# changelog

author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-8.beta3
changelog:
  - New upstream release 1.9.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
  - Add a new PAC responder for dealing with cross-realm Kerberos trusts
  - Terminate idle connections to the NSS and PAM responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-9.beta4
changelog:
  - New upstream release 1.9.0 beta 4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4
  - Add a new AD provider to improve integration with Active Directory 2008 R2
    or later servers
  - SUDO integration was completely rewritten. The new implementation works
    with multiple domains and uses an improved refresh mechanism to download
    only the necessary rules
  - The IPA authentication provider now supports subdomains
  - Fixed regression for setups that were setting default_tkt_enctypes
    manually by reverting a previous workaround.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-12.beta5
changelog:
  - New upstream release 1.9.0 beta 5
  - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5
  - Many fixes for the support for setting default SELinux user context from
    FreeIPA, most notably fixed the specificity evaluation
  - Fixed an incorrect default in the krb5_canonicalize option of the AD
    provider which was preventing password change operation
  - The shadowLastChange attribute value is now correctly updated with the
    number of days since the Epoch, not seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-13.beta6
changelog:
  - New upstream release 1.9.0 beta 6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6
  - A new option, override_shell was added. If this option is set, all users
    managed by SSSD will have their shell set to its value.
  - Fixes for the support for setting default SELinux user context from FreeIPA.
  - Fixed a regression introduced in beta 5 that broke LDAP SASL binds
  - The SSSD supports the concept of a Primary Server and a Back Up Server in
    failover
  - A new command-line tool sss_seed is available to help prime the cache with
    a user record when deploying a new machine
  - SSSD is now able to discover and save the domain-realm mappings
    between an IPA server and a trusted Active Directory server.
  - Packaging changes to fix ldconfig usage in subpackages (#843995)
  - Rebuild against libldb 1.1.9


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-14.beta6
changelog:
  - Don't discard HBAC rule processing result if SELinux is on
    Resolves: rhbz#846792 (CVE-2012-3462)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-18.beta6
changelog:
  - Change the default ccache location to DIR:/run/user/${UID}/krb5cc
    and patch man page accordingly
  - Resolves: rhbz#851304


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-3
changelog:
  - Recreate Kerberos ccache directory if it's missing
  - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
                            directory /run/user/UID/ccdir does not exist


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-4.beta1
changelog:
  - Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug
    in ding-libs
  - Fix SSH integration with fully-qualified domains
  - Add the ability to dynamically discover the NetBIOS name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-6.beta1
changelog:
  - Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
                            realm join
  - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
                            default for AD Provider
  - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
                            parent directory when logging in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-7.beta1
changelog:
  - Apply a couple of patches from upstream git that resolve crashes when
    ID mapping object was not initialized properly but needed later


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-8.beta2
changelog:
  - New upstream release 1.10 beta2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
  - BuildRequire libcmocka-devel in order to run all upstream tests during build
  - BuildRequire libnl3 instead of libnl1
  - No longer BuildRequire initscripts, we no longer use /sbin/service
  - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any
    older krb5-libs version


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-9.beta2
changelog:
  - Fix typo in Requires that prevented an upgrade (#973916)
  - Use a hardcoded version in Conflicts, not less-than-current


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-11.beta2
changelog:
  - Apply a number of patches from upstream to fix issues found post-beta,
    in particular:
    -- segfault with a high DEBUG level
    -- Fix IPA password migration (upstream #1873)
    -- Fix fail over when retrying SRV resolution (upstream #1886)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-14
changelog:
  - Fix Obsoletes: to account for dist tag
  - Convert post and pre scripts to run on the sssd-common subpackage
  - Remove old conversion from SYSV


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-16
changelog:
  - Move sssd_pac to the sssd-ipa and sssd-ad subpackages
  - Trim out RHEL5-specific macros since we don't build on RHEL 5
  - Trim out macros for Fedora older than F18
  - Update libldb requirement to 1.1.16
  - Trim RPM changelog down to the last year


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0.2beta2
changelog:
  - Resolves: #906427 - Do not use %{_lib} in specfile for the nss and
                        pam libraries


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-0.4.beta2
changelog:
  - Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid:
                        Process /usr/libexec/sssd/sssd_nss was killed by
                        signal 11 (SIGSEGV)
  - Resolves: #996214 - sssd proxy_child segfault


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-2
changelog:
  - Backport simplification of ccache management from 1.11.1
  - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-3
changelog:
  - Fix multicast checks in the SSSD
  - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source
                             code getting the host info


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-1
changelog:
  - New upstream release 1.11.2
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.3-1
changelog:
  - New upstream release 1.11.3
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.4-1
changelog:
  - New upstream release 1.11.4
  - Remove upstreamed patch
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.5-1
changelog:
  - New upstream release 1.11.5
  - Remove upstreamed patch
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.1-2
changelog:
  - Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user
                             private group from server


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.2-6
changelog:
  - Fix regressions and bugs in sssd upstream 1.12.2
  - https://fedorahosted.org/sssd/ticket/{id}
  - Regressions: #2471, #2475, #2483, #2487, #2529, #2535
  - Bugs: #2287, #2445


author: Sumit Bose <sbose@redhat.com> - 1.12.2-7
changelog:
  - Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes
                             crash in wbinfo
                             - in addition to the patch libwbclient.so is
                               filtered out of the Provides list of the package


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-1
changelog:
  - New upstream release 1.12.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3
  - Fix spelling errors in description (fedpkg lint)


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-2
changelog:
  - Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus
  - Resolves: rhbz#1179379 - gzip: stdin: file size changed while
                             zipping when rotating logfile


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-3
changelog:
  - Apply a number of patches from upstream to fix issues found 1.12.3
  - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple
                             interfaces, or isn't documented to be able to
  - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is
                            not running
  - Resolves: upstream #2557  authentication failure with user from AD


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-4
changelog:
  - Decrease priority of sssd-libwbclient 20 -> 5
  - It should be lower than priority of samba veriosn of libwbclient.
  - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-6
changelog:
  - Fix double free in monitor
  - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort():
                          sssd killed by SIGABRT


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-2
changelog:
  - Add support for python3 bindings
  - Add requirement to python3 or python3 bindings
  - Resolves: rhbz#1014594 - sssd: Support Python 3


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-5
changelog:
  - Fix regressions with ipa and SELinux
  - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security
                               context on client is staff_u


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-6
changelog:
  - Fix slow login with ipa and SELinux
  - Resolves: upstream #2624 - Only set the selinux context if the context
                               differs from the local one


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-8
changelog:
  - Backport important patches from upstream 1.13 prerelease
  - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable
                             attribute for group name
  - Resolves: upstream #2335 - Investigate using the krb5 responder
                               for driving the PAM conversation with OTPs
  - Enable cmocka tests for secondary architectures


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-4
changelog:
  - Fix ipa-migration bug
  - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled
                               migration mode


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-6
changelog:
  - Fix OTP bug
  - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were
                               entered separately


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.1-2
changelog:
  - Fix few segfaults
  - Resolves: upstream #2811 - PAM responder crashed if user was not set
  - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.1-3
changelog:
  - python-sssdconfig: Fix parssing sssd.conf without config_file_version
  - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-5
changelog:
  - Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA
                             groups during getgrnam and getgrgid
  - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses
                             in call to 'print'


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-6
changelog:
  - Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password
                             prompts (e.g. Password + Token)
  - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed
                             by remote host" if locale not available


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.4-3
changelog:
  - Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element():
                             sssd_ifp killed by SIGSEGV


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.1-2
changelog:
  - Backport important patches from upstream 1.14.2 prerelease
  - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after
                               boot
  - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.1-3
changelog:
  - Fix regression with krb5_map_user
  - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore
  - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError:
                             default if nonexistent domain is mentioned


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.2-2
changelog:
  - Resolves: rhbz#1369130 - nss_sss should not link against libpthread
  - Resolves: rhbz#1392916 - sssd failes to start after update
  - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses
                             on the directory /etc/sssd


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.0-4
changelog:
  - Cherry-pick patches from upstream that enable the files provider
  - Enable the files domain
  - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch
    which is superseded by the files domain autoconfiguration
  - Related: rhbz#1357418 - SSSD fast cache for local users


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.2
changelog:
  - Fix issue with IPA + SELinux in containers
  - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.3
changelog:
  - Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication
  - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with
                             file from package sssd-common-1.15.1-1.fc25.x86_64
  - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-4
changelog:
  - Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write
                             access on the sock_file system_bus_socket
  - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and
                             fails to download desktop profile data
  - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3
  - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients
                              after applying ID Views for them in IPA server
  - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id
                              mapping is applied


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-5
changelog:
  - Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when
                             searching in local cache database access on
                             the sock_file system_bus_socket


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.16.0-5
changelog:
  - Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in
                              setnetgrent_result_timeout
  - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted
                              or machine swaps
  - Resolves: failure in glibc tests
              https://sourceware.org/bugzilla/show_bug.cgi?id=22530
  - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and
                              auth_provider ldap, login fails if the LDAP server
                              is not allowing anonymous binds
  - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is
                              corrected with AD
  - Resolves: upstream#3586 - Give a more detailed debug and system-log message
                              if krb5_init_context() failed
  - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet
                             in /etc/systemd/system
  - Backport few upstream features from 1.16.1


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.0-12
changelog:
  - Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                             with no specific host/hostgroup set
  - Resolves: upstream#3621 - FleetCommander integration must not require
                              capability DAC_OVERRIDE


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-2
changelog:
  - Resolves: upstream#3573 - sssd won't show netgroups with blank domain
  - Resolves: upstream#3660 - confdb_expand_app_domains() always fails
  - Resolves: upstream#3658 - Application domain is not interpreted correctly
  - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to
                              json_loads()
  - Resolves: upstream#3386 - KCM: Payload buffer is too small
  - Resolves: upstream#3666 - Fix usage of str.decode() in our tests
  - A few KCM misc fixes


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-3
changelog:
  - Resolves: upstream#3684 - A group is not updated if its member is removed
                              with the cleanup task, but the group does not
                              change
  - Resolves: upstream#3558 - sudo: report error when two rules share cn
  - Tone down shutdown messages for socket activated responders
  - IPA: Qualify the externalUser sudo attribute
  - Resolves: upstream#3550 - refresh_expired_interval does not work with
                              netgrous in 1.15
  - Resolves: upstream#3402 - Support alternative sources for the files provider
  - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option
  - Resolves: upstream#3679 - Make nss netgroup requests more robust
  - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not
                              configured
  - Resolves: upstream#3469 - extend sss-certmap man page regarding priority
                              processing
  - Improve docs/debug message about GC detection
  - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes
                              list out of bound?
  - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is
                              set.
  - Document which principal does the AD provider use
  - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is
                              defined, but contains no SIDs
  - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM
  - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data
                             Provider returned an error
                             [org.freedesktop.sssd.Error.DataProvider.Fatal]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-1
changelog:
  - Update to 1.16.2 release
  - Cleanup unused global definitions
  - Remove python2 references from the spec file
  - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-2
changelog:
  - Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication
                             fails with the KCM ccache


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-4
changelog:
  - Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local
                             users


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-7
changelog:
  - Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it
                             differs from the default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-8
changelog:
  - Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function():
                              /usr/libexec/sssd/sssd_be killed by 11 crash
                              func _dbus_list_unlink


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-9
changelog:
  - Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del
                             commands in man pages since local provider
                             is deprecated


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-10
changelog:
  - Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not
                             started due to a misconfiguration


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-11
changelog:
  - Resolves: rhbz#1628122 - Printing incorrect information about domain
                             with sssctl utility


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-16
changelog:
  - Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a
                            PKCS#11 URI


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-17
changelog:
  - Related: rhbz#1637131 - pam_unix unable to match fully qualified username
                            provided by sssd during smartcard auth using gdm


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-18
changelog:
  - Related: rhbz#1638006 - Files: The files provider always enumerates
                            which causes duplicate when running getent passwd


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-19
changelog:
  - Add OSCP checks for p11_child
  - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local
                            users


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-21
changelog:
  - Related: rhbz#1638150 - session not recording for local user when groups defined
  - Also add silence a Coverity warning, which is related to rhbz#1637131


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-23
changelog:
  - Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui
                             with smart card


author: Michal Židek <mzidek@redhat.com> - 2.0.0-24
changelog:
  - Resolves: rhbz#1646168 - sssctl access-report always prints an error message
  - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the
                             configuration without having to restart the whole
                             sssd
  - Resolves: rhbz#1640576 - sssctl reports incorrect information about local
                             user's cache entry expiration time
  - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user
  - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys


author: Michal Židek <mzidek@redhat.com> - 2.0.0-25
changelog:
  - Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly
                             for D-bus, resulting in a crash


author: Michal Židek <mzidek@redhat.com> - 2.0.0-27
changelog:
  - Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work
                             if ID provider is authenticated with GSSAPI


author: Michal Židek <mzidek@redhat.com> - 2.0.0-29
changelog:
  - Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise():
                             /usr/libexec/sssd/proxy_child killed by 6


author: Michal Židek <mzidek@redhat.com> - 2.0.0-30
changelog:
  - Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to
                        retrieve AD users through IPA Trust


author: Michal Židek <mzidek@redhat.com> - 2.0.0-32
changelog:
  - Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc
              and libtevent to avoid an issue in GPO processing


author: Michal Židek <mzidek@redhat.com> - 2.0.0-33
changelog:
  - Resolves: rhbz#1646113 - Missing concise documentation about valid options
                             for sssd-files-provider


author: Michal Židek <mzidek@redhat.com> - 2.0.0-34
changelog:
  - Resolves: rhbz#1622008 - Error message when IPA server uninstall calls
                             kdestroy caused by KCM returning a wrong error
                             code during the delete operation


author: Michal Židek <mzidek@redhat.com> - 2.0.0-36
changelog:
  - Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss
                             suggests using * for backend sss


author: Michal Židek <mzidek@redhat.com> - 2.0.0-38
changelog:
  - Resolves: rhbz#1578014 - sssd does not work under non-root user
  - Note: Actually the patches were in the 2.0.0-37, this one just adds this
          changelog because it was missing.


author: Michal Židek <mzidek@redhat.com> - 2.0.0-39
changelog:
  - Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than
                             1.x, this can result in time outs


author: Michal Židek <mzidek@redhat.com> - 2.0.0-40
changelog:
  -Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error.
                            UnknownProperty: Unknown property


author: Michal Židek <mzidek@redhat.com> - 2.0.0-41
changelog:
  -Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong
                            subdomain service name being used


author: Michal Židek <mzidek@redhat.com> - 2.0.0-42
changelog:
  - Resolves: rhbz#1645291 - Perform some basic ccache initialization as part
                             of gen_new to avoid a subsequent switch call
                             failure


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-43
changelog:
  - Resolves: rhbz#1672780 - gdm login not prompting for username when smart
                             card maps to multiple users


author: Michal Židek <mzidek@redhat.com> - 2.0.0-45
changelog:
  - Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is
    done here in order to unblock gating changes before rebase.
  - Related: rhbz#1682305


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-2
changelog:
  - Resolves: rhbz#1673443 - sssd man pages: The default value of
                             "ldap_user_home_directory" is not mentioned
                             with AD server configuration


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-3
changelog:
  - Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with
                             no members


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-4
changelog:
  - Resolves: rhbz#1283798 - sssd failover does not work on connecting to
                             non-responsive ldaps:// server


author: Michal Židek <mzidek@redhat.com> - 2.2.0-6
changelog:
  - Resolves: rhbz#1726945 - negative cache does not use values from
                             'filter_users' config option for known domains


author: Michal Židek <mzidek@redhat.com> - 2.2.0-7
changelog:
  - Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is
                             not FIPS140 compliant


author: Michal Židek <mzidek@redhat.com> - 2.2.0-8
changelog:
  - Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder
                             repository
                           - This just required a raise in release number
                             and changelog for the record.


author: Michal Židek <mzidek@redhat.com> - 2.2.0-10
changelog:
  - Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing
                             the trailing colon


author: Michal Židek <mzidek@redhat.com> - 2.2.0-11
changelog:
  - Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                             non-root user


author: Michal Židek <mzidek@redhat.com> - 2.2.0-13
changelog:
  - Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
              systemd-user service in the account phase in RHEL-8


author: Michal Židek <mzidek@redhat.com> - 2.2.0-14
changelog:
  - Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                             should not cause files domain entries to be
                             qualified, this can break sudo access


author: Michal Židek <mzidek@redhat.com> - 2.2.0-15
changelog:
  - Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                             loop if wrong PIN was provided


author: Michal Židek <mzidek@redhat.com> - 2.2.0-16
changelog:
  - Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                             the IP address of the machine updated in IPA upon
                             sssd.service startup


author: Michal Židek <mzidek@redhat.com> - 2.2.0-17
changelog:
  - Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                             keyring
  - Also apply a patch to fix gating tests issue


author: Michal Židek <mzidek@redhat.com> - 2.2.0-18
changelog:
  - Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
  - Also sync. kcm multihost tests with master


author: Michal Židek <mzidek@redhat.com> - 2.2.0-19
changelog:
  - Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                             new ones (kcm)


author: Michal Židek <mzidek@redhat.com> - 2.2.3-2
changelog:
  * Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release
              PART2: Fix gating issue.


author: Michal Židek <mzidek@redhat.com> - 2.2.3-3
changelog:
  * Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release
              Increasing version number to pick latest libldb


author: Michal Židek <mzidek@redhat.com> - 2.2.3-4
changelog:
  * Resolves: rhbz#1781728 - sssctl config-check command does not give proper
                             error messages with line numbers


author: Michal Židek <mzidek@redhat.com> - 2.2.3-5
changelog:
  * Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character
                             for match rules sss-certmap


author: Michal Židek <mzidek@redhat.com> - 2.2.3-9
changelog:
  * Resolves: rhbz#1783190 - [abrt] [faf] sssd:
                             raise(): /usr/libexec/sssd/sssd_autofs killed by 6


author: Michal Židek <mzidek@redhat.com> - 2.2.3-10
changelog:
  * Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap
                             connection timeout


author: Michal Židek <mzidek@redhat.com> - 2.2.3-14
changelog:
  - Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be
                             specified up to the seconds


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-16
changelog:
  - Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is
                             omitted and auth_provider is krb5


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-17
changelog:
  - Resolves: rhbz#1718193 - p11_child should have an option to skip
                             C_WaitForSlotEvent if the PKCS#11 module
                             does not implement it properly


author: Michal Židek <mzidek@redhat.com> - 2.2.3-18
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1810634 - id command taking 1+ minute for returning user
                             information


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate
                             (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-1
changelog:
  - Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3
  - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure
  - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-2
changelog:
  - Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-3
changelog:
  - Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package
  - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP
  - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache
  - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for
                             inotify events, and no updates are triggered
  - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card"
                             on GDM login with smart-card
  - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat
  - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network.
  - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management
  - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest
                             if LDAP entries do not contain AD forest root information
  - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories
                             in SSSD-AD direct integration.
  - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card
  - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False
  - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-4
changelog:
  - Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication
  - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider
  - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-5
changelog:
  - Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache
  - Fixed "requires/provides" rpmdiff warning


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-7
changelog:
  - Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.
  - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-8
changelog:
  - Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working
  - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema
  - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf
  - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-9
changelog:
  - Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-1
changelog:
  - Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4
  - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI
  - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search()
  - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording
  - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x
  - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD.
  - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process
  - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL
  - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase)
  - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page
  - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals"
  - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains
  - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file
  - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes
  - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff
  - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command
  - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-3
changelog:
  - Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr()
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal
  - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-4
changelog:
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8]
  - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-5
changelog:
  - Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-6
changelog:
  - Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
  - Resolves: rhbz#1915395 - Memory leak in the simple access provider
  - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-7
changelog:
  - Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
  - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
  - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-8
changelog:
  - Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
  - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.0-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
  - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
  - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
  - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
  - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
  - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
  - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
  - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
  - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
  - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
  - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
  - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
  - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
  - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
  - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
  - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
  - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
  - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
  - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
  - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
  - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
  - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
  - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
  - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
  - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
  - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
  - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
  - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
  - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-2
changelog:
  - Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
  - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
  - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
  - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
  - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
  - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
  - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2
changelog:
  - Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
  - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1
changelog:
  - Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
  - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected
  - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator
  - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed
  - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb
  - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces)
  - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s
  - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
  - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA
  - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
  - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1
changelog:
  - Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
  - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
  - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
  - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
  - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
  - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
  - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
  - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
  - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
  - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
  - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
  - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-3
changelog:
  - Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
  - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
  - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
  - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-2
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
  - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
  - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
  - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
  - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
  - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
  - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
  - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
  - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
  - Resolves: rhbz#2087745 - 2FA prompting setting ineffective
  - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.2-1
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
  - Resolves: rhbz#2098617 - Harden kerberos ticket validation
  - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
  - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
  - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-5
changelog:
  - Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release
    Rebuild against Samba rebase.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.1-1
changelog:
  - Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
  - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr
  - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter
  - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
  - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
  - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
  - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization
  - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around
  - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-1
changelog:
  - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
  - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)
  - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket
  - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7
  - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name
  - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable")
  - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
  - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy
  - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files
  - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure
  - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000]
  - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization
  - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working
  - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides
  - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication
  - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache
  - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP'
  - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider')
  - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest
  - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf
  - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8]
  - Resolves: RHEL-10721 - very bad performance when requesting service tickets
  - Resolves: RHEL-19011 - Invalid handling groups from child domain
  - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8]
  - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8]
  - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-5.1
changelog:
  - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z]
  - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z]
  - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z]
  - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z]
  - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z]
  - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z]


author: Clark Williams <williams@redhat.com> - 1.10-1
changelog:
  - utils: Fix bounds check on cpu and end_cpu variables
  - stalld: Support denylisting of tasks in stalld
  - src/utils: use right argument for warning printf


author: Clark Williams <williams@redhat.com> - 1.11-1
changelog:
  - redhat/stalld.spec: pick up gating test version for changelog
  - utils.c: set daemon umask to restrict global write/execute (1934586)
  - hardening fixes from coverity scan (1934590)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.12-1
changelog:
  - stalld.8: fix diff cruft left in manpage source
  - stalld.c: clean up handling of nr_running
  - stalld.c: remove duplicate parameter to fill_waiting_task()
  - stalld: Add error handling in get_cpu_idle_time()
  - stalld.service: Run stalld as sched_fifo via systemd
  - packaging: clean up Makefiles and rpm specfile
  - stalld: Always print current function for info messages
  - stalld: Always print current function for warn messages
  - stalld: Always print current function for die messages
  - utils: change PATHMAX to 4096


author: Fernando Pacheco <fpacheco@redhat.com> - 1.13-1
changelog:
  - stalld: Fix log message on boost_cpu_starving_vector()
  - stalld: Add the overload control to the single-threaded mode
  - stalld: Add the adaptive mode option
  - stalld: Use the last mode set in the cmdline
  - stalld: Fallback to the adaptive mode if force_fifo is selected
  - stalld: Make single-threaded mode the default one
  - stalld.service: Always restart stalld on exit
  - utils.c: Fail if user is not root
  - utils.c: Make the path to sched_debug path dynamic


author: Fernando Pacheco <fpacheco@redhat.com> - 1.14.1-1
changelog:
  - stalld: Coding style cleanup
  - stalld: spaces in place of <TAB>
  - throttling: Use RT_RUNTIME_PATH in rt_throttling_is_off()
  - throttling: Check open() on turn_off_rt_throttling
  - throttling: Adjust variables in restore_rt_throttling()
  - stalld.c: utils.c: Remove complex assignments from variable declarations
  - stalld.h: Define MAX_PATH/DIR_PATH/FILE_NAME and use them
  - stalld: Adjust variables in parse_old_task_format()
  - utils.c: Use MAX_PATH for pidfile
  - stalld.c: Remove variable declaration from the middle of  the function
  - stalld: Respect -l option in single threaded mode (1983103)
  - utils: s/try_to_open_file/check_file_exists/
  - utils: use check_file_exists in setup_hr_tick()
  - utils: Check for the new sched_features path


author: Fernando Pacheco <fpacheco@redhat.com> - 1.15-1
changelog:
  - stalld: Fix incorrect open() return value checks
  - stalld: Pass errno to strerror() on sig*set() failures
  - throttling: Always null terminate sched_rt_runtime_us output
  - stalld: Remove unreachable statement in detect_task_format()
  - tests: Fix uninitialized value action.sa_mask
  - utils: Bail if malloc() returns null in parse_cpu_list()
  - stalld: Use correct format specifier for long types
    Resolves: rhbz#2016010


author: Fernando Pacheco <fpacheco@redhat.com> - 1.16-1
changelog:
  - stald/utils: Space, lines and voids clenaups
  - stalld: Add an option to easily set stalld as SCHED_DEADLINE
  - stalld: Comments cleanup
  - src/utils: Comments cleanup
  - src/throttling: Comments cleanup
  - src/stalld.h Comments cleanup
    Resolves: rhbz#2068550


author: Leah Leshchinsky <lleshchi@redhat.com> - 1.17.1-1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  Resolves: rhbz#2120799


author: Clark Williams <williams@redhat.com> - 0.0-1
changelog:
  - initial version of specfile
  - Makefile mods for RPM builds
  - added systemd service and config files


author: Clark Williams <williams@redhat.com> - 1.0-2
changelog:
  - use _docdir macro for README.md
  - use _mandir macro for stalld.8 manpage
  - use tabs for spacing
  - added push Makefile target to copy latest to upstream URL


author: Clark Williams <williams@redhat.com> - 1.0-3
changelog:
  - Place BuildRequires on individual lines
  - Fix changelog notations
  - Modify build command to pass in CFLAGS and LDFLAGS
  - fix compiler warnings in stalld.c


author: Clark Williams <williams@redhat.com> - 1.0-4
changelog:
  - Fix an option in README.md; consistency in user facing docs.
  - gitignore: ignore object files and the stalld executable
  - Makefile: add 'static' target to link stalld statically
  - use FIFO for boosting (v3)
  - stalld: update usage message to include --force_fifo/-F option
  - stalld.c: fix sched_debug parsing and modify waiting task parsing


author: Clark Williams <williams@redhat.com> - 1.1-1
changelog:
  - Fix an option in README.md; consistency in user facing docs.
  - Makefile: add 'static' target to link stalld statically
  - gitignore: ignore object files and the stalld executable
  - use FIFO for boosting (v3)
  - stalld.c: fix sched_debug parsing and modify waiting task parsing
  - redhat:  update release for features and bugfix
  - stalld: Do not die if sched_debug returns an invalid value
  - src/stalld: Do not die if the comm is too large
  - src/stalld: Do not die if cannot write a message to the log
  - src/stalld: Do not die if the main runs while a thread is monitoring the CPU
  - implement RT throttling management and refactor source files
  - more refactoring
  - src/stalld: Reuse already read nr_running nr_rt_running
  - src/stalld: Gracefully handle CPUs not found on sched_debug
  - src/stalld: Use dynamically allocated memory to read sched_debug
  - src/utils: Die with a divizion by zero if verbose
  - src/stalld: Add config_buffer_size variable
  - src/stalld: Increase the sched_debug read buffer if it gets too small
  - src/stalld: Fix an retval check while reading sched_debug
  - src/throttling: Fix a compilation warning


author: Clark Williams <williams@redhat.com> - 1.2-1
changelog:
  - utils.c: added info() functions
  - detect and correctly parse old-style /proc/sched_debug
  - src/stalld: Fix an retval check while reading sched_debug
  - src/throttling: Fix a compilation warning
  - ensure we only count task lines in old-format sched_debug info
  - Add comments, clean up trailing whitespace
  - src/utils: Fix runtime parameters check
  - stalld: Do not take actions if log_only is set
  - remove warning from parse_old_task_format


author: Clark Williams <williams@redhat.com> - 1.3-1
changelog:
  - Readme: Add information about repositories
  - Add version management and version option
  - create doc and scripts directory and add info on releases


author: Clark Williams <williams@redhat.com> - 1.4-1
changelog:
  - stalld: Set rt_runtime to -1 before trying the SCHED_DEADLINE
  - Fix incorrect recursion of specfile version field


author: Clark Williams <williams@redhat.com> - 1.7-1
changelog:
  - rework detect_task_format and buffer_size logic
  - make CFLAGS for local compile match rpmbuild CFLAGS


author: Clark Williams <williams@redhat.com> - 1.8-1
changelog:
  - Fix Readiness Protocol Mismatch with systemd
  - test01:  update to use buildin atomic operations
  - test01: add throttling check


author: Clark Williams <williams@redhat.com> - 1.9-1
changelog:
  - Set starvation threshold default to 30 seconds
  - rework read buffer allocation to properly find page size
  - Add the -g/--granularity option
  - Change the default granularity to five seconds
  - Implement idle detection
  - Implement the single-threaded mode
  - Add HRTICK_DL support


author: Fernando Pacheco <fpacheco@redhat.com> - 1.12-1
changelog:
  - stalld.8: fix diff cruft left in manpage source
  - stalld.c: clean up handling of nr_running
  - stalld.c: remove duplicate parameter to fill_waiting_task() (1934582)
  - stalld.service: Run stalld as sched_fifo via systemd
  - stalld: Add error handling in get_cpu_idle_time() (1966259)
  - packaging: clean up Makefiles and rpm specfile (1972806)
  - stalld: Always print current function for info messages
  - stalld: Always print current function for warn messages
  - stalld: Always print current function for die messages
  - utils: change PATHMAX to 4096 (1934581)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.13-1
changelog:
  - stalld: Fix log message on boost_cpu_starving_vector()
  - stalld: Add the overload control to the single-threaded mode
  - stalld: Add the adaptive mode option
  - stalld: Use the last mode set in the cmdline
  - stalld: Fallback to the adaptive mode if force_fifo is selected
  - stalld: Make single-threaded mode the default one (1920041)
  - stalld.service: Always restart stalld on exit
  - utils.c: Fail if user is not root
  - utils.c: Make the path to sched_debug path dynamic (1977663)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.14.1-1
changelog:
  - stalld: Coding style cleanup
  - stalld: spaces in place of <TAB>
  - throttling: Use RT_RUNTIME_PATH in rt_throttling_is_off()
  - throttling: Check open() on turn_off_rt_throttling
  - throttling: Adjust variables in restore_rt_throttling()
  - stalld.c: utils.c: Remove complex assignments from variable declarations
  - stalld.h: Define MAX_PATH/DIR_PATH/FILE_NAME and use them
  - stalld: Adjust variables in parse_old_task_format()
  - utils.c: Use MAX_PATH for pidfile
  - stalld.c: Remove variable declaration from the middle of  the function
  - stalld: Respect -l option in single threaded mode (1983100)
  - utils: s/try_to_open_file/check_file_exists/
  - utils: use check_file_exists in setup_hr_tick()
  - utils: Check for the new sched_features path


author: Fernando Pacheco <fpacheco@redhat.com> - 1.15-1
changelog:
  - stalld: Fix incorrect open() return value checks
  - stalld: Pass errno to strerror() on sig*set() failures
  - throttling: Always null terminate sched_rt_runtime_us output
  - stalld: Remove unreachable statement in detect_task_format()
  - tests: Fix uninitialized value action.sa_mask
  - utils: Bail if malloc() returns null in parse_cpu_list()
  - stalld: Use correct format specifier for long types
    Resolves: rhbz#1990057, rhbz#1996799, rhbz#1996825


author: Fernando Pacheco <fpacheco@redhat.com> - 1.16-1
changelog:
  - stald/utils: Space, lines and voids clenaups
  - stalld: Add an option to easily set stalld as SCHED_DEADLINE
  - stalld: Comments cleanup
  - src/utils: Comments cleanup
  - src/throttling: Comments cleanup
  - src/stalld.h Comments cleanup
    Resolves: rhbz#2068549


author: Leah Leshchinsky <lleshchi@redhat.com> - 1.17.1-1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  Resolves: rhbz#2120800


author: Dennis Keefe <dkeefe@redhat.com> - 2.0.0-4
changelog:
  - Update to 2.0.0
  - Resolves: rhbz#1760906
  - Fix a bug where last update time for variable length metadata was not set
    properly on startup:
  - Resolves: rhbz#1720399
  - Specify path of PID file as "/run/stratisd.pid" instead of 
    "/var/run/stratisd.pid".
  - Resolves: rhbz#1754649
  - For a particular log entry, reduce log level from INFO to DEBUG and make the
    log message more detailed:
  - Resolves: rhbz#1680052


author: Dennis Keefe <dkeefe@redhat.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Resolves: rhbz#1791473
  - Update Stratis RPM Spec File
  - Resolves: rhbz#1828487
  - Support per-pool encryption of the devices that form a pool's data tier
  - Resolves: rhbz#1768580
  - Improve systemd unit file description
  - Resolves: rhbz#1756525


author: Dennis Keefe <dkeefe@redhat.com> - 2.3.0-2
changelog:
  - Update to 2.3.0
  - Resolves: rhbz#1885328
  - Stratis devices inhabit an existing root directory path
  - Resolves: rhbz#1798244
  - Add Clevis Support
  - Resolves: rhbz#1868100
  - Improve stratisd log levels
  - Resolves: rhbz#1757976


author: Bryan Gurney <bgurney@redhat.com> - 2.4.0-3
changelog:
  - Update to 2.4.0
  - Resolves: rhbz#1931671
  - Improve stratis by adding Multi-threading
  - Resolves: rhbz#1927485
  - Dump stratis configuration on demand or in debug
  - Resolves: rhbz#1735475
  - Add noalign option to XFS creation on MDV
  - Resolves: rhbz#1908318
  - Cap thinpool metadata device size at devicemapper-set limit
  - Resolves: rhbz#1707461


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1931671
  - Ensure that binaries are installed with proper features enabled
  - Split dracut modules out to subpackage
  - Add additional dependencies in dracut module


author: John Kacur <jkacur@redhat.com> - 0.15.00-1
changelog:
  - Rebase to upstream V0.15.00
  - Add the following upstream patches
  - stress-shm: move /dev/shm check to earlier in the setup phase
  - stress-shm: skip stressor if /dev/shm is not mounted with tmpfs on linux
  - stress-sysfs: check for zero sysfs entries after pruning the directory
  Resolves: rhbz#2144070


author: John Kacur <jkacur@redhat.com> - 0.17.08-1
changelog:
  - Rebase to upstream V0.17.08
  - ARM: Don't declare inlined yield helper if yield is not available
  Resolves: RHEL-33304


author: Kalev Lember <kalevlember@gmail.com> - 0.5.1-1
changelog:
  - Update to 0.5.1
  - Build with libmusicbrainz4
  - Adjust the spec file for the changes in private library location
  - Remove and obsolete the -devel subpackage


author: David King <amigadave@amigadave.com> - 3.15.90-1
changelog:
  - Update to 3.15.90
  - Use license macro for COPYING
  - Use pkgconfig for BuildRequires
  - Compile GSettings schemas


author: Michael Catanzaro <mcatanzaro@redhat.com> - 3.28.3-3
changelog:
  - Use autosetup so WebKitGTK patch actually gets applied, and rewrite the patch to work
    Resolves: RHEL-26699


author: Tom Stellard <tstellar@redhat.com> - 4.0.2-2
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable Go tests


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.0-2.20200828git0c238a2
changelog:
  - Backport fixes from 0.4.0 stable branch. Resolves: rhbz#1868375
    (fixes usage of swtpm-localca with passwords when signing keys)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.2-1.20201201git2df14e3
changelog:
  - Update to 0.4.2, to address potential symlink vulnerabilities (CVE-2020-28407).
    Resolves: rhbz#1906043


author: Michal Sekletár <msekleta@redhat.com> - 11.7.3-2
changelog:
  - sysstat's buildsystem doesn't really use LDFLAGS, we have to merge CFLAGS and LDFLAGS to get binaries with full RELRO (#1624177)


author: <msekleta@redhat.com> - 11.7.3-7
changelog:
  - Don't trigger autofs mounts when running sadc (#2000910)
  - sar: Add missing %gnice CPU value for tickless CPU (#2000916)
  - sadf: Fix seg fault on empty data files (#1910841)
  - sar: Fix typo in manual page (#1877836)


author: psimovec <psimovec@redhat.com> - 11.7.3-11
changelog:
  - fix the arithmetic overflow in allocate_structures() that is still possible on some 32 bit systems (CVE-2023-33204)


author: Ivana Varekova <varekova@redhat.com> - 8.0.1-1
changelog:
  - update to 8.0.1
  - remove useless patches
  - spec file cleanup
  - remove smp build flag (ar problem)
  - add libdir flags


author: Ivana Varekova <varekova@redhat.com> - 8.0.2-2
changelog:
  - change license tag
  - remove sysstat.crond source (add -d)
  - remove obsolete sysconfig file
  - spec file cleanup


author: Ivana Varekova <varekova@redhat.com> - 9.0.4-3
changelog:
  - fix init script - add INIT INFO flags (#522740)
    and add condrestart, try-restart and force-reload (#522743)


author: Ivana Hutarova Varekova <varekova@redhat.com> - 9.0.6.1-7
changelog:
  - remove needless DOCDIR setting
  - remove needless INIT_DIR setting
  - fix the problem with --disable-man-group option


author: Ivana Hutarova Varekova <varekova@redhat.com> - 10.0.0-4
changelog:
  - close the file descriptor in a special situation in read_uoptime function
  - fix the number on open files in cifsiostat output


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.1-1
changelog:
  - resolves: #844387
    update to 10.1.1
  - keep log files for 28 days instead of 7
  - collect all aditional statistics


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.2-1
changelog:
  - resolves: #863791
    updated to 10.1.2
  - resolves: #850333
    migrated to the new systemd-rpm macros
  - cleaned .spec file


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.2-2
changelog:
  - added new -y option to iostat command to skip first since boot report if
    displaying multiple reports


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.6-1
changelog:
  - resolves: #972508
    updated to 10.1.6
  - resolves: #993394
    fixed FTBFS (added BR on systemd)
  - install the docs in the new pkgdocdir
    (thanks to Mathieu Bridon <bochecha@fedoraproject.org> for the patch)


author: Lukáš Zaoral <lzaoral@redhat.com> - 11.7.3-13
changelog:
  - fix memory allocation errors with malformed sa files (RHEL-35511)
  - reorder patches to prevent errors during their application


author: Stan Cox <scox@redhat.com> - 4.7-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 4.8-2
changelog:
  - rhbz2156092 = rhbz1997192
  - rhbz2145241 = rhbz2145242
  - rhbz2156093 = rhbz2149223
  - rhbz2156095 = rhbz2149666
  - rhbz2156094 = rhbz2154430


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-4
changelog:
  - Removing build-time dependency on sharutils(rhbz#1587877)
  - Changing git dependency to smaller git-core


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-6
changelog:
  - Resolves: #1715423 - tcpdump pre creates user and groups unconditionally
  - Resolves: #1655622 - CVE-2018-19519 Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.3-2
changelog:
  - Resolves: #1860216 - tcpdump can not parse mptcp options
  - Resolves: #1901635 - ppp decapsulator can be convinced to allocate a large amount of memory
  - Adding tedude test to gating


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - separate package for libpcap.
  - update tcpdump to 3.4, libpcap to 0.4.
  - added arpwatch (but disabled for now)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - include A. Kuznetsov's patches to libpcap/tcpdump.
  - added arpsnmp to package (#3258).
  - arp2ethers written for different of awk (#4326).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - remove sparc64 SIOCGIFNAME hack, not needed with (at least) kernel 2.2.12-40.
  - upgrade to ANK ss991030 snapshot with pcap magic fix (#6773).
  - add getprotobyname lookup (#6725).
  - getservbyname port lookup appears functional (#7569).
  - remove uid 2090 backdoor (sorry Dave) (#7116).


author: Matt Wilson <msw@redhat.com>
changelog:
  - source /etc/init.d/functions
  - back out /etc/init.d/arpwatch, place file in /etc/rc.d
  - move initscript to /etc/init.d
  - changed initscript to use start() and stop() functions
  - added condrestart to init script
  - added %post %preun %postun scripts to register arpwatch script
  - added Prereq: for all things needed in post/preun/postun


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - eliminate more buffer overflows (from FreeBSD) (#20069).
  - 802.1q ether type incorrect (#19850).
  - add -u flag to drop arpwatch privs (#19696).


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - tcpdump: spice up the manpage about interfaces
  - tcpdump: add 'all' and 'any' keywords to -i, saner default behaviour.
  - upgrade arpwatch to 2.1a10


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Initial packaging with latest tcpdump.org CVS tcpdump-3.6 and libpcap-0.6.
  - add earlier print-domain.c, the latest is segfaulting
  - don't unnecesessarily include snprintf.o, it didn't compile with gcc 2.96 anyway
  - don't use savestr, require openssl, tweak tweak tweak
  - add tcpslice, patch it a bit for egcs detection


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Update to 20010108 CVS, disable some upstreamed patches.
  - Change some additional .1 pages to .8.
  - Add droproot patch, some --usage and man page fixes.


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Make SMB printing output a lot more quiet unless in verbose mode.
  - Make -n resolve port/protocol numbers but not hostnames, -nn for no
    resolving at all
  - Separate droproot patch from a more generic man/usage fix one
  - Add non-promiscuous mode -by default patch, but don't apply it by default


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - use --enable-ipv6
  - Add two patches from CVS to enhance 802.2 printing, and more importantly,
    to be able to specify 'no stp'


author: Harald Hoyer <harald@redhat.com>
changelog:
  - fixed EINTR stopping for e.g. SIGSTOP. (#22008)
  - added -u option for tcpdump (#20231)
  - new arpwatch version (#23172)
  - added "all" and "one" interface for -i (#20907)
  - added arpwatch sysconfig (#23172)


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - fix building of tcpslice on glibc 2.2.2 (time.h)
  - disable /etc/init.d requirement and fix %post scripts in arpwatch


author: Harald Hoyer <harald@redhat.de> 12:3.6.2-10
changelog:
  - took old purge patch for filters
  - fixed #54225,#58346
  - drop root by default #49635
  - fixed #54593
  - fixed #57711


author: Harald Hoyer <harald@redhat.com> - 14:3.8.2-1
changelog:
  - update to tcpdump-3.8.2, libpcap-0.8.2, arpwatch-2.1a13
  - patched tcpdump configure for gcc34 optimizations
  - removed obsolete patches


author: Ivana Varekova <varekova@redhat.com> - 14:3.8.2-9
changelog:
  - added arpsnmp options to specify sender and recipient
    and corrected arpwatch and arpsnmp man pages (#70386)


author: Martin Stransky <stransky@redhat.com> - 14:3.9.3-1
changelog:
  - New upstream version - 3.9.3
  - fix for #164227 (buffer overflow)
  - fix for #164230 (missing debug info)


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.4-9
changelog:
  - fix processing of Prism and AVS headers (#206686)
  - fix arp2ethers script
  - update ethercodes.dat
  - move pcap man page to devel package


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.7-1
changelog:
  - update to 3.9.7
  - with -C option, drop root privileges before opening first savefile (#244860)
  - update tcpslice to 1.2a3
  - include time patch from Debian to fix tcpslice on 64-bit architectures


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.8-5
changelog:
  - update config.{guess,sub} when building tcpslice
  - remove -D_GNU_SOURCE from CFLAGS
  - disable libsmi check in configure


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:4.0.0-1.20090818git832d2c
changelog:
  - update to post 4.0.0 git snapshot 20090818git832d2c
  - print retrans and reachable times in ICMPv6 as milliseconds (#474264)


author: Michal Sekletar <msekleta@redhat.com> - 14:4.1.1-3
changelog:
  - Fix manpage (#663739)
  - Fix improper handling of bad date format in tcpslice (#684005)
  - Spec file clean up


author: Michal Sekletar <msekleta@redhat.com> - 14:4.2.0-1
changelog:
  - updated to 4.2.0
  - added new source file ppi.h, missing in upstream tarball
  - disabled make check because of missing .pcap files in testsuite
  - dropped unnecessary patches


author: Michal Sekletar <msekleta@redhat.com> - 14:4.6.2-2
changelog:
  - fix for CVE-2014-8767 (#1165160)
  - fix for CVE-2014-8768 (#1165161)
  - fix for CVE-2014-8769 (#1165162)


author: Michal Sekletar <msekleta@redhat.com> - 14:4.7.3-1
changelog:
  - rebase to 4.7.3 (#1201573)
  - contains fixes for CVE-2015-0261 CVE-2015-2154 CVE-2015-2153 CVE-2015-2155 (#1201799,#1201792,#1201795,#1201797)


author: Hangbo Fan <fanhangbo.fhb@alibaba-inc.com> - 14:4.9.3-5.0.1
changelog:
  - Add doc sub package
  - cherry-pick `add sw patch #199f8102fc30b385b28c16494d2a683ecd265166`.(nijie@wuxiat.com)


author: Jan Macku <jamacku@redhat.com> - 6.22.03-1
changelog:
  - Update to tcsh-6.22.03
  - Drop tcsh-6.22.02-avoid-gcc-to-fail.patch                              - applied by upstream
  - Drop tcsh-6.22.02-call-seterror-consistently-and-abort-quickly.patch   - applied by upstream
  - Drop tcsh-6.22.02-avoid-crashing-when-loading-corrupted-history.patch  - applied by upstream


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-69
changelog:
  - Resolves: #1445259 - telnet won't build with latest gcc
  - added note about address resolution in manpage


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-73
changelog:
  - Resolves: #1602711 - Please review important issues found by covscan
  - Resolves: #1637085 - Option -i is missing in telnet in el8 but is available in el7


author: Than Ngo <than@redhat.com> - 9:20200327-19
changelog:
  - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 9:20200406-26.0.1
changelog:
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 build
  - anolis texlive add loongarch64(Yaxuan Liu)


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.2-25
changelog:
  - Fix inconsistent --map-file option spelling in manual (rhbz#2066853)
  - Fix memory corruption in tftpd when filename remapping with macro \x
    is used (rhbz#2066862)


author: Weitao Zhou <zhouwt@linux.alibaba.com> 5.2-26.0.1
changelog:
  - Make configure an order-only prerequisite of aconfig.h.in
  - remove autoreconf in %build to fix parallel build error
  - use extern in header files when declaring global variables for compatible gcc10 build
  - Add doc sub package


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - fix to permit tftp put's (#18128).
  - startup as root with chroot to /tftpboot with early reversion to nobody
    is preferable to starting as nobody w/o ability to chroot.
  - %post is needed by server, not client. Add %postun for erasure as well.


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated tftp client to 0.17 stable (#19640),
  - drop dependency on xinetd for tftp client (#25051),


author: Helge Deller <hdeller@redhat.de>
changelog:
  - changed "wait" in xinetd file to "yes" (hpa-tftpd forks and exits) (#26467)
  - fixed hpa-tftpd to handle files greater than 32MB (#23725)
  - added "-l" flag to hpa-tftpd for file-logging (#26467)
  - added description for "-l" to the man-page


author: Helge Deller <hdeller@redhat.de> (0.17-13)
changelog:
  - updated tftp-hpa source to tftp-hpa-0.17
  - tweaked specfile with different defines for tftp-netkit and tftp-hpa version
  - use hpa's tftpd.8 man page instead of the netkits one


author: Elliot Lee <sopwith@redhat.com> 0.17-15
changelog:
  - Add patch4: netkit-tftp-0.17-defaultport.patch for bug #57562
  - Update to tftp-hpa-0.28 (bug #56131)
  - Remove include/arpa/tftp.h to fix #57259
  - Add resource limits in tftp-xinetd (#56722)


author: Martin Nagy <mnagy@redhat.com> - 0.48-1
changelog:
  - upgrade to 0.48
  - remove the old sigjmp patch (fixed in upstream)
  - make some changes in spec file (#226489)


author: Jiri Skala <jskala@redhat.com> - 0.49-7
changelog:
  - fixes #666746 - Packaging mistake: confusing %doc files patched+unpatched
  - fixes printing statistics using -v option


author: Martin Stransky <stransky@redhat.com> - 60.7.2-3
changelog:
  - Rebuild to fix rhbz#1725919 - Thunderbird fails to authenticate
    with gmail with ssl/tls and OAuth2.


author: Tomas Popela <tpopela@redhat.com> - 78.12.0-3
changelog:
  - Add script to process the official tarball to comply with PELC review
  - Fix the build with newer glibc


author: Adam Tkac <atkac redhat com> 0.0.90-0.4.20090403svn3751
changelog:
  - update to r3751
  - patches merged
    - tigervnc-xclients.patch
    - tigervnc-clipboard.patch
    - tigervnc-rh212985.patch
  - basic RandR support in Xvnc (resize of the desktop)
  - use built-in libjpeg (SSE2/MMX accelerated encoding on x86 platform)
  - use Tight encoding by default
  - use TigerVNC icons


author: Adam Tkac <atkac redhat com> 0.0.90-0.6.20090427svn3789
changelog:
  - update to r3789
    - tigervnc-rh494801.patch merged
  - tigervnc-newfbsize.patch is no longer needed
  - fix problems when vncviewer and Xvnc run on different endianess (#496653)
  - UltraVNC and TightVNC clients work fine again (#496786)


author: Adam Tkac <atkac redhat com> 0.0.90-0.10
changelog:
  - rebuild against 1.6.1.901 X server (#497835)
  - disable i18n, vncviewer is not UTF-8 compatible (#501832)


author: Adam Tkac <atkac redhat com> 0.0.91-0.11
changelog:
  - update to 0.0.91 (1.0.0 RC1)
  - patches merged
    - tigervnc10-rh499401.patch
    - tigervnc10-rh497592.patch
    - tigervnc10-rh501832.patch
  - after discusion in upstream drop tigervnc-bounds.patch
  - configure flags cleanup


author: Adam Tkac <atkac redhat com> 0.0.91-0.13
changelog:
  - temporary use F11 Xserver base to make Xvnc compilable
  - BuildRequires: libXi-devel
  - don't ship tigervnc-server-module on s390/s390x


author: Adam Tkac <atkac redhat com> 1.0.0-2
changelog:
  - update underlying X source to 1.6.4-0.3.fc11
  - remove bogus '-nohttpd' parameter from /etc/sysconfig/vncservers (#525629)
  - initscript LSB compliance fixes (#523974)
  - improve -LowColorSwitch documentation and handling (#510185)
  - honor dotWhenNoCursor option (and it's changes) every time (#524340)


author: Adam Tkac <atkac redhat com> 1.0.90-0.1.20091221svn3929
changelog:
  - update to 1.0.90 snapshot
  - patches merged
    - tigervnc10-compat.patch
    - tigervnc10-rh510185.patch
    - tigervnc10-rh524340.patch
    - tigervnc10-rh516274.patch


author: Adam Tkac <atkac redhat com> 1.0.90-0.2.20091221svn3929
changelog:
  - add patch for upstream X.Org issue #25909
  - add libXdmcp-devel to build requires to build Xvnc with XDMCP support (#552322)


author: Adam Tkac <atkac redhat com> 1.0.90-0.4.20091221svn3929
changelog:
  - mark stack as non-executable in jpeg ASM code
  - add xorg-x11-xauth to Requires
  - add support for X.Org 1.8
  - drop shave sources, they are no longer needed


author: Adam Tkac <atkac redhat com> 1.0.90-0.6.20100219svn3993
changelog:
  - add mesa-dri-drivers and xkeyboard-config to -server Requires
  - update to r3993 1.0.90 snapshot
    - tigervnc11-noexecstack.patch merged
    - tigervnc11-xorg18.patch merged
    - xserver18.patch is no longer needed


author: Adam Tkac <atkac redhat com> 1.0.90-0.9.20100219svn3993
changelog:
  - add server-applet subpackage which contains Java vncviewer applet
  - fix Java applet; it didn't work when run from web browser
  - add xorg-x11-xkb-utils to server Requires


author: Adam Tkac <atkac redhat com> 1.0.90-0.10.20100420svn4030
changelog:
  - update to r4030 snapshot
  - patches merged to upstream
    - tigervnc11-rh522369.patch
    - tigervnc11-rh551262.patch
    - tigervnc11-r4002.patch
    - tigervnc11-r4014.patch


author: Adam Tkac <atkac redhat com> 1.0.90-0.11.20100420svn4030
changelog:
  - link libvnc.so "now" to catch "undefined symbol" errors during Xorg startup
  - use always XkbConvertCase instead of XConvertCase (#580159, #586406)
  - don't link libvnc.so against libXi.la, libdix.la and libxkb.la; use symbols
    from Xorg instead


author: Adam Tkac <atkac redhat com> 1.0.90-0.14.20100420svn4030
changelog:
  - fix memory leak in Xvnc input code (#597172)
  - don't crash when receive negative encoding (#600070)
  - explicitly disable udev configuration support
  - add gettext-autopoint to BR


author: Adam Tkac <atkac redhat com> 1.0.90-0.17.20100721svn4113
changelog:
  - update to r4113
  - patches merged
    - tigervnc11-rh586406.patch
    - tigervnc11-libvnc.patch
    - tigervnc11-rh597172.patch
    - tigervnc11-rh600070.patch
    - tigervnc11-options.patch
  - don't own %{_datadir}/icons directory (#614301)
  - minor improvements in the .desktop file (#616340)
  - bundled libjpeg configure requires nasm; is executed even if system-wide
    libjpeg is used


author: Adam Tkac <atkac redhat com> 1.0.90-0.19.20100813svn4123
changelog:
  - separate Xvnc, vncpasswd and vncconfig to -server-minimal subpkg (#626946)
  - move license to separate subpkg and Requires it from main subpkgs
  - Xvnc: handle situations when no modifiers exist well (#611677)


author: Adam Tkac <atkac redhat com> 1.0.90-0.20.20100813svn4123
changelog:
  - press fake modifiers correctly (#633931)
  - supress unneeded debug information emitted from initscript (#633645)


author: Adam Tkac <atkac redhat com> 1.0.90-0.24.20100813svn4123
changelog:
  - rebuild against xserver 1.10.X
  - 0001-Return-Success-from-generate_modkeymap-when-max_keys.patch merged


author: Adam Tkac <atkac redhat com> 1.0.90-0.25.20101208svn4225
changelog:
  - update to r4225
  - patches merged
    - tigervnc11-rh611677.patch
    - tigervnc11-rh633931.patch
    - tigervnc11-xorg1.10.patch
  - enable VeNCrypt and PAM support


author: Adam Tkac <atkac redhat com> - 1.0.90-3
changelog:
  - fix wrong usage of memcpy which caused screen artifacts (#652590)
  - don't point to inaccessible link in sysconfig/vncservers (#644975)


author: Adam Tkac <atkac redhat com> - 1.1.0-1
changelog:
  - update to 1.1.0
  - update the xorg11 patch
  - patches merged
    - tigervnc11-glx.patch
    - tigervnc11-CVE-2011-1775.patch
    - 0001-Use-memmove-instead-of-memcpy-in-fbblt.c-when-memory.patch


author: Adam Tkac <atkac redhat com> - 1.1.0-3
changelog:
  - don't build X.Org devel docs (#755782)
  - applet: BR generic java-devel instead of java-gcj-devel (#755783)
  - use runuser to start Xvnc in systemd service file (#754259)
  - don't attepmt to restart Xvnc session during update/erase (#753216)


author: Adam Tkac <atkac redhat com> - 1.1.0-5
changelog:
  - clean Xvnc's /tmp environment in service file before startup
  - fix building against the latest JAVA 7 and X.Org 1.12


author: Adam Tkac <atkac redhat com> 1.2.80-0.1.20120905svn4996
changelog:
  - update to 1.2.80
  - remove deprecated patches
    - tigervnc-102434.patch
    - tigervnc-viewer-reparent.patch
    - tigervnc11-java7.patch
  - patches merged
    - tigervnc11-xorg111.patch
    - tigervnc11-xorg112.patch


author: Adam Tkac <atkac redhat com> - 1.2.80-0.12.20130314svn5065
changelog:
  - include /etc/X11/xorg.conf.d/10-libvnc.conf sample configuration (#712482)
  - vncserver now honors specified -geometry parameter (#755947)


author: Tim Waugh <twaugh@redhat.com> 1.2.80-0.14.20130314svn5065
changelog:
  - Use systemd rpm macros (bug #850340).  Moved systemd requirements
    from main package to server sub-package.
  - Applied Debian patch to fix busy loop when run from inetd in nowait
    mode (bug #920373).
  - Added dependency on xorg-x11-xinit to server sub-package so that
    default window manager can be found (bug #896284, bug #923655).
  - Fixed bogus changelog date.


author: Tim Waugh <twaugh@redhat.com> 1.3.0-3
changelog:
  - Avoid PIDFile problems in systemd unit file (bug #983232).
  - libvnc.so: don't use unexported key_is_down function.
  - Don't use shebang in vncserver script.


author: Tim Waugh <twaugh@redhat.com> 1.3.0-15
changelog:
  - Disable dri3 to enable building (bug #1063392).
  - Fixed heap-based buffer overflow (CVE-2014-0011, bug #1050928).


author: Tim Waugh <twaugh@redhat.com> - 1.3.1-8
changelog:
  - Input reset fixes from upstream (bug #1116956).
  - No longer need ppc64le patch as it's now in xorg-x11-server.
  - Rebased xserver114.patch again.


author: Tim Waugh <twaugh@redhat.com> - 1.4.2-1
changelog:
  - Rebased xserver116.patch against xorg-x11-server-1.17.1.
  - Allow build against xorg-x11-server-1.17.
  - 1.4.2.


author: Jan Grulich <jgrulich@redhat.com> - 1.6.0-4
changelog:
  - Utilize system-wide crypto policies
    Resolves: bz#1179345
  - Try to disable patch4 as it was previously written to support an
    older version of a different client and breaks some other usage
    Resolves: bz#1280440


author: Jan Grulich <jgrulich@redhat.com> - 1.7.1-3
changelog:
  - Bug 1438704 - CVE-2017-7392 CVE-2017-7393 CVE-2017-7394
                  CVE-2017-7395 CVE-2017-7396 tigervnc: various flaws
    + other upstream related fixes


author: Jan Grulich <jgrulich@redhat.com> - 1.9.0-7
changelog:
  - Improve coverity scan fixes
    Resolves: bz#1602714

    Inform whether view-only password is used or not
    Resolves: bz#1639169

    Backport fixes from RHEL 7
    Resolves: bz#1651254


author: Jan Grulich <jgrulich@redhat.com> - 1.10.1-5
changelog:
  - Install the HOWTO file to correct location
  - Add /usr/bin/vncserver file informing users to read the HOWTO.md file
    Resolves: bz#1790443


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-1
changelog:
  - Update to 1.11.0
    Resolves: bz#1880985
  - Backport fix to allow Tigervnc use boolean values in config files
    Resolves: bz#1883415


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-2
changelog:
  - Revert removal of vncserver
    Resolves: bz#1897504
  - Correctly start vncsession as a daemon
    Resolves: bz#1897498


author: Jan Grulich <jgrulich@redhat.com> - 1.12.0-4
changelog:
  - Added vncsession-restore script for SELinux policy migration
    Fix SELinux context for root user
    Resolves: bz#2021892


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-1
changelog:
  - 1.13.1
    Resolves: bz#2175748
  - Restore "--fallbacktofreeport" option in the vncserver script
    Resolves: bz#2174398


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-2
changelog:
  - xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege
    Escalation Vulnerability
    Resolves: bz#2180306


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-4
changelog:
  - Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
    Resolves: RHEL-15236

  - Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
    Resolves: RHEL-15230


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-5
changelog:
  - Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
    Resolves: RHEL-18410
  - Fix CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
    Resolves: RHEL-18422


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-7
changelog:
  - Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
    Resolves: RHEL-20388
  - Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
    Resolves: RHEL-20382
  - Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
    Resolves: RHEL-20530
  - Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
    Resolves: RHEL-21214


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-9
changelog:
  - Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
    Resolves: RHEL-30755
  - Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
    Resolves: RHEL-30767
  - Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
    Resolves: RHEL-30761


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-10
changelog:
  - Drop patches that are already part of xorg-x11-server
    Resolves: RHEL-30755
    Resolves: RHEL-30767
    Resolves: RHEL-30761


author: Kaiqiang Wang <wangkaiqiang@inspur.com> - 1.13.1-10.0.1
changelog:
  - Fic CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer


author: Jan Grulich <jgrulich@redhat.com>
changelog:
  - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability
    Resolves: RHEL-61999


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Release v7
  - Allow tlog-play redirection of stdout
  - Add -i/--interactive option to tlog-rec-session. Allows login
    programs to call tlog-rec-session more transparently.
  - Make in_txt/out_txt fields optional. This handles missing fields
    when reading from Elasticsearch or other backends.


author: Justin Stephenson <jstephen@redhat.com> - 8-1
changelog:
  - Release v8
  - Spec file fixes for EL6
  - Spec file improvements for Debian/Ubuntu pkg-config
  - Tlog-play improve authentication options
  - Handle piped in I/O from stdin and improve the main recording transfer exit
    condition.
  - Use empty string on hostname resolution failure


author: Justin Stephenson <jstephen@redhat.com> - 9-1
changelog:
  - Release v9
  - Add libutempter support
  - Require journal match filter
  - Add file reader match functionality
  - Restore cursor visibility and color attributes on tlog-play exit
  - Add "time" real clock timestamp message field
  - Various upstream CI improvements


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Fire SIGCHLD after utempter_add_record since it probably eats it.
  - Correct suse rpmbuild
  - Update debbuild for travis CI


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Release v12
  - Prevent infinite transfer loop on GDM login.
  - tlog-play: add journal namespace support.
  - tlitest: extend delay for limit-action delay test.


author: Justin Stephenson <jstephen@redhat.com> - 12.1
changelog:
  - Exit transfer loop when output fd is closed
  - Revert "Prevent infinite transfer loop on GDM login"


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 1-1
changelog:
  - Release v1. Not ready for production. Following features are included.
  - Recording of user input, program output and window size changes.
  - Support for writing into syslog and files.
  - Tlog-rec configuration through system-wide configuration file
    /etc/tlog/tlog-rec.conf, environment variables and command line.
  - Very basic playback directly from ElasticSearch.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2-1
changelog:
  - Release v2. Not ready for production. Following features are added.
  - Fully-fledged command-line interface to tlog-play, along with config file
    and man pages.
  - Support for playback from file in tlog-play.
  - Make tlog-play follow mode controllable and off by default.
  - Get tlog-rec shell also from TLOG_REC_SHELL environment variable.
  - Support non-TTY stdin/stdout in tlog-rec, allowing its use with
    non-interactive SSH sessions.
  - Support building on and packaging for EPEL5.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3-1
changelog:
  - Release v3. Added features and implemented fixes follow.
  - Make each JSON message timing data start with window size.
    This makes it possible to pick up the stream from any message and also
    combine messages, with window size known and preserved at all times.
  - Add "term" field to JSON messages, specifying terminal type.
  - Add "ver" field to JSON messages, specifying message format version.
  - Set "SHELL" environment variable to actual user shell in tlog-rec.
  - Check for locale's charset and abort tlog-rec if it's anything but the only
    supported UTF-8.
  - Add -v/--version option support to tlog-rec and tlog-play.
  - Fix tlog-rec and tlog-play error output by accumulating error messages and
    outputting them only after terminal settings are restored, on exit. Output
    startup warnings before switching to raw terminal settings.
  - Output a newline after restoring terminal settings in tlog-rec and
    tlog-play, so that following output is not stuck to the end of the last line
    of the raw output.
  - Add an Elasticsearch mapping to documentation directory.
  - Disable input logging by default to avoid storing passwords. Please enable
    it explicitly in configuration, or on the command line, if necessary.
  - Close log file written by tlog-rec on executing the shell in the child to
    prevent log modification by the recorded user.
  - Support running tlog-rec SUID/SGID to prevent recorded users from killing or
    modifying it. Make tlog-rec SUID/SGID to user "tlog" in the RPM package.
  - Add session locking to tlog-rec. This prevents tlog-rec from recording if
    the audit session is already recorded by creating per-audit-session lock
    files in /var/run/tlog. This only makes sense with tlog-rec SUID/SGID.
    When certain failures occur while creating a lock file, session is assumed
    unlocked and is recorded anyway, as it is safer to record a session than
    not. Add corresponding setup to the RPM package.
  - Reproduce the recorded program (shell) exit status in tlog-rec similarly to
    how Bash reproduces the last executed command status.
  - Update and expand README.md to describe secure log message filtering with
    rsyslog, and playback directly from Elasticsearch, among other, smaller
    additions.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 4-1
changelog:
  - Release v4. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Extract user session recording functionality from tlog-rec into a new tool:
    tlog-rec-session. It should be used as the user's login shell now, and
    tlog-rec should be used as a general recording and testing tool.
  - Add (optional) support for writing to and reading from Systemd Journal - the
    "journal" reader and writer.
  - Make tlog-rec default to "file" writer, and tlog-rec-session to "journal",
    if built with Journal support, and to "syslog" otherwise.
  - Add "-o" option to tlog-rec as an alias to "--file-path".
  - Add "-i" option to tlog-play as an alias to "--file-path".
  - Assume locale charset is UTF-8, if ASCII charset is detected, since that is
    a likely indication the locale settings were lost. E.g. upon console login
    or "su -" on Fedora and RHEL.
  - Switch the "ver" JSON field type to string. Now it should be two numbers
    separated by a dot. The increase of the first number indicates
    forward-incompatible changes, the increase of the second number -
    forward-compatible. If the dot and the second number are omitted, the second
    number is considered to be zero. Bump the format version to "2".
  - Add a new JSON field: "rec", containing an opaque host-unique recording ID.
    Bump the format version to "2.1".
  - Add support for playback controls, both through the command line and via
    playback-time control keys, including: speed adjustment, pause/resume,
    fast-forward to a time, and packet-by-packet stepping through the recording.
  - Add optional rate-limiting of logged messages. Both throttling and dropping
    messages are supported.
  - Add "--lax" option to tlog-play to allow playing back recordings with
    missing messages.
  - Fix input being ignored when there is a lot of output, while recording.
  - Remove addition of tlog-rec (tlog-rec-session) to /etc/shells from RPM
    packaging to prevent users from changing their shells themselves once it has
    been assigned.
  - Add support for specifying the shell to start via the tlog-rec-session
    executable name. E.g. by making a tlog-rec-session-shell-zsh ->
    tlog-rec-session symlink and executing it. That can be used to specify
    particular shells to be recorded for specific users by assigning these
    symlinks as their login shells.
  - Make error messages from all the tools a bit less noisy and more readable.


author: Kirill Glebov <kgliebov@redhat.com> - 5-1
changelog:
  - Release v5. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Implement support for --configuration option for all programs.
    The option makes the program output its configuration in JSON and then
    exit.
  - Add BuildDependencies to allow yum-builddep.
  - Open JSON writer file with euid/egid. To allow creating protected log files
    with tlog-rec-session, open the JSON writer's file with the EUID and
    GUID the program was started with.
  - Installing Packages with the APT Addon instead of apt-get.
  - Switch to using TLOG_ERRS_RAISE macros.
  - Fix tlog-play cleanup-path segfault.
  - Modify command-line option parsing.
  - Remove "fields" field from ES query URL to fix compatibility with
    Elasticsearch 5.
  - Remove unused _source parameter from ES query URL.
  - Fix tlog-rec-session file permissions bug.
  - Use CLOCK_MONOTONIC for rate-limiting writing.
  - Filter out some more input control sequences.


author: Justin Stephenson <jstephen@redhat.com> - 6-1
changelog:
  - Release v6. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Add integration tests for end-to-end test coverage.
  - Fix compiler type comparison error with json-c json_object_array_length
    return value.
  - Fix a distribution issue causing incorrect M4_CONF_PATH expansion.
  - Log more detailed error when systemd journal is not present.


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.4-3
changelog:
  - Rebuild for CVE-2022-41723, CVE-2023-24534, CVE-2023-24536 and
    CVE-2023-24538
  Resolves: #2187345, #2187368, #2203690


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.4-3
changelog:
  - Rebuild for CVE-2022-41723, CVE-2023-24534, CVE-2023-24536 and
    CVE-2023-24538
  Resolves: #2187343, #2187363, #2203694


author: Jindrich Novy <jnovy@redhat.com> - 0.0.99.2-1
changelog:
  - Update to 0.0.99.2
  - Make 'toolbox' create or fall back to a container if possible
  Resolves: #1914687
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 0.0.99.2-2
changelog:
  - Actually apply the patch to make 'toolbox' create or fall back to a
    container if possible
  - Support logging into a registry if necessary
  - Related: #1934415


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.3-2
changelog:
  - Update to 0.0.99.3
  - BuildRequire only systemd-rpm-macros as recommended by the Fedora packaging
    guidelines
  - Update the Summary to match upstream
  - Update the URL to point to the website
  Resolves: #2047290


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.4-7
changelog:
  - Rebuild for CVE-2023-29406, CVE-2023-39318 and CVE-2023-39319
  Resolves: RHEL-4231, RHEL-4475, RHEL-4502


author: Honggang Li <honli@redhat.com> - 4.2.10-25
changelog:
  - Rebase to latest Fedora release
  - Fix file conflicts in torque-devel multilib packages
  - Resolve: bz1853167


author: Kalev Lember <klember@redhat.com> - 3.38.2-2
changelog:
  - Use conflicts for totem-video-thumbnailer split instead of self-obsoletes
  - Resolves: rhbz#1949422


author: Wim Taymans <wtaymans@redhat.com> - 0.3.13-12
changelog:
  - Add explicit Requires for the -libs package.
  - Do NVR bump to move twolame-devel from buildroot to CRB
  - Resolves: rhbz#1843275


author: Nils Philippsen <nils@redhat.com> - 1.2.1-3
changelog:
  - drop requirements on cmake, pkgconfig and rather own the directories for the
    files augmenting these packages


author: Andreas Schneider <asn@redhat.com> - 1.2.2-1
changelog:
  - Update to version 1.2.2:
    * Added support for fork'ed and then exec'ed processes
    * Added support for Alpha


author: Andreas Schneider <asn@redhat.com> - 1.2.4-1
changelog:
  - Update to version 1.2.4
    * Added deadlock workaround for glibc < 2.24
    * Fixed a possible deadlock bug if uid_wrapper is turned off
    * Logging is always turned on now
    * Fixed a memory leak
    * Limited number of groups during fork+exec


author: Daniel Kopecek <dkopecek@redhat.com> 0.3-1
changelog:
  - Update to version 0.3
  - disabled silent rules
  - install license file
  - added man pages
  - use _hardened_build 1 instead of custom compilation flags
  - fix file permissions on files in /etc
  - do not install an empty rule set file


author: Daniel Kopecek <dkopecek@redhat.com> 0.3p3-1
changelog:
  - Update to version 0.3p3
  - added %check section
  - removed explicit -devel requires on systemd, libqb and
    libsodium devel files
  - added -devel requires on libstdc++-devel


author: Daniel Kopecek <dkopecek@redhat.com> 0.4-4
changelog:
  - Update to version 0.4
  - added usbguard CLI
  - added a tools subpackage with usbguard-rule-parser binary


author: Daniel Kopeček <dkopecek@redhat.com> 0.6.3-0.1.20170317
changelog:
  - Update to latest git snapshot
  - Use --enable-werror configure option as the upstream default
    changed to not use -Werror.


author: Daniel Kopeček <dkopecek@redhat.com> 0.7.0-1
changelog:
  - Update to 0.7.0
    - changed PresentDevicePolicy setting from keep to apply-policy
    - added AuditFilePath configuration option pointing to
      /var/log/usbguard/usbguard-audit.log file
    - install bash-completion script
    - use 0600 file permissions for usbguard-daemon.conf and rules.conf


author: Daniel Kopeček <dkopecek@redhat.com> 0.7.0-4
changelog:
  - Added patch to disable unused parameter warning for protobuf
    generated sources to fix compilation with newer protobuf version


author: Daniel Kopeček <dkopecek@redhat.com> - 0.7.2-1
changelog:
  - Update to 0.7.2
  - Don't use --enable-werror downstream
  - Removed patches related to compiler warnings


author: Attila Lakatos <alakatos@redhat.com> - 0.7.8-4
changelog:
  - RHEL 8.3.0 ERRATUM
  - Spec file clean up
  - Rebase to 0.7.8
  Resolves: rhbz#1738590
  - Added selinux subpackage
  Resolves: rhbz#1683567
  - Added notifier subpackage
  - Installing /etc/usbguard/rules.d/
  Resolves: rhbz#1667395
  - Fixed sigwaitinfo handling
  Resolves: rhbz#1835210


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-5
changelog:
  - RHEL 8.3.0 ERRATUM
  - Use old-fasioned forking style in unit file
  Resolves: rhbz#1846885
  - Allow usbguard to read /proc/cpuinfo
  Resolves: rhbz#1847870
  - Removed notifier's Requires for usbguard-devel
  Resolves: rhbz#1667395
  - Allow usbguard to read /dev/urandom
  Resolves: rhbz#1848618


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-6
changelog:
  - RHEL 8.3.0 ERRATUM
  - Removed execstack from .spec
  - Removed AuthorizedDefault=wired from the usbguard
  Resolves: rhbz#1852539
  - Missing error message on bad configuration
  Resolves: rhbz#1857299
  - /etc/usbguard/usbguard-daemon.conf file does not contain all default options
  Resolves: rhbz#1862907


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-1
changelog:
  - Rebase to 1.0.0
  Resolves: rhbz#1887448
  - Filtering rules by attribute
  Resolves: rhbz#1873953
  - Change device policy of multiple devices using rule instead of ID
  Resolves: rhbz#1852568


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-8
changelog:
  - change usbguard icon injection
  - fix DSP module definition in spec file
  Resolves: rhbz#2014441
  - add execstack to spec
  - remove IPAddressDeny from usbguard service
  Resolves: rhbz#1929364
  - fix file conflict when installing usbguard on rhel
  Resolves: rhbz#1963271
  - fix IPC access control files override
  Resolves: rhbz#2004511
  - validate ACL permission existence
  Resolves: rhbz#2005020
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2000000


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-10
changelog:
  - Fix unauthorized access via D-bus
  - Fix memory leaks on connection failure to D-bus
  Resolves: rhbz#2059067


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-13
changelog:
  - Set OOMScoreAdjust to -1000 in service file
  Resolves: rhbz#2159411
  - Fix race condition in usbguard-daemon when forking
  Resolves: rhbz#2159409
  - Add missing files to documentation
  Resolves: rhbz#2159412
  - Disable logging to console, logging to syslog is still enabled
  - Store permanent rules even if RuleFile is not set but RuleFolder is
  - Neither RuleFolder nor RuleFile exists bugfix
  Resolves: rhbz#2159413
  - Remove build for i686 arch
  Resolves: rhbz#2105091


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-8.2
changelog:
  - Fix unauthorized access via D-bus
  - Fix memory leak on D-bus connection failure
  Resolves: rhbz#2127848


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Rebase to latest upstream: 0.13.0
  - Keeps usbredirserver binary (removed upstream)
    Related: rhbz#2135760


author: Victor Toso <victortoso@redhat.com> - 0.13.0-2
changelog:
  - Fixes 100% CPU usage when usbredirect used as TCP server
    Related: rhbz#2157520
  - Fixes USB redirection of identical devices
    Resolves: rhbz#2157520


author: James Antill <james@fedoraproject.org> - 1.0.4-20
changelog:
  - Move doc/ustr-devel-<version> to doc/ustr-devel. BZ 993940.
  - Use -fgnu89-inline workaround for gcc5.


author: Mark Wielaard <mjw@redhat.com> - 3.18.1-5
changelog:
  - Add valgrind-3.18.1-dhat-tests-copy.patch
  - Add valgrind-3.18.1-s390x-EXRL.patch
  - Add valgrind-3.18.1-ppc64-lxsibzx-lxsihzx.patch
  - Add valgrind-3.18.1-ppc-pstq.patch
  - Add valgrind-3.18.1-ppc-pstq-tests.patch
  - Add valgrind-3.18.1-gdbserver_tests-hwcap.patch
  - Add valgrind-3.18.1-rust-v0-demangle.patch
  - Add valgrind-3.18.1-arm64-doubleword-cas.patch
  - Add valgrind-3.18.1-arm64-ldaxp-stlxp.patch
  - Add valgrind-3.18.1-arm64-atomic-align.patch
  - Add valgrind-3.18.1-amd64-more-spec-rules.patch
  - Add valgrind-3.18.1-condvar.patch
  - Add valgrind-3.18.1-demangle-namespace.patch


author: Mark Wielaard <mjw@redhat.com> - 3.21.0-2
changelog:
  - Upgrade to upstream 3.21.0
  - Remove upstreamed patches
  - Add valgrind-3.21.0-no-memcpy-replace-check.patch


author: Mark Wielaard <mjw@redhat.com> - 3.21.0-7
changelog:
  - Add valgrind-3.21.0-callgrind_control-no-strict.patch
  - Add valgrind-3.21.0-realloc-again.patch
  - Update valgrind-3.21.0-no-memcpy-replace-check.patch (memcpy_chk)
  - Add valgrind-3.21.0-vgm.patch and valgrind-3.21.0-vgm-tests.patch
  - Add valgrind-3.21.0-pgste.patch


author: Binbin Zhou <zhoubinbin@loongson.cn> - 3.21.0-8
changelog:
  - Add valgrind-3.21.0-Add-LoongArch64-Linux-support.patch
  - Add valgrind-3.21.0-LoongArch64-Sync-kernel-4.19.patch


author: Jeff Johnson <jbj@redhat.com> 1.9.3-4.20030207
changelog:
  - move _pthread_desc to vg_include.h.
  - implement pthread_mutex_timedlock().
  - implement pthread_barrier_wait().


author: Graydon Hoare <graydon@redhat.com> 1.9.3-5.20030207
changelog:
  - add handling for separate debug info (+fix).
  - handle blocking readv/writev correctly.
  - comment out 4 overly zealous pthread checks.


author: Jeff Johnson <jbj@redhat.com> 1.9.4-0.20030228
changelog:
  - update to 1.9.4 from CVS.
  - dwarf patch from Graydon Hoare.
  - sysinfo patch from Graydon Hoare, take 1.


author: Jakub Jelinek <jakub@redhat.com> 2.1.2-1
changelog:
  - update to 2.1.2
  - run make regtest as part of package build
  - use glibc-2.3 suppressions instead of glibc-2.2 suppressions


author: Jakub Jelinek <jakub@redhat.com> 2.2.0-6
changelog:
  - act as if NVALGRIND is defined when using <valgrind.h>
    in non-m32/i386 programs (#138923)
  - remove weak from VALGRIND_PRINTF*, make it static and
    add unused attribute


author: Colin Walters <walters@redhat.com> 2.4.0-1
changelog:
  - New upstream version 
  - Update valgrind-2.2.0-regtest.patch to 2.4.0; required minor
    massaging
  - Disable valgrind-2.1.2-4G.patch for now; Not going to touch this,
    and Fedora does not ship 4G kernel by default anymore
  - Remove upstreamed valgrind-2.2.0.ioctls.patch
  - Remove obsolete valgrind-2.2.0-warnings.patch; Code is no longer
    present
  - Remove upstreamed valgrind-2.2.0-valgrind_h.patch
  - Remove obsolete valgrind-2.2.0-unnest.patch and
    valgrind-2.0.0-pthread-stacksize.patch; valgrind no longer
    includes its own pthread library


author: Jakub Jelinek <jakub@redhat.com> 2.4.0-2
changelog:
  - resurrect the non-upstreamed part of valgrind_h patch
  - remove 2.1.2-4G patch, seems to be upstreamed
  - resurrect passing -fno-builtin in memcheck tests


author: Jakub Jelinek <jakub@redhat.com> 2.4.0-3
changelog:
  - build some insn tests with -mmmx, -msse or -msse2 (#161572)
  - handle glibc-2.3.90 the same way as 2.3.[0-5]


author: Jakub Jelinek <jakub@redhat.com> 3.0.0-1
changelog:
  - upgrade to 3.0.0
    - x86_64 support
  - temporarily obsolete valgrind-callgrind, as it has not been
    ported yet


author: Jakub Jelinek <jakub@redhat.com> 3.0.0-2
changelog:
  - lower x86_64 stage2 base from 112TB down to 450GB, so that
    valgrind works even on 2.4.x kernels.  Still way better than
    1.75GB that stock valgrind allows


author: Jakub Jelinek <jakub@redhat.com> 3.0.0-3
changelog:
  - fix amd64 handling of cwtd instruction
  - fix amd64 handling of e.g. sarb $0x4,val(%rip)
  - speedup amd64 insn decoding


author: Jakub Jelinek <jakub@redhat.com> 3.1.0-2
changelog:
  - add support for DW_CFA_val_offset{,_sf}, DW_CFA_def_cfa_sf
    and skip over DW_CFA_val_expression quietly
  - adjust libc/ld.so filenames in glibc-2.4.supp for glibc 2.4
    release


author: Jakub Jelinek <jakub@redhat.com> 3.1.1-3
changelog:
  - handle [sg]et_robust_list syscalls on i?86/x86_64
  - handle *at syscalls on ppc
  - ensure on x86_64 both 32-bit and 64-bit glibc{,-devel} are
    installed in the buildroot (#191820)


author: Jakub Jelinek <jakub@redhat.com> 3.2.1-1
changelog:
  - update to 3.2.1 bugfix release
    - SSE3 emulation fixes, reduce memcheck false positive rate,
      4 dozens of bugfixes


author: Jakub Jelinek <jakub@redhat.com> 3.2.3-3
changelog:
  - add suppressions for glibc >= 2.6
  - avoid valgrind internal error if io_destroy syscall is
    passed a bogus argument


author: Jakub Jelinek <jakub@redhat.com> 3.2.3-5
changelog:
  - add ppc64-linux symlink in valgrind ppc.rpm, so that when
    rpm prefers 32-bit binaries over 64-bit ones 32-bit
    /usr/bin/valgrind can find 64-bit valgrind helper binaries
    (#249773)
  - power5+ and power6 support (#240762)


author: Jakub Jelinek <jakub@redhat.com> 3.2.3-6
changelog:
  - handle new x86_64 nops (#256801, KDE#148447)
  - add support for private futexes (KDE#146781)
  - update License tag


author: Jakub Jelinek <jakub@redhat.com> 3.5.0-2
changelog:
  - add STT_GNU_IFUNC support (Dodji Seketeli, #518247)
  - wrap inotify_init1 syscall (Dodji Seketeli, #527198)
  - fix mmap/mprotect handling in memcheck (KDE#210268)


author: Jakub Jelinek <jakub@redhat.com> 3.5.0-3
changelog:
  - handle many more DW_OP_* ops that GCC now uses
  - handle the more compact form of DW_AT_data_member_location
  - don't strip .debug_loc etc. from valgrind binaries


author: Jakub Jelinek <jakub@redhat.com> 3.5.0-4
changelog:
  - handle reading of .debug_frame in addition to .eh_frame
  - ignore unknown DWARF3 expressions in evaluate_trivial_GX
  - suppress helgrind race errors in helgrind's own mythread_wrapper
  - fix compilation of x86 tests on x86_64 and ppc tests


author: Jakub Jelinek <jakub@redhat.com> 3.5.0-7
changelog:
  - add perf_counter_open syscall support (#531271)
  - add handling of some sbb/adc insn forms on x86_64 (KDE#211410)


author: Jakub Jelinek <jakub@redhat.com> 3.5.0-10
changelog:
  - add handling of a bunch of recent syscalls and fix some
    other syscall wrappers (Dodji Seketeli)
  - handle prelink created split of .bss into .dynbss and .bss
    and similarly for .sbss and .sdynbss (#539874)


author: Jakub Jelinek <jakub@redhat.com> 3.5.0-15
changelog:
  - handle i686 nopw insns with more than one data16 prefix (#574889)
  - DWARF4 support
  - handle getcpu and splice syscalls


author: Jakub Jelinek <jakub@redhat.com> 3.5.0-16
changelog:
  - change pub_tool_basics.h not to include config.h (#579283)
  - add valgrind-openmpi package for OpenMPI support (#565541)
  - allow NULL second argument to capget (#450976)


author: Jakub Jelinek <jakub@redhat.com> 3.6.0-1
changelog:
  - update to 3.6.0
  - add s390x support (#632354)
  - provide a replacement for str{,n}casecmp{,_l} (#626470)


author: Jakub Jelinek <jakub@redhat.com> 3.6.0-2
changelog:
  - rebuilt against glibc 2.13 (#673046)
  - hook in pwrite64 syscall on ppc64 (#672858)
  - fix PIE handling on ppc/ppc64 (#665289)


author: Jakub Jelinek <jakub@redhat.com> 3.6.1-2
changelog:
  - fix build on ppc64 (#711608)
  - don't fail if s390x support patch hasn't been applied,
    move testing into %check (#708522)
  - rebuilt against glibc 2.14


author: Jakub Jelinek <jakub@redhat.com> 3.7.0-1
changelog:
  - update to 3.7.0 (#769213, #782910, #772343)
  - handle some further SCSI ioctls (#783936)
  - handle fcntl F_SETOWN_EX and F_GETOWN_EX (#770746)


author: Jakub Jelinek <jakub@redhat.com> 3.7.0-4
changelog:
  - adjust suppressions so that it works even with ld-2.15.so (#806854)
  - handle DW_TAG_unspecified_type and DW_TAG_rvalue_reference_type
    (#810284, KDE#278313)
  - handle .debug_types sections (#810286, KDE#284124)


author: Mark Wielaard <mjw@redhat.com> 3.7.0-7
changelog:
  - Fixup shadowing warnings valgrind-3.7.0-dwz.patch
  - Add valgrind-3.7.0-ref_addr.patch (#842659, KDE#298864)


author: Mark Wielaard <mjw@redhat.com> 3.8.0-0.1.TEST1.svn12858
changelog:
  - Update to 3.8.0-TEST1
  - Clear CFLAGS CXXFLAGS LDFLAGS.
  - Fix \ line continuation in configure line.


author: Jakub Jelinek <jakub@redhat.com> 3.8.0-1
changelog:
  - update to 3.8.0 release
  - from CFLAGS/CXXFLAGS filter just fortification flags, not arch
    specific flags
  - on i?86 prefer to use CFI over %ebp unwinding, as GCC 4.6+
    defaults to -fomit-frame-pointer


author: Jakub Jelinek <jakub@redhat.com> 3.8.0-2
changelog:
  - tweak up <valgrind/config.h> to allow simultaneous installation
    of valgrind-devel.{i686,x86_64} (#848146)


author: Mark Wielaard <mjw@redhat.com> 3.8.0-6
changelog:
  - Add valgrind-3.8.0-lzcnt-tzcnt-bugfix.patch (KDE#295808)
  - Add valgrind-3.8.0-avx-alignment-check.patch (KDE#305926)


author: Mark Wielaard <mjw@redhat.com> 3.8.1-1
changelog:
  - Add partial backport of upstream revision 12884
    valgrind-3.8.0-memcheck-mc_translate-Iop_8HLto16.patch
    without it AVX2 VPBROADCASTB insn is broken under memcheck.
  - Add valgrind-3.8.0-cfi_dw_ops.patch (KDE#307038)
    DWARF2 CFI reader: unhandled DW_OP_ opcode 0x8 (DW_OP_const1u and friends)
  - Add valgrind-3.8.0-avx2-prereq.patch.
  - Remove accidentially included diffs for gdbserver_tests and helgrind/tests
    Makefile.in from valgrind-3.8.0-avx2-bmi-fma.patch.gz
  - Remove valgrind-3.8.0-tests.patch tests no longer hang.
  - Added SCL macros to support building as part of a Software Collection.
  - Upgrade to valgrind 3.8.1.


author: Mark Wielaard <mjw@redhat.com> 3.8.1-2
changelog:
  - Add valgrind-3.8.1-gdbserver_tests-mcinvoke-ppc64.patch
  - Replace valgrind-3.8.1-cfi_dw_ops.patch with version as committed upstream.
  - Remove erroneous printf change from valgrind-3.8.1-abbrev-parsing.patch.
  - Add scalar testcase change to valgrind-3.8.1-capget.patch.


author: Mark Wielaard <mjw@redhat.com> 3.8.1-3
changelog:
  - Add valgrind-3.8.1-x86_amd64_features-avx.patch (KDE#307285)
  - Add valgrind-3.8.1-gdbserver_tests-syscall-template-source.patch (KDE#307155)
  - Add valgrind-3.8.1-overlap_memcpy_filter.patch (KDE#307290)
  - Add valgrind-3.8.1-pkg-config.patch (#827219, KDE#307729)
  - Add valgrind-3.8.1-proc-auxv.patch (KDE#253519)
  - Add valgrind-3.8.1-wcs.patch (#755242, KDE#307828)
  - Add valgrind-3.8.1-filter_gdb.patch (KDE#308321)
  - Add valgrind-3.8.1-gdbserver_exit.patch (#862795, KDE#308341)
  - Add valgrind-3.8.1-aspacemgr_VG_N_SEGs.patch (#730303, KDE#164485)
  - Add valgrind-3.8.1-s390_tsearch_supp.patch (#816244, KDE#308427)


author: Mark Wielaard <mjw@redhat.com> 3.8.1-5
changelog:
  - Add valgrind-3.8.1-stpncpy.patch (KDE#309427)
  - Add valgrind-3.8.1-ppc-32-mode-64-bit-instr.patch (#810992, KDE#308573)
  - Add valgrind-3.8.1-sigill_diag.patch (#810992, KDE#309425)


author: Mark Wielaard <mjw@redhat.com> 3.8.1-8
changelog:
  - Add valgrind-3.8.1-sendmsg-flags.patch
  - Add valgrind-3.8.1-ptrace-setgetregset.patch
  - Add valgrind-3.8.1-static-variables.patch


author: Mark Wielaard <mjw@redhat.com> 3.8.1-10
changelog:
  - Don't disable -debuginfo package generation, but do undefine
    _missing_build_ids_terminate_build.


author: Mark Wielaard <mjw@redhat.com> 3.8.1-13
changelog:
  - Fix quoting in valgrind valgrind-3.8.1-enable-armv5.patch and
    remove arm configure hunk from valgrind-3.8.1-text-segment.patch #947440
  - Replace valgrind-3.8.1-text-segment.patch with upstream variant.
  - Add valgrind-3.8.1-regtest-fixlets.patch.


author: Mark Wielaard <mjw@redhat.com> 3.8.1-14
changelog:
  - fixup selinux file context when doing a scl build.
  - Enable regtest suite on ARM.
  - valgrind-3.8.1-abbrev-parsing.patch, drop workaround, enable real fix.
  - Fix -Ttext-segment configure check. Enables s390x again.
  - BuildRequire ps for testsuite.


author: Mark Wielaard <mjw@redhat.com> 3.8.1-15
changelog:
  - Add valgrind-3.8.1-zero-size-sections.patch. Resolves issues with zero
    sized .eh_frame sections on ppc64.


author: Mark Wielaard <mjw@redhat.com> - 3.8.1-17
changelog:
  - Add valgrind-3.8.1-dwarf-anon-enum.patch
  - Cleanup valgrind-3.8.1-sigill_diag.patch .orig file changes (#949687).
  - Add valgrind-3.8.1-ppc-setxattr.patch
  - Add valgrind-3.8.1-new-manpages.patch
  - Add valgrind-3.8.1-ptrace-thread-area.patch
  - Add valgrind-3.8.1-af-bluetooth.patch


author: Mark Wielaard <mjw@redhat.com> - 3.8.1-21
changelog:
  - Don't depend on docdir location and version in openmpi subpackage
    description (#993938).
  - Enable openmpi subpackage also on arm.


author: Mark Wielaard <mjw@redhat.com> - 3.8.1-24
changelog:
  - Add valgrind-3.8.1-power-isa-205-deprecation.patch
    Deprecation of some ISA 2.05 POWER6 instructions.
  - Fixup auto-foo generation of new manpage doc patch.


author: Mark Wielaard <mjw@redhat.com> - 3.8.1-25
changelog:
  - Add valgrind-3.8.1-s390-STFLE.patch
    s390 message-security assist (MSA) instruction extension not implemented.


author: Mark Wielaard <mjw@redhat.com> - 3.8.1-27
changelog:
  - Fix power_ISA2_05 testcase (valgrind-3.8.1-power-isa-205-deprecation.patch)
  - Fix ppc32 make check build (valgrind-3.8.1-initial-power-isa-207.patch)
  - Add valgrind-3.8.1-mmxext.patch


author: Mark Wielaard <mjw@redhat.com> - 3.8.1-28
changelog:
  - Implement SSE4 MOVNTDQA insn (valgrind-3.8.1-movntdqa.patch)
  - Don't BuildRequire /bin/ps, just BuildRequire procps
    (procps-ng provides procps).


author: Mark Wielaard <mjw@redhat.com> - 3.9.0-0.1.TEST1
changelog:
  - Upgrade to valgrind 3.9.0.TEST1
  - Remove patches that are now upstream:
    - valgrind-3.8.1-abbrev-parsing.patch
    - valgrind-3.8.1-af-bluetooth.patch
    - valgrind-3.8.1-aspacemgr_VG_N_SEGs.patch
    - valgrind-3.8.1-avx2-bmi-fma.patch.gz
    - valgrind-3.8.1-avx2-prereq.patch
    - valgrind-3.8.1-bmi-conf-check.patch
    - valgrind-3.8.1-capget.patch
    - valgrind-3.8.1-cfi_dw_ops.patch
    - valgrind-3.8.1-dwarf-anon-enum.patch
    - valgrind-3.8.1-filter_gdb.patch
    - valgrind-3.8.1-find-buildid.patch
    - valgrind-3.8.1-gdbserver_exit.patch
    - valgrind-3.8.1-gdbserver_tests-syscall-template-source.patch
    - valgrind-3.8.1-glibc-2.17-18.patch
    - valgrind-3.8.1-index-supp.patch
    - valgrind-3.8.1-initial-power-isa-207.patch
    - valgrind-3.8.1-manpages.patch
    - valgrind-3.8.1-memcheck-mc_translate-Iop_8HLto16.patch
    - valgrind-3.8.1-mmxext.patch
    - valgrind-3.8.1-movntdqa.patch
    - valgrind-3.8.1-new-manpages.patch
    - valgrind-3.8.1-openat.patch
    - valgrind-3.8.1-overlap_memcpy_filter.patch
    - valgrind-3.8.1-pie.patch
    - valgrind-3.8.1-pkg-config.patch
    - valgrind-3.8.1-power-isa-205-deprecation.patch
    - valgrind-3.8.1-ppc-32-mode-64-bit-instr.patch
    - valgrind-3.8.1-ppc-setxattr.patch
    - valgrind-3.8.1-proc-auxv.patch
    - valgrind-3.8.1-ptrace-include-configure.patch
    - valgrind-3.8.1-ptrace-setgetregset.patch
    - valgrind-3.8.1-ptrace-thread-area.patch
    - valgrind-3.8.1-regtest-fixlets.patch
    - valgrind-3.8.1-s390-STFLE.patch
    - valgrind-3.8.1-s390_tsearch_supp.patch
    - valgrind-3.8.1-sendmsg-flags.patch
    - valgrind-3.8.1-sigill_diag.patch
    - valgrind-3.8.1-static-variables.patch
    - valgrind-3.8.1-stpncpy.patch
    - valgrind-3.8.1-text-segment.patch
    - valgrind-3.8.1-wcs.patch
    - valgrind-3.8.1-x86_amd64_features-avx.patch
    - valgrind-3.8.1-xaddb.patch
    - valgrind-3.8.1-zero-size-sections.patch
  - Remove special case valgrind-3.8.1-enable-armv5.patch.
  - Remove valgrind-3.8.1-x86-backtrace.patch, rely on new upstream fp/cfi
    try-cache mechanism.


author: Mark Wielaard <mjw@redhat.com> - 3.9.0-1
changelog:
  - Upgrade to valgrind 3.9.0 final.
  - Remove support for really ancient GCCs (valgrind-3.9.0-config_h.patch).
  - Add valgrind-3.9.0-amd64_gen_insn_test.patch.
  - Remove and cleanup fake 32-bit libgcc package.


author: Mark Wielaard <mjw@redhat.com> - 3.9.0-9.svn20140311r13869
changelog:
  - Enable aarch64 based on current upstream svn. Removed upstreamed patches.
    Thanks to Marcin Juszkiewicz <mjuszkiewicz@redhat.com>


author: Mark Wielaard <mjw@redhat.com> - 3.9.0-10.svn20140318r13876
changelog:
  - Make sure basic binary (/bin/true) runs under valgrind.
    And fail the whole build if not. The regtests are not zero-fail.
  - Update to upstream svn r13876.
  - Introduce build_openmpi and build_multilib in spec file.


author: Mark Wielaard <mjw@redhat.com> 3.9.0-13.svn20140513r13961
changelog:
  - Update to upstream svn r13961.
  - Remove valgrind-3.9.0-mpx.patch integrated upstream now.
  - Add valgrind-3.9.0-msghdr.patch
  - Add valgrind-3.9.0-format-security.patch


author: Mark Wielaard <mjw@redhat.com>
changelog:
  - Don't cleanup fake 32-bit libgcc created in %build.
    make regtest might depend on it to build -m32 binaries.


author: Mark Wielaard <mjw@redhat.com> 3.9.0-18.svn20140715r14165
changelog:
  - Update to upstream svn r14165.
  - Remove valgrind-3.9.0-ppc64-ifunc.patch.
  - Remove valgrind-3.9.0-aarch64-glibc-2.19.90-gcc-4.9.patch
  - Remove valgrind-3.9.0-format-security.patch
  - Remove valgrind-3.9.0-msghdr.patch


author: Mark Wielaard <mjw@redhat.com> 3.9.0-19.svn20140715r14165
changelog:
  - Add valgrind-3.9.0-arm64-user_regs.patch
  - Disable full regtest on aarch64 (gdb integration tests sometimes hang).
  - Enable openmpi support on aarch64.


author: Mark Wielaard <mjw@redhat.com> 3.9.0-20.svn20140718r14176
changelog:
  - Update to upstream svn r14176
    Remove valgrind-3.9.0-arm64-user_regs.patch
  - Add ppc64le support
    valgrind-3.9.0-ppc64le-initial.patch
    valgrind-3.9.0-ppc64le-functional.patch
    valgrind-3.9.0-ppc64le-test.patch
    valgrind-3.9.0-ppc64le-extra.patch


author: Mark Wielaard <mjw@redhat.com> 3.9.0-22.svn20140809r14250
changelog:
  - Update to upstream svn r14250
    - ppc64le support got integrated upstream. Remove patches:
      valgrind-3.9.0-ppc64le-initial.patch
      valgrind-3.9.0-ppc64le-functional.patch
      valgrind-3.9.0-ppc64le-test.patch
      valgrind-3.9.0-ppc64le-extra.patch


author: Mark Wielaard <mjw@redhat.com> - 3.9.0-24.svn20140818r14303
changelog:
  - Update to upstream svn r14303
  - Move fake libgcc into shared to not break post-regtest-checks.
  - autogen.sh execution no longer needed in %build.


author: Mark Wielaard <mjw@redhat.com> - 3.10.0-0.2.BETA2
changelog:
  - Update to 3.10.0.BETA2.
  - Don't run dwz or generate minisymtab.
  - Remove valgrind-3.9.0-s390x-ld-supp.patch fixed upstream.
  - Add valgrind-3.10-configure-glibc-2.20.patch.


author: Mark Wielaard <mjw@redhat.com> - 3.10.0-2
changelog:
  - Fix ppc32 multilib handling on ppc64[be].
  - Drop ppc64 secondary for ppc32 primary support.
  - Except for armv7hl we don't support any other arm[32] arch.


author: Mark Wielaard <mjw@redhat.com> - 3.10.0-4
changelog:
  - Add valgrind-3.10.0-aarch64-times.patch
  - Add valgrind-3.10.0-aarch64-getsetsid.patch
  - Add valgrind-3.10.0-aarch64-dmb-sy.patch


author: Mark Wielaard <mjw@redhat.com> - 3.10.0-5
changelog:
  - Merge valgrind-3.10.0-aarch64-times.patch
    and valgrind-3.10.0-aarch64-getsetsid.patch
    into valgrind-3.10.0-aarch64-syscalls.patch
    add fdatasync, msync, pread64, setreuid, setregid,
    mknodat, fchdir, chroot, fchownat, fchmod and fchown.
  - Add valgrind-3.10.0-aarch64-frint.patch
  - Add valgrind-3.10.0-fcvtmu.patch
  - Add valgrind-3.10.0-aarch64-fcvta.patch


author: Mark Wielaard <mjw@redhat.com> - 3.10.1-0.1.TEST1
changelog:
  - Upgrade to valgrind 3.10.1.TEST1
  - Remove patches that are now upstream:
    - valgrind-3.10.0-old-ppc32-instr-magic.patch
    - valgrind-3.10.0-aarch64-syscalls.patch
    - valgrind-3.10.0-aarch64-dmb-sy.patch
    - valgrind-3.10.0-aarch64-frint.patch
    - valgrind-3.10.0-fcvtmu.patch
    - valgrind-3.10.0-aarch64-fcvta.patch


author: Mark Wielaard <mjw@redhat.com> - 3.10.1-6
changelog:
  - Add valgrind-3.10.1-send-recv-mmsg.patch
  - Add mount and umount2 to valgrind-3.10.1-aarch64-syscalls.patch.
  - Add valgrind-3.10.1-glibc-version-check.patch


author: Mark Wielaard <mjw@redhat.com> - 3.10.1-7
changelog:
  - Add valgrind-3.10-1-ppc64-sigpending.patch
  - Filter out -fstack-protector-strong and disable _hardened_build.


author: Mark Wielaard <mjw@redhat.com> - 3.10.1-8
changelog:
  - Disable extended regtest on arm. The gdb tests hang for unknown reasons.
    The reason is a glibc bug #1196181 which causes:
    "GDB fails with Cannot parse expression `.L1055 4@r4'."


author: Mark Wielaard <mjw@redhat.com> - 3.10.1-9
changelog:
  - Add valgrind-3.10.1-memfd_create.patch.
  - Add valgrind-3.10.1-syncfs.patch.
  - Add valgrind-3.10.1-arm-process_vm_readv_writev.patch.
  - Add valgrind-3.10.1-fno-ipa-icf.patch.
  - Add valgrind-3.10.1-demangle-q.patch


author: Mark Wielaard <mjw@redhat.com> - 3.10.1-22.svn20150825r15589
changelog:
  - Drop valgrind-3.9.0-stat_h.patch.
  - Add BuildRequires gcc-c++.
  - Update to current valgrind svn (svn20150825r15589)
  - Add valgrind-3.10.1-gdb-file-warning.patch


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-0.1.TEST1
changelog:
  - Add BuildRequires perl(Getopt::Long)
  - Upgrade to valgrind 3.11.0.TEST1
  - Remove upstreamed valgrind-3.10.1-gdb-file-warning.patch


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-0.3.TEST1
changelog:
  - Make sure some info about the system is in the build.log before check.
  - Add valgrind-3.11.0-glibc-futex-message.patch
  - Add valgrind-3.11.0-arm64-libvex_test.patch
  - Add valgrind-3.11.0-arm-warnings.patch
  - Add valgrind-3.11.0-arm-no-cast-align.patch
  - Add valgrind-3.11.0-ppc-vbit-test.patch


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-0.4.TEST1
changelog:
  - Add valgrind-3.11.0-ppc-dfp-guard.patch
  - Add valgrind-3.11.0-ppc-ppr.patch
  - Add valgrind-3.11.0-ppc-mbar.patch


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-1
changelog:
  - Upgrade to valgrind 3.11.0 final
  - Drop patches included upstream
    - valgrind-3.11.0-ppc-dfp-guard.patch
    - valgrind-3.11.0-ppc-ppr.patch
    - valgrind-3.11.0-ppc-mbar.patch
    - valgrind-3.11.0-glibc-futex-message.patch
    - valgrind-3.11.0-arm64-libvex_test.patch
    - valgrind-3.11.0-arm-warnings.patch
    - valgrind-3.11.0-arm-no-cast-align.patch
    - valgrind-3.11.0-ppc-vbit-test.patch
  - Add arm64 syscall patches
    - valgrind-3.11.0-arm64-xattr.patch
    - valgrind-3.11.0-arm64-sigpending.patch


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-8
changelog:
  - Add valgrind-3.11.0-rlimit_data.patch
  - Add valgrind-3.11.0-fclose.patch
  - Add valgrind-3.11.0-pthread_spin_destroy.patch
  - Add valgrind-3.11.0-socketcall-x86-linux.patch
  - Don't strip debuginfo from vgpreload libaries.
    Enable dwz for everything else again.
  - Add valgrind-3.11.0-is_stmt.patch
  - Add valgrind-3.11.0-x86_unwind.patch


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-9
changelog:
  - Fix valgrind-3.11.0-pthread_barrier.patch to apply with older patch.
  - Fix multilib issue in config.h with HAVE_AS_AMD64_FXSAVE64.


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-13
changelog:
  - Remove valgrind-3.11.0-no-stv.patch (gcc6 has been fixed).
  - Add valgrind-3.11.0-futex.patch
  - Add valgrind-3.11.0-s390x-popcnt.patch


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-14
changelog:
  - Update valgrind-3.11.0-futex.patch (fix helgrind/drd regression).
  - Update valgrind-3.11.0-x86_unwind.patch (include amd64 fix).


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-17
changelog:
  - Update valgrind-3.11.0-arm64-more-syscalls.patch
  - Add valgrind-3.11.0-libstdc++-supp.patch (#1312647)


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-18
changelog:
  - Update valgrind-3.11.0-libstdc++-supp.patch.
  - Add valgrind-3.11.0-arm64-ldr-literal-test.patch.
  - Add valgrind-3.11.0-arm64-ldpsw.patch


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-19
changelog:
  - Add valgrind-3.11.0-cxx-freeres.patch (#1312647)
  - Add valgrind-3.11.0-ppc64-separate-socketcalls.patch
  - Add valgrind-3.11.0-isZeroU.patch
  - Replace valgrind-3.11.0-arm64-ldpsw.patch with upstream version
  - Add valgrind-3.11.0-ppc64-128bit-mod-carry.patch
  - Add valgrind-3.11.0-amd64-fcom.patch
  - Add valgrind-3.11.0-z13s.patch
  - Add valgrind-3.11.0-gdb-test-filters.patch


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-20
changelog:
  - Update valgrind-3.11.0-cxx-freeres.patch (x86 final_tidyup fix)
  - Add valgrind-3.11.0-s390x-risbgn.patch


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-21
changelog:
  - Add valgrind-3.11.0-deduppoolalloc.patch
  - Add valgrind-3.11.0-ppc-bcd-addsub.patch
  - Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-24
changelog:
  - Mandatory Perl build-requires added
  - Add valgrind-3.11.0-shr.patch
  - Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch
  - Update valgrind-3.11.0-wrapmalloc.patch
  - Add valgrind-3.11.0-sighandler-stack.patch


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-26
changelog:
  - Only build valgrind-openmpi when not creating a software collection.
  - No support for multilib on secondary arches when creating scl.
  - Touch up empty .exp files.


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-0.1-BETA1
changelog:
  - Update to valgrind 3.12.0 pre-release.
    - Drop upstreamed patches.
    - Disable exp-tests in %check. GDB crashes on gdb_server tests.


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-6
changelog:
  - Add valgrind-3.12.0-arm64-ppc64-prlimit64.patch
  - Add valgrind-3.12.0-arm64-hint.patch
  - Add valgrind-3.12.0-clone-spawn.patch
  - Add valgrind-3.12.0-quick-fatal-sigs.patch
  - Add valgrind-3.12.0-exit_group.patch
  - Add valgrind-3.12.0-deregister-stack.patch
  - Add valgrind-3.12.0-x86-gdt-and-ss.patch
  - Add valgrind-3.12.0-cd-dvd-ioctl.patch
  - Add valgrind-3.12.0-tests-cxx11_abi_0.patch
  - Add valgrind-3.12.0-helgrind-dl_allocate_tls-supp.patch
  - Add valgrind-3.12.0-ppc-xxsel.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-0.1.RC1
changelog:
  - Update description as suggested by Ivo Raisr.
  - Workaround gdb/python bug in testsuite (#1434601)
  - Update to upstream 3.13.0-RC1.
  - Drop all upstreamed patches.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-0.2.RC1
changelog:
  - Add valgrind-3.13.0-arm-dcache.patch
  - Add valgrind-3.13.0-g++-4.4.patch
  - Add valgrind-3.13.0-s390x-GI-strcspn.patch
  - Add valgrind-3.13.0-xtree-callgrind.patch


author: Mark Wielaard <mjw@fedoraproject.org> 3.13.0-2
changelog:
  - Add valgrind-3.13.0-ppc64-check-no-vsx.patch
  - Add valgrind-3.13.0-epoll_pwait.patch (#1462258)
  - Add valgrind-3.13.0-ppc64-diag.patch


author: Mark Wielaard <mjw@fedoraproject.org> 3.13.0-4
changelog:
  - Add valgrind-3.13.0-arm-index-hardwire.patch (#1466017)
  - Add valgrind-3.13.0-ucontext_t.patch
  - Add valgrind-3.13.0-gdb-8-testfix.patch
  - Add valgrind-3.13.0-disable-vgdb-child.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-9
changelog:
  - Add valgrind-3.13.0-amd64-eflags-tests.patch
  - Add valgrind-3.13.0-suppress-dl-trampoline-sse-avx.patch
  - Add valgrind-3.13.0-static-tls.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-12
changelog:
  - Add valgrind-3.13.0-s390-cgijnl.patch.
  - Use upstream version of valgrind-3.13.0-debug-alt-file.patch.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-21
changelog:
  - Add valgrind-3.13.0-separate-code.patch (#1600034)
  - Add valgrind-3.13.0-arm-disable-vfp-test.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.13.0-26
changelog:
  - Use valgrind_arches for ExclusiveArch when defined.
  - Use restorecon for scl on rhel6 to work around rpm bug (#1610676).


author: Mark Wielaard <mjw@fedoraproject.org> - 3.14.0-2
changelog:
  - Add valgrind-3.14.0-s390x-fix-reg-alloc-vr-vs-fpr.patch.
  - Add valgrind-3.14.0-s390x-sign-extend-lochi.patch.
  - Add valgrind-3.14.0-s390x-vec-reg-vgdb.patch.
  - Add valgrind-3.14.0-s390x-vec-float-point-code.patch
    and valgrind-3.14.0-s390x-vec-float-point-tests.patch
  - Disable full regtests on fedora everywhere.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.14.0-4
changelog:
  - Add valgrind-3.14.0-get_otrack_shadow_offset_wrk-ppc.patch,
    valgrind-3.14.0-new-strlen-IROps.patch,
    valgrind-3.14.0-ppc-instr-new-IROps.patch,
    valgrind-3.14.0-memcheck-new-IROps.patch,
    valgrind-3.14.0-ppc-frontend-new-IROps.patch,
    valgrind-3.14.0-transform-popcount64-ctznat64.patch and
    valgrind-3.14.0-enable-ppc-Iop_Sar_Shr8.patch (#1652926)


author: Mark Wielaard <mjw@fedoraproject.org> - 3.14.0-5
changelog:
  - Add valgrind-3.14.0-wcsncmp.patch (#1645971)
  - Replace valgrind-3.14.0-s390x-vec-float-point-{code,test}.patch
    with upstream versions.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.14.0-6
changelog:
  - Add valgrind-3.14.0-final_tidyup.patch
  - Add valgrind-3.14.0-ppc64-ldbrx.patch
  - Add valgrind-3.14.0-ppc64-unaligned-words.patch
  - Add valgrind-3.14.0-ppc64-lxvd2x.patch
  - Add valgrind-3.14.0-ppc64-unaligned-vecs.patch
  - Add valgrind-3.14.0-ppc64-lxvb16x.patch
  - Add valgrind-3.14.0-set_AV_CR6.patch
  - Add valgrind-3.14.0-undef_malloc_args.patch
  - Add valgrind-3.14.0-jm-vmx-constraints.patch
  - Add valgrind-3.14.0-sigkill.patch
  - Add valgrind-3.14.0-ppc64-ptrace.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.14.0-8
changelog:
  - Update valgrind-3.14.0-jm-vmx-constraints.patch for ppc64.
  - Show all diff files in check, not just the main/default one.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.14.0-9
changelog:
  - Add valgrind-3.14.0-vbit-test-sec.patch
  - Add valgrind-3.14.0-x86-Iop_Sar64.patch
  - Add valgrind-3.14.0-power9-addex.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-0.1.RC1
changelog:
  - Remove patches to prebuild files and always ./autogen.sh.
  - Only ever build primary arch. Put tools under libexec.
  - Update to upstream 3.15.0-RC1.
  - Drop all upstreamed patches.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-0.2.RC1
changelog:
  - Add valgrind-3.15.0-s390x-get-startregs-constraint.patch
  - Add valgrind-3.15.0-missing-a-c.patch
  - Add valgrind-3.15.0-libstdc++-supp.patch
  - Add valgrind-3.15.0-dhat-x86.patch
  - Add valgrind-3.15.0-gdb-output1.patch
  - Add valgrind-3.15.0-gdb-output2.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-0.3.RC1
changelog:
  - Enable full regtest on all fedora arches.
  - Make sure that patched a.c is not newer than cgout-test.
  - Update valgrind-3.15.0-gdb-output1.patch to upstream version.
  - Add valgrind-3.15.0-filter-libc-futex.patch.
  - Add valgrind-3.15.0-mmap-32bit.patch.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-0.4.RC2
changelog:
  - Update to 3.15.0.RC2.
  - Drop upstreamed patches:
    - valgrind-3.15.0-s390x-get-startregs-constraint.patch
    - valgrind-3.15.0-missing-a-c.patch
    - valgrind-3.15.0-libstdc++-supp.patch
    - valgrind-3.15.0-dhat-x86.patch
    - valgrind-3.15.0-gdb-output1.patch
    - valgrind-3.15.0-gdb-output2.patch
  - Update valgrind-3.15.0-mmap-32bit.patch to upstream version.
  - gdb on f30 and rawhide is currently broken, don't run_full_regtest.
  - Any glibc-devel version is.
  - Drop rhel5 special case for tools-devel.
  - Use /bin/true --help as sanity test.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-0.5.RC2
changelog:
  - No openmpi support on old s390x rhel.
  - Disable s390x z13 support on rhel6 (too old binutils).
  - Use an explicit ExclusiveArch, don't rely on %valgrind_arches.
  - Drop close_fds, it is no longer needed.
  - Include any gdbserver_tests diffs for failing regtest.


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-0.8.RC2
changelog:
  - Adding of stack-protector flag should only be done with newer gcc.
  - Older rpm macros didn't provide build_ldflags.
  - Add valgrind-3.15.0-arm64-Ity_F16.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-1
changelog:
  - On ppc64[be] -fexceptions is troublesome.
  - valgrind-3.15.0 final
    Remove upstreamed patches
    - valgrind-3.15.0-arm64-Ity_F16.patch
    - valgrind-3.15.0-filter-libc-futex.patch
    - valgrind-3.15.0-mmap-32bit.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-2
changelog:
  - gdb has been fixed on fedora, run full regtests again.
  - Add valgrind-3.15.0-ppc64-filter_gdb.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-7
changelog:
  - Update valgrind-3.15.0-some-stack-protector.patch to include getoff.
  - Add valgrind-3.15.0-some-Wl-z-now.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-11
changelog:
  - Add valgrind-3.15.0-preadv2-pwritev2.patch
  - Add valgrind-3.15.0-arm-membarrier.patch
  - Add valgrind-3.15.0-z14-misc.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-14
changelog:
  - Add valgrind-3.15.0-gcc-10-i686-asm-test.patch
  - Add valgrind-3.15.0-gcc10-ppc64-asm-constraints.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-15
changelog:
  - Don't use valgrind-3.15.0-ptrace-siginfo.patch on ppc64[le]
  - Add valgrind-3.15.0-s390x-compare-and-signal.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-19
changelog:
  - Add valgrind-3.15.0-time64.patch
  - Add valgrind-3.15.0-arm-preadv2-pwritev2.patch
  - Add valgrind-3.15.0-avx_estimate_insn-test.patch
  - Add valgrind-3.15.0-gcc-10-x86-amd64-asm-test.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.16.1-6
changelog:
  - Add valgrind-3.16.1-faccessat2.patch
  - Add valgrind-3.16.1-gdbserver_nlcontrolc.patch
  - Add valgrind-3.16.1-PPC64BE-lsw.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.16.1-7
changelog:
  - Add valgrind-3.16.1-pthread-intercept.patch
  - Add valgrind-3.16.1-s390_emit_load_mem.patch
  - Add valgrind-3.16.1-s390x-z14-vector.patch


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-4
changelog:
  - Add valgrind-3.17.0-s390_insn_as_string.patch
  - Add valgrind-3.17.0-debuginfod.patch
  - Add valgrind-3.17.0-clone-parent-res.patch
  - Add valgrind-3.17.0-s390x-tests-z14-workaround.patch


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-6
changelog:
  - Add valgrind-3.17.0-s390-prep.patch
  - Add valgrind-3.17.0-s390-z15.patch
  - Add valgrind-3.17.0-s390-z13-vec-fix.patch


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-8
changelog:
  - Add gdbserver_tests-update-filters-for-newer-glibc-gdb.patch
  - Add helgrind-and-drd-suppression-libc-and-libpthread.patch
  - Remove valgrind-3.9.0-helgrind-race-supp.patch
  - Enable run_full_regtest.


author: Mark Wielaard <mjw@redhat.com> - 3.22.0-1
changelog:
  - Upstream 3.22.0 final
  - BuildRequires elfutils-debuginfod for testing
  - Remove all upstreamed patches
  - Adjust valgrind-3.16.0-some-stack-protector.patch
  - Adjust valgrind-3.16.0-some-Wl-z-now.patch
  - Add cachegrind.h to valgrind-devel package
  - Use %patch -Pn instead of deprecated %patchn


author: Binbin Zhou <zhoubinbin@loongson.cn> - 3.22.0-3
changelog:
  - Add valgrind-3.22.0-Add-LoongArch64-Linux-support.patch
  - Add valgrind-3.22.0-LoongArch64-Sync-kernel-4.19.patch


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 0.9.0-1
changelog:
  - First wrap for fedora
  - Uses some old-style specfile components for el5 compatibility, including
    the usage of the BuildRoot header and cleaning the buildroot before install


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 0.9.1-1
changelog:
  - New upstream release
  - Build man pages, buildrequires python-docutils
  - Added a patch for tests/cookie/08-overflow.vtc, upping workspace_client,
    the default is too small on 32bit
  - Removed extra cflags for el5, fixed with patch from upstream
  - Force readable docs and debug files, they tend to end up with mode 600


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 0.9.2-0.1.20160924gitdaa4f1d
changelog:
  - Upstream git checkout with support for varnish-5.0
  - Removed patches that are included upstream
  - el5 build fix


author: Lubos Uhliarik <luhliari@redhat.com> - 0.15.0-1
changelog:
  - updated to newer version (0.15.0)
  - Drop EPEL and older Fedora releases support
  - Drop broken manual ABI dependency to Varnish
  - Drop commented out references to past patches
  - Verbose test suite
  - Simplified configure step
  - Dependencies cleanup


author: Marek Kasik <mkasik@redhat.com> - 3.22.0-22
changelog:
  - Rebuild due to new version of FreeRDP
  - Fix an issue when RDP connection shows just black screen
  - Resolves: #1839744


author: Richard W.M. Jones <rjones@redhat.com> - 1.41.8-2
changelog:
  - Fix permissions on .sig file.
  - Disable -oa preallocated test since it fails in reviewers mock environment.


author: Richard W.M. Jones <rjones@redhat.com> - 1.41.8-4
changelog:
  - Use license instead of doc for COPYING file.
  - Include license in all subpackages.
  - Use gpgverify macro.
  - Don't own bash-completion directory because we Require the
    bash-completion package which owns it already.


author: Pino Toscano <ptoscano@redhat.com> - 1:1.42.0-2
changelog:
  - Bump the libguestfs requirement to 1.42.0.
  - Bump the epoch to 1 to match the version virt-v2v had when built from
    the libguestfs source.


author: Pino Toscano <ptoscano@redhat.com> - 1:1.42.0-3
changelog:
  - Actually fix epoch dependencies.
  - Fix virt-v2v-man-pages-uk migration from libguestfs-man-pages-uk.


author: Pino Toscano <ptoscano@redhat.com> - 1:1.42.0-4
changelog:
  - -i libvirt: ask again for the password when -ip is not specified
    resolves: rhbz#1838425
  - -i libvirt: print URI without connecting
    resolves: rhbz#1839917
  - Handle HTTP/2 replies from vCenter
    resolves: rhbz#1840126
  - -o libvirt: remove cache=none from disks
    resolves: rhbz#1837453
  - Fix parameters for the nbdkit rate filter
    resolves: rhbz#1841096
  - -it vddk: do not use the nbdkit readahead filter with VDDK
    resolves: rhbz#1832805


author: Pino Toscano <ptoscano@redhat.com> - 1:1.42.0-5
changelog:
  - Ship a newer version of rhev-apt.exe
    resolves: rhbz#1850000
  - Ship the rhsrvany sources with a note for them, as requested by
    Red Hat Legal.
  - -i libvirt: ask for the password ourselves instead of letting nbdkit
    ask for it (and potentially time out)
    related: rhbz#1838425
  - Fix build with libosinfo >= 1.8.0
    resolves: rhbz#1850423


author: Pino Toscano <ptoscano@redhat.com> - 1:1.42.0-6
changelog:
  - Improve the documentation of --keys-from-stdin
    resolves: rhbz#1858765
  - Check that --mac :ip: parameters are sensible
    resolves: rhbz#1858775
  - -i libvirt: read password file outside libvirt auth callback
    resolves: rhbz#1869454


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-7
changelog:
  - Tell virt-v2v where overlay files must be placed
  - Allow conversion to UEFI openstack
    resolves: rhbz#1820282 rhbz#1872094


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-11
changelog:
  - v2v: windows: Allow qxldod.inf as synonym for qxl.inf
    resolves: rhbz#1926102
  - v2v: Increase required free space in Windows to 100 MB
    resolves: rhbz#1949147
  - docs: Document how to remove "Out of HTTP sessions" limit
  - v2v: Disable readahead for VMware curl sources too
    resolves: rhbz#1848862
  - v2v: Allow output to block devices
    resolves: rhbz#1868690
  - docs: -o openstack: Clarify name of file containing OpenStack auth
    resolves: rhbz#1871754
  - docs: UEFI guest conversion to -o openstack is supported
    resolves: rhbz#1872100
  - v2v: Turn pnp_wait.exe warning into a debug message
    resolves: rhbz#1903960
  - v2v: windows: Fix schtasks /SD parameter
    resolves: rhbz#1895323


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-13
changelog:
  - docs: Fix version of virt-v2v which added UEFI for OpenStack
    related: rhbz#1872100
  - v2v: Increase Linux minimum root filesystem to 100 MB
    resolves: rhbz#1764569


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-17
changelog:
  - Correct regexps used to fix schtasks command
  - Fix backing file specified without backing format
    resolves: rhbz#2023279, rhbz#2025769


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-21
changelog:
  - Fix assertion failure when parsing OVA dir with trailing slash
    resolves: rhbz#2028823
  - For -o rhv-upload wait for VM creation task
    resolves: rhbz#1985827
  - If listing RPM applications fails, rebuild DB and retry (2089623)
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2102720


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-22
changelog:
  - RHEL 8: If setfiles fails fall back to autorelabel
    resolves: rhbz#XXX
  - Reapply patches since we are using git format-patch --submodule=diff


author: Uri Lublin <uril@redhat.com> - 10.0-3
changelog:
  - Show OS-ID when running 'remote-viewer -V'
    Resolves: rhbz#1953282
  - Clear auth entry fields
    Resolves: rhbz#1953933


author: Daniel P. Berrangé <berrange@redhat.com> - 11.0-1
changelog:
  - Rebase to 11.0 release
  - Add missing dep on libvirt-client for bash completion
  - Resolves: rhbz#2028604, rhbz#2000528


author: Jiri Kucera <jkucera@redhat.com> - 0.3.11-4
changelog:
  - fixed License
  - Requires: /usr/bin/gpg2 in libs subpackage
  - Added support for opening all types of LUKS devices
    Resolves: #1626974


author: - Bastien Nocera <bnocera@redhat.com> - 1.1.1.svn20070412-1.fc7
changelog:
  - Upgrade to a current SVN snapshot of vorbis-tools to get our FLAC support
    back, after the recent libFLAC upgrade (#229124)
  - Remove obsolete UTF8 and Curl mute patches


author: Christopher Aillon <caillon@redhat.com> 1:1.1.1.svn20070412-2.fc7
changelog:
  - Bring back support for http URLs which was broken with the previous update
    See https://bugzilla.redhat.com/240351


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.0-1
changelog:
  - update to 1.2.0
  - remove libcurl and oggdec patches, applied upstream
  - drop unneeded autoconf BR
  - fix BuildRoot


author: Hans de Goede <j.w.r.degoede@hhs.n> - 1:1.2.0-2
changelog:
  - Stop calling autoconf, this was no longer necessarry and in current
    rawhide breaks us from building (because aclocal.m4 does not match
    the new autoconf version)
  - Drop our last 2 patches, they were modifying configure, but since we called
    autoconf after that in effect they were not doing anything, review has
    confirmed that they indeed are no longer needed)
  - Drop using system libtool hack, this is dangerous when the libtool used
    to generate ./configure and the one used differ
  - Remove various antique checks (for example check if RPM_BUILD_ROOT == /) 
  - Drop unnecessary explicit library Requires
  - Cleanup BuildRequires


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-32
changelog:
  - Removed a hint about the ftp_home_dir SELinux boolean from the config file
  - Resolves: rhbz#1623424


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-34
changelog:
  - Enable support for wide-character strings in logs
  - Replace unprintables with HEX code, not question marks
  - Resolves: rhbz#1947900


author: José Expósito <jexposit@redhat.com> - 1.3.283.0-3
changelog:
  - Provides/Obsoletes vulkan-validation-layers-devel
    Resolves: https://issues.redhat.com/browse/RHEL-54290


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.38.5-1.4
changelog:
  - Add patch for CVE-2023-28204
    Resolves: #2209744
  - Add patch for CVE-2023-32373
    Resolves: #2209727


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.30.2-2
changelog:
  - Try to fix coverity build by disabling docs (thanks to Kamil Dudka <kdudka@redhat.com>!)
  - Related: #1883304


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.36.1-1
changelog:
  - Update to 2.36.1
    Related: #2061994
  - Resolves: #2075492
  - Resolves: #2075494
  - Resolves: #2075496


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.40.5-1
changelog:
  - Upgrade to 2.40.5. Also, disable JIT
    Resolves: #2176269
    Resolves: #2185742
    Resolves: #2209728
    Resolves: #2209745
    Resolves: #2218649
    Resolves: #2218651
    Resolves: #2224611


author: Bo Ren <rb01097748@alibaba-inc.com> 2.42.5-1.0.1
changelog:
  - Exclude loongarch64
  - cherry-pick `add sw arch #ef8be098b07c4d8a9f809d32a607700f4a420676`. (nijie@wxiat.com)


author: Bo Ren <rb01097748@alibaba-inc.com> 2.46.3-1.0.1
changelog:
  - Exclude loongarch64
  - cherry-pick `add sw arch #ef8be098b07c4d8a9f809d32a607700f4a420676`. (nijie@wxiat.com)
  - Remove patches for cmake and gstreamer (wb-zh951434@alibaba-inc.com)


author: Brian C. Lane <bcl@redhat.com> - 35.5-1
changelog:
  - New release: 35.5 (bcl)
    Resolves: rhbz#2052604
  - docs: Explain how to undo blueprints delete (bcl)
  - test: server status no longer returns devel (bcl)
  - Use GetFrozenBlueprintsTOML for blueprints freeze save (bcl)
  - Add a test for float uid/gid in frozen blueprint (bcl)
  - Use GetBlueprintsTOML for blueprints save (bcl)
  - test: Add a test for float uid/gid in saved blueprint (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 (49699333+dependabot[bot])
  - tests: trigger on push to main (jrusz)
  - build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - ci: add keystore for sonarqube (jrusz)
  - spec: Switch to using %gobuild macro on Fedora (bcl)
  - ci: change workflow name (jrusz)
  - ci: add gitlab-ci and sonarqube (jrusz)
  - doc: fix example links from the README (tdecacqu)
  - build(deps): bump actions/checkout from 2.3.4 to 2.4.0 (49699333+dependabot[bot])
  - ci: Enable Coverity Scan tool (atodorov)


author: Brian C. Lane <bcl@redhat.com> - 35.9-1
changelog:
  - Copy rhel-88.json test repository from osbuild-composer
  - Update osbuild-composer test repositories from osbuild-composer
  - New release: 35.9 (bcl)
    Resolves: rhbz#2168666
  - tests: Replace os.MkdirTemp with t.TempDir (bcl)
  - blueprint save: Allow overriding bad blueprint names (bcl)
  - tests: Clean up checking err in tests (bcl)
  - composer-cli: Implement blueprints diff (bcl)
  - saveBlueprint: Return the filename to the caller (bcl)
  - composer-cli: Add tests for using --commit with old servers (bcl)
  - weldr: Return error about the blueprints change route (bcl)
  - weldr: Save the http status code as part of APIResponse (bcl)
  - Add --commit support to blueprints save (bcl)
  - Add --commit to blueprints show (bcl)
  - gitleaks: Exclude the test password used in tests (bcl)
  - ci: add tags to AWS instances (tlavocat)
  - Update github.com/BurntSushi/toml to 1.2.1
  - Update github.com/stretchr/testify to 1.8.1
  - Update bump github.com/spf13/cobra to 1.6.1
  - New release: 35.8 (bcl)
  - completion: Remove providers from bash completion script (bcl)
  - completion: Filter out new headers from compose list (bcl)
  - docs: Remove unneeded Long descriptions (bcl)
  - docs: Use a custom help template (bcl)
  - docs: Add more command documentation (bcl)
  - cmdline: Add package glob support to modules list command (bcl)
  - workflow: Add govulncheck on go v1.18 (bcl)
  - tests: Update to use golangci-lint 1.49.0 (bcl)
  - New release: 35.7 (bcl)
  - spec: Move %gometa macro above %gourl (bcl)
  - weldr: When starting a compose pass size as bytes, not MiB (bcl)
  - tests: Use correct size value in bytes for test (bcl)
  - workflow: Add Go 1.18 to text matrix (bcl)
  - Replace deprecated ioutil functions (bcl)
  - New release: 35.6 (bcl)
  - tests: Update tests for osbuild-composer changes (bcl)
  - CMD: Compose status format (eloy.coto)
  - CMD: Compose list format (eloy.coto)
  - tests: Update tests to check for JSON list output (bcl)
  - composer-cli: Change JSON output to be a list of objects (bcl)
  - weldr: Simplify the old ComposeLog, etc. functions (bcl)
  - composer-cli: Add --filename to blueprints freeze save command (bcl)
  - composer-cli: Add --filename to blueprints save command (bcl)
  - composer-cli: Add --filename to compose logs command (bcl)
  - composer-cli: Add --filename to compose image command (bcl)
  - composer-cli: Add --filename to compose metadata command (bcl)
  - composer-cli: Add --filename to compose results command (bcl)
  - weldr: Add saving to a new filename to GetFilePath function (bcl)
  - github: Fix issue with codecov and forced pushes in PRs (bcl)
  - Use golangci-lint 1.45.2 in workflow (bcl)
  - Run workflow tests for go 1.16.x and 1.17.x (bcl)
  - Move go.mod to go 1.16 (bcl)
  - workflows/trigger-gitlab: run Gitlab CI in new image-builder project (jrusz)
  - Update GitHub actions/setup-go to 3
  - Update GitHub actions/checkout to 3


author: Brian C. Lane <bcl@redhat.com> - 35.12-1
changelog:
  - Copy rhel-8.10.json test repository from osbuild-composer
  - New release: 35.12 (bcl)
    Resolves: RHEL-1770
  - Add support for compose start warning messages (bcl)
  - Update documentation urls for new locations (bcl)
  - weldr: go fmt changes to a couple comments (bcl)
  - weldr: Update ostree test for parentid with no url (bcl)
  - Makefile: Turn off seccomp for build-in-podman (bcl)
  - composer-cli: Update doc links (simon.steinbeiss)
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)
  - spec: Require createrepo_c for weldr-client-tests package (bcl)
  - spec: migrate the license field to SPDX (ondrej)
  - Go: Switch to go 1.19 (bcl)
  - CI: Update terraform hash (bcl)
  - Actions: add workflow for marking and closing stale issues and PRs (thozza)
  - workflows: Stop using golint (bcl)
  - workflows: Add Go 1.21 and 1.22 to test matrix (bcl)
  - workflows: Update to golangci-lint 1.56.2 (bcl)
  - workflow: Ignore govulncheck failures (bcl)
  - workflow: Switch to testing on go 1.18, 1.19, 1.20 (bcl)
  - build(deps): bump actions/setup-go from 3 to 5 (49699333+dependabot[bot])
  - build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.8.0 (49699333+dependabot[bot])
  - build(deps): bump actions/checkout from 3 to 4 (49699333+dependabot[bot])
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 (49699333+dependabot[bot])


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 1.19.5-11.0.1
changelog:
  - use extern in header files when declaring global variables for compatible gcc10 build
  - Add doc sub package(taifu.gc@alibaba-inc.com)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - upgraded to 1.5.0
  - they removed the man page from the distribution (Duh!) and I added it back
    from 1.4.5. Hey, removing the man page is DUMB!


author: Bill Nottingham <notting@redhat.com>
changelog:
  - setlocale for LC_CTYPE too, or else all the translations think their
    characters are unprintable.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 1.7
  - Require perl for building (to get man pages)
  - Don't include the Japanese po file, it's now included
  - Use %{_tmppath}
  - no patches necessary
  - Make /etc/wgetrc noreplace
  - More docs


author: Karsten Hopp <karsten@redhat.de> 1.9.1-7
changelog:
  - clean up manpage (#117519)
  - buildrequire texinfo (#123780)
  - LFS patch, based on wget-LFS-20040630.patch from Leonid Petrov
    (#123524, #124628, #115348)


author: Karsten Hopp <karsten@redhat.de> 1.9.1-18
changelog:
  - add support for --protocol-directories option as documented
    in the man page (Ville Skyttä, #145571)


author: Karsten Hopp <karsten@redhat.de> 1.9.1-19
changelog:
  - Don't set actime to access time of the remote file or tmpwatch might 
    remove the file again (#146440).  Set it to the current time instead.
    timestamping checks only modtime, so this should be ok.


author: Karsten Hopp <karsten@redhat.de> 1.9.1-20
changelog:
  - texi2pod doesn't handle texinfo xref's. rewrite some lines so that
    the man page doesn't have incomplete sentences anymore (#140470)


author: Karsten Hopp <karsten@redhat.de> 1.10-2
changelog:
  - update to wget-1.10
    - drop passive-ftp patch, already in 1.10
    - drop CVS patch
    - drop LFS patch, similar fix in 1.10
    - drop protdir patch, similar fix in 1.10
    - drop actime patch, already in 1.10


author: Karsten Hopp <karsten@redhat.com> 1.10.2-13
changelog:
  - merge review changes (#226538)
    - use version/release/... in buildroot tag
    - remove BR perl
    - use SMP flags
    - use make install instead of %makeinstall
    - include copy of license
    - use Requires(post)/Requires(preun)
    - use optflags
    - remove trailing dot from summary
    - change tabs to spaces


author: Karsten Hopp <karsten@redhat.com> 1.10.2-15
changelog:
  - fix discarding of expired cookies
  - escape non-printable characters
  - drop to11 patch for now (#223754, #227853, #227498)


author: Karsten Hopp <karsten@redhat.com> 1.11.3-1
changelog:
  - wget-1.11.3, downgrades the combination of the -N and -O options
    to a warning instead of an error


author: Karsten Hopp <karsten@redhat.com> 1.12-1
changelog:
  - update to wget-1.12
  - fixes CVE-2009-3490 wget: incorrect verification of SSL certificate
    with NUL in name


author: Jon Ciesla <limburgher@gmail.com> - 1.13.4-1
changelog:
  - New upstream, BZ 730286.
  - Modified path patch.
  - subjectAltNames patch upstreamed.
  - Specified openssl at config time.


author: Tomas Hozza <thozza@redhat.com> 1.14-3
changelog:
  - Added libuuid-devel to BuildRequires to use libuuid functions
    in "src/warc.c" functions (#865421)


author: Tomas Hozza <thozza@redhat.com> - 1.14-5
changelog:
  - Added BuildRequires: perl-podlators for pod2man
  - Patched manpage to silent new Tex errors
  - Resolves: (#914571)


author: Tomas Hozza <thozza@redhat.com> - 1.14-6
changelog:
  - add missing options accept-regex and reject-regex to man page
  - fix errors in texi2pod introduced in Perl-5.18


author: Tomas Hozza <thozza@redhat.com> - 1.14-8
changelog:
  - Fix deadcode and possible use of NULL in vprintf (#913153)
  - Add documentation for --regex-type and --preserve-permissions
  - Fix --preserve-permissions to work as documented (and expected)
  - Fix bug when authenticating using user:password@url syntax (#912358)
  - Document and fix --backups option


author: Tomas Hozza <thozza@redhat.com> - 1.17-1
changelog:
  - Updated to 1.17 + added some additional upstream fixes
  - Fixed hardening of wget executable (#1281829)


author: Tomas Hozza <thozza@redhat.com> - 1.19.4-1
changelog:
  - Update to the latest upstream version
  - Fix issue with decompressing with broken web servers (#1532233)


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-15
changelog:
  - Resolves: #2119126 - Wireshark source rpm fails to build due to looking for incorrect libssh header files


author: Tomas Popela <tpopela@redhat.com> - 1.6.0-5
changelog:
  - Drop PipeWire 0.2 requirement as Chrom[e|ium] 90 now depends on PipeWire 0.3
  - Resolves: rhbz#1949809


author: Debarshi Ray <rishi@fedoraproject.org> - 41.1-2
changelog:
  - Make the Supplements specific to Fedora to retain consistency with
    xdg-desktop-portal-gtk
  Resolves: #2051473


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.04-0.1
changelog:
  - disabled w3c-libwww because it does not exist anymore in FC5 and
    seems to be unmaintained upstream
  - added missing libxml2-devel
  - cleaned up list of %doc files
  - fixed gcc4.1 build issues
  - removed static libraries when there exists a corresponding dynamic one


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.04-1
changelog:
  - added libxml2-devel and openssl-devel Requires: for the -devel
    subpackage
  - ship doc/* instead of doc
  - initial Fedora Extras package (review 175840)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.06.11-2
changelog:
  - rediffed cmake patch against current version
  - made the xmlrpc-c-config compatible to the upstream version
  - added compatibility symlinks for some header files (thx to Robert de
    Vries for reporting these two issues)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.06.23-1
changelog:
  - use correct pkg-config script for 'xmlrpc-config abyss-server'
    output (#355411)
  - updated to 1.06.23 (#355411)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.13.07-2
changelog:
  - moved to advanced branched; rediffed/updated existing cmake patch
    and fixed other compilation issues (#369841)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.13.8-2
changelog:
  - fixed cmake quoting so that pkgconfig files get correct version number
  - fixed handling of 'server-util' and '--cflags' within xmlrpc-c-config


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.16.4.1567-2
changelog:
  - updated to 1.16.4
  - rediffed/updated patches
  - splitted some subpackages (c++, client) out of main package as they
    introduce additional dependencies (c++, curl)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.20.3-1.1841
changelog:
  - updated to rev1841
  - rediffed patches
  - added patch to fix handling of wrong certificates (Nikola Pajkovsky)
  - added support for $XMLRPC_TRACE_CURL env (John Dennis)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.21.00-1301.1851
changelog:
  - replaced .so symlinks by linker scripts which add all implicit
    dependencies in AS_NEEDED() commands (#564607, #565577)


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.21.00-1401.1851
changelog:
  - require the various subpackages explicitly for -devel; the ld linker
    scripts broke rpm's autodetection (#567400)
  - removed -devel Requires: which are covered by pkgconfig autodeps
  - added %{?_isa} annotations


author: Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 1.24.1-1500.svn1987
changelog:
  - updated to 1.24.1
  - set -Wno-uninitialized CFLAGS; code contains lot of constructs
    triggering this warning and the 'int a=a' defeaters have been
    removed in this version


author: Rob Crittenden <rcritten@redhat.com> - 1.51.0-7
changelog:
  - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827)
    (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602)
  - Prevent integer overflow on m_groupSize in doProlog
    (CVE-2021-46143) (#2058560)


author: Daniel Veillard <veillard@redhat.com> 1.2.1-1
changelog:
  - initial packaging based on the upstream one and libxml2 one.
  - desactivated mozilla-nss due to detection/architecture problems


author: Daniel Veillard <veillard@redhat.com> 1.2.7-1
changelog:
  - Upstream release of 1.2.7, mostly bug fixes plus new functions
    to GetKeys from simple store and X509 handling.


author: Christopher Aillon <caillon@redhat.com> 1.2.9-4
changelog:
  - NSS has been split out of the mozilla package, so require that now
    and update separate_nspr.patch to account for the new NSS as well


author: Tom "spot" Callaway <tcallawa@redhat.com> - 1.2.16-1
changelog:
  - update to 1.2.16
  - cleanup spec file
  - disable static libs
  - disable rpath
  - enable gcrypt subpackage


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.2.19-3
changelog:
  - Fix duplicate documentation (#1001250)
  - Turn on verbose build output via V=1 make
  - Use %?_isa in explicit package deps
  - Fix base package Group tag to "System Environment/Libraries"
  - Remove %defattr


author: Simo Sorce <simo@redhat.com> - 1.2.20-1
changelog:
  - Update to new upstream release 1.2.20
  - This release fixes a number of miscellaneous bugs and updates expired or
    soon-to-be-expired certificates in the test suite.
  - Also drops the no-ecdsa patch


author: Ondrej Vasik <ovasik@redhat.com> 0.0.27-1
changelog:
  - New version 0.0.27
  - remove several bashisms in scripts
  - add new option --profile for preprocessing documents
    with profiling stylesheet
  - fix several potential crashes in xmlif (found by static analysis)


author: Adam Jackson <ajax@redhat.com> - 7.7-21
changelog:
  - oclock 1.0.4
  - xeyes 1.1.2
  - xfontsel 1.0.6
  - xload 1.1.3
  - xmessage 1.0.5
  - xpr 1.0.5
  - xwd 1.0.7
  - xwud 1.0.5


author: Michel Dänzer <mdaenzer@redhat.com> - 19.1.0-1
changelog:
  - ati 19.1.0 (#1728818)
  - Drop patch 0001-Don-t-set-up-black-scanout-buffer-if-LeaveVT-is-call.patch,
    merged upstream
  - Add patches 0001-Handle-NULL-fb_ptr-in-pixmap_get_fb.patch &
    0002-Don-t-crash-X-server-if-GPU-acceleration-is-not-avai.patch from
    upstream Git master, fixing crashes with ShadowFB


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.1-2
changelog:
  - xf86-input-libinput 1.0.1 (#1951879)
  - Fix the upstream source URL
  - Use autosetup instead of manual patch handling


author: Hans de Goede <hdegoede@redhat.com> - 1.0.12-4
changelog:
  - Fix the crtc not being turned off, causing the dgpu to not suspend,
    after using a dgpu attached output


author: Christophe Fergeau <cfergeau@redhat.com> - 0.1.5-7
changelog:
  - Add upstream patches for Python 3 support
  - Validate RANDR output property atoms
  - Add patch fixing crash with multiple QXL devices
  - This syncs the RHEL branch with both current rawhide and RHEL 7.6


author: Adam Jackson <ajax@redhat.com> - 2.4.0-3
changelog:
  - Restore no-virt-shadowfb patch
  - Refuse to run if there's a UEFI framebuffer; use fbdev or a native driver


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.0-2
changelog:
  - Obsolete linuxwacom, don't Conflict with it.
  - Remove trailing dot from summary (rpmlint warning).
  - Remove spurious executable bits from source files (rpmlint warning).
  - Add AUTHORS, ChangeLog, README to doc


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.1-1
changelog:
  - wacom 0.10.1
  - BuildRequires xorg-x11-util-macros 1.3.0
  - Remove unnecessary 'find' directive, changed upstream.
  - Add GPL document
  - Install 10-wacom.fdi file.
  - Provides: linuxwacom


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.4-2
changelog:
  - Update sources to sourceforge, 0.10.4 was released on sf only.
  - Remove wacom.fdi, we're just using the one shipped by the driver now.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.4-5.20100219
changelog:
  - Fix 10-wacom.conf for N-Trig devices: rename the class (copy/paste error)
    and only take event devices. (Related #526270)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.5-4.20100325
changelog:
  - Install config snippet in $datadir/X11/xorg.conf.d
  - rename to 50-wacom.conf to match upstream naming


author: Peter Hutterer <peter.hutterer@redhat.com> 0.10.6-5.20100521
changelog:
  - Update udev rules file to include Fujitsu serial tablets. (#598168)
  - Update udev rules file to set ID_INPUT_TABLET


author: Peter Hutterer <peter.hutterer@redhat.com> 0.11.99-2.20110527
changelog:
  - Fix udev rules file (thanks to Lennart):
    - The subsystem cannot be assigned.
    - Append the attrs to the device name
    - Match only on tty/pnp


author: Peter Hutterer <peter.hutterer@redhat.com> * 0.11.99-3.20110527
changelog:
  - Fix udev rules file again:
    - use ==, not = to compare subsystems
    - assign ENV{NAME} even though we shouldn't, the server currently requires it
    - assign the lot to subsystem pnp too, that's where the server reads it
      from


author: Peter Hutterer <peter.hutterer@redhat.com> 0.16.0-5
changelog:
  - Align git snapshot building with other drivers
  - Add autotools/libtool to BuildRequires, we need those when building git
    snapshots
  - Always run autoreconf


author: Peter Hutterer <peter.hutterer@redhat.com> 0.23.0-9
changelog:
  - Let systemd restart inputattach when it exits (i.e. after suspend)
    (#1046912)
  - Fix the description to avoid superfluous quotes


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-9
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2108156, rhbz#2108161


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.20.11-11
changelog:
  - CVE fix for: CVE-2022-4283 (#2151799), CVE-2022-46340 (#2151774),
    CVE-2022-46341 (#2151779), CVE-2022-46342 (#2151784),
    CVE-2022-46343 (#2151789), CVE-2022-46344 (#2151794)


author: Hans de Goede <hdegoede@redhat.com> - 1.19.0-0.3.20161026
changelog:
  - Sync with upstream git, bringing in a bunch if bug-fixes
  - Add some extra fixes which are pending upstream
  - This also adds PointerWarping emulation to Xwayland, which should improve
    compatiblity with many games


author: Ben Crocker <bcrocker@redhat.com> - 1.19.0-0.6.20161028
changelog:
  - Fix Config record allocation during startup: if xorg.conf.d directory
  - was absent, a segfault resulted.


author: Hans de Goede <hdegoede@redhat.com> - 1.19.0-0.7.rc2
changelog:
  - Update to 1.19.0-rc2
  - Fix (hopefully) various crashes in FlushAllOutput() (rhbz#1382444)
  - Fix Xwayland crashing in glamor on non glamor capable hw (rhbz#1390018)


author: Olivier Fourdan <ofourdan@redhat.com> 1.19.0-1
changelog:
  - xserver 1.19.0
  - Fix use after free of cursors in Xwayland (rhbz#1385258)
  - Fix an issue where some monitors would show only black, or
    partially black when secondary GPU outputs are used


author: Hans de Goede <hdegoede@redhat.com> - 1.19.0-2
changelog:
  - Add some patches for better integration with the nvidia binary driver
  - Add a patch from upstream fixing a crash (rhbz#1389886)


author: Olivier Fourdan <ofourdan@redhat.com> 1.19.6-5
changelog:
  - xwayland: avoid race condition on new keymap
  - xwayland: Keep separate variables for pointer and tablet foci (rhbz#1519961)
  - xvfb-run now support command line option “--auto-display”


author: Olivier Fourdan <ofourdan@redhat.com> - 1.19.99.904-2
changelog:
  - Re-fix "use type instead of which in xvfb-run (rhbz#1443357)" which
    was overridden inadvertently


author: Adam Jackson <ajax@redhat.com> - 1.20.1-3
changelog:
  - Assorted RHEL mustard:
    - Don't probe for drivers we're not shipping
    - Enable PAM
    - Link Xorg with -z now
    - Nerf modesetting's atomic ioctl support
    - Don't autoconfigure vesa or fbdev from X -configure
    - Call LeaveVT on RANDR's CloseScreen path so we drop drm master
    - Try harder to get initial spanning desktop if the output's
      preferred mode was filtered away
  - Sync va_gl/vdpau patch from F29


author: Ben Crocker <bcrocker@redhat.com> - 1.20.3-5
changelog:
  - Add Eric Anholt's patch e50c85f4ebf559 from upstream:
  - Fix segfault on probing a non-PCI platform device on a system with PCI
  - NOTE: also pertains on a system with no PCI, e.g. s390x.
    Resolves: #1652013


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-3
changelog:
  - Downgrade modesetting "glamor initialization failed" X_ERROR → X_INFO
    Resolves: #1724573
  - Xwayland / Present leak fixes for #1728684


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-5
changelog:
  - xwayland: Hold a pixmap reference in struct xwl_present_event
    Related: #1728684
  - glamor: Fix glamor_poly_fill_rect_gl xRectangle::width/height handling
    Resolves: #1740250


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-8
changelog:
  - CVE fixes for: CVE-2020-14345 (#1872391), CVE-2020-14346 (#1872395),
    CVE-2020-14361 (#1872402), CVE-2020-14362 (#1872409)


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-4
changelog:
  - CVE fix for: CVE-2021-4008 (#2030162), CVE-2021-4009 (#2030172),
    CVE-2021-4010 (#2030175), CVE-2021-4011 (#2030181)


author: lutw <lutw@ieisystem.com> - 1.20.11-16.0.5
changelog:
  - Fix ix CVE-2023-5367 CVE-2023-5380 CVE-2023-6377 CVE-2023-6478 CVE-2024-0229 CVE-2024-21885 CVE-2024-21886 CVE-2024-0408 CVE-2024-0409


author: José Expósito <jexposit@redhat.com> - 1.20.11-20
changelog:
  - CVE fix for: CVE-2023-6377, CVE-2023-6478
    Resolves: https://issues.redhat.com/browse/RHEL-18321
    Resolves: https://issues.redhat.com/browse/RHEL-18327


author: José Expósito <jexposit@redhat.com> - 1.20.11-21
changelog:
  - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409
    Resolves: https://issues.redhat.com/browse/RHEL-21207
    Resolves: https://issues.redhat.com/browse/RHEL-20528
    Resolves: https://issues.redhat.com/browse/RHEL-20378
    Resolves: https://issues.redhat.com/browse/RHEL-20384
    Resolves: https://issues.redhat.com/browse/RHEL-21191
    Resolves: https://issues.redhat.com/browse/RHEL-21198


author: José Expósito <jexposit@redhat.com> - 1.20.11-23
changelog:
  - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and
    CVE-2024-31083
  - Add util-linux as a dependency of Xvfb
  - Fix compilation error on i686


author: Hangbo Fan <fanhangbo.fhb@alibaba-inc.com> - 1.20.11-25.0.1
changelog:
  - Add doc sub package
  - Fix doc package installation (wangkaiyuan@inspur.com)
  - cherry-pick `add sw arch #1ba6a0036d929c82c5516a18350d5c27cc28e210`. (nijie@wxiat.com)
  - cherry-pick: `add sw arch #3b1aa1ee2c00aeebe71a618589826c2d1cab136e`. (Weisson@linux.alibaba.com)
  - Fix the splash screen issue in the phytium S5000C (yuanxia2073@phytium.com.cn)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-2
changelog:
  - CVE fix for: CVE-2021-4008 (#2038067), CVE-2021-4009 (#2038070),
    CVE-2021-4010 (#2038072), CVE-2021-4011 (#2038074)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-3
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2110440, rhbz#2110433


author: Peter Hutterer <peter.hutterer@redhat.com> - 21.1.3-5
changelog:
  - CVE fix for: CVE-2022-4283 (#2151803), CVE-2022-46340 (#2151778),
    CVE-2022-46341 (#2151783), CVE-2022-46342 (#2151786),
    CVE-2022-46343 (#2151793), CVE-2022-46344 (#2151796)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.0.99.902-1
changelog:
  - xwayland 21.0.99.902
  - Remove xdmcp, udev, udev_kms build options
  - Stop overriding the vendor name, same as xorg-x11-server


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.9-5
changelog:
  Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Adam Jackson <ajax@redhat.com> - 7.7-25
changelog:
  - iceauth 1.0.8
  - xkill 1.0.5
  - xrdb 1.1.1
  - xrefresh 1.0.6
  - xset 1.2.4
  - xsetroot 1.1.2
  - HTTPS URLs


author: Adam Jackson <ajax@redhat.com> - 7.7-24
changelog:
  - Make -devel Require the base package, so the pc file will point to an
    xkbcomp that actually exists.


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.999-28
changelog:
  - remove dependency on ImageMagick and netpbm-progs, because they were needed for
    tests during %build phase, which were removed in commit SHA 0595c15da29


author: Daniel P. Berrange <berrange@redhat.com> - 2.0.4-1
changelog:
  - Update to 2.0.4 release (rhbz #845777)
  - Fix License tag to reflect change in 2.0.0 series from BSD to ISC


author: Kalev Lember <klember@redhat.com> - 2:40~beta-2
changelog:
  - Drop libtool as-needed hack as as-needed is in default LDFLAGS now
  - Remove unneeded ldconfig_scriptlets macro call
  - Tighten soname globs


author: Matej Mužila <mmuzila@redhat.com> - 3:2.4-5
changelog:
  - Add "Wants" dependency on network-online.target
  - Remove "After" dependency on NetworkManager-wait-online.service


author: Matthias Saou <http://freshrpms.net/> 0.13.45-3
changelog:
  - Split off -utils sub-package (#199467). Could have been plain "zzip"?
  - Have sub-packages require exact release too.
  - Build require automake to make the aclocal-1.9 check happy.
  - Use --enable-frame-pointer otherwise -g gets removed from the CFLAGS.


author: Matthias Saou <http://freshrpms.net/> 0.13.49-1
changelog:
  - Update to 0.13.49 to fix CVE-2007-1614 (rhbz #233700).
  - Include new man3 pages to the devel sub-package.


author: Matthias Saou <http://freshrpms.net/> 0.13.49-2
changelog:
  - Disable static lib build instead of excluding it later.
  - Remove rpath on 64bit archs.
  - Switch to using DESTDIR install method.


author: Matthias Saou <http://freshrpms.net/> 0.13.49-4
changelog:
  - Include patch to fix fd.open calls with recent glibc.
  - Disable _smp_mflags since the docs fail to build.


author: Matthias Saou <http://freshrpms.net/> 0.13.59-1
changelog:
  - Update to 0.13.59.
  - Remove no longer needed 'open' patch.
  - Rebase the multilib patch, still required.
  - Re-enable _smp_mflags, build works again with it apparently.


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.13.69-1
changelog:
  - Update to 0.13.69 release
  - Fixes: #1598246 (CVE-2018-6541)
  - Fixes: #1554673 (CVE-2018-7727)
  - Use versioned python executables everywhere


author: Jakub Martisko <jamartis@redhat.com> - 0.13.69-4
changelog:
  - Add the missing CVE-2018-17828.part2.patch file
  - Fix Formating of the previous 2 changelog entries


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-1
changelog:
  - Rebase to 0.13.71
  - Drop the CVE patches, they are now part of the upstream package
  - Build no longer requires python2
  - Resolves: 1807565


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-7
changelog:
  - Remove the doc/zzipdoc/{options,match}.py scritps from the original tar
  - Replace them with a current github version
  - The original version of the files contains autogenerated header with incompatible license
  - This build thus uses modified tar archive
  Resolves: rhbz#1982241


