# changelog

author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-17
changelog:
  - pull in patch from trunk to rename krb5int_pac_sign() to krb5_pac_sign() and
    make it public (#745533)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-18
changelog:
  - apply upstream patch to fix a null pointer dereference with the LDAP kdb
    backend (CVE-2011-1527, #744125), an assertion failure with multiple kdb
    backends (CVE-2011-1528), and a null pointer dereference with multiple kdb
    backends (CVE-2011-1529) (#737711)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.0
changelog:
  - update to 1.10 alpha 1
  - on newer releases where we can assume NSS >= 3.13, configure PKINIT to build
    using NSS
  - on newer releases where we build PKINIT using NSS, configure libk5crypto to
    build using NSS
  - rename krb5-pkinit-openssl to krb5-pkinit on newer releases where we're
    expecting to build PKINIT using NSS instead
  - during %check, run check in the library and kdc subdirectories, which
    should be able to run inside of the build system without issue


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.2
changelog:
  - apply upstream patch to fix a null pointer dereference when processing
    TGS requests (CVE-2011-1530, #753748)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.3
changelog:
  - pull in patch for RT#7046: tag a ccache containing credentials obtained via
    S4U2Proxy with the principal name of the proxying principal (part of #761317)
    so that the default principal name can be set to that of the client for which
    it is proxying, which results in the ccache looking more normal to consumers
    of the ccache that don't care that there's proxying going on
  - pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
    (more of #761317)
  - pull in patch for RT#7048: allow PAC verification to only bother trying to
    verify the signature with keys that it's given (still more of #761317)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha2.2
changelog:
  - modify the deltat grammar to also tell gcc (4.7) to suppress
    "maybe-uninitialized" warnings in addition to the "uninitialized" warnings
    it's already being told to suppress (RT#7080)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-2
changelog:
  - add patch to accept keytab entries with vno==0 as matches when we're
    searching for an entry with a specific name/kvno (#230382/#782211,RT#3349)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-5
changelog:
  - when removing -workstation, remove our files from the info index while
    the file is still there, in %preun, rather than %postun, and use the
    compressed file's name (#801035)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-1
changelog:
  - update to 1.10.1
    - drop the KDC crash fix
    - drop the KDC lookaside cache fix
    - drop the fix for kadmind RPC ACLs (CVE-2012-1012)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-2
changelog:
  - change back dns_lookup_kdc to the default setting (Stef Walter, #805318)
  - comment out example.com examples in default krb5.conf (Stef Walter, #805320)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-3
changelog:
  - have -server require /usr/share/dict/words, which we set as the default
    dict_file in kdc.conf (#817089)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-1
changelog:
  - update to 1.10.2
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user
    - also package the PDF format admin, user, and install guides
    - drop some PDFs that no longer get built right
  - add a backport of Stef's patch to set the client's list of supported
    enctypes to match the types of keys that we have when we are using a
    keytab to try to get initial credentials, so that a KDC won't send us
    an AS reply that we can't encrypt (RT#2131, #748528)
  - don't shuffle around any shared libraries on releases with no-separate-/usr,
    since /usr/lib is the same place as /lib
  - add explicit buildrequires: on 'hostname', for the tests, on systems where
    it's in its own package, and require net-tools, which used to provide the
    command, everywhere


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-2
changelog:
  - back out this labeling change (dwalsh):
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-3
changelog:
  - backport a fix to allow a PKINIT client to handle SignedData from a KDC
    that's signed with a certificate that isn't in the SignedData, but which
    is available as an anchor or intermediate on the client (RT#7183)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-5
changelog:
  - add upstream patch to fix freeing an uninitialized pointer and dereferencing
    another uninitialized pointer in the KDC (MITKRB5-SA-2012-001, CVE-2012-1014
    and CVE-2012-1015, #844779 and #844777)
  - fix a thinko in whether or not we mess around with devel .so symlinks on
    systems without a separate /usr (sbose)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-6
changelog:
  - go back to not messing with library file paths on Fedora 17: it breaks
    file path dependencies in other packages, and since Fedora 17 is already
    released, breaking that is our fault


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-7
changelog:
  - selinux: hang on to the list of selinux contexts, freeing and reloading
    it only when the file we read it from is modified, freeing it when the
    shared library is being unloaded (#845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-2
changelog:
  - undo rename from krb5-pkinit-openssl to krb5-pkinit on EL6
  - version the Obsoletes: on the krb5-pkinit-openssl to krb5-pkinit rename
  - reintroduce the init scripts for non-systemd releases
  - forward-port %{?_rawbuild} annotations from EL6 packaging


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3
changelog:
  - backport patch to disable replay detection in krb5_verify_init_creds()
    while reading the AP-REQ that's generated in the same function (RT#7229)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-4
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (more of #845125)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
    stopped linking with a symbol which we no longer export (#771687)
  - pull up patch for RT#7063, in which not noticing a prompt for a long
    time throws the client library's idea of the time difference between it
    and the KDC really far out of whack (#773496)
  - add a backport of more patches to set the client's list of supported enctypes
    when using a keytab to be the list of types of keys in the keytab, plus the
    list of other types the client supports but for which it doesn't have keys,
    in that order, so that KDCs have a better chance of being able to issue
    tickets with session keys of types that the client can use (#837855)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-5
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#838548)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.11 alpha 1
    - drop backported patch for RT #7406
    - drop backported patch for RT #7407
    - drop backported patch for RT #7408
    - the new docs system generates PDFs, so stop including them as sources
    - drop backported patch to allow deltat.y to build with the usual
      warning flags and the current gcc
    - drop backported fix for disabling use of a replay cache when verifying
      initial credentials
    - drop backported fix for teaching PKINIT clients which trust the KDC's
      certificate directly to verify signed-data messages that are signed with
      the KDC's certificate, when the blobs don't include a copy of the KDC's
      certificate
    - drop backported patches to make keytab-based authentication attempts
      work better when the client tells the KDC that it supports a particular
      cipher, but doesn't have a key for it in the keytab
    - drop backported fix for avoiding spurious clock skew when a TGT is
      decrypted long after the KDC sent it to the client which decrypts it
    - move the cross-referenced HTML docs into the -libs package to avoid
      broken internal links
    - drop patches to fixup paths in man pages, shouldn't be needed any more


author: Nalin Dahyabhai <nalin@redhat.com> 1.11-0.alpha1.0
changelog:
  - move the rather large pile of html and pdf docs to -workstation, so
    that just having something that links to the libraries won't drag
    them onto a system, and we avoid having to sort out hard-coded paths
    that include %{_libdir} showing up in docs in multilib packages
  - actually create %{_var}/kerberos/kdc/user, so that it can be packaged
  - correct the list of packaged man pages
  - don't dummy up required tex stylesheets, require them
  - require pdflatex and makeindex


author: Nalin Dahyabhai <nalin@redhat.com> 1.11-0.alpha1.1
changelog:
  - handle releases where texlive packaging wasn't yet as complicated as it
    is in Fedora 18
  - fix an uninitialized-variable error building one of the test programs


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-1
changelog:
  - update to 1.11.1
    - drop patch for noticing negative timeouts being passed to the poll()
      wrapper in the client transmit functions


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-2
changelog:
  - prebuild PDF docs to reduce multilib differences (internal tooling, #884065)
  - drop the kerberos-iv portreserve file, and drop the rest on systemd systems
  - escape uses of macros in comments (more of #884065)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a version comparison to expect newer texlive build requirements when
    %{_rhel} > 6 rather than when it's > 7


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-5
changelog:
  - pull up Simo's patch to mark the correct mechanism on imported GSSAPI
    contexts (RT#7592)
  - go back to using reconf to run autoconf and autoheader (part of #925640)
  - add temporary patch to use newer config.guess/config.sub (more of #925640)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-6
changelog:
  - create and own /var/kerberos/krb5/user instead of /var/kerberos/kdc/user,
    since that's what the libraries actually look for
  - add buildrequires on nss-myhostname, in an attempt to get more of the tests
    to run properly during builds
  - pull in Simo's patch to recognize "client_keytab" as a key type which can
    be passed in to gss_acquire_cred_from() (RT#7598)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-7
changelog:
  - when testing the RPC library, treat denials from the local portmapper the
    same as a portmapper-not-running situation, to allow other library tests
    to be run while building the package


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-9
changelog:
  - move the compiled-in default ccache location from the previous default of
    FILE:/tmp/krb5cc_%{uid} to DIR:/run/user/%{uid}/krb5cc (part of #949588)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-1
changelog:
  - update to 1.11.2
    - drop pulled in patch for RT#7586, included in this release
    - drop pulled in patch for RT#7592, included in this release
  - pull in fix for keeping track of the message type when parsing FAST requests
    in the KDC (RT#7605, #951843) (also #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-3
changelog:
  - pull the changing of the compiled-in default ccache location to
    DIR:/run/user/%{uid}/krb5cc back into F19, in line with SSSD and
    the most recent pam_krb5 build


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-6
changelog:
  - pull in upstream fix to start treating a KRB5CCNAME value that begins
    with DIR:: the same as it would a DIR: value with just one ccache file
    in it (RT#7172, #965574)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-7
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)
  - backport fix for not being able to pass an empty password to the
    get-init-creds APIs and have them actually use it (RT#7642, #960001)
  - add backported proposed fix to use the unauthenticated server time
    as the basis for computing the requested credential expiration times,
    rather than the client's idea of the current time, which could be
    significantly incorrect (#961221)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-8
changelog:
  - pull in patches from master to not test GSSRPC-over-UDP and to not
    depend on the portmapper, which are areas where our build systems
    often give us trouble, too


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-9
changelog:
  - don't forget to set the SELinux label when creating the directory for
    a DIR: ccache
  - pull in proposed fix for attempts to get initial creds, which end up
    following referrals, incorrectly trying to always use master KDCs if
    they talked to a master at any point (should fix RT#7650)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-1
changelog:
  - update to 1.11.3
    - drop patch for RT#7605, fixed in this release
    - drop patch for CVE-2002-2443, fixed in this release
    - drop patch for RT#7369, fixed in this release
  - pull upstream fix for breaking t_skew.py by adding the patch for #961221


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-2
changelog:
  - special-case /run/user/0, attempting to create it when resolving a
    directory cache below it fails due to ENOENT and we find that it doesn't
    already exist, either, before attempting to create the directory cache
    (maybe helping, maybe just making things more confusing for #961235)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-3
changelog:
  - specify dependencies on the same arch of krb5-libs by using the %{?_isa}
    suffix, to avoid dragging 32-bit libraries onto 64-bit systems (#980155)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-4
changelog:
  - use (a bundled, for now, copy of) nss_wrapper to let us run some of the
    self-tests at build-time in more places than we could previously (#978756)
  - cover inconsistencies in whether or not there's a local caching nameserver
    that's willing to answer when the build environment doesn't have a
    resolver configuration, so that nss_wrapper's faking of the local
    hostname can be complete


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-6
changelog:
  - tweak configuration files used during tests to try to reduce the number
    of conflicts encountered when builds for multiple arches land on the same
    builder


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-8
changelog:
  - drop a patch we weren't not applying (build tooling)
  - wrap kadmind and kpropd in scripts which check for the presence/absence
    of files which dictate particular exit codes before exec'ing the actual
    binaries, instead of trying to use ConditionPathExists in the unit files
    to accomplish that, so that we exit with failure properly when what we
    expect isn't actually in effect on the system (#800343)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-9
changelog:
  - take another stab at accounting for UnversionedDocdirs for the -libs
    subpackage (spotted by ssorce)
  - switch to just the snapshot of nss_wrapper we were using, since we
    no longer need to carry anything that isn't in the cwrap.org repository
    (ssorce)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-10
changelog:
  - incorporate Simo's backport of his persistent-keyring changes (#991148)
  - restore build-time default DEFCCNAME on Fedora 21 and later and EL, and
    instead set default_ccache_name in the default krb5.conf's [libdefaults]
    section (#991148)
  - on releases where we expect krb5.conf to be configured with a
    default_ccache_name, add it whenever we upgrade from an older version of
    the package that wouldn't have included it in its default configuration
    file (#991148)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-11
changelog:
  - don't let comments intended for one scriptlet become part of the "script"
    that gets passed to ldconfig as part of another one (Mattias Ellert, #1005675)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - only apply the patch to autocreate /run/user/0 when we're hard-wiring the
    default ccache location to be under it; otherwise it's unnecessary


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-15
changelog:
  - add explicit build-time dependency on a version of keyutils that's new
    enough to include keyctl_get_persistent() (more of #991148)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-16
changelog:
  - back out setting default_ccache_name to the new default for now, resetting
    it to the old default while the kernel/keyutils bits get sorted (sgallagh)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-19
changelog:
  - configure --without-krb5-config so that we don't pull in the old default
    ccache name when we want to stop setting a default ccache name at configure-
    time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-20
changelog:
  - pull up fix for not calling a kdb plugin's check-transited-path
    method before calling the library's default version, which only knows
    how to read what's in the configuration file (RT#7709, #1013664)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-21
changelog:
  - switch to the version of persistent-keyring that was just merged to
    master (RT#7711), along with related changes to kinit (RT#7689)
  - go back to setting default_ccache_name to a KEYRING type


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-24
changelog:
  - backport the callback to use the libkrb5 prompter when we can't load PEM
    files for PKINIT (RT#7590, includes part of #965721/#1016690)
  - extract the rest of the fix #965721/#1016690 from the changes for RT#7680


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-25
changelog:
  - pull up fix for importing previously-exported credential caches in the
    gssapi library (RT# 7706, #1019420)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-alpha1.0
changelog:
  - initial update to alpha1
    - drop backport of persistent keyring support
    - drop backport for RT#7689
    - drop obsolete patch for fixing a use-before-init in a test program
    - drop obsolete patch teaching config.guess/config.sub about aarch64-linux
    - drop backport for RT#7598
    - drop backport for RT#7172
    - drop backport for RT#7642
    - drop backport for RT#7643
    - drop patches from master to not test GSSRPC-over-UDP and to not
      depend on the portmapper, which are areas where our build systems
      often give us trouble, too; obsolete
    - drop backports for RT#7682
    - drop backport for RT#7709
    - drop backport for RT#7590 and partial backport for RT#7680
    - drop OTP backport
    - drop backports for RT#7656 and RT#7657
  - BuildRequires: libedit-devel to prefer it
  - BuildRequires: pkgconfig, since configure uses it


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-27
changelog:
  - add some minimal description to the top of the wrapper scripts we use
    when starting krb5kdc and kadmind to describe why they exist (tooling)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-28
changelog:
  - drop patch to add additional access() checks to ksu - they add to breakage
    when non-FILE: caches are in use (#1026099), shouldn't be resulting in any
    benefit, and clash with proposed changes to fix its cache handling


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-29
changelog:
  - incorporate upstream patch for remote crash of KDCs which serve multiple
    realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800,


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-30
changelog:
  - check more thoroughly for errors when resolving KEYRING ccache names of type
    "persistent", which should only have a numeric UID as the next part of the
    name (#1029110)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.4-1
changelog:
  - update to 1.11.4
    - drop patch for RT#7650, obsoleted
    - drop patch for RT#7706, obsoleted as RT#7723
    - drop patch for CVE-2013-1418/CVE-2013-6800, included in 1.11.4


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.4-2
changelog:
  - pull in fix to store KDC time offsets in keyring credential caches (RT#7768,
    - pull in fix to set expiration times on credentials stored in keyring
    credential caches (RT#7769, #1031724)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-beta2.0
changelog:
  - update to beta2
    - drop obsolete backports for storing KDC time offsets and expiration times
      in keyring credential caches


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-2
changelog:
  - pull in fix from master to return a NULL pointer rather than allocating
    zero bytes of memory if we read a zero-length input token (RT#7794, part of
    - pull in fix from master to ignore an empty token from an acceptor if
    we've already finished authenticating (RT#7797, part of #1043962)
  - pull in fix from master to avoid a memory leak when a mechanism's
    init_sec_context function fails (RT#7803, part of #1043962)
  - pull in fix from master to avoid a memory leak in a couple of error
    cases which could occur while obtaining acceptor credentials (RT#7805, part
    of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update a test wrapper to properly handle things that the new libkrad does,
    and add python-pyrad as a build requirement so that we can run its tests


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-5
changelog:
  - pull in fix from master to make reporting of errors encountered by
    the SPNEGO mechanism work better (RT#7045, part of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-8
changelog:
  - add patch from Dhiru Kholia for the AES-NI implementations to allow
    libk5crypto to be properly marked as not needing an executable stack
    on arches where they're used (#1045699, and so many others)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-9
changelog:
  - grab a more-commented version of the most recent patch from upstream
    master
  - make a guess at making the 32-bit AES-NI implementation sufficiently
    position-independent to not require execmod permissions for libk5crypto
    (more of #1045699)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-10
changelog:
  - amend the PIC patch for iaesx86.s to also save/restore ebx in the
    functions where we modify it, because the ELF spec says we need to


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-11
changelog:
  - update the PIC patch for iaesx86.s to not use ELF relocations to the version
    that landed upstream (RT#7815, #1045699)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-1
changelog:
  - update to 1.12.1
    - drop patch for RT#7794, included now
    - drop patch for RT#7797, included now
    - drop patch for RT#7803, included now
    - drop patch for RT#7805, included now
    - drop patch for RT#7807, included now
    - drop patch for RT#7045, included now
    - drop patches for RT#7813 and RT#7815, included now
    - add patch to always retrieve the KDC time offsets from keyring caches,
      so that we don't mistakenly interpret creds as expired before their
      time when our clock is ahead of the KDC's (RT#7820, #1030607)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-2
changelog:
  - pull in multiple changes to allow replay caches to be added to a GSS
    credential store as "rcache"-type credentials (RT#7818/#7819/#7836,


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add currently-proposed changes to teach ksu about credential cache
    collections and the default_ccache_name setting (#1015559,#1026099)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-4
changelog:
  - pull in patch from master to move the default directory which the KDC uses
    when computing the socket path for a local OTP daemon from the database
    directory (/var/kerberos/krb5kdc) to the newly-added run directory
    (/run/krb5kdc), in line with what we're expecting in 1.13 (RT#7859, more
    of #1040056 as #1063905)
  - add a tmpfiles.d configuration file to have /run/krb5kdc created at
    boot-time
  - own /var/run/krb5kdc


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-5
changelog:
  - spnego: pull in patch from master to restore preserving the OID of the
    mechanism the initiator requested when we have multiple OIDs for the same
    mechanism, so that we reply using the same mechanism OID and the initiator
    doesn't get confused (#1066000, RT#7858)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-9
changelog:
  - pull in changes from upstream which add processing of the contents of
    /etc/gss/mech.d/*.conf when loading GSS modules (#1102839)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-10
changelog:
  - pull in fix for denial of service by injection of malformed GSSAPI tokens
    (CVE-2014-4341, CVE-2014-4342, #1116181)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-12
changelog:
  - gssapi: pull in proposed fix for a double free in initiators (David
    Woodhouse, CVE-2014-4343, #1117963)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-1
changelog:
  - update to 1.12.2
    - drop patch for RT#7820, fixed in 1.12.2
    - drop patch for #231147, fixed as RT#3277 in 1.12.2
    - drop patch for RT#7818, fixed in 1.12.2
    - drop patch for RT#7836, fixed in 1.12.2
    - drop patch for RT#7858, fixed in 1.12.2
    - drop patch for RT#7924, fixed in 1.12.2
    - drop patch for RT#7926, fixed in 1.12.2
    - drop patches for CVE-2014-4341/CVE-2014-4342, included in 1.12.2
    - drop patch for CVE-2014-4343, included in 1.12.2
    - drop patch for CVE-2014-4344, included in 1.12.2
    - drop patch for CVE-2014-4345, included in 1.12.2
  - replace older proposed changes for ksu with backports of the changes
    after review and merging upstream (#1015559, #1026099, #1118347)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.13-0.alpha1.2
changelog:
  - kpropd hasn't bothered with -S since 1.11; stop trying to use that flag
    in the systemd unit file


author: Roland Mainz <rmainz@redhat.com> - 1.13-0.alpha1.3
changelog:
  - fix for CVE-2014-5351 (#1145425) "krb5: current keys returned when
    randomizing the keys for a service principal"


author: Roland Mainz <rmainz@redhat.com> - 1.13-1
changelog:
  - Update from krb5-1.13-alpha1 to final krb5-1.13
  - Removed patch for CVE-2014-5351 (#1145425) "krb5: current
    keys returned when randomizing the keys for a service principal" -
    now part of upstream sources
  - Use patch for glibc |eventfd()| prototype mismatch (#1147887) only
    for Fedora > 20


author: Roland Mainz <rmainz@redhat.com> - 1.13-2
changelog:
  - Bump 1%{?dist} to 2%{?dist} to workaround RPM sort issue
    which would lead yum updates to treat the last alpha as newer
    than the final version.


author: Roland Mainz <rmainz@redhat.com> - 1.13-5
changelog:
  - fix for kinit -C loops (#1184629, MIT/krb5 issue 243, "Do not
    loop on principal unknown errors").
  - Added "python-sphinx-latex" to the build requirements
    to fix build failures on F22 machines.


author: Roland Mainz <rmainz@redhat.com> - 1.13-7
changelog:
  - Remove "python-sphinx-latex" and "tar" from the build requirements
    to fix build failures on F22 machines.
  - Minor spec cleanup


author: Roland Mainz <rmainz@redhat.com> - 1.13-8
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9423 (#1179863) "libgssrpc server applications
    leak uninitialized bytes (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-1
changelog:
  - Update to krb5-1.13.1
    - drop patch for CVE_2014_5353_fix_LDAP_misused_policy_name_crash, fixed in krb5-1.13.1
    - drop patch for kinit -C loops (MIT/krb5 bug #243), fixed in krb5-1.13.1
    - drop patch for CVEs { 2014-9421, 2014-9422, 2014-9423, 2014-5352 }, fixed in krb5-1.13.1
  - Minor spec cleanup


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-2
changelog:
  - fix for CVE-2014-5355 (#1193939) "krb5: unauthenticated
    denial of service in recvauth_common() and others"


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-3
changelog:
  - Add temporay workaround for RH bug #1204646 ("krb5-config
    returns wrong -specs path") which modifies krb5-config post
    build so that development of krb5 dependicies gets unstuck.
    This MUST be removed before rawhide becomes F23 ...


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-4
changelog:
  - fix for CVE-2015-2694 (#1216133) "requires_preauth bypass
    in PKINIT-enabled KDC".
    In MIT krb5 1.12 and later, when the KDC is configured with
    PKINIT support, an unauthenticated remote attacker can
    bypass the requires_preauth flag on a client principal and
    obtain a ciphertext encrypted in the principal's long-term
    key.  This ciphertext could be used to conduct an off-line
    dictionary attack against the user's password.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-0
changelog:
  - Update to krb5-1.13.2
    - drop patch for krb5-1.13.2-CVE_2015_2694_requires_preauth_bypass_in_PKINIT_enabled_KDC, fixed in krb5-1.13.2
    - drop patch for krb5-1.12.1-CVE_2014_5355_fix_krb5_read_message_handling, fixed in krb5-1.13.2
  - Add script processing for upcoming Zanata l10n support
  - Minor spec cleanup


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-1
changelog:
  - Add fix for RedHat Bug #1164304 ("Upstream unit tests loads
    the installed shared libraries instead the ones from the build")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-2
changelog:
  - Add patch to fix Redhat Bug #1227542 ("[SELinux] AVC denials may appear
    when kadmind starts"). The issue was caused by an unneeded |htons()|
    which triggered SELinux AVC denials due to the "random" port usage.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-5
changelog:
  - Remove Zanata test glue and related workarounds
    - Bug #1234292 ("IPA server cannot be run in container due to incorrect /usr/sbin/_kadmind")
    - Bug #1234326 ("krb5-server introduces new rpm dependency on ksh")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-6
changelog:
  - Use system nss_wrapper and socket_wrapper for testing.
    Patch by Andreas Schneider <asn@redhat.com>


author: Robbie Harwood <rharwood@redhat.com> - 1.13.2-7
changelog:
  - Support config snippets in /etc/krb5.conf.d/ and /usr/share/krb5.conf.d/
    (#1225792, #1146370, #1145808)


author: Robbie Harwood <rharwood@redhat.com> - 1.13.2-8
changelog:
  - Remove dependency on systemd-sysv which is no longer needed for fedora > 20
    This also fixes a fail-to-build issue.
  - Miscalaneous spec cleanup fixes


author: Robbie Harwood <rharwood@redhat.com> - 1.14-9
changelog:
  - Upstream release.  No actual change from beta, just version bump
  - Clean up unused parts of spec file


author: Robbie Harwood <rharwood@redhat.com> - 1.14-11
changelog:
  - Backport interposer fix (#1284985)
  - Drop workaround pwsize initialization patch (gcc has been fixed)


author: Robbie Harwood <rharwood@redhat.com> - 1.14-14
changelog:
  - Remove WITH_NSS macro (always false)
  - Remove WITH_SYSTEMD macro (always true)
  - Remove WITH_LDAP macro (always true)
  - Remove WITH_OPENSSL macro (always true)


author: Robbie Harwood <rharwood@redhat.com> - 1.14-19
changelog:
  - Replace _kadmin/_kprop with systemd macros
  - Remove traces of upstart from fedora package per policy
  - Resolves: #1290185


author: Robbie Harwood <rharwood@redhat.com> - 1.14-21
changelog:
  - Adjust dependency on crypto-polices to be just the file we want
  - Patch courtesy of lslebodn
  - Resolves: #1308984


author: Robbie Harwood <rharwood@redhat.com> - 1.14.1-1
changelog:
  - New rawhide, new upstream version
  - Drop CVE patches
  - Rename fix_interposer.patch to acquire_cred_interposer.patch
  - Update acquire_cred_interposer.patch to apply to new source


author: Robbie Harwood <rharwood@redhat.com> - 1.14.4-3
changelog:
  - Switch to using autosetup macro.
    - Patches come from git, so it is easiest to just make a git repo


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-5
changelog:
  - Automatically add includedir where not present
  - Try removing sleep statement to see if it is still needed
  - Resolves: #1433083


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-22
changelog:
  * Mon Aug 07 2017 Robbie Harwood <rharwood@redhat.com> - 1.15.1-21
  - Display an error message if ocsp pkinit is requested


author: Robbie Harwood <rharwood@redhat.com> - 1.16-6
changelog:
  - Fix a leak in the previous commit
  - Restore dist macro that was accidentally removed
  - Resolves: #1540939


author: Robbie Harwood <rharwood@redhat.com> - 1.16-15
changelog:
  - Add SPAKE support
  - Improve protections on internal sensitive buffers
  - Improve internal hex encoding/decoding


author: Robbie Harwood <rharwood@redhat.com> - 1.18-1
changelog:
  - New upstream version (1.18)
  - Resolves: #1802334
  - Resolves: #1820311
  - Resolves: #1791062
  - Resolves: #1784655


author: Robbie Harwood <rharwood@redhat.com> - 1.18.2-3
changelog:
  - Match Heimdal behavior for channel bindings
  - Code hygiene + test stability fix included
  - Resolves: #1840518


author: Julien Rische <jrische@redhat.com> - 1.18.2-21
changelog:
  - Backport fix of memory use after free during libkrad cleanup
  - Backport support for larger RADIUS attributes in libkrad
  - Resolves: rhbz#2103125


author: Julien Rische <jrische@redhat.com> - 1.18.2-27
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27250
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27244
  - Make TCP waiting time configurable
    Resolves: RHEL-17131


author: Julien Rische <jrische@redhat.com> - 1.18.2-29
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45398 RHEL-45386


author: Julien Rische <jrische@redhat.com> - 1.18.2-30
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-50253
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-17616


author: Madison Kelly <mkelly@alteeve.ca> - 1.1-1
changelog:
  - Rerolled for 1.1 upstream release.
  - Removed the (no longer needed) gcc8-fixes.patch
  - Added the new doxygen and libqb-devel buildrequires for libknetd.


author: Madison Kelly <mkelly@alteeve.ca> - 1.1-4
changelog:
  - Removed leading spaces from descriptions.
  - Added the (commented out) %check tests.
  - Updated the changelog macro references to have two percent signs.
  - Dropped the redundant libknet1-devel license files.
  - Changed 'GPLv2+ + LGPLv2+' to 'GPLv2+ and LGPLv2+'.
  - Updated %ldconfig_scriptlets call.
  - Clarified the kronosnet protocol version in the summary.


author: Madison Kelly <mkelly@alteeve.ca> - 1.1-8
changelog:
  - Changed pkgconfig() to normal package names to help avoid the wrong
    package being pulled in to satisfy dependencies.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.10-3
changelog:
  PMTUd: Fix MTU calculation when using crypto
    Resolves: rhbz#1736872
    host: Fix defrag buffer reclaim logic that could cause delivery
          of corrupted data
    ResolveS: rhbz#1761711


author: Christine Caulfield <ccaulfie@redhat.com> - 1.25-1
changelog:
  Rebase to 1.25 for PMTUd fixes
    Resolves: rhbz#2161172

    * Wed Jul 27 2022 Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
    Don't run nozzle_up_down tests, as they don't work in RH CI
    Resolves: rhbz#2024095


author: Tomas Smetana <tsmetana@redhat.com> 20070328-2
changelog:
  - fix wrong exit status of spawned process after SIGSTOP
  - fix building of debuginfo package, add %{?dist} to release
  - fix handling of SIGTTOU in non-interactive shell
  - remove useless builtins


author: Tomas Smetana <tsmetana@redhat.com> 20071105-2
changelog:
  - fix #405381 - ksh will not handle $(xxx) when typeset -r IFS
  - fix #386501 - bad group in spec file


author: Michal Hlavinka <mhlavink@redhat.com> - 20100309-4
changelog:
  - fix infinite loop when whence builtin is used with -q option (#587127)
  - fix stdin for double command substitution (#584007)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100924-2
changelog:
  - disable only known to be broken builtins, let other enabled
  - skip regression tests if /dev/fd is missing


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-4
changelog:
  - bind Home, End, Delete,... key correctly for emacs mode
  - do not crash when executed from deleted directory


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-5
changelog:
  - ksh could not enter directories with path containing /.something (#889748)
  - file name autocomplete prevented following numeric input (#889745)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-19
changelog:
  - fix segfault in job list code
  - do not resend signal on termination (#1092132)
  - fix brace expansion on/off
  - fix incorrect rounding of numsers 0.5 < |x| <1.0 in printf (#1080940)
  - fix parser errors related to the end of the here-document marker
  - ksh hangs when command substitution fills out the pipe buffer
  - using typeset -l with a restricted variabled caused segmentation fault
  - monitor mode was documented incorrectly
  - do not crash when unsetting running function from another one (#1105139)
  - should report an error when trying to cd into directory without execution bit
  - job locking mechanism did not survive compiler optimization
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1070308)
  - fix lexical parser crash


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-24
changelog:
  - cd builtin could break IO redirection
  - fix segfault when handling a trap
  - exporting fixed with variable corrupted its data
  - and more fixes


author: Robert Scheck <robert@fedoraproject.org> 1.2.76-13
changelog:
  - Replace patch from openSUSE by the Debian one to not only build
    kyotocabinet with GCC >= 6 but also with GCC >= 7 (#1307706 #c15)


author: Tomas Orsava <torsava@redhat.com> - 2.6.0-5
changelog:
  - Require the Python interpreter directly instead of using the package name
  - Resolves: rhbz#1633617


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-7
changelog:
  - Resolves: rhbz#1634268 - ECP signature check fails with
                             LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when
                             assertion signed instead of response


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-8
changelog:
  - Resolves: rhbz#1730018 - lasso includes "Destination" attribute in SAML
                             AuthnRequest populated with SP
                             AssertionConsumerServiceURL when ECP workflow
                             is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-9
changelog:
  - Resolves: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (coming
                             from lasso)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-10
changelog:
  - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                             vulnerability when parsing SAML responses [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-11
changelog:
  - Bump release to force the package through OSCI as the previous
    build reached CI just in time for an outage
  - Related: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (comingfrom lasso)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-12
changelog:
  - Fix a dead code issue in the signature wrapping patch
  - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                             vulnerability when parsing SAML responses [rhel-8]


author: Rex Dieter <rdieter@fedoraproject.org> - 2.7-4
changelog:
  - %files: less globs, use %license
  - tighten subpkg deps
  - -devel: use %doc
  - use %version in Source URL
  - simplify %setup
  - %check: make check


author: Petr Menšík <pemensik@redhat.com> - 1.7.0-14
changelog:
  - Add only extra flags to default RPM LDFLAGS
  - Fix multilib conflict of ldns-config (#1463423)
  - Make primary python3 in primary build, python2 in optional


author: Paul Wouters <paul@xelerance.com> 1.0.0-6
changelog:
  - added a make clean for 2.3.3 since .o files were left behind upstream,
    causing failure on ppc platform


author: Paul Wouters <paul@xelerance.com> 1.0.1-3
changelog:
  - Fixed changelog typo in date
  - Rebuild requested for PT_GNU_HASH support from gcc
  - Did not upgrade to 1.1.0 due to compile issues on x86_64


author: Paul Wouters <paul@xelerance.com> 1.2.0-2
changelog:
  - Own the /usr/include/ldns directory (bug #233858)
  - Removed obsoleted patch
  - Remove files form previous libtool run accidentally packages by upstream


author: Paul Wouters <paul@xelerance.com> 1.2.0-10
changelog:
  - Added sha256 DS record patch to ldns-key2ds
  - Minor tweaks for proper doc/man page installation.
  - Workaround for parallel builds


author: Paul Wouters <paul@xelerance.com> 1.2.0-11
changelog:
  - Patch for ldns-key2ds to write to stdout
  - Again remove extra set of man pages from doc
  - own /usr/include/ldns (bug 233858)


author: Paul Wouters <paul@xelerance.com> - 1.5.1-4
changelog:
  - Memory management bug when generating a sha256 key, see:
    https://bugzilla.redhat.com/show_bug.cgi?id=493953


author: Paul Wouters <paul@xelerance.com> - 1.6.0-3
changelog:
  - Added patch to compile with --without-ssl
  - Removed openssl dependancies
  - Recompiled with --without-ssl


author: Paul Wouters <paul@xelerance.com> - 1.6.1-2
changelog:
  - Added openssl dependancy back in, since we get more functionality
   when using openssl. Especially in 'drill'.


author: Paul Wouters <paul@xelerance.com> - 1.6.2-1
changelog:
  - Upgraded to 1.6.2. This fixes various bugs.
    (upstream released mostly to default with sha2 for the imminent
     signed root, but we already enabled that in our builds)


author: Paul Wouters <paul@xelerance.com> - 1.6.4-2
changelog:
  - Fix missing _ldns.so causing ldns-python to not work
  - Patch for installing ldns-python files
  - Patch for rpath in ldns-python
  - Don't install .a file for ldns-python


author: Paul Wouters <paul@xelerance.com> - 1.6.10-2
changelog:
  - Fix for losing nameserver when it drops UDP fragments in
    ldns_resolver_send_pkt [Willem Toorop <willem@NLnetLabs.nl>]
  - Added ldnsx module (to be merged into ldns soon)
    http://git.xelerance.com/cgi-bin/gitweb.cgi?p=ldnsx.git;a=summary


author: Paul Wouters <paul@xelerance.com> - 1.6.11-2
changelog:
  - Updated to 1.6.11, fixes rhbz#741026 which is CVE-2011-3581
  - Python goes into sitearch, not sitelib
  - Fix source link and spelling errors in description


author: Paul Wouters <pwouters@redhat.com> - 1.6.13-1
changelog:
  - Upgraded to 1.6.13, bugfix release
  - Added --disable-ecdsa as ECC is still banned
  - Removed --with-sha2 - it is always enabled and option was removed


author: Paul Wouters <pwouters@redhat.com> - 1.6.13-2
changelog:
  - Added reworked ldns-read-zone patch from trunk
    (adds -p for SOA padding, and -o for zeroizing timestamps/sigs)


author: Paul Wouters <pwouters@redhat.com> - 1.6.14-1
changelog:
  - [pulled before release]
  - Updated to 1.6.14
  - Removed merged in patch
  - Added new dependancy on ca-certificates for ldns-dane PKIX validation


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Paul Wouters <pwouters@redhat.com> - 1.6.17-1
changelog:
  - Updated to 1.6.17
  - Enable perl bindings via new ldns-perl sub-package
  - Enable ECDSA/GOST which is now allowed in Fedora
  - Removed patches merged upstream, ported multilib patch to 1.6.17


author: Tomas Hozza <thozza@redhat.com> - 1.6.17-2
changelog:
  - Fix error causing ldns to sometimes produce faulty DSA sign (#1077776)
  - Fix FTBFS due to perl modules


author: Paul Wouters <pwouters@redhat.com> - 1.6.17-3
changelog:
  - CVE-2014-3209 ldns: ldns-keygen generates keys with world readable permissions
  - Fix 1017958 - 32 and 64 bit ldns conflicts on some manual pages
  - Fix rhbz#1062874 - cannot install ldns.x86_64 in parallel to ldns.i686
  - Incorporate fixes from Tuomo Soini <tis@foobar.fi>
  - hardened build
  - fix ldns internal provides and requires filter
  - fix perl-ldns requirement to include %_isa
  - setup filters for perl and python bindings for internal stuff
  - split utils to separate package


author: Paul Wouters <pwouters@redhat.com> - 1.6.17-4
changelog:
  - Rename ldns-python to python-ldns
  - Rename ldns-perl to perl-ldns
  - Ensure ldns-utils is dragged it so an upgrade does not remove utils


author: Paul Wouters <pwouters@redhat.com> - 1.6.17-11
changelog:
  - Only cond_without sets "with ", so use underscores
  - multilib.patch was setting LIBDIR_SEC once without leading /


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.0-3
changelog:
  - explicitly track library soname (so bumps aren't a surprise)
  - use %license, drop dup'd README in -devel
  - BR: openssl-devel >= 1.1.0 (required for DANE verification)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.7.0-8
changelog:
  - Python 2 binary package renamed to python2-ldns
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> 1.0.9-1
changelog:
  - update to 1.0.9
  - use license macro
  - tighten file list wildcards
  - switch to https for source URL


author: Adam Jackson <ajax@redhat.com> - 1.6.5-4
changelog:
  - Split libX11-xcb to its own subpackage. This doesn't have much effect at
    the moment because x11-xcb.pc still lists both libX11 and libxcb in
    Requires, but once that's fixed eg. libEGL should be able to be installed
    without libX11.


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 12.10.0-17
changelog:
  - Python 2 binary package renamed to python2-appindicator
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Liwei Ge <geliwei@openanolis.org> - 7.6.2-3.0.2
changelog:
  - Spec: sync loongson patch and modify in spec (XueZhixin)
    Patch :0001-libatomic_ops-7.6.2-add-loongarch.patch


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.2-1
changelog:
  - Fix dependencies of the release target (vpodzime)
  - Python overrides for the GI-generated bindings (vpodzime)
  - Pass version info to the code and use it to load plugins (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3-1
changelog:
  - Require volume_key-devel in a version that fixes build issues (vpodzime)
  - Fix Python 2 devel package name in BuildRequires (vpodzime)
  - Generate docs for the library and all plugins (vpodzime)
  - Make doc comments better for documentation generation (vpodzime)
  - Fix parameter names in function prototypes (vpodzime)
  - Add the metadatasize parameter to pvcreate (vpodzime)
  - Add the dataalignment parameter to lvm_pvcreate (vpodzime)
  - Export non-internal constants via introspection (vpodzime)
  - Expand size constants in the GI-scanned files (vpodzime)
  - Fix usage printing in the boilerplate_generator (vpodzime)
  - Add the build directory to .gitignore (vpodzime)
  - Add the md_run function (vpodzime)
  - Fix some issues in Python overrides (vpodzime)
  - Add the escrow_device function to the crypto plugin (vpodzime)
  - Fix version of GI files in the Makefile (vpodzime)
  - Make the order of release target's dependencies more explicit (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.4-1
changelog:
  - Improve the test for lvm_set_global_config (vpodzime)
  - Fix some minor issues in the spec file (vpodzime)
  - Fix issues with the LVM global config str (vpodzime)
  - Add couple more Python overrides (vpodzime)
  - Fix the name of the lvm_thlvpoolname() function in the header file (vpodzime)
  - Use assertEqual instead of assertTrue(a == b) (vpodzime)
  - Add the min_entropy parameter to luks_format (vpodzime)
  - Move internal dmraid-related macros into the source file (vpodzime)
  - Add an override for the md_add function (vpodzime)
  - Fix parameters in luks_open python overrides (vpodzime)
  - Prevent init() from being done multiple times and provide a test function (vpodzime)
  - Add the roadmap.rst document (vpodzime)
  - Remove an extra parenthesis in one of the docstrings (vpodzime)
  - Move the mddetail function next to the mdexamine function (vpodzime)
  - Add some more constants required by blivet (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.5-1
changelog:
  - Add tests for what we can easily test from the mpath plugin (vpodzime)
  - Add link to sources to the documentation (vpodzime)
  - Add missing symbols into the libblockdev-sections.txt file (vpodzime)
  - Do not build docs for testing (vpodzime)
  - Add the bd_try_init function (vpodzime)
  - Log stdout and stderr output when running processes (vpodzime)
  - Allow a subset of plugins to be load instead of all (vpodzime)
  - Make sure devmapper doesn't spam stdout with tons of messages (vpodzime)
  - Let debug messages go to stderr when running ipython (vpodzime)
  - Give plugins a way to initialize themselves (vpodzime)
  - Give plugins a way how to check if they could run properly (vpodzime)
  - Allow a subset of plugins to be load instead of all [TEST NEEDED] (vpodzime)
  - Make sure we use the whole /dev/mapper path for cryptsetup (vpodzime)
  - Fix vg_pv_count parsing when getting info about PV (vpodzime)
  - Set default values to data structures if real values are not available (vpodzime)
  - Fix the parameter name specifying pool metadata size (vpodzime)
  - Activate LUKS as ReadWrite in luks_open (vpodzime)
  - Make sure we pass key_size to cryptsetup in bytes (vpodzime)
  - Add the min_entropy parameter to luks_format Python overrides (vpodzime)
  - Pass size in KiB instead of B to lvcreate (vpodzime)
  - Add underscore into dataalignment and metadatasize parameter names (vpodzime)
  - Don't report error if non-mpath device is tested for being mpath member (vpodzime)
  - Fix name of the invoked utility in mpath_set_friendly_names (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.6-1
changelog:
  - Don't report error when non-existing swap's status is queried (vpodzime)
  - Make libblockdev-plugins-all pull the same version of plugins (vpodzime)
  - Don't report error when asked for a backing file of an uknown loop (vpodzime)
  - Fix accidental change in the spec's changelog (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.7-1
changelog:
  - Be ready for mdadm --examine to not provide some of the values we want (vpodzime)
  - Add exit code information to exec logging (vpodzime)
  - Improve and add tests (vpodzime)
  - Mark the test_force_plugin and test_reload as slow (vpodzime)
  - Make sure we get some devices when creating btrfs volume (vpodzime)
  - Add override for the lvremove function (vpodzime)
  - Do not create LUKS format with no passphrase and no key file (vpodzime)
  - Make sure we use the /dev/mapper/... path for luks_status (vpodzime)


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.7-2
changelog:
  - Ship license as per packaging guidelines
  - plugins-all should depend on base library too
  - Add dev docs


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.8-1
changelog:
  - Merge pull request #6 from vpodzime/master-sort_btrfs_subvolumes (vpodzime)
  - Don't be naïve about mdadm providing us data we would like (#1206394) (vpodzime)
  - Sort BTRFS subvolumes in a way that child never appears before parent (#1201120) (vpodzime)
  - Let libcryptsetup handle LUKSname->/dev/mapper/LUKSname for us (vpodzime)
  - Fix the crypto_luks_resize and create a test for it (vpodzime)
  - Add targets to create the SRPM and RPM files easily (vpodzime)
  - Don't round up to multiple of PE size bigger than max value of the rtype (vpodzime)
  - Mark majority of MD RAID tests as slow (vpodzime)
  - Merge pull request #1 from dashea/file-paths (vpodzime)
  - Don't report error for no loop device associated with given file (vpodzime)
  - Skip the detail_data.clean check when running tests in Jenkins (vpodzime)
  - Make package file paths more specific (dshea)
  - Implement and use MD RAID-specific wait for tests (vpodzime)
  - Try to give MD RAID time to sync things before querying them (vpodzime)
  - Fix the default value of the BDMDDetailData.clean field (vpodzime)
  - Do cleanup after every single MD RAID tests (vpodzime)
  - Do cleanup after every single LVM test (vpodzime)
  - Do cleanup after every single BTRFS test (vpodzime)
  - Make sure the LUKS device is closed and removed after tests (vpodzime)
  - Make sure DM maps from tests are removed after tests (vpodzime)
  - Make sure that loop devices are deactivated after tests (vpodzime)
  - Make the tearDown method of the mpath test case better visible (vpodzime)
  - Make sure that the swap is deactivated after tests (vpodzime)
  - Fix docstrings in tests' utils helper functions (vpodzime)
  - Improve the logging tests in utils_test.py (vpodzime)
  - Update the features.rst file (vpodzime)
  - Update the roadmap (vpodzime)
  - Don't check if we get a mountpoint for BTRFS operations (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.9-1
changelog:
  - Merge pull request #7 from vpodzime/master-fw_raid_fixes (vpodzime)
  - Try a bit harder when trying to determine MD RAID name (#1207317) (vpodzime)
  - Don't be naïve about mdadm --detail telling us what we want (#1207317) (vpodzime)
  - Ignore libblockdev tarballs (vpodzime)
  - Implement a test of btrfs_list_subvolumes on data from bug report (vpodzime)
  - Implement a context manager for running tests with fake utils (vpodzime)
  - Do not try to cannonicalize MD UUIDs if we didn't get them (#1207317) (vpodzime)
  - Fix the table in roadmap.rst (vpodzime)
  - Enrich the roadmap.rst file and add info about new plans (vpodzime)
  - Sync spec file with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.10-1
changelog:
  - Fix return type of the unload_plugins() function (vpodzime)
  - Close the DL handle when check() or init() fail (vpodzime)
  - Add one more check to the reload test (vpodzime)
  - Drop reference to check() and init() functions (vpodzime)
  - Add more cats to tests (vpodzime)
  - Make regexp for getting btrfs version more generic (vpodzime)
  - Merge pull request #8 from vpodzime/master-check_functions (vpodzime)
  - Fix parameters passed to unoverridden swapon function (vpodzime)
  - Implement and test swap plugin's check function (vpodzime)
  - Implement and test MD RAID plugin's check function (vpodzime)
  - Implement and test mpath plugin's check function (vpodzime)
  - Try harder to get util's version (vpodzime)
  - Implement and test loop plugin's check function (vpodzime)
  - Implement and test DM plugin's check function (vpodzime)
  - Implement and test BTRFS plugin's check function (vpodzime)
  - Implement and test LVM plugin's check function (vpodzime)
  - Init logging before loading plugins (vpodzime)
  - Add function for utility availability checking (vpodzime)
  - Fix default value for the fake_utils' path argument (vpodzime)
  - Add ErrorProxy instance for the utils functions (vpodzime)
  - Add function for version comparison (vpodzime)
  - Merge pull request #9 from clumens/master (vpodzime)
  - Disable pylint checking on the new exception proxy. (clumens)
  - Fix XRules application and add a test for it (vpodzime)
  - Raise NotImplementedError when an unavailable function is called (vpodzime)
  - Merge pull request #4 from vpodzime/master-error_proxy (vpodzime)
  - Merge branch 'master' into master-error_proxy (vpodzime)
  - Merge pull request #5 from vpodzime/master-not_implemented_error (vpodzime)
  - Add a simple test for unloaded/unavailable functions (vpodzime)
  - Unload the plugins properly when reinit() is called (vpodzime)
  - Raise error/exception when an unimplemented function is called (#1201475) (vpodzime)
  - Do an ugly but necessary hack to make local GI overrides work (vpodzime)
  - Add the __dir__ method to ErrorProxy (vpodzime)
  - Add a rationale for the ErrorProxy to the overrides' docstring (vpodzime)
  - Add some basic info about GI overrides to the documentation (vpodzime)
  - Use pylint to check for errors in python overrides (vpodzime)
  - Add the first small test for the ErrorProxy (vpodzime)
  - Put the GI overrides in a special dir so that they are preferred (vpodzime)
  - Add a cache for attributes already resolved by ErrorProxy (vpodzime)
  - Implement the ErrorProxy python class and use it (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.11-1
changelog:
  - Fix issues with using overriden functions over ErrorProxy (vpodzime)
  - Update the roadmap.rst and features.rst with new stuff (vpodzime)
  - Fix two minor issues with docs generation (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.12-1
changelog:
  - Require minimum version of libblockdev-utils in some plugins (vpodzime)
  - Report both stdout and stderr if exit code != 0 (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.13-1
changelog:
  - Prevent a leaky test from running in Jenkins (vpodzime)
  - Try harder when cleaning up after MD RAID tests (vpodzime)
  - Improve the MD RAID activate/deactivate test (vpodzime)
  - One more @contextmanager that needs try-finally (vpodzime)
  - Do not require metadata version to be reported by 'mdadm --examine' (#1217900) (vpodzime)
  - Make sure we always set things back in context managers (vpodzime)
  - Make the release date for version 1.0 more realistic (vpodzime)
  - Merge pull request #11 from vpodzime/master (vpodzime)
  - Run utilities with LC_ALL=C (vpodzime) (#1219033)
  - Free GMatchInfo instance even in case of no match (vpodzime)
  - Resolve /dev/md/ symlinks when checking swap status. (dlehman)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.0-1
changelog:
  - Adapt the release helper targets to autotools (vpodzime)
  - Fixes of paths in Makefile.am's inspired by build failures on s390 (vpodzime)
  - Add an s390-specific BuildRequires (vpodzime)
  - Distribute also the boilerplate_generator.py script (vpodzime)
  - Fix path to the generated blockdev.pc file (vpodzime)
  - Adapt tests that compile stuff to autotools (vpodzime)
  - Merge pull request #18 from vpodzime/master-autotools (vpodzime)
  - Merge pull request #20 from dashea/gtkdoc-sections (vpodzime)
  - Use the autotools building system instead of scons (vpodzime)
  - Add the two new functions to the 'blockdev' docs section (vpodzime)
  - Fix the line defining the docs file for the s390 section (vpodzime)
  - Add a missing #include to the kbd.api file (vpodzime)
  - Prevent s390-specific stuff from being used on other architectures (vpodzime)
  - Update the documentation of the is_initialized() function (vpodzime)
  - Merge pull request #19 from vpodzime/master-ensure_init (vpodzime)
  - Remove private macros from the gtkdoc sections file. (dshea)
  - Terminate ifdef statements for arch check. (sbueno+anaconda)
  - Return early from the init functions if setting up logging fails (vpodzime)
  - Add tests for the new and modified init functions (vpodzime)
  - Add new try_init() and try_reinit() functions (vpodzime)
  - Fix for adding number of loaded plugins (vpodzime)
  - Fix for ensure_init() (vpodzime)
  - Rename the try_init() function to ensure_init() and improve it (vpodzime)
  - Check number of loaded plugins and library initialization state (vpodzime)
  - Make 'reload' default to True instead of False in overrides (vpodzime)
  - Add the s390 plugin test file. (sbueno+anaconda)
  - Add the s390 plugin functions. (sbueno+anaconda)
  - Add the s390 plugin. (sbueno+anaconda)
  - Fix a typo in the spec file. (sbueno+anaconda)
  - Require the kmod-devel package for the build process (vpodzime)
  - Merge pull request #16 from dashea/escrow-encoding (vpodzime)
  - Merge pull request #13 from vpodzime/master-lvm_cache (vpodzime)
  - Merge pull request #12 from vpodzime/master-kbd_plugin (vpodzime)
  - Merge pull request #14 from vpodzime/master-better_is_multipath (vpodzime)
  - Use g_strdup() instead of g_strdup_printf() to just dup a string (vpodzime)
  - Fix the spelling of "escrow" (dshea)
  - Make the crypto plugin string parameters const (dshea)
  - Set encoding to NULL before writing the escrow packet. (dshea)
  - Get cache stats directly from the device mapper (vpodzime)
  - Reimplement the is_mpath_member() function using device mapper (vpodzime)
  - Add the LVM cache related symbols to the LVM section in the documentation (vpodzime)
  - Update the list of LVM cache related functions in features.rst (vpodzime)
  - Add tests for functions related to the LVM cache technology (vpodzime)
  - Implement the lvm_cache_stats() function (vpodzime)
  - Implement the lvm_cache_pool_name function (vpodzime)
  - Implement the lvm_cache_create_cached_lv() function (vpodzime)
  - Implement lvm_cache_attach/detach() functions (vpodzime)
  - Implement the lvm_cache_create_pool() function plus two support functions (vpodzime)
  - Implement the lvm_cache_get_default_md_size() function (vpodzime)
  - Add the 'type' parameter to the lvm_lvcreate function (vpodzime)
  - Teach boilerplate_generator to work with enum return types (vpodzime)
  - Teach boilerplate_generator to work with 'const' return types (vpodzime)
  - Add subpackages for the KBD plugin and its devel files (vpodzime)
  - Add provided symbols to the documentation section of the KBD plugin (vpodzime)
  - Implement the bcache_get_backing/cache_device functions (vpodzime)
  - Exclude bcache tests from the normal 'test' target (vpodzime)
  - Add some more and prolong some of the waits in KBD tests (vpodzime)
  - Zero all newly allocated structures (vpodzime)
  - Implement the bcache_status function and all it wants (vpodzime)
  - Fix for the zram stats (vpodzime)
  - Add bcache_get_mode and bcache_set_mode functions (vpodzime)
  - Teach boilerplate_generator to work with enum return types (vpodzime)
  - Teach boilerplate_generator to work with 'const' return types (vpodzime)
  - Add the zram_get_stats function (vpodzime)
  - Add the check() function for the KBD plugin (vpodzime)
  - Add ErrorProxy instance for the KBD plugin (vpodzime)
  - Add tests for bcache_create/attach/detach/destroy functions (vpodzime)
  - Add the 'rebuild' Makefile target (vpodzime)
  - Add bcache_create, bcache_attach, bcache_detach and bcache_destroy functions (vpodzime)
  - Implement a helper function to echo string into a file (vpodzime)
  - Add tests for zram_create_devices and zram_destroy_devices functions (vpodzime)
  - Add the zram_destroy_devices function to the KBD plugin (vpodzime)
  - Add first function to the KBD plugin: zram_create_devices (vpodzime)
  - Add the KernelBlockDevices plugin (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.1-1
changelog:
  - Clean generated boilerplate code on 'make clean' (vpodzime)
  - Merge pull request #31 from atodorov/use_lang_c (vpodzime)
  - tests: use LANG=C in test_backup_passphrase() (atodorov)
  - Merge pull request #30 from atodorov/makefile_updates (vpodzime)
  - Makefile.am:   - add separate check target   - add coverage targets   - make it possible to test with Python3 (atodorov)
  - Merge pull request #29 from atodorov/fix_issue_28 (vpodzime)
  - Merge pull request #27 from atodorov/fix_docs_url (vpodzime)
  - Merge pull request #26 from atodorov/test_docs (vpodzime)
  - Change the modified sources back in tearDown() method as well. Closes #28. (atodorov)
  - update URL to on-line documentation (atodorov)
  - add test documentation (atodorov)
  - Merge pull request #22 from dashea/escrow-tests (vpodzime)
  - Merge pull request #25 from dashea/python-dep (vpodzime)
  - Filter the python files from automatic rpm requires (dshea)
  - Added tests for escrow packets and backup passphrases (dshea)
  - Free leaked contexts from crypto_init (dshea)
  - Cooperate with volume_key's memory management (dshea)
  - Fix inheritance in the LVM tests to prevent multiple runs of some tests (vpodzime)
  - Make the regexp for testing crypto_generate_backup_passphrase() stricter (vpodzime)
  - Leave room in the backup passphrase for a trailing 0 (dshea)
  - Add functions to get names of data/metadata internal LVs (vpodzime)
  - Allow getting info for an internal LV (vpodzime)
  - Gather information about all LVs (vpodzime)
  - Round requested size to KBs in lvresize() (#1221247) (vpodzime)
  - Add overrides for the ensure_init() function (vpodzime)
  - Change the default value of the 'reload' parameter of try_reinit() (vpodzime)
  - Merge pull request #21 from vpodzime/master-thpool_size_discard (vpodzime)
  - Add overrides for the lvm_is_valid_thpool_chunk_size() function (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.2-1
changelog:
  - Merge pull request #40 from vpodzime/master-config_support (vpodzime)
  - Add tests for configuration support (vpodzime)
  - Add a function for getting the loaded soname for a plugin (vpodzime)
  - Add the default configuration (vpodzime)
  - Load and respect configuration files when loading plugins (vpodzime)
  - Add functions for finding and processing configuration files (vpodzime)
  - Merge pull request #38 from vpodzime/master-md_superblock_size (vpodzime)
  - Better document how MD RAID superblock size should be calculated (vpodzime)
  - Merge pull request #36 from phatina/master (vpodzime)
  - BTRFS: allow an arbitrary label to be set for a btrfs volume (phatina)
  - Merge pull request #32 from phatina/master (vpodzime)
  - BTRFS: fix parsing empty partition label (phatina)
  - Merge pull request #35 from vpodzime/master (vpodzime)
  - Define env variables for sudo via the env utility (vpodzime)
  - Merge pull request #34 from dashea/python3-tests (vpodzime)
  - Use unittest.addCleanup to simplify crypto_test. (dshea)
  - Run tests with both python2 and python3 in the ci target. (dshea)
  - Fix python3 issues in the unittests. (dshea)
  - Do not run all tests in the 'ci' target (vpodzime)
  - Merge pull request #33 from clumens/master (vpodzime)
  - Add a new makefile target that does everything needed for jenkins. (clumens)
  - Synchronize the .spec file with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.3-1
changelog:
  - Add missing python GI requires (vpodzime)
  - Merge pull request #49 from dashea/libblockdev-python (vpodzime)
  - Merge pull request #50 from vpodzime/master-fix_striped_lv (vpodzime)
  - Merge pull request #46 from vpodzime/master-bcache_destroy (vpodzime)
  - Merge pull request #39 from vpodzime/master-lvm_physical_space (vpodzime)
  - Add a missing ldconfig that rpmlint found. (dshea)
  - Move python files to separate packages (#1256758) (dshea)
  - Fix lvcreate calls for striped LVs (vpodzime)
  - Merge pull request #48 from vojtechtrefny/master_pvfree (vpodzime)
  - Add pv_free to BDLVMPVdata (vtrefny)
  - Merge pull request #47 from atodorov/add_coverage_report (vpodzime)
  - Produce coverage report in CI (atodorov)
  - Check bcache device's state before trying to detach the cache in destroy() (vpodzime)
  - Fix URLs in the spec (vpodzime)
  - Fix the int-float less-than comparison (vpodzime)
  - Fix the calculation of physical space taken by an LV (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.4-1
changelog:
  - Merge pull request #62 from vpodzime/master-clean_up (vpodzime)
  - Use addCleanup() instead of tearDown() in tests (vpodzime)
  - Merge pull request #58 from vpodzime/master-lvm_dbus_pr (vpodzime)
  - Add the VG renaming functionality (vpodzime)
  - Packaging of the lvm-dbus plugin (vpodzime)
  - The LVM DBus plugin (vpodzime)
  - Add more generic functions for logging (vpodzime)
  - Use MAX(a, b) instead of CLAMP(b, a, b) (vpodzime)
  - Merge pull request #59 from vpodzime/master-vgrename (vpodzime)
  - Add a function for renaming VGs (vpodzime)
  - Merge pull request #57 from clumens/master (vpodzime)
  - Fix error reporting when running "make test". (clumens)
  - Merge pull request #54 from vojtechtrefny/master-pvsize (vpodzime)
  - Do not try to create a PV with 4KiB metadata space (vpodzime)
  - Add pv_info to BDLVMPVdata (vtrefny)
  - btrfs now requires at least 128MiB device(s) (vpodzime)
  - Merge pull request #52 from vpodzime/master (vpodzime)
  - Round size in thpoolcreate() to KiB (vpodzime)
  - Sync the %changelog in spec with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.4-5
changelog:
  - Search for the LVM DBus service in activatable names (vpodzime)
  - Better check for the LVM DBus API (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.5-1
changelog:
  - Merge pull request #72 from vpodzime/master-faster_tests (vpodzime)
  - Ignore all .bak files (vpodzime)
  - Use python3-pylint and skip Python 2 tests (vpodzime)
  - Try a bit harder when deactivating MD arrays in tests (vpodzime)
  - Recompile only the LVM plugin in tests (vpodzime)
  - Merge pull request #65 from vpodzime/master-loc_indep_error (vpodzime)
  - Merge pull request #70 from vojtechtrefny/master-chunk_size (vpodzime)
  - Add bd_md_create_with_chunk_size() function (vtrefny)
  - Merge pull request #68 from vpodzime/master-no_intro_data (vpodzime)
  - Merge pull request #71 from vpodzime/master-ipython3 (vpodzime)
  - Run coverage with the right config directories (vpodzime)
  - Merge pull request #67 from phatina/master (vpodzime)
  - Merge pull request #69 from vpodzime/master-lvm_dbus_autostart (vpodzime)
  - Use ipython3 for debugging and testing sessions (vpodzime)
  - Don't expect to always get introspection data from DBus (vpodzime)
  - Make invocation of tests configurable (phatina)
  - Make error messages locale agnostic (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.6-1
changelog:
  - Ignore merge commits when creating changelog (vpodzime)
  - Only take the number of the first %changelog line found (vpodzime)
  - Add some more detailed description to the part plugin (vpodzime)
  - Fix a few extra issues with the const types (vpodzime)
  - Add function for getting best free region (vpodzime)
  - Add function for getting free regions (vpodzime)
  - Fix the error message when setting part flag fails (vpodzime)
  - Add function for setting disk flags (vpodzime)
  - Add function for getting information about disk(s) (vpodzime)
  - Do not set nonsense partition paths (vpodzime)
  - Add function for getting partition by position (vpodzime)
  - Indicate if there was error from parted or not in set_parted_error() (vpodzime)
  - Minor fixes for the bd_part_get_part_spec() function (vpodzime)
  - Add support for extra GPT flags (vpodzime)
  - Add functionality for partition types (GUIDs) (vpodzime)
  - Add functionality for partition names (vpodzime)
  - Do not destroy disk objects we didn't get (vpodzime)
  - Add a function for setting multiple partition flags at once (vpodzime)
  - Remove the unused definition USE_PYTHON3 from configure.ac (vpodzime)
  - Use different BTRFS_MIN_MEMBER_SIZE on aarch64 (vpodzime)
  - Better release memory from parted objects on failures (vpodzime)
  - Rework how we do optimal alignment (vpodzime)
  - Do not try to destroy object we didn't get (vpodzime)
  - Don't pass sizes in bytes to LVM (#1317373) (vpodzime)
  - Add the libbytesize-devel build requires (vpodzime)
  - Search for the LVM DBus service in both active and activatable names (vpodzime)
  - Adapt to another stupid change in btrfs-progs (vpodzime)
  - Add the XFS-related functions to the documentation (vpodzime)
  - Add tests for the XFS-related functions (vpodzime)
  - Add support for the XFS file system to the FS plugin (vpodzime)
  - Add chunk_size to BDMDExamineData (vtrefny)
  - Add the subpackage for the FS plugin (vpodzime)
  - Add the FS plugin to the docs (vpodzime)
  - Add tests for the ext4 functionality in the fs plugin (vpodzime)
  - Add the FS plugin and the ext4 support (vpodzime)
  - Add a function for running utility reporting error and exit code (vpodzime)
  - Add the subpackage for the part plugin (vpodzime)
  - Add a missing BuildRequires for parted-devel (vpodzime)
  - Tag as both libblockdev-$version and just $version (vpodzime)
  - Add the 'part' plugin to documentation (vpodzime)
  - Add tests for the newly added part plugin (vpodzime)
  - Add the part plugin with storaged-required functionality (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.7-1
changelog:
  - Include the LV roles in the LVdata (vpodzime)
  - Add a few missing items to the documentation (vpodzime)
  - Document fields of the structures (vpodzime)
  - Report (meta)data LV name properly for cache pools in lvm-dbus (vpodzime)
  - Add information about related LVs to LVMLVdata (vpodzime)
  - Remove unused code for getting supported functions (vpodzime)
  - Add zFCP functionality to s390 plugin (sbueno+anaconda)
  - Fix a few const params in the s390 plugin. (sbueno+anaconda)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.8-1
changelog:
  - Add a function to get all mpath member devices (vpodzime)
  - Fix backport issues in the zfcp-related functionality (#1348442) (vpodzime)
  - Revert "Fix a few const params in the s390 plugin." (vpodzime)
  - Fix creation of the version-only tags (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.9-1
changelog:
  - Add functions for creating thin/cache pools from existing LVs (vpodzime)
  - Add the new mpath_get_members() function to the docs (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.9-3
changelog:
  - Try to search for "RAID Level" in mdadm's output (vpodzime)
    Resolves: rhbz#1379865
  - Fix the number passed to LVM DBus as a job-creation timeout (vpodzime)
    Resolves: rhbz#1378970


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.9-4
changelog:
  - Do not report volume name for FW RAID container device (vpodzime)
    Related: rhbz#1379865
  - Search for just "UUID" in mdadm --examine output (vpodzime)
    Related: rhbz#1379865
  - Use 'mdadm --examine --export' to get MD RAID level (vpodzime)
    Related: rhbz#1379865


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.9-7
changelog:
  - Open the device file as RDWR when committing parts (vpodzime)
  - Handle mdadm --examine output during migration (adamw)
    Resolves: rhbz#1381996


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.9-8
changelog:
  - Revert "Prevent issues between libparted and udev" (vpodzime)
  - Revert "Open the device file as RDWR when committing parts" (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.1-1
changelog:
  - Do not require an exclusive lock on the device to commit part stuff (vpodzime)
  - Prevent failure if there are no btrfs subvolumes (vpodzime)
  - Fix the test for getting version of a failing utility (vpodzime)
  - Also run the utils tests (vpodzime)
  - Bump the version of the pkgconfig module (vpodzime)
  - Include utils.h in plugins that need it (vpodzime)
  - Fix dependency check in fs plugin (vtrefny)
  - Add support for setting part id (part type) on msdos part tables (vtrefny)
  - Trim the extra info for MD RAID's name (vpodzime)
  - Add xfsprogs and dosfstools as dependencies of the fs plugin (vpodzime)
  - Fix md_name_from_node to work with the "/dev/" prefix (vpodzime)
  - New major upstream release


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.2-1
changelog:
  - Use the .in file as source when bumping version (vpodzime)
  - Run pylint based on the python version and make it optional (vpodzime)
  - Disable python3 and bcache on RHEL (vpodzime)
  - Make bcache support optional (vpodzime)
  - Teach boileplate_generator.py to skip things based on patterns (vpodzime)
  - Require lower versions of some utilities (vpodzime)
  - Do not require python3 for the boilerplate generation script (vpodzime)
  - Use a proper initialization value for 'GPollFD fds[2]' (vpodzime)
  - Deal with older parted and libblkid (vpodzime)
  - Make python3 and gtk-doc optional (vpodzime)
  - Bump the version of the utils library (vpodzime)
  - Fix docstring for 'bd_md_node_from_name' (vtrefny)
  - Add tests for added mdraid methods (vtrefny)
  - Skip 'MDTestNominateDenominateActive' unless feeling lucky (vtrefny)
  - MDRaid tests: change 'wait_for_resync' to wait for given action (vtrefny)
  - Add functionality need by storaged to mdraid plugin (vtrefny)
  - Move 'echo_str_to_file' method to utils (vtrefny)
  - Add a function to setup a loop device from a file descriptor (vpodzime)
  - Add functions to get/set the autoclear flag on a loop device (vpodzime)
  - Fix checking /proc/mdstat for resync action (vtrefny)
  - Adapt the test config files to version 2.x (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.3-1
changelog:
  - Allow specifying raid 'name' in multiple way when calling md functions (vtrefny)
  - Allow using both path and raid name in bd_md_set_bitmap_location (vtrefny)
  - Fix potential memory issues in s390 sanitizate functions (vpodzime)
  - Try multiple times when probing device for wiping (vpodzime)
  - Check for libvolume_key.h and dmraid.h in configure.ac (vpodzime)
  - Define our own macro for testing required header files (vpodzime)
  - Include blockdev/utils.h in mdraid.h (vtrefny)
  - Fix misspelling (agrover)
  - Skip the bcache tests even on x86_64 (vpodzime)
  - Take a break between bcache creation tests (vpodzime)
  - Make sure ./configure fails if there are some soft failures (vpodzime)
  - Improve the error message on missing GI support (vpodzime)
  - Only require bcache-tools if supporting bcache (vpodzime)
  - Skip bcache tests on non-x86_64 architectures (vpodzime)
  - Try harder to register a new bcache device (vpodzime)
  - Reimplement swapon/swapoff functions by using syscalls (vpodzime)
  - Make sure bcache functions are correctly provided or not (vpodzime)
  - Changelog fixup (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.4-1
changelog:
  - Update specs.rst to use present-tense and current API (agrover)
  - Add functions using BLOBs as LUKS passphrases (vpodzime)
  - Make sure the _error_quark() functions are in the library (vtrefny)
  - Return a special error when trying to wipe empty device (vtrefny)
  - Adapt tests to use LIO devices instead of loop devices (vpodzime)
  - Add functions for creating and deleting LIO devices (vpodzime)
  - MDRAID: Allow path as input for functions that work with sysfs (vtrefny)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.5-1
changelog:
  - Do not try to get GVariant after not adding anything to its builder (vpodzime)
  - Replace NULL with "" when building ExtraArg (vpodzime)
  - Replace NULL with "" when adding it as a 's' GVariant (vpodzime)
  - Make sure we don't try to add NULL as GVariant to DBus params (vpodzime)
  - Add function for getting recommended thpool metadata size (vpodzime)
  - Make udev settle after we create a LIO device (vpodzime)
  - Always use '--yes' for lvremove (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.6-1
changelog:
  - Move the  part_err library before part and fs (vtrefny)
  - Fix BuildRequires for crypto and dm packages (vtrefny)
  - Fix mounting read-only devices (vtrefny)
  - Fix the bd_s390_dasd_is_ldl function. (vponcova)
  - Add the bd_s390_dasd_is_fba function to check if DASD is FBA (vponcova)
  - Disable MD RAID tests on 32bit systems (vpodzime)
  - Fix error message when mounting with a wrong fs type (vtrefny)
  - Only create RPMs for requested/configured  plugins (vpodzime)
  - Only check dependencies of plugins to be built (vpodzime)
  - Only build and distribute plugins if configured so (vpodzime)
  - Fix format-security and unused-result compiler warnings (vtrefny)
  - Add an AC macro for modular builds (vpodzime)
  - Add functions for mounting and unmounting filesystems (vtrefny)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7-1
changelog:
  - Skip btrfs min size tests on Fedora 25 (vtrefny)
  - Make sure the loop device doesn't disappear during tests (vpodzime)
  - Close the loop device when autoclear is (un)set (vpodzime)
  - Do not enforce Python 3 for running tests in CI (vpodzime)
  - Revert "Use different BTRFS_MIN_MEMBER_SIZE on aarch64" (vtrefny)
  - Use both 'old' and 'new' sysfs files to read zRAM stats (vtrefny)
  - Check if libparted-fs-resize pkgconfig is available (vpodzime)
  - Do not try to get name for inactive partitions (vtrefny)
  - Skip tests for getting free regions on CentOS/RHEL (vpodzime)
  - Free the container holding the specs of free regions (vpodzime)
  - Open loop devices as O_RDONLY when getting flags (vpodzime)
  - Resolve maximum partition size when we know its start (vpodzime)
  - Use --id instead of --part-type when setting partition id (vpodzime)
  - Fix mdadm command for removing failed device from an array (vtrefny)
  - Skip bcache tests on CentOS/RHEL 7 (vpodzime)
  - Use six.assertRaisesRegex in the FS tests (vpodzime)
  - Use mkdtemp() instead of TemporaryDirectory() (vpodzime)
  - Fix installation without specifying --exec-prefix (vpodzime)
  - Add options to force mkfs.ext4/vfat to create a FS on the whole device (vpodzime)
  - Skip the test for device escrow on CentOS/RHEL (vpodzime)
  - Define DEVNULL on our own if not in subprocess (vpodzime)
  - Remove the patches from the spec file (vpodzime)
  - Sync the spec file with downstream (vpodzime)
  - Stop skipping zRAM stats tests (vtrefny)
  - Add more tests for zRAM stats (vtrefny)
  - Fix reading zRAM properties from sysfs (vtrefny)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.8-1
changelog:
  - Temporarily skip vfat generic resize test on rawhide (vtrefny)
  - Use "safeprobe" in "bd_fs_wipe" (vtrefny)
  - Add a generic filesystem resize function (vtrefny)
  - Add a function to get mountpoint for a device (vtrefny)
  - Add a function to get filesystem type for a device (vtrefny)
  - Only include the LVM DBus config when shipping LVM DBus (vpodzime)
  - Skip the LVM DBus vgreduce tests on Rawhide (vpodzime)
  - Do not build the lvm-dbus plugin on RHEL/CentOS (vpodzime)
  - Give zRAM more time to settle before trying to remove a device (vpodzime)
  - Put zram tests adding/removing devices into a separate class (vpodzime)
  - Skip LVM cache and RAID tests on Rawhide (vpodzime)
  - Fix the skip_on decorator factory for tests (vpodzime)
  - Use 'blkid -p' instead of lsblk to get device's FS type (vpodzime)
  - Improve the lvm_set_global_config test (vpodzime)
  - Pass '-y' to pvresize (vpodzime)
  - Create a copy of os.environ for a child process (vpodzime)
  - Revert "Use the "C.UTF-8" locale instead of just "C"" (vpodzime)
  - Fix how we create vfat FS in tests (vpodzime)
  - Skip the test if requiring unavailable locales (vpodzime)
  - Use the "C.UTF-8" locale instead of just "C" (vpodzime)
  - Add functions for working with ext2 and ext3 filesystems (vtrefny)
  - Link to gobject when lvm or btrfs is enabled (andreas)
  - Link to libm where needed (andreas)
  - Add a function for cleaning a device (vtrefny)
  - Add few code exaples to documentation (vtrefny)
  - Use a special exception for no fs signature when doing wipe (vpodzime)
  - One more incompatible os.symlink() call (vpodzime)
  - Do not use pass-by-name in the os.symlink() call (vpodzime)
  - Ignore previous errors when falling back to using ioctl() (vpodzime)
  - Use ioctl() call to teardown loop devices (vpodzime)
  - Resolve the device to remove for mdadm (vpodzime)
  - Add a function for getting device symlinks (vpodzime)
  - Use the new resolve_device() function where appropriate (vpodzime)
  - Add the resolve_device() function to the utils library (vpodzime)
  - First try to read the 'autoclear' flag from /sys/ (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.9-1
changelog:
  - Fix hardcoded reference to gcc (timo.gurr)
  - Catch and ignore partial failures in LVM tests' cleanups (vpodzime)
  - Fix hardcoded reference to pkg-config (timo.gurr)
  - Make GObject introspection optional (vpodzime)
  - Do not link libraries required by plugins to the GI files (vpodzime)
  - Make sure the whole build status image is shown (vpodzime)
  - Show CI status in README (at the GH repo's front page) (vpodzime)
  - Always require the libudev pkg (tgurr)
  - Make sure we give kernel time to fully setup zram device(s) (vpodzime)
  - fs_test.py: Close FDs when calling utilities (tasleson)
  - crypto.c: Correct segmentation fault (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.10-1
changelog:
  - Only enable partition size tolerance with alignment (vpodzime)
  - Limit the requested partition size to maximum possible (vpodzime)
  - Do not verify vfat FS' size after generic resize (vpodzime)
  - Specify tolerance for partition size (kailueke)
  - Only use the exact constraint if not using any other (vpodzime)
  - Check resulting FS size in tests for generic FS resize (vpodzime)
  - Query setting FS label support and generic relabeling (kailueke)
  - Do not strictly require all FS utilities (vpodzime)
  - Compile everything with the C99 standard (vpodzime)
  - Add partition resize function (kailueke)
  - Generic Check and Repair Functions (kailueke)
  - Query functions for FS resize and repair support (kailueke)
  - Update the project/source URL in the spec file (vpodzime)
  - Add functions for opening/closing TrueCrypt/VeraCrypt volumes (vpodzime)
  - Adapt to a change in behaviour in new libmount (vpodzime)
  - Try RO mount also if we get EACCES (vpodzime)
  - Size in bytes for xfs_resize_device (kailueke)
  - src/plugins/Makefile.am: Remove hard coded include path in /usr prefix (tristan.vanberkom)
  - Fixed include for libvolume_key.h (tristan.vanberkom)
  - Ignore parted warnings if possible (squimrel)
  - bcache tests: Remove FEELINGLUCKY checks (tasleson)
  - kbd.c: Code review corrections (tasleson)
  - kbd.c: Make bd_kbd_bcache_create work without abort (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.11-1
changelog:
  - Make the KbdZRAMDevicesTestCase inherit from KbdZRAMTestCase (vpodzime)
  - Allow non-source directory builds (kailueke)
  - Add a way to disable runtime dependency checks (vpodzime)
  - Link to GObject even if no plugin is activated (kailueke)
  - Skip zram tests on Rawhide (vpodzime)
  - Keep most utilities available for tests (vpodzime)
  - Use new libmount function to get (un)mount error message (vtrefny)
  - Update the documentation URL (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.12-1
changelog:
  - Own directories /etc/libblockdev and /etc/libblockdev/conf.d (vtrefny)
  - Wait for resized partition (kailueke)
  - Make sure the device is opened for libparted (vpodzime)
  - Fix label check in swap_test (vtrefny)
  - Use "run_tests" script for running tests from Makefile (vtrefny)
  - Add a script for running tests (vtrefny)
  - Tests: Move library initialization to setUpClass method (vtrefny)
  - Stop skipping FAT resize tests on rawhide (vtrefny)
  - Close filesystem before closing the partition during FAT resize (vtrefny)
  - Use mountpoint for "xfs_info" calls (vtrefny)
  - Use libmount cache when parsing /proc/mounts (vtrefny)
  - Add some space for the CI status (vpodzime)
  - Confirm the force when creating PVs in FS tests (vpodzime)
  - Skip vgremove tests on 32bit Debian (vtrefny)
  - Fix names of backing files in tests (vtrefny)
  -  Fix checking for available locales (vtrefny)
  - Skip dependency checking in mpath tests on Debian (vtrefny)
  - Skip zRAM tests on Debian (vtrefny)
  - Skip the test for device escrow on Debian too (vtrefny)
  - Skip free region tests on Debian too (vtrefny)
  - Fix redirecting command output to /dev/null in tests (vtrefny)
  - Try harder to unmount devices in test cleanup (vtrefny)
  - Require only plugins that are needed for given test (vtrefny)
  - Try to get distribution info from "PrettyName" if "CPEName" isn't available (vtrefny)
  - Use -ff when creating PVs in FS tests (vpodzime)
  - Sync spec with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.13-1
changelog:
  - Fix the rpmlog and shortlog targets (vpodzime)
  - Add a function for enabling/disabling plugins' init checks (vpodzime)
  - Assign functions to tech-mode categories (vpodzime)
  - Add missing items to particular sections in the documentation (vpodzime)
  - Add a basic test for the runtime dependency checking (vpodzime)
  - Simplify what WITH_BD_BCACHE changes in the KBD plugin (vpodzime)
  - Add functions for querying available technologies (vpodzime)
  - Dynamically check for the required utilities (vpodzime)
  - Use shorter prefix for tempfiles (vtrefny)
  - Try harder when waiting for lio device to show up (vtrefny)
  - Better handle old and new zram sysfs api in tests (vtrefny)
  - Skip btrfs tests on CentOS 7 aarch64 (vtrefny)
  - Add new function for setting swap label (vtrefny)
  - Use only one git tag for new releases (vtrefny)
  - Fix source URL in spec file (vtrefny)
  - Add NEWS.rst file (vtrefny)
  - Do not include s390utils/vtoc.h in s390 plugin (vtrefny)
  - Use "AC_CANONICAL_BUILD" to check architecture instead of "uname" (vtrefny)
  - Bypass error proxy in s390 test (vtrefny)
  - Fix zFCP LUN max length (vtrefny)
  - Do not run g_clear_error after setting it (vtrefny)
  - Allow compiling libblockdev without s390 plugin (vtrefny)
  - Add a function for getting plugin name (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.14-1
changelog:
  - Support the legacy boot GPT flag (intrigeri)
  - Respect the version in the blockdev.pc file (vpodzime)
  - Add pkgconfig definitions for the utils library (vpodzime)
  - fs.c: Fix potential NULL pointer dereference (vtrefny)
  - dm.c: Fix uninitialized values in various dm plugin functions (vtrefny)
  - dm.c: Check return values of dm_task_set_name/run/get_info functions (vtrefny)
  - fs.c: Fix multiple "forward NULL" warnings in 'bd_fs_ntfs_get_info' (vtrefny)
  - lvm-dbus.c: Fix multiple "use after free" coverity warnings (vtrefny)
  - Fix duplicate 'const' in generated functions (vtrefny)
  - Add some test cases for NTFS (kailueke)
  - Add function wrappers for NTFS tools (kailueke)
  - exec.c: Fix error message in 'bd_utils_exec_and_report_progress' (vtrefny)
  - crypto.c: Fix waiting for enough entropy (vtrefny)
  - Ignore some coverity false positive errors (vtrefny)
  - exec.c: Ignore errors from 'g_io_channel_shutdown' (vtrefny)
  - part.c: Check if we've found a place to put new logical partitions (vtrefny)
  - kbd.c: Fix potential string overflow in 'bd_kbd_bcache_create' (vtrefny)
  - exec.c: Fix resource leaks in 'bd_utils_exec_and_report_progress' (vtrefny)
  - fs.c: Fix "forward null" in 'do_mount' and 'bd_fs_xfs_get_info' (vtrefny)
  - part.c: Fix possible NULL pointer dereference (vtrefny)
  - crypto.c: Use right key buffer in 'bd_crypto_luks_add_key' (vtrefny)
  - exec.c: Fix "use after free" in 'bd_utils_check_util_version' (vtrefny)
  - kbd.c: Fix double free in 'bd_kbd_zram_get_stats' (vtrefny)
  - part.c: Check if file discriptor is >= 0 before closing it (vtrefny)
  - mdraid.c: Fix resource leaks (vtrefny)
  - lvm.c: Fix "use after free" in 'bd_lvm_get_thpool_meta_size' (vtrefny)
  - fs.c: Fix for loop condition in 'bd_fs_get_fstype' (vtrefny)
  - fs.c: Check sscanf return value in 'bd_fs_vfat_get_info' (vtrefny)
  - fs.c: Fix resource leaks in 'bd_fs_get_fstype' (vtrefny)
  - blockdev.c.in: Fix unused variables (vtrefny)
  - Use libbytesize to parse bcache block size (vtrefny)
  - Use system values in KbdTestBcacheStatusTest (vtrefny)
  - Fix BSSize memory leaks in btrfs and mdraid plugins (vtrefny)
  - Skip btrfs subvolume tests with btrfs-progs 4.13.2 (vtrefny)
  - Added function to get DM device subsystem (japokorn)
  - Sync spec with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.15-1
changelog:
  - Do not use the 'btrfs' plugin in overrides tests (vpodzime)
  - Do not use the btrfs plugin in library tests (vpodzime)
  - Check for btrfs module availability in btrfs module (vtrefny)
  - Move kernel modules (un)loading and checking into utils (vtrefny)
  - Free locale struct in kbd plugin (vtrefny)
  - Add test for setting partition flags on GPT (vtrefny)
  - Use only sgdisk to set flags on GPT (vtrefny)
  - Move the fs.h file to its original place (vpodzime)
  - Add a HACKING.rst file (vpodzime)
  - Mark bcache tests as unstable (vpodzime)
  - Fix memory leaks in bd_fs_vfat_get_info() (vpodzime)
  - Revert the behaviour of bd_fs_check_deps() (vpodzime)
  - Split the bd_fs_is_tech_avail() implementation (vpodzime)
  - Split the FS plugin source into multiple files (vpodzime)
  - Fix bd_s390_dasd_format (vponcova)
  - Mark unstable tests as such (vpodzime)
  - bd_s390_dasd_is_ldl should be true only for LDL DADSs (vponcova)
  - Do not lie about tag creation (vpodzime)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.16-1
changelog:
  - Add tests for progress report (jtulak)
  - Add e2fsck progress (jtulak)
  - Add progress reporting infrastructure for Ext fsck (jtulak)
  - Add a function to test if prog. reporting was initialized (jtulak)
  - Add support for LUKS 2 opening and key management (vtrefny)
  - Fix few more links for project and documentation website (vtrefny)
  - Sync the spec file with downstream (vpodzime)
  - Check if 'journalctl' is available before trying to use it in tests (vtrefny)
  - Update 'Testing libblockdev' section in documentation (vtrefny)
  - Fix link to online documentation (vtrefny)
  - Fix how the new kernel module functions are added to docs (vpodzime)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.16-3
changelog:
  - Add the NVDIMM plugin (vtrefny)
  - Add tests for the NVDIMM plugin (vtrefny)
  - Add --without-xyz to DISTCHECK_CONFIGURE_FLAGS for disabled plugins (vtrefny)
  - Add function for getting NVDIMM namespace name from devname or path (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.17-1
changelog:
  - Redirect cryptsetup log to libblockdev log (vtrefny)
  - Add a generic logging function for libblockdev (vtrefny)
  - Add functions to resize LUKS 2 (vtrefny)
  - Add function to get information about LUKS 2 integrity devices (vtrefny)
  - Add function to get information about a LUKS device (vtrefny)
  - Add a basic test for creating LUKS 2 format (vtrefny)
  - Use libblockdev function to create LUKS 2 in tests (vtrefny)
  - Add support for creating LUKS 2 format (vtrefny)
  - Skip bcache tests on Rawhide (vtrefny)
  - Allow building libblockdev without Python 2 support (vtrefny)
  - Allow compiling libblockdev crypto plugin without escrow support (vtrefny)
  - Require at least libndctl 58.4 (vtrefny)
  - New function for luks metadata size (japokorn)
  - Add functions to backup and restore LUKS header (vtrefny)
  - Add function for killing keyslot on a LUKS device (vtrefny)
  - Add functions to suspend and resume a LUKS device (vtrefny)
  - Use '=' instead of '==' to compare using 'test' (v.podzimek)
  - lvm-dbus: Check returned job object for error (vtrefny)
  - Get sector size for non-block NVDIMM namespaces too (vtrefny)
  - Fix memory leaks discovered by clang (vtrefny)
  - Add new functions to docs/libblockdev-sections.txt (segfault)
  - Make a link point to the relevant section (segfault)
  - Don't use VeraCrypt PIM if compiled against libcryptsetup < 2.0 (segfault)
  - Make keyfiles parameter to bd_crypto_tc_open_full zero terminated (segfault)
  - Add function bd_crypto_device_seems_encrypted (segfault)
  - Support VeraCrypt PIM (segfault)
  - Support TCRYPT system volumes (segfault)
  - Support TCRYPT hidden containers (segfault)
  - Support TCRYPT keyfiles (segfault)
  - Support unlocking VeraCrypt volumes (segfault)
  - Enforce ZERO_INIT gcc backwards compatibility (bjornpagen)
  - Add function for getting NVDIMM namespace name from devname or path (vtrefny)
  - Add --without-xyz to DISTCHECK_CONFIGURE_FLAGS for disabled plugins (vtrefny)
  - Add tests for the NVDIMM plugin (vtrefny)
  - Add the NVDIMM plugin (vtrefny)
  - Fix build with clang (bjornpagen)
  - s390: don't hardcode paths, search PATH (flokli)
  - Fix build against musl libc (bjornpagen)
  - Fix python2-gobject-base dependency on Fedora 26 and older (vtrefny)
  - Sync the spec file with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-1
changelog:
  - Use python interpreter explicitly when running boilerplate_generator.py (vtrefny)
  - vdo: Implement bd_vdo_get_stats() (tbzatek)
  - Add test for is_tech_available with multiple dependencies (vtrefny)
  - lvm-dbus.c: Check for 'lvmdbus' dependency in 'bd_lvm_is_tech_avail' (vtrefny)
  - lvm.c: Check for 'lvm' dependency in 'bd_lvm_is_tech_avail' (vtrefny)
  - Fix licence headers in sources (vtrefny)
  - Fix three memory leaks in lvm-dbus.c (vtrefny)
  - Ignore "bad-super-call" pylint warning in BlockDev.py (vtrefny)
  - Fix running pylint in tests (vtrefny)
  - Fix vdo configuration options definition in spec file (vtrefny)
  - Fix calling BlockDev.reinit in swap tests (vtrefny)
  - Fix how we check zram stats from /sys/block/zram0/mm_stat (vtrefny)
  - Skip VDO tests also when the 'kvdo' module is not available (vtrefny)
  - Add version to tests that should be skipped on CentOS/RHEL 7 (vtrefny)
  - Skip btrfs tests if btrfs module is not available (vtrefny)
  - Do not build KBD plugin with bcache support on RHEL (vtrefny)
  - Do not build btrfs plugin on newer RHEL (vtrefny)
  - fs: Properly close both ends of the pipe (tbzatek)
  - Make sure library_test works after fixing -Wstrict-prototypes (vtrefny)
  - Make sure library tests properly clean after themselves (vtrefny)
  - pkg-config: add -L${libdir} and -I${includedir} (max.kellermann)
  - plugins/kbd: make wait_for_file() static (max.kellermann)
  - plugins/lvm{,-dbus}: get_lv_type_from_flags() returns const string (max.kellermann)
  - plugins/dm: add explicit cast to work around -Wdiscarded-qualifiers (max.kellermann)
  - plugins/crypto: work around -Wdiscarded-qualifiers (max.kellermann)
  - plugins/check_deps: make all strings and `UtilDep` instances `const` (max.kellermann)
  - exec: make `msg` parameters const (max.kellermann)
  - fix -Wstrict-prototypes (max.kellermann)
  - module.c: Accept kernel modules if they are built-in (marco.guerri.dev)
  - BlockDev.py Convert dictionary keys to set before using them (vtrefny)
  - Skip 'test_cache_pool_create_remove' on CentOS 7 (vtrefny)
  - Re-order libbd_crypto_la_LIBADD to fix libtool issue (tom)
  - acinclude.m4: Use AS_EXIT to fail in LIBBLOCKDEV_FAILURES (vtrefny)
  - configure.ac: Fix missing parenthesis in blkid version check (vtrefny)
  - Allow specifying extra options for PBKDF when creating LUKS2 (vtrefny)
  - Reintroduce python2 support for Fedora 29 (vtrefny)
  - Use versioned command for Python 2 (vtrefny)
  - Fix few wrong names in doc strings (vtrefny)
  - Make sure all our free and copy functions work with NULL (vtrefny)
  - Use libblkid in bd_crypto_is_luks (vtrefny)
  - vdo: Properly destroy the yaml parser (tbzatek)
  - Add a simple test case for bd_crypto_tc_open (vtrefny)
  - Add Python override for bd_crypto_tc_open_full (vtrefny)
  - Show simple summary after configure (vtrefny)
  - Do not build VDO plugin on non-x86_64 architectures (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-4
changelog:
  - Use libblkid to check swap status before swapon (vtrefny)
    Related: rhbz#1634016
  - Add error codes and Python exceptions for swapon fails (vtrefny)
    Resolves: rhbz#1634016


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-7
changelog:
  - Use major/minor macros from sys/sysmacros.h instead of linux/kdev_t.h (vtrefny)
    Resolves: rhbz#1644825


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-9
changelog:
  - Remove device-mapper-multipath dependency from fs and part plugins (vtrefny)
    Resolves: rhbz#1700297


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-12
changelog:
  - Use cryptsetup to check LUKS2 label
    Resolves: rhbz#1778689
  - Fix expected cache pool name with newest LVM
    Related: rhbz#1778689


author: Simone Caronni <negativo17@gmail.com> - 0.9.3-2
changelog:
  - Use autotools to get rid of RPATH.
  - Fix Java build requirements for RHEL/CentOS 7.
  - Clean up SPEC file, rpmlint fixes.
  - Add license macro.


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Josef Ridky <jridky@redhat.com> - 3.19.1-1
changelog:
  - Update to 3.19.1
  - Add patch to use libtirpc
  - Add BR gcc-c++
  - Resolves: #1580754 - FTBFS in RHEL-8


author: Richard W.M. Jones <rjones@redhat.com> - 1.14-1
changelog:
  - Rebase to 1.14.
  - Use newer upstream fork at https://github.com/ofalk/libdnet
  - Drop multilib fix now uptream (RHBZ#342001 RHBZ#1915838).
  - Drop unapplied shrext patch, no longer needed.


author: Adam Jackson <ajax@redhat.com> 2.4.41-1
changelog:
  - libdrm 2.4.41 plus git.  Done as a git snapshot instead of the released
    2.4.41 since the release tarball is missing man/ entirely. 
  - Pre-F16 changelog trim


author: wxiat <nijie@wxiat.com> - 2.4.117-1.0.1
changelog:
  - cherry-pick `add sw arch #69144edad3fa9f6d32041144524ba7509d3bc9a3`.
  - cherry-pick `Fix sw macro #ffacd58d562e62de7abf3ed2128aaaee26a703e2`.


author: wxiat <nijie@wxiat.com> - 2.4.121-1.0.1
changelog:
  - cherry-pick `add sw arch #69144edad3fa9f6d32041144524ba7509d3bc9a3`.
  - cherry-pick `Fix sw macro #ffacd58d562e62de7abf3ed2128aaaee26a703e2`.
  - cherry-pick `add sw8a support #f9d26569486686a856a8599a0daf83944c3212e1`.


author: Honza Horak <hhorak@redhat.com> - 13.1-3
changelog:
  - Add Requires: libpgtypes to avoid the need to test interoperability
    between the various combinations of old and new subpackages


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Karsten Hopp <karsten@redhat.com> 0.1.0-6.pre1.1
changelog:
  - Excludearch s390 s390x, we don't have USB devices there and this package
    doesn't build without USB support


author: Matthew Garrett <mjg@redhat.com> 0.1.0-7.pre1
changelog:
  - fprint-add-udev-rules.patch - build udev rules for autosuspend
  - move hal fdi into the main package rather than -devel
  - add autoreconf as a build depend while carrying the udev diff


author: Rex Dieter <rdieter@fedoraproject.org> - 0.5.1-5
changelog:
  - error opening ATTR{/sys/devices/pci0000:00/0000:00:1a.0/usb1/1-1/1-1.3/1-1.3:1.0/power/control} for writing (#950205)
  - %build: --disable-silent-rules


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Brian C. Lane <bcl@redhat.com> - 0.26.5-1
changelog:
  - Rebase to 0.26.5 (CVE-2018-11235, CVE-2018-10887, CVE-2018-10888)
  - Disable SSH so that libssh2 is not required
  - Use python3 when building
  - Add README.rhel8 explaining why SSH is disabled


author: Brian C. Lane <bcl@redhat.com> - 0.26.8-1
changelog:
  - Update to 0.26.8
    Resolves: rhbz#1638880
  - Disable upstream online tests
    Related: rhbz#1638880
  - tests: Increase TOOBIG value used on i686
    Related: rhbz#1638880


author: Veeti Paananen <veeti.paananen@rojekti.fi> - 0.17.0-2
changelog:
  - Use make for building and installation
  - Specify minimum CMake version
  - Remove useless OpenSSL build dependency
  - Move development documentation to the -devel package
  - Add code examples to the -devel package


author: Dan Horák <dan[at]danny.cz> - 0.18.0-5
changelog:
  - Add htonl() and friends declarations on non-x86 arches
  - Rebuilt with fixed libxdiff for big endian arches


author: Mathieu Bridon <bochecha@fedoraproject.org> - 0.20.0-2
changelog:
  - Build with the bundled xdiff.
  - Disable a failing test. (libgit2#2199)
  - Add missing build requirement on libssh2. (RHBZ#1039433)
  - Build a thread-safe libgit2.


author: Brian C. Lane <bcl@redhat.com> - 0.26.8-3
changelog:
  - revparse: Remove error-prone, redundant test
    Related: RHEL-9503
  - commit_list: fix possible buffer overflow in `commit_quick_parse`
    Resolves: RHEL-9503


author: Brian C. Lane <bcl@redhat.com> - 0.26.4-1
changelog:
  - Update to libgit2-glib-0.26.4
  - Switch to using meson build system
  - Disable SSH so that libssh2 is not required
  - Add README.rhel8 explaining why SSH is disabled


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.8.3-20
changelog:
  - Python 2 binary package renamed to python2-gpod
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Alexander Larsson <alexl@redhat.com> - 0.4.2-1
changelog:
  - update to 0.4.2
  - Change %description to reflect newer features
  - Remove TODO file from %doc as it's not included anymore
  - Explicitly disable the python bindings, they are in the python-gpod package in
    Extras until the Core/Extras merge


author: Todd Zullinger <tmz@pobox.com> - 0.5.2-1
changelog:
  - update to 0.5.2
  - replace %makeinstall with %{__make} DESTDIR=%{buildroot} install
  - build python bindings, merging python-gpod package from extras
  - make %setup quiet
  - patch to fixup building of the python docs, BR libxslt
  - update license tag


author: Todd Zullinger <tmz@pobox.com> - 0.6.0-2
changelog:
  - add the NEWS file, which contains some info on getting newer iPods working
  - split out API docs into a separate package
  - set %defattr for python-gpod


author: Todd Zullinger <tmz@pobox.com> - 0.6.0-8
changelog:
  - The -devel package should require gtk2-devel as well
  - Add gdk-pixbuf-2.0 to the pkg-config file requirements


author: Todd Zullinger <tmz@pobox.com> - 0.6.0-10
changelog:
  - Fix path to hal callout (this should help setup the SysInfoExtended
    file automagically)
  - Use /var/run/hald as mount dir for hal callout
  - Require hal
  - Require main package for the -doc subpackage


author: Todd Zullinger <tmz@pobox.com> - 0.7.2-1
changelog:
  - Update to 0.7.2
  - Make doc subpackage noarch (on Fedora >= 10)
  - Drop --with-hal-callouts-dir from configure, the upstream default works now


author: Todd Zullinger <tmz@pobox.com> - 0.7.90-1
changelog:
  - Update to 0.7.90
  - Adjust default hal callout path (#547049)
    (Temporaily use --with-hal-callouts-dir=%{_libexecdir}/scripts)


author: Todd Zullinger <tmz@pobox.com> - 0.7.93-1
changelog:
  - Update to 0.7.93
  - Drop upstreamed mount-dir location patch
  - Fix temp mount dir configure option typo
  - Drop duplicate libimobiledevice-devel BR
  - Remove pointless %{__$command} macros


author: Christian Krause <chkr@fedoraproject.org> - 0.8.0-5
changelog:
  - Change patch to fix 32 bit issues in the mono bindings
    (Itdb_Track data structure contained wrong values on x86 systems)


author: Christian Krause <chkr@fedoraproject.org> - 0.8.2-1
changelog:
  - Update to 0.8.2
  - Drop upstreamed patches
  - Prevent python-gpod from advertising _gpod.so in its Provides


author: Rex Dieter <rdieter@fedoraproject.org> - 0.8.2-7
changelog:
  - libgpod.pc Requires: libimobiledevice-1.0 ... overlinking (#818594)
  - tighten subpkg deps (via %_isa)
  - omit -devel deps that (should) get autodetected already


author: Christophe Fergeau <cfergeau@redhat.com> 0.8.3-1
changelog:
  - Update to libgpod 0.8.3, this is a bugfix release which should fix
    rhbz#921831 rhbz#925750 rhbz#951167


author: Liwei Ge <geliwei@openanolis.org> - 1:1.44.0-9.0.1
changelog:
  - Add REDHAT as compatible distro and anolis info
  - Do not download packages from net
  - Fix build with distro
  - Add buildrequires


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.34-1
changelog:
  - update to 1.34 (CVE-2017-14062)
  - include soname in file list
  - use macros for ldconfig
  - add gcc to build requirements


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.34-2
changelog:
  - fix ABI compatibility with libidn-1.33 and earlier (#1566414 #1573961)
  - add texinfo to build requirements


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.2.11-24
changelog:
  - Python 2 binary package renamed to python2-libieee1284
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Bastien Nocera <bnocera@redhat.com> - 1.2.1-0.1
changelog:
  + libimobiledevice-1.2.1-0.1
  - Add support for newer devices
  - This is a snapshot of the in-development 1.2.1 version


author: Peter Hutterer <peter.hutterer@redhat.com> 1.12.3-3
changelog:
  - Allow for the tablet mode quirk to apply to touchpads (#1664225)
  - Add a quirk for the Asus VivoBook Flip to keep the
    keyboard and touchpad working in tablet mode


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 1.6.1-6
changelog:
  - Fix v1.6.1-implicit-fallthrough.patch compatibility with gcc < 7.
  - Use %ldconfig_scriptlets.
    https://fedoraproject.org/wiki/Packaging:Scriptlets#Shared_Libraries


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 1.6.1-7
changelog:
  - Add: BuildRequires: gcc
    https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 1.6.1-8
changelog:
  - Enable tests (PTUNIT) and man pages (MAN).
  - Change BuildRequires: gcc -> gcc-c++ as PTUNIT tests require C++.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.4-19
changelog:
  - Python 2 binary package renamed to python2-libiptcdata
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Cole Robinson <crobinso@redhat.com> - 1.18.0-2
changelog:
  - Fix rdma deps and don't restrict archs
  - Add --disable-werror to fix gcc8 build (bz #1556044)
  - Spec file cleanups (bz #1483290)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-5.el8
changelog:
  - libiscsi-iser_rcv_completion-unify-error-handling.patch [bz#1634541]
  - libiscsi-iser-fix-posting-of-receive-descriptors.patch [bz#1634541]
  - libiscsi-sync-remove-unnecessary-checks.patch [bz#1634541]
  - libiscsi-do-not-warn-for-strncpy.patch [bz#1634541]
  - libiscsi-avoid-fallthrough.patch [bz#1634541]
  - libiscsi-avoid-truncation-when-logging-message-that-includes-.patch [bz#1634541]
  - Resolves: bz#1634541
    (Fix important coverity issues (libiscsi))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> -
changelog:
  - libiscsi-fix-connection-to-LUN-with-IPv6-address.patch [bz#1597942]
  - Resolves: bz#1597942
    (Qemu-kvm fails to connect to iscsi LUN by IPV6 address)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-7.el8
changelog:
  - libiscsi-redhat-Remove-disable-werror-from-spec-file.patch [bz#1581025]
  - Resolves: bz#1581025
    (Remove --disable-werror from spec file)


author: Paolo Bonzini <pbonzini@redhat.com> - 1.7.0-3
changelog:
  - Correct license for libiscsi-utils, prefer %global to %define
  - Add Requires
  - Remove percent-clean section


author: Neal Gompa <ngompa13@gmail.com> - 1.15.0-1
changelog:
  - Rebased to version 1.15.0
  - Removed patch 20 as it has been upstreamed
  - Disabled patch 12 as need for revised one is in question
  - Updated patch 13 to current tree
  - New tool iscsi-perf


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Adam Tkac <atkac redhat com> 0.0.93-6
changelog:
  - improve package description a little (#600243)
  - include example.c as %doc in the -devel subpackage


author: Adam Tkac <atkac redhat com> 1.0.0-1
changelog:
  - update to 1.0.0
  - patches merged
    - libjpeg-turbo-programs.patch
    - libjpeg-turbo-nosimd.patch
  - add libjpeg provides to the main package to workaround problems with broken
    java-1.6.0-openjdk package


author: Petr Hracek <phracek@redhat.com> - 1.3.1-1
changelog:
  - New upstream version
  - Remove upstreamed patches, add missing jpegint.h
  - Clean up SPEC file
  - Disable --static subpackage
  - Remove libjpeg obsolency, removed in Fedora 13


author: Gergely Gombos <gombosg@gmail.com> - 2.0.2.3-3
changelog:
  - Move unversioned symlinks to the base package. Linked packages dynamically load (dlopen) this module with the name libldacBT_enc.so.


author: Daniel Kopecek <dkopecek@redhat.com> - 9-3
changelog:
  - Enabled build gating
  - Synced layout test assumtions with recent cryptsetup changes
    Resolves: rhbz#1625683


author: Sergio Correia <scorreia@redhat.com> - 9-4
changelog:
  - LUKSMeta now sets error level from libcryptsetup to CRYPT_LOG_ERROR, and
    this output is logged to stderr
    Resolves: rhbz#1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Jan Vcelak <jvcelak@fedoraproject.org> 1.1.1-4
changelog:
  - remove utils subpackage and place mmdblookup into devel subpackage
  - remove Group from the spec file
  - move NOTICE and Changes.md to devel subpackage


author: Rex Dieter <rdieter@fedoraproject.org> - 0.8-0.1.alpha
changelog:
  - 0.8alpha
  - use %make_build %make_install %ldconfig_scriptlets %license
  - devel: use %{?_isa} to tighten dep on main pkg
  - drop deprecated Group: tag
  - %files: tighten to include library soname


author: Rex Dieter <rdieter@fedoraproject.org> - 0.9.1-0.1.alpha
changelog:
  - 0.9.1alpha
  - libmspack-0.8-0.1.alpha corrupts extracted cab files (#1647033)
  - examples no longer installed (by default)


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.2-1
changelog:
  - New upstream version 1.0.2.
  - Remove patches which are upstream.
  - Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842).
  - Fix previous commit message.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.3-1
changelog:
  - New upstream version 1.0.3.
  - Contains fix for remote code execution vulnerability.
  - Add new libnbd-security(3) man page.


author: Richard W.M. Jones <rjones@redhat.com> - 0.1.1-1
changelog:
  - Fix license in man pages and examples.
  - Add nbdsh(1) man page.
  - Include the signature and keyring even if validation is disabled.
  - Update devel subpackage license.
  - Fix old FSF address in Python tests.
  - Filter Python provides.
  - Remove executable permission on the tar.gz.sig file.
  - Initial release.


author: Richard W.M. Jones <rjones@redhat.com> - 0.9.6-2
changelog:
  - Add all upstream patches since 0.9.6 was released.
  - Package the ocaml bindings into a subpackage.


author: Richard W.M. Jones <rjones@redhat.com> - 0.9.8-3
changelog:
  - Bump and rebuild to fix releng brokenness.
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/2LIDI33G3IEIPYSCCIP6WWKNHY7XZJGQ/


author: Richard W.M. Jones <rjones@redhat.com> - 0.9.8-4
changelog:
  - Fix nbdkit dependencies so we're actually running the tests.
  - Add glib2-devel BR so we build the glib main loop example.
  - Add upstream patch to fix test error:
    nbd_connect_unix: getlogin: No such device or address
  - Fix test failure on 32 bit.


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Robert Scheck <robert@fedoraproject.org> 1.1.6-7
changelog:
  - Run autoreconf to recognize aarch64 (#925813)
  - Conditionalized usage of %{_lib} vs %{_libdir} for RHEL < 7
  - Tight run-time dependencies between sub-packages via %{?_isa}


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Tomas Hoger <thoger@redhat.com> - 0.1.13-11
changelog:
  - Add conditional for building with(out) gst010 / GStreamer 0.10 support.
  - Disable gst010 plugin by default.


author: Stefan Becker <chemobejk@gmail.com> - 0.1.14-3
changelog:
  - update to 0.1.14-70-gfb2f1f7 with alternate server fixes for SIPE
  - add autoreconf build step
  - remove examples subpackage as examples are no longer installed


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-4.20171128gitfb2f1f7
changelog:
  - enable make check again
  - make tests pass in Koji
  - disable test-new-dribble that sometimes hangs indefinitely
  - make tests compile on i686
  - make the package build on armv7hl
  - make the package build on Fedora 28
  - avoid build failure if gstreamer-plugins-base-devel is installed
  - move autoreconf invocation to %prep
  - use Name Version Release that explicitly identifies an SCM snapshot (#1541646)


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-6.20171128gitfb2f1f7
changelog:
  - temporarily make the upstream test-suite run on Intel arches only
  - disable test-send-recv, which fails in Koji


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-7.20180504git34d6044
changelog:
  - component: accept TURN in nice_component_verify_remote_candidate() (#1541646)
  - update to 0.1.14-85-g34d6044 (#1541646)


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release (rh #2062686)
  - Include OWE wireless security (rh #2060327)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057514)


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.1.3-2
changelog:
  - Removed ldconfig scriptlets as per
    https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.1.3-4
changelog:
  - Added gcc-c++ to BuildRequires as per https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.2.0-4
changelog:
  - Resolves: rhbz#1649632 - libosinfo test suite should collect+report all
                             failures, not exit on first error


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-3
changelog:
  - Resolves: rhbz#1727843 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.8.0-1
changelog:
  - Resolves: rhbz#1815158 - Rebase to libosinfo the latest upstream release
  - Resolves: rhbz#1754394 - Provide information about UEFI support for guests (libosinfo)
  - Resolves: rhbz#1032520 - WHQL'ed drivers should be made available for Boxes/libosinfo users


author: Bastien Nocera <bnocera@redhat.com> - 2.2.0-1
changelog:
  + libplist-2.2.0-1
  - Update to 2.2.0, breaking the ABI
  - Stop linking python module against libpython


author: kwizart < kwizart at gmail.com > - 0.2.3-2
changelog:
  - Rename binding-python to python
  - Add Requires: gecko-libs >= %{gecko_version}
  - Fix some descriptions
  - Add plugin-webkit package


author: kwizart < kwizart at gmail.com > - 0.2.3-3
changelog:
  - Move proxy.h to libproxy/proxy.h
    This will prevent it to be included in the default include path
  - Split main to libs and util and use libproxy to install all


author: kwizart < kwizart at gmail.com > - 0.2.3-7
changelog:
  - Disable Gnome/KDE default support via builtin modules.
   (it needs to be integrated via Gconf2/neon instead).


author: kwizart < kwizart at gmail.com > - 0.2.3-8
changelog:
  - Merge NetworkManager module into the main libproxy package
  - Main Requires the -python and -bin subpackage 
   (splitted for multilibs compliance).


author: Nicolas Chauvet <kwizart@fedoraproject.org> - 0.3.1-1
changelog:
  - Update to 0.3.1
  - Avoid dependecies on -python and -bin subpackages
  - Create -networkmanager sub-package.


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 0.4.4-1
changelog:
  - Update to 0.4.4
  - Removed install workarounds (fixed upstream)
  - Removed patches (fixed upstream)
  - Moved -python to noarch
  - Downgrade cmake requirement (upstream change)
  - Disabled perl bindings
  - Run tests


author: Nicolas Chauvet <kwizart@gmail.com> - 0.4.5-2
changelog:
  - Update to 0.4.5
  - Disable mozjs on fedora >= 15
  - Disable webkit
  - Add libproxy bootstrap option to disable modules.


author: Nicolas Chauvet <kwizart@gmail.com> - 0.4.6-3
changelog:
  - Fix mozjs/webkit obsoletion - rhbz#656849
  - Workaround unreliable Version field in pkg-config - rhbz#656484


author: Nicolas Chauvet <kwizart@gmail.com> - 0.4.7-0.1svn20110412
changelog:
  - Update to 0.4.7 svn20110412
  - Add support for webkitgtk3
  - Add support for xulrunner 2.0
  - fix #683015 - libproxy fails with autoconfiguration
  - fix #683018 - libproxy needs BR: NetworkManager-glib-devel  (f14)
  - Manually fix libproxy-1.0.pc version field - #664781 / #674854


author: Peter Robinson <pbrobinson@fedoraproject.org> - 0.4.7-4
changelog:
  - Add upstream patches to use js rather than xulrunner
  - Add patch to fix FTBFS on gcc 4.7
  - Cleanup spec for latest updates and remove obsolete bits


author: Dan Winship <danw@redhat.com> - 0.4.11-7
changelog:
  - Fix file descriptor leak (#911066)
  - Fix crash when pacrunner fails (probably because of EMFILE...) (#998232)


author: David King <amigadave@amigadave.com> - 0.4.12-1
changelog:
  - Update to 0.4.12
  - Simplify conditional macros
  - Use isa macro when requiring base package
  - Use license macro for COPYING
  - Use pkgconfig for BuildRequires
  - Use javascriptcoregtk-4.0
  - Apply an upstream patch to pair new[] with delete[]
  - Fix slowdown in KDE plugin
  - Make the pacrunner subpackage depend on pacrunner (#1171679)
  - Install man page from Debian


author: Dan Winship <danw@redhat.com> - 0.4.15-5.1
changelog:
  - Drop python2 subpackage (#1559092)
  - Drop PAC runner based on the "pacrunner" package (#1569023)
  - Replace pacrunner-crash-fix patch with version from RHEL7
  - Drop kde subpackage (#1538147)


author: Carl Byington <carl@five-ten-sg.com> 0.6.71-1
changelog:
  - fedora python naming scheme changes
  - Zachary Travis - Add support for the OST 2013 format, and
    Content-Disposition filename key fix for outlook compatibility


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.6.71-4
changelog:
  - Python 2 binary package renamed to python2-libpst
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Nils Philippsen <nils@tiptoe.de> - 2.1.2-1
changelog:
  - version 2.1.2
  - tidy up spec file
  - use %license for license file
  - require same arch main from devel package


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Jiri Vymazal <jvymazal@redhat.com> - 1.2.13-1
changelog:
  - rebase to 1.2.13
    resolves: rhbz#1425638
  - added patch for GnuTLS crypto-policy adherence
    resolves: rhbz#1179317
  - added autoconf, automake and libtool because package
    has patches now


author: Attila Lakatos <alakatos@redhat.com> - 1.9.0-1
changelog:
  - rebase to 1.9.0
  - add patch to comply with crypto policies
  - add support for openssl
    resolves: rhbz#1932783
  - Properly end TLS connections
    resolves: rhbz#1886400


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: yangxiaoxuan <yangxiaoxuan@openanolis.org> 1:7.1.8.1-11.0.1
changelog:
  - Add configuration file and vemdor for Anolis OS
  - Fit build on Anolis OS 8
  - Remove loongarch64 arch
  - skip failed tests for anolis
  - remove Esperanto


author: Caolán McNamara <caolanm@redhat.com> 3.2.99.1-2
changelog:
  - Related: rhbz#639945 pull in review changes
    + redland build-fix
    + replace awk script
    + validate .destop files


author: Caolán McNamara <caolanm@redhat.com> 3.2.99.2-1
changelog:
  - next LibreOffice milestone
  - drop integrated openoffice.org-2.3.0.ooo76649.httpencoding.patch
  - drop integrated workspace.dtardon03.patch
  - drop integrated openoffice.org-3.1.0.ooo61927.sw.ww6.unicodefontencoding.patch
  - drop integrated workspace.impress195.patch
  - drop integrated workspace.srb1.patch
  - drop integrated openoffice.org-3.2.0.ooo106502.svx.fixspelltimer.patch
  - drop integrated openoffice.org-3.3.0.ooo108246.svx.hide-sql-group-when-inactive.patch
  - drop integrated openoffice.org-3.2.0.ooo95369.sw.sortedobjs.patch
  - drop integrated openoffice.org-3.2.0.ooo110142.svx.safercolornames.patch
  - drop integrated openoffice.org-3.3.0.ooo111758.sd.xerror.patch
  - drop integrated openoffice.org-3.2.0.ooo111741.extras.malformed-xml-file.patch
  - drop integrated openoffice.org-3.3.0.ooo112059.sw.avoid-null-ptr-deref.patch
  - drop integrated openoffice.org-3.3.0.ooo100686.wizards.types.not.mediatypes.patch
  - drop integrated workspace.vcl113.patch
  - drop integrated openoffice.org-3.3.0.ooo112384.sw.export.doc.styledoesntexist.patch
  - drop integrated workspace.cmcfixes77.patch
  - drop integrated workspace.vcl114.patch
  - drop integrated openoffice.org-3.3.0.ooo106591.sal.tradcopy.patch
  - drop integrated workspace.vcl115.patch
  - drop integrated workspace.cmcfixes78.patch
  - drop integrated openoffice.org-3.3.0.ooo114012.sd.bada11ychain.patch
  - drop integrated workspace.cmcfixes79.patch
  - drop integrated openoffice.org-3.3.0.ooo114703.vcl.betterlocalize.font.patch
  - drop integrated openoffice.org-3.3.0.rh638185.editeng.cjkctlhtmlsizes.patch
  - drop integrated openoffice.org-3.3.0.rh637738.libgcrypt.addmutex.patch
  - drop integrated openoffice.org-3.2.0.rh632236.writerfilter.cleanup-cell-props.patch
  - drop workspace.gtk3.patch


author: Caolán McNamara <caolanm@redhat.com 3.2.99.3-1
changelog:
  - next Libreoffice milestone
  - drop integrated openoffice.org-2.0.1.rhXXXXXX.extensions.defaulttoevo2.patch
  - drop integrated openoffice.org-2.2.1.ooo7065.sw.titlepagedialog.patch
  - drop integrated openoffice.org-3.2.0.ooo108846.sfx2.qstartfixes.patch
  - drop integrated openoffice.org-3.3.0.ooo107490.cppu.lifecycle.patch
  - drop integrated libreoffice-buildfix.patch
  - drop integrated libreoffice-xdg632229.gnomeshell.patch
  - drop integrated 0001-strcpy-cannot-be-used-with-overlapping-src-and-dest.patch
  - drop integrated 0001-abort-doesn-t-gain-us-anything-here.patch
  - drop integrated 0001-latest-libX11-changed-header-guards.patch


author: Caolán McNamara <caolanm@redhat.com> 3.2.99.3-2
changelog:
  - Resolves: rhbz#610103 exit quickstarter when libs deleted
  - Resolves: rhbz#652695 release desktop in timeout
  - Resolves: rhbz#657541 don't crash during processing of auto. styles
    when joining paragraphs (dtardon)


author: Caolán McNamara <caolanm@redhat.com> 3.3.0.1-1
changelog:
  - release candidate 1
  - drop integrated qstart.dont-forceenabled-on-post-reg-restart.patch
  - drop integrated exit.quickstarter.when.deleted.patch
  - drop integrated 0001-destroydesktop.in.timeout.patch
  - drop integrated openoffice.org-3.3.0.rhbz657541.join-paragraphs.patch


author: Caolán McNamara <caolanm@redhat.com> 3.3.0.2-2
changelog:
  - Resolves: rhbz#663724 fdo32572-sc-dont-double-paste.patch
  - Resolves: rhbz#660342 Undo/Redo crash with postits


author: Caolán McNamara <caolanm@redhat.com> 3.3.0.3-1
changelog:
  - latest version
  - drop integrated 0001-Resoves-rhbz-663857-font-color-missing-C-FAQ-10.3-do.patch
  - drop integrated 0001-Avoid-double-paste-when-pasting-text-into-cell-comme.patch
  - drop integrated 0001-Resolves-rhbz-660342-Undo-Redo-crash-with-postits.patch
  - drop integrated 0001-Resolves-rhbz-666088-clean-up-search-cache-singleton.patch


author: Caolán McNamara <caolanm@redhat.com> 3.3.0.4-4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
  - Related: rhbz#610103 make this even more robust
  - Related: rhbz#672872 cancel gtk file dialog on terminate
  - Resolves: fdo#33509/ooo#62414 fix CTL spelling popup
  - Resolves: rhbz#673819 crash on changing position of header/footer object
  - Resolves: rhbz#670020 crash in slidesorting
  - Resolves: rhbz#676539 handle missing pWindows from xWindows
  - Resolves: rhbz#649310 don't crash deregistering diff. platform ext.
    (dtardon)
  - Resolves: rhbz#666440 don't pushback and process a corrupt extension


author: Caolán McNamara <caolanm@redhat.com> 3.3.1.1-1
changelog:
  - 3.3.1 rc1
  - drop integrated 0001-don-t-pushback-and-process-a-corrupt-extension.patch
  - drop integrated libreoffice-fdo32561.comphelper.patch
  - drop integrated 0001-Related-rhbz-610103-more-woes-on-rpm-upgrade-vs-rpm-.patch
  - drop integrated 0001-Resolves-rhbz-673819-crash-on-changing-position-of-d.patch
  - drop integrated 0001-rhbz-666440-don-t-pushback-and-process-a-corrupt-extension.patch


author: Caolán McNamara <caolanm@redhat.com> 3.3.1.2-3
changelog:
  - Resolves: rhbz#681159 crash in writer
  - Resolves: rhbz#672818 crash in writer
  - Resolves: fdo#33701 ensure node outlives path
  - Resolves: rhbz#681738 crash on writing config post-main


author: Caolán McNamara <caolanm@redhat.com> 3.3.1.2-8
changelog:
  - Related: rhbz#684477 make sure this is thread safe
  - Resolves: rhbz#684620 crash with NULL pTableBox


author: Caolán McNamara <caolanm@redhat.com> 3.3.2.2-1
changelog:
  - latest version
  - drop integrated 0001-Resolves-fdo-33701-ensure-node-outlives-path.patch
  - drop integrated 0001-valgrind-don-t-leave-an-evil-thread-running-after-ma.patch


author: Caolán McNamara <caolanm@redhat.com> 3.3.99.1-1
changelog:
  - 3.4 beta1
  - drop openoffice.org-1.9.123.ooo53397.prelinkoptimize.desktop.patch
    in favour of ooosplash
  - drop openoffice.org-2.2.0.gccXXXXX.solenv.javaregistration.patch
    because components are passively registered now
  - drop integrated openoffice.org-3.1.0.ooo102061.sc.cellanchoring.patch
  - drop integrated turn-script-providers-into-extensions.patch
  - drop integrated 0001-tidy-this-up-and-don-t-bail-out-on-mislength-records.patch
  - drop integrated 0001-free-ctxt-after-taking-lastError-details.patch
  - drop integrated 0001-Removed-suspect-hack.-Cursor-on-post-it-now-scrolls-.patch
  - drop integrated libreoffice-gcc4.6.0.patch
  - drop integrated 0001-fexceptions-fexceptions.patch
  - drop integrated 0001-Related-rhbz-672872-cancel-gtk-file-dialog-on-deskto.patch
  - drop vbahelper.visibility.patch
  - drop integrated 0001-Resolves-fdo-33509-i62414-out-by-one-breaks-CTL-spel.patch
  - drop integrated 0001-Resolves-rhbz-670020-crash-in-slidesorting.patch
  - drop integrated 0001-Resolves-rhbz-676539-handle-missing-pWindows-from-xW.patch
  - drop integrated 0001-Resolves-fdo-33750-i94623-use-optimal-border-width-w.patch
  - drop integrated 0001-rhbz-649310-don-t-crash-deregistering-diff.-platform.patch
  - drop integrated 0001-Resolves-rhbz-674330-dereference-of-NULL-mpBase.patch
  - drop integrated 0001-rhbz-678284-Get-correct-current-position-when-shift-page-up-and-.patch
  - drop integrated 0001-Resolves-rhbz-681159-bandaid-for-crash.patch
  - drop integrated 0001-Resolves-rhbz-672818-bandaid-for-crash-in-SwTxtNode-.patch
  - drop integrated 0001-install-high-resolution-icons.patch
  - drop integrated 0001-Resolves-rhbz-682716-pa-IN-isn-t-handled-by-fontconf.patch
  - drop integrated 0001-Related-rhbz-684477-make-sure-this-is-thread-safe.patch
  - drop integrated 0001-Resolves-rhbz-682621-better-resizing-of-overtall-gly.patch
  - drop integrated 0001-Resolves-rhbz-684620-crash-with-NULL-pTableBox.patch
  - drop integrated libreoffice-fdo33947.sd.print.crash.patch
  - drop integrated 0001-add-cairo_ft_font_face_create_for_pattern-wrapper.patch
  - drop integrated 0001-Related-rhbz-680460-reorganize-this-to-make-it-inher.patch
  - drop integrated 0001-Related-rhbz-680460-don-t-bother-with-an-interim-Fon.patch
  - drop integrated 0001-Resolves-rhbz-680460-honour-lcdfilter-subpixeling-et.patch
  - drop integrated 0001-Cut-Gordian-Knot-of-who-owns-the-font-options.patch
  - drop integrated 0001-beware-of-invalidated-iterator.patch
  - drop integrated rhbz680766.fix-mdds-crash.patch
  - drop integrated 0001-Resolves-rhbz-684580-X-and-strike-through-escapes-ra.patch
  - drop integrated 0001-set-mime-types-on-flat-xml-filters.patch
  - drop integrated 0001-add-flat-xml-types-to-.desktop-files-etc.patch
  - drop integrated libreoffice-fdo31271.icu.patch


author: Caolán McNamara <caolanm@redhat.com> 3.3.99.1-2
changelog:
  - Resolves: rhbz#695509 crash in RefreshDocumentLB
  - bubble down configure test findings on visibility


author: David Tardon <dtardon@redhat.com> 3.3.99.4-1
changelog:
  - 3.4 beta4
  - drop integrated 0001-Removed-duplicate-code-block-mis-merge-prolly.patch
  - drop integrated 7de0b88ce2dd932915894385b54be1897d5ee053.zip


author: Caolán McNamara <caolanm@redhat.com> - 3.4.0.2-4
changelog:
  - Resolves: rhbz#710556 't crash on missing graphics .pptx export
  - Resolves: rhbz#652604 better survive exceptions in autorecovery


author: Caolán McNamara <caolanm@redhat.com> - 3.4.0.2-5
changelog:
  - Resolves: rhbz#699909 crash in export of .doc in lcl_getField
  - Resolves: fdo#37584 Make a real copy of the text
  - Resolves: rhbz#709503/fdo#37668 bitwise operations on signed values


author: David Tardon <dtardon@redhat.com> - 3.4.1.1-1
changelog:
  - 3.4.1 RC1
  - drop integrated 0001-Resolves-rhbz-707317-avoid-crash-in-getRowSpan.patch
  - drop integrated 0001-Resolves-rhbz-710004-band-aid-for-immediate-crash-in.patch
  - drop integrated 0001-Resolves-rhbz-710556-don-t-crash-on-missing-graphics.patch
  - drop integrated 0001-Resolves-rhbz-699909-crash-in-export-of-.doc-in-lcl_.patch
  - drop integrated 0001-fdo-37584-Make-a-real-copy-of-the-text-where-to-coun.patch
  - drop integrated 0001-Resolves-fdo-37668-bitwise-operations-on-signed-numb.patch


author: Caolán McNamara <caolanm@redhat.com> - 3.4.1.1-4
changelog:
  - Related: rhbz#711087 band aid for crash in sc undo
  - Resolves: rhbz#714338 add a metapackage to install standard bits


author: David Tardon <dtardon@redhat.com> - 3.4.1.1-5
changelog:
  - Resolves: rhbz#714781 add Persian langpack
  - Resolves: rhbz#667082 do not crash importing section containing just
    an empty paragraph


author: David Tardon <dtardon@redhat.com> - 3.4.2.1-1
changelog:
  - 3.4.2 rc1
  - drop 0001-bad-merge-fix-to-enable-extensions-to-build-again.patch
  - drop 0001-fix-regression-in-SvGlobalName-operator.patch


author: Caolán McNamara <caolanm@redhat.com> - 3.4.2.1-2
changelog:
  - Rebuild (poppler-0.17.0), add libreoffice-poppler-0.17.0.patch
    seeing as the API changed for some reason or other


author: Caolán McNamara <caolanm@redhat.com> - 3.4.3.2-2
changelog:
  - Resolves: rhbz#733564 graphite2 now packaged into fedora
  - Related: fdo#37195 migrationoo3 not registered


author: Caolán McNamara <caolanm@redhat.com> - 3.4.3.2-11
changelog:
  - Resolves: rhbz#738133 fix bn discard string
  - Resolves: fdo#35513 avoid crash while processing incorrect print range


author: Caolán McNamara <caolanm@redhat.com> - 3.4.4.2-3
changelog:
  - Related: fdo#42534 0001-Related-i58612-don-t-crash-anyway.patch
  - Resolves: fdo#42749 KDE oxygen theme and scrollbars


author: Caolán McNamara <caolanm@redhat.com> - 3.4.4.2-6
changelog:
  - Resolves: rhbz#761009 IFSD_Equal is asymmetrical
  - Resolves: rhbz#767708 write to mmap'ed file w/o disk space: SIGBUS


author: David Tardon <dtardon@redhat.com> - 3.4.99.1-1
changelog:
  - 3.5.0 beta1
  - drop integrated 0001-Related-fdo-37195-migrationoo3-not-registered.patch
  - drop integrated 0001-Related-i58612-don-t-crash-anyway.patch
  - drop integrated 0001-Related-rhbz-652604-better-survive-exceptions-thrown.patch
  - drop integrated 0001-Related-rhbz-702833-addEventListener-without-removeE.patch
  - drop integrated 0001-Related-rhbz-711087-band-aid.patch
  - drop integrated 0001-Related-rhbz-718976-crash-in-SwTxtSizeInfo-GetMultiC.patch
  - drop integrated 0001-Related-rhbz-730225-avoid-segv-in-ld-this-was-set-to.patch
  - drop integrated 0001-Related-rhbz-753201-fedora-ant-java-1.5.0-gcj-won-t-.patch
  - drop integrated 0001-Resolves-fdo-32665-handle-that-FreeSerif-lacks-some-.patch
  - drop integrated 0001-Resolves-rhbz-693265-fix-crash-from-unhandled-except.patch
  - drop integrated 0001-Resolves-rhbz-695509-crash-in-RefreshDocumentLB.patch
  - drop integrated 0001-Resolves-rhbz-713154-pdf-export-dialog-too-tall-to-f.patch
  - drop integrated 0001-Resolves-rhbz-715549-use-fontconfig-s-detected-forma.patch
  - drop integrated 0001-Resolves-rhbz-738255-avoid-crash-on-NULL-pointer.patch
  - drop integrated 0001-Resolves-rhbz-751290-KDE-black-on-dark-tooltips.patch
  - drop integrated 0001-add-Oracle-Java-1.7.0-recognition.patch
  - drop integrated 0001-avoid-using-com.sun.org-apis.patch
  - drop integrated 0001-bubble-down-configure-test-findings-on-visibility.patch
  - drop integrated 0001-fix-horizontal-scrollbars-with-KDE-oxygen-style-bnc-.patch
  - drop integrated 0001-gtk3-fix-cairo-canvas-crash-for-non-X-or-svp-backend.patch
  - drop integrated 0001-helgrind-Related-rhbz-655686-get-order-of-shutdown-c.patch
  - drop integrated 0001-rhbz-667082-do-not-crash-importing-section-containin.patch
  - drop integrated 0001-rhbz-702635-set-correct-page-number-when-exporting-s.patch
  - drop integrated Backport-reading-AES-encrypted-ODF-1.2-documents.patch
  - drop integrated gdb-pretty-printers.patch
  - drop integrated kde4configure.patch
  - drop integrated libreoffice-ppc64.patch
  - drop integrated openoffice.org-3.3.0.ooo108637.sfx2.uisavedir.patch
  - drop integrated openoffice.org-3.3.0.ooo113273.desktop.resolvelinks.patch
  - drop integrated vbahelper.visibility.patch
  - drop libreoffice-testtools subpackage, because testtool has been
    removed by upstream


author: David Tardon <dtardon@redhat.com> - 3.4.99.2-1
changelog:
  - 3.5.0 beta2
  - drop integrated 0001-Resolves-rhbz-761009-IFSD_Equal-is-asymmetrical.patch
  - drop integrated 0001-Resolves-rhbz-767708-avoid-SIGBUS-writing-to-overcom.patch
  - drop integrated 0001-force-gbuild-stage-for-CustomTargets.patch
  - drop integrated 0001-these-translations-do-already-exist-in-translations-.patch
  - drop integrated 0001-Fix-typo-and-clean-up.patch
  - use system mysql-connector-c++


author: David Tardon <dtardon@redhat.com> - 3.4.99.3-1
changelog:
  - 3.5.0 beta3
  - drop integrated 0001-fix-syntactic-error.patch
  - drop integrated 0001-gcc-trunk-fix-error-unable-to-find-string-literal-op.patch
  - drop integrated 0001-gcc-trunk-avoid-confusion.patch
  - drop integrated 0001-workaround-for-LO-namespace-pollution-breaking-KDE4-.patch
  - drop integrated 0001-smath-does-not-handle-accents-in-MathML.patch
  - Resolves: rhbz#533318 smath does not handle accents in MathML
  - Resolves: rhbz#771108 English menu in writer despite installation of
    libreoffice-langpack-de


author: David Tardon <dtardon@redhat.com> - 3.5.0.1-1
changelog:
  - 3.5.0 rc1
  - drop integrated 0001-workaround-internal-compiler-error-with-gcc-4.7.patch
  - drop integrated 0001-fix-for-gcc-4.7-C-11-these-are-not-string-literal-op.patch
  - drop integrated 0001-fix-for-gcc-4.7-C-11-this-is-not-string-literal-oper.patch
  - drop integrated 0001-Revert-fast_merge-fix-mis-merge-of-first-module-s-st.patch
  - drop integrated 0001-fix-writing-of-strings-from-the-first-module.patch
  - drop integrated 0001-refactor-slightly-to-avoid-link-problems-with-gcc-4..patch


author: David Tardon <dtardon@redhat.com> - 3.5.0.3-1
changelog:
  - 3.5.0 rc3
  - Resolves: rhbz#786328 add nlpsolver subpackage
  - split legacy binary filters into subpackage


author: Stephan Bergmann <sbergman@redhat.com> - 3.5.0.3-2
changelog:
  - junit4 -> junit
  - Resolves: rhbz#788042 skip splashscreen with quickstarter
  - with split binfilter we need fix for fdo#43644


author: Caolán McNamara <caolanm@redhat.com> - 3.5.0.3-4
changelog:
  - ensure gdb .py files have the same timstamps so that multilib
    .pyc's and .pyo's have the same content (timestamp in binary cache)


author: David Tardon <dtardon@redhat.com> - 3.5.1.1-1
changelog:
  - 3.5.1 rc1
  - drop 0001-Resolves-fdo-43644-survive-registered-but-unavailabl.patch
  - drop 0001-Resolves-rhbz-789622-Adapt-SDK-to-changed-paths-in-L.patch
  - drop 0001-Fix-fdo-45177-avoid-linked-undo-for-the-while.patch
  - drop 0001-Fix-some-apparent-misuses-of-RTL_CONSTASCII_USTRINGP.patch
  - drop binfilter-Fix-some-apparent-misuses-of-RTL_CONSTASCII_USTRINGP.patch
  - Resolves: fdo#45177 avoid linked undo crash
  - Fix some apparent misuses of RTL_CONSTASCII_USTRINGPARAM (cherry-picked from
    upstream libreoffice-3-5 branch)


author: Caolán McNamara <caolanm@redhat.com> - 3.5.1.1-2
changelog:
  - Resolves: rhbz#788045 swriter --help doesn't show help
  - Resolves: rhbz#798667 missing .desktop icons


author: Caolán McNamara <caolanm@redhat.com> - 3.5.1.1-3
changelog:
  - Resolves: rhbz#799628 crash with chewing IM with g3g
  - Resolves: rhbz#799525 put flat odf mimetypes into xsltfilter.desktop
  - Resolves: rhbz#800272 complain about unknown commandline options


author: David Tardon <dtardon@redhat.com> - 3.5.3.1-1
changelog:
  - 3.5.3 rc1
  - drop integrated 0001-Introduced-SystemShellExecuteFlags-URIS_ONLY.patch
  - drop integrated 0001-Simplify-code-and-use-proper-register-names-for-linu.patch
  - drop integrated 0001-resolved-rhbz-813280-the-current-document-is-not-alw.patch


author: Caolán McNamara <caolanm@redhat.com> - 3.5.3.2-3
changelog:
  - Resolves: rhbz#805743 a11y crash in impress/draw
  - Resolves: rhbz#813202 opengl slide transitions still a bit
    problematic in Fedora 17


author: David Tardon <dtardon@redhat.com> - 3.5.3.2-4
changelog:
  - Resolves: rhbz#820439 KDE export dialog broken for most formats
  - Resolves: fdo#49365 Libreoffice fails to start on second screen with
    gtk vcl plugin
  - Resolves: rhbz#809019 Impress thinks a machine with 2 monitors in
    clone mode is multihead


author: David Tardon <dtardon@redhat.com> - 3.5.4.1-1
changelog:
  - 3.5.4 rc1
  - drop integrated 0001-do-not-prepend-n-twice-it-confuses-KFileDialog-rhbz-.patch
  - drop integrated 0001-incrementing-index-twice-in-one-run-seems-wrong.patch
  - drop integrated 0001-fdo-49365-correctly-map-monitor-index-back-to-screen.patch
  - drop integrated 0001-rhbz-809019-count-mirrored-monitors-as-one.patch


author: David Tardon <dtardon@redhat.com> - 3.5.5.1-1
changelog:
  - 3.5.5 rc1
  - drop integrated 0001-make-hsqldb-build-with-java-1.7.patch
  - drop integrated 0001-Related-rhbz-799628-crash-with-chewing-IM-with-g3g.patch
  - drop integrated 0001-silence-SolarMutex-not-locked-spew.patch
  - drop integrated 0001-gcc-trunk-fix-unable-to-find-string-literal-operator.patch
  - drop integrated 0001-ppc-yyinput-returns-a-int-truncating-to-unsigned-cha.patch
  - drop integrated 0001-Resolves-rhbz-826609-rhbz-820554-fix-smoketest-on-pp.patch


author: David Tardon <dtardon@redhat.com> - 3.6.0.0-1
changelog:
  - 3.6.0 beta2
  - drop integrated 0001-move-binfilter-mime-types-into-extra-.desktop-file.patch
  - drop integrated 0001-Resolves-rhbz-788042-skip-splashscreen-with-quicksta.patch
  - drop integrated libreoffice-ensure-non-broken-xml-tree.patch
  - drop integrated 0001-preserve-timestamps-for-.py-files.patch
  - drop integrated 0001-Resolves-rhbz-788045-swriter-help-etc-doesn-t-show-h.patch
  - drop integrated 0001-Resolves-rhbz-799525-put-flat-odf-mimetypes-in-xsltf.patch
  - drop integrated 0001-Resolves-rhbz-800272-complain-about-unknown-command-.patch
  - drop integrated 0001-Resolves-rhbz-806663-SlideshowImpl-can-outlive-SdMod.patch
  - drop integrated 0001-desktop-do-not-complain-about-soffice-command-line-o.patch
  - drop integrated 0001-Resolves-fdo-48096-torn-off-popups-trigger-keyboard-.patch
  - drop integrated 0001-fdo-38088-better-CSV-import-default-separators.patch
  - drop integrated 0001-save-register-arguments-first.patch
  - drop integrated 0001-do-not-let-gcc-use-registers-we-are-setting-ourselve.patch
  - drop integrated 0001-wrong-types-used-here-breaks-64bit-bigendian.patch
  - drop integrated 0001-Resolves-rhbz-805743-a11y-call-doShow-after-we-have-.patch
  - drop integrated 0001-Resolves-fdo-49849-implement-Unicode-6.1-hebrew-line.patch
  - drop integrated 0001-use-ure-instead-of-ure-link.patch
  - drop broken 0001-fix-setting-of-paper-tray-from-print-dialog-fdo-4393.patch


author: Caolán McNamara <caolanm@redhat.com> - 1:3.6.1.1-2
changelog:
  - Resolves: rhbz#846775 Clipboard must be disposed before selection
  - Resolves: rhbz#842292 crash in scrolling multiselection in draw


author: Caolán McNamara <caolanm@redhat.com> - 1:3.6.1.2-2
changelog:
  - Related: rhbz#850709 hunspell en-US available standalone so
    make English langpack require hunspell-en and core just
    bare bones hunspell-en-US


author: Caolán McNamara <caolanm@redhat.com> - 1:3.6.3.1-1
changelog:
  - 3.6.3 rc1
  - drop integrated 0001-Resolves-rhbz-855972-crash-on-switching-to-outline-v.patch
  - drop integrated 0001-fdo-52022-Simple-LargeControlPoints-actually-can-hav.patch
  - drop integrated 0001-fdo-46071-Do-not-hide-windows-based-on-nil-Visible-p.patch


author: Caolán McNamara <caolanm@redhat.com> - 1:4.0.0.3-5
changelog:
  - make evolution 3.6 work with address book
  - Resolves: rhbz#910176 cannot select directory with gtk folder picker
  - fixes for building against Boost 1.53.0


author: Eike Rathke <erack@redhat.com> - 1:4.0.0.3-8
changelog:
  - do not access vector elements beyond size, rhbz#847519 related
  - Resolves: rhbz#742780 let make OPT_FLAGS=... override SDK flags
  - Resolves: rhbz#907933 crash on removing second last para


author: Caolán McNamara <caolanm@redhat.com> - 1:4.0.1.2-2
changelog:
  - Related: rhbz#902884 check for NULL GetSelectedMasterPage
  - Resolves: fdo#61241 force area page to size itself
  - Resolves: fdo#61656 use order and orientation combobox
  - Resolves: fdo#56031 RSID attr changes drop content changes


author: Caolán McNamara <caolanm@redhat.com> - 1:4.1.0.0-5.beta1
changelog:
  - Resolves: rhbz#968892 block entire grapheme together for glyph fallback
  - Related: rhbz#968892 discard impossible languages for glyph fallback


author: David Tardon <dtardon@redhat.com> - 1:4.1.0.0-9.beta2
changelog:
  - Resolves: rhbz#971321 failing tests on ppc and s390
  - Resolves: rhbz#974062 incorrect rendering of text in outline blocks in
    Impress


author: Stephan Bergmann <sbergman@redhat.com> - 1:4.1.0.4-5
changelog:
  - Resolves: rhbz#989246 Honor user's JavaDriverClass override in mysql driver
  - Resolves: fdo#67045 fix several nasty screen selection issues


author: David Tardon <dtardon@redhat.com> - 1:4.1.1.2-1
changelog:
  - 4.1.1 rc2
  - Related: rhbz#895690 Always try to do a mount when opening a file via GIO
  - Resolves: rhbz#998136 wrong index to gWidgetData
  - Resolves: rhbz#998046 store last size/position of the base windows


author: Caolán McNamara <caolanm@redhat.com> - 1:4.1.2.3-2
changelog:
  - Resolves: rhbz#1013480 crash in EditLineList::operator[]
  - Resolves: rhbz#1014010 crash on start up
  - Resolves: rhbz#1013844 encrypted OOo 1.0 files don't reopen


author: Caolán McNamara <caolanm@redhat.com> - 1:4.1.2.3-3
changelog:
  - Resolves: rhbz#1015281 crash on clicking custom animation
  - Resolves: rhbz#996162 crash with no bullet font


author: Caolán McNamara <caolanm@redhat.com> - 1:4.1.2.3-4
changelog:
  - Resolves: rhbz#1001768: fix various a11y deadlocks and crashes
  - Resolves: rhbz#1016022 fix cut from impress and paste to writer
  - Resolves: rhbz#1003179 fix AUTOFMT related crashes in Writer Undo


author: Caolán McNamara <caolanm@redhat.com> - 1:4.1.3.1-2
changelog:
  - Resolves: rhbz#1020712 wrong default CTL font shown in editengine
  - Resolves: rhbz#919070 display -1 means span all screens


author: Stephan Bergmann <sbergman@redhat.com> - 1:4.1.3.2-2
changelog:
  - Resolves: fdo#67725 unoidl::AggregatingCursor must wrap modules for aggregation
  - Resolves: rhbz#1021915 force menubar menus to be up/down only
  - Resolves: rhbz#1025201 Incorrect rendering of Devanagari short i


author: Stephan Bergmann <sbergman@redhat.com> - 1:4.1.3.2-5
changelog:
  - Resolves: rhbz#1031989 Accept --pt in addition to deprecated -pt
  - Related: rhbz#1014990 valgrind reports uninitialized variables


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.0.0-2.beta2
changelog:
  - update to 4.2.0 beta2
  - Related: rhbz#1032774 bodge around reported NULL
  - Resolves: rhbz#1035092 no shortcut key for Italian 'Tools' menu
  - Resolves: rhbz#912529 Kerkis SmallCaps shown instead of Kerkis Regular
  - Resolves: rhbz#1038189 refresh printer list when print dialog launched
  - openssl no longer required to build


author: David Tardon <dtardon@redhat.com> - 1:4.2.0.4-2
changelog:
  - split LibreLogo into a separate subpackage
  - create a metapackage depending on all subpackages containing filters,
    for use of packages like unoconv


author: David Tardon <dtardon@redhat.com> - 1:4.2.0.4-3
changelog:
  - Resolves: rhbz#1017379 libreoffice impress imports animated motion paths
    incorrectly from powerpoint
  - Resolves: fdo#33852 Custom animation (Motionpath Left) isn't being
    imported correctly from .ppt


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.2.1-5
changelog:
  - Related: rhbz#1065807 wizards should find the right wizards subdir
    of Template_internal, who knew this stuff was so fragile


author: Michael Stahl <mstahl@redhat.com> - 1:4.2.2.1-6
changelog:
  - Resolves: rhbz#988516: DOCX import: fix context stack when importing header
  - Resolves: rhbz#1072553: Fix deselection problems of template view
  - Resolves: rhbz#1072607: fix crash in SvxRuler::MouseMove()
  - Resolves: rhbz#1043551: sw: avoid division-by-0 in Text Grid painting code
  - RTF import: import field parameters
  - RTF import: fix spurious page breaks at doc end


author: David Tardon <dtardon@redhat.com> - 1:4.2.3.2-2
changelog:
  - Resolves: rhbz#1080196 mdds/multi_type_vector_itr.hpp update_node():
    soffice.bin killed by SIGSEGV


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.3.3-2
changelog:
  - Resolves: rhbz#1081176 don't jump to cursor pos when we don't want to
  - Related: rhbz#1085916 kde startup woes


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.1-2
changelog:
  - every 2nd print job is incorrectly flagged as failed
  - Related: rhbz#1088625 PresenterPaintManager seen as NULL


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.1-3
changelog:
  - sometimes tables in impress don't resize when adding rows
  - Resolves: fdo#71423 crash while editing Impress tables


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.1-6
changelog:
  - Resolves: fdo#37130 use 10pt Default style font for comments
  - Resolves: fdo#60040 crash after undoing master page
  - vertically center printout when including comments


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.2-6
changelog:
  - center current slide after changing zoom
  - add a status bar icon to fit slide to window
  - Related: fdo#50697 reset the cache timeout on GetGraphic


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.2-9
changelog:
  - Resolves: rhbz#1096486 avoid access to nonexisting parent
  - Resolves: rhbz#1096295 hard to distinguish slides in slide pane


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.2-14
changelog:
  - render smart-art with a vector format so it can be scaled nicely
  - fix leak on pasting metafiles into office
  - fix leak on pasting draw items into office
  - fix another leak on scaling metric items


author: David Tardon <dtardon@redhat.com> - 1:4.3.0.0-9.beta2
changelog:
  - Resolves: rhbz#1105376 FlatODF import/export does not work unless
    libreoffice-xsltfilter is installed


author: Caolán McNamara <caolanm@redhat.com> - 1:4.3.1.1-6
changelog:
  - Resolves: rhbz#1131425 move libjawt-using office bean into a subpackage
  - Resolves: rhbz#1125588 port LibreOffice to ppc64le


author: Caolán McNamara <caolanm@redhat.com> - 1:4.3.2.2-2
changelog:
  - make brochure printing of impress/draw work out of the box
  - Resolves: rhbz#1133863 fix looping layout


author: Caolán McNamara <caolanm@redhat.com> - 1:4.3.3.2-4
changelog:
  - Resolves: fdo#60712 Inherits cell styles in inserting rows/columns
  - implement toggling off removeable master elements with delete
  - Resolves: fdo#78151 change underlying style on toggling bullets on/off in master view


author: Caolán McNamara <caolanm@redhat.com> - 1:4.3.4.1-5
changelog:
  - Resolves: rhbz#1164551 we want to ensure that a libjvm.so is available
    but we have no firm interest in which one that is


author: David Tardon <dtardon@redhat.com> - 1:4.4.0.2-2
changelog:
  - Resolves: rhbz#1180114 writerfilter: don't crash on w:customXmlDelRangeStart
    etc.
  - Resolves: rhbz#1175027 fix life cycle of SwConnectionDisposedListener_Impl


author: Stephan Bergmann <sbergman@redhat.com> - 1:4.4.2.2-3
changelog:
  - Resolves: rhbz#1197614 crash when updating extension
  - Resolves: rhbz#1134285 redundant user/password request for WebDAV access


author: Bastien Nocera <bnocera@redhat.com> 1:5.1.0.1-2
changelog:
  - Add GLSL files missing from the package
  - Split up inclusion of latin Serbian files to avoid duplicate listing


author: David Tardon <dtardon@redhat.com> - 1:5.1.0.3-1
changelog:
  - update to 5.1.0 rc3
  - Resolves: rhbz#1168757 Selecting multiple slides is not reflected in Print
    dialog


author: David Tardon <dtardon@redhat.com> - 1:5.1.2.1-1
changelog:
  - update to 5.1.2 rc1
  - split VCL plugins into subpackages
  - rename libreoffice-kde to libreoffice-kde4
  - only recommend fonts
  - remove hard dependency on English spell checker and auto-correction
    rules
  - disable quickstarter
  - move icons and other system-integration stuff to a noarch subpackage
  - disable browser plugin in preparation for its removal in 5.2


author: David Tardon <dtardon@redhat.com> - 1:5.2.0.1-1
changelog:
  - update to 5.1.0 rc1
  - Resolves: rhbz#1343752 wrong radiobutton and checkbutton behavior in
    "view" menu
  - Resolves: rhbz#1349261 do not pull in all variants of english dicts


author: David Tardon <dtardon@redhat.com> - 1:5.2.1.2-2
changelog:
  - Resolves: rhbz#1247399 install public jars according to packaging guidelines
  - Resolves: rhbz#1363874 install LibreOfficeKit headers


author: Caolán McNamara <caolanm@redhat.com> - 1:5.2.2.1-3
changelog:
  - Related: rhbz#1373933 do less on style-updated
  - Related: rhbz#1353069 don't clear XATTR_FILL from in use styles


author: David Tardon <dtardon@redhat.com> - 1:6.0.0.0-1.alpha1
changelog:
  - update to 6.0.0 alpha1
  - update location of appdata files
  - use weak dependencies
  - mark bundled packages


author: Michael Stahl <mstahl@fedoraproject.org> - 1:6.0.0.2-3
changelog:
  - add lots of .abignore files to restrict abipkgdiff to shared objects
    that actually have a stable ABI


author: Stephan Bergmann <sbergman@redhat.com> - 1:6.0.3.2-4
changelog:
  - Resolves: rhbz#1568579 LibreOffice --headless zombie process
  - Related: rhbz#1569331 end should be in terms of unicode chars, not bytes


author: Rex Dieter <rdieter@fedoraproject.org> - 1:6.1.2-6
changelog:
  - -kf5 subpackage: include support for --enable-gtk3-kde5 (#1647233)
  - -kde4: adjust summary/description s/KDE/KDE4/


author: Caolán McNamara <caolanm@redhat.com> - 1:6.1.4.2-1
changelog:
  - latest version
  - Resolves: rhbz#1662616 crash in macro dialog editor
  - Resolves: rhbz#1662512 a11y freeze in calc


author: Caolán McNamara <caolanm@redhat.com> - 1:6.2.3.2-4
changelog:
  - Resolves: rhbz#1712823 crash in extended tooltips over pattern editor
  - Resolves: rhbz#1711143 calc not rounding time calculation correctly


author: Caolán McNamara <caolanm@redhat.com> - 1:6.2.3.2-5
changelog:
  - Resolves: rhbz#1713827 protect against null ViewShell
  - Resolves: rhbz#1713908 stop disabling firebird-sdbc


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.5.2-3
changelog:
  - Related: rhbz#1859588 workaround vcldemo ICE
  - add py_byte_compile call for
    https://fedoraproject.org/wiki/Changes/No_more_automagic_Python_bytecompilation_phase_3


author: Caolán McNamara <caolanm@redhat.com> - 1:6.4.5.2-6
changelog:
  - Resolves: rhbz#1745771
    + drop the GTK3-KF5 VCL plugin (formerly subpackage kf5)
    + rename the current -kde5 subpackage (the Qt5/KF5 VCL plugin) to -kf5


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.0.3-1
changelog:
  - bump to 7.1.0 series
  - drop integrated 0001-rhbz-1870501-crash-on-reexport-of-odg.patch
  - drop integrated 0001-rhbz-1882616-move-cursor-one-step-at-a-time-in-the-d.patch
  - drop integrated 0001-export-HYPERLINK-target-in-html-clipboard-export.patch
  - drop integrated 0001-gcc11.patch
  - drop integrated 0001-disable-tests-that-don-t-work-without-pdfium.patch
  - drop integrated 0001-rhbz-1913828-SfxViewFrame-Current-can-return-null.patch
  - drop integrated 0001-Upgrade-liborcus-to-0.16.0.patch


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.3.2-1
changelog:
  - Resolves: rhbz#1962262 Get rid of apache-commons-logging
  - Impress crashes on switch from commenting to slide sorter
  - fix assertion on avmedia volumne control
  - build libreoffice-langpack-fy for libreoffice
  - Adapt to "libstdc++: Implement LWG 1203 for rvalue iostreams"
  - Adapt to hamcrest-2.2-3.fc35.noarch.rpm
  - gtk3: workaround missing gdk_threads_enter calls in gio errordialog callback


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.4.2-3
changelog:
  - rhbz#1977653 drop unneeded bsh build-dependency
  - Remove unused DOCTYPE from odk/examples xcu file
  - drop bsh buildrequires in rhel


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.5.2-5
changelog:
  - replace use of ucpp with gcc cpp
  - Resolves: tdf#132739 two html style tags where there should be just one


author: yangxiaoxuan <yangxiaoxuan@openanolis.org> 1:7.1.8.1-12.0.1.1
changelog:
  - Add configuration file and vemdor for Anolis OS
  - Fit build on Anolis OS 8
  - Remove loongarch64 arch
  - skip failed tests for anolis
  - remove Esperanto
  - fix CVE-2023-6185 CVE-2023-6186 (wangkaiqiang@inspur.com)


author: Paul Wouters <pwouters@redhat.com> - 3.4-1
changelog:
  - Updated to 3.4, which only contains style changes to kernel coding style
  - IN MEMORIAM: June 3rd, 2013 Hugh Daniel


author: Paul Wouters <pwouters@redhat.com> - 3.5-2
changelog:
  - Added interop patch for (some?) Cisco VPN clients sending 16 zero
    bytes of extraneous IKE data
  - Removed fipscheck_version


author: Paul Wouters <pwouters@redhat.com> - 3.9-1
changelog:
  - Updated to 3.9. IKEv2 enhancements, ESP/IKE algo enhancements
  - Mark libreswan-fips.conf as config file
  - attr modifier for man pages no longer needed
  - BUGS file no longer exists upstream


author: Paul Wouters <pwouters@redhat.com> - 3.11-1
changelog:
  - Updated to 3.11 (many fixes, including startup fixes)
  - Resolves: rhbz#1144941 libreswan 3.10 upgrade breaks old ipsec.secrets configs
  - Resolves: rhbz#1147072 ikev1 aggr mode connection fails after libreswan upgrade
  - Resolves: rhbz#1144831 Libreswan appears to start with systemd before all the NICs are up and running


author: Paul Wouters <pwouters@redhat.com> - 3.15-1
changelog:
  - Updated to 3.15 (see http://download.libreswan.org/CHANGES)
  - Resolves: rhbz#CVE-2015-3240 IKE daemon restart when receiving a bad DH gx
  - NSS database creation moved from spec file to service file
  - Run CAVS tests on package build
  - Added BuildRequire systemd-units and xmlto
  - Bumped minimum required nss to 3.16.1
  - Install tmpfiles
  - Install sysctl file
  - Update doc files to include


author: Paul Wouters <pwouters@redhat.com> - 3.17-1
changelog:
  - Updated to 3.17 for CVE-2016-3071
  - Disable LIBCAP_NG as it prevents unbound-control from working properly
  - Temporarilly disable WERROR due to a few minor known issues


author: Paul Wouters <pwouters@redhat.com> - 3.18-1
changelog:
  - Updated to 3.18 for CVE-2016-5391 rhbz#1361164 and VTI support
  - Remove support for /etc/sysconfig/pluto (use native systemd instead)


author: Paul Wouters <pwouters@redhat.com> - 3.19-2
changelog:
  - Resolves: rhbz#1392191 libreswan: crash when OSX client connects
  - Improved uniqueid and session replacing support
  - Test Buffer warning fix on size_t
  - Re-introduce --configdir for backwards compatibility


author: Paul Wouters <pwouters@redhat.com> - 3.23-2
changelog:
  - Support crypto-policies package
  - Pull in some patches from upstream and IANA registry updates
  - gcc7 format-truncate fixes and workarounds


author: Paul Wouters <pwouters@redhat.com> - 3.25-3
changelog:
  - Cleanup shebangs for python3
  - Use the same options via macro for make programs and make install
  - Remove old ifdefs
  - Sync up patches to new upstream version
  - Add Requires: for unbound-libs >= 1.6.6
  - Enable crypto-policies support
  - Make rundir world readable for easier permission granting for socket


author: Paul Wouters <pwouters@redhat.com> - 3.26-1
changelog:
  - Resolves: rhbz#1566574 Rebase to libreswan 3.26
  - Resolves: rhbz#1527037 libreswan IPSEC implementation: should follow the policies of system-wide crypto policy
  - Resolves: rhbz#1375779 [IKEv2 Conformance] Test IKEv2.EN.R.1.1.6.7: Sending INVALID_KE_PAYLOAD failed
  - Resolves: rhbz#1085758 [TAHI][IKEv2] IKEv2.EN.I.1.2.1.1: Can't observe CREATE_CHILD_SA request for rekey
  - Resolves: rhbz#1053048 [TAHI][IKEv2] IKEv2.EN.I.1.2.4.1-7: libreswan doesn't sent CREATE_CHILD_SA after IKE_SA Lifetime timeout


author: Paul Wouters <pwouters@redhat.com> - 3.27-2
changelog:
  - Resolves: rhbz#1645137 Libreswan segfaults when it loads configuration file with more then 5 connections


author: Paul Wouters <pwouters@redhat.com> - 3.27-3
changelog:
  - Resolves: rhbz#1648776 limit connections to be ikev1only or ikev2only and make ikev2only the default


author: Paul Wouters <pwouters@redhat.com> - 3.27-4
changelog:
  - Resolves: rhbz#1657846 libreswan no longer needs to provide openswan in rhel8
  - Resolves: rhbz#1643388 libreswan: Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth
  - Resolves: rhbz#1657854 remove userland support for deprecated KLIPS IPsec stack support


author: Paul Wouters <pwouters@redhat.com> - 3.27-5
changelog:
  - Resolves: rhbz#1664522 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are >= 3072 bits


author: Paul Wouters <pwouters@redhat.com> - 3.27-6
changelog:
  - Resolves: rhbz#1668342 SELinux prevents libreswan from using some outbound ports causing DNS resolution failures at connection at load time


author: Paul Wouters <pwouters@redhat.com> - 3.27-7
changelog:
  - Resolves: rhbz#1671793 proessing ISAKMP_NEXT_D with additional payloads causes dangling pointer to deleted state


author: Paul Wouters <pwouters@redhat.com> - 3.27-9
changelog:
  - Resolves: rhbz#1648776 limit connections to be ikev1only or ikev2only and make ikev2only the default [man page update]


author: Paul Wouters <pwouters@redhat.com> - 3.28-1
changelog:
  - Resolves: rhbz#1712555 libreswan rebase to 3.28
  - Resolves: rhbz#1683706 Libreswan shows incorrect error messages
  - Resolves: rhbz#1706180 Remove last usage of old (unused) PF_KEY API
  - Resolves: rhbz#1677045 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart
  - Resolves: rhbz#1686990 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE
  - Resolves: rhbz#1608353 /usr/sbin/ipsec part of the libreswan packages still invokes commands that were deprecated a decade ago
  - Resolves: rhbz#1699318 'ipsec show' has python3 invalid syntax
  - Resolves: rhbz#1679394 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure


author: Paul Wouters <pwouters@redhat.com> - 3.29-2
changelog:
  - Resolves: rhbz#1723957 libreswan is missing linux audit calls for failed IKE SAs and failed IPsec SAs required for Common Criteria


author: Paul Wouters <pwouters@redhat.com> - 3.29-3
changelog:
  - Resolves: rhbz#1725205 XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire


author: Paul Wouters <pwouters@redhat.com> - 3.29-6
changelog:
  - Resolves: rhbz#1714331 support NSS based IKE KDF's [require updated nss for rhbz 1738689, memleak fix]


author: Paul Wouters <pwouters@redhat.com> - 3.32-1
changelog:
  - Resolves: rhbz#1820206 Rebase to libreswan 3.32
  - Resolves: rhbz#1816265 Use NSS to check whether FIPS mode is enabled
  - Resolves: rhbz#1826337 libreswan in FIPS mode rejects ECDSA keys based on faulty RSA key size check being applied


author: Paul Wouters <pwouters@redhat.com> - 3.32-3
changelog:
  - Resolves: rhbz#1842597 regression: libreswan does not send PLUTO_BYTES env variables to updown script
  - Resolves: rhbz#1847766 subsequent xfrmi interfaces configured outside of libreswan are not recognised properly
  - Resolves: rhbz#1840212 protect libreswan against unannounced nss ABI change


author: Paul Wouters <pwouters@redhat.com> - 4.1-1
changelog:
  - Resolves: rhbz#1891128 [Rebase] rebase libreswan to 4.1
  - Resolves: rhbz#1889836 libreswan: add 3.x compat patches for obsoleted/removed keywords of 4.0 and re-port ikev2= patch


author: Paul Wouters <pwouters@redhat.com> - 4.2-1
changelog:
  - Resolves: rhbz#1891128 [Rebase] rebase libreswan to 4.2
  - Resolves: rhbz#1025061 - IKEv2 support for Labeled IPsec


author: Paul Wouters <pwouters@redhat.com> - 4.3-3
changelog:
  - Resolves: rhbz#1933064 - IKEv2 support for Labeled IPsec
  - Resolves: rhbz#1935150 RFE: Support IKE and ESP over TCP: RFC 8229
  - Resolves: rhbz#1935339 virtual_private setting is missing in the default config


author: Daiki Ueno <dueno@redhat.com> - 4.4-1
changelog:
  - Resolves: rhbz#1958968 Rebase libreswan to 4.4
  - Resolves: rhbz#1954423 Libreswan: TS_UNACCEPTABLE on multiple connections between the same peers


author: Daiki Ueno <dueno@redhat.com> - 4.5-1
changelog:
  - Resolves: rhbz#2017352 Rebase libreswan to 4.5
  - Resolves: rhbz#2036903 ikev1: disable diagnostics logging on receiving malformed packets


author: Daiki Ueno <dueno@redhat.com> - 4.9-1
changelog:
  - Resolves: rhbz#2128672 Rebase libreswan to 4.9
  - Remove libreswan-4.4-ikev1-disable-diagnostics.patch no longer necessary


author: Sahana Prasad <sahana@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-30570 Malicious IKEv1 Aggressive Mode packets can crash libreswan
  - Resolves: rhbz#2187179


author: Sergio Durigan Junior <sergiodj@redhat.com> - 0.0.4-12
changelog:
  - Resolves: rhbz#1786466 Do not use %{?_isa} for GDB dependency. Recommend
    GDB, instead of requiring it.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Put changelog at the end
  - Move .so files to devel subpackage
  - Don't mess with ld.so.conf
  - Don't use %{prefix}, this isn't a relocatable package
  - Don't define a bad docdir
  - Add BuildRequires
  - Use %{_tmppath}
  - Don't define name, version etc. on top of the file (why 
    do so many do that?)
  - s/Copyright/License/


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Add a patch that moves the includes to librsvg-1/librsvg
  - in preparation for a later librsvg 2 library.


author: Dan Williams <dcbw@redhat.com> - 2.6.4-7
changelog:
  - Fix usage of "%{_bindir}/update-gdk-pixbuf-loaders %{_host}" 
    to point to right place and architecture


author: Matthias Clasen <mclasen@redhat.com> - 2.8.1-2
changelog:
  - Must use the same rpm macro for the host triplet as the
    gtk2 package, otherwise things can fall apart.  (#137676)


author: Matthias Clasen <mclasen@redhat.com> - 2.31.0-0.1.20100628git
changelog:
  - Update to a git snapshot that builds against standalone gdk-pixbuf
  - Drop librsvg3 package
  - Drop svg theme engine


author: Adam Tkac <atkac redhat com> - 2.31.0-0.3.20100628git
changelog:
  - fix crash in rsvg-gobject.c:instance_dispose function
    (https://bugzilla.gnome.org/show_bug.cgi?id=623383)


author: Hans de Goede <hdegoede@redhat.com> - 2.35.0-3
changelog:
  - Fix including rsvg.h always causing a deprecated warning, as this breaks
    apps compiling with -Werror


author: David King <amigadave@amigadave.com> - 2.40.7-1
changelog:
  - Update to 2.40.7
  - Use license macro for COPYING and COPYING.LIB
  - Use pkgconfig for BuildRequires
  - Add URL


author: Weitao Zhou <zhouwt@linux.alibaba.com> 2.50.7-3.0.1
changelog:
  - Add git as build requirement for autosetup
  - Support loongarch64 build (geliwei@openanolis.org)
  - fix build error for loongarch64 (zhangwenlong@loongson.cn)
  - support sw_64 vendored build. (Weisson@linux.alibaba.com)


author: Nils Philippsen <nils@tiptoe.de> - 0.1.9-1
changelog:
  - version 0.1.9
  - change license to BSD (2-clause)
  - require gcc, alsa-lib-devel, fftw-devel for building


author: Paul Moore <pmoore@redhat.com> - 1.0.0-0
changelog:
  - New upstream version
  - Remove verbose build patch as it is no longer needed
  - Enable _smp_mflags during build stage


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Update to latest from NSA
  - Add fix to only get old path if file_context file exists in old location


author: Dan Walsh <dwalsh@redhat.com> 1.17.1-1
changelog:
  - Latest from NSA
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.2-1
changelog:
  - Add matchpathcon man page
  - Latest from NSA
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.5-1
changelog:
  - Update from NSA
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Add strcasecmp in selinux_config
  - Update from NSA
  	* Changed avc_has_perm_noaudit to not fail on netlink errors.
  	* Changed avc netlink code to check pid based on patch by Steve Grubb.
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.14-1
changelog:
  - Upgrade to latest  from NSA
  	* Merged setenforce and removable context patch from Dan Walsh.
  	* Merged build fix for alpha from Ulrich Drepper.
  	* Removed copyright/license from selinux_netlink.h - definitions only.


author: Steve Grubb <sgrubb@redhat.com> 1.18.1-2
changelog:
  - Add patch to make setsebool update bool on disk
  - Make togglesebool have a rollback capability in case it blows up inflight


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Upgrade to upstream
  	* Removed some trivial utils that were not useful or redundant.
  	* Changed BINDIR default to /usr/sbin to match change in Fedora.
  	* Added security_compute_member.
  	* Added man page for setcon.


author: Dan Walsh <dwalsh@redhat.com> 1.19.4-1
changelog:
  - Update to latest from upstream
  	* Changed matchpathcon to return -1 with errno ENOENT for 
  	  <<none>> entries, and also for an empty file_contexts configuration.


author: Dan Walsh <dwalsh@redhat.com> 1.21.4-1
changelog:
  - Update from NSA
  	* Prevent overflow of spec array in matchpathcon.
  	* Fixed several uses of internal functions to avoid relocations.
  	* Changed rpm_execcon to check is_selinux_enabled() and fallback to
  	  a regular execve if not enabled (or unable to determine due to a lack
  	  of /proc, e.g. chroot'd environment).


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Update from NSA
  	* Generalized matchpathcon internals, exported more interfaces,
  	  and moved additional code from setfiles into libselinux so that
  	  setfiles can directly use matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-1
changelog:
  - Update from NSA
  	* Modified avc_dump_av to explicitly check for any permissions that
  	  cannot be mapped to string names and display them as a hex value.
  	* Regenerated av_permissions.h.


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - Update from NSA
  	* Merged matchpathcon patch for file_contexts.homedir from Dan Walsh.
  	* Added selinux_users_path() for path to directory containing
  	  system.users and local.users.


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update from NSA
  	* Added set_matchpathcon_flags() function for setting flags
  	  controlling operation of matchpathcon.  MATCHPATHCON_BASEONLY
  	  means only process the base file_contexts file, not 
  	  file_contexts.homedirs or file_contexts.local, and is for use by
  	  setfiles -c.
  	* Updated matchpathcon.3 man page.


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update from NSA
  	* Merged fix for set_matchpathcon* functions from Andreas Steinmetz.
  	* Merged fix for getconlist utility from Andreas Steinmetz.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update from NSA
  	* Merged set_selinuxmnt patch from Bill Nottingham (Red Hat).
  	* Rewrote get_ordered_context_list and helpers, including
  	  changing logic to allow variable MLS fields.


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update from NSA
  	* Merged avcstat and selinux man page from Dan Walsh.
  	* Changed security_load_booleans to process booleans.local 
  	  even if booleans file doesn't exist.


author: Dan Walsh <dwalsh@redhat.com> 1.25.2-1
changelog:
  - Update from NSA
  	* Merged several fixes for error handling paths in the
  	  AVC sidtab, matchpathcon, booleans, context, and get_context_list
  	  code from Serge Hallyn (IBM). Bugs found by Coverity.
  	* Removed setupns; migrated to pam.
  	* Merged patches to rename checkPasswdAccess() from Joshua Brindle.
  	  Original symbol is temporarily retained for compatibility until 
  	  all callers are updated.


author: Dan Walsh <dwalsh@redhat.com> 1.25.4-1
changelog:
  - Update from NSA
  	* Hid translation-related symbols entirely and ensured that 
  	raw functions have hidden definitions for internal use.
  	* Allowed setting NULL via context_set* functions.
  	* Allowed whitespace in MLS component of context.
  	* Changed rpm_execcon to use translated functions to workaround
  	lack of MLS level on upgraded systems.


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update from NSA
  	* Added public functions to export context translation to
  	users of libselinux (selinux_trans_to_raw_context,
  	selinux_raw_to_trans_context).


author: Dan Walsh <dwalsh@redhat.com> 1.25.7-1
changelog:
  - Update from NSA
  	* Merged modified form of patch to avoid dlopen/dlclose by
  	the static libselinux from Dan Walsh.  Users of the static libselinux
  	will not have any context translation by default.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to not require (and ignore if present)
  	the MLS level in seusers.conf if MLS is disabled, setting *level
  	to NULL in this case.


author: Dan Walsh <dwalsh@redhat.com> 1.27.4-1
changelog:
  - Update to latest from NSA
  	* Merged fix for matchpathcon (regcomp error checking) from Johan
  	Fischer.  Also added use of regerror to obtain the error string
  	for inclusion in the error message.


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to latest from NSA
  	* Added selinux_init_load_policy() function as an even higher level
  	interface for the initial policy load by /sbin/init.  This obsoletes
  	the load_policy() function in the sysvinit-selinux.patch. 
  	* Added selinux_mkload_policy() function as a higher level interface
  	for loading policy than the security_load_policy() interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to fall back to the Linux username and
  	NULL level if seusers config file doesn't exist unless 
  	REQUIRESEUSERS=1 is set in /etc/selinux/config.
  	* Moved seusers.conf under $SELINUXTYPE and renamed to seusers.


author: Dan Walsh <dwalsh@redhat.com> 1.27.9-1
changelog:
  - Update to latest from NSA
  	* Changed selinux_mkload_policy to try downgrading the
  	latest policy version available to the kernel-supported version.
  	* Changed selinux_mkload_policy to fall back to the maximum
  	policy version supported by libsepol if the kernel policy version
  	falls outside of the supported range.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to latest from NSA
  	* Merged get_default_context_with_rolelevel and man pages from
  	  Dan Walsh (Red Hat).
  	* Updated call to sepol_policydb_to_image for sepol changes.
  	* Changed getseuserbyname to ignore empty lines and to handle
  	no matching entry in the same manner as no seusers file.


author: Dan Walsh <dwalsh@redhat.com> 1.27.14-1
changelog:
  - Update to latest from NSA
  	* Merged selinux_path() and selinux_homedir_context_path()
  	  functions from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to latest from NSA
  	* Merged seusers parser changes from Ivan Gyurdiev.
  	* Merged setsebool to libsemanage patch from Ivan Gyurdiev.
  	* Changed seusers parser to reject empty fields.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to latest from NSA
  	* Added security_canonicalize_context() interface and
  	  set_matchpathcon_canoncon() interface for obtaining
  	  canonical contexts.  Changed matchpathcon internals
  	  to obtain canonical contexts by default.  Provided
  	  fallback for kernels that lack extended selinuxfs context
  	  interface.
  - Patch to not translate mls when calling setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.27.21-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags()
  	  and modified matchpathcon_init() to skip context translation
  	  if it is set by the caller.


author: Dan Walsh <dwalsh@redhat.com> 1.27.22-1
changelog:
  - Update to latest from NSA
  	* Merged make failure in rpm_execcon non-fatal in permissive mode
  	  patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.25-1
changelog:
  - Update to latest from NSA
  	* Added -f file_contexts option to matchpathcon util.
  	  Fixed warning message in matchpathcon_init().
  	* Merged Makefile python definitions patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and
  	  modified matchpathcon implementation to make context validation/
  	  canonicalization optional at matchpathcon_init time, deferring it
  	  to a successful matchpathcon by default unless the new flag is set
  	  by the caller.
  	* Added matchpathcon_init_prefix() interface, and
  	  reworked matchpathcon implementation to support selective
  	  loading of file contexts entries based on prefix matching
  	  between the pathname regex stems and the specified path
  	  prefix (stem must be a prefix of the specified path prefix).


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Upgrade to latest from NSA
  	* Merged call to finish_context_translations from Dan Walsh.
  	  This eliminates a memory leak from failing to release memory
  	  allocated by libsetrans.


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Upgrade to latest from NSA
  	* Merged several fixes and improvements from Ulrich Drepper
  	  (Red Hat), including:
  	  - corrected use of getline
  	  - further calls to __fsetlocking for local files
  	  - use of strdupa and asprintf
  	  - proper handling of dirent in booleans code
  	  - use of -z relro
  	  - several other optimizations
  	* Merged getpidcon python wrapper from Dan Walsh (Red Hat).


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Upgrade to latest from NSA
  	* Added format attribute to myprintf in matchpathcon.c and
  	  removed obsoleted rootlen variable in init_selinux_config().


author: Dan Walsh <dwalsh@redhat.com> 1.30-1
changelog:
  - Make some fixes so it will build on RHEL4
  - Upgrade to latest from NSA
  	* Updated version for release.
  	* Altered rpm_execcon fallback logic for permissive mode to also
  	  handle case where /selinux/enforce is not available.


author: Dan Walsh <dwalsh@redhat.com> 1.30.3-1
changelog:
  - Upgrade to latest from NSA
  	* Added distclean target to Makefile.
  	* Regenerated swig files.
  	* Changed matchpathcon_init to verify that the spec file is
  	  a regular file.
  	* Merged python binding t_output_helper removal patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged fix warnings patch from Karl MacMillan.	
  	* Merged setrans client support from Dan Walsh.
  	  This removes use of libsetrans.
  	* Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh.
  	* Merged swig typemap fixes from Glauber de Oliveira Costa.


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Upgrade to latest from NSA
  	* Merged getfscreatecon man page fix from Dan Walsh.
  	* Updated booleans(8) man page to drop references to the old
  	  booleans file and to note that setsebool can be used to set
  	  the boot-time defaults via -P.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - More fixes for translation cache
  - Upgrade to latest from NSA
  	* Added matchpathcon_fini() function to free memory allocated by
  	  matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Upgrade to latest from NSA
  	* Merged simple setrans client cache from Dan Walsh.
  	  Merged avcstat patch from Russell Coker.
  	* Modified selinux_mkload_policy() to also set /selinux/compat_net
  	  appropriately for the loaded policy.


author: Dan Walsh <dwalsh@redhat.com> 1.30.15-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch from Dan Walsh with:
  	* Added selinux_getpolicytype() function.
  	* Modified setrans code to skip processing if !mls_enabled.
  	* Set errno in the !selinux_mnt case.
  	* Allocate large buffers from the heap, not on stack.
  	  Affects is_context_customizable, selinux_init_load_policy,
  	  and selinux_getenforcemode.


author: Dan Walsh <dwalsh@redhat.com> 1.30.19-1
changelog:
  - Upgrade to latest from NSA
  	* Lindent.
  	* Merged {get,set}procattrcon patch set from Eric Paris.
  	* Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris.
  	* Regenerated Flask headers from refpolicy.
  	* Merged patch from Dan Walsh with:
  	  - Added selinux_file_context_{cmp,verify}.
  	  - Added selinux_lsetfilecon_default.
  	  - Delay translation of contexts in matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.22-1
changelog:
  - Upgrade to latest from NSA
  	* Merged no-tls-direct-seg-refs patch from Jeremy Katz.
  	* Merged netfilter_contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.24-1
changelog:
  - Upgrade to latest from NSA
  	* Merged return value fix for *getfilecon() from Dan Walsh.
  	* Merged sockcreate interfaces from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.25-1
changelog:
  - Upgrade to latest from NSA
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.
  	* Rework functions that access /proc/pid/attr to access the
  	  per-thread nodes, and unify the code to simplify maintenance.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.27-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch to not log avc stats upon a reset from Steve Grubb.
  	* Applied patch to revert compat_net setting upon policy load.
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.29-1
changelog:
  - Upgrade to latest from NSA
  	* Merged av_permissions.h update from Steve Grubb,
  	  adding setsockcreate and polmatch definitions.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-1
changelog:
  - Upgrade to latest from NSA
  	* Merged updated flask definitions from Darrel Goeddel.
   	  This adds the context security class, and also adds
  	  the string definitions for setsockcreate and polmatch.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-2
changelog:
  - Add James Antill patch for login verification of MLS Levels
  -  MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.3-1
changelog:
  - Upgrade to upstream
  	* Merged patch for matchpathcon utility to use file mode information
  	  when available from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-1
changelog:
  - Upstream wanted some minor changes, upgrading to keep api the same
  - Upgrade to upstream
  	* Merged selinux_check_securetty_context() and support from Dan Walsh.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
changelog:
  - Merged patch from Todd Miller to remove sscanf in matchpathcon.c because
    of the use of the non-standard format (original patch changed
    for style).
  - Merged patch from Todd Miller to fix memory leak in matchpathcon.c.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
changelog:
  - Upgrade to upstream
  	* Removed sending of setrans init message.
  	* Merged matchpathcon memory leak fix from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.5-1
changelog:
  - Upgrade to upstream
  	* Merged init_selinuxmnt() and is_selinux_enabled() improvements from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.7-1
changelog:
  - Merged patch to drop support for CACHETRANS=0 config option from Steve Grubb.
  - Merged patch to drop support for old /etc/sysconfig/selinux and
  - /etc/security policy file layout from Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
changelog:
  - Upgrade to upstream
  	* Merged class/av string conversion and avc_compute_create patch from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Upgrade to upstream
  	* Merged userspace AVC patch to follow kernel's behavior for permissive mode in caching previous denials from Eamon Walsh.
  	* Merged sidput(NULL) patch from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.13-1
changelog:
  - Upgrade to upstream
  	* Merged rpm_execcon python binding fix, matchpathcon man page fix, and getsebool -a handling for EACCES from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Upgrade to upstream
  	* Merged additional swig python bindings from Dan Walsh.
  	* Merged helpful message when selinuxfs mount fails patch from Dax Kelson.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Upgrade to upstream
  - Merged patch to reduce size of libselinux and remove need for libsepol for embedded systems from Yuichi Nakamura.
   This patch also turns the link-time dependency on libsepol into a runtime (dlopen) dependency even in the non-embedded case.

  2.0.17 2007-05-31
  	* Updated Lindent script and reindented two header files.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.21-1
changelog:
  - Upgrade to upstream
  	* Class and permission mapping support patches from Eamon Walsh.
  	* Object class discovery support patches from Chris PeBenito.
  	* Refactoring and errno support in string representation code.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.29-1
changelog:
  - Upgrade to upstream
  	* Updated version for stable branch.	
  	* Added x_contexts path function patch from Eamon Walsh.
  	* Fix build for EMBEDDED=y from Yuichi Nakamura.
  	* Fix markup problems in selinux man pages from Dan Walsh.
  	* Updated av_permissions.h and flask.h to include new nscd permissions from Dan Walsh.
  	* Added swigify to top-level Makefile from Dan Walsh.
  	* Fix for string_to_security_class segfault on x86_64 from Stephen
  	  Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.30-1
changelog:
  - Move libselinux.so into devel package
  - Upgrade to upstream
  	* Fix segfault resulting from uninitialized print-callback pointer.
  	* Added x_contexts path function patch from Eamon Walsh.
  	* Fix build for EMBEDDED=y from Yuichi Nakamura.
  	* Fix markup problems in selinux man pages from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.33-1
changelog:
  - Upgrade to latest from NSA
  	* Re-map a getxattr return value of 0 to a getfilecon return value of -1 with errno EOPNOTSUPP from Stephen Smalley.
  	* Fall back to the compat code for security_class_to_string and security_av_perm_to_string from Stephen Smalley.
  	* Fix swig binding for rpm_execcon from James Athey.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.35-1
changelog:
  - Upgrade to upstream
  	* Make netlink socket close-on-exec to avoid descriptor leakage from Dan Walsh.
  	* Pass CFLAGS when using gcc for linking from Dennis Gilmore.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
changelog:
  - Upgrade to upstream
  	* Merged selinux_get_callback, avc_open, empty string mapping from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.40-1
changelog:
  - Upgrade to upstream
  	* Merged refactored AVC netlink code from Eamon Walsh.
  	* Merged new X label namespaces from Eamon Walsh.
  	* Bux fix and minor refactoring in string representation code.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.42-1
changelog:
  - Upgrade to upstream
  	* AVC enforcing mode override patch from Eamon Walsh.
  	* Aligned attributes in AVC netlink code from Eamon Walsh.
  - Move libselinux.so back into devel package, procps has been fixed


author: Dan Walsh <dwalsh@redhat.com> - 2.0.45-1
changelog:
  - Upgrade to upstream
  	* dlopen libsepol.so.1 rather than libsepol.so from Stephen Smalley.
  	* Based on a suggestion from Ulrich Drepper, defer regex compilation until we have a stem match, by Stephen Smalley.
  	*  A further optimization would be to defer regex compilation until we have a complete match of the constant prefix of the regex - TBD.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.47-1
changelog:
  - Fix memory references in audit2why and change to use tuples
  - Update to Upstream
  	* Fix for the avc:  granted null message bug from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.52-1
changelog:
  - Update to Upstream
  	* Disable setlocaldefs if no local boolean or users files are present from Stephen Smalley.
  	* Skip userspace preservebools processing for Linux >= 2.6.22 from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.55-1
changelog:
  - Update to Upstream
  	* Merged compute_member AVC function and manpages from Eamon Walsh.
  	* Provide more error reporting on load policy failures from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.60-1
changelog:
  - Update to Upstream
  	* Changed selinux_init_load_policy() to not warn about a failed mount of selinuxfs if selinux was disabled in the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.64-1
changelog:
  - Update to Upstream
  	* Fixed selinux_set_callback man page.
  	* Try loading the max of the kernel-supported version and the libsepol-supported version when no manipulation of the binary policy is needed from Stephen Smalley.
  	* Fix memory leaks in matchpathcon from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.65-1
changelog:
  - Update to Upstream
  	* Fix selinux_file_context_verify() and selinux_lsetfilecon_default() to call matchpathcon_init_prefix if not already initialized.
  	* Add -q qualifier for -V option of matchpathcon and change it to indicate whether verification succeeded or failed via exit status.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.67-1
changelog:
  - Update to Upstream
  	* New and revised AVC, label, and mapping man pages from Eamon Walsh.
  	* Add swig python bindings for avc interfaces from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.69-1
changelog:
  - Update to Upstream
  	* Handle duplicate file context regexes as a fatal error from Stephen Smalley.
  	  This prevents adding them via semanage.
  	* Fix audit2why shadowed variables from Stephen Smalley.
  	* Note that freecon NULL is legal in man page from Karel Zak.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.70-1
changelog:
  - Update to Upstream
  	* Merge ruby bindings from Dan Walsh.
  - Add support for Linux groups to getseuserbyname


author: Dan Walsh <dwalsh@redhat.com> - 2.0.71-1
changelog:
  - Update to Upstream
  	* Add group support to seusers using %groupname syntax from Dan Walsh.
  	* Mark setrans socket close-on-exec from Stephen Smalley.
  	* Only apply nodups checking to base file contexts from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.73-1
changelog:
  - Update to Upstream
  	* New man pages from Dan Walsh.
  	* Update flask headers from refpolicy trunk from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.75-1
changelog:
  - Update to Upstream
  	* Correct message types in AVC log messages.
  	* Make matchpathcon -V pass mode from Dan Walsh.
  	* Add man page for selinux_file_context_cmp from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.75-2
changelog:
  - Eamon Walsh Patch - libselinux: allow shell-style wildcarding in X names
  - Add Restorecon/Install python functions from Luke Macken


author: Dan Walsh <dwalsh@redhat.com> - 2.0.76-4
changelog:
  - Add new function getseuser which will take username and service and return
  - seuser and level.  ipa will populate file in future.
  - Change selinuxdefcon to return just the context by default


author: Dan Walsh <dwalsh@redhat.com> - 2.0.79-1
changelog:
  - Update to upstream 
  	* Netlink socket handoff patch from Adam Jackson.
  	* AVC caching of compute_create results by Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.80-1
changelog:
  - Update to upstream 
  	* deny_unknown wrapper function from KaiGai Kohei.
  	* security_compute_av_flags API from KaiGai Kohei.
  	* Netlink socket management and callbacks from KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.81-1
changelog:
  - Update to upstream 
  	* Trim / from the end of input paths to matchpathcon from Dan Walsh.
  	* Fix leak in process_line in label_file.c from Hiroshi Shinji.
  	* Move matchpathcon to /sbin, add matchpathcon to clean target from Dan Walsh.
  	* getdefaultcon to print just the correct match and add verbose option from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.82-1
changelog:
  - Update to upstream 
  	* Fix improper use of thread local storage from Tomas Mraz <tmraz@redhat.com>.
  	* Label substitution support from Dan Walsh.
  	* Support for labeling virtual machine images from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.84-1
changelog:
  - Update to upstream 
  	* Add per-service seuser support from Dan Walsh.
  	* Let load_policy gracefully handle selinuxfs being mounted from Stephen Smalley.
  	* Check /proc/filesystems before /proc/mounts for selinuxfs from Eric
  	Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.85-1
changelog:
  - Update to upstream 
  	* Reverted Tomas Mraz's fix for freeing thread local storage to avoid
  	pthread dependency.
  	* Removed fini_context_translations() altogether.
  	* Merged lazy init patch from Stephen Smalley based on original patch
  	by Steve Grubb.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.87-1
changelog:
  - Update to upstream 
  	* Add exception handling in libselinux from Dan Walsh. This uses a
  	  shell script called exception.sh to generate a swig interface file.
  	* make swigify
  	* Make matchpathcon print <<none>> if path not found in fcontext file.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.90-1
changelog:
  - Update to upstream 
  	* add/reformat man pages by Guido Trentalancia <guido@trentalancia.com>.
  	* Change exception.sh to be called with bash by Manoj Srivastava <srivasta@debian.org>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.91-1
changelog:
  - Update to upstream 
  	* Change the AVC to only audit the permissions specified by the
  	policy, excluding any permissions specified via dontaudit or not
  	specified via auditallow.
  	* Fix compilation of label_file.c with latest glibc headers.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.92-1
changelog:
  - Update to upstream 
  	* Fix from Eric Paris to fix leak on non-selinux systems.
  	* regenerate swig wrappers
  	* pkgconfig fix to respect LIBDIR from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.93-1
changelog:
  - Update to upstream 
  	* Show strerror for security_getenforce() by Colin Waters.
  	* Merged selabel database support by KaiGai Kohei.
  	* Modify netlink socket blocking code by KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.96-1
changelog:
  - Update to upstream 
  	* Add const qualifiers to public API where appropriate by KaiGai Kohei.

  2.0.95 2010-06-10
  	* Remove duplicate slashes in paths in selabel_lookup from Chad Sellers
  	* Adds a chcon method to the libselinux python bindings from Steve Lawrence
  - add python3 subpackage from David Malcolm


author: Dan Walsh <dwalsh@redhat.com> - 2.0.99-3
changelog:
  - Call fini_selinuxmnt if selinux is disabled, to cause is_selinux_disabled() to report correct data


author: Dan Walsh <dwalsh@redhat.com> - 2.0.99-4
changelog:
  Add patch from dbhole@redhat.com to initialize thread keys to -1
  Errors were being seen in libpthread/libdl that were related
  to corrupt thread specific keys. Global destructors that are called on dl 
  unload. During destruction delete a thread specific key without checking 
  if it has been initialized. Since the constructor is not called each time 
  (i.e. key is not initialized with pthread_key_create each time), and the 
  default is 0, there is a possibility that key 0 for an active thread gets 
  deleted. This is exactly what is happening in case of OpenJDK.

  Workaround patch that initializes the key to -1. Thus if the constructor is not
  called, the destructor tries to delete key -1 which is deemed invalid by 
  pthread_key_delete, and is ignored.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.101-1
changelog:
  - Clean up patch to make handling of constructor  cleanup more portable
    * db_language object class support for selabel_lookup from KaiGai Kohei.
    * Library destructors for thread local storage keys from Eamon Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-1
changelog:
  -Update to upstream
  	* Give correct names to mount points in load_policy by Dan Walsh.
  	* Make sure selinux state is reported correctly if selinux is disabled or
  	fails to load by Dan Walsh.
  	* Fix crash if selinux_key_create was never called by Dan Walsh.
  	* Add new file_context.subs_dist for distro specific filecon substitutions
  	by Dan Walsh.
  	* Update man pages for selinux_color_* functions by Richard Haines.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-5
changelog:
  - Move /selinux to /sys/fs/selinux
  - Add selinuxexeccon
  - Add realpath to matchpathcon to handle matchpathcon * type queries.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.102-6
changelog:
  - Only call dups check within selabel/matchpathcon if you are validating the 
  context
  - This seems to speed the loading of labels by 4 times.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.0-1
changelog:
  -Update to upstream
  	* Release, minor version bump
  	* Give correct names to mount points in load_policy by Dan Walsh.
  	* Make sure selinux state is reported correctly if selinux is disabled or
  	fails to load by Dan Walsh.
  	* Fix crash if selinux_key_create was never called by Dan Walsh.
  	* Add new file_context.subs_dist for distro specific filecon substitutions
  	by Dan Walsh.
  	* Update man pages for selinux_color_* functions by Richard Haines.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  2.1.4 2011-0817
  	* mapping fix for invalid class/perms after selinux_set_mapping
  	* audit2why: work around python bug not defining
  	* resolv symlinks and dot directories before matching

  2.1.2 2011-0803
  	* audit2allow: do not print statistics
  	* make python bindings for restorecon work on relative path
  	* fix python audit2why binding error
  	* support new python3 functions
  	* do not check fcontext duplicates on use
  	* Patch for python3 for libselinux

  2.1.1 2011-08-02
  	* move .gitignore into utils
  	* new setexecon utility
  	* selabel_open fix processing of substitution files
  	* mountpoint changing patch.
  	* simplify SRCS in Makefile

  2.1.1 2011-08-01
  	* Remove generated files, introduce more .gitignore


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  - Change matchpatcon to use proper myprintf
  - Fix symlink_realpath to always include "/"
  - Update to upstream
  	* selinux_file_context_verify function returns wrong value.
  	* move realpath helper to matchpathcon library
  	* python wrapper makefile changes


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-2
changelog:
  - Change matchpathcon_init_prefix and selabel_open to allow multiple initial 
  prefixes.  Now you can specify a ";" separated list of prefixes and the 
  labeling system will only load regular expressions that match these prefixes.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  -Update to upstream
  	* utils: matchpathcon: remove duplicate declaration
  	* src: matchpathcon: use myprintf not fprintf
  	* src: matchpathcon: make sure resolved path starts
  	* put libselinux.so.1 in /lib not /usr/lib
  	* tree: default make target to all not


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
changelog:
  - Upgrade to upstream
  	* Makefiles: syntax, convert all ${VAR} to $(VAR)
  	* load_policy: handle selinux=0 and /sys/fs/selinux not exist
  	* regenerate .pc on VERSION change
  	* label: cosmetic cleanups
  	* simple interface for access checks
  	* Don't reinitialize avc_init if it has been called previously
  	* seusers: fix to handle large sets of groups
  	* audit2why: close fd on enomem
  	* rename and export symlink_realpath
  	* label_file: style changes to make Eric happy.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Upgrade to upstream
  	* selinuxswig_python.i: don't make syscall if it won't change anything
  	* Remove assert in security_get_boolean_names(3)
  	* Mapped compute functions now obey deny_unknown flag
  	* get_default_type now sets EINVAL if no entry.
  	* return EINVAL if invalid role selected
  	* Updated selabel_file(5) man page
  	* Updated selabel_db(5) man page
  	* Updated selabel_media(5) man page
  	* Updated selabel_x(5) man page
  	* Add man/man5 man pages
  	* Add man/man5 man pages
  	* Add man/man5 man pages
  	* use -W and -Werror in utils


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-5
changelog:
  - Add patch from Richard Haines
        When selabel_lookup found an invalid context with validation enabled, it
        always stated it was 'file_contexts' whether media, x, db or file.
        The fix is to store the spec file name in the selabel_lookup_rec on
        selabel_open and use this as output for logs. Also a minor fix if key is
        NULL to stop seg faults.
  - Fix setenforce manage page.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  -Update to upstream
  	* Fix setenforce man page to refer to selinux man page
  	* Cleanup Man pages
  	* merge freecon with getcon man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-8
changelog:
  - Change selinux_binary_policy_path to return /sys/fs/selinux/policy
  - Add selinux_installed_policy_path to return what selinux_binary_policy_path used to return
  - avc_has_perm will now return yes if the machine is in permissive mode
  - Make work with ruby-1.9


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-9
changelog:
  - Add selinux_current_policy_path to return /sys/fs/selinux/policy if it exists
  - Otherwise search for policy on disk


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  - Update to upstream 
  	* Fix dead links to www.nsa.gov/selinux
  	* Remove jump over variable declaration
  	* Fix old style function definitions
  	* Fix const-correctness
  	* Remove unused flush_class_cache method
  	* Add prototype decl for destructor
  	* Add more printf format annotations
  	* Add printf format attribute annotation to die() method
  	* Fix const-ness of parameters & make usage() methods static
  	* Enable many more gcc warnings for libselinux/src/ builds
  	* utils: Enable many more gcc warnings for libselinux/utils builds
  	* Change annotation on include/selinux/avc.h to avoid upsetting SWIG
  	* Ensure there is a prototype for 'matchpathcon_lib_destructor'
  	* Update Makefiles to handle /usrmove
  	* utils: Stop separating out matchpathcon as something special
  	* pkg-config to figure out where ruby include files are located
  	* build with either ruby 1.9 or ruby 1.8
  	* assert if avc_init() not called
  	* take security_deny_unknown into account
  	* security_compute_create_name(3)
  	* Do not link against python library, this is considered
  	* bad practice in debian
  	* Hide unnecessarily-exported library destructors


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
changelog:
  - Fix to compile with Fortify source
        * Add -O compiler flag
        * Check return code from asprintf
  - Fix handling of symbolic links in / by realpath_not_final


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-5
changelog:
  - Fix booleans.subs name, change function name to selinux_boolean_sub, 
    add man page, minor fixes to the function


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream 
  	* Fortify source now requires all code to be compiled with -O flag
  	* asprintf return code must be checked
  	* avc_netlink_recieve handle EINTR
  	* audit2why: silence -Wmissing-prototypes warning
  	* libsemanage: remove build warning when build swig c files
  	* matchpathcon: bad handling of symlinks in /
  	* seusers: remove unused lineno
  	* seusers: getseuser: gracefully handle NULL service
  	* New Android property labeling backend
  	* label_android_property whitespace cleanups
  	* additional makefile support for rubywrap


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream 
  	* Add support for lxc_contexts_path
  	* utils: add service to getdefaultcon
  	* libsemanage: do not set soname needlessly
  	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
  	* boolean name equivalency
  	* getsebool: support boolean name substitution
  	* Add man page for new selinux_boolean_sub function.
  	* expose selinux_boolean_sub
  	* matchpathcon: add -m option to force file type check
  	* utils: avcstat: clear sa_mask set
  	* seusers: Check for strchr failure
  	* booleans: initialize pointer to silence coveriety
  	* stop messages when SELinux disabled
  	* label_file: use PCRE instead of glibc regex functions
  	* label_file: remove all typedefs
  	* label_file: move definitions to include file
  	* label_file: do string to mode_t conversion in a helper function
  	* label_file: move error reporting back into caller
  	* label_file: move stem/spec handling to header
  	* label_file: drop useless ncomp field from label_file data
  	* label_file: move spec_hasMetaChars to header
  	* label_file: fix potential read past buffer in spec_hasMetaChars
  	* label_file: move regex sorting to the header
  	* label_file: add accessors for the pcre extra data
  	* label_file: only run regex files one time
  	* label_file: new process_file function
  	* label_file: break up find_stem_from_spec
  	* label_file: struct reorg
  	* label_file: only run array once when sorting
  	* Ensure that we only close the selinux netlink socket once.
  	* improve the file_contexts.5 manual page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-6
changelog:
  - Add new function mode_to_security_class which takes mode instead of a string.
  - Possibly will be used with coreutils.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-8
changelog:
  - Return EPERM if login program can not reach default label for user
  - Attempt to return container info from audit2why


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-10
changelog:
  - Update to latest patches from eparis/Upstream
  -    Fix errors found by coverity
  -    set the sepol_compute_av_reason_buffer flag to 0.  This means calculate denials only?
  -    audit2why: remove a useless policy vers variable
  -    audit2why: use the new constraint information


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-12
changelog:
  - Ondrej Oprala patch to optimize set*con functions
  -    Set*con now caches the security context and only re-sets it if it changes.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-14
changelog:
  - setfscreatecon after fork was broken by the Set*con patch.
  - We needed to reset the thread variables after a fork.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-1
changelog:
  - Update to upstream 
          * audit2why: make sure path is nul terminated
          * utils: new file context regex compiler
          * label_file: use precompiled filecontext when possible
          * do not leak mmapfd
          * sefcontontext_compile: Add error handling to help debug problems in libsemanage.
          * man: make selinux.8 mention service man pages
          * audit2why: Fix segfault if finish() called twice
          * audit2why: do not leak on multiple init() calls
          * mode_to_security_class: interface to translate a mode_t in to a security class
          * audit2why: Cleanup audit2why analysys function
          * man: Fix program synopsis and function prototypes in man pages
          * man: Fix man pages formatting
          * man: Fix typo in man page
          * man: Add references and man page links to _raw function variants
          * Use ENOTSUP instead of EOPNOTSUPP for getfilecon functions
          * man: context_new(3): fix the return value description
          * selinux_status_open: handle error from sysconf
          * selinux_status_open: do not leak statusfd on exec
          * Fix errors found by coverity
          * Change boooleans.subs to booleans.subs_dist.
          * optimize set*con functions
          * pkg-config do not specifc ruby version
          * unmap file contexts on selabel_close()
          * do not leak file contexts with mmap'd backend
          * sefcontext_compile: do not leak fd on error
          * matchmediacon: do not leak fd 
          * src/label_android_property: do not leak fd on error


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-4
changelog:
  - Add new constant SETRANS_DIR which points to the directory where mstransd can find the socket and libvirt can write its translations files.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-9
changelog:
  - Cleanup setfcontext_compile atomic patch
  - Add matchpathcon -P /etc/selinux/mls support by allowing users to set alternate root
  - Make sure we set exit codes from selinux_label calls to ENOENT or SUCCESS


author: Dan Walsh <dwalsh@redhat.com> - 2.1.13-16
changelog:
  - Add sefcontext_compile.8  man page
  - Add Russell Coker  patch to fix man pages
  - Add patches from Laurent Bigonville to fix Makefiles for debian.
  - modify spec file to use %{_prefix}/lib


author: Dan Walsh <dwalsh@redhat.com> - 2.2-1
changelog:
  - Update to upstream 
  	* Fix avc_has_perm() returns -1 even when SELinux is in permissive mode.
  	* Support overriding Makefile RANLIB from Sven Vermeulen.
  	* Update pkgconfig definition from Sven Vermeulen.
  	* Mount sysfs before trying to mount selinuxfs from Sven Vermeulen.
  	* Fix man pages from Laurent Bigonville.
  	* Support overriding PATH  and LIBBASE in Makefiles from Laurent Bigonville.
  	* Fix LDFLAGS usage from Laurent Bigonville
  	* Avoid shadowing stat in load_mmap from Joe MacDonald.
  	* Support building on older PCRE libraries from Joe MacDonald.
  	* Fix handling of temporary file in sefcontext_compile from Dan Walsh.
  	* Fix procattr cache from Dan Walsh.
  	* Define python constants for getenforce result from Dan Walsh.
  	* Fix label substitution handling of / from Dan Walsh.
  	* Add selinux_current_policy_path from Dan Walsh.
  	* Change get_context_list to only return good matches from Dan Walsh.
  	* Support udev-197 and higher from Sven Vermeulen and Dan Walsh.
  	* Add support for local substitutions from Dan Walsh.
  	* Change setfilecon to not return ENOSUP if context is already correct from Dan Walsh.
  	* Python wrapper leak fixes from Dan Walsh.
  	* Export SELINUX_TRANS_DIR definition in selinux.h from Dan Walsh.
  	* Add selinux_systemd_contexts_path from Dan Walsh.
  	* Add selinux_set_policy_root from Dan Walsh.
  	* Add man page for sefcontext_compile from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.1-1
changelog:
  - Update to upstream 
  	* Remove -lpthread from pkg-config file; it is not required.
  - Add support for policy compressed with xv


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-1
changelog:
  - Update to upstream 
        * Fix userspace AVC handling of per-domain permissive mode.
  - Verify context is not null when passed into *setfilecon_raw


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-3
changelog:
  - Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go
  - Add Int_to_mcs function to generate MCS labels from integers.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-4
changelog:
  - Add additional go bindings for get*con calls
  - Add go bindings test command
  - Modify man pages of set*con calls to mention that they are thread specific


author: Dan Walsh <dwalsh@redhat.com> - 2.3-1
changelog:
  - Update to upstream 
  	* Get rid of security_context_t and fix const declarations.
  	* Refactor rpm_execcon() into a new setexecfilecon() from Guillem Jover.


author: Miroslav Grepl <mgrepl@redhat.com> - 2.3-5
changelog:
  - Compiled file context files and the original should have the same permissions from dwalsh@redhat.com
  - Add selinux_openssh_contexts_path() to get a path to /contexts/openssh_contexts


author: Petr Lautrbach <plautrba@redhat.com> 2.3-8
changelog:
  - selinux.py - use os.walk() instead of os.path.walk() (#1195004)
  - is_selinux_enabled(): drop no-policy-loaded test (#1195074)
  - fix -Wformat errors and remove deprecated mudflap option


author: Petr Lautrbach <plautrba@redhat.com> 2.3-10
changelog:
  - is_selinux_enabled: Add /etc/selinux/config test (#1219045)
  - matchpathcon/selabel_file: Fix man pages (#1219718)


author: Petr Lautrbach <plautrba@redhat.com> 2.4-4
changelog:
  - Flush the class/perm string mapping cache on policy reload (#1264051)
  - Fix restorecon when path has no context


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix location of selinuxfs mount point
  - Only mount /proc if necessary
  - procattr: return einval for <= 0 pid args
  - procattr: return error on invalid pid_t input


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-7
changelog:
  - Modify audit2why analyze function to use loaded policy
  - Sort object files for deterministic linking order
  - Respect CC and PKG_CONFIG environment variable
  - Avoid mounting /proc outside of selinux_init_load_policy()


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-9
changelog:
  - Clarify is_selinux_mls_enabled() description
  - Explain how to free policy type from selinux_getpolicytype()
  - Compare absolute pathname in matchpathcon -V
  - Add selinux_snapperd_contexts_path()


author: Petr Lautrbach <plautrba@redhat.com> 2.5-12
changelog:
  - Fix -Wsign-compare warnings
  - Drop unused stdio_ext.h header file
  - Kill logging check for selinux_enabled()
  - Drop usage of _D_ALLOC_NAMLEN
  - Add openrc_contexts functions
  - Fix redefinition of XATTR_NAME_SELINUX
  - Correct error path to always try text
  - Clean up process_file()
  - Handle NULL pcre study data
  - Fix in tree compilation of utils that depend on libsepol


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-4
changelog:
  - Fix segfault in selinux_restorecon_sb() (#1433577)
  - Change matchpathcon usage to match with matchpathcon manpage
  - Fix a corner case getsebool return value


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-6
changelog:
  - Don't finalize mount state in selinux_set_policy_root()
  - Follow upstream and rename _selinux.so to _selinux.cpython-36m-x86_64-linux-gnu.so


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.7-2
changelog:
  - Python 2 binary package renamed to python2-libselinux
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
  - Python 3 binary package renamed to python3-libselinux


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-12
changelog:
  - Correct manpages regarding removable_context
  - build: follow standard semantics for DESTDIR and PREFIX


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-2.1
changelog:
  - Use Python distutils to install SELinux python bindings (#1719771)
  - Move  sefcontext_compile to -utils package (#1612518)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-6
changelog:
  - Describe fcontext regular expressions (#1904059)
  - Strip spaces before values in config (#2012145)


author: Jindrich Novy <jnovy@redhat.com> - 4.3.0-3
changelog:
  - fix static analysis issues merged upstream
    (https://gitlab.freedesktop.org/slirp/libslirp/-/merge_requests/41)
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 4.3.0-4
changelog:
  - fix "CVE-2020-10756 QEMU: slirp: networking out-of-bounds read information disclosure vulnerability"
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 4.4.0-1
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
  - Related: #1934415


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-10
changelog:
  - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function
    i2alaw_array in alaw (#1673085)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-11
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985028)


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.0.10-0.fdr.1
changelog:
  - Update to 1.0.10, update URLs, include ALSA support.
  - Disable dependency tracking to speed up the build.
  - Add missing ldconfig invocations.
  - Make -devel require pkgconfig.
  - Include developer docs in -devel.
  - Provide -octave in main package, own more related dirs.
  - Bring specfile up to date with current spec templates.


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-2
changelog:
  - Adding FLAC support to libsndfile courtesy of gentoo, #237575
  - Fixing CVE-2007-4974. Thanks to the gentoo people for the patch, #296221


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-6
changelog:
  - Removed spurious #endif in the libsndfile.h wrapper. Thx to Edward
    Sheldrake for finding it. Fixes #468508.
  - Fix build for autoconf-2.63


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.0.20-3
changelog:
  - Add FLAC/Ogg/Vorbis support (BR: libvorbis-devel)
  - Make build verbose
  - Remove rpath
  - Fix ChangeLog encoding
  - Move the big Changelog to the devel package


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.0.21-1
changelog:
  - Update to 10.0.21
  - Do not include the static library in the package (RHBZ#556074)
  - Remove BR on jack since sndfile-jackplay is not provided anymore


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0.25-2
changelog:
  - Patch to use system libgsm instead of a bundled copy.
  - Make main package dep in -devel ISA qualified.
  - Drop -octave Provides (not actually built with octave > 3.0).
  - Don't build throwaway static lib.
  - Run test suite during build.


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-14
changelog:
  - fix CVE-2014-9496: 2 buffer overruns in sd2_parse_rsrc_fork (#1178840)
  - division by zero leading to denial of service in psf_fwrite (#1177254)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.28-1
changelog:
  - updated to 1.0.28
  - fix possible buffer overflow when parsing crafted ID3 tags (#1440758, CVE-2017-7586)
  - fix possible buffer overflow when parsing crafted flac file (#1440756, CVE-2017-7585)


author: Kamil Dudka <kdudka@redhat.com> - 1.2.20-16
changelog:
  - fix memory leaks through gnu_long{name,link} (CVE-2021-33645 CVE-2021-33646)
  - fix out-of-bounds read in gnu_long{name,link} (CVE-2021-33643 CVE-2021-33644)


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - enable zip and jpeg codecs
  - change defattr in normal package to 0755
  - add defattr to -devel package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages from devel package to the regular one
  - integrate Frank Warmerdam's fixed .fax handling code (keep until next release
    of libtiff)
  - fix fax2ps breakage (bug #8345)


author: Phil Knirsch <phil@redhat.de>
changelog:
  - Fixed ia64 problem with tiffinfo. Was general 64 bit arch problem where s390x
    and ia64 were missing (#52129).


author: Matthias Clasen <mclasen@redhat.com> - 3.7.1-3
changelog:
  - Drop the largefile patch again
  - Fix a problem with the handling of alpha channels
  - Fix an integer overflow in tiffdump (#143576)


author: Matthias Saou <http://freshrpms.net/> 3.7.4-2
changelog:
  - Remove useless explicit dependencies.
  - Minor spec file cleanups.
  - Move make check to %check.
  - Add _smp_mflags.


author: Matthias Clasen <mclasen@redhat.com>
changelog:
  - Fix several vulnerabilities (CVE-2006-3460 CVE-2006-3461
    CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)


author: Jindrich Novy <jnovy@redhat.com> - 3.8.2-6
changelog:
  - fix CVE-2006-2193, tiff2pdf buffer overflow (#194362)
  - fix typo in man page for tiffset (#186297)
  - use %{?dist}


author: Tom Lane <tgl@redhat.com> 3.8.2-8
changelog:
  - Restore static library to distribution, in a separate -static subpackage
  Resolves: #219905
  - Don't apply multilib header hack to unrecognized architectures
  Resolves: #233091
  - Remove documentation for programs we don't ship
  Resolves: #205079
  Related: #185145


author: Tom Lane <tgl@redhat.com> 3.8.2-11
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Related: #458674
  - Use -fno-strict-aliasing per rpmdiff recommendation


author: Tom Lane <tgl@redhat.com> 3.9.2-1
changelog:
  - Update to libtiff 3.9.2; stop carrying a lot of old patches
  Resolves: #520734
  - Split command-line tools into libtiff-tools subpackage
  Resolves: #515170
  - Use build system's libtool instead of what package contains;
    among other cleanup this gets rid of unwanted rpath specs in executables
  Related: #226049


author: Tom Lane <tgl@redhat.com> 3.9.2-3
changelog:
  - Apply Adam Goode's fix for Warmerdam's fix
  Resolves: #552360
  Resolves: #533353
  - Add some defenses to prevent tiffcmp from crashing on downsampled JPEG
    images; this isn't enough to make it really work correctly though
  Related: #460322


author: Tom Lane <tgl@redhat.com> 3.9.4-1
changelog:
  - Update to libtiff 3.9.4, for numerous bug fixes including fixes for
    CVE-2010-1411, CVE-2010-2065, CVE-2010-2067
  Resolves: #554371
  Related: #460653, #588784, #601274, #599576, #592361, #603024
  - Add fixes for multiple SIGSEGV problems
  Resolves: #583081
  Related: #603081, #603699, #603703


author: Tom Lane <tgl@redhat.com> 3.9.4-3
changelog:
  - Add patch for CVE-2011-0192
  Resolves: #681672
  - Fix non-security-critical potential SIGSEGV in gif2tiff
  Related: #648820


author: Tom Lane <tgl@redhat.com> 3.9.4-4
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #684007
  Related: #688825
  - Add fix for CVE-2011-1167
  Resolves: #689574


author: Tom Lane <tgl@redhat.com> 3.9.5-1
changelog:
  - Update to libtiff 3.9.5, incorporating all our previous patches plus other
    fixes, notably the fix for CVE-2009-5022
  Related: #695885


author: Tom Lane <tgl@redhat.com> 4.0.1-1
changelog:
  - Update to libtiff 4.0.1, adds BigTIFF support and other features;
    library soname is bumped from libtiff.so.3 to libtiff.so.5
  Resolves: #782383
  - Temporarily package 3.9.5 shared library (only) in libtiff-compat subpackage
    so that dependent packages won't be broken while rebuilding proceeds


author: Tom Lane <tgl@redhat.com> 4.0.2-1
changelog:
  - Update to libtiff 4.0.2, includes fix for CVE-2012-2113
    (note that CVE-2012-2088 does not apply to 4.0.x)
  - Update libtiff-compat to 3.9.6 and add patches to it for
    CVE-2012-2088, CVE-2012-2113
  Resolves: #832866


author: Tom Lane <tgl@redhat.com> 4.0.2-5
changelog:
  - Add accessor functions for opaque type TIFFField (backport of not-yet-released
    upstream feature addition; needed to fix freeimage)


author: Tom Lane <tgl@redhat.com> 4.0.2-6
changelog:
  - Remove compat subpackage; no longer needed
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 4.0.3-2
changelog:
  - Add upstream patches for CVE-2012-4447, CVE-2012-4564
    (note: CVE-2012-5581 is already fixed in 4.0.3)
  Resolves: #880907


author: Nikola Forró <nforro@redhat.com> - 4.0.9-9
changelog:
  - Fix CVE-2017-9935, CVE-2017-18013 (#1530441),
    CVE-2018-8905 (#1559705) and CVE-2018-10963 (#1579061)


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: David Shea <dshea@redhat.com> - 0.4.5-3
changelog:
  - Render the map directly from SVG (#1335158)
  - Fix memory leaks in tz.c
  - Fix an invalid memory access
  - Do not modify TZ in the process environment
  - Move all data files to /usr/share/libtimezonemap from .../libtimezonemap/ui
  - Add extra city data so all timezone offsets are clickable
  - Move Venezuela from -04:30 to -04:00
  - Fix the conversion of points just west of 180 longitude
  - Remove the out-of-date Olson map data
  - Update the "backward" file
  - Improve the location selected when setting the timezone by name (#1322648)
  - Remove an extra line in the +10:00 layer
  - Move Chile back an hour


author: David Shea <dshea@redhat.com> - 0.4.1-2
changelog:
  - Make whitespace and indentation consistent (iain.lane@canonical.com)
  - Switched to a git-formatted patch for the FSF address to make things easier
    for me to track (dshea)
  - Create local copies of string properties. (dshea)
  - Moved CcTimezoneLocation into its own file. (dshea)
  - Don't close a NULL file pointer. (dshea)
  - Turn on and fix g-ir-scanner warnings. (dshea)
  - Added a .bzrignore file to ignore all the files generated by the build. (dshea)
  - Ignore the INSTALL file (dshea)
  - Added a function to clear the location set for a CcTimezoneMap (dshea)
  - Allow the timezone highlight to be manually set separately from the location. (dshea)


author: David Shea <dshea@redhat.com> - 0.4.1-4
changelog:
  - Merge fixes from lp:timezonemap
  - Add cc-timezone-location.h to timezonemapincludes_HEADERS so it gets installed (iain.lane)
  - Set en_name correctly (iain.lane)
  - Don't call g_type_init() on glib >= 2.35; it's deprecated (iain.lane)


author: David Shea <dshea@redhat.com> - 0.4.2-6
changelog:
  - Updated the time zone map images
  - Updated the city data from geonames.org
  - Fix a memory leak and potential crash with the locations list
  - Cycle through a smaller list of map locations on repeated clicks


author: David Shea <dshea@redhat.com> - 0.4.4-1
changelog:
  - Fixes for LP#1440157:
    Port to libsoup directly for geoname results
    Fix some memory leaks
    Do not reuse GCancellables
  - Upstream merges of SVG update and constrained location cycles


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.3-1.20200818git1d392d466a
changelog:
  - Update to v0.7.3 stable, fixes rhbz#1868447
  - (includes "tpm2: fix PCRBelongsTCBGroup for PCClient")


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.4-5.20201106git2452a24dab
changelog:
  - Fix CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Fixes: rhbz#1976816


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.4-6.20201106git2452a24dab
changelog:
  - Fix CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999307


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-2.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173964
    Resolves: rhbz#2173970


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.0-14
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188991)
  - tests: Use stronger passphrases for LUKS tests
  - lvm2: Improve uevent processing (#2039772)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.0-16
changelog:
  - iscsi: Fix login on firmware-discovered nodes (#2213193)
  - tests: Extend iscsi method call timeouts (#2213715)


author: Robert Scheck <robert@fedoraproject.org> 0.9.12-15
changelog:
  - Added patch to avoid a /usr/@DATADIRNAME@/locale/ directory
  - Use %{_udevrulesdir} macro rather /etc/udev/rules.d/ (#1226681)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.3-0.2.git09b0222
changelog:
  - Fixes from package review
  - Removed doubly-listed include directory
  - Update git tarball to the latest upstream code


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.9.4-4.gitdc559a5
changelog:
  - Bump epoch for the version downgrade
  - The 0.9.7 version hit the Rawhide repo due to the mass rebuild, we need a
    clean upgrade path.


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.0-2.git5462dab
changelog:
  - drop the patchlevel from the SONAME since libuv will retain binary
    compatibility for the life of the 0.10.x series


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.10.5-2
changelog:
  - Add patch to properly report soname version information
    This patch will be included upstream in 0.10.6 and can be dropped then.
  - Remove Bundles(ev) as this has not been true since 0.9.5


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.5-3
changelog:
  - don't sed the soname in the spec anymore; the patch takes care of it now
  - drop leftover global define for git revision


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-1
changelog:
  - new upstream release 0.10.33
    https://github.com/joyent/libuv/blob/v0.10.33/ChangeLog
  - update URL to point to the new libuv.org


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.33-2
changelog:
  - add missing %{_?isa} to devel requires of main package
  - fix some issues with the pkgconfig file and Group reported by Michael Schwendt


author: Adam Williamson <awilliam@redhat.com> - 0.31.1-1.sds4
changelog:
  - initial package (based on package from elsewhere by myself and Nic
    Chauvet with i965 driver removed)


author: Adam Williamson <awilliam@redhat.com> - 1.0.6-1
changelog:
  - switch to upstream from sds branch (sds now isn't carrying any very
    interesting changes according to gwenole)
  - pull in the dont-install-test-programs patch from sds
  - split out libva-utils again for multilib purposes
  - drop -devel package obsolete/provides itself too


author: Adam Williamson <awilliam@redhat.com> - 1.0.8-1
changelog:
  - bump to new version
  - fix modded tarball to actually not have i965 dir
  - merge with the other spec I seem to have lying around somewhere


author: Nicolas Chauvet <kwizart@gmail.com> - 1.1.0-3
changelog:
  - Update to official 1.1.0 release
  - Enable Wayland support on f18 - add subpackage
  - Clean spec file


author: Nicolas Chauvet <kwizart@gmail.com> - 1.1.0-5
changelog:
  - Drop wayland support - Lead to suspicious crash
    to reintroduce later using alternates build for vainfo and libs.


author: Nicolas Chauvet <kwizart@gmail.com> - 1.8.0-1
changelog:
  - Update to 1.8.0
  - Switch upstream URL to 01.org and github
  - Split libva-utils into it's own package
  - Clean-up groups


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-15
changelog:
  - nodedev: fix reported error msg in css cap XML parsing (rhbz#2165011)
  - util: refactor virDomainDeviceCCWAddress into virccw.h (rhbz#2165011)
  - util: refactor virDomainCCWAddressAsString into virccw (rhbz#2165011)
  - util: make reuse of ccw device address format constant (rhbz#2165011)
  - util: refactor ccw address constants into virccw (rhbz#2165011)
  - util: refactor virDomainCCWAddressIncrement into virccw (rhbz#2165011)
  - util: refactor virDomainDeviceCCWAddressIsValid into virccw (rhbz#2165011)
  - util: refactor virDomainDeviceCCWAddressEqual into virccw (rhbz#2165011)
  - conf: adjust method name virDomainDeviceCCWAddressParseXML (rhbz#2165011)
  - util: add ccw device address parsing into virccw (rhbz#2165011)
  - util: add virCCWDeviceAddressFromString to virccw (rhbz#2165011)
  - nodedev: refactor css format from ccw format method (rhbz#2165011)
  - nodedev: refactor ccw device address parsing from XML (rhbz#2165011)
  - nodedev: refactor css XML parsing from ccw XML parsing (rhbz#2165011)
  - schemas: refactor out nodedev ccw address schema (rhbz#2165011)
  - nodedev: add optional device address of channel device to css device (rhbz#2165011)
  - nodedev: add tests for optional device address to css device (rhbz#2165011)
  - nodedev: prevent internal error on dev_busid parse (rhbz#2165011)
  - rpc: Fix memory leak of fds (rhbz#2165428)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-19
changelog:
  - qemu: domain: Fix logic when tainting domain (rhbz#2174447)
  - qemu: agent: Make fetching of 'can-offline' member from 'guest-query-vcpus' optional (rhbz#2174447)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-20
changelog:
  - qemu: monitor: Drop old monitor fields from 'struct _qemuMonitorMessage' (rhbz#2170472)
  - qemu: Make 'struct _qemuMonitorMessage' private (rhbz#2170472)
  - qemu: monitor: Move declaration of struct _qemuMonitor to qemu_monitor_priv.h (rhbz#2170472)
  - qemu: qemuBlockGetNamedNodeData: Remove pointless error path (rhbz#2170472)
  - qemu: monitor: Store whether 'query-named-block-nodes' supports 'flat' parameter (rhbz#2170472)
  - qemuMonitorJSONBlockStatsUpdateCapacityBlockdev: Use 'flat' mode of query-named-block-nodes (rhbz#2170472)
  - qemu: relax shared memory check for vhostuser daemons (rhbz#2177701)
  - virpci: Resolve leak in virPCIVirtualFunctionList cleanup (CVE-2023-2700)
  - node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap() (CVE-2023-2700)


author: zhaotianrui <zhaotianrui@loongson.cn> - 8.0.0-22.0.1
changelog:
  - Add loongarch support
  - Fix loongarch xml validate
  - Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap (CVE-2023-2700)(liwei.glw@alibaba-inc.com)
  - Resolve leak in virPCIVirtualFunctionList cleanup (CVE-2023-2700)(liwei.glw@alibaba-inc.com)
  - Synchronize upstream patches "Use correct tpm device for all non-x86" (lixianglai@loongson.cn)
  - Synchronize upstream patches "validate: Drop tpm-tis arch validation" (lixianglai@loongson.cn)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-2
changelog:
  - qemu: Add capability for the HTM pSeries feature
  - conf: Parse and format the HTM pSeries feature
  - qemu: Format the HTM pSeries feature
  - qemu: hotplug: Don't access srcPriv when it's not allocated
  - qemuDomainNestedJobAllowed: Allow QEMU_JOB_NONE
  - src: Mention DEVICE_REMOVAL_FAILED event in virDomainDetachDeviceAlias docs
  - virsh.pod: Drop --persistent for detach-device-alias
  - qemu: don't use chardev FD passing with standalone args
  - qemu: remove chardevStdioLogd param from vhostuser code path
  - qemu: consolidate parameters of qemuBuildChrChardevStr into flags
  - qemu: don't use chardev FD passing for vhostuser backend
  - qemu: fix UNIX socket chardevs operating in client mode
  - qemuDomainDeviceDefValidateNetwork: Check for range only if IP prefix set
  - spec: Temporarily drop gluster support


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-3
changelog:
  - qemu: hotplug: Do not try to add secret object for TLS if it does not exist
  - qemu: monitor: Make qemuMonitorAddObject more robust against programming errors
  - spec: Explicitly require matching libvirt-libs
  - virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash
  - qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one
  - qemuDomainValidateStorageSource: Relax PR validation
  - virStoragePRDefFormat: Suppress path formatting for migratable XML
  - qemu: Wire up PR_MANAGER_STATUS_CHANGED event
  - qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo
  - qemu: Fetch pr-helper process info on reconnect
  - qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject
  - virsh.pod: Fix a command name typo in nwfilter-binding-undefine
  - docs: schema: Add missing <alias> to vsock device
  - virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats
  - tests: fix TLS handshake failure with TLS 1.3


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-4
changelog:
  - qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice
  - qemu: hotplug: report error when changing rom enabled attr for net iface
  - qemu: Fix setting global_period cputune element
  - tests: qemucaps: Add test data for upcoming qemu 3.0.0
  - qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend
  - qemu: command: Move graphics iteration to its own function
  - qemu: address: Handle all the video devices within a single loop
  - conf: Introduce virDomainVideoDefClear helper
  - conf: Introduce virDomainDefPostParseVideo helper
  - qemu: validate: Enforce compile time switch type checking for videos
  - tests: Add capabilities data for QEMU 2.11 x86_64
  - tests: Update capabilities data for QEMU 3.0.0 x86_64
  - qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc
  - qemu: caps: Introduce a capability for egl-headless
  - qemu: Introduce a new graphics display type 'headless'
  - qemu: caps: Add vfio-pci.display capability
  - conf: Introduce virDomainGraphicsDefHasOpenGL helper
  - conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys
  - conf: Introduce new <hostdev> attribute 'display'
  - qemu: command: Enable formatting vfio-pci.display option onto cmdline
  - docs: Rephrase the mediated devices hostdev section a bit
  - conf: Introduce new video type 'none'
  - virt-xml-validate: Add schema for nwfilterbinding
  - tools: Fix typo generating adapter_wwpn field
  - src: Fix memory leak in virNWFilterBindingDispose


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-5
changelog:
  - esx storage: Fix typo lsilogic -> lsiLogic
  - networkGetDHCPLeases: Don't always report error if unable to read leases file
  - nwfilter: Resolve SEGV for NWFilter Snoop processing
  - qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs
  - qemuDomainSaveMemory: Don't enforce dynamicOwnership
  - domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl
  - examples: Add clean-traffic-gateway into nwfilters


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-6
changelog:
  - qemu: Exempt video model 'none' from getting a PCI address on Q35
  - conf: Fix a error msg typo in virDomainVideoDefValidate


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-8
changelog:
  - tests: Add missing thread_siblings_list files (rhbz#1608479)
  - util: Rewrite virHostCPUCountThreadSiblings() (rhbz#1608479)
  - utils: Remove arbitrary limit on socket_id/core_id (rhbz#1608479)
  - tests: Add linux-high-ids test (rhbz#1608479)
  - qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618680)
  - tests: rename hugepages to hugepages-default (rhbz#1615461)
  - tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1615461)
  - tests: rename hugepages-numa into hugepages-numa-default (rhbz#1615461)
  - tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1615461)
  - tests: extract pages-discard out of hugepages-pages (rhbz#1615461)
  - tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1615461)
  - tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1615461)
  - tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1615461)
  - tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1615461)
  - tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1615461)
  - tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1615461)
  - tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1615461)
  - tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1615461)
  - tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1615461)
  - tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1615461)
  - tests: introduce hugepages-nodeset (rhbz#1615461)
  - conf: Move hugepage XML validation check out of qemu_command (rhbz#1615461)
  - conf: Move hugepages validation out of XML parser (rhbz#1615461)
  - conf: Introduce virDomainDefPostParseMemtune (rhbz#1615461)
  - tests: sev: Test launch-security with specific QEMU version (rhbz#1619150)
  - qemu: Fix probing of AMD SEV support (rhbz#1619150)
  - qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1619150)
  - conf: Parse guestfwd channel device info again (rhbz#1610072)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-9
changelog:
  - RHEL: Fix virConnectGetMaxVcpus output (rhbz#1582222)
  - storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1622534)
  - access: Fix nwfilter-binding ACL access API name generation (rhbz#1622540)
  - conf: Add validation of input devices (rhbz#1591240)
  - tests: qemu: Remove disk from graphics-vnc-tls (rhbz#1598167)
  - tests: qemu: test more versions for graphics-vnc-tls (rhbz#1598167)
  - qemu: vnc: switch to tls-creds-x509 (rhbz#1598167)
  - qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624740)
  - virDomainDefCompatibleDevice: Relax alias change check (rhbz#1603133)
  - virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1603133)
  - virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623158)
  - RHEL: spec: Require python3-devel on RHEL-8 (rhbz#1518446)
  - qemu: monitor: Remove qemuMonitorJSONExtractCPUArchInfo wrapper (rhbz#1598829)
  - qemu: monitor: Use 'target' instead of 'arch' in reply of 'query-cpus-fast' (rhbz#1598829)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-10
changelog:
  - conf: Fix check for chardev source path (rhbz#1609723)
  - tests: Reuse qemucapabilities data for qemucaps2xml (rhbz#1629862)
  - tests: Add more tests to qemucaps2xml (rhbz#1629862)
  - qemu: Drop QEMU_CAPS_ENABLE_KVM (rhbz#1629862)
  - qemu: Avoid probing non-native binaries all the time (rhbz#1629862)
  - qemu: Clarify QEMU_CAPS_KVM (rhbz#1629862)
  - qemu: Don't check for /dev/kvm presence (rhbz#1629862)
  - tests: Follow up on qemucaps2xmldata rename (rhbz#1629862)
  - security: dac: also label listen UNIX sockets (rhbz#1634775)
  - spec: Set correct TLS priority (rhbz#1632269)
  - spec: Build ceph and gluster support everywhere (rhbz#1599546)
  - virsh: Require explicit --domain for domxml-to-native (rhbz#1634769)
  - virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1634782)
  - qemu: fix up permissions for pre-created UNIX sockets (rhbz#1634775)
  - cpu_map: Add features for Icelake CPUs (rhbz#1527657, rhbz#1526625)
  - cpu_map: Add Icelake CPU models (rhbz#1526625)
  - qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634758)
  - qemu: Report more appropriate running reasons (rhbz#1634758)
  - qemu: Pass running reason to RESUME event handler (rhbz#1634758)
  - qemu: Map running reason to resume event detail (rhbz#1634758)
  - qemu: Avoid duplicate resume events and state changes (rhbz#1634758)
  - conf: qemu: add support for Hyper-V frequency MSRs (rhbz#1589702)
  - conf: qemu: add support for Hyper-V reenlightenment notifications (rhbz#1589702)
  - conf: qemu: add support for Hyper-V PV TLB flush (rhbz#1589702)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-11
changelog:
  - virfile: fix cast-align error (rhbz#1634782)
  - virfiletest: Fix test name prefix for virFileInData test (rhbz#1634782)
  - virfiletst: Test virFileIsSharedFS (rhbz#1634782)
  - virFileIsSharedFSType: Detect direct mount points (rhbz#1634782)
  - virfile: Rework virFileIsSharedFixFUSE (rhbz#1634782)
  - RHEL: network: regain guest network connectivity after firewalld switch to nftables (rhbz#1638864)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-14
changelog:
  - storage: Remove secretPath from _virStorageBackendQemuImgInfo (rhbz#1645459)
  - storage: Allow for inputvol to have any format for encryption (rhbz#1645459)
  - storage: Allow inputvol to be encrypted (rhbz#1645459)
  - access: Modify the VIR_ERR_ACCESS_DENIED to include driverName (rhbz#1631608)
  - docs: Enhance polkit documentation to describe secondary connection (rhbz#1631608)
  - qemu: Don't ignore resume events (rhbz#1634758, rhbz#1643338)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-15
changelog:
  - virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1634782)
  - qemu: Ignore nwfilter binding instantiation issues during reconnect (rhbz#1648544)
  - qemu: Set identity for the reconnect all thread (rhbz#1648546)
  - Revert "access: Modify the VIR_ERR_ACCESS_DENIED to include driverName" (rhbz#1631608)
  - access: Modify the VIR_ERR_ACCESS_DENIED to include driverName (rhbz#1631608)
  - qemu: add vfio-ap capability (rhbz#1508146)
  - qemu: vfio-ap device support (rhbz#1508146)
  - qemu: Extract MDEV VFIO PCI validation code into a separate helper (rhbz#1508146)
  - conf: Move VFIO AP validation from post parse to QEMU validation code (rhbz#1508146)
  - qemu: Fix post-copy migration on the source (rhbz#1649169)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-16
changelog:
  - util: Don't overflow in virRandomBits (rhbz#1655586)
  - virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1655586)
  - spec: remove libcgroup and cgconfig (rhbz#1602407)
  - qemu: Drop duplicated code from qemuDomainDefValidateFeatures() (rhbz#1647822)
  - tests: Add capabilities data for QEMU 3.1.0 on ppc64 (rhbz#1647822)
  - qemu: Introduce QEMU_CAPS_MACHINE_PSERIES_CAP_NESTED_HV (rhbz#1647822)
  - conf: Parse and format nested-hv feature (rhbz#1647822)
  - qemu: Format nested-hv feature on the command line (rhbz#1647822)
  - qemu: Add check for whether KVM nesting is enabled (rhbz#1645139)
  - secret: Add check/validation for correct usage when LookupByUUID (rhbz#1656255)
  - cpu: Add support for "stibp" x86_64 feature (rhbz#1655032)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-17
changelog:
  - virsh: Strip XML declaration when extracting CPU XMLs (rhbz#1659048)
  - RHEL: qemu: Add ability to set sgio values for hostdev (rhbz#1582424)
  - RHEL: qemu: Add check for unpriv sgio for SCSI generic host device (rhbz#1582424)
  - qemu: Alter @val usage in qemuSetUnprivSGIO (rhbz#1656362)
  - qemu: Alter qemuSetUnprivSGIO hostdev shareable logic (rhbz#1656362)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-18
changelog:
  - conf: correct false boot order error during domain parse (rhbz#1630393)
  - qemu: Remove duplicated qemuAgentCheckError (rhbz#1665000)
  - qemu: require reply from guest agent in qemuAgentGetInterfaces (rhbz#1665000)
  - qemu: Filter non SCSI hostdevs in qemuHostdevPrepareSCSIDevices (rhbz#1665244)
  - util: remove const specifier from nlmsghdr arg to virNetlinkDumpCallback() (rhbz#1583131)
  - util: add a function to insert new interfaces to IPv6CheckForwarding list (rhbz#1583131)
  - util: use nlmsg_find_attr() instead of an open-coded loop (rhbz#1583131)
  - util: check accept_ra for all nexthop interfaces of multipath routes (rhbz#1583131)
  - util: make forgotten changes suggested during review of commit d40b820c (rhbz#1583131)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-19
changelog:
  - qemu: Fix logic error in qemuSetUnprivSGIO (rhbz#1666605)
  - tests: qemuxml2argv: Add test case for empty CDROM with cache mode (rhbz#1553255)
  - qemu: command: Don't format image properties for empty -drive (rhbz#1553255)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-21
changelog:
  - docs: Drop /dev/net/tun from the list of shared devices (rhbz#1665400)
  - qemu: conf: Remove /dev/sev from the default cgroup device acl list (rhbz#1665400)
  - qemu: cgroup: Expose /dev/sev/ only to domains that require SEV (rhbz#1665400)
  - qemu: domain: Add /dev/sev into the domain mount namespace selectively (rhbz#1665400)
  - security: dac: Relabel /dev/sev in the namespace (rhbz#1665400)
  - qemu: caps: Use CAP_DAC_OVERRIDE for probing to avoid permission issues (rhbz#1665400)
  - qemu: caps: Don't try to ask for CAP_DAC_OVERRIDE if non-root (rhbz#1665400)
  - Revert "RHEL: Require firewalld-filesystem for firewalld rpm macros" (rhbz#1650320)
  - Revert "RHEL: network: regain guest network connectivity after firewalld switch to nftables" (rhbz#1650320)
  - configure: change HAVE_FIREWALLD to WITH_FIREWALLD (rhbz#1650320)
  - util: move all firewalld-specific stuff into its own files (rhbz#1650320)
  - util: new virFirewallD APIs + docs (rhbz#1650320)
  - configure: selectively install a firewalld 'libvirt' zone (rhbz#1650320)
  - network: set firewalld zone of bridges to "libvirt" zone when appropriate (rhbz#1650320)
  - network: allow configuring firewalld zone for virtual network bridge device (rhbz#1650320)
  - util: remove test code accidentally committed to virFirewallDZoneExists (rhbz#1650320)
  - qemu: command: Don't skip 'readonly' and throttling info for empty drive (rhbz#1670337)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-24
changelog:
  - tests: qemuxml2argv: add CAPS_ARCH_LATEST macro (rhbz#1698855)
  - qemu: Add ccw support for vhost-vsock (rhbz#1698855)
  - qemu: Allow creating ppc64 guests with graphics and no USB mouse (rhbz#1683681)
  - conf: Expose virDomainSCSIDriveAddressIsUsed (rhbz#1692354)
  - qemuhotplugtest: Don't plug a SCSI disk at unit 7 (rhbz#1692354)
  - qemu_hotplug: Check for duplicate drive addresses (rhbz#1692354)
  - cpu_map: Add support for cldemote CPU feature (rhbz#1537731)
  - util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1505998)
  - qemu: domain: Simplify non-VFIO memLockLimit calculation for PPC64 (rhbz#1505998)
  - qemu_domain: add a PPC64 memLockLimit helper (rhbz#1505998)
  - qemu_domain: NVLink2 bridge detection function for PPC64 (rhbz#1505998)
  - PPC64 support for NVIDIA V100 GPU with NVLink2 passthrough (rhbz#1505998)
  - cpu_x86: Do not cache microcode version (CVE-2018-12127, CVE-2019-11091, CVE-2018-12126, CVE-2018-12130)
  - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2019-11091, CVE-2018-12126, CVE-2018-12130)
  - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12127, CVE-2019-11091, CVE-2018-12126, CVE-2018-12130)
  - cpu_map: Define md-clear CPUID bit (CVE-2018-12127, CVE-2019-11091, CVE-2018-12126, CVE-2018-12130)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-25
changelog:
  - admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
  - locking: restrict sockets to mode 0600 (CVE-2019-10132)
  - logging: restrict sockets to mode 0600 (CVE-2019-10132)
  - util: skip RDMA detection for non-PCI network devices (rhbz#1693299)
  - virfile: Detect ceph as shared FS (rhbz#1698133)
  - virfile: added GPFS as shared fs (rhbz#1698133)
  - util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1716943)
  - qemu: Rework setting process affinity (rhbz#1716943)
  - qemu: Set up EMULATOR thread and cpuset.mems before exec()-ing qemu (rhbz#1716943)
  - conf: Add definitions for 'uid' and 'fid' PCI address attributes (rhbz#1508149)
  - qemu: Introduce zPCI capability (rhbz#1508149)
  - qemu: Enable PCI multi bus for S390 guests (rhbz#1508149)
  - conf: Introduce extension flag and zPCI member for PCI address (rhbz#1508149)
  - conf: Introduce address caching for PCI extensions (rhbz#1508149)
  - qemu: Auto add pci-root for s390/s390x guests (rhbz#1508149)
  - conf: use virXMLFormatElement() in virDomainDeviceInfoFormat() (rhbz#1508149)
  - conf: Introduce parser, formatter for uid and fid (rhbz#1508149)
  - qemu: Add zPCI address definition check (rhbz#1508149)
  - conf: Allocate/release 'uid' and 'fid' in PCI address (rhbz#1508149)
  - qemu: Generate and use zPCI device in QEMU command line (rhbz#1508149)
  - qemu: Add hotpluging support for PCI devices on S390 guests (rhbz#1508149)
  - qemuDomainRemoveRNGDevice: Remove associated chardev too (rhbz#1508149)
  - qemu_hotplug: remove erroneous call to qemuDomainDetachExtensionDevice() (rhbz#1508149)
  - qemu_hotplug: remove another erroneous qemuDomainDetachExtensionDevice() call (rhbz#1508149)
  - util: Propagate numad failures correctly (rhbz#1716907)
  - util: Introduce virBitmapUnion() (rhbz#1716908)
  - util: Introduce virNumaNodesetToCPUset() (rhbz#1716908)
  - qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1716908)
  - qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1716908)
  - qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1716908)
  - qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1716908)
  - qemuBuildMemoryBackendProps: Pass @priv instead of its individual members (rhbz#1624223)
  - qemu: Don't use -mem-prealloc among with .prealloc=yes (rhbz#1624223)
  - nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691356)
  - qemuProcessBuildDestroyMemoryPathsImpl: Don't overwrite error (rhbz#1658112)
  - qemu_security: Fully implement qemuSecurityDomainSetPathLabel (rhbz#1658112)
  - qemu: process: SEV: Assume libDir to be the directory to create files in (rhbz#1658112)
  - qemu: process: SEV: Relabel guest owner's SEV files created before start (rhbz#1658112)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-26
changelog:
  - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
  - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
  - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
  - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-27
changelog:
  - RHEL: spec: Disable gluster on i686 (rhbz#1722668)
  - rpc: virnetlibsshsession: update deprecated functions (rhbz#1722735)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-29
changelog:
  - cpu: allow include files for CPU definition (rhbz#1686895)
  - cpu: fix cleanup when signature parsing fails (rhbz#1686895)
  - cpu: push more parsing logic into common code (rhbz#1686895)
  - cpu: simplify failure cleanup paths (rhbz#1686895)
  - cpu_map: Add support for arch-capabilities feature (rhbz#1693433)
  - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1686895)
  - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1686895)
  - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1686895)
  - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1686895)
  - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1686895)
  - cpu_x86: Separate ancestor model parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Separate vendor parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Separate feature list parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Make sure CPU model names are unique in cpu_map (rhbz#1686895)
  - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1686895)
  - cpu_x86: Store CPU signature in an array (rhbz#1686895)
  - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1686895)
  - cpu_x86: Log decoded CPU model and signatures (rhbz#1686895)
  - qemu_capabilities: Inroduce virQEMUCapsGetCPUModelX86Data (rhbz#1686895)
  - qemu_capabilities: Introduce virQEMUCapsGetCPUModelInfo (rhbz#1686895)
  - qemu_capabilities: Use virQEMUCapsGetCPUModelInfo (rhbz#1686895)
  - cpu_x86: Add virCPUx86DataGetSignature for tests (rhbz#1686895)
  - cpu_map: Add hex representation of signatures (rhbz#1686895)
  - cputest: Test CPU signatures (rhbz#1686895)
  - cpu_map: Add more signatures for Conroe CPU model (rhbz#1686895)
  - cpu_map: Add more signatures for Penryn CPU model (rhbz#1686895)
  - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Westmere CPU model (rhbz#1686895)
  - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Haswell CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1686895)
  - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1686895)
  - cpu_x86: Require <cpuid> within <feature> in CPU map (rhbz#1697627)
  - cputest: Add data for Intel(R) Xeon(R) Platinum 8268 CPU (rhbz#1693433)
  - cpu_map: Add Cascadelake-Server CPU model (rhbz#1693433)
  - cpu_x86: Introduce virCPUx86DataItem container struct (rhbz#1697627)
  - cpu_x86: Rename virCPUx86Vendor.cpuid (rhbz#1697627)
  - cpu_x86: Rename virCPUx86DataItem variables (rhbz#1697627)
  - cpu_x86: Rename x86DataCpuidNext function (rhbz#1697627)
  - cpu_x86: Rename x86DataCpuid (rhbz#1697627)
  - cpu_x86: Rename virCPUx86CPUIDSorter (rhbz#1697627)
  - cpu_x86: Rename virCPUx86DataAddCPUIDInt (rhbz#1697627)
  - cpu_x86: Rename virCPUx86DataAddCPUID (rhbz#1697627)
  - cpu_x86: Rename virCPUx86VendorToCPUID (rhbz#1697627)
  - cpu_x86: Simplify x86DataAdd (rhbz#1697627)
  - cpu_x86: Introduce virCPUx86DataCmp (rhbz#1697627)
  - cpu_x86: Make x86cpuidSetBits more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidClearBits more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidAndBits more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidMatchMasked more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidMatch more general (rhbz#1697627)
  - cpu_x86: Store virCPUx86DataItem content in union (rhbz#1697627)
  - cpu_x86: Add support for storing MSR features in CPU map (rhbz#1697627)
  - cpu_x86: Move *CheckFeature functions (rhbz#1697627)
  - cputest: Add support for MSR features to cpu-parse.sh (rhbz#1697627)
  - util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1697627)
  - vircpuhost: Add support for reading MSRs (rhbz#1697627)
  - virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1697627)
  - cpu_x86: Fix placement of *CheckFeature functions (rhbz#1697627)
  - cpu_conf: Introduce virCPUDefFilterFeatures (rhbz#1697627)
  - qemu_command: Use consistent syntax for CPU features (rhbz#1697627)
  - tests: Add QEMU caps data for future 4.1.0 (rhbz#1697627)
  - tests: Add domain capabilities case for QEMU 4.1.0 (rhbz#1697627)
  - qemuxml2argvtest: Add test for CPU features translation (rhbz#1697627)
  - qemu: Add APIs for translating CPU features (rhbz#1697627)
  - qemu: Probe for max-x86_64-cpu type (rhbz#1697627)
  - qemu: Probe for "unavailable-features" CPU property (rhbz#1697627)
  - qemu: Probe host CPU after capabilities (rhbz#1697627)
  - qemu_command: Use canonical names of CPU features (rhbz#1697627)
  - qemu: Translate feature names from query-cpu-model-expansion (rhbz#1697627)
  - qemu: Don't use full CPU model expansion (rhbz#1697627)
  - qemu: Make qemuMonitorGetGuestCPU usable on x86 only (rhbz#1697627)
  - cpu: Introduce virCPUDataAddFeature (rhbz#1697627)
  - qemu: Add type filter to qemuMonitorJSONParsePropsList (rhbz#1697627)
  - util: string: Introduce macro for automatic string lists (rhbz#1697627)
  - util: json: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1697627)
  - qemu: Introduce generic qemuMonitorGetGuestCPU (rhbz#1697627)
  - qemu_process: Prefer generic qemuMonitorGetGuestCPU (rhbz#1697627)
  - util: Rework virStringListAdd (rhbz#1697627)
  - conf: Introduce virCPUDefCheckFeatures (rhbz#1697627)
  - cpu_x86: Turn virCPUx86DataIteratorInit into a function (rhbz#1697627)
  - cpu_x86: Introduce virCPUx86FeatureFilter*MSR (rhbz#1697627)
  - cpu_x86: Read CPU features from IA32_ARCH_CAPABILITIES MSR (rhbz#1697627)
  - cpu_map: Introduce IA32_ARCH_CAPABILITIES MSR features (rhbz#1697627)
  - qemu: Forbid MSR features with old QEMU (rhbz#1697627)
  - qemu: Drop MSR features from host-model with old QEMU (rhbz#1697627)
  - cpu_x86: Fix memory leak - virCPUx86GetHost (rhbz#1697627)
  - qemu: Use @tmpChr in qemuDomainDetachChrDevice to build device string (rhbz#1624204)
  - qemu: Drop "user-" prefix for guestfwd netdev (rhbz#1624204)
  - qemu_hotplug: Attach guestfwd using netdev_add (rhbz#1624204)
  - qemu_hotplug: Detach guestfwd using netdev_del (rhbz#1624204)
  - qemuhotplugtest: Test guestfwd attach and detach (rhbz#1624204)
  - daemon: Register secret driver before storage driver (rhbz#1685151)
  - bhyve: Move autostarting of domains into bhyveStateInitialize (rhbz#1685151)
  - Revert "virStateDriver - Separate AutoStart from Initialize" (rhbz#1685151)
  - Revert "Separate out StateAutoStart from StateInitialize" (rhbz#1685151)
  - util: moving 'type' argument to avoid issues with mount() syscall. (rhbz#1689297)
  - util: cgroup: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1689297)
  - vircgroup: Rename structs to start with underscore (rhbz#1689297)
  - vircgroup: Introduce standard set of typedefs and use them (rhbz#1689297)
  - vircgroup: Extract file link resolving into separate function (rhbz#1689297)
  - vircgroup: Remove unused function virCgroupKill() (rhbz#1689297)
  - vircgroup: Unexport unused function virCgroupAddTaskController() (rhbz#1689297)
  - vircgroup: Unexport unused function virCgroupRemoveRecursively (rhbz#1689297)
  - vircgroup: Move function used in tests into vircgrouppriv.h (rhbz#1689297)
  - vircgroup: Remove pointless bool parameter (rhbz#1689297)
  - vircgroup: Extract mount options matching into function (rhbz#1689297)
  - vircgroup: Use virCgroupMountOptsMatchController in virCgroupDetectPlacement (rhbz#1689297)
  - vircgroup: Introduce virCgroupEnableMissingControllers (rhbz#1689297)
  - vircgroup: machinename will never be NULL (rhbz#1689297)
  - vircgroup: Remove virCgroupAddTaskController (rhbz#1689297)
  - vircgroup: Introduce virCgroupGetMemoryStat (rhbz#1689297)
  - lxc: Use virCgroupGetMemoryStat (rhbz#1689297)
  - vircgroup: fix MinGW build (rhbz#1689297)
  - vircgroup: Duplicate string before modifying (rhbz#1689297)
  - vircgroup: Extract controller detection into function (rhbz#1689297)
  - vircgroup: Extract placement validation into function (rhbz#1689297)
  - vircgroup: Split virCgroupPathOfController into two functions (rhbz#1689297)
  - vircgroup: Call virCgroupRemove inside virCgroupMakeGroup (rhbz#1689297)
  - vircgroup: Simplify if conditions in virCgroupMakeGroup (rhbz#1689297)
  - vircgroup: Remove obsolete sa_assert (rhbz#1689297)
  - tests: Resolve possible overrun (rhbz#1689297)
  - vircgroup: cleanup controllers not managed by systemd on error (rhbz#1689297)
  - vircgroup: fix bug in virCgroupEnableMissingControllers (rhbz#1689297)
  - vircgroup: rename virCgroupAdd.*Task to virCgroupAdd.*Process (rhbz#1689297)
  - vircgroup: introduce virCgroupTaskFlags (rhbz#1689297)
  - vircgroup: introduce virCgroupAddThread (rhbz#1689297)
  - vircgroupmock: cleanup unused cgroup files (rhbz#1689297)
  - vircgroupmock: rewrite cgroup fopen mocking (rhbz#1689297)
  - vircgrouptest: call virCgroupDetectMounts directly (rhbz#1689297)
  - vircgrouptest: call virCgroupNewSelf instead virCgroupDetectMounts (rhbz#1689297)
  - util: introduce vircgroupbackend files (rhbz#1689297)
  - vircgroup: introduce cgroup v1 backend files (rhbz#1689297)
  - vircgroup: extract virCgroupV1Available (rhbz#1689297)
  - vircgroup: detect available backend for cgroup (rhbz#1689297)
  - vircgroup: extract virCgroupV1ValidateMachineGroup (rhbz#1689297)
  - vircgroup: extract virCgroupV1CopyMounts (rhbz#1689297)
  - vircgroup: extract v1 detect functions (rhbz#1689297)
  - vircgroup: extract virCgroupV1CopyPlacement (rhbz#1689297)
  - vircgroup: extract virCgroupV1ValidatePlacement (rhbz#1689297)
  - vircgroup: extract virCgroupV1StealPlacement (rhbz#1689297)
  - vircgroup: extract virCgroupV1DetectControllers (rhbz#1689297)
  - vircgroup: extract virCgroupV1HasController (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetAnyController (rhbz#1689297)
  - vircgroup: extract virCgroupV1PathOfController (rhbz#1689297)
  - vircgroup: extract virCgroupV1MakeGroup (rhbz#1689297)
  - vircgroup: extract virCgroupV1Remove (rhbz#1689297)
  - vircgroup: extract virCgroupV1AddTask (rhbz#1689297)
  - vircgroup: extract virCgroupV1HasEmptyTasks (rhbz#1689297)
  - vircgroup: extract virCgroupV1BindMount (rhbz#1689297)
  - vircgroup: extract virCgroupV1SetOwner (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioWeight (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetBlkioIoServiced (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetBlkioIoDeviceServiced (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWeight (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceReadIops (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWriteIops (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceReadBps (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWriteBps (rhbz#1689297)
  - vircgroup: extract virCgroupV1SetMemory (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetMemoryStat (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetMemoryUsage (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)Memory*Limit (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetMemSwapUsage (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Allow|Deny)Device (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Allow|Deny)AllDevices (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpuShares (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpuCfsPeriod (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpuCfsQuota (rhbz#1689297)
  - vircgroup: extract virCgroupV1SupportsCpuBW (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetCpuacct*Usage (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetCpuacctStat (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)FreezerState (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpusetMems (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpusetMemoryMigrate (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpusetCpus (rhbz#1689297)
  - vircgroup: rename virCgroupController into virCgroupV1Controller (rhbz#1689297)
  - vircgroup: rename controllers to legacy (rhbz#1689297)
  - vircgroup: remove VIR_CGROUP_SUPPORTED (rhbz#1689297)
  - vircgroup: include system headers only on linux (rhbz#1689297)
  - vircgroupv1: fix build on non-linux OSes (rhbz#1689297)
  - Revert "vircgroup: cleanup controllers not managed by systemd on error" (rhbz#1689297)
  - util: introduce cgroup v2 files (rhbz#1689297)
  - vircgroup: introduce virCgroupV2Available (rhbz#1689297)
  - vircgroup: introduce virCgroupV2ValidateMachineGroup (rhbz#1689297)
  - vircgroup: introduce virCgroupV2CopyMounts (rhbz#1689297)
  - vircgroup: introduce virCgroupV2CopyPlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2DetectMounts (rhbz#1689297)
  - vircgroup: introduce virCgroupV2DetectPlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2ValidatePlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2StealPlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2DetectControllers (rhbz#1689297)
  - vircgroup: introduce virCgroupV2HasController (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetAnyController (rhbz#1689297)
  - vircgroup: introduce virCgroupV2PathOfController (rhbz#1689297)
  - vircgroup: introduce virCgroupV2MakeGroup (rhbz#1689297)
  - vircgroup: introduce virCgroupV2Remove (rhbz#1689297)
  - vircgroup: introduce virCgroupV2AddTask (rhbz#1689297)
  - vircgroup: introduce virCgroupV2HasEmptyTasks (rhbz#1689297)
  - vircgroup: introduce virCgroupV2BindMount (rhbz#1689297)
  - vircgroup: introduce virCgroupV2SetOwner (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioWeight (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetBlkioIoServiced (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetBlkioIoDeviceServiced (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWeight (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceReadIops (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWriteIops (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceReadBps (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWriteBps (rhbz#1689297)
  - vircgroup: introduce virCgroupV2SetMemory (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetMemoryStat (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetMemoryUsage (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)MemoryHardLimit (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)MemorySoftLimit (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)MemSwapHardLimit (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetMemSwapUsage (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)CpuShares (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)CpuCfsPeriod (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)CpuCfsQuota (rhbz#1689297)
  - vircgroup: introduce virCgroupV2SupportsCpuBW (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetCpuacctUsage (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetCpuacctStat (rhbz#1689297)
  - vircgroup: register cgroup v2 backend (rhbz#1689297)
  - vircgroup: add support for hybrid configuration (rhbz#1689297)
  - vircgroupmock: change cgroup prefix (rhbz#1689297)
  - vircgroupmock: add support to test cgroup v2 (rhbz#1689297)
  - vircgrouptest: introduce initFakeFS and cleanupFakeFS helpers (rhbz#1689297)
  - vircgrouptest: prepare testCgroupDetectMounts for cgroup v2 (rhbz#1689297)
  - vircgrouptest: add detect mounts test for cgroup v2 (rhbz#1689297)
  - vircgrouptest: add detect mounts test for hybrid cgroups (rhbz#1689297)
  - vircgrouptest: prepare validateCgroup for cgroupv2 (rhbz#1689297)
  - vircgrouptest: add cgroup v2 tests (rhbz#1689297)
  - vircgrouptest: add hybrid tests (rhbz#1689297)
  - virt-host-validate: rewrite cgroup detection to use util/vircgroup (rhbz#1689297)
  - virt-host-validate: require freezer for LXC (rhbz#1689297)
  - virt-host-validate: Fix build on non-Linux (rhbz#1689297)
  - tests: Use correct function name in error path (rhbz#1689297)
  - util: Fix virCgroupGetMemoryStat (rhbz#1689297)
  - tests: Augment vcgrouptest to add virCgroupGetMemoryStat (rhbz#1689297)
  - vircgroup: introduce virCgroupKillRecursiveCB (rhbz#1689297)
  - vircgroupv2: fix virCgroupV2ValidateMachineGroup (rhbz#1689297)
  - util: implement virCgroupV2(Set|Get)CpusetMems (rhbz#1689297)
  - util: implement virCgroupV2(Set|Get)CpusetMemoryMigrate (rhbz#1689297)
  - util: implement virCgroupV2(Set|Get)CpusetCpus (rhbz#1689297)
  - util: enable cgroups v2 cpuset controller for threads (rhbz#1689297)
  - util: vircgroup: pass parent cgroup into virCgroupDetectControllersCB (rhbz#1689297)
  - internal: introduce a family of NULLSTR macros (rhbz#1689297)
  - util: vircgroup: improve controller detection (rhbz#1689297)
  - util: vircgroupv2: use any controller to create thread directory (rhbz#1689297)
  - util: vircgroupv2: enable CPU controller only if it's available (rhbz#1689297)
  - util: vircgroupv2: separate return values of virCgroupV2EnableController (rhbz#1689297)
  - util: vircgroupv2: don't error out if enabling controller fails (rhbz#1689297)
  - util: vircgroupv2: mark only requested controllers as available (rhbz#1689297)
  - Revert "util: vircgroup: pass parent cgroup into virCgroupDetectControllersCB" (rhbz#1689297)
  - util: vircgroupv2: stop enabling missing controllers with systemd (rhbz#1689297)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-30
changelog:
  - virWaitForDevices: Drop confusing part of comment (rhbz#1710575)
  - lib: Drop UDEVSETTLE (rhbz#1710575)
  - m4: Provide default value fore UDEVADM (rhbz#1710575)
  - m4: Drop needless string checks (rhbz#1710575)
  - util: vircgroup: introduce virCgroup(Get|Set)ValueRaw (rhbz#1658890)
  - util: vircgroup: move virCgroupGetValueStr out of virCgroupGetValueForBlkDev (rhbz#1658890)
  - util: vircgroupv1: add support for BFQ blkio files (rhbz#1658890)
  - util: vircgroupv2: add support for BFQ files (rhbz#1658890)
  - Handle copying bitmaps to larger data buffers (rhbz#1703160)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-31
changelog:
  - virDomainObjListAddLocked: fix double free (rhbz#1728530)
  - docs: schemas: Decouple the virtio options from each other (rhbz#1729675)
  - util: command: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1721434)
  - util: command: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1721434)
  - util: netdevopenvswitch: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1721434)
  - util: virnetdevopenvswitch: Drop an unused variable @ovs_timeout (rhbz#1721434)
  - util: netdevopenvswitch: use VIR_AUTOPTR for aggregate types (rhbz#1721434)
  - util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1721434)
  - virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1721434)
  - test: Introduce virnetdevopenvswitchtest (rhbz#1721434)
  - vircommand: Separate mass FD closing into a function (rhbz#1721434)
  - virCommand: use procfs to learn opened FDs (rhbz#1721434)
  - util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1721434)
  - util: Avoid possible error in virCommandMassClose (rhbz#1721434)
  - vircgroup: fix cgroups v2 controllers detection (rhbz#1689297)
  - vircgroupv2: store enabled controllers (rhbz#1689297)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32
changelog:
  - virDomainObjListAddLocked: Produce better error message than 'Duplicate key' (rhbz#1737790)
  - virdbus: Grab a ref as long as the while loop is executed (rhbz#1741900)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33
changelog:
  - vircgroupv2: fix parsing multiple values in single file (rhbz#1741825)
  - vircgroupv2: fix virCgroupV2GetCpuCfsQuota for "max" value (rhbz#1741837)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36
changelog:
  - cpu_conf: Pass policy to CPU feature filtering callbacks (rhbz#1749672, rhbz#1756156, rhbz#1721608)
  - qemuxml2*test: Add tests for Icelake-Server, -pconfig (rhbz#1749672, rhbz#1756156, rhbz#1721608)
  - qemu: Drop disabled CPU features unknown to QEMU (rhbz#1749672, rhbz#1756156, rhbz#1721608)
  - cputest: Add data for Ice Lake Server CPU (rhbz#1749672, rhbz#1756156, rhbz#1721608)
  - cpu_map: Drop pconfig from Icelake-Server CPU model (rhbz#1749672, rhbz#1756156, rhbz#1721608)
  - qemu: Fix NULL ptr dereference caused by qemuDomainDefFormatBufInternal (rhbz#1749672, rhbz#1756156, rhbz#1721608)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-37
changelog:
  - cpu_map: Add TAA_NO bit for IA32_ARCH_CAPABILITIES MSR (CVE-2019-11135)
  - cpu_map: Add TSX_CTRL bit for IA32_ARCH_CAPABILITIES MSR (CVE-2019-11135)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-39
changelog:
  - selinux: Do not report an error when not returning -1 (rhbz#1788096)
  - qemu: Fix hyperv features with QEMU 4.1 (rhbz#1794868)
  - qemu: Prefer dashes for hyperv features (rhbz#1794868)
  - cpu: Drop KVM_ from hyperv feature macros (rhbz#1794868)
  - cpu: Drop unused KVM features (rhbz#1794868)
  - qemu: Fix KVM features with QEMU 4.1 (rhbz#1794868)
  - cpu: Drop CPUID definition for hv-spinlocks (rhbz#1794868)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-40
changelog:
  - process: wait longer on kill per assigned Hostdev (rhbz#1785338)
  - process: wait longer 5->30s on hard shutdown (rhbz#1785338)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-42
changelog:
  - RHEL: virscsi: Check device type before getting it's /dev node name (rhbz#1808388)
  - RHEL: virscsi: Support TAPEs in virSCSIDeviceGetDevName() (rhbz#1808388)
  - RHEL: virscsi: Introduce and use virSCSIDeviceGetUnprivSGIOSysfsPath() (rhbz#1808388)
  - RHEL: virutil: Accept non-block devices in virGetDeviceID() (rhbz#1808388)
  - RHEL: qemuSetUnprivSGIO: Actually use calculated @sysfs_path to set unpriv_sgio (rhbz#1808388)
  - RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1808399)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-25
changelog:
  - Upgrade components in virt:rhel module:stream for RHEL-8.3 release (rhbz#1828317)
  - conf: Don't format http cookies unless VIR_DOMAIN_DEF_FORMAT_SECURE is used (CVE-2020-14301)
  - util: Introduce a parser for kernel cmdline arguments (rhbz#1848997)
  - qemu: Check if s390 secure guest support is enabled (rhbz#1848997)
  - qemu: Check if AMD secure guest support is enabled (rhbz#1848997)
  - tools: Secure guest check on s390 in virt-host-validate (rhbz#1848997)
  - tools: Secure guest check for AMD in virt-host-validate (rhbz#1848997)
  - docs: Update AMD launch secure description (rhbz#1848997)
  - docs: Describe protected virtualization guest setup (rhbz#1848997)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-26
changelog:
  - qemu: blockjob: Don't base bitmap handling of active-layer block commit on QEMU_CAPS_BLOCKDEV_REOPEN (rhbz#1857779)
  - qemu: blockjob: Actually delete temporary bitmap on failed active commit (rhbz#1857779)
  - qemu: block: Remove 'active-write' bitmap even if there are no bitmaps to merge (rhbz#1857779)
  - qemuDomainBlockPivot: Rename 'actions' to 'bitmapactions' (rhbz#1857779)
  - qemuDomainBlockPivot: Ignore failures of creating active layer bitmap (rhbz#1857779)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-27
changelog:
  - src: assume sys/sysmacros.h always exists on Linux (rhbz#1860421)
  - virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1860421)
  - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1860421)
  - virdevmapper: Don't use libdevmapper to obtain dependencies (CVE-2020-14339, rhbz#1860421)
  - virDevMapperGetTargets: Don't ignore EBADF (rhbz#1860421)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-28
changelog:
  - virdevmapper: Don't cache device-mapper major (rhbz#1860421)
  - virdevmapper: Handle kernel without device-mapper support (rhbz#1860421)
  - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1860421)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-29
changelog:
  - qemu: substitute missing model name for host-passthrough (rhbz#1850680)
  - rpc: gendispatch: handle empty flags (CVE-2020-25637)
  - rpc: add support for filtering @acls by uint params (CVE-2020-25637)
  - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
  - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
  - qemu: Fix domfsinfo for non-PCI device information from guest agent (rhbz#1858771)
  - virDomainNetFindIdx: add support for CCW addresses (rhbz#1837495)
  - check for NULL before calling g_regex_unref (rhbz#1861176)
  - virhostcpu.c: fix 'die_id' parsing for Power hosts (rhbz#1876742)
  - qemuFirmwareFillDomain: Fill NVRAM template on migration too (rhbz#1880418)
  - node_device: refactor udevProcessCCW (rhbz#1853289, rhbz#1865932)
  - node_device: detect CSS devices (rhbz#1853289, rhbz#1865932)
  - virsh: nodedev: ability to filter CSS capabilities (rhbz#1853289, rhbz#1865932)
  - node_device: detect DASD devices (rhbz#1853289, rhbz#1865932)
  - udevProcessCSS: Check if def->driver is non-NULL (rhbz#1853289, rhbz#1865932)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-30
changelog:
  - cpu_map: Add missing x86 features in 0x7 CPUID leaf (rhbz#1861506)
  - cpu_map: Add missing x86 features in 0x80000008 CPUID leaf (rhbz#1861506)
  - cpu_map: Add missing AMD SVM features (rhbz#1861506)
  - Add testdata for AMD EPYC 7502 (rhbz#1861506)
  - cpu_map: Defined and enable EPYC-Rome model (rhbz#1861506)
  - cpu_map: Remove monitor feature from EPYC-Rome (rhbz#1861506)
  - tests: qemuxml2argv: Use existing machine type for 'numatune-distances' case (rhbz#1749518)
  - qemuxml2xmltest: Add "numatune-distance" test case (rhbz#1749518)
  - conf: Move and rename virDomainParseScaledValue() (rhbz#1749518)
  - numa_conf: Drop CPU from name of two functions (rhbz#1749518)
  - qemu_command: Rename qemuBuildNumaArgStr() (rhbz#1749518)
  - qemuBuildMachineCommandLine: Drop needless check (rhbz#1749518)
  - numa_conf: Make virDomainNumaSetNodeCpumask() return void (rhbz#1749518)
  - Allow NUMA nodes without vCPUs (rhbz#1749518)
  - conf: Parse and format HMAT (rhbz#1749518)
  - conf: Validate NUMA HMAT configuration (rhbz#1749518)
  - numa: expose HMAT APIs (rhbz#1749518)
  - qemu: Introduce QEMU_CAPS_NUMA_HMAT capability (rhbz#1749518)
  - qemu: Build HMAT command line (rhbz#1749518)
  - qemuBuildNumaCommandLine: Fix @masterInitiator check (rhbz#1749518)
  - numa_conf: Properly check for caches in virDomainNumaDefValidate() (rhbz#1749518)
  - RNG: Allow interleaving of /domain/cpu/numa/cell children (rhbz#1749518)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-31
changelog:
  - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1872610)
  - qemu: format 'ramfb' attribute for mediated devices (rhbz#1876297)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-32
changelog:
  - util: replace macvtap name reservation bitmap with a simple counter (rhbz#1874304)
  - util: assign tap device names using a monotonically increasing integer (rhbz#1874304)
  - util: virNetDevTapCreate: initialize fd to -1 (rhbz#1874304)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-33
changelog:
  - cpu_map: Fix Icelake Server model number (rhbz#1537734)
  - cputestdata: Add test data for Snowridge (rhbz#1537734)
  - cpu_map: Add support for fsrm CPU feature (rhbz#1537734)
  - cpu_map: Add support for core-capability CPU feature (rhbz#1537734)
  - cpu_map: Add support for split-lock-detect CPU feature (rhbz#1537734)
  - cpu_map: Define and enable Snowridge model (rhbz#1537734)
  - util: fix typo in VIR_MOCK_WRAP_RET_ARGS() (rhbz#1607929)
  - util/tests: enable locking on iptables/ebtables commandlines in unit tests (rhbz#1607929)
  - util/tests: enable locking on iptables/ebtables commandlines by default (rhbz#1607929)
  - tests: fix iptables test case commandline options in virfirewalltest.c (rhbz#1607929)
  - network: be more verbose about the reason for a firewall reload (rhbz#1607929)
  - util: always check for ebtables/iptables binaries, even when using firewalld (rhbz#1607929)
  - util: synchronize with firewalld before we start calling iptables directly (rhbz#1607929)
  - util: call iptables directly rather than via firewalld (rhbz#1607929)
  - util: virhostcpu: Fail when fetching CPU Stats for invalid cpu (rhbz#1915183)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-34
changelog:
  - qemu: move cgroup cpu period and quota defines to vircgroup.h (rhbz#1915733)
  - vircgroupv1: use defines for cpu period and quota limits (rhbz#1915733)
  - vircgroupv2: use defines for cpu period and quota limits (rhbz#1915733)
  - vircgroup: fix cpu quota maximum limit (rhbz#1915733)
  - util: add virNetDevGetPhysPortName (rhbz#1918708)
  - util: avoid manual VIR_FREE of a g_autofree pointer in virPCIGetName() (rhbz#1918708)
  - util: Add phys_port_name support on virPCIGetNetName (rhbz#1918708)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-35
changelog:
  - vircgroupv2: properly detect placement of running VM (rhbz#1798463)
  - virsystemd: export virSystemdHasMachined (rhbz#1798463)
  - virsystemd: introduce virSystemdGetMachineByPID (rhbz#1798463)
  - virsystemd: introduce virSystemdGetMachineUnitByPID (rhbz#1798463)
  - vircgroup: use DBus call to systemd for some APIs (rhbz#1798463)
  - vircgroupv1: refactor virCgroupV1DetectPlacement (rhbz#1798463)
  - vircgroupv2: move task into cgroup before enabling controllers (rhbz#1798463)
  - vircgroup: introduce virCgroupV1Exists and virCgroupV2Exists (rhbz#1798463)
  - vircgroup: introduce nested cgroup to properly work with systemd (rhbz#1798463)
  - tests: add cgroup nested tests (rhbz#1798463)
  - vircgroup: correctly free nested virCgroupPtr (rhbz#1798463)
  - qemu: Add virtio related options to vsock (rhbz#1931548)
  - domain_validate: use defines for cpu period and quota limits (rhbz#1798463)
  - docs: use proper cpu quota value in our documentation (rhbz#1798463)
  - vircgroup: enforce range limit for cpu.shares (rhbz#1798463)
  - cgroup: use virCgroupSetCpuShares instead of virCgroupSetupCpuShares (rhbz#1798463)
  - cpumap: Add support for ibrs CPU feature (rhbz#1926864)
  - cpumap: Add support for svme-addr-check CPU feature (rhbz#1926864)
  - cpu_map: Add EPYC-Milan x86 CPU model (rhbz#1926864)
  - cpu_map: Install x86_EPYC-Milan.xml (rhbz#1926864)
  - cpu_map: Fix spelling of svme-addr-chk feature (rhbz#1926864)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-36
changelog:
  - network: make it safe to call networkSetupPrivateChains() multiple times (rhbz#1942805)
  - network: force re-creation of iptables private chains on firewalld restart (rhbz#1942805)
  - hostdev: Update mdev pointer reference after checking device type (rhbz#1940449)
  - hostdev: mdev: Lookup mdevs by sysfs path rather than mdev struct (rhbz#1940449)
  - qemu_firmware: don't error out for unknown firmware features (rhbz#1961562)
  - docs: improve description of secure attribute for loader element (rhbz#1929357)
  - conf: introduce virDomainDefParseBootInitOptions (rhbz#1929357)
  - conf: introduce virDomainDefParseBootKernelOptions (rhbz#1929357)
  - conf: introduce virDomainDefParseBootFirmwareOptions (rhbz#1929357)
  - conf: introduce virDomainDefParseBootLoaderOptions (rhbz#1929357)
  - conf: introduce virDomainDefParseBootAcpiOptions (rhbz#1929357)
  - conf: use switch in virDomainDefParseBootOptions (rhbz#1929357)
  - conf: introduce support for firmware auto-selection feature filtering (rhbz#1929357)
  - qemu: implement support for firmware auto-selection feature filtering (rhbz#1929357)
  - domain_conf: Don't leak def->os.firmwareFeatures (rhbz#1929357)
  - conf: remove duplicated firmware type attribute (rhbz#1929357)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-37
changelog:
  - security: fix SELinux label generation logic (CVE-2021-3631)
  - storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath (CVE-2021-3667)


author: Jiri Denemark <jdenemar@redhat.com> - 7.8.0-1
changelog:
  - Rebased to libvirt-7.8.0 (rhbz#2012802)
  - The rebase also fixes the following bugs:
      rhbz#1839070, rhbz#1942275, rhbz#1995865, rhbz#1806857, rhbz#1924616
      rhbz#1978574, rhbz#1989457, rhbz#1965589, rhbz#1677608, rhbz#1926508
      rhbz#1810863, rhbz#1845468, rhbz#1738392, rhbz#1965140


author: Jiri Denemark <jdenemar@redhat.com> - 7.9.0-1
changelog:
  - Rebased to libvirt-7.9.0 (rhbz#2012802)
  - The rebase also fixes the following bugs:
      rhbz#2011731, rhbz#2012385, rhbz#2013539


author: Jiri Denemark <jdenemar@redhat.com> - 7.10.0-1
changelog:
  - Rebased to libvirt-7.10.0 (rhbz#2012802)
  - The rebase also fixes the following bugs:
      rhbz#1845468, rhbz#2017928, rhbz#2024419, rhbz#1953389, rhbz#1510237


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-0rc1.1
changelog:
  - Rebased to libvirt-8.0.0-rc1 (rhbz#2012802)
  - The rebase also fixes the following bugs:
      rhbz#1689202, rhbz#2014369, rhbz#2030119, rhbz#2029380, rhbz#2035237
      rhbz#2035714, rhbz#2034180


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-2
changelog:
  - Revert "report error when virProcessGetStatInfo() is unable to parse data" (rhbz#2041610)
  - qemu: fix inactive snapshot revert (rhbz#2043584)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-3
changelog:
  - qemuDomainSetupDisk: Initialize 'targetPaths' (rhbz#2046172)
  - RHEL: Remove <glib-2.64.0 workaround for GSource race (rhbz#2045879)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-4
changelog:
  - qemu_command: Generate memory only after controllers (rhbz#2050697)
  - qemu: Validate domain definition even on migration (rhbz#2050702)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-5
changelog:
  - node_device: Rework udevKludgeStorageType() (rhbz#2056673)
  - node_device: Treat NVMe disks as regular disks (rhbz#2056673)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-6
changelog:
  - conf: Introduce memory allocation threads (rhbz#2067126)
  - qemu_capabilities: Detect memory-backend-*.prealloc-threads property (rhbz#2067126)
  - qemu_validate: Validate prealloc threads against qemuCpas (rhbz#2067126)
  - qemu_command: Generate prealloc-threads property (rhbz#2067126)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-7
changelog:
  - cpu_map: Disable cpu64-rhel* for host-model and baseline (rhbz#1851227)
  - cputest: Drop some old artificial baseline tests (rhbz#1851227)
  - cputest: Give better names to baseline tests (rhbz#1851227)
  - cputest: Add some real world baseline tests (rhbz#1851227)
  - cpu_x86: Consolidate signature match in x86DecodeUseCandidate (rhbz#1851227)
  - cpu_x86: Refactor feature list comparison in x86DecodeUseCandidate (rhbz#1851227)
  - cpu_x86: Penalize disabled features when computing CPU model (rhbz#1851227)
  - cpu_x86: Ignore enabled features for input models in x86DecodeUseCandidate (rhbz#1851227)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-8
changelog:
  - nwfilter: fix crash when counting number of network filters (CVE-2022-0897, rhbz#2063902)
  - virDomainDiskDefValidate: Improve error messages for 'startupPolicy' checks (rhbz#2095758)
  - domain_validate: Split out validation of disk startup policy (rhbz#2095758)
  - virDomainDiskDefValidateStartupPolicy: Validate disk type better (rhbz#2095758)
  - virDomainDiskTranslateSourcePool: Fix check of 'startupPolicy' definition (rhbz#2095758)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-9
changelog:
  - conf: virtiofs: add thread_pool element (rhbz#2079582)
  - qemu: virtiofs: format --thread-pool-size (rhbz#2079582)
  - conf: Move virDomainObj::originalMemlock into qemuDomainObjPrivate (rhbz#2089433)
  - qemu_domain: Format qemuDomainObjPrivate::originalMemlock (rhbz#2089433)
  - qemu: Add qemuDomainSetMaxMemLock helper (rhbz#2089433)
  - qemu_migration: Use qemuDomainSetMaxMemLock (rhbz#2089433)
  - qemu_migration: Restore original memory locking limit (rhbz#2089433)
  - Add VIR_MIGRATE_ZEROCOPY flag (rhbz#2089433)
  - virsh: Add support for VIR_MIGRATE_ZEROCOPY flag (rhbz#2089433)
  - qemu_migration: Implement VIR_MIGRATE_ZEROCOPY flag (rhbz#2089433)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-10
changelog:
  - security_selinux.c: Relabel existing mode="bind" UNIX sockets (rhbz#2101575)
  - RHEL: qemu_migration: Fix restoring memlock limit on destination (rhbz#2107954)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-11
changelog:
  - qemu_process: Don't require a hugetlbfs mount for memfd (rhbz#2123196)
  - qemu_namespace: Tolerate missing ACLs when creating a path in namespace (rhbz#2123196)
  - qemu_namespace: Fix a corner case in qemuDomainGetPreservedMounts() (rhbz#2123196)
  - qemu_namespace: Introduce qemuDomainNamespaceSetupPath() (rhbz#2123196)
  - qemu_process.c: Propagate hugetlbfs mounts on reconnect (rhbz#2123196)
  - qemuProcessReconnect: Don't build memory paths (rhbz#2123196)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-12
changelog:
  - util: json: Split out array->strinlist conversion from virJSONValueObjectGetStringArray (rhbz#2149752)
  - qemuAgentGetDisks: Don't use virJSONValueObjectGetStringArray for optional data (rhbz#2149752)
  - virpidfile: Add virPidFileReadPathIfLocked func (rhbz#2152188)
  - qemu: tpm: Get swtpm pid without binary validation (rhbz#2152188)
  - qemu_tpm: Do async IO when starting swtpm emulator (rhbz#2152188)
  - qemu: gpu: Get pid without binary validation (rhbz#2152188)
  - spec: libvirt-daemon: Add optional dependency on *-client (rhbz#2136591)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-13
changelog:
  - build: Only install libvirt-guests when building libvirtd (rhbz#2153688)
  - tools: Fix install_mode for some scripts (rhbz#2153688)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-23.2.el8
changelog:
  - util: Fix error return for virProcessKillPainfullyDelay() (RHEL-36064)
  - rpc: ensure temporary GSource is removed from client event loop (CVE-2024-4418)


author: zhaotianrui <zhaotianrui@loongson.cn> - 8.0.0-23.2.0.1
changelog:
  - Add loongarch support
  - Fix loongarch xml validate
  - Synchronize upstream patches "Use correct tpm device for all non-x86" (lixianglai@loongson.cn)
  - Synchronize upstream patches "validate: Drop tpm-tis arch validation" (lixianglai@loongson.cn)
  - Add new Dharma CPU model (zhouyanjing@hygon.cn)


author: zhaotianrui <zhaotianrui@loongson.cn> - 8.0.0-23.3.0.1
changelog:
  - Add loongarch support
  - Fix loongarch xml validate
  - Synchronize upstream patches "Use correct tpm device for all non-x86" (lixianglai@loongson.cn)
  - Synchronize upstream patches "validate: Drop tpm-tis arch validation" (lixianglai@loongson.cn)
  - Add new Dharma CPU model (zhouyanjing@hygon.cn)
  - Add Phytium S5000C CPU model (shuaijiakun1288@phytium.com.cn)
  - Add sw64arch support (lufeifei@wxiat.com)


author: hanliyang <hanliyang@hygon.cn> - 8.0.0-23.3.0.2
changelog:
  - conf: qemu: add libvirt support reuse id for hygon CSV
  - conf: qemu: support provide inject secret for Hygon CSV


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-2
changelog:
  - [RFE] RFE backport allow enabling ZEROCOPY live migration to libvirt-python on RHEL8 to be consumed by VDSM (rhbz#2092756)


author: Alex Vainman <alexv@mellanox.com> - 7.0.14-1
changelog:
  - New upstream release
  - Removal of redundant macros and obsolete/unneeded tags
  - Added ExcludeArch, BuildRequires and Require sections
  - Fixes and cleanups in the build and installation sections
  - Install 30-libvma-limits.conf file under 
    /etc/security/limits.d/
  - Fixes related to files/directories ownerships
  - Removal of vma_perf_envelope.sh from the utility package
  - Update Source tag URL
  - Fix most of the rpmlint warnings


author: Alex Vainman <alexv@mellanox.com> - 7.0.14-2
changelog:
  - Added reasoning for archs exclusion
  - Package description improvement
  - Removal of the pre scriplet
  - Added COPYING and LICENSE files to the package


author: Alex Vainman <alexv@mellanox.com> - 8.0.1-1
changelog:
  - New upstream release
  - Move to dual license: GPLv2 or BSD
  - ExcludeArch update
  - Removal of extra space in:
    config(noreplace) {_sysconfdir}/security/limits.d/30-libvma-limits.conf
  - Add V=1 to make


author: Donald Dutile <ddutile@redhat.com> - 8.1.1-1
changelog:
  - Rebase to 8.1.1, re-apply patch to 8.0.1-2
  - Add (Build)Requires of libibverbs to 1.2.2
  - Resolves: rhbz#1353704


author: Jarod Wilson <jarod@redhat.com> - 8.1.3-1
changelog:
  - Patch in additional coverity fixes from upstream git tree
  - Rebase to 8.1.3 to pick up copious coverity corrections
  - Related: rhbz#1271624


author: Jarod Wilson <jarod@redhat.com> - 8.1.4-1
changelog:
  - Rebase to 8.1.4 after latest round of coverity fixes upstream
    reduced reported defects to 0
  - Related: rhbz#1271624


author: Jarod Wilson <jarod@redhat.com> - 8.6.10-0.1
changelog:
  - Rebase to upstream v8.6.10 pre-release, use 0.x release number scheme
    as means to differentiate pre-release from release


author: Petr Pisar <ppisar@redhat.com> - 0.9.11-9
changelog:
  - Fix CVE-2018-15127 (Heap out-of-bounds write in
    rfbserver.c:rfbProcessFileTransferReadBuffer()) (bug #1662997)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 0.9.11-16
changelog:
  - Fix CVE-2019-20839
    Resolves: #1851032
  - Fix CVE-2018-21247
    Resolves: #1852516
  - Fix CVE-2020-14405
    Resolves: #1860527
  - Fix CVE-2020-14397
    Resolves: #1861152


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.8-6
changelog:
  - Python 2 binary package renamed to python2-libvoikko
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Mike FABIAN <mfabian@redhat.com> - 4.1.1-1
changelog:
  - Rebase to 4.1.1 from Fedora 29 (provides only python3-libvoikko,
    removes python2-libvoikko)
  - Resolves: rhbz#1636062


author: Mike FABIAN <mfabian@redhat.com> - 4.1.1-2
changelog:
  - Fix man file names for Flatpak builds, exclude __pycache__ files from Flatpak builds
  - Resolves: rhbz#1896322


author: Wim Taymans <wtaymans@redhat.com> - 1.7.0-7
changelog:
  - Fix for CVE-2019-9232, CVE-2019-9433, CVE-2019-9371, CVE-2019-2126
  - Resolves: rhbz#1796086, rhbz#1796100, rhbz#1796448, rhbz#1796454
  - Remove php-cli BR


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.9.0-2
changelog:
  - fix permissions on binaries
  - rename generic binaries to v8_*
  - link shared library to -lm, -lpthread to resolve missing weak symbols


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.9.0-7
changelog:
  - update to git revision 8389f1967c5f8b3819cca80705b1b4ba04132b93
  - upstream fix for bz 599147
  - proper shared library support


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.3-4
changelog:
  - libwacom-0.3-add-list-devices.patch: add API to list devices
  - libwacom-0.3-add-udev-generator.patch: add a udev rules generater tool
  - libwacom-0.3-add-bamboo-one.patch: add Bamboo One definition


author: Olivier Fourdan <ofourdan@redhat.com> 0.3-5
changelog:
  - Mark data subpackage as noarch and make it a requirement for libwacom
  - Use generated udev rule file to list only known devices from libwacom
    database


author: Peter Hutterer <peter.hutterer@redhat.com> 0.5-2
changelog:
  - Fix gnome-control-center crash for Bamboo Pen & Touch
  - Generic styli needs to have erasers, default to two tools.


author: Kalev Lember <klember@redhat.com> - 1.14.91-1
changelog:
  - Update to 1.14.91
  - Add new libwayland-egl subpackage and obsolete mesa-libwayland-egl
  - Remove ldconfig scriptlets


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.3.0-1
changelog:
  - upstream release 0.3.0
  - enable gif2webp
  - add build requires on giflib-devel and libtiff-devel
  - use make_install and hardened macros
  - list binaries explicitly


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Weitao Zhou <yunqi.zwt@alibaba-inc.com> - 1.2.0-8.0.1
changelog:
  - Obsoletes libwebp7 from remi repo for better compatibility
  - Fix CVE-2023-4863 (#2238431)(cheng.shengyu1@zte.com.cn)


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.5-1
changelog:
  - Update to openwsman-2.6.5
  - Simplify python binding build and drop python2 subpackage
  - Fix malformed HTTP 200 status line


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.5-3
changelog:
  - Fix wrong SSL_CTX_set_cipher_list() retval check
  - Explicitly disable build of java bindings (build fails if java-devel is installed)


author: Tomas Korbar <tkorbar@redhat.com> - 0.16.105-1
changelog:
  - Change specfile accordingly to mosvald's review
  - Remove obsolete ldconfig scriptlets
  - libyang-devel-doc changed to noarch package
  - Add python_provide macro to python3-libyang subpackage
  - Remove obsolete Requires from libyang-cpp-devel
  - Start using cmake with smp_mflags macro


author: Michal Ruprich <mruprich@redhat.com> - 0.16.105-4
changelog:
  - Resolves: #1780311 - CVE-2019-19333 libyang: stack-based buffer overflow in make_canonical when bits leaf type is used
  - Resolves: #1780313 - CVE-2019-19334 libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used


author: Remi Collet <remi@remirepo.net> - 1.3.2-1
changelog:
  - update to 1.3.2
  - drop multilib header hack
  - change URL to https://libzip.org/
  - test suite now ok on all arch


author: Remi Collet <remi@remirepo.net> - 1.5.1-1
changelog:
  - update to 1.5.1
  - drop dependency on zlib-devel and bzip2-devel no more
    referenced in libzip.pc
  - drop rpath patch merged upstream


author: Remi Collet <rcollet@redhat.com> - 1.5.2-1
changelog:
  - update to 1.5.2
  - add all explicit cmake options to ensure openssl is used
    even in local build with other lilbraries available


author: Miroslav Lichvar <mlichvar@redhat.com> 2.0-3
changelog:
  - add support for active-backup team interface (#1685467)
  - add support for more accurate synchronization to phc2sys (#1677217)
  - add hwts_filter option to ptp4l (#1708554)
  - limit unicast message rate per address and grant duration (#1707395)
  - fix comparing of unicast addresses (#1707395)
  - fix building with new kernel headers (#1707395)
  - update testsuite (#1707395)
  - don't leak memory when allocation fails (#1707395)


author: Miroslav Lichvar <mlichvar@redhat.com> 2.0-5
changelog:
  - fix sample timestamps when synchronizing PHC to system clock (#1787376)
  - fix handling of zero-length messages (#1827275)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1895005 CVE-2021-3571)
  - add read-only UDS port (#1929797)
  - add option to set clockClass threshold (#1980386)
  - don't repeat some log messages in multi-port configuration (#1980377)
  - increase default TX timestamp timeout to 10 ms (#1977136)


author: Miroslav Lichvar <mlichvar@redhat.com> 0-0.3.20121109git4e8107
changelog:
  - update to 20121109git4e8107
  - install unchanged default.cfg as ptp4l.conf
  - drop conflicts from phc2sys service


author: Miroslav Lichvar <mlichvar@redhat.com> 1.6-1
changelog:
  - update to 1.6
  - set random seed in testing to get deterministic results
  - remove trailing whitespace in default timemaster.conf


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-21326 RHEL-21328 RHEL-21329)
  - fix ts2phc to handle large NMEA delay (RHEL-23278)
  - fix loading and reloading of leapfile


author: Omair Majid <omajid@redhat.com> - 2.8.1-9
changelog:
  - Build with standard distro-wide optimization flags even on s390 and s390x
  - Resolves: rhbz#1630591


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 2.8.1-11.0.1
changelog:
  - fix build failed for better compatibility for glibc2.30 and glibc2.28
  - Fix gcc10 -fno-common compile issue for compatible with gcc10&gcc8 build


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Kamil Dudka <kdudka@redhat.com> - 2.8.9-0.23.dev19
changelog:
  - do not require 'rsh' installed at build time (#1581747)
  - update to the latest upstream pre-release


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Parag Nemade <pnemade AT redhat DOT com> - 0.2.4-38
changelog:
  - Resolves:rh#2180735 - move marisa-devel in rhel8 CRB repository
    also fix missing gating test execution


author: Alex Williamson <alex.williamson@redhat.com> - 0.61-1
changelog:
  - d7dfac5f5bfb ("Merge pull request #15 from cohuck/attr_sanity")
  - 28a9fa17b51e ("validate attribute names")


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 1.1.0-2
changelog:
  - Create additonal directories required by installation.
  - Fix sporadic callout test failures
    Related: rhbz#1999687


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 0:1.5.22-2.0.1
changelog:
  - Fix glibc2.32 build issue for better compatible with both glibc2.28 and glibc2.32
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 and gcc8 build


author: Sebastian Kisela <skisela@redhat.com> - 4.6.2-1
changelog:
  - New release 4.6.2.
  - Convert deprecated specfile python macros to use python2 macros.
  - Explicitly depend on gcc, as it was removed from buildroot default packages.


author: Kyle McMartin <kyle@redhat.com> - 10.0.2-4.20140118
changelog:
  - Fix up building drivers on AArch64, enable LLVM there.
  - Eliminate some F17 cruft from the spec, since we don't support it anymore.
  - Conditionalize with_radeonsi on with_llvm instead of ppc,s390 && >F-17.
  - Conditionalize libvdpau_radeonsi.so.1* on with_radeonsi instead of simply
    with_llvm to fix a build failure on AArch64.


author: Kyle McMartin <kyle@redhat.com> - 10.0.2-6.20140118
changelog:
  - Fix accidentally inverted logic that meant radeonsi_dri.so went missing
    on all architectures instead of just ppc and s390. Sorry!


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.1-1.20140305
changelog:
  - mesa: Bump version to 10.1 (final) (Ian Romanick)
  - glx/dri2: fix build failure on HURD (Julien Cristau)
  - i965: Validate (and resolve) all the bound textures. (Chris Forbes)
  - i965: Widen sampler key bitfields for 32 samplers (Chris Forbes)


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.1.1-3.20140430
changelog:
  - Update to today snapshot
  - apply as downstream patches for reporting GPU max frequency on r600 (FD.o #73511)


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.2-0.1.rc1.20140505
changelog:
  - Enable omx on x86 and arm (RHBZ #1094199) (kwizart)
  - Split _with_xa from _with_vmware (RHBZ #1094199) (kwizart)
  - Add _with_xa when arch is arm and _with_freedreeno (RHBZ #1094199) (kwizart)


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.2-0.3.rc1.20140505
changelog:
  - Move gallium-pipe to the correct sub-package (RHBZ #1094588) (kwizart)
  - Move egl_gallium.so to the correct location (RHBZ #1094588) (kwizart)
  - Switch from with to enable for llvm shared libs (kwizart)


changelog: - Rebase to 'master' branch (f381c27c548aa28b003c8e188f5d627ab4105f76 commit)
author:
  Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.3-0.devel.1.f381c27c548aa28b003c8e188f5d627ab4105f76


changelog: - c40d7d6d948912a4d51cbf8f0854cf2ebe916636 commit
author:
  Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.3-0.devel.2.c40d7d6d948912a4d51cbf8f0854cf2ebe916636


changelog: - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
author:
  Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 10.3-0.devel.2.c40d7d6d948912a4d51cbf8f0854cf2ebe916636.1


changelog: - 10.4 c2867f5b3626157379ef0d4d5bcaf5180ca0ec1f
author:
  Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.4-0.devel.1.c2867f5b3626157379ef0d4d5bcaf5180ca0ec1f


changelog: - 80771e47b6c1e47ab55f17311e1d4e227a9eb3d8 commit
author:
  Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.4-0.devel.2.80771e47b6c1e47ab55f17311e1d4e227a9eb3d8


changelog: - add swrast to dri driver list
author:
  Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.4-0.devel.2.1.80771e47b6c1e47ab55f17311e1d4e227a9eb3d8


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 11.3.0-0.1.gitea2bff1
changelog:
  - 11.3.0 (gitea2bff1)
  - Add SWR state-tracker (but disable because build is broken)
  - Use gallium-osmesa instead of classic osmesa (RHBZ #1305588)
  - Remove very old changelogs


author: Hans de Goede <hdegoede@redhat.com> - 17.0.0-0.4.rc2
changelog:
  - Update eglext.h to 20161230 version this brings in some new defines needed
    by some apps / libraries


author: Hans de Goede <hdegoede@redhat.com> - 17.0.0-0.5.rc2
changelog:
  - Fix GLX_SGIX_fbconfig extension dispatching with glvnd, this fixes games such
    as "The Binding of Isaac: Rebirth" and "Crypt of the NecroDancer" from Steam


author: Hans de Goede <hdegoede@redhat.com> - 17.0.1-3
changelog:
  - Fix glXGetDriverConfig not working with glvnd (rhbz#1429894)
  - Fix indirect rendering, add libGLX_indirect.so.0 symlink (rhbz#1427174)


author: Adam Jackson <ajax@redhat.com> - 18.3.0-0.2
changelog:
  - Mesa 18.3.0 RC2
  - Drop python3 build system backport
  - Drop no-longer-necessary big-endian build fix
  - Re-enable 10bpc fbconfigs


author: José Expósito <jexposit@redhat.com> - 23.1.4-3
changelog:
  - Fix off-by-one error for newblock allocation in dlist_alloc
    Resolves: https://issues.redhat.com/browse/RHEL-40566


author: Uri Lublin <uril@redhat.com> - 2.30-2
changelog:
  - Remove PROVIDE() qualifiers from definition of __CTOR_LIST__ and __DTOR_LIST__
    Resolves: rhbz#1846152


author: Uri Lublin <uril@redhat.com> - 2.4.8-1
changelog:
  - Update to 2.4.8 and pick up CVEs fixes
  - Resolves: rhbz#2050504 CVE-2022-23990
  - Resolves: rhbz#2057023 CVE-2022-25236
  - Resolves: rhbz#2057037 CVE-2022-25235
  - Resolves: rhbz#2057094 CVE-2022-25313
  - Resolves: rhbz#2057099 CVE-2022-25314
  - Resolves: rhbz#2057127 CVE-2022-25315


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 1.14.1-2
changelog:
  - ExclusiveArch: i686, x86_64
    Related: rhbz#1615874
  - BuildRequires: python3-devel
    Related: rhbz#1615874


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.0.2h-1
changelog:
  - Synced with native openssl-1.0.2h-1
  - Fixes RHBZ #1332591 #1332589 #1330104 #1312861 #1312857 #1307773 #1302768


author: Christophe Fergeau <cfergeau@redhat.com> - 1.0.2k-1
changelog:
  - Sync with rhel 7.6 OpenSSL 1.0.2k+patches in order to get the latest security
    fixes
  - Related: rhbz#1615874


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 8.38-1
changelog:
  - Update to 8.38
  - Fixes various CVE's:
    RHBZ #1236660, #1249905, #1250947, #1256453, #1256454, #1287616,
    RHBZ #1287619, #1287626, #1287628, #1287631, #1287634, #1287640,
    RHBZ #1287642, #1287648, #1287650, #1287656, #1287658, #1287661,
    RHBZ #1287663, #1287668, #1287670, #1287673, #1287675, #1287692,
    RHBZ #1287694, #1287698, #1287700, #1287704, #1287706, #1287720,
    RHBZ #1287722


author: Uri Lublin <uril@redhat.com> - 3.26.0.0-1
changelog:
  - Rebase to sqlite 3.26.0
  - Fix CVE-2019-8457  CVE-2019-13752 CVE-2019-13753 CVE-2019-13734
  - Fix CVE-2019-19924 CVE-2019-19923 CVE-2019-19925 CVE-2019-19959
  - Fix CVE-2019-20218 CVE-2020-6405  CVE-2020-9327  CVE-2019-5018
  - Fix CVE-2019-16168
    Resolves: rhbz#1826898
  - Fix CVE-2020-13632
    Resolves: rhbz#1845615
  - Fix CVE-2020-13631
    Resolves: rhbz#1845475
  - Fix CVE-2020-13630
    Resolves: rhbz#1845212
  - Fix CVE-2020-13434
    Resolves: rhbz#1845851
  - Fix CVE-2020-15358


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-5
changelog:
  - Resolves: rhbz#1692457 - CVE-2019-3878 mod_auth_mellon: authentication
                             bypass in ECP flow [rhel-8.1.0]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-6
changelog:
  - Resolves: rhbz#1692471 - CVE-2019-3877 appstream/mod_auth_mellon: open
                             redirect in logout url when using URLs with
                             backslashes [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-7
changelog:
  - Apply the patch from the previous commit
  - Resolves: rhbz#1692471 - CVE-2019-3877 appstream/mod_auth_mellon: open
                             redirect in logout url when using URLs with
                             backslashes [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-9
changelog:
  - Just bump the release number
  - Related: rhbz#1718238 - mod_auth_mellon-diagnostics RPM not in product
                            listings


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-10
changelog:
  - Resolves: rhbz#1761774 - mod_auth_mellon fix for AJAX header name
                             X-Requested-With


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-11
changelog:
  - Resolves: rhbz#1731053 - CVE-2019-13038 mod_auth_mellon: an Open Redirect
                             via the login?ReturnTo= substring which could
                             facilitate information theft [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-12
changelog:
  - Resolves: rhbz#1791262 - Backport SameSite=None cookie from upstream to
                             support latest browsers


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-12.1
changelog:
  - Resolves: rhbz#1986805 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                             vulnerability in logout URLs [rhel-8]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-7
changelog:
  - Resolves: rhbz#1897992 - OIDCStateInputHeaders &
                             OIDCStateMaxNumberOfCookies in existing
                             mod_auth_openidc version
  - Backport the OIDCStateMaxNumberOfCookies option
  - Configure which header value is used to calculate the fingerprint of
    the auth state


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-8
changelog:
  - Resolves: rhbz#1823756 - Backport SameSite=None cookie from
                             mod_auth_openidc upstream to support latest browsers


author: Tomas Halman <thalman@redhat.com> - 2.3.7-9
changelog:
  - Resolves: rhbz#2001853 - CVE-2021-39191 open redirect by supplying a crafted URL
                             in the target_link_uri parameter


author: Tomas Halman <thalman@redhat.com> - 2.3.7-10
changelog:
  - Resolves: rhbz#1987216 - CVE-2021-32791 hardcoded static IV and AAD with a
                             reused key in AES GCM encryption [rhel-8] (edit)


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153659 - CVE-2022-23527 - Open Redirect in
        oidc_validate_redirect_url() using tab character


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184144 - CVE-2023-28625 NULL pointer dereference
        when OIDCStripCookies is set and a crafted Cookie header is supplied


author: John Dennis <jdennis@redhat.com> - 1.8.8-2
changelog:
  - Add missing unpackaged files/directories

    Add to doc: README.md, DISCLAIMER, AUTHORS
    Add to httpd/conf.d: auth_openidc.conf
    Add to /var/cache: /var/cache/httpd/mod_auth_openidc/cache
                       /var/cache/httpd/mod_auth_openidc/metadata


author: John Dennis <jdennis@redhat.com> - 1.8.10.1-3
changelog:
  - Resolves: #1423956 fails to build with openssl 1.1.x
    Also rolls up all fixes to jose library before the change over to cjose


author: <jdennis@redhat.com> - 2.3.7-3
changelog:
  - Resolves: rhbz# 1614977 - fix unit test segfault,
    the problem was not limited exclusively to s390x, but s390x provoked it.


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-5
changelog:
  - Resolves: rhbz#1805749 - CVE-2019-14857 mod_auth_openidc:2.3/mod_auth_openidc:
                             Open redirect in logout url when using URLs with
                             leading slashes
  - Resolves: rhbz#1805068 - CVE-2019-20479 mod_auth_openidc:2.3/mod_auth_openidc:
                             open redirect issue exists in URLs with slash and
                             backslash


author: Jakub Hrozek <jhrozek@redhat.com> - 2.3.7-6
changelog:
  - Fix the previous backport
  - Related: rhbz#1805749 - CVE-2019-14857 mod_auth_openidc:2.3/mod_auth_openidc:
                            Open redirect in logout url when using URLs with
                            leading slashes
  - Related: rhbz#1805068 - CVE-2019-20479 mod_auth_openidc:2.3/mod_auth_openidc:
                            open redirect issue exists in URLs with slash and
                            backslash


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-6
changelog:
  - Resolves: RHEL-36492 Race condition in mod_auth_openidc filecache
  - Resolves: RHEL-25421 mod_auth_openidc: DoS when using
      `OIDCSessionType client-cookie` and manipulating cookies
      (CVE-2024-24814)


author: Joe Orton <jorton@redhat.com> - 1.10.0-6
changelog:
  - really disable Berkeley DB support if required by bcond
  - add build conditional to disable swig binding subpackages


author: Lubos Uhliarik <luhliari@redhat.com> - 1.10.2-2
changelog:
  - Resolves: #1733443 - CVE-2019-0203 subversion:1.10/subversion: remote
    unauthenticated denial-of-service in subversion svnserve


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-17
changelog:
  - Resolves: #1876525 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Lubos Uhliarik <luhliari@redhat.com> - 1.11.3-1
changelog:
  - new version 1.11.3
  - Resolves: #1633401 - CVE-2018-11763 mod_http2: httpd:  DoS for HTTP/2
    connections by continuous SETTINGS


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-1
changelog:
  - new version 1.15.7
  - Resolves: #1814236 - RFE: mod_http2 rebase 
  - Resolves: #1747289 - CVE-2019-10082 httpd:2.4/mod_http2: httpd: 
    read-after-free in h2 connection shutdown
  - Resolves: #1696099 - CVE-2019-0197 httpd:2.4/mod_http2: httpd: 
    mod_http2: possible crash on late upgrade
  - Resolves: #1696094 - CVE-2019-0196 httpd:2.4/mod_http2: httpd:
    mod_http2: read-after-free on a string compare
  - Resolves: #1677591 - CVE-2018-17189 httpd:2.4/mod_http2: httpd: 
    mod_http2: DoS via slow, unneeded request bodies


author: Lubos Uhliarik <luhliari@redhat.com> - 1.15.7-2
changelog:
  - Resolves: #1869073 - CVE-2020-9490 httpd:2.4/mod_http2: httpd: 
    Push diary crash on specifically crafted HTTP/2 header


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-4
changelog:
  - Resolves: #1966728 - CVE-2021-33193 httpd:2.4/mod_http2: httpd:
    Request splitting via HTTP/2 method injection and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-9.3
changelog:
  - Resolves: RHEL-13367 - httpd:2.4/mod_http2: reset requests exhaust memory
    (incomplete fix of CVE-2023-44487)(CVE-2023-45802)


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.7-10.1
changelog:
  - Resolves: RHEL-46214 - Access logs and ErrorDocument don't work when HTTP431
    occurs using http/2 on RHEL8


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.7-1
changelog:
  - 1347490 - Rebase to upstream version 0.9.7.
  - Ensure lookup_user_by_certificate runs after mod_nss as well.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.9-1
changelog:
  - 1434814 - Rebase to upstream version 0.9.9.
  - Add support for multiple users mapped to single certificate.


author: Jan Pazdziora <jpazdziora@redhat.com> - 1.0.0-1
changelog:
  - 1439711 - Rebase to upstream version 1.0.0.
  - Make LookupUserGECOS optional (no default) to support non-POSIX
    user identities.


author: Lubos Uhliarik <luhliari@redhat.com> - 1:2.0.8-8
changelog:
  - Resolves: #1832844 - mod_md does not work with ACME server that does not
    provide keyChange or revokeCert resources


author: Lubos Uhliarik <luhliari@redhat.com> - 2.9.2-9
changelog:
  - Resolves: #1824859 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules


author: Than Ngo <than@redhat.de>
changelog:
  - fix imake to built with gcc-2.96 (thanks Jakup)
  - put bitmaps in /usr/X11R6/include/X11/bitmaps
  - put bindings in /usr/X11R6/lib/Xm/bindings
  - add define -D_GNU_SOURCE to build Motif
  - gzip man pages
  - cleanup specfile


author: Than Ngo <than@redhat.com>
changelog:
  - add 3 official motif patches 
  - add rm -rf $RPM_BUILD_ROOT in install section
  - remove some old patches which are now in official patches


author: Thomas Woerner <twoerner@redhat.com> 2.2.2-13
changelog:
  - fix for Xmu/EditRes conflict (bug #80777)
  - fix for wml and utf-8 (bug #80271)
  - fix for Ext18List (bug #74502)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-3
changelog:
  - fixed popup menus fail on Tarantella/VNC (#123027)
  - fixed character not supported problem (#124960)
  - fixed data out of bounds bug (#124961)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-5
changelog:
  - libXp now moved to xorg-x11-deprecated-libs, therefore no compatibility 
    with XFree86 packages anymore.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-6
changelog:
  - fixed CAN-2004-0687 (integer overflows) and CAN-2004-0688 (stack overflows)
    in embedded Xpm library


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-9
changelog:
  - Upstream Fix: Multiscreen mode
  - Upstream Fix: Crash when restarting by a session manager (motifzone#1193)
  - Upstream Fix: Crash when duplicating a window menu containing f.circle_up
    (motifzone#1202)
  - fixed divide by zero error in ComputeVizCount() (#144420)
  - Xpmcreate: define LONG64 on 64 bit architectures (#143689)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-11
changelog:
  - fixed mrm initialization error in MrmOpenHierarchyPerDisplay (#167094)
    Thanks to Arjan van de Ven for the patch.


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1
changelog:
  - new 2.3.0 (beta1)
  - patch for new rgb.txt location (#174210)
    Thanks to Ville Skyttä for the patch


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - enabled Xft, jpeg and png support
  - patch for missing xft-config
  - dropped duplicate include path in devel package


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.9
changelog:
  - new CVS version 2006-02-02
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.5
changelog:
  - fixed SEGV error moving mouse over window related to XmToolTipGetLabel
    (MotifZone bug fix #1388)
    Resolves: rhbz#277381


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-0
changelog:
  - rebase to 2.3.1 (CVS dist release)
    Resolves: rhbz#455736
  - fixes OpenMotif XmList problem
    Resolves: rhbz#405801
  - fixes List.c/ReplaceItem() segfaults when item selected
    Resolves: rhbz#431460
  - fixes [motifzone 1400 ] openmotif/ BadFont on multiple display application
    Resolves: rhbz#438910
  - fixes applications dump core in non-UTF8 environment
    Resolves: rhbz#453722
  - fixes lots of additional bugs: see release notes


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-2
changelog:
  - more fixes for unreliable pasting into XmTextField (MotifZone bug #1321)
    Resolves: rhbz#405941
  - the fix for MotifZone bug #1400 is not working for remote displays


author: Thomas Woerner <twoerner@redhat.com> 2.3.2-1
changelog:
  - new version 2.3.2 with upstream bug fixes: #1212, #1277, #1473, #1476
  - spec file cleanup
  - make build work with libtool
  - all man pages are utf-8, no need to convert them anymore
  - enabled EditRes support with upstream fix
  - fixed parallel build
  - fixed patches for fuzz 0
    Related: rhbz#543948


author: Thomas Woerner <twoerner@redhat.com> 2.3.2-1.1
changelog:
  - fixes according to review:
  - fixed buildroot
  - removed dot from summary
  - removed dist tag from changelog
  - added source download link


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-2
changelog:
  - fixed LabelGadget draws background over border of its parent (rhbz#584300)
    (MotifZone bug #1517)
  - fixed LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-4
changelog:
  - fixed Label draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521 refixed)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-5
changelog:
  - dropped file requires for /usr/share/X11/XKeysymDB, not needed and not 
    available anymore
  - added flex-static build requirement, because of flex package split


author: Thomas Woerner <twoerner@redhat.com> 2.3.4-1
changelog:
  - new version 2.3.4 with LGPL license
  - fixed some rpmlint warnings
  - new sub package for static libraries
  - added /etc/X11/mwm directory
  - removed defattrs


author: Thomas Woerner <twoerner@redhat.com> 2.3.4-2
changelog:
  - fixed requirements according to review (RHBZ#870049)
  - flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Matthias Saou <http://freshrpms.net/> 0.60-0.1.beta2
changelog:
  - Initial RPM release, now that mpg123 is maintained again and went GPL/LGPL.
  - Audio output type is not (yet?) plugin-based, so use libao (for ALSA).


author: Matthias Saou <http://freshrpms.net/> 0.60-1
changelog:
  - Update to 0.60 final.
  - Add support for all available compatible outputs, unfortunately it's a build
    time choice, so default to alsa.
  - Obsolete mpg321 up to the last know package version.


author: Matthias Saou <http://freshrpms.net/> 1.4.2-1
changelog:
  - Update to 1.4.2.
  - Obolete mpg321 up to last known version, as it's pretty much dead.
  - Add libtool-ltdl-devel build req, without a copy is installed.
  - Add scriplets for new library.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.12.1-1
changelog:
  - Update to 1.12.1
  - Put libmpg123 into its own package
  - Put some less often used output plugins into their own mpg123-plugins-extras
    package


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.12.1-2
changelog:
  - Add arts-devel BuildRequire and add the arts output plug-in to the
    mpg123-plugins-extras package


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.12.1-3
changelog:
  - Move mpg123 (and its manpage) to mpg123.bin and use alternatives, so as to
    peacefully co-exist with mpg321 (rf#1278)


author: Hans de Goede <j.w.r.degoede@gmail.com> - 1.13.7-1
changelog:
  - New upstream bugfix release 1.13.7
  - Properly build and install development documentation (rf#2257)


author: Richard Shaw <hobbes1069@gmail.com> - 1.14.3-1
changelog:
  - Update to latest upstream release.
  - Move README and README.remote to correct package. Fixes #1898.


author: Hans de Goede <j.w.r.degoede@gmail.com> - 1.15.1-1
changelog:
  - New upstream release 1.15.1 (rf#2716)
  - Drop obsolete esound and arts plugins from mpg123-plugins-extras


author: Hans de Goede <j.w.r.degoede@gmail.com> - 1.19.0-1
changelog:
  - Update to 1.19.0
  - Enable (optional) use of NEON on arm
  - Add missing %{?_isa} to libmpg123 Requires in -devel (rf#3194)


author: Igor Gnatenko <ignatenko@redhat.com> - 1.23.4-1
changelog:
  - Update to 1.23.4
  - Use weak and rich deps for plugins
  - rename libmpg123 to mpg123-libs
  - Drop usage of alternatives (nothing uses it actually)
  - Correct license


author: Wim Taymans <wtaymans@redhat.com> - 1.23.8-3
changelog:
  - Remove pointless Enhances:
  - Fix splelling mistake
  - change package name from libs-devel to devel and add Obsolete:
  - see rhbz#1394147


author: Jarod Wilson <jarod@redhat.com> - 3.2.1-8
changelog:
  - Remove python2 bits entirely, fix mpi lib dependencies
  - Remove obsolete Provides/Obsoletes for mpich2
  - Resolves: rhbz#1628628


author: Honggang Li <honli@redhat.com> - 3.3.2-8
changelog:
  - Sync with Fedora build
  - Update to latest upstream release 3.3.2
  - Resolves: rhbz#1657316, rhbz#1732982, rhbz#1850080


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 4.1.1-1.0.1
changelog:
  - Add -fallow-argument-mismatch for compatible with gcc10 build
  - Do not require valgrind for loongarch64 (geliwei@openanolis.org)


author: Honggang Li <honli@redhat.com> - 5.6.2-1
changelog:
  - Update OSU benchmarks to upstream release 5.6.2
  - Update IMB benchmarks to upstream release v2019.6
  - Resolves: rhbz#1817837


author: Honggang Li <honli@redhat.com> - 5.7-2
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960078


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2008517


author: Doug Ledford <dledford@redhat.com> - 1.4-2.el6
changelog:
  - Update to tarball from URL instead of from OFED
  - Minor tweaks for pkgwrangler import
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.4-3.el6
changelog:
  - Don't include mtcr.h as we don't really expect anything to need Mellanox
    card register definitions except this program, and we already have the
    file.
  - Change to ExcludeArch instead of ExclusiveArch so we build in all the right
    places.
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.4-7
changelog:
  - The upstream tarball as provided is broken.  Clean up the tarball so
    the package builds properly


author: Doug Ledford <dledford@redhat.com> - 3.0-0.6.g6961daa.1
changelog:
  - Update to latest upstream version, which resovles some licensing issues
    on some of the source files


author: Yaakov Selkowitz <yselkowi@redhat.com> - 3.0-0.8.g6961daa.1
changelog:
  - Fix FTBFS with -Werror=format-security (#1037207, #1106248)
  - ExcludeArch: %arm aarch64
  - Cleanup spec


author: Doug Ledford <dledford@redhat.com> - 4.1.0-0.46.gb1cdaf7.1
changelog:
  - Update to latest upstream sources (enables ConnectX-4 support)
  - Drop patch that no longer applies


author: Honggang Li <honli@redhat.com> - 4.6.0-1
changelog:
  - Rebase to latest upstream release 4.6.0.
  - Update mstflint package from github.
  - Resolves: bz1423970


author: Honggang Li <honli@redhat.com> - 4.10.0.2
changelog:
  - Rebase to latest upstream release v4.10.0-2
  - Fix license issue of mtcr_ul.c
  - Resolves: bz1541741


author: Bill Nottingham <notting@redhat.com>
changelog:
  - get correct manual path the Right Way(tm)
  - make it so it uses default colors even if COLORFGBG isn't set


author: Nalin Dahyabhai <nalin@redhat.com> 5:1.4.1-10
changelog:
  - expect the server to prompt for additional auth data if we have some to
    send (#129961, upstream #1845)
  - use "pop" as the service name instead of "pop-3" when using SASL for POP,
    per rfc1734


author: Bill Nottingham <notting@redhat.com> 5:1.4.2.1-1
changelog:
  - update to 1.4.2.1 (#141007, <moritz@barsnick.net>)
  - include a /etc/Muttrc.local for site config (#123109)
  - add <f2> as a additional help key for terminals that use <f1> internally
    (#139277)


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.4.2.2-1
changelog:
  - update to 1.4.2.2
  - fix directories in manual.txt (#162207)
  - drop bcc patch (#197408)
  - don't package flea


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.14-2
changelog:
  - add check_mbox_size configuration variable; if enabled, file size is used
    instead of access time when checking for new mail
  - bind delete key to delete-char (#232601)


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.14-4
changelog:
  - validate msgid in APOP authentication (CVE-2007-1558)
  - fix overflow in gecos field handling (CVE-2007-2683)


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.17-2
changelog:
  - don't ignore $from in batch send mode (#392861)
  - check Maildir for not being NULL when expanding '='-paths
  - prevent mailto parsing buffer overflow by ignoring too long header
  - use strtok_r() to parse mailto: links, not strtok()
  - update UPDATING


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.17-4
changelog:
  - fix sending long commands when using gnutls (#438275)
  - glob tilde in smime_keys (#424311)
  - fix awk script in mutt_ldap_query
  - force building with libdb
  - make enabling/disabling features in spec easier


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.18-2
changelog:
  - allow interrupts when reading, writing or closing sockets (#447887)
  - fix possible crash when opening IMAP mailbox


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.19-4
changelog:
  - use PATH_MAX for buffers passed to realpath (#492861)
  - unconditionally inode-sort Maildir and MH folders
  - restore connection polling callback when closing SASL connection


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.19-5
changelog:
  - fix certificate verification (CVE-2009-1390)
  - add support for gnutls INSECURE_ALGORITHM error code (#499390)


author: Honza Horak <hhorak@redhat.com> - 5:1.5.21-8
changelog:
  - Removed ca-bundle.crt since it is outdated (rhbz#734379)
  - Build with gpgme support by default (rhbz#748337)
  - Fixed segmentation fault during messages removal in thread mode
    (rhbz#674271)


author: Honza Horak <hhorak@redhat.com> - 5:1.5.21-12
changelog:
  - Fix segmentation fault while syncing mailbox
    (rhbz#691719)
  - Fix unhandled strchr output
    (rhbz#833044)


author: Jan Pacner <jpacner@redhat.com> - 5:1.5.22-1
changelog:
  - new release (Resolves: #1034263)
  - use inline sed instead of nodotlock patch
  - patches removed: testcert, hdrcnt, certscomp, updating, pophash,
    notation, writehead, tmpdir, verpeers, tlsv1v2
  - manhelp patch adjusted (only DEBUG logging capability was left)


author: Jan Pacner <jpacner@redhat.com> - 5:1.5.23-1
changelog:
  - Resolves: #1034263 (new version due to CVE)
  - patch cleanup (upstream fixes)
  - add html documentation (in addition to the current txt one)


author: Matej Muzila <mmuzila@redhat.com> - 5:1.5.24-1
changelog:
  - Updated to 1.5.24 (Resolves: rhbz#1259332)
  - Utilize system-wide crypto-policies (Resolves: rhbz#1179324)


author: Adam Jackson <ajax@redhat.com> 3.4.1-3
changelog:
  - mutter-never-slice-shape-mask.patch, mutter-use-cogl-texrect-api.patch:
    Fix window texturing on hardware without ARB_texture_non_power_of_two
    (#813648)


author: Kalev Lember <kalevlember@gmail.com> - 3.9.92-2
changelog:
  - Update the description and URL
  - Tighten -devel subpackage deps with _isa
  - Use the make_install macro


author: Hans de Goede <hdegoede@redhat.com> - 3.13.90-3
changelog:
  - Add a patch from upstream fixing gnome-shell crashing non stop on
    multi monitor setups (rhbz#1103221)


author: Ray Strode <rstrode@redhat.com> 3.15.3-2
changelog:
  - Add specific BuildRequires for wayland bits, so we don't
    get wayland support by happenstance.
  - Add BuildRequires for autogoo since ./autogen.sh is run as part of
    the build process


author: Ray Strode <rstrode@redhat.com> 3.18.1-4
changelog:
  - Force the cursor visible on vt switches after setting
    the crtc to workaround that qxl bug from before in a
    different situation
    Related: #1273247


author: David Herrmann <dh.herrmann@gmail.com> - 3.30.1-2
changelog:
  - Reduce 'dbus-x11' dependency to 'dbus'. The xinit script are no longer the
    canonical way to start dbus, but the 'dbus' package is nowadays required to
    provide a user and system bus to its dependents.


author: Kenneth Topp <toppk@bllue.org> - 3.34.0-4
changelog:
  - Backport a patch to prevent crash during animations
  - See upstream issue https://gitlab.gnome.org/GNOME/mutter/issues/815


author: Kenneth Topp <toppk@bllue.org> - 3.34.0-5
changelog:
  - Backport fix for dual special modifier keys bug (#1754867)
  - Backport fix that enables core dumps (#1748145)


author: Adam Williamson <awilliam@redhat.com> - 3.34.1-2
changelog:
  - Backport multiple fixes for F31 FE/blocker bugs:
    MR #832 for #1749433 (also needs change in gnome-shell)
    MR #840 for #1760254
    MR #848 for #1751646 and #1759644
    MR #842 for #1758873


author: Florian Müllner <fmuellner@redhat.com> - 3.35.1-3
changelog:
  - Enable sysprof support
    The required dependency was missing from rawhide when the feature
    landed, but there's no reason for keeping it disabled nowadays


author: Bastien Nocera <bnocera@redhat.com> - 3.35.92-2
changelog:
  + mutter-3.35.92-2
  - Fix wayland session not starting up, see https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/1103


author: Olivier Fourdan <ofourdan@redhat.com> - 40.0~alpha.1.1-3
changelog:
  - Add build dependency on Xwayland-devel package (from Xwayland standalone)
  - Do not explicitly disable initfd support.


author: Kalev Lember <klember@redhat.com> - 40.0-4
changelog:
  - Fix enter, space, backspace keys not working with input methods (#1942294)
  - Drop old obsoletes and conflicts


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Jarod Wilson <jarod@redhat.com> 2.3-4
changelog:
  - Clean up build/linker commands to better propagate distro-wide flags
  - Explicitly disable ftb, blcr and fuse to prevent rpath flag creep
  - Related: rhbz#1624147


author: Jarod Wilson <jarod@redhat.com> 2.3-5
changelog:
  - Add missing Provides: mpi and Requires: environment-modules to base mvapich2 package
  - Resolves: rhbz#1647177


author: Honggang Li <honli@redhat.com> - 2.3.3-1
changelog:
  - Update to upstream stable point release v2.3.3
  - Fix floating point exception for non-NUMA machine
  - Resolves: rhbz#1815962, rhbz#1814296


author: Honggang Li <honli@redhat.com> - 2.3.4-1
changelog:
  - Update to upstream stable point release v2.3.4
  - Build against hwloc-2.2.0
  - Resolves: rhbz#1850084


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 2.3.7.1-1.0.1
changelog:
  - Fix compile issue for better compatibility for both gcc-8 & gcc-10
  - 1000-mvapich2-anolis-add-typedef-cycles_t.patch (liusn@superred.com.cn)


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, s390 and robin hood
  - Add a new plugin 'conflicting_variables.so'


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: zhangbinchen <zhangbinchen@openanolis.org> - 8.0.36-1.0.1
changelog:
  - remove check_testsuite
  - redefine ignore_testsuite_result
  - Support loongarch64 platform (liwei.glw@openanolis.org)
  - skip have_32bits_time test on loongarch64 (liwei.glw@openanolis.org)
  - fix main.derived_condition_pushdown test (rb01097748@alibaba-inc.com)
  - fix loaddata_special test for loongarch64 (rb01097748@alibaba-inc.com)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.13.01-3
changelog:
  - Fix use-after-free and heap buffer overflow vulnerabilities
  - Resolves: CVE-2017-10686, CVE-2017-11111


author: Michael Simacek <msimacek@redhat.com> - 2.13.02-1
changelog:
  - Update to upstream version 2.13.02
  - Resolves: CVE-2017-17810, CVE-2017-17811, CVE-2017-17812, CVE-2017-17813,
    CVE-2017-17814, CVE-2017-17815, CVE-2017-17816, CVE-2017-17817,
    CVE-2017-17818, CVE-2017-17819, CVE-2017-17820


author: Gregory Leblanc <gleblanc@grego1.cu-portland.edu>
changelog:
  - Added BuildRequires lines
  - Changed Source to point to ftp.gnome.org instead of just the tarball name
  - Moved %description sections closer to their %package sections
  - Moved %changelog to the end, where so that it's not in the way
  - Changed configure and make install options to allow moving of
    libraries, includes, binaries more easily
  - Removed hard-coded paths (don't define %prefix or %docdir)
  - replace %{prefix}/bin with %{_bindir}
  - replace %{prefix}/share with %{_datadir}
  - replace %{prefix}/lib with %{_libdir}
  - replace %{prefix}/include with %{_includedir}


author: Havoc Pennington <hp@redhat.com>
changelog:
  - move to a CVS snapshot of nautilus for now
    (Darin is my hero for having distcheck work out of CVS)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 1.0.4, removes eazel services icon and wizard page
  - Eazel logo is still in startup wizard for now, needs fixing


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Change default background and rubberband color.
  - Use the sidebar tabs from the default theme
  - BuildDepend on fam-devel, depend on fam
  - Disable the eazel update pages in the first-time druid.
  - Remove the eazel logo from the first-time druid


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Make the fam dependency a real runtime dependency
  - by linking to libfam (nautilus-1.0.4-fam-lib.patch)
  - Cleaned up specfile.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - update to my latest 'cvs diff -u' (adds default 
    Start Here link, displays .directory name in sidebar)
  - include /etc/X11/* links (starthere, sysconfig, serverconfig)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - move first time druid patch into my "CVS outstanding" patch
  - try to really remove Help/Feedback
  - try to really fix Help/Community Support
  - try again to get Start Here in the Go menu
  - try again to get Start Here on the desktop
  - don't show file sizes for .desktop files


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add BuildRequires (#49539, 49537)
  - Fix %post, %postun (#49720)
  - Background efficiency improvements and hacks


author: Havoc Pennington <hp@redhat.com>
changelog:
  - sync new tarball from our CVS branch, 
    fixes some drag-and-drop, changes URI scheme names,
    etc.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Fix crash-on-startup showstopper
  - Fix can't-find-images bug (this one was only showing up
    when built with debug symbols, since it was an uninitialized memory
    read)


author: Alexander Larsson <alexl@redhat.com> 1.0.4-21
changelog:
  - Remove the "don't run as root" warning.
  - Remove eazel from bookmarks
  - langified (again? did someone change it?)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Sync our CVS version; fixes some MUSTFIX
    (the one about drawing background on startup, 
     properly translate desktop files, etc.)


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Changed starthere .desktop files to be links instead
  - of spawning a new nautilus. This makes start-here:
  - much faster.


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Fix problem with missing desktop starthere.desktop file
  - New snapshot from our branch, fixes:
    - On upgrade, icons migrated from GNOME desktop are not properly lined up
      (#51436)
    - icons dropped on the desktop don't end up where dropped. (#51441)
    - Nautilus shouldn't have fam monitor read-only windows. This
      keeps CDROMS from being unmounted until you close all

      nautilus windows pointing to them. (#51442)
    - Warnings about 'cannot statfs...' when moving items to trash.
  - Use separate start-here.desktop for panel, since the one used
    for the root window only works from Nautilus.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - make start here icon work again
  - kill some warning spew, #51661
  - cache getpwnam() results to speed things up a bit


author: Havoc Pennington <hp@redhat.com>
changelog:
  - make Programs icon into a link, to match the other .desktop files
  - own various directories #51164
  - web page titles in Japanese, #51709
  - tree defaults to only directories #51850


author: Havoc Pennington <hp@redhat.com>
changelog:
  - fix bug causing 32000 stats or so in large directories, 
    should speed things up somewhat
  - fix #52104 via gruesome kdesktop-detection hack and setting
    window type hint on our desktop window
  - fix so Start Here icon displays in sidebar
  - don't load non-local .desktop files


author: Havoc Pennington <hp@redhat.com>
changelog:
  - I screwed up the build yesterday, so it didn't actually contain the
    fixes mentioned. This build should contain them.


author: Christopher Blizzard <blizzard@redhat.com>
changelog:
  - require Mozilla 0.9.7
  - Add patch that puts mozilla profile startup before embedding is initialized


author: Havoc Pennington <hp@redhat.com>
changelog:
  - drop Milan-specific features, including png10 and ac25 patches
  - copy in 1.0.5 help component to avoid large risky patch
  - remove .la files
  - drop mozilla from ia64 again
  - remove oaf file from nautilus-mozilla that was also in the base 
    package


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Relibtoolize to fix relink problems for solib components
  - Add LANG=en_US to %makeinstall as well
  - Back out previous change, force locale to en_US to prevent UTF-8 problems
  - Add workaround for intltool-merge bug on ia64


author: Havoc Pennington <hp@redhat.com>
changelog:
  - ignore the "add_to_session" preference as it only broke stuff
  - pad the left margin a bit to cope with poor word wrapping


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add a simple patch so that redhat-config-packages can disable 
    the new window behavior for mounted CDs behavior.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - require newer redhat-artwork, -menus, eel2, gnome-vfs2 to avoid
    bogus bug reports
  - add hack for HTML mime type handling in a web browser, not 
    nautilus


author: Havoc Pennington <hp@redhat.com>
changelog:
  - put button press mask in triple-click patch, maybe it will work
  - remove html-hack patch as it does nothing useful


author: Alexander Larsson <alexl@redhat.com> 2.1.5-2
changelog:
  - Add cdburn patch.
  - Remove nautilus-1.1.19-starthere-hang-hackaround.patch
  - Require nautilus-cd-burner


author: Havoc Pennington <hp@redhat.com>
changelog:
  - perl-munge the icon names in a couple desktop files
    to find redhat-network-server.png and redhat-file-manager.png.
    Upstream icon names here were weird and seem broken.


author: Alexander Larsson <alexl@redhat.com> 2.2.0.2-1
changelog:
  - Update to 2.2.0.2, fixes bg crasher
  - parallelize build
  - Added patch from cvs that fixes password hang w/ smb


author: Alexander Larsson <alexl@redhat.com> 2.2.1-2
changelog:
  - Add a patch to fix the forkbomb-under-kde bug (#81520)
  - Add a patch to fix thumbnail memory leak
  - require libXft.so.2 instead of Xft, since that changed in the XFree86 package


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Update to the latest bugfixes from cvs.
  - Fixes #84291 for nautilus, context menu duplication and some other small bugs.


author: Alexander Larsson <alexl@redhat.com> 2.3.9-1
changelog:
  - update
  - Add patch to ignore kde desktop links
  - Re-enable kdesktop detection hack.
    kde doesn't seem to support the manager selection yet


author: Mike A. Harrisn <mharris@redhat.com> 2.5.91-2
changelog:
  - Changed BuildRequires: XFree86-libs >= 4.2.99 to BuildRequires: XFree86-devel
  - Fixed BuildRoot to use _tmppath instead of /var/tmp


author: Alexander Larsson <alexl@redhat.com> - 2.8.1-2
changelog:
  - Fix open with menu on mime mismatch
  - Create desktop links ending with .desktop (#125104)
  - Remove old cruft from specfile


author: Alexander Larsson <alexl@redhat.com> - 2.8.1-3
changelog:
  - Slightly less bad error dialog when there is no handler for a file.
    Not ideal, but this change doesn't change any strings.


author: David Zeuthen <davidz@redhat.com> 2.10.0-3
changelog:
  - Include patches for desktop background memory saving (GNOME bug #169347)
  - Obsoletes: nautilus-media (#153223)


author: Matthias Clasen <mclasen@redhat.com> - 2.16.0-6
changelog:
  - Fix scripts according to the packaging guidelines
  - Require GConf2 for the scripts
  - Require pkgconfig for the -devel package


author: Alexander Larsson <alexl@redhat.com> - 2.16.2-7
changelog:
  - Look for beagle before tracker, because tracker autostarts
    This lets us support having both installed at the same time.
  - Remove buildreqs for beagle, as they are not necessary with
    the dynamic work.


author: - Bastien Nocera <bnocera@redhat.com> - 2.20.0-6
changelog:
  - Fix audio preview command-line to use decodebin so playbin doesn't
    pop up a window for videos detected as audio


author: Tomas Bzatek <tbzatek@redhat.com> - 2.21.92-2
changelog:
  - Change libbeagle .so name for libbeagle-0.3.0 in nautilus-2.21.1-dynamic-search-r2.patch (#434722)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.22.0-2
changelog:
  - Don't create application/x-ext-<extension> types for known mimetypes (patch from head)
  - Fix a crash in the Properties dialog while changing owner (patch from head)


author: David Zeuthen <davidz@redhat.com> - 2.22.2-3
changelog:
  - Revert Fedora livecd mount (fix is in latest gvfs packages) and
    add a patch to avoid trying to autorun mounts that are mounted
    from outside Nautilus (#442189)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.23.1-3
changelog:
  - Mask file moving to nautilus-cd-burner window as copy operation (#443944)
  - Don't allow recursive move/copy into itself (gnomebz #530720)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.23.2-3
changelog:
  - Add DnD support to drop files onto archive files with help 
    of file-roller (gnomebz #377157)
  - Add fix preventing crash on bad GFileInfos (gnomebz #519743)


author: Alexander Larsson <alexl@redhat.com> - 2.24.1-2
changelog:
  - Manually check for fallback file icon since we're not
    always returning that from gio anymore (from upstream)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.25.1-4
changelog:
  - Properly open new windows after long mount operation
  - Fix callback connection to the GtkMountOperation dialog


author: Matthias Clasen <mclasen@redhat.com> - 2.25.2-1
changelog:
  - Update to 2.25.2
  - Clean up Requires
  - Obsolete eel2
  - Drop hard dependency on gvfs backends. 
    These are pulled in by comps, anyway


author: Colin Walters <walters@verbum.org> - 2.91.93-2
changelog:
  - Drop --vendor from nautilus.desktop
    Vendor prefixes are pointless, and in this case breaks upstream
    components trying to reference each other via .desktop file, such
    as GNOME Shell having nautilus.desktop in its default favorite
    list.


author: David King <amigadave@amigadave.com> - 3.15.4-1
changelog:
  - Update to 3.15.4
  - Use pkgconfig for BuildRequires
  - Update man page globs in files section
  - Use license macro for license texts


author: Kalev Lember <klember@redhat.com> - 3.18.0-1
changelog:
  - Update to 3.18.0
  - Don't pull in all of nautilus for the -extensions subpackage
  - Tighten a dep with the _isa macro
  - Drop ancient obsoletes


author: Kalev Lember <klember@redhat.com> - 3.21.91.1-1
changelog:
  - Update to 3.21.91.1
  - Filter private libgd from provides and requires
  - Use upstream defaults for OnlyShowIn


author: Kalev Lember <klember@redhat.com> - 3.37.92-1
changelog:
  - Update to 3.37.92
  - Switch to tracker3
  - Tighten nautilus-extensions soname glob
  - Fix directory ownership for /usr/lib/nautilus/extensions-3.0 directory


author: Richard W.M. Jones <rjones@redhat.com> - 1.4.2-4
changelog:
  - Remove misguided LDFLAGS hack which removed server hardening.
    https://bugzilla.redhat.com/show_bug.cgi?id=1624149#c6
    resolves: rhbz#1624149


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-12
changelog:
  - snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
  - rather dirty patch fixing conf directory for net-snmp-config


author: Radek Vokal <rvokal@redhat.com> - 5.1.2-3
changelog:
  - patch from CVS - kill extra carriage return (#144917)
  - removed patch for interface indexing - doesn't show virtual interfaces


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-5
changelog:
  - 64bit needed some changes, was causing timeouts on 64bit archs!? 
  - affects bugs #125432 and #132058


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-12
changelog:
  - session free fixed, agentx modules build fine (#157851)
  - fixed dependency for net-snmp libs (#156932)


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-0.rc6.1
changelog:
  - update to rc6, snmpnetstat changes due to license problems
  - persistent files in directory defined by snmp.conf persistentDir are 
    loaded at startup


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-4
changelog:
  - check for header files in configure
  - patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)


author: Radek Vokal <rvokal@redhat.com> 5.3-2
changelog:
  -  Security fix. Bug granting write access to read-only users 
     or communities which were configured  using the "rocommunity" 
     or "rouser" snmpd.conf tokens fixed


author: Radek Vokál <rvokal@redhat.com> 5.3-7
changelog:
  - fix parsing of /proc/diskstats
  - fix disman monitor crash
  - fix perl vendor name
  - fix OID lookup fail


author: Radek Vokal <rvokal@redhat.com> 5.3.1.pre2-1
changelog:
  - update to 5.3.1.pre2
  - fix multilib issues (#192736)
    On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Radek Vokál <rvokal@redhat.com> - 1:5.4-13
changelog:
  - fix overly verbose log message (#221911)
  - few minor tweaks for review - still not perfect
  - fix linking with lcrypto (#231805)


author: Jan Safranek <jsafranek@redhat.com> 5.4-14
changelog:
  - fix snmptrapd hostname logging (#238587)
  - fix udpEndpointProcess remote IP address (#236551)
  - fix -M option of net-snmp-utils (#244784)
  - default snmptrapd.conf added (#243536)
  - fix crash when multiple exec statements have the same name
    (#243536)
  - fix ugly error message when more interfaces share
    one IP address (#209861)


author: Jan Safranek <jsafranek@redhat.com> 5.4-16
changelog:
  - supported lm_sensors on ppc64 (#249255)
  - snmpconf generates config files with proper selinux context
    (#247462)
  - fix leak  in udp transport (#247771)
  - add alpha to supported archs in net-snmp-config (#246825)
  - fix hrSWInst (#250237)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-3
changelog:
  - include these tables: ip-mib/ipv4InterfaceTable
    ip-mib/ipv6InterfaceTable, ip-mib/ipAddressPrefixTable
  - fix Requires of net-snmp-devel to include lmsensors-devel on supported
    architectures


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-5
changelog:
  - move mib2c-update from net-snmp-utils to net-snmp-perl, where
    mib2c is located
  - add tkmib to net-snmp-gui package (#167933)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-6
changelog:
  - add support of lm_sensors v3
  - added procps to build dependencies (#380321)
  - removed beecrypt from dependencies
  - fixed crash on reading xen interfaces (#386611)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-9
changelog:
  - introduce /etc/sysconfig/snmpd. Use it to specify snmpd command line options.
    /etc/snmp/snmpd.options is not used anymore (#431391)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-15
changelog:
  - explicitly require lm_sensor > 3 for build (#442718)
  - create multilib net-snmp-config on multilib architectures only


author: Jan Safranek <jsafranek@redhat.com> 5.4.2-2
changelog:
  - redistribute the perl scripts to the net-snmp package,
    net-snmp-utils doesn't depend on perl now (#462484)


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-1
changelog:
  - explicitly require the right version and release of net-snmp and
    net-snmp-libs
  - update to net-snmp-5.4.2.1 to fix CVE-2008-4309


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-12
changelog:
  - make the default configuration less noisy, i.e. do not print "Connection from
    UDP:" and "Received SNMP packet(s) from UDP:" messages on each connection.
    (#509055)


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-13
changelog:
  - package cleanup, remove unnecessary patches
  - move local state file from /var/net-snmp/ to /var/lib/net-snmp


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-2
changelog:
  - introduce /etc/sysconfig/snmptrapd. Use it to specify snmptrapd command
    line options.  /etc/snmp/snmptrapd.options is not used anymore (#540799)
  - build-in ipAddressPrefixTable, ipDefaultRouterTable, ipv6ScopeZoneIndexTable,
    ipIfStatsTable, SCTP-MIB, RMON-MIB and Etherlike-MIBs
  - remove ucd5820stat helper script, it depends on get5820stats, which is not
    available in Fedora
  - move sample services ipf-mod.pl to documentation
  - remove logrotate config, snmpd logs into syslog


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-3
changelog:
  - prepare the .spec file for review
  - run automatic regression suite after the compilation of the package
    to check for obvious regressions
  - remove unnecessary package dependencies


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-4
changelog:
  - fix udpTable indexes on big-endian systems (#543352)
  - fix snmptrapd init script to survive with empty /etc/sysconfig/snmptrapd
  - lower the default log level of snmpd to get rid of the debug messages


author: Jan Safranek <jsafrane@redhat.com> - 1:5.6-5
changelog:
  - re-create /var/run/net-snmp on boot using tmpfiles.d (#656637)
  - move snmp-bridge-mib and net-snmp-cert utilities to net-snmp-perl
    subpackage, net-snmp-utils subpackage does not depend on Perl now


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7-2
changelog:
  - restored rpath in net-snmp-config output - SNMP subagent won't link
    with libsnmpagent.so without it, linker needs to know location
    of libperl.so
  - fixed check section to make tests pass on machine without DNS


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7-6
changelog:
  - added new net-snmp-agent-libs subpackage with agent libraries
    -> net-snmp-libs do not need perl and lm_sensors libs
  - removed libsnmp.so, it's not used in Fedora (#729811)
  - added README.systemd
  - added new net-snmp-sysvinit subpackage with legacy init scripts
    (#718183)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.1-1
changelog:
  - updated to 5.7.1:
    - Fixed the mib-parsing-bug introduced shortly before 5.7
    - fixed rounding errors for disk percentage calculations
    - Many other miscellaneous minor bug fixes


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.1-10
changelog:
  - Updated RPM scriplets with latest systemd-rpm macros (#850403).
  - Fixed fedora-review tool complaints.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-3
changelog:
  - Added direct dependency on perl-devel with architectute in
    net-snmp-devel package to pull proper dependencies.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-6
changelog:
  - fixed net-snmp-create-v3-user to have the same content on all architectures
  - /var/lib/net-snmp/mib_indexes and cert_indexes added to net-snmp-libs
    (#906761)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-10
changelog:
  - moved agentxtrap utility to net-snmp subpackage,
    it needs libraries provided by net-snmp-agent-libs.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-13
changelog:
  - set permissions of snmpd.conf and snmptrapd conf to 0600 to prevent
    users from reading passwords and community strings.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-16
changelog:
  - Fixed snmpd crashing when AgentX subagent disconnects in the middle of
    request processing (#1038011)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-23
changelog:
  - Fixed CVE-2014-3565
  - Fixed net-snmp-cert tool, now it does not depend on net-snmp-devel (#1134475)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-13
changelog:
  - net-snmp.redhat.conf: update default configuration to conform to the best practices (#1359123)
  - nmp_transport.c: use strtok_r for strtok to avoid a race condition (#1366282)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-15
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
  - Add support for new version of OpenSSL library (#1423984)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-19
changelog:
  - Fix issue with undefined symbol my_progname when try to load NetSNMP::TrapReceiver in perl script. (#1470004)


author: Adam Williamson <awilliam@redhat.com> -1:5.7.3-20
changelog:
  - Edit fix of issue with undefined symbol my_progname when try to load
    NetSNMP::TrapReceiver in perl script (#1470004)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:5.7.3-26
changelog:
  - Python 2 binary package renamed to python2-net-snmp
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-30
changelog:
  - remove Group tag
  - remove sysvinit package and init files (no longer needed)
  - fix python2 references and dependencies in spec file


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-33
changelog:
  - Fix strstr() crash when looking for RPM Group tag
  - Fix wrong usage of structure iterator
  - Fix issue with statistics from autofs


author: Josef Ridky <jridky@redhat.com> - 1:5.8-2
changelog:
  - fix default configuration file (#1589480 and #1594147)
  - modify permissions for config files (#1601060)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-14
changelog:
  - fix double free or corruption error when freeing security context (#1809077)
  - remove deprecated CFLAG


author: Josef Ridky <jridky@redhat.com> - 1:5.8-15
changelog:
  - proxied OIDs unspecified in proxy statement in snmpd.conf (#1658134)
  - UCD-SNMP-MIB::dskTable doesn't update dynamically (#1658185)
  - expand SNMPCONFPATH variable (#1660146)
  - remove file with Apple license (#1690936)
  - log meningful message on duplicate IP address (#1692286)
  - memory reporting adjustment (#1695497 and #1766521)
  - fix typos in man page (#1700262)
  - speedup ipAddressTable loading(#1700391)
  - fix memory leak when shut down librpm (#1763008)
  - services starts after network-online.target (#1775304)
  - add missing part of memory leak patch (#1829860)
  - add support for AES192 and AES256 (#1846252)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-19
changelog:
  - revert permission of config files to 600 (#1601060)
  - fix error message when the address specified by clientaddr option
    is wrong or cannot be bound (#1877375)
  - log error with /proc/net/if_inet6 only when IPv6 is enabled (#1824367)
  - fix issue with quoting empty passphrase (#1817225)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-21
changelog:
  - prevent parsing IP address twice (#1768908)
  - add support for digests detected from ECC certs (#1919714)
  - fix broken ErrorMsg at ucd-snmp (#1933150)
  - add support for intermediate certs (#1914656)
  - fix crash of certs with longer extension (#1908718)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-27
changelog:
  - fix memory leak due of proc file creating (#2105957)
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141901) and (#2141905)
  - fix memory leak when ipv6 disable set to 1 (#2151537)
  - fix proxy timeout issue (#2160723)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-30
changelog:
  - fix crash when configured as proxy - issue 82 (RHEL-14454)
  - log once truncating issue (RHEL-13597)
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26650)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.14.0-1
changelog:
  - Resolves: #1558420 - directory permissions are now correct after processing
    USR1 signal
  - Resolves: #1601414 - nginx: drop GeoIP support


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-1
changelog:
  - new version 1.14.1
  - Resolves: #1647257 - CVE-2018-16845 nginx: Denial of service and
    memory disclosure via mp4 module
  - Resolves: #1647262 - CVE-2018-16844 nginx: Excessive CPU usage
    via flaw in HTTP/2 implementation
  - Resolves: #1647263 - CVE-2018-16843 nginx: Excessive memory consumption
    via flaw in HTTP/2 implementation


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.14.1-9
changelog:
  - Resolves: #1744811 - CVE-2019-9511 nginx:1.14/nginx: HTTP/2: large amount of
    data request leads to denial of service
  - Resolves: #1744325 - CVE-2019-9513 nginx:1.14/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745094 - CVE-2019-9516 nginx:1.14/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.0-1
changelog:
  - new version 1.16.0
  - enable ngx_stream_ssl_preread module
  - main package does NOT require all-modules package


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-1
changelog:
  - update to 1.16.1
  - Resolves: #1745697 - CVE-2019-9511 nginx:1.16/nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745690 - CVE-2019-9513 nginx:1.16/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745645 - CVE-2019-9516 nginx:1.16/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-2
changelog:
  - Resolves: #1798230 - CVE-2019-20372 nginx:1.16/nginx: HTTP request smuggling
    via error pages in http/ngx_http_special_response.c


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.16.1-2.1
changelog:
  - Resolves: #1963174 - CVE-2021-23017 nginx:1.16/nginx: Off-by-one in
    ngx_resolver_copy() when labels are followed by a pointer to a root
    domain name


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-2
changelog:
  - new version 1.18.0
  - Resolves: #1668717 - [RFE] Support loading certificates from hardware token
    (PKCS#11)
  - Increased types_hash_max_size to 4096 in default config
  - Drop location / from default config (rhbz#1564768)
  - Drop default_sever from default config (rhbz#1373822)


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.18.0-3
changelog:
  - Resolves: #1651377 - centralizing default index.html on nginx
  - Resolves: #1825683 - Outdated Red Hat branding used in nginx default pages


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.18.0-3.1
changelog:
  - Resolves: #1963178 - CVE-2021-23017 nginx:1.18/nginx: Off-by-one in
    ngx_resolver_copy() when labels are followed by a pointer to a root
    domain name


author: Renbo <rb01097748@alibaba-inc.com> - 1:1.20.1-1.0.1
changelog:
  - Add acops tuning options (liangbin.mj@alibaba-inc.com)
  - Update html pages (geliwei@openanolis.org)


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 0.7.65-1
changelog:
  - Update to new stable 0.7.65
  - change ownership of logdir to root:root
  - add support for ipv6 (bug #561248)
  - add random_index_module
  - add secure_link_module


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 0.8.53-3
changelog:
  - Change ownership of /var/log/nginx to be 0700 nginx:nginx
  - update init script to use killproc -p
  - add reopen_logs command to init script
  - update init script to use nginx -q option


author: Keiran "Affix" Smith <fedora@affix.me> - 1.0.10-1
changelog:
  - Bugfix: a segmentation fault might occur in a worker process if resolver got a big DNS response. Thanks to Ben Hawkes.
  - Bugfix: in cache key calculation if internal MD5 implementation wasused; the bug had appeared in 1.0.4.
  - Bugfix: the module ngx_http_mp4_module sent incorrect "Content-Length" response header line if the "start" argument was used. Thanks to Piotr Sikora.


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.0.12-2
changelog:
  - update upstream URL
  - replace %define with %global
  - remove obsolete BuildRoot tag, %clean section and %defattr
  - remove various unnecessary commands
  - add systemd service file and update scriptlets
  - add Epoch to accommodate %triggerun as part of systemd migration


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.0.15-1
changelog:
  - update to upstream release 1.0.15
  - no need to apply auto-cc-gcc patch
  - add %global _hardened_build 1


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.0.15-4
changelog:
  - add nginx-upgrade to replace functionality from the nginx initscript
    that was lost after migration to systemd
  - add README.fedora to describe usage of nginx-upgrade
  - nginx.logrotate: use built-in systemd kill command in postrotate script
  - nginx.service: start after syslog.target and network.target
  - nginx.service: remove unnecessary references to config file location
  - nginx.service: use /bin/kill instead of "/usr/sbin/nginx -s" following
    advice from nginx-devel
  - nginx.service: use private /tmp


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.2.4-1
changelog:
  - update to upstream release 1.2.4
  - introduce new systemd-rpm macros (#850228)
  - link to official documentation not the community wiki (#870733)
  - do not run systemctl try-restart after package upgrade to allow the
    administrator to run nginx-upgrade and avoid downtime
  - add nginx man page (#870738)
  - add nginx-upgrade man page and remove README.fedora
  - remove chkconfig from Requires(post/preun)
  - remove initscripts from Requires(preun/postun)
  - remove separate configuration files in "/etc/nginx/conf.d" directory
    and revert to upstream default of a centralized nginx.conf file
    (#803635) (#842738)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.2.6-2
changelog:
  - send correct kill signal and use correct file permissions when rotating
    log files (#888225)
  - send correct kill signal in nginx-upgrade


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.2.6-5
changelog:
  - uncomment "include /etc/nginx/conf.d/*.conf by default but leave the
    conf.d directory empty (#903065)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.4.0-1
changelog:
  - update to upstream release 1.4.0
  - enable SPDY module (new in this version)
  - enable http gunzip module (new in this version)
  - enable google perftools module and add gperftools-devel to BR
  - enable debugging (#956845)
  - trim changelog


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.4.1-1
changelog:
  - update to upstream release 1.4.1 (#960605, #960606):
    CVE-2013-2028 stack-based buffer overflow when handling certain chunked
    transfer encoding requests


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.6.1-1
changelog:
  - update to upstream release 1.6.1
  - (#1126891) CVE-2014-3556: SMTP STARTTLS plaintext injection flaw


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.6.2-2
changelog:
  - create nginx-filesystem subpackage (patch from Remi Collet)
  - create /etc/nginx/default.d as a drop-in directory for configuration files
    for the default server block
  - clean up nginx.conf


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.8.0-4
changelog:
  - add TimeoutStopSec=5 and KillMode=mixed to nginx.service
  - set worker_processes to auto
  - add some common options to the http block in nginx.conf
  - run nginx-upgrade on package update
  - remove some redundant scriptlet commands
  - listen on ipv6 for default server (#1217081)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.8.0-8
changelog:
  - replace /bin/kill with /usr/bin/systemctl kill in logrotate script (#1231543)
  - remove After=syslog.target in nginx.service (#1231543)
  - replace ExecStop with KillSignal=SIGQUIT in nginx.service (#1231543)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.8.0-14
changelog:
  - consistently use '%global with_foo' style of logic
  - remove PID file before starting nginx (#1268621)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.8.1-1
changelog:
  - update to upstream release 1.8.1
  - CVE-2016-0747: Insufficient limits of CNAME resolution in resolver
  - CVE-2016-0746: Use-after-free during CNAME response processing in resolver
  - CVE-2016-0742: Invalid pointer dereference in resolver


author: Björn Esser <besser82@fedoraproject.org> - 1:1.12.1-5
changelog:
  - Add patch to apply glibc bugfix if really needed only
  - Disable strict symbol checks in the link editor


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2112345 - nginx:1.22 for RHEL 8
  - add stream_geoip_module and stream_realip_module
  - remove obsolete --with-ipv6


author: Liwei Ge <geliwei@openanolis.org> - 1:1.22.1-1.0.1
changelog:
  - Update html pages
  - Add acops tuning options (liangbin.mj@alibaba-inc.com)
  - add LSE compiling optimization and O3 (fuyuan.wh@alibaba-inc.com)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Tim Powers <timp@redhat.com>
changelog:
  - based on origional spec file from
      http://www.insecure.org/nmap/index.html#download
  - general cleanups, removed lots of commenrts since it madethe spec hard to
      read
  - changed group to Applications/System
  - quiet setup
  - no need to create dirs in the install section, "make
      prefix=$RPM_BUILD_ROOT&{prefix} install" does this.
  - using defined %{prefix}, %{version} etc. for easier/quicker maint.
  - added docs
  - gzip man pages
  - strip after files have been installed into buildroot
  - created separate package for the frontend so that Gtk+ isn't needed for the
      CLI nmap 
  - not using -f in files section anymore, no need for it since there aren't that
      many files/dirs
  - added desktop entry for gnome


author: Tim Powers <timp@redhat.com>
changelog:
  - updated to 2.53
  - using applnk now
  - use %configure, and %{_prefix} where possible
  - removed redundant defines at top of spec file


author: Tim Powers <timp@redhat.com>
changelog:
  - fixed man pages so that they are in an FHS compliant location
  - use %makeinstall
  - use predefined RPM macros wherever possible


author: Tim Powers <timp@redhat.com>
changelog:
  - update to nmap-2.54BETA7 to possibly fix bug #20199
  - use the desktop file provided by the package instead of using my own
  - patches in previous version are depreciated. Included in SRPM for
    reference only


author: Harald Hoyer <harald@redhat.com> - 2:3.81-4
changelog:
  - removed references how to scan microsoft.com (bz #164962)
  - finally got rid of gtk+-devel dependency


author: Karsten Hopp <karsten@redhat.de> 4.03-1
changelog:
  - update to 4.03, this fixes #184286
  - remove duplicate menu entry in 'Internet' (#183056)
  - fix possible tmpdir race condition during build (#158996)


author: Till Maas <opensource@till.name> - 0.0.4-2
changelog:
  - Sync with upstream spec
  - Use Recommends for NetworkManager
  - Add Suggests for NetworkManager-ovs
  - package examples as doc


author: Ana Cabral <acabral@redhat.com> - 2.0.0-0.4.alpha3
changelog:
  - Upgrade to 2.0.0 alpha 3. Resolves: RHBZ#1996575
  - Remove connection renaming behaviour. Resolves: RHBZ#1998222
  - Add prefixes to OVS bridges and interfaces connections. Resolves: RHBZ#1998218
  - Improve OVS bridge start with nmstate. Resolves: RHBZ#1660250


author: Gris Ge <fge@redhat.com> - 2.2.22-1
changelog:
  - Use hash value to mark applied yml files at nmstatectl service. RHEL-19778
  - Support SRIOV VLAN protocol. RHEL-16487


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 2.2.23-1
changelog:
  - Upgrade to 2.2.23
  - Support type, hostaddrfamily and clientaddrfamily options in IPSec. RHEL-21354


author: Gris Ge <fge@redhat.com> - 2.2.24-1
changelog:
  - Upgrade to 2.2.24
  - Fix modification of ipsec connection. RHEL-23008
  - Fix nmstate.service on applied file. RHEL-24718


author: Gris Ge <fge@redhat.com> - 2.2.27-1
changelog:
  - N/A

   - Support TCP congestion window(cwnd) in route. (59f99632)
   - Support query interface driver. (67817c23)
   - New API to generate changed state. (fe5327a2)

   - Include driver information for `persist-nic-names` subcommand. (1129e46b)
   - nm: Protect global DNS config in checkpoint. (881373ba)
   - route rule: Append rule instead of overriding when iface defined. (88d3d3ef)
  - Resolves RHEL-19409


author: Gris Ge <fge@redhat.com> - 2.2.33-1
changelog:
  - Upgrade to 2.2.33
  - Fix validation of controller overbook. RHEL-40683
  - Support DNS and route in kernel mode. RHEL-37665


author: Gris Ge <fge@redhat.com> - 2.2.35-1
changelog:
  - Upgrade to 2.2.35
  - Fix gen_diff on VLAN ID change. RHEL-38623
  - Fix Nmpolicy on mac-address identifier. RHEL-54292
  - Fix reapply. RHEL-50556


author: Gris Ge <fge@redhat.com> - 2.2.38-1
changelog:
  - Upgrade to 2.2.38
  - Fix gc mode on blackhole route. RHEL-58666
  - Only search desired interface for storing route rule. RHEL-60261


author: Wen Liang <wenliang@redhat.com> - 2.2.39-1
changelog:
  - Upgrade to 2.2.39
  - Fix VLAN interface being removed unnecessarily due to route mismatches triggering deactivations. RHEL-65031


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.21.0-1
changelog:
  - Security update to 10.21.0
  - Resolves: RHBZ#1845307
  - Fixes CVE-2020-11080, CVE-2020-8174, CVE-2020-10531
  - Bundle brotli, because --shared-brotli configure option is missing
  - Add i18n subpackage


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.23.1-1
changelog:
  - January Security release
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Rebase to 10.23.1
  - Resolves: RHBZ#1916461, RHBZ#1914789
  - Resolves: RHBZ#1914783, RHBZ#1916462, RHBZ#1916395, RHBZ#1916459
  - Resolves: RHBZ#1916691, RHBZ#1916689, RHBZ#1916388
  - Remove dot-prop patch, as it is fixed by npm rebase


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:10.24.0-1
changelog:
  - Resolves: RHBZ#1932373, RHBZ#1932426
  - Resolves CVE-2021-22883 and CVE-2021-22884
  - remove -debug-nghttp2 flag (1930775)
  - remove ini patch merged upstream


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.19.1-1
changelog:
  - Resolves: RHBZ#1861602, #1874302, #1898598, #1898765
  - c-ares, ajv and y18n CVEs and yarn installability issues


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.20.1-1
changelog:
  - Security rebase for January security release
  - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
  - Resolves: RHBZ#1913000, RHBZ#1912952
  - Resolves: RHBZ#1912635, RHBZ#1893984


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.21.0-1
changelog:
  - Resolves: RHBZ#1934566, RHBZ#1934598
  - remove --debug-nghttp2 option
  - remove ini patch
  - Backport patch to use getauxval


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.3-1
changelog:
  - Resolves: RHBZ#1979843, RHBZ#1977759
  - Resolves: RHBz#1952915
  - Resolves CVE-2021-22918(libuv), use system cipher list


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.3-2
changelog:
  - Resolves: RHBZ#1979843, RHBZ#1977759
  - Resolves: RHBz#1952915
  - Fix typo, BR systemtap-sdt-level always, remove y18n patch


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.3-3
changelog:
  - Resolves CVE-2021-23362 CVE-2021-27290
  - Resolves: RHBZ#1945512, RHBZ#1945286
  - Add missing CVE trackers


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.5-1
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939, CVE-2021-22940,
  - Resolves CVE-2021-23343, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves: RHBZ#1951621 (make FIPS always available)
  - Resolves: RHBZ#1988596, RHBZ#1993814, RHBZ#1993808, RHBZ#1993094
  - Resolves: RHBZ#1986742, RHBZ#1993946, RHBZ#1993939, RHBZ#1989426


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:12.22.12-1
changelog:
  - Resolves: RHBZ#2084651
  - Resolves: #2086773, #2086777, #2086781, #2086786, #2086790
  - Resolves: #2086795, #2086799, #2086804, #2086809, #2086813
  - Rebase to last v12.x release
  - Remove patch for CVE-2021-23343


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.17.5-1
changelog:
  - Resolves CVE-2021-22930, CVE-2021-22931, CVE-2021-22939, CVE-2021-22940,
  - CVE-2021-23343, CVE-2021-32803, CVE-2021-32804, CVE-2021-3672
  - Resolves RHBZ#1847529 (make FIPS always available)
  - Resolves: RHBZ#1988600, RHBZ#1993815, RHBZ#1993809, RHBZ#1993096
  - Resolves: RHBZ#1986743, RHBZ#1993947, RHBZ#1993940, RHBZ#1989427
  - Resolves: RHBZ#1951620 (make FIPS always available)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.18.2-1
changelog:
  - Resolves: RHBZ#2026325
  - Resolves: RHBZ#2014130, RHBZ#2014124, RHBZ#2013826, RHBZ#2024921
  - Rebase to new version to fix CVEs


author: Jan Staněk <jstanek@redhat.com> - 1:14.18.2-2
changelog:
  - Replace with_* macros with RPM confitionals
  - Unify configure calls into single command
  - Refactor bootstrap-related parts
  - Decouple dependency bundling from bootstrapping


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:14.20.0-1
changelog:
  - Rebase to latest release
  - Resolves: #2106281, #2108056, #2108061, #2108066, #2108071, #2108139
  - Remove libs patch
  - Build without corepack


author: Jan Staněk <jstanek@redhat.com> - 1:14.20.1-2
changelog:
  - Record issues fixed in the current version
    Resolves: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824


author: Jan Staněk <jstanek@redhat.com> - 1:14.21.1-2
changelog:
  - Apply upstream fix for CVE-2022-24999
    Resolves: CVE-2022-24999
  - Record CVEs fixed by current or previous upstream releases
    Resolves: CVE-2021-44906


author: Jan Staněk <jstanek@redhat.com> - 1:14.21.3-1
changelog:
  - Rebase to 14.21.3
    Resolves: rhbz#2153712
    Resolves: CVE-2022-25881 CVE-2023-23918 CVE-2023-23920 CVE-2022-38900
    Resolves: CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.18.1-2
changelog:
  - Record CVE references already addressed in this or previous upstream versions
    Resolves: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-1
changelog:
  - Rebase to 16.19.1
    Resolves: rhbz#2153713
    Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920
    Resolves: CVE-2022-25881 CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-2
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188289
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222288


author: Dominik Rehák <drehak@redhat.com> - 1:16.20.2-1
changelog:
  - Rebase to 16.20.2
    Resolves: rhbz#2231866
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 1:16.20.1-2.0.2
changelog:
  - Remove loongarch64 arch
  - Update requires and recommands
  - Fixes CVE-2022-25883 (liubo03@inspur.com)


author: Stephen Gallagher <sgallagh@redhat.com> - 1:8.2.0-1
changelog:
  - Update to v8.2.0
  - https://nodejs.org/en/blog/release/v8.2.0/
  - Update npm to 5.3.0
  - Adds npx command


