# changelog

author: Peter Jones <pjones@redhat.com> - 0.4.7-4.1
changelog:
  - Split kpartx out into its own package so dmraid can use it without
    installing multipathd
  - Fix a segfault in kpartx


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.8-1
changelog:
  - Updated to latest Upstream 0.4.8 code: multipath-tools-080519.tgz
    (git commit id: 42704728855376d2f7da2de1967d7bc71bc54a2f)


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.8-6
changelog:
  - Updated to latest upstream 0.4.8 code: multipath-tools-080804.tgz
    (git commit id: eb87cbd0df8adf61d1c74c025f7326d833350f78)
  - fixed 451817, 456397 (scsi_id_change.patch), 457530 (config_space_fix.patch)
    457589 (static_libaio.patch)


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.8-7
changelog:
  - Since libaio is now in /lib, not /usr/lib, multipath no longer needs to
    statically link against it. Fixed an error with binding file and WWIDs
    that include spaces. Cleaned up the messages from the directio checker
    function.  Fixed the udev rules. Fixed a regression in multipath.conf
    parsing
  - Fixed 457530, 457589


author: Mike Snitzer <snitzer@redhat.com> - 0.4.9-1
changelog:
  - Updated to latest upstream 0.4.9 code: multipath-tools-090429.tgz
    (git commit id: 7395bcda3a218df2eab1617df54628af0dc3456e)
  - split the multipath libs out to a device-mapper-multipath-libs package
  - if appropriate, install multipath libs in /lib64 and /lib64/multipath


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.4.9-3
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-090729.tgz
    (git commit id: d678c139719d5631194b50e49f16ca97162ecd0f)
  - moved multipath bindings file from /var/lib/multipath to /etc/multipath
  - Fixed 354961, 432520


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.4.9-5
changelog:
  - Fixed problem where maps were being added and then removed.
  - Changed the udev rules to fix some issues.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-6
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-091013.tar.gz
    (git commit id: aa0a885e1f19359c41b63151bfcface38ccca176)
  - Drop, now upstream, patches:
    * fix_missed_uevs.patch.
    * log_all_messages.patch.
    * uninstall.patch.
    * select_lib.patch.
    * directio_message_cleanup.patch.
    * stop_warnings.patch.
  - Drop redhatification.patch in favour of spec file hacks.
  - Drop mpath_wait.patch: no longer required.
  - Merge multipath_rules.patch and udev_change.patch.
  - Rename all patches based on source.
  - Add patch 0009-RH-fix-hp-sw-hardware-table-entries.patch to fix
    default entry for hp_sw and match current kernel.
  - Add multipath.conf.redhat as source instead of patch.
  - spec file:
    * divide runtime and build/setup bits.
    * update BuildRoot.
    * update install section to apply all the little hacks here and there,
      in favour of patches against upstream.
    * move ldconfig invokation to libs package where it belong.
    * fix libs package directory ownership and files.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-7
changelog:
  - Add patch 0010-RH-Set-friendly-defaults.patch:
    * set rcdir to fedora default.
    * do not install kpartx udev bits.
    * install redhat init script.
    * Cleanup spec file install target.
  - Add patch 0011-RH-multipathd-blacklist-all-by-default.patch:
    * Fix BZ#528059
    * Stop installing default config in /etc and move it to the doc dir.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-8
changelog:
  - Split patches in "for-upstream" and "RH" series.
  - Replace 0011-RH-multipathd-blacklist-all-by-default.patch with
    version from Benjamin Marzinski.
  - Update udev rules 0010-RH-multipath-rules-udev-changes.patch.
  - rpmlint cleanup:
    * Drop useless-provides kpartx.
    * Cleanup tab vs spaces usage.
    * Summary not capitalized.
    * Missing docs in libs package.
    * Fix init script LSB headers.
  - Drop README* files from doc sections (they are empty).


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-10
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-091027.tar.gz
    (git commit id: a946bd4e2a529e5fba9c9547d03d3f91806618a3)
  - Drop unrequired for-upstream patches.
  - BuildRequires and Requires new device-mapper version for udev sync support.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-11
changelog:
  - Add 0002-for-upstream-add-tmo-config-options.patch
    * Add fail_io_fail_tmo and dev_loss_tmo multipath.conf options
  - Add 0013-RH-add-weighted_prio-prioritizer.patch
  - Add 0014-RH-add-hp_tur-checker.patch
  - Add 0015-RH-add-multipathd-count-paths-cmd.patch
  - rename multipath.conf.redhat to multipath.conf, and remove the default
    blacklist.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-12
changelog:
  - Refresh 0001-RH-queue-without-daemon.patch
  - Refresh 0002-RH-path-checker.patch
  - Modify 0010-RH-multipath-rules-udev-changes.patch
    * Fix udev rules to use DM_SBIN_PATH when calling kpartx
    * install udev rules to /lib/udev/rules.d instead of /etc/udev/rules.d
  - Modify 0014-RH-add-hp_tur-checker.patch
  - Add 0003-for-upstream-default-configs.patch
  - Add 0016-RHBZ-554561-fix-init-error-msg.patch
  - Add 0017-RHBZ-554592-man-page-note.patch
  - Add 0018-RHBZ-554596-SUN-6540-config.patch
  - Add 0019-RHBZ-554598-fix-multipath-locking.patch
  - Add 0020-RHBZ-554605-fix-manual-failover.patch
  - Add 0021-RHBZ-548874-add-find-multipaths.patch
    * Added find_multipaths multipath.conf option
    * Added /sbin/mpathconf for simple editting of multipath.conf
  - Add 0022-RHBZ-557845-RHEL5-style-partitions.patch
    * Make kpartx deal with logical partitions like it did in RHEL5.
      Don't create a dm-device for the extended partition itself.
      Create the logical partitions on top of the dm-device for the whole disk.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-13
changelog:
  - Replace 0012-RH-explicitly-disable-dm-udev-sync-support-in-kpartx.patch
    with 0012-RH-udev-sync-support.patch
    * Add udev sync support to kpartx and multipath. In kpartx it is disabled
      unless you use the -s option.
  - Refresh 0013-RH-add-weighted_prio-prioritizer.patch
  - Refresh 0021-RHBZ-548874-add-find-multipaths.patch
  - Modify 0022-RHBZ-557845-RHEL5-style-partitions.patch
    * kpartx now creates a 2 sector large device for dos extended
      partitions, just like the kernel does on the regular block devices.
  - Add 0023-RHBZ-557810-emc-invista-config.patch
  - Add 0024-RHBZ-565933-checker-timeout.patch
    * Multipath has a new option checker_timeout. If this is not set, 
      all path checker functions with explicit timeouts use
      /sys/block/sd<x>/device/timeout. If this is set, they use it instead.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-14
changelog:
  - Modify 0021-RHBZ-548874-add-find-multipaths.patch
    * fix bug where mpathconf wouldn't create a multpath.conf file unless one
      already existed.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-16
changelog:
  - Modify 0012-RH-udev-sync-support.patch
  - Modify 0021-RHBZ-548874-add-find-multipaths.patch
  - Modify 0022-RHBZ-557845-RHEL5-style-partitions.patch
  - Add 0025-RHBZ-508827-update-multipathd-manpage.patch through
        0101-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
    * sync with current state of RHEL6. Next release should include a updated
      source tarball with most of these fixes rolled in.
  - Add 0102-RHBZ-690828-systemd-unit-file.patch
    * Add Jóhann B. Guðmundsson's unit file for systemd.
    * Add sub-package sysvinit for SysV init script.
  - Resolves: bz #690828


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-17
changelog:
  - Add 0103-add-disable-sync-option.patch
    * add a -n (nosync) option to multipath. This disables synchronous
      file creation with udev.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-19
changelog:
  - Modify 0103-add-disable-sync-option.patch
  - Add 0104-RHBZ-737989-systemd-unit-fix.patch
    * systemd will only start multipathd if /etc/multipath.conf exists
  - Add 0105-fix-oom-adj.patch
    * first try setting oom_score_adj


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-21
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-120123.tgz
    (git commit id: 63704387009443bdb37d9deaaafa9ab121d45bfb)
  - Add 0001-RH-fix-async-tur.patch
  - Add 0002-RH-dont_start_with_no_config.patch
  - Add 0003-RH-multipath.rules.patch
  - Add 0004-RH-update-init-script.patch
  - Add 0005-RH-cciss_id.patch
  - Add 0006-RH-Make-build-system-RH-Fedora-friendly.patch
  - Add 0007-RH-multipathd-blacklist-all-by-default.patch
  - Add 0008-RH-add-mpathconf.patch
  - Add 0009-RH-add-find-multipaths.patch
  - Add 0010-RH-check-if-multipath-owns-path.patch
  - Add 0011-RH-add-hp_tur-checker.patch


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-22
changelog:
  - Add 0012-RH-update-on-show-topology.patch
  - Add 0013-RH-manpage-update.patch
  - Add 0014-RH-RHEL5-style-partitions.patch
  - Add 0015-RH-add-followover.patch
  - Add 0016-RH-dont-remove-map-on-enomem.patch
  - Add 0017-RH-fix-shutdown-crash.patch
  - Add 0018-RH-warn-on-bad-dev-loss-tmo.patch
  - Add 0019-RH-deprecate-uid-gid-mode.patch
  - Add 0020-RH-dont-remove-map-twice.patch
  - Add 0021-RH-validate-guid-partitions.patch
  - Add 0022-RH-adjust-messages.patch
  - Add 0023-RH-manpage-update.patch


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-27
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-120613.tgz
    (git commit id: cb0f7127ba90ab5e8e71fc534a0a16cdbe96a88f)
  - Add 0001-RH-remove_callout.patch
    * multipath no longer uses the getuid callout.  It now gets the
      wwid from the udev database or the environment variables
  - Add 0004-RH-fix-cciss-names.patch
    * convert cciss device names from cciss/cXdY to sysfs style cciss!cXdY
  - Split 0009-RH-add-find-multipaths.patch into 0002-RH-add-wwids-file.patch
          and 0010-RH-add-find-multipaths.patch
  - Add 0016-RH-change-configs.patch
    * default fast_io_fail to 5 and don't set the path selector in the
      builtin configs.
  Resolves: bz #831978


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-29
changelog:
  - Updated to latest upstrem 0.4.9 code: multipath-tools-120821.tgz
    (git commit id: 050b24b33d3c60e29f7820d2fb75e84a9edde528)
    * includes 0001-RH-remove_callout.patch, 0002-RH-add-wwids-file.patch,
      0003-RH-add-followover.patch, 0004-RH-fix-cciss-names.patch
  - Add 0013-RH-kpartx-msg.patch
  - Modify 0002-RH-multipath.rules.patch
    * removed socket call from rules file


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-31
changelog:
  - Add 0014-RH-dm_reassign.patch
    * Fix reassign_maps option
  - Add 0015-RH-selector_change.patch
    * devices default to using service-time selector
  - Add 0016-RH-retain_hwhandler.patch
    * add retain_attached_hw_handler option, to let multipath keep an
      already attached scsi device handler
  - Add 0017-RH-netapp_config.patch
  - Add 0018-RH-remove-config-dups.patch
    * Clean up duplicates in the devices and blacklist sections


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-32
changelog:
  - Modified 0018-RH-remove-config-dups.patch
    * Made modified config remove original only if the vendor/product
      exactly match


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-33
changelog:
  - Modify 0016-RH-retain_hwhandler.patch
    * Check the dm-multipath module version, and don't enable
      retain_attached_hw_handler if the kernel doesn't support it
  - Add 0019-RH-detect-prio.patch
    * add detect_prio option, to make multipath check if the device
      supports the ALUA prio, before defaulting to the configured prio
  - Remove 0017-RH-netapp_config.patch
  - Add 0020-RH-netapp-config.patch
    * new netapp config that uses retain_attached_hw_handler and
      detect_prio to autoconfigure ALUA and non-ALUA devices.


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-35
changelog:
  - Add 0022-RHBZ-864368-disable-libdm-failback.patch
    * make kpartx and multiapthd disable libdm failback device creation
  - Add 0023-RHBZ-866291-update-documentation.patch
  - Resolves: bz #864368, #866291


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-38
changelog:
  - Add 0026-RH-fix-mpathpersist-fns.patch
  - Add 0027-RH-default-partition-delimiters.patch
    * Only use the -p delimiter when the device name ends in a number
  - Add 0028-RH-storagetek-config.patch
  - Add 0029-RH-kpartx-retry.patch
    * retry delete on busy loop devices
  - Add 0030-RH-early-blacklist.patch
    * multipath will now blacklist devices by device type and wwid in
      store_pathinfo, so that it doesn't do a bunch of unnecessary work
      on paths that it would only be removing later on.


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-40
changelog:
  - Add 0032-RH-make-path-fd-readonly.patch
    * revert change made when adding persistent reservations, so that path fds
      are again opened O_RDONLY


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-41
changelog:
  - Add 0033-RH-dont-disable-libdm-failback-for-sync-case.patch
    * make kpartx -s and multipath use libdm failback device creation, so
      that they work in environments without udev


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-42
changelog:
  - Add 0034-RHBZ-887737-check-for-null-key.patch
  - Add 0035-RHBZ-883981-cleanup-rpmdiff-issues.patch
    * Compile multipathd with full RELRO and PIE and install to /usr


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-44
changelog:
  - Add 0036-UP-fix-state-handling.patch
    * handle transport-offline and quiesce sysfs state
  - Add 0037-UP-fix-params-size.patch
  - Add 0038-RH-fix-multipath.rules.patch
    * make sure multipath's link priority gets increased
  - Add 0039-RH-handle-other-sector-sizes.patch
    * allow gpt partitions on 4k sector size block devices.
  - Add 0040-RH-fix-output-buffer.patch
    * fix multipath -ll for large configuration.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-45
changelog:
  - Updated to latest upstrem 0.4.9 code: multipath-tools-130222
    (git commit id: 67b82ad6fe280caa1770025a6bb8110b633fa136)
  - Refresh 0001-RH-dont_start_with_no_config.patch
  - Modify 0002-RH-multipath.rules.patch
  - Modify 0003-RH-Make-build-system-RH-Fedora-friendly.patch
  - Refresh 0004-RH-multipathd-blacklist-all-by-default.patch
  - Refresh 0005-RH-add-mpathconf.patch
  - Refresh 0006-RH-add-find-multipaths.patch
  - Add 0008-RH-revert-partition-changes.patch
  - Rename 0008-RH-RHEL5-style-partitions.patch to
  	 0009-RH-RHEL5-style-partitions.patch
  - Rename 0009-RH-dont-remove-map-on-enomem.patch to
  	 0010-RH-dont-remove-map-on-enomem.patch
  - Rename 0010-RH-deprecate-uid-gid-mode.patch to
  	 0011-RH-deprecate-uid-gid-mode.patch
  - Rename 0013-RH-kpartx-msg.patch to 0012-RH-kpartx-msg.patch
  - Rename 0035-RHBZ-883981-cleanup-rpmdiff-issues.patch to
           0013-RHBZ-883981-cleanup-rpmdiff-issues.patch
  - Rename 0039-RH-handle-other-sector-sizes.patch to
  	 0014-RH-handle-other-sector-sizes.patch
  - Rename 0040-RH-fix-output-buffer.patch to 0015-RH-fix-output-buffer.patch
  - Add 0016-RH-dont-print-ghost-messages.patch
  - Add 0017-RH-fix-sigusr1.patch
    * Actually this fixes a number of issues related to signals
  - Rename 0018-RH-remove-config-dups.patch to 0018-RH-fix-factorize.patch
    * just the part that isn't upstream
  - Add 0019-RH-fix-sockets.patch
    * makes abstract multipathd a cli sockets use the correct name.
  - Set find_multipaths in the default config


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-46
changelog:
  - Add 0020-RHBZ-907360-static-pthread-init.patch
    * statically initialize the uevent pthread structures


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-47
changelog:
  - Add 0021-RHBZ-919119-respect-kernel-cmdline.patch
    * keep the multipath.rules udev file from running and multipathd from
      starting if nompath is on the kernel command line
  - Add 0022-RH-multipathd-check-wwids.patch
    * Whenever multipath runs configure, it will check the wwids, and
      add any missing ones to the wwids file
  - Add 0023-RH-multipath-wipe-wwid.patch
    * multipath's -w command will remove a wwid from the wwids file
  - Add 0024-RH-multipath-wipe-wwids.patch
    * multipath's -W command will set reset the wwids file to just the current
      devices
  - Add 0025-UPBZ-916668_add_maj_min.patch
  - Resolves: bz #919119


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-48
changelog:
  - Add 0026-fix-checker-time.patch
    * Once multipathd hit it max checker interval, it was reverting to
      to shortest checker interval
  - Add 0027-RH-get-wwid.patch
    * Multipath wasn't correctly setting the multipath wwid when it read devices
      in from the kernel
  - Add 0028-RHBZ-929078-refresh-udev-dev.patch
    * Make multipath try to get the UID of down devices.  Also, on ev_add_path,
      make multipathd reinitialize existing devices that weren't fully
      initialized before.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-49
changelog:
  - Modify 0020-RHBZ-907360-static-pthread-init.patch
    * Don't initialize uevent list twice
  - Add 0029-RH-no-prio-put-msg.patch
  - Add 0030-RHBZ-916528-override-queue-no-daemon.patch
    * Default to "queue_without_daemon no"
    * Add "forcequeueing daemon" and "restorequeueing daemon" cli commands
  - Modify spec file to force queue_without_daemon when restarting
    multipathd on upgrades.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-50
changelog:
  - Add 0031-RHBZ-957188-kpartx-use-dm-name.patch
    * use the basename of the devices that will be created to choose the
      delimiter instead of using the device name from the command line
  - Resolves: bz #957188


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-51
changelog:
  - Add 0032-RHBZ-956464-mpathconf-defaults.patch
    * fix defaults listed in usage
  - Add 0033-RHBZ-829963-e-series-conf.patch
  - Add 0034-RHBZ-851416-mpathconf-display.patch
    * display whether or not multipathd is running in the status
  - Add 0035-RHBZ-891921-list-mpp.patch
    * add a new path format wilcard to list the multipath device associated
      with a path
  - Add 0036-RHBZ-949239-load-multipath-module.patch
    * load the dm-multipath kernel module when multipathd starts
  - Add 0037-RHBZ-768873-fix-rename.patch
    * When deciding on a multipth devices name on reload, don't default to
      the existing name if there is no config file alias and user_friendly_names
      isn't set. Use the wwid.
  - Modify multipath.conf
  - Resolves: bz #768873, #950252


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-52
changelog:
  - Add 0038-RHBZ-799860-netapp-config.patch
  - Add 0039-RH-detect-prio-fix.patch
    * Don't autodetect ALUA prioritizer unless it actually can get a priority
  - Add 0040-RH-bindings-fix.patch
    * Do a better job of trying to get the first free user_friendly_name
  - Add 0041-RH-check-for-erofs.patch
    * Don't create/reload a device read-only unless doing it read/write fails
      with EROFS
  - Remove 0017-RH-fix-sigusr1.patch
    * fix signal handling upstream way instead
  - Add 0042-UP-fix-signal-handling.patch
    * uxlsnr now handles all the signals sent to multipathd. This makes its
      signal handling posix compliant, and harder to mess up.
  - Add 0043-RH-signal-waiter.patch
    * ioctl isn't a pthread cancellation point.  Send a signal to the waiter
      thread to break out of waiting in ioctl for a dm event.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-53
changelog:
  - Add 0044-RHBZ-976688-fix-wipe-wwids.patch
    * Seek back to the start of the file after truncating it
  - Add 0045-RHBZ-977297-man-page-fix.patch
    * update man page to match actual defaults
  - Add 0046-RHBZ-883981-move-udev-rules.patch
    * move udev rules file from /lib to /usr/lib
  - Resolves: bz #883981, #976688, #977297


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-54
changelog:
  - Add 0047-RHBZ-980777-kpartx-read-only-loop-devs.patch
    * make kpartx support read-only files better
  - Resolves: bz #980777


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-55
changelog:
  - Modify 0015-RH-fix-output-buffer.patch
    * Fix memory leak
  - Add 0047-RHBZ-kpartx-read-only-loop-devs.patch
    * Fix read only loop device handling
  - Add 0048-RH-print-defaults.patch
  - Add 0049-RH-remove-ID_FS_TYPE.patch
    * remove ID_FS_TYPE udev enviroment variable for multipath devices
  - Add 0051-UP-fix-cli-resize.patch
    * check before dereferencing variables
  - Add 0052-RH-fix-bad-derefs.patch
    * setup multipath free the multipath device when it fails, so don't keep
      using it.
  - Add 0053-UP-fix-failback.patch
    * setting failback in the devices section was broken
  - Add 0054-UP-keep-udev-ref.patch
    * multipathd needs to keep the same udev object across reconfigures
  - Add 0055-UP-handle-quiesced-paths.patch
    * quiesced paths should be treated as down
  - Add 0056-UP-alua-prio-fix.patch
    * Don't count the preferred bit for paths that are active/optimized
  - Add 0057-UP-fix-tmo.patch
    * Cleanup how multipath sets dev_loss_tmo and fast_io_fail_tmo.  Also
      make multipath get changing values directly from sysfs, instead of
      from udev, which caches them.
  - Add 0058-UP-fix-failback.patch
    * make failback print the default value when you show configs.
  - Add 0059-UP-flush-failure-queueing.patch
    * If you can't flush a multipath device, restore the queue_if_no_paths
      value
  - Add 0060-UP-uevent-loop-udev.patch
    * make ueventloop grab it's own udev reference, since it is cancelled
      asychnrously.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-56
changelog:
  - Add 0061-RH-display-find-mpaths.patch
    * display the find_multipaths value in show config
  - Add 0062-RH-dont-free-vecs.patch
    * don't free the vecs structure on shutdown. It's more pain than
      it's worth.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-57
changelog:
  - Add 0063-RH-fix-warning.patch
    * Fix complier warning
  - 0064-fix-ID_FS-attrs.patch
    * make multipath create a timestamp file /run/multipathd/timestamp, and
      add -T<timestamp>:<valid> option to shortcut processing if the
      timestamp hasn't changed


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-58
changelog:
  - Add 0065-UPBZ-995538-fail-rdac-on-unavailable.patch
    * make rdac checker always mark paths with asymmetric access state of
      unavailable as down


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-59
changelog:
  - Add 0066-UP-dos-4k-partition-fix.patch
    * Make kpartx correctly handle 4K sector size devices with dos partitions.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-60
changelog:
  - Add 0067-RHBZ-1022899-fix-udev-partition-handling.patch
    * Make sure to wipe partition devices on change event if they weren't
      wiped on the device add event
  - Add 0068-RHBZ-1034578-label-partition-devices.patch
    * Make sure that partition devices are labeled like the whole device
  - Add 0069-UPBZ-1033791-improve-rdac-checker.patch
    *  Use RTPG data in RDAC checker
  - Add 0070-RHBZ-1036503-blacklist-td-devs.patch
  - Add 0071-RHBZ-1031546-strip-dev.patch
    * make multipathd interactive commands able to handle /dev/<devnode>
      instead of just <devnode>


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-61
changelog:
  - Add 0072-RHBZ-1039199-check-loop-control.patch
    * Make kpartx use LOOP_CTL_GET_FREE and loop-control to find a free
      loop device. This will autoload the loop module.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-62
changelog:
  - Modify 0072-RHBZ-1039199-check-loop-control.patch
    * only call close on the /dev/loop-control fd the open succeeds
  - Add 0073-RH-update-build-flags.patch
    * fix print call to work with -Werror=format-security compile flag


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-63
changelog:
  - Add 0074-RHBZ-1056976-dm-mpath-rules.patch
    * Add rules to keep from doing work in udev if there are no
      active paths, or if the event was for a multipath device
      reloading its table due to a path change.
  - Add 0075-RHBZ-1056976-reload-flag.patch
    * multipath code to identify reloads that the new rules can
      ignore
  - Add 0076-RHBZ-1056686-add-hw_str_match.patch
    * add a new default config paramter, "hw_str_match", to make user
      device configs only overwrite builtin device configs if the
      identifier strings match exactly, like the default in RHEL6.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-64
changelog:
  - Modify 0076-RHBZ-1056686-add-hw_str_match.patch
    * free temporary memory used during configuration
  - Add 0078-RHBZ-1054044-fix-mpathconf-manpage.patch
    * fix typo
  - Add 0079-RHBZ-1070581-add-wwid-option.patch
    * add multipath option "-a". To add a device's wwid to the wwids file
  - Add 0080-RHBZ-1075796-cmdline-wwid.patch
    * add multipath option "-A" to add wwids specified by the kernel
      command line mapth.wwid options.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-68
changelog:
  - Modify multipath.conf
    * remove getuid_callout example
  - Re-add 0050-RH-listing-speedup.patch
  - Add 0081-RHBZ-1066264-check-prefix-on-rename.patch
    * make multipath check the prefix on kpartx partitions during rename, and
      copy the existing behaviour
  - Add 0082-UPBZ-1109995-no-sync-turs-on-pthread_cancel.patch
    * If async tur checker fails on threads, don't retry with the sync version
  - Add 0083-RHBZ-1080055-orphan-paths-on-reload.patch
    * Fix case where pathlist wasn't getting updated properly
  - Add 0084-RHBZ-1110000-multipath-man.patch
    * fix errors in multipath man page
  - Add 0085-UPBZ-1110006-datacore-config.patch
    * Add support for DataCore Virtual Disk
  - Add 0086-RHBZ-1110007-orphan-path-on-failed-add.patch
    * If multipathd fails to add path correctly, it now fully orphans the path
  - Add 0087-RHBZ-1110013-config-error-checking.patch
    * Improve multipath.conf error checking.
  - Add 0088-RHBZ-1069811-configurable-prio-timeout.patch
    * checker_timeout now adjusts the timeouts of the prioritizers as well.
  - Add 0089-RHBZ-1110016-add-noasync-option.patch
    * Add a new defaults option, "force_sync", that disables the async mode
      of the path checkers. This is for cases where to many parallel checkers
      hog the cpu
  - Add 0090-UPBZ-1080038-reorder-paths-for-round-robin.patch
    * make multipathd order paths for better throughput in round-robin mode
  - Add 0091-RHBZ-1069584-fix-empty-values-fast-io-fail-and-dev-loss.patch
    * check for null pointers in configuration reading code.
  - Add 0092-UPBZ-1104605-reload-on-rename.patch
    * Reload table on rename if necessary
  - Add 0093-UPBZ-1086825-user-friendly-name-remap.patch
    * Keep existing user_friend_name if possible
  - Add 0094-RHBZ-1086825-cleanup-remap.patch
    * Cleanup issues with upstream patch
  - Add 0095-RHBZ-1127944-xtremIO-config.patch
    * Add support for EMC ExtremIO devices
  - Add 0096-RHBZ-979474-new-wildcards.patch
    * Add N, n, R, and r path wildcards to print World Wide ids
  - Add 0097-RH-fix-coverity-errors.patch
    * Fix a number of unterminated strings and memory leaks on failure
      paths.
  - Add 0098-UPBZ-1067171-mutipath-i.patch
    * Add -i option to ignore wwids file when checking for valid paths
  - Add 0099-RH-add-all-devs.patch
    * Add new devices config option all_devs. This makes the configuration
      overwrite the specified values in all builtin configs
  - Add 0100-RHBZ-1067171-multipath-i-update.patch
    * make -i work correctly with find_multipaths
  - Add 0101-RH-adapter-name-wildcard.patch
    * Add 'a' path wildcard to print adapter name


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-70
changelog:
  - Add 0102-RHBZ-1160478-mpathconf-template.patch
    * mpathconf no longer copies the default config template for the
      docs directory.  It simply writes the template itself.
  - Resolves: bz# 1160478


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-71
changelog:
  - Add 0103-RH-cleanup-partmaps-code.patch
    * code refactoring to prepare for next patch
  - Add 0104-RHBZ-631009-deferred-remove.patch
    * add deferred_remove option to /etc/multipath.conf
  - Add 0105-RHBZ-1148979-fix-partition-mapping-creation-race-with-kpartx.patch
    * Only run kpartx on device activation
  - Add 0106-RHBZ-1159337-fix-double-free.patch
    * made ev_remove_path exit immediately after failing setup_multipath, since
      it handles cleaning up the device
  - Add 0107-RHBZ-1169935-no-new-devs.patch
    * Add new multipathd option '-n' which keeps multipathd from creating any
      multipath devices that aren't in the /etc/multipath/wwids file.
  - Add 0108-RHBZ-1153832-kpartx-remove-devs.patch
    * switch from 'kpartx -a' to 'kpartx -u' to remove missing devices as well.
  - Add 0109-RH-read-only-bindings.patch
    * re-enabled -B option for multipathd


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-72
changelog:
  - Modify 0107-RHBZ-1169935-no-new-devs.patch
    * instead of using "-n" there is now a new configuration option,
      'ignore_new_boot_devs'. If set to 'yes', multipath will ignore
      devices that aren't in /etc/multipath/wwids when running in the
      initramfs. This option does nothing while multipathd is running
      in the real root filesystem.
  - Update 0109-RH-read-only-bindings.patch


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-73
changelog:
  - Add 0110-RHBZ-blacklist-vd-devs.patch
    * blacklist vd[a-z] devices, since they don't have a WWID for
      multipath to use.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-75
changelog:
  - Add 0111-RH-dont-show-pg-timeout.patch
    * The kernel doesn't support pg_timeout, so multipath shouldn't
      bother to display it
  - Add 0112-RHBZ-1194917-add-config_dir-option.patch
    * multipath will now also read its configuration from files with
      the .conf suffix in the directory specified by config_dir
      which defaults to /etc/multipath/conf.d
  - Add 0113-RHBZ-1194917-cleanup.patch
    * cleanup some unnecessary code
  - Add 0114-RHBZ-1196394-delayed-reintegration.patch
    * Add "delay_watch_checks" and "delay_wait_checks" options to delay
      reintegration of flakey paths.
  - Add 0115-RHBZ-1198418-fix-double-free.patch
    * multipath was freeing the multipath alias twice if it failed to create the
      multipath device.
  - Add 0116-UPBZ-1188179-dell-36xxi.patch
    * new builtin configurations.
  - Add 0117-RHBZ-1198424-autodetect-clariion-alua.patch
    * configure multipath to automatically detect alua settings on clariion
      devices.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-77
changelog:
  - Modify 0104-RHBZ-631009-deferred-remove.patch
    * add man page info
  - Refresh 0112-RHBZ-1194917-add-config_dir-option.patch
  - Refresh 0114-RHBZ-1196394-delayed-reintegration.patch
  - Add 0118-UPBZ-1200738-update-eternus-config.patch
    * update default config
  - Add 0119-RHBZ-1081397-save-alua-info.patch
    * make prioritizers save information between calls to speed them up.
  - Add 0120-RHBZ-1043093-realloc-fix.patch
    * free old memory if realloc fails.
  - Add 0121-RHBZ-1197234-rules-fix.patch
    * make sure kpartx runs after an DM_ACTIVATION event occurs.
  - Add 0122-RHBZ-1212590-dont-use-var.patch
    * use /run instead of /var/run
  - Add 0123-UPBZ-1166072-fix-path-offline.patch
    * Don't mark quiesce and transport-offline paths as offline
  - Add 0124-RHBZ-1209275-retrigger-uevents.patch
    * Make multipathd retrigger uevents when paths haven't successfully had
      their udev_attribute environment variable set by udev and add
      "retrigger_ties" and "retrigger_delay" to control this
  - Add 0125-RHBZ-1153832-kpartx-delete.patch
    * Delete all partition devices with -d (not just the ones in the partition
      table)
  - Add 0126-RHBZ-1211383-alias-collision.patch
    * make multipathd use the old alias, if rename failed and add
      "new_bindings_in_boot" to determine if new bindings can be added to
      the bindings file in the initramfs
  - Add 0127-RHBZ-1201030-use-blk-availability.patch
    * Make multipath use blk-availability.service
  - Add 0128-RHBZ-1222123-mpathconf-allow.patch
    * Add mpathconf --allow for creating specialized config files.
  - Add 0129-RHBZ-1241774-sun-partition-numbering.patch
    * Make kpartx correctly number sun partitions.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-80
changelog:
  - Add 0131-RHBZ-1259523-host_name_len.patch
    * increase size of host string
  - Add 0132-UPBZ-1259831-lock-retry.patch
    * retry locking when creating multipath devices


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-82
changelog:
  - Modify 0005-RH-add-mpathconf.patch
    * changed warning message
  - Modify 0102-RHBZ-1160478-mpathconf-template.patch
    * updated man page
  - Modify 0104-RHBZ-631009-deferred-remove.patch
    * refactor code and minor fix
  - Refresh 0107-RHBZ-1169935-no-new-devs.patch
  - Refresh 0112-RHBZ-1194917-add-config_dir-option.patch
  - Refresh 0126-RHBZ-1211383-alias-collision.patch
  - Add 0133-RHBZ-1296979-fix-define.patch
    * look for the correct libudev function to set define
  - Add 0134-RHBZ-1241528-check-mpath-prefix.patch
    * only touch devices with a "mpath-" dm uuid prefix
  - Add 0135-RHBZ-1299600-path-dev-uevents.patch
    * trigger path uevent the first time a path is claimed by multipath
  - Add 0136-RHBZ-1304687-wait-for-map-add.patch
    * wait for the device to finish being added before reloading it.
  - Add 0137-RHBZ-1280524-clear-chkr-msg.patch
  - Add 0138-RHBZ-1288660-fix-mpathconf-allow.patch
    * don't remove existing lines from blacklist_exceptions section
  - Add 0139-RHBZ-1273173-queue-no-daemon-doc.patch
  - Add 0140-RHBZ-1299647-fix-help.patch
  - Add 0141-RHBZ-1303953-mpathpersist-typo.patch
  - Add 0142-RHBZ-1283750-kpartx-fix.patch
    * only remove devices if their uuid says that they are the correct
      partition device
  - Add 0143-RHBZ-1299648-kpartx-sync.patch
    * default to using udev sync mode
  - Add 0144-RHBZ-1299652-alua-pref-arg.patch
    * allow "exclusive_pref_bit" argument to alua prioritizer
  - Add 0145-UP-resize-help-msg.patch
  - Add 0146-UPBZ-1299651-raw-output.patch
    * allow raw format mutipathd show commands, that remove headers and padding
  - Add 0147-RHBZ-1272620-fail-rm-msg.patch
  - Add 0148-RHBZ-1292599-verify-before-remove.patch
    * verify that all partitions are unused before attempting to remove a device
  - Add 0149-RHBZ-1292599-restore-removed-parts.patch
    * don't disable kpartx when restoring the first path of a device.
  - Add 0150-RHBZ-1253913-fix-startup-msg.patch
    * wait for multipathd daemon to write pidfile before returning
  - Add 0151-RHBZ-1297456-weighted-fix.patch
    * add wwn keyword to weighted prioritizer for persistent naming
  - Add 0152-RHBZ-1269293-fix-blk-unit-file.patch
    * use "Wants" instead of "Requires"
  - Add 0153-RH-fix-i686-size-bug.patch
    * use 64-bit keycodes for multipathd client commands
  - Add 0154-UPBZ-1291406-disable-reinstate.patch
    * don't automatically reinstate ghost paths for implicit alua devices
  - Add 0155-UPBZ-1300415-PURE-config.patch
    * Add default config for PURE FlashArray
  - Add 0156-UPBZ-1313324-dont-fail-discovery.patch
    * don't fail discovery because individual paths failed.
  - Add 0157-RHBZ-1319853-multipath-c-error-msg.patch
    * better error reporting for multipath -c
  - Add 0158-RHBZ-1318581-timestamp-doc-fix.patch
    * add documentation for -T
  - Add 0159-UPBZ-1255885-udev-waits.patch
    * make multipath and kpartx wait after for udev after each command


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-83
changelog:
  - Modify 0135-RHBZ-1299600-path-dev-uevents.patch
    * trigger uevents when adding wwids for existing devices during startup
  - Refresh 0136-RHBZ-1304687-wait-for-map-add.patch
  - Refresh 0150-RHBZ-1253913-fix-startup-msg.patch
  - Modify 0159-UPBZ-1255885-udev-waits.patch
    * fix bug in failure path
  - Add 0160-RH-udev-flags.patch
  - Add 0161-RHBZ-1311659-no-kpartx.patch
    * skip_kpartx option disables kpartx running on multipath devices
  - Add 0162-RHBZ-1333331-huawei-config.patch
    * Add default config for Huawei XSG1 array
  - Add 0163-UPBZ-1333492-resize-map.patch
    * restore old size if resize fails
  - Add 0164-RHBZ-1311463-dos-part-rollover.patch
    * fix incorrect partition size due to 4k device size rollover
  - Add 0165-UPBZ-1341748-MSA-2040-conf.patch
    * Add default config for MSA 2040 array
  - Add 0166-RHBZ-1323429-dont-allow-new-wwid.patch
    * don't allow path wwid to change while it is in use
  - Add 0167-RHBZ-1335176-fix-show-cmds.patch
    * and new show multipath format wildcard, 'f' to sho number of failures.
      This will hopefully be useful for tracking what happens to multipath
      devices for bz #1335176
  - Add 0168-RHBZ-1347769-shared-lock.patch
    * make multipath lock the path devices with a shared lock
  - Add 0169-UPBZ-1353357-json-output.patch
    * add mulitpathd json output command
  - Add 0170-UPBZ-1352925-fix-typo.patch
  - Add 0171-UPBZ-1356651-allow-zero-size.patch
    * Allow zero-sized paths to be added to a multipath device
  - Add 0172-RHBZ-1350931-no-active-add.patch
    * Allow paths to be added to a new map if no active paths exist. Also
      fixes 1351430


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-86
changelog:
  - Modify 0136-RHBZ-1304687-wait-for-map-add.patch
    * switch to missing_uev_wait_timeout to stop waiting for uev
  - Refresh 0137-RHBZ-1280524-clear-chkr-msg.patch
  - Refresh 0150-RHBZ-1253913-fix-startup-msg.patch
  - Refresh 0154-UPBZ-1291406-disable-reinstate.patch
  - Refresh 0156-UPBZ-1313324-dont-fail-discovery.patch
  - Refresh 0161-RHBZ-1311659-no-kpartx.patch
  - Refresh 0167-RHBZ-1335176-fix-show-cmds.patch
  - Add 0173-RH-update-man-page.patch
  - Add 0174-RHBZ-1362396-modprobe.patch
    * make starting the multipathd service modprobe dm-multipath in the
      sysvinit scripts
  - Add 0175-RHBZ-1357382-ordering.patch
    * force multipathd.service to start after systemd-udev-trigger.service
  - Add 0176-RHBZ-1363830-fix-rename.patch
    * initialized a variable to make dm_rename not fail randomly
  - Add 0177-libmultipath-correctly-initialize-pp-sg_id.patch
    * This and all the following patches add the rbd patch checker
  - Add 0178-libmultipath-add-rbd-discovery.patch
  - Add 0179-multipath-tools-add-checker-callout-to-repair-path.patch
  - Add 0180-multipath-tools-Add-rbd-checker.patch
  - Add 0181-multipath-tools-Add-rbd-to-the-hwtable.patch
  - Add 0182-multipath-tools-check-for-initialized-checker-before.patch
  - Add 0183-multipathd-Don-t-call-repair-on-blacklisted-path.patch
  - Add 0184-rbd-fix-sync-repair-support.patch
  - Add 0185-rbd-check-for-nonshared-clients.patch
  - Add 0186-rbd-check-for-exclusive-lock-enabled.patch
  - Add 0187-rbd-fixup-log-messages.patch
  - Add 0188-RHBZ-1368501-dont-exit.patch
    * make multipathd not exit if it encounters recoverable errors on startup
  - Add 0189-RHBZ-1368211-remove-retries.patch
    * add "remove_retries" multipath.conf parameter to make multiple attempts
      to remove a multipath device if it is busy.
  - Add 0190-RHBZ-1380602-rbd-lock-on-read.patch
    * pass lock_on_read when remapping image
  - Add 0191-RHBZ-1169168-disable-changed-paths.patch
    * add "disabled_changed_wwids" multipath.conf parameter to disable
      paths whose wwid changes
  - Add 0192-RHBZ-1362409-infinibox-config.patch
  - Add 0194-RHBZ-1351964-kpartx-recurse.patch
    * fix recursion on corrupt dos partitions
  - Add 0195-RHBZ-1359510-no-daemon-msg.patch
    * print a messages when multipathd isn't running
  - Add 0196-RHBZ-1239173-dont-set-flag.patch
    * don't set reload flag on reloads when you gain your first
      valid path
  - Add 0197-RHBZ-1394059-max-sectors-kb.patch
    * add "max_sectors_kb" multipath.conf parameter to set max_sectors_kb
      on a multipath device and all its path devices
  - Add 0198-RHBZ-1372032-detect-path-checker.patch
    * add "detect_checker" multipath.conf parameter to detect ALUA arrays
      and set the path checker to TUR
  - Add 0199-RHBZ-1279355-3pardata-config.patch
  - Add 0200-RHBZ-1402092-orphan-status.patch
    * clear status on orphan paths
  - Add 0201-RHBZ-1403552-silence-warning.patch
  - Add 0202-RHBZ-1362120-skip-prio.patch
    * don't run prio on failed paths
  - Add 0203-RHBZ-1363718-add-msgs.patch
  - Add 0204-RHBZ-1406226-nimble-config.patch
  - Add 0205-RHBZ-1416569-reset-stats.patch
    * add "reset maps stats" and "reset map <map> stats" multipathd
      interactive commands to reset the stats tracked by multipathd
  - Add 0206-RHBZ-1239173-pt2-no-paths.patch
    * make multipath correctly disable scanning and rules running when
      it gets a uevent and there are not valid paths.
  - Add 0207-UP-add-libmpathcmd.patch
    * New shared library, libmpathcmd, that sends and receives messages from
      multipathd. device-mapper-multipath now uses this library internally.
  - Add 0208-UPBZ-1430097-multipathd-IPC-changes.patch
    * validation that modifying commands are coming from root.
  - Add 0209-UPBZ-1430097-multipath-C-API.patch
    * New shared library. libdmmp, that presents the information from multipathd
      in a structured manner to make it easier for callers to use
  - Add 0210-RH-fix-uninstall.patch
    * Minor compilation fixes
  - Add 0211-RH-strlen-fix.patch
    * checks that variables are not NULL before passing them to strlen
  - Add 0212-RHBZ-1431562-for-read-only.patch
  - Make 3 new subpackages
    * device-mapper-multipath-devel, libdmmp, and libdmmp-devel. libmpathcmd
      and libmpathprio are in device-mapper-multipath-libs and
      device-mapper-multipath-devel. libdmmp is in its own subpackages
  - Move libmpathprio devel files to device-mapper-multipath-devel
  - Added BuildRequires on librados2-devel


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-87
changelog:
  - Remove Epoch from device-mapper requires
    * The RHEL releases of device-mapper set the Epoch, and this was
      accidentally retained in the fedora spec file.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.1-1.gitf21166a
changelog:
  - Update Source to the latest upstream commit
  - Add 0001-libmultipath-add-comment-about-resuming.patch
    * posted upstream
  - Add 0002-multipath-attempt-at-common-multipath.rules.patch
    * under discussion upstream
  - Add 0003-RH-fixup-udev-rules-for-redhat.patch
    * Redhat uses different udev rules that some other distros, so multipath
      has run at a different time. Not all upstream distros link /sbin and
      /usr/sbin either.
  - Add 0004-RH-Remove-the-property-blacklist-exception-builtin.patch
    * Allow multipath to be used on devices without multiple paths. NAK'ed
      upstream, but requested by Red Hat
  - Add 0005-RH-don-t-start-without-a-config-file.patch
    * Don't start multipath unless a config file exists. NAK'ed upstream,
      but requested by Red Hat
  - Add 0006-RH-use-rpm-optflags-if-present.patch
    * Make the build system fedora friendly
  - Add 0007-RH-add-mpathconf.patch
    * Add tool to help configure multipath with Red Hat defaults.
  - Add 0008-RH-add-wwids-from-kernel-cmdline-mpath.wwids-with-A.patch
    * Make multipath able to claim devices based on the kernel command line
      NAK'ed upstream but requested by Red Hat
  - Add 0009-RH-trigger-change-uevent-on-new-device-creation.patch
    * under discussion upstream


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.1-2.gitf21166a
changelog:
  - Modify 0004-RH-Remove-the-property-blacklist-exception-builtin.patch
    * update multipath.conf.5 man page to remove builtin listing
  - Modify 0005-RH-don-t-start-without-a-config-file.patch
    * update multipathd.8 man page to note that a config file is necessary
  - Modify 0007-RH-add-mpathconf.patch
    * add property blacklist-exception to default config file
  - Add 0010-libmultipath-change-how-RADOS-checker-is-enabled.patch
    * Makefile now autodetects librados. Posted upstream
  - Remove related RADOS option from spec file
  - Add 0011-multipath-set-verbosity-to-default-during-config.patch
    * Allow multipath to print warning messages during configuration.
      Posted upstream
  - Add 0012-mpath-skip-device-configs-without-vendor-product.patch
    * device entries without vendor/product were breaking configurations.
      Posted upsteam
  - Add 0013-multipathd-fix-show-maps-json-crash.patch
    * multipathd crashed showing json output with no devices. Posted
      upstream


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.1-4.git847cc43
changelog:
  - Update Source to the latest upstream commit
    * Previous patches 0001 and 0010-0013 are included in this commit.
  - Add 0001-libmultipath-update-3PARdata-builtin-config.patch
    * Change for building configuration. Posted upstream
  - Modify 0006-RH-use-rpm-optflags-if-present.patch
    * Add missing lines to actually use RPM_OPT_FLAGS.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.1-8.git847cc43
changelog:
  - Refresh 0001-libmultipath-update-3PARdata-builtin-config.patch
  - Add 0010-RH-warn-on-invalid-regex-instead-of-failing.patch
    * Change old-style multipath.conf regex "*" to a proper ".*" instead of
      failing


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.3-1
changelog:
  - Update Source to upstream 0.7.3 release
    * Previous patch 0001 is included in this commit, and 0002 was solved in a
      different manner causing some change to previous patch 0003
    * Previous patches 0003-0010 are now patches 0007-0014
  - Add 0001-mpathpersist-Fix-invalid-condition-check.patch
    * Fix incorrect check. posted upstream
  - Add 0002-multipath-add-man-page-info-for-my-prkey-changes.patch
    * Add missing man page info. posted upstream
  - Add 0003-multipath-there-is-no-none-path-state.patch
    * remove incorrect path state. posted upstream
  - Add 0004-mutipath-updated-Huawei-storage-config.patch
    * update builtin device configuration. posted upstream
  - Add 0005-multipath-fix-doc-typo.patch
    * fix man page typo. posted upstream
  - Add 0006-multipath-add-ghost_delay-parameter.patch
    * add new multipath.conf parameter "ghost_delay". posted upstream


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.4-1.git07e7bd5
changelog:
  - Update Source to the latest upstream commit
    * Previous patches 0001-0006 are included in this commit
    * Previous patches 0007-0014 are now patches 0015-0022
  - Add 0001-libmultipath-fix-tur-checker-locking.patch
    * Fixed spinlock bug. posted upstream
  - Add 0002-multipath-fix-DEF_TIMEOUT-use.patch
    * Add missing sec to ms conversion. posted upstream
  - Add 0003-multipathd-remove-coalesce_paths-from-ev_add_map.patch
    * Remove unused code. posted upstream
  - Add 0004-multipathd-remove-unused-configure-parameter.patch
    * Remove unused code. posted upstream
  - Add 0005-Fix-set_no_path_retry-regression.patch
    * Fix issue with queueing and path addition. posted upstream
  - Add 0006-multipathd-change-spurious-uevent-msg-priority.patch
    * Change message priority to Notice. posted upstream
  - Add 0007-multipath-print-sysfs-state-in-fast-list-mode.patch
    * Show sysfs state correctly in fast list mode (-l). posted upstream
  - Add 0008-libmultipath-move-remove_map-waiter-code-to-multipat.patch
    * Move code around. posted upstream
  - Add 0009-move-waiter-code-from-libmultipath-to-multipathd.patch
    * Move code around. posted upstream
  - Add 0010-call-start_waiter_thread-before-setup_multipath.patch
    * Fix race on multipath device creations. posted upstream
  - Add 0011-libmultipath-add-helper-functions.patch
    * posted upstream
  - Add 0012-multipathd-RFC-add-new-polling-dmevents-waiter-threa.patch
    * Add alternate method of getting dmevents, that doesn't
      require a thread per device. posted upstream
  - Add 0013-libmultipath-condlog-log-to-stderr.patch
    * change condlog to log to stderr instead of stdout. posted upstream
  - Add 0014-multipathd-fix-compiler-warning-for-uev_pathfail_che.patch
    * fix indentation issue. posted upstream


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.7.6-1.git1cb704b
changelog:
  - Update Source to the latest upstream commit
    * Previous patches 0001-0014 are included in this commit
    * Previous patches 0015-0022 are now patches 0007-0014
  - 0001-multipathd-remove-incorrect-pthread_testcancel.patch
    * Fixed pthread cancellation issue. posted upstream
  - 0002-multipath-add-comments.patch
    * Posted upstream
  - 0003-multipathd-minor-dmevents-polling-code-cleanups.patch
    * Fixed minor polling issues. posted upstream
  - 0004-multipathd-remove-unneeded-function-parameter.patch
    * Posted upstream
  - 0005-mpathcmd-fix-libmpathcmd-license.patch
    * License clarification. posted upstream
  - 0006-libmultipath-don-t-print-undefined-values.patch
    * Fixed bug in 'multipath show config'. posted upstream


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.6-2.git1cb704b
changelog:
  - Add 0007-libmultipath-Fix-logic-in-should_multipath.patch
    * fix bug in identifying multipathable devices. posted upstream
  - Rename files
    * Previous patches 0007-0014 are now patches 0008-0015


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.6-3.git1cb704b
changelog:
  - Add 0008-multipathd-add-failures-path-format-wildcard.patch
  - Add 0009-multipathd-fix-reservation_key-check.patch
  - Rename files
    * Previous patches 0008-0015 are now patches 0010-0017


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.7-1
changelog:
  - Update Source to 0.7.7
    * Previous patches 0001-0009 & 0016 are included in this commit
  - Add upstream patches since 0.7.7
    * patches 0001-0012 are from upstream commits since 0.7.7
  - Add 0013-libmultipath-print-correct-default-for-delay_-_check.patch
    * fix minor configuration printing issue. posted upstream
  - Add 0014-multipath.conf.5-clarify-property-whitelist-handling.patch
    * clarify property blacklist_excecptions handling in man page
      posted upstream
  - Add 0015-mpathpersist-add-all_tg_pt-option.patch
    * add new all_tg_pt multpiath.conf option. posted upstream
  - Add 0016-libmultipath-remove-rbd-code.patch
    * remove unused rbd code. posted upstream
  - Add 0017-mpathpersist-fix-aptpl-support.patch
    * add ":aptpl" suffix for reservation_key to fix aptpl support.
      posted upstream
  - Add 0018-multipath-don-t-check-timestamps-without-a-path.patch
    * fix multipath null dereference crash. posted upstream
  - Add 0019-libmultipath-fix-detect-alua-corner-case.patch
    * fix alua detection with retain_hardware_handler set to off. posted
      upstream
  - Add 0020-multipath-fix-setting-conf-version.patch
    * multipath wasn't setting the kernel version correctly. posted
      upstream
  - Add 0028-RH-reset-default-find_mutipaths-value-to-off.patch
    * default to RHEL7 and older device detection style. Redhat specific,
      to keep customer experience the same.
  - Rename files
    * Previous patches 0010-0015 & 0017 are now patches 0021-0027
  - Modify 0021-RH-fixup-udev-rules-for-redhat.patch
    * Fix spurious compile warning with redhat compile options
  - Modify 0022-RH-Remove-the-property-blacklist-exception-builtin.patch
    * clarify changes in man page


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.7-2.gitef6d98b
changelog:
  - Update Source to latest upstream commit
    * Previous patches 0001-0018 are included in this commit
  - Rename files
    * Previous patches 0019-0028 are now patches 0002-0003 & 0012-0019
  - Add 0001-libmultipath-remove-last-of-rbd-code.patch
  - Add 0004-mpathpersist-add-param-alltgpt-option.patch
    * mpathpersist now accepts --param-alltgpt
  - Add 0005-libmutipath-remove-unused-IDE-bus-type.patch
  - Add 0006-multipathd-add-new-protocol-path-wildcard.patch
    * multipathd show paths format now accepts %P for the path protocol/transport
  - Add 0007-libmultipath-add-protocol-blacklist-option.patch
    * You can now use the "protocol" blacklist section parameter to blacklist
      by protocol/transport
  - Add 0008-libmultipath-remove-_filter_-blacklist-functions.patch
  - Add 0009-multipath-tests-change-to-work-with-old-make-version.patch
  - Add 0010-multipath-tests-add-blacklist-tests.patch
  - Add 0011-mpathpersist-add-missing-param-rk-usage-info.patch
  - Refresh 0013-RH-Remove-the-property-blacklist-exception-builtin.patch
  - Modify 0016-RH-add-mpathconf.patch
    * improve usage message and man page
  - Modify device-mapper-multipath.spec
    * updated dependencies


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-1
changelog:
  - Update Source to upstream version 0.7.8
    * Previous patches 0001-0011 are included in this version
  - Rename files
    * Previous patches 0012-0019 are now patches 0007-0014
  - Add 0001-multipath-tweak-logging-style.patch
  - Add 0002-multipathd-check-for-NULL-udevice-in-cli_add_path.patch
  - Add 0003-libmultipath-remove-max_fds-code-duplication.patch
  - Add 0004-multipathd-set-return-code-for-multipathd-commands.patch
  - Add 0005-mpathpersist-fix-registration-rollback-issue.patch
  - Add 0006-libmultipath-timeout-on-unresponsive-tur-thread.patch
    * The above 6 patches have been submitted upstream
  - Resolves: bz #1606947, #1631883


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-2
changelog:
  - Add 0015-libmultipath-free-allocated-value-in-set_int.patch
  - Add 0016-kpartx-fix-new-memory-leak-in-dm_find_part.patch
  - change hardcoded /usr/lib/udev/rules.d to _udevrulesdir
  - Resolves: bz #1606947


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-3
changelog:
  - Add 0017-BZ-1648397-fix-mpp-hwe-handling-when-paths-are-freed.patch
    * Fix crash by deleting in use hardware entry list pointer
  - Add 0018-libmultipath-cleanup-pthread_cleanup_pop-call.patch
    * Fix compiler warning
  - Add 0019-libmultipath-fix-false-removes-in-dmevents-polling-c.patch
    * The above 3 patches have been accepted upstream
  - Resolves: bz #1648397


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-5
changelog:
  - Add 0021-BZ-1673167-Fix-miscounting-active-paths.patch
  - Add 0022-BZ-1673167-ignore-failed-wwid-recheck.patch
  - Resolves: bz #1673167


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-6
changelog:
  - Fix multipath_conf_syntax CI test
    * need to wait for udev to settle before removing multipath device
  - Resolves: bz #1673167


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-1
changelog:
  - Update Source to upstream version 0.8.0
    * Previous patches 0001-0006 & 0015-0019 are included in this commit
  - Rename files
    * Previous patches 0007-0014 are now 0018-0025
    * Previous patches 0020-0023 are now 0001, 0006 & 0007
  - Add 0002-libmultipath-handle-existing-paths-in-marginal_path-.patch
  - Add 0003-multipathd-cleanup-marginal-paths-checking-timers.patch
  - Add 0004-libmultipath-fix-marginal-paths-queueing-errors.patch
  - Add 0005-libmultipath-fix-marginal_paths-nr_active-check.patch
  - Add 0008-libmutipath-continue-to-use-old-state-on-PATH_PENDIN.patch
  - Add 0009-multipathd-use-update_path_groups-instead-of-reload_.patch
  - Add 0010-multipath.conf-add-missing-options-to-man-page.patch
  - Add 0011-libmultipath-add-get_uid-fallback-code-for-NVMe-devi.patch
  - Add 0012-libmulitpath-cleanup-uid_fallback-code.patch
  - Add 0013-multipathd-handle-changed-wwids-by-removal-and-addit.patch
    * Multipath will now automatically remove and re-add paths if
      their wwid changes
  - Add 0014-multipathd-remove-wwid_changed-path-attribute.patch
  - Add 0015-multipathd-ignore-disable_changed_wwids.patch
    * Since paths are now getting removed and re-added there is
      no need to disable them.
  - Add 0016-multipathd-Don-t-use-fallback-code-after-getting-wwi.patch
  - Add 0017-libmultipath-silence-dm_is_mpath-error-messages.patch
  - Add 0026-RH-Fix-nvme-compilation-warning.patch
  - Add 0027-Fix-systemd-version-detection.patch
    * The above 16 patches have been submitted upstream
  - Add 0028-RH-attempt-to-get-ANA-info-via-sysfs-first.patch
    * Red Hat has a sysfs method to access the ANA state, which isn't
      upstream, and will not be. This will probably go away in the
      future.
  - Resolves: bz #1498546


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-2
changelog:
  - Add 0029-BZ-1700451-check-on-multipathd-without-starting-it.patch
  - Add 0030-BZ-1700451-test-socket-connection-in-non-blocking-mo.patch
    * the "multipath -u" call in 62-multipath.rules should no longer hang
      on multipathd startup.
  - Resolves: bz #1700451


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-3
changelog:
  - Add 0031-libmultipath-handle-clock_gettime-failures-in-tur-ch.patch
  - Add 0032-kpartx-fail-if-dup-of-dasd-file-descriptor-fails.patch
  - Add 0033-multipathd-fix-REALLOC_REPLY-with-max-length-reply.patch
  - Add 0034-multipathd-handle-NULL-return-from-genhelp_handler.patch
    * The above 4 patches have been submitted upstream
  - Related: bz #1498546


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-4
changelog:
  - Add 0035-BZ-1700911-hwtable-add-Lenovo-DE-series.patch
  - Add 0036-libmultipath-make-vector_foreach_slot_backwards-work.patch
    * Fix for bz #1713459
  - Fixes for bz #1666322 and #1669097 were included in 0.8.0 upstream
    code
  - Resolves: bz #1666322, #1669097, #1700911, #1713459


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.3-1
changelog:
  - Update Source to upstream version 0.8.3
    * This version includes the fixes for bz #1690515, #1703439,
        * Previous patches 0001-0017 & 0031-0036 are included in this version
  - Rename files
    * Previous patches 0018-0026 & 0028 are now 0004-0013
    * 0008-RH-add-mpathconf.patch has been modified to add a
      --property_blacklist option to fix bz #1753729
  - Add 0001-multipathd-warn-when-configuration-has-been-changed.patch
    * Multipath now logs a warning message when the configuration file
      has been changed to fix bz #1750594
  - Add 0002-libmultipath-fix-leak-in-foreign-code.patch
  - Add 0003-Fix-leak-in-mpathpersist.patch
    * The above 3 patches have been submitted upstream
  - Resolves: bz #1690515, #1703439, #1719562, #1747534, #1750594, #1753729


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.3-3
changelog:
  - Rename files
    * Previous patches 0004-0013 are now 0010-0019
    * 0014-RH-add-mpathconf.patch now makes mpathconf default to not
      printing foreign devices (bz #1760709)
  - Add 0004-libmultipath-remove-unused-path-prio_args.patch
  - Add 0005-libmultipath-constify-get_unaligned_be.patch
  - Add 0006-libmultipath-add-missing-hwe-mpe-variable-merges.patch
  - Add 0007-libmultipath-fix-sgio_get_vpd-looping.patch
  - Add 0008-libmultipath-add-vend_id-to-get_vpd_sgio.patch
  - Add 0009-libmultipath-add-code-to-get-vendor-specific-vpd-dat.patch
    * Add the '%g' maps and paths format wildcard, and the vpd_vendor
      multipath.conf devices section parameter. (bz #1527212)
  - Resolves: bz #1527212, #1760709


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-1
changelog:
  - Update Source to upstream version 0.8.4
    * This version includes the fixes for bz #1768894 & #1821214
    * Previous patches 0001-0009 are included in this version
  - Rename files
    * Previous patches 0010-0019 are now 0011-0020
  - Add 0001-libmultipath-assign-variable-to-make-gcc-happy.patch
  - Add 0002-libmutipath-don-t-close-fd-on-dm_lib_release.patch
  - Add 0003-libmultipath-allow-force-reload-with-no-active-paths.patch
    * make multipath and multipathd reload maps with no active paths
      (bz #1814858)
  - Add 0004-libmpathpersist-depend-on-libmultipath.patch
  - Add 0005-multipath-tools-Makefile-more-dependency-fixes-for-p.patch
  - Add 0006-multipath-tools-Makefile.inc-set-Wno-error-clobbered.patch
  - Add 0007-libmultipath-discovery.c-use-z-qualifier-for-size_t.patch
  - Add 0008-libmultipath-eliminate-more-signed-unsigned-comparis.patch
  - Add 0009-libmultipath-set_uint-fix-parsing-for-32bit.patch
  - Add 0010-multipath-tools-Makefile-add-install-dependency.patch
    * The above 10 patches have been submitted upstream
  - Resolves: bz #1768894, #1814858, #1821214


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-2
changelog:
  - Add 0021-libmultipath-remove-_blacklist_exceptions-functions.patch
  - Add 0022-libmultipath-fix-parser-issue-with-comments-in-strin.patch
  - Add 0023-libmultipath-invert-regexes-that-start-with-exclamat.patch
    * This commit also changes the default devnode blacklist to
      blacklist all devices except scsi, dasd, and nvme.
  - Resolves: bz #1828180


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-3
changelog:
  - Add 0024-libmultipath-make-dm_get_map-status-return-codes-sym.patch
  - Add 0025-multipathd-fix-check_path-errors-with-removed-map.patch
  - Add 0026-libmultipath-make-dm_flush_maps-only-return-0-on-suc.patch
  - Add 0027-multipathd-add-del-maps-multipathd-command.patch
  - Add 0028-multipath-make-flushing-maps-work-like-other-command.patch
  - Add 0029-multipath-delegate-flushing-maps-to-multipathd.patch
  - Add 0030-multipath-add-option-to-skip-multipathd-delegation.patch
    * The above 7 patches fix bz #1845875. Multipath now attempts to
      delegate device removal to multipathd, and multipathd handles
      external device removal better.
  - Add 0031-libmultipath-fix-sysfs-dev_loss_tmo-parsing.patch
    * Fixes bz #1852843
  - Add 0032-kpartx-read-devices-with-direct-IO.patch
    * Fixes bz #1814858
  - Add 0033-kpartx-handle-alternate-bsd-disklabel-location.patch
  - Add 0034-libmultipath-fix-checker-detection-for-nvme-devices.patch
    * fixes bz #1845915
  - Add 0035-Makefile.inc-trim-extra-information-from-systemd-ver.patch
  - Add 0036-kpartx-fix-Wsign-compare-error.patch
  - Resolves: bz #1814858, #1845875, #1845915, #1852843


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-4
changelog:
  - Add 0037-libmultipath-count-pending-paths-as-active-on-loads.patch
    * make udev treat the device as having paths, so it will run kpartx
    * Fixes bz #1846866
  - Resolves: bz #1846866


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-5
changelog:
  - Add 0038-multipath-deal-with-failures-flushing-maps.patch
    * Don't print "fail" if multipath needs to failback to removing
      a device itself.
    * Fixes bz #1845875
  - Modify multipath_conf_syntax CI test
    * It started failing because "multpath -F" can now start multipathd
      via the socket, and the test expected multipathd to not be running
  - Resolves: bz #1845875


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-6
changelog:
  - Add 0039-libmultipath-factor-out-code-to-get-vpd-page-data.patch
  - Add 0040-libmultipath-limit-reading-0xc9-vpd-page.patch
    * Only check for rdac support on configured devices, or devices where
      vpd page 0x00 indicates support for vpd page 0xc9
    * Fixes bz #1877415
  - Add 0041-libmultipath-add-device-to-hwtable.c.patch
    * Add support for Fujitsu Eternus AB/HB
    * Fixes bz #1857429
  - Add 0042-libmultipath-move-fast_io_fail-defines-to-structs.h.patch
  - Add 0043-libmultipath-add-eh_deadline-multipath.conf-paramete.patch
    * Fixes bz #1819897
  - Add 0044-libmultipath-don-t-dlclose-tur-checker-DSO.patch
    * Fixes bz #1875384
  - Add 0045-libmultipath-warn-about-missing-braces-at-end-of-mul.patch
    * Fixes bz #1897530
  - Add 0046-libmultipath-ignore-multipaths-sections-without-wwid.patch
    * Fixes bz #1897815
  - Add 0047-tests-fix-missing-priority-blacklist-test.patch
  - Add 0048-mpathpersist-Fix-Register-and-Ignore-with-0x00-SARK.patch
    * Make mpathpersist Register and Ignore command clear the registration
      with a 0x0 SARK, like sg_persist does.
    * Fixes bz #1894103
  - Add 0049-mpathpersist-update-prkeys-file-on-changing-registra.patch
    * Fixes bz #1900522
    * The above 11 patches have all been submitted upstream
  - Resolves: bz #1819897, #1857429, #1875384, #1877415, #1894103, #1897530
  - Resolves: bz #1897815, #1900522


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-6
changelog:
  - Add 0050-multipathd-Fix-multipathd-stopping-on-shutdown.patch
    * Fixes bz #1892496
  - Add 0051-multipath.conf.5-Improve-checker_timeout-description.patch
    * Fixes bz #1906073
  - Resolves: bz #1892496, #1906073


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-7
changelog:
  - Add 0052-libmultipath-check-for-null-wwid-before-strcmp.patch
    * Missing part of fix for bz #1897815
  - Add 0053-libmultipath-make-find_err_path_by_dev-static.patch
  - Add 0054-multipathd-avoid-io_err_stat-crash-during-shutdown.patch
  - Add 0055-multipathd-avoid-io_err_stat-ABBA-deadlock.patch
  - Add 0056-multipathd-use-get_monotonic_time-in-io_err_stat-cod.patch
  - Add 0057-multipathd-combine-free_io_err_stat_path-and-destroy.patch
  - Add 0058-multipathd-cleanup-logging-for-marginal-paths.patch
    * The above 6 patches fix bz #1920795
  - Add 0059-libmpathpersist-fix-thread-safety-of-default-functio.patch
    * Fixes bz #1913549
  - Resolves: bz #1897815, #1913549, #1920795


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-9
changelog:
  - Add 0060-kpartx-free-loop-device-after-listing-partitions.patch
    * Fixes bz #1925490
  - Add 0061-RH-fix-find_multipaths-in-mpathconf.patch
    * Fixes bz #1921651
  - Resolves: bz #1921651, #1925490


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-11
changelog:
  - Add 0062-libmultipath-select_action-don-t-drop-map-if-alias-c.patch
    * Fall back to WWID names instead of removing existing device
  - Add 0063-libmultipath-check-if-user_friendly_name-is-in-use.patch
    * make sure to choose a user_friendly_name that isn't in use
    * Fixes bz #1937832
  - Add alias_clash CI test
  - Remove unused multipath.conf
  - Resolves: bz #1937832


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-12
changelog:
  - Add 0064-libmultipath-check-udev_device_get_-return-value-to-.patch
    * Fixes bz #1946940
  - Resolves: bz #1946940


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-13
changelog:
  - Add 0065-libmultipath-cleanup-code-to-strip-wwid-trailing-spa.patch
  - Add 0066-multipathd-add-recheck_wwid-option-to-verify-the-pat.patch
  - Add 0067-libmultipath-avoid-infinite-loop-with-bad-vpd-page-8.patch
  - Add 0068-libmultipath-fix-priorities-in-parse_vpd_pg83.patch
  - Add 0069-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
  - Add 0070-multipathd-improve-getting-parent-udevice-in-rescan_.patch
  - Add 0071-multipathd-don-t-trigger-uevent-for-partitions-on-ww.patch
    * add recheck_wwid option
    * Fixes bz #1907904
  - Resolves: bz #1907904


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-17
changelog:
  - Add 0074-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
    * Fixes bz #1984723
  - Add 0075-multipath-print-warning-if-multipathd-is-not-running.patch
    * Fixes bz #1973592
  - Add 0076-multipathd-don-t-access-path-if-it-was-deleted.patch
    * Found by coverity
  - Resolves: bz #1973592, #1984723


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-18
changelog:
  - Add 0077-multipathd.socket-add-missing-conditions-from-servic.patch
    * Fixes bz #2008101
  - Add 0078-libmulitpath-add-section-name-to-invalid-keyword-out.patch
    * Fixes bz #1918150
  - Resolves: bz #1918150, #2008101


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-20
changelog:
  - Add 0079-libmultipath-use-typedef-for-keyword-handler-and-pri.patch
  - Add 0080-libmultipath-print-the-correct-file-when-parsing-fai.patch
  - Add 0081-libmultipath-pass-file-and-line-number-to-keyword-ha.patch
  - Add 0082-libmultipath-make-set_int-take-a-range-for-valid-val.patch
  - Add 0083-libmultipath-improve-checks-for-set_str.patch
  - Add 0084-libmultipath-split-set_int-to-enable-reuse.patch
  - Add 0085-libmultipath-cleanup-invalid-config-handling.patch
  - Add 0086-libmultipath-don-t-return-error-on-invalid-values.patch
    * Above 8 patches fix bz #1900595
  - Add 0087-multipathd-avoid-unnecessary-path-read-only-reloads.patch
    * Fixes bz #2009624
  - Resolves: bz #1900595, #2009624, #2021823


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-21
changelog:
  - Add 0088-libmultipath-make-helper-function-to-trigger-path-ue.patch
  - Add 0089-multipathd-trigger-udev-change-on-path-addition.patch
  - Resolves: bz #1862032


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-23
changelog:
  - Add 0091-multipath-tools-add-HPE-MSA-1060-2060-to-hwtable.patch
    * Partial fix for bz #2058222
  - Add 0092-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
    * Fixes bz #2065468
  - Add 0093-updated-HPE-MSA-builtin-config.patch
    * Fixes bz #2058222
  - Resolves bz #2065468, #2058222


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-24
changelog:
  - Add 0094-multipath-return-failure-on-an-invalid-remove-comman.patch
    * Fixes bz #2052054
  - Add 0095-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
  - Add 0096-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
  - Add 0097-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
  - Add 0098-libmultipath-make-protocol_name-global.patch
  - Add 0099-libmultipath-add-a-protocol-subsection-to-multipath..patch
  - Add 0100-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
  - Add 0101-libmultipath-check-the-overrides-pctable-for-path-va.patch
  - Add 0102-libmultipath-fix-eh_deadline-documentation.patch
  - Add 0103-libmultipath-Add-documentation-for-the-protocol-subs.patch
  - Add 0104-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
    * The above 10 patches implement feature from bz #2065477
  - Resolves: bz #2052054, #2065477


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-25
changelog:
  - Add 0105-multipathd-handle-fpin-events.patch
  - Add 0106-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
  - Resolves: bz #2083077


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-27
changelog:
  - Add 0108-multipathd-Add-missing-ctype-include.patch
  - Add 0109-multipathd-replace-libreadline-with-libedit.patch
    * replace readline with libedit, to avoid license conflicts
  - Resolves: bz #2119887


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-30
changelog:
  - Add 0111-multipathd-factor-out-the-code-to-flush-a-map-with-n.patch
  - Add 0112-libmultipath-return-success-if-we-raced-to-remove-a-.patch
  - Add 0113-multipathd-Handle-losing-all-path-in-update_map.patch
  - Resolves: bz #2110485


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-31
changelog:
  - Add 0114-multipathd-ignore-duplicated-multipathd-command-keys.patch
    * Fixes bz #2133996
  - Add 0115-multipath-tools-use-run-instead-of-dev-shm.patch
    * Fixes bz #2133990
  - Resolves: bz #2133990, #2133996


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-32
changelog:
  - Add 0116-kpartx-hold-device-open-until-partitions-have-been-c.patch
    * Fixes bz #2128885
  - Add 0117-libmultipath-cleanup-remove_feature.patch
  - Add 0118-libmultipath-cleanup-add_feature.patch
  - Add 0119-multipath-tests-tests-for-adding-and-removing-featur.patch
  - Add 0120-libmultipath-fix-queue_mode-feature-handling.patch
  - Add 0121-multipath-tests-tests-for-reconcile_features_with_qu.patch
  - Add 0122-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch
  - Add 0123-libmultipath-get-nvme-path-transport-protocol.patch
  - Add 0124-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch
    * Fixes bz #2022359
  - Resolves: bz #2022359, #2128885


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.3-13.20171209
changelog:
  - update to 1.3-20171209
  - fix build with multiple options in hardened ldflags (#1548400)
  - add gcc to build requirements
  - use macro for ldconfig scriptlets


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-32
changelog:
  - FTBFS: <sys/sysmacros.h> included where "major" and "minor" macros are in use
    (cdrkit-1.1.11-sysmacros.patch added)
  - https://bugzilla.redhat.com/show_bug.cgi?id=1263599 - man page clarified
    (cdrkit-1.1.11-manpagefix.patch modified)


author: Petr Pisar <ppisar@redhat.com> - 1.1.11-35
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Don't schedule dleyna_task_processor_t->on_quit_cb more than once
    (RH #1251366)
  - Remove all queues before dleyna_task_processor_t->on_quit_cb is run
    (RH #1205574, #1360209)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.6.0-3
changelog:
  - Don't remove a queue more than once
  - Remove any pending task processing handlers when destroying a queue
  Resolves: #1464902


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Fix crash due to double-free when destroying the same dls_upnp_t or
    dls_manager_t twice (RH #1251365)
  - Use make_build and make_install macros
  - Update minimum required versions; use pkgconfig(...) for BRs
  - Miscellaneous clean-ups


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-2
changelog:
  - Disabled stripping of binary while installing (oops)
  - Enabled HAVE_ISC_READER/HAVE_DBUS via patch
  - Added BuildReq for dbus-devel


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-3
changelog:
  - Un-enabled HAVE_ISC_READER, a hack to enable a deprecated feature (request)
  - Split initscript & enable-dbus patches, conditionalized dbus for FC3
  - Tweaked name field in changelog entries (trying to be consistent)


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-4
changelog:
  - Moved options out of init script and into /etc/sysconfig/dnsmasq
  - Disabled DHCP_LEASE in sysconfig file, fixing bug #190379
  - Simon Kelley provided dbus/dnsmasq.conf, soon to be part of the tarball


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-4.2
changelog:
  - More upstream-recommended cleanups :)
  - Killed sysconfig file (provides unneeded functionality)
  - Tweaked init script a little more


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.31-1
changelog:
  - Removed dbus config patch (now provided upstream)
  - Patched in init script (no longer provided upstream)
  - Added DBus-interface to docs


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.34-2
changelog:
  - Fixed BZ#212005
  - Moved %postun scriptlet to %post, where it made more sense
  - Render scriptlets safer
  - Minor cleanup for consistency


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.35-1
changelog:
  - Update to 2.35
  - Removed UPGRADING_to_2.0 from %doc as per upstream change
  - Enabled conf-dir in default config as per RFE BZ#214220 (thanks Chris!)
  - Added %dir /etc/dnsmasq.d to %files as per above RFE


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.40-1
changelog:
  - Finalized upstream release
  - Removing URLs from patch lines (CVS is the authoritative source)
  - Added more magic to make spinning rc/test packages more seamless


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.2.test20
changelog:
  - New upstream test release
  - Moving dnsmasq.leases to /var/lib/dnsmasq/ as per BZ#407901
  - Ignoring dangerous-command-in-%post rpmlint warning (as per above fix)
  - Patch consolidation/cleanup
  - Removed conditionals for Fedora <= 3 and Aurora 2.0


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.43-2
changelog:
  - New upstream release, contains fixes for CVE-2008-1447/CERT VU#800113
  - Dropped patch for newer glibc (merged upstream)


author: Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.51-1
changelog:
  - move initscript from patch to a plain text file
  - drop (dnsmasq-configuration.patch) and use sed instead
  - enable /etc/dnsmasq.d fix bz 526703
  - change requires to package name instead of file
  - new version 2.51


author: Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.52-1
changelog:
  - New Version 2.52
  - fix condrestart() in initscript bz 547605
  - fix sed to enable DBUS(the '*' need some escaping) bz 553161


author: Tomas Hozza <thozza@redhat.com> - 2.66-3
changelog:
  - Use Full RELRO when linking the daemon
  - compile the daemon with PIE
  - include two fixes from upstream git repo


author: Tomas Hozza <thozza@redhat.com> - 2.66-4
changelog:
  - include several fixes from upstream repo:
    - Send TCP DNS messages in one packet
    - Fix crash on SERVFAIL when using --conntrack option
    - Fix regression in dhcp_lease_time utility
    - Man page typos fixes
    - Note that dhcp_lease_time and dhcp_release work only for IPv4
    - Fix for --dhcp-match option to work also with BOOTP protocol


author: Tomas Hozza <thozza@redhat.com> - 2.66-5
changelog:
  - dnsmasq unit file cleanup
    - drop forking Type and PIDfile and rather start dnsmasq with "-k" option
    - drop After syslog.target as this is by default


author: Nils Philippsen <nils@redhat.com> - 2.72-3
changelog:
  - don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead
  - package is dual-licensed GPL v2 or v3
  - drop %triggerun, we're not supposed to automatically migrate from SysV to
    systemd anyway


author: Petr Menšík <pemensik@redhat.com> - 2.77-8
changelog:
  - Security fix, CVE-2017-14491, DNS heap buffer overflow
  - Security fix, CVE-2017-14492, DHCPv6 RA heap overflow
  - Security fix, CVE-2017-14493, DHCPv6 - Stack buffer overflow
  - Security fix, CVE-2017-14494, Infoleak handling DHCPv6
  - Security fix, CVE-2017-14496, Integer underflow in DNS response creation
  - Security fix, CVE-2017-14495, OOM in DNS response creation
  - Misc code cleanups arising from Google analysis
  - Do not include stdio.h before dnsmasq.h


author: Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.78-4
changelog:
  - add gcc into buildrequires
  - deliver an extra sysusers.d file to create dnsmasq user/group
  - set CHUSER and CHGRP to dnsmasq in src/config.h


author: Petr Menšík <pemensik@redhat.com> - 2.79-1
changelog:
  - Rebase to 2.79
  - Stop using nettle_hashes directly, use access function (#1548060)
  - Do not break on cname with spaces (#1498667)
  - Require nettle 3.4+
  - Do not own sysusers.d directory, already depends on systemd providing it


author: Petr Menšík <pemensik@redhat.com> - 2.79-15
changelog:
  - Fix various issues in dnssec validation (CVE-2020-25681)
  - Accept responses only on correct sockets (CVE-2020-25684)
  - Use strong verification on queries (CVE-2020-25685)


author: Petr Menšík <pemensik@redhat.com> - 2.79-36
changelog:
  - Prevent overflow in extract_name function (CVE-2026-2291)
  - Prevent DoS in DNSSEC validation (CVE-2026-4890)
  - Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891)
  - Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892)
  - Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893)


author: Tomas Hozza <thozza@redhat.com> - 0.15-4
changelog:
  - Added explicit BuildRequires on gcc as required by packaging guidelines
  - Added explicit Requires on e2fsprogs, so that /usr/bin/chattr is available
  - Remove redundant removal of immutable bit in %preun scriptlet (#1542400)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-6
changelog:
  - fix mail storage block count parsing (#1894418)
  - MIME parser crashed when boundaries were wrong (#1888111)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-1
changelog:
  - dovecot updated to 2.3.16, pigeonhole to 0.5.16
  - fix CVE-2021-33515 plaintext commands injection (#1980014)


author: Jeremy Katz <katzj@redhat.com> 0.99.8-1
changelog:
  - 0.99.8
  - add some buildrequires
  - fixup to build with openssl 0.9.7
  - now includes a pop3 daemon (off by default)
  - clean up description and %preun
  - add dovecot user (uid/gid of 97)
  - add some buildrequires
  - move the ssl cert to %{_datadir}/ssl/certs
  - create a dummy ssl cert in %post
  - own /var/run/dovecot
  - make the config file a source so we get default mbox locks of fcntl


author: Jeremy Katz <katzj@redhat.com> 0.99.9.1-1
changelog:
  - update to 0.99.9.1
  - add patch from upstream to fix potential bug when fetching with 
    CR+LF linefeeds
  - tweak some things in the initscript and config file noticed by the 
    fedora folks


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.1
changelog:
  - 0.99.10-rc1
  - add fix for ssl detection
  - add zlib-devel to BuildRequires
  - change pam service name to dovecot
  - include pam config


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.2
changelog:
  - 0.99.10-rc2 (includes ssl detection fix)
  - a few tweaks from fedora
    - noreplace the config file
    - configure --with-ldap to get LDAP enabled


author: Jeremy Katz <katzj@redhat.com> 0.99.10-7
changelog:
  - another patch from upstream to fix returning invalid data on partial 
    BODY[part] fetches
  - patch to avoid confusion of draft/deleted in indexes


author: Warren Togami <wtogami@redhat.com> 0.99.10.4-4
changelog:
  - default auth config that is actually usable
  - Timo Sirainen (author) suggested functionality fixes
    maildir, imap-fetch-body-section, customflags-fix


author: John Dennis <jdennis@redhat.com> - 0.99.10.6-1
changelog:
  - bring up to date with upstream,
    recent change log comments from Timo Sirainen were:
    SHA1 password support using OpenSSL crypto library
    mail_extra_groups setting
    maildir_stat_dirs setting
    Added NAMESPACE capability and command
    Autocreate missing maildirs (instead of crashing)
    Fixed occational crash in maildir synchronization
    Fixed occational assertion crash in ioloop.c
    Fixed FreeBSD compiling issue
    Fixed issues with 64bit Solaris binary


author: John Dennis <jdennis@redhat.com> 0.99.10.7-1,FC3,1
changelog:
  - enable postgres and mySQL in build
  - fix configure to look for mysql in alternate locations
  - nuke configure script in tar file, recreate from configure.in using autoconf

  - bring up to latest upstream, which included:
  - Added outlook-pop3-no-nuls workaround to fix Outlook hang in mails with NULs.
  - Config file lines can now contain quoted strings ("value ")
  - If client didn't finish downloading a single mail in 30 seconds,
    Dovecot closed the connection. This was supposed to work so that
    if client hasn't read data at all in 30 seconds, it's disconnected.
  - Maildir: LIST now doesn't skip symlinks


author: John Dennis <jdennis@redhat.com> 0.99.10.9-1,FC3,1
changelog:
  - bring up to date with latest upstream, fixes include:
  - LDAP support compiles now with Solaris LDAP library
  - IMAP BODY and BODYSTRUCTURE replies were wrong for MIME parts which
    didn't contain Content-Type header.
  - MySQL and PostgreSQL auth didn't reconnect if connection was lost
    to SQL server
  - Linking fixes for dovecot-auth with some systems
  - Last fix for disconnecting client when downloading mail longer than
    30 seconds actually made it never disconnect client. Now it works
    properly: disconnect when client hasn't read _any_ data for 30
    seconds.
  - MySQL compiling got broken in last release
  - More PostgreSQL reconnection fixing


author: John Dennis <jdennis@redhat.com> 0.99.11-1.FC3.1
changelog:
  - bring up to latest upstream,
    comments from Timo Sirainen <tss at iki.fi> on release v0.99.11 2004-09-04  
    + 127.* and ::1 IP addresses are treated as secured with
      disable_plaintext_auth = yes
    + auth_debug setting for extra authentication debugging
    + Some documentation and error message updates
    + Create PID file in /var/run/dovecot/master.pid
    + home setting is now optional in static userdb
    + Added mail setting to static userdb
    - After APPENDing to selected mailbox Dovecot didn't always notice the
      new mail immediately which broke some clients
    - THREAD and SORT commands crashed with some mails
    - If APPENDed mail ended with CR character, Dovecot aborted the saving
    - Output streams sometimes sent data duplicated and lost part of it.
      This could have caused various strange problems, but looks like in
      practise it rarely caused real problems.


author: John Dennis <jdennis@redhat.com> 0.99.11-7.devel
changelog:
  - add UW to Dovecot migration documentation and scripts, bug #139954
    fix SSL documentation and scripts, add missing documentation, bug #139276


author: John Dennis <jdennis@redhat.com> 0.99.11-8.devel
changelog:
  - fix bug #129539, dovecot starts too early,
    set chkconfig to 65 35 to match cyrus-imapd
  - also delete some old commented out code from SSL certificate creation


author: John Dennis <jdennis@redhat.com> 0.99.13-1.devel
changelog:
  - bring up to date with latest upstream, 0.99.13, bug #143707
    also fix bug #14462, bad dovecot-uid macro name


author: John Dennis <jdennis@redhat.com> 0.99.13-2.devel
changelog:
  - make postgres & mysql conditional build
  - remove execute bit on migration example scripts so rpm does not pull
    in additional dependences on perl and perl modules that are not present
    in dovecot proper.
  - add REDHAT-FAQ.txt to doc directory


author: John Dennis <jdennis@redhat.com> 0.99.13-3.devel
changelog:
  - fix bug #145214, force mbox_locks to fcntl only
  - fix bug #145241, remove prereq on postgres and mysql, allow rpm auto
    dependency generator to pick up client lib dependency if needed.


author: John Dennis <jdennis@redhat.com> - 0.99.14-1.fc4
changelog:
  - fix bug #147874, update to 0.99.14 release
    v0.99.14 2005-02-11  Timo Sirainen <tss at iki.fi>
    - Message address fields are now parsed differently, fixing some
      issues with spaces. Affects only clients which use FETCH ENVELOPE
      command.
    - Message MIME parser was somewhat broken with missing MIME boundaries
    - mbox: Don't allow X-UID headers in mails to override the UIDs we
      would otherwise set. Too large values can break some clients and
      cause other trouble.
    - passwd-file userdb wasn't working
    - PAM crashed with 64bit systems
    - non-SSL inetd startup wasn't working
    - If UID FETCH notices and skips an expunged message, don't return
      a NO reply. It's not needed and only makes clients give error
      messages.


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2
changelog:
  - new upstream version, hopefully fixes #173928, #163550
  - fix #168866, use install -p to install documentation


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.3
changelog:
  - change the compiled-in defaults and adjust the default's configfile
    commented-out example settings to match compiled-in defaults,
    instead of changing the defaults only in the configfile, as per #179432
  - fix #179574 by providing a default uidl_format for pop3
  - half-fix #179620 by having plaintext auth enabled by default... this
    needs more thinking (which one we really want) and documentation
    either way


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.5
changelog:
  - fix #182240 by looking in lib64 for libs first and then lib
  - fix comment #1 in #182240 by copying over the example config files
    to documentation directory


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta8.2
changelog:
  - put back pop3_uidl_format default that got lost
    in the beta2->beta7 upgrade (would cause pop3 to not work
    at all in many situations)


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc2
changelog:
  - update to latest upstream release candidate
  - disable inotify for now, doesn't build -- this needs fixing though


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc7
changelog:
  - update to latest upstream release candidate, should fix occasional
    hangs and mbox issues... INBOX. namespace is still broken though
  - do not run over symlinked certificates in new locations on upgrade


author: Tomas Janousek <tjanouse@redhat.com> - 1.0-1.rc15
changelog:
  - update to latest upstream, fixes a few bugs, plus a security
    vulnerability (#216508, CVE-2006-5973)


author: Tomas Janousek <tjanouse@redhat.com> - 1.0.0-11.7
changelog:
  - specfile merge from 145241 branch
      - new sql split patch
      - support for not building all sql modules
      - split sql libraries to separate packages


author: Dan Horak <dan[at]danny.cz> - 1:1.0.13-8
changelog:
  - update scriptlets to follow UsersAndGroups guideline
  - remove support for upgrading from version < 1.0 from scriptlets
  - Resolves: #448095


author: Dan Horak <dan[at]danny.cz> - 1:1.0.14-1
changelog:
  - update to upstream version 1.0.14
  - remove setcred patch (use of setcred must be explictly enabled in config)


author: Dan Horak <dan[at]danny.cz> - 1:1.1.0-1
changelog:
  - update to upstream version 1.1.0
  - update sieve plugin to 1.1.5
  - remove unnecessary patches
  - enable ldap and gssapi plugins
  - change ownership of dovecot.conf (Resolves: #452088)


author: Dan Horak <dan[at]danny.cz> - 1:1.1.2-1
changelog:
  - update to upstream version 1.1.2
  - final solution for #445200 (add /etc/sysconfig/dovecot for start-up options)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.6-1
changelog:
  - update to upstream version 1.1.6
  - change permissions of deliver and dovecot.conf to prevent possible password exposure


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.7-2
changelog:
  - revert changes from 1:1.1.6-2 and 1:1.1.6-1
  - password can be stored in different file readable only for root 
    via !include_try directive


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.11-1
changelog:
  - updated to 1.1.11
  - IMAP: PERMANENTFLAGS list didn't contain \*, causing some clients
    not to save keywords.
  - auth: Using "username" or "domain" passdb fields caused problems
    with cache and blocking passdbs in v1.1.8 .. v1.1.10.   
  - userdb prefetch + blocking passdbs was broken with non-plaintext
    auth in v1.1.8 .. v1.1.10.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.1-1
changelog:
  - updated to 1.2.1
  - GSSAPI authentication is fixed (#506782)
  - logins now fail if home directory path is relative, because it was 
    not working correctly and never was expected to work
  - sieve and managesieve update


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.2-1.20090728snap
changelog:
  - updated to post 1.2.2 snapshot (including post release GSSAPI fix)
  - Fixed "corrupted index cache file" errors
  - IMAP: FETCH X-* parameters weren't working.
  - Maildir++ quota: Quota was sometimes updated wrong
  - Dovecot master process could hang if it received signals too rapidly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.3-1
changelog:
  - updated: dovecot 1.2.3, managesieve 0.11.8, sieve 0.1.11
  - Mailbox names with control characters can't be created anymore.
    Existing mailboxes can still be accessed though.
  - Allow namespace prefix to be opened as mailbox, if a mailbox
    already exists in the root dir.
  - Maildir: dovecot-uidlist was being recreated every time a mailbox
    was accessed, even if nothing changed.
  - listescape plugin was somewhat broken
  - ldap: Fixed hang when >128 requests were sent at once.
  - fts_squat: Fixed crashing when searching virtual mailbox.
  - imap: Fixed THREAD .. INTHREAD crashing.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.4-1
changelog:
  - updated: dovecot 1.2.4, managesieve 0.11.9, sieve 0.1.12
  - fixed a crash in index file handling
  - fixed a crash in saving messages where message contained a CR
    character that wasn't followed by LF
  - fixed a crash when listing shared namespace prefix
  - sieve: implemented the new date extension. This allows matching
    against date values in header fields and the current date at
    the time of script evaluation
  - managesieve: reintroduced ability to abort SASL with "*" response


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.5-1
changelog:
  - updated to dovecot 1.2.5
  - Authentication: DIGEST-MD5 and RPA mechanisms no longer require
    user's login realm to be listed in auth_realms. It only made
    configuration more difficult without really providing extra security.
  - zlib plugin: Don't allow clients to save compressed data directly.
    This prevents users from exploiting (most of the) potential security
    holes in zlib/bzlib.
  - fix index file handling that could have caused an assert-crash
  - IMAP: Fixes to QRESYNC extension.
  - deliver: Don't send rejects to any messages that have Auto-Submitted
    header. This avoids emails loops.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.6-1
changelog:
  - dovecot updated to 1.2.6
  - Added authtest utility for doing passdb and userdb lookups.
  - login: ssl_security string now also shows the used compression.
  - quota: Don't crash with non-Maildir++ quota backend.
  - imap proxy: Fixed crashing with some specific password characters.
  - fixed broken dovecot --exec-mail.
  - Avoid assert-crashing when two processes try to create index at the
    same time.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.6-3
changelog:
  - sieve updated to 0.1.13 which brings these changes:
  - Body extension: implemented proper handling of the :raw transform
    and added various new tests to the test suite. However, :content
    "multipart" and :content "message/rfc822" are still not working.
  - Fixed race condition occuring when multiple instances are saving the
    same binary (patch by Timo Sirainen).
  - Body extension: don't give SKIP_BODY_BLOCK flag to message parser,
    we want the body!
  - Fixed bugs in multiscript support; subsequent keep actions were not
    always merged correctly and implicit side effects were not always
    handled correctly.
  - Fixed a segfault bug in the sieve-test tool occuring when compile
    fails.
  - Fixed segfault bug in action procesing. It was triggered while
    merging side effects in duplicate actions.
  - Fixed bug in the Sieve plugin that caused it to try to stat() a NULL
    path, yielding a 'Bad address' error.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.7-1
changelog:
  - updated to dovecot 1.2.7
  - add man pages
  - IMAP: IDLE now sends "Still here" notifications to same user's
    connections at the same time. This hopefully reduces power usage
    of some mobile clients that use multiple IDLEing connections.
  - IMAP: If imap_capability is set, show it in the login banner.
  - IMAP: Implemented SORT=DISPLAY extension.
  - Login process creation could have sometimes failed with epoll_ctl()
    errors or without epoll probably some other strange things could
    have happened.
  - Maildir: Fixed some performance issues
  - Maildir: Fixed crash when using a lot of keywords.
  - Several fixes to QRESYNC extension and modseq handling
  - mbox: Make sure failed saves get rolled back with NFS.
  - dbox: Several fixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.9-1
changelog:
  - updated to 1.2.9
  - maildir: When saving, filenames now always contain ,S=<size>.
    Previously this was done only when quota plugin was loaded. It's
    required for zlib plugin and may be useful for other things too.
  - maildir: v1.2.7 and v1.2.8 caused assert-crashes in
    maildir_uidlist_records_drop_expunges()
  - maildir_copy_preserve_filename=yes could have caused crashes.
  - Maildir++ quota: % limits weren't updated when limits were read
    from maildirsize.
  - virtual: v1.2.8 didn't fully fix the "lots of mailboxes" bug
  - virtual: Fixed updating virtual mailbox based on flag changes.
  - fts-squat: Fixed searching multi-byte characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-1
changelog:
  - updated to 1.2.10
  - %variables now support %{host}, %{pid} and %{env:ENVIRONMENT_NAME}
    everywhere.
  - LIST-STATUS capability is now advertised
  - maildir: Fixed several assert-crashes.
  - imap: LIST "" inbox shouldn't crash when using namespace with
    "INBOX." prefix.
  - lazy_expunge now ignores non-private namespaces.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-2
changelog:
  - updated sive and managesieve
  - Added preliminary support for Sieve plugins and added support for
    installing Sieve development headers
  - Variables extension: added support for variable namespaces.
  - Added configurable script size limit. Compiler will refuse to
    compile files larger than sieve_max_script_size.
  - Fixed a bug in the i;ascii-numeric comparator. If one of the
    strings started with a non-digit character, the comparator would
    always yield less-than.
  - Imap4flags extension: fixed bug in removeflag: removing a single
    flag failed due to off-by-one error (bug report by Julian Cowley).
  - Fixed parser recovery. In particular cases it would trigger spurious
    errors after an initial valid error and sometimes additional errors
    were inappropriately ignored.
  - Implemented ManageSieve QUOTA enforcement.
  - Added MAXREDIRECTS capability after login.
  - Implemented new script name rules specified in most recent
    ManageSieve draft.
  - Fixed assertion failure occuring with challenge-response SASL
    mechanisms.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-3
changelog:
  - merged dovecot-sieve and dovecot-managesieve into dovecot-pigeonhole
  - merged dovecot-sqlite, dovecot-gssapi and dovecot-ldap into dovecot


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.11-1
changelog:
  - updated to 1.2.11
  - mbox: Message header reading was unnecessarily slow. Fetching a
    huge header could have resulted in Dovecot eating a lot of CPU.
    Also searching messages was much slower than necessary.
  - maildir: Reading uidlist could have ended up in an infinite loop.
  - IMAP IDLE: v1.2.7+ caused extra load by checking changes every
    0.5 seconds after a change had occurred in mailbox


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.4.beta4.20100406
changelog:
  - updated to snapshot 20100406
  - auth: If userdb lookup fails internally, don't cache the result.
  - Added support for userdb lookup to fail with a reason
  - sdbox: mailbox_update() could have changed UIDVALIDITY incorrectly
  - layout=maildir++: Fixed deleting mailboxes with mailbox=file storages
  - Fixed potential problems with parsing invalid address groups.
  - dsync: Don't repeatedly try to keep opening the same failing mailbox
  - lib-storage: Don't crash if root mail directory isn't given.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.5.beta4.20100414
changelog:
  - add make check
  - updated to snapshot 20100414
  - config: Added nn- prefix to *.conf files so the sort ordering makes more sense
  - lib-master: Log an error if login client disconnects too early
  - mdbox: If purging found corrupted files, it didn't auto-rebuild storage
  - lib-storage: Added support for searching save date
  - and more...
  - pigeonhole updated:
  - Mailbox extension: fixed memory leak in the mailboxexists test
  - added login failure handler


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.6.beta4.20100421
changelog:
  - updated to snapshot 20100421
  - mdbox: Purge crashed if it purged all messages from a file
  - lib-storage: Shared namespace's prefix_len wasn't updated after prefix was truncated
  - imap-quota: Iterate quota roots only once when replying to GETQUOTAROOT
  - idle: Do cork/uncork when sending "OK Still here" notification
  - login: If proxy returns ssl=yes and no port, switch port to imaps/pop3s


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.7.beta4.20100427
changelog:
  - updated to snapshot 20100427
  - doveconf <setting name> now prints only the one setting's value
  - mdbox: Automatically delete old temp.* files from storage/ directory
  - mdbox: use flock locking by default


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.8.beta4.20100505
changelog:
  - pigeonhole and dovecot updated to snapshot 20100505
  - mdbox: Avoid rebuilding storage if another process already did it
  - lib-storage: Fixed () sublists in IMAP SEARCH parser
  - example-config: auth-checkpassword include wasn't listed in 10-auth.conf
  - doveadm: Added search command
  - lib-master: Don't crash after timeouting an auth-master request
  - master: If inet listener uses DNS name, which returns multiple IPs, 
    listen in all of them


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.13.beta5.20100529
changelog:
  - dovecot and pigeonhole updated
  - enable solr fulltext search
  - master: Fixed crash on config reload
  - lib-storage: Don't assert-crash when copying a mail fails


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.14.beta5.20100610
changelog:
  - dovecot updated 
  - lib-storage: Fixed accessing uncommitted saved mails with dsync
  - example-config: Moved ACL and quota settings to a separate .conf files
  - dbox, mdbox: Fixed race conditions when creating mailboxes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.15.beta6.20100626
changelog:
  - updated dovecot, pigeonhole and man pages
  - moved disable_plaintext_auth to 10-auth.conf
  - mdbox: Fixed assert-crash on storage rebuild if file got lost
  - lib-charset: Don't assert-crash when iconv() skips lots of invalid input
  - master: Fixed crash on deinit (maybe also on reload)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.17.rc2.20100712
changelog:
  - dovecot and pigeonhole updated
  - fixed a crash with empty mail_plugins
  - fixed sharing INBOX to other users
  - director+LMTP proxy wasn't working correctly
  - v1.x config parser failed with some settings if pigeonhole wasn't installed.
  - virtual: If non-matching messages weren't expunged within same session,
    they never got expunged.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.18.rc2.20100716
changelog:
  - dovecot and pigeonhole updated
  - enabled pigeonhole's build time test suite
  - acl: Fixed crashon FS layout with non-default hierarchy separator
  - dbox renamed to sdbox
  - dsync fixes and improvements


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.19.rc3
changelog:
  - dovecot and pigeonhole updated
  - fixed lda + sieve crash
  - added mail_temp_dir setting, used by deliver and lmtp for creating
    temporary mail files. Default is /tmp.
  - imap: Fixed checking if list=children namespace has children.
  - mdbox: Race condition fixes related to copying and purging


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.20.rc4
changelog:
  - dovecot and pigeonhole updated
  - doveadm mailbox status: Fixed listing non-ASCII mailbox names. 
  - doveadm fetch: Fixed output when fetching message header or body
  - doveadm director map/add/remove: Fixed handling IP address as parameter. 
  - dsync: A few more fixes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.21.rc5
changelog:
  - dovecot and pigeonhole updated
  - Using more than 2 plugins could have caused broken behavior
  - Listescape plugin fixes
  - mbox: Fixed a couple of assert-crashes
  - mdbox: Fixed potential assert-crash when saving multiple messages 
    in one transaction


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-1
changelog:
  - dovecot and pigeonhole updated
  - dict quota didn't always decrease quota when messages were expunged
  - Shared INBOX wasn't always listed with FS layout


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.1-1
changelog:
  - dovecot and pigeonhole updated
  - sieve: sieved renamed to sieve-dump
  - when dsync is started as root, remote dsync command is now also executed 
    as root instead of with dropped privileges.
  - IMAP: QRESYNC parameters for SELECT weren't handled correctly.
  - UTF-8 string validity checking wasn't done correctly
  - dsync: Fixed a random assert-crash with remote dsyncing


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.2-1
changelog:
  - dovecot updated
  - vpopmail support is disabled for now, since it's broken. You can use
    it via checkpassword support or its sql/ldap database directly.
  - maildir: Fixed "duplicate uidlist entry" errors that happened at
    least with LMTP when mail was delivered to multiple recipients
  - Deleting ACLs didn't cause entries to be removed from acl_shared_dict
  - mail_max_lock_timeout setting wasn't working with all locks


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.3-1
changelog:
  - dovecot updated to 2.0.3
  - dovecot-lda: Removed use of non-standard Envelope-To: header as 
    a default for -a
  - dsync: Fixed handling \Noselect mailboxes
  - Fixed an infinite loop introduced by v2.0.2's message parser changes.
  - Fixed a crash introduced by v2.0.2's istream-crlf changes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.4-1
changelog:
  - dovecot updated to 2.0.4
  - multi-dbox: If :INDEX=path is specified, keep storage/dovecot.map.index* 
    files also in the index path rather than in the main storage directory.
  - dsync: POP3 UIDLs weren't copied with Maildir
  - dict file: Fixed fd leak (showed up easily with LMTP + quota)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.5-1
changelog:
  - dovecot updated to 2.0.5
  - acl: Fixed the logic of merging multiple ACL entries
  - sdbox: Fixed memory leak when copying messages with hard links. 
  - zlib: Fixed several crashes, which mainly showed up with mbox.
  - quota: Don't crash if user has quota disabled, but plugin loaded.
  - acl: Fixed crashing when sometimes listing shared mailboxes via dict proxy.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.6-1
changelog:
  - dovecot updated to 2.0.6
  - Pre-login CAPABILITY includes IDLE again. Mainly to make Blackberry
    servers happy.
  - auth: auth_cache_negative_ttl default was 0 in earlier v2.0.x, but it
    was supposed to be 1 hour as in v1.x. Changed it back to 1h.
  - doveadm: Added import command for importing mails from other storages.
  - Reduced NFS I/O operations for index file accesses
  - dbox, Maildir: When copying messages, copy also already cached fields
    from dovecot.index.cache
  - Maildir: LDA/LMTP assert-crashed sometimes when saving a mail.
  - Fixed leaking fds when writing to dovecot.mailbox.log.
  - Fixed rare dovecot.index.cache corruption
  - IMAP: SEARCH YOUNGER/OLDER wasn't working correctly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.7-1
changelog:
  - dovecot updated to 2.0.7
  - IMAP: Fixed LIST-STATUS when listing subscriptions with subscriptions=no namespaces.
  - IMAP: Fixed SELECT QRESYNC not to crash on mailbox close if a lot of changes were being sent. 
  - quota: Don't count virtual mailboxes in quota
  - doveadm expunge didn't always actually do the physical expunging
  - Fixed some index reading optimizations introduced by v2.0.5.
  - LMTP proxying fixes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.8-1
changelog:
  - dovecot updated to 2.0.8, pigeonhole updated to 0.2.2
  - services' default vsz_limits weren't being enforced correctly
  - added systemd support
  - dbox: Fixes to handling external mail attachments
  - imap, pop3: When service { client_count } was larger than 1, the
    log messages didn't use the correct prefix
  - MySQL: Only the first specified host was ever used


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-1
changelog:
  - dovecot updated to 2.0.9
  - fixed a high system CPU usage / high context switch count performance problem
  - lda: Fixed a crash when trying to send "out of quota" reply


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.11-1
changelog:
  - IMAP: Fixed hangs with COMPRESS extension
  - IMAP: Fixed a hang when trying to COPY to a nonexistent mailbox. 
  - IMAP: Fixed hang/crash with SEARCHRES + pipelining $.
  - IMAP: Fixed assert-crash if IDLE+DONE is sent in same TCP packet.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.12-1
changelog:
  - dbox: Fixes to handling external attachments
  - dsync: More fixes to avoid hanging with remote syncs
  - dsync: Many other syncing/correctness fixes
  - doveconf: v2.0.10 and v2.0.11 didn't output plugin {} section right


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.12-2
changelog:
  - pigeonhole updated to 0.2.3, which includes:
  - managesieve: fixed bug in UTF-8 checking of string values
  - sieve command line tools now avoid initializing the mail store unless necessary
  - removed header MIME-decoding to fix erroneous address parsing
  - fixed segfault bug in extension configuration, triggered when unknown
    extension is mentioned in sieve_extensions setting.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.13-1
changelog:
  - dovecot updated to 2.0.13
  - mdbox purge: Fixed wrong warning about corrupted extrefs.
  - script-login binary wasn't actually dropping privileges to the
    user/group/chroot specified by its service settings.
  - Fixed potential crashes and other problems when parsing header names
    that contained NUL characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.14-1
changelog:
  - dovecot updated to 2.0.14
  - userdb extra fields can now return name+=value to append to an
    existing name
  - script-login attempted an unnecessary config lookup, which usually
    failed with "Permission denied".
  - lmtp: Fixed parsing quoted strings with spaces as local-part for
    MAIL FROM and RCPT TO.
  - imap: FETCH BODY[HEADER.FIELDS (..)] may have crashed or not
    returned all data sometimes.
  - ldap: Fixed random assert-crashing with with sasl_bind=yes.
  - Fixes to handling mail chroots
  - Fixed renaming mailboxes under different parent with FS layout when
    using separate ALT, INDEX or CONTROL paths.
  - zlib: Fixed reading concatenated .gz files.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.15-1
changelog:
  - dovecot updated to 2.0.15
  - v2.0.14: Index reading could have eaten a lot of memory in some
    situations
  - mbox: Fixed crash during mail delivery when mailbox didn't yet have
    GUID assigned to it.
  - zlib+mbox: Fetching last message from compressed mailboxes crashed.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1-0.1.rc1
changelog:
  - updated to 2.1.rc1
  - major changes since 2.0.x:
  - plugins now use UTF-8 mailbox names rather than mUTF-7
  - auth_username_format default changed to %Lu
  - solr full text search backend changed to use mailbox GUIDs instead of
    mailbox names, requiring reindexing everything


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1-0.5.rc5
changelog:
  - updated to 2.1.rc5
  - director: With >2 directors ring syncing might have stalled during
    director connect/disconnect, causing logins to fail.
  - LMTP client/proxy: Fixed potential hanging when sending (big) mails
  - Compressed mails with external attachments (dbox + SIS + zlib) failed
    sometimes with bogus "cached message size wrong" errors.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1-0.7.rc6
changelog:
  - updated to 2.1.rc6
  - dbox: Fixed error handling when saving failed or was aborted
  - IMAP: Using COMPRESS extension may have caused assert-crashes
  - IMAP: THREAD REFS sometimes returned invalid (0) nodes.
  - dsync: Fixed handling non-ASCII characters in mailbox names.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.1-1
changelog:
  - dovecot updated to 2.1.1
  - acl plugin + autocreated mailboxes crashed when listing mailboxes
  - doveadm force-resync: Don't skip autocreated mailboxes (especially
    INBOX). 
  - If process runs out of fds, stop listening for new connections only
    temporarily, not permanently (avoids hangs with process_limit=1
    services)
  - auth: passdb imap crashed for non-login authentication (e.g. smtp).


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.2-1
changelog:
  - dovecot updated to 2.1.2
  - doveadm sync: If mailbox was expunged empty, messages may have
    become back instead of also being expunged in the other side.
  - imap_id_* settings were ignored before login.
  - Several fixes to mailbox_list_index=yes
  - Previous v2.1.x didn't log all messages at shutdown.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.3-1
changelog:
  - dovecot updated to 2.1.3
  - multi-dbox format in dovecot 2.1.2 was broken
  - temporarily disable check phase until bug #798968 is fixed


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.4-1
changelog:
  - dovecot updated to 2.1.4
  - Proxying SSL connections crashed in v2.1.[23]
  - fts-solr: Indexing mail bodies was broken.
  - director: Several changes to significantly improve error handling
  - doveadm import didn't import messages' flags
  - mail_full_filesystem_access=yes was broken
  - Make sure IMAP clients can't create directories when accessing
    nonexistent users' mailboxes via shared namespace.
  - Dovecot auth clients authenticating via TCP socket could have failed
    with bogus "PID already in use" errors.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.5-1
changelog:
  - IMAP: Several fixes related to mailbox listing in some configs
  - director: A lot of fixes and performance improvements
  - mbox: Deleting a mailbox didn't delete its index files.
  - pop3c: TOP command was sent incorrectly
  - trash plugin didn't work properly
  - LMTP: Don't add a duplicate Return-Path: header when proxying.
  - listescape: Don't unescape namespace prefixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.6-1
changelog:
  - v2.1.5: Using "~/" as mail_location or elsewhere failed to actually
    expand it to home directory.
  - dbox: Fixed potential assert-crash when reading dbox files.
  - trash plugin: Fixed behavior when quota is already over limit.
  - Proxying to backend server with SSL: Verifying server certificate
    name always failed, because it was compared to an IP address.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.7-1
changelog:
  - updated to 2.1.7
  - v2.1.5: Using "~/" as mail_location or elsewhere failed to actually
    expand it to home directory.
  - dbox: Fixed potential assert-crash when reading dbox files.
  - trash plugin: Fixed behavior when quota is already over limit.
  - mail_log plugin: Logging "copy" event didn't work.
  - Proxying to backend server with SSL: Verifying server certificate
    name always failed, because it was compared to an IP address.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.7-2
changelog:
  - fix changelog, 2.1.7-1 had copy-pasted upstream changelog, which was wrong
  - director: Don't crash with quickly disconnecting incoming director
    connections.
  - mdbox: If mail was originally saved to non-INBOX, and namespace
    prefix is non-empty, don't assert-crash when rebuilding indexes.
  - sdbox: Don't use more fds than necessary when copying mails.
  - auth: Fixed crash with DIGEST-MD5 when attempting to do master user
    login without master passdbs. 
  - Several fixes to mail_shared_explicit_inbox=no
  - imapc: Use imapc_list_prefix also for listing subscriptions.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.8-1
changelog:
  - dovecot updated to 2.1.8
  - imap: Mailbox names were accidentally sent as UTF-8 instead of mUTF-7
    in previous v2.1.x releases for STATUS, MYRIGHTS and GETQUOTAROOT commands.
  - lmtp proxy: Don't timeout connections too early when mail has a lot of RCPT TOs.
  - director: Don't crash if the director is working alone.
  - shared mailboxes: Avoid doing "@domain" userdb lookups.
  - doveadm: Fixed crash with proxying some commands.
  - fts-squat: Fixed handling multiple SEARCH parameters.
  - imapc: Fixed a crash when message had more than 8 keywords.
  - imapc: Don't crash on APPEND/COPY if server doesn't support UIDPLUS.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.8-2
changelog:
  - pigeonhole updated to 0.3.1
  - Fixed several small issues, including a few potential segfault bugs, based
    on static source code analysis.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.9-1
changelog:
  - dovecot updated to 2.1.9
  - Full text search indexing might have failed for some messages,
    always causing indexer-worker process to run out of memory.
  - fts-lucene: Fixed handling SEARCH HEADER FROM/TO/SUBJECT/CC/BCC when
    the header wasn't lowercased.
  - fts-squat: Fixed crash when searching a virtual mailbox.
  - pop3: Fixed assert crash when doing UIDL on empty mailbox on some
    setups. 
  - auth: GSSAPI RFC compliancy and error handling fixes.
  - Various fixes related to handling shared namespaces


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.10-1
changelog:
  - dovecot updated to 2.1.10, pigeonhole updated to 0.3.3
  - director: In some conditions director may have disconnected from
    another director (without logging about it), thinking it was sending
    invalid data.
  - imap: Various fixes to listing mailboxes.
  - login processes crashed if there were a lot of local {} or remote {}
    settings blocks.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.12-1
changelog:
  - dovecot updated to 2.1.12
  - lmtp proxy: Fixed hanging if remote server was down.
  - doveadm: Various fixes to handling doveadm-server connections.
  - auth: passdb imap was broken in v2.1.10.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.13-1
changelog:
  - dovecot updated to 2.1.13
  - Some fixes to cache file changes in v2.1.11.
  - virtual storage: Sorting mailbox by from/to/cc/bcc didn't work.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.14-1
changelog:
  - dovecot updated to 2.1.14
  - v2.1.11+ had a race condition where it sometimes overwrote data in
    dovecot.index.cache file. This could have caused Dovecot to return
    the same cached data to two different messages.
  - mdbox: Fixes to handling duplicate GUIDs during index rebuild


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.15-1
changelog:
  - dovecot updated to 2.1.15
  - v2.1.14's dovecot.index.cache fixes caused Dovecot to use more disk I/O
    and memory than was necessary.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2-0.3
changelog:
  - dovecot updated to 2.2 RC3
  - Fixed a crash when decoding quoted-printable content.
  - dsync: Various bugfixes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.0-1
changelog:
  - dovecot updated to 2.2.0
  - Mailbox list indexes weren't using proper file permissions based
    on the root directory.
  - replicator: doveadm commands and user list export may have skipped
    some users.
  - Various fixes to mailbox_list_index=yes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.1-1
changelog:
  - dovecot updated to 2.2.1
  - mailbox_list_index=yes was broken.
  - LAYOUT=index didn't list subscriptions.
  - auth: Multiple master passdbs didn't work.
  - Message parsing (e.g. during search) crashed when multipart message
    didn't actually contain any parts.
  - dovecot updated to 2.2.1


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.2-1
changelog:
  - dovecot updated to 2.2.2
  - IMAP: Various URLAUTH fixes.
  - IMAP: Fixed a hang with invalid APPEND parameters.
  - IMAP LIST-EXTENDED: INBOX was never listed with \Subscribed flag.
  - mailbox_list_index=yes still caused crashes.
  - maildir: Fixed a crash after dovecot-keywords file was re-read.
  - maildir: If files had reappeared unexpectedly to a Maildir, they
    were ignored until index files were deleted.
  - Maildir: Fixed handling over 26 keywords in a mailbox. 
  - imap/pop3-login proxying: Fixed a crash if TCP connection succeeded,
    but the remote login timed out.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.3-1
changelog:
  - dovecot updated to 2.2.3
  - IMAP: If subject contained only whitespace, Dovecot returned an
    ENVELOPE reply with a huge literal value, effectively causing the
    IMAP client to wait for more data forever.
  - IMAP: Various URLAUTH fixes.
  - imapc: Various bugfixes and improvements
  - pop3c: Various fixes to make it work in dsync (without imapc)
  - dsync: Fixes to syncing subscriptions. Fixes to syncing mailbox
    renames.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.4-1
changelog:
  - dovecot updated to 2.2.4
  - imap/pop3 proxy: Master user logins were broken in v2.2.3
  - sdbox/mdbox: A corrupted index header with wrong size was never
    automatically fixed in v2.2.3.
  - mbox: Fixed assert-crashes related to locking.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.5-1
changelog:
  - dovecot updated to 2.2.5
  - added some missing man pages (by Pascal Volk)
  - director: Users near expiration could have been redirected to
    different servers at the same time.
  - pop3: Avoid assert-crash if client disconnects during LIST.
  - mdbox: Corrupted index header still wasn't automatically fixed.
  - dsync: Various fixes to work better with imapc and pop3c storages.
  - ldap: sasl_bind=yes caused crashes, because Dovecot's lib-sasl
    symbols conflicted with Cyrus SASL library.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.6-1
changelog:
  - dovecot updated to 2.2.6, pigeonhole updated to 0.4.2
  - director: v2.2.5 changes caused "SYNC lost" errors
  - dsync: Many fixes and error handling improvements
  - doveadm -A: Don't waste CPU by doing a separate config lookup
    for each user
  - Long-running ssl-params process no longer prevents Dovecot restart
  - mbox: Fixed mailbox_list_index=yes to work correctly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.7-1
changelog:
  - dovecot updated to 2.2.7
  - master process was doing a hostname.domain lookup for each created
    process, which may have caused a lot of unnecessary DNS lookups.
  - dsync: Syncing over 100 messages at once caused problems in some
    situations, causing messages to get new UIDs.
  - fts-solr: Different Solr hosts for different users didn't work.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.8-1
changelog:
  - Fixed infinite loop in message parsing if message ends with
    "--boundary" and CR (without LF). Messages saved via SMTP/LMTP can't
    trigger this, because messages must end with an "LF.". A user could
    trigger this for him/herself though.
  - lmtp: Client was sometimes disconnected before all the output was
    sent to it.
  - replicator: Database wasn't being exported to disk every 15 minutes
    as it should have. Instead it was being imported, causing "doveadm
    replicator remove" commands to not work very well.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.9-1
changelog:
  - improved cache file handling exposed several old bugs related to fetching 
    mail headers.
  - iostream handling changes were causing some connections to be disconnected
    before flushing their output


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-1
changelog:
  - dovecot updated to 2.2.10
  - quota-status: quota_grace was ignored
  - ldap: Fixed memory leak with auth_bind=yes and without
    auth_bind_userdn.
  - imap: Don't send HIGHESTMODSEQ anymore on SELECT/EXAMINE when
    CONDSTORE/QRESYNC has never before been enabled for the mailbox.
  - imap: Fixes to handling mailboxes without permanent modseqs.
    (When [NOMODSEQ] is returned by SELECT, mainly with in-memory
    indexes.)
  - imap: Various fixes to METADATA support.
  - stats plugin: Processes that only temporarily dropped privileges
    (e.g. indexer-worker) may have been logging errors about not being
    able to open /proc/self/io.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.11-1
changelog:
  - dovecot updated to 2.2.11
  - imap: SEARCH/SORT PARTIAL reponses may have been too large.
  - doveadm backup: Fixed assert-crash when syncing mailbox deletion.


author: John Morris <john@zultron.com> - 1:2.2.12-2
changelog:
  - el6 build fixes (#1082384):
  - el6 autoconf too old to regen; use packaged files
  - fix compile error when __global_ldflags macro undefined


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.13-1
changelog:
  - dovecot updated to 2.2.13
  - fixes CVE-2014-3430: denial of service through maxxing out SSL connections
  - pop3 server was still crashing in v2.2.12 
  - maildir: Various fixes and improvements to handling compressed mails
  - fts-lucene, fts-solr: Fixed crash on search when the index contained
    duplicate entries.
  - mail_attachment_dir: Attachments with the last base64-encoded line
    longer than the rest wasn't handled correctly.
  - IMAP: SEARCH/SORT PARTIAL was handled completely wrong in v2.2.11+
  - acl: Global ACL file handling was broken when multiple entries
    matched the mailbox name


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.14-1
changelog:
  - dovecot updated to 2.2.14, pigeonhole updated to 0.4.3
  - fixed several race conditions with dovecot.index.cache handling that
    may have caused unnecessary "cache is corrupted" errors.
  - auth: If auth client listed userdb and disconnected before finishing,
    the auth worker process got stuck
  - imap-login, pop3-login: Fixed potential crashes when client
    disconnected unexpectedly.
  - imap proxy: The connection was hanging in some usage patterns.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.15-1
changelog:
  - dovecot updated to 2.2.15
  - various race condition fixes to LAYOUT=index
  - v2.2.14 virtual plugin crashed in some situations


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.16-1
changelog:
  - dovecot updated to 2.2.16
  - auth: Don't crash if master user login is attempted without
    any configured master=yes passdbs
  - Parsing UTF-8 text for mails could have caused broken results
    sometimes if buffering was split in the middle of a UTF-8 character.
    This affected at least searching messages.
  - String sanitization for some logged output wasn't done properly:
    UTF-8 text could have been truncated wrongly or the truncation may
    not have happened at all.
  - fts-lucene: Lookups from virtual mailbox consisting of over 32
    physical mailboxes could have caused crashes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.17-1
changelog:
  - dovecot updated to 2.2.17
  - pigeonhole updated to 0.4.7
  - auth: If auth_master_user_separator was set, auth process could be
    crashed by trying to log in with empty master username.
  - imap-login, pop3-login: Fixed crash on handshake failures with new
    OpenSSL versions (v1.0.2) when SSLv3 was disabled.
  - auth: If one passdb fails allow_nets check, it shouldn't have failed
    all the other passdb checks later on.
  - imap: Server METADATA couldn't be accessed
  - imapc: Fixed \Muted label handling in gmail-migration.
  - imapc: Various bugfixes and improvements.
  - Trash plugin fixes by Alexei Gradinari
  - mbox: Fixed crash/corruption in some situations


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.18-1
changelog:
  - director: Login UNIX sockets were normally detected as doveadm or
    director ring sockets, causing it to break in existing installations.
  - sdbox: When copying a mail in alt storage, place the destination to
    alt storage as well.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.18-2
changelog:
  - update pigeonhole to 0.4.8
  - Fixed problem in address test: erroneously decoded mime-encoded words in
    address headers.
  - extprograms plugin: Fixed failure occurring when connecting to script
    service without the need to read back the output from the external program.
  - Fixed bug in script storage path normalization occurring with relative
    symbolic links below root.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.19-1
changelog:
  - dovecot updated to 2.2.19
  - mdbox: Rebuilding could have caused message's reference count to
    overflow the 16bit number in some situations, causing problems when
    trying to expunge the duplicates.
  - Various search fixes (fts, solr, tika, lib-charset, indexer)
  - Various virtual plugin fixes
  - Various fixes and optimizations to dsync, imapc and pop3-migration
  - imap: Various RFC compliancy and crash fixes to NOTIFY
  - pigeonhole updated to 0.4.9
  - ManageSieve: Fixed an assert failure occurring when a client
    disconnects during the GETSCRIPT command.
  - doveadm sieve plugin: Fixed incorrect initialization (mem leaks) of mail user.
  - sieve-filter command line tool: Fixed handling of failure-related
    implicit keep when there is an explicit default destination folder.
  - lib-sieve: Fixed bug in RFC5322 header folding.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.20-1
changelog:
  - dovecot updated to 2.2.20
  - director: Backend tags weren't working correctly.
  - ldap: tls_* settings weren't used for ldaps URIs.
  - ldap, mysql: Fixed setting connect timeout.
  - auth: userdb lookups via auth-worker couldn't change username
  - dsync: Fixed handling deleted directories. Make sure we don't go to
    infinite mailbox renaming loop.
  - imap: Fixed crash in NOTIFY when there were watched namespaces that
    didn't support NOTIFY.
  - imap: After SETMETADATA was used, various commands (especially FETCH)
    could have started hanging when their output was large.
  - stats: Idle sessions weren't refreshed often enough, causing stats
    process to forget them and log errors about unknown sessions when
    they were updated later.
  - stats: Fixed "Duplicate session ID" errors when LMTP delivered to
    multiple recipients and fts_autoindex=yes.
  - zlib plugin: Fixed copying causing cache corruption when zlib_save
    wasn't set, but the source message was compressed.
  - fts-solr: Fixed escaping Solr query parameters.
  - lmtp: quota_full_tempfail=yes was ignored with
    lmtp_rcpt_check_quota=yes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.21-1
changelog:
  - dovecot updated to 2.2.21
  - doveadm mailbox list (and some others) were broken in v2.2.20
  - director: Fixed making backend changes when running with only a
    single director server.
  - virtual plugin: Fixed crash when trying to open nonexistent
    autocreated backend mailbox.
  - pigeonhole updated to 0.4.10
  - implemented the Sieve mime and foreverypart extensions (RFC 5703).
  + sieve body extension: Properly implemented the `:text' body
    transform. It now extracts text for HTML message parts.
  - variables extension: Fixed handling of empty string by the `:length'
    set modifier. An empty string yielded an empty string rather than "0".
  - Fixed memory leak in the Sieve script byte code dumping facility.
    Extension contexts were never actually freed.
  - doveadm sieve plugin: Fixed crashes caused by incorrect context
    allocation in the sieve command implementations.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.21-2
changelog:
  - pigeonhole updated to 0.4.11
  - Sieve mime extension: Fixed the header :mime :anychild test to work properly
    outside a foreverypart loop.
  - Fixed assert failure occurring when text extraction is attempted on a
    empty or broken text part.
  - Fixed assert failure in handling of body parts that are converted to text.
  - Fixed header unfolding for (mime) headers parsed from any mime part.
  - Fixed trimming for (mime) headers parsed from any mime part.
  - Fixed erroneous changes to the message part tree structure performed when
    re-parsing the message.
  - LDA Sieve plugin: Fixed bug in error handling of script storage initialization
  - Fixed duplication of discard actions in the script result.
  - Made sure that quota errors never get logged as errors in syslog.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.21-4
changelog:
  - pigeonhole updated to 0.4.12
  - multiscript: Fixed bug in handling of (implicit) keep; final keep action was
    always executed as though there was a failure. 
  - managesieve-login: Fixed proxy to allow SASL mechanisms other than PLAIN.
  - ldap storage: Prevent segfault occurring when assigning certain (global)
    configuration options.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.22-1
changelog:
  - dovecot updated to 2.2.22
  - auth: Auth caching was done too aggressively when %variables were
    used in default_fields, override_fields or LDAP pass/user_attrs.
    userdb result_* were also ignored when user was found from cache.
  - imap: Fixed various assert-crashes caused v2.2.20+. Some of them
    caught actual hangs or otherwise unwanted behavior towards IMAP
    clients.
  - Expunges were forgotten in some situations, for example when
    pipelining multiple IMAP MOVE commands.
  - quota: Per-namespaces quota were broken for dict and count backends
    in v2.2.20+
  - fts-solr: Search queries were using OR instead of AND as the
    separator for multi-token search queries in v2.2.20+.
  - Single instance storage support wasn't really working in v2.2.16+
  - dbox: POP3 message ordering wasn't working correctly.
  - virtual plugin: Fixed crashes related to backend mailbox deletions.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.23-1
changelog:
  - dovecot updated to 2.2.23, pigeonhole updated to 0.4.13
  - Various fixes to doveadm. Especially running commands via
    doveadm-server was broken.
  - director: Fixed user weakness getting stuck in some situations
  - director: Fixed a situation where directors keep re-sending
    different states to each others and never becoming synced.
  - director: Fixed assert-crash related to a slow "user killed" reply
  - Fixed assert-crash related to istream-concat, which could have
    been triggered at least by a Sieve script.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.24-1
changelog:
  - dovecot updated to 2.2.24
  - Huge header lines could have caused Dovecot to use too much memory
  - dsync: Detect and handle invalid/stale -s state string better.
  - dsync: Fixed crash caused by specific mailbox renames
  - auth: Auth cache is now disabled passwd-file. 
  - fts-tika: Don't crash if it returns 500 error
  - dict-redis: Fixed timeout handling
  - SEARCH INTHREAD was crashing
  - stats: Only a single fifo_listeners was supported, making it impossible to
    use both auth_stats=yes and mail stats plugin.
  - SSL errors were logged in separate "Stacked error" log lines instead of as
    part of the disconnection reason.
  - MIME body parser didn't handle properly when a child MIME part's --boundary
    had the same prefix as the parent.
  - pigeonhole updated to 0.4.14
  - extprograms plugin: Fixed epoll() panic caused by closing the output
    FD before the output stream.
  - Made sure that the local part of a mail address is encoded properly
    using quoted string syntax when it is not a dot-atom.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.25-1
changelog:
  - dovecot updated to 2.2.25
  - doveadm backup was sometimes deleting entire mailboxes unnecessarily.
  - doveadm: Command -parameters weren't being sent to doveadm-server.
  - if dovecot.index read failed e.g. because mmap() reached VSZ limit,
    an empty index could have been opened instead, corrupting the
    mailbox state.
  - lazy-expunge: Fixed a crash when copying failed. Various other fixes.
  - fts-lucene: Fixed crash on index rescan.
  - dict-ldap: Various fixes
  - dict-sql: NULL values crashed. Now they're treated as "not found".


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.26.0-1
changelog:
  - dovecot updated to 2.2.26.0, pigeonhole updated to 0.4.16
  - master process's listener socket was leaked to all child processes.
    This might have allowed untrusted processes to capture and prevent
    "doveadm service stop" comands from working.
  - login proxy: Fixed crash when outgoing SSL connections were hanging.
  - auth: userdb fields weren't passed to auth-workers, so %{userdb:*}
    from previous userdbs didn't work there.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - Fixed writing >2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - fts-solr: Fixed searching multiple mailboxes
  - and more...


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.27-1
changelog:
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large. This
    is because 3 bytes per email were being wasted that could have been
    used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is detected
    inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between different
    quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged together.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.28-1
changelog:
  - dovecot updated to 2.2.28, pigeonhole to 0.4.17
  - auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support them
    in lib-dsasl for client side.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual mailboxes.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is reused
    for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if Sieve
    was used. especially %{storage_id} was broken.
  - imapsieve plugin: Fixed assert failure occurring when used with virtual
    mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via attribute's
    string value.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.29-1
changelog:
  - dovecot updated to 2.2.29
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers, too much
    data was added to auth cache. This could have resulted in wrong
    replies when using multiple passdbs/userdbs.
  - auth: passdb { skip & mechanisms } were ignored for the first passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't always
    synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands via
    doveadm-server. Almost all errors used exit code 75 (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working correctly.
  - doveadm director status <user>: "Initial config" was always empty
  - imapc: Various reconnection fixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.29.1-1
changelog:
  - dovecot updated to 2.2.29.1
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - pigeonhole updated to 0.4.18
  - imapsieve plugin: Implemented the copy_source_after rule action. When this
    is enabled for a mailbox rule, the specified Sieve script is executed for
    the message in the source mailbox during a "COPY" event. This happens only
    after the Sieve script that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  - imapsieve plugin: Added non-standard Sieve environment items for the source
    and destination mailbox.
  - multiscript: The execution of the discard script had an implicit "keep",
    rather than an implicit "discard".


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.30.1-1
changelog:
  - dovecot updated to 2.2.30.1
  - More fixes to automatically fix corruption in dovecot.list.index
  - dsync-server: Fix support for dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and per-mailbox keys
    are used. Otherwise the copied mails can't be opened.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.30.2-1
changelog:
  - dovecot updated to 2.2.30.2
  - auth: Multiple failed authentications within short time caused crashes
  - push-notification: OX driver crashed at deinit


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.31-1
changelog:
  - dovecot updated to 2.2.31
  - Various fixes to handling mailbox listing. Especially related to
    handling nonexistent autocreated/autosubscribed mailboxes and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This caused
    some of the ACL rule interactions to not work exactly as intended.
  - Using mail_sort_max_read_count may have caused very high CPU usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly and
    caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date or
    Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since the
    beginning.
  - pigeonhole updated to 0.4.19
  - Fixed bug in handling of implicit keep in some cases.
  - include extension: Fixed segfault that (sometimes) occurred when the
    global script location was left unconfigured.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.32-1
changelog:
  - dovecot updated to 2.2.32
  - Modseq tracking didn't always work correctly. This could have caused
    imap unhibernation to fail or IMAP QRESYNC/CONDSTORE extensions to
    not work perfectly.
  - mdbox: "Inconsistency in map index" wasn't fixed automatically
  - dict-ldap: %variable values used in the LDAP filter weren't escaped.
  - quota=count: quota_warning = -storage=.. was never executed (try #2).
  - imapc: >= 32 kB mail bodies were supposed to be cached for subsequent
    FETCHes, but weren't.
  - quota-status service didn't support recipient_delimiter
  - acl: Don't access dovecot-acl-list files with acl_globals_only=yes
  - mail_location: If INDEX dir is set, mailbox deletion deletes its
    childrens' indexes. 
  - director: v2.2.31 caused rapid reconnection loops to directors
    that were down.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.32-2
changelog:
  - pigeonhole updated to 0.4.20
  - Made the retention period for redirect duplicate identifiers
    configurable. Changed the default retention period from 24 to 12 hours.
  - sieve-filter: Fixed memory leak: forgot to clean up script binary at
    end of execution
  - managesieve-login: Fixed handling of AUTHENTICATE command. A second
    authenticate command would be parsed wrong.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.1-1
changelog:
  - dovecot updated to 2.2.33.1, pigeonhole updated to 
  - Added %{if}, see https://wiki2.dovecot.org/Variables#Conditionals
  - sdbox: Mails were always opened when expunging, unless
    mail_attachment_fs was explicitly set to empty.
  - lmtp/doveadm proxy: hostip passdb field was ignored, which caused
    unnecessary DNS lookups if host field wasn't an IP
  - lmtp proxy: Fix crash when receiving unexpected reply in RCPT TO
  - quota_clone: Update also when quota is unlimited (broken in v2.2.31)
  - mbox, zlib: Fix assert-crash when accessing compressed mbox
  - doveadm director kick -f parameter didn't work
  - doveadm director flush <host> resulted flushing all hosts, if <host>
    wasn't an IP address.
  - director: Various fixes to handling backend/director changes at
     abnormal times, especially while ring was unsynced.
  - director: Use less CPU in imap-login processes when moving/kicking
    many users.
  - lmtp: Session IDs were duplicated/confusing with multiple RCPT TOs
    when lmtp_rcpt_check_quota=yes
  - LDA Sieve plugin: Fixed sequential execution of LDAP-based scripts. A
    missing LDAP-based script could cause the script sequence to exit earlier.
  - sieve-filter: Removed the (now) duplicate utf8 to mutf7 mailbox name
    conversion. This caused problems with mailbox names containing UTF-8
    characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.2-1
changelog:
  - dovecot updated to 2.2.33.2
  - doveadm: Fix crash in proxying (or dsync replication) if remote is
    running older than v2.2.33
  - auth: Fix memory leak in %{ldap_dn}
  - dict-sql: Fix data types to work correctly with Cassandra


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.2-2
changelog:
  - remove tcp_wrappers on Fedora 28 and later (#1518761)
  - use use mariadb-connector-c-devel instead of mysql-devel on Fedora 28 and later (#1493624)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.34-1
changelog:
  - dovecot updated to 2.2.34, pigeonhole updated to 0.4.22
  - fixes CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be reached
    and the process restarted. This happens only if Dovecot config has
    local_name { } or local { } configuration blocks and attacker uses
    randomly generated SNI servernames.
  - fixes CVE-2017-14461: Parsing invalid email addresses may cause a crash or
    leak memory contents to attacker. For example, these memory contents
    might contain parts of an email from another user if the same imap
    process is reused for multiple users.
  - fixes CVE-2017-15132: Aborted SASL authentication leaks memory in login
    process.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-3
changelog:
  - fix global ACL directory configuration search path (#1630383)
  - update first/last_valid_gid range patch (#1630410)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-7
changelog:
  - do not print error message when restorecon is not present 
    during install (#1626395)
  - change default config to use minimal UID = 1000 (#1630410)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-10
changelog:
  - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
    when scanning data in quoted strings, leading to out of bounds heap
    memory writes (#1741788)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-3
changelog:
  - fix CVE-2020-10957 dovecot: malformed NOOP commands leads to DoS (#1840354)
  - fix CVE-2020-10958 dovecot: command followed by sufficient number of newlines
    leads to use-after-free (#1840357)
  - fix CVE-2020-10967 dovecot: sending mail with empty quoted localpart
    leads to DoS (#1840356)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-4
changelog:
  - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1866756)
  - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1866761)
  - fix CVE-2020-12674 crash due to assert in RPA implementation (#1866768)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-6
changelog:
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55219)
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55206)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-7
changelog:
  - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161630)
  - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162282)
  - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161669)


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1:2.3.16-8
changelog:
  - fix CVE-2026-42006: fix IMAP parser list_count_limit to correctly
    limit open braces instead of close braces (RHEL-188480)


author: Panu Matilainen <pmatilai@redhat.com> - 0.91-1
changelog:
  - Use a relative path from udevrulesdir
  - Use fedorable source url which spectool actually understands
  - Move bash completions to newer standard in %{_datadir}/bash-completion
  - Use %make_install macro
  - Require /usr/sbin/udevadm for %post and %postun


author: Timothy Redaelli <tredaelli@redhat.com> - 0.101-1
changelog:
  - Rebase to driverctl-0.101-1.el7 (#1648411):
    - Fix shellcheck warnings (#1506969)
    - Install bash-completion as driverctl instead of driverctl-bash-completion.sh
    - fix load_override for non-PCI bus
    - Make sure driverctl had loaded all the overrides before basic.target (#1634160)


author: Timothy Redaelli <tredaelli@redhat.com> - 0.108-1
changelog:
  - Fix bash autocompletion (#1657020)
  - Fix --no-save to do not always returns with exit code 1
  - Return error code when unbinding a device from a driver fails


author: Merlin Mathesius <mmathesi@redhat.com> - 1.4-19
changelog:
  - Drop unnecessary BuildRequires for binutils-static
    Not building kernel modules, so use kernel-headers instead of kernel-devel


author: Ales Matej <amatej@gmail.com> 0.4.1-1
changelog:
  - Update to 0.4.1
  - Relicense to LGPLv2+
  - Fix number of bugs mainly with drpm_make and drpm_apply
  - Add support for zstd drpms
  - CMake cleanups
  - Make running tests optional
  - Small spec improvements


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Jakub Martisko <jamartis@redhat.com> - 7.1-27
changelog:
  - Include sys/sysmacros header in the growisofs.c file
  - Some macros have been moved from sys/types to sys/sysmacros which lead to FTBFS
  - Resolves: 1611716


author: Jiri Olsa <jolsa@redhat.com> - 1.21-1
changelog:
  - remove ftrace filter
  - New release: v1.21
  - DWARF loader:
  - Handle DWARF5 DW_OP_addrx properly
  - Handle subprogram ret type with abstract_origin properly
  - Check .notes section for LTO build info
  - Check .debug_abbrev for cross-CU references
  - Permit merging all DWARF CU's for clang LTO built binary
  - Factor out common code to initialize a cu
  - Permit a flexible HASHTAGS__BITS
  - Use a better hashing function, from libbpf
  - btf_encoder:
  - Add --btf_gen_all flag
  - Match ftrace addresses within ELF functions
  - Funnel ELF error reporting through a macro
  - Sanitize non-regular int base type
  - Add support for the floating-point types
  - Pretty printer:
  - Honour conf_fprintf.hex when printing enumerations


author: Jiri Olsa <jolsa@redhat.com> - 1.22-1
changelog:
  - New release: v1.22
  - Resolves: rhbz#2010414
  - Introduce -j/--jobs option to specify the number of threads to use.
  - Multithreaded DWARF loading, requires elfutils >= 0.178.
  - Preparatory work for multithreaded BTF encoding, the focus for 1.23.
  - Allow encoding BTF to a separate file.
  - Show all different types with the same name, not just the first one found.
  - Stop assuming that reading from stdin means pretty, add --prettify.
  - Improve type resolution for the --header command line option.
  - Do not consider the ftrace filter when encoding BTF for kernel functions.
  - Lock calls to non-thread safe elfutils' dwarf_decl_file() and dwarf_decl_line().
  - Change hash table size to one that performs better with current typical vmlinux files.
  - Allow tweaking the hash table size from the command line.
  - Add --kabi_prefix to avoid deduplication woes when using _RH_KABI_REPLACE().
  - Add --with_flexible_array to show just types with flexible arrays.
  - Support btfdiff with a detached BTF file.
  - Introduce sorted type output (--sort).
  - Disable incomplete CTF encoder.


author: Viktor Malik <vmalik@redhat.com> - 1.24-1
changelog:
  - Resolves: rhbz#2140020
  - New release: v1.23
  - Process DW_TAG_LLVM_annotation tags.
  - Initial support for DW_TAG_skeleton_unit.
  - Encode BTF_KIND_TYPE_TAG and BTF_KIND_DECL_TAG
  - Fix handling of percpu symbols on s390.
  - Use cacheline size to infer struct member alignment from BTF.
  - Add --skip_missing to not stop when not finding one of -C arguments.
  - Fix __attribute__((__aligned__(N)) printing alignment for struct members.
  - Fix nested __attribute__(__aligned__(N)) struct printing order.
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Viktor Malik <vmalik@redhat.com> - 1.25-1
changelog:
  - Resolves: rhbz#2190484
  - Build with system libbpf
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-30780
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 1.27-2.0.1
changelog:
  - Add patch number and remove LIBBPF_EMBEDDED
  - Add Buildrequires python3 (gc-taifu@linux.alibaba.com)


author: Jakub Jelinek <jakub@redhat.com> 0.13-6
changelog:
  - DW_FORM_implicit_const handling fixes (sw#27212, sw#27213)
  - temporarily build odr tests with -gdwarf-4 as they are incompatible with
    DWARF 5


author: Coty Sutherland <csutherl@redhat.com> - 1:4.20-10
changelog:
  - Drop unnecessary javax16.api.jar (again)
  - Add dependency on javapackages-tools since the ecj binary requires it to run


author: Peter Jones <pjones@redhat.com> - 3-2
changelog:
  - Always provide macros for efi_arch and efi_alt_arch (and their _upper
    variants), and make efi_has_arch and efi_has_alt_arch 0 when they will be
    wrong.  This ensures everything can always expand when we're on a non-efi
    architecture.


author: Mark Wielaard <mjw@redhat.com> - 0.186-1
changelog:
  - Upgrade to upstream 0.186
    - debuginfod-client: Default $DEBUGINFOD_URLS is computed from
      drop-in files /etc/debuginfod/*.urls rather than
      hardcoded into the /etc/profile.d/debuginfod*
      scripts.
      Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings
      for skipping large/slow transfers.
      Add $DEBUGINFOD_RETRY for retrying aborted lookups.
    - debuginfod: Supply extra HTTP response headers, describing
      archive/file names that satisfy the requested buildid content.
      Support -d :memory: option for in-memory databases.
      Protect against loops in federated server configurations.
      Add -r option to use -I/-X regexes for grooming stale files.
      Protect against wasted CPU from duplicate concurrent requests.
      Limit the duration of groom ops roughly to rescan (-t) times.
      Add --passive mode for serving from read-only database.
      Several other performance improvements & prometheus metrics.
    - libdw: Support for the NVIDIA Cuda line map extensions.
      DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name
      are defined in dwarf.h. New functions dwarf_linecontext and
      dwarf_linefunctionname.
    - translations: Update Japanese translation.


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch
  - Add an explicit versioned requires from elfutils-debuginfod-client
    on elfutils-libs and elfutils-libelf.
  - Remove brew testsuite workarounds


author: Mark Wielaard <mjw@redhat.com> - 0.189-3
changelog:
  - Add elfutils-0.189-elf_getdata_rawchunk.patch
  - Add elfutils-0.189-debuginfod_config_cache-double-close.patch


author: Tomáš Mráz <tmraz@redhat.com> - 0.12-0.50.pre6
changelog:
  - drop disablement of TLS1.0 on second attempt to connect,
    it would not work correctly anyway and the code does not build
    with OpenSSL-1.1.0


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.51.pre6
changelog:
  - fix compatibility with OpenSSL 1.1 (#1423519)
  - make configure.ac recognize recent versions of GCC
  - apply patches automatically to ease maintenance


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.55.pre6
changelog:
  - drop support for JS engine that is no longer maintained
  - always build verbosely, drop outdated doc files


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-9
changelog:
  - Fix etags local command injection vulnerability (#2175190)
  - Fix htmlfontify.el command injection vulnerability (#2175179)
  - Fix ruby-mode.el local command injection vulnerability (#2175142)
  - Fix ob-latex.el command injection vulnerability (#2180590)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - Disable xwidgets (RHEL-14551)
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Add protection for LaTeX preview (CVE-2024-30204)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-11.el9_5.1
changelog:
  - Fix man.el shell injection vulnerability (RHEL-79021)
  - Eliminate use of obsolete patch syntax (RHEL-80450)


author: Xiaoping Liu <liuxiaoping@alibaba-inc.com> - 1:27.2-11.0.1.1
changelog:
  - Add doc sub package
  - update config.sub and config.guess for loongarch64 (Jingyun Hua)
  - cherry-pick `add sw patch #349896d0a48b80b530cfa5cc2bd1fc4ceff68e42`. (nijie@wxiat.com)


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Moved ctags to gctags to fit in the more powerful for C (but less
    general) exuberant ctags as the binary /usr/bin/ctags and the
    man page /usr/man/man1/ctags.1


author: Michael Fulbright <msf@redhat.com>
changelog:
  - joy a new version of emacs! Of note - no lockdir any more.
  - use post/preun sections to handle numerous GNU info files


author: Michael Fulbright <msf@redhat.com>
changelog:
  - added multibyte support back into emacs 20.2
  - added wmconfig for X11 emacs
  - fixed some errant buildroot references


author: David S. Miller <davem@dm.cobaltmicro.com>
changelog:
  - fix signals when linked with glibc on non-Intel architectures
    NOTE: This patch is not needed with emacs >20.2


author: Paul Fisher <pnfisher@redhat.com>
changelog:
  - upgrade to 20.5a
  - remove python-mode, wheelmouse support, and auctex menu
  - import emacs.desktop with icon from GNOME


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fix descriptions and summary
  - fix permissions for emacs niaries (what the hell does 1755 means for a
    binary?)
  - added missing, as per emacs Changelog, NCURSES_OSPEED_T compilation
    flag; without it emacs on Linux is making global 'ospeed' short which
    is not the same as 'speed_t' expected by libraries. (reported by Michal
    Jaegermann <michal@harddata.com>)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fix bug #2988
  - recompile patched .el files (suggested by Pavel.Janik@linux.cz)
  - prereq /sbin/install-info


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - added a security patch from RUS-CERT, which fixes
    bugs mentioned in "Advisory 200004-01: GNU Emacs 20"


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - let the build system handle gzipping man pages and stripping
  - added patch to increase keyboard buffer size


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - don't apply the unexelf patch - use a new unexelf.c file
    from the 21 source tree (this will go into the 20.7 tree)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Version 20.7
  - Add requirement for final newline to the default .emacs
  - redid the Xaw3d patch
  - checked all patches, discarded those we've upstreamed


author: Matt Wilson <msw@redhat.com>
changelog:
  - edited japanese patch not to patch configure
  - fixed a missing escaped \" in a wc string
  - merge japanese support to head of development


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - (from MSW) different compression on IA64 to avoid hangs
  - remove etags/ctags - use a separate package. Disable patch1


author: Matt Wilson <msw@redhat.com>
changelog:
  - don't build with -O2 on alpha until we can track down the compiler
    bug that causes crashes in the garbage collector
  - removed all the nox Japanese packages


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - include python mode and change in site-start.el related to this
  - some changes to the default .emacs


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - remove ctags.1 and etags.1 from the emacs etc directory
    (#18011)
  - fix the emacs-nox not to use the locale.alias in XFree86
    (#18548)... copy it into /usr/share/emacs and patch
    the startup files to use it. Argh.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix icon name in the .desktop file
  - don't have site-start.el "noreplace"
  - load psgml-init (if present) in the default site-start.el
    to avoid psgml modifying the file


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add /usr/share/emacs/site-lisp/site-start.d
  - change site-start.el so files in the above directory
    are automatically run on startup
  - don't set the ispell name in site-start.el, use the
    above directory instead


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add rpm-spec-mode after modifying (use Red Hat groups,
    from /usr/share/doc/rpm-version/GROUPS) and fixing
    colours(don't specify "yellow" on "bright") Also,
    use gpg, not pgp.
  - use it (site-start.el)
  - add mwheel
  - use it, in /etc/skel/.emacs


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - do locale.alias fix for emacs-nox only, as it somehow
    broke the subject line in gnus. Weird.
  - update to gnus 5.8.7


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add /usr/share/emacs/locale.alias , which had gone AWOL
  - update rpm-spec-mode to 0.11a, fresh from the author
    (Stig Bjorlykke <stigb@tihlde.org>). The changes we made
    are integrated.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Much cleaner site-start.d sourcing
  - Add more build dependencies
  - Add the emacs lisp reference info pages (RFE #44577)
  - Don't require tamago - just plug it in for Japanese support


author: Trond Eivind Glomsrød <teg@redhat.com> 20.7-42
changelog:
  - Update python-mode to the version in the python 2.2a3
  - Include po-mode in emacs, instead of including in gettext


author: Trond Eivind Glomsrød <teg@redhat.com> 20.7-43
changelog:
  - Add php-mode 0.9.9
  - Add URL (#54603)
  - don't run autoconf/libtoolize during build - they're broken
  - don't build on IA64 until they are fixed


author: Trond Eivind Glomsrød <teg@redhat.com> 21.1-0.1
changelog:
  - 21.1
  - Build on IA64 again - the default config now handles it
  - Drop all old patches
  - Misc cleanups
  - Update the elisp manual to 21-2.7
  - Deprecate the emacs-nox and emacs-X11 subpackages.
    Simplify build procedure to match.
  - Update php-mode to 1.0.0


author: Jens Petersen <petersen@redhat.com> 21.2-19
changelog:
  - own our libexec dir (#73984)
  - only set transient-mark-mode in dotemacs for Emacs (#75440)
  - update to latest config.{guess,sub}
  - use _datadir macro


author: Jens Petersen <petersen@redhat.com> 21.2-20
changelog:
  - add support for x86_64 and merge in s390 support from cvs
  - add alloca defines to amdx86-64.h (from SuSE)


author: Jens Petersen <petersen@redhat.com> 21.2-23
changelog:
  - set transient-mark-mode in dotemacs for Emacs not XEmacs (#75440)
  - update rpm-spec-mode.el to 0.12
    - define needed XEmacs compat functions in new rpm-spec-mode-init.el
  - tidy site-start.el
    - move python-mode setup to python-mode
  - don't build with sbin in path
  - use _libexecdir, _bindir and _sysconfdir
  - don't gzip info files explicitly
  - use tar's C and j options
  - generate lisp file-lists in single find sweeps over lisp and leim dirs
    - use -fprint and -fprintf
    - correct more dir ownerships


author: Jens Petersen <petersen@redhat.com>
changelog:
  - use LC_CTYPE rather than LANG to determine default encoding (#78678)
    [reported by starback@stp.ling.uu.se]


author: Jens Petersen <petersen@redhat.com> 21.2-24
changelog:
  - rpm-spec-mode update fixes
    - patch in XEmacs compat functions rather than defining them with apel
      macros in init file (#78764)
    - autoload "rpm-spec-mode" not "rpm-spec-mode.el" in same file
  - let emacs base also own leim dir to avoid startup warning about missing dir
    when -el and -leim aren't installed (#78764)


author: Jens Petersen <petersen@redhat.com> 21.2-27
changelog:
  - look at LANG after LC_CTYPE when checking for UTF-8 locale encoding
    in site-start.el (#79535)
  - don't set desktop file config(noreplace)


author: Jens Petersen <petersen@redhat.com> 21.2-29
changelog:
  - update to newer po-mode.el and po-compat.el from gettext-0.11.4
  - patch po-mode's po-replace-revision-date for when
    po-auto-replace-revision-date is nil (#71264)
  - update po-mode-init.el
  - examine LC_ALL before LC_CTYPE in site-start.el for utf-8 (#79535)
  - don't install etc/DOC files explicitly by hand
  - make sure all lisp .elc files are up to date
  - pass _smp_mflags to make
  - remove games that we shouldn't ship


author: Jens Petersen <petersen@redhat.com> - 21.2-31
changelog:
  - block input in allocate_vectorlike to prevent malloc hangs (#83600)
    [thanks to Jim Blandy]
  - set startup wmclass notify in desktop file


author: Jens Petersen <petersen@redhat.com> - 21.2-32
changelog:
  - set X copy'n'paste encoding to extended compound-text (#74100)
    by default in .emacs file [suggested by olonho@hotmail.com]
  - .emacs file cleanup (xemacs now has a separate init file)


author: Jens Petersen <petersen@redhat.com> - 21.3-1
changelog:
  - update to 21.3
  - no longer set compound-text-with-extensions in dotemacs, since it is now
    the default
  - emacs-21.2-pop.patch is no longer needed
  - update php-mode to 1.0.4


author: Jens Petersen <petersen@redhat.com> - 21.3-2
changelog:
  - add Mule-UCS for CJK utf-8 support (suggested by Akira Tagoh)
    and use it by default in CJK UTF-8 locale
  - move emacs-asian startup files into new lang-coding-systems-init.el
  - utf-8 setup in site-start.el is no longer needed in Emacs 21.3
  - generate filelist for site-lisp automatically like base lisp and leim
  - don't setup aspell in site-start.el
  - rename dotemacs to dotemacs.el and move former contents to new default.el


author: Jens Petersen <petersen@redhat.com> - 21.3-3
changelog:
  - use Mule-UCS utf-8 coding-system for CJK subprocess IO
  - no need to set fontset anymore in CJK locale


author: Jens Petersen <petersen@redhat.com> - 21.3-5
changelog:
  - move transient-mark-mode and global-font-lock-mode setting from default.el
    back to dotemacs, so as not to surprise old users (#90193)
    [reported by jik@kamens.brookline.ma.us]
  - change require-final-newline to query (default.el)
  - don't make a backup when applying browse-url-htmlview-84262.patch (#90226)
    [reported by mitr@volny.cz]


author: Jens Petersen <petersen@redhat.com> - 21.3-7
changelog:
  - use "setarch i386" to build on ix86 (#101818) [reported by Michael Redinger]
  - use __make to %build and %install
  - set keyboard coding-system for utf-8 in lang-coding-systems-init.el (#106929)
    [reported with fix by Axel Thimm]
  - add source url for MuleUCS
  - update base package description (#103551) [reported by Tim Landscheidt]


author: Jens Petersen <petersen@redhat.com> - 21.3-8
changelog:
  - comment out setting transient-mark-mode in skel .emacs (#102441,#90193)
    [reported by mal@gromco.com, Jonathan Kamens]
  - improve lang-coding-systems-init.el to set-language-environment for CJK
    utf-8 locale too and use utf-8 for default-coding-systems and
    terminal-coding-system (#111172) [Yoshinori Kuniga]
  - update rpm-spec-mode.el to newer one in xemacs package cvs (#105888) [Dams]
  - rename etags to etags.emacs and make etags a symlink to it at install time
    if it doesn't exist (#92256) [marc_soft@merlins.org]
  - apply editfns.c-Fformat-multibyte-davej.patch to fix multibyte code typo
    in Fformat [patch from Dave Jones]
  - add runtime requirements for XFree86-libs, image libraries, ncurses and zlib
  - improve -el and -leim package summaries
  - no longer configure build with redundant --with-gcc


author: Jens Petersen <petersen@redhat.com> - 21.3-9
changelog:
  - bring back emacs-nox subpackage (emacs built without X support) (#113001)
    [suggested by Frank Kruchio]
  - base emacs package now only contains emacs binary built with X support
    and no longer obsoletes emacs-nox
  - all the common files required by emacs and emacs-nox are now in emacs-common
  - update php-mode.el to 1.0.5
  - add missing rfc1345.el leim input method
  - update po-compat.el to version in gettext-0.13.1
  - update base package summary
  - add url for python-mode.el and php-mode.el
  - gctags is now a symlink to ctags.emacs


author: Mike A. Harris <mharris@redhat.com> 21.3-11
changelog:
  - Removed bogus Requires: XFree86-libs that was added in 21.3-8, as rpm
    find-requires will automatically pick up the dependancies on any runtime
    libraries, and such hard coded requires is not X11 implementation
    agnostic (#118471)


author: Jens Petersen <petersen@redhat.com> - 21.3-12
changelog:
  - update php-mode to 1.1.0
  - add emacs-21.3-no-rpath.patch so that /usr/X11R6/lib is not rpath'ed
  - require /bin/ln for %post (Tim Waugh, 119817)
  - move prereq for dev and /sbin/install-info to emacs-common
  - leim no longer requires emacs
  - use source site-lisp dir in %prep to setup site files
  - define and use site_lisp for buildroot in %install
  - default ispell dictionary to "english" for CJK locale
  - add comment to top of site-start.el about load order
  - turn on auto-compression-mode in default.el (114808)
  - set require-final-newline with setq (David Olsson,119141)
    and remove redundant next-line-add-newlines setting
  - update info_file list (Reuben Thomas,114729)


author: Jens Petersen <petersen@redhat.com> - 21.3-13
changelog:
  - unset focus-follows-mouse in default.el to make switching frames work for
    click-to-focus (Theodore Belding,114736)


author: Jens Petersen <petersen@redhat.com> - 21.3-15
changelog:
  - cleanup and update .desktop file
  - make emacs not appear in the desktop menu (Seth Nickell,132567)
  - move the desktop file from -common to main package
  - go back to using just gctags for ctags
  - etags is now handled by alternatives (92256)
  - improve the default frame title by prefixing the buffer name
    (Christopher Beland, 128110)
  - fix the names of some European aspell languages with
    emacs-21.3-lisp-textmodes-ispell-languages.patch (David Jansen, 122618)
  - fixing running "libtool gdb program" in gud with
    emacs-21.3-gud-libtool-fix.patch (Dave Malcolm, 130955)


author: Jens Petersen <petersen@redhat.com> - 21.3-16
changelog:
  - do not setup frame-title-format in default.el, since it will override
    setting by users (Henrik Bakken, 134520)
  - emacs-el no longer requires emacs for the sake of -nox users
    (Lars Hupfeldt Nielsen, 134479)
  - condition calling of global-font-lock-mode in default .emacs
    in case xemacs should happen to load it


author: Jens Petersen <petersen@redhat.com> - 21.3-18
changelog:
  - show emacs again in the desktop menu (132567)
  - require fonts-xorg-75dpi to prevent empty boxes at startup due to missing
    fonts (Johannes Kaiser, 137060)


author: Jens Petersen <petersen@redhat.com> - 21.3.50-0.20041111
changelog:
  - initial packaging of cvs emacs
    - leim and elisp manual now in main tarball
    - no leim subpackage anymore, so make common obsolete it
    - no longer need MuleUCS, nor rfc1345.el
    - buildrequire and use autoconf rather autoconf213
    - no longer need emacs-21.2-x86_64.patch,
      editfns.c-Fformat-multibyte-davej.patch
    - bring back game for now
    - TODO: some patches still need updating
    - fns.el no longer installed
    - remove /var/games for now
    - update filelist generation to single sweep
    - update info_files list


author: Jens Petersen <petersen@redhat.com> - 21.3-19
changelog:
  - prefer XIM status under-the-window for now to stop xft httx from dying
    (125413): add emacs-xim-status-under-window-125413.patch
  - default diff to unified format in .emacs


author: Jens Petersen <petersen@redhat.com> - 21.3-20
changelog:
  - workaround xorg-x11 modifier key problem with
    emacs-21.3-xterm-modifiers-137868.patch (Thomas Woerner, 137868)


author: Jens Petersen <petersen@redhat.com> - 21.3-21
changelog:
  - fix CAN-2005-0100 movemail vulnerability with movemail-CAN-2005-0100.patch
    (Max Vozeler, 146701)


author: Jens Petersen <petersen@redhat.com> - 21.3-22
changelog:
  - use prereq instead of contexts for common script requirements
    (Axel Thimm, 147791)
  - move emacs.png from common to main package


author: Jens Petersen <petersen@redhat.com> - 21.3-23
changelog:
  - install %{_bindir}/emacs-nox as a hardlink of the versioned binary
  - drop explicit lib requirements
  - use sed instead of perl to fix up filelists


author: Jens Petersen <petersen@redhat.com> - 21.3-24
changelog:
  - mark default.el as a noreplace config file (Pawel Salek, 149310)
  - only set keyboard-coding-system in xterms to fix problem with input
    Latin characters becoming prefixes and making emacs loop
    (Eddahbi Karim, 126007)
  - make emacs-el own its lisp directories
  - run latex-mode-hook in latex-mode (Martin Biely, 144083)
    - add emacs-21.3-latex-mode-hook-144083.patch


author: Jens Petersen <petersen@redhat.com> - 21.3-25
changelog:
  - add tramp-2.1.3 to site-lisp (David Woodhouse, 149703)
    - move removal of info dir to after its installation
    - add tramp-init.el to put tramp into load-path


author: Jens Petersen <petersen@redhat.com> - 21.3-27
changelog:
  - use alternatives to switch _bindir/emacs between emacs and emacs-nox
    (Henning Schmiedehausen, #151067)
    - remove emacs and emacs-nox from bindir
    - prereq alternatives for emacs and emacs-nox
    - add post and postun scripts to handle alternatives
  - buildrequire xorg-x11-devel instead of XFree86-devel
  - really include and apply emacs-21.3-latex-mode-hook-144083.patch
  - make emacs and emacs-nox own _datadir/emacs/version too


author: Jens Petersen <petersen@redhat.com> - 21.4-1
changelog:
  - update to 21.4 movemail vulnerability release
    - no longer need movemail-CAN-2005-0100.patch
  - replace %{_bindir}/emacs alternatives with a wrapper script (Warren Togami)
    to prevent it from disappearing when upgrading (Michal Jaegermann, 154326)
    - suffix the X emacs binaries with -x and the no X binaries with -nox
    - the wrapper script %{_bindir}/emacs-%version runs emacs-x if installed or
      otherwise emacs-nox.  %{_bindir}/emacs is a symlink to the wrapper
  - make emacs and emacs-nox own the subdirs in %{_libexecdir}
  - add a bunch of fixes from debian's emacs21_21.4a-1 patch:
      battery-acpi-support.dpatch, bzero-and-have-stdlib.dpatch,
      coding-region-leak.dpatch, detect-coding-iso2022.dpatch,
      fix-batch-mode-signal-handling.dpatch, pcl-cvs-format.dpatch,
      python-completion-ignored-extensions.dpatch,
      remote-files-permissions.dpatch, save-buffer.dpatch, scroll-margin.dpatch,
      xfree86-4.3-modifiers.dpatch
    - add fix-x-vs-no-x-diffs.dpatch
      - define emacs_libexecdir
      - build both emacs and emacs-nox as %{version}.1 and move common DOC file
        to emacs-common
      - suffix version in fns-%{version}.1.el with -x and -nox respectively
  - add 100 to elisp patches


author: Jens Petersen <petersen@redhat.com> - 21.4-2
changelog:
  - update etags to 17.11 (idht4n@hotmail.com, 151390)
    - add etags-14.21-17.11-diff.patch
  - replace i386 setarch redefinitions of __make and makeinstall with
    emacs-21.4-setarch_for_loadup-101818.patch and setting SETARCH on i386
    (Jason Vas Dias, 101818)


author: Jens Petersen <petersen@redhat.com> - 21.4-4
changelog:
  - don't accidently exclude emacsclient from common package
    (Jonathan Kamens, #157808)
  - traditional Chinese desktop file translation (Wei-Lun Chao, #157287)


author: Jens Petersen <petersen@redhat.com> - 21.4-5
changelog:
  - update cc-mode to 5.30.9 stable release to address font-lock problems
    (126165,148977,150197,155292,158044)


author: Jens Petersen <petersen@redhat.com>
changelog:
  - move setting of require-final-newline from default.el to a comment in default
    .emacs (Ralph Loader, 119141)


author: Jens Petersen <petersen@redhat.com> - 21.4-6
changelog:
  - merge in changes from emacs22.spec conditionally
    - define emacs21 rpm macro switch to control major version and use it
  - update tramp to 2.0.49


author: Jens Petersen <petersen@redhat.com> - 21.4-7
changelog:
  - update rpm-spec-mode.el to cvs revision 1.17 (Ville Skyttä)
    - fixes expansion of %{?dist}
  - replace emacs-21.4-setarch_for_loadup-101818.patch with backport
    emacs-21-personality-linux32-101818.patch from cvs (Jan Djärv)
    which also turns off address randomization during dumping (Masatake Yamato)
    - no longer need to pass SETARCH to make on i386 (#160814)
  - move ownership of %{_datadir}/emacs/ and %{_datadir}/emacs/%{version}/
    from emacs to emacs-el and emacs-leim subpackages
  - don't build tramp html and dvi documentation
  - drop src/config.in part of bzero-and-have-stdlib.dpatch to avoid
    compiler warnings


author: Jens Petersen <petersen@redhat.com>
changelog:
  - fix name of aspell-es dictionary (#147964)
    - update emacs-21.3-lisp-textmodes-ispell-languages.patch


author: Jens Petersen <petersen@redhat.com> - 21.4-9
changelog:
  - fix keyboard-coding-system on console for utf-8 (Dawid Gajownik, #173855)
  - update etags to latest cvs (Hideki Iwamoto, #173023)
    - replace etags-14.21-17.11-diff.patch with etags-update-to-cvs.patch
  - update smtpmail.el to latest cvs version for better authentication support
    with smtpmail-cvs-update.patch (Alberto Brizio, #167804)


author: Jens Petersen <petersen@redhat.com> - 21.4-11
changelog:
  - avoid building with -fstack-protector on i386 to prevent crashing
    (Jonathan Kamens, #174730)
  - require xorg-x11-fonts-ISO8859-1-75dpi instead of xorg-x11-fonts-75dpi
    for modular X (#174614)


author: Jens Petersen <petersen@redhat.com> - 21.4-12
changelog:
  - add mule-cmd.el-X11-locale.alias-173781.patch to correct location of X11
    locale.alias file (Paul Dickson, #173781)
  - fix autoload of php-mode in php-mode-init.el (Christopher Beland, #179484)


author: Jens Petersen <petersen@redhat.com> - 21.4-13
changelog:
  - buildrequire libXaw-devel for menus and scrollbar
  - pass -R to setarch to disable address randomization during dumping
    (Sam Peterson, #174736)
  - install cc-mode.info correctly (Sam Peterson, #182084)
  - fix sort-columns not to use deprecated non-posix sort key syntax
    with sort-columns-posix-key-182282.patch (Richard Ryniker, #182282)
  - use system-name function not variable when setting frame-title-format in
    /etc/skel/.emacs for XEmacs users hitting .emacs


author: Jens Petersen <petersen@redhat.com>
changelog:
  - avoid backup for fix-x-vs-no-x-diffs.dpatch (Ian Collier, #183503)
  - remove the old ccmode info manual (#182084)


author: Jens Petersen <petersen@redhat.com> - 21.4-14
changelog:
  - bring back setarch for i386 with -R option in spec file and drop
    emacs-21-personality-linux32-101818.patch since it no longer seems
    sufficient with recent kernels (Sam Peterson, #174736)
  - buildrequire giflib-devel instead of libungif-devel


author: Chip Coldwell <coldwell@redhat.com> - 22.0.92-1
changelog:
  - new pretest version
  - removed almost all emacs 21 patches from emacs 22
  - clean up spec file,
  - many new BuildRequires (David Woodhouse #221250)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.93-1
changelog:
  - new pretest version
  - removed setarch since new dumper copes with execshield
  - clean up site initialization files (varions #176171)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.93-4
changelog:
  - fixup loaddefs.el dependencies (Dan Nicolaescu #176171)
  - add BuildRequires: automake (changes to Makefile.in)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.99-1
changelog:
  - new (last?) pretest tarball from FSF
  - update to php-mode-1.2.0 (Ville Skyttä Resolves: bz235941)
  - use /etc/alternatives instead of wrapper script


author: Chip Coldwell <coldwell@redhat.com> - 22.0.99-4
changelog:
  - format of freed blocks changed between glibc 2.5.90-21 and 2.5.90-22
  - BuildRequires: glibc >= 2.5.90-22 (Ulrich Drepper)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.990-1
changelog:
  - new pretest tarball from FSF
  - removed Ulrich Drepper's patch to prevent mmapped pages during dumping
    removed BuildRequires: glibc >= 2.5.90-22
    (bug traced to glibc Resolves: bz239344)
  - fix alternatives removal scriptlet (Resolves: bz239745)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.990-2
changelog:
  - revert all spec file changes since 22.0.95-1 (Resolves: bz239745)
  - new pretest tarball from FSF (Resolves: bz238234)
  - restore php-mode (Resolves: bz235941)


author: Chip Coldwell <coldwell@redhat.com> - 22.1-1
changelog:
  - move alternatives install to posttrans scriptlet (Resolves: bz239745)
  - new release tarball from FSF (Resolves: bz245303)
  - new php-mode 1.2.0


author: Chip Coldwell <coldwell@redhat.com> - 22.1-2
changelog:
  - add pkgconfig file for emacs-common and virtual provides (Resolves: bz242176)
  - glibc-open-macro.patch to deal with glibc turning "open" into a macro.
  - leave emacs info pages in default section (Resolves: bz199008)


author: Chip Coldwell <coldwell@redhat.com> - 22.1-4
changelog:
  - fix pkgconfig path (from pkg-config to pkgconfig (Jonathan Underwood)
  - use macro instead of variable style for buildroot.


author: Chip Coldwell <coldwell@redhat.com> - 22.1-5
changelog:
  - require xorg-x11-fonts-ISO8859-1-100dpi instead of 75dpi (Resolves: bz281861)
  - drop broken python mode (Resolves: bz262801)


author: Chip Coldwell <coldwell@redhat.com> 23.0.60-2
changelog:
  - New upstream tarball (fixes bz435767)
  - configure tweaks
  - drop files.el patch (now upstream)
  - drop parallel build patch (now upstream)


author: Chip Coldwell <coldwell@redhat.com> 22.2-1
changelog:
  - revert back to emacs-22.2 (bz443639)
  - update to php-mode-1.4.0
  - update to rpm-spec-mode.el v0.12.1x (bz432209)
  - patch rpm-spec-mode to use compilation mode (bz227418)
  - fix the Release tag (bz440624)
  - drop superfluous configure options
  - move the new icons into the right destination directory
  - the heuristics for detecting address space randomization in the emacs dumper
    seem insufficient, so bring back setarch -R


author: Jens Petersen <petersen@redhat.com> - 1:22.3-1
changelog:
  - update to 22.3 (#461448)
  - emacs-22.1.50-sparc64.patch and emacs-22.1.50-regex.patch no longer needed
  - update rpm-spec-mode.el to look for fields at bol (#466407)


author: Daniel Novotny <dnovotny@redhat.com> 1:22.3-5
changelog:
  - fix #474578 - /usr/bin/emacs link not updated on upgrade
    (added a script to scan the alternatives and update them)


author: Jens Petersen <petersen@redhat.com> - 1:23.0.93-3
changelog:
  - drop igrep since lgrep and rgrep are maintained in emacs now
  - specify the list of *-init.el files to be install explicitly


author: Daniel Novotny <dnovotny@redhat.com> 1:23.0.93-5
changelog:
  - revoked default.el change (#508033)
  - added build dependency: librsvg2-devel (#507852)
  - added dependency: aspell (#443549)


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1-11
changelog:
  - Update macros.xemacs to treat epoch correctly and be consistent with xemacs package
  - Use site_start_d macro consistently


author: Jens Petersen <petersen@redhat.com> - 1:23.1-19
changelog:
  - m17n-lib-flt requires m17n-db-flt so no longer need to require explicitly
    m17n-db-datafiles for complex text rendering (#542657)


author: Karel Klic <kklic@redhat.com> 1:23.1-22
changelog:
  - Removed invalid URL for rpm-spec-mode.el. This mode is no longer
    found on Internet in this version.


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1-25
changelog:
  - Add --eval '(progn (setq load-path (cons "." load-path)))' to byte
    compilation macro for packaging add-ons


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1-26
changelog:
  - Fix broken byte compilation of emacs2.py and emacs3.py with the relevant
    python binaries - requires turning off brp-python-bytecompile script


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1.94-4
changelog:
  - Remove unnecessary buildroot tag
  - Remove explicit dependency on librsvg2 (but keep BuildRequires for
    librsvg2-devel)
  - Add properly versioned Provides for emacs(bin)
  - Remove long unneeded Obsoletes for emacs-leim
  - Fix summary for emacs-el


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1.94-5
changelog:
  - Fix typo in spec file changelog
  - Use standard %patch macro to apply all patches to silent rpmlint warnings


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1.96-2
changelog:
  - Remove po-mode files since they are now packaged separately as a sub-package
    of gettext (RHBZ #579452)


author: Karel Klíč <kklic@redhat.com> - 1:23.2-4
changelog:
  - Add patch to fix rhbz#595546 hideshow library matches wrong parenthesis
    under certain circumstances
  - Removed %clean section


author: Karel Klic <kklic@redhat.com> - 1:23.2-6
changelog:
  - Removed Obsoletes: emacs-nxml-mode, it was obsoleted in F-11
  - Added COPYING to emacs-el, moved COPYING in emacs-common to %doc


author: Karel Klic <kklic@redhat.com> - 1:23.2-11
changelog:
  - Own /usr/bin/emacs (rhbz#614935)
  - Updated the handling of alternatives to match
    https://fedoraproject.org/wiki/Packaging:Alternatives


author: Karel Klic <kklic@redhat.com> - 1:23.2-12
changelog:
  - Mention xdg-open in browse-url-default-browser docstring (rhbz#624359)
    Updates emacs-23.1-xdg.patch


author: Karel Klic <kklic@redhat.com> - 1:23.2-13
changelog:
  - Removed transient-mark-mode suggestion from dotemacs.el, as this
    minor mode is enabled by default in recent versions of Emacs


author: Karel Klic <kklic@redhat.com> - 1:23.2-16
changelog:
  - Removed dependency on both hunspell and aspell. Emacs does not
    _require_ spell checker, e.g. if user wants to uninstall one, there
    is no reason why Emacs should also be uninstalled. Emacs can run one
    like it can run GDB, pychecker, (La)TeX, make, gcc, and all VCSs out
    there.
  - Removed conflict with old gettext package
  - Cleaned spec file header
  - Removed gcc-4.5.0 specific CFLAGS


author: Karel Klic <kklic@redhat.com> - 1:23.3-2
changelog:
  - Another attempt to fix the handling of alternatives (rhbz#684447)
    The current process loses alternatives preference on every upgrade,
    but there seems to be no elegant way how to prevent this while
    having versioned binaries (/bin/emacs-%{version}) at the same time.
  - Removed 'rm -rf %{buildroot}' from %install section


author: Ville Skyttä <ville.skytta@iki.fi> - 1:23.3-3
changelog:
  - Use UTC timestamps in rpm-spec-mode changelog entries by default (rhbz#672350)
  - Consider *.elc in addition to *.el when loading files from site-start.d (rhbz#672324)


author: Karel Klíč <kklic@redhat.com> - 1:23.3-5
changelog:
  - Removed %defattr from %files sections, as RPM no longer needs it
  - Removed %dir %{_libexecdir}/emacs and similar from emacs and
    emacs-nox packages, as the directories are used and present only in
    emacs-common (rhbz#704067)


author: Ville Skyttä <ville.skytta@iki.fi> - 1:23.3-7
changelog:
  - Use custom-set-variables for customizable variables in .emacs (#716440).
  - Move frame-title-format default from .emacs to default.el (#716443).


author: Karel Klíč <kklic@redhat.com> - 1:23.3-8
changelog:
  - Updated release archive to 23.3a, which includes grammar files that are
    necessary to modify Semantic parsers


author: Karel Klíč <kklic@redhat.com> - 1:23.3-10
changelog:
  - Keep COPYING and NEWS in the etc subdir, and symlinks in the docs (rhbz#714212)
    Author: fedora.dm0@gmail.com


author: Ville Skyttä <ville.skytta@iki.fi> - 1:23.3-11
changelog:
  - Build with gpm and liblockfile support.
  - Drop ssl.el (superseded by tls.el).
  - Update php-mode to 1.5.0.


author: Karel Klíč <kklic@redhat.com> - 1:23.3-19
changelog:
  - Added patch to handle CVE-2012-0035: CEDET global-ede-mode file loading vulnerability (rhbz#773024)


author: Karel Klíč <kklic@redhat.com> - 1:24.0.94-1
changelog:
  - Update to the newest prerelease
  - Remove unpatched files in the lisp directory, where all files are
    installed


author: Karel Klíč <kklic@redhat.com> - 1:24.1-3
changelog:
  - Fix org-mode to work without emacs-el installed. rhbz#830162
  - Fix building without gets function, which is removed from recent version of glibc.


author: Karel Klíč <kklic@redhat.com> - 1:24.1-6
changelog:
  - Fix CVE-2012-3479: Evaluation of 'eval' forms in file-local variable
    sections, when 'enable-local-variables' set to ':safe'


author: Karel Klíč <kklic@redhat.com> - 1:24.2-1
changelog:
  - Updated to the newest upstream release
  - Switched from bz2 upstream package to xz
  - Make the spec file usable on EL6
  - Removed the nogets and CVE-2012-3479 patches, because the upstream
    package fixes the associated issues
  - Added GFDL license to emacs-common package


author: Karel Klíč <kklic@redhat.com> - 1:24.2-2
changelog:
  - Removed focus-init.el which used to set focus-follows-mouse to nil.
    It is set to nil by default in Emacs 24.2.


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1:24.2-11
changelog:
  - Remove %config from %{_sysconfdir}/rpm/macros.*
    (https://fedorahosted.org/fpc/ticket/259).
  - Fix broken spec-file changelog entry.


author: Petr Hracek <phracek@redhat.com> - 1:24.3-1
changelog:
  - Updated to the newest upstream release
  - solved problem with distribution flag in case of rhel
  - rcs-checking not availble anymore
  - emacs22.png are not installed anymore


author: Petr Hracek <phracek@redhat.com> - 1:24.3-3
changelog:
  - Fix for emacs bug 112144, style_changed_cb (#922519)
  - Fix for emacs bug 112131, bell does not work (#562719)


author: Jan Synáček <jsynacek@redhat.com> - 1:24.5-9
changelog:
  - emacs "deadlocked" after using mercurial with huge amounts of ignored files in the repository (#1232422)
  - GDB interface gets confused by non-ASCII (#1283412)


author: Jan Synáček <jsynacek@redhat.com> - 1:25.0.95-3
changelog:
  - workaround: emacs build failure due to high memory consumption on ppc64 (#1356919)
    (patch provided by Sinny Kumari)


author: Richard W.M. Jones <rjones@redhat.com> - 1:25.3-2
changelog:
  - Rebuild to try to fix: libwebkit2gtk-4.0.so.37: undefined symbol:
    soup_auth_manager_clear_cached_credentials


author: Jan Synáček <jsynacek@redhat.com> - 1:26.1-3
changelog:
  - Refix: Emacs crashes when loading color fonts (#1519038)
    + emacs SIGABRT after XProtocolError on displaying an email in Gnus (#1591223)


author: Bhavin Gandhi <bhavin7392@gmail.com> - 1:27.1-1
changelog:
  - emacs-27.1 is available (#1867841)
  - Add systemd-devel to support Type=notify in unit file
  - Build with Cairo and Jansson support
  - Remove ImageMagick dependency as it's no longer used


author: Jan Synáček <jsynacek@redhat.com> - 1:27.1-2
changelog:
  - use make macros (original patch provided by Tom Stellard)
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Mike FABIAN <mfabian@redhat.com> - 2.0.0-1
changelog:
  - Update to 2.0.0
  - Update translations because of the merge of the engines (de, pl, uk updated)
  - Update emoji annotations from CLDR
  - Do not hardcode icon names in desktop files
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/17)
  - Change the default for “Unicode symbols and emoji predictions” to “False”
  - Merge all typing-booster engines into one
  - Change the UI of the setup tool to make it possible to select
    multiple input methods and dictionaries
  - Move the buttons to learn from a file and to delete learned data to the options tab
  - Use the same “About” dialog in the setup tool as in emoji-picker


author: Mike FABIAN <mfabian@redhat.com> - 2.0.2-1
changelog:
  - Update to 2.0.2
  - Better Tab handling, use Tab to switch to the next candidate, not to commit
  - Update to 2.0.1
  - Update translations from zanata (ja updated)
  - Update emoji annotations from CLDR
  - Fix some bugs in the usage of “prefix” for prefixes other than “/usr” (For FreeBSD)
  - Make itb_util.get_ime_help() work on FreeBSD
  - Update UnicodeData.txt to Unicode 11.0.0
  - Remove useless 't-nil vi-base': 'vi-base.mim', from M17N_INPUT_METHODS
  - Remove extra space in entry for sa-IAST input method to make it work
  - Show in the setup tool in the input listbox whether minput_open_im() succeeded.
  - Use the rocket icon emoji_u1f680.svg from the “Noto Color Emoji” font


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - emoji-picker: Show a concise description of a selected emoji in the header bar
  - Update the setup UI when settings are changed outside of the setup UI
  - Migrate IBusConfig to GSettings (The old settings are
    unfortunately lost, so one has to open the setup tool
    and recreate ones favourite settings).
  - Read emoji data files always in UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-3
changelog:
  - Make “make check“ test cases work again when building the rpm
    (To avoid that rpmdiff in the errata tool reports a problem)
  - Related: rhbz#1619153


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-5
changelog:
  - Prevent also BackSpace from reopening a preedit when the
    option “Arrow keys can reopen a preedit” is off
  - Resolves: rhbz#1925030


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-7
changelog:
  - Avoid verbatim bidi formatting characters in source comments
    to make rpminspect complain less.
  - Resolves: RHEL-2237


author: Jack Magne <jmagne@redhat.com> - 1.1.2-10
changelog:
  - Resolves: rhbz#1679659 - esc changes blocked until gating tests are added.
  - Added notification list in yaml file, so entities are notified of changes.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-11
changelog:
  - Resolves: rhbz#1724787 - ESC - HTTP GET Requests incorrectly Being Sent To TPS for Token Operations [8.2] 
  - Resolves: rhbz#1734117 - ESC does not detect/recognize both clean and formatted (with phone home) smart cards
  - Resolves: rhbz#1733645 - Gemalto, CAC, SCP01 cards are not detected by HP keyboard KUS1206 with builtin smartcard reader


author: Jack Magne <jmagne@redhat.com> - 1.1.2-12
changelog:
  - Resolves: rhbz#1646486 - alt tokens not detected by ESC
  - Resolves: rhbz#1774750 - ESC's unusual behavior after formatting a blank Gemalto token
  - Resolves: rhbz#1774770 - After formatting a Gemalto/SCP03 token, ESC shows incorrect Issuer, Issued To, Status, and Token ID details


author: Jack Magne <jmagne@redhat.com> - 1.1.2-20
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-21
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z], bump release # respin.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-23
changelog:
  - Resolves: rhbz#1970565 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z], bump release # respin.
  - Adjust final pcsc-lite package requirement.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-24
changelog:
  - Resolves: rhbz#1905691 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC.


author: Peter Hutterer <peter.hutterer@redhat.com> 2.7.0-8
changelog:
  - Split the lib into its own subpackage, it's LGPLv3+
  - remove utouch-evemu Obsoletes line, it's been over 5 years


author: Marek Kasik <mkasik@redhat.com> - 40.1-5
changelog:
  - Use tmp dir as containing folder for non-native files
  - Backport fixes for issues found by Coverity Scan
  - Fix some other issues found by Coverity Scan
  - Resolves: #1975150


author: Kristian Høgsberg <krh@redhat.com> 0.3.4-1
changelog:
  - New upstream version again.
  - Add nautilus property page .so's.
  - Stop scrollkeeper from doing what it does.


author: Kristian Høgsberg <krh@redhat.com> 0.5.0-2
changelog:
  - Spec file update from Brian Pepple <bdpepple@ameritech.net> (#123527):
    - Drop Requires for gtk2 & poppler, devel soname pulls these in.
    - Disable GConf schema install in install section.
    - Add BR for gnome-doc-utils, nautilus & libXt-devel.
    - Use smp_mflags.
    - Drop BR for desktop-file-utils,gcc & gcc-c++.
    - Add URL & full source.
    - Use more macros.
    - Fix ownership of some directories.
    - Drop depreciated prereq, and use requires.
    - Use fedora extras preferred buildroot.
    - Various formatting changes.


author: Kristian Høgsberg <krh@redhat.com> 0.5.3-1
changelog:
  - Bump poppler_version to 0.5.2.
  - Package icons and add %post and %postun script to update icon cache.


author: Matthias Clasen <mclasen@redhat.com> - 2.20.1-5
changelog:
  - Fix a problem in the tiff patch
  - Turn off the dvi backend for now, since the tetex kpathsea 
    gives linker errors on x86_64


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.27.1-2
changelog:
  - Include /usr/include/evince directory (#483306).
  - Don't run /sbin/ldconfig in post scriptlet (no shared libs in that pkg).
  - Let -libs post/postun run /sbin/ldconfig directly.


author: Marek Kasik <mkasik@redhat.com> - 2.29.91-2
changelog:
  - Use Type 1 fonts when viewing DVI files
  - Use correct name when the font is mapped
  - Related: #562648


author: Marek Kasik <mkasik@redhat.com> - 2.30.0-6
changelog:
  - rpmlint related changes:
  -   Don't define RPATH
  -   Remove static libs
  -   Avoid expansion of some macros in changelog


author: Marek Kasik <mkasik@redhat.com> - 2.30.1-2
changelog:
  - Make sure dot_dir exists before creating last_settings file
  - backported from upstream
  - Related: #586343


author: Marek Kasik <mkasik@redhat.com> - 2.31.3-5.20100621git
changelog:
  - Don't try to install evince.schemas file (it doesn't exist anymore)
  - Remove unused patches
  - Resolves: #595217


author: Marek Kasik <mkasik@redhat.com> - 2.31.5-3
changelog:
  - Move %doc files to evince-libs subpackage
  -   see Subpackage Licensing in Packaging:LicensingGuidelines


author: Marek Kasik <mkasik@redhat.com> - 2.31.5-4
changelog:
  - Restore io mode when returning from opening of synctex file
  - Patch by David Tardon
  - Resolves: #613916


author: Marek Kasik <mkasik@redhat.com> - 2.31.5-5
changelog:
  - Don't sigsegv when a page is manually entered
  - Remove 0001-pdf-Fix-build-when-text_layout-is-not-available.patch


author: Marek Kasik <mkasik@redhat.com> - 2.91.1-1
changelog:
  - Update to 2.91.1
  - Remove evince-2.91.0-introspection-build-fix.patch
  - Add evince-2.91.1-requires.patch


author: Marek Kasik <mkasik@redhat.com> - 2.91.5-2
changelog:
  - Remove evince-CVE-2010-2640_CVE-2010-2641_CVE-2010-2642_CVE-2010-2643.patch
  - Change the way thumbnailer is integrated with system


author: Marek Kasik <mkasik@redhat.com> - 3.3.5-1
changelog:
  - Update to 3.3.5
  - Remove evince-t1font-mapping.patch (committed upstream)
  - Solve build issues by running autogen.sh


author: Marek Kasik <mkasik@redhat.com> - 3.8.0-2
changelog:
  - Don't remove the NoDisplay key from evince.desktop because
  - it has been already removed
  - Related: gnome#634245


author: Marek Kasik <mkasik@redhat.com> - 3.14.1-6
changelog:
  - Scroll to page on which is the search result selected by user
  - when not in continuous mode.
  - Resolves: #1162254


author: Marek Kasik <mkasik@redhat.com> - 3.15.4-2
changelog:
  - Revert fix of centering of documents when printing with a manual scale.
  - This caused problems with printing of landscape documents.
  - Resolves: #1173832


author: David King <amigadave@amigadave.com> - 3.17.4-1
changelog:
  - Update to 3.17.4
  - Update URL
  - Use pkgconfig for BuildRequires
  - Use license for COPYING
  - Update man page glob in files section


author: Florian Weimer <fweimer@redhat.com> - 3.25.4-2
changelog:
  - Rebuild with binutils fix for ppc64le (#1475636)
  - Fix s390x build issue related to MY_CPU_BE preprocessor conditional


author: Marek Kasik <mkasik@redhat.com> - 3.28.2-3
changelog:
  - Change build requirement of kpathsea-devel to texlive-lib-devel
  - Require gcc and gcc-c++
  - Resolves: #1600511


author: Marek Kasik <mkasik@redhat.com> - 3.29.90-1
changelog:
  - Update to 3.29.90
  - Remove unneeded patches
  - Handle renamed evince* files
  - Don't list missing README


author: Marek Kasik <mkasik@redhat.com> - 3.30.0-1
changelog:
  - Update to 3.30.0
  - Remove browser-plugin, it was disabled by default
  - by upstream (see upstream issue #968)


author: Felipe Borges <feborges@redhat.com> - 3.38.0-2
changelog:
  - Split evince-thumbnailer into its own package
  - See https://github.com/fedora-silverblue/issue-tracker/issues/98


author: Kalev Lember <klember@redhat.com> - 40.1-1
changelog:
  - Update to 40.1
  - Remove various minimum version requires
  - Remove old obsoletes
  - Don't use ldconfig_scriptlets
  - Filter private library provides


author: Felipe Borges <feborges@redhat.com> - 40.1-3
changelog:
  - Split evince-previewer into its own package
  - See https://github.com/fedora-silverblue/issue-tracker/issues/122


author: David Malcolm <dmalcolm@redhat.com> - 0.0.99-1
changelog:
  - update from 0.0.98 to 0.0.99
  - increased libsoup requirement to 2.2.0 to match configuration script


author: David Malcolm <dmalcolm@redhat.com> - 1.0.0-2
changelog:
  - fixed various warnings in the calendar code 
    (filed upstream here: http://bugzilla.ximian.com/show_bug.cgi?id=66383)


author: David Malcolm <dmalcolm@redhat.com> - 1.0.1-1
changelog:
  - update from 1.0.0 to 1.0.1
  - removed patch that fixed warnings in calendar code (now in upstream tarball)


author: David Malcolm <dmalcolm@redhat.com> - 1.0.2-2
changelog:
  - added patch to fix build on x86_64 (had multiple definitions of mutex code in libdb/dbinc.mutex.h)


author: David Malcolm <dmalcolm@redhat.com> - 1.0.2-3
changelog:
  - added workaround for a backend leak that causes the "contacts" calendar 
  backend to hold open an EBook for the local contacts (filed upstream at:
  http://bugzilla.ximian.com/show_bug.cgi?id=68533 ); this was causing e-d-s to
  never lose its last addressbook, and hence never quit.  We workaround this by
  detecting this condition and exiting when it occurs, fixing bug #134851 and #134849.


author: David Malcolm <dmalcolm@redhat.com> - 1.0.2-4
changelog:
  - Added patch to fix usage of GINT_TO_POINTER/GPOINTER_TO_INT for calendar backend GType hash table, breaking on ia64  (#136914)


author: David Malcolm <dmalcolm@redhat.com> - 1.0.2-5
changelog:
  - Added fix for #141283 (upstream bugzilla XB 59904), a backported calendar 
  optimisation patch posted to upstream development mailing list here:
  http://lists.ximian.com/archives/public/evolution-patches/2004-November/008139.html


author: David Malcolm <dmalcolm@redhat.com> - 1.0.2-6
changelog:
  - Amortize writes to a local cache of a webcal calendar, fixing further aspect of #141283 (upstream bugzilla #70267), as posted to mailing list here:
  http://lists.ximian.com/archives/public/evolution-patches/2004-December/008338.html
  (The groupwise part of that patch did not cleanly apply, so I removed it).


author: David Malcolm <dmalcolm@redhat.com> - 1.0.3-1
changelog:
  - update from upstream 1.0.2 to 1.0.3:
    * Address Book
      - prevent e_book_commit_contact from crashing on multiple calls (Diego Gonzalez)
      - prevent file backend from crashing if uid of vcard is NULL (Diego Gonzalez)

    * Calendar
              - fix libical build for automake 1.9 (Rodney)
      - fix putenv usage for portability (Julio M. Merino Vidal)

    * Updated Translations:
      - sv (Christian Rose)

  - Removed patches to fix build on x86_64 and calendar optimisation for XB59004 as these are in the upstream tarball


author: David Malcolm <dmalcolm@redhat.com> - 1.0.3-2
changelog:
  - fixed packaging of translation files to reflect upstream change to GETTEXT_PACKAGE being evolution-data-server-1.0 rather than -1.5


author: David Malcolm <dmalcolm@redhat.com> - 1.1.4.1-1
changelog:
  - Update from 1.0.3 to 1.1.4.1
  - Updated eds_major from 1.0 to 1.2; fixed translation search path.
  - Removed 64-bit patch for calendar backend hash table; upstream now stores pointers to ECalBackendFactory, rather than GType
  - Removed calendar optimisation patch for part of part of bug #141283 as this is now in the upstream tarball
  - Added /usr/lib/evolution-data-server-%{eds_major} to cover the extensions, plus the camel code now in e-d-s, rather than evolution
  - Added /usr/share/pixmaps/evolution-data-server-%{eds_major} to cover the category pixmaps
  - Camel code from evolution is now in evolution-data-server:
    - Added camel-index-control and camel-lock-helper to packaged files
    - Added mozilla dependency code from the evolution package
    - Ditto for LDAP
    - Ditto for krb5
    - Ditto for NNTP support handling
    - Ditto for --enable-file-locking and --enable-dot-locking
  - Added requirements on libbonobo, libgnomeui, gnome-vfs2, GConf2, libglade2
  - Updated libsoup requirement from 2.2.1 to 2.2.2
  - Enabled gtk-doc


author: David Malcolm <dmalcolm@redhat.com> - 1.1.6-4
changelog:
  - added macro use_gtk_doc; added missing BuildRequires on gtk-doc; enabled gtk-doc generation on all platforms (had been disabled on ia64)


author: David Malcolm <dmalcolm@redhat.com> - 1.2.0-3
changelog:
  - Removed explicit run-time spec-file requirement on mozilla.
    The Mozilla NSS API/ABI stabilised by version 1.7.3
    The libraries are always located in the libdir
    However, the headers are in /usr/include/mozilla-%{mozilla_build_version}
    and so they move each time the mozilla version changes.
    So we no longer have an explicit mozilla run-time requirement in the specfile; 
    a requirement on the appropriate NSS and NSPR .so files is automagically generated on build.
    We have an explicit, exact build-time version, so that we can find the headers (without
    invoking an RPM query from the spec file; to do so is considered bad practice)
  - Introduced mozilla_build_version, to replace mozilla_version
  - Set mozilla_build_version to 1.7.6 to reflect current state of tree


author: David Malcolm <dmalcolm@redhat.com> - 1.2.2-3
changelog:
  - bumped libsoup requirement to 2.2.3; removed mozilla_build_version, using
    pkg-config instead for locating NSPRS and NSS headers/libraries (#158085)


author: David Malcolm <dmalcolm@redhat.com> - 1.3.5-1
changelog:
  - 1.3.5
  - Split eds_major (was 1.2) into eds_base_version (1.4) and eds_api_version
    (1.2) to correspond to BASE_VERSION and API_VERSION in configure.in; updated
    rest of specfile accordingly.
  - Removed upstreamed patch: 
    evolution-data-server-1.2.0-cope-with-a-macro-called-read.patch


author: David Malcolm <dmalcolm@redhat.com> - 1.3.5-2
changelog:
  - Added patch to use nspr rather than mozilla-nspr when doing pkg-config tests
    (Patch5: evolution-data-server-1.3.5-nspr_fix.patch)


author: David Malcolm <dmalcolm@redhat.com> - 1.3.8-1
changelog:
  - 1.3.8
  - Add -Werror-implicit-function-declaration to CFLAGS, to avoid 64-bit issues
    and add patch to fix these where they occur (patch 102)


author: David Malcolm <dmalcolm@redhat.com> - 1.3.8-4
changelog:
  - Remove -Werror-implicit-function-declaration from CFLAGS; this broke the
    configuration test for fast mutexes in the internal copy of libdb, and hence
    broke access to local addressbooks (#166742)
  - Introduce static_ldap macro; use it to link to static evolution-openldap 
    library, containing NTLM support for LDAP binds (needed by Exchange support)


author: David Malcolm <dmalcolm@redhat.com> - 1.3.8-5
changelog:
  - Add -Werror-implicit-function-declaration back to CFLAGS at the make stage, 
    after the configure, to spot 64-bit problems whilst avoiding breaking 
    configuration tests; expand patch 102 to avoid this breaking libdb's CFLAGS


author: David Malcolm <dmalcolm@redhat.com> - 1.4.0-1
changelog:
  - 1.4.0
  - Removed evolution-data-server-1.3.8-fix-libical-vsnprintf.c.patch; a version
    of this is now upstream (was patch 103, added in 1.3.8-2)


author: David Malcolm <dmalcolm@redhat.com> - 1.4.1-2
changelog:
  - Updated patch 102 (fix-implicit-function-declarations) to include fix for 
    http calendar backend (thanks to Peter Robinson)


author: David Malcolm <dmalcolm@redhat.com> - 1.4.1.1-2
changelog:
  - Updated license field to reflect change from GPL to LGPL
  - Remove all static libraries, not just those in /usr/lib; avoid listing libdir
    subdirectory so that we can be more explicit about the package payload (bug


author: David Malcolm <dmalcolm@redhat.com> - 1.5.3-2
changelog:
  - Update specfile and patch 5 (evolution-data-server-1.3.5-nspr_fix.patch) to
    use nss rather than mozilla-nss throughout


author: David Malcolm <dmalcolm@redhat.com> - 1.5.4-2
changelog:
  - added patch from David Woodhouse to validate reverse DNS domain before using 
    in SMTP greeting (patch 103, #151121)


author: David Malcolm <dmalcolm@redhat.com> - 1.5.4-3
changelog:
  - added patch to make the "imap4"/"IMAP4rev1" backend optional; disable it in 
    our packages; re-run automake since we have touched various Makefile.am 
    files; rerun intltoolize to avoid incompatibilities between tarball copy of
    intltool-merge.in and intltool.m4 in intltool package (@EXPANDED_LIBDIR@
    renamed to @INTLTOOL_LIBDIR@) (#167574)
  - explicitly list the camel providers and e-d-s extension files in the spec file


author: David Malcolm <dmalcolm@redhat.com> - 1.5.4-4
changelog:
  - updated patch 300 to remove usage of GNOME_COMPILE_WARNINGS from configure.in
    (since gnome-common might not be available when we rerun the autotools)


author: Matthew Barnes <mbarnes@redhat.com> - 1.7.1-1
changelog:
  - Update to 1.7.1
  - Bump eds_base_version from 1.6 to 1.8.
  - Disable evolution-data-server-1.2.0-validatehelo.patch (accepted upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.7.1-2
changelog:
  - Add temporary patch evolution-data-server-1.7.1-nss_auto_detect.patch
    to help `configure' detect the SSL modules (closes #191567).


author: Matthew Barnes <mbarnes@redhat.com> - 1.7.4-2
changelog:
  - Dynamically link to BDB.
  - Add patch to make --with-db configure option work.
  - Add Requires for db4 and BuildRequires for db4-devel.
  - Clean up spec file, renumber patches.


author: Matthew Barnes <mbarnes@redhat.com> - 1.7.90.1-1
changelog:
  - Update to 1.7.90.1
  - Add patch for Gnome.org bug #348725.
  - Remove patch to make --with-db configure option work (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.7.4-3
changelog:
  - Revert to version 1.7.4 to prevent API/ABI breakage.
  - Add back patch to make --with-libdb configure option work.


author: Matthew Barnes <mbarnes@redhat.com> - 1.7.4-5
changelog:
  - Remove patches for Gnome.org bug #309079 (rejected upstream).
  - One of these patches was causing RH bug #167157.


author: Matthew Barnes <mbarnes@redhat.com> - 1.8.0-1.fc6
changelog:
  - Update to 1.8.0
  - Remove evolution-data-server-1.5.4-make_imap4_optional.patch (fixed upstream)
    and save remaining hunk as evolution-data-server-1.8.0-no-gnome-common.patch.
  - Remove patch for RH bug #202329 (fixed upstream).
  - Remove patch for Gnome.org bug #349847 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.8.1-1.fc7
changelog:
  - Update to 1.8.1
  - Use stricter build settings.
  - Add patch for Gnome.org bug #360240 ("unused variable" warnings).
  - Add patch for Gnome.org bug #360619 ("incompatible pointer type" warnings).
  - Add patch for Gnome.org bug #362638 (deprecate EThread).
  - Remove patch for RH bug #198935 (fixed upstream).
  - Remove patch for RH bug #205187 (fixed upstream).
  - Remove patch for Gnome.org bug #353478 (fixed upstream).
  - Remove patch for Gnome.org bug #356828 (fixed upstream).
  - Remove patch for Gnome.org bug #357666 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.9.1-2.fc7
changelog:
  - Update to 1.9.1
  - Add patch for Gnome.org bug #356177 (deprecate EMutex).
  - Add patch for Gnome.org bug #363695 (deprecate EMemPool, EStrv, EPoolv).
  - Remove Jerusalem.ics timezone file (fixed upstream).
  - Remove patch for RH bug #198935 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.9.1-4.fc7
changelog:
  - Add patch for Gnome.org bug #369168, #369259, and #369261
    (misc camel bugs reported by Hans Petter Jansson).


author: Matthew Barnes <mbarnes@redhat.com> - 1.9.2-1.fc7
changelog:
  - Update to 1.9.2
  - Remove patch for Gnome.org bugs #369168, #369259, and #369261
    (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.9.4-1.fc7
changelog:
  - Update to 1.9.4
  - Add patch for GNOME bug #373117 (storing color settings).
  - Add patch for GNOME bug #387638 (implicit function declaration).


author: Matthew Barnes <mbarnes@redhat.com> - 1.9.5-1.fc7
changelog:
  - Update to 1.9.5
  - Remove patch for GNOME bug #362638 (fixed upstream).
  - Remove patch for GNOME bug #387638 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.9.5-4.fc7
changelog:
  - Revise evolution-data-server-1.8.0-no-gnome-common.patch so that we no
    longer have to run autoconf before building.


author: Matthew Barnes <mbarnes@redhat.com> - 1.9.91-1.fc7
changelog:
  - Update to 1.9.91
  - Add flag to disable deprecated Pango symbols.
  - Remove patch for GNOME bug #359979 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.9.92-1.fc7
changelog:
  - Update to 1.9.92
  - Remove patch for GNOME bug #356177 (fixed upstream).
  - Add minimum version to intltool requirement (current >= 0.35.5).


author: Matthew Barnes <mbarnes@redhat.com> - 1.9.92-3.fc7
changelog:
  - Add patch for GNOME bug #415891 (introduce EFlag API).
  - Add patch for GNOME bug #376991 (refactor password handling).


author: Matthew Barnes <mbarnes@redhat.com> - 1.10.0-2.fc7
changelog:
  - Modify patch for GNOME bug #376991 to fix RH bug #231994.
  - Add patch for GNOME bug #417999 (avoid deprecated GTK+ symbols).
  - Remove evolution-data-server-1.0.2-workaround-cal-backend-leak.patch.
  - Remove evolution-data-server-1.2.2-fix_open_calendar_declaration.patch.
  - Remove evolution-data-server-1.3.8-fix-implicit-function-declarations.


author: Matthew Barnes <mbarnes@redhat.com> - 1.10.0-4.fc7
changelog:
  - Link to static evolution-openldap library (RH bug #210126).
  - Require openssl-devel when statically linking against openldap.
  - Add -Wdeclaration-after-statement to strict build settings.


author: Matthew Barnes <mbarnes@redhat.com> - 1.11.2-1.fc8
changelog:
  - Update to 1.11.2
  - Bump eds_base_version to 1.12.
  - Add patch to fix implicit function declarations.
  - Remove patch for RH bug #203058 (fixed upstream).
  - Remove patch for RH bug #210142 (fixed upstream).
  - Remove patch for RH bug #235290 (fixed upstream).
  - Remove patch for GNOME bug #360240 (fixed upstream).
  - Remove patch for GNOME bug #360619 (fixed upstream).
  - Remove patch for GNOME bug #373117 (fixed upstream).
  - Revise patch for GNOME bug #415891 (partially fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.11.4-1.fc8
changelog:
  - Update to 1.11.4
  - Remove patch for RH bug #202309 (fixed upstream).
  - Remove patch for GNOME bug #312854 (fixed upstream).
  - Remove patch for GNOME bug #447414 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.11.90-1.fc8
changelog:
  - Update to 1.11.90
  - Add patch for GNOME bug #466987 (glibc redefines "open").
  - Remove patch for GNOME bug #415891 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.11.90-3.fc8
changelog:
  - Revise patch for GNOME bug #417999 to fix GNOME bug #447591
    (Automatic Contacts combo boxes don't work).


author: Adam Jackson <ajax@redhat.com> 1.11.90-4.fc8
changelog:
  - Add Requires: glib2 >= 2.14.0, since it's in the buildroot now, and
    forcibly introduces deps on symbols that don't exist in 2.13.  If
    only we had working symbol versioning.


author: Milan Crha <mcrha@redhat.com> - 1.11.91-1.fc8
changelog:
  - Update to 1.11.91
  - Removed patch for RH bug #215634 (fixed upstream).
  - Removed patch for GNOME bug #466987 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 1.12.1-2.fc8
changelog:
  - Disable patch for GNOME bug #376991 for now.  It may be contributing
    to password prompting problems as described in RH bug #296671.


author: Matthew Barnes <mbarnes@redhat.com> - 1.12.1-3.fc9
changelog:
  - Porting a couple patches over from RHEL5:
  - Add patch for RH bug #212106 (address book error on fresh install).
  - Add patch for RH bug #215702 (bad search filter for LDAP address books).


author: Matthew Barnes <mbarnes@redhat.com> - 1.12.1-4.fc9
changelog:
  - Remove the use_gtk_doc macro.
  - Remove redundant requirements.
  - Use the name tag where appropriate.
  - Add an evolution-data-server-doc subpackage.


author: Matthew Barnes <mbarnes@redhat.com> - 2.21.1-1.fc9
changelog:
  - Update to 2.21.1
  - Bump eds_base_version to 2.22.
  - Remove patch for RH bug #212106 (fixed upstream).
  - Remove patch for GNOME bug #417999 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.21.5-2.fc9
changelog:
  - Add patch for GNOME bug #509644 (password dialog breakage).
  - Remove patch for RH bug #384741 (fixed upstream).
  - Remove patch for GNOME bug #363695 (obsolete).
  - Remove patch for GNOME bug #376991 (obsolete).


author: Matthew Barnes <mbarnes@redhat.com> - 2.21.5-3.fc9
changelog:
  - Rename evolution-1.4.4-ldap-x86_64-hack.patch to avoid namespace
    collision with similarly named patch in evolution (RH bug #395551).


author: Matthew Barnes <mbarnes@redhat.com> - 2.22.1-1.fc9
changelog:
  - Update to 2.22.1
  - Remove patch for RH bug #296671 (fixed upstream).
  - Remove patch for GNOME bug #523023 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.23.1-1.fc10
changelog:
  - Update to 2.23.1
  - Bump eds_base_version to 2.24.
  - Bump glib2 requirement to 2.16.1.
  - Drop gnome-vfs2 requirement.


author: Matthew Barnes <mbarnes@redhat.com> - 2.23.2-1.fc10
changelog:
  - Update to 2.23.2
  - Add files for new libebackend library.
  - Remove patch for RH bug #202309 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.25.1-1.fc11
changelog:
  - Update to 2.25.1
  - Bump eds_base_version to 2.26.
  - Remove patch for RH bug #467804 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.25.90-5.fc11
changelog:
  - Update BuildRoot, License, Source and URL tags.
  - Require gnome-common so we don't have to patch it out.


author: Matthew Barnes <mbarnes@redhat.com> - 2.26.0-1.fc11
changelog:
  - Update to 2.26.0
  - Remove patch for RH bug #568332 (fixed upstream).
  - Remove patch for GNOME bug #573240 (reverted upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.29.1-1.fc13
changelog:
  - Update to 2.29.1
  - Bump eds_base_version to 2.30.
  - Add dbus-glib build requirement.
  - Drop Bonobo + ORBit dependency (yay!).
  - Remove option to use OpenSSL instead of NSS.
  - Drop eds_api_version definition since it will never change.
  - Remove patch for GNOME bug #373146 (deviates from upstream).


author: Milan Crha <mcrha@redhat.com> - 2.31.1-1.fc14
changelog:
  - Update to 2.31.1
  - Update BuildRequires.
  - Remove imap4 camel provider support (dropped upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.31.2-2.fc14
changelog:
  - Enable largefile support in Camel, to help debug GNOME bug #612082.
    Debian turned this on recently and is experiencing problems, and I
    want to get to the bottom of it and finally break this 2 GB barrier.


author: Matthew Barnes <mbarnes@redhat.com> - 2.31.6-1.fc14
changelog:
  - Update to 2.31.6
  - Resume GSEAL usage.
  - Drop dbus-glib requirement.
  - Bump glib2 requirement to 2.25.12.
  - Roll back eds_base_version to 2.32.


author: Matthew Barnes <mbarnes@redhat.com> - 3.1.3-1
changelog:
  - Update to 3.1.3
  - Remove patch for libgdata-0.9.0 (fixed upstream).
  - Disable SMP flags; some source directories are racy.
  - Remove keyring option; gnome-keyring is mandatory now.
  - Add BR: gnome-online-accounts-devel and liboauth-devel


author: Matthew Barnes <mbarnes@redhat.com> - 3.7.3-1
changelog:
  - Update to 3.7.3
  - Remove obsolete BuildRequires:
      bison
      dbus-glib-devel
      libgnome-keyring-devel
      liboauth-devel


author: Milan Crha <mcrha@redhat.com> - 3.7.90-3
changelog:
  - Add patch gor GNOME bug #693101 (IMAPx vanishes folder summary)
  - Add patch for Red Hat bug #912503 (incorrect G_BEGIN/END_DECLS)


author: Milan Crha <mcrha@redhat.com> - 3.7.91-1
changelog:
  - Update to 3.7.91
  - Remove an upstream .pc files fix for a libebook split (fixed upstream)
  - Remove patch gor GNOME bug #693101 (fixed upstream)
  - Remove patch for Red Hat bug #912503 (fixed upstream)


author: Milan Crha <mcrha@redhat.com> - 3.11.2-1
changelog:
  - Update to 3.11.2
  - Conditionally build devel documentation
  - Disable compiler warnings about deprecated symbols


author: Milan Crha <mcrha@redhat.com> - 3.13.4-1
changelog:
  - Update to 3.13.4
  - Introduce tests subpackage with installed tests
  - Remove patch for GNOME bug 733081 (fixed upstream)


author: Milan Crha <mcrha@redhat.com> - 3.29.1-1
changelog:
  - Update to 3.29.1
  - Remove fix to strip closing > from URLs when linkifying (BGO#795108) (Fixed upstream)
  - Drop build dependency on python


author: Milan Crha <mcrha@redhat.com> - 3.30.0-1
changelog:
  - Update to 3.30.0
  - Add patch for GNOME Evolution issue #86 (Quoting of plain text mail into HTML mode mangles deeper levels)


author: Adam Williamson <awilliam@redhat.com> - 3.37.2-2
changelog:
  - Rebuild with newer protobuf and libphonenumber
  - Backport several fixes for annoying bugs from mainline


author: Milan Crha <mcrha@redhat.com> - 3.38.1-2
changelog:
  - Correct D-Bus service file name - it can change when _eds_dbus_services_prefix is defined
  - Replace perl-generators build time dependency with perl-interpreter install time dependency


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.40.4-2
changelog:
  - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Václav Doležal <vdolezal@redhat.com> - 1.8.18-17
changelog:
  - Disable retry of pre-session "Get cipher suites" command as some
    BMCs are ignoring it (#1831158)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-18
changelog:
  - Protect against negative values to memmove that caused
    "ipmitool sol activate" to crash against an IBM DataPower appliance
    (#1951480)
    Cherry-picked from upstream PR#78.


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-19
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-4
changelog:
  - CVE-2021-29458 exiv2: out-of-bounds read in Exiv2::Internal::CrwMap::encode
    Resolves: bz#1953758

  - CVE-2021-29457 exiv2: heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1953772


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-5
changelog:
  - CVE-2021-29473 exiv2: out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1954065

  - CVE-2021-29470 exiv2: out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1955014


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-6
changelog:
  - CVE-2021-29623 exiv2: a read of uninitialized memory may lead to information leak
    Resolves: bz#1964182

  - CVE-2021-32617 exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
    Resolves: bz#1964188


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-3
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993282

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993245


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018422

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003673


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-73
changelog:
  - fence_vmware_rest: detect if the API user has sufficient rights to
    manage the fence device
    Resolves: RHEL-25256


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-76.1
changelog:
  - fence_scsi: preempt clears all devices on the mpath device, so only
    run it for the first device
    Resolves: RHEL-59882


author: Chang Gao <gc-taifu@linux.alibaba.com> - 4.10.0-76.0.1.1
changelog:
  - Replace some packages with build env
  - Update CVE-2007-4559 patches
  - Change Jinja2 require python version
  - fix CVE-2024-6345 (gc-taifu@linux.alibaba.com)


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.23-1
changelog:
  - new upstream release
  - new package fence-agents-amt-ws
  - new package fence-agents-compute
  - new package fence-agents-drac
  - new package fence-agents-hds-cb
  - new package fence-agents-mpath
  - new package fence-agents-sanbox2
  - new package fence-agents-sbd
  - new package fence-agents-vbox
  - new package fence-agents-vmware
  - new package fence-agents-xenapi


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.24-12
changelog:
  - fence-agents-common: remove fence_scsi_check files
  - fence-scsi: add "fence_scsi_check_hardreboot"


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-1
changelog:
  - new upstream release
  - fence_vmware_soap / fence_ovh: use Python 2 till python3-suds bug
    is fixed


author: Jan Pokorný <jpokorny+rpm-booth@fedoraproject.org> - 4.2.1-4
changelog:
  - mark non-compiled packages properly as noarch, restructure excludes
  - move azure_fence.py and XenAPI.py to respective subpackages from -common
  - sanitize allfenceagents internally defined enumeration
  - sanitize BuildRequires with respect to packaging guidelines
  - bytecompile native Python modules and ship these bytecodes properly
  - only refer to Python binary symbolically, drop buildroot cleanup
  - cleanup package summaries/descriptions, order agent subpackages properly


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-23
changelog:
  - fence_ibm_vpc: remove unused instance parameter and make limit
    optional
    Resolves: rhbz#2081235


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-25
changelog:
  - all agents: unify ssl parameters to avoid having to use --ssl when
    using --ssl-secure/--ssl-insecure for some agents
    Resolves: rhbz#2072420


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-27
changelog:
  - fence_ibm_powervs: add support for proxy, private API servers and
    get token via API key
    Resolves: rhbz#2093216


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-30
changelog:
  - fence_openstack: add support for reading config from clouds.yaml
    and openrc
    Resolves: rhbz#2041933, rhbz#2041935


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-33
changelog:
  - fence_virt: add note that reboot-action doesnt power on nodes that
    are powered off
    Resolves: rhbz#2132008


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-36
changelog:
  - fence_virtd: add link to uri examples and uri w/socket path
    example for when VMS are run as non-root user to manpage
    Resolves: rhbz#2138823


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-42
changelog:
  - fencing/fence_wti: add --plug-separator to be able to avoid
    characters that are in node name(s)
    Resolves: rhbz#2152107


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-43
changelog:
  - fence_vmware_soap: set login_timeout lower than default
    pcmk_monitor_timeout (20s) to remove tmp dirs
    Resolves: rhbz#2122944


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-45
changelog:
  - fence_aws: add --skip-race-check parameter to allow running outside
    of AWS network
    Resolves: rhbz#2183162


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-55
changelog:
  - bundled dateutil: fix tarfile CVE-2007-4559
    Resolves: rhbz#2217902
  - fence_ipmilan: fix typos in metadata
    Resolves: rhbz#2224267


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-56
changelog:
  - fence_scsi: fix registration handling if ISID conflicts
    Resolves: RHEL-5396
  - bundled certifi: fix CVE-2023-37920
    Resolves: RHEL-9446


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-60
changelog:
  - all agents: update metadata in non-I/O agents to Power or Network
    fencing
    Resolves: RHEL-14030


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-62
changelog:
  - bundled urllib3: fix CVE-2023-45803
    Resolves: RHEL-18139
  - bundled pycryptodome: fix CVE-2023-52323
    Resolves: RHEL-20917
  - bundled jinja2: fix CVE-2024-22195
    Resolves: RHEL-21345


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-66
changelog:
  - Add missing licenses to spec-file
    Resolves: RHEL-27929
  - ha-cloud-support: fix aliyun-cli
    Resolves: RHEL-28097


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-69
changelog:
  - ha-cloud-support: upgrade bundled pyroute2 libs to fix issue in
    gcp-vpc-move-route's stop-action
    Resolves: RHEL-29649


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-70
changelog:
  - fence_aliyun: add credentials file support, filter parameter, and
    optimize log output
    Resolves: RHEL-31488, RHEL-31485, RHEL-31483


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 0.4.0-6
changelog:
  - Harden with -fPIE and -Wl,-z,now
    Resolves: rhbz#1624110
  - Add CI gating tests
    Resolves: rhbz#1682883


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.26-17
changelog:
  - Remove unnecessary python-devel dependency
    (disables build of fetchmailconf, but we don't pack it into rpm anyway)
    Resolves: #1591710


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #1999275, #2002698


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - identify ELF stripped files correctly (#4665).
  - use SPARC (not sparc) consistently throughout (#4665).
  - add entries for MS Office files (#4665).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - fix off-by-1 error when creating filename for use with -i.
  - include a copy of GNOME /etc/mime-types in %{_datadir}/magic.mime (#14741).


author: Trond Eivind Glomsrød <teg@redhat.com> 3.37-1
changelog:
  - 3.37
  - s/Copyright/License/
  - build with --enable-fsect-man5, drop patch
  - disable two old patches


author: Jeff Johnson <jbj@jbj.org> 4.02-3
changelog:
  - use zlib rather than exec'ing gzip.

  -* Thu Aug 28 2003 Dan Walsh <dwalsh@redhat.com>
  -- Add Selinux support.


author: Jeff Johnson <jbj@jbj.org> 4.07-1
changelog:
  - upgrade to 4.07.
  - deal gracefully with unreadable files (#113207).
  - detect PO files (from Debian).


author: Radek Vokal <rvokal@redhat.com>
changelog:
  - zlib patch deleted, note patch deleted, rh patch updated, debian patch updated
  - upgrade to file-4.10


author: Radek Vokal <rvokal@redhat.com> - 4.12-3
changelog:
  - core64 patch fixing output on core files (#145354) <kzak@redhat.com>
  - minor change in magic patch


author: Martin Bacovsky <mbacovsk@redhat.com> - 4.19-1
changelog:
  - Resolves: #208880 - Pointless file(1) error message while detecting ELF 64-bit file
      thanks to <jakub@redhat.com> for patch
  - Resolves: #214992 - file-devel should own %_includedir/* %_libdir/lib*.so
  - Resolves: #203548 - a -devel package should be split out for libmagic
  - upgrade to new upstream 4.19
  - patch revision and cleaning
  - split package to file, file-devel and file-libs


author: Martin Bacovsky <mbacovsk@redhat.com> - 4.19-2
changelog:
  - Resolves: #223297 - file does not recognize OpenOffice "native" formats
  - Resolves: #224344 - Magic rules should be in file-libs


author: Martin Bacovsky <mbacovsk@redhat.com> - 4.21-2
changelog:
  - resolves: #246700: RPM description isn't related to product
  - resolves: #238789: file-devel depends on %{version}
    but not on %{version}-%{release}
  - resolves: #235267: for core files, file doesn't display the executable name


author: Martin Bacovsky <mbacovsk@redhat.com> - 4.21-3
changelog:
  - resolves: #172015: no longer reports filename of crashed app when run on core files.
  - resolves: #249578: Weird output from "file -i"
  - resolves: #234817: file reports wrong filetype for microsoft word file


author: Tomas Smetana <tsmetana@redhat.com> - 4.24-3
changelog:
  - drop patches that do nothing in recent build system
  - create the text magic file during installation


author: Tomas Smetana <tsmetana@redhat.com> - 4.24-4
changelog:
  - add GFS2 filesystem magic; thanks to Eric Sandeen
  - add LVM snapshots magic (#449755); thanks to Jason Farrell


author: Daniel Novotny <dnovotny@redhat.com> 4.26-2
changelog:
  - fix #463809: rpmbuild rpmfcClassify: Assertion fails on some binary files
    (false positive test on "DOS device driver" crashed file(1)
     and rpmbuild(8) failed)


author: Daniel Novotny <dnovotny@redhat.com> 5.00-5
changelog:
  - added two font definitions (#491594, #491595)
    and a fix for file descriptor leak when MAGIC_COMPRESS used (#491596)


author: Daniel Novotny <dnovotny@redhat.com> 5.03-6
changelog:
  - fix #510429 -  file is confused by string "/* (if any) */" 
         in C header and claims it "Lisp/Scheme program text"


author: Daniel Novotny <dnovotny@redhat.com> 5.03-11
changelog:
  - fix #531082 -  RFE: add detection of Python 3 bytecode
  - fix #531127 -  `file' command does not recognize mime type `image/vnd.djvu'


author: Daniel Novotny <dnovotny@redhat.com> 5.04-8
changelog:
  - fix #580046 - the file command returns zero exit code 
                  even in case of unexisting file being tested


author: Jan Kaluza <jkaluza@redhat.com> - 5.05-3
changelog:
  - fix #676543 - improved TeX and LaTeX recognition
  - fix #676041 - detect all supported RPM architectures


author: Jan Kaluza <jkaluza@redhat.com> - 5.07-2
changelog:
  - backported patches to fix 5.07 regressions
  - fix #706231 - fixed ZIP detection
  - fix #705183, #705499 - removed weak DOS device driver pattern


author: Jan Kaluza <jkaluza@redhat.com> - 5.10-3
changelog:
  - fix #771292 - do not show 'using regular magic file' warning for /etc/magic,
    because this file is not supposed to be compiled


author: Jan Kaluza <jkaluza@redhat.com> - 5.11-1
changelog:
  - fix #796130 - update to file-5.11
  - fix #796209 - recognize VDI images
  - fix #795709 - recognize QED images


author: Jan Kaluza <jkaluza@redhat.com> - 5.11-5
changelog:
  - fix #847936 - decompress bzip2 properly when using -z param
  - fix #847937 - read magic patterns also from ~/.magic.mgc


author: Jan Kaluza <jkaluza@redhat.com> - 5.11-7
changelog:
  - removed duplicated patterns for backups generated by "dump" tool
  - recognize volume_key escrow packets
  - mention exit code in manpage
  - remove weak msdos patterns


author: Jan Kaluza <jkaluza@redhat.com> - 5.14-1
changelog:
  - fix #891856 - update to file-5.14
  - fix #909754 - magic number for Python-3.3
  - fix #912271 - do not report dwarf debug info packages as 'stripped'
  - fix #882321 - do not print 'unknown capability' for ELF capabilities for
    architectures which File does not support
  - fix #866000 - show proper build id for ELF binaries
  - fix #860139 - better dump file recognition on big endian architectures
  - remove file-static subpackage
  - move python-magic .py files to python_sitearch


author: Jan Kaluza <jkaluza@redhat.com> - 5.14-4
changelog:
  - fix #948255 - print white-space in fsmagic, but only when
    we know there will be some more output


author: Jan Kaluza <jkaluza@redhat.com> - 5.14-6
changelog:
  - fix #962678 - do not exit if no magic file is loaded, we can still provide
    useful info without magic file


author: Jan Kaluza <jkaluza@redhat.com> - 5.14-14
changelog:
  - fix #1051598 - reverse the order of shebang vs. package keyword detection
    in Perl by increasing strength of all Perl patterns


author: Jan Kaluza <jkaluza@redhat.com> - 5.14-18
changelog:
  - fix #1079847 - fix for CVE-2013-7345
  - fix #1080450 - remove *.orig files before compiling magic/Magdir


author: Jan Kaluza <jkaluza@redhat.com> - 5.14-20
changelog:
  - fix #1079847 - fix potential regression in Perl detection caused
    by original patch for CVE-2013-7345


author: Jan Kaluza <jkaluza@redhat.com> - 5.19-5
changelog:
  - fix #1101404 - remove weak Pascal patterns
  - fix #1107995 - detect locale-archive
  - fix #1130693, #1115111 - fix detection of MSOOXML, OOXML and ZIP
  - fix #1124940 - detect Python 3.4 byte-compiled files


author: Jan kaluza <jkaluza@redhat.com> - 5.25-3
changelog:
  - fix #1279401 - change the order of Perl patterns to try "Perl script"
    patterns before "Perl Module"


author: Kamil Dudka <kdudka@redhat.com> - 5.29-3
changelog:
  - build in parallel and in verbose mode
  - fix assertion failure on certain files (thanks to Christoph Biedl)


author: Kamil Dudka <kdudka@redhat.com> - 5.30-4
changelog:
  - increase strength of perl modules to exceed C sources (#772651)
  - drop non-upstream file-5.14-perl.patch (#1051598)
  - drop undocumented non-upstream file-5.10-strength.patch (#772651)


author: Kamil Dudka <kdudka@redhat.com> - 5.30-5
changelog:
  - make the package build on EPEL-6 and EPEL-7
  - drop undocumented override of the __libtoolize RPM macro
  - drop undocumented non-upstream file-5.24-varied.patch
  - drop undocumented non-upstream file-5.22-awk-perl.patch
  - drop non-upstream file-5.19-cafebabe.patch no longer needed (#1134580)
  - drop undocumented non-upstream file-5.14-x86boot.patch
  - drop undocumented non-upstream file-5.04-generic-msdos.patch


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 5.31-10
changelog:
  - Python 2 binary package renamed to python2-file
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 5.33-3
changelog:
  - Update Python macros to new packaging standards
    (See https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build)


author: Kamil Dudka <kdudka@redhat.com> - 5.33-4
changelog:
  - do not classify shared libraries as pie executables (#1581343)
  - seccomp: fix build failure due to missing syscalls


author: Kamil Dudka <kdudka@redhat.com> - 5.33-7
changelog:
  - show details about ppc swap partition (#1224668)
  - support longer version strings for clamav database (#1539107)


author: Kamil Dudka <kdudka@redhat.com> - 5.33-11
changelog:
  - improve documentation of --apple in file(1) man page (#1677442)
  - improve parsing of ppc core files (#1658171)


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: Thomas Woerner <twoerner@redhat.com> 0.1.1-1
changelog:
  - new version 0.1.1
  - fixed source path in POTFILES*
  - added missing firewall_config.py.in
  - added misssing space for spec_ver line
  - using firewall_config.VARLOGFILE
  - added date to logging output
  - also log fatal and error logs to stderr and firewall_config.VARLOGFILE
  - make log message for active_firewalld fatal


author: Thomas Woerner <twoerner@redhat.com> 0.1.2-1
changelog:
  - fixed package according to package review (rhbz#665395):
    - non executable scripts: dropped shebang
    - using newer GPL license file
    - made /etc/dbus-1/system.d/FirewallD.conf config(noreplace)
    - added requires(post) and (pre) for chkconfig


author: Thomas Woerner <twoerner@redhat.com> 0.1.3-1
changelog:
  - new version 0.1.3
  - restore all firewall features for reload: panic and virt rules and chains
  - string fixes for firewall-cmd man page (by Jiri Popelka)
  - fixed firewall-cmd port list (by Jiri Popelka)
  - added firewall dbus client connect check to firewall-cmd (by Jiri Popelka)
  - translation updates: de, es, gu, it, ja, kn, ml, nl, or, pa, pl, ru, ta,
                         uk, zh_CN


author: Thomas Woerner <twoerner@redhat.com> 0.2.0-1
changelog:
  - version 0.2.0 with new FirewallD1 D-BUS interface
  - supports zones with a default zone
  - new direct interface as a replacement of the partial virt interface with 
    additional passthrough functionality
  - dropped custom rules, use direct interface instead
  - dropped trusted interface funcionality, use trusted zone instead
  - using zone, service and icmptype configuration files
  - not using any system-config-firewall parts anymore


author: Thomas Woerner <twoerner@redhat.com> 0.2.0-2
changelog:
  - added glib2-devel to build requires, needed for gsettings.m4
  - added --with-system-unitdir arg to fix installaiton of system file
  - added glib-compile-schemas calls for postun and posttrans
  - added EXTRA_DIST file lists


author: Thomas Woerner <twoerner@redhat.com>
changelog:
  - moved zones, services and icmptypes to /usr/lib/firewalld, can be overloaded
    by files in /etc/firewalld (no overload of immutable zones block, drop,
    trusted)


author: Thomas Woerner <twoerner@redhat.com> 0.2.2-1
changelog:
  - enabled dhcpv6-client service for zones home and work
  - new dhcpv6-client service
  - firewall-cmd: query mode returns reversed values
  - new zone.changeZone(zone, interface)
  - moved zones, services and icmptypes to /usr/lib/firewalld, can be overloaded
    by files in /etc/firewalld (no overload of immutable zones block, drop,
    trusted)
  - reset MinimalMark in firewalld.cnf to default value
  - fixed service destination (addresses not used)
  - fix xmlplus to be compatible with the python xml sax parser and python 3
    by adding __contains__ to xml.sax.xmlreader.AttributesImpl
  - use icon and glib related post, postun and posttrans scriptes for firewall
  - firewall-cmd: fix typo in state
  - firewall-cmd: fix usage()
  - firewall-cmd: fix interface action description in usage()
  - client.py: fix definition of queryInterface()
  - client.py: fix typo in getInterfaces()
  - firewalld.service: do not fork
  - firewall-cmd: fix bug in --list=port and --port action help message
  - firewall-cmd: fix bug in --list=service


author: Thomas Woerner <twoerner@redhat.com> 0.2.3-1
changelog:
  - firewall-cmd: several changes and fixes
  - code cleanup
  - fixed icmp protocol used for ipv6 (rhbz#801182)
  - added and fixed some comments
  - properly restore zone settings, timeout is always set, check for 0
  - some FirewallError exceptions were actually not raised
  - do not REJECT in each zone
  - removeInterface() don't require zone
  - new tests in firewall-test script
  - dbus_to_python() was ignoring certain values
  - added functions for the direct interface: chains, rules, passthrough
  - fixed inconsistent data after reload
  - some fixes for the direct interface: priority positions are bound to ipv,
    table and chain
  - added support for direct interface in firewall-cmd:
  - added isImmutable(zone) to zone D-Bus interface
  - renamed policy file
  - enhancements for error messages, enables output for direct.passthrough
  - added allow_any to firewald policies, using at leas auth_admin for policies
  - replaced ENABLE_FAILED, DISABLE_FAILED, ADD_FAILED and REMOVE_FAILED by
    COMMAND_FAILED, resorted error codes
  - new firewalld configuration setting CleanupOnExit
  - enabled polkit again, found a fix for property problem with slip.dbus.service
  - added dhcpv6-client to 'public' (the default) and to 'internal' zones.
  - fixed missing settings form zone config files in
    "firewall-cmd --list=all --zone=<zone>" call
  - added list functions for services and icmptypes, added --list=services and
    --list=icmptypes to firewall-cmd


author: Thomas Woerner <twoerner@redhat.com> 0.2.5-1
changelog:
  - Fixed traceback in firewall-cmd for failed or canceled authorization, 
    return proper error codes, new error codes NOT_RUNNING and NOT_AUTHORIZED
  - Enhanced firewalld service file (RHBZ#806868) and (RHBZ#811240)
  - Fixed duplicates in zone after reload, enabled timed settings after reload
  - Removed conntrack --ctstate INVALID check from default ruleset, because it
    results in ICMP problems (RHBZ#806017).
  - Update interfaces in default zone after reload (rhbz#804814)
  - New man pages for firewalld(1), firewalld.conf(5), firewalld.icmptype(5),
    firewalld.service(5) and firewalld.zone(5), updated firewall-cmd man page
    (RHBZ#811257)
  - Fixed firewall-cmd help output
  - Fixed missing icon for firewall-applet (RHBZ#808759)
  - Added root user check for firewalld (RHBZ#767654)
  - Fixed requirements of firewall-applet sub package (RHBZ#808746)
  - Update interfaces in default zone after changing of default zone (RHBZ#804814)
  - Start firewalld before NetworkManager (RHBZ#811240)
  - Add Type=dbus and BusName to service file (RHBZ#811240)


author: Thomas Woerner <twoerner@redhat.com> 0.2.6-1
changelog:
  - New D-BUS interface for persistent configuration
  - Aded support for persistent zone configuration in firewall-cmd
  - New Shields Up feature in firewall-applet
  - New requirements for python-decorator and pygobject3
  - New firewall-config sub-package
  - New firewall-convert-scfw-config config script


author: Thomas Woerner <twoerner@redhat.com> 0.2.8-1
changelog:
  - Do not apply old settings to zones after reload
  - FirewallClient: Added callback structure for firewalld signals
  - New firewall-config with full zone, service and icmptype support
  - Added Shields Up/Down configuration dialog to firewall-applet
  - Name attribute of main tag deprecated for zones, services and icmptypes,
    will be ignored if present
  - Fixed wrong references in firewalld man page
  - Unregister DBus interfaces after sending out the Removed signal
  - Use proper DBus signature in addIcmpType, addService and addZone
  - New builtin property for config interfaces
  - New test case for Config interface
  - spec: use new systemd-rpm macros (rhbz#850110)
  - More config file verifications
  - Lots of smaller fixes and enhancements


author: Thomas Woerner <twoerner@redhat.com> 0.2.9-1
changelog:
  - firewall-config: some UI usability changes
  - firewall-cmd: New option --list-all-zones, output of --list-all changed,
    more option combination checks
  - firewall-applet: Replaced NMClient by direct DBUS calls to fix python core
    dumps in case of connection activates/deactivates
  - Use fallback 'C' locale if current locale isn't supported (RHBZ#860278)
  - Add interfaces to zones again after reload
  - firewall-cmd: use FirewallClient().connected value
  - firewall-cmd: --remove-interface was not working due to a typo
  - Do not use restorecon for new and backup files
  - Fixed use of properties REJECT and DROP
  - firewalld_test.py: check interfaces after reload
  - Translation updates
  - Renamed firewall-convert-scfw-config to firewall-offline-cmd, used by
    anaconda for firewall configuration (e.g. kickstart)
  - Fix python shebang to use -Es at installation time for bin_SCRIPTS and
    sbin_SCRIPTS and at all times in gtk3_chooserbutton.py
  - tests/firewalld_config.py: update test_zones() test case
  - Config interface: improve renaming of zones/services/icmp_types
  - Move emiting of Added signals closer to source.
  - FirewallClient(): config:ServiceAdded signal was wrongly mapped
  - Add argument 'name' to Removed signal
  - firewall-config: Add callbacks for config:[service|icmp]-[added|removed]
  - firewall-config: catch INVALID_X error when removing zone/service/icmp_type
  - firewall-config: remove unused code
  - Revert "Neutralize _xmlplus instead of conforming it"
  - firewall-applet: some UI usability changes
  - firewall-cmd: ALREADY_ENABLED, NOT_ENABLED, ZONE_ALREADY_SET are warnings


author: Thomas Woerner <twoerner@redhat.com> 0.2.10-1
changelog:
  - tests/firewalld_config.py: tests for config.service and config.icmptype
  - FirewallClientConfigServiceSettings(): destinations are dict not list
  - service/zone/icmptype: do not write deprecated name attribute
  - New service ntp
  - firewall-config: Fixed name of about dialog
  - configure.in: Fixed getting of error codes
  - Added coding to all pyhton files
  - Fixed copyright years
  - Beautified file headers
  - Force use of pygobject3 in python-slip (RHBZ#874378)
  - Log: firewall.server.config_icmptype, firewall.server.config_service and
    firewall.server.config_zone: Prepend full path
  - Allow ":" in interface names for interface aliases
  - Add name argument to Updated and Renamed signal
  - Disable IPv4, IPv6 and EB tables if missing - for IPv4/IPv6 only environments
  - firewall-config.glade file cleanup
  - firewall-config: loadDefaults() can throw exception
  - Use toolbars for Add/Edit/Remove/LoadDefaults buttons for zones, services
    and icmp types
  - New vnc-server service, opens ports for displays :0 to :3 (RHBZ#877035)
  - firewall-cmd: Fix typo in help output, allow default zone usage for
    permanenent options
  - Translation updates: cs, fr, ja, pt_BR and zh_CN


author: Thomas Woerner <twoerner@redhat.com> 0.2.11-1
changelog:
  - Fixed more _xmlplus (PyXML) incompatibilities to python xml
  - Several man page updates
  - Fixed error in addForwardPort, removeForwardPort and queryForwardPort
  - firewall-cmd: use already existing queryForwardPort()
  - Update firewall.cmd man page, use man page as firewall-cmd usage (rhbz#876394)
  - firewall-config: Do not force to show labels in the main toolbar
  - firewall-config: Dropped "Change default zone" from toolbar
  - firewall-config: Added menu entry to change zones of connections
  - firewall-applet: Zones can be changed now using nm-connection-editor
    (rhbz#876661)
  - translation updates: cs, hu, ja


author: Thomas Woerner <twoerner@redhat.com> 0.2.11-2
changelog:
  - require pygobject3-base instead of pygobject3 (no cairo needed) (RHBZ#874378)
  - fixed dependencies of firewall-config to use gtk3 with pygobject3-base and 
    not pygtk2


author: Thomas Woerner <twoerner@redhat.com> 0.2.12-1
changelog:
  - firewall-cmd: use -V instead of -v for version info (RHBZ#886477)
  - firewall-cmd: don't check reload()'s return value (RHBZ#886461)
  - actually install firewalld.zones.5
  - firewall-config: treat exceptions when adding new zone/service/icmp
    (RHBZ#886602)
  - firewalld.spec: Fixed requirements of firewall-config to use gtk2 and
    pygobject3
  - Fail gracefully when running in non X environment.(RHBZ#886551)
  - offline-cmd: fail gracefully when no s-c-f config
  - fix duplicated iptables rules (RHBZ#886515)
  - detect errors and duplicates in config file (RHBZ#886581)
  - firewall-config: don't make 'Edit Service' and 'Edit ICMP Type' insensitive
  - firewalld.spec: fixed requirements, require pygobject3-base
  - frewall-applet: Unused code cleanup
  - firewall-applet: several usability fixes and enhancements
    (RHBZ#886531) (RHBZ#886534)
  - firewall/server/server.py: fixed KeyboardInterrupt message (RHBZ#886558)
  - Moved fallback zone and minimal_mark to firewall.config.__init__
  - Do not raise ZONE_ALREADY_SET in change_zone if old zone is set again
    (RHBZ#886432)
  - Make default zone default for all unset connections/interfaces
    (RHBZ#888288) (RHBZ#882736)
  - firewall-config: Use Gtk.MessageType.WARNING for warning dialog
  - firewall-config: Handle unknown services and icmptypes in persistent mode
  - firewall-config: Do not load settings more than once
  - firewall-config: UI cleanup and fixes (RHBZ#888242)
  - firewall-cmd: created alias --change-zone for --change-interface
  - firewall-cmd man page updates (RHBZ#806511)
  - Merged branch 'build-cleanups'
  - dropped call to autogen.sh in build stage, not needed anymore due to 
    'build-cleanups' merge


author: Jiri Popelka <jpopelka@redhat.com> - 0.2.12-2
changelog:
  - Default zone in firewalld.conf was reseted with every restart (RHBZ#902845)
  - Add icon cache related scriptlets for firewall-config (RHBZ#902680)
  - Fix typo in firewall-config (RHBZ#895812)
  - Fix few mistakes in firewall-cmd(1) man page


author: Thomas Woerner <twoerner@redhat.com> 0.3.0-1
changelog:
  - Added rich language support
  - Added lockdown feature
  - Allow to bind interfaces and sources to zones permanently
  - Enabled IPv6 NAT support
    masquerading and port/packet forwarding for IPv6 only with rich language
  - Handle polkit errors in client class and firewall-config
  - Added priority description for --direct --add-rule in firewall-cmd man page
  - Add XML Schemas for zones/services/icmptypes XMLs
  - Don't keep file descriptors open when forking
  - Introduce --nopid option for firewalld
  - New FORWARD_IN_ZONES and FORWARD_OUT_ZONES chains (RHBZ#912782)
  - Update cluster-suite service (RHBZ#885257)
  - firewall-cmd: rename --enable/disable-panic to --panic-on/off (RHBZ#874912)
  - Fix interaction problem of changed event of gtk combobox with polkit-kde
    by processing all remaining events (RHBZ#915892)
  - Stop default zone rules being applied to all zones (RHBZ#912782)
  - Firewall.start(): don't call set_default_zone()
  - Add wiki's URL to firewalld(1) and firewall-cmd(1) man pages
  - firewalld-cmd: make --state verbose (RHBZ#886484)
  - improve firewalld --help (RHBZ#910492)
  - firewall-cmd: --add/remove-* can be used multiple times (RHBZ#879834)
  - Continue loading zone in case of wrong service/port etc. (RHBZ#909466)
  - Check also services and icmptypes in Zone() (RHBZ#909466)
  - Increase the maximum length of the port forwarding fields from 5 to 11 in
    firewall-config
  - firewall-cmd: add usage to fail message
  - firewall-cmd: redefine usage to point to man page
  - firewall-cmd: fix visible problems with arg. parsing
  - Use argparse module for parsing command line options and arguments
  - firewall-cmd.1: better clarify where to find ACTIONs
  - firewall-cmd Bash completion
  - firewall-cmd.1: comment --zone=<zone> usage and move some options
  - Use zone's target only in %s_ZONES chains
  - default zone in firewalld.conf was set to public with every restart (#902845)
  - man page cleanup
  - code cleanup


author: Thomas Woerner <twoerner@redhat.com> 0.3.1-1
changelog:
  - Use explicit file lists for make dist
  - New rich rule validation check code
  - New global check_port and check_address functions
  - Allow source white and black listing with the rich rule
  - Fix error handling in case of unsupported family in rich rule
  - Enable ip_forwarding in masquerade and forward-port
  - New functions to read and write simple files using filename and content
  - Add --enable-sysconfig to install Fedora-specific sysconfig config file.
  - Add chains for security table (RHBZ#927015)
  - firewalld.spec: no need to specify --with-systemd-unitdir
  - firewalld.service: remove syslog.target and dbus.target
  - firewalld.service: replace hard-coded paths
  - Move bash-completion to new location.
  - Revert "Added configure for new build env"
  - Revert "Added Makefile.in files"
  - Revert "Added po/Makefile.in.in"
  - Revert "Added po/LINGUAS"
  - Revert "Added aclocal.m4"
  - Amend zone XML Schema


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.2-1
changelog:
  - Fix signal handling for SIGTERM
  - Additional service files (RHBZ#914859)
  - Updated po files
  - s/persistent/permanent/ (Trac Ticket #7)
  - Better behaviour when running without valid DISPLAY (RHBZ#955414)
  - client.handle_exceptions(): do not loop forever
  - Set Zone.defaults in zone_reader (RHBZ#951747)
  - client: do not pass the dbus exception name to handler
  - IO_Object_XMLGenerator: make it work with Python 2.7.4 (RHBZ#951741)
  - firewall-cmd: do not use deprecated BaseException.message
  - client.py: fix handle_exceptions() (RHBZ#951314)
  - firewall-config: check zone/service/icmptype name (RHBZ#947820)
  - Allow 3121/tcp (pacemaker_remote) in cluster-suite service. (RHBZ#885257)
  - firewall-applet: fix default zone hangling in 'shields-up' (RHBZ#947230)
  - FirewallError.get_code(): check for unknown error


author: Thomas Woerner <twoerner@redhat.com> 0.3.3-1
changelog:
  - new service files
  - relicensed logger.py under GPLv2+
  - firewall-config: sometimes we don't want to use client's exception handler
  - When removing Service/IcmpType remove it from zones too (RHBZ#958401)
  - firewall-config: work-around masquerade_check_cb() being called more times
  - Zone(IO): add interfaces/sources to D-Bus signature
  - Added missing UNKNOWN_SOURCE error code
  - fw_zone.check_source: Raise INVALID_FAMILY if family is invalid
  - New changeZoneOfInterface method, marked changeZone as deprecated
  - Fixed firewall-cmd man page entry for --panic-on
  - firewall-applet: Fixed possible problems of unescaped strings used for markup
  - New support to bind zones to source addresses and ranges (D-BUS, cmd, applet
  - Cleanup of unused variables in FirewallD.start
  - New firewall/fw_types.py with LastUpdatedOrderedDict
  - direct.chains, direct.rules: Using LastUpdatedOrderedDict
  - Support splitted zone files
  - New reader and writer for stored direct chains and rules
  - LockdownWhitelist: fix write(), add get_commands/uids/users/contexts()
  - fix service_writer() and icmptype_writer() to put newline at end of file
  - firewall-cmd: fix --list-sources
  - No need to specify whether source address family is IPv4 or IPv6
  - add getZoneOfSource() to D-Bus interface
  - Add tests and bash-completion for the new "source" operations
  - Convert all input args in D-Bus methods
  - setDefaultZone() was calling accessCheck() *after* the action
  - New uniqify() function to remove duplicates from list whilst preserving order
  - Zone.combine() merge also services and ports
  - config/applet: silence DBusException during start when FirewallD is not running (RHBZ#966518)
  - firewall-applet: more fixes to make the address sources family agnostic
  - Better defaults for lockdown white list
  - Use auth_admin_keep for allow_any and allow_inactive also
  - New D-Bus API for lockdown policies
  - Use IPv4, IPv6 and BRIDGE for FirewallD properties
  - Use rich rule action as audit type
  - Prototype of string-only D-Bus interface for rich language
  - Fixed wrongly merged source family check in firewall/core/io/zone.py
  - handle_cmr: report errors, cleanup modules in error case only, mark handling
  - Use audit type from rule action, fixed rule output
  - Fixed lockdown whitelist D-Bus handling method names
  - New rich rule handling in runtime D-Bus interface
  - Added interface, source and rich rule handling (runtime and permanent)
  - Fixed dbus_obj in FirewallClientConfigPolicies, added queryLockdown
  - Write changes in setLockdownWhitelist
  - Fixed typo in policies log message in method calls
  - firewall-cmd: Added rich rule, lockdown and lockdown whitelist handling
  - Don't check access in query/getLockdownWhitelist*()
  - firewall-cmd: Also output masquerade flag in --list-all
  - firewall-cmd: argparse is able to convert argument to desired type itself
  - firewall-cmd_test.sh: tests for permanent interfaces/sources and lockdown whitelist
  - Makefile.am: add missing files
  - firewall-cmd_test.sh: tests for rich rules
  - Added lockdown, source, interface and rich rule docs to firewall-cmd
  - Do not masquerade lo if masquerade is enabled in the default zone (RHBZ#904098)
  - Use <rule> in metavar for firewall-cmd parser


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Remove migrating to a systemd unit file from a SysV initscript
  - Remove pointless "ExclusiveOS" tag


author: Thomas Woerner <twoerner@redhat.com> 0.3.4-1
changelog:
  - several rich rule check enhancements and fixes
  - firewall-cmd: direct options - check ipv4|ipv6|eb (RHBZ#970505)
  - firewall-cmd(1): improve description of direct options (RHBZ#970509)
  - several firewall-applet enhancements and fixes
  - New README
  - several doc and man page fixes
  - Service definitions for PCP daemons (RHBZ#972262)
  - bash-completion: add lockdown and rich language options
  - firewall-cmd: add --permanent --list-all[-zones]
  - firewall-cmd: new -q/--quiet option
  - firewall-cmd: warn when default zone not active (RHBZ#971843)
  - firewall-cmd: check priority in --add-rule (RHBZ#914955)
  - add dhcpv6 (for server) service (RHBZ#917866)
  - firewall-cmd: add --permanent --get-zone-of-interface/source --change-interface/source
  - firewall-cmd: print result (yes/no) of all --query-* commands
  - move permanent-getZoneOf{Interface|Source} from firewall-cmd to server
  - Check Interfaces/sources when updating permanent zone settings.
  - FirewallDConfig: getZoneOfInterface/Source can actually return more zones
  - Fixed toaddr check in forward port to only allow single address, no range
  - firewall-cmd: various output improvements
  - fw_zone: use check_single_address from firewall.functions
  - getZoneOfInterface/Source does not need to throw exception
  - firewall.functions: Use socket.inet_pton in checkIP, fixed checkIP*nMask
  - firewall.core.io.service: Properly check port/proto and destination address
  - Install applet desktop file into /etc/xdg/autostart
  - Fixed option problem with rich rule destinations (RHBZ#979804)
  - Better exception creation in dbus_handle_exceptions() decorator (RHBZ#979790)
  - Updated firewall-offline-cmd
  - Use priority in add, remove, query and list of direct rules (RHBZ#979509)
  - New documentation (man pages are created from docbook sources)
  - firewall/core/io/direct.py: use prirority for rule methods, new get_all_ methods
  - direct: pass priority also to client.py and firewall-cmd
  - applet: New blink and blink-count settings
  - firewall.functions: New function ppid_of_pid
  - applet: Check for gnome3 and fix it, use new settings, new size-changed cb
  - firewall-offline-cmd: Fix use of systemctl in chroot
  - firewall-config: use string.ascii_letters instead of string.letters
  - dbus_to_python(): handle non-ascii chars in dbus.String.
  - Modernize old syntax constructions.
  - dict.keys() in Python 3 returns a "view" instead of list
  - Use gettext.install() to install _() in builtins namespace.
  - Allow non-ascii chars in 'short' and 'description'
  - README: More information for "Working With The Source Repository"
  - Build environment fixes
  - firewalld.spec: Added missing checks for rhel > 6 for pygobject3-base
  - firewall-applet: New setting show-inactive
  - Don't stop on reload when lockdown already enabled (RHBZ#987403)
  - firewall-cmd: --lockdown-on/off did not touch firewalld.conf
  - FirewallApplet.gschema.xml: Dropped unused sender-info setting
  - doc/firewall-applet.xml: Added information about gsettings
  - several debug and log message fixes
  - Add chain for sources so they can be checked before interfaces (RHBZ#903222)
  - Add dhcp and proxy-dhcp services (RHBZ#986947)
  - io/Zone(): don't error on deprecated family attr of source elem
  - Limit length of zone file name (to 12 chars) due to Netfilter internals.
  - It was not possible to overload a zone with defined source(s).
  - DEFAULT_ZONE_TARGET: {chain}_ZONE_{zone} -> {chain}_{zone}
  - New runtime get<X>Settings for services and icmptypes, fixed policies callbacks
  - functions: New functions checkUser, checkUid and checkCommand
  - src/firewall/client: Fixed lockdown-whitelist-updated signal handling
  - firewall-cmd(1): move firewalld.richlanguage(5) reference in --*-rich-rule
  - Rich rule service: Only add modules for accept action
  - firewall/core/rich: Several fixes and enhanced checks
  - Fixed reload of direct rules
  - firewall/client: New functions to set and get the exception handler
  - firewall-config: New and enhanced UI to handle lockdown and rich rules
  - zone's immutable attribute is redundant
  - Do not allow to set settings in config for immutable zones.
  - Ignore deprecated 'immutable' attribute in zone files.
  - Eviscerate 'immutable' completely.
  - FirewallDirect.query_rule(): fix it
  - permanent direct: activate firewall.core.io.direct:Direct reader
  - core/io/*: simplify getting of character data
  - FirewallDirect.set_config(): allow reloading


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.5-1
changelog:
  - Only use one PK action for configuration (RHBZ#994729)
  - firewall-cmd: indicate non-zero exit code with red color
  - rich-rule: enable to have log without prefix & log_level & limit
  - log-level warn/err -> warning/error (RHBZ#1009436)
  - Use policy DROP while reloading, do not reset policy in restart twice
  - Add _direct chains to all table and chain combinations
  - documentation improvements
  - New firewalld.direct(5) man page docbook source
  - tests/firewall-cmd_test.sh: make rich language tests work
  - Rich_Rule._import_from_string(): improve error messages (RHBZ#994150)
  - direct.passthrough wasn't always matching out_signature (RHBZ#967800)
  - firewall-config: twist ICMP Type IP address family logic.
  - firewall-config: port-forwarding/masquerading dialog (RHBZ#993658)
  - firewall-offline-cmd: New --remove-service=<service> option (BZ#969106)
  - firewall-config: Options->Lockdown was not changing permanent.
  - firewall-config: edit line on doubleclick (RHBZ#993572)
  - firewall-config: System Default Zone -> Default Zone (RHBZ#993811)
  - New direct D-Bus interface, persistent direct rule handling, enabled passthough
  - src/firewall-cmd: Fixed help output to use more visual parameters
  - src/firewall-cmd: New usage output, no redirection to man page anymore
  - src/firewall/core/rich.py: Fixed forwad port destinations
  - src/firewall-offline-cmd: Early enable/disable handling now with mask/unmask
  - doc/xml/firewalld.zone.xml: Added more information about masquerade use
  - Prefix to log message is optional (RHBZ#998079)
  - firewall-cmd: fix --permanent --change-interface (RHBZ#997974)
  - Sort zones/interfaces/service/icmptypes on output.
  - wbem-https service (RHBZ#996668)
  - applet&config: add support for KDE NetworkManager connection editor
  - firewall/core/fw_config.py: New method update_lockdown_whitelist
  - Added missing file watcher for lockdown whitelist in config D-Bus interface
  - firewall/core/watcher: New add_watch_file for lockdown-whitelist and direct
  - Make use of IPv6 NAT conditional, based on kernel number (RHBZ#967376)


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.6-1
changelog:
  - firewalld.richlanguage.xml: correct log levels (RHBZ#993740)
  - firewall-config: Make sure that all zone settings are updated properly on firewalld restart
  - Rich_Limit: Allow long representation for duration (RHBZ#994103
  - firewall-config: Show "Changes applied." after changes (RHBZ#993643)
  - Use own connection dialog to change zones for NM connections
  - Rename service cluster-suite to high-availability (RHBZ#885257)
  - Permanent direct support for firewall-config and firewall-cmd
  - Try to avoid file descriptor leaking (RHBZ#951900)
  - New functions to split and join args properly (honoring quotes)
  - firewall-cmd(1): 2 simple examples
  - Better IPv6 NAT checking.
  - Ship firewalld.direct(5).


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.6.2-1
changelog:
  - firewall-offline-cmd: --forward-port 'toaddr' is optional (RHBZ#1014958)
  - firewall-cmd: fix variable name (RHBZ#1015011)


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.7-1
changelog:
  - Don't fail on missing ip[6]tables/ebtables table. (RHBZ#967376)
  - bash-completion: --permanent --direct options
  - firewall/core/fw.py: fix checking for iptables & ip6tables (RHBZ#1017087)
  - firewall-cmd: use client's exception_handler instead of catching exceptions ourselves
  - FirewallClientZoneSettings: fix {add|remove|query}RichRule()
  - Extend amanda-client service with 10080/tcp (RHBZ#1016867)
  - Simplify Rich_Rule()_lexer() by using functions.splitArgs()
  - Fix encoding problems in exception handling (RHBZ#1015941)


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.8-1
changelog:
  - fix memory leaks
  - New option --debug-gc
  - Python3 compatibility
  - Better non-ascii support
  - several firewall-config & firewall-applet fixes
  - New --remove-rules commands for firewall-cmd and removeRules methods for D-Bus
  - Fixed FirewallDirect.get_rules to return proper list
  - Fixed LastUpdatedOrderedDict.keys()
  - Enable rich rule usage in trusted zone (RHBZ#994144)
  - New error codes: INVALID_CONTEXT, INVALID_COMMAND, INVALID_USER and INVALID_UID


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.9-1
changelog:
  - translation updates
  - New IPv6_rpfilter setting to enable source address validation (RHBZ#847707)
  - Do not mix original and customized zones in case of target changes,
    apply only used zones
  - firewall-cmd: fix --*_lockdown_whitelist_uid to work with uid 0
  - Don't show main window maximized. (RHBZ#1046811)
  - Use rmmod instead of 'modprobe -r' (RHBZ#1031102)
  - Deprecate 'enabled' attribute of 'masquerade' element
  - firewall-config: new zone was added twice to the list
  - firewalld.dbus(5)
  - Enable python shebang fix again
  - firewall/client: handle_exceptions: Use loop in decorator
  - firewall-offline-cmd: Do not mask firewalld service with disabled option
  - firewall-config: richRuleDialogActionRejectType Entry -> ComboBox
  - Rich_Rule: fix parsing of reject element (RHBZ#1027373)
  - Show combined zones in permanent configuration (RHBZ#1002016)
  - firewall-cmd(1): document exit code 2 and colored output (RHBZ#1028507)
  - firewall-config: fix RHBZ#1028853


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.9.3-1
changelog:
  - Fixed persistent port forwarding (RHBZ#1056154)
  - Stop default zone rules being applied to all zones (RHBZ#1057875)
  - Enforce trust, block and drop zones in the filter table only (RHBZ#1055190)
  - Allow RAs prior to applying IPv6_rpfilter (RHBZ#1058505)
  - Fix writing of rule.audit in zone_writer()


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.10-1
changelog:
  - new services: freeipa-*, puppermaster, amanda-k5, synergy,
                  xmpp-*, tor, privoxy, sane
  - do not use at_console in D-Bus policies (RHBZ#1094745)
  - apply all rich rules for non-default targets
  - AppData file (RHBZ#1094754)
  - separate Polkit actions for desktop & server (RHBZ#1091068)
  - sanitize missing ip6t_rpfilter (RHBZ#1074427)
  - firewall/core/io/*: few improvements (RHBZ#1065738)
  - no load failed error for absent direct.xml file
  - new DBUS_INTERFACE.getZoneSettings to get all run-time zone settings
  - fixed creation and deletion of zones, services and icmptypes over D-Bus signals
  - FirewallClientZoneSettings: Set proper default target
  - if Python2 then encode strings from sax parser (RHBZ#1059104, RHBZ#1058853)
  - firewall-cmd:
    - don't colour output of query commands (RHBZ#1097841)
    - use "default" instead of {chain}_{zone} (RHBZ#1075675)
    - New --get-target and --set-target
    - Create and remove permanent zones, services and icmptypes
  - firewall-config:
    - Adding services and icmptypes resulted in duplicates in UI
    - Use left button menu of -applet in Option menu
  - firewall-offline-cmd: same functionality as 'firewall-cmd --permanent'
  - firewall-applet: ZoneConnectionEditor was missing the Default Zone entry
  - bash-completion: getting zones/services/icmps is different with/without --permanent
  - firewalld.zone(5): removed superfluous slash (RHBZ#1091575)
  - updated translations


author: Thomas Woerner <twoerner@redhat.com> - 0.3.10-3
changelog:
  - New support for Fedora per-product configuration settings for Fedora.next
    https://fedoraproject.org/wiki/Per-Product_Configuration_Packaging_Draft
  - Added Fedora server zone (RHBZ#1110711)
  - Added Fedora workstation zone(RHBZ#1113775)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.10-4
changelog:
  - renamed fedora specific zones to FedoraServer and FedoraWorkstation for 
    zone name limitations (length and allowed chars)


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.11-1
changelog:
  - firewalld:
    - improve error messages
    - check built-in chains in direct chain handling functions (RHBZ#1120619)
    - dbus_to_python() check whether input is of expected type (RHBZ#1122018)
    - handle negative timeout values (RHBZ#1124476)
    - warn when Command/Uid/Use/Context already in lockdown whitelist (RHBZ#1126405)
    - make --lockdown-{on,off} work again (RHBZ#1111573)
  - firewall-cmd:
    - --timeout now accepts time units (RHBZ#994044)
  - firewall-config:
    - show active (not default) zones in bold (RHBZ#993655)
  - configuration:
    - remove ipp-client service from all zones (RHBZ#1105639).
    - fallbacks for missing values in firewalld.conf
    - create missing dirs under /etc if needed
    - add -Es to python command in lockdown-whitelist.xml (RHBZ#1099065)
  - docs:
    - 'direct' methods concern only chains/rules added via 'direct' (RHBZ#1120619)
    - --remove-[interface/source] don't need a zone to be specified (RHBZ#1125851)
    - various fixes in firewalld.zone(5), firewalld.dbus(5), firewalld.direct(5)
  - others:
    - rpm macros for easier packaging of e.g. services


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.12-1
changelog:
  - firewalld:
    - new runtimeToPermanent and tracked passsthrough support
    - make permanent D-Bus interfaces more fine grained like the runtime versions (RHBZ#1127706)
    - richLanguage: allow using destination with forward-port
    - Rich_Rule.check(): action can't be used with icmp-block/forward-port/masquerade
    - fixed Python specific D-Bus exception (RHBZ#1132441)
  - firewall-cmd:
    - new --runtime-to-permanent to create permanent from runtime configuration
    - use new D-Bus methods for permanent changes
    - show target REJECT instead of %REJECT% (RHBZ#1058794)
    - --direct: make fail messages consistent (RHBZ#1141835)
  - firewall-config:
    - richRuleDialog - OK button tooltip indicates problem
    - use new D-Bus methods for permanent changes
    - show target REJECT instead of %REJECT% (RHBZ#1058794)
    - update "Change Zones of Connections" menu on default zone change (RHBZ#11120212)
    - fixed rename of zones, services and icmptypes to not create new entry (RBHZ#1131064)
  - configuration:
    - new service for Squid HTTP proxy server
    - new service for Kerberos admin server
    - new services for syslog and syslog-tls
    - new services for SNMP and SNMP traps
    - add Keywords to .desktop to improve software searchability
  - docs:
    - updated translations
    - firewalld.richlanguage: improvements suggested by Rufe Glick
    - firewalld.dbus: various improvements
    - firewalld.zone: better description of Limit tag
    - mention new homepage everywhere


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.13-1
changelog:
  - firewalld:
    - ipXtables: use -w or -w2 if supported (RHBZ#1161745, RHBZ#1151067)
    - DROP INVALID packets (RHBZ#1169837)
    - don't use ipv6header for protocol matching. (RHBZ#1065565)
    - removeAllPassthroughs(): remove passthroughs in reverse order (RHBZ#1167100)
    - fix config.service.removeDestination() (RHBZ#1164584)
  - firewall-config:
    - portProtoDialog: other protocol excludes port number/range
    - better fix for updating zoneStore also in update_active_zones()
    - fix typo in menu
  - configuration:
    - new services: tinc, vdsm, mosh, iscsi-target, rsyncd
    - ship and install XML Schema files. (#8)
  - man pages:
    - firewalld.dbus, firewalld.direct, firewalld, firewall-cmd
  - spec file:
    - filesystem subpackage
    - make dirs&files in /usr/lib/ world-readable (RHBZ#915988)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.13-2
changelog:
  - enable python2 and python3 bindings for fedora >= 20 and rhel >= 7
  - use python3 bindings on fedora >= 22 and rhel >= 8 for firewalld,
    firewall-config and firewall-applet


author: Thomas Woerner <twoerner@redhat.com> - 0.3.14-1
changelog:
  - renamed python2-firewall to python-firewall
  - fixed requirements for GUI parts with Python3
  - dropped upstream merged python3 patch
  - firewalld:
    - print real zone names in error messages
    - iptables 1.4.21 does not accept limits of 1/day, minimum is 2/day now
    - rate limit fix for rich rules
    - fix readdition of removed permanent direct settings
    - adaption of the polkit domains to use PK_ACTION_DIRECT_INFO
    - fixed two minor Python3 issues in firewall.core.io.direct
    - fixed use of fallback configuration values
    - fixed use without firewalld.conf
    - firewalld main restructureization
    - IPv6_rpfilter now also available as a property on D-Bus in the config interface
    - fixed wait option use for ipXtables
    - added --concurrent support for ebtables
    - richLanguage: allow masquerading with destination
    - richLanguage: limit masquerading forward rule to new connections
    - ipXtables: No dns lookups in available_tables and _detect_wait_option
    - full ebtables support: start, stop, reload, panic mode, direct chains and rules
    - fix for reload with direct rules
    - fix or flaws found by landscape.io
    - pid file handling fixes in case of pid file removal
    - fix for client issue in case of a dbus NoReply error
  - configuration
    - new services: dropbox-lansync, ptp
    - new icmptypes: timestamp-request, timestamp-reply
  - man pages:
    - firewalld.zones(5): fixed typos
    - firewalld.conf(5): Fixed wrong reference to firewalld.lockdown-whitelist page
  - firewall-applet:
    - new version using Qt4 fixing several issues with the Gtk version
  - spec file:
    - enabled Python3 support: new backends python-firewall and python3-firewall
    - some cleanup
  - git:
    - migrated to github
  - translations:
    - migrated to zanata
  - build environment:
    - no need for autoconf-2.69, 2.68 is sufficient


author: Thomas Woerner <twoerner@redhat.com> - 0.3.14.1-1
changelog:
  - firewall-applet
    - do not use isSystemTrayAvailable check to fix KDE5 startup
    - dropped gtk applet remain: org.fedoraproject.FirewallApplet.gschema.xml


author: Thomas Woerner <twoerner@redhat.com> - 0.3.14.2-1
changelog:
  - reunification of the firewalld spec files for all Fedora releases
  - fix dependencies for -applet and -config: use_python3 is the proper switch
    not with_python3 (RHBZ#1232493)
  - firewalld.spec:
    - fixed requirements for -applet and -config
  - man pages:
    - adapted firewall-applet man page to new version
  - firewall-applet:
    - Only honour active connections for zone changes
    - Change QSettings path and file names
  - firewall-config:
    - Only honour active connections for zone changes in the “Change Zones of Connections” menu
  - Translations:
    - updated translations
    - marked translations for “Connections” for review


author: Thomas Woerner <twoerner@redhat.com> - 0.3.14.2-3
changelog:
  - Require python3-gobject-base for fedora >= 23 and rhel >= 8 (RHBZ#1242076)
  - Fix rhel defines: No python3 for rhel-7


author: Thomas Woerner <twoerner@redhat.com> - 0.4.0-1
changelog:
  - Version 0.4.0
    - Speed ups
    - ipset support
    - MAC address support
    - Log of denied packets
    - Mark action in rich rules
    - Enhanced alteration of config files with command line tools
    - Use of zone chains in direct interface
    - firewall-applet enhancement
    - New services: ceph-mon, ceph, docker-registry, imap, pop3, pulseaudio,
      smtps, snmptrap, snmp, syslog-tls and syslog
    - Several bug fixes
    - Code optimizations


author: Thomas Woerner <twoerner@redhat.com> - 0.4.1-1
changelog:
  - Enhancements of ipset handling
    - No cleanup of ipsets using timeouts while reloading
    - Only destroy conflicting ipsets
    - Only use ipset types supported by the system
    - Add and remove several ipset entries in one call using a file
  - Reduce time frame where builtin chains are on policy DROP while reloading
  - Include descriptions in --info-X calls
  - Command line interface support to get and alter descriptions of zones,
    services, ipsets and icmptypes with permanent option
  - Properly watch changes in combined zones
  - Fix logging in rich rule forward rules
  - Transformed direct.passthrough errors into warnings
  - Rework of import structures
  - Reduced calls to get ids for port and protocol names (RHBZ#1305434)
  - Build and installation fixes by Markos Chandras
  - Provide D-Bus properties in introspection data
  - Fix for flaws found by landscape.io
  - Fix for repeated SUGHUP
  - New NetworkManager module to get and set zones of connections, used in
    firewall-applet and firewall-config
  - configure: Autodetect backend tools ({ip,ip6,eb}tables{,-restore}, ipset)
  - Code cleanups
  - Bug fixes


author: Thomas Woerner <twoerner@redhat.com> - 0.4.1.2-1
changelog:
  - Fixed translations with python3
  - Fixed exception for failed NM import, new doc string
  - Make ipsets visible per default in firewall-config
  - Install new fw_nm module
  - Do not fail if log file could not be opened
  - Fixed broken fr translation


author: Thomas Woerner <twoerner@redhat.com> - 0.4.2-1
changelog:
  - New module to search for and change ifcfg files for interfaces not under
    control of NM
  - firewall_config: Enhanced messages in status bar
  - firewall-config: New message window as overlay if not connected
  - firewall-config: Fix sentivity of option, view menus and main paned if not
    connected
  - firewall-applet: Quit on SIGINT (Ctrl-C), reduced D-Bus calls, some cleanup
  - firewall-[offline]cmd: Show target in zone information
  - D-Bus: Completed masquerade methods in FirewallClientZoneSettings
  - Fixed log-denied rules for icmp-blocks
  - Keep sorting of interfaces, services, icmp-blocks and other settings in zones
  - Fixed runtime-to-permanent not to save interfaces under control of NM
  - New icmp-block-inversion flag in the zones
  - ICMP type filtering in the zones
  - New services: sip, sips, managesieve
  - rich rules: Allow destination action (RHBZ#1163428)
  - firewall-offline-cmd: New option -q/--quiet
  - firewall-[offline-]cmd: New --add-[zone,service,ipset,icmptype]-from-file
  - firewall-[offline-]cmd: Fix option for setting the destination address
  - firewall-config: Fixed resizing behaviour
  - New transaction model for speed ups in start, restart, stop and other actions
  - firewall-cmd: New options --load{zone,service,ipset,icmptype}-defaults
  - Fixed memory leak in dbus_introspection_add_properties
  - Landscape.io fixes, pylint calm downs
  - New D-Bus getXnames methods to speed up firewall-config and firewall-cmd
  - ebtables-restore: No support for COMMIT command
  - Source port support in services, zones and rich rules
  - firewall-offline-cmd: Added --{add,remove}-entries-from-file for ipsets
  - firewall-config: New active bindings side bar for simple binding changes
  - Reworked NetworkManager module
  - Proper default zone handling for NM connections
  - Try to set zone binding with NM if interface is under control of NM
  - Code cleanup and bug fixes
  - Include test suite in the release and install in /usr/share/firewalld/tests
  - New Travis-CI configuration file
  - Fixed more broken frensh translations
  - Translation updates


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.1-1
changelog:
  - New firewalld release 0.4.3.1
  - firewall.command: Fix python3 DBusException message not interable error
  - src/Makefile.am: Fix path in firewall-[offline-]cmd_test.sh while installing
  - firewallctl: Do not trace back on list command without further arguments
  - firewallctl (man1): Added remaining sections zone, service, ..
  - firewallctl: Added runtime-to-permanent, interface and source parser,
    IndividualCalls setting
  - firewall.server.config: Allow to set IndividualCalls property in config
    interface
  - Fix missing icmp rules for some zones
  - runProg: Fix issue with running programs
  - firewall-offline-cmd: Fix issues with missing system-config-firewall
  - firewall.core.ipXtables: Split up source and dest addresses for transaction
  - firewall.server.config: Log error in case of loading malformed files in
    watcher
  - Install and package the firewallctl man page
  - New firewallctl utility (RHBZ#1147959)
  - doc.xml.seealso: Show firewalld.dbus in See Also sections
  - firewall.core.fw_config: Create backup on zone, service, ipset and icmptype
    removal (RHBZ#1339251)
  - {zone,service,ipset,icmptype}_writer: Do not fail on failed backup
  - firewall-[offline-]cmd: Fix --new-X-from-file options for files in cwd
  - firewall-cmd: Dropped duplicate setType call in --new-ipset
  - radius service: Support also tcp ports (RBZ#1219717)
  - xmlschemas: Support source-port, protocol, icmp-block-inversion and ipset
    sources
  - config.xmlschema.service.xsd: Fix service destination conflicts
    (RHBZ#1296573)
  - firewall-cmd, firewalld man: Information about new NetworkManager and ifcfg
  - firewall.command: Only print summary and description in print_X_info with
    verbose
  - firewall.command: print_msg should be able to print empty lines
  - firewall-config: No processing of runtime passthroughs signals in permanent
  - Landspace.io fixes and pylint calm downs
  - firewall.core.io.zone: Add zone_reader and zone_writer to __all__, pylint
    fixes
  - firewall-config: Fixed titles of command and context dialogs, also entry
    lenths
  - firewall-config: pylint calm downs
  - firewall.core.fw_zone: Fix use of MAC source in rich rules without ipv limit
  - firewall-config: Use self.active_zoens in conf_zone_added_cb
  - firewall.command: New parse_port, extended parse methods with more checks
  - firewall.command: Fixed parse_port to use the separator in the split call
  - firewall.command: New [de]activate_exception_handler, raise error in parse_X
  - services ha: Allow corosync-qnetd port
  - firewall-applet: Support for kde5-nm-connection-editor
  - tests/firewall-offline-cmd_test.sh: New tests for service and icmptype
    modifications
  - firewall-offline-cmd: Use FirewallCommand for simplification and sequence
    options
  - tests/firewall-cmd_test.sh: New tests for service and icmptype modifications
  - firewall-cmd: Fixed set, remove and query destination options for services
  - firewall.core.io.service: Source ports have not been checked in _check_config
  - firewall.core.fw_zone: Method check_source_port is not used, removed
  - firewall.core.base: Added default to ZONE_TARGETS
  - firewall.client: Allow to remove ipv:address pair for service destinations
  - tests/firewall-offline-cmd_test.sh: There is no timeout option in permanent
  - firewall-cmd: Landscape.io fixes, pylint calm downs
  - firewall-cmd: Use FirewallCommand for simplification and sequence options
  - firewall.command: New FirewallCommand for command line client simplification
  - New services: kshell, rsh, ganglia-master, ganglia-client
  - firewalld: Cleanup of unused imports, do not translate some deamon messages
  - firewalld: With fd close interation in runProg, it is not needed here anymore
  - firewall.core.prog: Add fd close iteration to runProg
  - firewall.core.fw_nm: Hide NM typelib import, new nm_get_dbus_interface
    function
  - firewalld.spec: Require NetworkManager-libnm instead of NetworkManager-glib
  - firewall-config: New add/remove ipset entries from file, remove all entries
  - firewall-applet: Fix tooltip after applet start with connection to firewalld
  - firewall-config: Select new zone, service or icmptype if the view was empty
  - firewalld.spec: Added build requires for iptables, ebtables and ipset
  - Adding nf_conntrack_sip module to the service SIP
  - firewall: core: fw_ifcfg: Quickly return if ifcfg directory does not exist
  - Drop unneeded python shebangs
  - Translation updates


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-1
changelog:
  - Fix regression with unavailable optional commands
  - All missing backend messages should be warnings
  - Individual calls for missing restore commands
  - Only one authenticate call for add and remove options and also sequences
  - New service RH-Satellite-6
  - Fixed selinux-policy conflict version for RHEL-7


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.3-1
changelog:
  - Fix CVE-2016-5410: Firewall configuration can be modified by any logged in
    user
  - firewall/server/firewalld: Make getXSettings and getLogDenied CONFIG_INFO
  - Update AppData configuration file.
  - tests/firewalld_rich.py: Use new import structure and FirewallClient classes
  - tests/firewalld_direct.py: Use new import structure
  - tests: firewalld_direct: Fix assert to check for True instead of False
  - tests: firewalld_config: Fix expected value when querying the zone target
  - tests: firewalld_config: Use real nf_conntrack modules
  - firewalld.spec: Added comment about make call for %build
  - firewall-config: Use also width_request and height_request with default size
  - Updated firewall-config screenshot
  - firewall-cmd: Fixed typo in help output (RHBZ#1367171)
  - test-suite: Ignore stderr to get default zone also for missing firewalld.conf
  - firewall.core.logger: Warnings should be printed to stderr per default
  - firewall.core.fw_nm: Ignore NetworkManager if NM.Client connect fails
  - firewall-cmd, firewallctl: Gracefully fail if SystemBus can not be aquired
  - firewall.client: Generate new DBUS_ERROR if SystemBus can not be aquired
  - test-suite: Do not fail on ALREADY_ENABLED --add-destination tests
  - firewall.command: ALREADY_ENABLED, NOT_ENABLED, ZONE_ALREADY_SET are warnings
  - doc/xml/firewalld.dbus.xml: Removed undefined reference
  - doc/xml/transform-html.xsl.in: Fixed references in the document
  - doc/xml/firewalld.{dbus,zone}.xml: Embed programlisting in para
  - doc/xml/transform-html.xsl.in: Enhanced html formatting closer to the man page
  - firewall: core: fw_nm: Instantiate the NM client only once
  - firewall/core/io/*.py: Do not traceback on a general sax parsing issue
  - firewall-offline-cmd: Fix --{add,remove}-entries-from-file
  - firewall-cmd: Add missing action to fix --{add,remove}-entries-from-file
  - firewall.core.prog: Do not output stderr, but return it in the error case
  - firewall.core.io.ifcfg.py: Fix ifcfg file reader and writer (RHBZ#1362171)
  - config/firewall.service.in: use KillMode=mixed
  - config/firewalld.service.in: use network-pre.target
  - firewall-config: Add missing gettext.textdomain call to fix translations
  - Add UDP to transmission-client.xml service
  - tests/firewall-[offline-]cmd_test.sh: Hide errors and warnings
  - firewall.client: Fix ALREADY_ENABLED errors in icmptype destination calls
  - firewall.client: Fix NOT_ENABLED errors in icmptype destination calls
  - firewall.client: Use {ALREADY,NOT}_ENABLED errors in icmptype destination
    calls
  - firewall.command: Add the removed FirewallError handling to the action
    (a17ce50)
  - firewall.command: Do not use query methods for sequences and also single
    options
  - Add missing information about MAC and ipset sources to man pages and help
    output
  - firewalld.spec: Add BuildRequires for libxslt to enable rebuild of man pages
  - firewall[-offline]-cmd, firewallctl, firewall.command: Use sys.{stdout,stderr}
  - firewallctl: Fix traceback if not connected to firewalld
  - firewall-config: Initialize value in on_richRuleDialogElementChooser_clicked
  - firewall.command: Convert errors to string for Python3
  - firewall.command: Get proper firewall error code from D-BusExceptions
  - firewall-cmd: Fixed traceback without args
  - Add missing service files to Makefile.am
  - shell-completion: Add shell completion support for
    --{get,set}--{description,short}
  - Updated RHEL-7 selinux-policy and squid conflict


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4-1
changelog:
  - Fix dist-check
  - src/Makefile.am: Install new helper files
  - config/Makefile.am: Install helpers
  - Merged translations
  - Updated translations from zanata
  - firewalld.spec: Adapt requires for PyQt5
  - firewall-applet: Fix fromUTF8 for python2 PyQt5 usage
  - firewall-applet: Use PyQt5
  - firewall-config: New nf_conntrack_select dialog, use nf_conntrack_helpers D-Bus property
  - shell-completion/bash/firewall-cmd: Updates for helpers and also some fixes
  - src/tests/firewall-[offline-]cmd_test.sh: New helper tests, adapted module tests for services
  - doc/xml/seealso.xml: Add firewalld.helper(5) man page
  - doc/xml/seealso.xml: Add firewalld.ipset(5) man page
  - Fixed typo in firewalld.ipset(5) man page
  - Updated firewalld.dbus(5) man page
  - New firewalld.helper(5) man page
  - doc/xml/firewall-offline-cmd.xml: Updated firewall-offline-cmd man page
  - doc/xml/firewall-cmd.xml: Updated firewall-cmd man page
  - firewall-offline-cmd: New support for helpers
  - firewall-cmd: New support for helpers
  - firewall.command: New check_helper_family, check_module and print_helper_info methods
  - firewall.core.fw_test: Add helpers also to offline backend
  - firewall.server.config: New AutomaticHelpers property (rw)
  - firewall.server.config: Fix an dict size changed error for firewall.conf file changes
  - firewall.server.config: Make LogDenied property readwrite to be consistent
  - Some renames of nf_conntrack_helper* functions and structures, helpers is a dict
  - firewall.core.fw: Properly check helper setting in set_automatic_helpers
  - firewall.errors: Add missing BUILTIN_HELPER error code
  - No extra interface for helpers needed in runtime, dropped DBUS_INTERFACE_HELPER
  - firewall.server.firewalld: Drop unused queryHelper D-Bus method
  - New helpers Q.931 and RAS from nf_conntrack_h323
  - firewall.core.io.helper: Allow dots in helper names, remove underscore
  - firewall.core.io.firewalld_conf: Fixed typo in FALLBACK_AUTOMATIC_HELPERS
  - firewall-[offline-]cmd: Use sys.excepthook to force exception_handler usage always
  - firewall.core.fw_config: new_X methods should also check builtins
  - firewall.client: Set helper family to "" if None
  - firewall.client: Add missing module string to FirewallClientHelperSettings.settings
  - config/firewalld.conf: Add possible values description for AutomaticHelpers
  - helpers/amanda.xml: Fix typo in helper module
  - firewall-config: Added support for helper module setting
  - firewall.client: Added support for helper module setting
  - firewall.server.config_helper: Added support for helper module setting
  - firewall.core.io.service, firewall.server.config_service: Only replace underscore by dash if module start with nf_conntrack_
  - firewall.core.fw_zone: Use helper module instead of a generated name from helper name
  - helpers: Added kernel module
  - firewall.core.io.helper: Add module to helper
  - firewall-cmd: Removed duplicate --get-ipset-types from help output
  - firewall.core.fw_zone: Add zone bingings for PREROUTING in the raw table
  - firewall.core.ipXtables: Add PREROUTING default rules for zones in raw table
  - firewall-config: New support to handle helpers, new dialogs, new helper tab, ..
  - config/org.fedoraproject.FirewallConfig.gschema.xml.in: New show-helpers setting
  - firewall.client: New helper management for runtime and permanent configuration
  - firewall.server.firewalld: New runtime helper management, new nf_conntrack_helper property
  - firewall.server.config_service: Fix module name handling (no nf_conntrack_ prefix needed)
  - firewall.server.config: New permanent D-Bus helper management
  - New firewall.server.config_helper to provide the permanent D-Bus interface for helpers
  - firewall.core.fw_zone: Use helpers fw.nf_conntrack_helper for services using helpers
  - firewall.core.fw: New helper management, new _automatic_helpers and nf_conntrack_helper settings
  - firewall.core.fw_config: Add support for permanent helper handling
  - firewall.core.io.service: The module does not need to start with nf_conntrack_ anymore
  - firewall.functions: New functions to get and set nf_conntrack_helper kernel setting
  - firewall.core.io.firewalld_conf: New support for AutomaticHelpers setting
  - firewall.config.dbus: New D-Bus definitions for helpers, new DBUS_INTERFACE_REVISION 12
  - New firewall.core.fw_helper providing FirewallHelper backend
  - New firewall.core.helper with HELPER_MAXNAMELEN definition
  - config/firewalld.conf: New AutomaticHelpers setting with description
  - firewall.config.__init__.py.in: New helpers variables
  - firewalld.spec: Add new helpers directory
  - config/Makefile.am: Install new helpers
  - New helper configuration files for amanda, ftp, irc, netbios-ns, pptp, sane, sip, snmp and tftp
  - firewall.core.io.helper: New IO handler for netfilter helpers
  - firewall.errors: New INVALID_HELPER error code
  - firewall.core.io.ifcfg: Use .bak for save files
  - firewall-config: Set internal log_denied setting after changing
  - firewall.server.config: Copy props before removing items
  - doc/xml/firewalld.ipset: Replaced icmptype name remains with ipset
  - firewall.core.fw_zone: Fix LOG rule placement for LogDenied
  - firewall.command: Use "source-ports" in print_zone_info
  - firewall.core.logger: Use syslog.openlog() and syslog.closelog()
  - firewall-[offline-]cmd man pages: Document --path-{zone,icmptype,ipset,service}
  - firewall-cmd: Enable --path-{zone,icmptype,service} options again
  - firewall.core.{ipXtables,ebtables}: Copy rule before extracting items in set_rules
  - firewall.core.fw: Do not abort transaction on failed ipv6_rpfilter rules
  - config/Makefile.am: Added cfengine, condor-collector and smtp-submission services
  - Makefile.am: New dist-check used in the archive target
  - src/Makefile.am: Reordered nobase_dist_python_DATA to be sorted
  - config/Makefile.am: New CONFIG_FILES variable to contain the config files
  - Merge pull request #150 from hspaans/master
  - Merge pull request #146 from canvon/bugfix/spelling
  - Merge pull request #145 from jcpunk/condor
  - Command line tools man pages: New section about sequence options and exit codes
  - Creating service file for SMTP-Submission.
  - Creating service file for CFEngine.
  - Fix typo in documentation: iptables mangle table
  - Only use sort on lists of main items, but not for item properties
  - firewall.core.io.io_object: import_config should not change ordering of lists
  - firewall.core.fw_transaction: Load helper modules in FirewallZoneTransaction
  - firewall.command: Fail with NOT_AUTHORIZED if authorization fails (RHBZ#1368549)
  - firewall.command: Fix sequence exit code with at least one succeeded item
  - Add condor collector service
  - firewall-cmd: Fixed --{get,set}-{description,short} for permanent zones
  - firewall.command: Do not use error code 254 for {ALREADY,NOT}_ENABLED sequences


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.1-1
changelog:
  - firewall-config: Use proper source check in sourceDialog (fixes issue#162)
  - firewallctl: New support for helpers
  - Translation updates


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.2-1
changelog:
  - New firewalld-selinux sub package delivering the SELinux policy module for
    firewalld (RHBZ#1396765) (RHBZ#1394625) (RHBZ#1394578) (RHBZ#1394573)
    (RHBZ#1394569)
  - New firewalld release 0.4.4.2:
    - firewalld.spec: Added helpers and ipsets paths to firewalld-filesystem
    - firewall.core.fw_nm: create NMClient lazily
    - Do not use hard-coded path for modinfo, use autofoo to detect it
    - firewall.core.io.ifcfg: Dropped invalid option warning with bad format
      string
    - firewall.core.io.ifcfg: Properly handle quoted ifcfg values
    - firewall.core.fw_zone: Do not reset ZONE with ifdown
    - Updated translations from zanata
    - firewall-config: Extra grid at bottom to visualize firewalld settings


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.2-2
changelog:
  - Dropping firewalld-selinux package again as the required fix made it into
    selinux-policy packages for F-23+, updated selinux-policy version conflicts


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.3-1
changelog:
  - Rebase to firewalld-0.4.4.3
    http://www.firewalld.org/2017/02/firewalld-0-4-4-3-release
  - Speed up of large file loading
  - Support for more ipset types
  - Speed up of adding or removing entries for ipsets from files
  - Support icmp-type usage in rich rules
  - Support for more icmp types
  - Support for h323 conntrack helper
  - New services
  - Code cleanup and several other bug fixes
  - Translation updates


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.4-1
changelog:
  - Rebase to firewalld-0.4.4.4
    http://www.firewalld.org/2017/03/firewalld-0-4-4-4-release
  - Drop references to fedorahosted.org from spec file and Makefile.am, use
    archive from github
  - Fix inconsistent ordering of rules in INPUT_ZONE_SOURCE (issue#166)
  - Fix ipset overloading from /etc/firewalld/ipsets
  - Fix permanent rich rules using icmp-type elements (RHBZ#1434594)
  - firewall-config: Deactivate edit, remove, .. buttons if there are no items
  - Check if ICMP types are supported by kernel before trying to use them
  - firewall-config: Show invalid ipset type in the ipset configuration dialog
    in a special label


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.5-1
changelog:
  - Rebase to firewalld-0.4.4.5
    http://www.firewalld.org/2017/06/firewalld-0-4-4-5-release
    - Fix build from spec
    - Fix –remove-service-from-zone option (RHBZ#1438127)
    - Support sctp and dccp in ports, source-ports, forward-ports, helpers and
      rich rules (RHBZ#1429808)
    - firewall-cmd: Fix –{set,get}-{short,description} for zone (RHBZ#1445238)
    - firewall.core.ipXtables: Use new wait option for restore commands if
      available
    - New services for oVirt:
      ctdb, ovirt-imageio, ovirt-storageconsole, ovirt-vmconsole and nrpe
    - Rename extension for policy choices (server and desktop) to .policy.choice
      (RHBZ#1449754)
    - D-Bus interfaces: Fix GetAll for interfaces without properties
      (RHBZ#1452017)
    - Load NAT helpers with conntrack helpers (RHBZ#1452681)
    - Translation updates
  - Additional upstream patches:
    - Rich-rule source validation (d69b7cb)
    - IPv6 ICMP type only rich-rule fix (cf50bd0)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.4.4.5-4
changelog:
  - Python 2 binary package renamed to python2-firewall
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Eric Garver <egarver@redhat.com> - 0.6.1-4
changelog:
  - backports for new failed state if startup fails
  - backports to use explicit RETURN on user defined ebtables chains
  - backports to fix nftables AUDIT log support


author: Eric Garver <egarver@redhat.com> - 0.6.1-5
changelog:
  - python3-firewalld can get by with python3-gobject-base
  - firewall-config can get by with python3-qt5-base


author: Eric Garver <egarver@redhat.com> - 0.6.3-4
changelog:
  - backport recent stable fixes
  - backport fix for lost NM interfaces during reload
  - backport rich rule priorities
  - backport fix for set entries not applied
  - update translations


author: Eric Garver <egarver@redhat.com> - 0.7.0-3
changelog:
  - backport patch to show service includes in service output
  - backport patches to fix dbus API break


author: Eric Garver <egarver@redhat.com> - 0.8.2-2
changelog:
  - fix(cli): add ipset type hash:mac is incompatible with the family parameter
  - fix(cli): add --zone is an invalid option with --direct
  - fix: update dynamic DCE RPC ports in freeipa-trust service
  - fix: core: rich: Catch ValueError on non-numeric priority values
  - fix(rich): icmptypes with one family
  - fix(direct): rule in a zone chain
  - plus additional upstream stable fixes


author: Eric Garver <egarver@redhat.com> - 0.8.2-3
changelog:
  - fix(nftables): packet marks with masks
  - fix(nftables): icmp types with code == 0
  - fix(rich icmptype): verify rule and icmptype families
  - fix(zone): cache rule_str for rich rules
  - improvement(service): IPsec: Update description and add TCP port 4500
  - feat(service): add collectd service
  - feat(service): Add rpc-rquotad.service


author: Eric Garver <egarver@redhat.com> - 0.9.3-12
changelog:
  - feat(config): add CleanupModulesOnExit configuration option
  - change default CleanupModulesOnExit=yes


author: Kalev Lember <klember@redhat.com> - 1.12.9-2
changelog:
  - Backport upstream patches for CVE-2024-42472
  - Require bubblewrap version that has new --bind-fd option backported for
    addressing CVE-2024-42472


author: Adam Jackson <ajax@redhat.com> - 0.11.7-2
changelog:
  - Remove Requires: kernel >= 4.0.4-202, which corresponds to rawhide
    somewhere before Fedora 22 which this spec file certainly no longer
    supports.


author: Jan Grulich <jgrulich@redhat.com> - 1.12.9-4
changelog:
  - Fix arbitrary code execution via crafted symlinks in sandbox-expose options
    Resolves: RHEL-165633
  - Fix arbitrary file deletion on host via improper cache file path validation
    Resolves: RHEL-170160


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-1
changelog:
  - Rebase to 2.6.4
  - Fix build failure due to missing include and `reallocarray' prototype
  - Add gettext-devel, automake and libtool to build dependencies, and
    execute `autoreconf -i' to regenerate files after patching configure.ac


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Fabio Alessandro Locati <fale@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.1
  - Update the brand icons list using a new script
  - Add the script to create brand icons list


author: Akira TAGOH <tagoh@redhat.com> - 2.13.0-6
changelog:
  - Add Suggests: dejavu-sans-fonts to address pulling the unpredicted
    font package as dependency. (#1321551)


author: Akira TAGOH <tagoh@redhat.com> - 2.13.1-3
changelog:
  - Stop cleaning up .uuid file even when a directory is empty.
    resolves: rhbz#1653171
  - Use Rachana instead of Meera for serif subsitution.
    resolves: rhbz#1650491


author: Marius L. Jøhndal <mariuslj at ifi.uio.no> 0:0.0-0.fdr.1.031012
changelog:
  - Updated to 031012.
  - Removed .so links.
  - Removed empty AUTHORS file.
  - Removed the samples subpackage.


author: Marius L. Jøhndal <mariuslj at ifi.uio.no> 0:0.0-0.fdr.2.031012
changelog:
  - Patched to use dynamic linking instead of dlopen'ing (bug 497).
  - Patched to use htmlview and use installed documentation (bug 497).
  - Added build req libxml2-devel (bug 497).
  - Disabled parallell make (bug 497).
  - Added desktop entry (bug 497).


author: Marius L. Jøhndal <mariuslj at ifi.uio.no> 0:0.0-0.fdr.3.031012
changelog:
  - Fixed non-standard value in desktop file (bug 497).
  - Added libuninameslist support.
  - Removed separate documentation tarball; mostly identical to those in source (bug 497).


author: Marius L. Jøhndal <mariuslj at ifi.uio.no> 0:0.0-0.fdr.6.031110
changelog:
  - Updated to 031110.
  - Eliminated build patch; incorporated in upstream tarball.
  - Re-added documentation tarball since no longer included in source tarball.
  - Added pfaicon.gif as Packaging directory disappeared from tarball.


author: Marius L. Jøhndal <mariuslj at ifi.uio.no> - 0:0.0-0.fdr.1.20040321
changelog:
  - Updated to 20040321.
  - Changed package name from pfaedit to fontforge.
  - Added Obsoletes: pfaedit.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:0.0-2.20041231
changelog:
  - Avoid RPATH.
  - Convert man pages to UTF-8.
  - Fix pkgconfig and doc file permissions.
  - Use updated upstream icon.
  - Don't include installation documentation.


author: Roozbeh Pournader <roozbeh@farsiweb.info> - 20060125-1
changelog:
  - Update to 20060125 (bug #170177)
  - Update docs to 20060114
  - Change versioning to reflect upstream and follow packaging guidelines
  - Provide pfaedit (bug #176548)
  - Use %{?dist} tag (bug #176472)
  - Add localizations
  - No need to remove CVS subdir: fixed upstream
  - No need to covert man pages to UTF-8: fixed upstream
  - Fixed DOS line terminators
  - Use parallel build


author: Kevin Fenzi <kevin@tummy.com> - 20080828-1
changelog:
  - Upgrade to 20080828
  - Add Requires on autotrace. Fixes 460668
  - Confirm patch from 459451 is upstream here.


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 20080927-1
  ☢ quick & dirty version bump to start working on F11 font packages
  ⟲ time to forget about pfaedit
  ⤑ take care of rpmlint warnings


author: Kevin Fenzi <kevin@tummy.com> - 20090224-2
changelog:
  - Apply patch for python modules loading (fixes #489109)
  - use install -p to fix multiarch issue (fixes #480685)


author: Parag Nemade <pnemade AT redhat DOT com> - 20120731b-9
changelog:
  - Added cflags -Wstrict-aliasing
  - Fixed some compile-time errors from invalid Makefile rules
  - Fixed bogus date in changelog


author: Parag Nemade <pnemade AT redhat DOT com> - 20120731b-10
changelog:
  - Revert previously added -Wstrict-aliasing cflags
  - We actaully need -fno-strict-aliasing (rh#903288)
  - Remove %defattr() (rh#1003518)
  - fontforge.xml should not be executable (rh#1003518)


author: Parag Nemade <pnemade AT redhat DOT com> - 20140813-1
changelog:
  - Update to fontforge 2.0 snapshot 20140813
  - corrected some scriptlets as per packaging guidelines
  - Added new subpackage -doc


author: Parag Nemade <pnemade AT redhat DOT com> - 20140813-2
changelog:
  - Add gnulib source for bootstrap as koji don't have network
  - Patch Makefile.am to use system uthash-devel
  - We also need gnulib-devel


author: Parag Nemade <pnemade AT redhat DOT com> - 20160404-3
changelog:
  - Rebuild for new libuninameslist-20160701 build
  - Add BuildRequires: shared-mime-info
  - Add BuildRequires: gcc


author: Parag Nemade <pnemade AT redhat DOT com> - 20161012-6
changelog:
  - Resolves:rh#1429574 - [abrt] fontforge: PyFF_OpenFont(): fontforge killed by signal 6
  - Added patch to fix python module for python3.6


author: Parag Nemade <pnemade AT redhat DOT com> - 20200314-7
changelog:
  - Resolves: RHEL-138168
    CVE-2025-15270 SFD File Parsing Remote Code Execution Vulnerability
  - Resolves: RHEL-138174
    CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138190
    CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138140	
    CVE-2025-15269 SFD File Parsing Use-After-Free


author: Benjamin Berg <bberg@redhat.com> - 1.94.0-3
changelog:
  - Use GFDL abbreviation as GFDLv1.1+ is not listed
  - Install PAM module into /usr
  - Pull in further test fixes


author: José Expósito <jexposit@redhat.com> - 3.2.1-10
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25176
    Resolves: https://issues.redhat.com/browse/RHEL-25178


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Jan Safranek <jsafrane@redhat.com> - 1.0.1:1
changelog:
  - Updated to freeipmi-1.0.1, see announce at
    http://lists.gnu.org/archive/html/freeipmi-users/2011-01/msg00006.html
  - Configuration files moved from /etc/ to /etc/freeipmi/. Support legacy config
    files for backwards compatibility.
  - More detailed release information can be found in the NEWS file.


author: Jan Safranek <jsafrane@redhat.com> - 1.0.2-1
changelog:
  - Updated to freeipmi-1.0.2, see announce at
    http://lists.gnu.org/archive/html/freeipmi-users/2011-02/msg00027.html


author: Jan Safranek <jsafrane@redhat.com> - 1.0.3-1
changelog:
  - Updated to freeipmi-1.0.3, see announce at
    http://lists.gnu.org/archive/html/freeipmi-users/2011-03/msg00017.html


author: Jan Safranek <jsafrane@redhat.com> - 1.2.1-1
changelog:
  - Reworked RPM scriptlets to use systemd-rpm macros (#850117).
  - Updated to freeipmi-1.2.1:
   - Support new ipmiseld daemon, a daemon that regularly polls the SEL
     and stores the events to the local syslog.
   - In ipmipower, support --oem-power-type option to support OEM
     specific power control operations.  Included in this support were
     the follow changes to ipmipower:
     - Support initial OEM power type of C410X.
     - Re-architect to allow input of extra information for an OEM power
       operation via the '+' operator after the hostname.
     - Re-architect to allow input of target hostname multiple times
       under OEM power cases.
     - Re-architect to allow serialization of power control operations to
       the same host.
   - Globally in tools, support --target-channel-number and
     --target-slave-address to specify specific targets.
   - Globally in tools, support ability to specify alternate port via
     optional [:port] in hostname or host config.
   - In ipmi-fru, support --bridge-fru option to allow reading FRU entries
     from satellite controllers.
   - In bmc-config, add configuration support for
     Maximum_Privilege_Cipher_Suite_Id_15 under RMCPplus_Conf_Privilege.
   - Globally support Cipher Suite ID 15 and 16 based on comments from
     Intel.
   - In ipmi-sensors, support --output-sensor-thresholds, to allow
     outputting of sensor thresholds in default output for scripting.
   - In ipmi-sel, support new --post-clear option.
   - In bmc-device, support new --set-sensor-reading-and-event-status
     option.
   - In ipmi-oem, support additional Intel Node Manager commands,
     including:
     - get-node-manager-capabilities
     - node-manager-policy-control 
     - get-node-manager-policy
     - set-node-manager-policy
     - remove-node-manager-policy
     - get-node-manager-alert-thresholds
     - set-node-manager-alert-thresholds
     - get-node-manager-policy-suspend-periods
     - set-node-manager-policy-suspend-periods
     - set-node-manager-power-draw-range
   - In ipmi-oem, support Wistron OEM commands extensions.
   - In ipmi-sel, support Wistron OEM SEL interpretations.
   - In ipmi-fru, support Wistron OEM FRU records.
   - In ipmi-pef-config, support configuration volatile Alert String 0
     and Lan Alert Destination 0.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.2-1
changelog:
  - Updated to freeipmi-1.2.2:
   - Support new --sol-payload-instance and --deactivate-all-instances
     options in ipmiconsole.
   - Fix ipmiseld compile issue with -Werror=format-security.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.3-1
changelog:
  - Updated to freeipmi-1.2.3:
   - In ipmi-oem, support new Dell Poweredge R720 OEM commands extensions,
     including:
    - get-nic-selection-failover
    - set-nic-selection-failover
    - power-monitoring-over-interval
    - power-monitoring-interval-range
    - get-last-post-code
   - In ipmi-oem, update active-lom-status for Dell Poweredge R720.
   - In ipmi-oem, support new Dell Poweredge R720 get-system-info option
     'cmc-info'.
   - In ipmi-oem, Dell get-system-info "slot-number" key changed to
     "blade-slot-info".  Legacy option still supported.
   - In ipmi-sel, support Dell Poweredge R720 OEM SEL extensions.
   - In all tools, support nochecksumcheck workaround option.
   - In all daemons (ipmiseld, ipmidetectd, bmc-watchdog), check for
     syscall errors during daemon setup.

   - In libfreeipmi, support Dell R720 OEM extension intepretations.
   - In libfreeipmi, libipmimonitoring, and libipmiconsole, support
     NO_CHECKSUM_CHECK workaround flag.
   - In libipmiconsole, IPMICONSOLE_DEBUG_FILE logs debug to files in
     current working directory and not /var/log.  PID is also appended to
     debug files.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.4-1
changelog:
  - Updated to freeipmi-1.2.4:
   - Support Supermicro X9DRI-LN4F+ OEM sensors and events.
   - Fix output corner case for "session-based" channels.
   - Fix ipmi-oem set-power-restore-delay corner case in time settings.
   - Fix ipmiseld memleak.
   - Fix libfreeipmi potential fd leak when generating random numbers.
   - Fix libfreeipmi error output bug in RMCP interface.
   - Fix several minor corner cases discovered by static code analysis.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.5-1
changelog:
  - Updated to freeipmi-1.2.5:
   - Support Supermicro X9SPU-F-O OEM sensors and events.
   - Support Supermicro X9DRI-LN4F+ OEM intepretations (previously
     forgotten).


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.6-1
changelog:
  - Updated to freeipmi-1.2.6
   - Support HP Proliant DL160 G8 OEM sensors.
   - Support Supermicro X9SCM-iiF OEM sensors and events.
   - Support output of temperature sampling period to ipmi-dcmi.
   - Clarify error message when SOL session cannot be stolen in
     ipmiconsole/libipmiconsole.
   - Fix dcmi rolling average time period output error
   - Fix ipmi-dcmi output errors with --get-dcmi-sensor-info.
   - Fix corner case in calculation of confidentiality pad length with
     AES-CBC-128 encryption.  Incorrect pad effects some vendor firmware
     implementations.
   - Send IPMI 2.0 packets differently than IPMI 1.5 packets, as the
     former does not require legacy pad data to be appended to payloads.
   - Fix Intel OEM SEL buffer overflow.
   - Fix out of trunk source build.
   - Support new ipmi_rmcpplus_sendto() and ipmi_rmcpplus_recvfrom()
     functions.
   - Support new HP Proliant DL160 G8 OEM sensor events.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.6-2
changelog:
  - spec update by Christopher Meng <rpm@cicku.me>
  - hardened build flags should include PIE also for bmc-watchdog.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.9-1
changelog:
  - Updated to upstream freeipmi-1.2.9
   - Fix threshold output corner case in ipmi-sensors.
   - Fix invalid declaration in libipmimonitoring header.
   - Fix older compiler build problems.
   -
   - Fix portability build bug on ARM systems.
   - Add 'internal IPMI error' troubleshooting to manpages.
   - Fix bmc-info corner case on Bull 510 systems.


author: Ales Ledvinka <aledvink@redhat.com> - 1.3.1-1
changelog:
  - Updated to freeipmi-1.3.1
   - Timestamp UTC/localtime reporting compliant with specification.
     Remote timestamp expected to be in localtime already.
   - Timestamp reporting options --utc-to-localtime,
     --localtime-to-utc and --utc-offset.
   - In ipmi-fru, support output of DDR3 SDRAM modules.
   - In ipmi-fru, support output of new FRU multirecords, most notably
     extended DC output and extended DC load (per FRU Revision 1.2).
   - Support additional chassis types (per FRU Revision 1.2 update).
   - and more


author: Ales Ledvinka <aledvink@redhat.com> - 1.3.2-1
changelog:
  - Updated to freeipmi-1.3.2
   - Update FreeIPMI tools to check libfreeipmi API error codes
     correctly.
   - Update ipmi-api.h to list mappings of IPMI completion codes and
     RMCPPlus codes to API Error codes.


author: Ales Ledvinka <aledvink@redhat.com> - 1.3.3-1
changelog:
  - Updated to freeipmi-1.3.3
   - Add support for intelnm get-node-manager-alert-destination and
     set-node-manager-alert-destination in ipmi-oem.
   - Under very verbose mode, ipmi-sel will now record types for OEM
     records.  This should allow OEM parses outside of FreeIPMI to more
     effectively parse OEM specific SEL records.
   - Fix big endian portability bugs.


author: Ales Ledvinka <aledvink@redhat.com> - 1.3.4-2
changelog:
  - Module alias dependencies.
  - Changes for previous 1.3.4 update:
   - Support 'solchannelsupport' workraound in ipmiconsole /
     IPMICONSOLE_WORKAROUND_SKIP_CHANNEL_PAYLOAD_SUPPORT workaround flag in
     libipmiconsole.
   - Fix SDR cache workaround for motherboards with invalid SDR record
     counts listed.
   - Workaround Supermicro bug in bmc-watchdog. 
   - Fix error checks in sensor decoding functions, leading to possible
     problems in ipmi-sensors-config.
   - Update documentation with additional workarounds for motherboards.


author: Ales Ledvinka <aledvink@redhat.com> - 1.4.1-1
changelog:
  - Updated to upstream freeipmi-1.4.1
   - Support new tool ipmi-config.  Ipmi-config is a consolidated
     configuration tool implementing everything that was previously in
     bmc-config, ipmi-pef-config, ipmi-sensors-config, and
     ipmi-chassis-config.
     - The consolidated tool will allow users to checkout, commit, and
       diff sections/fields across the four former tools using only one
       tool.
     - The consolidated tool will also allow users to checkout, commit,
       and diff new sections/fields not yet covered in the four former
       tools.
     - Legacy scripts for bmc-config, ipmi-pef-config,
       ipmi-sensors-config, and ipmi-chassis-config will point to the new
       tool with all appropriate options to ensure full backwards
       compatability.
     - The ipmi-pef-config --info option has been made legacy.  It is
       still supported but no longer advertised.
   - Support Intel Data Center Host Interface / Management Engine as
     optional driver type for in-band communication.
     - Typically these are loaded as /dev/dcmi and /dev/mei drivers.
     - This driver is identified as the "inteldcmi" type, as it is
       specific to Intel systems.
   - Support OEM extensions for Intel Windmill, Wiwynn Windmill, and
     Quanta Winterfell motherboards in ipmi-sel and ipmi-sensors.  These
     motherboards are also know as motherboards for the Open Compute
     Project (OCP).
   - Support DCMI configuration in ipmi-config.
   - Update FreeIPMI for changes in IPMI 2.0 Errata 5.  Include are:
     - New sensor events for Power Supply and OS Boot sensors.  New
       events are supported in all areas, ipmi-sensors, ipmi-sel,
       libipmimonitoring, etc.
     - PEF now supports 255 filter numbers, not 127.  This is supported
       in ipmi-config (formerly ipmi-pef-config).
     - Support get/set of new System Info Parameters Present OS Version,
       BMC URL, and Base OS/Hypervisor URL.  This is supported in
       bmc-info and bmc-device.
   - Update ipmi-oem Intel Node Manager OEM commands for changes listed
     in Intelligent Power Node Manager 2.0 specification.
     - Due to changes in the specification, minor text changes may exist
       in some output from intelnm OEM commands.
   - Update ipmi-sel to support new SEL events in Intelligent Power Node
     Manager 2.0 specification.
   - Support 'serialalertsdeferred' workaround in ipmiconsole.
   - Support 'solpacketseq' workaround in ipmiconsole.
   - Fix portability issues for Apple / OS X.
   - Fix bmc-info output of GUID, format was output with two bytes out of
     order.
     - May affect scripts parsing and using the GUID.
   - Bmc-info now supports --get-system-guid and outputs the System GUID
     as well as the Device GUID by default.
     - The Device GUID is not prefixed with the text "Device GUID"
       instead of just "GUID".  Any scripts scripting against this will
       need to be adjusted.
   - Bmc-info now supports a workaround of 'guidformat' to read the GUID
     with a format a number of vendors have incorrectly used.
   - In ipmi-config's sensor configuration, decimal values that cannot be
     encoded accurately now report a clearer error message.


author: Ales Ledvinka <aledvink@redhat.com> - 1.4.3-1
changelog:
  - Updated to upstream freeipmi-1.4.3
   - In ipmi-oem, support Supermicro get-power-supply-status and
     get-pmbus-power-supply-status commands.
   - Support 'ipmiping' workaround in ipmipower.
   - Minor documentation updates.


author: Ales Ledvinka <aledvink@redhat.com> - 1.4.6-1
changelog:
  - Updated to upstream freeipmi-1.4.6
   - In ipmi-fru, support output of DDR4 SDRAM modules.
   - Fix EFI probing on non IA64 systems.
   - Fix corner case in ipmi-raw w/ standard input or --file and empty lines.
   - Fix parsing corner case in ipmi-chassis.
   - Support SSIF bridging.
   - Fix libipmiconsole calculation bug w/ SOL character send size.
   - Support Supermicro H8DGU and H8DG6 OEM sensors and events.
   - Minor documentation updates.


author: Christopher Meng <rpm@cicku.me> - 1.4.8-1
changelog:
  - Updated to freeipmi-1.4.8
   - Fix segfault in crypt code with libgcrypt versions >= 1.6.0.
   - Fix --fanout command line parse bug.
   - Fix typ - from FRU spec, language "Tegulu" is actually "Telugu".
   - Fix typ - in SEL session output, "Invalid Username of Password" to
    "Invalid Username or Password".
   - Loop on select() call if interrupted by EINTR in openipmi, ssif, and
    sunbmc inband drivers.
   - Fix integer overflow bug in ipmi-config when configure vlan ID > 255.
   - Add workaround for ipmi-config issue on Supermicr - X10DDW-i.
   - Fix error handling bug in bmc-info.


author: Josef Ridky <jridky@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6 (#1468062)
  - Fix issue with capital letters in commands in manpage (#1468984)


author: Antonio Torres <antorres@redhat.com> - 3.0.20-13
changelog:
  - Fix multiple CVEs
  - Add rpminspect configuration
    Resolves: #2151702
    Resolves: #2151704
    Resolves: #2151706


author: Ondrej Holy <oholy@redhat.com> - - 2:2.2.0-9
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136151)
  - CVE-2022-39283: Add missing length check in video channel (#2136153)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145139)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145139)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145139)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145139)
  - CVE-2022-39347: Fix path validation in drive channel (#2145139)
  - CVE-2022-41877: Add missing length check in drive channel (#2145139)


author: Simone Caronni <negativo17@gmail.com> - 2:2.0.0-36.20180115git8f52c7e
changelog:
  - Update to latest snapshot.
  - Make GSS support optional and disable it for now (#1534094 and FreeRDP #4348,


author: Karsten Hopp <karsten@redhat.com> - 2.0.0-37git}
changelog:
  - use versioned build requirement on pkgconfig(openssl) to prevent using
    compat-openssl10-devel instead of openssl-devel


author: Simone Caronni <negativo17@gmail.com> - 2:2.0.0-39.20180314gitf8baeb7
changelog:
  - Update to latest snapshot.
  - Fixes connection to RDP servers with the latest Microsoft patches:
    https://github.com/FreeRDP/FreeRDP/issues/4449


author: Ondrej Holy <oholy@redhat.com> - 2:2.0.0-47.rc4
changelog:
  - Fix SCARD_INSUFFICIENT_BUFFER error (rhbz#1803054)
  - Do not advertise /usb in help output (rhbz#1761144)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-2
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-142417, RHEL-142401, RHEL-142385, RHEL-142369, RHEL-142353
    Resolves: RHEL-142337, RHEL-142321


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-5
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-147954, RHEL-147955, RHEL-147970, RHEL-147977, RHEL-147980
    Resolves: RHEL-148002, RHEL-148014, RHEL-148031, RHEL-148906, RHEL-148996
    Resolves: RHEL-149007, RHEL-149056, RHEL-155984


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-7
changelog:
  - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
  - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
    Resolves: RHEL-162949, RHEL-162965


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-8
changelog:
  - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
  - Fix growth of preallocated buffers (CVE-2026-27951)
  - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
  - Add DSP format checks (CVE-2026-31884)
  - Fix DSP array bounds checks (CVE-2026-31883)
  - Fix DSP array bounds checks (CVE-2026-31885)
  - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
    Resolves: RHEL-159806, RHEL-155468, RHEL-161037, RHEL-161472
    Resolves: RHEL-161508, RHEL-161075, RHEL-167794


author: Tomas Popela <tpopela@redhat.com> - 1.6.1-7
changelog:
  - Rebuild with newer annobin to fix rpmdiff problems
  - Fix the build with a newer opencv
  - Resolves: rhbz#1703994


author: Akira TAGOH <tagoh@redhat.com> - 1.0.4-9
changelog:
  - Fix security issues CVE-2022-25308, CVE-2022-25309, CVE-2022-25310.
    Resolves: rhbz#2050085, rhbz#2050068, rhbz#2050062
  - Drop --disable-docs from %configure. no such options available.


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-13
changelog:
  - Resolves: RHEL-2263 - eBGP multihop peer flapping due to delta miscalculation of new configuration


author: lutw <lutw@ieisystem.com> - 7.5.1-16.0.3
changelog:
  - fix CVE-2023-46752
  - fix CVE-2023-46753
  - fix CVE-2023-31490
  - fix CVE-2023-41909
  - fix CVE-2023-41358
  - fix CVE-2023-47234 because in 7.5.1-16.0.2  CVE-2023-47234 CVE-2023-47235 is not suitable to fix CVE-2023-46752 CVE-2023-46753, so change to use rehl patch


author: Michal Ruprich <mruprich@redhat.com> - 7.5-5
changelog:
  - Resolves: #1979426 - Unable to configure OSPF in multi-instance mode
  - Resolves: #1917269 - vtysh running-config output not showing bgp ttl-security hops option


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-1
changelog:
  - Resolves: #2018451 - Rebase of frr to version 7.5.1
  - Resolves: #1975361 - the dynamic routing setup does not work any more


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-2
changelog:
  - Resolves: #1941765 - AVCs while running frr tests on RHEL 8.4.0 Beta-1.2
  - Resolves: #1714984 - SELinux policy (daemons) changes required for package


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-6
changelog:
  - Resolves: #1939516 - frr service cannot reload itself, due to executing in the wrong SELinux context


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-7
changelog:
  - Resolves: #2128737 - out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-14
changelog:
  - Resolves: RHEL-6617 - Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-16
changelog:
  - Resolves: RHEL-15916 - Flowspec overflow in bgpd/bgp_flowspec.c
  - Resolves: RHEL-15919 - Out of bounds read in bgpd/bgp_label.c
  - Resolves: RHEL-15869 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  - Resolves: RHEL-15868 - crash from malformed EOR-containing BGP UPDATE message


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-17
changelog:
  - Resolves: RHEL-6583 - Routes are not refreshed after changing the inbound route rules from deny to permit


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 7.5.1-24
changelog:
  - Fix off-by-one error in FlowSpec operator array bounds checking (CVE-2026-37457)
  - Resolves: RHEL-174676


author: Jindrich Novy <jnovy@redhat.com> - 0.7.2-4
changelog:
  - replace "fuse-overlayfs segfault" patch with improved one
    due to application to a different context
  - Resolves: #1805017


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-3
changelog:
  - fix "error bind mounting /dev from host into mount namespace"
    (the openat2 syscall is not yet supported by the RHEL8 kernel)
  - Resolves: #1867447


author: Jindrich Novy <jnovy@redhat.com> - 1.13-1
changelog:
  - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.13
  - Related: Jira:RHEL-2110


author: Richard Hughes <richard@hughsie.com> 1.5.5-1
changelog:
  - Rebase package to include support for latest OEM hardware and to
    support deploying UEFI SecureBoot dbx updates.
  - Resolves: #1870811


author: Richard Hughes <richard@hughsie.com> 1.5.5-2
changelog:
  - Do not invalidate all remote timestamps during package install to fix rpm -V.
  - Backport some important high priority fixes from upstream.
  - Resolves: #1926382


author: Richard Hughes <richard@hughsie.com> 1.5.9-3
changelog:
  - Rebase to include the SBAT metadata section to allow fixing BootHole
  - Resolves: rhbz#1933012
  - Resolves: rhbz#1932953
  - Resolves: rhbz#1932909
  - Resolves: rhbz#1932882
  - Resolves: rhbz#1932579
  - Resolves: rhbz#1932553
  - Resolves: rhbz#1932423


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport upstream changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1969472
  - Resolves: rhbz#1976408


author: Richard Hughes <richard@hughsie.com> 1.7.1-2
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Resolves: rhbz#2029333


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Resolves: rhbz#2038258
  - Resolves: rhbz#2037294


author: Lukas Javorsky <ljavorsk@redhat.com> - 25.3.34-3
changelog:
  - Use downstream garbd-wrapper and garbd.service to ensure compatibility
  - Add upstream versions of garbd-wrapper (called garbd-systemd) and garbd.service
    in case user want's to use them


author: Lukas Javorsky <ljavorsk@redhat.com> - 25.3.34-4
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Richard W.M. Jones <rjones@redhat.com> - 25.3.12-1
changelog:
  - Update to 25.3.12.
  - Should fix the build on 32 bit ARM (RHBZ#1241164).
  - Remove ExcludeArch (should have read the BZ more closely).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 9.1-3
changelog:
  - Fix 'Recursive call to 'missing_rpm_list_print' when pagination is
    on and missing RPM list is big' (RHBZ 1801974, Sergio Durigan
    Junior).


author: Kevin Buettner <kevinb@redhat.com> - 9.1-6
changelog:
  - Fix build breakage of gdb/python/python.c due to use of deprecated
    Python function (RHBZ 1822715, Kevin Buettner)


author: Keith Seitz <keiths@redhat.com> - 9.2-1
changelog:
  - Rebase to FSF GDB 9.2.
  - Add explicit python bytecode compilation.
  - Change included files to patches to quell error from rpminspect.
  - Fix attach-32.exp from gdb-6.3-inferior-notification-20050721.patch.


author: Keith Seitz <keiths@redhat.com> - 9.2-3
changelog:
  - Fix missing debuginfo messages. (Keith Seitz, RH BZ 1894703)
  - Add debuginfod.m4 patch to use pkg-config. 
  - Backport "Corefile memory access problems" patches.
    (Kevin Buettner, RH BZ 1886602)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)


author: Keith Seitz <keiths@redhat.com> - 9.2-4
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Fortran dynamic type related fixes"
    (Andrew Burgess, RH BZ 1905702)


author: Nick Clifton <nickc@redhat.com> - 9.72-1
changelog:
  - Rebase to 9.72.  (#1957319)
  - annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
  - gcc-plugin: Add support for ARM and RISCV targets.
  - timing: do not initialise the clock if the timing tool is disabled.
  - gcc-plugin: Replace ICE messsages with verbose messages.
  - Fix the testsuite so that it can be run in parallel.
  - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)
  - Obsolete annobin < 9.66-1 (bug #1949570)
  - Annocheck: Improve detection of missing GNU-stack support.
  - Correct a package rename (bug #1949570)
  - Require docs subpackage by the other ones because of a license
  - Build-requiring perl-interpreter is enough
  - Fix bz1949570
  - Fix anomolies reported by covscan.
  - Move documentation into a sub-package.
  - gcc-plugin: Use a fixed filename when running in LTO mode.
  - Annocheck: Fix detection of special function names.  (#1934189)
  - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)
  - Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)
  - Annocheck: Fix some problems with tests for missing notes.
  - Split plugins into separate sub-packages
  - Add some GO tests to annocheck.
  - Add a future fail for the presence of RPATH in the dynamic tags.
  - Add the ability to disable the warning message about -D_FORTIFY_SOURCE being missing.
  - Workaround for elflint problems with PPC compiled files.  (#1880634)
  - Fix bogus AArch64 test failures.
  - Improved testing by annocheck.  Add fixed format message mode.
  - Fix inconsistency reporting -fcf-protection and -fstack-clash-protection results.
  - Add support for -D_FORTIFY_SOURCE=3.
  - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)
  - annocheck: Improve test for LTO compiled binaries that do not have -Wall annotations.  (#1906171)
  - annocheck: Mark a missining -D_FORTIFY_SOURCE as a FAIL.
  - annocheck: Fix notes analyzer to accept empty PPC64 notes.
  - gcc plugin: Tweak generation of end symbols for PPC64 when LTO is active.  (#1898075)
  - gcc plugin: Add support for GCC 11's cl_vars array.
  - Annocheck: Support enabling/disabling future fails.
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.
  - Clang plugin: Add -lLLVM to the build command line.
  - Annocheck: Improve reporting of missing -D_FORTIFY_SOURCE option.  (#1898075)
  - Annocheck: Improve reporting of missing LTO option.
  - Add detecting of gimple compiled binaries.
  - Add --without-gcc-plugin option.
  - Annocheck: Fix bug parsing DW_AT_producer.
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.
  - NVR bump for another ELN sidetag rebuild.
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.
  - Correct the directory chosen for 32-bit LLVM and Clang plugins.  (#1884951)
  - Allow the use of the SHF_LINK_ORDER section flag to discard unused notes.  (Experimental).
  - Enable the build and installation of the LLVM and Clang plugins.  (Experimental).
  - gcc-plugin: Fix test for empty PowerPC sections.  (#1880634)
  - annocheck: Add tests for the AArch64 BTI and PAC security features.  (#1862478)
  - gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.
  - gcc plugin: Correct the detection of 32-bit x86 builds.  (#1876197)
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.


author: Nick Clifton <nickc@redhat.com> - 9.79-1
changelog:
  - Annocheck: Fix spelling mistake in -mstack-realign failure message.  (#1977349)
  - gcc-plugin: Do not record global versions of stack protection settings in LTO mode, if not set.  (#1958954)
  - Annocheck: Remove limit on number of input files.
  - Annocheck: Conditionalize test of DF_PIE_1 flag.
  - clang/llvm plugins: Build with correct security options.
  - Annocheck: Better detection of GO compiler version.
  - Annocheck: Better support for symbolic links.
  - Annocheck: In verbose mode, report the reason for skipping specific tests.  (#1969584)


author: Nick Clifton <nickc@redhat.com> - 9.85-1
changelog:
  - Annocheck: Detect a missing CET note.  (#1991931)
  - Annocheck: Do not report future fails for AArch64 notes.
  - Annocheck: Warn about multiple --debug-file, --debug-rpm and --debug-dir options.
  - Annocheck: Process files in command line order.  (#1988714)
  - Annocheck: Reverse AArch64 PAC+BTI check, ie fail if they are enabled.  (#1984995)
  - Annocheck: Add another test exceptions.
  - Annocheck: Add some more test exceptions.
  - Tests: Skip glibc-notes test if the assembler does not support --generate-missing-build-notes.  (#1978573)
  - Tests: Skip objcopy test if objcopy does not support --merge-notes.


author: Nick Clifton <nickc@redhat.com> - 10.23-1 (#2020405)
changelog:
  - Annocheck: Add a test for unicode characters in identifiers.
  - gcc-plugin: Default to link-order grouping for PPC64LE.  (#2016458)
  - Annocheck: Do not fail if a --skip-<name> option does not match a known test.
  - ldconfig-test: Skip the LTO check.
  - Annocheck: Add more glibc function names.
  - gcc-plugin: Fix attaching the .text section to the .text.group section.
  - Complain about DT_RPATH for Fedora binaries.
  - Better reporting of problems in object files.  (#2013708)
  - Add a requirement on llvm-libs for clang and llvm plugins.  (#2014573)
  - Fix configuring annocheck without gcc-plugin.
  - Annocheck: Better reporting of debuginfod problems.
  - Tests: Fix bugs in debuginfod test.
  - Annocheck: Add tests based upon recent bug fixes.
  - Annocheck: Another tweak to glibc detection code.
  - Annocheck: Fix memory corruptions when using --debug-path and when a corrupt note is found.  (#20011438)
  - Annocheck: Fix MAYB results for mixed GO/C files.
  - Annocheck: Move some messages from VERBOSE to VERBOSE2.
  - Annocheck: Scan zero-length tool notes.
  - Annocheck: Fix covscan detected flaws.
  - plugins: Add more required build options.
  - Annocheck: Fix cf-prot test to fail if the CET notes are missing.
  - Annocheck: Skip gaps in the .plt section.
  - Plugins: Add -g option when building LLVM and Clang.
  - Annocheck: Add more cases of glibc startup functions.
  - Annocheck: Fix covscan detected problems.
  - Annocheck: Add --profile=el8.
  - gcc-plugin: Conditionalize generation of branch protection note.
  - Annocheck: Ignore gaps containing NOP instructions.
  - GCC Plugin: Fix detection of running inside the LTO compiler.  (#2004917)
  - Annocheck: Do not insist on the DT_AARCH64_PAC_PLT flag being present in AArch64 binaries.
  - Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result.
  - Annocheck: Do not set CFLAGS/LDFLAGS when building.  Take from environment instead.
  - Annocheck: Fix exit code when tests PASS.
  - Documentation: Add node for each hardening test.
  - Documentation: Install online.
  - Annocheck: Annote FAIL and MAYB results with URL to documentation
  - Annocheck: Add --no-urls and --provide-urls options
  - Annocheck: Add --help-<tool> option.
  - Annocheck: Fix fuzzing detected failures.
  - Annocheck: Add --profile option.
  - Docs: Document --profile option and rpminspect.yaml.
  - Annocheck: Skip GO/CET checks.  Fix fuzzing detected failures.
  - LLVM Plugin: Automatically choose the correct tests to run, based upon the version of Clang installed. (#1997444)
  - Annocheck: Fix memory corruption.  (#1996963)
  - Annocheck: Fix conditionalization of AArch64's PAC+BTI detection.
  - Annocheck: Add linker generated function for ppc64le exceptions.  (#1981410)
  - LLVM Plugin: Allow checks to be selected from the command line.
  - Annocheck: Examine DW_AT_producer for -flto.    
  - Annocheck: Conditionalize detection of AArch64's PAC+BTI protection.
  - Annocheck: Add linker generated function for s390x exceptions.  (#1981410)
  - Annocheck: Generate MAYB results for gaps in notes covering the .text section.  (#1991943)
  - Annocheck: Close DWARF file descriptors once the debug info is no longer needed.  (#1981410)
  - LLVM Plugin: Update to build with Clang v13.  (Thanks to: Tom Stellard <tstellar@redhat.com>)
  - Annocheck: Fix memory corruption.  (#1988715)
  - Annocheck: Skip certain tests for kernel modules.


author: Keith Seitz <keiths@redhat.com> - 10.1-14
changelog:
  - Backport "Save/restore file offset while reading notes in core file"
    (Keith Seitz, RHBZ 1931344)


author: Kevin Buettner <kevinb@redhat.com> - 10.2-1
changelog:
  - Rebase to FSF GDB 10.2.
  - Drop gdb-6.3-test-pie-20050107.patch.
  - Drop gdb-6.3-test-self-20050110.patch.
  - Drop gdb-6.5-bz218379-ppc-solib-trampoline-test.patch.
  - Drop gdb-6.6-buildid-locate-core-as-arg.patch.
  - Drop gdb-6.8-quit-never-aborts.patch.
  - Drop gdb-archer-pie-addons-keep-disabled.patch.
  - Drop gdb-archer-pie-addons.patch.
  - Drop gdb-archer-vla-tests.patch.
  - Drop gdb-archer.patch.
  - Drop gdb-attach-fail-reasons-5of5.patch.
  - Drop gdb-btrobust.patch.
  - Drop gdb-bz1219747-attach-kills.patch.
  - Drop gdb-bz533176-fortran-omp-step.patch.
  - Drop gdb-dts-rhel6-python-compat.patch.
  - Drop gdb-gnat-dwarf-crash-3of3.patch.
  - Drop gdb-jit-reader-multilib.patch.
  - Drop gdb-moribund-utrace-workaround.patch.
  - Drop gdb-rhbz1930528-fix-gnulib-build-error.patch.
  - Drop gdb-rhbz1932645-aarch64-ptrace-header-order.patch.
  - Drop gdb-vla-intel-fix-print-char-array.patch.
  - Drop gdb-vla-intel-fortran-strides.patch.
  - Drop gdb-vla-intel-stringbt-fix.patch.
  - Drop gdb-vla-intel-tests.patch.
  - Drop process_psymtab_comp_unit-type-unit.patch.
  - Drop gdb-testsuite-readline63-sigint-revert.patch.
  - Drop gdb-config.patch.
  - Add following upstream patches for Fortran stride / slice support:
    gdb-rhbz1964167-convert-enum-range_type.patch
    gdb-rhbz1964167-fortran-array-slices-at-prompt.patch
    gdb-rhbz1964167-fortran-array-strides-in-expressions.patch
    gdb-rhbz1964167-fortran-clean-up-array-expression-evaluation.patch
    gdb-rhbz1964167-fortran-range_type-to-range_flag.patch
    gdb-rhbz1964167-fortran-whitespace_array.patch
    gdb-rhbz1964167-move-fortran-expr-handling.patch


author: Keith Seitz <keiths@redhat.com> - 10.2-2
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Fix crash when expanding partial symtab..."
    (Tom Tromey. gdb/27743)


author: Keith Seitz <keiths@redhat.com> - 10.2-3.el8
changelog:
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnez, RH BZ 1903375)


author: Keith Seitz <keiths@redhat.com> - 10.2-4.el8
changelog:
  - Backport "Fix gdb.fortran/array-slices.exp with -m32"
    (Tom de Vries, testsuite/269970)
  - Backport "adjust gdb.python/flexible-array-member.exp expected pattern"
    (Simon Marchi)


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.90.20190304-19
changelog:
  - Rebase to FSF GDB 8.2.90.20190301 (8.3pre).
  - Rewrite gdb-6.6-buildid-locate.patch.
  - Add (temporarily) gdb-fix-aarch64-enable-unittests.patch.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.90.20190320-21
changelog:
  - Rebase to FSF GDB 8.2.90.20190320 (8.3pre).
  - Fix 'New gdb terminal colors are unreadable on GNOME Terminal "dark"
    theme.' (Tom Tromey, RH BZ 1688372).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-1
changelog:
  - Release GDB 8.3.
  - Fix 'gcore does not support COREFILTER_ELF_HEADERS' (Sergio Durigan
    Junior, RH BZ 1371380).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-2
changelog:
  - "Fix" segfault that happens on parse_macro_definition because
    debugedit corrupts the .debug_macro section (Sergio Durigan Junior,
    RH BZ 1708192).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-3
changelog:
  - Complement previous fix of a segfault that happens on
    parse_macro_definition (RHBZ 1715008, Sergio Durigan Junior).


author: Keith Seitz <keiths@redhat.com> - gcc-toolset-9 8.3-1
changelog:
  - Add Buildrequire for boost-devel.
  - Include guile support for RHEL.
  - Add gating for gcc-toolset-9.
  - Define global __python to workaround scl python issue.


author: Remi Collet <remi@fedoraproject.org> - 2.2.5-1
changelog:
  - Update to 2.2.5
  - fix double-free in gdImagePngPtr(). CVE-2017-6362
  - fix buffer over-read into uninitialized memory. CVE-2017-7890


author: mskalick@redhat.com - 2.2.5-6
changelog:
  - Check return value in gdImageBmpPtr to avoid double free (CVE-2018-1000222)
    Resolves: RHBZ#1621956


author: fjanus@redhat.com - 2.2.5-7
changelog:
  - Fix CVE-2018-14553 - Potential Null pointer dereference in gdImageClone
    Resolves: RHBZ#1811788
  - Fixed heap based buffer overflow in gd_color_match.c:gdImageColorMatch() in libgd as used in imagecolormatch()
    Resolves: RHBZ#1678104 (CVE-2019-6977)
  - Fixed potential double-free in gdImage*Ptr()
    Resolves: RHBZ#1679002 (CVE-2019-6978)


author: Kevin Buettner <kevinb@redhat.com> - 9.1-6
changelog:
  - Backport patches fixing abort when working directory is deleted.
    (RHBZ 1869484, Sergio Durigan Junior)


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Richard Hughes <rhughes@redhat.com> - 2.31.3-2
changelog:
  - Split out the modules as a subpackage to allows us to depend on the core
    library on the cloud image and not drag every image loader known to man.


author: Richard Hughes <rhughes@redhat.com> - 2.31.3-3
changelog:
  - Split out the xlib code as a subpackage to allows us to depend on the core
    library on the cloud image and not depends on half of Xorg.


author: Kalev Lember <klember@redhat.com> - 2.38.0-1
changelog:
  - Update to 2.38.0
  - Switch to the meson build system
  - Remove ancient conflicts
  - Remove ldconfig scriptlets


author: Deji Akingunola <dakingun@gmail.com> - 0.0.15-1.svn20080117
changelog:
  - Update to a svn snapshot for gnome-scan
  - Apply patch to fix extensions loading on 64bit systems
  - Building the docs on ppc64 segfaults, avoid it for now.


author: Nils Philippsen - 0.0.22-2
changelog:
  - use the same timestamps for certain documentation files on all architectures
    to avoid multi-lib conflicts (#481404)
  - consolidate spec files between OS releases
  - reenable building documentation on ppc64
  - explicitly list more build requirements and/or versions to catch eventual
    problems during future builds


author: Nils Philippsen
changelog:
  - version 0.1.0
  - use "--disable-gtk-doc" to avoid rebuilding documentation (#481404)
  - remove *.la files in %{_libdir}/gegl-*/ (#509292)


author: Deji Akingunola <dakingun@gmail.com> - 0.1.0-3
changelog:
  - Rebuild for babl-0.1.2
  - Backport upstream patch that removed babl processing time instrumentation


author: Nils Philippsen <nils@redhat.com> - 0.1.2-1
changelog:
  - version 0.1.2
  - remove obsolete cflags, babl-instrumentation, autoreconf patches
  - backported: don't leak each node set on a GeglProcessor


author: Nils Philippsen <nils@redhat.com>
changelog:
  - avoid buffer overflow in gegl_buffer_header_init()
  - correct gegl library version, use macro for it


author: Nils Philippsen <nils@redhat.com> - 0.1.2-3
changelog:
  - build with -fno-strict-aliasing
  - use PIC/PIE because gegl is likely to deal with data coming from untrusted
    sources


author: Nils Philippsen <nils@redhat.com> - 0.1.6-1
changelog:
  - version 0.1.6
  - remove obsolete patches
  - fix erroneous use of destdir
  - correct source URL
  - add BR: exiv2-devel, jasper-devel, suitesparse-devel
  - update BR versions
  - update --with-*/--without-* configure flags
  - replace tabs with spaces for consistency


author: Nils Philippsen <nils@redhat.com> - 0.1.8-1
changelog:
  - version 0.1.8
  - drop all patches
  - add BRs: gdk-pixbuf2-devel, lensfun-devel
  - update BR version: glib2-devel
  - use %_hardened_build macro instead of supplying our own hardening flags


author: Nils Philippsen <nils@redhat.com> - 0.2.0-1
changelog:
  - version 0.2.0
  - split off workshop (i.e. experimental) operations
  - don't build/package workshop operations on EL


author: Nils Philippsen <nils@redhat.com> - 0.2.0-11
changelog:
  - replace lua-5.2 patch by upstream commit
  - fix buffer overflow in and add plausibility checks to ppm-load op
    (CVE-2012-4433)
  - fix multi-lib issue in generated documentation


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.2.0-30
changelog:
  - Fixed building with libopenraw-0.1
  - Added rubygems to BuildRequires to fix build error
  - Modernised the .spec file a bit
  - Disabled silent build


author: Kalev Lember <kalevlember@gmail.com> - 1.99.2-1
changelog:
  - Update to 1.99.2
  - The shared library is gone in this release and all users should use the
    dbus service directly


author: Kalev Lember <kalevlember@gmail.com> - 1.99.2-2
changelog:
  - Review fixes (#999153)
  - Drop ldconfig calls that are unnecessary now that the shared library is gone
  - Drop the build dep on gobject-introspection-devel
  - Include API-Documentation.txt in the -server subpackage


author: Kalev Lember <klember@redhat.com> - 2.4.0-1
changelog:
  - Update to 2.4.0
  - Package new libgeoclue-2.0 library in -libs subpackage
  - Fix directory ownership for /usr/libexec/geoclue-2.0/demos/
  - Use license macro for COPYING


author: Kalev Lember <klember@redhat.com> - 2.5.0-1
changelog:
  - Update to 2.5.0
  - Switch to the meson build system
  - Build gtk-doc documentation
  - Remove ldconfig scriptlets


author: Milan Crha <mcrha@redhat.com> - 2.6.0-8
changelog:
  - Backport Fedora change to provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format)
  - Resolves: RHEL-78739


author: Paul Howarth <paul@city-fan.org> - 2.3.1-1
changelog:
  - Update to 2.3.1
    - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
      greater
    - Previously, on an invalid gzip file, geoipupdate would output binary data
      to stderr; it now displays an appropriate error message
    - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
    - $(sysconfdir) is now created if it doesn't exist (GH#33)
    - The sample config file is now usable (GH#33)


author: Paul Howarth <paul@city-fan.org> - 2.4.0-1
changelog:
  - Update to 2.4.0
    - geoipupdate now checks that the database directory is writable: if it is
      not, it reports the problem and aborts
    - geoipupdate now acquires a lock when starting up to ensure only one
      instance may run at a time: a new option, 'LockFile', exists to set the
      file to use as a lock ('.geoipupdate.lock' in the database directory by
      default)
    - geoipupdate now prints out additional information from the server when a
      download request results in something other than HTTP status 2xx; this
      provides more information when the API does not respond with a database
      file
    - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
    - Previously, a variable named 'ERROR' was used, which caused issues building
      on Windows (GH#36)
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - noarch subpackages always available now
    - libcurl-devel always available now


author: Paul Howarth <paul@city-fan.org> - 2.5.0-1
changelog:
  - Update to 2.5.0
    - Replace use of strnlen() due to lack of universal availability (GH#71)
    - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
    - Remove unused base64 library (GH#68)
    - Add the new configuration option 'PreserveFileTimes'; if set, the
      downloaded files will get the same modification times as their original on
      the server (default is '0') (GH#63)
    - Use the correct types when calling 'curl_easy_setopt()'; this fixes
      warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
    - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
      'ProductIds' option was renamed to 'EditionIDs'; the old options will
      continue to work, but upgrading to the new names is recommended for
      forward compatibility


author: Jens Petersen <petersen@redhat.com> - 1.3-2
changelog:
  - add pkg git as URL (#1093541)
  - downgrade license tag to GPLv2+ in line with rpm (redhat-rpm-config is GPL+)
  - sync with current ghc-rpm-macros: add ghc_arches for backwards compatibility


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 5.50 at last...
  - hpdj 2.6
  - Added 3rd party drivers:
    - Lexmark 5700 (lxm5700m)
    - Alps MD-* (md2k, md5k)
    - Lexmark 2050, 3200, 5700 and 7000 (lex2050, lex3200, lex5700, lex7000)


author: Michael Stefaniuc <mstefani@redhat.com>
changelog:
  - added the stp driver from the gimp-print project.
    It supports high quality printing especialy with Epson Stylus Photo.


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - merged in some patches that got away:
    * Fri Sep  1 2000 Mitsuo Hamada <mhamada@redhat.com>
    - add support JIS B size
    - fix the problem of reconverting GNUPLOT output


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - upgraded to 6.51, a major version upgrade
  - rewrote spec file, threw out some patches
  - turned on IBM's Omni print drivers interface
  - turned on HP's hpijs print drivers interface
  - turned on every driver that looked usable from linux
  - sacrificed a chicken to integrate the old Japanese drivers
  - - This didn't work. The japanese patches are turned off, pending review.
  - - I can do loops with C, but the bugs are in Postscript init files


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-2
changelog:
  - luckily, I had a spare chicken. Thanks to some work by Nakai, and one last
  - desperate search through google, everything /seems/ to be working. I know
  - that there are going to be problems in the japanese code, and I need to turn
  - on the cjk font map from adobe, but it /works/ at the moment.


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-4
changelog:
  - applied drepper@redhat.com's patch for #50300
  - fixed build deps on zlib-devel and libpng-devel, #49853
  - made gs_init.ps a config file; #25096
  - O\^/nZ the daTa directorieZ now; #50693


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-9
changelog:
  - applied IBM's glib patches for Omni, which now works.
  - BE AWARE: we now link against libstdc++ and glib for this, and use a c++
  - link stage to do the dirty.
  - added glib-devel buildreq and glib req, I don't think we require everything
  - yet, I could pull in sasl.


author: Bernhard Rosenkraenzer <bero@redhat.com> 6.52-1
changelog:
  - Updates:
    - ghostscript 6.52
    - hpdj 2.6 -> pcl3 3.3
    - CJK Patchlevel 3, adobe-cmaps 200109
    - gimp-print 4.2.0
  - Adapt patches
  - Fix various URLs
  - Begin cleaning up spec file
  - Fix bugs #21879 and #50923


author: Tim Waugh <twaugh@redhat.com> 6.52-6
changelog:
  - Fix config patch so that gs --help displays the right thing.
  - Don't ship sysvlp.sh.
  - Fix some shell scripts.
  - Ship escputil man page (bug #58919).


author: Tim Waugh <twaugh@redhat.com> 7.05-1
changelog:
  - 7.05.
  - No longer need mkstemp, vflib.fixup, quoting, or PARANOIDSAFER
    patches.
  - Don't apply CJK patches any more (no longer needed).
  - Updated Source15, Patch0, Patch10, Patch5, Patch24, Patch14, Patch12.
  - Made gdevdmpr.c compile again.
  - Move gimp-print to a separate package.
  - Ship the shared object too (and a .so file that is dlopened).
  - Update Omni patch.  No longer need Omni_path, Omni_quiet, Omni_glib patches.
  - Require Omni >= 0.6.1.
  - Add patch to fix gtk+ initial window size.
  - Add devel package with header files.
  - Turn on IJS support.
  - Update hpijs to 1.1.
  - Don't ship the hpijs binary in the ghostscript package.
  - Use -fPIC when building ijs.


author: Tim Waugh <twaugh@redhat.com> 7.05-2
changelog:
  - Don't apply bogus parts of vflib patch (bug #65268).
  - Work around Omni -sPAPERSIZE=a4 problem (bug #65269).


author: Tim Waugh <twaugh@redhat.com> 7.05-8
changelog:
  - Requires recent version of patchutils (bug #65947).
  - Don't ship broken man page symlinks (bug #66238).


author: Tim Waugh <twaugh@redhat.com> 7.05-25
changelog:
  - Fix level 1 PostScript output (bug #78450).
  - No need to carry gomni.c, since it comes from the patch.


author: Tim Waugh <twaugh@redhat.com> 7.05-26
changelog:
  - Don't ship the shared object yet (part of bug #79340).
  - Don't make the gtk package, since that needs the shared object.


author: Tim Waugh <twaugh@redhat.com> 7.05-33
changelog:
  - Add some missing font aliases (bug #73342).
  - Use the system jpeg library.
  - Update hpijs to 1.3.1.
  - Update gdevcups.c from cups-1.1.18.


author: Tim Waugh <twaugh@redhat.com> 7.05-34
changelog:
  - Apply fix for CJK font search method when the fonts are not available
    (bug #83516).
  - The gb18030 patch no longer applies here.


author: Tim Waugh <twaugh@redhat.com> 7.06-1
changelog:
  - 7.06.
  - Updated config, vflib.fixup patches.
  - No longer need dx6, jpeg patches.
  - No longer need to add in missed GNU drivers.
  - Turn off dj970 driver (hpijs drives that).


author: Tim Waugh <twaugh@redhat.com> 7.07-1
changelog:
  - 7.07.
  - Parametrize build_libgs.
  - Remove Omni requirement (bug #88177).
  - Fix ghostscript-gtk obsoletes: line (bug #88175).


author: Tim Waugh <twaugh@redhat.com> 7.07-15
changelog:
  - Build for Fedora Core 1 printer drivers update.
  - Conflicts with foomatic before hpijs 1.5 data.
  - Make fontconfig optional.


author: Tim Waugh <twaugh@redhat.com> 7.07-17
changelog:
  - Removed stp driver.  Use the IJS version (ijsgimpprint) instead.
  - No longer conflicts with foomatic for hpijs versioning.


author: Tim Waugh <twaugh@redhat.com> 7.07-19
changelog:
  - Attempt to fix gdevcups crash (bug #114256).
  - Make gs dynamically link to libgs (bug #114276).
  - Fix gdevesmv.c's misuse of const (bug #114250).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Run /sbin/ldconfig in %post/%postun.
  - Stricter requirements for the main package in the subpackages.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.1
changelog:
  - Switch to ESP Ghostscript.
  - 8.15rc3.
  - Lots of patches dropped.  Perhaps some will need to be re-added.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.2
changelog:
  - Drop 'Provides: libijs.so' because it is incorrect.
  - Build igcref.c with -O0 to work around bug #150771.
  - Renumber patches.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.4
changelog:
  - Add Japanese fonts to FAPIcidfmap (bug #161187).
  - Moved Resource directory.
  - Added use-external-freetype patch (bug #161187).


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.5
changelog:
  - Split font configuration (bug #161187).
  - Reverted this change:
    - Build requires xorg-x11-devel, not XFree86-devel.


author: Tim Waugh <twaugh@redhat.com> 8.15.2-9
changelog:
  - Apply CJKV patch from svn164:165 plus the fix from svn173:174 (bug #194592,
    bug #203712, possibly bug #167596).


author: Tim Waugh <twaugh@redhat.com> 8.15.3-2
changelog:
  - 8.15.3.  No longer need gtk2, ps2epsi, badc, pagesize,
    use-external-freetype, split-font-configuration or cjkv patches.
  - Renumbered patches.


author: Tim Waugh <twaugh@redhat.com> 8.15.3-6
changelog:
  - Configure with --with-drivers=ALL since the advertised default is not
    what gets used (bug #223819).


author: Tim Waugh <twaugh@redhat.com> 8.15.3-7
changelog:
  - dvipdf script fixes (bug #88906).
  - Moved libijs.so and libgs.so into devel package (bug #203623).


author: Tim Waugh <twaugh@redhat.com> 8.15.4-3
changelog:
  - Apply fonts in CIDFnmap even if the same fontnames are already registered
    (bug #163231).
  - New file CIDFmap (bug #233966).
  - Allow local overrides for FAPIcidfmap, cidfmap and Fontmap (bug #233966).


author: Tim Waugh <twaugh@redhat.com> 8.60-0.r8112.1
changelog:
  - 8.60 snapshot from svn.  Patches dropped:
    - big-cmap-post
    - split-cidfnmap
    - exactly-enable-cidfnmap
    - Fontmap.local
    No longer needed:
    - gxcht-64bit-crash


author: Tim Waugh <twaugh@redhat.com> 8.61-2
changelog:
  - Add /usr/share/fonts to fontpath (bug #402551).
  - Restore cidfmap-switching bits, except for FAPIcidfmap which is no
    longer used.
  - Add runlibfileifexists to gs_init.ps.
  - Build with --disable-compile-inits (bug #402501).


author: Tim Waugh <twaugh@redhat.com> 8.61-9
changelog:
  - Build with jasper again (bug #433897).  Build requires jasper-devel, and
    a patch to remove jas_set_error_cb reference.


author: Tim Waugh <twaugh@redhat.com> 8.62-4
changelog:
  - Applied patch to work around bug #229174.
  - Applied patch from upstream to fix box_fill_path for shfill (bug #452348).


author: Tim Waugh <twaugh@redhat.com> 8.63-1
changelog:
  - 8.63.  No longer need r8591 or incomplete-ccittfax patches.
  - Compile without strict aliasing opts due to warnings across several
    files.
  - Don't run autogen.sh for main package, just for ijs which doesn't
    ship with a configure script.


author: Tim Waugh <twaugh@redhat.com> 8.64-6
changelog:
  - Applied patch to fix CVE-2009-0792 (bug #491853).
  - Applied patch to fix CVE-2009-0196 (bug #493379).


author: Tim Waugh <twaugh@redhat.com> 8.64-11
changelog:
  - Fixed CVE-2009-0583,0584 patch by using 255 as the maximum number of
    points, not 100, and by not treating a missing black point tag as an
    error (bug #487744).


author: Tim Waugh <twaugh@redhat.com> 8.70-1
changelog:
  - 8.70.
  - License has changed to GPLv3+.  Packages containing programs that
    link to libgs/libijs are:
    - foomatic (GPLv2+)
    - libspectre (GPLv2+)
    - ImageMagick (ImageMagick, listed on Licensing wiki page under
      "Good Licenses" and marked as GPLv3 compat)
    - gutenprint (GPLv2+)


author: Tim Waugh <twaugh@redhat.com> 8.70-3
changelog:
  - Don't ship libtool la files (bug #542674).
  - Fix debugging output from gdevcups (CVE-2009-4270, bug #540760).
  - Harden ghostscript's debugging output functions (bug #540760).


author: Tim Waugh <twaugh@redhat.com> 8.70-6
changelog:
  - Fixed pdftoraster so that it waits for its sub-process to exit.
  - Another gdevcups duplex fix from upstream revision 10631
    (bug #541604).


author: Tim Waugh <twaugh@redhat.com> 8.71-4
changelog:
  - Actually revert the upstream gdevcups changes (bug #563313).
  - Fixed pdf2dsc.ps (bug #565935).
  - Use fixed patch for LDFLAGS to make sure libgs.so gets a soname
    (bug #565935).


author: Tim Waugh <twaugh@redhat.com> 8.71-6
changelog:
  - Fixed summary.
  - Fixed macros in changelog.
  - Avoid mixed spaces and tabs.
  - Ship COPYING file.
  - Added comments for all patches.
  - More consistent macro use.


author: Tim Waugh <twaugh@redhat.com> 8.71-7
changelog:
  - Don't own the %{_datadir}/ghostscript or
    %{_datadir}/ghostscript/conf.d directories as the filesystem
    package already does (bug #569442).


author: Tim Waugh <twaugh@redhat.com> 8.71-8
changelog:
  - Restore the TIFF default strip size of 0 (bug #571520).
  - Don't segfault closing tiffg3 device if opening failed (bug #571520).
  - Don't revert gdevcups y-axis change (bug #541604).
  - Reallocate memory in gdevcups when color depth changes (bug #563313).


author: Tim Waugh <twaugh@redhat.com> 8.71-9
changelog:
  - Backported some more TIFF fixes (bug #573970).
  - Use upstream fix for TIFF default strip size (bug #571520).


author: Tim Waugh <twaugh@redhat.com> 8.71-12
changelog:
  - Change SEARCH_HERE_FIRST default to make -P- default instead of -P
    (bug #599564).
  - Removed redundant gs-executable patch (bug #502550).


author: Tim Waugh <twaugh@redhat.com> 8.71-15
changelog:
  - Restored Fontmap.local patch, incorrectly dropped after
    ghostscript-8.15.4-3 (bug #610301).
  - Applied patch to let gdevcups use automatic memory allocation.  Use
    RIPCache=auto in /etc/cups/cupsd.conf to enable.
  - Applied patch to fix NULL dereference in bbox driver (bug #591624).
  - Applied upstream patch to fix iname.c segfault (bug #465311).


author: Tim Waugh <twaugh@redhat.com> 9.00-1
changelog:
  - Updated to 9.00.  No longer need -P-, CVE-2009-4270, CVE-2010-1628,
    SEARCH_HERE_FIRST, bbox-close, cups-realloc-color-depth,
    epstopdf-failure, fPIC, gdevcups-ripcache, iname-segfault, ldfalgs,
    pdf2dsc, pdftoraster-exit, tif-fail-close, tiff-default-strip-size,
    or tiff-fixes patches.


author: Tim Waugh <twaugh@redhat.com> 9.00-3
changelog:
  - Don't use carriage return in ps2epsi output (bug #635786).
  - Include more documentation (bug #634354).


author: Tim Waugh <twaugh@redhat.com> 9.00-8
changelog:
  - Applied upstream ICC fix (bug #655449).
  - gdevcups: use correct width and height values when allocating memory
    (upstream bug 691733).


author: Tim Waugh <twaugh@redhat.com> 9.01-1
changelog:
  - 9.01.  No longer needed gdevcups-691733, glyph-stretch-691920,
    icc-fix, scan_token, or system-jasper patches.


author: Tim Waugh <twaugh@redhat.com> - 9.05-3
changelog:
  - Removed more bundled packages (bug #816747).
  - Fixed missing error check when setting ICC profile.


author: Tim Waugh <twaugh@redhat.com> - 9.06-5
changelog:
  - Updated build requirement from gtk2-devel to gtk3-devel so that gsx
    gets built using the correct loader (bug #884483).


author: Tim Waugh <twaugh@redhat.com> 9.07-10
changelog:
  - Added in missing part of gs_sprintf backport: add in the header to
    stdio_.h. Without this there are problems with va_args on some
    platforms (bug #979681).


author: Tim Waugh <twaugh@redhat.com> 9.14-3
changelog:
  - Applied patch from upstream to fix memory handling issue that could
    lead to crashes (bug #1087071).


author: Tim Waugh <twaugh@redhat.com> 9.15-3
changelog:
  - Avoid shipping ramfs source as its license is unclear. Similarly
    with some documentation and example code (bug #1149617).


author: Tim Waugh <twaugh@redhat.com> 9.15-4
changelog:
  - New ghostscript-x11 package for X11 driver (bug #148939).
  - Ghostscript not requiring X11 is now in ghostscript-core.
  - The 'ghostscript' package requires both of these.


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.16-5
changelog:
  - [TEMPORARY] Support for OpenJPEG disabled for builds to pass.
  - Security fix for BZ #1380416 backported.


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-1
changelog:
  - Rebase to latest ghostscript-9.20. Major changes in this rebase:
    - OpenJPEG support has been re-enabled
    - ijs-config custom tool has been removed (pkg-config is used by default)
    - old irrelevant patches removed (changes are part of upstream release now)
    - remaining patches has been updated & renamed
    - no API/ABI changes according to upstream


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-2
changelog:
  - Added security fixes for:
    - CVE-2016-7979 (bug #1382305)
    - CVE-2016-7976 (bug #1382294)
    - CVE-2016-7978 (bug #1382300)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-5
changelog:
  - Added fix to avoid SIGSEGV for some *.ps files. More info here:
    <http://bugs.ghostscript.com/show_bug.cgi?id=697286>


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-6
changelog:
  - Remove and (re-implement) ConvertUTF.c (bug #1404933)
  - Added security fix for CVE-2016-9601 (bug #1410021)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-9
changelog:
  - Added security fixes for:
    - CVE-2016-10217 (bug #1441564)
    - CVE-2016-10218 (bug #1441568)
    - CVE-2016-10219 (bug #1441569)
    - CVE-2016-10220 (bug #1441571)
    - CVE-2017-5951  (bug #1441572)
    - CVE-2017-8291  (bug #1446063)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.22-4
changelog:
  - complete cleanup in ghostscript specfile according to FPG
  - libgs -- new separate package (Ghostscript library)
  - libgs-devel -- new separate subpackage (devel files for Ghostscript library)
  - libijs -- now shipped as a separate package on Pagure
  - ghostscript-tools-fonts -- new subpackage
  - ghostscript-tools-printing -- new subpackage
  - ghostscript-core -- changed to transitional metapackage
  - package is now completely debundled from already packaged software/resources
  - versioned paths for documentation, resources, etc. are no longer used
  - LPR setup scripts removed (no longer shipped)
  - added symlinks for direct resources location to speedup Ghostscript startup times
  - Ghostscript's search path updated to include only fonts locations as a backup
  - support for /usr/share/ghostscript/conf.d dropped (using Google Droid Sans Fallback instead)
  - examples/ folder dropped from *-doc subpackage


author: Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 9.22-8
changelog:
  - Switch to %ldconfig_scriptlets
    >> https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.24-1
changelog:
  - rebase to latest upstream version, which contains important CVE fixes
  - additional ZER0-DAY fixes added


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.24-3
changelog:
  - ghostscript-9.24-002-icc-PermitReading.patch removed
  - ghostscript-9.24-002-fix-for-Canon-and-Kyocera-printers.patch added (bug #1626818)
  - ghostscript-9.24-003-CVE-2018-16802.patch added (bug #1627960)


author: Martin Osvald <mosvald@redhat.com> - 9.26-1
changelog:
  - rebase to latest upstream version 9.26
  - spec change to remove gsdoc.el due to upstream 8bc783cb586


author: Martin Osvald <mosvald@redhat.com> - 9.27-1
changelog:
  - rebase to latest upstream version 9.27
  - security fixes added for:
    - CVE-2019-14811 (bug #1747908)
    - CVE-2019-14812 (bug #1747907)
    - CVE-2019-14813 (bug #1747906)
    - CVE-2019-14817 (bug #1747909)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18
changelog:
  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-15
changelog:
  - RHEL-39110 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Toshio Kuratomi <toshio@tiki-lounge.com> 4.1.3-4
changelog:
  - Modify the way we provide libungif compatibility by building an empty
    library that requires libgif.
  - Remove chmod in install.  It doesn't seem to be necessary.
  - Add a patch to fix a problem with long being 64 bit on x86_64 but the code
    assuming it was 32 bit.


author: Toshio Kuratomi <toshio@tiki-lounge.com> 4.1.3-5
changelog:
  - Merge an option on the empty library link line.
  - Obsolete libungif progs package.
  - Rename -progs to -utils as FC packages seem to have moved in this direction
    for subpackages.


author: Robert Scheck <robert@fedoraproject.org> 4.1.6-2
changelog:
  - Solved multilib problems with documentation (#465208, #474538)
  - Removed static library from giflib-devel package (#225796 #c1)


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Masahiro Matsuya <mmatsuya@redhat.com> - 2:2.8.22-25
changelog:
  - fix CVE-2023-44442
  - fix CVE-2023-44444
  - disable gimp-2.8.22-python-path.patch required for flatpak
  - partially cherry-pick from upstream commit 2987f012 to fix fclose leak
    Resolves: RHEL-17048 RHEL-17060


author: Matt Wilson <msw@redhat.com>
changelog:
  - include subdirs in the help find
  - remove gimp-help-files generation
  - both gimp and gimp-perl own prefix/lib/gimp/1.1/plug-ins
  - both gimp and gimp-devel own prefix/lib/gimp/1.1/modules


author: Matt Wilson <msw@redhat.com>
changelog:
  - disable aa plugin
  - moved the group back to Applications/Multimedia
  - added desktop entry back into the file list


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't include embedxpm, as it depends on a non-included perl module (#=33249)
  - move gimpdoc and xcftopnm to gimp-perl, as they are dependant on the perl Gimp
    module


author: Matt Wilson <msw@redhat.com>
changelog:
  - added gimp-1.2.1-locale.patch, which I've checked in to gimp CVS, to
    correctly set up the locale in plug-ins (#34214)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - leave gtk-doc documentation in place
  - move gimptool to main package
  - own some directories previously not owned


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - build as gimp, not gimp-beta
  - remove all the beta blurbs
  - fix automake dependency
  - fix libtool usage


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - fix binary name in desktop file ("gimp-1.3" until gimp-2.0 becomes final, to
    allow coexistence with old gimp-1.x packages)
  - system intltool buildrequires perl-XML-Parser, work around that, yay


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - set epoch to 1 to upgrade old gimp rpms
  - obsolete gimp2-devel, gimp-beta-devel to allow upgrade of 3rd party repo
    packages, gimp-perl to upgrade old package


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - require %{epoch}:%{version}-%{release} of base package in sub packages
  - rather use %{?smp_mflags} to actually exploit SMP build systems


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - version 2.0pre3
  - update buildroot patch
  - enable building static libs (old default)
  - have '--define'able enable_*
  - disable building of print plugin, it's in another package


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - add libjpeg-devel to BuildRequires (#121236)
  - spit out slightly more informative help message if gimp-help is missing
    (#124307)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - use included desktop (#126723), application-registry, mime-info and
    icon files
  - remove perl cruft (Gimp-Perl is an external package now)
  - further spec file cleaning


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - add MimeType to desktop file
  - run update-desktop-database in %post/%postun
  - don't make stunts with -32 or -64 postfixed binaries anymore
  - require /sbin/ldconfig and /usr/bin/update-desktop-database


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - obsolete fixed gimp-perl version to be able to reintroduce it at a
    later point
  - use correct dir in source URL


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - clip thumbnail quality at 75 and don't barf on saving images at quality 0
    (fix patch for #145100)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - prevent gifload plugin from crashing when loading files with bogus frame size
    (#150677, #150678)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - version 2.2.7, fixes bug in SSE2 assembly for Lighten Only layer mode
    (#145771) and various other bugs
  - on x86 and x86_64, use -msse and -msse2 to accomodate newer compilers


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - use -mmmx/sse/sse2/... only for the relevant source files so that extended
    instruction sets only get used on suitable CPUs (#157409)


author: Nils Philippsen <nphilipp@redhat.com> - 2.2.8
changelog:
  - version 2.2.8
  - clean up file list generation a bit
  - gimptool manpage is in section 1 not 5
  - list auto-generated .pyc and .pyo files


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.10-4
changelog:
  - use htmlview as default web browser (#183730, patch by Ben Levenson)
  - require hicolor-icon-theme (#182784, #182785)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.11-3
changelog:
  - only use pkgconfig if needed in gimptool, require pkgconfig in devel
    subpackage (#189314, #189371)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.12-1
changelog:
  - version 2.2.12
  - use %dist/%fedora/%redhat
  - remove obsolete gcc4, libpng patches
  - show build options in %prep
  - require gettext for building


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.13-3
changelog:
  - use gutenprint per default for current development/future distribution
    versions (Fedora >= 7, RHEL >= 6)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.14-1
changelog:
  - version 2.2.14
    
    Bugs fixed in GIMP 2.2.14
    =========================
    
    - avoid crashing on newer versions of the winicon format (bug #352899)
    - fixed crash in Postscript plug-in (bug #353381)
    - fixed handling of TABs in the text tool (bug #353132)
    - fixed bug in Depth Merge plug-in (bug #355219)
    - fixed bug in GimpDrawablePreview widget (bug #353639)
    - fixed bug in Line Nove script (bug #357433)
    - fixed bug in Ripple plug-in (bug #357431)
    - save locale independent files from Fractal Explorer plug-in (bug #360095)
    - fixed bug in Super Nova plug-in (bug #340073)
    - be more robust against broken XCF files (bug #357809)
    - fixed drawing issues in Image Map plug-in (bug #311621)
    - fixed smoothing option in Fractal Explorer plug-in (bug #372671)
    - load channels in the proper order when opening an XCF file (bug #378003)
    - deal with floating selections in the Burn-In Animation script (bug #384096)
    - fixed clipping in the GimpPreviewArea widget (bug #392692)
    - fixed a potential crash in gimp-remote (bug #392111)
    - work around a file-chooser problem on Windows (bug #398726)
    - fixed markup of the gimp(1) manual page (bug #401145)
    - fixed the fix for the right-to-left layout in layers dialog (bug #348347)
    - fixed PSD save plug-in on 64bit architectures (bug #335130)
    - added missing dependency in gimpui-2.0.pc file (bug #356394)
    - fixed a crash in the PSD save plug-in (bug #395385)
    - improved robustness of transform tool preview code (bug #420595)
    - improved forward compatibility of XCF loader (bug #316207)
    - don't crash in the Compressor plug-in if files can't be opened (bug #422444)
    - fixed sensitivity of input fields in the Lighting plug-in (bug #359833)

  - don't BuildRequire gimp-print/gutenprint anymore


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.15-1
changelog:
  - version 2.2.15

    Bugs fixed in GIMP 2.2.15
    =========================
    
    - fixed parsing of GFig files with CRLF line endings (bug #346988)
    - guard against a possible stack overflow in the Sunras loader (bug #433902)
    - fixed definition of datarootdir in gimptool-2.0 (bug #436386)
    - fixed Perspective tool crash on Mac OS X (bug #349483)
    - fixed area resizing in the Image Map plug-in (bug #439222)
    - added missing library in gimptool-2.0 --libs output
    - added new localizations: Occitan and Persian

  - remove obsolete sunras-overflow patch


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.16-1
changelog:
  - version 2.2.16

    Bugs fixed in GIMP 2.2.16
    =========================

    - improved input value validation in several file plug-ins (bug #453973)
    - improved handling of corrupt or invalid XCF files
    - guard against integer overflows in several file plug-ins (bug #451379)
    - fixed handling of background alpha channel in XCF files (bug #443097)
    - improved forward compatibility of the config parser
    - fixed crash when previewing some animated brushes (bug #446005)

  - remove obsolete psd-invalid-dimensions patch


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.17-1
changelog:
  - version 2.2.17

    Bugs fixed in GIMP 2.2.17
    =========================

    - fixed regression in PSD load plug-in (bug #456042)
    - fixed crash when loading a corrupt PSD file (bug #327444)
    - work around for Pango appending " Not-Rotated" to font names


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.0-0.rc1.1
changelog:
  - version 2.4.0-rc1
  - change license tags to GPLv2+ (main app), LGPLv2+ (libs and devel)
  - drop libXt-devel build requirement
  - build-require pygobject2-devel directly
  - don't let %postun fail
  - remove obsolete buildroot, gimphelpmissing, icontheme, gifload, gimptool
    patches
  - update htmlview patch
  - use more distinct build root
  - use %buildroot consistently
  - explicitely enable configure options
  - more versionized build requirements
  - don't rebuild autofoo files
  - reformat spec file a bit


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.0-1
changelog:
  - version 2.4.0
  - use xdg-open instead of htmlview on Fedora 7 and later
  - change hicolor-icon-theme requirement to be "uncolored" (without
    "(post)"/"(postun)")
  - don't let gtk-update-icon-cache fail scriptlets


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.1-1
changelog:
  - version 2.4.1

    Changes in GIMP 2.4.1
    =====================

    - fixed a minor display rendering problem
    - improved the workaround for broken graphics card drivers (bug #421466)
    - fixed a crash with broken scripts and plug-ins (bug #490055)
    - fixed potential syntax error in configure script (bug #490068)
    - fixed parsing of floating point numbers in Script-Fu (bug #490198)
    - fixed potential crash when converting an indexed image to RGB (bug #490048)
    - update the histogram while doing color corrections (bug #490182)
    - fixed another crash with broken plug-ins (bug #490617).
    - translation updates


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.2-1
changelog:
  - version 2.4.2

    Changes in GIMP 2.4.2
    =====================

    - removed broken and useless HSV Graph script (bug #491311)
    - update the histogram when a color correction tool is cancelled (bug #493639)
    - fixed a crash with certain plug-in or script descriptions (bug #492718)
    - corrected a tooltip (bug #495564)
    - fixed a crash when GIMP is run without any modules (bug #495863)
    - fixed error handling in the TIFF plug-in
    - fixed a problem with Sample points
    - fixed a crash when merging layers in indexed image (bug #495990)
    - update the histogram when painting (bug #494049)
    - fixed another problem with merge operations on indexed images (bug #496437)
    - fixed crash in TIFF plug-in when saving indexed images (bug #497103)
    - changed defaults so that a system monitor profile is only used when the
      user explicitely enabled this feature (bug #496890)
    - fixed endless loop when running equalize on transparent areas (bug #497291)
    - fixed heap corruption in GimpColorScale widget that caused a crash in the
      Compose plug-in (bug #399484)
    - fixed use of background color in Particle Trace script (bug #498282)
    - set the image menu insensitive when there's no image opened (bug #498511)
    - translation updates (ca, et, it, lt, pt, pt_BR, sr, sv)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.3-1
changelog:
  - version 2.4.3

    Changes in GIMP 2.4.3
    =====================

    - avoid filename encoding problems in the WMF import plug-in (bug #499329)
    - fixed horizontal flipping of linked layers (bug #499161)
    - fixed a missing update in the Lighting plug-in UI (bug #500317)
    - fixed a potential crash in the projection code (bug #500178)
    - fixed a minor Makefile issue (bug #500826)
    - removed some pointless warnings from the JPEG and TIFF load plug-ins
    - fixed size calculation for the image size warning dialog (bug #329468)
    - fixed loading of tool options for the rectangle tools (bug #498948)
    - push/pop a context in the Fog filter
    - fixed potential crashes in the Python binding
    - corrected grid drawing with non-integer spacing (bug #502374)
    - fixed grid snapping for coordinates less than the grid offset
    - made the healing brush work properly when dragged (bug #492575)
    - update tool state when a device change happens (bug #493176)
    - improved validation of strings sent over the wire (bug #498207)
    - fixed integer check in Script-Fu (bug #498207)
    - fixed potential out-of-memory problem in Script-Fu
    - translation updates (ca, cs, de, gl, it, ko, lt, sv, uk)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.4-1
changelog:
  - version 2.4.4

    Changes in GIMP 2.4.4
    =====================

    - fixed typo in stock icon name
    - fixed handling of PSD files with empty layer names (bug #504149)
    - merged TinyScheme bug-fixes
    - removed duplicate entry from Tango palette
    - corrected parameter range in Chip Away script (bug #506110)
    - reduced redraw priority and speed of the marching ants (bug #479875)
    - fixed out-of-bounds array access in Convolution Matrix plug-in
    - reduced rounding errors in Convolution Matrix plug-in (bug #508114)
    - fixed potential crash on missing CMYK color profile
    - fixed crash in Bumpmap plug-in when called from some scripts (bug #509608)
    - Equalize should not equalise the alpha channel (bug #510210)
    - increased the number of points the ImageMap plug-in can handle (bug #511072)
    - adjusted the priority of the projection renderer (bug #511214)
    - smooth the brush mask to get a simpler cursor boundary (bug #304798)
    - show the selection even if the image window is invisible (bug #505758)
    - allow to commit a pending rectangular selection using Enter (bug #511599)
    - fixed bug in image dirty state logic (bug #509822)
    - improved GIMPressionist preformance and reduced startup time (bug #512126)
    - fixed a crash in the Convert to Color Profile plug-in (bug #512529)
    - merged some other minor fixes from trunk
    - translation updates (de, it, lt, ru, sv, uk)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.5-1
changelog:
  - version 2.4.5

    Changes in GIMP 2.4.5
    =====================

    - fixed a regression introduced by the brush cursor optimization
      (bug #514309)
    - fixed bug in transform tool preview (bug #340965)
    - fixed PSD export of images with layer masks
    - fixed base64 encoding routine of the Mail plug-in
    - use the correct background color when creating a new image
      (bug #514082)
    - explicitly link libgimpthumb with GLib (bug #515566)
    - improved selection of the font sample string (bug #514021)
    - unified handling of "Enter" and "Space" keysyms (bug #516544)
    - fixed bug in the Glossy script when used with a pattern (bug #517285)
    - correctly record dimensions in Exif data when saving as JPEG
      (bug #517077)
    - fixed sensitivity of plug-in menu items (bug #517683)
    - fixed potential crashes in Wind, Warp, Small Tiles and Apply Canvas
      plug-ins (bug #516369)
    - added default keyboard shortcut for "Paste As New Image"
      (Ctrl-Shift-V)
    - added default keyboard shortcut for "Copy Visible" (Ctrl-Shift-C)
    - fixed missing preview update in Curves tool (bug #518012)
    - fixed a bug in the Frosty Logo script (bug #472316)
    - fixed backward transformations using the PDB (bug #518910)
    - translation fixes and updates (de, eu, eo, fr, he, hu, it, ja, ko)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.6-1
changelog:
  - version 2.4.6

    Changes in GIMP 2.4.6
    =====================

    - fixed handling of the "antialias" tool option (bug #521069)
    - when loading a TIFF image, always set a filename on it (bug #521436)
    - fixed initial state of curve type in Curves tool (bug #523873)
    - fixed potential crash in the Dicom load plug-in
    - respect the brush mask in the Heal tool (bug #521433)
    - plugged some minor memory leaks
    - fixed a glitch in the DND code (bug #317992)
    - gimp-image-convert() must not accept palettes with > 256 colors (bug
        - fixed parameter description in the Map Object plug-in (bug #526679)
    - fixed compilation of unit tests on Mac OS X (bug #528160)
    - fixed handling of "argc-lower-val-y" PDB parameter in Curve Bend plug-in
    - fixed overlap problem in Hue-Saturation tool (bug #527085)
    - fixed asymmetry in Unsharp Mask plug-in (bug #530077)
    - don't show non-existant color profiles in the selector (bug #528958)
    - fixed issues with default aspect ratio in the Crop tool (bug #532057)
    - fixed compilation of the PDF import plug-in with libpoppler 0.8
    - fixed bug in clipboard brush code (bug #532886)
    - corrected layer mask flag in PSD save plug-in (bug #526811)
    - fixed an issue with tablets and newer X.Org releases
    - keep the JPEG save plug-in from writing an empty EXIF tag (bug #529469)
    - fixed crash in Selective Gaussion Blur plug-in (bug #529280)
    - added new translations (Belarusian, Catalan, Norwegian Nynorsk)
    - translation fixes and updates
      (ar, ca, de, el, es, fi, fr, hu, it, ko, pl, pt_BR, ro, sv)


