# changelog

author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't open a PAM session until we've forked and become the user (#25690).
  - Apply Andrew Bartlett's patch for letting pam_authenticate() know which
    host the user is attempting a login from.
  - Resync with parts of Damien Miller's openssh.spec from CVS.
  - Don't expose KbdInt responses in debug messages (from CVS).
  - Detect and handle errors in rsa_{public,private}_decrypt (from CVS).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.0p1.
  - Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
  - Resync with parts of Damien Miller's openssh.spec from CVS, including
    update of x11 askpass to 1.2.0.
  - Only require openssl (don't prereq) because we generate keys in the init
    script now.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.1p1.
  - Add init script mods from Pekka Savola.
  - Tweak the init script to match the CVS contrib script more closely.
  - Redo patch to ssh-add to try to adding both identity and id_dsa to also try
    adding id_rsa.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Redo patch to move pam_open_session after the server setuid()s to the user.
  - Rework the nopam patch to use be picked up by autoconf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Chuck the closing patch.
  - Add a trigger to add host keys for protocol 2 to the config file, now that
    configuration file syntax requires us to specify it with HostKey if we
    specify any other HostKey values, which we do.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Revert the patch to move pam_open_session.
  - Init script and spec file changes from Pekka Savola. (#28750)
  - Patch sftp to recognize '-o protocol' arguments. (#29540)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
  - don't enable challenge-response by default until we find a way to not
    have too many userauth requests (we may make up to six pubkey and up to
    three password attempts as it is)
  - remove build dependency on rsh to match openssh.com's packages more closely


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p2
  - call setcred() again after initgroups, because the "creds" could actually
    be group memberships


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make do_pam_setcred() smart enough to know when to establish creds and
    when to reinitialize them
  - add in a couple of other fixes from Damien for inclusion in the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - mention that challengereponse supports PAM, so disabling password doesn't
    limit users to pubkey and rsa auth (#34378)
  - bypass the daemon() function in the init script and call initlog directly,
    because daemon() won't start a daemon it detects is already running (like
    open connections)
  - require the version of openssl we had when we were built


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove explicit openssl requirement, fixes builddistro issue
  - make initscript stop() function wait until sshd really dead to avoid 
    races in condrestart


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish marking strings in the init script for translation
  - modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
    at startup (change merged from openssh.com init script, originally by
    Pekka Savola)
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
    to be removed before the next beta cycle because it's a big departure
    from the upstream version


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix an error parsing the new default sshd_config
  - add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
    dealing with comments right


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change Copyright: BSD to License: BSD
  - add Markus Friedl's unverified patch for the cookie file deletion problem
    so that we can verify it
  - drop patch to check if xauth is present (was folded into cookie patch)
  - don't apply gssapi patches for the errata candidate
  - clear supplemental groups list at startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull cvs patch to add session initialization to no-pty sessions
  - pull cvs patch to not cut off challengeresponse auth needlessly
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed (#49263)


author: Nalin Dahyabhai <nalin@redhat.com> 2.9p2-7
changelog:
  - fix scp's server's reporting of file sizes, and build with the proper
    preprocessor define to get large-file capable open(), stat(), etc.
    (sftp has been doing this correctly all along) (#51827)
  - configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
  - pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
  - mark profile.d scriptlets as config files (#42337)
  - refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
  - change a couple of log() statements to debug() statements (#50751)
  - pull cvs patch to add -t flag to sshd (#28611)
  - clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.0p1
  - update to x11-ssh-askpass 1.2.4.1
  - change build dependency on a file from pam-devel to the pam-devel package
  - replace primes with moduli


author: Nalin Dahyabhai <nalin@redhat.com> 3.0p1-1
changelog:
  - merge some of Damien Miller <djm@mindrot.org> changes from the upstream
    3.0p1 spec file and init script


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-3
changelog:
  - add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
    exchange, authentication, and named key support


author: Nalin Dahyabhai <nalin@redhat.com> SNAP-20020220
changelog:
  - update to SNAP-20020220 for testing purposes (you've been warned, if there's
    anything to be warned about, gss patches won't apply, I don't mind)


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
changelog:
  - require sharutils for building (mindrot #137)
  - require db1-devel only when building for 6.x (#55105), which probably won't
    work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
  - require pam-devel by file (not by package name) again
  - add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2gss
changelog:
  - reintroduce Simon's gssapi patches
  - add buildprereq for autoconf253, which is needed to regenerate configure
    after applying the gssapi patches
  - refresh to the latest version of Markus's patch to build properly with
    older versions of OpenSSL


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-3
changelog:
  - pull patch from CVS to avoid printing error messages when some of the
    default keys aren't available when running ssh-add
  - refresh to current revisions of Simon's patches


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-4
changelog:
  - drop buildreq on db1-devel
  - require pam-devel by package name
  - require autoconf instead of autoconf253 again


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-1
changelog:
  - update to 3.3p1
  - merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
  - disable gtk2 askpass
  - require pam-devel by filename rather than by package for erratum
  - include patch from Solar Designer to work around anonymous mmap failures


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-2
changelog:
  - rework the close-on-exit docs
  - include configuration file man pages
  - make use of nologin as the privsep shell optional


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-2
changelog:
  - patch PAM configuration to use relative path names for the modules, allowing
    us to not worry about which arch the modules are built for on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-6
changelog:
  - move scp to the -clients subpackage, because it directly depends on ssh
    which is also in -clients (#84329)


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-6
changelog:
  - modify patch which clears the supplemental group list at startup to only
    complain if setgroups() fails if sshd has euid == 0
  - handle krb5 installed in %{_prefix} or elsewhere by using krb5-config


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-11
changelog:
  - apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
  - skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - additional fix for apparently-never-happens double-free in buffer_free()
  - extend fix for #103998 to cover SSH1


author: Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
changelog:
  * Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
  - Built RHLE3 U2 update package.


author: Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
changelog:
  - request gssapi-with-mic by default but not delegation (flag day for anyone
    who used previous gssapi patches)
  - no longer request x11 forwarding by default


author: Nalin Dahyabhai <nalin@redhat.com> 3.9p1-8
changelog:
  - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
    to enable display of a vendor patch level during version exchange (#120285)
  - configure with --disable-strip to build useful debuginfo subpackages


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - change permissions on pam.d/sshd to 0644 (#64697)
  - patch initscript so it doesn't kill opened sessions if
    the sshd daemon isn't running anymore (#67624)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-10
changelog:
  - enable trusted forwarding by default if X11 forwarding is 
    required by user (#137685 and duplicates)
  - disable protocol 1 support by default in sshd server config (#88329)
  - keep the gnome-askpass dialog above others (#69131)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-11
changelog:
  - don't call syslog in signal handler
  - allow password authentication when copying from remote
    to remote machine (#103364)


author: Tomas Mraz <tmraz@redhat.com> 4.0p1-2
changelog:
  - fixed Local/RemoteForward in ssh_config.5 manpage
  - fix fatal when Local/RemoteForward is used and scp run (#153258)
  - don't leak user validity when using krb5 authentication


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-3
changelog:
  - fix small regression caused by the nologin patch (#161956)
  - fix race in getpeername error checking (mindrot #1054)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-4
changelog:
  - don't deadlock on exit with multiple X forwarded channels (#152432)
  - don't use X11 port which can't be bound on all IP families (#163732)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-5
changelog:
  - use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
  - install ssh-copy-id from contrib (#88707)


author: Tomas Mraz <tmraz@redhat.com> 4.2p1-2
changelog:
  - use include instead of pam_stack in pam config
  - use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
  - upstream patch for displaying authentication errors


author: Warren Togami <wtogami@redhat.com> - 4.2p1-7
changelog:
  - xorg-x11-devel -> libXt-devel
  - rebuild for new xauth location so X forwarding works
  - buildreq audit-libs-devel
  - buildreq automake for aclocal
  - buildreq imake for xmkmf
  -  -D_GNU_SOURCE in flags in order to get it to build
     Ugly hack to workaround openssh defining __USE_GNU which is
     not allowed and causes problems according to Ulrich Drepper
     fix this the correct way after FC5test1


author: Nalin Dahyabhai <nalin@redhat.com> - 4.2p1-8
changelog:
  - work around missing gccmakedep by wrapping makedepend in a local script
  - remove now-obsolete build dependency on "xauth"


author: Tomas Mraz <tmraz@redhat.com> - 4.2p1-9
changelog:
  - drop x11-ssh-askpass from the package
  - drop old build_6x ifs from spec file
  - improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
    characters to person looking at the display
  - less hackish fix for the __USE_GNU problem


author: Tomas Mraz <tmraz@redhat.com> - 4.3p1-2
changelog:
  - fixed another place where syslog was called in signal handler
  - pass locale environment variables to server, accept them there (#179851)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-3
changelog:
  - enable the subprocess in chroot to send messages to system log
  - sshd should prevent login if audit call fails


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-6
changelog:
  - improve selinux patch (by Jan Kiszka)
  - upstream patch for buffer append space error (#191940)
  - fixed typo in configure.ac (#198986)
  - added pam_keyinit to pam configuration (#198628)
  - improved error message when askpass dialog cannot grab
    keyboard input (#198332)
  - buildrequires xauth instead of xorg-x11-xauth
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-7
changelog:
  - dropped old ssh obsoletes
  - call the pam_session_open/close from the monitor when privsep is
    enabled so it is always called as root (patch by Darren Tucker)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-8
changelog:
  - drop the pam-session patch from the previous build (#201341)
  - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-9
changelog:
  - don't report duplicate syslog messages, use correct local time (#189158)
  - don't allow spnego as gssapi mechanism (from upstream)
  - fixed memleaks found by Coverity (from upstream)
  - allow ip options except source routing (#202856) (patch by HP)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10
changelog:
  - improve gssapi-no-spnego patch (#208102)
  - CVE-2006-4924 - prevent DoS on deattack detector (#207957)
  - CVE-2006-5051 - don't call cleanups from signal handler (#208459)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-11
changelog:
  - merge sshd initscript patches
  - kill all ssh sessions when stop is called in halt or reboot runlevel
  - remove -TERM option from killproc so we don't race on sshd restart


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-13
changelog:
  - improved pam_session patch so it doesn't regress, the patch is necessary
    for the pam_session_close to be called correctly as uid 0


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-2
changelog:
  - support mls on labeled networks (#220487)
  - support mls level selection on unlabeled networks
  - allow / in usernames in scp (only beginning /, ./, and ../ is special)


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-8
changelog:
  - fix sftp client problems on write error (#247802)
  - allow disabling autocreation of server keys (#235466)


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-1
changelog:
  - upgrade to latest upstream
  - use libedit in sftp (#203009)
  - fixed audit log injection problem (CVE-2007-3102)


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-4
changelog:
  - do not copy /etc/localtime into the chroot as it is not
    necessary anymore (#193184)
  - call setkeycreatecon when selinux context is established
  - test for NULL privk when freeing key (#391871) - patch by
    Pierre Ossman


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-9
changelog:
  - set FD_CLOEXEC on client socket
  - apply real fix for window size problem (#286181) from upstream
  - apply fix for the spurious failed bind from upstream
  - apply open handle leak in sftp fix from upstream


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-10
changelog:
  - fix race on control master and cleanup stale control socket (#436311)
    patches by David Woodhouse


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-1
changelog:
  - upgrade to new upstream (#441066)
  - prevent initscript from killing itself on halt with upstart (#438449)
  - initscript status should show that the daemon is running
    only when the main daemon is still alive (#430882)


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-2
changelog:
  - add LANGUAGE to accepted/sent environment variables (#443231)
  - use pam_selinux to obtain the user context instead of doing it itself
  - unbreak server keep alive settings (patch from upstream)
  - small addition to scp manpage


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-1
changelog:
  - upgrade to new upstream release
  - fixed a problem with public key authentication and explicitely
    specified SELinux role


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-4
changelog:
  - set FD_CLOEXEC on channel sockets (#475866)
  - adjust summary
  - adjust nss-keys patch so it is applicable without selinux patches (#470859)


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-5
changelog:
  - remove obsolete --with-rsh (#478298)
  - add pam_sepermit to allow blocking confined users in permissive mode
    (#471746)
  - move system-auth after pam_selinux in the session stack


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-20
changelog:
  - merged xmodifiers to redhat patch
  - merged gssapi-role to selinux patch
  - merged cve-2007_3102 to audit patch
  - sesftp patch only with WITH_SELINUX flag
  - rearange sesftp patch according to upstream request


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-28
changelog:
  - Repair initscript to be acord to guidelines (#521860)
  - Add bugzilla# to application of edns and xmodifiers patch


author: Jan F. Chadima <jchadima@redhat.com> - 5.5p1-10 + 0.9.2-26
changelog:
  - Repair the reference in man ssh-ldap-helper(8)
  - Repair the PubkeyAgent section in sshd_config(5)
  - Provide example ldap.conf


author: Jan F. Chadima <jchadima@redhat.com> - 5.6p1-20 + 0.9.2-29
changelog:
  - reapair clientloop crash (#627332)
  - properly restore euid in case connect to the ssh-agent socket fails


author: Jan F. Chadima <jchadima@redhat.com> - 5.8p1-18 + 0.9.2-30
changelog:
  - add periodical reseeding of random generator 
  - change selinux contex for internal sftp in do_usercontext
  - exit(0) after sigterm


author: Jan F. Chadima <jchadima@redhat.com> - 5.8p1-20 + 0.9.2-30
changelog:
  - use /dev/random or /dev/urandom for seeding prng
  - improve periodical reseeding of random generator


author: Jan F. Chadima <jchadima@redhat.com> - 5.8p2-12 + 0.9.2-31
changelog:
  - Systemd compatibility according to Mathieu Bridon <bochecha@fedoraproject.org>
  - Split out the host keygen into their own command, to ease future migration
    to systemd. Compatitbility with the init script was kept.
  - Migrate the package to full native systemd unit files, according to the Fedora
    packaging guidelines.
  - Prepate the unit files for running an ondemand server. (do not add it actually)


author: Tomas Mraz <tmraz@redhat.com> - 5.9p1-11 + 0.9.2-32
changelog:
  - remove unnecessary requires on initscripts
  - set VerifyHostKeyDNS to ask in the default configuration (#739856)


author: Tomas Mraz <tmraz@redhat.com> - 5.9p1-12 + 0.9.2-32
changelog:
  - still support /etc/sysconfig/sshd loading in sshd service (#754732)
  - fix incorrect key permissions generated by sshd-keygen script (#754779)


author: Tomas Mraz <tmraz@redhat.com> - 5.9p1-13 + 0.9.2-32
changelog:
  - add back the restorecon call to ssh-copy-id - it might be needed on older
    distributions (#739989)


author: Petr Lautrbach <plautrba@redhat.com> 5.9p1-18 + 0.9.2-32
changelog:
  - replace TwoFactorAuth with RequiredAuthentications[12]
    https://bugzilla.mindrot.org/show_bug.cgi?id=983


author: Tomas Mraz <tmraz@redhat.com> 5.9p1-23 + 0.9.3-1
changelog:
  - fix segfault in su when pam_ssh_agent_auth is used and the ssh-agent
    is not running, most probably not exploitable
  - update pam_ssh_agent_auth to 0.9.3 upstream version


author: Petr Lautrbach <plautrba@redhat.com> 6.1p1-1 + 0.9.3-3
changelog:
  - new upstream release (#852651)
  - use DIR: kerberos type cache (#848228)
  - don't use chroot_user_t for chrooted users (#830237)
  - replace scriptlets with systemd macros (#850249)
  - don't use /bin and /sbin paths (#856590)


author: Petr Lautrbach <plautrba@redhat.com> 6.1p1-2
changelog:
  - add SELinux comment to /etc/ssh/sshd_config about SELinux command to modify port (#861400)
  - drop required chkconfig (#865498)
  - drop openssh-5.9p1-sftp-chroot.patch (#830237)


author: Petr Lautrbach <plautrba@redhat.com> 6.1p1-3 + 0.9.3-3
changelog:
  - replace RequiredAuthentications2 with AuthenticationMethods based on upstream
  - obsolete RequiredAuthentications[12] options
  - fix openssh-6.1p1-privsep-selinux.patch


author: Petr Lautrbach <plautrba@redhat.com> 6.2p1-2 + 0.9.3-4
changelog:
  - keep track of which IndentityFile options were manually supplied and
    which were default options, and don't warn if the latter are missing.
    (mindrot#2084)


author: Petr Lautrbach <plautrba@redhat.com> 6.2p1-3 + 0.9.3-4
changelog:
  - sshd.service: use KillMode=process (#890376)
  - add latest config.{sub,guess} to support aarch64 (#926284)


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-4 + 0.9.3-5
changelog:
  - don't show Success for EAI_SYSTEM (#985964)
  - make sftp's libedit interface marginally multibyte aware (#841771)


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-7 + 0.9.3-5
changelog:
  - use hmac_suffix for ssh{,d} hmac checksums
  - bump the minimum value of SSH_USE_STRONG_RNG to 14 according to SP800-131A
  - automatically restart sshd.service on-failure after 42s interval


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-8 + 0.9.3-5
changelog:
  - sshd-keygen: generate only RSA keys by default (#1010092)
  - use dist tag in suffixes for hmac checksum files


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-9 + 0.9.3-5
changelog:
  - use dracut-fips package to determine if a FIPS module is installed
  - revert -fips subpackages and hmac files suffixes


author: Petr Lautrbach <plautrba@redhat.com> 6.3p1-2 + 0.9.3-6
changelog:
  - use default_ccache_name from /etc/krb5.conf for a kerberos cache (#991186)
  - increase the size of the Diffie-Hellman groups (#1010607)
  - sshd-keygen to generate ECDSA keys <i.grok@comcast.net> (#1019222)


author: Petr Lautrbach <plautrba@redhat.com> 6.3p1-5 + 0.9.3-7
changelog:
  - adjust gss kex mechanism to the upstream changes (#1024004)
  - don't use xfree in pam_ssh_agent_auth sources <geertj@gmail.com> (#1024965)


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-2 + 0.9.3-1
changelog:
  - fix fatal() cleanup in the audit patch (#1029074)
  - fix parsing logic of ldap.conf file (#1033662)


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-3 + 0.9.3-1
changelog:
  - sshd-keygen - use correct permissions on ecdsa host key (#1023945)
  - use only rsa and ecdsa host keys by default


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-4 + 0.9.3-1
changelog:
  - use SSH_COPY_ID_LEGACY variable to run ssh-copy-id in the legacy mode
  - make /etc/ssh/moduli file public (#1043661)
  - test existence of /etc/ssh/ssh_host_ecdsa_key in sshd-keygen.service
  - don't clean up gssapi credentials by default (#1055016)
  - ssh-agent - try CLOCK_BOOTTIME with fallback (#1091992)
  - prevent a server from skipping SSHFP lookup - CVE-2014-2653 (#1081338)
  - ignore environment variables with embedded '=' or '\0' characters - CVE-2014-2532
    (#1077843)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-1 + 0.9.3-2
changelog:
  - disable the curve25519 KEX when speaking to OpenSSH 6.5 or 6.6
  - add support for ED25519 keys to sshd-keygen and sshd.sysconfig
  - drop openssh-server-sysvinit subpackage
  - slightly change systemd units logic - use sshd-keygen.service (#1066615)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-5 + 0.9.3-3
changelog:
  - set a client's address right after a connection is set (mindrot#2257)
  - apply RFC3454 stringprep to banners when possible (mindrot#2058)
  - don't consider a partial success as a failure (mindrot#2270)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-6 + 0.9.3-3
changelog:
  - privsep_preauth: use SELinux context from selinux-policy (#1008580)
  - change audit trail for unknown users (mindrot#2245)
  - fix kuserok patch which checked for the existence of .k5login
    unconditionally and hence prevented other mechanisms to be used properly
  - revert the default of KerberosUseKuserok back to yes (#1153076)
  - ignore SIGXFSZ in postauth monitor (mindrot#2263)
  - sshd-keygen - don't generate DSA and ED25519 host keys in FIPS mode


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-9 + 0.9.3-3
changelog:
  - the .local domain example should be in ssh_config, not in sshd_config
  - use different values for DH for Cisco servers (#1026430)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-11.1 + 0.9.3-3
changelog:
  - error message if scp when directory doesn't exist (#1142223)
  - parsing configuration file values (#1130733)
  - documentation in service and socket files for systemd (#1181593)
  - updated ldap patch (#981058)
  - fixed vendor-patchlevel
  - add new option GSSAPIEnablek5users and disable using ~/.k5users by default CVE-2014-9278 (#1170745)


author: Jakub Jelen <jjelen@redhat.com> 6.7p1-3 + 0.9.3-4
changelog:
  - update coverity patch
  - make output of sshd -T more consistent (#1187521)
  - enable seccomp for sandboxing instead of rlimit (#1062953)
  - update hardening to compile on gcc5
  - Add SSH KDF CAVS test driver (#1193045)
  - Fix ssh-copy-id on non-sh remote shells (#1045191)


author: Jakub Jelen <jjelen@redhat.com> 6.7p1-6 + 0.9.3-4
changelog:
  - Update seccomp filter to work on i686 architectures (#1194401)
  - Fix previous failing build (#1195065)


author: Jakub Jelen <jjelen@redhat.com> 6.7p1-9 + 0.9.3-4
changelog:
  - Adjust seccomp filter for primary architectures and solve aarch64 issue (#1197051)
  - Solve issue with ssh-copy-id and keys without trailing newline (#1093168)


author: Jakub Jelen <jjelen@redhat.com> 6.7p1-11 + 0.9.3-4
changelog:
  - Ability to specify LDAP filter in ldap.conf for ssh-ldap-helper
  - Fix auditing when using combination of ForceCommand and PTY
  - Add sftp option to force mode of created files (from rhel)
  - Fix tmpfiles.d entries to be more consistent (#1196807)


author: Jakub Jelen <jjelen@redhat.com> 6.8p1-1 + 0.9.3-5
changelog:
  - new upstream release openssh-6.8p1 (#1203245)
  - Resolve segfault with auditing commands (#1203900)
  - Workaround krb5-config bug (#1204646)


author: Jakub Jelen <jjelen@redhat.com> 6.8p1-3 + 0.9.3-5
changelog:
  - Fixed issue with GSSAPI key exchange (#1207719)
  - Add pam_namespace to sshd pam stack (based on #1125110)
  - Remove krb5-config workaround for #1203900
  - Fix handling SELinux context in MLS systems
  - Regression: solve sshd segfaults if other instance already running


author: Jakub Jelen <jjelen@redhat.com> 6.8p1-6 + 0.9.3-5
changelog:
  - Resolve problem with pam_ssh_agent_auth after rebase (#1225106)
  - ssh-copy-id: tcsh doesnt work with multiline strings
  - Fix upstream memory problems
  - Add missing options in testmode output and manual pages
  - Provide LDIF version of LPK schema
  - Document required selinux boolean for working ssh-ldap-helper


author: Jakub Jelen <jjelen@redhat.com> 6.9p1-1 + 0.9.3-6
changelog:
  - New upstream release (#1238253)
  - Increase limitation number of files which can be listed using glob in sftp
  - Correctly revert "PermitRootLogin no" option from upstream sources (#89216)


author: Jakub Jelen <jjelen@redhat.com> 6.9p1-2 + 0.9.3-6
changelog:
  - Enable SECCOMP filter for s390* architecture (#1195065)
  - Fix race condition when multiplexing connection (#1242682)


author: Jakub Jelen <jjelen@redhat.com> 7.0p1-1 + 0.9.3-7
changelog:
  - New upstream release (#1252639)
  - Fix pam_ssh_agent_auth package (#1251777)
  - Security: Use-after-free bug related to PAM support (#1252853)
  - Security: Privilege separation weakness related to PAM support (#1252854)
  - Security: Incorrectly set TTYs to be world-writable (#1252862)


author: Jakub Jelen <jjelen@redhat.com> 7.0p1-2 + 0.9.3-7
changelog:
  - Fix problem with DSA keys using pam_ssh_agent_auth (#1251777)
  - Add GSSAPIKexAlgorithms option for server and client application
  - Possibility to validate legacy systems by more fingerprints (#1249626)


author: Jakub Jelen <jjelen@redhat.com> 7.1p1-3 + 0.9.2-8
changelog:
  - Fix FIPS mode for DH kex (#1260253)
  - Provide full RELRO and PIE form askpass helper (#1264036)
  - Fix gssapi key exchange on server and client (#1261414)
  - Allow gss-keyex root login when without-password is set (upstream #2456)
  - Fix obsolete usage of SELinux constants (#1261496)


author: Jakub Jelen <jjelen@redhat.com> 7.1p1-4 + 0.9.2-8
changelog:
  - Review SELinux user context handling after authentication (#1269072)
  - Handle root logins the same way as other users (#1269072)
  - Audit implicit mac, if mac is covered in cipher (#1271694)
  - Increase size limit for remote glob over sftp


author: Jakub Jelen <jjelen@redhat.com> 7.1p1-6 + 0.9.2-8
changelog:
  - Preserve IUTF8 tty mode flag over ssh connections (#1270248)
  - Do not require sysconfig file to start service (#1279521)
  - Update ssh-copy-id to upstream version
  - GSSAPI Key Exchange documentation improvements
  - Remove unused patches


author: Jakub Jelen <jjelen@redhat.com> 7.1p1-7 + 0.9.2-8
changelog:
  - Change RPM define macros to global according to packaging guidelines
  - Fix wrong handling of SSH_COPY_ID_LEGACY environment variable
  - Update ssh-agent and ssh-keysign permissions (#1296724)
  - Fix few problems with alternative builds without GSSAPI or openSSL
  - Fix condition to run sshd-keygen


author: Jakub Jelen <jjelen@redhat.com> 7.1p2-2 + 0.10.2-1
changelog:
  - Rebased to recent version of pam_ssh_agent_auth
  - Upstream fix for CVE-2016-1908
  - Remove useless defattr


author: Jakub Jelen <jjelen@redhat.com> 7.1p2-3 + 0.10.2-1
changelog:
  - Fix segfaults with pam_ssh_agent_auth (#1303036)
  - Silently disable X11 forwarding on problems
  - Systemd service should be forking to detect immediate failures


author: Jakub Jelen <jjelen@redhat.com> 7.1p2-4.1 + 0.10.2-1
changelog:
  - Fix race condition in auditing events when using multiplexing (#1308295)
  - Fix X11 forwarding CVE according to upstream
  - Fix problem when running without privsep (#1303910)
  - Remove hard glob limit in SFTP


author: Jakub Jelen <jjelen@redhat.com> 7.2p2-2 + 0.10.2-3
changelog:
  - Fix GSSAPI Key Exchange according to RFC (#1323622)
  - Remove init.d/functions dependency from sshd-keygen (#1317722)
  - Do not use MD5 in pam_ssh_agent_auth in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> 7.2p2-3 + 0.10.2-3
changelog:
  - Make sshd-keygen comply with packaging guidelines (#1325535)
  - Soft-deny socket() syscall in seccomp sandbox (#1324493)
  - Remove *sha1 Kex in FIPS mode (#1324493)
  - Remove *gcm ciphers in FIPS mode (#1324493)


author: Jakub Jelen <jjelen@redhat.com> - 7.2p2-5 + 0.10.2-3
changelog:
  - CVE-2015-8325: ignore PAM environment vars when UseLogin=yes (#1328013)
  - Fix typo in sysconfig/sshd (#1325535)


author: Jakub Jelen <jjelen@redhat.com> - 7.2p2-7
changelog:
  - Fix regression in certificate-based authentication (#1333498)
  - Check for real location of .k5login file (#1328243)
  - Fix unchecked dereference in pam_ssh_agent_auth
  - Clean up old patches
  - Build with seccomp filter on ppc64(le) (#1195065)


author: Jakub Jelen <jjelen@redhat.com> - 7.2p2-8 + 0.10.2-3
changelog:
  - Enable seccomp filter for MIPS architectures
  - UseLogin=yes is not supported in Fedora
  - SFTP server forced permissions should restore umask
  - pam_ssh_agent_auth: Fix conflict bewteen two getpwuid() calls (#1349551)


author: Jakub Jelen <jjelen@redhat.com> - 7.2p2-10 + 0.10.2-3
changelog:
  - CVE-2016-6210: User enumeration via covert timing channel (#1357443)
  - Expose more information about authentication to PAM
  - Make closefrom() ignore softlinks to the /dev/ devices on s390


author: Jakub Jelen <jjelen@redhat.com> - 7.3p1-5 + 0.10.2-4
changelog:
  - Build against OpenSSL 1.1.0 with compat changes
  - Recommend crypto-policies
  - Fix chroot dropping capabilities (#1386755)


author: Jakub Jelen <jjelen@redhat.com> - 7.3p1-7 + 0.10.2-4
changelog:
  - Properly deserialize received RSA certificates in ssh-agent (#1402029)
  - Move MAX_DISPLAYS to a configuration option


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-1 + 0.10.2-5
changelog:
  - New upstream release (#1406204)
  - Cache supported OIDs for GSSAPI key exchange (#1395288)
  - Fix typo causing heap corruption (use-after-free) (#1409433)
  - Prevent hangs with long MOTD


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-2 + 0.10.2-5
changelog:
  - Fix ssh-agent cert signing error (#1416584)
  - Fix wrong path to crypto policies
  - Attempt to resolve issue with systemd


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-3 + 0.10.3-1
changelog:
  - Properly report errors from included files (#1408558)
  - New pam_ssh_agent_auth 0.10.3 release
  - Switch to SD_NOTIFY to make systemd happy


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-4 + 0.10.3-1
changelog:
  - Avoid sending the SD_NOTIFY messages from wrong processes (#1427526)
  - Address reports by coverity


author: Jakub Jelen <jjelen@redhat.com> - 7.5p1-2 + 0.10.3-2
changelog:
  - Fix various after-release typos including failed build in s390x (#1434341)
  - Revert chroot magic with SELinux


author: Jakub Jelen <jjelen@redhat.com> - 7.5p1-4 + 0.10.3-2
changelog:
  - Remove SSH-1 subpackage for Fedora 27 (#1474942)
  - Follow system-wide crypto policy in server (#1479271)


author: Jakub Jelen <jjelen@redhat.com> - 7.5p1-6 + 0.10.3-2
changelog:
  - Do not export KRB5CCNAME if the default path is used (#1199363)
  - Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1477636)
  - Add new GSSAPI kex algorithms with SHA-2, but leave them disabled for now
  - Enforce pam_sepermit for all logins in SSH (#1492313)
  - Remove pam_reauthorize, since it is not needed by cockpit anymore (#1492313)


author: Jakub Jelen <jjelen@redhat.com> - 7.6p1-1 + 0.10.3-3
changelog:
  - New upstream release OpenSSH 7.6
  - Addressing review remarks for OpenSSL 1.1.0 patch
  - Fix PermitOpen bug in OpenSSH 7.6
  - Drop support for ExposeAuthenticationMethods option


author: Jakub Jelen <jjelen@redhat.com> - 7.6p1-3 + 0.10.3-3
changelog:
  - Do not segfault during audit cleanup (#1524233)
  - Avoid gcc warnings about uninitialized variables


author: Jakub Jelen <jjelen@redhat.com> - 7.6p1-5 + 0.10.3-3
changelog:
  - Drop support for TCP wrappers (#1530163)
  - Do not pass hostnames to audit -- UseDNS is usually disabled (#1534577)


author: Jakub Jelen <jjelen@redhat.com> - 7.7p1-1 + 0.10.3-4
changelog:
  - New upstream release (#1563223)
  - Add support for ECDSA keys in PKCS#11 (#1354510)
  - Add support for PKCS#11 URIs


author: Jakub Jelen <jjelen@redhat.com> - 7.7p1-6 + 0.10.3-4
changelog:
  - Fix listing of kex algoritms in FIPS mode
  - Allow aes-gcm cipher modes in FIPS mode
  - Coverity fixes


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-2 + 0.10.3-5
changelog:
  - New upstream release fixing CVE 2018-15473
  - Remove unused patches
  - Remove reference to unused enviornment variable SSH_USE_STRONG_RNG
  - Address coverity issues
  - Unbreak scp between two IPv6 hosts (#1620333)
  - Unbreak GSSAPI key exchange (#1624323)
  - Unbreak rekeying with GSSAPI key exchange (#1624344)


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-3 + 0.10.3-5
changelog:
  - Disable OpenSSH hardening flags and use the ones provided by system (#1630615)
  - Ignore unknown parts of PKCS#11 URI (#1631478)
  - Do not fail with GSSAPI enabled in match blocks (#1580017)
  - Fix the segfaulting cavs test (#1629692)


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-4 + 0.10.3-5
changelog:
  - Unbreak PKCS#11 URI tests (#1648262)
  - Allow to disable RSA signatures with SHA1 (#1648898)
  - Dump missing GSS options from client configuration (#1649505)
  - Minor fixes from Fedora related to GSSAPI and keberos
  - Follow the system-wide PATH settings


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-1 + 0.10.3-7
changelog:
  - New upstream release (#1691045)
  - Remove support for unused VendorPatchLevel configuration option
  - Fix kerberos cleanup procedures (#1683295)
  - Do not negotiate arbitrary primes with DH GEX in FIPS (#1685096)
  - Several GSSAPI key exchange improvements and sync with Debian
  - Allow to use labels in PKCS#11 URIs even if they do not match on private key (#1671262)
  - Do not fall back to sshd_net_t SELinux context (#1678695)
  - Use FIPS compliant high-level signature OpenSSL API and KDF
  - Mention crypto-policies in manual pages
  - Do not fail if non-FIPS approved algorithm is enabled in FIPS
  - Generate the PEM files in new PKCS#8 format without the need of MD5 (#1712436)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-2 + 0.10.3-7
changelog:
  - Allow specifying a pin-value in PKCS #11 URI in ssh-add (#1639698)
  - Whitelist another syscall variant for s390x cryptographic module (ibmca engine) (#1714915)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-3 + 0.10.3-7
changelog:
  - Fix typos in manual pages (#1668325)
  - Use the upstream support for PKCS#8 PEM files alongside with the legacy PEM files (#1712436)
  - Unbreak ssh-keygen -A in FIPS mode (#1732424)
  - Add missing RSA certificate types to offered hostkey types in FIPS mode (#1732449)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-5 + 0.10.3-7
changelog:
  - Do not print "no slots" warning by default (#1744220)
  - Unbreak connecting using gssapi through proxy commands (#1749862)
  - Document in manual pages that CASignatureAlgorithms are handled by crypto policies (#1790604)
  - Use SHA2-based signature algorithms by default for signing certificates (#1790610)
  - Prevent simple ProxyJump loops in configuration files (#1804099)
  - Teach ssh-keyscan to use SHA2 RSA variants (#1744108)
  - Do not fail hard if getrandom() is not available and no SSH_USE_STRONG_RNG is specified (#1812120)
  - Improve wording of crypto policies references in manual pages (#1812854)
  - Do not break X11 forwarding if IPv6 is disabled (#1662189)
  - Enable SHA2-based GSSAPI key exchange algorithms by default (#1816226)
  - Mark RDomain server configuration option unsupported in RHEL (#1807686)
  - Clarify crypto policies defaults in manual pages (#1724195)
  - Mention RSA SHA2 variants in ssh-keygen manual page (#1665900)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-7 + 0.10.3-7
changelog:
  - SFTP sort upon the modification time (#1909988)
  - ssh-keygen printing fingerprint issue with Windows keys (#1901518)
  - PIN is lost when iterating over tokens when adding pkcs11 keys to ssh-agent (#1843372)
  - ssh-agent segfaults during ssh-add -s pkcs11 (#1868996)
  - ssh-copy-id could not resolve ipv6 address ends with colon (#1933517)
  - sshd provides PAM an incorrect error code (#1879503)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-9
changelog:
  - CVE-2020-14145 openssh: Observable Discrepancy leading to an information
    leak in the algorithm negotiation (#1882252)
  - Hostbased ssh authentication fails if session ID contains a '/' (#1944125)


author: Zoltan Fridrich <zfridric@redhat.com> - 8.0p1-14
changelog:
  - Upstream: add a local implementation of BSD realpath() for sftp-server (#2064249)
  - Change product name from Fedora to RHEL in openssh-7.8p1-UsePAM-warning.patch (#1953807)
  - Include caveat for crypto-policy in sshd manpage (#2044354)
  - Change log level of FIPS specific log message to verbose (#2050511)
  - Clarify force_file_perms (-m) documentation in sftp-server manpage (#1862504)
  - Minimize the use of SHA1 as a proof of possession for RSA key (#2093897)


author: Dmitry Belyavskiy - 8.0p1-17
changelog:
  - Fix parsing of IPv6 IPs in sftp client (#2151334)
  - Avoid ssh banner one-byte overflow (#2138344)
  - Avoid crash of sshd when Include folder does not exist (#2133087)


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 8.0p1-17.0.1
changelog:
  - seccomp: Allow check_nanosleep to better compatibility for both glibc2.28 and glibc2.32
  - Support loongarch64 seccomp_filter sandbox (xuezhixin@uniontech.com)
  - another case where a utimes() failure could make scp send (jiang.yong5@zte.com.cn)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-20
changelog:
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-1684
  - Add comment to OpenSSH server config about FIPS-incompatible key
    Resolves: RHEL-5221
  - Avoid killing all processes on system in case of race condition
    Resolves: RHEL-11548
  - Avoid sshd_config 256K limit
    Resolves: RHEL-5279
  - Using DigestSign/DigestVerify functions for better FIPS compatibility
    Resolves: RHEL-5217
  - Fix GSS KEX causing ssh failures when connecting to WinSSHD
    Resolves: RHEL-5321


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-22
changelog:
  - Fix Terrapin attack
    Resolves: RHEL-19308
  - Forbid shell metasymbols in username/hostname
    Resolves: RHEL-19788


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 8.0p1-25.0.1
changelog:
  - seccomp: Allow check_nanosleep to better compatibility for both glibc2.28 and glibc2.32
  - Support loongarch64 seccomp_filter sandbox (xuezhixin@uniontech.com)
  - another case where a utimes() failure could make scp send (jiang.yong5@zte.com.cn)
  - add sw patch (nijie@wxiat.com)
  - adapt macro `seccomp_audit_arch` to kernel-headers. (Weisson@linux.alibaba.com)


author: Fabian Deutsch <fabian.deutsch@gmx.de> - 0.4.3-2
changelog:
  - Running autoreconf to prevent building problems.
  - Added missing files to docs.
  - Added examples to devel docs.


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-2
changelog:
  - Resolves: rhbz#1681879 - osinfo-db-tools changes blocked until gating
                             tests are added


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-3
changelog:
  - Resolves: rhbz#1712426 - New defects found in
                             osinfo-db-tools-1.5.0-2.el8


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-4
changelog:
  - Related: rhbz#1712426 - New defects found in
                            osinfo-db-tools-1.5.0-2.el8


author: Luca BRUNO <lucab@redhat.com> - 2021.3-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2021.3
    Resolves: rhbz#1981865


author: Colin Walters <walters@verbum.org> - 2021.3-2
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/2453/commits/e6a560b40797324aa8b90e7100c6d50bff91f14d
    Resolves: rhbz#2027788


author: Luca BRUNO <lucab@redhat.com> - 2022.2-5
changelog:
  - Backport enablement patches for Secure Execution on s390x
    https://github.com/ostreedev/ostree/pull/2694
    Resolves: rhbz#2120522
  - Backport security fix to verify signatures are minimum length (advisory GHSA-gqf4-p3gv-g8vw)
    https://github.com/ostreedev/ostree/pull/2696
    Resolves: rhbz#2119444


author: Colin Walters <walters@verbum.org> - 2022.2-6
changelog:
  - Backport https://github.com/ostreedev/ostree/commit/0085494e350c72599fc5c0e00422885d80b3c660
  - Resolves: rhbz#2134629


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2022.2-8
changelog:
  - Backport for https://github.com/ostreedev/ostree/commit/7f70614a1ac1950ebde3df0e26cc9ab1d72b2f1f
  - Resolves: rhbz#2229895


author: Chris Lumens <clumens@redhat.com> - 2.1.5-8
changelog:
  - Rebuild with new release due to build system problems
  - Related: rhbz2168249
  - Related: rhbz2168675


author: Chris Lumens <clumens@redhat.com> - 2.1.6-1
changelog:
  - Rebase pacemaker on upstream 2.1.6 final release
  - Resolves: rhbz1578820
  - Resolves: rhbz1632951
  - Resolves: rhbz1876173
  - Resolves: rhbz2010084
  - Resolves: rhbz2030869
  - Resolves: rhbz2078611
  - Resolves: rhbz2106642
  - Resolves: rhbz2160206
  - Resolves: rhbz2168633


author: Chris Lumens <clumens@redhat.com> - 2.1.6-3
changelog:
  - Fix moving groups when there's a constraint for a single group member
  - Resolves: rhbz2218232
  - Resolves: rhbz2189300


author: Chris Lumens <clumens@redhat.com> - 2.1.6-4
changelog:
  - Clone instances should not shuffle unnecessarily
  - Fix a bug in clone resource description display
  - Resolves: rhbz1931023
  - Resolves: rhbz1688149
  - Related: rhbz2106642
  - Related: rhbz2189300


author: Chris Lumens <clumens@redhat.com> - 2.1.6-5
changelog:
  - Apply dampening when creating attributes with attrd_updater -U
  - Resolves: rhbz2224046
  - Related: rhbz2189300


author: Andrew Beekhof <andrew@beekhof.net> - 1.1.2-1
changelog:
  - Update the tarball from the upstream 1.1.2 release
  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/main/ChangeLog for full details


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.9-2
changelog:
  - Update for new upstream tarball: 781a388
  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/main/ChangeLog for full details


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.9-3
changelog:
  - Update to upstream 7d8acec
  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/main/ChangeLog for full details

    + Feature: Turn off auto-respawning of systemd services when the cluster starts them
    + Fix: crmd: Ensure operations for cleaned up resources don't block recovery
    + Fix: logging: If SIGTRAP is sent before tracing is turned on, turn it on instead of crashing


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.11-1
changelog:
  - Update for new upstream tarball: Pacemaker-1.1.11 (9d39a6b)
  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/main/ChangeLog for full details


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-1
changelog:
  - Update for new upstream tarball: Pacemaker-1.1.12+ (a9c8177)
  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/main/ChangeLog for full details


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.13-2
changelog:
  - Update for new upstream tarball: Pacemaker-1.1.13
  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/main/ChangeLog for full details


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.13-3
changelog:
  - Update to Pacemaker-1.1.13 post-release + patches (sync)
  - Add nagios-plugins-metadata subpackage enabling support of selected
    Nagios plugins as resources recognized by Pacemaker
  - Several specfile improvements: drop irrelevant stuff, rehash the
    included/excluded files + dependencies, add check scriptlet,
    reflect current packaging practice, do minor cleanups
    (mostly adopted from another spec)


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.14-1
changelog:
  - Update for new upstream tarball: Pacemaker-1.1.14,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.14
  - Disable Fedora crypto policies conformance patch for now (rhbz#1179335)
  - Better align specfile with the upstream version (also fix issue with
    crm_mon sysconfig file not being installed)
  - Further specfile modifications:
    - drop unused gcc-c++ and repeatedly mentioned pkgconfig packages
      from BuildRequires
    - refer to python_sitearch macro first, if defined
    - tolerate license macro not being defined (e.g., for EPEL rebuilds)
  - Prevent console mode not available in crm_mon due to curses library test
    fragility of configure script in hardened build environment (rhbz#1297985)


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.14-2.5a6cdd1.git
changelog:
  - Update for currently stabilized snapshot beyond Pacemaker-1.1.14
    (commit 5a6cdd1), but restore old-style notifications to the state at
    Pacemaker-1.1.14 point release (disabled)
  - Definitely get rid of Corosync v1 (Flatiron) hypothetical support
  - Remove some of the spec file cruft, not required for years
    (BuildRoot, AutoReqProv, "clean" scriptlet, etc.) and adapt the file
    per https://github.com/ClusterLabs/pacemaker/pull/965


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.15-0.1.rc1
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-1.1.15-rc1,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.15-rc1
  - Adapt spec file more akin to upstream version (also to reflect recent
    changes like ability to built explicitly without Publican-based docs)


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.15-0.1.rc2
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-1.1.15-rc2,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.15-rc2


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.15-0.1.rc3
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-1.1.15-rc3,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.15-rc3
  - Drop fence_pcmk (incl. man page) from the package (no use where no CMAN)
  - Drop license macro emulation for cases when not supported natively
    (several recent Fedora releases do not need that)


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.15-1
changelog:
  - Update for new upstream tarball: Pacemaker-1.1.15,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.15
  - Adapt spec file more akin to upstream version:
    . move xml schema files + PCMK-MIB.txt (81ef956), logrotate configuration
      file (ce576cf; drop it from -remote package as well), attrd_updater
      (aff80ae), the normal resource agents (1fc7287), and common directories
      under /var/lib/pacemaker (3492794) from main package under -cli
    . simplify docdir build parameter passing and drop as of now
      redundant chmod invocations (e91769e)


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.15-2
changelog:
  - Stop building with -fstack-protector-all using the upstream patches
    overhauling toolchain hardening (Fedora natively uses
    -fstack-protector-strong so this effectively relaxed stack protection
    is the only effect as hardened flags are already used by default:
    https://fedoraproject.org/wiki/Changes/Harden_All_Packages)


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.16-1
changelog:
  - Update for new upstream tarball: Pacemaker-1.1.16,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.16
  - Adapt spec file more akin to upstream version including:
    . clarify licensing, especially for -doc (f01f734)
    . fix pacemaker-remote upgrade (779e0e3)
    . require python >= 2.6 (31ef7f0)
    . older libqb is sufficient (based on 30fe1ce)
    . remove openssl-devel and libselinux-devel as BRs (2e05c17)
    . make systemd BR pkgconfig-driven (6285924)
    . defines instead of some globals + error suppression (625d427)
  - Rectify -nagios-plugins-metadata declared license and install
    also respective license text


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.16-2.a39ea6491.git
changelog:
  - Update for (slightly stabilized) snapshot beyond Pacemaker-1.1.16
    (commit a39ea6491), including:
    . prevent FTBFS with new GCC 7 (a7476dd96)
  - Adapt spec file more akin to upstream version including:
    . better pre-release vs. tags logic (4581d4366)


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.17-0.1.rc1
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-1.1.17-rc1,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.17-rc1


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.17-0.1.rc2
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-1.1.17-rc2,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.17-rc2


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.17-0.1.rc3
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-1.1.17-rc3,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.17-rc3


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.17-0.1.rc4
changelog:
  - Update for new upstream tarball for release candidate: Pacemaker-1.1.17-rc4,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.17-rc4
  - Add an imposed lower bound for glib2 BuildRequires


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.17-1
changelog:
  - Update for new upstream tarball: Pacemaker-1.1.17,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-1.1.17


author: Jan Pokorný <jpokorny+rpm-pacemaker@redhat.com> - 1.1.17-2
changelog:
  - Rebuilt to fix libqb vs. ld.bfd/binutils-2.29 incompatibility making
    some CLI executables unusable under some circumstances (rhbz#1503843)


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.0-7
changelog:
  - Include upstream main branch commits through 975347d4
  - Resolves: rhbz#1543494
  - Resolves: rhbz#1602650
  - Resolves: rhbz#1608369


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.0-8
changelog:
  - Rebase on upstream commit dd6fd26f77945b9bb100d5a3134f149b27601552
  - Fixes (unreleased) API regression
  - Resolves: rhbz#1543494
  - Resolves: rhbz#1622969


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.0-9
changelog:
  - Rebase on upstream commit c4330b46bf1c3dcd3e367b436efb3bbf82ef51cd
  - Support podman as bundle container launcher
  - Ignore fence history in crm_mon when using CIB_file
  - Resolves: rhbz#1543494
  - Resolves: rhbz#1607898
  - Resolves: rhbz#1625231


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.0-10
changelog:
  - Rebase on upstream commit b67d8d0de9794e59719608d9b156b4a3c6556344
  - Update spec for Python macro changes
  - Resolves: rhbz#1543494
  - Resolves: rhbz#1633612


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.1-1
changelog:
  - Rebase on upstream commit 0eb799156489376e13fb79dca47ea9160e9d4595 (Pacemaker-2.0.1-rc1)
  - Follow upstream change of splitting XML schemas into separate package
  - Resolves: rhbz#1543494


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.1-2
changelog:
  - Move pacemaker-doc installed files to /usr/share/doc/pacemaker-doc
    to avoid conflict with RHEL 8 location of pacemaker subpackage docs
  - Resolves: rhbz#1543494


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.1-5
changelog:
  - Add gating tests for CI
  - Restore correct behavior when live migration is interrupted
  - Improve clients' authentication of IPC servers (CVE-2018-16877)
  - Fix use-after-free with potential information disclosure (CVE-2019-3885)
  - Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
  - Resolves: rhbz#1682116
  - Resolves: rhbz#1684306
  - Resolves: rhbz#1694558
  - Resolves: rhbz#1694560
  - Resolves: rhbz#1694908


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.2-1
changelog:
  - Add stonith_admin option to display XML output
  - Add new crm_rule tool to check date/time rules
  - List any constraints cleared by crm_resource --clear
  - crm_resource --validate can now get resource parameters from command line
  - Rebase on upstream version 2.0.2
  - Default concurrent-fencing to true
  - Resolves: rhbz#1555939
  - Resolves: rhbz#1572116
  - Resolves: rhbz#1631752
  - Resolves: rhbz#1637020
  - Resolves: rhbz#1695737
  - Resolves: rhbz#1715426


author: Klaus Wenninger <kwenning@redhat.com> - 2.0.2-2
changelog:
  - Synchronize fence-history on fenced-restart
  - Cleanup leftover pending-fence-actions when fenced is restarted
  - Improve fencing of remote-nodes
  - Resolves: rhbz#1708380
  - Resolves: rhbz#1708378
  - Resolves: rhbz#1721198
  - Resolves: rhbz#1695737


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.3-1
changelog:
  - Rebase on Pacemaker-2.0.3-rc2
  - Parse crm_mon --fence-history option correctly
  - Put timeout on controller waiting for scheduler response
  - Offer Pacemaker Remote option for bind address
  - Calculate cluster recheck interval dynamically
  - Clarify crm_resource help text
  - Reduce system calls after forking a child process
  - Resolves: rhbz1699978
  - Resolves: rhbz1725236
  - Resolves: rhbz1743377
  - Resolves: rhbz1747553
  - Resolves: rhbz1748805
  - Resolves: rhbz1752538
  - Resolves: rhbz1762025


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.4-1
changelog:
  - Clear leaving node's attributes if there is no DC
  - Add crm_mon --node option to limit display to particular node or tagged nodes
  - Add crm_mon --include/--exclude options to select what sections are shown
  - priority-fencing-delay option bases delay on where resources are active
  - Pending DC fencing gets 'stuck' in status display
  - crm_rule can now check rule expiration when "years" is specified
  - crm_mon now formats error messages better
  - Support for CIB secrets is enabled
  - Rebase on latest upstream Pacemaker release
  - Fix regression introduced in 8.2 so crm_node -n works on remote nodes
  - Avoid infinite loop when topology is removed while unfencing is in progress
  - Resolves: rhbz1300604
  - Resolves: rhbz1363907
  - Resolves: rhbz1784601
  - Resolves: rhbz1787751
  - Resolves: rhbz1790591
  - Resolves: rhbz1793653
  - Resolves: rhbz1793860
  - Resolves: rhbz1828488
  - Resolves: rhbz1830535
  - Resolves: rhbz1831775


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.4-3
changelog:
  - Allow resource and operation defaults per resource or operation type
  - Rebase on upstream 2.0.4 final release
  - Support on-fail="demote" and no-quorum-policy="demote" options
  - Remove incorrect comment from sysconfig file
  - Resolves: rhbz1628701
  - Resolves: rhbz1828488
  - Resolves: rhbz1837747
  - Resolves: rhbz1848789


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.4-4
changelog:
  - Allow crm_node -l/-p options to work from Pacemaker Remote nodes
  - Correct action timeout value listed in log message
  - Fix regression in crm_mon --daemonize with HTML output
  - Resolves: rhbz1796824
  - Resolves: rhbz1856035
  - Resolves: rhbz1857728


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.5-1
changelog:
  - crm_mon --resource option to filter output by resource
  - Avoid filling /dev/shm after frequent corosync errors
  - Allow configurable permissions for log files
  - Ensure ACL write permission always supersedes read
  - Use fence device monitor timeout for starts and probes
  - Allow type="integer" in rule expressions
  - Avoid error messages when running crm_node inside bundles
  - Avoid situation where promotion is not scheduled until next transition
  - crm_mon should show more clearly when an entire group is disabled
  - Rebase on upstream 2.0.5-rc1 release
  - Resolves: rhbz1300597
  - Resolves: rhbz1614166
  - Resolves: rhbz1647136
  - Resolves: rhbz1833173
  - Resolves: rhbz1856015
  - Resolves: rhbz1866573
  - Resolves: rhbz1874391
  - Resolves: rhbz1835717
  - Resolves: rhbz1748139
  - Resolves: rhbz1885645


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.5-2
changelog:
  - Rebase on upstream 2.0.5-rc2 release
  - Prevent ACL bypass (CVE-2020-25654)
  - Resolves: rhbz1885645
  - Resolves: rhbz1889582


author: Klaus Wenninger <kwenning@redhat.com> - 2.0.5-4
changelog:
  - Rebase on upstream 2.0.5 release
  - Make waiting to be pinged by sbd via pacemakerd-api the default
  - Resolves: rhbz1885645
  - Resolves: rhbz1873138


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.5-5
changelog:
  - Allow non-critical resources that stop rather than make another resource move
  - Support crm_resource --digests option for showing operation digests
  - Clean-up of all resources should work from remote nodes
  - Resolves: rhbz1371576
  - Resolves: rhbz1872376
  - Resolves: rhbz1907726


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.5-6
changelog:
  - crm_mon --daemonize should reconnect if cluster restarts
  - crm_mon should show more informative messages when cluster is starting
  - crm_mon should show rest of status if fencing history is unavailable
  - cibsecret now works on remote nodes (as long as name can be reached via ssh)
  - Stop remote nodes correctly when connection history is later than node history
  - Resolves: rhbz1466875
  - Resolves: rhbz1872490
  - Resolves: rhbz1880426
  - Resolves: rhbz1881537
  - Resolves: rhbz1898457


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-1
changelog:
  - Add crm_simulate --show-attrs and --show-failcounts options
  - Retry getting fence agent meta-data after initial failure
  - Add debug option for more verbose ocf:pacemaker:ping logs
  - Rebase on upstream 2.1.0-rc2 release
  - Support OCF Resource Agent API 1.1 standard
  - Fix crm_mon regression that could cause certain agents to fail at shutdown
  - Allow setting OCF check level for crm_resource --validate and --force-check
  - Resolves: rhbz1686426
  - Resolves: rhbz1797579
  - Resolves: rhbz1843177
  - Resolves: rhbz1935464
  - Resolves: rhbz1936696
  - Resolves: rhbz1948620
  - Resolves: rhbz1955792


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-2
changelog:
  - Rebase on upstream 2.1.0 final release
  - Correct schema for crm_resource XML output
  - Resolves: rhbz1935464
  - Resolves: rhbz1967087


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-3
changelog:
  - crm_resource now supports XML output from resource agent actions
  - Correct output for crm_simulate --show-failcounts
  - Avoid remote node unfencing loop
  - Resolves: rhbz1644628
  - Resolves: rhbz1686426
  - Resolves: rhbz1961857


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-4
changelog:
  - Show better error messages in crm_resource with invalid resource types
  - Avoid selecting wrong device when dynamic-list fencing is used with host map
  - Do not schedule probes of unmanaged resources on pending nodes
  - Fix argument handling regressions in crm_attribute and wrappers
  - Resolves: rhbz1447918
  - Resolves: rhbz1978010
  - Resolves: rhbz1982453
  - Resolves: rhbz1984120


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.0-6
changelog:
  - Fix watchdog agent version information
  - Ensure transient attributes are cleared when multiple nodes are lost
  - Resolves: rhbz1443666
  - Resolves: rhbz1986998


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-1
changelog:
  - Allow per-host fence delays for a single fence device
  - Use OCF 1.1 enum type in cluster option metadata for better validation
  - crm-resource --force-* now works with LSB resources
  - Allow spaces in pcmk_host_map
  - ACL group names are no longer restricted to a unique XML id
  - Rebase on upstream 2.1.2
  - Ensure upgrades get compatible Corosync libraries
  - Resolves: rhbz1082146
  - Resolves: rhbz1281463
  - Resolves: rhbz1346014
  - Resolves: rhbz1376538
  - Resolves: rhbz1384420
  - Resolves: rhbz2011973
  - Resolves: rhbz2027006


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-2
changelog:
  - Correctly get metadata for systemd agent names that end in '@'
  - Use correct OCF 1.1 syntax in ocf:pacemaker:Stateful meta-data
  - Fix regression in displayed times in crm_mon's fence history
  - Resolves: rhbz2003151
  - Resolves: rhbz2027370
  - Resolves: rhbz2032027


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.2-3
changelog:
  - Improve display of failed actions
  - Handle certain probe failures as stopped instead of failed
  - Update pcmk_delay_base description in option meta-data
  - Avoid crash when using clone notifications
  - Retry Corosync shutdown tracking if first attempt fails
  - Resolves: rhbz1470834
  - Resolves: rhbz1506372
  - Resolves: rhbz2027370
  - Resolves: rhbz2039675
  - Resolves: rhbz2042550


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.3-1
changelog:
  - crm_resource --restart fails to restart clone instances except instance 0
  - Add new multiple-active option for "stop unexpected instances"
  - Unable to show metadata for "service" agents with "@" and "." in the name
  - Resource ocf:pacemaker:attribute does not comply with the OCF 1.1 standard
  - Allow resource meta-attribute to exempt resource from node health restrictions
  - Show node health states in crm_mon
  - Rebase pacemaker on upstream 2.1.3-rc2 release
  - crm_mon API result does not validate against schema if fence event has exit-reason
  - Resolves: rhbz1930578
  - Resolves: rhbz2036815
  - Resolves: rhbz2045096
  - Resolves: rhbz2049722
  - Resolves: rhbz2059638
  - Resolves: rhbz2065812
  - Resolves: rhbz2072107
  - Resolves: rhbz2086230


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.3-2
changelog:
  - crm_attribute works on remote node command line when hostname differs
  - Rebase pacemaker on upstream 2.1.3 final release
  - Resolves: rhbz1384172
  - Resolves: rhbz2072107


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.4-1
changelog:
  - Fencer should not ignore CIB updates when stonith is disabled
  - Rebase pacemaker on upstream 2.1.4 final release
  - Fix typo in ocf:pacemaker:HealthSMART meta-data
  - Resolves: rhbz2055935
  - Resolves: rhbz2072107
  - Resolves: rhbz2094855


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.4-4
changelog:
  - Ensure all nodes are re-unfenced after device configuration change
  - crm_resource --why now checks node health status
  - Resolves: rhbz1872483
  - Resolves: rhbz2065818


author: Chris Lumens <clumens@redhat.com> - 2.1.5-1
changelog:
  - Rebase on upstream 2.1.5-rc2 release
  - Resolves: rhbz1822125
  - Resolves: rhbz2095662
  - Resolves: rhbz2121852
  - Resolves: rhbz2122806
  - Resolves: rhbz2133497
  - Resolves: rhbz2142681


author: Chris Lumens <clumens@redhat.com> - 2.1.5-4
changelog:
  - Rebase pacemaker on upstream 2.1.5 final release
  - Add support for sync points to attribute daemon
  - Resolves: rhbz1463033
  - Resolves: rhbz1866578
  - Resolves: rhbz2122352


author: Chris Lumens <clumens@redhat.com> - 2.1.5-6
changelog:
  - Backport fix for migration history cleanup causing resource recovery
  - Backport fix for SIGABRT during pacemaker-fenced shutdown
  - Resolves: rhbz2166388
  - Resolves: rhbz2168249


author: Chris Lumens <clumens@redhat.com> - 2.1.5-7
changelog:
  - Additional fixes for SIGABRT during pacemaker-fenced shutdown
  - Backport fix for attrd_updater -QA not displaying all nodes
  - Related: rhbz2168249
  - Resolves: rhbz2168675


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Pacemaker Remote nodes can validate against later schema versions
  - Resolves: RHEL-7597
  - Related: RHEL-17224


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7597
  - Related: RHEL-14045


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-14045
  - Resolves: RHEL-17224
  - Resolves: RHEL-23065


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: William Cohen <wcohen@redhat.com> - 4.0.0-2
changelog:
  - correct the ctests/shlib test
  - have PAPI_set_multiplex() return proper value
  - properly handle event unit masks
  - correct PAPI_name_to_code() to match events
  - Resolves: rhbz562935 Rebase to papi-4.0.0


author: William Cohen <wcohen@redhat.com> - 4.2.0-2
changelog:
  - Include appropirate man pages with papi rpm. (rhbz749725)
  - Rebase to papi-4.2.0, fixup for coretemp component. (rhbz746851)


author: William Cohen <wcohen@redhat.com> - 5.1.1-5
changelog:
  - rhbz986673 - /usr/lib64/libpapi.so is unowned
  - Package files in /usr/share/papi only once.
  - Avoid dependency problem with parallel make of man pages.


author: <liusn@superred.com.cn> - 6.0.0-16.0.1
changelog:
  - add 1000-papi-anolis-add-loongarch-support.patch
  - cherry-pick `add sw arch #8df28831ab9ee0af53d8fa394c9f5cd1863d6e7d`. (Weisson@linux.alibaba.com)
    cherry-pick `explicitly disable static lib #266b8d83eb0812ae4dca5661e9491329cd0d3111`.
  - Remove static lib for sw_64. (Weisson@linux.alibaba.com)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-8
changelog:
  - Fix pcp-zeroconf logger interval override regression (BZ 1991763)
  - Remove warnings from spec setup of PCP systemd units (BZ 2048024)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-1
changelog:
  - Fix several issues in the pcp-ss(1) utility (BZ 1981886)
  - Document pmproxy archive discovery further (BZ 2026726)
  - Improve SQL Server PMDA secure settings (BZ 2057615)
  - Rebase to latest stable version of PCP (BZ 2059461)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-3
changelog:
  - Fix remaining issues in the pcp-ss(1) utility (BZ 1981886)
  - Remove benign warning message from pmie systemd unit file.


author: Nathan Scott <nathans@redhat.com> - 5.3.7-5
changelog:
  - Harden pmdapostfix(1) against missing Postfix (BZ 2059463)
  - Fix cgroups failure on non-x86_64 platforms (BZ 2081262)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-9
changelog:
  - Additional selinux policy rules for pmdabcc (BZ 2050094)
  - Describe working sudoers requiretty configuration (BZ 2093751)
  - Separate pmlogger_farm configuration mechanism (BZ 2101574)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-15
changelog:
  - Backport independent selinux policy rework (BZ 2111742)
  - Fix invalid memory access in pmfind utility (BZ 2135314)
  - Allow pcp-dstat(1) missed ticks suppression (BZ 2083897)


author: Martin Hicks <mort@sgi.com> - 3.0.1-2
changelog:
  - Remove IB dependencies.  The Infiniband PMDA is being moved to
    a stand-alone package.
  - Move cluster PMDA to a stand-alone package.


author: Mark Goodwin <mgoodwin@redhat.com> - 3.6.5-1
changelog:
  - Update to latest PCP sources, see installed CHANGELOG for details.
  - Fix security flaws: CVE-2012-3418 CVE-2012-3419 CVE-2012-3420 and CVE-2012-3421 (BZ 848629)


author: Mark Goodwin <mgoodwin@redhat.com> - 3.6.6-1
changelog:
  - Update to latest PCP sources, see installed CHANGELOG for details.
  - Introduces new python-pcp and pcp-testsuite sub-packages.


author: Nathan Scott <nathans@redhat.com> - 3.6.9-1
changelog:
  - Update to latest PCP sources.
  - Fix pmcd sigsegv in NUMA/CPU indom setup (BZ 858384)
  - Fix sar2pcp uninitialised perl variable warning (BZ 859117)
  - Fix pcp.py and pmcollectl with older python versions (BZ 852234)


author: Nathan Scott <nathans@redhat.com> - 3.6.10-1
changelog:
  - Update to latest PCP sources.
  - Resolve tmpfile security flaws: CVE-2012-5530
  - Introduces new "pcp" user account for all daemons to use.


author: Nathan Scott <nathans@redhat.com> - 3.6.10-2
changelog:
  - Ensure tmpfile directories created in %files section.
  - Resolve tmpfile create/teardown race conditions.


author: Nathan Scott <nathans@redhat.com> - 3.8.0-1
changelog:
  - Update to latest PCP sources.
  - Validate metric names passed into pmiAddMetric (BZ 958019)
  - Install log directories with correct ownership (BZ 960858)


author: Nathan Scott <nathans@redhat.com> - 3.8.1-1
changelog:
  - Update to latest PCP sources.
  - Fix log import silently dropping >1024 metrics (BZ 968210)
  - Move some commonly used tools on the usual PATH (BZ 967709)
  - Improve pmatop handling of missing proc metrics (BZ 963085)
  - Stop out-of-order records corrupting import logs (BZ 958745)


author: Nathan Scott <nathans@redhat.com> - 3.8.2-1
changelog:
  - Update to latest PCP sources.
  - Integrate gluster related stats with PCP (BZ 969348)
  - Fix for iostat2pcp not parsing iostat output (BZ 981545)
  - Start pmlogger with usable config by default (BZ 953759)
  - Fix pmatop failing to start, gives stacktrace (BZ 963085)


author: Nathan Scott <nathans@redhat.com> - 3.8.3-1
changelog:
  - Default to Unix domain socket (authenticated) local connections.
  - Introduces new pcp-pmda-infiniband sub-package.
  - Disable systemtap-sdt-devel usage on ppc.


author: Nathan Scott <nathans@redhat.com> - 3.8.4-1
changelog:
  - Very minor release containing mostly QA related changes.
  - Enables many more metrics to be logged for Linux hosts.


author: Nathan Scott <nathans@redhat.com> - 3.8.6-1
changelog:
  - Update to latest PCP sources.
  - Rework pmpost test which confused virus checkers (BZ 1024850)
  - Tackle pmatop reporting issues via alternate metrics (BZ 998735)


author: Nathan Scott <nathans@redhat.com> - 3.8.9-1
changelog:
  - Reduce set of exported symbols from DSO PMDAs (BZ 1025694)
  - Symbol-versioning for PCP shared libraries (BZ 1037771)
  - Fix pmcd/Avahi interaction with multiple ports (BZ 1035513)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.9.0-1
changelog:
  - Create new sub-packages for pcp-webapi and pcp-manager
  - Split configuration from pcp-libs into pcp-conf (multilib)
  - Fix pmdagluster to handle more volumes, fileops (BZ 1066544)
  - Update to latest PCP sources.


author: Dave Brolley <brolley@redhat.com> - 3.9.2-1
changelog:
  - Improve pmdarpm(1) concurrency complications (BZ 1044297)
  - Fix pmconfig(1) shell output string quoting (BZ 1085401)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.9.4-1
changelog:
  - Merged pcp-gui and pcp-doc packages into core PCP.
  - Allow for conditional libmicrohttpd builds in spec file.
  - Adopt slow-start capability in systemd PMDA (BZ 1073658)
  - Resolve pmcollectl network/disk mis-reporting (BZ 1097095)
  - Update to latest PCP sources.


author: Dave Brolley <brolley@redhat.com> - 3.9.5-1
changelog:
  - Daemon signal handlers no longer use unsafe APIs (BZ 847343)
  - Handle /var/run setups on a temporary filesystem (BZ 656659)
  - Resolve pmlogcheck sigsegv for some archives (BZ 1077432)
  - Ensure pcp-gui-{testsuite,debuginfo} packages get replaced.
  - Revive support for EPEL5 builds, post pcp-gui merge.
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.9.10-1
changelog:
  - Convert PCP init scripts to systemd services (BZ 996438)
  - Fix pmlogsummary -S/-T time window reporting (BZ 1132476)
  - Resolve pmdumptext segfault with invalid host (BZ 1131779)
  - Fix signedness in some service discovery codes (BZ 1136166)
  - New conditionally-built pcp-pmda-papi sub-package.
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.10.0-1
changelog:
  - Create new sub-packages for pcp-webjs and python3-pcp.
  - Fix __pmDiscoverServicesWithOptions(1) codes (BZ 1139529)
  - Update to latest PCP sources.


author: Dave Brolley <brolley@redhat.com> - 3.10.2-1
changelog:
  - Update to latest PCP sources.
  - Improve pmdaInit diagnostics for DSO helptext (BZ 1182949)
  - Tighten up PMDA termination on pmcd stop (BZ 1180109)
  - Correct units for cgroup memory metrics (BZ 1180351)
  - Add the pcp2graphite(1) export script (BZ 1163986)


author: Slavek Kabrda <bkabrda@redhat.com> - 3.10.2-3
changelog:
  - Only use Python 3 in Fedora >= 23, more info at
    https://bugzilla.redhat.com/show_bug.cgi?id=1194324#c4


author: Dave Brolley <brolley@redhat.com> - 3.10.3-1
changelog:
  - Update to latest PCP sources.
  - New sub-package for pcp-import-ganglia2pcp.
  - Python3 support, enabled by default in f22 onward (BZ 1194324)


author: Nathan Scott <nathans@redhat.com> - 3.10.4-1
changelog:
  - Update to latest PCP, pcp-webjs and Vector sources.
  - Packaging improvements after re-review (BZ 1204467)
  - Start pmlogger/pmie independent of persistent state (BZ 1185755)
  - Fix cron error reports for disabled pmlogger service (BZ 1208699)
  - Incorporate Vector from Netflix (https://github.com/Netflix/vector)
  - Sub-packages for pcp-webjs allowing choice and reducing used space.


author: Mark Goodwin <mgoodwin@redhat.com> - 3.10.5-1
changelog:
  - Provide and use non-exit(1)ing pmGetConfig(3) variant (BZ 1187588)
  - Resolve a pmdaproc.sh pmlogger restart regression (BZ 1229458)
  - Replacement of pmatop/pcp-atop(1) utility (BZ 1160811, BZ 1018575)
  - Reduced installation size for minimal applications (BZ 1182184)
  - Ensure pmlogger start scripts wait on pmcd startup (BZ 1185760)
  - Need to run pmcd at least once before pmval -L will work (BZ 185749)


author: Nathan Scott <nathans@redhat.com> - 3.10.6-1
changelog:
  - Fix pcp2graphite write method invocation failure (BZ 1243123)
  - Reduce diagnostics in pmdaproc unknown state case (BZ 1224431)
  - Derived metrics via multiple files, directory expansion (BZ 1235556)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.10.7-1
changelog:
  - Resolved pmchart sigsegv opening view without context (BZ 1256708)
  - Fixed pmchart memory corruption restoring Saved Hosts (BZ 1257009)
  - Fix perl PMDA API double-free on socket error path (BZ 1258862)
  - Fix python API pmGetOption(3) alignment interface (BZ 1262722)
  - Added missing RPM dependencies to several PMDA sub-packages.
  - Update to latest stable Vector release for pcp-vector-webapp.
  - Update to latest PCP sources.


author: Mark Goodwin <mgoodwin@redhat.com> - 3.10.8-1
changelog:
  - Update pmlogger to log an immediate sample first (BZ 1269921)
  - Add pmOption host and archive setter python APIs (BZ 1270176)
  - Replace old pmatop(1) man page with pcp-atop(1) (BZ 1270761)
  - Update to latest PCP sources.


author: Lukas Berk <lberk@redhat.com> - 3.10.9-1
changelog:
  - Add -V/--version support to several more commands (BZ 1284411)
  - Resolve a pcp-iostat(1) transient device exception (BZ 1249572)
  - Provides pmdapipe, an output-capturing domain agent (BZ 1163413)
  - Python PMAPI pmSetMode allows None timeval parameter (BZ 1284417)
  - Python PMI pmiPutValue now supports singular metrics (BZ 1285371)
  - Fix python PMAPI pmRegisterDerived wrapper interface (BZ 1286733)
  - Fix pmstat SEGV when run with graphical time control (BZ 1287678)
  - Make pmNonOptionsFromList error message less cryptic (BZ 1287778)
  - Drop unimplemented pmdumptext options from usage, man page (BZ 1289909)
  - Stop creating configuration files in tmp_t locations (BZ 1256125)
  - Update to latest PCP sources.


author: Mark Goodwin <mgoodwin@redhat.com> - 3.11.0-1
changelog:
  - Significant speedups to elapsed time stopping pmcd (BZ 1292027)
  - Fix python derived metric exception handling issues (BZ 1299806)
  - incorrect interpolation across <mark> record in a merged archive (BZ 1296750)
  - pcp requires pcp-compat pulling in a lot of unneeded pcp-pmda-* packages (BZ 1293466)
  - Update to latest PCP sources.


author: Dave Brolley <brolley@redhat.com> - 3.11.1-1
changelog:
  - Call Remove script when uninstalling individual PMDAs (BZ 1304722)
  - Restrict pmcd.services to checking known pcp services (BZ 1286361)
  - Support for multi-archive contexts, across all clients (BZ 1262723)
  - Remove the default shotgun approach to stopping daemons (BZ 1210976)
  - Add mechanism for automatic recovery from PMDA timeouts (BZ 1065803)
  - Update to latest PCP sources.


author: Lukas Berk <lberk@redhat.com> - 3.11.2-1
changelog:
  - Negative nice values reported incorrectly (BZ 1328432)
  - Multithreaded clients with concurrent pmNewContext improvements (BZ 1325363)
  - PMCD agent auto-restart (BZ 1323521)
  - Segv in libpcp during discovery error processing (BZ 1319288)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.11.3-1
changelog:
  - Fix memory leak in derived metrics error handling (BZ 1331973)
  - Correctly propogate indom in mixed derived metrics (BZ 1337212, BZ 1336130)
  - Disallow stopping pmie/pmlogger daemons from cron (BZ 1336792)
  - Fail fast for easily detected bad pmcd configuration (BZ 1336210)
  - Implement primary (local) pmie concept in rc pmie (BZ 1323851)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.11.4-1
changelog:
  - Support inside-container metric values in python (BZ 1333702)
  - Fix pmdaproc handling of commands with whitespace (BZ 1350816)
  - Use persistent DM names for the filesystem metrics (BZ 1349932)
  - Add to the ds389{,log} RPM package dependencies (BZ 1354055)
  - Use "dirsrv" as default pmdads389log user account (BZ 1357607)
  - Make pmie(1) honour SIGINT while parsing rules (BZ 1327226)
  - Add pmlogconf support for pcp-pidstat and pcp-mpstat (BZ 1361943)
  - Update to latest PCP sources.


author: Mark Goodwin <mgoodwin@redhat.com> - 3.11.5-1
changelog:
  - Allow systemd-based auto-restart of all daemons (BZ 1365658)
  - Ensure pmieconf and pmlogconf handle empty files (BZ 1249123)
  - Ignore rpmsave and rpmnew suffixed control files (BZ 1375415)
  - Add new pcp-pmda-libvirt package for virtual machine metrics
  - Update to latest PCP sources.


author: Mark Goodwin <mgoodwin@redhat.com> - 3.11.6-1
changelog:
  - Optimize DSO lookups for local context mode startup (BZ 1275293)
  - Correct return code for derive metric help text (BZ 1336208)
  - Improve pmrep metrics collection via extend_indom (BZ 1377464)
  - Fix network.interface.speed value extraction (BZ 1379431)


author: Lukas Berk <lberk@redhat.com> - 3.11.8-1
changelog:
  - Support newer kernels /proc/vmstat file contents (BZ 1396148)
  - Added pcp-selinux policy (BZs 1214090, 1381127, 1337968, 1398147)


author: Nathan Scott <nathans@redhat.com> - 3.11.9-1
changelog:
  - Fix pmchart chart legends toggling behaviour (BZ 1359961)
  - Improve multiple local context attr handling (BZ 1430248)
  - Fix error during installation of pcp-selinux (BZ 1433271)
  - Update to latest PCP sources.


author: Dave Brolley <brolley@redhat.com> - 3.11.10-1
changelog:
  - python api: handle non-POSIXLY_CORRECT getopt cases (BZ 1289912)
  - Fix pmchart reaction to timezone changes from pmtime (BZ 968823)
  - Require Qt5 for Fedora.
  - Update to latest PCP sources.


author: Lukas Berk <lberk@redhat.com> - 3.12.0-1
changelog:
  - Fix pcp-atop failure in open-ended write mode (BZ 1431292)
  - Resolve additional selinux policy issues (BZ 1317515)
  - Improve poor pmlogconf performance (BZ1376857)
  - Update to latest PCP sources.


author: Lukas Berk <lberk@redhat.com> - 3.12.2-1
changelog:
  - selinux: add pmlogger_exec_t rule from (BZ 1483320)
  - selinux: pmlc accessing tcp port 4330 (BZ 1447585)
  - selinux: pmnewlog.sh using ps to check pid's for pmloggers (BZ 1488116)
  - Update to latest PCP sources.


author: Lukas Berk <lberk@redhat.com> - 3.12.2-4
changelog:
  - Remove Obsoletes line for pcp-gui-debuginfo
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Nathan Scott <nathans@redhat.com> - 4.0.0-1
changelog:
  - pcp-atopsar: robustness around missing data (BZ 1508028)
  - python pmcc method checking for missing metrics (BZ 1508026)
  - Fix generic -s and -T option handling in libpcp (BZ 1352461)
  - Resolve crash in local context mode in libpcp_pmda (BZ 1451475)
  - python api: fix timezone segv from incorrect free (BZ 1352465)
  - Remove section 1 and 5 man pages for pmview tool (BZ 1289126)
  - Update to latest PCP sources.


author: Mark Goodwin <mgoodwin@redhat.com> - 4.0.1-1
changelog:
  - Fix selinux policy to allow pmdagluster to work (BZ 1558708)
  - pmcd binding only to localhost:44321 by default (BZ 1529915)
  - Update to latest PCP sources.


author: Mark Goodwin <mgoodwin@redhat.com> - 4.0.2-1
changelog:
  - Propogate build flags throughout PCP (BZ 1538187)
  - Further additions to selinux policy (BZ 1565158)
  - Update to Vector v1.2.2 in pcp-webapp-vector.
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 4.1.0-2
changelog:
  - Rapid compression of PCP log data and metadata (BZ 1293471)
  - Added Perl package build dependencies.
  - Update to latest PCP sources.


author: Dave Brolley <brolley@redhat.com> - 4.1.1-1
changelog:
  - SELinux is preventing pmdalinux from 'unix_read' accesses on the shared memory Unknown
    (BZ 1592901)
  - SELinux is preventing pmdalinux from getattr, associate access on the shared memory Unknown
    (BZ 1594991)
  - PCP BCC PMDA AVCs (BZ 1597978)
  - PCP BCC PMDA packaging issue (BZ 1597979)
  - pmdaproc only reads the first 1024 bytes of the /proc/*/status file resulting in lost metric
    values(BZ 1600262)
  - Update to latest PCP sources.


author: Mark Goodwin <mgoodwin@redhat.com> - 4.2.0-1
changelog:
  - Resolves dstat packaging issues (BZ 1640912)
  - Resolves dstat cursor positioning problem (BZ 1640913)
  - Resolve a signal handling issue in dstat shutdown (BZ 1648552)
  - Rename variable named await in python code (BZ 1633367)
  - New conditionally-built pcp-pmda-podman sub-package.
  - SELinux is preventing pmdalinux from 'unix_read' accesses on the shared memory labeled gpsd_t
    (BZ 1626487)
  - SELinux is preventing ps from 'search' accesses on the directory .cache
    (BZ 1634205, BZ 1635522)
  - SELinux is preventing ps from 'sys_ptrace' accesses on the cap_userns Unknown
    (BZ 1635394)
  - PCP SELinux AVCs (BZ 1633211)
  - SELinux is preventing pmdalinux from 'search' accesses on the directory spider
    (BZ 1647843)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 4.3.0-1
changelog:
  - Add the dstat -f/--full option to expand instances (BZ 1651536)
  - Improve systemd interaction for local pmie (BZ 1650999)
  - SELinux is preventing ps from 'search' accesses on the directory
    .config (BZ 1569697)
  - SELinux is preventing pmdalinux from 'search' accesses on
    the directory /var/lib/libvirt/images (BZ 1579988)
  - SELinux is preventing pmdalinux from 'unix_read' accesses
    on the semáforo Unknown (BZ 1607658)
  - SELinux is preventing pmdalinux from 'unix_read' accesses
    on the shared memory Unknown (BZ 1618756, BZ 1619381, BZ 1601721)
  - Update to latest PCP sources.


author: Mark Goodwin <mgoodwin@redhat.com> - 4.3.1-1
changelog:
  - Fixes pcp-dstat in --full (all instances) mode (BZ 1661912)
  - Remove package dependencies on initscripts (BZ 1592380)
  - Set include directory for cppcheck use (BZ 1663372)
  - Update to latest PCP sources.


author: Mark Goodwin <mgoodwin@redhat.com> - 4.3.2-1
changelog:
  - Resolve selinux policy issues for pmie daemon mode (BZ 1702589)
  - Resolve selinux policy issues for BPF permissions (BZ 1693332)
  - Further improvements to daily archive processing (BZ 1647390)
  - Update to latest PCP sources.


author: Mark Goodwin <mgoodwin@redhat.com> - 4.3.3-1
changelog:
  - Resolve segv running pmchart with bogus timezone (BZ 1718948)
  - Resolve pmrep wait.formula for collectl-dm-sD and collectl-sD (BZ 1724288)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 4.3.4-1
changelog:
  - Resolve bootup issues with pmlogger service (BZ 1737091, BZ 1721223)
  - Resolve selinux policy issues in PCP tools (BZ 1721644, BZ 1711547)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 5.0.2-1
changelog:
  - Resolve fresh install pmlogger timeout bug (BZ 1721223)
  - Fix dstat exception writing to a closed fd (BZ 1768619)
  - Fix chan lib dependency of pcp-pmda-statsd (BZ 1770815)
  - Update to latest PCP sources.


author: Mark Goodwin <mgoodwin@redhat.com> - 5.0.3-1
changelog:
  - Avoid python ctypes bitfield struct on-stack (BZ 1800685)
  - Add dstat support for DM/MD/part devices (BZ 1794273)
  - Fix compilation with gcc version 10 (BZ 1793495)
  - Fix dstat sub-sample averaging (BZ 1780039)
  - Update to latest PCP sources.


author: Mark Goodwin <mgoodwin@redhat.com> - 5.1.0-2
changelog:
  - Replace pmdads389log dep on 389-ds-base with a softdep
  - Fix install deps for pcp-testsuite on pcp-pmda-mssql
  - Improve pmlogger and pmie system log messages (BZ 1806428)
  - Missing dep of pcp-pmda-dbping on perl-DBI (BZ 1790421)
  - Missing dep of pcp-pmda-ds389log on 389-ds-base (BZ 1790422)
  - Missing dep of pcp-pmda-gpsd on perl-JSON and perl-Time-HiRes (BZ 1790426)
  - Missing dep of pcp-pmda-lmsensors on lm_sensors (BZ 1790427)
  - Missing dep of pcp-pmda-redis on perl-autodie (BZ 1790431)
  - Missing dep of pcp-pmda-smart on smartmontools (BZ 1790432)
  - Missing dep of pcp-pmda-snmp on net-snmp-perl (BZ 1790433)
  - SELinux issues with pcp-pmda-zimbra (BZ 1790437)
  - Missing dep of pcp-pmda-pdns on perl-Time-HiRes (BZ 1790441)
  - Installation of pcp-pmda-netcheck causes SELinux issue (BZ 1790450)
  - Installation of pcp-pmda-samba causes SELinux issues (BZ 1790452)
  - Some PMDAs are missing dependency on PCP (BZ 1790526)
  - pmieconf randomly fails (BZ 1800545)
  - collectl2pcp does not handle large collectl archives well (BZ 1785101)
  - Missing dep of pcp-pmda-redis on perl-autodie and perl-Time-HiRes (BZ 1788519)
  - Cannot install pcp-pmda-activemq, wrong location of RESTClient (BZ 1788878)
  - Missing dep of pcp-pmda-bind2 on various perl packages (BZ 1790415)
  - pmlogger_daily_report causing PCP upstream testsuite to fail (BZ 1805146)
  - Missing selinux rules preventing pcp-pmda-named runing rndc(BZ 1825663)
  - SELinux is preventing PostgreSQL PMDA to collect metrics (BZ 1825957)
  - pmnewlog generates inaccessible config file (BZ 1810110)
  - pmnewlog is causing PCP testsuite to hang (BZ 1810118)
  - pmdakvm: debugfs access is restricted (BZ 1824297)
  - Error starting pmlogger; pid file not owned by root (BZ 1761962)
  - Update to latest PCP sources.


author: Mark Goodwin <mgoodwin@redhat.com> - 5.1.1-1
changelog:
  - Rebuild to pick up changed HdrHistogram_c version (BZ 1831502)
  - pmdakvm: handle kernel lockdown in integrity mode (BZ 1824297)
  - PCP_NSSDB_DIR should not be mentioned in /etc/pcp.conf (BZ 1826020)
  - pmie_daily.service runs as pcp but tries to do root things (BZ 1832262)
  - pcp-testsuite-5.1.0-2.el8 package is missing pcpqa.pp file (BZ 1835422)
  - GFS2 kernel trace points turning on by themselves (BZ 1825386)
  - pcp-atop various fixes (BZ 1818710)
  - SELinux prevents pmlogger from secure connection to remote pmcd (BZ 1826047)
  - pmda-lustre fails to start since lustre 2.12 (BZ 1788937)
  - Added labels support for pmrep and various pcp2xxx tools
  - Update to latest pcp-5.1.1 PCP sources.


author: Mark Goodwin <mgoodwin@redhat.com> - 5.1.1-2
changelog:
  - Activate pmlogger_rewrite on upgrades (BZ 1541406)
  - Fix Coverity issues in pmdastatsd and pmlogconf (BZ 1792971)
  - libpcp_web: ensure context is freed only after timer is fully closed
  - Services: pmlogger and pmie services Want pmcd on boot
  - Fix intermittent pmlogconf core dumps (BZ 1845241)
  - pcp-atop: resolve potential null task pointer dereference
  - pmproxy: improve diagnostics, particularly relating to http requests
  - pmproxy: cleanup, remove unused flags and dead code in http encoding
  - pmproxy: support the OPTIONS protocol in HTTP 1.1
  - libpcp_web: add resilience to descriptor lookup paths (BZ 1837153)


author: Mark Goodwin <mgoodwin@redhat.com> - 5.1.1-3
changelog:
  - Fix for missing runtime deps on perl Net::SNMP (BZ 1790433)
  - Resolve covscan and other issues from upstream QA (BZ 1849511)
  - Possible memory leak detected in pcp-atop (BZ 1846705)
  - Installation of pcp-pmda-samba causes SELinux issues (BZ 1790452)
  - Fix Intermittent pminfo crashes (BZ 1848995)
  - Silence openmetrics PMDA warnings, add status metrics (BZ 1846711)
  - Set PACKAGE_BUILD in VERSION.pcp so pmcd.build metric is correct


author: Nathan Scott <nathans@redhat.com> - 5.2.1-1
changelog:
  - Interactive mode in pcp-atop for time intervals (BZ 1806824)
  - Add branch-to-specific-time feature in pcp-atop (BZ 1806927)
  - Fix hostname written to archive folio by pmchart (BZ 1824403)
  - Allow pmafm to function with compressed archives (BZ 1839666)
  - Fix folio handling of archive files outside /tmp (BZ 1839698)
  - pcp-pmda-lio deals with a missing kernel module (BZ 1843792)
  - Windows authentication mode for SQL Server PMDA (BZ 1847808)
  - Fix previous sample selection within pcp-atop (BZ 1847925)
  - Make pcp-atopsar honour the -e (end time) option (BZ 1851838)
  - Fix pcp-pmda-zswap crashing with namespace error (BZ 1851887)
  - Fix pcp-atopsar handling of -H (header) option (BZ 1857121)
  - Update pcp-free(1) to show 'shared' memory usage (BZ 1878768)
  - Rebase to a more recent upstream version of PCP (BZ 1854035)


author: Nathan Scott <nathans@redhat.com> - 5.2.1-2
changelog:
  - Fix rpm spec permissions for pmie and sa directories (BZ 1882615)
  - Add versioned rpm spec dependencies for pcp-zeroconf (BZ 1882664)


author: Nathan Scott <nathans@redhat.com> - 5.2.2-1
changelog:
  - Add online help text for PCP derived metrics (BZ 1670029)
  - Add process accounting metrics and pcp-atop support (BZ 1814526)
  - Fix pmchart recorded archive folio host names (BZ 1824403)
  - Fix selinux issue with secure pmcd connections (BZ 1857396)
  - Extend pmlogger_daily script compression docs (BZ 1880392)
  - perfevent support for hv_24x7/hv_gpci dynamic events (BZ 1889613)
  - Improve pmlogger multiple remote node setups (BZ 1892326)
  - Rebase to a more recent upstream version of PCP (BZ 1854035)


author: Nathan Scott <nathans@redhat.com> - 5.2.3-1
changelog:
  - Adds a new pcp-htop(1) utility (BZ 1716242)
  - Adds per-process network metrics to pcp-atop(1) (BZ 1733901)
  - Rebase to latest upstream stable release of PCP (BZ 1854035)
  - Resolves an selinux issue in the netcheck agent (BZ 1897719)
  - Rebase to a more recent upstream version of PCP (BZ 1854035)


author: Nathan Scott <nathans@redhat.com> - 5.2.5-1
changelog:
  - Extended socket statistic metrics (BZ 1491892)
  - Add explicit umask to startup scripts (BZ 1833647)
  - Fix pmlogger scripts fore remote loggers (BZ 1919950)
  - Enhance selinux policy for netcheck metrics (BZ 1897719)
  - Resolve packaging issue related to tmpfiles (BZ 1919974)
  - Ensure online help text exists for all metrics (BZ 1670029)
  - Adds HA cluster metrics (Pacemaker, Corosync, DRBD and SBD)
  - Rebase to a more recent upstream version of PCP (BZ 1854035)


author: Andreas Gerstmayr <agerstmayr@redhat.com> - 5.2.5-2
changelog:
  - Fixed typo in specfile (pcp-testsuite requires pcp-pmda-hacluster
    and pcp-pmda-sockets instead of pcp-pmdas-hacluster etc.)


author: Mark Goodwin <mgoodwin@redhat.com> - 5.2.5-3
changelog:
  - Specify pmns_name in sockets PMDA Install and Remove scripts
  - Add selinux rules for pmcd to use netlink tcpdiag sockets (BZ 1926756)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-1
changelog:
  - Allow pcp-atop to filter processes on state (BZ 1807046)
  - Dynamically adjust the pmproxy open file limit (BZ 1954711)
  - Rebase to a more recent upstream version of PCP (BZ 1922040)
  - PCP scalability and memory footprint improvements (BZ 1942292)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-4
changelog:
  - Improve pmchart duplicate archive diagnostics (BZ 1615718)
  - Save pmchart users prefered archive locations (BZ 1615742)
  - Remove libvarlink dependency from podman PMDA (BZ 1956608)


author: Nathan Scott <nathans@redhat.com> - 5.3.1-1
changelog:
  - Improved diagnostics from pmie service scripts (BZ 1954576)
  - Drop option configuration file env var setting (BZ 1967174)
  - Add pmie support for thermal throttle detection (BZ 1908212)
  - Annotate a couple of obscure config files in rpm (BZ 1964253)
  - Rebase to a more recent upstream version of PCP (BZ 1922040)


author: Nathan Scott <nathans@redhat.com> - 5.3.1-2
changelog:
  - Fix pmproxy parallel TLS requests bug (BZ 1947989)
  - Backport pmrep archive creation fix (BZ 1974266)


author: Mark Goodwin <mgoodwin@redhat.com> - 5.3.1-3
changelog:
  - Improve pmproxy and libpcp_web scalability (BZ 1975069)
  - Provide a pcp-ss(1) tool in pcp-system-tools (BZ 1879350)


author: Nathan Scott <nathans@redhat.com> - 5.3.3-1
changelog:
  - Add new pmdads389(1) metrics for replication (BZ 1966122)
  - Add label support to pmdahacluster(1) metrics (BZ 1972277)
  - Improve pmieconf rules for saturated processors (BZ 1994680)
  - Auto-upgrade pmcd.conf for python2 to python3 (BZ 1988403)
  - Document unloading pmdakvm(1) for kernel module (BZ 1977740)
  - Add option to pmdalinux(1) for slabinfo metrics (BZ 1962902)
  - Fix for OpenMetrics scripting generating AVCs (BZ 1985818)
  - Resolve some pcp-testsuite failures (BZ 1980459, 1981686)
  - Rebase to a more recent upstream version of PCP (BZ 1991763)


author: Nathan Scott <nathans@redhat.com> - 5.3.4-1
changelog:
  - Add pcp-atop(1) support for 'curscal' values (BZ 1984271)
  - Fix pcp-atop(1) reporting perfevent 'ipc' values (BZ 1986264)
  - Fix pmlogger(1) exiting on receipt of SIGALRM (BZ 2004771)
  - Fix values of some hacluster metrics on s390x (BZ 2008298)
  - Add new pmdads389(1) metrics for replication (BZ 1966122)
  - Rebase to a more recent upstream version of PCP (BZ 1991763)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-1
changelog:
  - Extend pmlogger(1) man page --interval option (BZ 2018083)
  - Disable Avahi service advertisement by default (BZ 1899625)
  - Use separate localhost and farm service cgroups (BZ 1991896)
  - Update and extend the Nvidia GPU metric coverage (BZ 1690590)
  - Assessment API and pmdamssql(1) share credentials (BZ 1951342)
  - Improve remote pmlogger over slow network connections (BZ 1973833)
  - Implement pcp-atop(1) support for Nvidia GPU reports (BZ 1984273)
  - Drop DMA[32] zones when the zone is not in node 0 (BZ 1985519)
  - Support kernel changes to /proc/zoneinfo metrics (BZ 1985523)
  - Ensure pmlogconf persists configuration changes (BZ 2017632)
  - Auto-reconnect lost redis connection in pmproxy (BZ 1989287)
  - Rebase to a more recent upstream version of PCP (BZ 1991763)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-3
changelog:
  - Resolve failure in the Nvidia metrics agent (BZ 2029301)
  - PMDA indom cache loading performance improvements (BZ 2030121)
  - Consistent user experience for new farm services (BZ 2027753)
  - Resilience improvements for the pmproxy service (BZ 2030140)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-4
changelog:
  - pmdabcc: resolve compilation issues of some bcc PMDA modules on
    aarch64, ppc64le and s390x (BZ 2003956)
  - Further improve pmlogger service startup latency (BZ 1973833)
  - Additional improvements to farm systemd services (BZ 2027753)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-17
changelog:
  - Harden pmdaopenmetrics metric name validator (BZ 2139325)
  - Fix issues in pmdanfsclient srcport handling (BZ 2150889)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-18
changelog:
  - Improve pmproxy handling large HTTP requests (BZ 2159207)
  - Fix hacluster metrics with current Pacemaker (BZ 2219731)
  - Ensure pmcd.conf not needlessly over written (BZ 2211263)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-19
changelog:
  - Fix OpenMetrics PMDA mishandling systemd metrics (RHEL-7507)
  - Additional pmlogger_farm service SELinux policy (RHEL-7501)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-21
changelog:
  - Fix python API day-of-year out of range bug (RHEL-29708)
  - Added spec deps on ps and diffutils for diff (RHEL-17081)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-22
changelog:
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57796)
  - Guard against symlink attacks in pmpost program (RHEL-57799)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58002)
  - Update pmdahacluster for newer crm_mon versions (RHEL-57788)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.0-463
changelog:
  - Run-require complete perl by perl-CPAN
  - Fix ownership of /usr/share/perl5/{ExtUtils,File,Module,Text,Time} directories
  - Fix a buffer overflow when compiling a regular expression with a bracketed
    character class with a white space
  - Fix a mismatch with the recursive subpatterns (GH#18096)
  - Update perl-IO-Zlib metadata
  - Fix sv_collxfrm macro to respect locale
  - Fix an iterator signedness in handling an mro exception (GH#18155)
  - Fix a code flow in Perl_sv_inc_nomg()


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.0-464
changelog:
  - Fix an undefined behavior in Perl_custom_op_get_field()
  - Fix Config variable names in in t/op tests
  - Fix fetching a magic on the stacked file test operators


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.32.1-466
changelog:
  - 5.32.1 bump (see <https://metacpan.org/pod/release/SHAY/perl-5.32.1/pod/perldelta.pod>
    or release notes)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-467
changelog:
  - Fix a crash in optimizing split() (GH#18232)
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-468
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-469
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-1
changelog:
  - 5.10.0 final
  - clear out all the unnecessary patches (down to 8 patches!)
  - get rid of super perl debugging mode
  - add new subpackages


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-4
changelog:
  - create %{_prefix}/lib/perl5/vendor_perl/%{perl_version}/auto and own it
    in base perl (resolves bugzilla 214580)


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-5
changelog:
  - disable some futime tests in t/io/fs.t because they started failing on x86_64
    in the Fedora builders, and no one can figure out why. :/


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-7
changelog:
  - Add perl-File-Temp provides/obsoletes/conflicts (#433836),
    reported by Bill McGonigle <bill@bfccomputing.com>
  - escape the macros in Jan 30 entry


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-12
changelog:
  - conditionalize multilib patch report in patchlevel.h
  - Update Archive::Extract to 0.26
  - Update Module::Load::Conditional to 0.24


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-19
changelog:
  - fix CPANPLUS-Dist-Build Provides/Obsoletes (bz 437615)
  - bump version on Module-CoreList subpackage


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-20
changelog:
  - create the vendor_perl/%{perl_version}/%{perl_archname}/auto directory 
    in %{_libdir} so we own it properly


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-21
changelog:
  - sparc64 fails two tests under mysterious circumstances. we need to get the
    rest of the tree moving, so we temporarily disable the tests on that arch.


author: Stepan Kasal <skasal@redhat.com> 4:5.10.0-26
changelog:
  - make config parameter list consistent for 32bit and 64bit platforms,
    add config option -Dinc_version_list=none (#448735)
  - use perl_archname consistently
  - cleanup of usage of *_lib macros in %install


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-33
changelog:
  - 451078 update Test::Harness to 3.12 for more testing. Removed verbose 
  test, new Test::Harness has possibly verbose output, but updated package
  has a lot of features f.e. TAP::Harness. Carefully watched all new bugs 
  related to tests!


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-38
changelog:
  - 455933 update to CGI-3.38
  - fix fuzz problems (patch6)
  - 217833 pos() function handle unicode characters correct


author: Stepan Kasal <skasal@redhat.com> 4:5.10.0-39.fc10
changelog:
  - CGI.pm bug in exists() on tied param hash (#457085)
  - move the enc2xs templates (../Encode/*.e2x) to -devel, (#456534)


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-44.fc10
changelog:
  - remove Tar.pm from Archive-Extract
  - fix version of Test::Simple in spec
  - update Test::Simple
  - update Archive::Tar to 1.38


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-46
changelog:
  - also preserve the timestamp of AUTHORS; move the fix to the recode
    function, which is where the stamps go wrong


author: Marcela Mašláňová <mmaslano@redhat.com> 4:5.10.0-47.fc10
changelog:
  - rt#33242, rhbz#459918. Segfault after reblessing objects in Storable.
  - rhbz#465728 upgrade Simple::Pod to 3.07


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-51
changelog:
  - to fix Fedora bz 473223, which is really perl bug #54186 (http://rt.perl.org/rt3//Public/Bug/Display.html?id=54186)
    we apply Changes 33640, 33881, 33896, 33897


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-52
changelog:
  - 295021 CVE-2007-4829 perl-Archive-Tar directory traversal flaws
  - add another source for binary files, which test untaring links


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-54
changelog:
  - 455410 http://rt.perl.org/rt3/Public/Bug/Display.html?id=54934
    Attempt to free unreferenced scalar fiddling with the symbol table
    Keep the refcount of the globs generated by PerlIO::via balanced.


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-60
changelog:
  - remove compatibility obsolete sitelib directories
  - use a better BuildRoot
  - drop a redundant mkdir in %install
  - call patchlevel.h only once; rm patchlevel.bak
  - update modules Sys::Syslog, Module::Load::Conditional, Module::CoreList,
    Test::Harness, Test::Simple, CGI.pm (dropping the upstreamed patch),
    File::Path (that includes our perl-5.10.0-CVE-2008-2827.patch),
    constant, Pod::Simple, Archive::Tar, Archive::Extract, File::Fetch,
    File::Temp, IPC::Cmd, Time::HiRes, Module::Build, ExtUtils::CBuilder
  - standardize the patches for updating embedded modules
  - work around a bug in Module::Build tests bu setting TMPDIR to a directory
    inside the source tree


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-61
changelog:
  - apply Change 34507: Fix memory leak in single-char character class optimization
  - Reorder @INC, based on b9ba2fadb18b54e35e5de54f945111a56cbcb249
  - fix Archive::Extract to fix test failure caused by tar >= 1.21
  - Merge useful Debian patches


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-66
changelog:
  - fix CGI::escape for all strings (#472571)
  - perl-CGI-t-util-58.patch: Do not distort lib/CGI/t/util-58.t
    http://rt.perl.org/rt3/Ticket/Display.html?id=64502


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-74
changelog:
  - fix generated .ph files so that they no longer cause warnings (#509676)
  - remove PREREQ_FATAL from Makefile.PL's processed by miniperl
  - update to latest Scalar-List-Utils (#507378)
  - perl-skip-prereq.patch: skip more prereq declarations in Makefile.PL files


author: Chris Weyl <cweyl@alumni.drew.edu> - 4:5.10.0-82
changelog:
  - update our Test-Simple update to 0.92 (patch by Iain Arnell), #519417
  - update Module-Pluggable to 3.9


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-87
changelog:
  - fix patch-update-Compress-Raw-Zlib.patch (did not patch Zlib.pm)
  - update Compress::Raw::Zlib to 2.023
  - update IO::Compress::Base, and IO::Compress::Zlib to 2.015 (#542645)


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.1-100
changelog:
  - new upstream version
  - release number must be high, because of stale version numbers of some
    of the subpackages
  - drop upstreamed patches
  - update the versions of bundled modules
  - shorten the paths in @INC
  - build without DEBUGGING
  - implement compatibility measures for the above two changes, for a short
    transition period
  - provide perl(:MODULE_COMPAT_5.10.0), for that transition period only


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-109
changelog:
  - 547656 CVE-2009-3626 perl: regexp matcher crash on invalid UTF-8 characters  
  - 549306 version::Internals should be packaged in perl-version subpackage
  - Parse-CPAN-Meta updated and separate package is dead


author: Paul Howarth <paul@city-fan.org> - 4:5.10.1-115
changelog:
  - restore missing version macros for Compress::Raw::Zlib, IO::Compress::Base
    and IO::Compress::Zlib


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-116
changelog:
  - add noarch into correct sub-packages
  - move Provides/Obsoletes into correct modules from main perl


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-118
changelog:
  - 463773 remove useless txt files from installation
  - 575842 remove PERL_USE_SAFE_PUTENV, use perl putenv


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.12.1-123
changelog:
  - remove patch with debugging symbols, which should be now ok without it
  - update to 5.12.1
  - MODULE_COMPAT


author: Petr Pisar <ppisar@redhat.com> - 4:5.12.1-130
changelog:
  - Run tests in parallel
  - Add "-Wl,--enable-new-dtags" to linker to allow to override perl's rpath by
    LD_LIBRARY_PATH used in tests. Otherwise tested perl would link to old
    in-system libperl.so.
  - Normalize spec file indentation


author: Petr Sabata <psabata@redhat.com> - 4:5.12.2-1
changelog:
  - Update to 5.12.2
  - Removed one hardcoded occurence of perl version in build process
  - Added correct path to dtrace binary
  - BuildRequires: systemtap-sdt-devel


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.12.2-141
changelog:
  - 643447 fix redefinition of constant C in h2ph (visible in git send mail,
    XML::Twig test suite)
  - remove ifdef for s390


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.0-161
changelog:
  - test build of released 5.14.0
  - remove Class::ISA from sub-packages
  - patches 8+ are part of new release
  - remove vendorarch/auto/Compress/Zlib


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.0-169
changelog:
  - filter even Mac:: requires, polish filter again for correct installation
  - add sub-package Compress-Raw-Bzip2, solve Bzip2 conflicts after install
  - and add IO::Uncompress::Bunzip2 correctly into IO-Compress


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.0-170
changelog:
  - try to update to latest ExtUtils::MakeMaker, no luck -> rebuild with current 
    version, fix bug RT#67618 in modules


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.1-171
changelog:
  - update to 5.14.1 - no new modules, just serious bugfixes and doc
  - switch off fork test, which is failing only on koji


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.1-178
changelog:
  - update macros -> add %perl_bootstrap 1 and example for readability
  - add into Module::Build dependency on perl-devel (contains macros.perl)
  - create new sub-package macros, because we need macros in minimal buildroot


author: Iain Arnell <iarnell@gmail.com> 4:5.14.1-179
changelog:
  - Parse-CPAN-Meta explicitly requires CPAN::Meta::YAML and JSON::PP
  - Exclude CPAN::Meta* from CPAN sub-package
  - Don't try to normalize CPAN-Meta, JSON-PP, and Parse-CPAN-Meta versions;
    their dual-life packages aren't and have much higher numbers already


author: Paul Howarth <paul@city-fan.org> - 4:5.14.1-182
changelog:
  - Have perl-Module-Build explicitly require perl(CPAN::Meta) >= 2.110420,
    needed for creation of MYMETA files by Build.PL; the dual-life version of
    the package already has this dependency


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.1-188
changelog:
  - Make gdbm support optional to bootstrap with new gdbm
  - Split Carp into standalone sub-package to dual-live with newer versions
    (bug #736768)


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.1-189
changelog:
  - Correct perl-CGI list of Provides
  - Make tests optional
  - Correct perl-ExtUtils-ParseXS Provides
  - Correct perl-Locale-Codes Provides
  - Correct perl-Module-CoreList version
  - Automate perl-Test-Simple-tests Requires version


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-193
changelog:
  - 5.14.2 bump (see
    https://metacpan.org/module/FLORA/perl-5.14.2/pod/perldelta.pod for release
    notes).
  - Fixes panics when processing regular expression with \b class and /aa
    modifier (bug #731062)
  - Fixes CVE-2011-2728 (File::Glob bsd_glob() crash with certain glob flags)
    (bug #742987)


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-195
changelog:
  - Fix CVE-2011-3597 (code injection in Digest) (bug #743010)
  - Sub-package Digest and thus Digest::MD5 module (bug #743247)


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-196
changelog:
  - Filter false perl(DynaLoader) provide from perl-ExtUtils-MakeMaker
    (bug #736714)
  - Change Perl_repeatcpy() prototype to allow repeat count above 2^31
    (bug #720610)
  - Do not own site directories located in /usr/local (bug #732799)


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.2-197
changelog:
  - cleaned spec (thanks to Grigory Batalov)
  -  Module-Metadata sub-package contained perl_privlib instead of privlib
  -  %files parent section was repeated twice


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-205
changelog:
  - Sub-package ExtUtils::Install
  - Sub-package ExtUtils::Manifest
  - Do not provide private perl(ExtUtils::MakeMaker::_version)


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-207
changelog:
  - Fix interrupted reading. Thanks to Šimon Lukašík for reporting this issue
    and thanks to Marcela Mašláňová for finding fix. (bug #767931)


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-211
changelog:
  - Fix searching for Unicode::Collate::Locale data (bug #756118)
  - Run safe signal handlers before returning from sigsuspend() and pause()
    (bug #771228)
  - Correct perl-Scalar-List-Utils files list
  - Stop !$^V from leaking (bug #787613)


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.16.0-RC2-217
changelog:
  - clean patches, not needed with new version
  - regen by podcheck list of failed pods. cn, jp, ko pods failed. I can't decide
    whether it's a real problem or false positives.


author: Paul Howarth <paul@city-fan.org> 4:5.16.0-226
changelog:
  - Move the rest of ExtUtils-ParseXS into its sub-package, so that the main
    perl package doesn't need to pull in perl-devel (bug #839953)


author: Jitka Plesnikova <jplesnik@redhat.com> 4:5.16.1-228
changelog:
  - 5.16.1 bump (see
    http://search.cpan.org/dist/perl-5.16.1/pod/perldelta.pod for release
    notes)
  - Fixed reopening by scalar handle (bug #834221)
  - Fixed tr/// multiple transliteration (bug #831679)
  - Fixed heap-overflow in gv_stashpv (bug #826516)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.1-233
changelog:
  - Do not access freed memory when cloning thread (bug #825749)
  - Match non-breakable space with /[\h]/ in ASCII mode (bug #844919)
  - Clear $@ before `do' I/O error (bug #834226)
  - Do not truncate syscall() return value to 32 bits (bug #838551)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.1-238
changelog:
  - Do not leak with attribute on my variable (bug #858966)
  - Allow operator after numeric keyword argument (bug #859328)
  - Extend stack in File::Glob::glob (bug #859332)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.2-249
changelog:
  - Run-require POD convertors by Module-Build and ExtUtils-MakeMaker to
    generate documentation when building other packages


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.2-250
changelog:
  - Sub-package Text-Soundex (bug #905889)
  - Fix conflict declaration at perl-Pod-LaTeX (bug #904085)
  - Remove bundled Module-Pluggable (bug #903624)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.2-254
changelog:
  - Correct perl-podlators dependencies
  - Obsolete perl-ExtUtils-Typemaps by perl-ExtUtils-ParseXS (bug #891952)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.2-256
changelog:
  - Sub-package File-CheckTree (bug #909144)
  - Sub-package Text-ParseWords
  - Sub-package Encode (bug #859149)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-261
changelog:
  - 5.16.3 bump (see <http://search.cpan.org/dist/perl-5.16.3/pod/perldelta.pod>
    for release notes)
  - Remove bundled autodie, B-Lint, CPANPLUS, Encode, File-CheckTree, IPC-Cmd,
    Params-Check, Text-Soundex, Thread-Queue


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-263
changelog:
  - Correct perl-Digest-MD5 dependencies
  - Remove bundled Archive-Extract, File-Fetch, HTTP-Tiny,
    Module-Load-Conditional, Time-Local


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-265
changelog:
  - Conflict perl-autodie with older perl (bug #911226)
  - Sub-package Env (bug #924619)
  - Sub-package Exporter (bug #924645)
  - Sub-package File-Path (bug #924782)
  - Sub-package File-Temp (bug #924822)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-267
changelog:
  - Remove bundled constant, DB_File, Digest-MD5, Env, Exporter, File-Path,
    File-Temp, Module-Load, Log-Message-Simple, Pod-Simple, Test-Harness,
    Text-ParseWords


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-270
changelog:
  - Fix leaking tied hashes (bug #859910)
  - Fix dead lock in PerlIO after fork from thread (bug #947444)
  - Add proper conflicts to perl-Getopt-Long, perl-Locale-Maketext, and
    perl-Sys-Syslog


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-271
changelog:
  - Sub-package Time-HiRes (bug #957048)
  - Remove bundled Getopt-Long, Locale-Maketext, and Sys-Syslog


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-272
changelog:
  - Make regular expression engine safe in a signal handler (bug #849703)
  - Remove bundled ExtUtils-ParseXS, and Time-HiRes


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-277
changelog:
  - Move CPANPLUS-Dist-Build files from perl-CPANPLUS
  - Move CPAN-Meta-Requirements files from CPAN-Meta
  - Add perl-Scalar-List-Utils to perl-core dependencies


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-278
changelog:
  - Update SystemTap scripts to recognize new phase__change marker and new probe
    arguments (bug #971094)
  - Update h2ph(1) documentation (bug #948538)
  - Update pod2html(1) documentation (bug #948538)
  - Do not double-own archlib directory (bug #894195)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-279
changelog:
  - Do not distribute File::Spec::VMS (bug #973713)
  - Remove bundled CPANPLUS-Dist-Build (bug #973041)


author: Petr Pisar <ppisar@redhat.com> - 4:5.18.0-282
changelog:
  - Do not load system Term::ReadLine::Gnu while running tests
  - Disable ornaments on perl5db AutoTrace tests


author: Petr Pisar <ppisar@redhat.com> - 4:5.18.0-283
changelog:
  - Define SONAME for libperl.so and move the libary into standard path
  - Link XS modules to libperl.so on Linux (bug #960048)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.18.1-287
changelog:
  - 5.18.1 bump (see <http://search.cpan.org/dist/perl-5.18.1/pod/perldelta.pod>
    for release notes)
  - Disable macro %{rebuild_from_scratch}
  - Fix regex seqfault 5.18 regression (bug #989921)
  - Fixed interpolating downgraded variables into upgraded (bug #970913)
  - SvTRUE returns correct value (bug #967463)
  - Fixed doc command in perl debugger (bug #967461)
  - Fixed unaligned access in slab allocator (bug #964950)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.18.1-288
changelog:
  - Fix rules for parsing numeric escapes in regexes (bug #978233)
  - Fix crash with \&$glob_copy (bug #989486)
  - Fix coreamp.t's rand test (bug #970567)
  - Reap child in case where exception has been thrown (bug #988805)
  - Fix using regexes with multiple code blocks (bug #982131)


author: Petr Pisar <ppisar@redhat.com> - 4:5.18.1-289
changelog:
  - perl_default_filter macro does not need to filter private libraries from
    provides (bug #1020809)
  - perl_default_filter anchors the filter regular expressions
  - perl_default_filter appends the filters instead of redefining them


author: Petr Pisar <ppisar@redhat.com> - 4:5.18.2-294
changelog:
  - Drop perl-Test-Simple-tests package is it is not delivered by dual-lived
    version
  - Hide dual-lived perl-Object-Accessor


author: Petr Pisar <ppisar@redhat.com> - 4:5.18.2-300
changelog:
  - Sub-package perl-App-find2perl (bug #1111196)
  - Sub-package perl-App-a2p (bug #1111232)
  - Sub-package perl-App-s2p (bug #1111242)


author: Petr Pisar <ppisar@redhat.com> - 4:5.18.2-301
changelog:
  - Remove bundled perl-App-a2p, perl-App-find2perl, perl-App-s2p, and
    perl-Package-Constants
  - Correct perl-App-s2p license to ((GPL+ or Artistic) and App-s2p)


author: Petr Pisar <ppisar@redhat.com> - 4:5.18.2-303
changelog:
  - Declare dependencies for cpan tool (bug #1122498)
  - Use stronger algorithm needed for FIPS in t/op/crypt.t (bug #1128032)
  - Make *DBM_File desctructors thread-safe (bug #1107543)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.20.0-305
changelog:
  - Update to Perl 5.20.0
  - Clean patches, not needed with new version
  - Update patches to work with new version
  - Update version of sub-packages, remove the deleted sub-packages
  - Sub-package perl-IO-Socket-IP, perl-experimental
  - Disable BR perl(local::lib) for cpan tool when bootstraping


author: Petr Pisar <ppisar@redhat.com> - 4:5.20.0-307
changelog:
  - Specify all dependencies for perl-CPAN (bug #1090112)
  - Disable non-core modules at perl-CPAN when bootstrapping
  - Remove bundled perl-CPAN (bug #1090112)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.20.1-308
changelog:
  - 5.20.1 bump (see <http://search.cpan.org/dist/perl-5.20.1/pod/perldelta.pod>
    for release notes)
  - Sub-package perl-ExtUtils-Miniperl (bug #1141222)


author: Petr Pisar <ppisar@redhat.com> - 4:5.20.1-310
changelog:
  - Move all Module-CoreList files into perl-Module-CoreList
  - Sub-package corelist(1) into perl-Module-CoreList-tools (bug #1142757)
  - Remove bundled perl-Module-CoreList, and perl-Module-CoreList-tools
    (bug #1142757)
  - Sub-package Devel-PPPort (bug #1143999)
  - Sub-package B-Debug (bug #1142952)
  - Use native version for perl-ExtUtils-CBuilder
  - Specify all dependencies for perl-ExtUtils-Install (bug #1144068)
  - Require perl-ExtUtils-ParseXS by perl-ExtUtils-MakeMaker because of xsubpp


author: Petr Pisar <ppisar@redhat.com> - 4:5.20.1-311
changelog:
  - Remove bundled perl-Devel-PPPort (bug #1143999)
  - Remove bundled perl-B-Debug (bug #1142952)
  - Remove bundled perl-ExtUtils-CBuilder (bug #1144033)
  - Remove bundled perl-ExtUtils-Install (bug #1144068)


author: Petr Pisar <ppisar@redhat.com> - 4:5.20.1-312
changelog:
  - Do not double-own perl-Pod-Usage' and perl-Pod-Checker' files by
    perl-Pod-Parser on bootstrap
  - Sub-package ExtUtils-Command (bug #1158536)
  - Sub-package Filter-Simple (bug #1158542)
  - Build-require groff-base instead of big groff


author: Petr Pisar <ppisar@redhat.com> - 4:5.20.1-313
changelog:
  - Freeze epoch at perl-Pod-Checker and perl-Pod-Usage (bug #1163490)
  - Remove bundled perl-ExtUtils-Command (bug #1158536)
  - Remove bundled perl-Filter-Simple (bug #1158542)


author: Petr Pisar <ppisar@redhat.com> - 4:5.20.1-314
changelog:
  - Consider Filter::Util::Call dependency as mandatory (bug #1165183)
  - Sub-package encoding module
  - Own upper directories by each package that installs a file there and
    remove empty directories (bug #1165013)


author: Petr Pisar <ppisar@redhat.com> - 4:5.20.1-315
changelog:
  - Report inaccesible file on failed require (bug #1166504)
  - Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1128032)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.20.2-320
changelog:
  - 5.20.2 bump (see <http://search.cpan.org/dist/perl-5.20.2/pod/perldelta.pod>
    for release notes)
  - Regenerate a2p.c (BZ#1177672)


author: Petr Šabata <contyk@redhat.com> - 4:5.20.2-326
changelog:
  - Correct license tags of the main package, CGI, Compress-Raw-Zlib,
    Digest-MD5, Test-Simple and Time-Piece
  - Package a Pod-Html license clarification email


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.20.2-328
changelog:
  - Sub-package perl-CGI-Fast and perl-Module-Build-Deprecated
  - Add missing dual-life modules to perl-core


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.22.0-241
changelog:
  - 5.22.0 bump (see <http://search.cpan.org/dist/perl-5.22.0/pod/perldelta.pod>
    for release notes)
  - Update sub-packages and erase the removed modules from the core
  - Clean patches, not needed with new version
  - Update patches to work with new version


author: Petr Pisar <ppisar@redhat.com> - 4:5.22.0-346
changelog:
  - Subpackage "open" module in order to keep deprecated "encoding" module
    optional (bug #1228378)
  - Control building dual-lived sub-packages by perl_bootstrap macro
  - Make PadlistNAMES() lvalue again (bug #1231165)
  - Make magic vtable writable as a work-around for Coro (bug #1231165)
  - Explain file break-down into RPM packages in perl package description


author: Petr Pisar <ppisar@redhat.com> - 4:5.22.0-347
changelog:
  - Store distribution's linker and compiler flags to more Config's options
    in order to apply them when linking executable programs (bug #1238804)
  - Sub-package Config-Perl-V (bug #1238203)
  - Sub-package MIME-Base64 (bug #1238222)
  - Sub-package PerlIO-via-QuotedPrint (bug #1238229)
  - Update Pod-Escapes metadata (bug #1238237)
  - Sub-package Term-Cap (bug #1238248)
  - Sub-package Text-Balanced (bug #1238269)
  - Sub-package libnet (bug #1238689)
  - Sub-package perlfaq (bug #1238703)
  - Sub-package Unicode-Normalize (bug #1238730)
  - Sub-package Unicode-Collate (bug #1238760)
  - Sub-package Math-BigInt
  - Do not provide Net/libnet.cfg (bug #1238689)
  - Revert downstream change in Net::Config default configuration
  - Move libnetcfg tool from perl-devel into perl-libnetcfg sub-package


author: Petr Pisar <ppisar@redhat.com> - 4:5.22.0-348
changelog:
  - Sub-package bignum
  - Sub-package Math-BigRat
  - Sub-package Math-BigInt-FastCalc
  - Sub-package Math-Complex
  - Remove bundled perl-Config-Perl-V (bug #1238203)
  - Remove bundled perl-MIME-Base64 (bug #1238222)
  - Remove bundled perl-PerlIO-via-QuotedPrint (bug #1238229)
  - Remove bundled perl-Pod-Escapes (bug #1238237)
  - Remove bundled perl-Term-Cap (bug #1238248)
  - Remove bundled perl-Text-Balanced (bug #1238269)
  - Remove bundled perl-libnet (bug #1238689)
  - Remove bundled perl-perlfaq (bug #1238703)
  - Remove bundled perl-Unicode-Normalize (bug #1238730)
  - Remove bundled perl-Unicode-Collate (bug #1238760)


author: Petr Pisar <ppisar@redhat.com> - 4:5.22.0-351
changelog:
  - Sub-package Attribute-Handlers
  - Sub-package Devel-Peek
  - Sub-package Devel-SelfStubber
  - Sub-package SelfLoader
  - Sub-package IO
  - Sub-package Errno
  - Correct perl-Digest-SHA dependencies
  - Correct perl-Pod-Perldoc dependencies
  - Move utf8 and dependencies to perl-libs
  - Correct perl-devel and perl-CPAN dependencies
  - Sub-package IPC-SysV
  - Sub-package Test
  - Sub-package utilities (splain) into perl-utils
  - Provide perl version in perl(:VERSION) dependency symbol


author: Petr Pisar <ppisar@redhat.com> - 4:5.22.1-360
changelog:
  - Weak perl-Encode-devel dependency on perl-devel to Recommends level
    (bug #1129443)
  - Remove perl-ExtUtils-ParseXS dependency on perl-devel (bug #1129443)
  - Require perl-devel by perl-ExtUtils-MakeMaker
  - Provide MM::maybe_command independently (bug #1129443)
  - Replace ExtUtils::MakeMaker dependency with ExtUtils::MM::Utils in IPC::Cmd
    (bug #1129443)
  - Remove perl-ExtUtils-Install dependency on perl-devel (bug #1129443)
  - Remove perl-ExtUtils-Manifest dependency on perl-devel (bug #1129443)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.24.0-362
changelog:
  - 5.24.0 bump (see <http://search.cpan.org/dist/perl-5.24.0/pod/perldelta.pod>
    for release notes)
  - Update sub-packages; Update or remove patches


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-364
changelog:
  - Remove reflexive dependencies
  - Use pregenerated dependencies on bootstrapping
  - Specify more build-time dependencies


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-368
changelog:
  - Do not use unitialized memory in $h{\const} warnings (RT#128189)
  - Fix precedence in hv_ename_delete (RT#128086)
  - Do not treat %: as a stash (RT#128238)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-378
changelog:
  - perl-core depends on Parse::CPAN::Meta module instead of package name to allow
    upgrading perl-CPAN-Meta to 2.150010 (bug #1370681)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-379
changelog:
  - Fix crash in "evalbytes S" (RT#129196)
  - Fix crash in splice (RT#129164, RT#129166, RT#129167)
  - Fix string overrun in Perl_gv_fetchmethod_pvn_flags (RT#129267)
  - Fix crash when matching UTF-8 string with non-UTF-8 substrings (RT#129350)
  - Fix parsing perl options in shell bang line (RT#129336)
  - Fix firstchar bitmap under UTF-8 with prefix optimization (RT#129950)
  - Avoid infinite loop in h2xs tool if enum and type have the same name
    (RT130001)
  - Fix stack handling when calling chdir without an argument (RT#129130)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-381
changelog:
  - Fix crash in Storable when deserializing malformed code reference
    (RT#68348, RT#130098)
  - Fix crash on explicit return from regular expression substitution (RT#130188)
  - Tighten dependencies between architecture specific sub-packages to ISA
  - Fix assigning split() return values to an array
  - Fix const correctness in hv_func.h (bug #1242980)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-382
changelog:
  - Fix a crash in optimized evaluation of "or ((0) x 0))" (RT#130247)
  - Fix a memory leak in IO::Poll (RT#129788)
  - Fix regular expression matching (RT#130307)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.0-383
changelog:
  - Remove bundled Math-BigInt-FastCalc (bug #1408463)
  - Remove bundled Math-BigRat (bug #1408467)
  - Remove bundled bignum (bug #1409585)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.1-386
changelog:
  - Fix a buffer overflow in split in scalar context (RT#130262)
  - Fix a heap overflow with pack "W" (RT129149)
  - Fix a use-after-free when processing scalar variables in forms (RT#129125)
  - Fix a heap overflow if invalid octal or hexadecimal number is used in
    transliteration expression (RT#129342)
  - Fix out-of-bound read in case of unmatched regexp backreference (RT#129377)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.1-387
changelog:
  - Fix UTF-8 string handling in & operator (RT#129287)
  - Fix recreation of *:: (RT#129869)
  - Fix a memory leak in B::RHE->HASH method (RT#130504)
  - Fix parsing goto statements in multicalled subroutine (RT#113938)
  - Fix a heap overlow in parsing $# (RT#129274)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.1-388
changelog:
  - Adapt tests to zlib-1.2.11 (bug #1420326)
  - Fix a crash when compiling a regexp with impossible quantifiers (RT#130561)
  - Fix a buffer overrun with format and "use bytes" (RT#130703)
  - Fix a buffer overflow when studying some regexps repeatedly
    (RT#129281, RT#129061)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.1-389
changelog:
  - Adapt Compress::Raw::Zlib to zlib-1.2.11 (bug #1420326)
  - Fix a heap buffer overflow when evaluating regexps with embedded code blocks
    from more than one source (RT#129881)
  - Fix a memory leak in list assignment from or to magic values (RT#130766)


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.1-390
changelog:
  - Fix a null-pointer dereference on malformed code (RT#130815)
  - Fix an use-after-free in substr() that modifies a magic variable (RT#129340)
  - Fix a memory leak leak in Perl_reg_named_buff_fetch() (RT#130822)
  - Fix an invalid memory read when parsing a loop variable (RT#130814)
  - Fix a heap-use-after-free in four-arguments substr call (RT#130624)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.26.0-392
changelog:
  - 5.26.0 bump (see <http://search.cpan.org/dist/perl-5.26.0/pod/perldelta.pod>
    for release notes)
  - Update sub-packages
  - Update or remove patches
  - Enable hardening (bug #1238804)
  - Use 64 bit ints on 32 bit platforms (bug #1268828)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-394
changelog:
  - Make File::Glob more resistant against degenerative matching (RT#131211)
  - Fix a crash when calling a subroutine from a stash (RT#131085)
  - Fix an improper cast of a negative integer to an unsigned 8-bit type (RT#131190)
  - Fix cloning :via handles on thread creation (RT#131221)
  - Fix glob UTF-8 flag on a glob reassignment (RT#131263)
  - Fix a buffer overflow in my_atof2() (RT#131526)
  - Fix handling backslashes in PATH environment variable when executing
    "perl -S" (RT#129183)
  - Fix a conditional jump on uninitilized memory in re_intuit_start() (RT#131575)
  - Fix spurious "Assuming NOT a POSIX class" warning (RT#131522)
  - Provide perl-interpreter RPM dependency symbol
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-395
changelog:
  - perl package installs all core modules, interpreter moved to
    perl-interpreter package, perl-core package is obsolete
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>
    (bug #1464903)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-398
changelog:
  - Fix reporting malformed UTF-8 character (RT#131646)
  - Fix File::Glob rt131211.t test random failures
  - Fix t/op/hash.t test random failures
  - Parse caret variables with subscripts as normal variables inside ${...}
    escaping (RT#131664)
  - Do not display too many bytes when reporting malformed UTF-8 character
  - Fix select called with a repeated magical variable (RT#131645)
  - Fix error message for "our sub foo::bar" (RT#131679)
  - Fix executing arybase::_tie_it() in Safe compartement (RT#131588)
  - Fix handling attribute specification on our variables (RT#131597)
  - Fix splitting non-ASCII strings if unicode_strings feature is enabled (RT#130907)
  - Fix compiler warnings in code generated by ExtUtils::Constant
    (CPAN RT#63832, CPAN RT#101487)
  - Fix GCC version detection for -D_FORTIFY_SOURCE override (RT#131809)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.0-399
changelog:
  - Fix unreliable Time-HiRes tests (CPAN RT#122819)
  - Do not require $Config{libs} providers by perl-devel package (bug #1481324)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.1-402
changelog:
  - Remove invalid macro definitions from macros.perl (bug #1532539)
  - Fix an overflow in the lexer when reading a new line (RT#131793)
  - Fix Term::ReadLine not to create spurious &STDERR files (RT#132008)
  - Fix a crash when a match for inversely repeated group fails (RT#132017)
  - Fix an overflow when parsing a character range with no preceding character
    (RT#132245)
  - Fix walking symbol table for ISA in Carp
  - Fix handling file names with null bytes in stat and lstat functions
    (RT#131895)
  - Fix a crash when untying an object witout a stash
  - Fix deparsing of transliterations with unprintable characters (RT#132405)
  - Fix error reporting on do() on a directory (RT#125774)
  - Fix stack manipulation when a lexical subroutine is defined in a do block in
    a member of an iteration list (RT#132442)
  - Fix setting $! when statting a closed file handle (RT#108288)
  - Fix tainting of s/// with overloaded replacement (RT#115266)
  - Expand system() arguments before a fork (RT#121105)
  - Avoid undefined behavior when copying memory in Glob and pp_caller (RT#131746)


author: Björn Esser <besser82@fedoraproject.org> - 4:5.26.1-404
changelog:
  - Add patch to conditionalize a fix for an old and long fixed bug
    in libcrypt / glibc (rhbz#1536752)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.1-407
changelog:
  - Fix parsing braced subscript after parentheses (RT#8045)
  - Fix a heap use after free when moving a stack (RT#131954)
  - Call ldconfig scriptlets using a macro


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.2-410.RC1
changelog:
  - 5.26.2-RC1 bump
  - Fix CVE-2018-6913 (heap buffer overflow in pp_pack.c) (bug #1567776)
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1567777)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1567778)


author: Petr Pisar <ppisar@redhat.com> - 4:5.26.2-412
changelog:
  - perl-devel requires redhat-rpm-config because of hardened compiler profiles
    (bug #1557667)
  - Do not clobber file bytes in :encoding layer (RT#132833)
  - Fix line numbers in multi-line s/// (RT#131930)
  - Fix parsing extended bracketed character classes (RT#132167)
  - Fix a possibly unitialized memory read in the Perl parser (RT#133074)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.28.0-415
changelog:
  - 5.28.0 bump (see <https://metacpan.org/pod/release/XSAWYERX/perl-5.28.0/pod/perldelta.pod>
    for release notes)


author: Petr Pisar <ppisar@redhat.com> - 4:5.28.0-417
changelog:
  - Adjust tests to gdbm-1.15 (RT#133295)
  - Fix an integer wrap when allocating memory for an environment variable
    (RT#133204)
  - Fix printing a warning about a wide character when matching a regular
    expression while ISO-8859-1 locale is in effect
  - Fix invoking a check for wide characters while ISO-8859-1 locale is in effect


author: Petr Pisar <ppisar@redhat.com> - 4:5.28.0-419
changelog:
  - Fix index() and rindex() optimization in given-when boolean context
    (RT#133368)
  - Fix build conditions in locale.c


author: Petr Pisar <ppisar@redhat.com> - 4:5.28.0-421
changelog:
  - Fix a buffer overrun in deprecated S_is_utf8_common()
  - Fix a buffer overrun in deprecated utf8_to_uvchr()
  - Fix a time race in Time-HiRes/t/itimer.t test
  - Fix matching an ASCII digit followed by a non-ASCII digit using a script run
  - Fix Time::Piece to handle objects in overloaded methods correctly
  - Fix an assignment to a lexical variable in multiconcatenation expressions
    (RT#133441)
  - Fix a spurious warning about uninitialized value in warn (RT#132683)
  - Require Devel::PPPort by perl-devel for h2xs script


author: Petr Pisar <ppisar@redhat.com> - 4:5.28.1-427
changelog:
  - Fix script run matching to allow ASCII digits in scripts that use their own in
    addition (RT#133547)
  - Fix PathTools tests to cope with ESTALE error (RT#133534)
  - Fix an undefined behaviour in S_hv_delete_common()
  - Fix in-place edit to replace files on a successful perl exit status
    (bug #1650041)
  - Fix compiling regular expressions that contain both compile- and run-time
    compiled code blocks (RT#133687)


author: Petr Pisar <ppisar@redhat.com> - 4:5.28.1-430
changelog:
  - Adjust tests to gdbm-1.15 using an upstream fix (RT#133295)
  - Do not close an IPC pipe that already has a desired descriptor (RT#133726)
  - Fix reporting a line number for non-terminated prototypes (RT#133524)
  - Fix first eof() return value (RT#133721)
  - Fix a crash when compiling a malformed form (RT#132158)
  - Fix an undefined C behavior in NULL pointer arithmetics (RT#133223)
  - Prevent long jumps from clobbering local variables (RT#133575)
  - Fix a mismatch with a case-insesitive regular expression on a text with ligatures
    (RT#133756)
  - Fix the interpreter path if procfs is not mounted (RT#133573)


author: Petr Pisar <ppisar@redhat.com> - 4:5.28.1-431
changelog:
  - Remove a fix for an undefined C behavior in NULL pointer arithmetics
    (RT#133223) because it changes perl ABI


author: Petr Pisar <ppisar@redhat.com> - 4:5.28.1-433
changelog:
  - Fix a crash when parsing #line directives with large numbers in eval
    (RT#131562)
  - Fix setting magic when changing $^R (RT#133782)
  - Fix a race when loading XS modules
  - Fix extending a stack in Perl parser (RT#133778)


author: Petr Pisar <ppisar@redhat.com> - 4:5.28.1-435
changelog:
  - Fix a leak when compiling a typed hash dereference
  - Fix a buffer overread when handling a scope error in qr/\(?{/ (RT#133879)
  - Fix a buffer overread when parsing a regular expression with an unknown
    character name (RT#133880)
  - Fix mbstate_t initialization in POSIX::mblen (RT#133928)
  - Fix a memory leak when cloning a regular expression
  - Fix a memory leak when spawning threads in a BEGIN phase
  - Fix a memory leak when assigning a regular expression to a non-copy-on-write string
  - Fix a memory leak when assignig to a localized ${^WARNING_BITS}
  - Fix a memory leak when parsing misindented here-documents
  - Fix a memory leak in package name lookup (RT#133977)
  - Fix a memory leak when deletion in a tied hash dies
  - Fix a crash when matching case insensitively (RT#133892)
  - Fix a memory leak when warning about malformed UTF-8 string


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.28.2-436
changelog:
  - 5.28.2 bump (see <https://metacpan.org/pod/release/SHAY/perl-5.28.2/pod/perldelta.pod>
    for release notes)


author: Jitka Plesnikova <jplesnik@redhat.com>, Petr Pisar <ppisar@redhat.com> - 4:5.30.0-437
changelog:
  - 5.30.0 bump (see <https://metacpan.org/pod/release/XSAWYERX/perl-5.30.0/pod/perldelta.pod>
    for release notes)
  - Make site paths specific to Perl minor version (e.g.
    /usr/local/share/perl5/5.30) to prevent from an ABI clash after upgrade
    to an ABI-incompatible Perl


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.30.0-439
changelog:
  - Define %perl_vendor*, %perl_archlib, %perl_privlib, because in rpm
    4.15 those are no longer defined


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-440
changelog:
  - Fix an out-of-buffer read while parsing a Unicode property name (RT#134134)
  - Do not panic when outputting a warning (RT#134059)
  - Fix memory handling when parsing string literals
  - Fix an undefined behavior in shifting IV variables
  - Fix stacking file test operators (CPAN RT#127073)
  - Fix a crash in SIGALARM handler when waiting on a child process to be closed
    (RT#122112)
  - Fix a crash with a negative precision in sprintf function (RT#134008)
  - Fix an erroneous assertion on OP_SCALAR (RT#134048)
  - Prevent from wrapping a width in a numeric format string (RT#133913)
  - Fix subroutine protypes to track reference aliases (RT#134072)
  - Improve retrieving a scalar value of a variable modified in a signal handler
    (RT#134035)
  - Fix changing packet destination sent from a UDP IO::Socket object (RT#133936)
  - Fix a stack underflow in readline() if passed an empty array as an argument
    (#RT133989)
  - Fix setting supplementar group IDs (RT#134169)
  - Fix %{^CAPTURE_ALL} to be an alias for %- variable (RT#131867)
  - Fix %{^CAPTURE} value when used after @{^CAPTURE} (RT#134193)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-441
changelog:
  - Fix a test for a crash in SIGALARM handler when waiting on a child process to
    be closed (RT#122112)
  - Fix a crash on an uninitialized warning when processing a multideref node
    (RT#134275)
  - Preserve append mode when opening anonymous files (RT#134221)
  - Run Turkish locale tests


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-443
changelog:
  - Fix propagating non-string variables in an exception value (RT#134291)
  - Include trailing zero in scalars holding trie data (RT#134207)
  - Fix a use after free in /(?{...})/ (RT#134208)
  - Fix a use after free in debugging output of a collation
  - Fix file mode of a perl-example.stp example


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-444
changelog:
  - Fix a NULL pointer dereference in PerlIOVia_pushed()
  - Fix a crash when setting $@ on unwinding a call stack (RT#134266)
  - Fix parsing a denominator when parsing a Unicode property name
  - Fix a documentation about a future API change
  - Do not run File-Find tests in parallel


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-445
changelog:
  - Adjust spec file to rpm-build-4.15.0-0.rc1.1
  - Fix parsing a Unicode property name when compiling a regular expression
  - Fix a buffer overread when parsing a Unicode property while compiling
    a regular expression (RT#134133)
  - Do not interpret 0x and 0b prefixes when numifying strings (RT#134230)
  - Fix a buffer overread when compiling a regular expression with many escapes
    (RT#134325)
  - Fix a buffer overflow when compiling a regular expression with many branches
    (RT#134329)
  - Correct a misspelling in perlrebackslash documentation (RT#134395)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.0-446
changelog:
  - Fix a memory leak when matching a UTF-8 regular expression (RT#134390)
  - Fix a detection for futimes (RT#134432)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.30.1-447
changelog:
  - 5.30.1 bump (see <https://metacpan.org/pod/release/SHAY/perl-5.30.1/pod/perldelta.pod>
    for release notes)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.1-448
changelog:
  - Fix overloading for binary and octal floats (RT#125557)
  - Fix handling undefined array members in Dumpvalue (RT#134441)
  - Fix taint mode documentation regarding @INC
  - Fix handling a layer argument in Tie::StdHandle::BINMODE() (RT#132475)
  - Fix an unintended upgrade to UTF-8 in the middle of a transliteration
  - Fix a race in File::stat() tests (GH#17234)
  - Fix a buffer overread when parsing a number (GH#17279)
  - Fix GCC 10 version detection (GH#17295)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.1-451
changelog:
  - Subpackage AutoLoader and AutoSplit
  - Subpackage ExtUtils-Constant
  - Subpackage NEXT
  - Subpackage Tie-RefHash
  - Subpackage autouse
  - Subpackage base and fields
  - Subpackage Dumpvalue
  - Subpackage encoding-warnings
  - Subpackage if
  - Subpackage I18N-Collate
  - Subpackage I18N-LangTags
  - Subpackage lib
  - Subpackage Safe
  - Subpackage Search-Dict
  - Subpackage Term-Complete
  - Subpackage Term-ReadLine
  - Subpackage Text-Abbrev
  - Subpackage Thread-Semaphore
  - Subpackage Tie-File
  - Move attributes module into perl-libs
  - Subpackage GDBM_File
  - Subpackage NDBM_File
  - Subpackage ODBM_File
  - Move File::Glob module into perl-libs
  - Subpackage File-DosGlob
  - Subpackage File-Find
  - Subpackage IPC-Open3
  - Subpackage B
  - Subpackage Fcntl
  - Subpackage FileCache
  - Subpackage Hash-Util
  - Subpackage Hash-Util-FieldHash
  - Subpackage I18N-Langinfo
  - Subpackage mro
  - Subpackage Opcode
  - Move PerlIO to perl-libs
  - Subpackage POSIX
  - Subpackage Sys-Hostname
  - Move Tie::Hash::NamedCapture to perl-libs
  - Subpackage Tie-Memoize
  - Subpackage Benchmark
  - Subpackage blib
  - Move charnames to perl-libs
  - Subpackage File-stat
  - Subpackage Class-Struct
  - Subpackage Net::*ent modules into perl-Net
  - Subpackage User::* modules into perl-User-pwent
  - Subpackage Time
  - Subpackage base Tie::* modules into perl-Tie
  - Move Config to perl-libs
  - Move warnings::register to perl-libs
  - Subpackage DBM_Filter modules
  - Subpackage FileHandle
  - Subpackage Thread
  - Subpackage Unicode::UCD
  - Subpackage diagnostics and move splain tool from perl-utils there
  - Subpackage FindBin
  - Subpackage File::Basename
  - Subpackage File::Compare
  - Subpackage File::Copy
  - Subpackage overload
  - Subpackage overloading
  - Subpackage Config::Extensions
  - Subpackage English
  - Subpackage Getopt::Std
  - Subpackage locale
  - Subpackage deprecate
  - Move AnyDBM_File, SDBM_File, Tie::Hash to perl-libs because of dbmopen function
  - Subpackage DirHandle
  - Subpackage Symbol
  - Subpackage SelectSaver
  - Move UNIVERSAL to perl-libs
  - Subpackage DynaLoader
  - Subpackage filetest
  - Subpackage less
  - Subpackage meta_notation
  - Subpackage sigtrap
  - Subpackage sort
  - Subpackage subs
  - Subpackage vars
  - Subpackage vmsish
  - Subpackage Pod-Functions
  - Move feature to perl-libs
  - Move debugger files into perl-debugger
  - Move perlxs* POD to perl-ExtUtils-ParseXS
  - Move ExtUtils/typemap to perl-devel
  - Remove ExtUtils::XSSymSet manual without the code (GH#17424)
  - Reduce and move remaining ph files to perl-ph
  - Move most of the generic POD files to perl-doc


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.30.2-452
changelog:
  - 5.30.2 bump (see <https://metacpan.org/pod/release/SHAY/perl-5.30.2/pod/perldelta.pod>
    for release notes)


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.2-453
changelog:
  - Make perl-macros package noarch
  - Fix a directory ownership in perl-Sys-Hostname
  - Work around a glibc bug in caching LC_MESSAGES (GH#17081)
  - Fix POSIX:setlocale() documentation
  - Prevent from an integer overflow in POSIX::SigSet()
  - Fix thread-safety of IO::Handle (GH#14816)
  - Close :unix PerlIO layers properly (bug #987118)
  - Fix sorting tied arrays (GH#17496)
  - Fix a spurious warning about a multidimensional syntax (GH#16535)
  - Normalize "#!/perl" shebangs in the tests
  - Fix a warning about an uninitialized value in B::Deparse (GH#17537)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.30.3-454
changelog:
  - 5.30.3 bump (see <https://metacpan.org/pod/release/XSAWYERX/perl-5.30.3/pod/perldelta.pod>
    for release notes)
  - Security release fixes CVE-2020-10543, CVE-2020-10878 and CVE-2020-12723


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.32.0-455
changelog:
  - 5.32.0 bump (see <https://metacpan.org/pod/release/XSAWYERX/perl-5.32.0/pod/perldelta.pod>
    or release notes)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.0-459
changelog:
  - Do not use C compiler reserved identifiers
  - Fix SvUV_nomg() macro definition
  - Fix SvTRUE() documentation
  - Fix ext/XS-APItest/t/utf8_warn_base.pl tests
  - Fix IO::Handle::error() to report write errors (GH#6799)
  - Fix a link to Unicode Technical Standard #18 (GH#17881)
  - Fix setting a non-blocking mode in IO::Socket::UNIX (GH#17787)
  - Fix running actions after stepping in a debugger (GH#17901)
  - Fix a buffer size for asctime_r() and ctime_r() functions
  - Prevent from an integer overflow in RenewDouble() macro
  - Fix a buffer overread in when reallocating formats (GH#17844)
  - Fix a number of arguments passed to a BOOT XS subroutine (GH#17755)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.0-462
changelog:
  - Fix inheritance resolution of lexial objects in a debugger (GH#17661)
  - Fix a misoptimization when assignig a list in a list context (GH#17816)
  - Fix handling left-hand-side undef when assigning a list (GH#16685)
  - Fix a memory leak when compiling a long regular expression (GH#18054)
  - Fix handling exceptions in a global destruction (GH#18063)
  - Fix sorting with a block that calls return (GH#18081)


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - Reduce compiler warnings and stderr noise (CPAN RT#101340)
    - consting misc tables (CPAN RT#101296)


author: Paul Howarth <paul@city-fan.org> - 2.070-1
changelog:
  - Update to 2.070
    - Fix wrong APPEND_OUTPUT logic (CPAN RT#119005, CPAN RT#119141)
    - Fix some gcc warnings (CPAN RT#100817, CPAN RT#105647)
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - Reduce compiler warnings and stderr noise (CPAN RT#101341)
    - amigaos4: cpan/Compress-Raw-Zlib: also __amigaos4__ (CPAN RT#106799)
    - const all global data (CPAN RT#101298)
    - Coverity finding: Unused value (CPAN RT#105414)
    - Coverity findings (CPAN RT#102399)
    - Coverity finding: Overlapping buffer in memory copy (CPAN RT#105413)


author: Paul Howarth <paul@city-fan.org> - 2.070-1
changelog:
  - Update to 2.070
    - Fix compilation warning from inflate.c (CPAN RT#107642)
    - Fix wrong FLAG_APPEND logic, analog to Bzip2 (CPAN RT#119007)
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2.071-1
changelog:
  - Update to 2.071
    - One (last?) compilation warning in bundled inflate.c (CPAN RT#119580,
      https://github.com/madler/zlib/issues/111)


author: Paul Howarth <paul@city-fan.org> - 2.033-1
changelog:
  - Update to 2.033 (fixed typos and spelling errors - Perl RT#81782)
  - Drop redundant Obsoletes and Epoch tags
  - Simplify provides filter


author: Paul Howarth <paul@city-fan.org> - 2.040-1
changelog:
  - Update to 2.040
    - Croak if attempt to freeze/thaw compression object (CPAN RT#69985)
  - BR: perl(Carp)


author: Paul Howarth <paul@city-fan.org> - 2.048-1
changelog:
  - Update to 2.048
    - Allow flush to be called multiple times without any intermediate call to
      deflate and still return Z_OK
    - Added support for zlibCompileFlags
    - Set minimum Perl version to 5.6
    - Set minimum zlib version to 1.2.0
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 2.052-1
changelog:
  - Update to 2.052
    - Fix build issue when Perl is built with C++
  - Don't need to remove empty directories from buildroot


author: Paul Howarth <paul@city-fan.org> - 2.055-1
changelog:
  - Update to 2.055
    - Fix misuse of magic in API (CPAN RT#78079)
    - Include zlib 1.2.7 source
  - BR: perl(Exporter) and perl(lib)
  - BR: perl(Test::NoWarnings) except when bootstrapping
  - Drop redundant explicit require for perl(Exporter)
  - Drop BR: perl(bytes), not dual-lived


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - Compress::Raw::Zlib needs to use PERL_NO_GET_CONTEXT (CPAN RT#80319)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79812)
    - Update to ppport.h that includes SvPV_nomg_nolen (CPAN RT#78079)


author: Paul Howarth <paul@city-fan.org> - 2.061-1
changelog:
  - Update to 2.061
    - Include zlib 1.2.8 source
    - Typo fix (CPAN RT#85431)
    - Silence compiler warning by making 2nd parameter to DispStream a const char*


author: Paul Howarth <paul@city-fan.org> - 2.063-1
changelog:
  - Update to 2.063
    - gcc -g3: final link failed: Memory exhausted (CPAN RT#88936)
    - Compress::Raw::Zlib uses AutoLoader for no reason (CPAN RT#88260)
    - Typo in Compress::Zlib _combine function documentation (CPAN RT#89305)


author: Paul Howarth <paul@city-fan.org> - 2.064-1
changelog:
  - Update to 2.064
    - Handle non-PVs better (CPAN RT#91558)
    - Z_OK instead of Z_BUF_ERROR (CPAN RT#92521)


author: Paul Howarth <paul@city-fan.org> - 2.065-1
changelog:
  - Update to 2.065
    - Resolve c++ build failure in core (CPAN RT#92657)
    - gcc -g3: final link failed: Memory exhausted (CPAN RT#88936)


author: Paul Howarth <paul@city-fan.org> - 2.066-1
changelog:
  - Update to 2.066
    - Another COW violation (CPAN RT#98069)
    - Misleading nesting/indentation found by Coverity (CPAN RT#95405)


author: Paul Howarth <paul@city-fan.org> - 2.068-1
changelog:
  - Update to 2.068
    - Silence more compiler warnings
    - Disable running of 07bufsize.t by default; COMPRESS_ZLIB_RUN_MOST needs to
      be set to run it, which makes life more bearable on legacy platforms


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.54-6
changelog:
  - Adjust to sqlite-3.22.0 (bug #1543286)
  - Add new index constraint ops introduced in SQLite 3.21.0 to PerlData


author: Paul Howarth <paul@city-fan.org> - 2:1.44-1
changelog:
  - Update to 1.44
    - Added a stringify() method, which does exactly the same thing as
      stringification overloading does (GH#58)
    - Added an is_last_day_of_month() method to indicate whether or not an object
      falls on the last day of its month (GH#60)


author: Paul Howarth <paul@city-fan.org> - 2:1.46-1
changelog:
  - Update to 1.46
    - Fixed the formatting for the CLDR "S" symbol, which in some cases would
      round up to 1 instead of truncating a value, e.g. the "SSS" symbol would
      format 999,999,999 nanoseconds as "1.000" (GH#71)


author: Paul Howarth <paul@city-fan.org> - 2:1.47-1
changelog:
  - Update to 1.47
    - DateTime::Duration->multiply now only allows integer multipliers (GH#73)
    - Added is_last_day_of_quarter() and is_last_day_of_year() methods (GH#72)
    - When an exception was thrown while adding a duration, the object could be
      left in a broken state with the duration partially applied; subsequent
      addition or subtraction would produce the wrong results (GH#74)
  - Add patch to support use without Sub::Util (GH#77, GH#78)


author: Paul Howarth <paul@city-fan.org> - 2:1.48-1
changelog:
  - Update to 1.48
    - The last release would die if Sub::Util was not available, but this should
      just be an optional requirement (GH#77, GH#78)


author: Paul Howarth <paul@city-fan.org> - 2:1.49-1
changelog:
  - Update to 1.49
    - Updated the ppport.h with the latest version of Devel::PPPort, which fixes
      a compilation warning when compiling with 5.27.11 (GH#81)
  - Switch upstream from search.cpan.org to metacpan.org


author: Paul Howarth <paul@city-fan.org> - 2:1.50-1
changelog:
  - Update to 1.50
    - The %F strftime pattern incorrectly zero-padded numbers less than four
      digits; according to POSIX::strftime, this should output the year as-is
      without padding (GH#83)


author: Paul Howarth <paul@city-fan.org> - 0.05-10
changelog:
  - Classify buildreqs by usage
  - Simplify find commands using -empty and -delete
  - Make %files list more explicit


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.3-396
changelog:
  - Fix handling attribute specification on our variables (RT#131597)
  - Remove invalid macro definitions from macros.perl (bug #1532539)
  - Fix a crash when a match for inversely repeated group fails (RT#132017)
  - Fix an overflow when parsing a character range with no preceding character
    (RT#132245)
  - Fix walking symbol table for ISA in Carp
  - Fix handling file names with null bytes in stat and lstat functions
    (RT#131895)
  - Fix a crash when untying an object witout a stash
  - Fix deparsing of transliterations with unprintable characters (RT#132405)
  - Fix error reporting on do() on a directory (RT#125774)
  - Fix stack manipulation when a lexical subroutine is defined in a do block in
    a member of an iteration list (RT#132442)
  - Fix setting $! when statting a closed filehandle (RT#108288)
  - Fix tainting of s/// with overloaded replacement (RT#115266)
  - Expand system() arguments before a fork (RT#121105)
  - Avoid undefined behavior when copying memory in Glob and pp_caller (RT#131746)
  - Add patch to conditionalize a fix for an old and long fixed bug
    in libcrypt / glibc (rhbz#1536752)
  - Link XS modules to pthread library to fix linking with -z defs
  - Correct shell bangs in tests
  - Fix parsing braced subscript after parentheses (RT#8045)
  - Call ldconfig scriptlets using a macro


author: Petr Pisar <ppisar@redhat.com> - 4:5.24.4-397
changelog:
  - 5.24.4 bump
  - Fix CVE-2018-6913 (heap buffer overflow in pp_pack.c) (bug #1567776)
  - Fix CVE-2018-6798 (heap read overflow in regexec.c) (bug #1567777)
  - Fix CVE-2018-6797 (heap write overflow in regcomp.c) (bug #1567778)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.24.4-401
changelog:
  - Resolves: #1656293
    - Fix CVE-2018-18311 Integer overflow leading to buffer overflow
    - Fix CVE-2018-18312 Heap-buffer-overflow write in regcomp.c
    - Fix CVE-2018-18313 Heap-buffer-overflow read in regcomp.c
    - Fix CVE-2018-18314 Heap-buffer-overflow write in regcomp.c


author: Petr Pisar <ppisar@redhat.com> - 4:5.30.1-451
changelog:
  - Fix CVE-2020-10543 (an integer overflow from nested regex quantifiers)
    (bug #1837975)
  - Fix CVE-2020-10878 (a corruption of a state of a compiled regular expression
    due to an integer overflow) (bug #1837988)
  - Fix CVE-2020-12723 (a corruption of a state of a compiled regular expression
    due to recursive calls) (bug #1838000)


author: Paul Howarth <paul@city-fan.org> - 0.21-5
changelog:
  - Fix FTBFS due to missing buildreq perl-devel
  - Simplify find command using -empty and -delete
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Make %files list more explicit


author: Petr Pisar <ppisar@redhat.com> - 4:2.86-3
changelog:
  - Fix Encode::encode_utf8(undef) to return undef (CPAN RT#116904)
  - Refuse non-shortests UTF-8 representations in strict mode
  - Fix panic when encoding undefined scalars


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:3.08-461
changelog:
  - Fix memory leak in function encode_method()
  - "Fix a memory leak on FB_CROAK" was reverted in Encode 3.15


author: Tom Stellard <tstellar@redhat.com> - 2:1.59-442
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 0.421-1
changelog:
  - Update to 0.421
    - Fix a lot of potential memory leaks when callbacks throw exceptions
    - Add some new functions: qsort, binsert, bremove, listcmp, arrayify
      (CPAN RT#17230), samples (CPAN RT#77562), minmaxstr (CPAN RT#106401),
      lower_bound, upper_bound, equal_range, frequencies, occurances, mode
      (CPAN RT#91991), zip6 (CPAN RT#42921), reduce_0, reduce_1, reduce_u
    - Improve tests
    - Make List::MoreUtils::XS independent from List::MoreUtils
      Note that List::MoreUtils::XS doesn't guarantee API stability: this
      feature is only provided through List::MoreUtils as frontend
    - Improve configure toolchain to use Config::AutoConf 0.315
    - Speed up some inner loops by hinting the expected result
    - Fix mind screwed up issue in upper_bound and reduce elements visited in
      equal_range
    - Correct license in META (CPAN RT#122702)
    - Fix issues with -DPERL_IMPLICIT_SYS on Windows with Strawberry-Perl


author: Paul Howarth <paul@city-fan.org> - 0.422-1
changelog:
  - Update to 0.422
    - Rename 'occurances' into 'occurrences' (CPAN RT#91991, CPAN RT#122806)
    - Add DESCRIPTION to Pod clarifying the role of List::MoreUtils::XS
    - Improve Makefile.PL regarding some build artifacts


author: Paul Howarth <paul@city-fan.org> - 0.423-1
changelog:
  - Update to 0.423
    - Fix dealing with lists with one element on bremove/binsert (GH#2)
    - Add support for compilers before C99
    - Fix some 32-bit compiler warnings
    - Add support for compilers without statement expression feature


author: Paul Howarth <paul@city-fan.org> - 0.426-1
changelog:
  - Update to 0.426
    - Fix broken format in part (GH#4)
    - Fix gcc 4.7 sequence point warning (GH#5)
    - Fix incorrect padname resolving for perl > 5.21.6 (CPAN RT#122883)
    - Fix compiling issue on CentOS 4 and CentOS 5


author: Paul Howarth <paul@city-fan.org> - 0.428-1
changelog:
  - Update to 0.428
    - Fix build fails on perl ≥ 5.27.4 with -DDEBUGGING (CPAN RT#123613)
    - Update ppport.h to 3.37 for improved blead support
    - Fix context arg to croak() (CPAN RT#123869)
    - Fix one() returning true on empty list (CPAN RT#123870)
    - Pamper $a/$b/$_ refcounting bugs (CPAN RT#123868)


author: Paul Howarth <paul@city-fan.org> - 1.85-1
changelog:
  - Update to 1.85
    - Preparations for transferring maintenace to a new maintainer
    - Fixed test failure in t/local/33_x509_create_cert.t for some versions of
      OpenSSL
    - Fixed free() error that causes "Free to wrong pool ..." message on Windows


author: Petr Pisar <ppisar@redhat.com> - 1.85-3
changelog:
  - Adapt to OpenSSL 1.1.1 (bug #1610376)
  - Adapt tests to system-wide crypto policy (bug #1610376)
  - Adapt tests to security level 2 system-wide crypt policy (bug #1610376)


author: Petr Pisar <ppisar@redhat.com> - 1.85-5
changelog:
  - Revert retry in Net::SSLeay::{read,write}() (bug #1610376)
  - Revert retry in Net::SSLeay::write_partial() (bug #1610376)


author: Paul Howarth <paul@city-fan.org> - 4.079-1
changelog:
  - Update to 4.079
    - Correct non-suppression of leading zeros in certain instances of new_no use
    - Put in missing code to propagate NetAddr::IP::Lite :nofqdn to IP.pm
  - Explicitly BR: perl-devel, needed for EXTERN.h
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 0.28-10
changelog:
  - Classify buildreqs by usage
  - Use %license where possible
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 2.2-1
changelog:
  - Update to 2.2
    - Convert to PERL_NO_GET_CONTEXT
      https://github.com/robinhouston/PadWalker/pull/2
  - Explicitly BR: perl-devel, needed for EXTERN.h


author: Paul Howarth <paul@city-fan.org> - 2.3-1
changelog:
  - Update to 2.3
    - Make tests work with -Ddefault_inc_excludes_dot (CPAN RT#120421)
  - Simplify find commands using -empty and -delete
  - Drop legacy Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.015-1
changelog:
  - Update to 0.015
    - Port to Perl 5.19.4, where the C type of array indices has changed
    - Update to accommodate PERL_OP_PARENT builds of Perl 5.21.11 or later
      (which is the default from Perl 5.25.1)
    - Trigger custom op generation via Devel::CallChecker rather than by hooking
      the underlying op checker
    - Update test suite not to rely on . in @INC, which is no longer necessarily
      there from Perl 5.25.7
    - No longer include a Makefile.PL in the distribution
    - Correct dynamic_config setting to 0
    - Use boolSV() where appropriate in XS code
    - Use cBOOL() where appropriate
    - Consistently use THX_ prefix on internal function names
    - Include META.json in distribution
    - Add MYMETA.json to .cvsignore
    - Convert .cvsignore to .gitignore
    - Update for changed S_croak_xs_usage() prototype in ExtUtils::ParseXS 3.30,
      requiring the new version of that module in order to build the XS
      implementation
    - In documentation, use four-column indentation for all verbatim material
    - In META.{yml,json}, point to public bug tracker
    - Correctly classify ExtUtils::ParseXS dependency as a recommendation rather
      than a requirement
    - Avoid some compiler warnings
  - Classify buildreqs by usage
  - Drop legacy spec file elements: %defattr and Group: tag
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.007-1
changelog:
  - Update to 0.007
    - Adapt to dot no longer being in @INC
    - Adapt to unicode syswrite being deprecated
  - Drop redundant Group: tag


author: Paul Howarth <paul@city-fan.org> - 0.116-1
changelog:
  - Update to 0.116
    - Changes rephrasing
    - Restore 5.6 compatibility
    - Replace docs with a link to Ref::Util


author: Paul Howarth <paul@city-fan.org> - 0.116-2
changelog:
  - Incorporate package review feedback (#1450440)
    - Drop EL6-isms as we need Test::More 0.94, which EL-6 will never have


author: Paul Howarth <paul@city-fan.org> - 0.117-1
changelog:
  - Update to 0.117
    - Allow the custom OPs to be deparsed with B::Deparse
    - Optimize the shared object size by moving common call checker logic into a
      function


author: Tom Stellard <tstellar@redhat.com> - 3:1.54-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - gailookup.pl.in: Add -P option to ease specification of port number
    - gailookup.pl.in: Add awareness of AI_ALL and AI_V4MAPPED
    - gailookup.pl.in: Add -r option to do reverse lookup
    - System inet_ntop broken in darwin (CPAN RT#113005)
    - Makefile.PL: Make Socket6 buildable on Android (CPAN RT#98181)
  - Simplify find commands using -delete
  - Explicitly BR: perl-devel, needed for EXTERN.h


author: Paul Howarth <paul@city-fan.org> - 0.28-1
changelog:
  - Update to 0.28
    - aclocal.m4 (IPv6_CHECK_INET_NTOP): inet_ntop(3) may return an
      IPv4-compatible IPv6 address (CPAN RT#113950)
  - BR: perl-generators


author: Petr Pisar <ppisar@redhat.com> - 1:2.56-368
changelog:
  - Fix a stack buffer overflow in deserialization of hooks (RT#130635)
  - Fix a memory leak of a class name from retrieve_hook() on an exception
    (RT#130635)


author: Paul Howarth <paul@city-fan.org> - 1.6-1
changelog:
  - Update to 1.6
    - New maintainer: LEEJO
    - Add Changes file
    - Add link to github repo
    - Add strict and warnings
    - Add LICENSE to POD + LICENSE file
    - Add META.* files through make dist
    - Add .travis.yml for CI
  - This release by LEEJO → update source URL
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 0.13-1
changelog:
  - Update to 0.13
    - Reformatted Changes to follow basic format in CPAN::Changes::Spec
    - Make tests pass without . in @INC


author: Paul Howarth <paul@city-fan.org> - 0.18-1
changelog:
  - Update to 0.18
    - Support binary and unicode symbol names (PR#8)
    - Fixed parsing error where the name contains a single colon but the last
      separator is ::


author: Paul Howarth <paul@city-fan.org> - 0.21-1
changelog:
  - Update to 0.21
    - Fix occasional segmentation fault on OpenBSD when malloc randomization
      causes nameptr to be at the beginning of the page (CPAN RT#117072)


author: Daniel P. Berrangé <berrange@redhat.com> - 4.5.0-4
changelog:
  - Fix typed parameter memory handling (rhbz #1602346)
  - Fix missing NWFilterBinding module (rhbz #1615841)


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.06-15
changelog:
  - Add Test-Taint-1.06-Test-taintedness-on-X-instead-of-environment-variabl.patch.
    (Address RHBZ#1413022, F26FTBFS)


author: Paul Howarth <paul@city-fan.org> - 0.61-1
changelog:
  - Update to 0.61
    - Avoid relying on current working directory being in @INC
    - Documentation typo fixes
  - Drop redundant Group: tag
  - Simplify find commands using -empty and -delete


author: Paul Howarth <paul@city-fan.org> - 1.1-23
changelog:
  - Fix FTBFS due to missing buildreq perl-devel
  - Simplify find commands using -empty and -delete
  - Make %files list more explicit


author: Petr Pisar <ppisar@redhat.com> - 1:2.0129-5
changelog:
  - Fix CVE-2017-10672 (use-after-free by controlling the arguments to
    a replaceChild call) (bug #1470205)


author: Petr Pisar <ppisar@redhat.com> - 2.44-11
changelog:
  - Fix a buffer overwrite in parse_stream() with wide characters on the standard
    input (bug #1658512)


author: Paul Howarth <paul@city-fan.org> - 1:0.65-1
changelog:
  - Update to 0.65
    - Prevent warning about unused variables (GH#59)
    - Clarify documentation about exported functions


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:0.67-1
changelog:
  - Update to 0.67
    - Support standard tags !!str, !!map and !!seq instead of dying (GH#67)
    - Support JSON::PP::Boolean and boolean.pm via $YAML::XS::Boolean (GH#66)


author: Paul Howarth <paul@city-fan.org> - 1:0.68-1
changelog:
  - Update to 0.68
    - Fix regex roundtrip (GH#69, GH#70)
    - Fix loading of many regexes (GH#64, GH#71)


author: Paul Howarth <paul@city-fan.org> - 1:0.69-1
changelog:
  - Update to 0.69
    - Security fix: Add $LoadBlessed option to turn on/off loading objects
      (GH#73, GH#74)


author: Paul Howarth <paul@city-fan.org> - 1:0.70-1
changelog:
  - Update to 0.70
    - Fix format specifier/argument mismatch (GH#79)
    - Travis CI: Test on Perl 5.26 (GH#80)
    - Fix a C90-compatibility issue (GH#81)
  - Switch upstream from search.cpan.org to metacpan.org


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30
    - Fix handling carriage return after c-indicator (CPAN RT#41141)
    - Fix CHECK_UTF8 SEGV with empty len=0 strings (CPAN RT#61562)
    - Add missing function declarations
    - Tighten the TODO tests; no passing TODOs now, but still JSON
    - SingleQuote and \/ and \u roundtrips do fail
  - Drop EL-5 support
    - Drop Group: and BuildRoot: tags
    - Drop buildroot cleaning in %install
    - Drop explicit %clean section


author: Petr Pisar <ppisar@redhat.com> - 6:0.99.18-7
changelog:
  - Remove useless build-time dependency on ExtUtils::CBuilder
  - Fix documentation about numify() and stringify() trailing zeros
    (CPAN RT#64635, CPAN RT#122858)


author: Peter Jones <pjones@redhat.com> - 0.112-25
changelog:
  - Preserve .py timestamp during install so .pyc/.pyo files have the same
    timestamp on all arches, preventing rpmdiff from complaining.
    Related: rhbz#1625388


author: Remi Collet <rcollet@redhat.com> - 7.2.7-1
changelog:
  - Update to 7.2.7 - http://www.php.net/releases/7_2_7.php
  - drop -mstackrealign option, workaround to #1593144


author: Remi Collet <rcollet@redhat.com> - 7.4.6-1
changelog:
  - update to 7.4.6
  - add ffi extension
  - add /usr/share/php/preload as default ffi.preload configuration
  - run FPM tests
  - set opcache.enable_cli in provided default configuration
  - ensure all shared extensions can be loaded
  - drop wddx, recode and extensions
  - run test suite using 4 concurrent workers


author: Remi Collet <rcollet@redhat.com> - 7.4.19-2
changelog:
  - fix SSRF bypass in FILTER_VALIDATE_URL
    CVE-2021-21705
  - fix Local privilege escalation via PHP-FPM
    CVE-2021-21703


author: Remi Collet <rcollet@redhat.com> - 7.4.33-1
changelog:
  - rebase to 7.4.33
  - fix: due to an integer overflow PDO::quote() may return unquoted string
    CVE-2022-31631


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Chang Gao <gc-taifu@linux.alibaba.com> - 0.3.67-2.0.1
changelog:
  - Remove pipwire-session-manager requires
  - fix readline dependence find (rb01097748@alibaba-inc.com)


author: Wim Taymans <wtaymans@redhat.com> - 0.1.0-2
changelog:
  - Fix BuildRequires to use pkgconfig, add all dependencies found in configure.ac
  - Add user and groups  if needed
  - Add license to %licence


author: Wim Taymans <wtaymans@redhat.com> - 0.2.6-3
changelog:
  - Add patch to reuse fd in pipewiresrc
  - Add patch for device provider
  - Add patch to disable extra security checks until portal is fixed.


author: Kalev Lember <klember@redhat.com> - 0.2.6-5
changelog:
  - Don't require the daemon package for -devel subpackage
  - Move pipewire.conf man page to the daemon package


author: Wim Taymans <wtaymans@redhat.com> - 0.2.94-1
changelog:
  - Update to 0.2.94
  - Move pipewire modules to -libs
  - Add pw-profiler
  - Add libsndfile-devel as a BR


author: Kalev Lember <klember@redhat.com> - 0.2.96-2
changelog:
  - Rename subpackages so that libjack-pw is in -libjack
    and libpulse-pw is in -libpulse
  - Split libspa-jack.so out to -plugin-jack subpackage
  - Avoid hard-requiring the daemon from any of the library subpackages


author: Wim Taymans <wtaymans@redhat.com> - 0.3.2-3
changelog:
  - Add patch to unsubscribe unused sequencer ports
  - Change config to only disable bluez5 handling by default.


author: Wim Taymans <wtaymans@redhat.com> - 0.3.6-2
changelog:
  - Use systemd presets to enable pipewire.socket
  - Remove duplicate hardened_build flags
  - Add meson build again
  - Fix -gstreamer subpackage Requires:


author: Wim Taymans <wtaymans@redhat.com> - 0.3.8-2
changelog:
  - Add patch for fix chrome audio hicups
  - Add patch for infinite loop in device add/remove
  - Disable LTO on armv7


author: Neal Gompa <ngompa13@gmail.com> - 0.3.16-4
changelog:
  - Add 'pulseaudio-daemon' Provides + Conflicts to pipewire-pulseaudio
  - Remove useless ldconfig macros that expand to nothing


author: Neal Gompa <ngompa13@gmail.com> - 0.3.22-2
changelog:
  - Replace JACK and PulseAudio on upgrade in F34+
    Reference: https://fedoraproject.org/wiki/Changes/DefaultPipeWire


author: Chang Gao <gc-taifu@linux.alibaba.com> - 1.0.1-1.0.1
changelog:
  - Remove pipwire-session-manager requires
  - fix readline dependence find (rb01097748@alibaba-inc.com)
  - Remove pulse/jack files
  - change way to create user


author: Tomas Orsava <torsava@redhat.com> - 4.5.1-7
changelog:
  - New subpackage platform-python-coverage without files from /usr/bin/*
  - python3-coverage contains only files from /usr/bin/* and depends
    on platform-python-coverage
  - Resolves: rhbz#1658674


author: Ray Strode <rstrode@redhat.com> - 0.9.4-11.git1688935
changelog:
  - Fix typo in --with-runtimedir argument to actually stop using
    /var/run and instead use /run instead
    Resolves: #2056473


author: Philip Kovacs <pkfed@fedoraproject.org> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Added enviromnent module for pmi/pmix
  - Added pkgconfig files for pmix/pmi/pmi2
  - Ensure lexer sources are rebuilt
  - Removed obsolete sasl support
  - Use new ldconfig_scriplets macro


author: Philip Kovacs <pkfed@fedoraproject.org> - 3.1.4-0.3.rc2
changelog:
  - Create pmix-pmi and pmix-pmi-devel subpackages for pmi/pmi2 libs
  - Remove rpm-generated pkgconfig files until upstream provides them
  - Do not pull dependencies with pkgconfig unless package uses it


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/c5d8129)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/801b7e8)
  - Resolves: #2074144


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/47b310e)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/4cd74c2)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-12
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/1c4d1a7)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-13
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/37cd5bf)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-14
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/ab15cf1)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-15
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel
    (https://github.com/containers/podman/commit/b084df1)
  - Related: #2165695


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/66518b4)
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/ee04ef9)
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-21
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/d54ecc8)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-22
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.6.1
  - fixes build with the new golang
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-23
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179945
  - Resolves: #2187315
  - Resolves: #2187361
  - Resolves: #2203678
  - Resolves: #2207507


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:4.0.2-25
changelog:
  - rebuild with golang 1.20.6+ for CVE-2023-39321 CVE-2023-29409
  - Related: Jira:RHEL-4508
  - Related: Jira:RHEL-7443


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-26
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/427a15f)
  - Resolves: RHEL-17145


author: Jindrich Novy <jnovy@redhat.com> - 3:4.6.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/1b2fadd)
  - Resolves: #2232127


author: Jindrich Novy <jnovy@redhat.com> - 3:4.6.1-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/ea33dce)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 3:4.6.1-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/227b84e)
  - Resolves: RHEL-20910


author: Lokesh Mandvekar <lsm5@redhat.com> - 0.4.1-2.gitb51d327
changelog:
  - add containernetworking-plugins v0.7.0 as a subpackage (podman dep)
  - release tag for the containernetworking-plugins is actually gotten from
  podman release tag.


author: Lokesh Mandvekar <lsm5@redhat.com> - 0.6.1-1.git3e0ff12
changelog:
  - Resolves: #1584429 - drop capabilities when running a container as non-root
  - bump to v0.6.1
  - built podman commit 3e0ff12
  - built conmon from cri-o commit 1c0c3b0
  - drop containernetworking-plugins subpackage, it's now split out into a standalone
  package


author: Lokesh Mandvekar <lsm5@redhat.com> - 0.8.1-2.git6b4ab2a
changelog:
  - bump to v0.8.1
  - use %go{build,generate} instead of go build and go generate
  - update go deps to use scl-ized builds
  - No need for Makefile patch for python installs


author: Lokesh Mandvekar <lsm5@redhat.com> - 0.8.2-1.dev.git8b2d38e
changelog:
  - Resolves: #1614710 - podman search name includes registry
  - bump to v0.8.2-dev
  - built libpod commit 8b2d38e
  - built conmon from cri-o commit acc0ee7


author: Lokesh Mandvekar <lsm5@redhat.com> - 0.8.4-1.git9f9b8cf
changelog:
  - bump to v0.8.4
  - built commit 9f9b8cf
  - upstream username changed from projectatomic to containers
  - use containernetworking-plugins >= 0.7.3-5


author: Lokesh Mandvekar <lsm5@redhat.com> - 0.10.1.3-1.gitdb08685
changelog:
  - Resolves: #1640298 - update vendored buildah to allow building when there are
  running containers
  - bump to v0.10.1.3
  - built podman commit db08685


author: Lokesh Mandvekar <lsm5@redhat.com> - 0.10.1.3-5.gitdb08685
changelog:
  - Resolves: #1625384 - keep BR: device-mapper-devel but don't build with it
  - not having device-mapper-devel seems to have brew not recognize %{_unitdir}


author: Lokesh Mandvekar <lsm5@redhat.com> - 0.11.1.1-1.git594495d
changelog:
  - Resolves: #1636230 - build with FIPS enabled golang toolchain
  - bump to v0.11.1.1
  - built commit 594495d


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.0.0-1.git82e8011
changelog:
  - rebase to v1, yay!
  - rebase conmon to 9b1f0a08285a7f74b21cc9b6bfd98a48905a7ba2
  - Resolves:#1623282
  - python interface removed, moved to https://github.com/containers/python-podman/


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.4.2-2
changelog:
  - Resolves: #1669197, #1705763, #1737077, #1671622, #1723879, #1730281,
  - Resolves: #1731117
  - built libpod v1.4.2-stable1


author: Jindrich Novy <jnovy@redhat.com> - 1.6.2-2
changelog:
  - drop oci-systemd-hook requirement
  - drop upstreamed CVE-2019-10214 patch
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1.6.2-3
changelog:
  - split podman and conmon packages
  - drop BR: device-mapper-devel and update BRs in general
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1.6.2-5
changelog:
  - use btrfs_noversion to really disable BTRFS support
  - amend/reuse BUILDTAGS
  - still keep device-mapper-devel BR otherwise build fails
    despite dm support being disabled (build scripting invokes
    pkg-config for devmapper which is shipped by the dm-devel
    package)
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1.6.3-2
changelog:
  - apply fix to not to fail gating tests:
    don't parse the config for cgroup-manager default
  - don't hang while on podman run --rm - bug 1767663
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1.6.3-4
changelog:
  - use the file events logger backend if systemd isn't available
    (thanks to Giuseppe Scrivano)
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - merge podman-manpages with podman package and put man pages for
    podman-remote to its dedicated subpackage
  Resolves: #1788539


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-5
changelog:
  - fix "Podman support for FIPS Mode requires a bind mount inside the container"
  - Resolves: #1804195


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-8
changelog:
  - fix "[FJ8.2 Bug]: [REG]The "--group-add" option of "podman create" doesn't function."
  - Resolves: #1808707


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-9
changelog:
  - update fix for "podman (1.6.4) rhel 8.1 no route to host from inside container"
  - Resolves: #1806901


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-11
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1819812


author: Jindrich Novy <jnovy@redhat.com> - 1.9.2-3
changelog:
  - fix "Podman support for FIPS Mode requires a bind mount inside the container"
  - version the oci-systemd-hook obsolete
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.9.3-2
changelog:
  - exclude i686 arch due to "No matching package to install: 'golang >= 1.12.12-4'" on i686
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 2.0.2-3
changelog:
  - fix "CVE-2020-14040 podman: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-8]"
  - Resolves: #1854718


author: Lokesh Mandvekar <lsm5@redhat.com> - 2.0.3-1
changelog:
  - update to https://github.com/containers/podman/releases/tag/v2.0.3
  - Resolves: #1785242 - podman-docker Provides: docker 
  - Resolves: #1804195


author: Jindrich Novy <jnovy@redhat.com> - 2.0.3-2
changelog:
  - fix "Podman build from url failed to get correct temp directory for store files"
  - Resolves: #1858862


author: Jindrich Novy <jnovy@redhat.com> - 2.0.5-3
changelog:
  - fix "[FJ8.3 Bug]: [REG] "--oom-score-adj" flag is ignored in "podman run" and "podman create""
  - Resolves: #1877187


author: Jindrich Novy <jnovy@redhat.com> - 2.1.1-3
changelog:
  - do not lock down to upstream branch for 8.4.0 yet and consume
    new upstream releases
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 2.1.1-7
changelog:
  - attempt to fix linker error with golang-1.15
  - add Requires: httpd-tools to tests, needed to work around
    missing htpasswd in docker registry image, thanks to Ed Santiago
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/70284b1)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/8e83799)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/035d289)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/e2f9120)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/dd295f2)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/9216be2)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/6823a5d)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/a226e6e)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/999d40d)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.12
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/5c6b5ef)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.13
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/9c9f02a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.14
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/39b1cb4)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.15
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/142b4ac)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.16
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/618c355)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.17
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/ffe2b1e)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.18
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/355e387)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.19
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/78cda71)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.20
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/5681907)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.21
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/f52a9ee)
  - require socat for gating tests
  - Related: #1914884


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.22
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/b2ac2a3)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.23
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/3fcf346)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.24
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/5a166b2)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.25
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/83ed464)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.26
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/5b3c7a5)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.28rc1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/ade8a92)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.29rc1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/4ecd2be)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.30rc1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/469c203)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.31rc1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/dc2f4c6)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.32rc1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/4dbb58d)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.33rc2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/745fa4a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.34rc2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/67d48c5)
  - add Requires: oci-runtime
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.35rc2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/978c005)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.36rc2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/013770e)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.37rc2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/c2a298e)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.38rc2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/82081e8)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.39rc2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/288fb68)
  - Resolves: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.40rc2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/a5ab59e)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-0.41rc2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/2b89fe7)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/ddd8a17)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/797f1ea)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/7e286bc)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.0
    (https://github.com/containers/podman/commit/9a2fc37)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/0a40c5a)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/87e2056)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.0.1-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/b7c00f2)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.1.0-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/789d579)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.1.0-0.2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/09473d4)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.1.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/e2d35e5)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.1.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/81737b3)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.1.0-0.5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/fc02d16)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.1.0-0.6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/e7dc592)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.1.0-0.7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/604459b)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.1.0-0.8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/6f6cc1c)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.1.0-0.9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/5d9b070)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.1.0-0.10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/ebc9871)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.1.0-0.11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/60c90c3)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.1.0-0.12
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/860de13)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.1.0-0.13
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/e523d09)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.1.0-0.14
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/9e23e0b)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.1.0-0.15
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/ccbe7e9)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/5eb5950)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/a373e2f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/12881ab)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/2b13c5d)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/9ca53cf)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/5dc9faf)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/db67fed)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/49eb047)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/697ec8f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/9788289)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/8eefca5)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/ed6f399)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/b6405c1)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/034470e)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/54bed10)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.12
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/57b6425)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.13
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/8dcd5b8)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.14
changelog:
  - require at least conmon >= 2.0.25 to assure rootless podman is able to start containers
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.15
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/59dd357)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.16
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/4dc52f6)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.17
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/3bdbe3c)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.18
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/959d6a0)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.19
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/4c75626)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.20
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/8bc39f4)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.21
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/e48aa8c)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.22
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/490915c)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.23
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/b060a77)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.24
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/a6f0ac2)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.25
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/c5b3cba)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.26
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/ac94be3)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.27
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/d9eb126)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.28
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/5923676)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.29
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/8f5f0cf)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.30
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/41c76d6)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.31
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/52dae69)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.32
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/f7233a2)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.0-0.33
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/5a209b3)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/df3b6da)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-0.2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/da1bade)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/d116beb)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/e2f51ee)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-0.5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/814a8b6)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-0.6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/928687e)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-0.7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/be15e69)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-0.8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/e159eb8)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-0.10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/d1f57a0)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-0.11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/0a0ade3)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-0.12
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/master
    (https://github.com/containers/podman/commit/c260cbd)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.3-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.2
    (https://github.com/containers/podman/commit/ac740c6)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.3-0.3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.2
    (https://github.com/containers/podman/commit/6f0bf16)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.3-0.4
changelog:
  - install CNI manually as install.cni target is missing from the Makefile
  - simplify unit file packaging
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.3-0.6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.2
    (https://github.com/containers/podman/commit/275b0d8)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.3-0.7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.2
    (https://github.com/containers/podman/commit/60d12f7)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.2.3-0.8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.2
    (https://github.com/containers/podman/commit/4136f8b)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-0.14
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/0ef01c8)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-0.15
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/ec5c7c1)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-0.16
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/4f5b19c)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-0.17
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/a5de831)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-0.18
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/f9395dd)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-0.19
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/2041731)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-0.20
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/f17b810)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-0.21
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/4429c7c)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-0.22
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/03afc91)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.3
    (https://github.com/containers/podman/commit/57422d2)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.3
    (https://github.com/containers/podman/commit/922699f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.3
    (https://github.com/containers/podman/commit/63269b6)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.3
    (https://github.com/containers/podman/commit/39cab79)
  - Related: #1934415


author: Lokesh Mandvekar <lsm5@redhat.com> - 3.3.0-6
changelog:
  - update podman to v3.3.0-rc3
  - update dnsname to v1.3.0
  - add podman-machine-cni commit afab2d8
  - add gvproxy v0.1.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.1-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.3
    (https://github.com/containers/podman/commit/8809aed)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.3
    (https://github.com/containers/podman/commit/d09259a)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 3.3.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.3
    (https://github.com/containers/podman/commit/7752c73)
  - Related: #1934415


author: Lokesh Mandvekar <lsm5@redhat.com> - 3.3.1-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.3.1-rhel
    (https://github.com/containers/podman/commit/405507a)
  - Related: #1934415


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 3.3.1-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.3.1-rhel
    (https://github.com/containers/podman/commit/405507a)
  - Related: #1934415
  - correct previous changelog entry


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/63f6656)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/0f3d3bd)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/323fe36)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/5f41ffd)
  - update to https://github.com/containers/podman-machine-cni/releases/tag/v0.2.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/84c61b7)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/ddb3844)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/b925d70)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/8e2d25e)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/1dba601)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/800d594)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/b60cff8)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.12
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/cd10304)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.13
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/b187dfe)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.14
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/317e20a)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.15
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/b9d8c63)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.16
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/c963a50)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.17
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/8bcc086)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.18
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/bfb904b)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.19
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/14c0fcc)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.20
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/ea86893)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 4.0.0-0.21
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/72e87c0)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 3.4.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4
    (https://github.com/containers/podman/commit/c15c154)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.2-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4
    (https://github.com/containers/podman/commit/09aade7)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.2-0.2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4
    (https://github.com/containers/podman/commit/75023e9)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.2-0.3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4
    (https://github.com/containers/podman/commit/8de9950)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.2-0.4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4
    (https://github.com/containers/podman/commit/fd010ad)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.3-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4
    (https://github.com/containers/podman/commit/4808a63)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.3-0.4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4
    (https://github.com/containers/podman/commit/7203178)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.3-0.5
changelog:
  - do not put patch URL as the backported patch will get overwritten when
    "spectool -g -f" is executed
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.3-0.6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4
    (https://github.com/containers/podman/commit/e3a7a74)
  - add libsubid_tag.sh into BUILDTAGS
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.3-0.7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4
    (https://github.com/containers/podman/commit/31bc358)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.3-0.8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4
    (https://github.com/containers/podman/commit/815f36a)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.3-0.9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4
    (https://github.com/containers/podman/commit/fe44757)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.4-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4
    (https://github.com/containers/podman/commit/49f589d)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.5-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4
    (https://github.com/containers/podman/commit/b8fde5c)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.5-0.2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4
    (https://github.com/containers/podman/commit/17788ed)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.5-0.3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4
    (https://github.com/containers/podman/commit/3f57b6e)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.5-0.4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4
    (https://github.com/containers/podman/commit/63134a1)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.5-0.5
changelog:
  - add git-daemon to test subpackage
    (https://github.com/containers/podman/issues/12851)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:3.4.5-0.7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v3.4
    (https://github.com/containers/podman/commit/a54320a)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.0-0.22
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0
    (https://github.com/containers/podman/commit/337f706)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.0-0.23
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0
    (https://github.com/containers/podman/commit/4ad9e00)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.0-0.24
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0
    (https://github.com/containers/podman/commit/2dca7b2)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.0-0.26
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0
    (https://github.com/containers/podman/commit/5b2d96f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.0-0.27
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0
    (https://github.com/containers/podman/commit/c4a9aa7)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.0-0.28
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0
    (https://github.com/containers/podman/commit/b0a445e)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.0-0.29
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0
    (https://github.com/containers/podman/commit/ab3e566)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.0-0.31
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0
    (https://github.com/containers/podman/commit/a34f279)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel
    (https://github.com/containers/podman/commit/fa692a6)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-1
changelog:
  - update to https://github.com/containers/podman/releases/tag/v4.2.0
    (https://github.com/containers/podman/commit/7fe5a419cfd2880df2028ad3d7fd9378a88a04f4)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/4978898)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 3:4.2.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/d520a5c)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 3:4.2.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/35c0df3)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 3:4.3.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.3.1-rhel
    (https://github.com/containers/podman/commit/d9a6336)
  - Resolves: #2144754


author: Jindrich Novy <jnovy@redhat.com> - 3:4.4.1-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/ffc2614)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 3:4.4.1-10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/bf400bd)
  - Resolves: #2179449


author: Jindrich Novy <jnovy@redhat.com> - 3:4.4.1-11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/4461c9c)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 3:4.4.1-12
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/67f7e1e)
  - Resolves: #2182052


author: Jindrich Novy <jnovy@redhat.com> - 3:4.4.1-13
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/05037d3)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 3:4.4.1-15
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/fd0ea3b)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 3:4.4.1-16
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/8b741dc)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 3:4.4.1-19
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/bcea446)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 3:4.5.1-4
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175071
  - Resolves: #2179950
  - Resolves: #2187318
  - Resolves: #2187366
  - Resolves: #2203681
  - Resolves: #2207512


author: Jindrich Novy <jnovy@redhat.com> - 3:4.6.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.0
    (https://github.com/containers/podman/commit/38e6fab9664c6e59b66e73523b307a56130316ae)


author: Jindrich Novy <jnovy@redhat.com> - 3:4.6.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/68e7ae0)
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 3:4.9.2-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9
    (https://github.com/containers/podman/commit/4c14019)
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 3:4.9.4-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9
    (https://github.com/containers/podman/commit/4b69d93)
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 3:4.9.3-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/06e4598)
  - Resolves: RHEL-28632 RHEL-28628 RHEL-28803


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.3-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/5f872ae)
  - Resolves: RHEL-28225


author: Lokesh Mandvekar <lsm5@redhat.com> - 4:4.9.4-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/7752c56)
  - Resolves: RHEL-28225


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/6464b2c)
  - Resolves: RHEL-28727


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/1a6dca2)
  - Resolves: RHEL-40851


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/8fa0c76)
  - Resolves: RHEL-40800


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/affa589)
  - Resolves: RHEL-47169


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/1a2d8e3)
  - Resolves: RHEL-32589


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-12
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/6b45bb1)
  - Resolves: RHEL-53249


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-13
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/e3221b5)
  - Resolves: RHEL-56326


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-14
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/6cf9920)
  - Resolves: RHEL-60962


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-15
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/235a22c)
  - Resolves: RHEL-61837


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-4.git921f98f
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1818122


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-8.git921f98f
changelog:
  - fix "podman can not create user inside of container" regression introduced by
    patch for CVE-2021-20188
  - Related: #1918285


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-24
changelog:
  - fix CVE-2021-20188
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/2c7b579)
  - Related: #1920383


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-26
changelog:
  - fix regression introduced by fix of CVE-2021-20188
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/bcbbbc4)
  - Resolves: #1934649


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-27
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/c19e460)
  - Resolves: #2062401


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-28
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
    (https://github.com/containers/podman/commit/9407ffd)
  - fixes CVE-2022-27651
  - Resolves: #2067545


author: Dan Walsh <dwalsh@redhat.com> 1.9-9
changelog:
  - Change restorecon to not follow symlinks.  It is too difficult and confusing
  - to figure out the file context for the file pointed to by a symlink.


author: Colin Walters <walters@redhat.com> 1.10-3
changelog:
  - Add patch to fall back to authenticating via uid if
    the current user's SELinux user identity is the default
    identity
  - Add BuildRequires pam-devel


author: Dan Walsh <dwalsh@redhat.com> 1.13.3-1
changelog:
  - Update latest from NSA
  - Add -o option to setfiles to save output of any files with incorrect context.


author: Dan Walsh <dwalsh@redhat.com> 1.14.1-2
changelog:
  - Fix fixfiles.cron to not run on non SELinux boxes
  - Fix several problems in fixfiles and fixfiles.cron


author: Dan Walsh <dwalsh@redhat.com> 1.17.3-4
changelog:
  - Add Steve Grub patches for
          * Fix fixfiles.cron MAILTO
          * Several problems in sestatus


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Update with NSA
          * Added -l option to setfiles to log changes via syslog.
          * Merged -e option to setfiles to exclude directories.
          * Merged -R option to restorecon for recursive descent.


author: Dan Walsh <dwalsh@redhat.com> 1.19.1-1
changelog:
  - Update to latest from NSA
          * Removed fixfiles.cron.
          * Merged run_init.8 patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-1
changelog:
  - Update to latest from NSA
          * Changed restorecon to ignore ENOENT errors from matchpathcon.
          * Merged nonls patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-4
changelog:
  - Fix fixfiles handling of rpm
  - Fix restorecon to not warn on symlinks unless -v -v
  - Fix output of verbose to show old context as well as new context


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Update to latest from NSA
          * Merged fixfiles and restorecon patches from Dan Walsh.
          * Don't display change if only user part changed.


author: Dan Walsh <dwalsh@redhat.com> 1.20.1-1
changelog:
  - Update to latest from NSA
          * Merged fixfiles rewrite from Dan Walsh.
          * Merged restorecon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.21.1-3
changelog:
  - Don't change user componant if it is all that changed unless forced.
  - Change fixfiles to concatinate file_context.local for setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.21.3-1
changelog:
  - Upgrade to latest from NSA
          * Fixed restorecon to not treat errors from is_context_customizable()
            as a customizable context.
          * Merged setfiles/restorecon patch to not reset user field unless
            -F option is specified from Dan Walsh.
          * Merged open_init_pty helper for run_init from Manoj Srivastava.
          * Merged audit2allow and genhomedircon man pages from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.4-1
changelog:
  - Upgrade to latest from NSA
          * Merged fixfiles patch for file_contexts.local from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Upgrade to latest from NSA
          * Merged newrole -l support from Darrel Goeddel (TCS).
  - Fix genhomedircon STARTING_UID


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-3
changelog:
  - Fix fixfiles patch
  - Upgrade to latest from NSA
          * Prevent overflow of spec array in setfiles.
  - Add diff comparason between file_contexts to fixfiles
  - Allow restorecon to give an warning on file not found instead of exiting


author: Dan Walsh <dwalsh@redhat.com> 1.21.9-1
changelog:
  - More cleanup of sed patch
  - Upgrade to latest from NSA
          * Merged updated fixfiles script from Dan Walsh.
          * Merged updated man page for fixfiles from Dan Walsh and re-added unzipped.
          * Reverted fixfiles patch for file_contexts.local;
            obsoleted by setfiles rewrite.
          * Merged error handling patch for restorecon from Dan Walsh.
          * Merged semi raw mode for open_init_pty helper from Manoj Srivastava.
          * Rewrote setfiles to use matchpathcon and the new interfaces
            exported by libselinux (>= 1.21.5).


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - More cleanup of fixfiles sed patch
  - Upgrade to latest from NSA
          * Merged patch for open_init_pty from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.12-1
changelog:
  - More cleanup of fixfiles sed patch
          * Merged further patches for restorecon/setfiles -e and fixfiles -C.


author: Dan Walsh <dwalsh@redhat.com> 1.21.13-1
changelog:
  - Update from NSA
          * Merged further change to fixfiles -C from Dan Walsh.
          * Merged updated fixfiles script from Dan Walsh.
  - Fix error handling of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.21.17-1
changelog:
  - Update to latest from NSA
          * Merged new genhomedircon script from Dan Walsh.
          * Changed load_policy to call sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-1
changelog:
  - Update to latest from NSA
          * Changed load_policy to fall back to the original policy upon
            an error from sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-2
changelog:
  - Apply Uli patch
          * The Makefiles should use the -Wall option even if compiled in beehive
          * Add -W, too
          * use -Werror when used outside of beehive.  This could also be used unconditionally
          * setfiles/setfiles.c: fix resulting warning
          * restorecon/restorecon.c: Likewise
          * run_init/open_init_pty.c: argc hasn't been checked, the program would crash if
  called without parameters.  ignore the return value of nice properly.
          * run_init: don't link with -ldl lutil
          * load_policy: that's the bad bug.  pointer to unsigned int is passed, size_t is
  written to.  fails on 64-bit archs
          * sestatus: signed vs unsigned problem
          * newrole: don't link with -ldl


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update to released version from NSA
          * Merged rewrite of genhomedircon by Eric Paris.
          * Changed fixfiles to relabel jfs since it now supports security xattrs
            (as of 2.6.11).  Removed reiserfs until 2.6.12 is released with
            fixed support for reiserfs and selinux.


author: Dan Walsh <dwalsh@redhat.com> 1.23.2-1
changelog:
  - Update to version from NSA
          * Changed setfiles -c to call set_matchpathcon_flags(3) to
            turn off processing of .homedirs and .local.


author: Dan Walsh <dwalsh@redhat.com> 1.23.3-1
changelog:
  - Update to version from NSA
          * Merged context validation patch for genhomedircon from Eric Paris.
  - Fix verbose output of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update to version from NSA
          * Merged load_policy is_selinux_enabled patch from Dan Walsh.
          * Merged restorecon verbose output patch from Dan Walsh.
          * Merged setfiles altroot patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.23.5-1
changelog:
  - Update to match NSA
          * Reverted load_policy is_selinux_enabled patch from Dan Walsh.
            Otherwise, an initial policy load cannot be performed using
            load_policy, e.g. for anaconda.


author: Dan Walsh <dwalsh@redhat.com> 1.23.6-1
changelog:
  - Update to match NSA
          * Fixed signed/unsigned pointer bug in load_policy.
          * Reverted context validation patch for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.23.7-1
changelog:
  - Change -f flag in fixfiles to remove stuff from /tmp
  - Change -F flag to pass -F flag  to restorecon/fixfiles.  (IE Force relabel).


author: Dan Walsh <dwalsh@redhat.com> 1.23.9-1
changelog:
  - Update to match NSA
          * Updated audit2why for sepol_ prefixes on Flask types to
            avoid namespace collision with libselinux, and to
            include <selinux/selinux.h> now.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update to match NSA
          * Extended audit2why to incorporate booleans and local user
            settings when analyzing audit messages.


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update to match NSA
          * Merged fixfiles and newrole patch from Dan Walsh.
          * Merged audit2why man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.25.2-1
changelog:
  - Update to match NSA
          * Merged load_policy, newrole, and genhomedircon patches from Red Hat.


author: Dan Walsh <dwalsh@redhat.com> 1.25.5-1
changelog:
  - Update to match NSA
          * Merged patch to move module read/write code from libsemanage
            to libsepol from Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update to match NSA
          * Merged fixes for semodule_link and sestatus from Serge Hallyn (IBM).
            Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.25.9-1
changelog:
  - Update to match NSA
          * Changed setfiles -c to translate the context to raw format
          prior to calling libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.27.1-1
changelog:
  - Update to match NSA
          * Merged error shadowing bug fix for restorecon from Dan Walsh.
          * Merged setfiles usage/man page update for -r option from Dan Walsh.
          * Merged fixfiles -C patch to ignore :s0 addition on update
            to a MCS/MLS policy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.2-1
changelog:
  - Update to match NSA
          * Merged run_init open_init_pty bug fix from Manoj Srivastava
            (unblock SIGCHLD).  Bug reported by Erich Schubert.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to match NSA
          * Merged patch to update semodule to the new libsemanage API
          and improve the user interface from Karl MacMillan (Tresys).
          * Modified semodule for the create/connect API split.


author: Dan Walsh <dwalsh@redhat.com> 1.27.5-1
changelog:
  - Update to match NSA
          * Fixed warnings in load_policy.
          * Rewrote load_policy to use the new selinux_mkload_policy()
          interface provided by libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to match NSA
          * Updated for changes to libsepol.
          Changed semodule and semodule_package to use the shared libsepol.
          Disabled build of semodule_link and semodule_expand for now.
          Updated audit2why for relocated policydb internal headers,
          still needs to be converted to a shared lib interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to match NSA
          * Updated semodule_link and semodule_expand to use shared libsepol.
          Fixed audit2why to call policydb_init prior to policydb_read (still
          uses the static libsepol).


author: Dan Walsh <dwalsh@redhat.com> 1.27.11-1
changelog:
  - Update to match NSA
          * Updated semodule_expand to use get interfaces for hidden sepol_module_package type.
          * Merged newrole and run_init pam config patches from Dan Walsh (Red Hat).
          * Merged fixfiles patch from Dan Walsh (Red Hat).
          * Updated semodule for removal of semanage_strerror.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to match NSA
          * Merged non-PAM Makefile support for newrole and run_init from Timothy Wood.


author: Dan Walsh <dwalsh@redhat.com> 1.27.18-1
changelog:
  - Update to match NSA
          * Cleaned up usage and error messages and releasing of memory by
          semodule utilities.
          * Corrected error reporting by semodule.
          * Updated semodule_expand for change to sepol interface.
          * Merged fixes for make DESTDIR= builds from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to match NSA
          * Merged semodule support for reload, noreload, and store options
            from Joshua Brindle.
          * Merged semodule_package rewrite from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to match NSA
          * Merged setsebool patch from Ivan Gyurdiev.
            This moves setsebool from libselinux/utils to policycoreutils,
            and rewrites it to use libsemanage for permanent boolean changes.


author: Dan Walsh <dwalsh@redhat.com> 1.27.23-1
changelog:
  - Update to match NSA
          * Changed setfiles for the context canonicalization support.
          * Changed setsebool to call semanage_is_managed() interface
            and fall back to security_set_boolean_list() if policy is
            not managed.
          * Merged setsebool memory leak fix from Ivan Gyurdiev.
          * Merged setsebool patch to call semanage_set_reload_bools()
            interface from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.26-1
changelog:
  * Added -B (--build) option to semodule to force a rebuild.
          * Reverted setsebool patch to call semanage_set_reload_bools().
          * Changed setsebool to disable policy reload and to call
            security_set_boolean_list to update the runtime booleans.
          * Changed setfiles -c to use new flag to set_matchpathcon_flags()
            to disable context translation by matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-2
changelog:
  - Update to match NSA
          * Merged genhomedircon rewrite from Dan Walsh.
  - Rewrite audit2allow to python


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-3
changelog:
  - Audit2allow
          * Add more error checking
          * Add gen policy package
          * Add gen requires


author: Dan Walsh <dwalsh@redhat.com> 1.27.29-1
changelog:
  - Update to match NSA
          * Merged audit2allow python script from Dan Walsh.
            (old script moved to audit2allow.perl, will be removed later).
          * Merged genhomedircon fixes from Dan Walsh.
          * Merged semodule quieting patch from Dan Walsh
            (inverts default, use -v to restore original behavior).


author: Dan Walsh <dwalsh@redhat.com> 1.27.30-1
changelog:
  - Update to match NSA
          * Merged sestatus, audit2allow, and semanage patch from Dan Walsh.
          * Fixed semodule -v option.


author: Dan Walsh <dwalsh@redhat.com> 1.27.31-1
changelog:
  - Update to match NSA
          * Changed genhomedircon to always use user_r for the role in the
            managed case since user_get_defrole is broken.
  - Add te file capabilities to audit2allow
  - Add man pages for semodule


author: Dan Walsh <dwalsh@redhat.com> 1.27.33-1
changelog:
  - Update to match NSA
          * Merged audit2allow --tefile and --fcfile support from Dan Walsh.
          * Merged genhomedircon fix from Dan Walsh.
          * Merged semodule* man pages from Dan Walsh, and edited them.
          * Changed setfiles to set the MATCHPATHCON_VALIDATE flag to
            retain validation/canonicalization of contexts during init.


author: Dan Walsh <dwalsh@redhat.com> 1.27.35-1
changelog:
  - Update to match NSA
          * Merged genhomedircon bug fix from Dan Walsh.
          * Revised semodule* man pages to refer to checkmodule and
            to include example sections.


author: Dan Walsh <dwalsh@redhat.com> 1.27.36-1
changelog:
  - Update to match NSA
          * Changed genhomedircon to warn on use of ROLE in homedir_template
            if using managed policy, as libsemanage does not yet support it.


author: Dan Walsh <dwalsh@redhat.com> 1.29.1-1
changelog:
  - Update to match NSA
          * Merged fix for audit2allow long option list from Dan Walsh.
          * Merged -r option for restorecon (alias for -R) from Dan Walsh.
          * Merged chcat script and man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Fix genhomedircon to work in installer
  - Update to match NSA
          * Merged patch for chcat script from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Update to match NSA
          * Merged semanage getpwnam bug fix from Serge Hallyn (IBM).
          * Merged patch series from Ivan Gyurdiev.
            This includes patches to:
            - cleanup setsebool
            - update setsebool to apply active booleans through libsemanage
            - update semodule to use the new semanage_set_rebuild() interface
            - fix various bugs in semanage
          * Merged patch from Dan Walsh (Red Hat).
            This includes fixes for restorecon, chcat, fixfiles, genhomedircon,
            and semanage.


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Update to match NSA
          * Merged genhomedircon and semanage patch from Dan Walsh.
          * Changed semodule error reporting to include argv[0].


author: Dan Walsh <dwalsh@redhat.com> 1.29.7-1
changelog:
  - Update to match NSA
          * Merged newrole cleanup patch from Steve Grubb.
          * Merged setfiles/restorecon performance patch from Russell Coker.
          * Merged genhomedircon and semanage patches from Dan Walsh.
          * Merged remove add_local/set_local patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.8-1
changelog:
  - Update to match NSA
          * Merged semanage fixes from Ivan Gyurdiev.
          * Merged semanage fixes from Russell Coker.
          * Merged chcat, genhomedircon, and semanage diffs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.11-1
changelog:
  - Added translation support to semanage
  - Update from upstream
          * Modified newrole and run_init to use the loginuid when
            supported to obtain the Linux user identity to re-authenticate,
            and to fall back to real uid.  Dropped the use of the SELinux
            user identity, as Linux users are now mapped to SELinux users
            via seusers and the SELinux user identity space is separate.
          * Merged semanage bug fixes from Ivan Gyurdiev.
          * Merged semanage fixes from Russell Coker.
          * Merged chcat.8 and genhomedircon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.15-1
changelog:
  - Update from upstream
          * Merged newrole audit patch from Steve Grubb.
          * Merged seuser -> seuser local rename patch from Ivan Gyurdiev.
          * Merged semanage and semodule access check patches from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.17-1
changelog:
  - Update from upstream
          * Merged genhomedircon fix from Dan Walsh.
          * Merged seusers.system patch from Ivan Gyurdiev.
          * Merged improve port/fcontext API patch from Ivan Gyurdiev.
          * Merged genhomedircon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.20-1
changelog:
  - Update from upstream
          * Merged seuser/user_extra support patch to semodule_package
            from Joshua Brindle.
          * Merged getopt type fix for semodule_link/expand and sestatus
            from Chris PeBenito.
  - Fix genhomedircon output


author: Dan Walsh <dwalsh@redhat.com> 1.29.23-1
changelog:
  - Update from upstream
          * Merged newrole -V/--version support from Glauber de Oliveira Costa.
          * Merged genhomedircon prefix patch from Dan Walsh.
          * Merged optionals in base patch from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.26-1
changelog:
  - Update from upstream
          * Merged semanage bug fix patch from Ivan Gyurdiev.
          * Merged improve bindings patch from Ivan Gyurdiev.
          * Merged semanage usage patch from Ivan Gyurdiev.
          * Merged use PyList patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.30.1-1
changelog:
  - Make audit2allow translate dontaudit as well as allow rules
  - Update from upstream
          * Merged semanage labeling prefix patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.30.4-1
changelog:
  - Update from upstream
          * Merged audit2allow fixes for refpolicy from Dan Walsh.
          * Merged fixfiles patch from Dan Walsh.
          * Merged restorecond daemon from Dan Walsh.
          * Merged semanage non-MLS fixes from Chris PeBenito.
          * Merged semanage and semodule man page examples from Thomas Bleher.


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Add /etc/samba/secrets.tdb to restorecond.conf
  - Update from upstream
          * Merged semanage prefix support from Russell Coker.
          * Added a test to setfiles to check that the spec file is
            a regular file.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - Update to upstream
          * Merged fix warnings patch from Karl MacMillan.
          * Merged patch from Dan Walsh.
            This includes audit2allow changes for analysis plugins,
            internationalization support for several additional programs
            and added po files, some fixes for semanage, and several cleanups.
            It also adds a new secon utility.


author: Dan Walsh <dwalsh@redhat.com> 1.30.9-1
changelog:
  - Update to upstream
          * Fixed audit2allow and po Makefiles for DESTDIR= builds.
          * Merged .po file patch from Dan Walsh.
          * Merged bug fix for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Update to upstream
          * Merged patch with updates to audit2allow, secon, genhomedircon,
            and semanage from Dan Walsh.


author: James Antill <jantill@redhat.com> 1.30.10-2
changelog:
  - secon fixes for --self-exec etc.
  - secon change from level => sensitivity, add clearance.
  - Add mass relabel AUDIT patch, but disable it until kernel problem solved.


author: Dan Walsh <dwalsh@redhat.com> 1.30.11-1
changelog:
  - Update to upstream
          * Merged more translations from Dan Walsh.
          * Merged patch to relocate setfiles to /sbin for early relabel
            when /usr might not be mounted from Dan Walsh.
          * Merged semanage/seobject patch to preserve fcontext ordering in list.
          * Merged secon patch from James Antill.


author: Dan Walsh <dwalsh@redhat.com> 1.30.14-1
changelog:
  - Update to upstream
          * Merged fix for setsebool error path from Serge Hallyn.
          * Merged patch from Dan Walsh with:
          *    Updated po files.
          *    Fixes for genhomedircon and seobject.
          *    Audit message for mass relabel by setfiles.


author: Dan Walsh <dwalsh@redhat.com> 1.30.17-1
changelog:
  - Update to upstream
          * Lindent.
          * Merged patch from Dan Walsh with:
            * -p option (progress) for setfiles and restorecon.
            * disable context translation for setfiles and restorecon.
            * on/off values for setsebool.
          * Merged setfiles and semodule_link fixes from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.30.22-1
changelog:
  - Update to upstream
          * Merged restorecond size_t fix from Joshua Brindle.
          * Merged secon keycreate patch from Michael LeMay.
          * Merged restorecond fixes from Dan Walsh.
            Merged updated po files from Dan Walsh.
          * Merged python gettext patch from Stephen Bennett.
          * Merged semodule_deps from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.30.25-1
changelog:
  - Update to upstream
          * Merged patch from Dan Walsh with:
                  * audit2allow: process MAC_POLICY_LOAD events
                  * newrole: run shell with - prefix to start a login shell
                  * po: po file updates
                  * restorecond: bail if SELinux not enabled
                  * fixfiles: omit -q
                  * genhomedircon:  fix exit code if non-root
                  * semodule_deps:  install man page
          * Merged secon Makefile fix from Joshua Brindle.
          * Merged netfilter contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.30.26-1
changelog:
  - Update to upstream
          * Merged semanage local file contexts patch from Chris PeBenito.
  - Fix fixfiles log creation
  - More translations


author: Dan Walsh <dwalsh@redhat.com> 1.30.27-4
changelog:
  - Add -i qualified to restorecon to tell it to ignore files that do not exist
  - Fixfiles also modified for this change


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-1
changelog:
  - Security fixes to run python in a more locked down manner
  - More Translations
  - Update to upstream
          * Merged fix for restorecon // handling from Erich Schubert.
          * Merged translations update and fixfiles fix from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-6
changelog:
  - Change setfiles and restorecon to use stderr except for -o flag
  - Also -o flag will now output files


author: Dan Walsh <dwalsh@redhat.com> 1.30.30-1
changelog:
  - Update to upstream
          * Merged newrole auditing of failures due to user actions from
            Michael Thompson.


author: Dan Walsh <dwalsh@redhat.com> 1.32-1
changelog:
  - Add newrole audit patch from sgrubb
  - Update to upstream
          * Merged audit2allow -l fix from Yuichi Nakamura.
          * Merged restorecon -i and -o - support from Karl MacMillan.
          * Merged semanage/seobject fix from Dan Walsh.
          * Merged fixfiles -R and verify changes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.1-1
changelog:
  - Update to upstream
          * Merged newrole patch set from Michael Thompson.
  - Add policycoreutils-gui


author: Dan Walsh <dwalsh@redhat.com> 1.33.4-1
changelog:
  - Upstream accepted my patches
          * Merged setsebool patch from Karl MacMillan.
            This fixes a bug reported by Yuichi Nakamura with
            always setting booleans persistently on an unmanaged system.


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-1
changelog:
  - Update to upstream
          * Patch from Dan Walsh to add an pam_acct_msg call to run_init
          * Patch from Dan Walsh to fix error code returns in newrole
          * Patch from Dan Walsh to remove verbose flag from semanage man page
          * Patch from Dan Walsh to make audit2allow use refpolicy Makefile
            in /usr/share/selinux/<SELINUXTYPE>


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-5
changelog:
  - Update po files
  - Fix newrole to open stdout and stderr rdrw so more will work on MLS machines
  Resolves: #216920


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-6
changelog:
  - Fix audit2allow generating reference policy
  - Fix semanage to manage user roles properly
  Resolves: #220071


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-7
changelog:
  - add exists switch to semanage to tell it not to check for existance of Linux user
  Resolves: #219421


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-9
changelog:
  - Fix fixfiles script to use tty command correctly.  If this command fails, it
  should set the LOGFILE to /dev/null
  Resolves: #220879


author: Dan Walsh <dwalsh@redhat.com> 1.33.8-1
changelog:
  - Update to upstream
          * Merged patches from Dan Walsh to:
            - omit the optional name from audit2allow
            - use the installed python version in the Makefiles
            - re-open the tty with O_RDWR in newrole


author: Dan Walsh <dwalsh@redhat.com> 1.33.10-1
changelog:
  - Update to upstream
          * Merged patch to correctly handle a failure during semanage handle
            creation from Karl MacMillan.
          * Merged patch to fix seobject role modification from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.11-1
changelog:
  - Update to upstream
          * Merged fixfiles and seobject fixes from Dan Walsh.
          * Merged semodule support for list of modules after -i from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-1
changelog:
  - Want to update to match api
  - Update to upstream
          * Merged newrole securetty check from Dan Walsh.
          * Merged semodule patch to generalize list support from Karl MacMillan.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> 1.33.14-1
changelog:
  * Merged newrole man page patch from Michael Thompson.
          * Merged patch to fix python unicode problem from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.15-1
changelog:
  - Update to upstream
          * Merged unicode-to-string fix for seobject audit from Dan Walsh.
          * Merged man page updates to make "apropos selinux" work from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.34.1-1
changelog:
  - Fix system-config-selinux ports view
  - Update to upstream
          * Fixed newrole non-pam build.
          * Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> 2.0.0-1
changelog:
  - Update to upstream
          * Merged new audit2allow from Karl MacMillan.
            This audit2allow depends on the new sepolgen python module.
            Note that you must run the sepolgen-ifgen tool to generate
            the data needed by audit2allow to generate refpolicy.
          * Fixed newrole non-pam build.
  - Fix Changelog and spelling error in man page


author: Dan Walsh <dwalsh@redhat.com> 2.0.1-1
changelog:
  - Update to upstream
          * Merged small fix to correct include of errcodes.h in semodule_deps from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.2-1
changelog:
  - Update to upstream
          * Merged seobject exception handler fix from Caleb Case.
          * Merged setfiles memory leak patch from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.3-1
changelog:
  - Update to upstream
          * Merged translations update from Dan Walsh.
          * Merged chcat fixes from Dan Walsh.
          * Merged man page fixes from Dan Walsh.
          * Merged seobject prefix validity checking from Dan Walsh.
          * Merged Makefile and refparser.py patch from Dan Walsh.
            Fixes PYTHONLIBDIR definition and error handling on interface files.


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-1
changelog:
  - Update to upstream
    - policycoreutils
          * Merged newrole O_NONBLOCK fix from Linda Knippers.
          * Merged sepolgen and audit2allow patches to leave generated files
            in the current directory from Karl MacMillan.
          * Merged restorecond memory leak fix from Steve Grubb.
    -sepolgen
          * Merged patch to leave generated files (e.g. local.te) in current directory from Karl MacMillan.
          * Merged patch to make run-tests.py use unittest.main from Karl MacMillan.
          * Merged patch to update PLY from Karl MacMillan.
          * Merged patch to update the sepolgen parser to handle the latest reference policy from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-3
changelog:
  - Update to upstream
    -sepolgen
          * Merged support for enabling parser debugging from Karl MacMillan.
  - Add sgrupp cleanup of restorcon init script


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-1
changelog:
  - Update to upstream
          * Merged restorecond init script LSB compliance patch from Steve Grubb.
    -sepolgen
          * Merged better matching for refpolicy style from Karl MacMillan
          * Merged support for extracting interface paramaters from interface calls from Karl MacMillan
          * Merged support for parsing USER_AVC audit messages from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-5
changelog:
  - Change location of audit2allow and sepol-ifgen to sbin
  - Updated version of sepolgen
          * Merged patch to move the sepolgen runtime data from /usr/share to /var/lib to facilitate a read-only /usr from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-6
changelog:
  - Updated version of sepolgen
          * Merged patch to discard self from types when generating requires from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-8
changelog:
  - system-config-selinux should be able to run on a disabled system,
  - at least enough to get it enabled.


author: Dan Walsh <dwalsh@redhat.com> 2.0.8-1
changelog:
  - Updated version of sepolgen
          * Merged updates to sepolgen-ifgen from Karl MacMillan.
          * Merged updates to sepolgen parser and tools from Karl MacMillan.
            This includes improved debugging support, handling of interface
            calls with list parameters, support for role transition rules,
            updated range transition rule support, and looser matching.


author: Dan Walsh <dwalsh@redhat.com> 2.0.9-1
changelog:
  - Updated version of sepolgen
          * Merged seobject setransRecords patch to return the first alias from Xavier Toth.


author: Dan Walsh <dwalsh@redhat.com> 2.0.10-1
changelog:
  - Updated version of policycoreutils
          * Merged chcat, fixfiles, genhomedircon, restorecond, and restorecon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.13-1
changelog:
  - Updated version of policycoreutils
          * Merged setsebool patch to only use libsemanage for persistent boolean changes from Stephen Smalley.
          * Merged genhomedircon patch to use the __default__ setting from Dan Walsh.
          * Dropped -b option from load_policy in preparation for always preserving booleans across reloads in the kernel.


author: Dan Walsh <dwalsh@redhat.com> 2.0.15-1
changelog:
  - Updated version of policycoreutils
          * Merged po file updates from Dan Walsh.
  - Fix semanage to be able to modify prefix in user record


author: Dan Walsh <dwalsh@redhat.com> 2.0.16-1
changelog:
  - Updated version of policycoreutils
          * Merged support for modifying the prefix via semanage from Dan Walsh.
  - Fixed genhomedircon to find homedirs correctly.


author: Dan Walsh <dwalsh@redhat.com> 2.0.20-1
changelog:
  - Update to match NSA
          * Merged genhomedircon fixes from Dan Walsh.
          * Merged setfiles -c usage fix from Dan Walsh.
          * Merged restorecon fix from Yuichi Nakamura.
          * Dropped -lsepol where no longer needed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.22-13
changelog:
  - Speed up genhomedircon by an order of magnitude by compiling regex
  - Allow semanage fcontext -a -t <<none>> /path to work


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-1
changelog:
  - Update semodule man page
          * Fix genhomedircon searching for USER from Todd Miller
          * Install run_init with mode 0755 from Dan Walsh.
          * Fix chcat from Dan Walsh.
          * Fix fixfiles pattern expansion and error reporting from Dan Walsh.
          * Optimize genhomedircon to compile regexes once from Dan Walsh.
          * Fix semanage gettext call from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-13
changelog:
  - Upgrade version of sepolgen from NSA
          * Expand the sepolgen parser to parse all current refpolicy modules from Karl MacMillan.
          * Suppress generation of rules for non-denials from Karl MacMillan (take 3).


author: Dan Walsh <dwalsh@redhat.com> 2.0.28-1
changelog:
  - Update to upstream
          * Update semodule man page for -D from Dan Walsh.
          * Add boolean, locallist, deleteall, and store support to semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.29-1
changelog:
  - Update to upstream
          * Add genhomedircon script to invoke semodule -Bn from Dan Walsh.
  - Add deleteall for ports and fcontext


author: Dan Walsh <dwalsh@redhat.com> 2.0.31-1
changelog:
  - Remove no.po
  - Update to upstream
          * Fix semodule option handling from Dan Walsh.
          * Add deleteall support for ports and fcontexts in semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-1
changelog:
  - Upgrade from NSA
          * Drop verbose output on fixfiles -C from Dan Walsh.
          * Fix argument handling in fixfiles from Dan Walsh.
          * Enhance boolean support in semanage, including using the .xml description when available, from Dan Walsh.
  - Fix handling of final screen in polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-4
changelog:
  - Fix sepolgen to be able to parse Fedora 9 policy
        Handle ifelse statements
        Handle refpolicywarn inside of define
        Add init.if and inetd.if into parse
        Add parse_file to syntax error message


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-1
changelog:
  - Update to upstream
          * Update Makefile to not build restorecond if
            /usr/include/sys/inotify.h is not present


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-2
changelog:
  - Make sepolgen set error exit code when partial failure
  - audit2why now checks booleans for avc diagnosis


author: Dan Walsh <dwalsh@redhat.com> 2.0.35-1
changelog:
  - Update to upstream
          * Merged support for non-interactive newrole command invocation from Tim Reed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.36-1
changelog:
  - Update to upstream
          * Merged update to chcat, fixfiles, and semanage scripts from Dan Walsh.
          * Merged sepolgen fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Update to upstream
    * Merged audit2allow cleanups and boolean descriptions from Dan Walsh.
    * Merged setfiles -0 support by Benny Amorsen via Dan Walsh.
    * Merged fixfiles fixes and support for ext4 and gfs2 from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.39-1
changelog:
  - Don't initialize audit2allow for audit2why call.  Use default
  - Update to upstream
          * Merged fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.41-1
changelog:
  - Update to upstream
          * Merged audit2why fix and semanage boolean --on/--off/-1/-0 support from Dan Walsh.
          * Merged a second fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.42-1
changelog:
  - Update to upstream
          * Make semodule_expand use sepol_set_expand_consume_base to reduce
            peak memory usage.


author: Dan Walsh <dwalsh@redhat.com> 2.0.43-1
changelog:
  - Update to upstream
          * Merged fix fixfiles option processing from Vaclav Ovsik.
  - Added existing users, staff and user_t users to polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.46-1
changelog:
  - Update to upstream
          * Update audit2allow to report dontaudit cases from Dan Walsh.
          * Fix semanage port to use --proto from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-1
changelog:
  - Make restorecond not start by default
  - Fix polgengui to allow defining of confined roles.
  - Add patches from Lubomir Rintel <lkundrak@v3.sk>
    * Add necessary runtime dependencies on setools-console for -gui
    * separate stderr when run seinfo commands
  - Update to upstream
    * Update semanage man page for booleans from Dan Walsh.
    * Add further error checking to seobject.py for setting booleans.


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-2
changelog:
  - Add rm -rf /tmp/gconfd-* /tmp/pulse-* /tmp/orbit-* to fixfiles restore
  - So that mislabeled files will get removed on full relabel


author: Dan Walsh <dwalsh@redhat.com> 2.0.49-1
changelog:
  - Update to upstream
          * Remove security_check_context calls for prefix validation from semanage.
          * Change setfiles and restorecon to not relabel if the file already has the correct context value even if -F/force is specified.


author: Dan Walsh <dwalsh@redhat.com> 2.0.52-2
changelog:
  - Add lockdown wizard
  - Allow semanage booleans to take an input file an process lots of booleans at once.


author: Dan Walsh <dwalsh@redhat.com> 2.0.53-1
changelog:
  - Update to upstream
          * Change setfiles to validate all file_contexts files when using -c from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.54-1
changelog:
  - Update to upstream
          * Add support for boolean files and group support for seusers from Dan Walsh.
          * Ensure that setfiles -p output is newline terminated from Russell Coker.


author: Dan Walsh <dwalsh@redhat.com> 2.0.56-1
changelog:
  - Fix semanage help display
  - Update to upstream
          * fixfiles will now remove all files in /tmp and will check for
            unlabeled_t in /tmp and /var/tmp from Dan Walsh.
          * add glob support to restorecond from Dan Walsh.
          * allow semanage to handle multi-line commands in a single transaction
            from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.58-1
changelog:
  - Update to upstream
          * Allow local file context entries to override policy entries in
          semanage from Dan Walsh.
          * Newrole error message corrections from Dan Walsh.
          * Add exception to audit2why call in audit2allow from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-1
changelog:
  - Update to upstream
          * chcat: cut categories at arbitrary point (25) from Dan Walsh
          * semodule: use new interfaces in libsemanage for compressed files
            from Dan Walsh
          * audit2allow: string changes for usage


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-3
changelog:
  - Add Domains Page to system-config-selinux
  - Add ability to create dbus confined applications to polgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.62-1
changelog:
  - Update to upstream
          * Add btrfs to fixfiles from Dan Walsh.
          * Remove restorecond error for matching globs with multiple hard links
          and fix some error messages from Dan Walsh.
          * Make removing a non-existant module a warning rather than an error
            from Dan Walsh.
          * Man page fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.63-1
changelog:
  - Update to upstream
          * Fix transaction checking from Dan Walsh.
          * Make fixfiles -R (for rpm) recursive.
          * Make semanage permissive clean up after itself from Dan Walsh.
          * add /root/.ssh/* to restorecond.conf


author: Dan Walsh <dwalsh@redhat.com> 2.0.64-1
changelog:
  - Update to upstream
          * Keep setfiles from spamming console from Dan Walsh.
          * Fix chcat's category expansion for users from Dan Walsh.
  - Update po files
  - Fix sepolgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.68-1
changelog:
  - Fix location of man pages
  - Update to upstream
          * Modify setfiles to exclude mounts without seclabel option in
          /proc/mounts on kernels >= 2.6.30 from Thomas Liu.
          * Re-enable disable_dontaudit rules upon semodule -B from Christopher
          Pardy and Dan Walsh.
          * setfiles converted to fts from Thomas Liu.


author: Dan Walsh <dwalsh@redhat.com> 2.0.70-1
changelog:
  - Update to upstream
          * Modify restorecon to only call realpath() on user-supplied pathnames
          from Stephen Smalley.
          * Fix typo in fixfiles that prevented it from relabeling btrfs
            filesystems from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.71-1
changelog:
  - Fix chcat to report error on non existing file
  - Update to upstream
          * Modify setfiles/restorecon checking of exclude paths.  Only check
          user-supplied exclude paths (not automatically generated ones based on
          lack of seclabel support), don't require them to be directories, and
          ignore permission denied errors on them (it is ok to exclude a path to
          which the caller lacks permission).


author: Ville Skyttä <ville.skytta@iki.fi> - 2.0.71-9
changelog:
  - Don't try to remove restorecond after last erase (done already in %preun).
  - Ensure scriptlets exit with status 0.
  - Fix %post and %pr


author: Dan Walsh <dwalsh@redhat.com> 2.0.73-1
changelog:
  - Update to upstream
          * Add semanage dontaudit to turn off dontaudits from Dan Walsh.
          * Fix semanage to set correct mode for setrans file from Dan Walsh.
          * Fix malformed dictionary in portRecord from Dan Walsh.
          * Restore symlink handling support to restorecon based on a patch by
          Martin Orr.  This fixes the restorecon /dev/stdin performed by Debian
          udev scripts that was broken by policycoreutils 2.0.70.


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-1
changelog:
  - Update to upstream
          * Change semodule upgrade behavior to install even if the module
            is not present from Dan Walsh.
          * Make setfiles label if selinux is disabled and a seclabel aware
            kernel is running from Caleb Case.
          * Clarify forkpty() error message in run_init from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-8
changelog:
  - Add check to sandbox to verify save changes - Chris Pardy
  - Fix memory leak in restorecond - Steve Grubb


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-14
changelog:
  - Allow semanage -i and semanage -o to generate customization files.
  - semanage -o will generate a customization file that semanage -i can read and set a machines to the same selinux configuration


author: Dan Walsh <dwalsh@redhat.com> 2.0.76-1
changelog:
  - Update to upstream
          * Remove setrans management from semanage, as it does not work
            from Dan Walsh.
          * Move load_policy from /usr/sbin to /sbin from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.77-1
changelog:
  - Update to upstream
          * Fixed bug preventing semanage node -a from working
            from Chad Sellers
          * Fixed bug preventing semanage fcontext -l from working
            from Chad Sellers
  - Change semanage to use unicode


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-1
changelog:
  - Update to upstream
          * Remove non-working OUTFILE from fixfiles from Dan Walsh.
          * Additional exception handling in chcat from Dan Walsh.

          * fix sepolgen to read a "type 1403" msg as a policy load by Stephen
            Smalley <sds@tycho.nsa.gov>
          * Add support for Xen ocontexts from Paul Nuzzi.


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-14
changelog:
  - Add session capability to sandbox
  - sandbox -SX -H ~/.homedir -t unconfined_t -l s0:c15 /etc/gdm/Xsession


author: Dan Walsh <dwalsh@redhat.com> 2.0.81-4
changelog:
  - Update to upstream - sepolgen
          * Add since-last-boot option to audit2allow from Dan Walsh.
          * Fix sepolgen output to match what Chris expects for upstream
            refpolicy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-1
changelog:
  - Update to upstream
          * Add avc's since boot from Dan Walsh.
          * Fix unit tests from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-7
changelog:
  - Fix crash when args are empty
  Resolves: #582542
  - Fix semange to exit on bad options
  - Fix semanage dontaudit man page section
  Resolves: #582533


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-13
changelog:
  - Make semanage boolean work on disabled machines and during livecd xguest
  - Fix homedir and tmpdir handling in sandbox
  Resolves: #587263


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-17
changelog:
  - Fix policy tool to have correct name in menus
  - Fix seunshare to handle /tmp being in ~/home
  - Fix saving of altered files
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-23
changelog:
  - Fix seunshare translations
  - Fix seunshare to work on all arches
  - Fix icon for system-config-selinux
  Resolves: #595276


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-27
changelog:
  - Move genhomedircon.8 to same package as genhomedircon
  - Fix sandbox to pass unit test
  Resolves: #595796


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-1
changelog:
  - Update to upstream
          * Add sandbox support from Dan Walsh with modifications from Steve Lawrence.


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-17
changelog:
  - Apply patch to restorecond from Chris Adams, which will cause restorecond
  - to watch first user that logs in.


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-20
changelog:
  - Tighten down seunshare to create /tmp dir with sticky bit and MS_NODEV | MS_NOSUID | MS_NOEXEC;
  - Remove setsid on seunshare so ^c on sandbox will cause apps to exit
  - Add dbus-launch --exit-with-session so all processes launched within the sandbox exit with the sandbox
  - Clean up error handling so error will get sent back to sandbox tool


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-32
changelog:
  - Remove setuid flag and replace with file capabilities
  - Fix sandbox handling of files with spaces in them


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-33
changelog:
  - Move /etc/pam.d/newrole in to polcicycoreutils-newrole
  - Additional capability checking in sepolgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-3
changelog:
  - Polgengui raises the wrong type of exception.  #471078
  - Change semanage to not allow it to semanage module -D
  - Change setsebool to suggest run as root on failure


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-10
changelog:
  - Cleaup selinux-polgengui to be a little more modern, fix comments and use selected name
  - Cleanup chcat man page


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-13
changelog:
  - Rewrite seunshare to make sure /tmp is mounted stickybit owned by root
  - Only allow names in polgengui that contain letters and numbers
  - Fix up node handling in semanage command
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-16
changelog:
  - Require python-IPy for policycoreutils-python package
  - Fixes for sepologen
    - Usage statement needs -n name
    - Names with _ are being prevented
    - dbus apps should get _chat interface


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-18
changelog:
  - put back in old handling of -T in sandbox command
  - Put back setsid in seunshare
  - Fix rsync to maintain times


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-20
changelog:
  - Change sepolgen-ifgen to search all available policy files
  - Exit in restorecond if it can not find a UID in the passwd database


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-21
changelog:
  - change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_*
  - This will allow default sandboxes to work on NFS homedirs without allowing
    access to homedir data


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-23
changelog:
  - Fix sepolgen to generate network polcy using generic_if and genric_node versus all_if and all_node


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-6
changelog:
  - Apply patches from Christoph A.
    * fix sandbox title
    * stop xephyr from li
  - Also ignore errors on sandbox include of directory missing files


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-10
changelog:
  - Allow semodule to pick alternate root for selinux files
  - Add ~/.config/* to restorcond_user.conf, so restorecond will watch for mislabeled files in this directory.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-16
changelog:
  - Add -C option to sandbox and seunshare to maintain capabilities, otherwise
  the bounding set will be dropped.
  - Change --cgroups short name -c rather then -C for consistancy
  - Fix memory and fd leaks in seunshare


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-17
changelog:
  - Add -k qualifier to seunshare to have it attempt to kill all processes with
  the matching MCS label.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-18
changelog:
  - Change seunshare to send kill signals to the childs session.
  - Also add signal handler to catch sigint, so if user enters ctrl-C sandbox will shutdown.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  2.1.4 2011-08-17
          * run_init: clarification of the usage in the
          * semanage: fix usage header around booleans
          * semanage: remove useless empty lines
          * semanage: update man page with new examples
          * semanage: update usage text
          * semanage: introduce file context equivalencies
          * semanage: enable and disable modules
          * semanage: output all local modifications
          * semanage: introduce extraction of local configuration
          * semanage: cleanup error on invalid operation
          * semanage: handle being called with no arguments
          * semanage: return sooner to save CPU time
          * semanage: surround getopt with try/except
          * semanage: use define/raise instead of lots of
          * semanage: some options are only valid for
          * semanage: introduce better deleteall support
          * semanage: do not allow spaces in file
          * semanage: distinguish between builtin and local permissive
          * semanage: centralized ip node handling
          * setfiles: make the restore function exclude() non-static
          * setfiles: use glob to handle ~ and
          * fixfiles: do not hard code types
          * fixfiles: stop trying to be smart about
          * fixfiles: use new kernel seclabel option
          * fixfiles: pipe everything to cat before sending
          * fixfiles: introduce /etc/selinux/fixfiles_exclude_dirs
          * semodule: support for alternative root paths

  2.1.3 2011-08-03
          * semanage: fix indention
          * semodule_package: fix man page typo
          * semodule_expand: update man page with -a
          * semanage: handle os errors
          * semanage: fix traceback with bad options
          * semanage: show usage on -h or --help
          * semanage: introduce more deleteall options
          * semanage: verify ports < 65536
          * transaction into semanageRecords
          * make get_handle a method of semanageRecords
          * remove a needless blank line
          * make process_one error if not initialized correctly
          * fixfiles: correct usage for r_opts.rootpath
          * put -p in help for restorecon and
          * fixfiles: do not try to only label
          * fixfiles clean up /var/run and /var/lib/debug
          * fixfiles delete tmp sockets and pipes rather
          * fixfile use find -delete instead of pipe
          * chcat man page typo
          * add man page for genhomedircon
          * setfiles fix typo
          * setsebool should inform users they need to
          * setsebool typos
          * open_init_tty man page typos
          * Don't add user site directory to sys.path
          * newrole retain CAP_SETPCAP

  2.1.2 2011-08-02
          * seunshare: define _GNU_SOURCE earlier
          * make ignore_enoent do something
          * restorecond: first user logged in is not noticed
          * Repo: update .gitignore

  2.1.1 2011-08-01
          * Man page updates
          * restorecon fix for bad inotify assumptions

  2.1.0 2011-07-27
          * Release, minor version bump


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  -Update to upstream
     * policycoreutils
          * setfiles: Fix process_glob to handle error situations
          * sandbox: Allow seunshare to run as root
          * sandbox: trap sigterm to make sure sandbox
          * sandbox: pass DPI from the desktop
          * sandbox: seunshare: introduce helper spawn_command
          * sandbox: seunshare: introduce new filesystem helpers
          * sandbox: add -C option to not drop
          * sandbox: split seunshare caps dropping
          * sandbox: use dbus-launch
          * sandbox: numerous simple updates to sandbox
          * sandbox: do not require selinux context
          * sandbox: Makefile: new man pages
          * sandbox: rename dir to srcdir
          * sandbox: allow users specify sandbox window size
          * sandbox: check for paths up front
          * sandbox: use defined values for paths rather
          * sandbox: move seunshare globals to the top
          * sandbox: whitespace fix
          * semodule_package: Add semodule_unpackage executable
          * setfiles: get rid of some stupid globals
          * setfiles: move exclude_non_seclabel_mounts to a generic location
     * sepolgen
          * refparser: include open among valid permissions
          * refparser: add support for filename_trans rules


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-4
changelog:
  - Maintain the LANG environment Variable into the sandbox
  - Change restorecon/setfiles to only change type part of the context unless
    -f qualifier is given


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  -Update to upstream
      policycoreutils-2.1.6
          * sepolgen-ifgen: new attr-helper does something
          * audit2allow: use alternate policy file
          * audit2allow: sepolgen-ifgen use the attr helper
          * setfiles: switch from stat to stat64
          * setfiles: Fix potential crash using dereferenced ftsent
          * setfiles: do not wrap * output at 80 characters
          * sandbox: add -Wall and -Werror to makefile
          * sandbox: add sandbox cgroup support
          * sandbox: rewrite /tmp handling
          * sandbox: do not bind mount so much
          * sandbox: add level based kill option
          * sandbox: cntrl-c should kill entire process control group
          * Create a new preserve_tunables flag in sepol_handle_t.
          * semanage: show running and disk setting for booleans
          * semanage: Dont print heading if no items selected
          * sepolgen: audit2allow is mistakakenly not allowing valid module names
          * semanage: Catch RuntimeErrors, that can be generated when SELinux is disabled
          * More files to ignore
          * tree: default make target to all not install
          * sandbox: do not load unused generic init functions
      sepolgen-1.1.2
          * src: sepolgen: add attribute storing infrastructure
          * Change perm-map and add open to try to get better results on
          * look for booleans that might solve problems
          * sepolgen: audit2allow is mistakakenly not allowing valid module names
          * tree: default make target to all not install


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-5
changelog:
  - A couple of minor coverity fixes for a potential leaked file descriptor
  - An an unchecked return code.
  - Add ~/.local/share/* to restorecond_user watches


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Upgrade to policycoreutils upstream
          * sandbox: Maintain the LANG environment into the sandbox
          * audit2allow: use audit2why internally
          * fixfiles: label /root but not /var/lib/BackupPC
          * semanage: update local boolean settings is dealing with localstore
          * semanage: missing modify=True
          * semanage: set modified correctly
          * restorecond: make restorecond dbuss-able
          * restorecon: Always check return code on asprintf
          * restorecond: make restorecond -u exit when terminal closes
          * sandbox: introduce package name and language stuff
          * semodule_package: remove semodule_unpackage on clean
          * fix sandbox Makefile to support DESTDIR
          * semanage: Add -o description to the semanage man page
          * make use of the new realpath_not_final function
          * setfiles: close /proc/mounts file when finished
          * semodule: Document semodule -p in man page
          * setfiles: fix use before initialized
          * restorecond: Add .local/share as a directory to watch
  - Upgrade to sepolgen upstream
          * Ignore permissive qualifier if found in an interface
          * Return name field in avc data


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-4
changelog:
  - sandbox init script should always return 0
  - sandbox command needs to check range of categories and report error if not big enough


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-6
changelog:
  - Add listing of distribution equivalence class from semanage fcontext -l
  - Add checking to semanage fcontext -a to guarantee a file specification will not be masked by an equivalence


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-7
changelog:
  - Fix dpi handling in sandbox
  - Make sure semanage fcontext -l -C prints if only local equiv have changed


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Upgrade to upstream
          * sandbox: move sandbox.conf.5 to just sandbox.5
          * po: Makefile use -p to preserve times to allow multilib simultatious installs
          * of po files
          * sandbox: Allow user to specify the DPI value for X in a sandbox
          * sandbox: make sure the domain launching sandbox has at least 100 categories
          * sandbox: do not try forever to find available category set
          * sandbox: only complain if sandbox unable to launch
          * sandbox: init script run twice is still successful
          * semanage: print local and dristo equiv rules
          * semanage: check file equivalence rules for conflict
          * semanage: Make sure semanage fcontext -l -C prints even if local keys
          * are not defined
          * semanage: change src,dst to target,substitute for equivalency
          * sestatus: Updated sestatus and man pages.
          * Added SELinux config file man page.
          * add clean target to man Makefile


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  -Update to upstream
  - sepolgen
          * better analysis of why things broke
  - policycoreutils
          * Remove excess whitespace
          * sandbox: Add back in . functions to sandbox.init script
          * Fix Makefile to match other policycoreutils Makefiles
          * semanage: drop unused translation getopt


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
changelog:
  - Fix the handling of namespaces in seunshare/sandbox.
  - Currently mounting of directories within sandbox is propogating to the
  - parent namesspace.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-11
changelog:
  - restorecond fixes:
    Stop using depracated g_io interfaces
    Exit with non zero exit code if wrong options given
    Add -h option


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-17
changelog:
  - Change semanage to produce proper audit records for Common Criteria
  - Cleanup packaging for usrmove


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-22
changelog:
  - Change to use new selinux_binary_policy_path()
  - Add systemd_passwd_agent_exec($1), and systemd_read_fifo_file_passwd_run($1) to templates for _admin interface


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream
    - policycoreutils
          * sandbox: do not propogate inside mounts outside
          * sandbox: Removing sandbox init script, should no longer be necessary
          * restorecond: Stop using deprecated interfaces for g_io
          * semanage: proper auditting of user changes for LSPP
          * semanage: audit message to show what record(s) and item(s) have chaged
          * scripts: Update Makefiles to handle /usrmove
          * mcstrans: Version should have been bumped on last check in
          * seunshare: Only drop caps not the Bounding Set from seunshare
          * Add bash-completion scripts for setsebool and semanage
          * newrole: Use correct capng calls in newrole
          * Fix infinite loop with inotify on 2.6.31 kernels
          * fix ftbfs with hardening flags
          * Only run setfiles if we found read-write filesystems to run it on
          * update .po files
          * remove empty po files
          * do not fail to install if unable to make load_policy lnk file

     - sepolgen
          * Fix dead links to www.nsa.gov/selinux
          * audit.py Dont crash if empty data is passed to sepolgen
          * do not use md5 when calculating hash signatures
          * fix detection of policy loads


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-6
changelog:
  - Rebuild to get latest libsepol which fixes the file_name transition problems
  - Update translations
  - Fix calls to close fd for restorecond


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-12
changelog:
  - Add -N qualifier to semanage, setsebool and semodule to allow you to update
  - policy without reloading it into the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-15
changelog:
  - Allow stream sock_files to be stored in /tmp and etc_rw_t directories by sepolgen
  - Trigger on selinux-policy needs to change to selinux-policy-devel
  - Update translations
  - Fix semanage dontaudit off/on exception


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream
    - policycoreutils
          * restorecond: wrong options should exit with non-zero error code
          * restorecond: Add -h option to get usage command
          * resorecond: user: fix fd leak
          * mcstrans: add -f to run in foreground
          * semanage: fix man page range and level defaults
          * semanage: bash completion for modules should include -a,-m, -d
          * semanage: manpage update for -e
          * semanage: dontaudit off should work
          * semanage: locallist option does not take an argument
          * sepolgen: Make use of setools optional within sepolgen
     - sepolgen
          * Make use of setools optional within sepolgen
          * We need to support files that have a + in them


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-4
changelog:
  - Fix restorecon to generate a better percentage of completion on restorecon -R /.
  - Have audit2allow look at the constaint violation and tell the user whether it
  - is because of user,role or level


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-6
changelog:
  - Change polgen to generate dbus apps as optional so they can compile on minimal policy system, patch from Miroslav Grepl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream
          * genhomedircon: manual page improvements
          * setfiles/restorecon minor improvements
          * run_init: If open_init_pty is not available then just use exec
          * newrole: do not drop capabilities when newrole is run as
          * restorecon: only update type by default
          * scripts: Don't syslog setfiles changes on a fixfiles restore
          * setfiles: do not syslog if no changes
          * Disable user restorecond by default
          * Make restorecon return 0 when a file has changed context
          * setfiles: Fix process_glob error handling
          * semanage: allow enable/disable under -m
          * add .tx to gitignore
          * translations: commit translations from Fedora community
          * po: silence build process
          * gui: Checking in policy to support polgengui and sepolgen.
          * gui: polgen: search for systemd subpackage when generating policy
          * gui: for exploring booleans
          * gui: system-config-selinux gui
          * Add Makefiles to support new gui code
          * gui: remove lockdown wizard
          * return equivalency records in fcontext customized
          * semanage: option to not load new policy into kernel after
          * sandbox: manpage update to describe standard types
          * setsebool: -N should not reload policy on changes
          * semodule: Add -N qualifier to no reload kernel policy
          * gui: polgen: sort selinux types of user controls
          * gui: polgen: follow symlinks and get the real path to
          * gui: Fix missing error function
          * setfiles: return errors when bad paths are given
          * fixfiles: tell restorecon to ignore missing paths
          * setsebool: error when setting multiple options
          * semanage: use boolean subs.
          * sandbox: Make sure Xephyr never listens on tcp ports
          * sepolgen: return and output constraint violation information
          * semanage: skip comments while reading external configuration files
          * restorecond: relabel all mount runtime files in the restorecond example
          * genhomedircon: dynamically create genhomedircon
          * Allow returning of bastard matches
          * sepolgen: return and output constraint violation information
          * audit2allow: one role/type pair per line


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-3
changelog:
  - Allow fixfiles to specify -v, so they can get verbosity rather then progress.
  - Fix load_file Makefile to use SBINDIR rather then real OS.
  - Fix man pages in setfiles and restorecon to reflect what happens when you relabel the entire OS.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-7
changelog:
  - Fix manpage generation, missing import
  - Add equiv_dict to get samba booleans into smbd_selinux
  - Add proper translations for booleans and remove selinux.tbl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-8
changelog:
  - Fix typo in preunstall line for restorecond
  - Add mgrepl patch to consolidate file context generated by sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-9
changelog:
  - Fix semanage to verify that types are appropriate for commands.
    * Patch initiated by mgrepl
    * Fixes problem of specifying non file_types for fcontext, or not port_types for semanage port


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-10
changelog:
  - Update sepolicy generate with patch to create spec file and man page.
  - Patch initiated by Miroslav Grepl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-12
changelog:
  - Add missing spec.py from templates directory needed for sepolicy generate
  - Add /var/tmp as collection point for sandbox apps.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-14
changelog:
  - Add role_allow to sepolicy.search python bindings, this allows us to remove last requirement for setools-cmdline in gui tools.
  - Fix man page generator.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-16
changelog:
  - Add Miroslav Grepl patch to generate html man pages
  - Update Translations
  - Add option to sandbox to shred files before deleting


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-19
changelog:
  - Change sepolicy python bindings to have python pick policy file, fixes weird memory problems in sepolicy network


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-24
changelog:
  - Fix manpage to generate proper man pages for alternate policy,
  basically allow me to build RHEL6 man pages on a Fedora 18 box, as long as
  I pull the policy, policy.xml and file_contexts and file_contexts.homedir


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-25
changelog:
  - Remove run_init, no longer needed with systemd.
  - Fix sepolicy generate to not include subdirs in generated fcontext file.  (mgrepl patch)


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-26
changelog:
  - Fix semanage booleans -l, move more boolean_dict handling into sepolicy
  - Update translations
  - Fixup sepolicy generate to discover /var/log, /var/run and /var/lib directories if they match the name
  - Fix kill function call should indicate signal_perms not kill capability
  - Error out cleanly in system-config-selinux, if it can not contact XServer


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-27
changelog:
  - Only report restorecon warning for missing default label, if not running
  recusively
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-37
changelog:
  - Move sepogen python bindings back into policycoreutils-python out of -devel, since sepolicy is using the


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-41
changelog:
  - Add --path as a parameter to sepolicy generate
  - Print warning message if program does not exists when generating policy, and do not attempt to run nm command
  - Fix sepolicy generate -T to not take an argument, and supress the help message
  - Since this is really just a testing tool


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-44
changelog:
  - Additional fixes for disabled SELinux Box
  - system-config-selinux no longer relies on lokkit for /etc/selinux/config


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-45
changelog:
  - Apply patch from Miroslav to display proper range description in man pages g
  - Should print warning on missing default label when run in recusive mode iff
  - Remove extra -R description, and fix recursive description


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-46
changelog:
  - sepolicy transition was blowing up. Also cleanup output when only source is specified.
  - sepolicy generate should allow policy modules names that include - or _


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-50
changelog:
  - Update translations
  - update sepolicy manpage to generate fcontext equivalence data and to list
  default file context paths.
  - Add ability to generate policy for confined admins and domains like puppet.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-51
changelog:
  - Update translations
  - Fix sepolicy booleans to handle autogenerated booleans descriptions
  - Cleanups of sepolicy manpage
  - Fix crash on git_shell man page generation


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-52
changelog:
  - Update to latest patches from eparis/Upstream
  -    secon: add support for setrans color information in prompt output
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-53
changelog:
  - Update with Miroslav patch to handle role attributes
  - Update Translations
  - import sepolicy will only throw exception on missing policy iff selinux is enabled


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-55
changelog:
  - Update Translations
  - Fix handling of semanage generate --cgi -n MODULE PATHTO/CGI
  -   This fixes the spec file and script file getting wrong names for modules and types.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-56
changelog:
  -  Additional changes for bash completsion and generate man page to match the w
  -  Add newtype as a new qualifier to sepolicy generate.  This new mechanism wil
  -  a policy write to generate types after the initial policy has been written a
  -  will autogenerate all of the interfaces.
  -  I also added a -w options to allow policy writers from the command line to s
  -  the writable directories of files.
  -
  -  Modify network.py to include interface definitions for newly created port type
  -  Standardize of te_types just like all of the other templates.

  -  Change permissive domains creation to raise exception if sepolgen is not ins
  -  get_te_results no longer needs or uses the opts parameter.
  -  The compliler was complaining so I just removed the option.
  -  Start returning analysis data for audit2allow


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-57
changelog:
  - Update to latest patches from eparis/Upstream
  - fixfiles onboot will write any flags handed to it to /.autorelabel.
  -   * Patch sent to initscripts to have fedora-autorelabel pass flags back to fixfiles restore
  -   * This should allow fixfiles -F onboot, to force a hard relabel.
  - Add -p to show progress on full relabel.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-58
changelog:
  - Reorginize sepolicy so all get_all functions are in main module
  - Add -B capability to fixfiles onboot and fixfiles restore, basically searches for all files created since the last boot.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-1
changelog:
  - Update to upstream
          * setfiles: estimate percent progress
          * load_policy: make link at the destination directory
          * Rebuild polgen.glade with glade-3
          * sepolicy: new command to unite small utilities
          * sepolicy: Update Makefiles and po files
          * sandbox: use sepolicy to look for sandbox_t
          * gui: switch to use sepolicy
          * gui: sepolgen: use sepolicy to generate
          * semanage: use sepolicy for boolean dictionary
          * add po file configuration information
          * po: stop running update-po on all
          * semanage: seobject verify policy types before allowing you to assign them.
          * gui: Start using Popen, instead of os.spawnl
          * sandbox: Copy /var/tmp to /tmp as they are the same inside
          * qualifier to shred content
          * semanage: Fix handling of boolean_sub names when using the -F flag
          * semanage: man: roles instead of role
          * gui: system-config-selinux: Catch no DISPLAY= error
          * setfiles: print error if no default label found
          * semanage: list logins file entries in semanage login -l
          * semanage: good error message is sepolgen python module missing
          * gui: system-config-selinux: do not use lokkit
          * secon: add support for setrans color information in prompt output
          * restorecond: remove /etc/mtab from default list
          * gui: If you are not able to read enforcemode set it to False
          * genhomedircon: regenerate genhomedircon more often
          * restorecond: Add /etc/udpatedb.conf to restorecond.conf
          * genhomedircon generation to allow spec file to pass in SEMODULE_PATH
          * fixfiles: relabel only after specific date
          * po: update translations
          * sandbox: seunshare: do not reassign realloc value
          * seunshare: do checking on setfsuid
          * sestatus: rewrite to shut up coverity


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-4
changelog:
  - Revert some changes which are causing the wrong policy version file to be created
  - Switch sandbox to start using openbox rather then matchbox
  - Make sepolgen a symlink to sepolicy
  - update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-6
changelog:
  - Fix newrole to retain cap_audit_write when compiled with namespace, also
  do not drop capabilities when run as root.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-7
changelog:
  - Add --root/-r flag to sepolicy manpage,
  - This allows us to generate man pages on the fly in the selinux-policy build


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-8
changelog:
  - Sepolixy should not throw an exception on an SELinux disabled machine
  - Switch from using console app to using pkexec, so we will work better
  with policykit.
  - Add missing import to fix system-config-selinux startup
  - Add comment to pamd files about pam_rootok.so
  - Fix sepolicy generate to not comment out the first line


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-10
changelog:
  - Fix sepolicy to be able to work on an SELinux disabled system.
  - Needed to be able to build man pages in selinux-policy package


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-12
changelog:
  - Do not load interface file by default when sepolicy is called, mov get_all_methods to the sepolicy package


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.1.14-13
changelog:
  - remove vendor tag from desktop file. https://fedorahosted.org/fpc/ticket/247
  - clean up spec to follow current guidelines


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-14
changelog:
  - Allow users with symlinked homedirs to work. call realpath on homedir
  - Fix sepolicy reorganization of helper functions.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-20
changelog:
  - Mention creation of permissive domains in sepolicy generate man page
  - Change sepolicy manpage to use shortname with an "_" to stop accidently grabbing unrelated types for a domain.
  - Fix audit2allow to show better information on constraint violations.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-21
changelog:
  - sepolicy generate should look for booleans that effect equivalence names, and add them to the man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-22
changelog:
  - Fix newrole to not drop capabilities from the bounding set.
  - Stop dropping capabilities from its children.
  - Add better error messages.
  - Change location of bash_completion files to /usr/share/bash-completion/compl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-23
changelog:
  - sepolicy manpage:
  -   use nroff instead of man2html
  -   Remove checking for name of person who created the man page
  - audit2allow
  -   Fix output to show the level that is different.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-26
changelog:
  - Can not unshare IPC in sandbox, since it blows up Xephyr
  - Remove bogus error message sandbox about reseting setfsuid


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-28
changelog:
  - Fix audit2allow output to better align analysys with the allow rules
  - Apply Miroslav Grepl patch to clean up sepolicy generate usage
  - Apply Miroslav Grepl patch to fixupt handing of admin_user generation
  - Update Tranlslations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-30
changelog:
  - Add buildrequires for OpenBox to prevent me from accidently building into RHEL7
  - Add support for returning alias data to sepolicy.info python bindings


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-31
changelog:
  - Add post install scripts for gui to make sure Icon Cache is refreshed.
  - Fix grammar issue in secon man page
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-32
changelog:
  - Move sepolicy to policycoreutils-devel pacage, since most of it is used for devel
  - Apply Miroslav Grepl Patches for sepolicy
  -- Fix generate mutually groups option handling
  -- EUSER is used for existing policy
  -- customize options can be used together with admin_domain option
  -- Fix manpage.py to generate correct man pages for SELinux users
  -- Fix policy *.te file generated by customize+writepaths options
  -- Fix install script for confined_admin option


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-34
changelog:
  - Update translations
  - Add patch inspired by Miroslav Grepl to add extended information for sepolicy interface command.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-35
changelog:
  - Update translations
  - Add patch by Miroslav Grepl to add compile test for sepolicy interface command.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-37
changelog:
  - Fix exceptionion hanling in audit2allow -o
  - Generate Man pages for everydomain, not just ones with exec_t entrypoints
  - sepolicy comunicate should return ValueError not TypeError
  - Trim header line in sepolicy manpage to use less space
  - Add missing options to restorecon man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-38
changelog:
  - No longer run sepolgen-ifgen at install time.
  - Run sepolgen-ifgen in audit2allow and sepolicy generate, if needed.
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-39
changelog:
  - Run sepolgen-ifgen in audit2allow and sepolicy generate, if needed, first time
  - Add  Sven Vermeulen  patches to cleanup man pages


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-40
changelog:
  - Only require selinux-policy-devel for policycoreutils-devel, this will shrink the size of the livecd.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-42
changelog:
  - Add support for Xephyr -resizable, so sandbox can now resize window
  - Add support for compressed policy.xml
  - Miroslav Grepl patch to allow sepolicy interface on individual interface fil
  - Also add capability to test interfaces for correctness.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-44
changelog:
  - Fix sepolicy-generate man page to clear up options/policy type
  - Add Miroslav Grepl to not generate man page when doing
    sepolicy generate --customize
  - Add support for executing semanage user within spec file
  - Fix generation of confined admin domains, to handle booleans properly.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-46
changelog:
  - Fix the name of the spec file generated in the build script
  - Add mgrepl patch to support argparse for semanage command parsing


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-48
changelog:
  - Fix audit2allow -o to open file for append
  - Fix the name of the spec file generated in the build script


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-50
changelog:
  - Fix sepolicy generate --confined_admin to generate tunables
  - Add new interface to generate entrypoints for use with new gui


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-56
changelog:
  - Fix semanage export/import commands
  - Fix semange module command
  - Remove --version option from sandbox


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-57
changelog:
  - Remove requires for systemd-sysv
  - Move systemd-units require to restorecond section
  - Update Tranlasions
  - More sepolicy interfaces for gui
  - Cleanup man pages for sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-63
changelog:
  - Update sepolicy gui.
  - Error out of you call sepolicy gui without policycoreutils-gui package installed
  - Fix semanage login -d command
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-65
changelog:
  - Do not generate shell script or spec file for sepolicy generate --newtype
  - Update translations
  - Fix sepolicy generate --admin_user man page again
  - Fix setsebool to print less verbose error messages by default, add -V for ve


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-68
changelog:
  - Fix bugs introduced by previous patch.  semanage port
  - Update Translations
  - Add test suite for sepolicy command lines


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-75
changelog:
  - Update sepolicy gui code, cleanups and add file transition tab
  - Fix semanage fcontext -a --ftype code to work.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-79
changelog:
  - Add Miroslav Grepl setsebool patch to give better error message on bad boolean names
  - Additional help screens for sepolicy gui


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-80
changelog:
  - Random fixes for sepolicy gui
    * Do not prompt for password until you make a change
    * Add user mappings and selinux users page
    * lots of code cleanup

  - Verify homedir is owned by user before mounting over it with seunshare
  - Fix fixfiles to handle Relabel properly
  - Fix semanage fcontext -e / command to allow "/"


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-82
changelog:
  - Improvements to sepolicy gui
    - Add more help information
    - Cleanup code
    - Add deny_ptrace on lockdown screen
    - Make unconfined/permissivedomains lockdown work
    - Add more support for file equivalency


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-85
changelog:
  - Fixes for fixfiles
    * exclude_from_dirs should apply to all types of restorecon calls
    * fixfiles check now works
    * exit with the correct status

  - semanage no longer import selinux


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-86
changelog:
  - sepolicy gui
    - mgrepl added delete screens for users and login
    - Fix lots of bugs.
  - Update Translations.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-88
changelog:
  - Cleanup errors found by pychecker
  - Apply patch from Michal Trunecka to allow restorecon to handle {} in globs


author: Dan Walsh <dwalsh@redhat.com> - 2.2-1
changelog:
  - Update to upstream 
          * Properly build the swig exception file from Laurent Bigonville.
          * Fix man pages from Laurent Bigonville.
          * Support overriding PATH and INITDIR in Makefile from Laurent Bigonville.
          * Fix LDFLAGS usage from Laurent Bigonville.
          * Fix init_policy warning from Laurent Bigonville.
          * Fix semanage logging from Laurent Bigonville.
          * Open newrole stdin as read/write from Sven Vermeulen.
          * Fix sepolicy transition from Sven Vermeulen.
          * Support overriding CFLAGS from Simon Ruderich.
          * Create correct man directory for run_init from Russell Coker.
          * restorecon GLOB_BRACE change from Michal Trunecka.
          * Extend audit2why to report additional constraint information.
          * Catch IOError errors within audit2allow from Dan Walsh.
          * semanage export/import fixes from Dan Walsh.
          * Improve setfiles progress reporting from Dan Walsh.
          * Document setfiles -o option in usage from Dan Walsh.
          * Change setfiles to always return -1 on failure from Dan Walsh.
          * Improve setsebool error r eporting from Dan Walsh.
          * Major overhaul of gui from Dan Walsh.
          * Fix sepolicy handling of non-MLS policy from Dan Walsh.
          * Support returning type aliases from Dan Walsh.
          * Add sepolicy tests from Dan Walsh.
          * Add org.selinux.config.policy from Dan Walsh.
          * Improve range and user input checking by semanage from Dan Walsh.
          * Prevent source or target arguments that end with / for substitutions from Dan Walsh.
          * Allow use of <<none>> for semanage fcontext from Dan Walsh.
          * Report customized user levels from Dan Walsh.
          * Support deleteall for restoring disabled modules from Dan Walsh.
          * Improve semanage error reporting from Dan Walsh.
          * Only list disabled modules for module locallist from Dan Walsh.
          * Fix logging from Dan Walsh.
          * Define new constants for file type character codes from Dan Walsh.
          * Improve bash completions from Dan Walsh.
          * Convert semanage to argparse from Dan Walsh (originally by Dave Quigley).
          * Add semanage tests from Dan Walsh.
          * Split semanage man pages from Dan Walsh.
          * Move bash completion scripts from Dan Walsh.
          * Replace genhomedircon script with a link to semodule from Dan Walsh.
          * Fix fixfiles from Dan Walsh.
          * Add support for systemd service for restorecon from Dan Walsh.
          * Spelling corrections from Dan Walsh.
          * Improve sandbox support for home dir symlinks and file caps from Dan Walsh.
          * Switch sandbox to openbox window manager from Dan Walsh.
          * Coalesce audit2why and audit2allow from Dan Walsh.
          * Change audit2allow to append to output file from Dan Walsh.
          * Update translations from Dan Walsh.
          * Change audit2why to use selinux_current_policy_path from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.2-2
changelog:
  - Shift around some of the files to more appropriate packages.
          * semodule_* packages are required for devel.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-1
changelog:
  - Speed up startup time of sepolicy gui
  - Clean up ports screen to only show enabled ports.
  - Update to upstream 
          * Remove import policycoreutils.default_encoding_utf8 from semanage from Dan Walsh.
          * Make yum/extract_rpms optional for sepolicy generate from Dan Walsh.
          * Add test suite for audit2allow and sepolgen-ifgen from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.3-1
changelog:
  - Update to upstream 
          * Apply polkit check on all dbus interfaces and restrict to active user from Dan Walsh.
          * Fix typo in sepolicy gui dbus.relabel_on_boot call from Dan Walsh.
  - Apply Miroslav Grepl patch to fix TEMPLATETYPE_domtrans description in sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-1
changelog:
  - Update to upstream 
          * Revert automatic setting of serange and seuser in seobject; was breaking non-MLS systems.
  - Add patches for sepolicy gui from mgrepl to
    Fix advanced_item_button_push() to allow to select an application in advanced search menu
    Fix previously_modified_initialize() to show modified changes properly for all selections


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-5
changelog:
  - Fix semanage man page description of import command
  - Fix policy kit file to allow changing to permissive mode


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-6
changelog:
  - Fix sepolicy gui selection for advanced screen
  - Update Translations
  - Move requires checkpolicy requirement into policycoreutils-python


author: Dan Walsh <dwalsh@redhat.com> - 2.2.5-3
changelog:
  - Add Miroslav patch to
  - Fix previously_modified_initialize() to show modified changes properly for all selections


author: Dan Walsh <dwalsh@redhat.com> - 2.2.5-8
changelog:
  - Update Translations
  - Make selinux-policy build working also on another architectures related to s
  - Miroslav grepl patch to fix the creation of man pages on different architectures.
  - Add ability to list the actual active modules
  - Fix spelling mistake on sesearch in generate man pages.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.5-9
changelog:
  - mgrepl [PATCH] Deleteall user customization fails if there is a user used
  - for the default login. We do not want to fail on it and continue to delete
  - customizations for users which are not used for default login.


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.5-10
changelog:
  - Add support for Fedora21 html manpage structure
  - Fix broken dependencies to require only usermode-gtk


author: Miroslav Grepl <mgreplh@redhat.com> - 2.2.5-12
changelog:
  - Add policycoreutils-rhat-revert.patch to revert the last two commits to make build working
  - Add 0001-Fix-STANDARD_FILE_CONTEXT-section-in-man-pages patch


author: Dan Walsh <dwalsh@redhat.com> - 2.3-1
changelog:
  - Update to upstream 
          * Add -P semodule option to man page from Dan Walsh.
          * selinux_current_policy_path will return none on a disabled SELinux system from Dan Walsh.
          * Add new icons for sepolicy gui from Dan Walsh.
          * Only return writeable files that are enabled from Dan Walsh.
          * Add domain to short list of domains, when -t and -d from Dan Walsh.
          * Fix up desktop files to match current standards from Dan Walsh.
          * Add support to return sensitivities and categories for python from Dan Walsh.
          * Cleanup whitespace from Dan Walsh.
          * Add message to tell user to install sandbox policy from Dan Walsh.
          * Add systemd unit file for mcstrans from Laurent Bigonville.
          * Improve restorecond systemd unit file from Laurent Bigonville.
          * Minor man pages improvements from Laurent Bigonville.


author: Dan Walsh <dwalsh@redhat.com> - 2.3-3
changelog:
  - Update Miroslav Grepl Patches
    * If there is no executable we don't want to print a part of STANDARD FILE CON
    * Add-manpages-for-typealiased-types
    * Make fixfiles_exclude_dirs working if there is a substituion for the given d


author: Miroslav Grepl <mgrepl@redhat.com> - 2.3-7
changelog:
  - Examples are no longer in the main semanage man page (#1084390)
  - Add support for Fedora22 man pages. We need to fix it to not using hardcoding.
  - Print usage for all mutually exclusive options.
  - Fix selinux man page to refer seinfo and sesearch tools.


author: Miroslav Grepl <mgrepl@redhat.com> - 2.3-11
changelog:
  - Improvements to audit2allow from rhallise@redhat.com
      * Check for mislabeled files.
      * Check for base file use and
      * Suggest writable files as alternatives


author: Dan Walsh <dwalsh@redhat.com> - 2.3-14
changelog:
  - Audit2allow will check for mislabeled files, and tells user to fix the label.
  - Also checks for basefiles and suggests creating a different label.
  - Patch from Ryan Hallisey


author: Petr Lautrbach <plautrba@redhat.com> 2.3-15
changelog:
  - We need to cover file_context.XXX.homedir to have fixfiles with exclude_dirs working correctly
  - Use dnf instead of yum (#1156547)


author: Petr Lautrbach <plautrba@redhat.com> 2.3-16
changelog:
  - Temporary removed Requires:audit-libs-python from policycoreutils-python3 subpackage (#1195139)
  - Simplication of sepolicy-manpage web functionality (#1193552)


author: Petr Lautrbach <plautrba@redhat.com> 2.4-0.6
changelog:
  - policycoreutils: semanage: update to new source policy infrastructure
  - semanage: move permissive module creation to /tmp


author: Petr Lautrbach <plautrba@redhat.com> 2.4-5
changelog:
  - Move python utilities from -python to -python-utilities
  - All scripts originally from policycoreutils-python use python 3 now


author: Petr Lautrbach <plautrba@redhat.com> 2.4-12
changelog:
  - Fix several semanage issue (#1247714)
  - Decode output from subprocess, if error occurred (#1247039)


author: Petr Lautrbach <plautrba@redhat.com> 2.4-18
changelog:
  - Improve sepolicy command line interface
  - Fix sandbox to propagate specified MCS/MLS Security Level. (#1279006)
  - Fix 'audit2allow -R' (#1280418)


author: Petr Lautrbach <plautrba@redhat.com> - 2.4-20
changelog:
  - Fix 'semanage permissive -l' subcommand (#1286325)
  - Several 'sepolicy gui' fixes (#1281309,#1281309,#1282382)


author: Petr Lautrbach <plautrba@redhat.com> 2.5-2
changelog:
  - policycoreutils/sepolicy: selinux_server.py to use GLib instead of gobject
  - policycoreutils-gui requires python-slip-dbus (#1314685)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-10
changelog:
  - Fix typos in semanage manpages
  - Fix the documentation of -l,--list for semodule
  - Minor fix in a French translation
  - Fix the extract example in semodule.8
  - Update sandbox.8 man page
  - Remove typos from chcat --help
  - sepolgen: Remove additional files when cleaning


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-12
changelog:
  - open_init_pty: Do not error on EINTR
  - Fix [-s STORE] typos in semanage
  - Update sandbox types in sandbox manual
  - Update translations


author: Petr Lautrbach <plautrba@redhat.com> 2.5-16
changelog:
  - Remove unused autoconf files from po/
  - Remove duplicate, empty translation files
  - Rebuilt with libsepol-2.5-9, libselinux-2.5-11, libsemanage-2.5-7


author: Petr Lautrbach <plautrba@redhat.com> 2.5-17
changelog:
  - sandbox: Use dbus-run-session instead of dbus-launch when available
  - hll/pp: Change warning for module name not matching filename to match new behavior
  - Remove LDFLAGS from CFLAGS
  - sandbox: create a new session for sandboxed processes
  - sandbox: do not try to setup directories without -X or -M
  - sandbox: do not run xmodmap in a new X session
  - sandbox: Use GObject introspection binding instead of pygtk2
  - sandbox: fix file labels on copied files
  - sandbox: tests - close stdout of p
  - sandbox: tests - use sandbox from cwd
  - audit2allow: tests should use local copy not system
  - audit2allow: fix audit2why import from seobject
  - audit2allow: remove audit2why so that it gets symlinked
  - semanage: fix man page and help message for import option
  - semanage: fix error message for fcontext -m
  - semanage: Fix semanage fcontext -D
  - semanage: Correct fcontext auditing
  - semanage: Default serange to "s0" for port modify
  - semanage: Use socket.getprotobyname for protocol
  - semanage: fix modify action in node and interface
  - fixfiles: Pass -n to restorecon for fixfiles check
  - sepolicy: Check get_rpm_nvr_list() return value
  - Don't use subprocess.getstatusoutput() in Python 2 code
  - semanage: Add auditing of changes in records
  - Remove unused 'q' from semodule getopt string


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-19
changelog:
  - seobject: Handle python error returns correctly
  - policycoreutils/sepolicy/gui: fix current selinux state radiobutton
  - policycoreutils: semodule_package: do not fail with an empty fc file


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-5
changelog:
  - semanage: Unify argument handling (#1398987)
  - setfiles: set up a logging callback for libselinux
  - setfiles: Fix setfiles progress indicator
  - setfiles: stdout messages don't need program prefix
  - setfiles: don't scramble stdout and stderr together (#1435894)
  - restorecond: Decrease loglevel of termination message (#1264505)
  - fixfiles should handle path arguments more robustly
  - fixfiles: handle unexpected spaces in command
  - fixfiles: remove useless use of cat (#1435894)
  - semanage: Add checks if a module name is passed in (#1420707)
  - semanage: fix export of fcontext socket entries (#1435127)
  - selinux-autorelabel: remove incorrect redirection to /dev/null (#1415674)


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-7
changelog:
  - Make 'sepolicy manpage' and 'sepolicy transition' faster
  - open_init_pty: restore stdin/stdout to blocking upon exit
  - fixfiles: do not dereference link files in tmp
  - fixfiles: use a consistent order for options to restorecon
  - fixfiles: don't ignore `-F` when run in `-C` mode
  - fixfiles: remove bad modes of "relabel" command
  - fixfiles: refactor into the `set -u` dialect
  - fixfiles: if restorecon aborts, we should too
  - fixfiles: usage errors are fatal
  - fixfiles: syntax error
  - fixfiles: remove two unused variables
  - fixfiles: tidy up usage(), manpage synopsis
  - fixfiles: deprecate -l option
  - fixfiles: move logit call outside of redirected function
  - fixfiles: fix logging about R/O filesystems
  - fixfiles: clarify exclude_dirs()
  - fixfiles: remove (broken) redundant code


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.7-2
changelog:
  - Python 2 binary package renamed to python2-policycoreutils
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-4
changelog:
  - restorecond: check write() and daemon() results
  - sepolicy: do not fail when file_contexts.local or .subs do not exist
  - sepolicy: remove stray space in section "SEE ALSO"
  - sepolicy: fix misspelling of _ra_content_t suffix
  - gui: port to Python 3 by migrating to PyGI
  - gui: remove the status bar
  - gui: fix parsing of "semodule -lfull" in tab Modules
  - gui: delete overridden definition of usersPage.delete()
  - Enable listing file_contexts.homedirs (#1409813)
  - remove semodule_deps


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-5
changelog:
  - sepolicy: Fix sepolicy manpage
  - semanage: Update Infiniband code to work on python3
  - semanage: Fix export of ibendport entries
  - semanage: Enforce noreload only if it's requested by -N option


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-6
changelog:
  - semanage: make seobject.py backward compatible
  - Own %{pythonX_sitelib}/site-packages/sepolicy directories (#1522942)


author: Miro Hrončok <mhroncok@redhat.com> - 2.7-12
changelog:
  - Rename the python3 subpackage to have prefix, not suffix
  - Use python3 prefixes in requires where possible


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-15
changelog:
  - sepolicy: Fix translated strings with parameters
  - sepolicy: Support non-MLS policy
  - sepolicy: Initialize policy.ports as a dict in generate.py
  - gui/polgengui.py: Use stop_emission_by_name instead of emit_stop_by_name
  - Minor update for bash completion
  - semodule_package: fix semodule_unpackage man page
  - gui/semanagePage: Close "edit" and "add" dialogues when successfull
  - gui/fcontextPage: Set default object class in addDialog\
  - sepolgen: fix typo in PolicyGenerator
  - build: follow standard semantics for DESTDIR and PREFIX


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-19
changelog:
  - selinux-autorelabel: set UEFI boot order (BootNext) same as BootCurrent
  - selinux-autorelabel: synchronize cached writes before reboot (#1385272)


author: Petr Lautrbach <plautrba@redhat.com> - 2.8-4
changelog:
  - selinux-autorelabel: Use plymouth --quit rather then --hide-splash (#1592221)
  - selinux-autorelabel: Increment boot_indeterminate grub environment variable (#1592221)
  - Do not require libcgroup - it's not used anymore


author: Petr Lautrbach <plautrba@redhat.com> - 2.8-7
changelog:
  - setfiles: Improve description of -d switch
  - Fix typo in newrole.1 manpage
  - semanage: Stop rejecting aliases in semanage commands
  - sepolicy: Stop rejecting aliases in sepolicy commands
  - sepolicy: Fix "info" to search aliases as well
  - sepolgen: fix refpolicy parsing of "permissive"
  - sepolgen: return NotImplemented instead of raising it
  - semanage: fix Python syntax of catching several exceptions
  - semanage: Replace bare except with specific one
  - semanage: Fix logger class definition
  - semanage: Stop logging loginRecords changes
  - add xperms support to audit2allow
  - sepolgen: fix access vector initialization
  - sepolgen: print all AV rules correctly


author: Petr Lautrbach <plautrba@redhat.com> - 2.8-15
changelog:
  - chcat: use check_call instead of getstatusoutput
  - semanage: Use standard argparse.error() method
  - semanage: Fix handling of -a/-e/-d/-r options


author: Petr Lautrbach <plautrba@redhat.com> - 2.8-16.1
changelog:
  - semanage: move valid_types initialisations to class constructors
  - semanage: import sepolicy only when it's needed
  - sepolicy: Add sepolicy.load_store_policy(store)
  - semanage: Start exporting "ibendport" and "ibpkey" entries


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-4
changelog:
  - semanage: Do not use default s0 range in "semanage login -a" (#1554360)
  - gui: Fix remove module in system-config-selinux (#1748763)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-5
changelog:
  - fixfiles: Fix "verify" option (#1647532)
  - semanage: Improve handling of "permissive" statements (#1417455)
  - semanage: fix moduleRecords.customized()
  - semanage: Add support for DCCP and SCTP protocols (#1563742)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-10
changelog:
  - python/semanage: Sort imports in alphabetical order
  - python/semanage: empty stdout before exiting on BrokenPipeError (#1822100)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-19
changelog:
  - semodule: move module hashing into libsemanage (requires libsemanage-2.9-7)
  - semodule: add command-line option to detect module changes (#2049189)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-20
changelog:
  - python: Split "semanage import" into two transactions (#2063353)
  - semodule: rename --rebuild-if-modules-changed to --refresh (#2089802)
  - selinux-autorelabel: Do not force reboot (#2093133)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-21.1
changelog:
  - python: Harden tools against "rogue" modules (#2128976)
  - Update "pathfix" arguments to match ^^^ (#2128976)
  - python: Do not query the local database if the fcontext is non-local (#2124825)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-25
changelog:
  - Harden more tools against "rogue" modules (RHEL-17351)
  - sepolicy: port to dnf4 python API (RHEL-17398)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-26
changelog:
  - python/semanage: Allow modifying records on "add" (RHEL-28167)
  - python/semanage: Do not sort local fcontext definitions (RHEL-24461)


author: Adam Jackson <ajax@redhat.com> 0.8.0-3
changelog:
  - poppler-0.8.0-ocg-crash.patch: Fix a crash when no optional content
    groups are defined.
  - Mangle configure to account for the new directory for qt3 libs.
  - Fix grammar in %description.


author: Marek Kasik <mkasik@redhat.com> - 0.12.3-3
changelog:
  - Correct permissions of goo/GooTimer.h
  - Convert pdftohtml.1 to utf8
  - Make the pdftohtml's Provides/Obsoletes versioned


author: Marek Kasik <mkasik@redhat.com> - 0.15.0-5
changelog:
  - Add poppler-0.15.0-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.15.0-CVE-2010-3703.patch
      (Properly initialize stack)
  - Add poppler-0.15.0-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639861


author: Marek Kasik <mkasik@redhat.com> - 0.17.3-2
changelog:
  - Don't include pdfextract and pdfmerge in resulting packages for now
  - since they conflict with packages pdfmerge and mupdf (#740906)


author: Marek Kasik <mkasik@redhat.com> 0.18.4-3
changelog:
  - Backport of a patch which sets mask matrix before drawing an image with a mask
  - Resolves: #817378


author: Marek Kasik <mkasik@redhat.com> 0.20.2-6
changelog:
  - Backport most of the changes from poppler-0.20.3 - poppler-0.20.5
  -   (those which doesn't change API or ABI and are important)
  - See poppler-0.20.3-5.patch for detailed list of included commits


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-8
changelog:
  - Check for stream before calling stream methods
  - when saving an embedded file
  - Resolves: #1649438


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-19
changelog:
  - Constrain number of cycles in rescale filter
  - Compute correct coverage values for box filter
  - Resolves: #1688418


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-25
changelog:
  - Check whether input is RGB in PSOutputDev::checkPageSlice()
  - also when using "-optimizecolorspace" flag
  - Resolves: #1697576


author: Marek Kasik <mkasik@redhat.com> - 20.11.0-11
changelog:
  - Fix crashes in FoFiType1C
  - Rebuild for inclusion of poppler-glib-doc in CRB
  - Resolves: RHEL-4255, RHEL-4273


author: Marek Kasik <mkasik@redhat.com> - 20.11.0-12
changelog:
  - Fix crash in broken documents when using -dests
  - Fix versions in changelog
  - Resolves: RHEL-44330


author: Filip Januš <fjanus@redhat.com> - 10.19-2
changelog:
  - Add missing files into file section of server package
    postgresql-setup v8.6 newly provides postgresql-upgrade


author: Filip Januš <fjanus@redhat.com> - 10.21-1
changelog:
  - Resolves: CVE-2022-1552
  - Update to 10.21
  - Release notes: https://www.postgresql.org/docs/release/10.21/


author: Dominik Rehák <drehak@redhat.com> - 10.23-2
changelog:
  - Backport fixes for CVE-2023-2454 and CVE-2023-2455
  - Update postgresql-setup to 8.7 (https://github.com/devexp-db/postgresql-setup/pull/35)
  - Resolves: #2207931


author: Filip Januš <fjanus@redhat.com> - 12.11-1
changelog:
  - Resolves: CVE-2022-1552
  - Update to 12.11
  - Release notes: https://www.postgresql.org/docs/release/12.11/


author: Kaj J. Niemi <kajtzu@fi.basen.net> 7.4-0.1
changelog:
  - 7.4
  - Fixed Patch #1 (now rpm-pgsql-7.4.patch)
  - Fixed Patch #2 (now rpm-multilib-7.4.patch):
  - Patch #4 is unnecessary (upstream)
  - Fixed Patch #6 (now postgresql-7.4-src-tutorial.patch)
  - Added Patch #8 (postgresql-7.4-com_err.patch) as com_err()
    is provided by e2fsprogs and CPPFLAGS gets lost somewhere
    inside configure (bad macro?)
  - No 7.4 PDF docs available yet (Source #17)
  - PyGreSQL is separated from the upstream distribution but
    we include it as usual (Source #18)
  - Default to compiling libpq and ECPG as fully thread-safe

  - 7.4 Origin.  See previous spec files for previous history. Adapted
  - from Red Hat and PGDG's 7.3.4 RPM, directly descended from
  - postgresql-7.3.4-2 as shipped in Fedora Core 1.


author: Lamar Owen <lowen@pari.edu> <lamar.owen@wgcr.org>
changelog:
  - 7.4-0.1PGDG
  - Development JDBC jars in addition to the 7.3 jars; will replace the
  - 7.3 jars once 7.4 official jars are released.
  - Changed to use the bzip2 source to save a little size.
  - Removed some commented out portions of the specfile.
  - Removed the 7.3.4 PDF docs.  Will replace with 7.4 PDF's once they
  - are ready.


author: David Jee <djee@redhat.com> 7.4-4
changelog:
  - Add PyGreSQL patch for deprecated column pg_type.typprtlen [Bug #111263]
  - Add headers patch which moves ecpg headers to /usr/include/ecpg
    [Bug #111195]


author: Lamar Owen <lowen@pari.edu>
changelog:
  - 7.4.1-1PGDG
  - Merge Sander Steffann's changes up to 7.4-0.5PGDG
  - Proper 7.4.1 JDBC jars this time.
  - Patch for no pl/python from Alvaro


author: Tom Lane <tgl@redhat.com> 7.4.2-1
changelog:
  - Update to PostgreSQL 7.4.2; sync with community SRPM as much as possible.
  - Support PGOPTS from /etc/sysconfig/pgsql, per bug 111504.
  - Fix permissions on /etc/sysconfig/pgsql, per bug 115278.
  - SELinux patch in init file: always su </dev/null, per bug 117901.
  - Rebuilt


author: Tom Lane <tgl@redhat.com> 7.4.3-1
changelog:
  - Update to PostgreSQL 7.4.3.
  - Uninstalling server RPM stops postmaster first, per bug 114846.
  - Fix su commands to not assume PG user's shell is sh-like, per bug 124024.
  - Fix permissions on postgresql-python doc files, per bug 124822.
  - Minor postgresql.init improvements.


author: Tom Lane <tgl@redhat.com> 7.4.3-3
changelog:
  - Undo ill-considered chkconfig change that causes server to start
    immediately upon install.  Mea culpa (bug 127552).


author: Tom Lane <tgl@redhat.com> 7.4.5-1
changelog:
  - Update to PostgreSQL 7.4.5.
  - Update JDBC jars to driver build 215.
  - Add Obsoletes: entries for rh-postgresql packages, per bug 129278.


author: Tom Lane <tgl@redhat.com> 7.4.5-3
changelog:
  - Solve the stale lockfile problem (bugs 71295, 96981, 134090)
  - Use runuser instead of su for SELinux (bug 134588)


author: Tom Lane <tgl@redhat.com> 7.4.5-4
changelog:
  - Remove contrib/oidjoins stuff from installed fileset; it's of no use
    to ordinary users and has a security issue (bugs 136300, 136301)
  - adjust chkconfig priority (bug 128852)


author: Tom Lane <tgl@redhat.com> 7.4.6-1
changelog:
  - Update to PostgreSQL 7.4.6 (bugs 136947, 136949)
  - Make init script more paranoid about mkdir step of initializing a new
    database (bugs 136947, 136949)


author: Tom Lane <tgl@redhat.com> 7.4.6-3
changelog:
  - Update to PyGreSQL 3.6 (to fix bug #142711)
  - Adjust a few file permissions (bug #142431)
  - Assign %{_libdir}/pgsql to base package instead of -server (bug #74003)


author: Tom Lane <tgl@redhat.com> 8.0.0-1
changelog:
  - Update to PostgreSQL 8.0.0, PyGreSQL 3.6.1, pgtcl 1.5.2,
    and jdbc driver build 309.
  - Extensive cleanout of obsolete cruft in patch set.
  - Regression tests are run during RPM build (NOTE: cannot build as root when
    this is enabled).
  - Postmaster stderr goes someplace useful, not /dev/null (bz#76503, #103767)
  - Make init script return a useful exit status (bz#80782)
  - Move docs' tutorial directory to %{_libdir}/pgsql/tutorial, since it
    includes .so files that surely do not belong under /usr/share.
  - Remove useless .sgml files from docs RPM (bz#134450)
  - Put regression tests under /usr/lib64 on 64-bit archs, since .so files
    are not architecture-independent.


author: Tom Lane <tgl@redhat.com> 8.0.1-2
changelog:
  - Repair improper error message in init script when PGVERSION doesn't match.
  - Arrange for auto update of version embedded in init script.


author: Tom Lane <tgl@redhat.com> 8.0.1-4
changelog:
  - Attach Obsoletes: declarations for rh-postgresql to subpackages (bz#144435)
  - Make Requires: and Prereq: package linkages specify release not only
    version, as per recent mailing list discussion.


author: Tom Lane <tgl@redhat.com> 8.0.3-1
changelog:
  - Update to PostgreSQL 8.0.3 (includes security and data-loss fixes; see
    bz#156727, CAN-2005-1409, CAN-2005-1410)
  - Update to jdbc driver build 311
  - Recreate postgres user after superseding an rh-postgresql install (bug #151911)
  - Ensure postgresql server is restarted if running during an upgrade


author: Tom Lane <tgl@redhat.com> 8.0.4-1
changelog:
  - Update to PostgreSQL 8.0.4, PyGreSQL 3.6.2, and jdbc driver build 312
  - Adjust pgtcl link command to ensure it binds to correct libpq (bug #166665)
  - Remove obsolete Conflicts: against other python versions (bug #166754)
  - Add /etc/pam.d/postgresql (bug #167040)
  - Include contrib/xml2 in build (bug #167492)


author: Tom Lane <tgl@redhat.com> 8.1.0-1
changelog:
  - Update to PostgreSQL 8.1.0, PyGreSQL 3.7, and jdbc driver build 404
  - Fix PAM config file (must have account not only auth) (bug #167040)
  - Add BuildPrereq: libxslt-devel (bug #170141)
  - Sync with PGDG SRPM as much as feasible


author: Tom Lane <tgl@redhat.com> 8.1.1-1
changelog:
  - Update to PostgreSQL 8.1.1
  - Make pg_config.h architecture-independent for multilib installs;
    put the original pg_config.h into pg_config_$ARCH.h


author: Tom Lane <tgl@redhat.com> 8.1.1-3
changelog:
  - fix pg_config.h for 64-bit and ppc platforms
  - update Makefile.regress (needs to --load-language=plpgsql)


author: Tom Lane <tgl@redhat.com> 8.1.2-1
changelog:
  - Update to PostgreSQL 8.1.2
  - Repair extraneous quote in pgtcl configure script ... odd that bash
    didn't use to spit up on this.


author: Tom Lane <tgl@redhat.com> 8.1.3-1
changelog:
  - Update to PostgreSQL 8.1.3 (fixes bug #180617, CVE-2006-0553)
  - Update to jdbc driver build 405
  - Modify multilib header hack to not break non-RH arches, per bug #177564


author: Tom Lane <tgl@redhat.com> 8.1.4-1
changelog:
  - Update to PostgreSQL 8.1.4 (includes fixes for CVE-2006-2313, CVE-2006-2314;
    see bug #192173)
  - Update to PyGreSQL 3.8
  - Suppress noise from chcon, per bug #187744


author: Tom Lane <tgl@redhat.com> 8.2.0-1
changelog:
  - Update to PostgreSQL 8.2.0
  - Update to PyGreSQL 3.8.1
  - Fix chcon arguments in test/regress/Makefile
  Related: #201035
  - Adjust init script to not fool /etc/rc.d/rc
  Resolves: #161470
  - Change init script to not do initdb automatically, but require
    manual "service postgresql initdb" for safety.  Per upstream discussions.


author: Tom Lane <tgl@redhat.com> 8.2.1-1
changelog:
  - Update to PostgreSQL 8.2.1
  - Update to pgtcl 1.5.3
  - Be sure we link to libncurses, not libtermcap which is disappearing in Fedora


author: Tom Lane <tgl@redhat.com> 8.2.1-2
changelog:
  - Split -pl subpackage into three new packages to reduce dependencies
    and track upstream project's packaging.


author: Tom Lane <tgl@redhat.com> 8.2.4-2
changelog:
  - Fix oversight in postgresql-test makefile: pg_regress isn't a shell script
    anymore.  Per upstream bug 3398.


author: Tom Lane <tgl@redhat.com> 8.2.4-4
changelog:
  - Use tzdata package's data files instead of private copy, so that
    postgresql-server need not be turned for routine timezone updates
  - Don't remove postgres user/group during RPM uninstall, per Fedora
    packaging guidelines
  - Seems we need an explicit BuildRequires on gawk now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 8.2.4-5
changelog:
  - Use nicer solution for tzdata file substitution: upstream discussion
    concluded that hardwiring the path was better than a symlink after all.


author: Tom Lane <tgl@redhat.com> 8.2.6-1
changelog:
  - Update to PostgreSQL 8.2.6 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  - Make initscript and pam config files be installed unconditionally;
    seems new buildroots don't necessarily have those directories in place


author: Tom Lane <tgl@redhat.com> 8.3RC2-1
changelog:
  - Update to PostgreSQL 8.3RC2 (not waiting for 8.3.0 because Fedora 9 alpha
    should be 8.3-based not 8.2-based).
  - Update to pgtcl 1.6.2


author: Tom Lane <tgl@redhat.com> 8.3.1-2
changelog:
  - Clean up cross-subpackage Requires: to ensure that updating any one
    subpackage brings in the matching versions of others.
  Resolves: #444271


author: Tom Lane <tgl@redhat.com> 8.3.1-4
changelog:
  - Enable LDAP support
  Resolves: #445315
  - Use -Wl,--as-needed to suppress bogus dependencies for libraries that
    are really only needed by some of the subpackages


author: Tom Lane <tgl@redhat.com> 8.3.3-1
changelog:
  - Update to PostgreSQL 8.3.3.
  - Remove postgresql-prefer-ncurses.patch, no longer needed in recent
    Fedora releases because libtermcap is gone.


author: Tom Lane <tgl@redhat.com> 8.3.3-2
changelog:
  - Install Pgtcl in /usr/lib/tcl$TCL_VERSION, not directly in /usr/lib.
    Needed because tcl 8.5 no longer puts /usr/lib into its package search path.
    NOTE: do not back-port this change into branches using pre-8.5 tcl, because
    /usr/lib/tcl8.4 had been a symlink to /usr/share/tcl8.4, and /usr/share
    is exactly where we must not put Pgtcl.
  Resolves: #228263


author: Tom Lane <tgl@redhat.com> 8.3.5-1
changelog:
  - Update to PostgreSQL 8.3.5.
  - Improve display from init script's initdb action, per Michael Schwendt


author: Tom Lane <tgl@redhat.com> 8.3.6-1
changelog:
  - Update to PostgreSQL 8.3.6, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-6.html


author: Tom Lane <tgl@redhat.com> 8.3.6-4
changelog:
  - Prevent dependent packages from needing to include sys/sdt.h
    (unintended side effect of previous patch)
  - Use -O1 on alpha, per report from Oliver Falk; -O2 tickles gcc bugs


author: Tom Lane <tgl@redhat.com> 8.3.7-1
changelog:
  - Update to PostgreSQL 8.3.7, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-7.html
    notably the fix for CVE-2009-0922


author: Tom Lane <tgl@redhat.com> 8.4.0-1
changelog:
  - Update to PostgreSQL 8.4.0.  See release notes at
    http://www.postgresql.org/docs/8.4/static/release-8-4.html


author: Tom "spot" Callaway <tcallawa@redhat.com> 8.4.0-2
changelog:
  - update License tag to MIT (PostgreSQL calls it "BSD", but it is MIT)
  - Note: This changes nothing from a license compatibility perspective.


author: Tom Lane <tgl@redhat.com> 8.4.1-1
changelog:
  - Update to PostgreSQL 8.4.1, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-1.html
    including two security issues
  Related: #522085
  Related: #522092


author: Tom Lane <tgl@redhat.com> 8.4.2-1
changelog:
  - Update to PostgreSQL 8.4.2, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-2.html
    including two security issues
  Related: #546321
  Related: #547662
  - Use -N not the obsolete -n in useradd call
  Resolves: #495727
  - Clean up specfile to eliminate rpmlint gripes, mainly by removing
    no-longer-needed provisions for superseding rh-postgresql


author: Tom Lane <tgl@redhat.com> 8.4.2-2
changelog:
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.2-3
changelog:
  - Remove the postgresql-python and postgresql-tcl subpackages.  These files
    are now broken out as their own packages (PyGreSQL and tcl-pgtcl,
    respectively), to reflect the now longstanding split of upstream projects.
  Related: #452306, #452321


author: Tom Lane <tgl@redhat.com> 8.4.2-4
changelog:
  - Arrange for the postmaster, but not any of its child processes, to be run
    with oom_adj -17.  This compensates for the OOM killer not being smart about
    accounting for shared memory usage.


author: Tom Lane <tgl@redhat.com> 8.4.2-5
changelog:
  - Latest version of systemtap needs the probes.o file to be built again
  Resolves: #557266
  - Provide script and instructions for building the documentation PDF


author: Tom Lane <tgl@redhat.com> 8.4.3-1
changelog:
  - Update to PostgreSQL 8.4.3, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-3.html


author: Tom Lane <tgl@redhat.com> 8.4.4-1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #593032


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 8.4.4-3
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Related: #639371
  - Add -p "$pidfile" to initscript's status call to improve corner cases.
  Related: #561010


author: Tom Lane <tgl@redhat.com> 8.4.6-1
changelog:
  - Update to PostgreSQL 8.4.6, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  - Ensure we don't package any .gitignore files from the source tarball
  Related: #642210


author: Tom Lane <tgl@redhat.com> 9.0.2-1
changelog:
  - Update to PostgreSQL 9.0.2 (major version bump)
  - Create infrastructure for in-place database upgrade using pg_upgrade
  Resolves: #398221


author: Tom Lane <tgl@redhat.com> 9.0.3-1
changelog:
  - Update to PostgreSQL 9.0.3, for various fixes described at
    http://www.postgresql.org/docs/9.0/static/release-9-0-3.html
    including the fix for CVE-2010-4015
  Resolves: #674296


author: Tom Lane <tgl@redhat.com> 9.0.3-2
changelog:
  - Remove filter-requires-perl-Pg.sh, which doesn't seem to be needed now that
    PyGreSQL has been split out; and our use of it isn't compatible with rpm 4.9
    anyway


author: Tom Lane <tgl@redhat.com> 9.0.4-1
changelog:
  - Update to PostgreSQL 9.0.4, for various fixes described at
    http://www.postgresql.org/docs/9.0/static/release-9-0-4.html
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines


author: Tom Lane <tgl@redhat.com> 9.1.0-1
changelog:
  - Update to PostgreSQL 9.1.0 (major version bump);
    in-place upgrade support now works from 9.0.x as the previous version


author: Tom Lane <tgl@redhat.com> 9.1.1-1
changelog:
  - Update to PostgreSQL 9.1.1, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-1.html
  - Enable build (but not test) of contrib/sepgsql
  - Clean up specfile build options so that turning options off works again


author: Honza Horak <hhorak@redhat.com> 9.1.1-2
changelog:
  - Create a symlink of pg_regress instead of full copy;
    Don't strip symbols from regress libs
  Related: #729012


author: Tom Lane <tgl@redhat.com> 9.1.2-1
changelog:
  - Update to PostgreSQL 9.1.2, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-2.html


author: Tom Lane <tgl@redhat.com> 9.1.2-2
changelog:
  - Make systemd unit file more user-friendly by resurrecting the old init
    script's checks for data directory presence and version match
  Resolves: #771496


author: Tom Lane <tgl@redhat.com> 9.1.3-1
changelog:
  - Update to PostgreSQL 9.1.3, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-3.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #797918


author: Tom Lane <tgl@redhat.com> 9.1.3-2
changelog:
  - Fix postgresql-setup to look for unit file in /usr/lib and to ignore
    comments therein
  Resolves: #802835
  - Resurrect a now-mostly-dummy postgresql init script, so that people can
    keep on using "service postgresql initdb" if they wish
  Resolves: #800416


author: Tom Lane <tgl@redhat.com> 9.1.3-3
changelog:
  - Fix postgresql-setup to rely on systemd to parse the unit file, instead
    of using ad-hoc code
  Resolves: #804290


author: Tom Lane <tgl@redhat.com> 9.1.4-1
changelog:
  - Update to PostgreSQL 9.1.4, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-4.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #826606
  - Update previous version (embedded in postgresql-upgrade) to 9.0.8
    because fix in whole-row variable dumping could be needed for upgrades
  - Revert fix for bug #800416, per fedora-packaging discussion at
    http://lists.fedoraproject.org/pipermail/packaging/2012-April/008314.html
    "service postgresql initdb" is dead and will stay that way


author: Tom Lane <tgl@redhat.com> 9.1.4-3
changelog:
  - Update code to use oom_score_adj not oom_adj, thereby suppressing
    whining in the kernel log
  - Add "legacy action" scripts to support "service postgresql initdb" and
    "service postgresql upgrade" in a now-approved fashion (requires a
    recent version of initscripts to work)
  Resolves: #800416


author: Tom Lane <tgl@redhat.com> 9.1.4-5
changelog:
  - Back-port upstream support for postmaster listening on multiple Unix sockets
  - Configure postmaster to create sockets in both /var/run/postgresql and /tmp;
    the former is now the default place for libpq to contact the postmaster.
  Resolves: #825448
  - Annotate postgresql.conf about not setting port number there
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 9.1.5-1
changelog:
  - Update to PostgreSQL 9.1.5, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-5.html
    including the fixes for CVE-2012-3488, CVE-2012-3489


author: Tom Lane <tgl@redhat.com> 9.2.0-1
changelog:
  - Update to PostgreSQL 9.2.0 (major version bump);
    in-place upgrade support now works from 9.1.x as the previous version
  - Add postgresql-plpython3 subpackage with PL/Python built against Python 3


author: Tom Lane <tgl@redhat.com> 9.2.1-1
changelog:
  - Update to PostgreSQL 9.2.1, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-1.html
    including a nasty data-loss bug
  - Adopt new systemd macros for server package install/uninstall triggers
  Resolves: #850277


author: Tom Lane <tgl@redhat.com> 9.2.2-1
changelog:
  - Update to PostgreSQL 9.2.2, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-2.html
  - Use new systemd install/uninstall trigger macros conditionally,
    so that package can still be installed on pre-F18 branches


author: Tom Lane <tgl@redhat.com> 9.2.2-3
changelog:
  - Prevent creation of TCP socket during pg_upgrade regression test, so that
    concurrent RPM builds on the same machine won't fail
  Resolves: #891531
  - Make sure $PGDATA/pg_log/ gets the right SELinux label in postgresql-setup
  Resolves: #891547


author: Tom Lane <tgl@redhat.com> 9.2.3-1
changelog:
  - Update to PostgreSQL 9.2.3, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-3.html
    including the fix for CVE-2013-0255
  Resolves: #908722
  - Make the package build with selinux option disabled
  Resolves: #894367
  - Include old version of pg_controldata in postgresql-upgrade subpackage
  Related: #896161


author: Tom Lane <tgl@redhat.com> 9.2.4-1
changelog:
  - Update to PostgreSQL 9.2.4, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-4.html
    including the fixes for CVE-2013-1899, CVE-2013-1900, CVE-2013-1901
  Resolves: #929223, #929255, #929328
  - fix build for aarch64 and ppc64p7


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-2
changelog:
  - postgresql-setup: don't create whole path to server's data to make sure that
    the parent directory has correct permissions (#972425)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-3
changelog:
  - add atomic operations support for aarch64 to preupgrade version also (#970661)
  - apply the forgotten man-page-day patch (#948933)


author: Pavel Raiskup <praiskup@redhat.com> - 9.3.0-1
changelog:
  - update to 9.3 major version per release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3.html


author: Jozef Mlich <jmlich@redhat.com> - 9.3.1-1
changelog:
  - update to 9.3.1 minor version per release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-1.html


author: Jozef Mlich <jmlich@redhat.com> - 9.3.2-1
changelog:
  - update to 9.3.2 minor version per release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-2.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.3.2-4
changelog:
  - postgresql-setup(upgrade): don't stop old server when it can not be started
  - postgresql-setup(initdb, upgrade): add $PGSETUP_INITDB_OPTIONS
  - postgresql-setup: do not pretend 'sh' compatibility
  - move script generation to proper place
  - postgresql-setup: document a little and genrate manual page


author: Jozef Mlich <jmlich@redhat.com> - 9.3.3-1
changelog:
  - update to 9.3.3 minor version per release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-3.html


author: Jozef Mlich <jmlich@redhat.com> - 9.3.4-1
changelog:
  - update to 9.3.4 minor version per release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-4.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.3.4-8
changelog:
  - provide postgresql-doc for postgresql-docs package (#1086420)
  - move html documentation to *-docs subpackage (#1086420)
  - provide postgresql-server(:MODULE_COMPAT_%{postgresql_major}) to guard
    against incompatible plugin installation (#1008939)


author: Pavel Raiskup <praiskup@redhat.com> - 9.4.1-4
changelog:
  - make the %check phase more verbose for FAIL cases
  - don't FTBFS on f23+ where hardening is on by default


author: Pavel Raiskup <praiskup@redhat.com> - 9.4.5-2
changelog:
  - devel package should not require the main package (rhbz#1272219)
  - multilib fix, more general solution (rhbz#1190346)


author: Pavel Raiskup <praiskup@redhat.com> - 9.5.0-1
changelog:
  - update to 9.5.0 per release notes
    http://www.postgresql.org/docs/9.5/static/release-9-5.html
  - update postgresql-setup to v4.0 to reflect new packaging style


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.1-1
changelog:
  - update to 9.6.1 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-1.html
  - add gen_sources.sh script
  - remove plpython build hack, fixed upstream
  - remove aarch64 and ppc64p7 hacks, fixed by the %configure call


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.2-1
changelog:
  - update to 9.6.2 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-2.html
  - remove mistakenly isntalled libpgfeutils.a


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.3-1
changelog:
  - update to 9.6.3 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-3.html


author: Petr Kubat <pkubat@redhat.com> - 9.6.4-1
changelog:
  - update to 9.6.4 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-4.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.5-1
changelog:
  - update to 9.6.5 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-5.html


author: Jozef Mlich <jmlich@redhat.com> - 10.0-2
changelog:
  - support for upgrade with extenstions
    i.e the postgresql-upgrade-devel subpackage was added (rhbz#1475177)


author: Pavel Raiskup <praiskup@redhat.com> - 10.0-3
changelog:
  - confess that we bundle setup scripts and previous version of ourseleves
  - provide %postgresql_upgrade_prefix macro


author: Pavel Raiskup <praiskup@redhat.com> - 10.1-3
changelog:
  - unify %configure options for python2/python3 configure
  - drop --with-krb5 option, not supported since PostgreSQL 9.4
  - python packaging - requires/provides s/python/python2/


author: Pavel Raiskup <praiskup@redhat.com> - 10.1-4
changelog:
  - configure with --with-systemd (rhbz#1414314)
  - disable startup timeout of PostgreSQL service (rhbz#1525477)


author: Pavel Raiskup <praiskup@redhat.com> - 10.3-2
changelog:
  - define %precise_version helper macro
  - drop explicit libpq.so provide from *-libs
  - update postgresql-setup tarball
  - add postgresql-test-rpm-macros package


author: Pavel Raiskup <praiskup@redhat.com> - 10.3-3
changelog:
  - upgrade: package plperl.so and pltcl.so
  - upgrade: package contrib modules
  - upgrade: drop dynamic libraries


author: Pavel Raiskup <praiskup@redhat.com> - 10.4-5
changelog:
  - re-enable -O3 for 64bit PPC boxes
  - explicitly set PYTHON=python2, /bin/python doesn't exist fc29+


author: Pavel Raiskup <praiskup@redhat.com> - 10.4-6
changelog:
  - drop ppc64 patch, gcc is already fixed (rhbz#1544349)
  - move pg_config*.mo files into devel subpackage


author: Pavel Raiskup <praiskup@redhat.com> - 10.4-8
changelog:
  - new postgresql-setup, the %postgresql_tests* macros now start
    the build-time server on random port number


author: Pavel Raiskup <praiskup@redhat.com> - 10.5-3
changelog:
  - devel subpackage provides postgresql-server-devel and libecpg-devel
    (first step for rhbz#1618698)


author: Pavel Raiskup <praiskup@redhat.com> - 11.0-1
changelog:
  - new upstream release, per release notes:
    https://www.postgresql.org/docs/11/static/release-11.html


author: Patrik Novotný <panovotn@redhat.com> - 12.5-1
changelog:
  - Rebase to upstream release 12.5
    Resolves: rhbz#1898330
    Resolves: rhbz#1898224
    Resolves: rhbz#1898244


author: Filip Januš <fjanus@redhat.com> - 13.7-1
changelog:
  - Resolves: CVE-2022-1552
  - Update to 13.7
  - Release notes: https://www.postgresql.org/docs/release/13.7/


author: Jorge San Emeterio <jsanemet@redhat.com> - 13.11-2
changelog:
  - Update postgresql-setup to 8.7 (https://github.com/devexp-db/postgresql-setup/pull/35)
  - Resolves: #2207933


author: Jorge San Emeterio <jsanemet@redhat.com> - 13.13-1
changelog:
  - Update to 13.13
  - Fixes: CVE-2023-5868 CVE-2023-5869 CVE-2023-5870 CVE-2023-39417
  - Resolves: RHEL-16085 RHEL-16123


author: Filip Januš <fjanus@redhat.com> - 15.0-1
changelog:
  - Initial import for postgresql 15
  - Specfile is based on version locate in centos stream
    It reflects changes with libpq. This version of databse server
    will use private libpq library.
  - Resolves: #2128241


author: Filip Januš <fjanus@redhat.com> - 15.2-1
changelog:
  - Update to upstream version 15.2
  - Update postgresql-setup to 8.8
  - PostgreSQL systemd unit waits for the network to be up
  - Resolves: #2128241


author: Filip Janus <fjanus@redhat.com> 15.6-1
changelog:
  - Update to 15.6 and 13.14
  - Fix CVE-2024-0985

  Mon Nov 13 2023 Jorge San Emeterio <jsanemet@redhat.com> - 15.5-1
  - Update to upstream version 15.5
  - Fixes: CVE-2023-5868 CVE-2023-5869 CVE-2023-5870 CVE-2023-39417 CVE-2023-39418
  - Resolves: RHEL-16088 RHEL-16135 RHEL-16137


author: Filip Janus <fjanus@redhat.com> 15.6-1
changelog:
  - Update to 15.6 and 13.14
  - Fix CVE-2024-0985

  Mon Nov 13 2023 Jorge San Emeterio <jsanemet@redhat.com> - 15.5-1
  - Update to upstream version 15.5
  - Fixes: CVE-2023-5868 CVE-2023-5869 CVE-2023-5870 CVE-2023-39417 CVE-2023-39418


author: Honza Horak <hhorak@redhat.com> - 9.6.19-1
changelog:
  - Rebase to 9.6.19
    Also fixes: CVE-2019-10208, CVE-2020-14350, CVE-2019-10130
    Resolves: #1741490
    Resolves: #1867111
    Resolves: #1845074


author: Patrik Novotný <panovotn@redhat.com> - 9.6.20-1
changelog:
  - Rebase to upstream release 9.6.20
    Resolves: rhbz#1898246
    Resolves: rhbz#1898219
    Resolves: rhbz#1898335


author: Pavel Raiskup <praiskup@redhat.com> - 09.06.0500-1
changelog:
  - update to new upstream release, per:
    https://www.postgresql.org/message-id/20170905143318.95448B4C411@winpg.jp


author: Pavel Raiskup <praiskup@redhat.com> - 10.00.0000-1
changelog:
  - update to new upstream release, per announcement:
    https://www.postgresql.org/message-id/20171013143455.9D0E5B4C412%40winpg.jp


author: Pavel Raiskup <praiskup@redhat.com> - 10.01.0000-1
changelog:
  - update to new upstream release, per announcement:
    https://www.postgresql.org/message-id/20171227144219.0ABC4B4C417%40winpg.jp


author: Pavel Raiskup <praiskup@redhat.com> - 10.02.0000-1
changelog:
  - build against libpq-devel and postgresql-test-rpm-macros
  - update to new upstream release, per announcement:
    https://www.postgresql.org/message-id/20180330143925.88CEDB40E51%40winpg.jp


author: Pavel Raiskup <praiskup@redhat.com> - 10.03.0000-1
changelog:
  - update: new upstream release, per announcement:
    https://www.postgresql.org/message-id/20180519131632.8E59CB40E51%40winpg.jp


author: Bastien Nocera <bnocera@redhat.com> - 0.8.1-2
changelog:
  + power-profiles-daemon-0.8.1-2
  - Remove linter, as apparently unwanted in check section
  - Resolves: rhbz#1947950


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.9-7
changelog:
  - Added support for Intel GLK platforms (by intel-glk-support patch)
  - Added support for Intel CNL-U/Y platforms (by intel-cnluy-support patch)
  - Fixed problem with some C-states overwriting others
    (by cstates-rewrite-fix patch)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.9-8
changelog:
  - Use intel_cpu only if APERF MSR is supported, it fixes powertop on KVM
    (by intel-cpu-check-aperf patch)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11-1
changelog:
  - New version
    Resolves: rhbz#1716721
  - Changed source to github and bootstraps sources
  - Dropped cstates-rewrite-fix, intel-glk-support, intel-cnluy-support,
    intel-cpu-check-aperf patches (all upstreamed)
  - Added bash completion


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.9.0-1
changelog:
  - New version
  - Dropped pptpsetup-mppe, vector-remove-fix, and call-use-after-free-fix
    patches (all upstreamed)
  - Dropped loading of nf_conntrack_pptp kernel module which was workaround and
    according to upstream only hides real problems


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Stefan Becker <chemobejk@gmail.com> - 1.22.1-1
changelog:
  - update to 1.22.1:
      - fix multiple client detection
      - speed up Lync Autodiscover
      - avoid rare SSL read deadlock
      - various bug fixes


author: Stefan Becker <chemobejk@gmail.com> - 1.23.0-1
changelog:
  - update to 1.23.0:
      - add support for IPv6 addresses in SIP & SDP messages
      - extend libpurple D-Bus interface
      - don't load buddy photos from unknown sites by default
  - add BR dbus-1, gstreamer-rtp-1.0 & krb5


author: Stefan Becker <chemobejk@gmail.com> - 1.23.1-1
changelog:
  - update to 1.23.1:
      - add support for user redirect in Lync autodiscover
      - enable audio/video calls for Office365 cloud-based accounts
  - drop obsolete patch for GCC 8.0 compilation error


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.3-5
changelog:
  - Subpackage python2-cffi has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 2.7-3
changelog:
  - Skip unit tests that fail with OpenSSL 1.1.1.d
  - Resolves: rhbz#1761194
  - Fix and simplify Python 3 packaging


author: Dan Callaghan <dcallagh@redhat.com> - 1.0.2-1
changelog:
  - bug fix release 1.0.2:
    https://github.com/gevent/gevent/blob/v1.0.2/changelog.rst#release-102-may-23-2015


author: Brian C. Lane <bcl@redhat.com> - 1.2.2-5
changelog:
  - Avoid printing TypeError traceback
  - gevent.pywsgi: Much improved handling of chunk trailers
    Backport fix for CVE-2023-41419
    Resolves: RHEL-17078


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.1-3
changelog:
  - Subpackage python2-lxml has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: John Dennis <jdennis@redhat.com> - 1.0.1-1
changelog:
  * Add TLS 1.3 cipher suites.

    * ssl_cipher_info.py now attempts to enable TLS 1.3.

    * Fix build issue in setup.py. python-nss can now be build
      as Python wheel, e.g. `pip wheel -w dist .`

    * The following constants were added:

      - ssl.TLS_AES_128_GCM_SHA256
      - ssl.TLS_AES_256_GCM_SHA384
      - ssl.TLS_CHACHA20_POLY1305_SHA256


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.1-5
changelog:
  - Python 2 binary package renamed to python2-nss
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: <jdennis@redhat.com> - 1.0.1-10
changelog:
  - Move documentation generator from epydoc to Sphinx autodoc
  - Modify py2/py3 build logic to comply with new guidelines


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-14
changelog:
  - Fixes for CVE-2021-25290, CVE-2021-25292, CVE-2021-25293, CVE-2021-27921
  CVE-2021-27922, and CVE-2021-27923
  Resolves: rhbz#1934685 rhbz#1934699 rhbz#1934705 rhbz#1935384 rhbz#1935396 rhbz#1935401


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-15
changelog:
  - Fixes for CVE-2021-25288, CVE-2021-25287, CVE-2021-28675, CVE-2021-28676,
  CVE-2021-28677 and CVE-2021-28678
  Resolves: rhbz#1958231, rhbz#1958226, rhbz#1958240, rhbz#1958252, rhbz#1958257, rhbz#1958263


author: Charalampos Stratakis <cstratak@redhat.com> - 5.1.1-18
changelog:
  - Fixup for CVE-2022-22817
  - Security fixes for CVE-2022-22815, CVE-2022-22816
  Resolves: rhbz#2042511, rhbz#2042522


author: Sandro Mani <manisandro@gmail.com> - 1.7.8-3.20130210gite09ff61
changelog:
  - Really remove -fno-strict-aliasing
  - Place comment on how to retreive source just above the Source0 line


author: Sandro Mani <manisandro@gmail.com> - 1.7.8-4.20130305git7866759
changelog:
  - Update to latest git snapshot
  - 0001-Cast-hash-table-values-to-unsigned-long.patch now upstream
  - Pillow-1.7.8-selftest.patch now upstream


author: Sandro Mani <manisandro@gmail.com> - 2.0.0-2.git2e88848
changelog:
  - Update to latest git
  - Remove python-pillow-disable-test.patch, gcc is now fixed
  - Add python-pillow_tempfile.patch to prevent a temporary file from getting packaged


author: Sandro Mani <manisandro@gmail.com> - 2.0.0-6.gitd1c6db8
changelog:
  - Update to latest git
  - python-pillow_quantization.patch now upstream
  - python-pillow_endianness.patch now upstream
  - Add subpackage for ImageQt module, with correct dependencies
  - Add PyQt4 and numpy BR (for generating docs / running tests)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0.0-7.gitd1c6db8
changelog:
  - Remove Obsoletes in the python-pillow-qt subpackage. Obsoletes isn't
    appropriate since qt support didn't exist in the previous python-pillow
    package so there's no reason to drag in python-pillow-qt when updating
    python-pillow.


author: Sandro Mani <manisandro@gmail.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Run tests in builddir, not installroot
  - Build python3-pillow docs with python3
  - python-pillow_endian.patch upstreamed


author: Sandro Mani <manisandro@gmail.com> - 2.1.0-4
changelog:
  - Add patch to fix incorrect PyArg_ParseTuple tuple signature, fixes rhbz#962091 and rhbz#988767.
  - Renable webp support on bigendian arches


author: Sandro Mani <manisandro@gmail.com> - 2.3.0-1
changelog:
  - Update to 2.3.0
  - Build with doc disabled to break circular python-pillow -> python-sphinx -> python pillow dependency


author: Sandro Mani <manisandro@gmail.com> - 2.4.0-2
changelog:
  - Enable Jpeg2000 support
  - Enable webp support also on s390* archs, bug #962091 is now fixed
  - Add upstream patch for ghostscript detection


author: Sandro Mani <manisandro@gmail.com> - 2.7.0-1
changelog:
  - Update to 2.7.0
  - Drop sane subpackage, is in python-sane now
  - Fix python3 headers directory
  - Drop Obsoletes: python3-pillow on python3-pillow-qt


author: Petr Viktorin <pviktori@redhat.com> - 5.1.1-2
changelog:
  - Remove the python2 version of docs
  - Remove Qt subpackages
  - Drop dependency on python2-olefile (breaking MicImagePlugin.py, FpxImagePlugin)


author: Petr Viktorin <pviktori@redhat.com> - 5.1.1-3
changelog:
  - Remove the Python 2 subpackage
  - Remove the libimagequant dependency
    The imagequant library was only used to support a non-default image
    quantization mode.


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-7
changelog:
  - Add upstream patch to solve build-time warning
  - Move patches to dist-git
  - Resolves: rhbz#1639348


author: Charalampos Stratakis <cstratak@redhat.com> - 5.6.4-4
changelog:
  - Security fix for CVE-2019-18874: double free because of refcount mishandling
  Resolves: rhbz#1772014


author: Tomas Orsava <torsava@redhat.com> - 2.7.5-5
changelog:
  - Require python2-psycopg2 instead of python-psycopg2 from the
    python2-psycopg2-debug subpackage
  - Resolves: rhbz#1628242


author: Tomas Orsava <torsava@redhat.com> - 2.8.4-3
changelog:
  - Fix shebang mangling
  - Don't ship the debug module, it is not needed and was not shipped in RHEL8 either


author: mahailiang <mahailiang@openanolis.org> - 2.8.6-2.0.1
changelog:
  - Mark _test_external_close as expected failure
  - Sync https://git.centos.org/rpms/python-psycopg2/tree/c8-stream-2.7


author: - Devrim GUNDUZ <devrim@commandprompt.com> 2.0.2-3
changelog:
  - Removed python dependency, per bugzilla review. (#199784)
  - Changed doc package group, per bugzilla review. (#199784)
  - Replaced dos2unix with sed, per guidelines and bugzilla review (#199784)
  - Fix changelog dates


author: - Devrim GUNDUZ <devrim@commandprompt.com> 2.0.3-2
changelog:
  - Fixed 64 bit builds
  - Fixed license
  - Added Zope subpackage
  - Fixed typo in doc description
  - Added macro for zope subpackage dir


author: - Devrim GUNDUZ <devrim@commandprompt.com> 2.0.3-3
changelog:
  - Fixed zope package dependencies and macro definition, per bugzilla review (#199784)
  - Fixed zope package directory ownership, per bugzilla review (#199784)
  - Fixed cp usage for zope subpackage, per bugzilla review (#199784)


author: Tom Lane <tgl@redhat.com> 2.0.13-2
changelog:
  - Fix rpmlint complaints: remove unneeded explicit Requires:, use Conflicts:
    instead of bogus Obsoletes: to indicate lack of zope subpackage


author: Devrim GUNDUZ <devrim@gunduz.org> - 2.2.1-1
changelog:
  - Update to 2.2.1
  - Improve description for 2.2 features.
  - Changelog for 2.2.0 is: 
     http://initd.org/pub/software/psycopg/ChangeLog-2.2


author: Devrim Gündüz <devrim@gunduz.org> 2.5-1
changelog:
  - Update to 2.5, per changes described at:
    http://www.psycopg.org/psycopg/articles/2013/04/07/psycopg-25-released/


author: Devrim Gündüz <devrim@gunduz.org> 2.5.2-1
changelog:
  - Update to 2.5.2, per changes described at:
    http://www.psycopg.org/psycopg/articles/2014/01/07/psycopg-252-released


author: Pavel Raiskup <praiskup@redhat.com> - 2.5.3-1
changelog:
  - rebase to most recent upstream version, per release notes:
    http://www.psycopg.org/psycopg/articles/2014/05/13/psycopg-253-released/


author: Devrim Gündüz <devrim@gunduz.org> 2.5.4-1
changelog:
  - Update to 2.5.4, per changes described at:
    http://www.psycopg.org/psycopg/articles/2014/08/30/psycopg-254-released


author: Devrim Gündüz <devrim@gunduz.org> 2.6-1
changelog:
  - Update to 2.6, per changes described at:
    http://www.psycopg.org/psycopg/articles/2015/02/09/psycopg-26-and-255-released/


author: Pavel Raiskup <praiskup@redhat.com> - 2.6.1-4
changelog:
  - again bump for new Python 3.5, not build previously?
  - fix rpmlint issues
  - no pyo files with python 3.5


author: Pavel Raiskup <praiskup@redhat.com> - 2.6.2-1
changelog:
  - rebase (rhbz#1353545), per release notes
    http://initd.org/psycopg/articles/2016/07/07/psycopg-262-released/


author: Pavel Raiskup <praiskup@redhat.com> - 2.7-1
changelog:
  - rebase to latest upstream release, per release notes:
    http://initd.org/psycopg/articles/2017/03/01/psycopg-27-released/
  - enable testsuite during build, and package it


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.1-1
changelog:
  - rebase to latest upstream release, per release notes:
    http://initd.org/psycopg/articles/2017/03/01/psycopg-271-released/
  - fix testsuite


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.2-1
changelog:
  - rebase to latest upstream release, per release notes:
    http://initd.org/psycopg/articles/2017/07/22/psycopg-272-released/


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.3-1
changelog:
  - rebase to latest upstream release, per release notes:
    http://initd.org/psycopg/articles/2017/07/24/psycopg-273-released/


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.3.2-1
changelog:
  - update to 2.7.3.2, per release notes:
    http://initd.org/psycopg/articles/2017/10/24/psycopg-2732-released/


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.4-1
changelog:
  - rebase to latest upstream release, per release notes:
    http://initd.org/psycopg/articles/2018/02/08/psycopg-274-released/


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.5-1
changelog:
  - rebase to latest upstream release, per release notes:
    http://initd.org/psycopg/articles/2018/06/17/psycopg-275-released/


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.5-4
changelog:
  - drop python2* on f30+ (rhbz#1634973)
  - use proper compiler/linker flags (rhbz#1631713)
  - correct the (build)requires


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.5-5
changelog:
  - prepare --without=debugrpms option (rhbz#1635166)
  - get the python2 packages back for a while (rhbz#1634973)


author: Tomas Orsava <torsava@redhat.com> - 3.6.1-6
changelog:
  - BuildRequire the python36-devel package when building for the python36 module
  - BuildRequire also python36-rpm-macros as part of the python36 module build


author: Brian Pepple <bdpepple@ameritech.net> - 1.20-1.fc4
changelog:
  - Rebuild for Python 2.4.
  - Update to 1.20.
  - Switch to the new python macros for python-abi
  - Add dist tag.


author: Peter Gordon <peter@thecodergeek.com> - 3.2.0-1
changelog:
  - Update to new upstream release (3.2.0)
  - Drop font locations patches (fixed upstream):
    - 3.1.8-font-locations.patch
    - 2.5-font-locations.patch
  - Resolves: #1175228 (python-reportlab-3.2.0 is available).
  - Resolves: #1277162 (Wrong dependency version number for pillow.)
  - Resolves: #1267446 (Missing Requires: on pillow)


author: William Moreno <williamjmorenor@gmail.com> - 3.3.0-1
changelog:
  - Update to v3.3.0
  - Update python macros
  - Enable %test
  - Use license macro
  - Provide python2 subpackage


author: Marek Kasik <mkasik@redhat.com> - 3.4.0-9
changelog:
  - Do not evaluate unichar element
  - Replace an invalid char with a correct one (rpminspect)
  - Resolves: RHEL-7010


author: Petr Viktorin <pviktori@redhat.com> - 1.16.3-2
changelog:
  - Allow Python 2 for build
    See: https://hurl.corp.redhat.com/rhel8-py2

  - Skip tests on Python 2 (python2-pytest is being removed)


author: Lumír Balhar <lbalhar@redhat.com> - 2.7.18-8
changelog:
  - Security fixes for CVE-2021-3737 and CVE-2021-3733
  Resolves:             rhbz#1995162 and rhbz#1995234


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-9
changelog:
  - Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response
  Resolves:             rhbz#2036020


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-10
changelog:
  - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
  Resolves:             rhbz#2047376


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-11
changelog:
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves:             rhbz#2075390


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-12
changelog:
  - Security fix for CVE-2022-45061: CPU denial of service via inefficient IDNA decoder
  Resolves:             rhbz#2144072


author: zhangbinchen <zhangbinchen@openanolis.org> - 2.7.18-15.0.1
changelog:
  - Rebrand for Anolis OS
  - Support loongarch64 platform(Liwei Ge)
  - Pick up fix from Upstream (Jacob Wang)
    Fixup for CVE-2023-24329 patch name [f9e9f76](cstratak@redhat.com)
    Fix for CVE-2023-24329 [3f00cdc](lbalhar@redhat.com)


author: Jeremy Hylton <jeremy@beopen.com>
changelog:
  - Version 2 of 2.0b1
  - Make the package relocatable.  Thanks to Suchandra Thapa.
  - Exclude Tkinter from main RPM.  If it is in a separate RPM, it is
    easier to track Tk releases.


author: Jeremy Hylton <jeremy@beopen.com>
changelog:
  - updated for 2.0c1
  - build audioop, imageop, and rgbimg extension modules
  - include xml.parsers subpackage
  - add test.xml.out to files list


author: Matt Wilson <msw@redhat.com>
changelog:
  - modify all files to use "python2.0" as the intrepter
  - don't build the Expat bindings
  - build against db1


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix the "requires" clause, it lacked a space causing problems
  - use %{_tmppath}
  - don't define name, version etc
  - add the available patches from the Python home page


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-0.4a4
changelog:
  - 2.2a4
  - Enable UCS4 support
  - Enable IPv6
  - Provide distutils
  - Include msgfmt.py and pygettext.py


author: Matt Wilson <msw@redhat.com> 2.2-0.9b2
changelog:
  - changed DESTDIR to point to / so that distutils will install dynload
    modules properly in the installroot


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-0.11c1
changelog:
  - 2.2 RC 1
  - Don't include the _tkinter module in the main package - it's
    already in the tkiter packace
  - Turn off the mpzmodule, something broke in the buildroot


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-5
changelog:
  - disable ndbm support, which is db2 in disguise (really interesting things
    can happen when you mix db2 and db4 in a single application)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-8
changelog:
  - Make files in /usr/bin install side by side with python 1.5 when
  - Drop explicit requirement of db4
    built as python2


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-16
changelog:
  - the same, but in builddirs - this will remove them from the
    docs package, which doesn't look in the buildroot for files.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - builds as python2 require a different libdb
  - changed the buildroot name of python to match python2 builds


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-2
  - Fix #76912 (python-tools contains idle, which uses tkinter, but there is no
    requirement of tkinter from python-tools).
  - Fix #74013 (rpm is missing the /usr/lib/python2.2/test directory)


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-3.*
  - Merged patch from Karsten Hopp <karsten@redhat.de> from 2.2.1-17hammer to
    use %{_libdir}
  - Added XFree86-libs as BuildRequires (because of tkinter)
  - Fixed duplicate listing of plat-linux2
  - Fixed exclusion of lib-dynload/japanese
  - Added lib64 patch for the japanese codecs
  - Use setup magic instead of using tar directly on JapaneseCodecs


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-5
  - Fixed configuration patch to add -lcrypt when compiling cryptmodule.c

  2.2.2-4
  - Spec file change from Matt Wilson <msw@redhat.com> to disable linking
    with the C++ compiler.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-3.7.3
  - Recompiled for 7.3 (to fix the -lcrypt bug)
  - Fix for the spurious error message at the end of the build (build-requires
    gets confused by executable files starting with """"): make the tests
    non-executable.


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-7
changelog:
  - Fix bug #79647 (Rebuild of SRPM fails if python isn't installed)
  - Added a bunch of missing BuildRequires found while fixing the
    above-mentioned bug


author: Jeremy Katz <katzj@redhat.com> 2.2.2-8
changelog:
  - urllib2 didn't support non-anonymous ftp.  add support based on how
    urllib did it (#80676, #78168)


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-11.7.3
changelog:
  - Fixed bug #82544: Errata removes most tools
  - Fixed bug #82435: Python 2.2.2 errata breaks redhat-config-users
  - Removed .lib64 and - files that get installed after we fix the multilib
    .py files.


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-13
changelog:
  - Attempt to look both in /usr/lib64 and /usr/lib/python2.2/site-packages/:
    some work on python-2.2.2-lib64.patch


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-22
changelog:
  - Using newer Japanese codecs (1.4.9). Thanks to
    Peter Bowen <pzb@datastacks.com> for pointing this out.


