat.com> 0.26-1
changelog:
  - spec: fix Allow python2 to be optional at build time
  - Allow python2 to be optional at build time
  - normalization: actualize list of functions
  - Append Python interpreter as related package
  - makefile: create .tar.xz with make release


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-1
changelog:
  - rebase to upstream v1.4.2
  - make sbd default to do pacemakerd-api handshake
  - conflict with pacemaker-libs < 2.0.5-4 to assure pacemaker
    is defaulting to pacemakerd-api handshake

    Resolves: rhbz#1903730
    Resolves: rhbz#1873135


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-3
changelog:
  - change the default for SBD_WATCHDOG_TIMEOUT to 10s
    s390(x) stays at 15s as before

    Resolves: rhbz#1922143


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - reverted watchdog_timeout_default to 5s
    (slipped in via an unreleased change on 8.4.0 branch)

    Resolves: rhbz#1980797


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management

    Resolves: rhbz#2168567


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-2
changelog:
  - add required tests subdirectory in addition to gating.yaml
    that had already been brought over before

    Related: rhbz#2168567


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-10
changelog:
  - Fix docdir patch (patch Makefile.am, not Makefile.in)
  - Use correct short name for Eclipse Public License 1.0
  - Use %license
  - Add explicit dependencies for libraries in Makefile.am (fixes FTBFS)
    Resolves: #1606302


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions
    Resolves: #1776670


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.9-24
changelog:
  - Fix important coverity issues
    Resolves: #1989603
  - Fix incorrect use of temporary paths
    Resolves: #1989605


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.5.0-1
changelog:
  - Update to latest upstream version
  - Change license to Eclipse Public License 1.0
  - Use %license
  - Fix URL


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-10
changelog:
  - Fix null pointer (DoS) vulnerability via POST request to /cimom (CVE-2018-6644)
    (patch by Adam Majer)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-16
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Remove %defattr
    Resolves: #1638007


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-9
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Fix license tag
    Resolves: #1638015


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.63-2
changelog:
  - aligning with the latest STIG update (RHBZ#2112937)
  - OSPP: use Authselect minimal profile (RHBZ#2117192)
  - OSPP: change rules for protecting of boot (RHBZ#2116440)
  - add warning about configuring of TCP queues to rsyslog_remote_loghost (RHBZ#2078974)
  - fix handling of Defaults clause in sudoers (RHBZ#2083109)
  - make rules checking for mount options of /tmp and /var/tmp applicable only when the partition really exists (RHBZ#2032403)
  - fix handling of Rsyslog include directives (RHBZ#2075384)


author: Watson Sato <wsato@redhat.com> - 0.1.63-5
changelog:
  - Update RHEL8 STIG profile to V1R8 (RHBZ#2148446)
  - Add rule warning for sysctl IPv4 forwarding config (RHBZ#2118758)
  - Fix remediation for firewalld_sshd_port_enabled (RHBZ#2116474)
  - Fix compatibility with Ansible 2.14


author: Watson Sato <wsato@redhat.com> - 0.1.66-1
changelog:
  - Rebase to a new upstream release 0.1.66 (RHBZ#2158404)
  - Update RHEL8 STIG profile to V1R9 (RHBZ#2152658)
  - Fix levels of CIS rules (RHBZ#2162803)
  - Remove unused RHEL8 STIG control file (RHBZ#2156192)
  - Fix accounts_password_pam_unix_remember's check and remediations (RHBZ#2153547)
  - Fix handling of space in sudo_require_reauthentication (RHBZ#2152208)
  - Add rule for audit immutable login uids (RHBZ#2151553)
  - Fix remediation of audit watch rules (RHBZ#2119356)
  - Align file_permissions_sshd_private_key with DISA Benchmark (RHBZ#2115343)
  - Fix applicability of kerberos rules (RHBZ#2099394)
  - Add support rainer scripts in rsyslog rules (RHBZ#2072444)


author: Jan Černý <jcerny@redhat.com> - 0.1.69-1
changelog:
  - Rebase to a new upstream release 0.1.69 (RHBZ#2228444)
  - Add rule audit_rules_login_events_faillock to STIG profile (RHBZ#2228455)
  - Add appropriate STIGID to accounts_passwords_pam_faillock_interval rule (RHBZ#2228465)
  - Make rule checking for Postfix unrestricted relay accept more variants of valid configuration syntax (RHBZ#2228471)
  - Correct URL used to download CVE checks (RHBZ#2228452)
  - Evaluation and remediation of rules related to mount points have been enhanced for Image builder (RHBZ#2228448)
  - Mention exact required configuration value in description of some PAM related rules (RHBZ#2228441)
  - Fixed rules related to AIDE configuration (RHBZ#2228458)
  - Update ANSSI BP-028 profiles to be aligned with version 2.0 (RHBZ#2228429)
  - Improved and unified OVAL checks checking for interactive users (RHBZ#2228433)
  - Unify OVAL checks to correctly identify interactive users (RHBZ#2228460)
  - Fixed excess quotes in journald configuration files (RHBZ#2228437)
  - Allow default permissions for files stored on EFI FAT partitions (RHBZ#2228443)
  - Make mount point related rules not applicable when no such mount points exist (RHBZ#2228473)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-2
changelog:
  - Provide manual page for scap-security-guide
  - Remove percent sign from spec's changelog to silence rpmlint warning
  - Convert RHEL6 'Restrict Root Logins' section's rules to Fedora
  - Convert RHEL6 'Set Password Expiration Parameter' rules to Fedora
  - Introduce 'Account and Access Control' section
  - Convert RHEL6 'Verify Proper Storage and Existence of Password Hashes' section's
    rules to Fedora
  - Set proper name of the build directory in the spec's setup macro.
  - Replace hard-coded paths with macros. Preserve attributes when copying files.


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-3
changelog:
  - Add .gitignore for Fedora output directory
  - Set up Fedora release name and CPE based on build system properties
  - Use correct file paths in scap-security-guide(8) manual page
    (RH BZ#1018905, c#10)
  - Apply further changes motivated by scap-security-guide Fedora RPM review
    request (RH BZ#1018905, c#8):
    * update package description,
    * make content files to be owned by the scap-security-guide package,
    * remove Fedora release number from generated content files,
    * move HTML form of the guide under the doc directory (together
      with that drop fedora/content subdir and place the content
      directly under fedora/ subdir).
  - Fixes for scap-security-guide Fedora RPM review request (RH BZ#1018905):
    * drop Fedora release from package provided files' final path (c#5),
    * drop BuildRoot, selected Requires:, clean section, drop chcon for
      manual page, don't gzip man page (c#4),
    * change package's description (c#4),
    * include PD license text (#c4).


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.3-1
changelog:
  - Update versioning scheme - move fedorassgrelease to be part of
    upstream version. Rename it to fedorassgversion to avoid name collision
    with Fedora package release.


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.4-1
changelog:
  - Fix remediation for sshd set keepalive (ClientAliveCountMax) and move
    it to /shared
  - Add shared remediations for sshd disable empty passwords and
    sshd set idle timeout
  - Shared remediation for sshd disable root login
  - Add empty -compat subpackage to ensure backward-compatibility with
    openscap-content and firstaidkit-plugin-openscap packages (RH BZ#1040335)
  - OVAL check for sshd disable root login
  - Fix typo in OVAL check for sshd disable empty passwords
  - OVAL check for sshd disable empty passwords
  - Unselect no shelllogin for systemaccounts rule from being run by default
  - Rename XCCDF rules
  - Revert Set up Fedora release name and CPE based on build system properties
  - Shared OVAL check for Verify that Shared Library Files Have Root Ownership
  - Shared OVAL check for Verify that System Executables Have Restrictive Permissions
  - Shared OVAL check for Verify that System Executables Have Root Ownership
  - Shared OVAL check for Verify that Shared Library Files Have Restrictive
    Permissions
  - Fix remediation for Disable Prelinking rule
  - OVAL check and remediation for sshd's ClientAliveCountMax rule
  - OVAL check for sshd's ClientAliveInterval rule
  - Include descriptions for permissions section, and rules for checking
    permissions and ownership of shared library files and system executables
  - Disable selected rules by default
  - Add remediation for Disable Prelinking rule
  - Adjust service-enable-macro, service-disable-macro XSLT transforms
    definition to evaluate to proper systemd syntax
  - Fix service_ntpd_enabled OVAL check make validate to pass again
  - Include patch from Šimon Lukašík to obsolete openscap-content
    package (RH BZ#1028706)
  - Add OVAL check to test if there's is remote NTP server configured for
    time data
  - Add system settings section for the guide (to track system wide
    hardening configurations)
  - Include disable prelink rule and OVAL check for it
  - Initial OVAL check if ntpd service is enabled. Add package_installed
    OVAL templating directory structure and functionality.
  - Include services section, and XCCDF description for selected ntpd's
    sshd's service rules
  - Include remediations for login.defs' based password minimum, maximum and
    warning age rules
  - Include directory structure to support remediations
  - Add SCAP "replace or append pattern value in text file based on variable"
    remediation script generator
  - Add remediation for "Set Password Minimum Length in login.defs" rule


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.5-1
changelog:
  - Fix fedora-srpm and fedora-rpm Make targets to work again
  - Include RHEL-6 and RHEL-7 datastream files to support remote RHEL system scans
  - EOL for Fedora 18 support
  - Include Fedora datastream file for remote Fedora system scans


author: Šimon Lukašík <slukasik@redhat.com> - 0.1.5-3
changelog:
  - Rebase the RHEL part of SSG to the latest upstream version (0.1.18)
  - Add STIG DISCLAIMER to the shipped documentation


author: Šimon Lukašík <slukasik@redhat.com> - 0.1.22-1
changelog:
  - update to the latest upstream release
  - only DataStream file is now available for Fedora
  - start distributing security baseline for Firefox
  - start distributing security baseline for Java RunTime deployments


author: Šimon Lukašík <slukasik@redhat.com> - 0.1.24-1
changelog:
  - update to the latest upstream release
  - created doc sub-package to ship all the guides
  - start distributing centos and scientific linux content
  - rename java content to jre


author: Jan iankko Lieskovsky <jlieskov@redhat.com> - 0.1.29-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.29 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.29
  - Do not ship Firefox/DISCLAIMER documentation file since it has been removed
    in 0.1.29 upstream release


author: Jan iankko Lieskovsky <jlieskov@redhat.com> - 0.1.30-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.30 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.30
  - Drop shell library for remediation functions since it is not required
    starting from 0.1.30 release any more


author: Martin Preisler <mpreisle@redhat.com> - 0.1.31-1
changelog:
  - update to the latest upstream release
  - new default location for content /usr/share/scap/ssg
  - install HTML tables in the doc subpackage


author: Watson Sato <wsato@redhat.com> - 0.1.35-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.35 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.35


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.36-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.36 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.36


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.37-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.37 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.37


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.38-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.38 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.38


author: Jan Černý <jcerny@redhat.com> - 0.1.39-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.39 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.39
  - Fix spec file to build using Python 3
  - Fix License because upstream changed to BSD-3


author: Watson Sato <wsato@redhat.com> - 0.1.40-3
changelog:
  - Use explicit path BuildRequires to get /usr/bin/python3 inside the buildroot
  - Only build content for rhel8 products


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.41-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.41 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.41
  - Add RHEL8 Product with OSPP4.2 and PCI-DSS Profiles


author: Matěj Týč <matyc@redhat.com> - 0.1.42-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.42 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.42
  - System-wide crypto policies are introduced for RHEL8
  - Patches introduced the RHEL8 product were dropped, as it has been upstreamed.


author: Matěj Týč <matyc@redhat.com> - 0.1.42-3
changelog:
  - Added FIPS mode rule for the OSPP profile.
  - Split the installed_OS_is certified rule.
  - Explicitly disabled OSP13, RHV4 and Example products.


author: Matěj Týč <matyc@redhat.com> - 0.1.42-5
changelog:
  - Fixed profiles descriptions, so they don't contain literal '\n'.
  - Made the configure_kerberos_crypto_policy OVAL more robust.
  - Made OVAL for libreswan and bind work as expected when those packages are not installed.


author: Matěj Týč <matyc@redhat.com> - 0.1.42-6
changelog:
  - Further fix of profiles descriptions, so they don't contain literal '\'.
  - Removed obsolete sshd rule from the OSPP profile.


author: Jan Černý <jcerny@redhat.com> - 0.1.42-7
changelog:
  - Introduce Podman backend for SSG Test suite
  - Update bind and libreswan crypto policy test scenarios


author: Matěj Týč <matyc@redhat.com> - 0.1.42-9
changelog:
  - Fixed Crypto Policy OVAL for NSS
  - Got rid of rules requiring packages dropped in RHEL8.
  - Profile descriptions fixes.


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.42-11
changelog:
  - Assign CCE to rules from OSPP profile which were missing the identifier.
  - Fix regular expression for Audit rules ordering
  - Account for Audit rules flags parameter position within syscall
  - Add remediations for Audit rules file path
  - Add Audit rules for modification of /etc/shadow and /etc/gshadow
  - Add Ansible and Bash remediations for directory_access_var_log_audit rule
  - Add a Bash remediation for Audit rules that require ordering


author: Matěj Týč <matyc@redhat.com> - 0.1.44-2
changelog:
  - Ported changelog from late 8.0 builds.
  - Disabled build of the OL8 product, updated other components of the cmake invocation.


author: Milan Lysonek <mlysonek@redhat.com> - 0.1.45-2
changelog:
  - Use crypto-policy rules in OSPP profile.
  - Re-enable FIREFOX and JRE product in build.
  - Change test suite logging message about missing profile from ERROR to WARNING.
  - Build only one version of SCAP content at a time.


author: Watson Sato <wsato@redhat.com> - 0.1.46-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.46 release
  - Align OSPP Profile with Common Criteria Requirements (RHBZ#1714798)


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.48-4
changelog:
  - Drop rsyslog rules from OSPP profile
  - Update COBIT URI
  - Add rules for strong source of RNG entropy
  - Enable build of RHEL8 STIG Profile (RHBZ#1755447)
  - STIG profile: added rsyslog rules and updated SRG mappings
  - Split audit rules according to audit component (RHBZ#1791312)


author: Watson Sato <wsato@redhat.com> - 0.1.50-2
changelog:
  - Fix Ansible for no_direct_root_logins
  - Fix Ansible template for SELinux booleans
  - Add CCEs to rules in RHEL8 CIS Profile (RHBZ#1760734)


author: Watson Sato <wsato@redhat.com> - 0.1.50-3
changelog:
  - HIPAA Profile (RHBZ#1832760)
    - Enable build of RHEL8 HIPAA Profile
    - Add kickstarts for HIPAA
  - CIS Profile (RHBZ#1760734)
    - Add Ansible fix for sshd_set_max_sessions
    - Add CIS Profile content attribution to Center for Internet Security


author: Matěj Týč <matyc@redhat.com> - 0.1.50-10
changelog:
  - Update the scapval invocation (RHBZ#1815007)
  - Re-added the SSH Crypto Policy rule to OSPP, and added an SRG to the rule (RHBZ#1815007)
  - Change the spec file macro invocation from patch to Patch
  - Fix the rekey limit in ssh/sshd rules (RHBZ#1813066)


author: Matěj Týč <matyc@redhat.com> - 0.1.50-11
changelog:
  - fixed link in a grub2 rule description (rhbz#1854854)
  - fixed selinux_all_devicefiles_labeled rule (rhbz#1852367)
  - fixed no_shelllogin_for_systemaccounts on ubi8 (rhbz#1836873)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.53-3
changelog:
  - Enforce pam_wheel for "su" in the OSPP profile (RHBZ#1884062)
  - Fix case insensitive checking in rsyslog_remote_tls (RHBZ#1899032)
  - Exclude kernel_trust_cpu_rng related rules on s390x (RHBZ#1899041)
  - Create a SSH_USE_STRONG_RNG rule for SSH client and select it in OSPP profile (RHBZ#1884067)
  - Disable usbguard rules on s390x architecture (RHBZ#1899059)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.53-4
changelog:
  - Fix description of rule installed_OS_is_vendor_supported (RHBZ#1914193)
  - Fix RHEL6 CPE dictionary (RHBZ#1899059)
  - Fix SRG mapping references for ssh_client_rekey_limit and use_pam_wheel_for_su (RHBZ#1914853)


author: Watson Sato <wsato@redhat.com> - 0.1.54-1
changelog:
  - Update to the latest upstream release (RHBZ#1889344)
  - Add Minimal, Intermediary and Enhanced ANSSI Profiles (RHBZ#1778188)


author: Marcus Burghardt <maburgha@redhat.com> - 0.1.57-2
changelog:
  - Update Ansible login banner fixes to avoid unnecessary updates (RHBZ#1857179)
  - Include tests for Ansible Playbooks that remove and reintroduce files.
  - Update RHEL8 STIG profile to V1R3 (RHBZ#1993056) 
  - Improve Audit Rules remediation to group similar syscalls (RHBZ#1876483)
  - Reestructure RHEL7 and RHEL8 CIS profiles according to the policy (RHBZ#1993197)
  - Add Kickstart files for ISM profile (RHBZ#1955373)
  - Fix broken RHEL7 documentation links (RHBZ#1966577)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.57-3
changelog:
  - Fix remaining audit rules file permissions (RHBZ#1993056)
  - Mark a STIG service rule as machine only (RHBZ#1993056)
  - Fix a remaining broken RHEL7 documentation link. (RHBZ#1966577)


author: Matej Tyc <matyc@redhat.com> - 0.1.58-1
changelog:
  - Rebase to a new upstream release. (RHBZ#2014485)
  - Add a VM wait handling to fix issues with tests.


author: Watson Sato <wsato@redhat.com> - 0.1.60-2
changelog:
  - Update RHEL8 STIG profile to V1R5 (RHBZ#2049555)
  - Align audit rules for OSPP profile (RHBZ#2000264)
  - Fix rule selection in ANSSI Enhanced profile (RHBZ#2053587)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.60-3
changelog:
  - Update sudoers rules in RHEL8 STIG V1R5 (RHBZ#2049555)
  - Add missing SRG references in RHEL8 STIG V1R5 rules (RHBZ#2049555)
  - Update chronyd_or_ntpd_set_maxpoll to disregard server and poll directives (RHBZ#2026301)
  - Fix GRUB2 rule template to configure the module correctly on RHEL8 (RHBZ#2030966)
  - Update GRUB2 rule descriptions (RHBZ#2014485)
  - Make package_rear_installed not applicable on AARCH64 (RHBZ#2014485)


author: Watson Sato <wsato@redhat.com> - 0.1.60-4
changelog:
  - Fix Ansible service disabled tasks (RHBZ#2014485)
  - Set rule package_krb5-workstation_removed as not applicable on RHV (RHBZ#2055149)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.60-5
changelog:
  - Remove tmux process runinng check in configure_bashrc_exec_tmux (RHBZ#2055860)
  - Fix issue with getting STIG items in create_scap_delta_tailoring.py (RHBZ#2014485)
  - Update rule enable_fips_mode to check only for technical state (RHBZ#2014485)


author: Watson Sato <wsato@redhat.com> - 0.1.60-8
changelog:
  - Update to ensure a sysctl option is not defined in multiple files (RHBZ#2079241)
  - Update RHEL8 STIG profile to V1R6 (RHBZ#2079241)


author: Watson Sato <wsato@redhat.com> - 0.1.60-9
changelog:
  - Fix validation of OVAL 5.10 content (RHBZ#2079241)
  - Fix Ansible sysctl remediation (RHBZ#2079241)


author: Jan Černý <jcerny@redhat.com> - 0.1.69-1
changelog:
  - Rebase to a new upstream release 0.1.69 (RHBZ#2221695)
  - Fixed CCE link URL (RHBZ#2178516)
  - align remediations with rule description for rule configuring OpenSSL cryptopolicy (RHBZ#2192893)
  - Add rule audit_rules_login_events_faillock to STIG profile (RHBZ#2167999)
  - Fixed rules related to AIDE configuration (RHBZ#2175684)
  - Allow default permissions for files stored on EFI FAT partitions (RHBZ#2184487)
  - Add appropriate STIGID to accounts_passwords_pam_faillock_interval rule (RHBZ#2209073)
  - improved and unified OVAL checks checking for interactive users (RHBZ#2157877)
  - update ANSSI BP-028 profiles to be aligned with version 2.0 (RHBZ#2155789)
  - unify OVAL checks to correctly identify interactive users (RHBZ#2178740)
  - make rule checking for Postfix unrestricted relay accept more variants of valid configuration syntax (RHBZ#2170530)
  - Fixed excess quotes in journald configuration files (RHBZ#2169857)
  - rules related to polyinstantiated directories are not applied when building images for Image Builder (RHBZ#2130182)
  - evaluation and remediation of rules related to mount points have been enhanced for Image Builder (RHBZ#2130185)
  - do not enable FIPS mode when creating hardened images for Image Builder (RHBZ#2130181)
  - Correct URL used to download CVE checks (RHBZ#2222583)
  - mention exact required configuration value in description of some PAM related rules (RHBZ#2175882)
  - make mount point related rules not applicable when no such mount points exist (RHBZ#2176008)
  - improve checks determining if FIPS mode is enabled (RHBZ#2129100)


author: Marcus Burghardt <maburgha@redhat.com> - 0.1.72-1
changelog:
  - Rebase to a new upstream release 0.1.72 (RHEL-25250)
  - Increase CIS standards coverage regarding SSH and cron (RHEL-1314)
  - Increase compatibility of accounts_tmout rule for ksh (RHEL-16896 and RHEL-1811)
  - Align Ansible and Bash remediation in sssd_certificate_verification rule (RHEL-1313)
  - Add a warning to rule service_rngd_enabled about rule applicability (RHEL-1819)
  - Add rule to terminate idle user sessions after defined time (RHEL-1801)
  - Allow spaces around equal sign in /etc/sudoers (RHEL-1904)
  - Add remediation for rule fapolicy_default_deny (RHEL-1817)
  - Fix invalid syntax in file /usr/share/scap-security-guide/ansible/rhel8-playbook-ospp.yml (RHEL-19127)
  - Refactor ensure_pam_wheel_group_empty (RHEL-1905)
  - Prevent remediation of display_login_attempts rule from creating redundant configuration entries (RHEL-1809)
  - Update PCI-DSS to v4 (RHEL-1808)
  - Fix regex in Ansible remediation of configure_ssh_crypto_policy (RHEL-1820)


author: Jan Černý <jcerny@redhat.com> - 0.1.73-1
changelog:
  - Rebase scap-security-guide package to version 0.1.73 (RHEL-36733)
  - Change crypto policy used in the CUI profile to FIPS (RHEL-30346)
  - Fix file path identification in Rsyslog configuration (RHEL-17202)
  - Use a correct chrony server address in STIG profile (RHEL-1814)
  - Don't BuildRequire /usr/bin/python3 (RHEL-2244)


author: Matthew Burket <mburket@redhat.com> - 0.1.74-1
changelog:
  - Rebase to a new upstream release 0.1.74 (RHEL-53913)
  - Improve Rsyslog rules to support RainerScript syntax (RHEL-1816)
  - Update password hashing settings for ANSSI-BP-028 (RHEL-54390)


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.74-3
changelog:
  - fix build
  - keep firefox and rhel8 ds-1.2 files in the package in form of symbolic links to regular ds files


author: Matthew Burket <mburket@redhat.com> - 0.1.75-1
changelog:
  - Rebase scap-security-guide to the latest upstream version (RHEL-66153)
  - detection of Grub2 kernel command line arguments has been enhanced to cover more use cases (RHEL-53365)


author: Nikola Forró <nforro@redhat.com> - 1.0.0-13
changelog:
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1624172


author: Petr Viktorin <pviktori@redhat.com> - 1.2.1-6
changelog:
  - Remove build dependency on python2-pytest-xdist and python2-pytest-timeout
  - Enable parallel tests in Python 3 %check
  - Use macros for Python interpreter in tests


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.1-1
changelog:
  - Update to 1.3.1 (#1674101)
  - Drop Python 2 packages (not supported by SciPy >= 1.3)
  - Backported upstream patch for cKDTree (fixes FTBFS)


author: Lumír Balhar <lbalhar@redhat.com> - 1.3.1-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983


author: DengXiewei <dengxiewei@linux.alibaba.com> - 1.3.1-5.0.1
changelog:
  - Adding -fallow-argument-mismatch workaround for build failure with gfortran 10
  - Change -fallow-argument-mismatch flag condition for build failure


author: Nikola Forró <nforro@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - Increase test timeout, 300 seconds is not always enough
    for test_logpdf_overflow on s390x
    resolves: #1894887


author: Tomas Orsava <torsava@redhat.com> - 1.5.4-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983 rhbz#1877430


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.12.0-4.el8
changelog:
  - seabios-tpm-Check-for-TPM-related-ACPI-tables-before-attempt.patch [bz#1705212]
  - seabios-usb-ehci-Clear-pipe-token-on-pipe-reallocate.patch [bz#1705212]
  - Resolves: bz#1705212
    (Backport 1.12.1 patches to RHEL-AV 8.1.0)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.12.0-5.el8
changelog:
  - seabios-add-get_keystroke_full-helper.patch [bz#1693031]
  - seabios-bootmenu-add-support-for-more-than-9-entries.patch [bz#1693031]
  - Resolves: bz#1693031
    (On systems with more than 10 available boot devices, keys are uninintuitive)


author: Jon Maloy <jmaloy@redhat.com> - 1.15.0-1.el8
changelog:
  - pci-reserve-resources-for-pcie-pci-bridge-to-fix-reg.patch [bz#2001921]
  - pci: let firmware reserve IO for pcie-pci-bridge.patch [bz#2001921]
  - Resolves: bz#2001921


author: Paweł Poławski <ppolawsk@redhat.com> - 1.16.0-1
changelog:
  - Rebase to upstream 1.16 tag [bz#2066828]
  - Resolves: bz#2066828
    (rebase seabios to 1.16 release)


author: Jon Maloy <jmaloy@redhat.com> - 1.16.0-2
changelog:
  - seabios-shortcut-skip-unbootable-disks-optimitation.patch [bz#2073012]
  - seabios-pci-refactor-the-pci_config_-functions.patch [bz#2083884]
  - seabios-reset-force-standard-PCI-configuration-access.patch [bz#2083884]
  - Resolves: bz#2073012
    (Guest whose os is installed multiple disks but boot partition is installed on single disk can't boot into OS on RHEL 8 [rhel-8.7.0])
  - Resolves: bz#2083884
    (qemu reboot problem with seabios 1.16.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.0-3
changelog:
  - seabios-virtio-blk-use-larger-default-request-size.patch [bz#2101787]
  - Resolves: bz#2101787
    ([rhel.8.7] Loading a kernel/initrd is sometimes very slow)


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-1
changelog:
  - Add 'fur' into shipped locales
  - Update translations (#1820570)
  - Log full reports with correct syslog identifier
  - Cancel pending alarm during AVC analyses


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-2
changelog:
  - Optimize get_rpm_nvr_by_type by adding a cache (#1794807)
  - Stop building seappletlegacy (#1878792)
  - Update translations


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-1
changelog:
  - Revert "Replace pydbus with dasbus"
  - Fix typos in --help, man pages and developer's guide (#2028226)
  - Do not use Python slip package
  - Stop SetroubleshootFixit after 10 seconds of inactivity
  - Fix plugin exception reporting
  - export alert dbus signal
  - Make sure local_policy_package is not None
  - sealert: add "Last Seen" column to alert list


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-4
changelog:
  - Decrease setroubleshootd priority and limit RAM utilization to 1GB (#2064727)
  - doc: Document performance related changes


author: Dan Walsh <dwalsh@redhat.com> - 0.7-1
changelog:
  - Fix setroubleshoot_dispatcher to catch all information from
     avc. Much cleaner interface and no longer uses audit2allow cruft.
  - Remove toolbar from popup window since it did nothing, and I
     think it looks better without it.
  - fix allow_execmod plugin to report better data.


author: Dan Walsh <dwalsh@redhat.com> - 0.8-1
changelog:
  - Added a bunch more plugins
      [Karl MacMillan <kmacmill@redhat.com>]
  - Add allow_cvs_read_shadow.py, allow_ftp_use_cifs, allow_ftp_use_nfs, and allow_gssd_read_tmp.
  - Change AVC to have additional helpers for matching messages.
  - Change Plugin to work better with more than one solution.


author: Dan Walsh <dwalsh@redhat.com> - 0.15-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  - Add generic templating mechanism to Plugin
  - Ported all plugins to use templating mechanism


author: Dan Walsh <dwalsh@redhat.com> - 0.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - modify SetFilter in server to return errors instead of
     throwing an exception. Default the filter list on each alert display.
  - minor tweaks to alert queue handling
  - fix analyze() parameter list in ftp_is_daemon.py plugin
  - sealert now responds to pending alerts more correctly, it shows
     how many pending alerts are in the queue, if you filter the pending
     alert status is updated, the next alert button will advance you
     to the next alert in the queue
  - simplify major pieces of sealert by coalescing common code
     into subroutines.
      [Dan  Walsh <dwalsh@redhat.com>]
  - Complete all boolean plugins except disable
  - Make Close button work.
  - Make setroubleshoot_dispatcher exit if it gets an avc about itself


author: Dan Walsh <dwalsh@redhat.com> - 0.17-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - clean up and rework the timestamp code in util.py so that
     time zones are handled properly, there were a number of bugs.
     Hopefully it's correct now because timezone handling is a pain.
  - change the time format in the browser so all times are displayed
     identically, the friendly time relative format was hard to compare.
  - modify the plugin 'make install' to delete all existing plugin's
     prior to installing the new ones
  - add popup menu to status icon to choose between browser and
     alert GUI (not fully connected yet). Several bug fixes related
     to changing the filter_type from a string to an int.
  - add filter selection to bottom pane, change filter_type from
     string to integer constant. Enhance how columns are handled.
     Get init_combo_box to work. Remove unused RPM and Bugzilla
     fields from bottom pane. Modify the default size of the browser
     window. Fix missing import in util.py.
  - add ability in broswer to sort on columns, initially the report
     count column and the last seen date column. The date column now
     stores a TimeStamp object instead of a string. Add new method
     to TimeStamp to return a friendly string relative to the current
     time. The date column in the browser now has a cell data function
     which invokes the friendly format method of the TimeStamp object.
  - add ability fo serialize to/from xml for classes which can
     inititialized from strings and serialized as strings (e.g. numbers,
     TimeStamps, etc.)
  - add count of how many times a signature is reported, the date
     when first and last reported, add columns for report count and
     last date count to browser.
  - checkpoint browser code, list pane and detail pane now working.
  - add initial support for browser applet, move some functions which
     kept getting reused to util.py
  - add reporting of environment to email alert (email alerts still
     need work)
      [Dan  Walsh <dwalsh@redhat.com>]
  - Fix disable_trans.py set_boolean call
  - Complete all boolean plugins except disable
  - Change interface to use audit unix domain socket


author: Dan Walsh <dwalsh@redhat.com> - 0.19-1
changelog:
  2006-08-08  Dan Walsh <dwalsh@redhat.com>
  - Fix up handling of mls ranges in context
  - Cleanup some pychecker errors

  2006-08-07  John Dennis <jdennis@redhat.com>
  - add first seen, last seen, and report count to alert detail view
  - make the seen icon work, if the alert has been displayed more
     than N seconds, mark the alert as having been seen by the user
     and update the icon is the list view
  - change the schema for the xml data; the database now has a version,
     there is a local id attached to each signature, the filter list in
     the siginfo was replaced by a list of per user data, the per user
     data now contains the filter, seen_flag. Modify all the code which
     was operating on the filter information to use the new model.
  - fix the xml serialization so that booleans can be used as a basic
     type and also so that non-string types can be used in element
     attributes (e.g. int, bool) and the serialization code will
     automatically convert between python types and strings.


author: John Dennis <jdennis@redhat.com> - 0.27-1
changelog:
  - load_plugins() now catches exceptions when a plugin won't load,
     reports the traceback in the log file, and continues with the next
     plugin. Previously a bad plugin caused the entire plugin loading
     to abort and no plugins were loaded.
  - Add "daemon_name" to automake variables, change pid file to match
  - turn off "noreplace" on config file till things settle down a bit
  - browser.py now validates data, also test for missing column data in the
     cell_data function to avoid exceptions.
  - add stub for analyzie_logfile() rpc call
  - turn off balloon notifications by default in config file,
     libnotify is just plain busted at this point :-(
  - only the setroubleshootd daemon creates it's log file
     under /var/log now, the user app's do it in /tmp, change file
     permissions on /var/log/setroubleshoot back to 0644.
  - sealert now looks up the username rather than hardcoding it to "foo"
  - CamelCase to lowercase_underscore clean up


author: John Dennis <jdennis@redhat.com> - 0.30-1
changelog:
  - fix bug 203479, missing requires of audit-libs-python
  - add support to sealert to listen on a dbus session signal to display
     the gui. This is needed for when the status icon is not visible and
     the user wants to see the UI. There is now a seperate program
     setroubleshoot_launch_gui which emits the signal.


author: Dan Walsh <dwalsh@redhat.com> - 0.32-1
changelog:
  - Add avc_syslog to syslog translated avc message
  - Fix submitbug button
      [John Dennis <jdennis@redhat.com>]
  - fix signature inflation, all data attached to a signature is now
     encapsulated in a SEFaultSignatureInfo (siginfo) class. The GUI no
     longer reaches into a signature looking for information, it looks
     in the siginfo. The Plugin class now defines the method
     get_signature() which report() calls to obtain the signature. The
     default signature provided by the Plugin class includes the
     analysisID, an AVC with just the src & target contexts, and the
     object_path. All data accesses and parameters which had been "sig
     and solution" are now done via the unified siginfo class. There is
     still a bit more work to be done on this but this represents a
     reasonble point to checkpoint the code in CVS.


author: Dan Walsh <dwalsh@redhat.com> - 0.34-1
changelog:
  - Standardize on the browser. remove alert window
      [John Dennis <jdennis@redhat.com>]
  - remove all vestiges of popup alert, now browser is the only
     UI game in town
  - restore the automatic updating of the browser window which had
     been a regression, the AlertClient class now emits signals which
     the GUI classes can connect to receive signals from the fault server,
     also fix the "mark seen" regression
  - browser.py: restore mark_seen timeout


author: John Dennis <jdennis@redhat.com> - 0.35-1
changelog:
  - add sorting on category column and seen column in browser,
     fix reference to my_draw() in print function.

  - make browser window hidden by default so it does not flash
     when it's first realized, connect to the "realize" signal to
     initially position the vpane, add signal handlers to track
     when the browser is visible, the presentation of the status
     icon now checks if the browser is visible, the status icon is
     not presented if the browser is already displayed.


author: Dan Walsh <dwalsh@redhat.com> - 0.38-1
changelog:
  [Dan  Walsh]
  - Hook up the rest of the menu bars on browser window
  - Add public_content.py plugin
      [John Dennis <jdennis@redhat.com>]
  - add delete_signatures() method to AlertClient class
  - start using the AppBar in the browser.
  - "open logfile" now connected all the way from browser menu
     to server rpc, still needs implementation, but "plumbing" is working.
  - fixes for the date/time dialog
  - remove install of setroubleshoot.glade, we now only use
     setroubleshoot_browser.glade
  - some fixed to DateTimeDialog


author: Dan Walsh <dwalsh@redhat.com> - 0.39-1
changelog:
  - Add Icon
      [John Dennis <jdennis@redhat.com>]
  - dispatcher.py: rework how audit messages injected into the
     system and processed. Much of this work was in support of log file
     scanning which should be coupled to the exact same processing code
     as audit messages arriving from the audit socket. In essence log
     file scanning synthesizes an audit message and we inject it into
     the system the same way socket messages are injected. This was
     also an excellent moment correctly handle out of order audit
     messages, something we were not able to handle previously. This
     may have been contributing to splitting what should have been a
     single alert into two or more separate alerts because we didn't
     recongize the incoming audit events as a single event. Correctly
     assembling out of order messages introduced a fair amount of extra
     complexity as we now maintain a cache of recent audit events, this
     is fully documented in dispatcher.py
  - Turn notifications back on by default.
      [Karl MacMillan <kmacmill@redhat.com>]
  - Separated out HTML rendering and made it easier to translate.


author: Dan Walsh <dwalsh@redhat.com> - 0.40-1
changelog:
  - Fix notification window problems.  Now dissappears and does not regenerate if
  it has already been seen


author: Dan Walsh <dwalsh@redhat.com> - 0.42-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  - Add rpm information for target.
  - Add hostname and uname to signature info
  - Add display of the full AVC
  - Add display of the analysis id
  - Change html generation to be separated out and us elemmenttree
      [John Dennis <jdennis@redhat.com>]
  - add CommunicationChannel class to encapsulate data transfer
     operations, in particular to provide an object threads can lock
     during data transfer.
  - checkpoint the logfile scanning code, somewhat working


author: Dan Walsh <dwalsh@redhat.com> - 0.43-1
changelog:
  - Fix mail handling
  - fix bugs related to recording per user per signature filtering
      [John Dennis <jdennis@redhat.com>]
  - fix bugs related to recording per user per signature filtering
      [Karl MacMillan <kmacmill@redhat.com>]
  - Add signal handling to client and server.
  - Fix minor plugin bugs.


author: Dan Walsh <dwalsh@redhat.com> - 0.46-1
changelog:
  - Add new plugins cvs_data, rsync_data, xen_image, swapfile, samba_share
      [John Dennis <jdennis@redhat.com>]
  - clear the GUI of old data before loading new data,
     fix the code used to display the filter icon in the filter column


author: Dan Walsh <dwalsh@redhat.com> - 0.48-1
changelog:
  - Sealert only notify dropped connection once
  - setroubleshoot shutdown cleanly
      [John Dennis <jdennis@redhat.com>]
  - Gui cleanups


author: Dan Walsh <dwalsh@redhat.com> - 1.0-1
changelog:
  - Release of first version
  - Fix icon
      [John Dennis <jdennis@redhat.com>]
  - Memory leak fixes
  - Substitution fixes
  - File names in hex fixes


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Speed enhancments
      [John Dennis <jdennis@redhat.com>]
  - log file parsing now approx 4 times faster
  - greatly enhance the statistics reporting capability in attempt
     to diagnose slow log file parsing performance
  - make gathering of environmenatal information optional,
     environment information is only relevant at the time the
     alert fires, not in a post processing scenario
  - clean up several places where environmental information was
     assumed and/or was always gathered, or gathered in the wrong place.


author: Dan Walsh <dwalsh@redhat.com> - 1.7-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - Add command line utilities
  - logfile scanning finally seems to work connected to browser
  - Additional Information section of report now includes line
     number information (if alert was generated from logfile)
  - replace database update_callback() with notify interface, a more
     generic solution more easily shared between components
  - object implementing rpc method is now explicitly attached via
     connect_rpc_interface() instead of walking the MRO chain with
     magic exclusions. explicitly connecting is more flexible and
     robust (no getting the wrong object by mistake)
  - fix handling of return args in local rpc case
  - fix signal connections between audit and logfile
  - split databae and database_properties for audit and logfile
  - fix initial connection state
  - fix lookup_local_id


author: John Dennis <jdennis@redhat.com> - 1.8.1-1
changelog:
  - Fixes 216936, bug 215290, add 'Copy Alert' edit menu item
  - clean up menu items, add tooltips
  - fix printing so it will work with multiple alerts, force font to
     monospace 10pt, display error dialog if printing fails.
  - Fixes 216908, platform and raw audit messages were not wrapped
     to fit on page.
  - Related: 216575, update i18n po files
  - Fixes 216941, set default folder for save operation, also set
     default filename
  - Fixes 216327 add menu items "toggle hide deleted", "select none". Add model
     filter to control visibility of alerts
  - Fixes 214218, sealert with no command line
     arguments induces startup as dbus service, this had been a
     regression.
  - Fixes 216327, rework how deletes are performed in browser. Delete
     now marks each seleted siginfo with a delete flag, expunge
     permanently deletes siginfo's marked for deletion, also add undelete
     command, removed delete confirmation dialog. Modify how text
     attributes in cell renderer are computed to allow for
     strike-throughs of alerts marked for deletion.
  - multiple alerts can now be selected, add select all command,


author: John Dennis <jdennis@redhat.com> - 1.8.3-1
changelog:
  - Fixes 217961, sealert needs pygtk2-libglade
  - more i18n translations
  - Fixes 217710, date representation did not respect locale,
     at the same time remove old date formatting code, now cruft since
     we can't use it because it was specific to US English.
  - fix how selections are handled when rows are expunged.
  - add Copy to Edit menu, for copying selection from detail pane,
     unfortunately gtkhtml2 widget does not preserve line breaks between
     table rows.


author: John Dennis <jdennis@redhat.com> - 1.8.5-1
changelog:
  - fix bug, "could not convert path to a GtkTreePath" when database 
     is initially empty, caused by last_selected_row == None


author: John Dennis <jdennis@redhat.com> - 1.8.6-1
changelog:
  - Fixes 218150,
     "If view is set to "hide delete" you cannot filter new entries"
     Actually, the bug was toggle cell renderer was connected to the
     base model instead of the model attached to the view, the sort
     model, this meant the toggle was occuring on the wrong row if
     the view was sorted differently than the base model.


author: John Dennis <jdennis@redhat.com> - 1.8.11-1
changelog:
  - Fixes 216575, more translations
  - Replace delete and expunge menu labels with something more intuitive
  - add ability for browser to be restarted with identical window
     position and state
  - add pkg version and protocol version to logon handshake, test for
     compatibility between clint and server, prompt for restart
  - add non-modal restart dialog
  - add dialog to display traceback if sealert faults with an uncaught
     exception, try to limit invisible errors
  - fix return args on rpc method
  - add instance id to server


author: John Dennis <jdennis@redhat.com> - 1.8.13-1
changelog:
  - update translations

  - change SETroubleshootDatabase so it is optional if it's backed
     by a file, this fixes the problem of us littering temporary files
     when scanning logfiles which does not require persistence.

  - disable the view logfile menu item if no logfile has been opened

  - fix redundant log messages for case where there is no log file and
     the console flag is set. When there is no log file the logging
     module opens a console stream, thus the console stream produced
     by the console flag was redundant.

  - add username and password command line arguments
     rework startup logic so that all command line args are processed
     before we do any real work
   
  - rework the email preferences so that each email address can
     have a filter type associated with it.

     add a new filter_type "Ignore After First Alert" which filters
     after the first alert has been delivered

  - add UI for setting the email addresses alerts are sent to.
     Add menu item to edit email list, add email list dialog.
     Remove 'recipient' config file entry, now list is stored
     in seperate file. Add rpc to query and set the email list,
     the GUI calls this to get the current list from the server
     and set it in the server, it is the server which reads and 
     writes the file. Add 'enable' flag to each email entry.
     Modify how the server iterates over the email list when it
     receives an alert. When marking an alert as having been sent
     the username is the email address but with 'email:' prepended so
     as not to collide with non-email filtering options for the same user.


author: John Dennis <jdennis@redhat.com> - 1.8.14-1
changelog:
  - Fixes 221850
     plugin module loading was failing in python 2.5 with the message
     "SystemError: Parent module 'plugins' not loaded". This is due to a
     change in behavior between python 2.4 and 2.5, in python 2.4 the lack
     of a parent module was silently ignored. The fix is to load
     plugins.__init__ first.


author: John Dennis <jdennis@redhat.com> - 1.8.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - Fixes Bug# 224343 sealert's "Aditional Info:" text should be in white box
  - Fixes Bug# 224336 sealert should have GtkRadioButtons in menu View
  - Related: bug 224351
     Rewrite parts of logging support to better support changing output
     categories, output destinations. Now -v -V verbose works in sealert.
  - Resolves bug 225161, granted AVC's incorrectly identified as a denial
  - add alert count to status bar
  - add "Help" command to Help menu, opens web browser on wiki User FAQ
      [Dan Walsh  <dwalsh@redhat.com>]
  - Make setroubleshoot.logrotate correctly


author: John Dennis <jdennis@redhat.com> - 1.9.3-1
changelog:
  - install icon in /usr/share/icons, refer to icon by name using standard API
  - Fix performance problems in setroubleshoot browser log file scanning
  - Significant rewrite of data/view management code in setroubleshoot
     browser. data and view now cleanly separated, can easily switch
     between data views while maintaining selections, view state, with
     proper update of status information in status area
  - Resolves Bug# 227806: right click context menu resets selection
  - Logfile scans now operate in independent thread, proper asynchronous
     updates of browser during scan, browser used to appear to hang
  - Resolves Bug# 224340: Rewrite Menu/Toobar/Popup to use UIManger instead of glade
  - Add toobar support
  - Implement GUI to edit email recipient list in setroubleshoot browser
  - Added user help to setroubleshoot browser
  - Related Bug# 224343: Fix setroubleshoot browser to respond to desktop theme changes
  - improve traceback error reporting in sealert
  - rewrite AboutDialog, replacing glade version
  - Resolves bug 229849  Bug# 230115, Relates bug 221850: fix uuid code to resolve
     '_uuid_generate_random' is not defined error


author: Dan Walsh <dwalsh@redhat.com> - 1.9.4-1
changelog:
  - Remove disable_trans boolean
  - Check for paths in filesystem before suggesting chcon -R 
  - Remove default to listen on local ports


author: John Dennis <jdennis@redhat.com> - 1.9.6-1
changelog:
  - add avc_auparse.py, now has option to use audit parsing library instead of
     built-in audit parsing.
  - fix bug in log file scanning and detail display update
  - Resolves Bug# 238516, python pkg directory not owned


author: John Dennis <jdennis@redhat.com> - 1.9.7-1
changelog:
  - Resolves Bug# 241739, this bug is the lead bug for several bug reports,
     all consequences of the same problem, setroubleshootd/sealert when run
     in a non latin language environment because of incompatibilities in
     i18n encoding between components.


author: John Dennis <jdennis@redhat.com> - 1.10.0-1
changelog:
  - move all plugins and their translations to independent package
  - wrap XML generation inside try/except
  - correct how access list is obtained in avc_auparse.py
  - add try/except around top level of AnalyzeThread.run so exceptions
     in the thread get reported and the analysis thread does not just die.
  - also add try/except around LogfileThread.process_logfile
  - add new function assure_file_ownership_permissions()
  - server now forces it's database file permissions/ownership to be 0600 root:root
  - rpm now forces the server's database file permissions/ownership to be 0600 root:root
  - Resolves Bug #251545: Review Request: setroubleshoot-plugins - analysis plugins for setroubleshoot
  - clean up some other rpmlint warnings in setroubleshoot.spec
  - fix missing install of setroubleshoot icon and sym link to it
  - Resolves Bug #251551, setroubleshoot shows up in in wrong desktop menu
     also run desktop-file-install in rpm install
  - add /etc/dbus-1/system.d/setroubleshootd.conf dbus configuration file
  - Resolves Bug #250979, Bug #250932 Missing dependencies
  - Restore plugins/Makefile.am which got nuked somehow
  - remove dus.dbus_bindings.bus_name_has_owner(), deprecated as of F7
  - wrap rpm transactions in try/except


author: John Dennis <jdennis@redhat.com> - 1.10.2-1
changelog:
  - remove all copied code from test_setroubleshootd, now we import
     from setroubleshoot
   
  - export ClientConnectionHandler from rpc.py as a base class.
     Derive SetroubleshootdClientConnectionHandler and
     AuditClientConnectionHandler from ClientConnectionHandler.

  - add audisp_listen as test program

  - create setroubleshoot sym link in top devel directory pointing
     to src so import setroubleshoot.foo if PYTHONPATH=topdir

  - add get_option, convert_cfg_type to config.py.in so that one
     can pass optional dict to override config file settings

  - rewrite log_init() so it's easier for other programs to use it,
     fix the import logic concering log & config

  - remove log code from test_setroubleshoot, now just does import
     from setroubleshoot.
   
  - test_setroubleshootd can now handle audit records in both text
     and binary formats, can be selected by command line arg. It can now
     either output to clients connecting on a socket or to stdout. Can
     now optionally exit after N socket client connections.

  - remove non audit record lines from test data

  - remove config_init() and log_init() from package __init__.py
     It was the wrong place to call them, now call them when the
     process initializes before the first setroubleshoot imports

  - add parse_config_setting() and set_config() to config module
  - setroubleshootd now accepts -c --config command line arg
  - test_sectroubleshoot: add err defines & program_error exception
     add is_valid() tests to assure we read a valid audit record
     log the unrecognized line if not valid, clean up socket close()

  - Relates Bug #247056, update initscript to LSB standards
     Note: LSB initscripts in Fedora is not yet a resolved issue,
     the changes implemented were to add an LSB block and support
     the new LSB try-restart and force-reload commands. However
     the new /lib/lsb/init-functions are NOT currently used as this
     is the unstable part.


author: John Dennis <jdennis@redhat.com> - 1.10.3-1
changelog:
  - modify avc_audit.py to use new audit_data.py implementation

  - can listen for audit events on either /var/run/audit_events
     in bindary protocol mode or /var/run/audisp_events in
     text protocol mode


author: John Dennis <jdennis@redhat.com> - 1.10.5-1
changelog:
  - update code for command line log file scanning to work with
     new log file scanning code introduced for the browser.

  - update Bulgarian translation (Doncho N. Gunchev (gunchev@gmail.com))

  - update Polish translation (Piotr Drąg (raven@pmail.pl))

  - Resolves bug 239893: sealert wakes up very often
     This was caused by the use of threads and pygtk's thread signal
     handling.  The only use of threads in sealert was for log file
     scanning so that the UI would remain responsive during a
     scan. Threads in sealert have now been completely
     removed. Instead the scanning work is performed in a gobject idle
     function called from the main loop. The idle function is written
     as a python generator function which allows for the function to
     perform a small amount of work, save it's execution state and
     return. The next time the idle function is called from the main
     loop it resumes execution from it's last state until it decides
     to yield control again. This way the long running scan/analysis
     can be performed in small successive units of work during the
     time the application is otherwise idle and it does not interfere
     with the rest of the GUI event processing. Everything now occurs
     in an event loop, think of it as the applications process/thread
     scheduler whose event handlers execute time slices.

  - rewrote parts of the audit input pipeline to use generators
     instead of callbacks, thus permitting the logfile scanning code
     to yield control with more granularity. Also updated
     test_setroubleshootd and audisp_listen to use the new
     generator/yield logic.

  - rewrote the dialog used for scanning log files, progress bar
     updates are now in the dialog, the scan can be terminated part
     way through, errors from the scan are reported in pop-up dialog,
     one can only dismiss the dialog with success if the scan had
     been successfully run to completion, otherwise the user is only
     left with the option to cancel.

  - Relates bug 252035  bug 247469, setroubleshootd and sealert should
     exit if SELinux is disabled.

  - add utility functions escape_html() and unescape_html()

  - fix initial sort order in browser, track sort order in browser

  - modify AVC.get_path() to only return a value if the 'path' field is
     set, formerly it also considered the fields 'name' & 'file' which were
     incorrect. get_path() now also looks to see if the string begins with a
     slash for a fully qualified path, if not it looks to see if its a 
     pseudo path such as 'pipe[12345]' or 'socket[12345]' and if so strips out
     the instance information inside the brackets and returns just the type of 
     the pseudo path. This is done because we do not want path information
     in the signature to be unique for each instance of the denial.

  - modify the TimeStamp class to hide it's internal datetime member,
     remove the cmp() method, the internal __cmp__ will be automatically invoked.

  - require selinux policy version in spec file to allow system dbus use
   
  - Resolves bug 256601: audit2allow generates incorrect syntax when comma "," in
     denied list

  - update po i18n files

  - Add support for pruning database by age and size


author: John Dennis <jdennis@redhat.com> - 1.10.7-1
changelog:
  - Fix spec file requires for opening an HTML page
     In configure.ac search for xdg-open and htmlview in priority order,
     set variable html_browser_open to the one found, in spec file require
     xdg-utils for fedora and htmlview for RHEL.

  - add "Host" column in browser
     add "Toggle Column Visibility" menu to toggle display of any column on/off

  - Resolves bug 310261: setroubleshoot notifications aren't throttled

  - add support for AUDIT_EOE, end-of-event, if AUDIT_EOE immediately
     emit cached event. Disable timeouts used to flush events if
     AUDIT_EOE has been seen.


author: <jdennis@redhat.com> - 2.0.0-1
changelog:
  - prepare for v2 test release
  - Completed most work for version 2 of setroubleshoot, prepare for test release
  - import Dan's changes from the mainline
     primarily allow_postfix_local_write_mail_spool plugin
  - escape html, fix siginfo.format_html(), siginfo.format_text()
  - add async-error signal
  - change identity to just username
  - make sure set_filter user validation works and reports error in browser
  - fix generation of line numbers and host when connected to audispd
  - add permissive notification, resolves bug 231334: Wording doesn't change for permissive mode
  - resolves bug 244345: avc path information incomplete
  - get the uid,gid when a client connects to the server
  - set_filter now verifies the filter is owned by the user,
  - resolves bug 288261: setroubleshoot lack of user authentication
  - remove filter options which weren't being used
  - change '@' in audit data hostname to '.'
  - remove restart dialog
     resolves bug 321171: sealert's dialog after update is higly confusing
  - fix rpc xml arg
  - fix handling of host value
  - tweak what fields are in signature
  - move data items which had been in 'avc' object into siginfo
  - clean up siginfo format
  - large parts of new audit data pipeline working, checkpoint
  - fix duplicate xml nodes when generating xml tree
  - audit event can now be xml serialized
  - switch from using int's for audit record types to strings
  - avoid conversion headaches and possibilty of not being
     able to convert a new unknown type
  - add logic to allow XmlSerialize to be subclassed and init_from_xml_node to be overridden
  - add support to xml serialize classes AuditEventID, AuditEvent, AuditRecord
  - use metaclass for xml class init
  - start adding xml support to audit data classes
  - Use metaclass to wrap class init
  - move xml serialization code from signature.py to xml_serialize.py
  - simplify aspect of the serialization code
  - add unstructured xml mapping, each xml element name has its content mapped to obj.name
  - modify xml serialization to be driven by xml contents
  - general clean up
  - checkpoint conversion of serialization to use metaclasses
  - clean up class/data specifications for XmlSerializable
  - add support for client rpc testing
  - add changelog entry
  - add SubProcess class to setroubleshootd in preparation to
  - run daemon as subprocess so we can gather results and
     compare them to the expected data we sent
  - rewrite all plugins to use new v2 audit data
  - add SubProcess class to setroubleshootd in preparation to 
            run daemon as subprocess so we can gather results and
            compare them to the expected data we sent
  - add new test support: add config section 'test', add boolean 'analyze' to
     config test section, add class TestPluginReportReceiver which is installed
     if test.analyze is True, it prints analysis report. In test_setroubleshootd
     send AUDIT_EOE to assure sequential event processing so analysis results
     have same ordering as events that are sent by test_setroubleshootd
  - alert signatures now include host information, alerts will be grouped by host


author: <jdennis@redhat.com> - 2.0.1-1
changelog:
  - make connection error message persist instead of timeout in browser
  - updated Brazilian Portuguese translation: Igor Pires Soares <igor@fedoraproject.org>
  - implement uid,username checks
  - rpc methods now check for authenticated state
  - fix html handling of summary string
  - add 'named' messages to status bar, make sure all messages either timeout or are named
  - fix ordering of menus, resolves bug 427418
  - add 'hide quiet' to browser view filtering, resolves bug 427421
  - tweak siginfo text formatting
  - add logon to SECommandLine so that sealert -l <local_id> works


author: <jdennis@redhat.com> - 2.0.2-1
changelog:
  - Resolve bug 428252: Problem with update/remove old version
  - Add code to validate xml database version, if file is incompatible it is not read,
     the next time the database is written it will be in the new version format.
     This means the database contents are not preserved across database version upgrades.
  - Remove postun trigger from spec file used to clear database between incompatible versions
     the new database version check during database read will handle this instead
  - bullet proof exit status in init script and rpm scriptlets
  - Resolve bug 247302: setroubleshoot's autostart .desktop file fails to start under a KDE session
  - Resolve bug 376041: Cannot check setroubleshoot service status as non-root
  - Resolve bug 332281: remove obsolete translation
  - Resolve bug 344331: No description in gnome-session-properties
  - Resolve bug 358581: missing libuser-python dependency
  - Resolve bug 426586: Renaming translation po file from sr@Latn to sr@latin
  - Resolve bug 427260: German Translation
  - enhance the sealert man page


author: <jdennis@redhat.com> - 2.0.4-1
changelog:
  - Resolve bug 430421: audit_listener_database.xml:3029: parser error in xmlParseDoc()
    rewrite the audit_msg_decode logic to beaware of specific audit fields
  - add new template substitution $SOURCE, a friendly name, $SOURCE_PATH still exists
    and is the full path name of $SOURCE, also add 'source' attribute in AVC class,
    fix how source and source_path are computed from audit's comm and exe fields
  - fix the computation of tpath to also look at the audit name field, formerly
    it had only been looking at path, fixes <Unknown> showing up for many targets
  - add exception handling around xml file writes (Alan Cox reports problem when /var is full)
  - add testing documentation
  - Resolve bug 430845: obsolete URL in setroubleshoot package description
  - Resolve bug 428960: Permissive message makes no sense.
  - init script now allows extra test options
  - show_browser() now opens and raises the window (e.g. presents) rather than just
    assuring it's realized (e.g. iconified, or hidden)
  - sealert -l message in syslog converts from html before writing to syslog
  - Resolve bug 320881: export setroubleshoot_selinux_symposium in PDF format
  - add code to verify all async rpc's have been cleared from the async rpc cache
  - add code to set a default rpc method return if the interface does not define a callbak
    (methods which did not have a callback were not returning anything and hence were no
     getting cleared from the cache)


author: John Dennis <jdennis@redhat.com> - 2.0.5-1
changelog:
  - allow sealert -l lookup to accept * wildcard
  - add a few more audit fields needing special decode handling


author: <jdennis@redhat.com> - 2.0.6-1
changelog:
  - add dialog to run a command in the background, capture it's stdout & stderr
      report it's status, kill it, and pass it a pseudo terminal for password prompts
      - separate the fix command into it's own section in formatted alerts
      - add UI for running the fix command, enable only if there is a single selection
        and the selected alert has a fix command
        - add a config parameters 'run_fix_cmd_enable' to control if fix commands
        can be run, defaults to False
        - Resolve bug 431380: prevent notify popups while setroubleshoot is open


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Update to upstream
    - 2008-10-22    <jdennis@redhat.com>
      - Fix pruning code
      - Fix time stamps


author: Dan Walsh <dwalsh@redhat.com> - 2.0.12-1
changelog:
  - Update to upstream
    - 2008-10-06  Dan Walsh <dwalsh@redhat.com>
    - remove .png from desktop files


author: Dan Walsh <dwalsh@redhat.com> - 2.1.3-1
changelog:
  - sedispatch needs to connect to dbus on avc arrival, 
    instead of startup, since the dbus daemon is not started 
    when sedispatch starts


author: Dan Walsh <dwalsh@redhat.com> - 2.2.1-1
changelog:
  - Update to upstream
    * Thomas Liu <tliu@redhat.com>
    Bug fixes to GUI, added Delete All Alerts menu item.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.9-1
changelog:
  - Update to upstream
    2009-6-25  Thomas Liu <tliu@redhat.com>
    - Added a "Copy to Clipboard" button to the browser GUI.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.11-1
changelog:
  - Update to upstream
    2009-7-01 Thomas Liu <tliu@redhat.com> 
    - Fixed browser behavior when there are no alerts
    - Fixed seapplet behavior when there are no alerts
    - Made delete all button delete alerts on server side and on local side


author: Dan Walsh <dwalsh@redhat.com> - 2.2.13-1
changelog:
  - Update to upstream
    2009-7-07 Thomas Liu <tliu@redhat.com> 
    - Fixed detail doc not clearing when deleting all alerts
    - Hid notify check when deleting all alerts.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.14-1
changelog:
  - Update to upstream
    2009-7-15 Dan Walsh <dwalsh@redhat.com> 
    - Fix handling of syscall record a1 field
    - Translate "/" to mountpoint when returned by kernel


author: Dan Walsh <dwalsh@redhat.com> - 2.2.20-1
changelog:
  -Update to upstream 
          - 2009-8-18 Thomas Liu <tliu@redhat.com>
          - Added check for new policy.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.35-1
changelog:
  - Fix translations, plurals and glade
    - Update Po
    - Fix plural form
    - Add support for Green Plugins


author: Dan Walsh <dwalsh@redhat.com> - 2.2.50-1
changelog:
  - Exit with error code if you run sealert as root and try to connect to session bus
  - Fix Crash when ino is not defined


author: Dan Walsh <dwalsh@redhat.com> - 2.2.61-1
changelog:
  - Add Gavin Romig-Koch report patch
  - Cleanup Browser window
  - Remove avc messages that are allowed or dontaudited in current poilcy


author: Dan Walsh <dwalsh@redhat.com> - 2.2.67-1
changelog:
  - Fix browser to handle ignore flag
  - Remove tpath for signature 
  - Fix audit2why handling for sealert and setroubleshoot
  - Fix sort order selection
  - Fix dontnotify handling


author: <dwalsh@redhat.com> - 3.0.7-1
changelog:
  - Apply patch from Yuri Chornoivan to fix spelling mistakes
  - Remove py files that are no longer used
  - Add details button


author: <dwalsh@redhat.com> - 3.0.11-1
changelog:
  - Better handling of tracebacks in terminal mode
  - Fix up messages on process and capability avc messages
  - Update translations


author: <dwalsh@redhat.com> - 3.0.19-1
changelog:
  - Fix man page to reflect change in gui
  - Fix sealert -fixit call to import load_plugins
  - update translations
  - Fix handling of empty tpath in gui


author: <dwalsh@redhat.com> - 3.0.30-1
changelog:
  - Change seapplet to only check for AVCs on login, if checkonlogin flag is turned on in ~/.setroubleshoot file
  - Fix list_all_alerts bug causing crash on bad type


author: <dwalsh@redhat.com> - 3.0.37-1
changelog:
  - Move serverconnection.py and FixIt commands from setroubleshoot to setroubleshoot-server
  - Remove run_cmd.py


author: <dwalsh@redhat.com> - 3.0.40-1
changelog:
  - Apply Miroslav patch that rewrites sealert option handling with using optparse. Fixing conflicting options problems.


author: Rex Dieter <rdieter@fedoraproject.org> 3.0.45-2
changelog:
  - optimize/update scriptlets
  - don't own icons/hicolor
  - drop %config tag on applications/*.desktop

  - Patch from Mgrepl to stop printable from crashing if None is passed in
  - Update to latest translations


author: Dan Walsh <dwalsh@redhat.com> - 3.1.1-1
changelog:
  - remove specific logging and move to syslog
  - Fix handling of AVC messages broken by fix for memory leaks


author: Dan Walsh <dwalsh@redhat.com> - 3.1.3-1
changelog:
  - Update to latest translations
  - Fix handling of avc messages, missing \n
  - Default to check for AVC's on login


author: Dan Walsh <dwalsh@redhat.com> - 3.1.16-1
changelog:
  - Fix sealert to handle avc's in /var/log/messages which will be numbered 1400 and 1107 rather then AVC and USER_AVC
  - Update Translations
  - Fix hostname substitution to only effect hostnames


author: Dan Walsh <dwalsh@redhat.com> - 3.2.1-1
changelog:
  - Remove sesearch from package and start using sepolicy from policycoreutils-python
  - Fix retrieval of writable types to translate attributes into the group of types available, and not return non file types.


author: Dan Walsh <dwalsh@redhat.com> - 3.2.9-1
changelog:
  - On update cp instead of rename, since there could be a situation where
  someone has ~/.config on a different file sytem then ~.  It has happened.
  - Fix --password spelling error
  - Remove --quit option from sealert
  - Update translations


author: Petr Lautrbach <plautrba@redhat.com> 3.2.22-1
changelog:
  - Ship a symbolic setroubleshoot icon (#1182652)
  - Fix get_rpm_nvr_*_temporary functions - CVE-2015-1815 (#1203352)


author: Petr Lautrbach <plautrba@redhat.com> 3.2.24-1
changelog:
  - translations updated from https://fedora.zanata.org/project/view/setroubleshoot
  - setroubleshoot_database.xml and email_alert_recipients are %ghost again


author: Petr Lautrbach <plautrba@redhat.com> 3.3.3-1
changelog:
  - fixed few UI browser problems
  - extended DBUS API, see DBUS.md
  - import MIMEText from the right module (#1297111)
  - Fix several GTK deprecated warnings


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.5-1
changelog:
  - get_alert() DBUS API extended with more parameters
  - sedispatch uses a timeout when collecting audit events (#1322771)
  - Use correct packaging for byte compiled files (#1321047)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.8-1
changelog:
  - added setroubleshootd_log.log_full=True|False directive
  - setroubleshootd_log.level and sealert_log.level can be set to
    different values
  - get_alert() and get_all_alerts_since() DBUS APIs change to use
    number of microseconds instead of date string
  - setroubleshoot.conf cleanup


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.9.1-1
changelog:
  - Do not use dangerous shell=True
  - Use subprocess.check_output() with a sequence of program arguments


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.11-1
changelog:
  - Fix "list all alerts" in sealert gui (#1370272, #1332485)
  - Fix sealert message for capability2 (#1360392)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.12-1
changelog:
  - Remove "Report bug" button when mozplugger plugin is used (#1290135)
  - Change "check_for_man" return value upon failure (#1431191)
  - Fix "plugin details" message content
  - Add "init_args" function to Plugin
  - Fix sealert crash when setroubleshootd fails to start (#1405003)
  - Improve obtaining AVC object path
  - Fix setroubleshootd.8
  - Fix report problem summary string
  - sealert - provide a better error message when SELinux is disabled
  - Spelling fixes
  - Python 3.6 invalid escape sequence deprecation fixes


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.13-1
changelog:
  - Don't stop when the plugin directory is empty
  - Fix missing margins on Troubleshoot window
  - Resize all solutions panels horizontally
  - Fix missing priority color for proposed solutions
  - Do not split If sentences to framework and plugins - requires
    setroubleshoot-plugins 3.3.8 at least (rhbz#1210243, rhbz#1322734, rhbz#1115510)
  - Set translation domain for Gtk.Builder() object to have strings
    correctly translated
  - Make labels on GtkButtons translatable
  - Handla all exceptions from do_analyze_logfile()
  - Fix semi-translated messages
  - Update translations
  - Do not catch POSIX signals (rhbz#1366004, rhbz#1419245)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.14-1
changelog:
  - Increase the space for suggested solutions in sealert
  - Highlight suggestions with the highest confidence
  - Remove additional "If " string from plugin messages
  - Fix sealert message for process2 (#1507909)
  - Do not change if_string[0] to lowercase


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.15-1
changelog:
  - Rewrite seapplet to Python3 to use Notify and Gtk 3.0
  - Add setroubleshoot-seappletlegacy with legacy seappletlegacy based on Gtk 2
  - sealert: Finish dbus communication after error


author: Björn Esser <besser82@fedoraproject.org> - 3.3.15-2
changelog:
  - Fix runtime dependency: 's!lipreport!libreport!g' (#1536580)
  - Prefer %global over %define
  - Remove obsolete %defattr(-,root,root,-)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.16-1
changelog:
  - Do not show status_icon when there's no alert (#1543758)
  - Run seapplet only on SELinux enabled system (#1541631)
  - Use context in Gio.AppInfo.launch (#1542156)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.17-1
changelog:
  - Set auto_save_interval to 5 (#1548913,#1523406,#1539180)
  - seapplet: Try send and close notifications (#1541624,#1541719,#1544222,#1539367)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.18-1
changelog:
  - Move sedispatch.conf to /etc/audit/plugins.d/
  - Fix summary and "if" text for AVCs with unknown target path


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.19-2
changelog:
  - Update "missing" scripts to automake-1.15
  - Add active polling for acquiring policy file
  - Fix translation of hex values in AVCs (#1477236, #1709742)
  - require initscripts to ensure that "service" call works properly


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.21-1
changelog:
  - Use dbus.mainloop.glib.DBusGMainLoop() instead of dbus.glib
  - Fix AVC.__typeMatch to handle aliases properly
  - Handle sockets with abstract path properly (#1775135)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.22-2
changelog:
  - Log plugin exception traceback when log level is DEBUG
  - sepolicy.info() returns a generator, not a list (#1784564)


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.23-1
changelog:
  - browser: Check return value of Gdk.Screen().get_default() (#1574434)
  - Improve and unify error messages (#1763982)
  - setroubleshoot.util: Catch exceptions from sepolicy import
  - Add dpkg support
  - Do not refer to hardcoded selinux-policy rpm in signature
  - Make date/time format locale specific (#1812674)
  - Improve speed of plugin evaluation (#1794807)
  - Do not try to report a bug on None package
  - sealert: Drop unused import slib.dbus.service
  - Drop updater.py - it's not used and doesn't work
  - root user doesn't need to use SetroubleshootPrivileged API
  - Use pydbus, a modern Python dbus API, for SetroubleshootPrivileged
  - Report bug on a package which owns the related SELinux domain (#1811644)
    https://pagure.io/setroubleshoot/issue/18
  - Add Local SELinux policy package version to analyses reports
  - setroubleshoot.utils.get_rpm_nvr_by_scontext add option to use DBUS method
  - Export setroubleshoot.utils.get_rpm_nvr_by_scontext via DBUS
  - setroubleshoot.util: get_rpm_nvr_by_type() and get_rpm_nvr_by_scontext()


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-6
changelog:
  - Fix shebang of SetroubleshootPrivileged.py (#2231023)
  - Check that SELinux is enabled before running (#2178950)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.10-1
changelog:
  - Handle no "allowed_target_types" properly
  - bind_ports: Do not use when there are no allowed_target_types
  - Fix summary and "if" text for AVCs with unknown target path
  - plugins: Update translations


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.10-2
changelog:
  - update "file" plugin (#1649818)
  - Update "xen_image" plugin (#1649831)
  - Update qemu_blk_image and qemu_file_image (#1649838)


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.12-1
changelog:
  - Use get_package_nvr* functions instead of get_rpm_nvr*
  - Update deprecated type references (#1829306)


author: Petr Pisar <ppisar@redhat.com> - 4.15.2-10
changelog:
  - License corrected to "GPLv3+ and (GPLv3+ and BSD) and (LGPLv3+ or BSD) and
    LGPLv2+ and Public Domain and GFDL"


author: Javier Martinez Canillas <javierm@redhat.com> - 15-3
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1704854
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717063


author: Peter Jones <pjones@redhat.com> - 15-7
changelog:
  - Backport this to EL 8 so we can build-dep on the right version.
    Related: CVE-2020-14372 (and others)


author: Javier Martinez Canillas <javierm@redhat.com> - 15-3
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1715878
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717064


author: Peter Jones <pjones@redhat.com> - 15-4
changelog:
  - Rebuild for bug fixes and new signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-5
changelog:
  - Once more with the MokListRT config table patch added.
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-7
changelog:
  - Implement Lenny's workaround
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-8
changelog:
  - Fix a load-address-dependent forever loop.
    Resolves: rhbz#1861977
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311
    Related: CVE-2020-15705
    Related: CVE-2020-15706
    Related: CVE-2020-15707


author: Peter Jones <pjones@redhat.com> - 13-1
changelog:
  - Make a new shim-unsigned-x64 package like the shim-unsigned-aarch64 one.
  - This will (eventually) supersede what's in the "shim" package so we can
    make "shim" hold the signed one, which will confuse fewer people.


author: Nathan Scott <nathans@redhat.com> - 0.6.2-1
changelog:
  - Switch to enabling the Java 8+ maven modules only now.
  - Add unitsofmeasurement prefix to package name.
  - Update to latest upstream sources.


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.31-7.git0144aa8
changelog:
  - build with %gobuild
  - use scl-ized go-toolset as dep
  - disable i686 builds temporarily because of go-toolset issues


author: Eduardo Santiago <santiago@redhat.com> - 1:0.1.41-3
changelog:
  - patch broken gating tests: improper 'jq' usage, and use 'registry:2.6'
    (instead of :2) to work around broken image pushed by docker


author: Jindrich Novy <jnovy@redhat.com> - 2:1.11.3-0.2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.11
    (https://github.com/containers/skopeo/commit/7e11ab4)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:1.12.0-2
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179951
  - Resolves: #2187319
  - Resolves: #2187367
  - Resolves: #2203682
  - Resolves: #2207513


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 0.1.13-5
changelog:
  - include go-srpm-macros and compiler(go-compiler) in fedora conditionals
  - define %gobuild if not already
  - add patch to build with older version of golang


author: dwalsh <dwalsh@redhat.com> - 0.1.21-1.dev.git0b73154
changelog:
  - Add support for storage.conf and storage-config.5.md from github container storage package
  - Bump to the latest version of skopeo
  - vendor.conf: add ostree-go
  - it is used by containers/image for pulling images to the OSTree storage.
  - fail early when image os does not match host os
  - Improve documentation on what to do with containers/image failures in test-skopeo
  -   We now have the docker-archive: transport
  -   Integration tests with built registries also exist
  - Support /etc/docker/certs.d
  - update image-spec to v1.0.0-rc6


author: dwalsh <dwalsh@redhat.com> - 0.1.22-1.dev.git5d24b67
changelog:
  -  Give more useful help when explaining usage
  -  Also specify container-storage as a valid transport
  -  Remove docker reference wherever possible
  -  vendor in ostree fixes


author: dwalsh <dwalsh@redhat.com> - 0.1.23-6.dev.git1bbd87
changelog:
  - Change name of storage.conf.5 man page to containers-storage.conf.5, since
  it conflicts with inn package
  - Also remove default to "overalay" in the configuration, since we should
  - allow containers storage to pick the best default for the platform.


author: dwalsh <dwalsh@redhat.com> - 0.1.24-4.dev.git28d4e08
changelog:
  - Update container/storage.conf and containers-storage.conf man page
  - Default override to true so it is consistent with RHEL.


author: dwalsh <dwalsh@redhat.com> - 0.1.25-1.git7fd6f66b
changelog:
  -   Fix CVE in tar-split
  -   copy: add shared blob directory support for OCI sources/destinations
  -   Aligning Docker version between containers/image and skopeo
  -   Update image-tools, and remove the duplicate Sirupsen/logrus vendor
  -   makefile: use -buildmode=pie


author: dwalsh <dwalsh@redhat.com> - 0.1.25-2.git2e8377a7
changelog:
  -  Add manifest type conversion to skopeo copy
  -  User can select from 3 manifest types: oci, v2s1, or v2s2
  -   e.g skopeo copy --format v2s1 --compress-blobs docker-archive:alp.tar dir:my-directory


author: dwalsh <dwalsh@redhat.com> - 0.1.27-1.git
changelog:
  - Fix Conflicts to Obsoletes
  - Add better docs to man pages.
  - Use credentials from authfile for skopeo commands
  - Support storage="" in /etc/containers/storage.conf
  - Add global --override-arch and --override-os options


author: dwalsh <dwalsh@redhat.com> - 0.1.29-1.git
changelog:
  - bump to 0.1.29-1
  - Updated containers/image
      docker-archive generates docker legacy compatible images
      Do not create $DiffID subdirectories for layers with no configs
      Ensure the layer IDs in legacy docker/tarfile metadata are unique
      docker-archive: repeated layers are symlinked in the tar file
      sysregistries: remove all trailing slashes
      Improve docker/* error messages
      Fix failure to make auth directory
      Create a new slice in Schema1.UpdateLayerInfos
      Drop unused storageImageDestination.{image,systemContext}
      Load a *storage.Image only once in storageImageSource
      Support gzip for docker-archive files
      Remove .tar extension from blob and config file names
      ostree, src: support copy of compressed layers
      ostree: re-pull layer if it misses uncompressed_digest|uncompressed_size
      image: fix docker schema v1 -> OCI conversion
      Add /etc/containers/certs.d as default certs directory


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.31-1.git0144aa8
changelog:
  - Resolves: #1580938 - resolve FTBFS
  - Resolves: #1583762 - remove dependency on btrfs-progs-devel
  - bump to v0.1.31 (from master)
  - built commit ca3bff6
  - use go-toolset deps for rhel8


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.31-4.git0144aa8
changelog:
  - Resolves: #1597629 - handle dependency issue for skopeo-containers
  - rename skopeo-containers to containers-common as in Fedora


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.32-4.git1715c90
changelog:
  - Fixes @openshift/machine-config-operator#669
  - install /etc/containers/oci/hooks.d and /etc/containers/certs.d


author: Jindrich Novy <jnovy@redhat.com> - 1:0.1.40-2
changelog:
  - comment out mountopt option in order to fix gating tests
    see bug 1769769
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1:0.1.40-4
changelog:
  - fix symlinks in /usr/share/rhel/secrets and make
    subscription-manager soft dependency to make them work
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.0-2
changelog:
  - fix "CVE-2020-14040 skopeo: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-8]"
  - Resolves: #1854719


author: Eduardo Santiago <santiago@redhat.com> - 1:1.1.0-3
changelog:
  - fix broken gating tests: docker unexpectedly removed htpasswd from
    their 'registry:2' image, so we now use htpasswd from httpd-tools on host.


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-1
changelog:
  - update vendored component versions
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/2e90a8a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-5
changelog:
  - assure "NET_RAW" is always defined
  - support rhel-shortnames.conf with generated shortname/registry aliases
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-6
changelog:
  - fix rhel-shortnames.conf generation (avoid duplicates and records
    with invalid URL)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-8
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/2e90a8a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-10
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/a05ddb8)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-11
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/6c0e35a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-12
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/b4210c0)
  - Resolves: #1914884


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-13
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/3abb778)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/e72dd9c)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-2
changelog:
  - use rhel-shortnames only from trusted registries
  - sync with config files from current versions of vendored projects
  - Resolves: #1933775
  - Resolves: #1933776


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-3
changelog:
  - use infra_image = "registry.redhat.io/rhel8/pause" in contiainers.conf
  - add update-vendored.sh script which will always assure we ship
    documentation/configs for versions vendored in podman, buildah and
    skopeo
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-4
changelog:
  - use infra_image = "registry.redhat.io/ubi8/pause" in containers.conf
    (unlike previous one ubi8/pause doesn't require authentication)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-5
changelog:
  - require crun >= 0.19 and set it as default OCI runtime
  - add ensure() function to update.sh so that configuration statements
    can be easily amended/reviewed
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.3-1
changelog:
  - update to skopeo-1.2.3
  - sync with Fedora deps
  - fix typo in upstream Makefile
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.3-2
changelog:
  - assure runc is set as default runtime in RHEL8
  - update shortnames from upstream
  - sync vendored component versions with upstream
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.0-3
changelog:
  - update to new versions of vendored components
  - fail is there is an issue in communication with Pyxis API
  - understand devel branch in update.sh script
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.1-3
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.3
    (https://github.com/containers/skopeo/commit/038f70e)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.1-4
changelog:
  - add direct runc dependency to avoid situation when runc is listed
    as default runtime but only crun is present in RHEL8
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-1
changelog:
  - update vendored components
  - ship /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release only on non-RHEL and
    CentOS distros
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/ea32394)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/130f32f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.2-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/01e51ce)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/47b8082)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.3
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/177443f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.4
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/31b8981)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.5
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/db1e814)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.6
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/c5a5199)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.7
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/25d3e7b)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.8
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/4d3588e)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.9
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/86fa758)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.10
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/53cf287)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.11
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/a95b0cc)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.12
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/ff88d3f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/fc81803)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-0.2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/116e75f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-0.3
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/9c9a9f3)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:1.11.2-0.4
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.11
    (https://github.com/containers/skopeo/commit/8191ef3)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:1.11.3-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.11
    (https://github.com/containers/skopeo/commit/d79588e)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:1.14.0-2
changelog:
  - update to latest content of https://github.com/containers/skopeo/releases/tag/1.14.0
    (https://github.com/containers/skopeo/commit/6abf96bb82666fbb3d4ad9faf1812e5ae2d31a74)


author: Jindrich Novy <jnovy@redhat.com> - 2:1.14.3-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
    (https://github.com/containers/skopeo/commit/1c2ab99)
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:1.14.3-0.2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
    (https://github.com/containers/skopeo/commit/d0a0f1a)
  - Resolves: RHEL-28226


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.14.3-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
    (https://github.com/containers/skopeo/commit/4a2bc3a)
  - Resolves: RHEL-28226


author: Jindrich Novy <jnovy@redhat.com> - 2:1.14.3-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
    (https://github.com/containers/skopeo/commit/5f2b9af)
  - Resolves: RHEL-28728


author: Jindrich Novy <jnovy@redhat.com> - 2:1.14.4-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
    (https://github.com/containers/skopeo/commit/78d9c9a)
  - Resolves: RHEL-40852


author: Jindrich Novy <jnovy@redhat.com> - 2:1.14.5-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
    (https://github.com/containers/skopeo/commit/072072b)
  - Resolves: RHEL-40801


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-10
changelog:
  - update shortnames from Pyxis
  - sync with the vendored versions in 3.0-8.5.0
  - bump release to assure upgrade path from 3.0-8.4.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.4-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/9921983)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.4-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/7300333)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/540efb3)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/4336972)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-3
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/4414e52)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-4
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/f952195)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-5
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/c20c32d)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-7
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.6
    (https://github.com/containers/skopeo/commit/2b16a1c)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.2-8
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179946
  - Resolves: #2187316
  - Resolves: #2187362
  - Resolves: #2203679
  - Resolves: #2207508


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.3-1
changelog:
  - update to 0.8.3 to also notice and reflect changes caused by internal
    add/modify/modrdn/delete operations


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.4-1
changelog:
  - update to 0.8.4 to fix:
    - problems updating references, particularly those for %referred() (#474478)
    - inability to notice internal add/modify/modrdn/delete operations (really
      this time) (#474426)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.5-2
changelog:
  - make the example nsslapd-pluginpath values the same on 32- and 64-bit
    systems, because we can depend on the directory server "knowing" which
    directory to search for the plugins


author: Nalin Dahyabhai <nalin@redhat.com> - 0.15-1
changelog:
  - fix %deref and %referred to fail rather than return a valid-but-empty
    result when they fail to evaluate (reported by Rob Crittenden)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.16-1
changelog:
  - fix NIS server startup problem when no port is explicitly configured and
    we're using portmap instead of rpcbind (#500903)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.17-3
changelog:
  - change buildreq from fedora-ds-base-devel to 389-ds-base-devel, which
    should avoid multilib conflicts from installing both arches of the new
    package (#511504)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.18-1
changelog:
  - update to 0.18
    - add a deref_rf function
    - schema-compat: don't respond to search requests for which there's no backend
    - schema-compat: add the ability to do standalone compat containers


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-1
changelog:
  - update to 0.21
    - schema-compat: don't look at standalone compat containers for a search,
      since we'll already have looked at the group container


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-2
changelog:
  - make sure we always pull in nss-devel and nspr-devel, and the right
    ldap toolkit for the Fedora or RHEL version


author: Nalin Dahyabhai <nalin@redhat.com> - 0.24-1
changelog:
  - carry our own yp.x, so that we don't get bitten if libc doesn't include
    yp client routines
  - we need rpcgen at build-time now


author: Nalin Dahyabhai <nalin@redhat.com> - 0.25-1
changelog:
  - speed up building compat entries which reference thousands of other entries
    (more of #692690)
  - 389-ds-base is apparently exclusive to x86_64 and %{ix86} on EL, so we have
    to be, too


author: Nalin Dahyabhai <nalin@redhat.com> - 0.26-1
changelog:
  - when building for 389-ds, use libpthread's read-write locks instead of
    NSPR's (part of #730394/#730403)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.27-1
changelog:
  - when building for 389-ds, use Slapi_RWLocks if they appear to be available
    (the rest of #730394/#730403)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.28-1
changelog:
  - when configured with --with-ldap=openldap, link with -lldap_r rather
    than -lldap (rmeggins, #769107)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.29-1
changelog:
  - add regmatchi/regsubi formatting functions which work like regmatch/regsub,
    but do matching in a case-insensitive manner
  - update NIS map defaults to match {CRYPT} userPassword values in a
    case-insensitive manner so that we also use {crypt} userPassword values
  - fix inconsistencies in the NIS service stemming from using not-normalized DNs
    in some places where it should have used normalized DNs


author: Nalin Dahyabhai <nalin@redhat.com> - 0.30-1
changelog:
  - skip recalculations when the attributes which changed don't factor into
    our calculations (part of #771493)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.33-1
changelog:
  - get more aggressive about skipping unnecessary calculations (most of
    the problem in #771444, though not the approach described there)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34-1
changelog:
  - do entry comparisons ourselves, albeit less throughly, to avoid the worst
    case in pathological cases (more of #771444)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.35-1
changelog:
  - add mmatch/mregmatch[i]/mregsub[i] formatting functions which work like
    match/regmatch[i]/regsub[i], but which can handle and return lists of
    zero or more results (part of #783274)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.36-1
changelog:
  - take steps to avoid making yp_first/yp_next clients loop indefinitely
    when a single LDAP entry produces multiple copies of the same NIS key
    for a given map


author: Nalin Dahyabhai <nalin@redhat.com> - 0.37-1
changelog:
  - fix a compile error on systems where LDAP_SCOPE_SUBORDINATE isn't defined
    (reported by Christian Neuhold)
  - conditionalize whether we have a build dependency on tcp_wrappers (older
    releases) or tcp_wrappers-devel (newer releases)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.39-1
changelog:
  - add a "default" function for trying to evaluate one expression, then
    another, then another... (part of #767372)
  - when creating a compat entry based on a real entry, set an entryUSN based on
    the source entry or the rootDSE (freeipa #864); the "scaffolding" entries
    won't have them


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-1
changelog:
  - treat padding values passed to the "link" function as expressions to be
    evaluated rather than simply as literal values (part of #767372)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.41-1
changelog:
  - log errors evaluating pad expressions in %link rather than continuing on
    until we hit an arithmetic exception (#810258)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a leak due to us assuming that slapi_mods_add_smod() not taking ownership
    of an smod along with its contents, when it just keeps the contents


author: Nalin Dahyabhai <nalin@redhat.com> - 0.43-1
changelog:
  - reintroduce support for directory server transactions (nhosoi, IPA#3046)
  - control transaction support at run-time, deciding when to do things based
    on the value of the nsslapd-pluginbetxn attribute in the plugin's entry
  - NIS: add default settings for shadow.byname and passwd.adjunct.byname maps


author: Nalin Dahyabhai <nalin@redhat.com> - 0.44-1
changelog:
  - add missing newline to a couple of debug log messages
  - note whether or not betxn support is compiled in as part of the
    nsslapd-pluginVersion value we report to the server
  - register callbacks in the same order in both plugins, so that
    their log messages are logged in the same order


author: Nalin Dahyabhai <nalin@redhat.com> - 0.44-2
changelog:
  - set betxn support to be disabled by default on Fedora 17 or EL 5 or older,
    which have versions of IPA < 3.0, per mkosek on freeipa-devel


author: Nalin Dahyabhai <nalin@redhat.com> - 0.46-1
changelog:
  - when checking if we can skip processing for a given change, pay attention to
    whether or not the changes cause the entry to need to be added or removed
    from a map (#912673)
  - check SLAPI_PLUGIN_OPRETURN in post-change hooks, in case the backend failed
    to update things but the server called us anyway


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.5-1
changelog:
  - merge Alexander Bokovoy's patches to
    - teach the schema compatibility plugin to optionally serve user and group
      information retrieved from libc as part of a set of compat entries
    - handle simple bind requests for those entries by calling out to PAM
    - to rewrite the DN of incoming bind requests to compat entries to point
      at the source entries, instead of returning a referral which most clients
      won't handle
  - include IPA-specific docs as docs


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.6-1
changelog:
  - only buildrequire libsss_nss_idmap-devel on releases that included SSSD
    version 1.10 or later, where it first appeared


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.7-1
changelog:
  - fix building against versions of directory server older than 1.3.0, which
    first introduced slapi_escape_filter_value()


author: Nalin Dahyabhai <nalin@redhat.com> - 0.48-1
changelog:
  - try to gracefully handle failures obtaining internal locks
  - fix locating-by-name of entries with names that require escaping
  - add self-tests for nsswitch and PAM functionality
  - make nsswitch mode properly handle user and group names with commas in them
  - handle attempts to PAM authenticate to compat groups (i.e., with failure)
  - drop the "schema-compat-origin" attribute


author: Nalin Dahyabhai <nalin@redhat.com> - 0.49-1
changelog:
  - add {nis,schema-compat}-ignore-subtree and -restrict-subtree settings,
    which should let us avoid deadlocks when tasks are modifying data in
    the backend database (#1007451)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.50-1
changelog:
  - if we get an EPIPE while registering with rpcbind, try to reconnect and
    retransmit before giving up


author: Nalin Dahyabhai <nalin@redhat.com> - 0.51-1
changelog:
  - fix another request argument memory leak in NIS server (#1040159)
  - fix miscellaneous items found by static analysis


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-1
changelog:
  - correctly reflect whether or not we're built with transaction support in
    the module's nsslapd-pluginVersion attribute
  - fix a couple of should've-used-memmove()-instead-of-memcpy() cases which
    would hit when removing maps or groups of maps (#1043546/#1043638)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-3
changelog:
  - remove ExclusiveArch if %{rhel} is 7 or higher, because 389-ds-base gets
    built for everything now (#1055711)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.53-1
changelog:
  - correct the default NIS map settings for hosts.byname and hosts.byaddr,
    from report by Rik Megens
  - fix several problems when hitting out-of-memory conditions, spotted by
    static analysis


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-1
changelog:
  - Add support for FreeIPA's ID views
  - Allow searching SSSD-provided users as memberUid case-insensitevly
    Fixes bug #1130131


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54.1-1
changelog:
  - support FreeIPA overrides in LDAP BIND callback
  - ignore FreeIPA override searchs outside configured schema compat subtrees


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54.2-1
changelog:
  - CVE-2015-0283 slapi-nis: infinite loop in getgrnam_r() and getgrgid_r() (#1206049)
  - Make sure nss_sss.so.2 module is used directly
  - Allow building slapi-nis with ID views against 389-ds-base from RHEL7.0/CentOS7.0 releases


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.55-1
changelog:
  - Support external members of IPA groups in schema compat
  - Support bind over ID overrides when uid is not overridden
  - Populate schema compat trees in parallel to LDAP server startup


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-1
changelog:
  - New upstream release
  - Update links to the upstream project page and releases
  - Use extended SSSD API to signal that an entry should not be cached anymore
  - Add support for timeout-based NSS queries with libsss_nss_idmap


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-3
changelog:
  - Do not build on i686 in Fedora 28 or later as 389-ds-base is not available there anymore
  - Resolves rhbz#1556448
  - Remove outdated ExclusiveArch for RHEL6


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-5
changelog:
  - Link with libnsl explicitly in Fedora 28 or later
  - Require libnsl2-devel for build
  - Resolves rhbz#1573636


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
changelog:
  - Upstream release 0.56.5
  - Resolves: rhbz#1751295: (2) When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
  - Resolves: rhbz#1768156: ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-2
changelog:
  - CVE 2021-3480:  idm:DL1/slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
  - Resolves: rhbz#1944713


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-3
changelog:
  - Resolves: rhbz#1958909 - fix regression for scoped searches in compat tree
  - Resolves: rhbz#1978189 - better handle error response from libsss_nss_idmap


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - upstream release 0.60.0
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Resolves: rhbz#1984010
    Fix ID views integration
  - Fix base scope lookups
  - Resolves: rhbz#1784172
    Bump NIS max dgram size to 8KB by default instead of 1KB
  - Resolves: rhbz#2070575
    Allow to rebuild the compat tree


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog
  - Resolves: RHEL-11984


author: Jindrich Novy <jnovy@redhat.com> - 0.4.0-1
changelog:
  - update to v.0.4.0
  - sync with fedora spec
  - drop applied CVE-2019-14378 patch
  - Resolves: #1766774


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.2
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.3
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.4-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.4
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.6-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.6
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.7-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.8-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.1
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 1.0.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/archive/v1.0.1.tar.gz
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.0
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.1
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.2.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 1.2.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3
  - Related: Jira:RHEL-2110


author: Rajeesh K V <rajeeshknambiar@fedoraproject.org> 6.1-1
changelog:
  - New upstream release with many enhancements and bugfixes
  - Metainfo file for AppData/Software Center
  - Drop patch for Fedora bug#803234 which is fixed upstream


author: Rajeesh K V <rajeeshknambiar@fedoraproject.org> 6.1-3
changelog:
  - Updated license for AnjaliOldLipi to OFL 1.1
  - Drop the email confirmation on AnjaliOldLipi license


author: Paul Wouters <pwouters@redhat.com> - 1.7.4.1-1
changelog:
  - Resolves: rhbz#1805132 socat does not recognize IP addresses of the SAN extensions in ssl mode
  - Resolves: rhbz#1870279 Transfer via socat fails with openssl enabled
  - Resolves: rhbz#1914989 Socat udp4-recvfrom cause endless loop error when target is not vaild


author: Andreas Schneider <asn@redhat.com> - 1.1.8-1
changelog:
  - Update to version 1.1.8
    * Added support for openat()
    * Added support for open64() and fopen64()
    * Always enabled logging support
    * Increased maximum for wrapped interfaces to 64
    * Improved fd duplication code
    * Fixed strict-aliasing issues
    * Fixed some use after free issues
    * Fixed issues on ppc64le


author: Andreas Schneider <asn@redhat.com> - 1.2.0-1
changelog:
  - Update to vesrion 1.2.0
    * Added threading support
    * Moved to modern cmake
    * Several smaller bugfixes


author: Paul Wouters <paul@xelerance.com> - 1.3.0-3
changelog:
  - Initial Fedora package
  - Do not install the .a file
  - Use a separate "opendnssec" user to own /var/sofhsm


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-3
changelog:
  - Add support for CKM_RSA_PKCS_OAEP key un/wrapping [Petr Spacek]
  - Use OpenSSL EVP interface for AES key wrapping [Petr Spacek]
  - Fix softhsm2-pk11install buid and post call
  - Do not use --with-objectstore-backend-db (causes issues on i686)
  - Change install directory to /usr/lib*/pkcs11/
  - Install pkcs11 module file
  - Use official upstream tar ball
  - Create ods user to own softhsm/token files
  - Enable migration tools (for softhsm-v1 installs)
  - Add softlink for softhsm-v1 .so (needed for opendnssec's conf.xml)
  - Require p11-kit, nss-tools, for SoftHSM PKCS #11 Module file
  - Copy pk11install.c from coolkey package
  - Enable hardened build
  - Add upstream official source url


author: Paul Wouters <pwouters@redhat.com> - 2.0.0-1
changelog:
  - Resolves: rhbz#1244461 Update to softhsm-2.0.0
  - Resolves: rhbz#1177086 A marked as trusted certificate cannot be written in a softhsmv2 db
  - Resolves: rhbz#1159827 Typo in homedir in /etc/passwd
  - Added global prever to toggle snapshot vs full release build changes


author: Paul Wouters <pwouters@redhat.com> - 2.1.0-1
changelog:
  - Resolves: rhbz#1244461 Updated to 2.1.0
  - Resolves: rhbz#1272423 Softhsm PKCS#11 module not visible to NSS becasue it is not in the search path
  - Resolves: rhbz#1177086 A marked as trusted certificate cannot be written in a softhsmv2 db
  - Resolves: rhbz#1272453 - A marked as CA certificate cannot be written in a softhsmv2 db
  - Removed merged in bug#162 patch
  - Temporarily disable make check because cppunit is broken


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.2.0-2
changelog:
  - Increased the level of messages that go to syslog, thus softhsm
    will no longer write on syslog when it cannot open the shared DB (#1425135)
  - Allow users in the 'ods' group to store their keys in /var/lib/softhsm/tokens/
    while at the same time disallow deleting other users' keys (using the
    sticky bit). Prevent users in the 'ods' group from writing in /var/lib/softhsm.


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.3.0-3
changelog:
  - Remove softhsm2-pk11install. Software modules are to be registered with
    p11-kit as in https://fedoraproject.org/wiki/PackagingDrafts/Pkcs11Support (#1541095).


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-1
changelog:
  - Fixes: rhbz#1818877 - rebase to softhsm 2.6.0+
  - Fixes: rhbz#1701233 - support setting supported signature methods on the token


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-3
changelog:
  - Fixes: rhbz#1834909 - softhsm use-after-free on process exit
  - Synchronize the final fix with Fedora


author: Hans de Goede <hdegoede@redhat.com> - 2.0.0-6
changelog:
  - The last round of security fixes also fixes CVE-2018-14044, CVE-2018-14045
    (rhbz#1601618, rhbz#1601620, rhbz#1601624, rhbz#1601625)


author: Sérgio Basto <sergio@serjux.com> - 2.1.1-1
changelog:
  - Update to 2.1.1
    Bugfixes: Fixed potential buffer overwrite bugs in WavFile routines. Replaced asserts with runtime exceptions.
    Android: Migrated the SoundTouch Android example to new Android Studio
    Automake: unset ACLOCAL in bootstrap script to avoid error in case earlier build script has set it


author: Per Øyvind Karlsen <peroyvind@linux-mandrake.com> 1.8-1mdk
changelog:
  - 1.8
  - drop Prefix tag
  - clean out redundant buildrequires
  - rm -rf $RPM_BUILD_ROOT at the beginning of %install, not %prep
  - use %makeinstall_std macro
  - cosmetics


author: Adrian Reber <adrian@lisas.de> - 2.3-2
changelog:
  - using a new url.lang to fix #195720
    (https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=131352)


author: Leigh Scott <leigh123linux@googlemail.com> - 3.1.3-1
changelog:
  - updated to 3.1.3
  - change configure command so it finds boost_regex
  - fix source url's
  - add devel package
  - fix directory ownership
  - fix rpath on binary


author: Adrian Reber <adrian@lisas.de> - 3.1.6-1
changelog:
  - updated to 3.1.6
  - removed buildroot and clean section
  - fixed "missing c++ source language detection for .cxx extension" (#728311)
  - fixed "source-highlight : Conflicts with autoconf-archive" (#797794)


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-10
changelog:
  - Fixed CVE-2018-11805
  - Resolves: rhbz#1787514
  - Fixed CVE-2020-1930
  - Resolves: rhbz#1820649
  - Fixed CVE-2020-1931
  - Resolves: rhbz#1820650


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2.0-1
changelog:
  - update to 1.2.0
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - include soname in file list
  - use license macro


author: Uri Lublin <uril@redhat.com> - 8.3-1
changelog:
  - mingw-virt-viewer 9.0-1
  - spice-usbdk-win   1.0-22
  - mingw-spice-gtk   0.38-4
  - mingw-libgovirt   0.3.7-2
  - mingw-spice-protocol 0.14-2
    Related:  rhbz#1841952, rhbz#1179070, rhbz#1428402
    Related:  rhbz#1575043, rhbz#1640058, rhbz#1793019
    Related:  rhbz#1841951
    Related:  rhbz#1842532
    Related:  rhbz#1841949
    Related:  rhbz#1773899
    Related:  rhbz#1741202, rhbz#1741252


author: Uri Lublin <uril@redhat.com> - 8.4-1
changelog:
  - mingw-virt-viewer 9.0-3
  - mingw-libgovirt   0.3.7-5
  - mingw-spice-gtk   0.38-5
    Related: rhbz#844683
    Related: rhbz#1839104 rhbz#1874740 rhbz#1017261
    Related: rhbz#1918459


author: Uri Lublin <uril@redhat.com> - 8.5-5
changelog:
  - mingw-virt-viewer 9.0-6
    Resolves: rhbz#1997058
    Resolves: rhbz#1918877
    Related:  rhbz#1939111
    Related:  rhbz#1942919


author: Uri Lublin <uril@redhat.com> - 0.21.0-2
changelog:
  - Build without pciaccess
    Resolves: rhbz#1964922
  - Fix g_memdup deprecation warning with glib >= 2.68


author: Uri Lublin <uril@redhat.com> - 0.10.0-4
changelog:
  - Reset properly state of pending large messages upon disconnection
    Resolves rhbz#1548419
  - Return detailed message for file transfer
    Resolves rhbz#1520393


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-5
changelog:
  - Resolves: #2130260 - CVE-2022-41318 squid:4/squid: buffer-over-read in SSPI and SMB
    authentication


author: Tomas Korbar <tkorbar@redhat.com> - 4.15-6
changelog:
  - Resolves: #2072988 - [RFE] Add the "IP_BIND_ADDRESS_NO_PORT"
    flag to sockets created for outgoing connections in the squid source code.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-7.1
changelog:
  - Resolves: RHEL-14801 - squid: squid: Denial of Service in HTTP Digest
    Authentication
  - Resolves: RHEL-14776 - squid: squid: Request/Response smuggling in HTTP/1.1
    and ICAP


author: hezhongkun <hezhongkun@inspur.com> - 4.15-8.1
changelog:
  - Fix CVE-2023-5824: Supply ALE with HttpReply before checking http_reply_access (#398)
      Replace adjustable base reply - downstream change neccessary for backport


author: wangkaiqiang <wangkaiqiang@inspur.com> - 4.15-11.1
changelog:
  - Fix CVE-2023-46728: Remove support for Gopher protocol
  - Fix CVE-2023-49286: Exit without asserting when helper process startup fails


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - first build against glibc
  - patched out the use of setresuid(), which is available only on kernels
    2.1.44 and later


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated the init script to use reconfigure option to restart squid instead
    of shutdown/restart (both safer and quicker)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - cache & log dirs shouldn't be world readable
  - remove preun script (leave logs & cache @ uninstall)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - switch to using group squid
  - turn off icmp (insecure)
  - update to 2.2.DEVEL3
  - build FAQ docs from source


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix compliance with ftp RFCs
    (http://www.wu-ftpd.org/broken-clients.html)
  - Work around a bug in some versions of autoconf
  - BuildPrereq sgml-tools - we're using sgml2html


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix init script again (#11699)
  - add --enable-delay-pools (#11695)
  - update to STABLE3
  - update FAQ


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix path references in QUICKSTART (#15114)
  - fix initscript translations (#24086)
  - fix shutdown logic (#24234), patch from <jos@xos.nl>
  - add /etc/sysconfig/squid for daemon options & shutdown timeouts
  - three more bugfixes from the Squid people
  - update FAQ.sgml
  - build and ship auth modules (#23611)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.STABLE1 + patches
  - enable some more configure options (#24981)
  - oops, ship /etc/sysconfig/squid


author: Bill Nottingham <notting@redhat.com>
changelog:
  - 2.4.STABLE3 + patches
  - turn off HTCP at request of maintainers
  - leave SNMP enabled in the build, but disabled in the default config


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE3-0
changelog:
  - Spec file change to enable the nul storage module. bugzilla #74654
  - Upgrade to 2.5STABLE3 with current official patches.
  - Added --enable-auth="basic,ntlm": closes bugzilla #90145
  - Added --with-winbind-auth-challenge: closes bugzilla #78691
  - Added --enable-useragent-log and --enable-referer-log, closes
  - bugzilla #91884


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-1
changelog:
  - New upstream version.
  - Fix the Source: line in this spec file to point to the correct URL.
  - redo the -location patch to work with the new upstream version.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Incorporate many upstream patches
  - Include many spec file changes from D.Johnson <dj@www.uk.linux.org>


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-3
changelog:
  - Clean up the spec file to work on 64-bit platforms (use %{_libdir}
    instead of /usr/lib, etc)
  - Make the release number in the changelog section agree with reality.
  - use -fPIE rather than -fpie.  s390 fails with just -fpie


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-1
changelog:
  - New upstream version, obsoletes many patches.
  - Fix --datadir passed to configure.  Configure automatically adds /squid
    so we shouldn't.
  - Remove the problematic triggerpostun trigger, since is's broken, and FC2
    never shipped with that old version.
  - add %{?_smp_mflags} to make line.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-2
changelog:
  - Include the first 10 upstream patches
  - Add a patch for the correct location of the winbindd pipe.  This closes
    bugzilla #107561
  - Remove the change to ssl_support.c from squid-2.5.STABLE3-build patch
    This closes #117851
  - Include /etc/pam.d/squid .  This closes #113404
  - Include a patch to close #111254 (assignment in assert)
  - Change squid.init to put output messages in /var/log/squid/squid.out
    This closes #104697
  - Only useradd the squid user if it doesn't already exist, and error out
    if the useradd fails.  This closes #118718.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5STABLE5-5
changelog:
  - Merge current upstream patches.
  - Fix the -pipe patch to have the correct name of the winbind pipe.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-1
changelog:
  - New upstream version, with 32 upstream patches.
    This closes #133970, #133931, #131728, #128143, #126726

  - Change the permissions on /etc/squid/squid.conf to 640.  This closes
    bugzilla #125007


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3
changelog:
  - include patch from Ulrich Drepper <drepper@redhat.com> to stop
    problems with O_NONBLOCK.  This closes #136049


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-1
changelog:
  - new upstream version, with 3 upstream patches.
    Updated the -build and -config patches
  - Include patch from Ulrich Drepper <frepper@redhat.com> to more
    intelligently close all file descriptors.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-2
changelog:
  - Add a triggerin on samba-common to make /var/cache/samba/winbindd_privileged
    accessable so that ntlm_auth will work.  It needs to be in this rpm,
    because the Samba RPM can't assume the squid user exists.
    Note that this will only work if the Samba RPM is recent enough to create
    that directory at install time instead of at winbindd startup time.
    That should be samba-common-3.0.0-15 or later.
    This fixes bugzilla #103726
  - Clean up extra whitespace in this spec file.
  - Add additional upstream patches. (Now 18 upstream patches).
  - patch #112 closes CAN-2005-0096 and CAN-2005-0097, remote DOS security holes.
  - patch #113 closes CAN-2005-0094, a remote buffer-overflow DOS security hole.
  - patch #114 closes CAN-2005-0095, a remote DOS security hole.
  - Remove the -nonbl (replaced by #104) and -close (replaced by #111) patches, since
    they're now fixed by upstream patches.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-4
changelog:
  - Include two more upstream patches for security vulns:
    bz#146783 Correct handling of oversized reply headers
    bz#146778 CAN-2005-0211 Buffer overflow in WCCP recvfrom() call


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE8-2
changelog:
  - new upstream version with 4 upstream patches.
  - Reorganize spec file to apply upstream patches first


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-4
changelog:
  - More upstream patches, including the fixed 2GB patch.
  - include the -libbind patch, which prevents squid from using the optional
    -lbind library, even if it's installed.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-6
changelog:
  - More upstream patches, including a fix for
    bz#157456 CAN-2005-1519 DNS lookups unreliable on untrusted networks


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-1
changelog:
  - new upstream version
  - enabled fakeauth utility (#154020)
  - enabled digest authentication scheme (#155882)
  - all error pages marked as config (#127836)
  - patch for 64bit statvfs interface (#153274)
  - added httpd config file for cachemgr.cgi (#112725)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-3
changelog:
  - removed "--enable-truncate" option (#165948)
  - added "--enable-cache-digests" option (#102134)
  - added "--enable-ident-lookups" option (#161640)
  - some clean up (#165949)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE11-5
changelog:
  - fix for #171213 - CVE-2005-3258 Squid crash due to malformed FTP response
  - more fixes from upstream


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE12-2
changelog:
  - rewriten patch squid-2.5.STABLE10-64bit.patch, it works with
    "--with-large-files" option now
  - fix for #72896 - squid does not support > 1024 file descriptors,
    new "--enable-fd-config" option for it.


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE1-1
changelog:
  - new upstream + the latest CVS snapshot from 2006/07/18
  - updated fd config patch
  - enabled epoll
  - fixed release format (#197405)
  - enabled WCCPv2 support (#198642)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-2
changelog:
  - upstream fixes:
    * Accept 00:00-24:00 as a valid time specification (upstream BZ #1794)
    * aioDone() could be called twice
    * Squid reconfiguration (upstream BZ #1800)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-3
changelog:
  - added fix for #183869 - squid can abort when getting status
  - added upstream fixes:
      * Bug #1796: Assertion error HttpHeader.c:914: "str"
      * Bug #1779: Delay pools fairness, correction to first patch
      * Bug #1802: Crash on exit in certain conditions where cache.log is not writeable
      * Bug #1779: Delay pools fairness when multiple connections compete for bandwidth
      * Clarify the select/poll/kqueue/epoll configure --enable/disable options
  - reworked fd patch for STABLE4


author: Martin Bacovsky <mbacovsk@redhat.com> - 7:2.6.STABLE16-2
changelog:
  - our fd_config patch was replaced by upstream's version 
  - Source1 (FAQ.sgml) points to local source (upstream's moved to wiki)


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE2-1
changelog:
  - upgrade to latest upstream 3.0.STABLE2
  - check config file before starting (#428998)
  - whitespace unification of init script
  - some minor path changes in the QUICKSTART file
  - configure with the --with-filedescriptors=16384 option


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE5-2
changelog:
  - fix configure detection of netfilter kernel headers (#435499),
    patch by aoliva@redhat.com
  - add support for negotiate authentication (#445337)


author: Jiri Skala <jskala@redhat.com> - 7:3.0.STABLE7-2
changelog:
  - used ncsa_auth.8 from man-pages. there will be this file removed due to conflict
  - fix #458593 noisy initscript
  - fix #463129 init script tests wrong conf file
  - fix #450352 - build.patch patches only generated files


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE13-2
changelog:
  - backported logfile.cc syslog parameters patch from 3.1 (b9443.patch)
  - GCC-4.4 workaround in src/wccp2.cc


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE17-2
changelog:
  - Bug #514014, update to 3.0.STABLE17 fixing the denial of service issues
    mentioned in Squid security advisory SQUID-2009_2.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-1
changelog:
  - Upgrade to next upstream release 3.1.0.13 with many new features
    * IPv6 support
    * NTLM-passthru
    * Kerberos/Negotiate authentication scheme support
    * Localized error pages based on browser language preferences
    * Follow X-Forwarded-For capability
    * and more..


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-7
changelog:
  - Include upstream patches fixing important operational issues
  - Enable ESI support now that it does not conflict with normal operation


author: Jiri Skala <jskala@redhat.com> 7:3.1.0.14-2
changelog:
  - fixed #532930 Syntactic error in /etc/init.d/squid
  - fixed #528453 cannot initialize cache_dir with user specified config file


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.15-3
changelog:
  - fixed #551302 PROXY needs libcap. Also increases security a little.
  - merged relevant upstream bugfixes waiting for next 3.1 release


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.16-4
changelog:
  - spec file modified to be fedora packaging guidline compliant
  - little shifting lines in init script header due to rpmlint complaint
  - fixes assertion during start up


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.16-6
changelog:
  - Patch for Squid security advisory SQUID-2010:2, denial of service
    issue in HTCP processing (CVE-2010-0639)


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.1-2
changelog:
  - Update to 3.1.1 Squid bug #2827 crash with assertion failed:
    FilledChecklist.cc:90: "conn() != NULL" under high load.


author: Jiri Skala <jskala@redhat.com>
changelog:
  - fixes #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.3-2
changelog:
  - Fully fix #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled
  - Various IPv6 related issues fixed, making tcp_outgoing_address behave
    as expected and no commResetFD warnings when using tproxy setups.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.4-1
changelog:
  - Upstream 3.1.4 bugfix release, issues relating to IPv6, TPROXY, Memory
    management, follow_x_forwarded_for, and stability fixes


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.5-2
changelog:
  - Upstream 3.1.5 bugfix release
  - Upstream patch for Bug #614665: Squid crashes with  ident auth
  - Upstream patches for various memory leaks


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.9-1
changelog:
  - upgrade to squid-3.2
  - fixes #720445 - Provide native systemd unit file
  - SysV initscript moved to subpackage
  - temproary disabled eCap


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.13-2
changelog:
  - fixes #747103 - squid does not start if /var/spool/squid is empty
  - fixes #747110 - squid does not start adding "memory_pools off"


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.2.0.14-6
changelog:
  - upstream gcc-4.7 patch
  - fix for bug #772483 running out of memory, mem_node growing out of bounds


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.3-2
changelog:
  - Resolved: #854356 - squid.service use PIDFile
  - Resolved: #859393 - Improve cache_swap script
  - Resolved: #791129 - disk space warning
  - Resolved: #862252 - reload on VPN or network up/down
  - Resolved: #867531 - run test suite during build
  - Resolved: #832684 - missing after dependency nss-lookup.target
  - Removed obsolete configure options


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.9-1
changelog:
  - Update to latest upstream version 3.2.9
  - Fixed: CVE-2013-1839
  - Removed: makefile-patch (+make check)


author: Ville Skyttä <ville.skytta@iki.fi> - 7:3.3.4-2
changelog:
  - Fix basic auth and log daemon DB helper builds.
  - Use xz compressed tarball, fix source URLs.
  - Fix bogus dates in %changelog.


author: Michal Luscon <mluscon@redhat.com> - 7:3.3.9-1
changelog:
  - Update to latest upstream version 3.3.9
  - Fixed #976815: file descriptors are hard coded to 16384
  - Fixed: active ftp crashing
  - Fixed: offset of patches


author: Michal Luscon <mluscon@redhat.com> - 7:3.4.1-1
changelog:
  - Rebase to latest stable upstream release 3.4.1
  - Fixed #1034306: fails to build for AArch64
  - Fixed: active ftp


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.4.12-1
changelog:
  - Update to latest upstream version 3.4.12
  - bug #1173946: Disable -march=native compile time optimization, use Fedora defaults.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.5.2-2
changelog:
  - Update to latest upstream version 3.5.2
  - Remove deprecated (and renamed) squid_msnt_auth basic auth helper. Only
    performs LM authentication and not considered useful in todays networks.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.13-3
changelog:
  - Resolves: #1308866 - CVE-2016-2390 squid: incorrect server error 
    handling resulting in denial of service


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.15-1
changelog:
  - new version 3.5.15
  - Resolves: #1311585 - squid: Multiple Denial of Service issues in
    HTTP Response processing
  - Resolves: #1312267 - squid: SQUID-2016_2 advisory, multiple DoS issues


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.23-5
changelog:
  - Resolves: #1585617 - Build against libdb only instead of libdb4
  - disabled strict checking for now (squid can not be built with GCC8)


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-1
changelog:
  - Resolves: #1656871 - squid rebase to 4.4
  - Resolves: #1645148 - CVE-2018-19131 squid: Cross-Site Scripting when
    generating HTTPS response messages about TLS errors
  - Resolves: #1645156 - CVE-2018-19132 squid: Memory leak in SNMP query
    rejection code


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-6
changelog:
  - Resolves: #1679526 - Missing detailed configuration file
  - Resolves: #1703117 - RHEL 7 to 8 fails with squid installed because dirs
    changed to symlinks
  - Resolves: #1691741 - Squid cache_peer DNS lookup failed when not all lower
    case
  - Resolves: #1683527 - "Reloading" message on a fresh reboot after enabling
    squid


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-8
changelog:
  - Resolves: # 1738485 - CVE-2019-12527 squid:4/squid: heap-based buffer overflow
    in HttpHeader::getAuth


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-9
changelog:
  - Resolves: #1738583 - CVE-2019-12525 squid:4/squid: parsing of header
    Proxy-Authentication leads to memory corruption
  - Resolves: #1828369 - CVE-2020-11945 squid: improper access restriction upon
    Digest Authentication nonce replay could lead to remote code execution
  - Resolves: #1828370 - CVE-2019-12519 squid: improper check for new member in
    ESIExpression::Evaluate allows for stack buffer overflow


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-1
changelog:
  - new version 4.11
  - libsystemd integration
  - Resolves: #1829467 - squid:4 rebase
  - Resolves: #1828378 - CVE-2019-12521 squid:4/squid: off-by-one error in
    addStackElement allows for a heap buffer overflow and a crash
  - Resolves: #1828377 - CVE-2019-12520 squid:4/squid: improper input validation
    in request allows for proxy manipulation
  - Resolves: #1828375 - CVE-2019-12524 squid:4/squid: improper access restriction
    in url_regex may lead to security bypass
  - Resolves: #1820664 - CVE-2019-18860 squid: mishandles HTML in the host
    parameter to cachemgr.cgi which could result in squid behaving in unsecure way
  - Resolves: #1802514 - CVE-2020-8449 squid:4/squid: Improper input validation
    issues in HTTP Request processing
  - Resolves: #1802513 - CVE-2020-8450 squid:4/squid: Buffer overflow in a Squid
    acting as reverse-proxy
  - Resolves: #1802512 - CVE-2019-12528 squid:4/squid: Information Disclosure
    issue in FTP Gateway
  - Resolves: #1771288 - CVE-2019-18678 squid:4/squid: HTTP Request Splitting
    issue in HTTP message processing
  - Resolves: #1771283 - CVE-2019-18679 squid:4/squid: Information Disclosure
    issue in HTTP Digest Authentication
  - Resolves: #1771280 - CVE-2019-18677 squid:4/squid: Cross-Site Request Forgery
    issue in HTTP Request processing
  - Resolves: #1771275 - CVE-2019-12523 squid:4/squid: Improper input validation
    in URI processor
  - Resolves: #1771272 - CVE-2019-18676 squid:4/squid: Buffer overflow in URI
    processor
  - Resolves: #1771264 - CVE-2019-12526 squid:4/squid: Heap overflow issue in URN
    processing
  - Resolves: #1738581 - CVE-2019-12529 squid: OOB read in Proxy-Authorization
    header causes DoS


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-2
changelog:
  - Resolves: #1853130 - CVE-2020-15049 squid:4/squid: request smuggling and
    poisoning attack against the HTTP cache
  - Resolves: #1853136 - CVE-2020-14058 squid:4/squid: DoS in TLS handshake


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-3
changelog:
  - Resolves: #1871705 - CVE-2020-24606 squid: Improper Input Validation could
    result in a DoS
  - Resolves: #1871702 - CVE-2020-15811 squid: HTTP Request Splitting could result
    in cache poisoning
  - Resolves: #1871700 - CVE-2020-15810 squid: HTTP Request Smuggling could result
    in cache poisoning


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-5
changelog:
  - Resolves: #1944261 - CVE-2020-25097 squid:4/squid: improper input validation
    may allow a trusted client to perform HTTP Request Smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-2
changelog:
  - Resolves: #2006121 - SQUID shortens FTP Link wrong that contains a semi-colon
    and as a result is not able to download zip file.CODE 404 TO CLIENT)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-3
changelog:
  - Resolves: #1941506 - CVE-2021-28116 squid:4/squid: out-of-bounds read in WCCP
    protocol data may lead to information disclosure


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-8
changelog:
  - Resolves: RHEL-18351 - squid:4/squid: Buffer over-read in the HTTP Message
    processing feature (CVE-2023-49285)
  - Resolves: RHEL-18342 - squid:4/squid: Incorrect Check of Function Return
    Value In Helper Process management (CVE-2023-49286)
  - Resolves: RHEL-18230 - squid:4/squid: Denial of Service in SSL Certificate
    validation (CVE-2023-46724)
  - Resolves: RHEL-15911 - squid:4/squid: NULL pointer dereference in the gopher
    protocol code (CVE-2023-46728)
  - Resolves: RHEL-18251 - squid crashes in assertion when a parent peer exists
  - Resolves: RHEL-14794 - squid: squid multiple issues in HTTP response caching
    (CVE-2023-5824)
  - Resolves: RHEL-14803 - squid: squid: Denial of Service in HTTP Digest
    Authentication (CVE-2023-46847)
  - Resolves: RHEL-14777 - squid: squid: Request/Response smuggling in HTTP/1.1
    and ICAP (CVE-2023-46846)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-9
changelog:
  - Resolves: RHEL-19552 - squid:4/squid: denial of service in HTTP request 
    parsing (CVE-2023-50269)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-10
changelog:
  - Resolves: RHEL-28529 - squid:4/squid: Denial of Service in HTTP Chunked
    Decoding (CVE-2024-25111)
  - Resolves: RHEL-26088 - squid:4/squid: denial of service in HTTP header
    parser (CVE-2024-25617)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-13.1
changelog:
  - Resolves: RHEL-56024 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-10.2
changelog:
  - Disable ESI support
  - Resolves: RHEL-65075 - CVE-2024-45802 squid:4/squid: Denial of Service
    processing ESI response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-13.3
changelog:
  - Resolves: RHEL-22593 - CVE-2024-23638 squid:4/squid: vulnerable to
    a Denial of Service attack against Cache Manager error responses


author: Clark Williams <williams@redhat.com> - 1.10-1
changelog:
  - utils: Fix bounds check on cpu and end_cpu variables
  - stalld: Support denylisting of tasks in stalld
  - src/utils: use right argument for warning printf


author: Clark Williams <williams@redhat.com> - 1.11-1
changelog:
  - redhat/stalld.spec: pick up gating test version for changelog
  - utils.c: set daemon umask to restrict global write/execute (1934586)
  - hardening fixes from coverity scan (1934590)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.12-1
changelog:
  - stalld.8: fix diff cruft left in manpage source
  - stalld.c: clean up handling of nr_running
  - stalld.c: remove duplicate parameter to fill_waiting_task()
  - stalld: Add error handling in get_cpu_idle_time()
  - stalld.service: Run stalld as sched_fifo via systemd
  - packaging: clean up Makefiles and rpm specfile
  - stalld: Always print current function for info messages
  - stalld: Always print current function for warn messages
  - stalld: Always print current function for die messages
  - utils: change PATHMAX to 4096


author: Fernando Pacheco <fpacheco@redhat.com> - 1.13-1
changelog:
  - stalld: Fix log message on boost_cpu_starving_vector()
  - stalld: Add the overload control to the single-threaded mode
  - stalld: Add the adaptive mode option
  - stalld: Use the last mode set in the cmdline
  - stalld: Fallback to the adaptive mode if force_fifo is selected
  - stalld: Make single-threaded mode the default one
  - stalld.service: Always restart stalld on exit
  - utils.c: Fail if user is not root
  - utils.c: Make the path to sched_debug path dynamic


author: Fernando Pacheco <fpacheco@redhat.com> - 1.14.1-1
changelog:
  - stalld: Coding style cleanup
  - stalld: spaces in place of <TAB>
  - throttling: Use RT_RUNTIME_PATH in rt_throttling_is_off()
  - throttling: Check open() on turn_off_rt_throttling
  - throttling: Adjust variables in restore_rt_throttling()
  - stalld.c: utils.c: Remove complex assignments from variable declarations
  - stalld.h: Define MAX_PATH/DIR_PATH/FILE_NAME and use them
  - stalld: Adjust variables in parse_old_task_format()
  - utils.c: Use MAX_PATH for pidfile
  - stalld.c: Remove variable declaration from the middle of  the function
  - stalld: Respect -l option in single threaded mode (1983103)
  - utils: s/try_to_open_file/check_file_exists/
  - utils: use check_file_exists in setup_hr_tick()
  - utils: Check for the new sched_features path


author: Fernando Pacheco <fpacheco@redhat.com> - 1.15-1
changelog:
  - stalld: Fix incorrect open() return value checks
  - stalld: Pass errno to strerror() on sig*set() failures
  - throttling: Always null terminate sched_rt_runtime_us output
  - stalld: Remove unreachable statement in detect_task_format()
  - tests: Fix uninitialized value action.sa_mask
  - utils: Bail if malloc() returns null in parse_cpu_list()
  - stalld: Use correct format specifier for long types
    Resolves: rhbz#2016010


author: Fernando Pacheco <fpacheco@redhat.com> - 1.16-1
changelog:
  - stald/utils: Space, lines and voids clenaups
  - stalld: Add an option to easily set stalld as SCHED_DEADLINE
  - stalld: Comments cleanup
  - src/utils: Comments cleanup
  - src/throttling: Comments cleanup
  - src/stalld.h Comments cleanup
    Resolves: rhbz#2068550


author: Leah Leshchinsky <lleshchi@redhat.com> - 1.17.1-1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  Resolves: rhbz#2120799


author: Clark Williams <williams@redhat.com> - 0.0-1
changelog:
  - initial version of specfile
  - Makefile mods for RPM builds
  - added systemd service and config files


author: Clark Williams <williams@redhat.com> - 1.0-2
changelog:
  - use _docdir macro for README.md
  - use _mandir macro for stalld.8 manpage
  - use tabs for spacing
  - added push Makefile target to copy latest to upstream URL


author: Clark Williams <williams@redhat.com> - 1.0-3
changelog:
  - Place BuildRequires on individual lines
  - Fix changelog notations
  - Modify build command to pass in CFLAGS and LDFLAGS
  - fix compiler warnings in stalld.c


author: Clark Williams <williams@redhat.com> - 1.0-4
changelog:
  - Fix an option in README.md; consistency in user facing docs.
  - gitignore: ignore object files and the stalld executable
  - Makefile: add 'static' target to link stalld statically
  - use FIFO for boosting (v3)
  - stalld: update usage message to include --force_fifo/-F option
  - stalld.c: fix sched_debug parsing and modify waiting task parsing


author: Clark Williams <williams@redhat.com> - 1.1-1
changelog:
  - Fix an option in README.md; consistency in user facing docs.
  - Makefile: add 'static' target to link stalld statically
  - gitignore: ignore object files and the stalld executable
  - use FIFO for boosting (v3)
  - stalld.c: fix sched_debug parsing and modify waiting task parsing
  - redhat:  update release for features and bugfix
  - stalld: Do not die if sched_debug returns an invalid value
  - src/stalld: Do not die if the comm is too large
  - src/stalld: Do not die if cannot write a message to the log
  - src/stalld: Do not die if the main runs while a thread is monitoring the CPU
  - implement RT throttling management and refactor source files
  - more refactoring
  - src/stalld: Reuse already read nr_running nr_rt_running
  - src/stalld: Gracefully handle CPUs not found on sched_debug
  - src/stalld: Use dynamically allocated memory to read sched_debug
  - src/utils: Die with a divizion by zero if verbose
  - src/stalld: Add config_buffer_size variable
  - src/stalld: Increase the sched_debug read buffer if it gets too small
  - src/stalld: Fix an retval check while reading sched_debug
  - src/throttling: Fix a compilation warning


author: Clark Williams <williams@redhat.com> - 1.2-1
changelog:
  - utils.c: added info() functions
  - detect and correctly parse old-style /proc/sched_debug
  - src/stalld: Fix an retval check while reading sched_debug
  - src/throttling: Fix a compilation warning
  - ensure we only count task lines in old-format sched_debug info
  - Add comments, clean up trailing whitespace
  - src/utils: Fix runtime parameters check
  - stalld: Do not take actions if log_only is set
  - remove warning from parse_old_task_format


author: Clark Williams <williams@redhat.com> - 1.3-1
changelog:
  - Readme: Add information about repositories
  - Add version management and version option
  - create doc and scripts directory and add info on releases


author: Clark Williams <williams@redhat.com> - 1.4-1
changelog:
  - stalld: Set rt_runtime to -1 before trying the SCHED_DEADLINE
  - Fix incorrect recursion of specfile version field


author: Clark Williams <williams@redhat.com> - 1.7-1
changelog:
  - rework detect_task_format and buffer_size logic
  - make CFLAGS for local compile match rpmbuild CFLAGS


author: Clark Williams <williams@redhat.com> - 1.8-1
changelog:
  - Fix Readiness Protocol Mismatch with systemd
  - test01:  update to use buildin atomic operations
  - test01: add throttling check


author: Clark Williams <williams@redhat.com> - 1.9-1
changelog:
  - Set starvation threshold default to 30 seconds
  - rework read buffer allocation to properly find page size
  - Add the -g/--granularity option
  - Change the default granularity to five seconds
  - Implement idle detection
  - Implement the single-threaded mode
  - Add HRTICK_DL support


author: Fernando Pacheco <fpacheco@redhat.com> - 1.12-1
changelog:
  - stalld.8: fix diff cruft left in manpage source
  - stalld.c: clean up handling of nr_running
  - stalld.c: remove duplicate parameter to fill_waiting_task() (1934582)
  - stalld.service: Run stalld as sched_fifo via systemd
  - stalld: Add error handling in get_cpu_idle_time() (1966259)
  - packaging: clean up Makefiles and rpm specfile (1972806)
  - stalld: Always print current function for info messages
  - stalld: Always print current function for warn messages
  - stalld: Always print current function for die messages
  - utils: change PATHMAX to 4096 (1934581)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.13-1
changelog:
  - stalld: Fix log message on boost_cpu_starving_vector()
  - stalld: Add the overload control to the single-threaded mode
  - stalld: Add the adaptive mode option
  - stalld: Use the last mode set in the cmdline
  - stalld: Fallback to the adaptive mode if force_fifo is selected
  - stalld: Make single-threaded mode the default one (1920041)
  - stalld.service: Always restart stalld on exit
  - utils.c: Fail if user is not root
  - utils.c: Make the path to sched_debug path dynamic (1977663)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.14.1-1
changelog:
  - stalld: Coding style cleanup
  - stalld: spaces in place of <TAB>
  - throttling: Use RT_RUNTIME_PATH in rt_throttling_is_off()
  - throttling: Check open() on turn_off_rt_throttling
  - throttling: Adjust variables in restore_rt_throttling()
  - stalld.c: utils.c: Remove complex assignments from variable declarations
  - stalld.h: Define MAX_PATH/DIR_PATH/FILE_NAME and use them
  - stalld: Adjust variables in parse_old_task_format()
  - utils.c: Use MAX_PATH for pidfile
  - stalld.c: Remove variable declaration from the middle of  the function
  - stalld: Respect -l option in single threaded mode (1983100)
  - utils: s/try_to_open_file/check_file_exists/
  - utils: use check_file_exists in setup_hr_tick()
  - utils: Check for the new sched_features path


author: Fernando Pacheco <fpacheco@redhat.com> - 1.15-1
changelog:
  - stalld: Fix incorrect open() return value checks
  - stalld: Pass errno to strerror() on sig*set() failures
  - throttling: Always null terminate sched_rt_runtime_us output
  - stalld: Remove unreachable statement in detect_task_format()
  - tests: Fix uninitialized value action.sa_mask
  - utils: Bail if malloc() returns null in parse_cpu_list()
  - stalld: Use correct format specifier for long types
    Resolves: rhbz#1990057, rhbz#1996799, rhbz#1996825


author: Fernando Pacheco <fpacheco@redhat.com> - 1.16-1
changelog:
  - stald/utils: Space, lines and voids clenaups
  - stalld: Add an option to easily set stalld as SCHED_DEADLINE
  - stalld: Comments cleanup
  - src/utils: Comments cleanup
  - src/throttling: Comments cleanup
  - src/stalld.h Comments cleanup
    Resolves: rhbz#2068549


author: Leah Leshchinsky <lleshchi@redhat.com> - 1.17.1-1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  Resolves: rhbz#2120800


author: Parag Nemade <pnemade AT redhat DOT com> - 1.1.0-7
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove %clean section which is optional now
  - Remove buildroot which is optional now
  - Remove removal of buildroot in %install
  - Remove group tag


author: Dennis Keefe <dkeefe@redhat.com> - 2.0.0-2
changelog:
  - Update to 2.0.0
  - Allow the user to interact with the daemon under conditions
    where a pool, filesystem, or blockdev is not fully functional.
  - Resolves: rhbz#1730493
  - Establish an environment variable for D-Bus timeout parameter.
  - Resolves: rhbz#1678631
  - Return detailed error messages on all error-appearing user actions.
  - Resolves: rhbz#1642393
  - Resolves: rhbz#1687869
  - Exit with error code 0 and error message on stderr for all command-line
    parsing errors.
  - Resolves: rhbz#1747564
  - Show more complete error messages on D-Bus method call failures.
  - Resolves: rhbz#1717460
  - Add version numbers to required packages
  - Resolves: rhbz#1717489


author: Dennis Keefe <dkeefe@redhat.com> - 2.1.1-6
changelog:
  - Update to 2.1.1
  - Resolves: rhbz#1791472
  - Update RPM spec file
  - Resolves: rhbz#1827360
  - Error messages when creating a pool are more helpful
  - Resolves: rhbz#1734496
  - Support per-pool encryption of devices that form a pools data tier
  - Resolves: rhbz#1768580
  - Improve error handling on partial unlock failure of encrypted pools
  - Resolves: rhbz#1855520


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1931670
  - Remove requirement for python3-semantic_version
  - Resolves: rhbz#1972355
  - Remove unnecessary keyutils Requires line


author: Dennis Keefe <dkeefe@redhat.com> - 2.0.0-4
changelog:
  - Update to 2.0.0
  - Resolves: rhbz#1760906
  - Fix a bug where last update time for variable length metadata was not set
    properly on startup:
  - Resolves: rhbz#1720399
  - Specify path of PID file as "/run/stratisd.pid" instead of 
    "/var/run/stratisd.pid".
  - Resolves: rhbz#1754649
  - For a particular log entry, reduce log level from INFO to DEBUG and make the
    log message more detailed:
  - Resolves: rhbz#1680052


author: Dennis Keefe <dkeefe@redhat.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Resolves: rhbz#1791473
  - Update Stratis RPM Spec File
  - Resolves: rhbz#1828487
  - Support per-pool encryption of the devices that form a pool's data tier
  - Resolves: rhbz#1768580
  - Improve systemd unit file description
  - Resolves: rhbz#1756525


author: Dennis Keefe <dkeefe@redhat.com> - 2.3.0-2
changelog:
  - Update to 2.3.0
  - Resolves: rhbz#1885328
  - Stratis devices inhabit an existing root directory path
  - Resolves: rhbz#1798244
  - Add Clevis Support
  - Resolves: rhbz#1868100
  - Improve stratisd log levels
  - Resolves: rhbz#1757976


author: Bryan Gurney <bgurney@redhat.com> - 2.4.0-3
changelog:
  - Update to 2.4.0
  - Resolves: rhbz#1931671
  - Improve stratis by adding Multi-threading
  - Resolves: rhbz#1927485
  - Dump stratis configuration on demand or in debug
  - Resolves: rhbz#1735475
  - Add noalign option to XFS creation on MDV
  - Resolves: rhbz#1908318
  - Cap thinpool metadata device size at devicemapper-set limit
  - Resolves: rhbz#1707461


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1931671
  - Ensure that binaries are installed with proper features enabled
  - Split dracut modules out to subpackage
  - Add additional dependencies in dracut module


author: John Kacur <jkacur@redhat.com> - 0.15.00-1
changelog:
  - Rebase to upstream V0.15.00
  - Add the following upstream patches
  - stress-shm: move /dev/shm check to earlier in the setup phase
  - stress-shm: skip stressor if /dev/shm is not mounted with tmpfs on linux
  - stress-sysfs: check for zero sysfs entries after pruning the directory
  Resolves: rhbz#2144070


author: John Kacur <jkacur@redhat.com> - 0.17.08-1
changelog:
  - Rebase to upstream V0.17.08
  - ARM: Don't declare inlined yield helper if yield is not available
  Resolves: RHEL-33304


author: Petr Viktorin <pviktori@redhat.com> - 1.15.0-8
changelog:
  - Run sanity-check.py with Python 3
    https://bugzilla.redhat.com/show_bug.cgi?id=1595816
    https://bugzilla.redhat.com/show_bug.cgi?id=1610038


author: Christopher Snyder <csnyder@redhat.com>
changelog:
  - 1776461: Rebase subscription-manager-migration-data component to the latest
    upstream branch for RHEL 8.2.0 (csnyder@redhat.com)
  - 1776461: Update product certs to include those for 8.2 (csnyder@redhat.com)


author: Joe Orton <jorton@redhat.com> - 1.10.0-6
changelog:
  - really disable Berkeley DB support if required by bcond
  - add build conditional to disable swig binding subpackages


author: Lubos Uhliarik <luhliari@redhat.com> - 1.10.2-2
changelog:
  - Resolves: #1733443 - CVE-2019-0203 subversion:1.10/subversion: remote
    unauthenticated denial-of-service in subversion svnserve


author: Kalev Lember <kalevlember@gmail.com> - 0.5.1-1
changelog:
  - Update to 0.5.1
  - Build with libmusicbrainz4
  - Adjust the spec file for the changes in private library location
  - Remove and obsolete the -devel subpackage


author: David King <amigadave@amigadave.com> - 3.15.90-1
changelog:
  - Update to 3.15.90
  - Use license macro for COPYING
  - Use pkgconfig for BuildRequires
  - Compile GSettings schemas


author: Michael Catanzaro <mcatanzaro@redhat.com> - 3.28.3-3
changelog:
  - Use autosetup so WebKitGTK patch actually gets applied, and rewrite the patch to work
    Resolves: RHEL-26699


author: Tom Stellard <tstellar@redhat.com> - 4.0.2-2
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable Go tests


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.0-2.20200828git0c238a2
changelog:
  - Backport fixes from 0.4.0 stable branch. Resolves: rhbz#1868375
    (fixes usage of swtpm-localca with passwords when signing keys)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.2-1.20201201git2df14e3
changelog:
  - Update to 0.4.2, to address potential symlink vulnerabilities (CVE-2020-28407).
    Resolves: rhbz#1906043


author: Michal Sekletár <msekleta@redhat.com> - 11.7.3-2
changelog:
  - sysstat's buildsystem doesn't really use LDFLAGS, we have to merge CFLAGS and LDFLAGS to get binaries with full RELRO (#1624177)


author: <msekleta@redhat.com> - 11.7.3-7
changelog:
  - Don't trigger autofs mounts when running sadc (#2000910)
  - sar: Add missing %gnice CPU value for tickless CPU (#2000916)
  - sadf: Fix seg fault on empty data files (#1910841)
  - sar: Fix typo in manual page (#1877836)


author: psimovec <psimovec@redhat.com> - 11.7.3-11
changelog:
  - fix the arithmetic overflow in allocate_structures() that is still possible on some 32 bit systems (CVE-2023-33204)


author: Ivana Varekova <varekova@redhat.com> - 8.0.1-1
changelog:
  - update to 8.0.1
  - remove useless patches
  - spec file cleanup
  - remove smp build flag (ar problem)
  - add libdir flags


author: Ivana Varekova <varekova@redhat.com> - 8.0.2-2
changelog:
  - change license tag
  - remove sysstat.crond source (add -d)
  - remove obsolete sysconfig file
  - spec file cleanup


author: Ivana Varekova <varekova@redhat.com> - 9.0.4-3
changelog:
  - fix init script - add INIT INFO flags (#522740)
    and add condrestart, try-restart and force-reload (#522743)


author: Ivana Hutarova Varekova <varekova@redhat.com> - 9.0.6.1-7
changelog:
  - remove needless DOCDIR setting
  - remove needless INIT_DIR setting
  - fix the problem with --disable-man-group option


author: Ivana Hutarova Varekova <varekova@redhat.com> - 10.0.0-4
changelog:
  - close the file descriptor in a special situation in read_uoptime function
  - fix the number on open files in cifsiostat output


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.1-1
changelog:
  - resolves: #844387
    update to 10.1.1
  - keep log files for 28 days instead of 7
  - collect all aditional statistics


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.2-1
changelog:
  - resolves: #863791
    updated to 10.1.2
  - resolves: #850333
    migrated to the new systemd-rpm macros
  - cleaned .spec file


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.2-2
changelog:
  - added new -y option to iostat command to skip first since boot report if
    displaying multiple reports


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.6-1
changelog:
  - resolves: #972508
    updated to 10.1.6
  - resolves: #993394
    fixed FTBFS (added BR on systemd)
  - install the docs in the new pkgdocdir
    (thanks to Mathieu Bridon <bochecha@fedoraproject.org> for the patch)


author: Lukáš Zaoral <lzaoral@redhat.com> - 11.7.3-13
changelog:
  - fix memory allocation errors with malformed sa files (RHEL-35511)
  - reorder patches to prevent errors during their application


author: Florian Festi <ffesti@redhat.com> - 123-1
changelog:
  - Update kmod.prov for better performance (#1794491)
  - Backport performance improvements for brp-mangle-shebangs (#1794779)


author: liuxiaoping <lxp01404969@alibaba-inc.com> - 129-1.0.1
changelog:
  - Rebrand for Anolis OS (geliwei@openanolis.org)
  - Backport from fedora32
    Allow conditionally adding -fcommon to CFLAGS by defining %_legacy_common_support (jacob.wang@openanolis.org)
  - Support loongarch64 platform (geliwei@openanolis.org)
  - macros: add compiler major version (zhouwt@linux.alibaba.com)


author: Stan Cox <scox@redhat.com> - 4.7-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 4.8-2
changelog:
  - rhbz2156092 = rhbz1997192
  - rhbz2145241 = rhbz2145242
  - rhbz2156093 = rhbz2149223
  - rhbz2156095 = rhbz2149666
  - rhbz2156094 = rhbz2154430


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018.2-7
changelog:
  - Selectively build python2 or python3 based on current version.
  - Don't use pathfix.py as it fails prep on RHEL when building on systems
    do not have python installled.


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-4
changelog:
  - Removing build-time dependency on sharutils(rhbz#1587877)
  - Changing git dependency to smaller git-core


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-6
changelog:
  - Resolves: #1715423 - tcpdump pre creates user and groups unconditionally
  - Resolves: #1655622 - CVE-2018-19519 Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.3-2
changelog:
  - Resolves: #1860216 - tcpdump can not parse mptcp options
  - Resolves: #1901635 - ppp decapsulator can be convinced to allocate a large amount of memory
  - Adding tedude test to gating


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - separate package for libpcap.
  - update tcpdump to 3.4, libpcap to 0.4.
  - added arpwatch (but disabled for now)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - include A. Kuznetsov's patches to libpcap/tcpdump.
  - added arpsnmp to package (#3258).
  - arp2ethers written for different of awk (#4326).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - remove sparc64 SIOCGIFNAME hack, not needed with (at least) kernel 2.2.12-40.
  - upgrade to ANK ss991030 snapshot with pcap magic fix (#6773).
  - add getprotobyname lookup (#6725).
  - getservbyname port lookup appears functional (#7569).
  - remove uid 2090 backdoor (sorry Dave) (#7116).


author: Matt Wilson <msw@redhat.com>
changelog:
  - source /etc/init.d/functions
  - back out /etc/init.d/arpwatch, place file in /etc/rc.d
  - move initscript to /etc/init.d
  - changed initscript to use start() and stop() functions
  - added condrestart to init script
  - added %post %preun %postun scripts to register arpwatch script
  - added Prereq: for all things needed in post/preun/postun


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - eliminate more buffer overflows (from FreeBSD) (#20069).
  - 802.1q ether type incorrect (#19850).
  - add -u flag to drop arpwatch privs (#19696).


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - tcpdump: spice up the manpage about interfaces
  - tcpdump: add 'all' and 'any' keywords to -i, saner default behaviour.
  - upgrade arpwatch to 2.1a10


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Initial packaging with latest tcpdump.org CVS tcpdump-3.6 and libpcap-0.6.
  - add earlier print-domain.c, the latest is segfaulting
  - don't unnecesessarily include snprintf.o, it didn't compile with gcc 2.96 anyway
  - don't use savestr, require openssl, tweak tweak tweak
  - add tcpslice, patch it a bit for egcs detection


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Update to 20010108 CVS, disable some upstreamed patches.
  - Change some additional .1 pages to .8.
  - Add droproot patch, some --usage and man page fixes.


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Make SMB printing output a lot more quiet unless in verbose mode.
  - Make -n resolve port/protocol numbers but not hostnames, -nn for no
    resolving at all
  - Separate droproot patch from a more generic man/usage fix one
  - Add non-promiscuous mode -by default patch, but don't apply it by default


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - use --enable-ipv6
  - Add two patches from CVS to enhance 802.2 printing, and more importantly,
    to be able to specify 'no stp'


author: Harald Hoyer <harald@redhat.com>
changelog:
  - fixed EINTR stopping for e.g. SIGSTOP. (#22008)
  - added -u option for tcpdump (#20231)
  - new arpwatch version (#23172)
  - added "all" and "one" interface for -i (#20907)
  - added arpwatch sysconfig (#23172)


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - fix building of tcpslice on glibc 2.2.2 (time.h)
  - disable /etc/init.d requirement and fix %post scripts in arpwatch


author: Harald Hoyer <harald@redhat.de> 12:3.6.2-10
changelog:
  - took old purge patch for filters
  - fixed #54225,#58346
  - drop root by default #49635
  - fixed #54593
  - fixed #57711


author: Harald Hoyer <harald@redhat.com> - 14:3.8.2-1
changelog:
  - update to tcpdump-3.8.2, libpcap-0.8.2, arpwatch-2.1a13
  - patched tcpdump configure for gcc34 optimizations
  - removed obsolete patches


author: Ivana Varekova <varekova@redhat.com> - 14:3.8.2-9
changelog:
  - added arpsnmp options to specify sender and recipient
    and corrected arpwatch and arpsnmp man pages (#70386)


author: Martin Stransky <stransky@redhat.com> - 14:3.9.3-1
changelog:
  - New upstream version - 3.9.3
  - fix for #164227 (buffer overflow)
  - fix for #164230 (missing debug info)


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.4-9
changelog:
  - fix processing of Prism and AVS headers (#206686)
  - fix arp2ethers script
  - update ethercodes.dat
  - move pcap man page to devel package


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.7-1
changelog:
  - update to 3.9.7
  - with -C option, drop root privileges before opening first savefile (#244860)
  - update tcpslice to 1.2a3
  - include time patch from Debian to fix tcpslice on 64-bit architectures


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.8-5
changelog:
  - update config.{guess,sub} when building tcpslice
  - remove -D_GNU_SOURCE from CFLAGS
  - disable libsmi check in configure


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:4.0.0-1.20090818git832d2c
changelog:
  - update to post 4.0.0 git snapshot 20090818git832d2c
  - print retrans and reachable times in ICMPv6 as milliseconds (#474264)


author: Michal Sekletar <msekleta@redhat.com> - 14:4.1.1-3
changelog:
  - Fix manpage (#663739)
  - Fix improper handling of bad date format in tcpslice (#684005)
  - Spec file clean up


author: Michal Sekletar <msekleta@redhat.com> - 14:4.2.0-1
changelog:
  - updated to 4.2.0
  - added new source file ppi.h, missing in upstream tarball
  - disabled make check because of missing .pcap files in testsuite
  - dropped unnecessary patches


author: Michal Sekletar <msekleta@redhat.com> - 14:4.6.2-2
changelog:
  - fix for CVE-2014-8767 (#1165160)
  - fix for CVE-2014-8768 (#1165161)
  - fix for CVE-2014-8769 (#1165162)


author: Michal Sekletar <msekleta@redhat.com> - 14:4.7.3-1
changelog:
  - rebase to 4.7.3 (#1201573)
  - contains fixes for CVE-2015-0261 CVE-2015-2154 CVE-2015-2153 CVE-2015-2155 (#1201799,#1201792,#1201795,#1201797)


author: Hangbo Fan <fanhangbo.fhb@alibaba-inc.com> - 14:4.9.3-5.0.1
changelog:
  - Add doc sub package
  - cherry-pick `add sw patch #199f8102fc30b385b28c16494d2a683ecd265166`.(nijie@wuxiat.com)


author: Jan Macku <jamacku@redhat.com> - 6.22.03-1
changelog:
  - Update to tcsh-6.22.03
  - Drop tcsh-6.22.02-avoid-gcc-to-fail.patch                              - applied by upstream
  - Drop tcsh-6.22.02-call-seterror-consistently-and-abort-quickly.patch   - applied by upstream
  - Drop tcsh-6.22.02-avoid-crashing-when-loading-corrupted-history.patch  - applied by upstream


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-69
changelog:
  - Resolves: #1445259 - telnet won't build with latest gcc
  - added note about address resolution in manpage


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-73
changelog:
  - Resolves: #1602711 - Please review important issues found by covscan
  - Resolves: #1637085 - Option -i is missing in telnet in el8 but is available in el7


author: Parag Nemade <pnemade AT redhat DOT com> - 0.1-20
changelog:
  - Resolves:rh#921852 - Four culmus subpackages are not listed in build require
  - Added BR: and R: for the following packages
  - culmus-hadasim-clm-fonts, culmus-simple-clm-fonts
  - culmus-stamashkenaz-clm-fonts, culmus-stamsefarad-clm-fonts


author: Than Ngo <than@redhat.com> - 9:20200327-19
changelog:
  - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 9:20200406-26.0.1
changelog:
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 build
  - anolis texlive add loongarch64(Yaxuan Liu)


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.2-25
changelog:
  - Fix inconsistent --map-file option spelling in manual (rhbz#2066853)
  - Fix memory corruption in tftpd when filename remapping with macro \x
    is used (rhbz#2066862)


author: Weitao Zhou <zhouwt@linux.alibaba.com> 5.2-26.0.1
changelog:
  - Make configure an order-only prerequisite of aconfig.h.in
  - remove autoreconf in %build to fix parallel build error
  - use extern in header files when declaring global variables for compatible gcc10 build
  - Add doc sub package


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - fix to permit tftp put's (#18128).
  - startup as root with chroot to /tftpboot with early reversion to nobody
    is preferable to starting as nobody w/o ability to chroot.
  - %post is needed by server, not client. Add %postun for erasure as well.


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated tftp client to 0.17 stable (#19640),
  - drop dependency on xinetd for tftp client (#25051),


author: Helge Deller <hdeller@redhat.de>
changelog:
  - changed "wait" in xinetd file to "yes" (hpa-tftpd forks and exits) (#26467)
  - fixed hpa-tftpd to handle files greater than 32MB (#23725)
  - added "-l" flag to hpa-tftpd for file-logging (#26467)
  - added description for "-l" to the man-page


author: Helge Deller <hdeller@redhat.de> (0.17-13)
changelog:
  - updated tftp-hpa source to tftp-hpa-0.17
  - tweaked specfile with different defines for tftp-netkit and tftp-hpa version
  - use hpa's tftpd.8 man page instead of the netkits one


author: Elliot Lee <sopwith@redhat.com> 0.17-15
changelog:
  - Add patch4: netkit-tftp-0.17-defaultport.patch for bug #57562
  - Update to tftp-hpa-0.28 (bug #56131)
  - Remove include/arpa/tftp.h to fix #57259
  - Add resource limits in tftp-xinetd (#56722)


author: Martin Nagy <mnagy@redhat.com> - 0.48-1
changelog:
  - upgrade to 0.48
  - remove the old sigjmp patch (fixed in upstream)
  - make some changes in spec file (#226489)


author: Jiri Skala <jskala@redhat.com> - 0.49-7
changelog:
  - fixes #666746 - Packaging mistake: confusing %doc files patched+unpatched
  - fixes printing statistics using -v option


author: Martin Stransky <stransky@redhat.com> - 60.7.2-3
changelog:
  - Rebuild to fix rhbz#1725919 - Thunderbird fails to authenticate
    with gmail with ssl/tls and OAuth2.


author: Tomas Popela <tpopela@redhat.com> - 78.12.0-3
changelog:
  - Add script to process the official tarball to comply with PELC review
  - Fix the build with newer glibc


author: Adam Tkac <atkac redhat com> 0.0.90-0.4.20090403svn3751
changelog:
  - update to r3751
  - patches merged
    - tigervnc-xclients.patch
    - tigervnc-clipboard.patch
    - tigervnc-rh212985.patch
  - basic RandR support in Xvnc (resize of the desktop)
  - use built-in libjpeg (SSE2/MMX accelerated encoding on x86 platform)
  - use Tight encoding by default
  - use TigerVNC icons


author: Adam Tkac <atkac redhat com> 0.0.90-0.6.20090427svn3789
changelog:
  - update to r3789
    - tigervnc-rh494801.patch merged
  - tigervnc-newfbsize.patch is no longer needed
  - fix problems when vncviewer and Xvnc run on different endianess (#496653)
  - UltraVNC and TightVNC clients work fine again (#496786)


author: Adam Tkac <atkac redhat com> 0.0.90-0.10
changelog:
  - rebuild against 1.6.1.901 X server (#497835)
  - disable i18n, vncviewer is not UTF-8 compatible (#501832)


author: Adam Tkac <atkac redhat com> 0.0.91-0.11
changelog:
  - update to 0.0.91 (1.0.0 RC1)
  - patches merged
    - tigervnc10-rh499401.patch
    - tigervnc10-rh497592.patch
    - tigervnc10-rh501832.patch
  - after discusion in upstream drop tigervnc-bounds.patch
  - configure flags cleanup


author: Adam Tkac <atkac redhat com> 0.0.91-0.13
changelog:
  - temporary use F11 Xserver base to make Xvnc compilable
  - BuildRequires: libXi-devel
  - don't ship tigervnc-server-module on s390/s390x


author: Adam Tkac <atkac redhat com> 1.0.0-2
changelog:
  - update underlying X source to 1.6.4-0.3.fc11
  - remove bogus '-nohttpd' parameter from /etc/sysconfig/vncservers (#525629)
  - initscript LSB compliance fixes (#523974)
  - improve -LowColorSwitch documentation and handling (#510185)
  - honor dotWhenNoCursor option (and it's changes) every time (#524340)


author: Adam Tkac <atkac redhat com> 1.0.90-0.1.20091221svn3929
changelog:
  - update to 1.0.90 snapshot
  - patches merged
    - tigervnc10-compat.patch
    - tigervnc10-rh510185.patch
    - tigervnc10-rh524340.patch
    - tigervnc10-rh516274.patch


author: Adam Tkac <atkac redhat com> 1.0.90-0.2.20091221svn3929
changelog:
  - add patch for upstream X.Org issue #25909
  - add libXdmcp-devel to build requires to build Xvnc with XDMCP support (#552322)


author: Adam Tkac <atkac redhat com> 1.0.90-0.4.20091221svn3929
changelog:
  - mark stack as non-executable in jpeg ASM code
  - add xorg-x11-xauth to Requires
  - add support for X.Org 1.8
  - drop shave sources, they are no longer needed


author: Adam Tkac <atkac redhat com> 1.0.90-0.6.20100219svn3993
changelog:
  - add mesa-dri-drivers and xkeyboard-config to -server Requires
  - update to r3993 1.0.90 snapshot
    - tigervnc11-noexecstack.patch merged
    - tigervnc11-xorg18.patch merged
    - xserver18.patch is no longer needed


author: Adam Tkac <atkac redhat com> 1.0.90-0.9.20100219svn3993
changelog:
  - add server-applet subpackage which contains Java vncviewer applet
  - fix Java applet; it didn't work when run from web browser
  - add xorg-x11-xkb-utils to server Requires


author: Adam Tkac <atkac redhat com> 1.0.90-0.10.20100420svn4030
changelog:
  - update to r4030 snapshot
  - patches merged to upstream
    - tigervnc11-rh522369.patch
    - tigervnc11-rh551262.patch
    - tigervnc11-r4002.patch
    - tigervnc11-r4014.patch


author: Adam Tkac <atkac redhat com> 1.0.90-0.11.20100420svn4030
changelog:
  - link libvnc.so "now" to catch "undefined symbol" errors during Xorg startup
  - use always XkbConvertCase instead of XConvertCase (#580159, #586406)
  - don't link libvnc.so against libXi.la, libdix.la and libxkb.la; use symbols
    from Xorg instead


author: Adam Tkac <atkac redhat com> 1.0.90-0.14.20100420svn4030
changelog:
  - fix memory leak in Xvnc input code (#597172)
  - don't crash when receive negative encoding (#600070)
  - explicitly disable udev configuration support
  - add gettext-autopoint to BR


author: Adam Tkac <atkac redhat com> 1.0.90-0.17.20100721svn4113
changelog:
  - update to r4113
  - patches merged
    - tigervnc11-rh586406.patch
    - tigervnc11-libvnc.patch
    - tigervnc11-rh597172.patch
    - tigervnc11-rh600070.patch
    - tigervnc11-options.patch
  - don't own %{_datadir}/icons directory (#614301)
  - minor improvements in the .desktop file (#616340)
  - bundled libjpeg configure requires nasm; is executed even if system-wide
    libjpeg is used


author: Adam Tkac <atkac redhat com> 1.0.90-0.19.20100813svn4123
changelog:
  - separate Xvnc, vncpasswd and vncconfig to -server-minimal subpkg (#626946)
  - move license to separate subpkg and Requires it from main subpkgs
  - Xvnc: handle situations when no modifiers exist well (#611677)


author: Adam Tkac <atkac redhat com> 1.0.90-0.20.20100813svn4123
changelog:
  - press fake modifiers correctly (#633931)
  - supress unneeded debug information emitted from initscript (#633645)


author: Adam Tkac <atkac redhat com> 1.0.90-0.24.20100813svn4123
changelog:
  - rebuild against xserver 1.10.X
  - 0001-Return-Success-from-generate_modkeymap-when-max_keys.patch merged


author: Adam Tkac <atkac redhat com> 1.0.90-0.25.20101208svn4225
changelog:
  - update to r4225
  - patches merged
    - tigervnc11-rh611677.patch
    - tigervnc11-rh633931.patch
    - tigervnc11-xorg1.10.patch
  - enable VeNCrypt and PAM support


author: Adam Tkac <atkac redhat com> - 1.0.90-3
changelog:
  - fix wrong usage of memcpy which caused screen artifacts (#652590)
  - don't point to inaccessible link in sysconfig/vncservers (#644975)


author: Adam Tkac <atkac redhat com> - 1.1.0-1
changelog:
  - update to 1.1.0
  - update the xorg11 patch
  - patches merged
    - tigervnc11-glx.patch
    - tigervnc11-CVE-2011-1775.patch
    - 0001-Use-memmove-instead-of-memcpy-in-fbblt.c-when-memory.patch


author: Adam Tkac <atkac redhat com> - 1.1.0-3
changelog:
  - don't build X.Org devel docs (#755782)
  - applet: BR generic java-devel instead of java-gcj-devel (#755783)
  - use runuser to start Xvnc in systemd service file (#754259)
  - don't attepmt to restart Xvnc session during update/erase (#753216)


author: Adam Tkac <atkac redhat com> - 1.1.0-5
changelog:
  - clean Xvnc's /tmp environment in service file before startup
  - fix building against the latest JAVA 7 and X.Org 1.12


author: Adam Tkac <atkac redhat com> 1.2.80-0.1.20120905svn4996
changelog:
  - update to 1.2.80
  - remove deprecated patches
    - tigervnc-102434.patch
    - tigervnc-viewer-reparent.patch
    - tigervnc11-java7.patch
  - patches merged
    - tigervnc11-xorg111.patch
    - tigervnc11-xorg112.patch


author: Adam Tkac <atkac redhat com> - 1.2.80-0.12.20130314svn5065
changelog:
  - include /etc/X11/xorg.conf.d/10-libvnc.conf sample configuration (#712482)
  - vncserver now honors specified -geometry parameter (#755947)


author: Tim Waugh <twaugh@redhat.com> 1.2.80-0.14.20130314svn5065
changelog:
  - Use systemd rpm macros (bug #850340).  Moved systemd requirements
    from main package to server sub-package.
  - Applied Debian patch to fix busy loop when run from inetd in nowait
    mode (bug #920373).
  - Added dependency on xorg-x11-xinit to server sub-package so that
    default window manager can be found (bug #896284, bug #923655).
  - Fixed bogus changelog date.


author: Tim Waugh <twaugh@redhat.com> 1.3.0-3
changelog:
  - Avoid PIDFile problems in systemd unit file (bug #983232).
  - libvnc.so: don't use unexported key_is_down function.
  - Don't use shebang in vncserver script.


author: Tim Waugh <twaugh@redhat.com> 1.3.0-15
changelog:
  - Disable dri3 to enable building (bug #1063392).
  - Fixed heap-based buffer overflow (CVE-2014-0011, bug #1050928).


author: Tim Waugh <twaugh@redhat.com> - 1.3.1-8
changelog:
  - Input reset fixes from upstream (bug #1116956).
  - No longer need ppc64le patch as it's now in xorg-x11-server.
  - Rebased xserver114.patch again.


author: Tim Waugh <twaugh@redhat.com> - 1.4.2-1
changelog:
  - Rebased xserver116.patch against xorg-x11-server-1.17.1.
  - Allow build against xorg-x11-server-1.17.
  - 1.4.2.


author: Jan Grulich <jgrulich@redhat.com> - 1.6.0-4
changelog:
  - Utilize system-wide crypto policies
    Resolves: bz#1179345
  - Try to disable patch4 as it was previously written to support an
    older version of a different client and breaks some other usage
    Resolves: bz#1280440


author: Jan Grulich <jgrulich@redhat.com> - 1.7.1-3
changelog:
  - Bug 1438704 - CVE-2017-7392 CVE-2017-7393 CVE-2017-7394
                  CVE-2017-7395 CVE-2017-7396 tigervnc: various flaws
    + other upstream related fixes


author: Jan Grulich <jgrulich@redhat.com> - 1.9.0-7
changelog:
  - Improve coverity scan fixes
    Resolves: bz#1602714

    Inform whether view-only password is used or not
    Resolves: bz#1639169

    Backport fixes from RHEL 7
    Resolves: bz#1651254


author: Jan Grulich <jgrulich@redhat.com> - 1.10.1-5
changelog:
  - Install the HOWTO file to correct location
  - Add /usr/bin/vncserver file informing users to read the HOWTO.md file
    Resolves: bz#1790443


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-1
changelog:
  - Update to 1.11.0
    Resolves: bz#1880985
  - Backport fix to allow Tigervnc use boolean values in config files
    Resolves: bz#1883415


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-2
changelog:
  - Revert removal of vncserver
    Resolves: bz#1897504
  - Correctly start vncsession as a daemon
    Resolves: bz#1897498


author: Jan Grulich <jgrulich@redhat.com> - 1.12.0-4
changelog:
  - Added vncsession-restore script for SELinux policy migration
    Fix SELinux context for root user
    Resolves: bz#2021892


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-1
changelog:
  - 1.13.1
    Resolves: bz#2175748
  - Restore "--fallbacktofreeport" option in the vncserver script
    Resolves: bz#2174398


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-2
changelog:
  - xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege
    Escalation Vulnerability
    Resolves: bz#2180306


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-4
changelog:
  - Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
    Resolves: RHEL-15236

  - Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
    Resolves: RHEL-15230


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-5
changelog:
  - Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
    Resolves: RHEL-18410
  - Fix CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
    Resolves: RHEL-18422


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-7
changelog:
  - Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
    Resolves: RHEL-20388
  - Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
    Resolves: RHEL-20382
  - Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
    Resolves: RHEL-20530
  - Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
    Resolves: RHEL-21214


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-9
changelog:
  - Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
    Resolves: RHEL-30755
  - Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
    Resolves: RHEL-30767
  - Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
    Resolves: RHEL-30761


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-10
changelog:
  - Drop patches that are already part of xorg-x11-server
    Resolves: RHEL-30755
    Resolves: RHEL-30767
    Resolves: RHEL-30761


author: Kaiqiang Wang <wangkaiqiang@inspur.com> - 1.13.1-10.0.1
changelog:
  - Fic CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer


author: Jan Grulich <jgrulich@redhat.com>
changelog:
  - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability
    Resolves: RHEL-61999


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Release v7
  - Allow tlog-play redirection of stdout
  - Add -i/--interactive option to tlog-rec-session. Allows login
    programs to call tlog-rec-session more transparently.
  - Make in_txt/out_txt fields optional. This handles missing fields
    when reading from Elasticsearch or other backends.


author: Justin Stephenson <jstephen@redhat.com> - 8-1
changelog:
  - Release v8
  - Spec file fixes for EL6
  - Spec file improvements for Debian/Ubuntu pkg-config
  - Tlog-play improve authentication options
  - Handle piped in I/O from stdin and improve the main recording transfer exit
    condition.
  - Use empty string on hostname resolution failure


author: Justin Stephenson <jstephen@redhat.com> - 9-1
changelog:
  - Release v9
  - Add libutempter support
  - Require journal match filter
  - Add file reader match functionality
  - Restore cursor visibility and color attributes on tlog-play exit
  - Add "time" real clock timestamp message field
  - Various upstream CI improvements


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Fire SIGCHLD after utempter_add_record since it probably eats it.
  - Correct suse rpmbuild
  - Update debbuild for travis CI


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Release v12
  - Prevent infinite transfer loop on GDM login.
  - tlog-play: add journal namespace support.
  - tlitest: extend delay for limit-action delay test.


author: Justin Stephenson <jstephen@redhat.com> - 12.1
changelog:
  - Exit transfer loop when output fd is closed
  - Revert "Prevent infinite transfer loop on GDM login"


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 1-1
changelog:
  - Release v1. Not ready for production. Following features are included.
  - Recording of user input, program output and window size changes.
  - Support for writing into syslog and files.
  - Tlog-rec configuration through system-wide configuration file
    /etc/tlog/tlog-rec.conf, environment variables and command line.
  - Very basic playback directly from ElasticSearch.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2-1
changelog:
  - Release v2. Not ready for production. Following features are added.
  - Fully-fledged command-line interface to tlog-play, along with config file
    and man pages.
  - Support for playback from file in tlog-play.
  - Make tlog-play follow mode controllable and off by default.
  - Get tlog-rec shell also from TLOG_REC_SHELL environment variable.
  - Support non-TTY stdin/stdout in tlog-rec, allowing its use with
    non-interactive SSH sessions.
  - Support building on and packaging for EPEL5.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3-1
changelog:
  - Release v3. Added features and implemented fixes follow.
  - Make each JSON message timing data start with window size.
    This makes it possible to pick up the stream from any message and also
    combine messages, with window size known and preserved at all times.
  - Add "term" field to JSON messages, specifying terminal type.
  - Add "ver" field to JSON messages, specifying message format version.
  - Set "SHELL" environment variable to actual user shell in tlog-rec.
  - Check for locale's charset and abort tlog-rec if it's anything but the only
    supported UTF-8.
  - Add -v/--version option support to tlog-rec and tlog-play.
  - Fix tlog-rec and tlog-play error output by accumulating error messages and
    outputting them only after terminal settings are restored, on exit. Output
    startup warnings before switching to raw terminal settings.
  - Output a newline after restoring terminal settings in tlog-rec and
    tlog-play, so that following output is not stuck to the end of the last line
    of the raw output.
  - Add an Elasticsearch mapping to documentation directory.
  - Disable input logging by default to avoid storing passwords. Please enable
    it explicitly in configuration, or on the command line, if necessary.
  - Close log file written by tlog-rec on executing the shell in the child to
    prevent log modification by the recorded user.
  - Support running tlog-rec SUID/SGID to prevent recorded users from killing or
    modifying it. Make tlog-rec SUID/SGID to user "tlog" in the RPM package.
  - Add session locking to tlog-rec. This prevents tlog-rec from recording if
    the audit session is already recorded by creating per-audit-session lock
    files in /var/run/tlog. This only makes sense with tlog-rec SUID/SGID.
    When certain failures occur while creating a lock file, session is assumed
    unlocked and is recorded anyway, as it is safer to record a session than
    not. Add corresponding setup to the RPM package.
  - Reproduce the recorded program (shell) exit status in tlog-rec similarly to
    how Bash reproduces the last executed command status.
  - Update and expand README.md to describe secure log message filtering with
    rsyslog, and playback directly from Elasticsearch, among other, smaller
    additions.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 4-1
changelog:
  - Release v4. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Extract user session recording functionality from tlog-rec into a new tool:
    tlog-rec-session. It should be used as the user's login shell now, and
    tlog-rec should be used as a general recording and testing tool.
  - Add (optional) support for writing to and reading from Systemd Journal - the
    "journal" reader and writer.
  - Make tlog-rec default to "file" writer, and tlog-rec-session to "journal",
    if built with Journal support, and to "syslog" otherwise.
  - Add "-o" option to tlog-rec as an alias to "--file-path".
  - Add "-i" option to tlog-play as an alias to "--file-path".
  - Assume locale charset is UTF-8, if ASCII charset is detected, since that is
    a likely indication the locale settings were lost. E.g. upon console login
    or "su -" on Fedora and RHEL.
  - Switch the "ver" JSON field type to string. Now it should be two numbers
    separated by a dot. The increase of the first number indicates
    forward-incompatible changes, the increase of the second number -
    forward-compatible. If the dot and the second number are omitted, the second
    number is considered to be zero. Bump the format version to "2".
  - Add a new JSON field: "rec", containing an opaque host-unique recording ID.
    Bump the format version to "2.1".
  - Add support for playback controls, both through the command line and via
    playback-time control keys, including: speed adjustment, pause/resume,
    fast-forward to a time, and packet-by-packet stepping through the recording.
  - Add optional rate-limiting of logged messages. Both throttling and dropping
    messages are supported.
  - Add "--lax" option to tlog-play to allow playing back recordings with
    missing messages.
  - Fix input being ignored when there is a lot of output, while recording.
  - Remove addition of tlog-rec (tlog-rec-session) to /etc/shells from RPM
    packaging to prevent users from changing their shells themselves once it has
    been assigned.
  - Add support for specifying the shell to start via the tlog-rec-session
    executable name. E.g. by making a tlog-rec-session-shell-zsh ->
    tlog-rec-session symlink and executing it. That can be used to specify
    particular shells to be recorded for specific users by assigning these
    symlinks as their login shells.
  - Make error messages from all the tools a bit less noisy and more readable.


author: Kirill Glebov <kgliebov@redhat.com> - 5-1
changelog:
  - Release v5. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Implement support for --configuration option for all programs.
    The option makes the program output its configuration in JSON and then
    exit.
  - Add BuildDependencies to allow yum-builddep.
  - Open JSON writer file with euid/egid. To allow creating protected log files
    with tlog-rec-session, open the JSON writer's file with the EUID and
    GUID the program was started with.
  - Installing Packages with the APT Addon instead of apt-get.
  - Switch to using TLOG_ERRS_RAISE macros.
  - Fix tlog-play cleanup-path segfault.
  - Modify command-line option parsing.
  - Remove "fields" field from ES query URL to fix compatibility with
    Elasticsearch 5.
  - Remove unused _source parameter from ES query URL.
  - Fix tlog-rec-session file permissions bug.
  - Use CLOCK_MONOTONIC for rate-limiting writing.
  - Filter out some more input control sequences.


author: Justin Stephenson <jstephen@redhat.com> - 6-1
changelog:
  - Release v6. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Add integration tests for end-to-end test coverage.
  - Fix compiler type comparison error with json-c json_object_array_length
    return value.
  - Fix a distribution issue causing incorrect M4_CONF_PATH expansion.
  - Log more detailed error when systemd journal is not present.


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-6
changelog:
  - Resolves: #2173874 Tomcat installs older java even though newer java is installed
  - Sync with rhel-8.8.0 branch


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-7
changelog:
  - Related: #2173874 Tomcat installs older java even though newer java is installed
  - Bump release number


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-10
changelog:
  - Resolves: #2210630 CVE-2023-28709 tomcat
  - Resolves: #2181448 CVE-2023-28708 tomcat: not including the secure attribute causes information disclosure


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-16
changelog:
  - Resolves: RHEL-12543 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)
  - Remove JDK subpackges which are unused


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-28
changelog:
  - Resolves: RHEL-13907
  - Resolves: RHEL-13904
  - Resolves: RHEL-12951
  - Resolves: RHEL-12544
  - Resolves: RHEL-2386


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-10
changelog:
  - Resolves: #2210630 CVE-2023-28709 tomcat
  - Resolves: #2181448 CVE-2023-28708 tomcat: not including the secure attribute causes information disclosure
  - tomcat: Apache Commons FileUpload: FileUpload DoS with excessive parts (CVE-2023-24998)
    tomcat: JsonErrorReportValve injection (CVE-2022-45143)
    tomcat: request smuggling (CVE-2022-42252)
    tomcat: local privilege escalation vulnerability (CVE-2022-23181)


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-16
changelog:
  - Resolves: RHEL-12543
    tomcat: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
  - Remove JDK subpackges which are unused


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-27
changelog:
  - Related: RHEL-12543
    tomcat: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
  - Bump release number


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-28
changelog:
  - Resolves: RHEL-13907
    tomcat: incorrectly parsed http trailer headers can cause request smuggling (CVE-2023-45648)
  - Resolves: RHEL-13904
    tomcat: improper cleaning of recycled objects could lead to information leak (CVE-2023-42795)
  - Resolves: RHEL-12951
    tomcat: FileUpload: DoS due to accumulation of temporary files on Windows (CVE-2023-42794)
  - Resolves: RHEL-12544
    tomcat: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
  - Resolves: RHEL-2386
    tomcat: Open Redirect vulnerability in FORM authentication (CVE-2023-41080)


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-29
changelog:
  - Resolves: RHEL-17602
    tomcat: HTTP request smuggling via malformed trailer headers (CVE-2023-46589)
  - tomcat: Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549)


author: Sokratis Zappis <szappis@redhat.com> - 1:9.0.87-1.el8_10.1
changelog:
  - Resolves: RHEL-38548 - Amend tomcat package's changelog so that fixed CVEs are mentioned explicitly
  - Resolves: RHEL-35813 - Rebase tomcat to version 9.0.87
  - Resolves: RHEL-29255
    tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672)
  - Resolves: RHEL-29250
    tomcat: Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.4-3
changelog:
  - Rebuild for CVE-2022-41723, CVE-2023-24534, CVE-2023-24536 and
    CVE-2023-24538
  Resolves: #2187345, #2187368, #2203690


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.4-3
changelog:
  - Rebuild for CVE-2022-41723, CVE-2023-24534, CVE-2023-24536 and
    CVE-2023-24538
  Resolves: #2187343, #2187363, #2203694


author: Jindrich Novy <jnovy@redhat.com> - 0.0.99.2-1
changelog:
  - Update to 0.0.99.2
  - Make 'toolbox' create or fall back to a container if possible
  Resolves: #1914687
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 0.0.99.2-2
changelog:
  - Actually apply the patch to make 'toolbox' create or fall back to a
    container if possible
  - Support logging into a registry if necessary
  - Related: #1934415


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.3-2
changelog:
  - Update to 0.0.99.3
  - BuildRequire only systemd-rpm-macros as recommended by the Fedora packaging
    guidelines
  - Update the Summary to match upstream
  - Update the URL to point to the website
  Resolves: #2047290


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.4-7
changelog:
  - Rebuild for CVE-2023-29406, CVE-2023-39318 and CVE-2023-39319
  Resolves: RHEL-4231, RHEL-4475, RHEL-4502


author: Honggang Li <honli@redhat.com> - 4.2.10-25
changelog:
  - Rebase to latest Fedora release
  - Fix file conflicts in torque-devel multilib packages
  - Resolve: bz1853167


author: Kalev Lember <klember@redhat.com> - 3.38.2-2
changelog:
  - Use conflicts for totem-video-thumbnailer split instead of self-obsoletes
  - Resolves: rhbz#1949422


author: Jakub Kadlčík <frostyx@email.cz> 0.7.1-1
changelog:
  - Fix #116 - Support currrent versions of DNF (elyscape@gmail.com)
  - Fix #112 - handle PIDs that have no unit_path (seanokeeffe797@gmail.com)
  - Fix #119 - Improve session detection logic to fix (elyscape@gmail.com)
  - Fix space, instead of tabs (#115) (JensKuehnel@users.noreply.github.com)
  - A lot of changes to spec file regarding python2/3 (seanokeeffe797@gmail.com)


author: Jonathon Turel <jturel@gmail.com> 0.7.2-1
changelog:
  - Use DNF on RHEL (jturel@gmail.com)
  - Use PackageManager to determine kernel version (jturel@gmail.com)
  - Use subprocess to check process path arguments (jturel@gmail.com)
  - Find the right lxml version for Python 3.4 (jturel@gmail.com)
  - Update Vagrantfile to use Fedora 30 (jturel@gmail.com)
  - Ignore debug kernels when checking if kernel has been updated
    (jturel@gmail.com)
  - Add build dependency for nosetests (frostyx@email.cz)
  - Run tests within the %check phase (frostyx@email.cz)
  - Update fedora branches (frostyx@email.cz)


author: Jonathon Turel <jturel@gmail.com> 0.7.2-3
changelog:
  - Update tito releaser branches (frostyx@email.cz)
  - Not build for python2 package for Fedora anymore (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.4-1
changelog:
  - Fix list index out of range for ssh process names (frostyx@email.cz)
  - When there is no helper, it doesn't contain anything (frostyx@email.cz)
  - Fix wrong parameters number when upating an application objects
    (frostyx@email.cz)
  - Remove unnecessary string decoding (frostyx@email.cz)
  - Fix the missing dist in release (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.5-1
changelog:
  - Depend on python3-six instead of python3-future (frostyx@email.cz)
  - Drop beautifulsoup4 in favor of built-in xml.dom (frostyx@email.cz)
  - Drop nosetests dependency, use pytest instead (frostyx@email.cz)


author: Jakub Kadlčík <frostyx@email.cz> 0.4.1-1
changelog:
  - Print 'You should restart' above processes list (frostyx@email.cz)
  - Merge pull request #10 from xsuchy/pr-1 (frostyx@email.cz)
  - Fix details in tracer.spec (frostyx@email.cz)
  - Print 'how to restart' for session and static applications (frostyx@email.cz)
  - Add 'tracer --helpers' parameter to list helpers (frostyx@email.cz)


author: Jakub Kadlčík <frostyx@email.cz> 0.4.2-1
changelog:
  - Dont try to get list of files provided by non-installed RPM package
    (frostyx@email.cz)
  - Print user-friendly exception when package database is locked
    (frostyx@email.cz)


author: Jakub Kadlčík <frostyx@email.cz> 0.4.3-1
changelog:
  - Run tests before releasing new version (frostyx@email.cz)
  - Add 'make test' target (frostyx@email.cz)
  - Dont filter processes files (frostyx@email.cz)
  - Print 'affected by' section in helpers (frostyx@email.cz)


author: Jakub Kadlčík <frostyx@email.cz> 0.4.4-1
changelog:
  - Refactor determining whether application is running or not (frostyx@email.cz)
  - Add verbose mode (frostyx@email.cz)
  - Print 'affected by' section only in verbose mode (frostyx@email.cz)
  - In second verbose level print even affected files (frostyx@email.cz)


author: Jakub Kadlčík <frostyx@email.cz> 0.5.0-1
changelog:
  - Add sphinx documentation (frostyx@email.cz)
  - Add support for Travis CI and coveralls (frostyx@email.cz)
  - Print more lines of the state in helper (frostyx@email.cz)
  - Implement the application's 'ignore' property (frostyx@email.cz)
  - Return also list of packages affecting process children (frostyx@email.cz)
  - Dont print how to restart if application actually doesnt need it
  - Print sudo in helpers (frostyx@email.cz)
  - In DNF plugin print command for more informations (frostyx@email.cz)
  - Add timestamp argument (frostyx@email.cz)
  - UX improvements - immediately print how to restart (frostyx@email.cz)
  - Implement loading user-defined rules (frostyx@email.cz)
  - Implement loading user-defined applications (frostyx@email.cz)
  - Print 'how to restart' only when it has been set (frostyx@email.cz)
  - Use FilenameCleaner instead of _filename_without_version (frostyx@email.cz)
  - Deal with interpreted processes (frostyx@email.cz)
  - Add property 'category' to package (frostyx@email.cz)
  - Prevent from Ctrl+C traceback; Fix #14 (frostyx@email.cz)
  - Fix #new problem in process's exe; Related with 6c7bc46 (frostyx@email.cz)
  - Use Router to call the right controller and its method (frostyx@email.cz)
  - Recognize between locked database and insufficient permissions
    (frostyx@email.cz)
  - Specify program path to avoid conflict; Fix #12 (frostyx@email.cz)
  - Refactor applications as objects instead of dicts (frostyx@email.cz)
  - Fix lot of PEP warnings (frostyx@email.cz)
  - Use MVC architecture (frostyx@email.cz)


author: Jakub Kadlčík <frostyx@email.cz> 0.5.1-1
changelog:
  - Correct sentenses in note; Fix #18 (frostyx@email.cz)
  - Dont automatically assume 'sudo'; Fix #17 (frostyx@email.cz)
  - Sort applications alphabetically; Fix #16 (frostyx@email.cz)


author: Jakub Kadlčík <frostyx@email.cz> 0.5.2-1
changelog:
  - Add manpage (8) (frostyx@email.cz)
  - Print helpers for all arguments passed to --show (frostyx@email.cz)


author: Jakub Kadlčík <frostyx@email.cz> 0.5.4-1
changelog:
  - Rename DNF plugin to dnf-plugin-tracer (frostyx@email.cz)
  - Trace affected applications instead of processes (frostyx@email.cz)
  - Rewrite the description (frostyx@email.cz)


author: Jakub Kadlčík <frostyx@email.cz> 0.5.5-1
changelog:
  - On Fedora, use DNF and YUM at once; (RhBug:1168807) (frostyx@email.cz)
  - Return empty collection if DNF wasn't used yet; (RhBug:1168807)
    (frostyx@email.cz)
  - Rewrite default view using blocks Print blocks of session and static
    applications when `-a`; Fix #23 (frostyx@email.cz)
  - Implement helper arguments functionality; Close #21 (frostyx@email.cz)
  - Make set step by step; Fix #25 (frostyx@email.cz)
  - Don't run tracer when uninstalling it; Fix #24 (frostyx@email.cz)
  - Add fedora-git releaser (frostyx@email.cz)
  - Implement '--show-resource' parameter (frostyx@email.cz)
  - Use parallel make (frostyx@email.cz)


author: Jakub Kadlčík <frostyx@email.cz> 0.5.6-1
changelog:
  - Sort applications in interactive controler To fix the issue that [number]
    doesn't correspond to printed application (frostyx@email.cz)
  - Strip .#prelink#. from filenames; See #19 (frostyx@email.cz)
  - Add argument forgotten in dcf0178 (frostyx@email.cz)


author: Jakub Kadlčík <frostyx@email.cz> 0.5.7-1
changelog:
  - Update informations about DNF plugin (frostyx@email.cz)
  - Prevent traceback when deleted user; See #33 (frostyx@email.cz)
  - Rename 'print' action to 'return' and set it to rules (frostyx@email.cz)
  - Add ProcessWrapper to ensure psutil compatibility (frostyx@email.cz)
  - Drop dnf plugin (moved to dnf-plugins-extras) (i.gnatenko.brain@gmail.com)
  - Use rpm-python library instead of calling rpm commands (i.gnatenko.brain@gmail.com)
  - Use Yum as package manager on CentOS (frostyx@email.cz)


author: Jakub Kadlčík <frostyx@email.cz> 0.5.8-1
changelog:
  - There is children instead of get_children in psutil2 (frostyx@email.cz)
  - ProcessWrapper provides api of new version, so use it (frostyx@email.cz)
  - Get summary instead of description; Fix mistake from dfae2b6


author: Jakub Kadlčík <frostyx@email.cz> 0.5.9-1
changelog:
  - Pick the most recent sqlite database (RhBug:1214961) (frostyx@email.cz)
  - Obsolete positional arguments with --packages (frostyx@email.cz)
  - Implement application rename functionality (frostyx@email.cz)
  - Add LXDE applications (frostyx@email.cz)
  - Add Xfce applications (frostyx@email.cz)
  - Add MATE applications (frostyx@email.cz)
  - Print if application affects something else (frostyx@email.cz)
  - Add Czech translation (frostyx@email.cz)
  - Use localization system and transifex
  - Print python version in system view (frostyx@email.cz)
  - Implement Python3 support
  - Add setup.py script for pip (frostyx@email.cz)
  - Add dependency to 'rpm-python' (frostyx@email.cz)
  - Add small API


author: Jakub Kadlčík <frostyx@email.cz> 0.6.0-1
changelog:
  - Fix warning on new BeautifulSoup4-4.4.0 (RhBug:1240115) (frostyx@email.cz)
  - Add block with uninstalled packages (frostyx@email.cz)
  - Find provided files only once per package name Significant performance
    improvement (frostyx@email.cz)
  - Implement hooks functionality (frostyx@email.cz)


author: Jakub Kadlčík <frostyx@email.cz> 0.6.1-1
changelog:
  - Print unique package names in Affected by section; Fix #36 (frostyx@email.cz)
  - Implement services autodetect functionality (frostyx@email.cz)
  - Add equivalent --services-only and --daemons-only arguments
    (frostyx@email.cz)
  - Fix testing views on non-english systems (frostyx@email.cz)
  - Fix compatibility issues on psutil-3; Fix #41 (frostyx@email.cz)


author: Jakub Kadlčík <frostyx@email.cz> 0.6.7-1
changelog:
  - Recognize root user from -r or --root arguments; Fix #51 (frostyx@email.cz)
  - Don't force root, rather catch exceptions; See #49 (frostyx@email.cz)
  - Use non-zero exit codes to indicate various situations; See #46
    (frostyx@email.cz)
  - Fix unicode error from raw_input (RhBug:1279409) (frostyx@email.cz)
  - Change distro name retrieval to try to  read /etc/os-release first
    (ngompa13@gmail.com)


author: Jakub Kadlčík <frostyx@email.cz> 0.6.8-1
changelog:
  - Fix /etc/os-release issues on CentOS (tingping@tingping.se)
  - Add support for Arch Linux (tingping@tingping.se)


author: Jakub Kadlčík <frostyx@email.cz> 0.6.10-1
changelog:
  - Split RPM package into separate python2 and python3 subpackages
    (frostyx@email.cz)
  - Fix localization errors from exception texts (frostyx@email.cz)
  - Release for F23, F24 and rawhide (frostyx@email.cz)


author: Jakub Kadlčík <frostyx@email.cz> 0.6.11-1
changelog:
  - Release even for F25 (frostyx@email.cz)
  - Obsolete old tracer version (frostyx@email.cz)
  - :retab the specfile (frostyx@email.cz)


author: Jakub Kadlčík <frostyx@email.cz> 0.6.12-1
changelog:
  - Add Vagrantfile for more convenient testing (frostyx@email.cz)
  - Recommend systemctl instead of service on systemd machines (seanokeeffe797@gmail.com)
  - Implement --now and --packages as API Query methods (frostyx@email.cz)
  - Improve support for python applications (Fix #64) (frostyx@email.cz)


author: Jakub Kadlčík <frostyx@email.cz> 0.6.13-1
changelog:
  - report reboot for new kernels (#83) (seanokeeffe797@gmail.com)
  - Get daemon names from dbus (#82) (seanokeeffe797@gmail.com)
  - Added Enterprise Linux install instructions (seanokeeffe797@gmail.com)
  - bash completion support (seanokeeffe797@gmail.com)
  - Use ID_LIKE in /etc/os-release (#81) (seanokeeffe797@gmail.com)
  - Fixes #85 - Always respect app type defines (seanokeeffe797@gmail.com)
  - Fixes #84 - ignore flag is now respected (seanokeeffe797@gmail.com)
  - Fixes #20 - print executable in interactive mode (seanokeeffe797@gmail.com)
  - Fixes #56 - Add Ubunut support (seanokeeffe797@gmail.com)
  - Fixes #76 - polkitd service can be restarted (seanokeeffe797@gmail.com)
  - Fixes #73 - add support for Oracle Linux (seanokeeffe797@gmail.com)
  - Fixes #66 - reconise postfix process correctly (seanokeeffe797@gmail.com)
  - Fixes #68 - recognised SSH sessions correctly (seanokeeffe797@gmail.com)


author: Sean O'Keeffe <seanokeeffe797@gmail.com> 0.6.13.1-1
changelog:
  - Fixes #92 - Correct package version comparision (seanokeeffe797@gmail.com)
  - EPEL uses python-argcomplete not pythonX-argcomplete
    (seanokeeffe797@gmail.com)


author: Sean O'Keeffe <seanokeeffe797@gmail.com> 0.7.0-1
changelog:
  - Fixes #98 - Don't try appending `None`, helpers (seanokeeffe797@gmail.com)
  - Fixes #104 - Replace None with "" when sorting (seanokeeffe797@gmail.com)
  - Update Python 2 dependency declarations to new packaging standards
    (seanokeeffe797@gmail.com)
  - Fixes #105 - check ID_LIKE in /etc/os-release (seanokeeffe797@gmail.com)
  - Cache process info (elyscape@gmail.com)
  - Handle sshd sessions that use privilege separation (elyscape@gmail.com)
  - fix typo in docs (seanokeeffe797@gmail.com)
  - Switch Travis to container-based infrastructure (seanokeeffe797@gmail.com)
  - Fix RHBug #1469282 - bash completion should exit cleanly if python-
    argcomplete is not installed (seanokeeffe797@gmail.com)
  - Fix argparse logic in spec (#94) (frostyx@email.cz)
  - Update branches for fedora releaser (frostyx@email.cz)
  - Add epel releaser (seanokeeffe797@gmail.com)
  - rename tito releasers (seanokeeffe797@gmail.com)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.6-1
changelog:
  - Update tito releasers (frostyx@email.cz)
  - CentOS-8 uses DNF (mmarusak@redhat.com)
  - Add missing runtime dependency on python2-six (frostyx@email.cz)
  - Add support for SUSE distributions using DNF (ngompa13@gmail.com)
  - Print a user-friendly error when a xml file cannot be parsed
    (frostyx@email.cz)
  - Update tito releasers (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.7-1
changelog:
  - Add installation instructions of EPEL 8 (frostyx@email.cz)
  - Make the source of README.md more readable (frostyx@email.cz)
  - Remove duplicates in suggested helpers (frostyx@email.cz)
  - Make sure Collection.sorted doesn't traceback for None values
    (frostyx@email.cz)
  - Ignore sudo and su in the output (frostyx@email.cz)
  - Don't traceback for nonexisting PID (frostyx@email.cz)
  - Access process PID only once (frostyx@email.cz)
  - Rename tito master branch to rawhide (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.8-1
changelog:
  - Release also for F35 (frostyx@email.cz)
  - Use distro.id() instead of platform.linux_distribution() (frostyx@email.cz)
  - Implement compare_packages for the alpm backend (jvanderwaa@redhat.com)
  - Add find_package support for alpm (jvanderwaa@redhat.com)
  - Use importlib instead of deprecated imp (frostyx@email.cz)
  - Drop beautifulsoup4/lxml dependencies (jvanderwaa@redhat.com)
  - Drop F32 from releasers.conf (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.9-1
changelog:
  - Create /var/run/reboot-required file (frostyx@email.cz)
  - Recommend the correct command for restarting auditd (frostyx@email.cz)
  - Add python3-setuptools dependency (frostyx@email.cz)
  - Fix argument passed to print_helper() (ferdnyc@gmail.com)
  - Add similar software to the readme (frostyx@email.cz)
  - Update url references to point to tracer.readthedocs.io (dcampano@gmail.com)
  - Oracle Linux 8 uses dnf, too (suttner@atix.de)
  - Drop python-setuptools runtime dependency (frostyx@email.cz)
  - Fix Python DeprecationWarning: invalid escape sequence
    (jvanderwaa@redhat.com)
  - Add readthedocs configuration file (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.0-1
changelog:
  - Fix querying RPM files on EPEL7 (frostyx@email.cz)
  - Use backported lru_cache on EPEL7 (frostyx@email.cz)
  - Don't hang forever when executed via SSH (frostyx@email.cz)
  - Don't check if package is installed before listing its files
    (frostyx@email.cz)
  - Replace regexes where they are not needed (frostyx@email.cz)
  - Query all packages at once, its faster than one by one (frostyx@email.cz)
  - Cache some properties for a massive performance boost (frostyx@email.cz)
  - Refactor unnecessary condition (frostyx@email.cz)
  - Fix weird indentation (frostyx@email.cz)
  - Pass the whole application to the provided_by function, not just its name
    (frostyx@email.cz)
  - Stop using deprecated rpm.fi (frostyx@email.cz)
  - Attempt to fix readthedocs deprecation error (frostyx@email.cz)
  - More reliable check if /usr/lib/sysimage/dnf/ database should be used
    (frostyx@email.cz)


author: Wim Taymans <wtaymans@redhat.com> - 0.3.13-12
changelog:
  - Add explicit Requires for the -libs package.
  - Do NVR bump to move twolame-devel from buildroot to CRB
  - Resolves: rhbz#1843275


author: Lukas Vrabec <lvrabec@redhat.com> - 0.1.3-3
changelog:
  - Improve capability parsing for docker containers
  - Update small changes in manpage, like issue with mandatory option '-c' for docker containers
  - Fix parsing Mountpoints in docker inspect JSON file


author: Lukas Vrabec <lvrabec@redhat.com> - 0.1.3-4
changelog:
  - Update manpage with the latest known bug described in https://github.com/containers/udica/issues/8
  - Add check if runtimes are installed on the system


author: Lukas Vrabec <lvrabec@redhat.com> - 0.1.4-1
changelog:
  - Fix minor problems reported by pylint #11
  - Catch FileNotFoundError when inspecting containers #12
  - Create basic tests #13
  - Restore working directory #14
  - udica cannot use the container ID once it is provided #10


author: Lukas Vrabec <lvrabec@redhat.com> - 0.1.5-1
changelog:
  - Create mock selinux and semanage module
  - Update testing section in README
  - Add travis file for Travis CI
  - Grammar fixes in the udica.8 manpage file
  - Support port ranges (Resolves: #16)
  - Test port ranges


author: Jindrich Novy <jnovy@redhat.com> - 0.2.5-2
changelog:
  - New rebase https://github.com/containers/udica/releases/tag/v0.2.5 (#1995041)
  - Replace capability dictionary with str.lower()
  - Enable udica to generate policies with fifo class
  - Sort container inspect data before processing
  - Update templates to work properly with new cil parser
  - Related: #1934415


author: Lukas Vrabec <lvrabec@redhat.com> - 0.0.3-1
changelog:
  - Remove required parameters -i or -j and added support for reading json file from stdin.
  - Remove "-n" or "--name" parameter. Name of the container will be required for this tool


author: Lukas Vrabec <lvrabec@redhat.com> - 0.0.4-1
changelog:
  - Add manpages
  - Add support for communicating with libvirt daemon
  - Add support for communicating with X server.
  - Add support for read/write to the controlling terminal


author: Lukas Vrabec <lvrabec@redhat.com> - 0.1.3-1
changelog:
  - Fix capability allow rules when capabilities are specified in JSON file
  - Add additional SELinux allow rules to base container template to allow container to read proc_type types.


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.0-14
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188991)
  - tests: Use stronger passphrases for LUKS tests
  - lvm2: Improve uevent processing (#2039772)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.0-16
changelog:
  - iscsi: Fix login on firmware-discovered nodes (#2213193)
  - tests: Extend iscsi method call timeouts (#2213715)


author: Jan Staněk <jstanek@redhat.com> - 2.8.29-2
changelog:
  - Remove unneeded legacy conditionals around %{nodejs_arches} and %{_jsdir}
    Resolves: rhbz#1737038
  - BuildRequire nodejs for test runs
  - Remove reference to non-applied patch
  - Use %bcond_without for conditional compilation


author: Nils Philippsen <nils@redhat.com> - 1.2.1-3
changelog:
  - drop requirements on cmake, pkgconfig and rather own the directories for the
    files augmenting these packages


author: Andreas Schneider <asn@redhat.com> - 1.2.2-1
changelog:
  - Update to version 1.2.2:
    * Added support for fork'ed and then exec'ed processes
    * Added support for Alpha


author: Andreas Schneider <asn@redhat.com> - 1.2.4-1
changelog:
  - Update to version 1.2.4
    * Added deadlock workaround for glibc < 2.24
    * Fixed a possible deadlock bug if uid_wrapper is turned off
    * Logging is always turned on now
    * Fixed a memory leak
    * Limited number of groups during fork+exec


author: Artem Egorenkov <aegorenk@redhat.com> - 1.7.3-17
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1830625


author: Richard Lescak <rlescak@gmail.com> - 1.7.3-18
changelog:
  - Change file mode before owner when configuring remote control unix socket to avoid AVC denials
  - Resolves: rhbz#2038251


author: Petr Menšík <pemensik@redhat.com> - 1.16.0-1
changelog:
  - Upgrade to 9.16.0 (#2027735)
  - Update to recent version with compatibility with RHEL8 (#2027735)
  - Ensure also source level compatibility with previous version


author: Kaiqiang Wang <wangkaiqiang@inspur.com> - 1.16.2-6
changelog:
  - Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
  - Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868


author: Paul Wouters <paul@xelerance.com> - 1.0.2-4
changelog:
  - Fix CFLAGS getting lost in build
  - Don't enable interface-automatic:yes because that
    causes unbound to listen on 0.0.0.0 instead of 127.0.0.1


author: Paul Wouters <paul@xelerance.com> - 1.0.2-5
changelog:
  - Only call ldconfig in -libs package
  - Move configure into build section
  - devel subpackage should only depend on libs subpackage


author: Paul Wouters <paul@xelerance.com> - 1.1.0-1
changelog:
  - Updated to version 1.1.0
  - Updated unbound.conf's statistics options and remote-control
    to work properly for munin
  - Added unbound-munin package
  - Generate unbound remote-control  key/certs on first startup
  - Required ldns is now 1.4.0


author: Adam Tkac <atkac redhat com> - 1.1.0-2
changelog:
  - unbound-1.1.0-log_open.patch
    - make sure log is opened before chroot call
    - tracked as http://www.nlnetlabs.nl/bugs/show_bug.cgi?id=219
  - removed /dev/log and /var/run/unbound and /etc/resolv.conf from
    chroot, not needed
  - don't mount files in chroot, it causes problems during updates
  - fixed typo in default config file


author: Paul Wouters <paul@xelerance.com> - 1.1.0-3
changelog:
  - Remove the chroot, obsoleted by SElinux
  - Add additional munin plugin links supported by unbound plugin
  - Move configuration directory from /var/lib/unbound to /etc/unbound
  - Modified unbound.init and unbound.conf to account for chroot changes
  - Updated unbound.conf with new available options
  - Enabled dns-0x20 protection per default


author: Paul Wouters <paul@xelerance.com> - 1.1.1-6
changelog:
  - Added scandir patch for trusted-keys-file: option, which
    is used to load multiple dnssec keys in bind file format


author: Paul Wouters <paul@xelerance.com> - 1.1.1-7
changelog:
  - Modified scandir patch to silently fail when wildcard matches nothing
  - Patch to allow unbound-checkconf to find empty wildcard matches


author: Paul Wouters <paul@xelerance.com - 1.2.0-1
changelog:
  - Updated to 1.2.0
  - Added dependancy on minimum SSL for CVE-2008-5077
  - Added dependancy on bc for unbound-munin
  - Added minimum requirement of libevent 1.4.5. Crashes with older versions
    (note: libevent is stale in EL-4 and not in EL-5, needs fixing there)
  - Removed dependancy on selinux-policy (will get used when available)
  - Enable options as per draft-wijngaards-dnsext-resolver-side-mitigation-00.txt
  - Enable unwanted-reply-threshold to mitigate against a Kaminsky attack
  - Enable val-clean-additional to drop addition unsigned data from signed
    response.
  - Removed patches (got merged into upstream)


author: Paul Wouters <paul@xelerance.com> - 1.3.0-1
changelog:
  - Updated to 1.3.0
  - Added unbound-python sub package. disabled for now
  - Patch from svn to fix DLV lookups
  - Patches from svn to detect wrong truncated response from BIND 9.6.1 with
    minimal-responses)
  - Added Default-Start and Default-Stop to unbound.init
  - Re-enabled --enable-sha2
  - Re-enabled glob.patch


author: Paul Wouters <paul@xelerance.com> - 1.4.1-2
changelog:
  - Removed dependancy for dnssec-conf
  - Added ISC DLV key (formerly in dnssec-conf)
  - Fixup old DLV locations in unbound.conf file via %post
  - Fix parent child disagreement handling and no-ipv6 present [svn r1953]


author: Paul Wouters <paul@xelerance.com> - 1.4.2-1
changelog:
  - Updated to 1.4.2 
  - Updated unbound.conf with new options
  - Enabled pre-fetching DNSKEY records (DNSSEC speedup)
  - Enabled re-fetching popular records before they expire
  - Enabled logging of DNSSEC validation errors


author: Paul Wouters <paul@xelerance.com> - 1.4.5-3
changelog:
  - Disable do-ipv6 per default - causes severe degradation on non-ipv6 machines
    (see comments in inbound.conf)


author: Paul Wouters <paul@xelerance.com> - 1.4.8-1
changelog:
  - Updated to 1.4.8
  - Enable root key for DNSSEC
  - Fix unbound-munin to use proper file (could cause excessive logging)
  - Build unbound-python per default
  - Disable gost as Fedora/EPEL does not allow ECC and has mangled openssl


author: Paul Wouters <paul@xelerance.com> - 1.4.11-1
changelog:
  - Updated to 1.4.11
  - removed integrated CVE patch
  - updated stock unbound.conf for new options introduced


author: Paul Wouters <paul@xelerance.com> - 1.4.12-2
changelog:
  - Fix for python module load in the server (Tom Hendrikx)
  - No longer enable --enable-debug as it causes degraded  performance
    under load.


author: Paul Wouters <paul@xelerance.com> - 1.4.13-1
changelog:
  - Upgraded to 1.4.13
  - Removed merged in pythonmod patch
  - Added EDNS1480 patch to fix unbound on broken EDNS/UDP networks
  - Fix python to go into sitearch instead of sitelib


author: Paul Wouters <paul@cypherpunks.ca> - 1.4.14-1
changelog:
  - Upgraded to 1.4.14 for CVE-2011-4528 / VU#209659
  - SSL-wrapped query support for dnssec-trigger
  - EDNS handling changes
  - Removed integrated EDNS patches
  - Disabled use-caps-for-id, GoDaddy domains now break on it
  - Enabled new harden-below-nxdomain


author: Paul Wouters <pwouters@redhat.com> - 1.4.16-2
changelog:
  - Don't ghost the directory (rhbz#788805)
  - Patch for unbound to support unbound-control forward_zone
    (needed for openswan in XAUTH mode)


author: Paul Wouters <pwouters@redhat.com> - 1.4.16-3
changelog:
  - Since the daemon links to the libs staticly, add Requires:
    (this is rhbz#745288)
  - Package up streamtcp as unbound-streamtcp (for monitoring)


author: Paul Wouters <pwouters@redhat.com> - 1.4.17-5
changelog:
  - Fix for unbound crasher (upstream bug #452)
  - Support libunbound functions in man pages and place in -devel


author: Paul Wouters <pwouters@redhat.com> - 1.4.18-1
changelog:
  - Updated to 1.4.18 (FIPS related fixes mostly)
  - Removed patches that were merged in upstream
  - Added comment to root.key


author: Paul Wouters <pwouters@redhat.com> - 1.4.18-5
changelog:
  - Patch to allow wildcards in include: statements
  - Add directories /etc/unbound/keys.d,conf.d,local.d with
    example entries
  - Added /etc/unbound/root.anchor, maintained by unbound-anchor
    which is installed as monthly cron and PreExec in systemd config
    (root.key is unused, but left installed in case people depend on it)
  - Native systemd (simple) and /etc/sysconfig/unbound support
  - Run unbound-checkconf in PreExec
  - Moved trust anchor related files to unbound-libs, as they can
    be used without the daemon.
  - sub packages now depends on base package of same arch
  - Build munin package as noarch
  - unbound-anchor moved to unbound-libs package. It is needed
    to update the root.anchor key file.


author: Paul Wouters <pwouters@redhat.com> - 1.4.18-6
changelog:
  - Patch to ensure stube-zone's aren't lost when using dnssec-triggerd
  - added unbound-munin.README file


author: Paul Wouters <pwouters@redhat.com> - 1.4.20-4
changelog:
  - Updated to 1.4.20
  - Build with full RELRO (not use -z,relro but with -z,relo,-z,now)
  - Fixup man page for unbound-control-setup
  - unbound.service should start before nss-lookup.target (rhbz#919955)
  - Removed patch for rhbz#888759 merged in upstream
  - Move root.anchor to /var/lib/unbound to make selinux policy easier for updating (rhbz#896599/rhbz#891008)
  - Move cronjob for root.anchor from unbound to unbound-libs, require crontabs
  - /etc/unbound (and all) should be owned by unbound-libs (rhbz#909691)
  - Remove Obsolete/Provides for dnssec-conf which was last seen in f13
  - Ensure any unbound-anchor failure in post is ignored


author: Paul Wouters <pwouters@redhat.com> - 1.4.20-5
changelog:
  - Fix cron job syntax (rhbz#951725)
  - Use install -p to prevent .rpmnew files that are identical to originals


author: Paul Wouters <pwouters@redhat.com> - 1.4.20-12
changelog:
  - Enable round-robin (with noths() patch)
  - Change cron and systemd service to use root.key, not root.anchor


author: Tomas Hozza <thozza@redhat.com> - 1.4.20-14
changelog:
  - remove missing unbound-rootkey.service from post/preun/postun sections
  - don't hardcode hardening flags, let hardened build macro handles it


author: Paul Wouters <pwouters@redhat.com> - 1.4.21-1
changelog:
  - Updated to 1.4.21, 
  - Enabled new max-udp-size: 3072 (so ANY isc.org won't fit)
  - Removed patched merged in by upstream
  - Enable statistics-cumulative for munin-plugin
  - Added outgoing-port-avoid: 0-32767 conformant to SElinux restrictions
  - Updated unbound.conf


author: Paul Wouters <pwouters@redhat.com> - 1.5.1-1
changelog:
  - Update to 1.5.1 for CVE-2014-8602 (rhbz#1172066)
  - Removed unbound-aarch64.patch which was merged upstream
  - Don't require autotools for non snapshots or run autoreconf


author: Paul Wouters <pwouters@redhat.com> - 1.5.3-1
changelog:
  - Updated to 1.5.3 which is a bugfix on 1.5.2 for sighup handling
  - Updated to 1.5.2 which fixes DNSSEC validation with different
    trust anchors upstream, local-zone has a new keyword 'inform'


author: Tomas Hozza <thozza@redhat.com> - 1.5.3-2
changelog:
  - Fix FTBFS (#1206129)
  - Build python3-unbound and python-unbound bindings for Python 3 and 2 (#1188080)


author: Tomas Hozza <thozza@redhat.com> - 1.5.3-3
changelog:
  - migrate cronjob to systemd timer unit (#1177285)
  - change the period for unbound-anchor from monthly to daily (#1180267)
  - Thanks to Tomasz Torcz <ttorcz@fedoraproject.org> for the initial patch


author: Paul Wouters <pwouters@redhat.com> - 1.5.3-4
changelog:
  - Fixup scriptlets causing systemctl: command not found
  - Resolves rhbz#1219587 Error in PREIN scriptlet in rpm package unbound-libs


author: Tomas Hozza <thozza@redhat.com> - 1.5.3-5
changelog:
  - unbound.service now Wants unbound-anchor.timer
  - unbound-anchor man page moved to the unbound-libs


author: Tomas Hozza <thozza@redhat.com> - 1.5.3-7
changelog:
  - Add option for maximum negative cache TTL (#1229599)
  - Use low maximum negative cache TTL (5 sec) (#1229596)


author: Tomas Hozza <thozza@redhat.com> - 1.5.4-2
changelog:
  - Start unbound-anchor.timer only on new installations
  - Rename root.anchor to root.key in %post section


author: Tomas Hozza <thozza@redhat.com> - 1.5.4-3
changelog:
  - Added ExecReload section to unbound.service (#1195785)
  - Removed After syslog.target since it is not needed any more


author: Tomas Hozza <thozza@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5 (#1269137)
  - Removed the anchor update from %post section of -libs subpackage (#1269137#c2)


author: Paul Wouters <pwouters@redhat.com> - 1.5.7-1
changelog:
  - Update to 1.5.7
  - Enable query minimalization for enhanced DNS query privacy
  - Enable nxdomain hardening to assist with query minimalization and SBLs
  - Updated default unbound.conf for new features from upstream.


author: Paul Wouters <pwouters@redhat.com> - 1.5.8-1
changelog:
  - Update to 1.5.8 (rhbz#1313831) which incorporates rhbz#1294339 patch
  - Updated unbound.conf with new upstream options
  - Enabled ip-transparent: yes (see rhbz#1291449)


author: Paul Wouters <pwouters@redhat.com> - 1.5.10-1
changelog:
  - Updated to 1.5.10 (better TCP handling, bugfixes)
  - Install pkgconfig file in -devel package
  - Updated unbound.conf


author: Paul Wouters <pwouters@redhat.com> - 1.6.4-1
changelog:
  - Updated to 1.6.4 full release, patch to allow missing ipsechook
  - Resolves rhbz#1465575 unbound fails to start up, complains about missing ipsecmod-hook


author: Paul Wouters <pwouters@redhat.com> - 1.6.4-4
changelog:
  - Rebuilt with KSK2017 added to root.key and root.anchor
  - Remove noreplace for root key files. We can only improve these files over local copies


author: Paul Wouters <pwouters@redhat.com> - 1.6.6-1
changelog:
  - Resolves: rhbz#1483572 unbound-1.6.6 is available
  - Resolves: rhbz#1465575 unbound fails to start up, complains about missing ipsecmod-hook (edit)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.6.7-2
changelog:
  - Python 2 binary package renamed to python2-unbound
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Paul Wouters <pwouters@redhat.com> - 1.6.8-1
changelog:
  - Resolves rhbz#1483572 unbound-1.6.8 is available
  - Resolves rhbz#1507049 CVE-2017-15105 unbound: Improper validation of wildcard synthesized NSEC records
  - Resolves rhbz#1536518 CVE-2017-15105 unbound: Improper validation of wildcard synthesized NSEC records [fedora-all]


author: Petr Menšík <pemensik@redhat.com> - 1.7.0-5
changelog:
  - Require gcc and make on build
  - Remove group, simplify systemd requires
  - Simplify building with single python version, make python3 primary


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-12
changelog:
  - Remove KSK-2010 from configuration files
  - Resolves: rhbz#1665502
  - Replace legacy directory /var/run/ with /run
  - Resolves: rhbz#1766463
  - Resolves: rhbz#1805978
  - Fix memory leak when DNS over TLS forwarding is configured
  - Resolves: rhbz#1819870


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-13
changelog:
  - Fix two previous patches and add missing patch lines to %prep
  - Fix amplifying an incoming query into a large number of queries directed to a target
  - Resolves: rhbz#1839178 (CVE-2020-12662)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-14
changelog:
  - Fix unbound-1.7.3-amplifying-an-incoming-query.patch patch
  - Resolves: rhbz#1839178 (CVE-2020-12662)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-15
changelog:
  - Fix SPEC file to not check md5 mtime and size of /var/lib/unbound/root.key
  - Resolves: rhbz#1714175
  - Use system-wide crypto policy setting (PROFILE=SYSTEM) instead of custom setting
  - Resolves: rhbz#1842837
  - Enable additional logging in unbound
  - Resolves: rhbz#1850460
  - security hardening from x41 report
  - Resolves: rhbz#1859933
  - symbolic link traversal when writing PID file
  - Resolves: rhbz#1899058


author: Artem Egorenkov <aegorenk@redhat.com> - 1.7.3-16
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1922448


author: Daniel Kopecek <dkopecek@redhat.com> 0.3-1
changelog:
  - Update to version 0.3
  - disabled silent rules
  - install license file
  - added man pages
  - use _hardened_build 1 instead of custom compilation flags
  - fix file permissions on files in /etc
  - do not install an empty rule set file


author: Daniel Kopecek <dkopecek@redhat.com> 0.3p3-1
changelog:
  - Update to version 0.3p3
  - added %check section
  - removed explicit -devel requires on systemd, libqb and
    libsodium devel files
  - added -devel requires on libstdc++-devel


author: Daniel Kopecek <dkopecek@redhat.com> 0.4-4
changelog:
  - Update to version 0.4
  - added usbguard CLI
  - added a tools subpackage with usbguard-rule-parser binary


author: Daniel Kopeček <dkopecek@redhat.com> 0.6.3-0.1.20170317
changelog:
  - Update to latest git snapshot
  - Use --enable-werror configure option as the upstream default
    changed to not use -Werror.


author: Daniel Kopeček <dkopecek@redhat.com> 0.7.0-1
changelog:
  - Update to 0.7.0
    - changed PresentDevicePolicy setting from keep to apply-policy
    - added AuditFilePath configuration option pointing to
      /var/log/usbguard/usbguard-audit.log file
    - install bash-completion script
    - use 0600 file permissions for usbguard-daemon.conf and rules.conf


author: Daniel Kopeček <dkopecek@redhat.com> 0.7.0-4
changelog:
  - Added patch to disable unused parameter warning for protobuf
    generated sources to fix compilation with newer protobuf version


author: Daniel Kopeček <dkopecek@redhat.com> - 0.7.2-1
changelog:
  - Update to 0.7.2
  - Don't use --enable-werror downstream
  - Removed patches related to compiler warnings


author: Attila Lakatos <alakatos@redhat.com> - 0.7.8-4
changelog:
  - RHEL 8.3.0 ERRATUM
  - Spec file clean up
  - Rebase to 0.7.8
  Resolves: rhbz#1738590
  - Added selinux subpackage
  Resolves: rhbz#1683567
  - Added notifier subpackage
  - Installing /etc/usbguard/rules.d/
  Resolves: rhbz#1667395
  - Fixed sigwaitinfo handling
  Resolves: rhbz#1835210


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-5
changelog:
  - RHEL 8.3.0 ERRATUM
  - Use old-fasioned forking style in unit file
  Resolves: rhbz#1846885
  - Allow usbguard to read /proc/cpuinfo
  Resolves: rhbz#1847870
  - Removed notifier's Requires for usbguard-devel
  Resolves: rhbz#1667395
  - Allow usbguard to read /dev/urandom
  Resolves: rhbz#1848618


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-6
changelog:
  - RHEL 8.3.0 ERRATUM
  - Removed execstack from .spec
  - Removed AuthorizedDefault=wired from the usbguard
  Resolves: rhbz#1852539
  - Missing error message on bad configuration
  Resolves: rhbz#1857299
  - /etc/usbguard/usbguard-daemon.conf file does not contain all default options
  Resolves: rhbz#1862907


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-1
changelog:
  - Rebase to 1.0.0
  Resolves: rhbz#1887448
  - Filtering rules by attribute
  Resolves: rhbz#1873953
  - Change device policy of multiple devices using rule instead of ID
  Resolves: rhbz#1852568


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-8
changelog:
  - change usbguard icon injection
  - fix DSP module definition in spec file
  Resolves: rhbz#2014441
  - add execstack to spec
  - remove IPAddressDeny from usbguard service
  Resolves: rhbz#1929364
  - fix file conflict when installing usbguard on rhel
  Resolves: rhbz#1963271
  - fix IPC access control files override
  Resolves: rhbz#2004511
  - validate ACL permission existence
  Resolves: rhbz#2005020
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2000000


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-10
changelog:
  - Fix unauthorized access via D-bus
  - Fix memory leaks on connection failure to D-bus
  Resolves: rhbz#2059067


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-13
changelog:
  - Set OOMScoreAdjust to -1000 in service file
  Resolves: rhbz#2159411
  - Fix race condition in usbguard-daemon when forking
  Resolves: rhbz#2159409
  - Add missing files to documentation
  Resolves: rhbz#2159412
  - Disable logging to console, logging to syslog is still enabled
  - Store permanent rules even if RuleFile is not set but RuleFolder is
  - Neither RuleFolder nor RuleFile exists bugfix
  Resolves: rhbz#2159413
  - Remove build for i686 arch
  Resolves: rhbz#2105091


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-8.2
changelog:
  - Fix unauthorized access via D-bus
  - Fix memory leak on D-bus connection failure
  Resolves: rhbz#2127848


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Rebase to latest upstream: 0.13.0
  - Keeps usbredirserver binary (removed upstream)
    Related: rhbz#2135760


author: Victor Toso <victortoso@redhat.com> - 0.13.0-2
changelog:
  - Fixes 100% CPU usage when usbredirect used as TCP server
    Related: rhbz#2157520
  - Fixes USB redirection of identical devices
    Resolves: rhbz#2157520


author: James Antill <james@fedoraproject.org> - 1.0.4-20
changelog:
  - Move doc/ustr-devel-<version> to doc/ustr-devel. BZ 993940.
  - Use -fgnu89-inline workaround for gcc5.


author: Björn Esser <bjoern.esser@gmail.com> - 2.0.1-5
changelog:
  - Introduce doc-subpackage
  - Use unified %_pkgdocdir
  - Updated Patch0 and use on el <= 6, only
  - Rename Patch0 --> Patch 1000
  - Clean-up indentation


author: Mark Wielaard <mjw@redhat.com> - 3.18.1-5
changelog:
  - Add valgrind-3.18.1-dhat-tests-copy.patch
  - Add valgrind-3.18.1-s390x-EXRL.patch
  - Add valgrind-3.18.1-ppc64-lxsibzx-lxsihzx.patch
  - Add valgrind-3.18.1-ppc-pstq.patch
  - Add valgrind-3.18.1-ppc-pstq-tests.patch
  - Add valgrind-3.18.1-gdbserver_tests-hwcap.patch
  - Add valgrind-3.18.1-rust-v0-demangle.patch
  - Add valgrind-3.18.1-arm64-doubleword-cas.patch
  - Add valgrind-3.18.1-arm64-ldaxp-stlxp.patch
  - Add valgrind-3.18.1-arm64-atomic-align.patch
  - Add valgrind-3.18.1-amd64-more-spec-rules.patch
  - Add valgrind-3.18.1-condvar.patch
  - Add valgrind-3.18.1-demangle-namespace.patch


author: Mark Wielaard <mjw@redhat.com> - 3.21.0-2
changelog:
  - Upgrade to upstream 3.21.0
  - Remove upstreamed patches
  - Add valgrind-3.21.0-no-memcpy-replace-check.patch


author: Mark Wielaard <mjw@redhat.com> - 3.21.0-7
changelog:
  - Add valgrind-3.21.0-callgrind_control-no-strict.patch
  - Add valgrind-3.21.0-realloc-again.patch
  - Update valgrind-3.21.0-no-memcpy-replace-check.patch (memcpy_chk)
  - Add valgrind-3.21.0-vgm.patch and valgrind-3.21.0-vgm-tests.patch
  - Add valgrind-3.21.0-pgste.patch


author: Binbin Zhou <zhoubinbin@loongson.cn> - 3.21.0-8
changelog:
  - Add valgrind-3.21.0-Add-LoongArch64-Linux-support.patch
  - Add valgrind-3.21.0-LoongArch64-Sync-kernel-4.19.patch


author: Ingvar Hagelund <ingvar@linpro.no> - 1.0.1-2
changelog:
  - Added gcc requirement.
  - Changed to an even simpler example vcl in to /etc/varnish (thanks, perbu)
  - Added a sysconfig entry


author: Ingvar Hagelund <ingvar@linpro.no> - 1.0.2-6
changelog:
  - Added redhat subdir to svn
  - Removed default vcl config file. Used the new upstream variant instead.
  - Based build on svn. Running autogen.sh as start of build. Also added
    libtool, autoconf and automake to BuildRequires.
  - Removed rule to move varnishd to sbin. This is now fixed in upstream
  - Changed the sysconfig script to include a lot more nice features.
    Most of these were ripped from the Debian package. Updated initscript
    to reflect this.


author: Ingvar Hagelund <ingvar@linpro.no> - 1.0.3-1
changelog:
  - New release 1.0.3. See the general ChangeLog
  - Splitted the package into varnish, libvarnish1 and
    libvarnish1-devel


author: Ingvar Hagelund <ingvar@linpro.no> - 1.0.3-3
changelog:
  - Made post-1.0.3 changes into a patch to the upstream tarball
  - First Fedora Extras Package Review Request


author: Ingvar Hagelund <ingvar@linpro.no> - 1.0.3-4
changelog:
  - More small specfile fixes for Fedora Extras Package
    Review Request, see bugzilla ticket 230275
  - Removed rpath (only visible on x86_64 and probably ppc64)


author: Ingvar Hagelund <ingvar@linpro.no> - 1.0.3-5
changelog:
  - Added the dist tag
  - Exchanged  RPM_BUILD_ROOT variable for buildroot macro
  - Removed stripping of binaries to create a meaningful debug package
  - Removed BuildRoot and URL from subpackages, they are picked from the
    main package
  - Removed duplication of documentation files in the subpackages
  - 'chkconfig --list' removed from post script
  - Package now includes _sysconfdir/varnish/
  - Trimmed package information
  - Removed static libs and .so-symlinks. They can be added to a -devel package
    later if anybody misses them


author: Ingvar Hagelund <ingvar@linpro.no> - 1.0.3-6
changelog:
  - Removed unnecessary macro lib_name
  - Fixed inconsistently use of brackets in macros
  - Added a condrestart to the initscript
  - All manfiles included, not just the compressed ones
  - Removed explicit requirement for ncurses. rpmbuild figures out the 
    correct deps by itself.
  - Added ulimit value to initskript and sysconfig file
  - Many thanks to Matthias Saou for valuable input


author: Ingvar Hagelund <ingvar@linpro.no> - 1.0.3-7
changelog:
  - Simplified the references to the subpackage names
  - Added init and logrotate scripts for varnishlog


author: Ingvar Hagelund <ingvar@linpro.no> - 1.0.svn-20070511
changelog:
  - Threw latest changes into svn trunk
  - Removed the conversion of manpages into utf8. They are all utf8 in trunk


author: Ingvar Hagelund <ingvar@linpro.no> - 1.0.svn-20070517
changelog:
  - Wrapping up for 1.0.4
  - Changes in sysconfig and init scripts. Syncing with files in
    trunk/debian


author: Ingvar Hagelund <ingvar@linpro.no> - 1.0.4-2
changelog:
  - Repack from unchanged 1.0.4 tarball
  - Final review request and CVS request for Fedora Extras
  - Repack with extra obsoletes for upgrading from older sf.net package


author: Ingvar Hagelund <ingvar@linpro.no> - 1.1.svn
changelog:
  - Update for 1.1 branch
  - Added the devel package for the header files and static library files
  - Added a varnish user, and fixed the init script accordingly


author: Ingvar Hagelund <ingvar@linpro.no> - 1.1.1-3
changelog:
  - Added a patch, changeset 1913 from svn trunk. This makes varnish
    more stable under specific loads.


author: Ingvar Hagelund <ingvar@linpro.no> - 2.0-0.3.20080825svn3125
changelog:
  - Fixing up init script according to newer Fedora standards
  - The build now runs the test suite after compiling
  - Requires initscripts
  - Change default.vcl from nothing but comments to point to localhost:80,


author: Ingvar Hagelund <ingvar@linpro.no> - 2.0-0.5.beta1
changelog:
  - Bumped version numbers and source url for first beta release \o/
  - Added a missing directory to the libs-devel package (Michael Schwendt)
  - Added the LICENSE file to the libs-devel package
  - Moved make check to its proper place
  - Removed superfluous definition of lockfile in initscripts


author: Ingvar Hagelund <ingvar@linpro.no> - 2.0-0.6.beta1
changelog:
  - Added a commented option for max coresize in the sysconfig script
  - Added a comment in README.redhat about upgrading from 1.x to 2.0


author: Ingvar Hagelund <ingvar@linpro.no> - 2.0-0.8.beta1
changelog:
  - Added a patch from r3171 that fixes an endian bug on ppc and ppc64
  - Added a hack that changes the varnishtest ports for 64bits builds,
    so they can run in parallell with 32bits build on same build host


author: Ingvar Hagelund <ingvar@linpro.no> - 2.0-0.11.rc1
changelog:
  - 2.0-rc1 released. New upstream sources
  - Added a patch for pagesize to match redhat's rhel5 ppc64 koji build boxes
  - Added a patch for test a00008, from r3269
  - Removed condrestart in postscript at upgrade. We don't want that


author: Ingvar Hagelund <ingvar@linpro.no> - 2.0-1
changelog:
  - 2.0 released. New upstream sources
  - Disabled jemalloc on ppc and ppc64. Added a note in README.redhat
  - Synced to upstream again. No more patches needed


author: Ingvar Hagelund <ingvar@linpro.no> - 2.0-2
changelog:
  - Readded the debugflag patch. It's so practical
  - Added a strange workaround for make check on ppc64


author: Ingvar Hagelund <ingvar@linpro.no> - 2.0.1-2
changelog:
  - Removed the requirement for kernel => 2.6.0. All supported
    platforms meets this, and it generates strange errors in EPEL


author: Ingvar Hagelund <ingvar@linpro.no> - 2.0.6-2
changelog:
  - Added a test that enables jemalloc on ppc if the kernel is
    not a rhel5 kernel (as on redhat builders)
  - Removed tests c00031.vtc and r00387on rhel4/ppc as they fail
    on the Red Hat ppc builders (but works on my rhel4 ppc instance)
  - Added a patch that fixes broken changes-2.0.6.html in doc


author: Ingvar Hagelund <ingvar@linpro.no> - 2.1.0-1
changelog:
  - New upstream release; note: Configuration changes, see the README
  - Removed unneeded patches 
  - CVE-2009-2936: Added a patch from Debian that adds the -S option 
    to the varnisdh(1) manpage and to the sysconfig defaults, thus
    password-protecting the admin interface port (#579536,#579533)
  - Generates that password in the post script, requires mkpasswd
  - Added a patch from Robert Scheck for explicit linking to libm
  - Requires pcre


author: Ingvar Hagelund <ingvar@linpro.no> - 2.1.1-1
changelog:
  - New upstream release
  - Added a fix for missing pkgconfig/libpcre.pc on rhel4
  - Added a patch from trunk making the rpm buildable on lowspec
    build hosts (like Red Hat's ppc build farm nodes)
  - Removed patches that are merged upstream


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 2.1.4-0.svn20100824r5117
changelog:
  - Replaced specific include files with a wildcard glob
  - Needs python-sphinx and deps to build sphinx documentation
  - Builds html and latex documentation. Put that in a subpackage varnish-docs


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 2.1.4-1
changelog:
  - New upstream release
  - New URL for source tarball and main website
  - Prebuilt html docs now included, use that instead of running sphinx
  - Putting sphinx generated doc in a separate subpackage
  - Replaced specific include files with a wildcard glob
  - Needs python-sphinx and deps to build sphinx documentation


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 2.1.4-4
changelog:
  - Added a patch fixing a missing echo in the init script that
    masked failure output from the script
  - Added a patch from upstream, fixing a problem with Content-Length
    headers (upstream r5461, upstream bug #801)
  - Added a patch from upstream, adding empty Default-Start and Default-Stop
    to initscripts for better lsb compliance
  - Added varnish_reload_vcl from trunk
  - Synced descriptions from release spec


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 2.1.5-1
changelog:
  - New upstream release
  - New download location
  - Moved varnish_reload_vcl to sbin
  - Removed patches included upstream
  - Use jemalloc as system installed library


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 3.0.2-1
changelog:
  - New upstream version 3.0.2
  - Removed INSTALL as requested by rpmlint
  - Added a ld.so.conf.d fragment file listing libdir/varnish 
  - Removed redundant doc/html/_sources
  - systemd support from fedora 17
  - Stopped using macros for make and install, according to 
    Fedora's packaging guidelines
  - Changes merged from upstream:
    - Added suse_version macro
    - Added comments on building from a git checkout
    - mkpasswd -> uuidgen for fewer dependencies
    - Fixed missing quotes around cflags for pcre
    - Removed unnecessary 32/64 bit parallell build hack as this is fixed upstream
    - Fixed typo in configure call, disable -> without
    - Added lib/libvgz/.libs to LD_LIBRARY_PATH in make check
    - Added section 3 manpages
    - Configure with --without-rst2man --without-rst2html
    - changelog entries
  - Removed unnecessary patch for system jemalloc, upstream now supports this


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 3.0.2-2
changelog:
  - Added PrivateTmp=true to varnishd unit file, closing #782539
  - Fixed comment typos in varnish unit file


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 3.0.3-1
changelog:
  - New upstream release
  - Remove unneeded hacks for ppc
  - Remove hacks for rhel4, we no longer support that
  - Remove unneeded hacks for docs, since we use the pregenerated docs
  - Add new systemd scriptlets from f18+
  - Added a patch switching off pcre jit on i386 and ppc to avoid upstream bug #1191


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 3.0.3-5
changelog:
  - Added macro _hardened_build to enforce compiling with PIE, closes #955156
  - moved ldconfig in postun script to a shell line, since the following lines
    may expand to more shell commands on fedora >=18
  - Corrected some bogus dates in the changelog


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 3.0.4-1
changelog:
  - New upstream release
  - Added libedit-devel to the build reqs
  - Changed the old-style initrc sed patching to a blacklist as in upstream
  - Some tab vs space cleanup to make rpmlint more happy
  - Added requirement of redhat-rpm-config, which provides redhat-hardened-cc1,
    needed for _hardened_build, closes #975147
  - Removed no-pcre patch, as pcre is now switched off by default upstream


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 3.0.4-2
changelog:
  - Changed default mask for varnish log dir to 700, closing #915413 
  - Added a patch for CVE-2013-4484 from upstream, closing #1025128


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.0-0.2.tp2+20140306
changelog:
  - First try on wrapping 4.0.0-tp2+ daily snapshot series
  - Added the rc and __find_provides macros from upstream
  - Added LD_LIBRARY_PATH fix for varnishd-to-sphinx doc thing
  - Changed LD_LIBRARY_PATH for make check to something more readable
  - etc/zope-plone.vcl is gone. example.vcl replaces default.vcl as example vcl doc
  - Now using example.vcl for /etc/varnish/default.vcl
  - Added docdir to configure call, to get example docs in the right place
  - Systemd scripts are now upstream
  - Added some explicit provides not found automatically


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.0-3
changelog:
  - Added a patch that fixes broken find_provides and hard coded provides
    from upstream
  - Added _isa macro to the libs dependency and updated Group definitions to
    more modern tags, closes bz 1090196
  - Added aclocal macros to libs-devel sub package


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.2-1
changelog:
  - New upstream release
  - Rebased sphinx makefile patch
  - Added systemd services patch from Federico Schwindt


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.3-1
changelog:
  - New upstream release
  - Removed systemd patch included upstream
  - Rebased trivial Werr-patch for varnish-4.0.3
  - Added patch to build on el5


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.3-5
changelog:
  - Added example vcl files explicitly. They are installed by make, but
    have been removed by the cleaning of docroot in older rpmbuild. This makes
    varnish build again in rawhide


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.0-0.0.tp1
changelog:
  - New upstream tech preview release
  - Removed patches included upstream
  - Prebuild html docs now placed in doc dir already


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.0-1
changelog:
  - New upstream release 4.1.0
  - Changed buildreqs list to be one per line
  - Skipped patches included upstream
  - Rebased sphinx build patch
  - Changed description to match upstream
  - Added basic buildreqs gcc and make
  - Included vcs_version.h and vrt.h to produce correct provides, even 
    when building in a non-standard buildroot
  - Patched local find_provides similarily
  - Added a couple of patches that adjusts test values for the koji 
    i686 and ppc64 build servers
  - Added -fPIC and -pie for el6 rebuilds
  - redhat subdir is now fetched from new upstream gitrepo


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.1-1
changelog:
  - New upstream release
  - Rebased sphinx build patch
  - Removed patch for dns corner case, it has been fixed upstream
  - Removed patch for pcre madness test. It has been removed
  - Added new source pkg-varnish-cache from github, replacing varnish-cache-redhat
  - Also stop varnishlog and varnishncsa on package removal
  - Removed redhat/README.rst. It is no longer included upstream


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.1-2
changelog:
  - Added patch from upstream, daemonizing varnishd in systemd, as
    it handles SIGHUP otherwice when running foregrounded under systemd


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.1-3
changelog:
  - Added "-ffloat-store -fexcess-precision=standard" to CFLAGS on i386
    to work around a bug in gcc6, see
    https://github.com/dhobsd/Varnish-Cache/commit/9f1035d 
  - Quieted unpacking of distro package source


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.2-1
changelog:
  - New upstream realease
  - New checkout of pkg-varnish-cache from github
  - Removed systemd patches now merged upstream
  - Updated fix_python_24 patch for el5
  - General i386 floating point precision fix (was fix for gcc6) now for more
    fedoras/el variants


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.3-1
changelog:
  - New upstream release
  - New snapshot of pkg-varnish, commit 4e27994
  - README is now named README.rst
  - Rebased Werror patch for el6
  - vmod vcc files readable for all users
  - set explicit python version in vmodtool.py
  - Remove superflous Makefile.in.orig generated by patch


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.3-4
changelog:
  - Removed out-commented stuff about building from git
  - Removed out-commented sub package -libs-static
  - Use user varnish also for varnishlog and varnishncsa (#1371181)
  - Changed owner of /var/log/varnish, so varnishlog/ncsa can start (#1371181)
  - Reduced the number of parallell checks, to not overflow the builders


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.3-5
changelog:
  - Changed ownership of varnishlog and varnishncsa logs, as previous
    versions have had them run as root
  - Removed old outcommented config that is no longer in use


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 5.0.0-1
changelog:
  - New upstream release: 5.0.0
  - Rebased patches for 5.0.0
  - Added patch from upstream fixing a h/2 bug visible on secondary arches
  - New snapshot of pkg-varnish
  - Some cosmetic changes to reduce the diff to the upstream specfile
  - Renamed subpackage varnish-libs-devel to just varnish-devel
    (as in upstream)
  - Removed varnishlog initrc and systemd start scripts, as in upstream
    (Nobody should run varnishlog as a daemon continously)


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 5.1.1-1
changelog:
  - New upstream release
  - Rebased patches for 5.1.1
  - Removed patches merged upstream
  - Pulled support for rhel5 and clones
  - Updated pkg-varnish checkout to 92373fe


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 5.1.2-1
changelog:
  - New upstream release
  - Updated pkg-varnish checkout to 5b97619, setting systemd memlock limit
    to actual 82MB, as it says in the comment
  - Disabled stripping and building of debug packages, upstream issue #2269


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.1.3-2
changelog:
  - Disabled jemalloc on aarch64, as it fails reproducably
  - Disabled running make check. Too many timing issues. All tests run
    successfully on all arches from time to time, but not in a single
    run.


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.2.0-2
changelog:
  - Use ix86 macro for all ifarch matches of 32bit x86 hardware
  - Added Makefile hack for el6 also to libvarnishapi


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.2.1-1
changelog:
  - New upstream release. A security release
    Includes fix for CVE-2017-8807, closes 1512798, 1513523, 1513524


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.2.1-3
changelog:
  - Disabled running make check again. Too many timing issues. All tests run
    successfully on all arches from time to time, but seldom in a single
    run while all redhat builders are loaded.


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.2.1-4
changelog:
  - Disabled pcre-jit on x86_64 and arm in rawhide for now. It does not
    work, and makes other varnish dependant packages crash
    (upstream bug #2521)


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 6.0.0-1
changelog:
  - New upstream release
  - Added a patch that fixes _FORTIFY_SOURCE=2 on copr/el6
  - Added a patch fixing compilation on epel6
  - Fresh checkout of pkg-varnish-cache
  - Updated find-requires sed fix to update variant and moved it to prep
  - Removed -libs subpackage
  - varnish_reload_vcl changed name to varnishreload, as in upstream
  - varnish.params is gone. To override startup configuration,
    use /etc/systemd/system/varnish.service
  - Dropped patch and sed fixes for find-provides, as it is fixed upstream
  - Dropped patch for test vsv00002, as it is fixed upstream
  - Droppet patch for python3, as it is included upstream
  - Dropped buildreq on groff, as tarball includes prebuilt manpages
  - Dropped systemv to systemd helpers
  - Updated project url
  - Use prebuilt html files for docs subpackage
  - Dropped unnecessary explicit require of initscripts, closes #1592398


author: Lubos Uhliarik <luhliari@redhat.com> - 6.0.6-2
changelog:
  - new version 6.0.6
  - Resolves: #1795673 - RFE: rebase varnish:6 to latest 6.0.x LTS
  - Resolves: #1790907 - CVE-2019-20637 varnish: not clearing pointer between two
    client requests leads to information disclosure
  - Resolves: #1763958 - CVE-2019-15892 varnish:6/varnish: denial of service 
    handling certain crafted HTTP/1 requests


author: Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-1
changelog:
  - new version 6.0.8
  - Resolves: #1982862 - CVE-2021-36740 varnish:6/varnish: HTTP/2 request
    smuggling attack via a large Content-Length header for a POST request


author: Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-1.1
changelog:
  - Resolves: #2047648 - CVE-2022-23959 varnish:6/varnish: Varnish HTTP/1 Request
    Smuggling Vulnerability


author: Luboš Uhliarik <luhliari@redhat.com> - 6.0.13-1
changelog:
  - new version 6.0.13
  - Resolves: RHEL-30378 - varnish:6/varnish: HTTP/2 Broken Window Attack may
    result in denial of service (CVE-2024-30156)


author: Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-2
changelog:
  - Resolves: #2047650 - CVE-2022-23959 varnish:6/varnish: Varnish HTTP/1 Request
    Smuggling Vulnerability


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 0.9.0-1
changelog:
  - First wrap for fedora
  - Uses some old-style specfile components for el5 compatibility, including
    the usage of the BuildRoot header and cleaning the buildroot before install


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 0.9.1-1
changelog:
  - New upstream release
  - Build man pages, buildrequires python-docutils
  - Added a patch for tests/cookie/08-overflow.vtc, upping workspace_client,
    the default is too small on 32bit
  - Removed extra cflags for el5, fixed with patch from upstream
  - Force readable docs and debug files, they tend to end up with mode 600


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 0.9.2-0.1.20160924gitdaa4f1d
changelog:
  - Upstream git checkout with support for varnish-5.0
  - Removed patches that are included upstream
  - el5 build fix


author: Lubos Uhliarik <luhliari@redhat.com> - 0.15.0-1
changelog:
  - updated to newer version (0.15.0)
  - Drop EPEL and older Fedora releases support
  - Drop broken manual ABI dependency to Varnish
  - Drop commented out references to past patches
  - Verbose test suite
  - Simplified configure step
  - Dependencies cleanup


author: gil cattaneo <puntogil@libero.it> 0:1.7-18
changelog:
  - fix FTBFS rhbz#1240035
  - fix BR list, change log4j with log4j12
  - set javac source/target to 1.6
  - disable Java8doc doclint
  - remove werken-xpath Import/Export refences in manifest file
  - resolve some rpmlint problems
  - remove zero-length file
  - introduce license macro


author: Marek Kasik <mkasik@redhat.com> - 3.22.0-22
changelog:
  - Rebuild due to new version of FreeRDP
  - Fix an issue when RDP connection shows just black screen
  - Resolves: #1839744


author: Jonathon Jongsma <jjongsma@redhat.com> - 3.2.0-13
changelog:
  - cli: --filesystem: add binary.sandbox.mode and source.socket (rhbz#2045932)
  - nodedev: Improve error with unknown address strings (rhbz#2017840)


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.0.0-1
changelog:
  - Rebased to virt-manager-4.0.0 (rhbz#2100525)
  - virt-install: add support for qemu-vdagent channel (rhbz#2060724)
  - virt-manager: add support for qemu-vdagent channel (rhbz#2060724)


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-1
changelog:
  - Rebased to virt-manager-4.1.0 (rhbz#2135791)
  - cloner: Sync <uuid> and <sysinfo> system uuid (rhbz#2038040)


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-3
changelog:
  - progress: Fix showing correct final total (rhbz#2156247)
  - virtinstall: Fix the allocating disk size printed by the progress bar (rhbz#2156247)
  - virtinstall: Hide total_size in the progress bar if it doesn't need (rhbz#2156247)


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-4
changelog:
  - virt-install: Recommend '--boot uefi' (rhbz#2112154)
  - virt-install: Document Secure Boot setups (rhbz#2112154)


author: Daniel Berrange <berrange@redhat.com> - 0.2.0-1
changelog:
  - Added wizard for creating virtual machines
  - Added embedded serial console
  - Added ability to take screenshots


author: Daniel Berrange <berrange@redhat.com> - 0.2.1-1
changelog:
  - Updated to 0.2.1 tar.gz
  - Added rules to install/uninstall gconf schemas in preun,post,pre
    scriptlets
  - Updated URL for source to reflect new upstream download URL


author: Daniel Berrange <berrange@redhat.com> - 0.2.1-3.fc6
changelog:
  - Added requires on pygtk2-libglade & librsvg2 (bz 205941 & 205942)
  - Re-arrange to use console-helper to launch app
  - Added 'dist' component to release number


author: Daniel Berrange <berrange@redhat.com> - 0.2.2-1.fc6
changelog:
  - Fix event handling in create VM wizard (bz 206660 & 206186)
  - Fix close button in about dialog (bz 205943)
  - Refresh .pot files
  - Turn on VNC scrollbars fulltime to avoid GTK window sizing issue
    which consistently resize too small.


author: Daniel Berrange <berrange@redhat.com> - 0.2.3-1.fc6
changelog:
  - Require xeninst >= 0.93.0 to fix block backed devices
  - Skip para/fully-virt step when going back in wizard if not HVM host (bz 207409)
  - Fix handling of modifier keys in VNC console so Alt key doesn't get stuck (bz 207949)
  - Allow sticky modifier keys by pressing same key 3 times in row (enables Ctrl-Alt-F1
    by doing Ctrl Ctrl Ctrl  Alt-F1)
  - Improved error handling during guest creation
  - Log errors with python logging, instead of to stdout
  - Remove unused buttons from main domain list window
  - Switch out of full screen & release key grab when closing console
  - Trim sparkline CPU history graph to 40 samples max
  - Constraint VCPU adjuster to only allow upto guest's max VCPU count
  - Show guest's max & current VCPU count in details page
  - Fix rounding of disk sizes to avoid a 1.9 GB disk being rounded down to 1 GB
  - Use raw block device path to CDROM not mount point for HVM guest (bz 206965)
  - Fix visibility of file size spin box (bz 206186 part 2)
  - Check for GTK failing to open X11 display (bz 205938)


author: Daniel P. Berrange <berrange@redhat.com> 0.2.3-2.fc6
changelog:
  - Fix segv in sparkline code when no data points are defined (bz  208185)
  - Clamp CPU utilization between 0 & 100% just in case (bz 208185)


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.5-1.fc7
changelog:
  - Switch to use python-virtinst instead of python-xeninst due to 
    renaming of original package
  - Disable keyboard accelerators when grabbing mouse to avoid things like
    Ctrl-W closing the local window, instead of remote window bz 210364
  - Fix host memory reporting bz 211281
  - Remove duplicate application menu entry bz 211230
  - Fix duplicated mnemonics (bz 208408)
  - Use blktap backed disks if available
  - Use a drop down list to remember past URLs (bz 209479)
  - Remove unused help button from preferences dialog (bz 209251)
  - Fix exception when no VNC graphics is defined
  - Force immediate refresh of VMs after creating a new one
  - Improve error reporting if run on a kernel without Xen (bz 209122)
  - More fixes to avoid stuck modifier keys on focus-out (bz 207949)


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.6-1.fc7
changelog:
  - Imported translations from Fedora i18n repository
  - Make (most) scrollbar policies automatic
  - Set busy cursor while creating new VMs
  - Preference for controlling keygrab policy
  - Preference for when to automatically open console (bz 211385)
  - Re-try VNC connection attempt periodically in case VNC daemon
    hasn't finished starting up
  - Added activation of URLs for about dialog (bz 210782)
  - Improved error reporting when connecting to HV (bz 211229)
  - Add command line args to open specific windows
  - Don't skip para/full virt wizard step - instead gray out full
    virt option & tell user why
  - Change 'physical' to 'logical' when refering to host CPUs
  - Include hostname in titlebar
  - Disable wizard sensitivity while creating VM


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.6-3.fc7
changelog:
  - Imported latest translations from Fedora i18n repository (bz 203783)
  - Use 127.0.0.1 address for connecting to VNC console instead of
    localhost to avoid some issue with messed up /etc/hosts.
  - Add selector for sparse or non-sparse file, defaulting to non-sparse.
    Add appropriate warnings and progress-bar text. (bz 218996)
  - Disable memory ballooning & CPU hotplug for HVM guests (bz 214432)
  - Updated memory-setting UI to include a hard upper limit for physical
    host RAM
  - Added documentation on the page warning that setting virtual host RAM
    too high can exhaust the memory of the machine
  - Handle errors when hostname resolution fails to avoid app exiting (bz 216975)


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.0-1.fc7
changelog:
  - Added support for managing inactive domains
  - Require virt-inst >= 0.100.0 and libvirt >= 0.1.11 for ianctive
    domain management capabilities
  - Add progress bars during VM creation stage
  - Improved reliability of VNC console
  - Updated translations again
  - Added destroy option to menu bar to forceably kill a guest
  - Visually differentiate allocated memory, from actual used memory on host
  - Validate file magic when restoring a guest from a savd file
  - Performance work on domain listing
  - Allow creation of non-sparse files
  - Fix backspace key in serial console


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.1-1.fc7
changelog:
  - Added support for managing QEMU domains
  - Automatically grab mouse pointer to workaround dual-cursor crazyness


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.2-1.fc7
changelog:
  - Added online help to all windows
  - Bug fixes to virtual console popup, key grab & accelerator override


author: Daniel P. Berrange <berrange@redhat.com> - 0.4.0-1.fc7
changelog:
  - Support for managing virtual networks
  - Ability to attach guest to virtual networks
  - Automatically set VNC keymap based on local keymap
  - Support for disk & network device addition/removal


author: Daniel P. Berrange <berrange@redhat.com> - 0.4.0-2.fc7
changelog:
  - Refresh po file translations (bz 238369)
  - Fixed removal of disk/network devices
  - Fixed toolbar menu option state
  - Fixed file dialogs & default widget states


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.0-1.fc8
changelog:
  - Updated to 0.5.0 release
  - Support for managing remote hosts
  - Switch to use GTK-VNC for the guest console


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.1-1.fc8
changelog:
  - Updated to 0.5.1 release
  - Open connections in background
  - Make VNC connection retries more robust
  - Allow changing of CDROM media on the fly
  - Add PXE boot installation of HVM guests
  - Allow tunnelling VNC over SSH


author: Daniel P. Berrange <berrange@redhat.com> - 0.5.2-1.fc8
changelog:
  - Update to 0.5.2 release
  - No scrollbars for high res guest in low res host (rhbz 273181)
  - Unable to remove network device (rhbz 242900)
  - Fixed broken menu items (rhbz 307551)
  - Require libvirt 0.3.3 to get CDROM change capability for Xen


author: Cole Robinson <crobinso@redhat.com> - 0.6.0-1.fc10
changelog:
  - Update to 0.6.0 release
  - Add libvirt storage management support
  - Basic support for remote guest installation
  - Merge VM console and details windows
  - Poll avahi for libvirtd advertisement
  - Hypervisor autoconnect option
  - Add sound emulation when creating new guests


author: Cole Robinson <crobinso@redhat.com> - 0.6.0-2.fc10
changelog:
  - Add gnome-python2-gnome requirement.
  - Allow seeing connection details if disconnected.
  - Updated catalan translation.
  - Update dutch translation.
  - Update german translation. (bug 438136)
  - Fix showing domain console when connecting to hypervisor.
  - Update POTFILES to reflect reality (bug 466835)


author: Cole Robinson <crobinso@redhat.com> - 0.6.0-3.fc10
changelog:
  - Add dbus-x11 to Requires (bug 467886)
  - Fedora translation updates (bug 467808)
  - Don't add multiple sound devices if install fails
  - Only popup volume path copy option on right click
  - Fix a variable typo


author: Cole Robinson <crobinso@redhat.com> - 0.6.0-5.fc10
changelog:
  - Fix spec for building on F9
  - Update 'New VM' virt descriptions to be less black and white (bz 470563)


author: Cole Robinson <crobinso@redhat.com> - 0.6.1-1
changelog:
  - Update to 0.6.1 release
  - Disk and Network VM stats reporting
  - VM Migration support
  - Support adding sound devices to existing VMs
  - Allow specifying device model when adding a network device to an existing VM


author: Cole Robinson <crobinso@redhat.com> - 0.6.1-4.fc11
changelog:
  - Update polish translation (bz 263301)
  - Fix sending ctrl-alt-del to guest
  - Fix cpu + mem stats options to remember preference.


author: Cole Robinson <crobinso@redhat.com> - 0.7.0-1.fc11
changelog:
  - Update to release 0.7.0
  - Redesigned 'New Virtual Machine' wizard
  - Option to remove storage when deleting a virtual machine.
  - File browser for libvirt storage pools and volumes
  - Physical device assignment (PCI, USB) for existing virtual machines.


author: Cole Robinson <crobinso@redhat.com> - 0.7.0-2.fc11
changelog:
  - Back compat fixes for connecting to older xen installations (bz 489885)
  - Don't show harmless NoneType error when launching new VM details window


author: Cole Robinson <crobinso@redhat.com> - 0.7.0-3.fc11
changelog:
  - Fix incorrect max vcpu setting in New VM wizard (bz 490466)
  - Fix some OK/Cancel button ordering issues (bz 490207)
  - Use openAuth when duplicating a connection when deleting a VM
  - Updated translations (bz 493795)


author: Mark McLoughlin <markmc@redhat.com> - 0.7.0-5.fc12
changelog:
  - Fix 'opertaing' typo in 'New VM' dialog (#495128)
  - Allow details window to resize again (#491683)
  - Handle collecting username for vnc authentication (#499589)
  - Actually handle arch config when creating a VM (#499145)
  - Log libvirt capabilities at startup to aid debugging (#500337)


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-1.fc12
changelog:
  - Update to release 0.8.0
  - New 'Clone VM' Wizard
  - Improved UI, including an overhaul of the main 'manager' view
  - System tray icon for easy VM access (start, stop, view console/details)
  - Wizard for adding serial, parallel, and video devices to existing VMs.


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-3.fc12
changelog:
  - Fix disk XML mangling via connect/eject cdrom (bz 516116)
  - Fix delete button sensitivity (bz 518536)
  - Fix populating text box from storage browser in 'New VM' (bz 517263)
  - Fix a traceback in an 'Add Hardware' error path (bz 517286)


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-4.fc12
changelog:
  - Don't close libvirt connection for non-fatal errors (bz 522168)
  - Manager UI tweaks
  - Generate better errors if disk/net stats polling fails


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-5.fc12
changelog:
  - Refresh host disk space in create wizard (bz 502777)
  - Offer to fix disk permission issues (bz 517379)


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-6.fc13
changelog:
  - Fix VCPU hotplug
  - Remove access to outdated docs (bz 522823, bz 524805)
  - Update VM state text in manager view (bz 526182)
  - Update translations (bz 493795)


author: Cole Robinson <crobinso@redhat.com> - 0.8.0-8.fc13
changelog:
  - Don't allow creating a volume without a name (bz 526111)
  - Don't allow volume allocation > capacity (bz 526077)
  - Add tooltips for toolbar buttons (bz 524083)


author: Cole Robinson <crobinso@redhat.com> - 0.8.1-1.fc13
changelog:
  - Update to release 0.8.1
  - VM Migration wizard, exposing various migration options
  - Enumerate CDROM and bridge devices on remote connections
  - Support storage pool source enumeration for LVM, NFS, and SCSI


author: Cole Robinson <crobinso@redhat.com> - 0.8.2-1.fc13
changelog:
  - Update to 0.8.2 release
  - Fix first virt-manager run on a new install
  - Enable floppy media eject/connect


author: Cole Robinson <crobinso@redhat.com> - 0.8.3-1.fc13
changelog:
  - Update to 0.8.3 release
  - Manage network interfaces: start, stop, view, provision bridges, bonds, etc.
  - Option to 'customize VM before install'.


author: Cole Robinson <crobinso@redhat.com> - 0.8.3-2.fc14
changelog:
  - Fix using a manual 'default' pool (bz 557020)
  - Don't force grab focus when app is run (bz 548430)
  - Check packagekit for KVM and libvirtd (bz 513494)
  - Fake a reboot implementation if libvirt doesn't support it (bz 532216)
  - Mark some strings as translatable (bz 572645)


author: Cole Robinson <crobinso@redhat.com> - 0.8.4-1.fc14
changelog:
  - Update to version 0.8.4
  - 'Import' install option, to create a VM around an existing OS image
  - Support multiple boot devices and boot order
  - Watchdog device support
  - Enable setting a human readable VM description.
  - Option to manually specifying a bridge name, if bridge isn't detected


author: Cole Robinson <crobinso@redhat.com> - 0.8.4-2.fc14
changelog:
  - Only close connection on specific remote errors
  - Fix weird border in manager UI (bz 583728)
  - Fix broken icons
  - Cancel post-install reboot if VM is forced off
  - Fix traceback if customizing a livecd install (bz 583712)
  - Add pool refresh button
  - Properly autodetect VNC keymap (bz 586201)
  - Fix traceback when reconnecting to remote VNC console (bz 588254)
  - Fix remote VNC connection with zsh as default shell


author: Cole Robinson <crobinso@redhat.com> - 0.8.5-1.fc15
changelog:
  - Update to 0.8.5
  - Improved save/restore support
  - Option to view and change disk cache mode
  - Configurable VNC keygrab sequence (Michal Novotny)


author: Cole Robinson <crobinso@redhat.com> - 0.8.6-1.fc15
changelog:
  - Update to 0.8.6
  - SPICE support (requires spice-gtk) (Marc-André Lureau)
  - Option to configure CPU model
  - Option to configure CPU topology
  - Save and migration cancellation (Wen Congyang)
  - Save and migration progress reporting
  - Option to enable bios boot menu
  - Option to configure direct kernel/initrd boot


author: Cole Robinson <crobinso@redhat.com> - 0.8.7-1.fc16
changelog:
  - Rebased to version 0.8.7
  - Allow renaming an offline VM
  - Spice password support (Marc-André Lureau)
  - Allow editting NIC <virtualport> settings (Gerhard Stenzel)
  - Allow enabling/disabling individual CPU features
  - Allow easily changing graphics type between VNC/SPICE for existing VM
  - Allow easily changing network source device for existing VM


author: Cole Robinson <crobinso@redhat.com> - 0.8.7-3.fc16
changelog:
  - Fix broken cs.po which crashed gettext
  - Fix offline attach fallback if hotplug fails
  - Offer to attach spicevmc if switching to spice


author: Cole Robinson <crobinso@redhat.com> - 0.8.7-5.fc16
changelog:
  - Stop netcf errors from flooding logs (bz 676920)
  - Bump default mem for new guests to 1GB so F15 installs work (bz
    700480)


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-1.fc17
changelog:
  - Rebased to version 0.9.0
  - Use a hiding toolbar for fullscreen mode
  - Use libguestfs to show guest packagelist and more (Richard W.M. Jones)
  - Basic 'New VM' wizard support for LXC guests
  - Remote serial console access (with latest libvirt)
  - Remote URL guest installs (with latest libvirt)
  - Add Hardware: Support <filesystem> devices
  - Add Hardware: Support <smartcard> devices (Marc-André Lureau)
  - Enable direct interface selection for qemu/kvm (Gerhard Stenzel)
  - Allow viewing and changing disk serial number


author: Cole Robinson <crobinso@redhat.com> - 0.9.0-7
changelog:
  - Fix 'Resize to VM' graphical option (bz 738806)
  - Fix deleting guest with managed save data
  - Fix error when adding default storage
  - Don't flush XML cache on every tick
  - Use labels for non-editable network info fields (bz 738751)
  - Properly update icon cache (bz 733836)


author: Cole Robinson <crobinso@redhat.com> - 0.9.1-1
changelog:
  - Rebased to version 0.9.1
  - Support for adding usb redirection devices (Marc-André Lureau)
  - Option to switch usb controller to support usb2.0 (Marc-André Lureau)
  - Option to specify machine type for non-x86 guests (Li Zhang)
  - Support for filesystem device type and write policy (Deepak C Shetty)
  - Many bug fixes!


author: Cole Robinson <crobinso@redhat.com> - 0.9.1-2
changelog:
  - Fix error reporting for failed remote connections (bz 787011)
  - Fix setting window title when VNC mouse is grabbed (bz 788443)
  - Advertise VDI format in disk details (bz 761300)
  - Don't let an unavailable host hang the app (bz 766769)
  - Don't overwrite existing create dialog when reshowing (bz 754152)
  - Improve tooltip for 'force console shortcuts' (bz 788448)


author: Cole Robinson <crobinso@redhat.com> - 0.9.1-3
changelog:
  - Actually make spice the default (bz 757874)
  - Only depend on spice on arch it is available (bz 811030)
  - Depend on libgnome-keyring (bz 811921)


author: Cole Robinson <crobinso@redhat.com> - 0.9.1-4
changelog:
  - Fix connecting to console with specific listen address
  - Fix regression that dropped spice dependency (bz 819270)


author: Cole Robinson <crobinso@redhat.com> - 0.9.3-1
changelog:
  - Rebased to version 0.9.3
  - Convert to gtkbuilder: UI can now be editted with modern glade tool
  - virt-manager no longer runs on RHEL5, but can manage a remote RHEL5
    host
  - Option to configure spapr net and disk devices for pseries (Li Zhang)
  - Offer to install openssh-askpass if we need it (bz 754484)
  - Don't leave defunct SSH processes around (bz 757892)
  - Offer to start libvirtd after install (bz 791152)
  - Fix crash when deleting storage volumes (bz 805950)
  - Show serial device PTY path again (bz 811760)
  - Fix possible crash when rebooting fails (bz 813119)
  - Offer to discard state if restore fails (bz 837236)


author: Cole Robinson <crobinso@redhat.com> - 0.9.4-2
changelog:
  - Fix KVM package install on app first run
  - Fix listing domain with 'suspended' state (bz #850954)
  - Fix 'browse local' behavior when choosing directory (bz #855335)
  - Fix libgnome-keyring dep (bz #811921)


author: Cole Robinson <crobinso@redhat.com> - 0.9.4-3
changelog:
  - Fix first run packagekit interaction (bz #870851)
  - Fix another backtrace if guest is pmsuspended (bz #871237)


author: Cole Robinson <crobinso@redhat.com> - 0.9.4-4
changelog:
  - Use correct KVM package names on first run (bz #873878)
  - network: fix parsing ip blocks with prefix= (bz #872814)
  - Don't recommend all of libvirt, just the kvm bits (bz #872246)


author: Cole Robinson <crobinso@redhat.com> - 0.9.5-1
changelog:
  - Rebased to version 0.9.5
  - Enable adding virtio-scsi disks (Chen Hanxiao) (bz 887584)
  - Support security auto-relabel setting (Martin Kletzander)
  - Support disk iotune settings (David Shane Holden)
  - Support 'reset' as a reboot option (John Doyle)
  - Don't pull in non-native qemu packages on first run (bz 924469)
  - Don't create LVM volumes with alloc=0, it doesn't work (bz 872162)
  - Fix storage browser hang on KDE (bz 880781)
  - Fix package installation on KDE (bz 882024)


author: Cole Robinson <crobinso@redhat.com> - 0.10.0-0.2.gitb68faac8
changelog:
  - Fix dep on vte3 (bz #958945)
  - Fix dep on virt-manager-common (bz #958730)
  - Fix crash when installing from ISO media (bz #958641)
  - Fix poor error reporting with unknown CLI option (bz #958730)


author: Cole Robinson <crobinso@redhat.com> - 0.10.0-0.5.gitde1695b2
changelog:
  - Fix default graphics, should be spice+qxl (bz #965864)
  - Check for libvirt default network package on first run (bz #950329)
  - Fix changing VM cirrus->QXL (bz #928882)


author: Cole Robinson <crobinso@redhat.com> - 0.10.0-1
changelog:
  - Rebased to version 0.10.0
  - Fix screenshots (bz #969410)
  - Add Fedora 19 osdict option (bz #950230)
  - Fix loading libguestfs OS icons (bz #905238)
  - Make packagekit search cancellable (bz #973777)
  - Fix freeze on guest shutdown if serial console connected (bz #967968)


author: Cole Robinson <crobinso@redhat.com> - 0.10.0-3.gita2e52067
changelog:
  - Sync with git
  - Don't try to launch multiple ssh askpass dialogs at once (bz #811346)
  - Fix confusion when multiple progress dialogs are run (bz #1003101)
  - Fix error adding macvtap nic (bz #1006324)
  - Add an appdata file (bz #1011120)
  - virt-install: fix nfs:// style URLs (bz #1011177)
  - Fix spice with TLS (bz #904295)
  - Reduce impact of memory leak (bz #972371)
  - Fix parsing rawhide .treeinfo (bz #989162)


author: Cole Robinson <crobinso@redhat.com> - 0.10.0-4.git79196cdf
changelog:
  - Fix cdrom ordering if added via 'customize' (bz #905439)
  - Default to spice/qxl for virt-install (bz #911734)
  - Fill in cache and io values for new VMs (bz #967643)
  - Add dep on dconf (bz #1012884)


author: Cole Robinson <crobinso@redhat.com> - 0.10.0-5.git1ffcc0cc
changelog:
  - Fix running virt-manager on rawhide (bz #1024569)
  - Fix vcpu vs. maxvcpu UI (bz #1016318)
  - Fix app startup when run as root (bz #1016435)
  - Release serial console when details window is closed (bz #1016445)
  - Clarify snapshot VM state UI (bz #1016604)
  - Fix adding qemu-guest-agent by default (bz #1016613)
  - Fix first run app install (bz #1016825)
  - Fix error reporting if initrd fetch fails (bz #1017419)
  - Fix error reporting if app is run with no DISPLAY (bz #1021482)
  - Fix usage of install media in /home/crobinso (bz #1025355)


author: Cole Robinson <crobinso@redhat.com> - 1.0.0-1
changelog:
  - Rebased to version 1.0.0
  - New tool virt-xml: Edit libvirt XML in one shot from the command line
  - Improved defaults: qcow2, USB2, host CPU model, guest agent channel
  - Introspect command line options like --disk=? or --network=help


author: Cole Robinson <crobinso@redhat.com> - 1.0.0-2
changelog:
  - Fix open connection->lxc
  - Fix issues creating ppc64 guests
  - Fix generating disk targets from customize->addhw


author: Cole Robinson <crobinso@redhat.com> - 1.0.0-3
changelog:
  - Fix creating storage paths if directory is all digits (bz #1069351)
  - Properly close connection if tick fails (bz #1069351)
  - virt-manager: Handle unrefreshed storage pools (bz #1070883)
  - Fix unsetting 'auto resize' console property


author: Cole Robinson <crobinso@redhat.com> - 1.0.0-4
changelog:
  - virt-convert: better error if unar is not installed
  - details: Fix fallback if fetching CPU models fails (bz #1072704)
  - fsdetails: Fix adding a filesystem device (bz #1073067)
  - virt-install: Fix --location iso again, and test it (bz #1071513)
  - Handle libvirt generating invalid volume XML (bz #1072770)


author: Cole Robinson <crobinso@redhat.com> - 1.0.1-1
changelog:
  - Rebased to version 1.0.1
  - virt-install/virt-xml: New --memorybacking option (Chen Hanxiao)
  - virt-install/virt-xml: New --memtune option (Chen Hanxiao)
  - virt-manager: UI for LXC <idmap> (Chen Hanxiao)
  - virt-manager: gsettings key to disable keygrab (Kjö Hansi Glaz)
  - virt-manager: Show domain state reason in the UI (Giuseppe Scrivano)
  - Fix a number of bugs found since the 1.0.0 release


author: Cole Robinson <crobinso@redhat.com> - 1.0.1-2
changelog:
  - gfxdetails: Show port number for active autoport VM (bz #1081614)
  - connection: Hook into domain balloon event (bz #1081424)
  - details: Fix showing vcpus values in 'customize' dialog (bz #1083903)
  - details: Fix changing graphics type (bz #1083903)
  - createpool: Clarify iscsi IQN fields (bz #1084011)
  - More fixes for errors on libvirtd disconnect (bz #1069351)


author: Cole Robinson <crobinso@redhat.com> - 1.0.1-3
changelog:
  - filesystem: Fix target validation when editing device (bz #1089422)
  - details: Explicit warn that 'format' doesn't change image format (bz
    - snapshots: Fix screenshot with qxl+spice (bz #1089780)
  - Fix using storage when the directory name contains whitespace (bz #1091384)
  - packageutils: Fix install when one package is already installed (bz


author: Cole Robinson <crobinso@redhat.com> - 1.1.0-1
changelog:
  - Rebased to version 1.1.0
  - Switch to libosinfo as OS metadata database (Giuseppe Scrivano)
  - Use libosinfo for OS detection from CDROM media labels (Giuseppe
    Scrivano)
  - Use libosinfo for improved OS defaults, like recommended disk size
    (Giuseppe Scrivano)
  - virt-image tool has been removed, as previously announced
  - Enable Hyper-V enlightenments for Windows VMs
  - Revert virtio-console default, back to plain serial console
  - Experimental q35 option in new VM 'customize' dialog
  - UI for virtual network QoS settings (Giuseppe Scrivano)
  - virt-install: --disk discard= support (Jim Minter)
  - addhardware: Add spiceport UI (Marc-André Lureau)
  - virt-install: --events on_poweroff etc. support (Chen Hanxiao)
  - cli --network portgroup= support and UI support
  - cli --boot initargs= and UI support
  - addhardware: allow setting controller model (Chen Hanxiao)
  - virt-install: support setting hugepage options (Chen Hanxiao)


author: Cole Robinson <crobinso@redhat.com> - 1.1.0-2.git30db9ece2
changelog:
  - Fix app hanging at connection startup with remote host (bz #1123266)
  - Fix several issues creating host bridges (bz #1122743)
  - Only use 2 usb redir devs by default to free up USB ports (bz #1135488)
  - Create qemu-ga channels for rhel/centos 6/7 VMs (bz #1139109)


author: Cole Robinson <crobinso@redhat.com> - 1.1.0-4.git310f6527
changelog:
  - Fix crash when rebooting VMs after install (bz #1135546)
  - Fix dep on libosinfo (bz #1159370)
  - Fix PCI/USB hotplug (bz #1146297)


author: Cole Robinson <crobinso@redhat.com> - 1.1.0-6.git8ca8490c
changelog:
  - Update to latest git
  - Fix new VM disk image names when VM name changes (bz #1169141)
  - Fix missing virt-install dep on pygobject (bz #1195794)
  - Fix changing VM video type away from qxl (bz #1182710)
  - Don't use vmvga for ubuntu VMs on remote centos hosts (bz #1147662)
  - Clear vendor field when changing CPU (bz #1190851)
  - Drop bogus network domain name validation (bz #1195873)
  - Fix Fedora URL examples in virt-install man page (bz #1172818)
  - Fix misleading virt-install text after --import install (bz #1180558)


author: Cole Robinson <crobinso@redhat.com> - 1.1.0-7.git6dbe19bd8
changelog:
  - Catch ppc64le domaincapabilities errors (bz #1209723)
  - Fix missing install options for ppc64le (bz #1209720)
  - Allow adding SATA CDROM devices for q35 (bz #1207834)
  - Fix crashes with ssh spice connections (bz #1135808)
  - Drop incorrect dep on gnome-icon-theme (bz #1207061)


author: Cole Robinson <crobinso@redhat.com> - 1.2.1-1
changelog:
  - Rebased to version 1.2.1
  - Bugfix release
  - Fix connecting to older libvirt versions (Michał Kępień)
  - Fix connecting to VM console with non-IP hostname (Giuseppe Scrivano)
  - Fix addhardware/create wizard errors when a nodedev disappears
  - Fix adding a second cdrom via customize dialog


author: Cole Robinson <crobinso@redhat.com> - 1.2.1-3
changelog:
  - Fix errors with missing nodedevs (bz #1225771)
  - Fix CDROM media change if device is bootable (bz #1229819)
  - Fix adding iscsi pools (bz #1231558)
  - spec: Add LXC to default connection list (bz #1235972)
  - Fix backtrace when reporting OS error (bz #1241902)
  - Raise upper limits for lxc ID namespaces (bz #1244490)
  - Fix 'copy host CPU definition'
  - Fix displaying VM machine type when connecting to old libvirt
  - Fix qemu:///session handling in 'Add Connection' dialog
  - Fix default storage path for qemu:///session, it should be .local/share/...


author: Cole Robinson <crobinso@redhat.com> - 1.3.0-1
changelog:
  - Rebased to version 1.3.0
  - Error when trying to modify existing 9p share (bz #1257565)
  - virt-manager tries to create vmport device on non-x86 backends (bz #1259998)
  - Details/Virtual networks: Allow manually specifying a bridge for
    qemu:///session (bz #1212443)
  - [RFE] Improve Solaris 10 x86-64 support in virt-manager (bz #1262093)
  - No system tray icon in Cinnamon session (bz #1257949)
  - virt-install does not remove orphaned images on failure (bz #1212617)
  - virt-manager does not warn if it cannot find the network (bz #1212616)
  - Storage volume manager looses focus when a volume is deleted (bz #1279861)
  - Storage volume manager does not update free space (bz #1279940)
  - Reboot/Shutdown buttons does not work on aarch64 (bz #1212826)


author: Cole Robinson <crobinso@redhat.com> - 1.3.2-3
changelog:
  - Fix screenshot on F24 rawhide (bz #1297988)
  - Fix URL installs when content-length header missing (bz #1297900)


author: Cole Robinson <crobinso@redhat.com> - 1.3.2-4.20160520git2204de62d9
changelog:
  - Rebase to latest git
  - Update translations (bz #1323015)
  - Fix rawhide URL installs (bz #1322011)
  - Update viewer to work with spice GL


author: Cole Robinson <crobinso@redhat.com> - 1.4.0-4
changelog:
  - Fix fedora24 installs from incorrectly using virtio-input (bz #1391522)
  - Fix error checking extra_args for console argument


author: Cole Robinson <crobinso@redhat.com> - 1.4.0-5
changelog:
  - Fix version check for spice GL support
  - Don't return virtio1.0-net as a valid device name (bz #1399083)
  - Fix window size tracking on wayland (bz #1375175)
  - Fix 'resize to VM' on wayland (bz #1397598)


author: Cole Robinson <crobinso@redhat.com> - 1.4.1-1
changelog:
  - Rebased to version 1.4.1
  - storage/nodedev event API support (Jovanka Gulicoska)
  - UI options for enabling spice GL (Marc-André Lureau)
  - Add default virtio-rng /dev/urandom for supported guest OS
  - Cloning and rename support for UEFI VMs (Pavel Hrdina)
  - libguestfs inspection UI improvements (Pino Toscano)
  - virt-install: Add --qemu-commandline
  - virt-install: Add --network vhostuser (Chen Hanxiao)
  - virt-install: Add --sysinfo (Charles Arnold)


author: Cole Robinson <crobinso@redhat.com> - 1.4.2-1
changelog:
  - Rebased to version 1.4.2
  - New VM wixard virt-bootstrap integration (Radostin Stoyanov)
  - New VM wizard support for virtuozzo containers (Mikhail Feoktistov)
  - network UI: add support to create SR-IOV VF pool (Lin Ma)
  - Nicer OS list in New VM wizard (Pino Toscano)
  - Better defaults for UEFI secureboot builds (Pavel Hrdina)
  - Fix defaults for aarch64 VMs if graphics are requested
  - virt-install: new --memdev option (Pavel Hrdina)
  - virt-install: add --disk logical/physical_block_size (Yuri Arabadji)
  - virt-install: add --features hyperv_reset=, hyperv_synic= (Venkat Datta N
    H)


author: Cole Robinson <crobinso@redhat.com> - 1.4.3-1
changelog:
  - Rebased to version 1.4.3
  - Improve install of debian/ubuntu non-x86 media (Viktor Mihajlovski, Andrew
    Wong)
  - New virt-install --graphics listen.* (Pavel Hrdina)
  - New virt-install --disk snapshot_policy= (Pavel Hrdina)
  - New virt-install --cpu cache.* (Lin Ma)
  - Several bug fixes


author: Cole Robinson <crobinso@redhat.com> - 1.5.0-1
changelog:
  - Rebased to version 1.5.0
  - python3 prep work (Radostin Stoyanov, Cole Robinson, Cédric Bosdonnat)
  - Switch --location ISO to use isoinfo (Andrew Wong)
  - virt-install: add --cpu numa distance handling (Menno Lageman)
  - virt-install: fix --disk for rbd volumes with auth (Rauno Väli)
  - virt-install: add --cputune vcpupin handling (Wim ten Have)
  - details ui: Showing attached scsi devices per controller (Lin Ma)
  - network ui: Show details about SR-IOV VF pool (Lin Ma)
  - Greatly expand UI test suite coverage


author: Cole Robinson <crobinso@redhat.com> - 2.0.0-1
changelog:
  - Rebased to version 2.0.0
  - Finish port to Python 3
  - Improved VM defaults: q35 PCIe, usb3, CPU host-model
  - Search based OS selection UI for new VMs
  - Track OS name for lifetime of domain in <metadata> XML
  - Host interface management UI has been completely removed
  - Show domain IP on interface details page


author: Cole Robinson <crobinso@redhat.com> - 2.1.0-1
changelog:
  - Rebased to version 2.1.0
  - Bash autocompletion support (Lin Ma, Cole Robinson)
  - UI and command line --vsock support (Slavomir Kaslev)
  - virt-xml: Add --os-variant option (Andrea Bolognani)
  - virt-install: use libosinfo cpu, mem, disk size defaults (Fabiano
    Fidencio)
  - virt-install: Better usage of libosinfo -unknown distro IDs (Fabiano
    Fidencio)
  - virt-install: More usage of libosinfo for ISO --location detection
  - virt-install: Add --location LOCATION,kernel=X,initrd=Y for pointing to
    kernel/initrd in media that virt-install/libosinfo fails to detect


author: Cole Robinson <crobinso@redhat.com> - 2.2.0-1
changelog:
  - Rebased to version 2.2.0
  - libvirt XML viewing and editing UI for new and existing domain, pools,
    volumes, networks
  - virt-install: libosinfo --unattended support (Fabiano Fidêncio, Cole
    Robinson)
  - Improve CPU model security defaults (Pavel Hrdina)
  - virt-install: new --install  option. Ex: virt-install --install fedora29
  - virt-install: new --install kernel=,initrd=
  - virt-install: --disk, --memory, --name defaults from libosinfo (Fabiano
    Fidêncio, Cole Robinson)
  - virt-install: add device suboption aliases which consistently match
    libvirt XML naming
  - virt-xml: new --start, --no-define options (Marc Hartmayer)
  - virt-install: Add driver_queues argument to --controller (Vasudeva Kamath)
  - RISC-V support (Andrea Bolognani)
  - Device default improvements for non-x86 KVM (Andrea Bolognani)
  - Redesigned 'New Network' wizard
  - libguestfs inspection improvements (Pino Toscano)
  - virt-install: Add support for xenbus controller (Jim Fehlig)
  - cli: Add --disk wwn=,rawio= (Athina Plaskasoviti)
  - cli: Add --memballoon autodeflate=,stats.period= (Athina Plaskasoviti)
  - cli: Add --iothreads (Athina Plaskasoviti)
  - cli: Add --numatune memory.placement (Athina Plaskasoviti)
  - cli: Add --launchSecurity option (Erik Skultety)
  - cli: Fill in --memorybacking options
  - cli: --smartcard: support database= and certificate[0-9]*=
  - cli: --sysinfo: Add chasis suboptions
  - cli: --metadata: add genid= and genid_enable=
  - cli: --vcpus: add vcpus.vcpu[0-9]* config
  - cli: fill in all common char source options for --serial, --parellel,
    --console, --channel, --smartcard, --rng, --redirdev


author: Cole Robinson <crobinso@redhat.com> - 2.2.1-1
changelog:
  - Rebased to version 2.2.1
  - CVE-2019-10183: Replace --unattended user-password and admin-password with
    user-password-file and admin-password-file (Fabiano Fidêncio)
  - Consistent --memballoon default across non-x86 (Andrea Bolognani)
  - virt-install: add --numatune memnode.* (Athina Plaskasoviti)
  - Drop hard dep on gtksourceview4, gtksourceview3 is fine as well


author: Cole Robinson <crobinso@redhat.com> - 3.2.0-1
changelog:
  - Update to version 3.2.0
  - Slim down filesystem device editor UI
  - Fix TOCTTOU virt-install bugs (Martin Pitt)
  - Several other bug fixes


author: Jonathon Jongsma <jjongsma@redhat.com> - 3.2.0-6
changelog:
  - installer: Prefer xorrisofs over genisoimage/mkisofs (rhbz#1973236)
  - urlfetcher: Factor out ISOReader class (rhbz#1973236)
  - urlfetcher: Add xorriso ISOReader implementation (rhbz#1973236)
  - urlfetcher: Delete the 'isoinfo' ISOReader (rhbz#1973236)
  - Add gating.yaml for RHEL-9 (rhbz#1984222)


author: Jonathon Jongsma <jjongsma@redhat.com> - 3.2.0-9
changelog:
  - virt-install: add mediated device (rhbz#1995131)
  - virt-xml: add support for mediated devices (rhbz#1995131)
  - hostdev: use method get_mdev_uuid() (rhbz#1995131)
  - tests: verify MDEV support (rhbz#1995131)
  - virt-manager: enable MDEV support (rhbz#1995131)


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-5
changelog:
  - On aarch64 the vm will shut off immediately shut off when using virt-install --cloud-init (RHEL-1705)


author: Pino Toscano <ptoscano@redhat.com> - 1:1.42.0-4
changelog:
  - Copy %description also for the source, so tools are less confused
    about it.
  - Fix the "extra" addition to the version to refer to rhel.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.8-37
changelog:
  - Fix "Input/output error" in journal
    resolves: rhbz#2149139
  - Store the patches in an upstream branch in git.


author: Richard W.M. Jones <rjones@redhat.com> - 1.41.8-2
changelog:
  - Fix permissions on .sig file.
  - Disable -oa preallocated test since it fails in reviewers mock environment.


author: Richard W.M. Jones <rjones@redhat.com> - 1.41.8-4
changelog:
  - Use license instead of doc for COPYING file.
  - Include license in all subpackages.
  - Use gpgverify macro.
  - Don't own bash-completion directory because we Require the
    bash-completion package which owns it already.


author: Pino Toscano <ptoscano@redhat.com> - 1:1.42.0-2
changelog:
  - Bump the libguestfs requirement to 1.42.0.
  - Bump the epoch to 1 to match the version virt-v2v had when built from
    the libguestfs source.


author: Pino Toscano <ptoscano@redhat.com> - 1:1.42.0-3
changelog:
  - Actually fix epoch dependencies.
  - Fix virt-v2v-man-pages-uk migration from libguestfs-man-pages-uk.


author: Pino Toscano <ptoscano@redhat.com> - 1:1.42.0-4
changelog:
  - -i libvirt: ask again for the password when -ip is not specified
    resolves: rhbz#1838425
  - -i libvirt: print URI without connecting
    resolves: rhbz#1839917
  - Handle HTTP/2 replies from vCenter
    resolves: rhbz#1840126
  - -o libvirt: remove cache=none from disks
    resolves: rhbz#1837453
  - Fix parameters for the nbdkit rate filter
    resolves: rhbz#1841096
  - -it vddk: do not use the nbdkit readahead filter with VDDK
    resolves: rhbz#1832805


author: Pino Toscano <ptoscano@redhat.com> - 1:1.42.0-5
changelog:
  - Ship a newer version of rhev-apt.exe
    resolves: rhbz#1850000
  - Ship the rhsrvany sources with a note for them, as requested by
    Red Hat Legal.
  - -i libvirt: ask for the password ourselves instead of letting nbdkit
    ask for it (and potentially time out)
    related: rhbz#1838425
  - Fix build with libosinfo >= 1.8.0
    resolves: rhbz#1850423


author: Pino Toscano <ptoscano@redhat.com> - 1:1.42.0-6
changelog:
  - Improve the documentation of --keys-from-stdin
    resolves: rhbz#1858765
  - Check that --mac :ip: parameters are sensible
    resolves: rhbz#1858775
  - -i libvirt: read password file outside libvirt auth callback
    resolves: rhbz#1869454


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-7
changelog:
  - Tell virt-v2v where overlay files must be placed
  - Allow conversion to UEFI openstack
    resolves: rhbz#1820282 rhbz#1872094


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-11
changelog:
  - v2v: windows: Allow qxldod.inf as synonym for qxl.inf
    resolves: rhbz#1926102
  - v2v: Increase required free space in Windows to 100 MB
    resolves: rhbz#1949147
  - docs: Document how to remove "Out of HTTP sessions" limit
  - v2v: Disable readahead for VMware curl sources too
    resolves: rhbz#1848862
  - v2v: Allow output to block devices
    resolves: rhbz#1868690
  - docs: -o openstack: Clarify name of file containing OpenStack auth
    resolves: rhbz#1871754
  - docs: UEFI guest conversion to -o openstack is supported
    resolves: rhbz#1872100
  - v2v: Turn pnp_wait.exe warning into a debug message
    resolves: rhbz#1903960
  - v2v: windows: Fix schtasks /SD parameter
    resolves: rhbz#1895323


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-13
changelog:
  - docs: Fix version of virt-v2v which added UEFI for OpenStack
    related: rhbz#1872100
  - v2v: Increase Linux minimum root filesystem to 100 MB
    resolves: rhbz#1764569


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-17
changelog:
  - Correct regexps used to fix schtasks command
  - Fix backing file specified without backing format
    resolves: rhbz#2023279, rhbz#2025769


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-21
changelog:
  - Fix assertion failure when parsing OVA dir with trailing slash
    resolves: rhbz#2028823
  - For -o rhv-upload wait for VM creation task
    resolves: rhbz#1985827
  - If listing RPM applications fails, rebuild DB and retry (2089623)
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2102720


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-22
changelog:
  - RHEL 8: If setfiles fails fall back to autorelabel
    resolves: rhbz#XXX
  - Reapply patches since we are using git format-patch --submodule=diff


author: Uri Lublin <uril@redhat.com> - 10.0-3
changelog:
  - Show OS-ID when running 'remote-viewer -V'
    Resolves: rhbz#1953282
  - Clear auth entry fields
    Resolves: rhbz#1953933


author: Daniel P. Berrangé <berrange@redhat.com> - 11.0-1
changelog:
  - Rebase to 11.0 release
  - Add missing dep on libvirt-client for bash completion
  - Resolves: rhbz#2028604, rhbz#2000528


author: Jay Greguske <jgregusk@redhat.com> - 1.1.16-2
changelog:
  - Sources now a zip rather than tarball
  - fix viostor 2k8-64 driver (rhbz#681958)
  - Removed .git in sources zip (rhbz#671187)


author: Jay Greguske <jgregusk@redhat.com> 1.1.16-4
changelog:
  - remove hypercall drivers included in error
  - add vioserial and balloon which were excluded in error


author: Jay Greguske <jgregusk@redhat.com> 1.3.0-1
changelog:
  - Added new vioserial drivers (rhbz#720540, rhbz#702258)
  - prewhql build: 0.1-12
  - included 00-ms-cross-cert.patch for the sake of completeness


author: Jay Greguske <jgregusk@redhat.com> 1.5.1-1
changelog:
  - Updated drivers for RHEL 6.3
  - Resolved: 677219, 695053, 713643, 730877, 744729, 744730,
              751952, 752743, 753723, 759361, 760022, 769495,
              770499, 771390, 799178, 799182, 799190, 799248,
              799264, 808322, 808654, 810694, 811161


author: Jay Greguske <jgregusk@redhat.com> 1.6.1-1
changelog:
  - Added drivers from submissions 1556359, 1557005, 1557012,
    1557004, 1557008, 1555597, 1552544, 1551826, 1549074,
    1546707
  - Enabled Win8/2012 platforms
  - Updated txtsetup.oem for Windows 2003
  - Resolves: 902977, 857832, 803633, 880569, 836915,
    838021, 714908, 750421, 760022, 768795, 782268, 790305,
    797030, 797032, 797695, 799864, 800247, 800716, 801238,
    805423, 807967, 814684, 814896, 815295, 816452, 819412,
    824814, 827000, 828275, 831570, 833659, 833671, 834174,
    834175, 834179, 834679, 836474, 837321, 837758, 838002,
    838005, 838008, 839143, 839853, 840911, 841169, 841544,
    842961, 843325, 855826, 858551, 859882, 864841, 873128,
    873960, 873971, 875155, 876033, 876061, 876397, 876504,
    877333, 878291, 879143, 879178
  - add the Windows guest agent and supporting .dlls to the .iso
    Resolves: 902977


author: Jay Greguske <jgregusk@redhat.com> 1.6.3-1
changelog:
  - Reorganize the VFDs to be 32/64 bit
  - Fix 1009 balloon coinstallers being resigned
  - Resolves: 908163, 891640


author: Mike Bonnet <mikeb@redhat.com> - 1.6.7-1
changelog:
  - Update to the latest version of the drivers
  - Add qemu-ga installers to the .iso
  - Resolves: rhbz#1018649 rhbz#1018652 rhbz#908609


author: Jeff E. Nelson <jen@redhat.com> - 1.7.4-1
changelog:
  - Resolves: bz#1183423 [rhel-7.2.0]
    (Change the copyright on all the Windows drivers to "2015" in virtio-win-preqhql build)
  - Resolves: bz#1195920 [rhel-7.2.0]
    (Windows 2012 R2 using virtio-scsi-driver with Direct LUNs causes BSODs)
  - Resolves: bz#1210208 [rhel-7.2.0]
    ([NetKVM] Malformed packet can cause BSOD)


author: Jeff E. Nelson <jen@redhat.com> - 1.7.4-1
changelog:
  - Correct NVR of virtio-win-prewhql-build

  - Resolves: bz#1183423 [rhel-7.2.0]
    (Change the copyright on all the Windows drivers to "2015" in virtio-win-preqhql build)
  - Resolves: bz#1195920 [rhel-7.2.0]
    (Windows 2012 R2 using virtio-scsi-driver with Direct LUNs causes BSODs)
  - Resolves: bz#1210208 [rhel-7.2.0]
    ([NetKVM] Malformed packet can cause BSOD)


author: Jeff E. Nelson <jen@redhat.com> - 1.8.0-1
changelog:
  - The virtio-win-1.8.0-1 release contains:
    - support for Windows 10
    - a new driver (pvpanic)
    - Bugfixes and improvements (see below for bugzilla list)

  - The drivers contained in this release are:
    - pvpanic build 103
    - Balloon build 105
    - viorng  build 105
    - viostor build 106
    - NetKVM  build 105 (Windows Server 2008) and build 110 (all others)
    - vioser  build 108
    - vioscsi build 102

  - Also included in this release are:
    - qemu guest agent 7.0-10
    - qxl 0.1-24

  This release addresses the following BZs:
  - Solves: bz#996479
    (RFE:pvpanic driver for windows guest)
  - Solves: bz#1010887
    ([virtio-win][balloon] Guest display did not show properly after hibernate guest(s4)& resume after enlarging memory during runtime)
  - Solves: bz#1017817
    (copying of 10+ MB plaintext from guest through spice clipboard to client results in: vio_serial write completion error 554)
  - Solves: bz#1037949
    ([virtio-win][viostor]guest bsod(9F) when do s4 while guest running iozone)
  - Solves: bz#1054640
    ([virtio-win][netkvm]windows 8.1 x86 BSOD on DRIVER_POWER_STATE_FAILURE (9f))
  - Solves: bz#1058115
    ([whql][netkvm]win2k8-32 BSOD with code 9F when run WLK job "Ethernet - NDISTest 6.5 (MPE)")
  - Solves: bz#1058121
    ([whql][netkvm]win2k8-32 BSOD with 7E code when run WLK job "Ethernet - NDISTest 6.5 (MPE)")
  - Solves: bz#1058225
    ([WHQL][netkvm]Job named PM_PowerStateTransition failed because error pop up while test app's running on win8/win8.1)
  - Solves: bz#1067249
    ([virtio-win][balloon]Balloon device can not be removed after blnsrv service installed)
  - Solves: bz#1085702
    ([WHQL][netkvm][macvtap][1 machine]OffloadRsc failed on win2012 and win8-64 guest)
  - Solves: bz#1096505
    ([NetKVM] Implement multiqueue support in Windows guest driver)
  - Resolves: bz#1098876
    ([virtio-win][netkvm]netkvm driver can not be installed on win8-64 guests)
  - Solves: bz#1100308
    ([NetKVM] Race condition in handling device stop)
  - Solves: bz#1103100
    ([virtio-win][netkvm]netkvm driver can not be load in win2008 guest)
  - Solves: bz#1106400
    ([whql][netkvm]NDISTest 6.5 - [2 Machine] - OffloadLSO failed)
  - Solves: bz#1109027
    ([virtio-win][netkvm]Name field is empty when using netsh command)
  - Solves: bz#1110129
    ([virtio-win][scsi]scsi driver can not be installed automately via pnputil)
  - Solves: bz#1111051
    ([virtio-win][netkvm]win7-32 guest bsod(8e) while performing long (several hours) netperf transfer with mq=on)
  - Resolves: bz#1112712
    ([virtio-win][netkvm]win8.1 32bit BSOD when loading virtio-win-prewhql-0.1 driver & indirect_desc=off option of virtio-net-pci)
  - Resolves: bz#1119966
    ([whql][netkvm][RHEL6]guests bsod (0xd1) when running job "NDISTest 6.5 - [1 Machine] - StandardizedKeywords")
  - Solves: bz#1121338
    ([WHQL][netkvm]NDISTest 6.5 - 2 Machine - OffloadChecksum failed via bridge on hck)
  - Solves: bz#1123288
    ([virtio-win][netkvm]BOSD occurs during guest reboot after disable nic when netserver running)
  - Solves: bz#1125796
    ("Guest moved used index from 10122 to 10253" when reboot win2012R2 guest with 129 virtio-scsi target)
  - Solves: bz#1126378
    ([virtio-win][vioscsi][rhel6]win2012 guest bsod(d1) when shutdown guest with multi virtio-scsi devices on the same scsi controller)
  - Solves: bz#1136023
    ([NetKVM] Google patches broke debug compilation of NetKVM driver)
  - Solves: bz#1136602
    ([whql][netkvm]Guest (64 bits Operating System) got BSOD (DRIVER_VERIFIER_DETECTED_VIOLATION) while run some jobs)
  - Solves: bz#1136606
    ([whql][netkvm]guests bsod(7E) when running job "NDISTest 6.0 - [1 Machine] - 1c_FaultHandling")
  - Solves: bz#1140447
    ([virtio-win][viorng]should use uniformed name for WDFCoinstallerXXX.dll)
  - Solves: bz#1142737
    ([virtio-win][netkvm]interface status is '2', but expect status is '7' after set_link NIC off)
  - Solves: bz#1147202
    ([virtio-win][WHQL][netkvm]Job named by InvalidPackets induce win81-32/64 to hang up.)
  - Solves: bz#1147203
    ([virtio-win][whql][netkvm]win2k8-64 bsod(7e) when run job "Ethernet - NDISTest 6.0")
  - Solves: bz#1147239
    (NetKVM with 2012R2 fails the HCK tests)
  - Solves: bz#1154419
    (NetKVM fails HCK test for 2008R2, single CPU)
  - Solves: bz#1154420
    (ParaNdis6_SendNetBufferList should dispatch each net buffer to a separate queue)
  - Solves: bz#1154435
    ([NetKVM] Incorrect message id assignment and queue allocation)
  - Solves: bz#1155891
    ([whql][netkvm]Job MPE failed while job was running on win2008R2 because of bsod (0A) on build 93 - 4 vcpus)
  - Solves: bz#1155910
    ([whql][netkvm]Job MPE failed while job was running on win2008R2 because of bsod (D1) on build 93 - 1 vcpus)
  - Resolves: bz#1156259
    (Win7-64 guest BSOD(0x000000A0) when doing s4)
  - Solves: bz#1157241
    ([NetKVM] Uninitialized reserved field in procNumber structure)
  - Solves: bz#1159732
    ([virtio-win][vioscsi]guest shutdown instead of S3/S4 while doing S3/S4 in guest)
  - Resolves: bz#1159754
    ([virtio-win][netkvm]Nic device doesn't work when guest is running in IRQ mode)
  - Solves: bz#1167539
    (win8.1.32 guest BSOD with error ' MEMORY_MANAGEMENT)
  - Solves: bz#1167614
    (win8.1.32 guest BSOD with error 'DRIVER_IRQL_NOT_LESS_OR_EQUAL' (netkvm.sys))
  - Solves: bz#1168119
    ([virtio-win][netkvm]win8.1.64 guest BSOD with error 'DRIVER_IRQL_NOT_LESS_OR_EQUAL' (netkvm.sys) after first reboot during os installation on AMD host)
  - Solves: bz#1168483
    ([virtio-win][netkvm]guest lost ip when change MTU between 500 and 575 via device manage)
  - Solves: bz#1168784
    ([virtio-win]win2012r2 guest shows black screen with error code "0x0000005c" after migration and reboot)
  - Solves: bz#1169673
    ([virtio-win][netkvm]qemu quit with "qemu-kvm: Guest moved used index from 0 to 257" when set MaxRxBuffers to 512/1024 in guest)
  - Solves: bz#1169718
    (CVE-2015-3215 [NetKVM] Malformed packet can cause BSOD [rhel-7.2])
  - Solves: bz#1170106
    (RFE: [virtio-win][qxl-win] Add windows 2008R2 QXL to the .vfd)
  - Solves: bz#1172920
    ([virtio-win][vioser]winxp guest bsod with D1 code when shutdown guest after hotunplug/hotplug serial port and serial pci)
  - Solves: bz#1173323
    (iperf stalls the NetKVM driver)
  - Solves: bz#1177063
    ([virtio-win][balloon]guest can't s3/s4 correctly if disable guest-stats-polling while balloon service running)
  - Solves: bz#1183423
    (Change the copyright on all the Windows drivers to "2015" in virtio-win-prewhql build)
  - Solves: bz#1184430
    (enable event index feature in Windows virtio-blk driver)
  - Resolves: bz#1184818
    (guest BSOD when reboot guest after enable qxl driver verifier)
  - Solves: bz#1188790
    (NetKVM driver crashed on pausing in MPE test)
  - Solves: bz#1190968
    ([whql][netkvm][mq]job "NDISTest 6.0 - [1 Machine] - 1c_Mini6RSSOids" last for hours and never stop w/ 4 queues)
  - Solves: bz#1191836
    ([whql][netkvm][mq]job "NDISTest 6.5 - [2 Machine] - GlitchFreeDevice" failed due to "not received the expected number of packets" w/ 4 queues)
  - Solves: bz#1195487
    (Windows guest performing out-of-bounds accesses on virtio device)
  - Resolves: bz#1195920
    (Windows 2012 R2 using virtio-scsi driver with Direct LUNs causes BSODs)
  - Solves: bz#1210208
    (CVE 2015-3215 [NetKVM] Malformed packet can cause BSOD [rhel-7.2])
  - Resolves: bz#1212392
    (need to do extra Refresh work when initiate virtio-blk disk while boot guest with OVMF)
  - Solves: bz#1217642
    (QXL XDDM is not shipped on the virtio-win ISO)
  - Resolves: bz#1217644
    (use hardlinks for .iso and /usr/share/virtio-win/drivers)
  - Solves: bz#1217799
    (Distribute *.oem, LICENSE, COPYING in -prewhql build)
  - Resolves: bz#1218449
    (Ship qemuserial.cat on the iso)
  - Solves: bz#1218937
    (QEMU Guest Agent VSS Provider is not started after guest tools install)
  - Solves: bz#1227164
    (viostor/vioscsi is not digital signed by Redhat)
  - Resolves: bz#1228967
    ([virtio-win][whql][viostor]job "Flush Test" failed on all guests with build 105)


author: Jeff E. Nelson <jen@redhat.com> - 1.8.0-2
changelog:
  The virtio-win-VVV-bin-for-rpm.zip file was previously a
  zip file. This has been switched to a .tar.gz file which
  provides better compresion and support for hard links.

  - Resolves: bz#1217644
    (use hardlinks for .iso and /usr/share/virtio-win/drivers)


author: Jeff E. Nelson <jen@redhat.com> - 1.8.0-3
changelog:
  Update virtio-win-1.8.0-for-rpm.tar.gz with the latest
  signed drivers. This corrects packaging mistakes that put
  drivers into the wrong directories; there are no new
  bugfixes.

  See the changelog entry for 1.8.0-1 for a full
  description of the changes in this release.

  - Resolves: bz#1217644
    (use hardlinks for .iso and /usr/share/virtio-win/drivers)


author: Jeff E. Nelson <jen@redhat.com> - 1.8.0-4
changelog:
  Drop /vioscsi/w10/amd64/vioscsi.DVL.XML which was included
  by mistake.

  See the changelog entry for 1.8.0-1 for a full
  description of the changes in this release.

  - Resolves: bz#1217644
    (use hardlinks for .iso and /usr/share/virtio-win/drivers)


author: Yash Mankad <ymankad@redhat.com> - 1.8.0-5
changelog:
  Add Windows 10 drivers to .vfd files (bz#1328275)
  Updates copyright notice in virtio-win_license.txt file to 2016 (bz#1303511)

   - Resolves: bz#1328275
     (virtio-win doesn't provide windows 10 drivers within vfd)
   - Resolves: bz#1303511
     (update copyright of license.txt file in virtio-win-1.7.5-0.el6 to 2016)


author: Yash Mankad <ymankad@redhat.com> - 1.9.0-1
changelog:
  - The virtio-win-1.9.0-1 release contains:
    - support for Windows 2016
    - Bugfixes and improvements (see below for bugzilla list)

  - The drivers contained in this release are:
    - pvpanic build 121
    - Balloon build 125
    - viorng  build 125
    - viostor build 125 (Win 10 and 2016) and 126 (all others)
    - NetKVM  build 126
    - vioser  build 125 (Win 10 and 2016) and 126 (all others)
    - vioscsi build 124

  - Also included in this release are:
    - qemu guest agent 7.3.2-1
    - qxl 0.1-24

  This release addresses the following BZs:
  - Resolves: bz#950611
    ([NetKVM] Pass WHQL tests with RSC feature enabled )
  - Resolves: bz#954183
    ([NetKVM] Static driver verifier fails with NetKVM )
  - Resolves: bz#1013336
    ([virtio-win][netkvm] BSoD occurs when running NDISTest6.5 -[2 Machine] - MPE_Ethernet job on windows 2012 (Win10))
  - Resolves: bz#1122364
    ([virtio-win][vioser][rhel6]win2k8r2 guest bsod(7e) when do continuous hotplug/unplug during virtio serial in use with driver verifier enabled)
  - Resolves: bz#1157987
    (Windows hangs at startup if virtio-scsi device is configured with vectors=1, 2, and 3)
  - Resolves: bz#1161453
    ([whql][vioscsi]Job named by SCSI Compliance Test (LOGO) failed on win2k8-R2 and win8-64 guest)
  - Resolves: bz#1190960
    ([whql][netkvm][mq]job failed due to "Received some net buffer lists out of order" w/ 4 queues)
  - Resolves: bz#1208465
    (Windows guest boots up slowly with multiple virtual NIC devices (I attached 232 with mutifunction=on))
  - Resolves: bz#1210166
    ([vioscsi] Add multiqueue support to Windows virtio-scsi driver.)
  - Resolves: bz#1214177
    ([virtio-win] [NetKVM] Compilation errors with Visual Studio 2015 while trying to compile NetKVM)
  - Resolves: bz#1214568
    ([RFE][virtio-win] Add WMI facility to check the virito-scsi mq enabled)
  - Resolves: bz#1219841
    ([RFE] vioscsi.sys should support MS Cluster Services)
  - Resolves: bz#1223426
    ([NetKVM] Performance degradation with multi-queue)
  - Resolves: bz#1234741
    ([virtio-win][vioscsi]win2012 guest bsod(c9) when whql test DPWLK-HotAdd(1104) job)
  - Resolves: bz#1234751
    ([virtio-win][vioscsi]win2012R2 guest bsod(d1) when whql test DPWLK-HotAdd(1104) job)
  - Resolves: bz#1235108
    ([virtio-win][vioscsi]VIOSCSI driver is not signed by redhat certification on win200832/64 platform)
  - Resolves: bz#1237024
    ([virtio-win][netkvm]ipv6 uploading speed is quite slow when set "TCP/UDP checksum offload(IPv6)" to "Rx & Tx Enabled")
  - Resolves: bz#1241986
    (win7 64bit BSOD when booting it on RHEL7.2 host)
  - Resolves: bz#1243229
    ([virtio-win][scsi][windows 10]win10 and win2016 guests bsod with D1 when run job "Bus Reset Test")
  - Resolves: bz#1245957
    ([WHQL][viostor][data-plane]it could not generate dump file on WIN2008-32/64 via WLK while running Crash Dump job)
  - Resolves: bz#1246993
    ([virtio-win][svvp][ws2016] job "Signed Driver Check (CheckLogo)" failed during ws2016 svvp test)
  - Resolves: bz#1247006
    ([virtio-win][svvp][ws2016] job "Profile Interrupt Test" failed during ws2016 svvp test)
  - Resolves: bz#1248873
    ([whql][netkvm]Job named NDISTest6.5-InvalidPackets failed with HCK on win8-32/win8-64(build 106))
  - Resolves: bz#1248977
    ([virtio-win][vioscsi] Cannot install vioscsi driver on win7-32&win2008-32)
  - Resolves: bz#1249867
    ([WHQL][vioscsi]Job hangs and it cannot continure on windows2008 guest via WLK)
  - Resolves: bz#1250854
    ([WHQL][vioscsi]The job named crash dump failed on windows 2008 -32/64 platform)
  - Resolves: bz#1256583
    (Win10 guest can't get ip address from dhcpserver when add mrg_rxbuf=off for virtio-net-pci)
  - Resolves: bz#1266340
    ([whql][netkvm]NDISTest6.5 Manual test failed and generate dump file on windows 2008 guest)
  - Resolves: bz#1270149
    ([virtio-win][netkvm] Check guest network link status of virtio nic with status=on failed (build 110))
  - Resolves: bz#1289406
    ([virtio-win][vioser] Cannot install vioser driver successfully)
  - Resolves: bz#1292788
    ([virtio-win][viostor] Cannot install viostor driver on win7-64&win2008-64&win2008R2)
  - Resolves: bz#1293042
    ([virtio-win][vioser] Extra '-' (dash) in serial driver name)
  - Resolves: bz#1293249
    ([virtio-win][vioser] IOCTL_GET_INFORMATION does not return required buffer size)
  - Resolves: bz#1296092
    ([virtio-win][balloon] balloon driver can not be installed automately via pnputil)
  - Resolves: bz#1303511
    (update copyright of license.txt file in virtio-win to 2016)
  - Resolves: bz#1303809
    (provide QEMU guest agent command for setting root/administrator account password - window guests)
  - Resolves: bz#1303988
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for NetKVM)
  - Resolves: bz#1304041
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for vioserial)
  - Resolves: bz#1304044
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for vioscsi)
  - Resolves: bz#1304049
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for viostor)
  - Resolves: bz#1313243
    ([virtio-win][netkvm][rhel6]win2008-32 guest bsod with HARDWARE_INTERRUP_STORM(f2) when running netperf for longevity test)
  - Resolves: bz#1313887
    ([RFE] provide QEMU guest agent command for setting root account password (Windows guest) [rhel-7.3])
  - Resolves: bz#1315984
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for baloon)
  - Resolves: bz#1315985
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for rng)
  - Resolves: bz#1321774
    ([virtio-win][vioscsi]fio jobs keep printing "0% done" in win2012r2 guest)
  - Resolves: bz#1325078
    (Add TargetOSVersion to driver inf files)
  - Resolves: bz#1328275
    (virtio-win doesn't provide windows 10 drivers within vfd [rhel-7.3])
  - Resolves: bz#1334736
    (On the LAN network, as long as the VMs receive the Network message, and will always blue screen.)
  - Resolves: bz#1336368
    ([virtio-win][viostor][virtio1.0]Cannot enlarge/shrink disk with virtio1.0 device)
  - Resolves: bz#1339175
    ([NetKVM] Turn on RSC feature in NetKVM driver)
  - Resolves: bz#1340571
    (Add Windows 2k16 drivers to virtio-win)
  - Resolves: bz#1352432
    ([virtio-win][vioscsi]Win2012-64&R2 guest occurred bsod(d1) when whql test DPWLK- Hot-Replace - Device Test - Verify driver support for D3 power state)
  - Resolves: bz#1352517
    ([virtio-win][balloon][whql]windows guest BSOD when run several WHQL jobs)
  - Resolves: bz#1352809
    ([virtio-win][viorng]wrong dervier version for virtio-win-prewhql-121)
  - Resolves: bz#1356363
    ([virtio-win][viorng] cannot install viorng driver on win2008-32/64 (build 122) )
  - Resolves: bz#1358125
    (Virtio 1.0 driver didn't work on win10 with q35 machine type)
  - Resolves: bz#1359072
    ([virtio-win][netkvm][whql]many whql jobs occurred BSOD(DRIVER_VERIFIER_DETECTED_VIOLATION (c4)) on build 122)
  - Resolves: bz#1361501
    ([virtio-win][balloon] report "VCRUNTIME120.dll is missing from your computer"error when using blnsvr.exe)


author: Yash Mankad <ymankad@redhat.com> - 1.9.0-2
changelog:
  This release updates the VirtIO Block and Serial drivers for
  Windows 10 and 2016 release to use the 126 build.

  See the changelog entry for 1.9.0-1 for a full description
  of the changes in this release.

  - Resolves: bz#1340571
    (Add Windows 2k16 drivers to virtio-win)


author: Yash Mankad <ymankad@redhat.com> - 1.9.0-3
changelog:
  Add Windows 2016 drivers to .vfd files
  Updates copyright notice in virtio-win_license.txt file (bz#1303511)

  See the changelog entry for 1.9.0-1 for a full description
  of the changes in this release.

  - Resolves: bz#1340571
    (Add Windows 2k16 drivers to virtio-win)
  - Resolves: bz#1303511
    (update copyright of license.txt file in virtio-win-1.7.5-0.el6 to 2016)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.9.1-0
changelog:
  This release contains the following drivers and build number:
   - pvpanic, build 137
   - vioinput, build 137
   - vioser, build 137
   - balloon, build 13
   - viorng, build 137
   - netkvm, build 139
   - vioscsi, build 136
   - viostor, build 136
   - qxl, build qxl-win-unsigned-0.1-24
   - qemupciserial, build 137
   - smbus, build 138
   - qemufwcfg, build 128


  This release addresses the following BZs:
  - Resolves: BZ#1075292
    ([virtio-win][qemu-ga-win] qemu guest agent should report correctly error description (windows guest))
  - Resolves: BZ#1202267
    ([virtio-win][wddm-qxl]The display of guest change to black-white mode after s4 on win8.1-32)
  - Resolves: BZ#1218449
    (Ship qemupciserial.cat on the iso)
  - Resolves: BZ#1256626
    (windows guest(win7/win10)  CTRL_VLAN=on/off  does not support for  virtio-net-pci)
  - Resolves: BZ#1303510
    (Change the copyright on all the Windows drivers to "2017" in virtio-win-prewhql build)
  - Resolves: BZ#1357406
    (Add virtio-input Windows guest driver)
  - Resolves: BZ#1369353
    (virtio_balloon: backport "available memory" stat support)
  - Resolves: BZ#1370351
    ([virtio-win][vioser] serial port can not transfer data when nr>=31)
  - Resolves: BZ#1372174
    (NIC device cannot start when boot a Win10 guest with multiple queues(256 queues))
  - Resolves: BZ#1374725
    (Output command {"execute": "guest-info"} includes unsupported qemu-ga-win commands)
  - Resolves: BZ#1387125
    (QEMU guest agent VSS Provider is crashed after snapshot deletion)
  - Resolves: BZ#1388775
    ([virtio-win][vioinput]guest bsod[DRIVER_PAGE_FAULT_IN_FREED_SPECIAL_POOL (d5)] when run virtio-input whql jobs)
  - Resolves: BZ#1388920
    ([NetKVM] review additional possible performance improvements)
  - Resolves: BZ#1389125
    (viostor extend viostor driver with STORAGE_REQUEST_BLOCK support)
  - Resolves: BZ#1389445
    (VirtIO library interface incompatiblity with NetKvm (bool definition))
  - Resolves: BZ#1390714
    ([RFE] [virtio-win] Add fw_cfg device in windows guest in order to make svvp test pass)
  - Resolves: BZ#1391844
    ([virtio-win][balloon][viorng][virtio-input] cannot install balloon, viorng and virtio-input driver successfully on win10-32 and win8.1-32(build 127))
  - Resolves: BZ#1392693
    ([virtio-win][vioser][whql] job "PCI Hardware Compliance Test For a Single Device(PCIHCT)" fail w/ "-M q35")
  - Resolves: BZ#1392719
    ([virtio-win][vioser]can't install serial driver successfuly on win10-64 guest with q35 machine type(build 128))
  - Resolves: BZ#1392819
    ([NetKVM] Race between ParaNdis_SetupRSSQueueMap and ParaNdis6_SendNetBufferLists due to the lack of synchronisation)
  - Resolves: BZ#1393140
    ([virtio-win][vioser][whql]BSOD when running job "WDF Logo Test-Final" w/ q35 on win2008-32)
  - Resolves: BZ#1393772
    (New unknown device "SM Bus Controller" shows in system device manager after booting with q35)
  - Resolves: BZ#1395790
    (vioscsi.sys BSOD when adding CPU to live Windows Server 2012R2 guest)
  - Resolves: BZ#1402496
    (Balloon: Stats don't work if balloon driver is disabled when blnsvr service starts)
  - Resolves: BZ#1406271
    ([virtio-win][qemu-ga-win] if guest is auto-released after 10s, the following "guest-fsfreeze-freeze" and "guest-fsfreeze-thaw" should not prompt error.)
  - Resolves: BZ#1408771
    ([virtio-win][viorng] Guest win2008-32 occurs BSoD when running job "WDF Logo Tests - Final" under q35)
  - Resolves: BZ#1408901
    ([virtio-win][whql][vioinput] Many jobs failed on win2012R2/ws2016 when running w/o GUI)
  - Resolves: BZ#1409298
    ([virtio-win][balloon] Guest win2008-32 occurs BSoD when running job 'Device Path Exerciser')
  - Resolves: BZ#1411092
    (4K virtual drives broken on Windows)
  - Resolves: BZ#1411596
    (Virtio driver of network device works abnormally when convert win2008 x86 guest from kvm to rhev by virt-v2v)
  - Resolves: BZ#1412067
    ([virtio-win][whql][netkvm] job 1c_IOCTLCoverage failed.)
  - Resolves: BZ#1419785
    ([virtio-win][whql][balloon] Guest WIN8-32 occured BSOD in job "DF - PNP Stop (Rebalance) Device Test (Certification)")
  - Resolves: BZ#1419854
    (vioinput: Driver is dropping rapid input events)
  - Resolves: BZ#1419900
    (BSOD of vioser.sys on Win10 in S0->S4->S0 flow)
  - Resolves: BZ#1421258
    (Add qemufwcfg driver to virtio-win)
  - Resolves: BZ#1421988
    ([virtio-win][virtio-input] Read wrong device in guest's device manager when do hot-plug a mouse device and keyboard device)
  - Resolves: BZ#1425967
    (Update qemupciserial.* files for virtio-win)
  - Resolves: BZ#1426482
    ([virtio-win][balloon] cost too much time when continues enlarge/evict during playing video)
  - Resolves: BZ#1429807
    ([virtio-win][whql][netkvm] guests bsod(d1) when running job "NDISTest 6.0 - [1 Machine] - 1c_FaultHandling")
  - Resolves: BZ#1431561
    ([NetKVM] Implement VIRTIO_NET_F_GUEST_ANNOUNCE feature in Windows virtio-net driver - IPv6)
  - Resolves: BZ#1432567
    ([virtio-win][vioscsi] Crash dump not generated with num_queues=4)
  - Resolves: BZ#1433266
    ([virtio-win][netkvm] cannot launch anti-virus software(ESET Endpoint Antivirus) with virtio NetKVM driver)
  - Resolves: BZ#1433830
    ([virtio-win][whql][netkvm] guests bsod(d1) when running job "NDISTest 6.5 - [2 Machine] - OffloadLSO")
  - Resolves: BZ#1434316
    ([qemu-ga-win] Guest agent might hang if VSS service is stoped during freeze)
  - Resolves: BZ#1435778
    (virtio-serial breaks when CPU hot added to Windows Server 2008R2 Datacenter)
  - Resolves: BZ#1438410
    (Net-KVM: Add VlanId property to Inf file)
  - Resolves: BZ#1439085
    ([virtio-win][netkvm] Guest win2008-32 failed in job Ethernet - NDISTest 6.0 with 1c_wmicoverage failure)
  - Resolves: BZ#1441595
    ([virtio-win][viostor]windows 2016 can not generate dump file on AMD host)
  - Resolves: BZ#1442322
    ([virtio-win][viostor]Cannot enlarge/shrink disk with virtio-blk-pci device.)
  - Resolves: BZ#1443019
    ([virtio-win][qemupciserial] job "PNP Rebanlance RequestNew Resources Device Test" and other two jobs failed on win10+ guests)
  - Resolves: BZ#1444271
    ([virtio-win][viorng]job "DF - InfVerif INF Verification" failed on HLK 1703)
  - Resolves: BZ#1451652
    (RFE: Add smbus driver to virtio-win)
  - Resolves: BZ#1456403
    (Net-KVM: Implement MTU report feature of the virtio-net device)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.9.2-0
changelog:
  - Resolves: BZ#1471073
    Latest latest virtio driver (network) for Windows drops lots of packets (edit)


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 1.9.6-3
changelog:
  - Resolves: BZ#1353099
    Drop unsupported Windows releases from virtio-win

  - Resolves: BZ#1533540
    Drop floppy (.vfd) files from virtio-win


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 1.9.6-4
changelog:
  - Resolves: BZ#1353099
    During the fix for 1353099, the smbus become empty. So it needs to be
    removed.


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 1.9.10-0.el8
changelog:
  - Resolves: rhbz#1771814
    (QEMU Guest Agent's version is not correct which is still the old one. )
  - Resolves: rhbz#1751431
    ("guest-get-memory-block-info" is enabled but in fact it is not currently supported )
  - Resolves: rhbz#1733165
    (QEMU Guest Agent For Windows Return Garbled NIC Name )
  - Resolves: rhbz#1754822
    ([virtio-win][viostor] Add TRIM support. )


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 1.9.10-3.el8
changelog:
  - Resolves: rhbz#1784745
    ([virto-win] virtio input drivers are not installed via virtio-win-installer)
  - Resolves: rhbz#1784744
    ([virtio-win] guest can not boot up due to virtio-win-installer remove option uninstalls all drivers including OS driver)
  - Resolves: rhbz#1784760
    ([virtio-win] drivers can not be installed via virtio-win-installer on win2012 guest)


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 1.9.11-1.el8
changelog:
  - Resolves: rhbz#1790455
    (Add guest-get-devices command to qemu-ga-win)
  - Resolves: rhbz#1802452
  - Resolves: rhbz#1791147
  - Resolves: rhbz#1794609
  - Resolves: rhbz#1791153
  - Resolves: rhbz#1788042
  - Resolves: rhbz#1785544
  - Resolves: rhbz#1785522
  - Resolves: rhbz#1783953
  - Resolves: rhbz#1783906
  - Resolves: rhbz#1783880
  - Resolves: rhbz#1782370
  - Resolves: rhbz#1711743
  - Resolves: rhbz#1745818
  - Resolves: rhbz#1549602
  - Resolves: rhbz#1549597
  - Resolves: rhbz#1549596
  - Resolves: rhbz#1549595
  - Resolves: rhbz#1549577


author: Vadim Rozenfeld <vrozenfe@redhat.com> - 1.9.14-0.el8
changelog:
  - Update to qemu and spice agents.
  - Update qxl-dod driver
  - add sriov drivers
  - Resolves: rhbz#1746667
  - Resolves: rhbz#1787022


author: Vadim Rozenfeld <vrozenfe@redhat.com> - 1.9.15-0.el8
changelog:
  - Update to build 191 
  - Update installer 1.9.15.1 with the latest agents and drivers
  - Resolves: rhbz#1911903


author: Vadim Rozenfeld <vrozenfe@redhat.com> - 1.9.15-1.el9
changelog:
  - This is a plain copy of the virtio-win package released in RHEL-8.3.1 for RHEL-9.0.0
  - Resolves: rhbz#1916284


author: Jiri Kucera <jkucera@redhat.com> - 0.3.11-4
changelog:
  - fixed License
  - Requires: /usr/bin/gpg2 in libs subpackage
  - Added support for opening all types of LUKS devices
    Resolves: #1626974


author: - Bastien Nocera <bnocera@redhat.com> - 1.1.1.svn20070412-1.fc7
changelog:
  - Upgrade to a current SVN snapshot of vorbis-tools to get our FLAC support
    back, after the recent libFLAC upgrade (#229124)
  - Remove obsolete UTF8 and Curl mute patches


author: Christopher Aillon <caillon@redhat.com> 1:1.1.1.svn20070412-2.fc7
changelog:
  - Bring back support for http URLs which was broken with the previous update
    See https://bugzilla.redhat.com/240351


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.0-1
changelog:
  - update to 1.2.0
  - remove libcurl and oggdec patches, applied upstream
  - drop unneeded autoconf BR
  - fix BuildRoot


author: Hans de Goede <j.w.r.degoede@hhs.n> - 1:1.2.0-2
changelog:
  - Stop calling autoconf, this was no longer necessarry and in current
    rawhide breaks us from building (because aclocal.m4 does not match
    the new autoconf version)
  - Drop our last 2 patches, they were modifying configure, but since we called
    autoconf after that in effect they were not doing anything, review has
    confirmed that they indeed are no longer needed)
  - Drop using system libtool hack, this is dangerous when the libtool used
    to generate ./configure and the one used differ
  - Remove various antique checks (for example check if RPM_BUILD_ROOT == /) 
  - Drop unnecessary explicit library Requires
  - Cleanup BuildRequires


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-32
changelog:
  - Removed a hint about the ftp_home_dir SELinux boolean from the config file
  - Resolves: rhbz#1623424


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-34
changelog:
  - Enable support for wide-character strings in logs
  - Replace unprintables with HEX code, not question marks
  - Resolves: rhbz#1947900


author: José Expósito <jexposit@redhat.com> - 1.3.283.0-3
changelog:
  - Provides/Obsoletes vulkan-validation-layers-devel
    Resolves: https://issues.redhat.com/browse/RHEL-54290


author: Kalev Lember <klember@redhat.com> - 1.14.91-1
changelog:
  - Update to 1.14.91
  - Add new libwayland-egl subpackage and obsolete mesa-libwayland-egl
  - Remove ldconfig scriptlets


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 5-1
changelog:
  - switch to dot-prefixed Aliases
  - order Aliases for compatibility with older Apache releases
  - enable webfonts
  - enable symlinks in %{_webassetdir} and %{_jsdir}
  - re-enable httpd subpackage


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.38.5-1.4
changelog:
  - Add patch for CVE-2023-28204
    Resolves: #2209744
  - Add patch for CVE-2023-32373
    Resolves: #2209727


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.30.2-2
changelog:
  - Try to fix coverity build by disabling docs (thanks to Kamil Dudka <kdudka@redhat.com>!)
  - Related: #1883304


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.36.1-1
changelog:
  - Update to 2.36.1
    Related: #2061994
  - Resolves: #2075492
  - Resolves: #2075494
  - Resolves: #2075496


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.40.5-1
changelog:
  - Upgrade to 2.40.5. Also, disable JIT
    Resolves: #2176269
    Resolves: #2185742
    Resolves: #2209728
    Resolves: #2209745
    Resolves: #2218649
    Resolves: #2218651
    Resolves: #2224611


author: Bo Ren <rb01097748@alibaba-inc.com> 2.42.5-1.0.1
changelog:
  - Exclude loongarch64
  - cherry-pick `add sw arch #ef8be098b07c4d8a9f809d32a607700f4a420676`. (nijie@wxiat.com)


author: Brian C. Lane <bcl@redhat.com> - 35.5-1
changelog:
  - New release: 35.5 (bcl)
    Resolves: rhbz#2052604
  - docs: Explain how to undo blueprints delete (bcl)
  - test: server status no longer returns devel (bcl)
  - Use GetFrozenBlueprintsTOML for blueprints freeze save (bcl)
  - Add a test for float uid/gid in frozen blueprint (bcl)
  - Use GetBlueprintsTOML for blueprints save (bcl)
  - test: Add a test for float uid/gid in saved blueprint (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 (49699333+dependabot[bot])
  - tests: trigger on push to main (jrusz)
  - build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - ci: add keystore for sonarqube (jrusz)
  - spec: Switch to using %gobuild macro on Fedora (bcl)
  - ci: change workflow name (jrusz)
  - ci: add gitlab-ci and sonarqube (jrusz)
  - doc: fix example links from the README (tdecacqu)
  - build(deps): bump actions/checkout from 2.3.4 to 2.4.0 (49699333+dependabot[bot])
  - ci: Enable Coverity Scan tool (atodorov)


author: Brian C. Lane <bcl@redhat.com> - 35.9-1
changelog:
  - Copy rhel-88.json test repository from osbuild-composer
  - Update osbuild-composer test repositories from osbuild-composer
  - New release: 35.9 (bcl)
    Resolves: rhbz#2168666
  - tests: Replace os.MkdirTemp with t.TempDir (bcl)
  - blueprint save: Allow overriding bad blueprint names (bcl)
  - tests: Clean up checking err in tests (bcl)
  - composer-cli: Implement blueprints diff (bcl)
  - saveBlueprint: Return the filename to the caller (bcl)
  - composer-cli: Add tests for using --commit with old servers (bcl)
  - weldr: Return error about the blueprints change route (bcl)
  - weldr: Save the http status code as part of APIResponse (bcl)
  - Add --commit support to blueprints save (bcl)
  - Add --commit to blueprints show (bcl)
  - gitleaks: Exclude the test password used in tests (bcl)
  - ci: add tags to AWS instances (tlavocat)
  - Update github.com/BurntSushi/toml to 1.2.1
  - Update github.com/stretchr/testify to 1.8.1
  - Update bump github.com/spf13/cobra to 1.6.1
  - New release: 35.8 (bcl)
  - completion: Remove providers from bash completion script (bcl)
  - completion: Filter out new headers from compose list (bcl)
  - docs: Remove unneeded Long descriptions (bcl)
  - docs: Use a custom help template (bcl)
  - docs: Add more command documentation (bcl)
  - cmdline: Add package glob support to modules list command (bcl)
  - workflow: Add govulncheck on go v1.18 (bcl)
  - tests: Update to use golangci-lint 1.49.0 (bcl)
  - New release: 35.7 (bcl)
  - spec: Move %gometa macro above %gourl (bcl)
  - weldr: When starting a compose pass size as bytes, not MiB (bcl)
  - tests: Use correct size value in bytes for test (bcl)
  - workflow: Add Go 1.18 to text matrix (bcl)
  - Replace deprecated ioutil functions (bcl)
  - New release: 35.6 (bcl)
  - tests: Update tests for osbuild-composer changes (bcl)
  - CMD: Compose status format (eloy.coto)
  - CMD: Compose list format (eloy.coto)
  - tests: Update tests to check for JSON list output (bcl)
  - composer-cli: Change JSON output to be a list of objects (bcl)
  - weldr: Simplify the old ComposeLog, etc. functions (bcl)
  - composer-cli: Add --filename to blueprints freeze save command (bcl)
  - composer-cli: Add --filename to blueprints save command (bcl)
  - composer-cli: Add --filename to compose logs command (bcl)
  - composer-cli: Add --filename to compose image command (bcl)
  - composer-cli: Add --filename to compose metadata command (bcl)
  - composer-cli: Add --filename to compose results command (bcl)
  - weldr: Add saving to a new filename to GetFilePath function (bcl)
  - github: Fix issue with codecov and forced pushes in PRs (bcl)
  - Use golangci-lint 1.45.2 in workflow (bcl)
  - Run workflow tests for go 1.16.x and 1.17.x (bcl)
  - Move go.mod to go 1.16 (bcl)
  - workflows/trigger-gitlab: run Gitlab CI in new image-builder project (jrusz)
  - Update GitHub actions/setup-go to 3
  - Update GitHub actions/checkout to 3


author: Brian C. Lane <bcl@redhat.com> - 35.12-1
changelog:
  - Copy rhel-8.10.json test repository from osbuild-composer
  - New release: 35.12 (bcl)
    Resolves: RHEL-1770
  - Add support for compose start warning messages (bcl)
  - Update documentation urls for new locations (bcl)
  - weldr: go fmt changes to a couple comments (bcl)
  - weldr: Update ostree test for parentid with no url (bcl)
  - Makefile: Turn off seccomp for build-in-podman (bcl)
  - composer-cli: Update doc links (simon.steinbeiss)
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)
  - spec: Require createrepo_c for weldr-client-tests package (bcl)
  - spec: migrate the license field to SPDX (ondrej)
  - Go: Switch to go 1.19 (bcl)
  - CI: Update terraform hash (bcl)
  - Actions: add workflow for marking and closing stale issues and PRs (thozza)
  - workflows: Stop using golint (bcl)
  - workflows: Add Go 1.21 and 1.22 to test matrix (bcl)
  - workflows: Update to golangci-lint 1.56.2 (bcl)
  - workflow: Ignore govulncheck failures (bcl)
  - workflow: Switch to testing on go 1.18, 1.19, 1.20 (bcl)
  - build(deps): bump actions/setup-go from 3 to 5 (49699333+dependabot[bot])
  - build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.8.0 (49699333+dependabot[bot])
  - build(deps): bump actions/checkout from 3 to 4 (49699333+dependabot[bot])
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 (49699333+dependabot[bot])


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 1.19.5-11.0.1
changelog:
  - use extern in header files when declaring global variables for compatible gcc10 build
  - Add doc sub package(taifu.gc@alibaba-inc.com)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - upgraded to 1.5.0
  - they removed the man page from the distribution (Duh!) and I added it back
    from 1.4.5. Hey, removing the man page is DUMB!


author: Bill Nottingham <notting@redhat.com>
changelog:
  - setlocale for LC_CTYPE too, or else all the translations think their
    characters are unprintable.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 1.7
  - Require perl for building (to get man pages)
  - Don't include the Japanese po file, it's now included
  - Use %{_tmppath}
  - no patches necessary
  - Make /etc/wgetrc noreplace
  - More docs


author: Karsten Hopp <karsten@redhat.de> 1.9.1-7
changelog:
  - clean up manpage (#117519)
  - buildrequire texinfo (#123780)
  - LFS patch, based on wget-LFS-20040630.patch from Leonid Petrov
    (#123524, #124628, #115348)


author: Karsten Hopp <karsten@redhat.de> 1.9.1-18
changelog:
  - add support for --protocol-directories option as documented
    in the man page (Ville Skyttä, #145571)


author: Karsten Hopp <karsten@redhat.de> 1.9.1-19
changelog:
  - Don't set actime to access time of the remote file or tmpwatch might 
    remove the file again (#146440).  Set it to the current time instead.
    timestamping checks only modtime, so this should be ok.


author: Karsten Hopp <karsten@redhat.de> 1.9.1-20
changelog:
  - texi2pod doesn't handle texinfo xref's. rewrite some lines so that
    the man page doesn't have incomplete sentences anymore (#140470)


author: Karsten Hopp <karsten@redhat.de> 1.10-2
changelog:
  - update to wget-1.10
    - drop passive-ftp patch, already in 1.10
    - drop CVS patch
    - drop LFS patch, similar fix in 1.10
    - drop protdir patch, similar fix in 1.10
    - drop actime patch, already in 1.10


author: Karsten Hopp <karsten@redhat.com> 1.10.2-13
changelog:
  - merge review changes (#226538)
    - use version/release/... in buildroot tag
    - remove BR perl
    - use SMP flags
    - use make install instead of %makeinstall
    - include copy of license
    - use Requires(post)/Requires(preun)
    - use optflags
    - remove trailing dot from summary
    - change tabs to spaces


author: Karsten Hopp <karsten@redhat.com> 1.10.2-15
changelog:
  - fix discarding of expired cookies
  - escape non-printable characters
  - drop to11 patch for now (#223754, #227853, #227498)


author: Karsten Hopp <karsten@redhat.com> 1.11.3-1
changelog:
  - wget-1.11.3, downgrades the combination of the -N and -O options
    to a warning instead of an error


author: Karsten Hopp <karsten@redhat.com> 1.12-1
changelog:
  - update to wget-1.12
  - fixes CVE-2009-3490 wget: incorrect verification of SSL certificate
    with NUL in name


author: Jon Ciesla <limburgher@gmail.com> - 1.13.4-1
changelog:
  - New upstream, BZ 730286.
  - Modified path patch.
  - subjectAltNames patch upstreamed.
  - Specified openssl at config time.


author: Tomas Hozza <thozza@redhat.com> 1.14-3
changelog:
  - Added libuuid-devel to BuildRequires to use libuuid functions
    in "src/warc.c" functions (#865421)


author: Tomas Hozza <thozza@redhat.com> - 1.14-5
changelog:
  - Added BuildRequires: perl-podlators for pod2man
  - Patched manpage to silent new Tex errors
  - Resolves: (#914571)


author: Tomas Hozza <thozza@redhat.com> - 1.14-6
changelog:
  - add missing options accept-regex and reject-regex to man page
  - fix errors in texi2pod introduced in Perl-5.18


author: Tomas Hozza <thozza@redhat.com> - 1.14-8
changelog:
  - Fix deadcode and possible use of NULL in vprintf (#913153)
  - Add documentation for --regex-type and --preserve-permissions
  - Fix --preserve-permissions to work as documented (and expected)
  - Fix bug when authenticating using user:password@url syntax (#912358)
  - Document and fix --backups option


author: Tomas Hozza <thozza@redhat.com> - 1.17-1
changelog:
  - Updated to 1.17 + added some additional upstream fixes
  - Fixed hardening of wget executable (#1281829)


author: Tomas Hozza <thozza@redhat.com> - 1.19.4-1
changelog:
  - Update to the latest upstream version
  - Fix issue with decompressing with broken web servers (#1532233)


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-15
changelog:
  - Resolves: #2119126 - Wireshark source rpm fails to build due to looking for incorrect libssh header files


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.2.D10-1mdk
changelog:
  - cvs references
  - splitted demo package
  - moved demo files to %{_datadir}/%{name}
  - only manual package requires stylebook-1.0b3
  - only demo package requires servletapi3


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.2.D14-1jpp
changelog:
  - 2.2.D14
  - javadoc into javadoc package
  - compat.jar into compat package
  - compat javadoc into compat-javadoc package


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.2.0-1jpp
changelog:
  - 2.2.0 final
  - versioned dir for javadoc
  - no dependencies for manual and javadoc packages
  - stricter dependency for compat and demo packages
  - fixed package confusion
  - adaptation for new servlet3 package
  - requires xerces-j1 instead of jaxp_parser
  - xml-apis jar now in required xml-commons-apis external package


author: Henri Gomez <hgomez@users.sourceforge.net> 2.3.1-2jpp
changelog:
  - fix built classpath (bsf, bcel are existing jpackage rpms),
  - add buildrequires for javacup and JLex


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.3.1-2jpp
changelog:
  - provides jaxp_transform_impl
  - requires jaxp_parser_impl
  - stylebook already requires xml-commons-apis
  - jaxp_parser_impl already requires xml-commons-apis
  - use sed instead of bash 2.x extension in link area to make spec compatible with distro using bash 1.1x


author: Ville Skyttä <ville.skytta at iki.fi> 2.4-0.D1.2jpp
changelog:
  - Remove xerces-j1 runtime dependency.
  - Add bcel, jlex, regexp to xsltc runtime requirements:
    <http://xml.apache.org/xalan-j/xsltc_usage.html>
  - Build with -Dbuild.compiler=modern (IBM 1.3.1) to avoid stylebook errors.
  - XSLTC now provides jaxp_transform_impl too.
  - Earlier changes by Henri, from unreleased 2.4-D1.1jpp:
      Mon Jul 15 2002 Henri Gomez <hgomez@users.sourceforge.net> 2.4-D1.1jpp
    - 2.4D1
    - use the jlex 1.2.5-5jpp (patched by Xalan/XSLTC team) rpm
    - use the stylebook-1.0-b3_xalan-2.jar included in source file till it will
      be packaged in jpackage
    - use jaxp_parser_impl (possibly xerces-j2) instead of xerces-j1 for docs
      generation, since it's tuned for stylebook-1.0-b3_xalan-2.jar
    - build and provide xsltc in a separate rpm


author: Ville Skyttä <ville.skytta at iki.fi> - 2.4.1-2jpp
changelog:
  - bsf -> oldbsf.
  - Use non-versioned jar in alternative, don't remove it on upgrade.
  - Remove hardcoded packager tag.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.5.1-1jpp
changelog:
  - Update to 2.5.1.
  - Fix jpackage-utils version in BuildRequires, add xerces-j2.
  - Non-versioned javadoc symlinking.
  - Add one missing epoch.
  - Clean up manifests from Class-Path's and other stuff we don't include.
  - xsltc no longer provides a jaxp_transform_impl because of huge classpath
    and general unsuitablity for production-use, system-installed transformer.
  - Own (ghost) %{_javadir}/jaxp_transform_impl.jar.
  - Remove alternatives in preun instead of postun.
  - Disable javadoc subpackage for now:
    <http://issues.apache.org/bugzilla/show_bug.cgi?id=20572>


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.5.2-1jpp
changelog:
  - Update to 2.5.2.
  - Re-enable javadocs, new style versionless symlink handling, crosslink
    with local J2SE javadocs.
  - Spec cleanups.


author: Gary Benson <gbenson@redhat.com> 0:2.6.0-2jpp_3fc
changelog:
  - Remove now-unnecessary workaround for #130162.
  - Rearrange how BC-compiled stuff is built and installed.


author: Gary Benson <gbenson at redhat.com> 0:2.6.0-3jpp_3fc
changelog:
  - Build on ia64, ppc64, s390 and s390x.
  - Switch to aot-compile-rpm (also BC-compiles xsltc and samples).


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:2.7.0-3jpp_1fc
changelog:
  - Merge with latest version from jpp.
  - Undo ExcludeArch since eclipse available for all arch-es.
  - Remove jars from sources for new upstream version.
  - Purge unused patches from previous release.
  - Conditional native compilation with GCJ.
  - Use NVR macros wherever possible.


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:2.7.0-5jpp.1
changelog:
  - Resync with latest from JPP.
  - Partially adopt new naming convention (.1 suffix).
  - Use ln and rm explicitly instead of core-utils in Requires(x).


author: Andrew Overholt <overholt@redhat.com> 0:2.7.1-6
changelog:
  - Fix filename of serializer.jar in xalan-j2's MANIFEST.MF
  - https://bugzilla.redhat.com/show_bug.cgi?id=718738


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:2.7.1-15
changelog:
  - Add NOTICE.txt file to subpackages
  - Remove bundled sources of other packages used to build javadocs


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:2.7.1-17
changelog:
  - Remove classpaths from manifests, resolves: rhbz#575635
  - Remove jlex from classpath
  - Fix source URL to archive.apache.org
  - Don't mix spaces and tabs in spec file
  - Fix end-of-line encoding of some documentation files


author: Tomas Popela <tpopela@redhat.com> - 1.6.0-5
changelog:
  - Drop PipeWire 0.2 requirement as Chrom[e|ium] 90 now depends on PipeWire 0.3
  - Resolves: rhbz#1949809


author: Debarshi Ray <rishi@fedoraproject.org> - 41.1-2
changelog:
  - Make the Supplements specific to Fedora to retain consistency with
    xdg-desktop-portal-gtk
  Resolves: #2051473


author: Peter Hutterer <peter.hutterer@redhat.com> 2.24-3
changelog:
  - Remove high-keycode removal patches, xkbcomp 1.4.2 has been in stable for
    long enough (related #1587998)


author: Mat Booth <fedora@matbooth.co.uk> - 1.0-0.3.b3_xalan2.svn313293
changelog:
  - Build the examples (this serves as a good test suite.)
  - Patch the build script to build javadocs.
  - Add a build dep on a font package because the JDK is missing a dependency
    to function correctly in headless mode. See RHBZ #478480 and #521523.


author: Mat Booth <fedora@matbooth.co.uk> - 1.0-0.5.b3_xalan2.svn313293
changelog:
  - Link to local java API docs properly and fix requires on javadoc package.
  - Build with source and target levels of 1.5 so we don't have to require 1.6.


author: Daniel Veillard <veillard@redhat.com> 1.2.1-1
changelog:
  - initial packaging based on the upstream one and libxml2 one.
  - desactivated mozilla-nss due to detection/architecture problems


author: Daniel Veillard <veillard@redhat.com> 1.2.7-1
changelog:
  - Upstream release of 1.2.7, mostly bug fixes plus new functions
    to GetKeys from simple store and X509 handling.


author: Christopher Aillon <caillon@redhat.com> 1.2.9-4
changelog:
  - NSS has been split out of the mozilla package, so require that now
    and update separate_nspr.patch to account for the new NSS as well


author: Tom "spot" Callaway <tcallawa@redhat.com> - 1.2.16-1
changelog:
  - update to 1.2.16
  - cleanup spec file
  - disable static libs
  - disable rpath
  - enable gcrypt subpackage


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.2.19-3
changelog:
  - Fix duplicate documentation (#1001250)
  - Turn on verbose build output via V=1 make
  - Use %?_isa in explicit package deps
  - Fix base package Group tag to "System Environment/Libraries"
  - Remove %defattr


author: Simo Sorce <simo@redhat.com> - 1.2.20-1
changelog:
  - Update to new upstream release 1.2.20
  - This release fixes a number of miscellaneous bugs and updates expired or
    soon-to-be-expired certificates in the test suite.
  - Also drops the no-ecdsa patch


author: Ondrej Vasik <ovasik@redhat.com> 0.0.27-1
changelog:
  - New version 0.0.27
  - remove several bashisms in scripts
  - add new option --profile for preprocessing documents
    with profiling stylesheet
  - fix several potential crashes in xmlif (found by static analysis)


author: Adam Jackson <ajax@redhat.com> - 7.7-21
changelog:
  - oclock 1.0.4
  - xeyes 1.1.2
  - xfontsel 1.0.6
  - xload 1.1.3
  - xmessage 1.0.5
  - xpr 1.0.5
  - xwd 1.0.7
  - xwud 1.0.5


author: Simone Caronni <negativo17@gmail.com> - 1.7.1-1
changelog:
  - Update to 1.7.1.
  - Skip PDF document generation through fop. It fixes FTBFS on Fedora 22. Tarball
    is not yet compatible with Fedora xmlgraphics-commons >= 2.0.
  - Remove useless db files.


author: Adam Jackson <ajax@redhat.com> - 1.7.1-5
changelog:
  - Drop BuildRequires: java-devel. Originally that was to force a specific
    JDK version, which we no longer need to do.


author: Michel Dänzer <mdaenzer@redhat.com> - 19.1.0-1
changelog:
  - ati 19.1.0 (#1728818)
  - Drop patch 0001-Don-t-set-up-black-scanout-buffer-if-LeaveVT-is-call.patch,
    merged upstream
  - Add patches 0001-Handle-NULL-fb_ptr-in-pixmap_get_fb.patch &
    0002-Don-t-crash-X-server-if-GPU-acceleration-is-not-avai.patch from
    upstream Git master, fixing crashes with ShadowFB


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 2.99.917-39.20200205.0.1
changelog:
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 build
  - Add libXv-devel build requirement


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.1-2
changelog:
  - xf86-input-libinput 1.0.1 (#1951879)
  - Fix the upstream source URL
  - Use autosetup instead of manual patch handling


author: Hans de Goede <hdegoede@redhat.com> - 1.0.12-4
changelog:
  - Fix the crtc not being turned off, causing the dgpu to not suspend,
    after using a dgpu attached output


author: Christophe Fergeau <cfergeau@redhat.com> - 0.1.5-7
changelog:
  - Add upstream patches for Python 3 support
  - Validate RANDR output property atoms
  - Add patch fixing crash with multiple QXL devices
  - This syncs the RHEL branch with both current rawhide and RHEL 7.6


author: Adam Jackson <ajax@redhat.com> - 2.4.0-3
changelog:
  - Restore no-virt-shadowfb patch
  - Refuse to run if there's a UEFI framebuffer; use fbdev or a native driver


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.0-2
changelog:
  - Obsolete linuxwacom, don't Conflict with it.
  - Remove trailing dot from summary (rpmlint warning).
  - Remove spurious executable bits from source files (rpmlint warning).
  - Add AUTHORS, ChangeLog, README to doc


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.1-1
changelog:
  - wacom 0.10.1
  - BuildRequires xorg-x11-util-macros 1.3.0
  - Remove unnecessary 'find' directive, changed upstream.
  - Add GPL document
  - Install 10-wacom.fdi file.
  - Provides: linuxwacom


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.4-2
changelog:
  - Update sources to sourceforge, 0.10.4 was released on sf only.
  - Remove wacom.fdi, we're just using the one shipped by the driver now.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.4-5.20100219
changelog:
  - Fix 10-wacom.conf for N-Trig devices: rename the class (copy/paste error)
    and only take event devices. (Related #526270)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-4.20100325
changelog:
  - Install config snippet in $datadir/X11/xorg.conf.d
  - rename to 50-wacom.conf to match upstream naming


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.6-5.20100521
changelog:
  - Update udev rules file to include Fujitsu serial tablets. (#598168)
  - Update udev rules file to set ID_INPUT_TABLET


author: Peter Hutterer <peter.hutterer@redhat.com> 0.11.99-2.20110527
changelog:
  - Fix udev rules file (thanks to Lennart):
    - The subsystem cannot be assigned.
    - Append the attrs to the device name
    - Match only on tty/pnp


author: Peter Hutterer <peter.hutterer@redhat.com> * 0.11.99-3.20110527
changelog:
  - Fix udev rules file again:
    - use ==, not = to compare subsystems
    - assign ENV{NAME} even though we shouldn't, the server currently requires it
    - assign the lot to subsystem pnp too, that's where the server reads it
      from


author: Peter Hutterer <peter.hutterer@redhat.com> 0.16.0-5
changelog:
  - Align git snapshot building with other drivers
  - Add autotools/libtool to BuildRequires, we need those when building git
    snapshots
  - Always run autoreconf


author: Peter Hutterer <peter.hutterer@redhat.com> 0.23.0-9
changelog:
  - Let systemd restart inputattach when it exits (i.e. after suspend)
    (#1046912)
  - Fix the description to avoid superfluous quotes


author: Hans de Goede <hdegoede@redhat.com> - 7.5-11
changelog:
  - Update most fonts:
     -encodings-1.0.4
     -font-adobe-100dpi-1.0.3
     -font-adobe-75dpi-1.0.3
     -font-adobe-utopia-100dpi-1.0.4
     -font-adobe-utopia-75dpi-1.0.4
     -font-adobe-utopia-type1-1.0.4
     -font-arabic-misc-1.0.3
     -font-bh-100dpi-1.0.3
     -font-bh-75dpi-1.0.3
     -font-bh-lucidatypewriter-100dpi-1.0.3
     -font-bh-lucidatypewriter-75dpi-1.0.3
     -font-bitstream-100dpi-1.0.3
     -font-bitstream-75dpi-1.0.3
     -font-bitstream-type1-1.0.3
     -font-cronyx-cyrillic-1.0.3
     -font-cursor-misc-1.0.3
     -font-daewoo-misc-1.0.3
     -font-dec-misc-1.0.3
     -font-isas-misc-1.0.3
     -font-jis-misc-1.0.3
     -font-micro-misc-1.0.3
     -font-misc-cyrillic-1.0.3
     -font-misc-ethiopic-1.0.3
     -font-misc-misc-1.1.2
     -font-mutt-misc-1.0.3
     -font-schumacher-misc-1.1.2
     -font-screen-cyrillic-1.0.4
     -font-sony-misc-1.0.3
     -font-sun-misc-1.0.3
     -font-winitzki-cyrillic-1.0.3
     -font-xfree86-type1-1.0.4
  - Fix a bug in jisx0201.1976-0.enc (#1009350)


author: Simone Caronni <negativo17@gmail.com> - 7.5-12
changelog:
  - Clean up SPEC file, remove obsolete tags, fix all rpmlint warnings.
  - Rework build/install section to be like other xorg packages.
  - Remove all obsolete provides/obsoletes/conflicts.
  - Simplify build requirements.
  - Simplify build, it has not changed since 2008.


author: Peter Hutterer <peter.hutterer@redhat.com> 7.6-24
changelog:
  - bigregsproto 1.1.2
  - compositeproto 0.4.2
  - damageproto 1.2.1
  - fontsproto 2.1.2
  - inputproto 2.2
  - kbproto 1.0.6
  - recordproto 1.14.2
  - scrnsaverproto 1.2.2
  - xcmiscproto 1.2.2
  - xextproto 7.2.1


author: Hans de Goede <hdegoede@redhat.com> - 7.7-10
changelog:
  - fontsproto-2.1.3
  - videoproto-2.3.2
  - xextproto-7.3.0
  - xproto-7.0.26
  - Cherry pick some unreleased fixes from upstream git


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-9
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2108156, rhbz#2108161


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.20.11-11
changelog:
  - CVE fix for: CVE-2022-4283 (#2151799), CVE-2022-46340 (#2151774),
    CVE-2022-46341 (#2151779), CVE-2022-46342 (#2151784),
    CVE-2022-46343 (#2151789), CVE-2022-46344 (#2151794)


author: Hans de Goede <hdegoede@redhat.com> - 1.19.0-0.3.20161026
changelog:
  - Sync with upstream git, bringing in a bunch if bug-fixes
  - Add some extra fixes which are pending upstream
  - This also adds PointerWarping emulation to Xwayland, which should improve
    compatiblity with many games


author: Ben Crocker <bcrocker@redhat.com> - 1.19.0-0.6.20161028
changelog:
  - Fix Config record allocation during startup: if xorg.conf.d directory
  - was absent, a segfault resulted.


author: Hans de Goede <hdegoede@redhat.com> - 1.19.0-0.7.rc2
changelog:
  - Update to 1.19.0-rc2
  - Fix (hopefully) various crashes in FlushAllOutput() (rhbz#1382444)
  - Fix Xwayland crashing in glamor on non glamor capable hw (rhbz#1390018)


author: Olivier Fourdan <ofourdan@redhat.com> 1.19.0-1
changelog:
  - xserver 1.19.0
  - Fix use after free of cursors in Xwayland (rhbz#1385258)
  - Fix an issue where some monitors would show only black, or
    partially black when secondary GPU outputs are used


author: Hans de Goede <hdegoede@redhat.com> - 1.19.0-2
changelog:
  - Add some patches for better integration with the nvidia binary driver
  - Add a patch from upstream fixing a crash (rhbz#1389886)


author: Olivier Fourdan <ofourdan@redhat.com> 1.19.6-5
changelog:
  - xwayland: avoid race condition on new keymap
  - xwayland: Keep separate variables for pointer and tablet foci (rhbz#1519961)
  - xvfb-run now support command line option “--auto-display”


author: Olivier Fourdan <ofourdan@redhat.com> - 1.19.99.904-2
changelog:
  - Re-fix "use type instead of which in xvfb-run (rhbz#1443357)" which
    was overridden inadvertently


author: Adam Jackson <ajax@redhat.com> - 1.20.1-3
changelog:
  - Assorted RHEL mustard:
    - Don't probe for drivers we're not shipping
    - Enable PAM
    - Link Xorg with -z now
    - Nerf modesetting's atomic ioctl support
    - Don't autoconfigure vesa or fbdev from X -configure
    - Call LeaveVT on RANDR's CloseScreen path so we drop drm master
    - Try harder to get initial spanning desktop if the output's
      preferred mode was filtered away
  - Sync va_gl/vdpau patch from F29


author: Ben Crocker <bcrocker@redhat.com> - 1.20.3-5
changelog:
  - Add Eric Anholt's patch e50c85f4ebf559 from upstream:
  - Fix segfault on probing a non-PCI platform device on a system with PCI
  - NOTE: also pertains on a system with no PCI, e.g. s390x.
    Resolves: #1652013


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-3
changelog:
  - Downgrade modesetting "glamor initialization failed" X_ERROR → X_INFO
    Resolves: #1724573
  - Xwayland / Present leak fixes for #1728684


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-5
changelog:
  - xwayland: Hold a pixmap reference in struct xwl_present_event
    Related: #1728684
  - glamor: Fix glamor_poly_fill_rect_gl xRectangle::width/height handling
    Resolves: #1740250


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-8
changelog:
  - CVE fixes for: CVE-2020-14345 (#1872391), CVE-2020-14346 (#1872395),
    CVE-2020-14361 (#1872402), CVE-2020-14362 (#1872409)


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-4
changelog:
  - CVE fix for: CVE-2021-4008 (#2030162), CVE-2021-4009 (#2030172),
    CVE-2021-4010 (#2030175), CVE-2021-4011 (#2030181)


author: lutw <lutw@ieisystem.com> - 1.20.11-16.0.5
changelog:
  - Fix ix CVE-2023-5367 CVE-2023-5380 CVE-2023-6377 CVE-2023-6478 CVE-2024-0229 CVE-2024-21885 CVE-2024-21886 CVE-2024-0408 CVE-2024-0409


author: José Expósito <jexposit@redhat.com> - 1.20.11-20
changelog:
  - CVE fix for: CVE-2023-6377, CVE-2023-6478
    Resolves: https://issues.redhat.com/browse/RHEL-18321
    Resolves: https://issues.redhat.com/browse/RHEL-18327


author: José Expósito <jexposit@redhat.com> - 1.20.11-21
changelog:
  - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409
    Resolves: https://issues.redhat.com/browse/RHEL-21207
    Resolves: https://issues.redhat.com/browse/RHEL-20528
    Resolves: https://issues.redhat.com/browse/RHEL-20378
    Resolves: https://issues.redhat.com/browse/RHEL-20384
    Resolves: https://issues.redhat.com/browse/RHEL-21191
    Resolves: https://issues.redhat.com/browse/RHEL-21198


author: José Expósito <jexposit@redhat.com> - 1.20.11-23
changelog:
  - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and
    CVE-2024-31083
  - Add util-linux as a dependency of Xvfb
  - Fix compilation error on i686


author: Hangbo Fan <fanhangbo.fhb@alibaba-inc.com> - 1.20.11-25.0.1
changelog:
  - Add doc sub package
  - Fix doc package installation (wangkaiyuan@inspur.com)
  - cherry-pick `add sw arch #1ba6a0036d929c82c5516a18350d5c27cc28e210`. (nijie@wxiat.com)
  - cherry-pick: `add sw arch #3b1aa1ee2c00aeebe71a618589826c2d1cab136e`. (Weisson@linux.alibaba.com)
  - Fix the splash screen issue in the phytium S5000C (yuanxia2073@phytium.com.cn)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-2
changelog:
  - CVE fix for: CVE-2021-4008 (#2038067), CVE-2021-4009 (#2038070),
    CVE-2021-4010 (#2038072), CVE-2021-4011 (#2038074)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-3
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2110440, rhbz#2110433


author: Peter Hutterer <peter.hutterer@redhat.com> - 21.1.3-5
changelog:
  - CVE fix for: CVE-2022-4283 (#2151803), CVE-2022-46340 (#2151778),
    CVE-2022-46341 (#2151783), CVE-2022-46342 (#2151786),
    CVE-2022-46343 (#2151793), CVE-2022-46344 (#2151796)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.0.99.902-1
changelog:
  - xwayland 21.0.99.902
  - Remove xdmcp, udev, udev_kms build options
  - Stop overriding the vendor name, same as xorg-x11-server


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.9-5
changelog:
  Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Adam Jackson <ajax@redhat.com> - 7.7-25
changelog:
  - iceauth 1.0.8
  - xkill 1.0.5
  - xrdb 1.1.1
  - xrefresh 1.0.6
  - xset 1.2.4
  - xsetroot 1.1.2
  - HTTPS URLs


author: Adam Jackson <ajax@redhat.com> - 7.7-24
changelog:
  - Make -devel Require the base package, so the pc file will point to an
    xkbcomp that actually exists.


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.999-28
changelog:
  - remove dependency on ImageMagick and netpbm-progs, because they were needed for
    tests during %build phase, which were removed in commit SHA 0595c15da29


author: Daniel P. Berrange <berrange@redhat.com> - 2.0.4-1
changelog:
  - Update to 2.0.4 release (rhbz #845777)
  - Fix License tag to reflect change in 2.0.0 series from BSD to ISC


author: Kalev Lember <klember@redhat.com> - 2:40~beta-2
changelog:
  - Drop libtool as-needed hack as as-needed is in default LDFLAGS now
  - Remove unneeded ldconfig_scriptlets macro call
  - Tighten soname globs


author: Matej Mužila <mmuzila@redhat.com> - 3:2.4-5
changelog:
  - Add "Wants" dependency on network-online.target
  - Remove "After" dependency on NetworkManager-wait-online.service


author: Matthias Saou <http://freshrpms.net/> 0.13.45-3
changelog:
  - Split off -utils sub-package (#199467). Could have been plain "zzip"?
  - Have sub-packages require exact release too.
  - Build require automake to make the aclocal-1.9 check happy.
  - Use --enable-frame-pointer otherwise -g gets removed from the CFLAGS.


author: Matthias Saou <http://freshrpms.net/> 0.13.49-1
changelog:
  - Update to 0.13.49 to fix CVE-2007-1614 (rhbz #233700).
  - Include new man3 pages to the devel sub-package.


author: Matthias Saou <http://freshrpms.net/> 0.13.49-2
changelog:
  - Disable static lib build instead of excluding it later.
  - Remove rpath on 64bit archs.
  - Switch to using DESTDIR install method.


author: Matthias Saou <http://freshrpms.net/> 0.13.49-4
changelog:
  - Include patch to fix fd.open calls with recent glibc.
  - Disable _smp_mflags since the docs fail to build.


author: Matthias Saou <http://freshrpms.net/> 0.13.59-1
changelog:
  - Update to 0.13.59.
  - Remove no longer needed 'open' patch.
  - Rebase the multilib patch, still required.
  - Re-enable _smp_mflags, build works again with it apparently.


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.13.69-1
changelog:
  - Update to 0.13.69 release
  - Fixes: #1598246 (CVE-2018-6541)
  - Fixes: #1554673 (CVE-2018-7727)
  - Use versioned python executables everywhere


author: Jakub Martisko <jamartis@redhat.com> - 0.13.69-4
changelog:
  - Add the missing CVE-2018-17828.part2.patch file
  - Fix Formating of the previous 2 changelog entries


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-1
changelog:
  - Rebase to 0.13.71
  - Drop the CVE patches, they are now part of the upstream package
  - Build no longer requires python2
  - Resolves: 1807565


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-7
changelog:
  - Remove the doc/zzipdoc/{options,match}.py scritps from the original tar
  - Replace them with a current github version
  - The original version of the files contains autogenerated header with incompatible license
  - This build thus uses modified tar archive
  Resolves: rhbz#1982241


