# changelog

author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9
changelog:
  - Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
  - Resolves: rhbz#1968330 - id lookup is failing intermittently
  - Resolves: rhbz#1964415 - Memory leak in the simple access provider
  - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11
changelog:
  - Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
  - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12
changelog:
  - Resolves: rhbz#2006382 - IPA Intermittence fetching groups
  - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
  - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
  - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update


author: Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1
changelog:
  - Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
  - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13
changelog:
  - Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
  - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14
changelog:
  - Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z]
  - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
  - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15
changelog:
  - Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
  - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> 1.16.5-10.16
changelog:
  - Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-3
changelog:
  - Fixed issues reported by coverity (bz #1026820)
  - Do not mark /etc/ld.so.conf.d/ as config (bz #1011126)
  - Resolves: #1026820 
  - Resolves: #1011126


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-7.el7
changelog:
  - libiscsi-Discovery-return-multiple-portals-for-the-same-disco.patch [bz#1266523]
  - libiscsi-iscsi-ls-skip-link-local-IPv6-addresses.patch [bz#1266523]
  - Resolves: bz#1266523
    (iscsi-ls doesn't work if target has more than one portal)


author: Honza Horak <hhorak@redhat.com> 1.2.4-2
changelog:
  - Changed license from GPLv2 to GPLv2+ to correspond with source
  - Added license LGPLv2+ due to make_isohybrid_mbr.c


author: Matthias Clasen <mclasen@redhat.com> - 1.2.8-2
changelog:
  - Don't ship api docs twice (they were included in both
    the main and the devel package, by accident (need to save
    space on the f19 live images)


author: Nikola Forró <nforro@redhat.com> - 1.2.90-7
changelog:
  - Fix CVE-2018-11212 (#1586062)
  - Fix CVE-2016-3616 (#1318509), CVE-2018-11213 (#1589091)
    and CVE-2018-11214 (#1589110)
  - Fix CVE-2018-11813 (#1591203)


author: Than Ngo <than@redhat.com> - 4.10.5-2
changelog:
  - bz#970713, CVE-2013-2126, double-free flaw when handling
    damaged full-color in Foveon and sRAW files


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.17-2
changelog:
  - Fix the minimal required tdb version
  - Related: rhbz#1133914 - Rebase libldb to version 1.1.17 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-2
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-3
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1
changelog:
  - Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1
changelog:
  - Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                             version 4.7.x


author: Matthias Runge <mrunge@matthias-runge.de> 1.08-8
changelog:
  - rename to liblockfile
  - sorting file to main and -devel package
  - explicitly list files in files-section


author: Matthias Runge <mrunge@matthias-runge.de> 1.08-9
changelog:
  - change description and summary of -devel-subpackage
  - make wildcard for man-pages even match against uncompressed files


author: Rui Matos <rmatos@redhat.com> - 2.5.2-11
changelog:
  - Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
    CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184


author: Michal Ruprich <mruprich@redhat.com> - 1.2.0-5
changelog:
  - Resolves: #1643464 - Add libmaxminddb package as a successor of deprecated GeoIP package
  - Lowering the release to 1.2.0-5 due to current version in el8 - having larger version would break the migration from el7 to el8


author: Remi Collet <remi@fedoraproject.org> - 1.0.14-1
changelog:
  - update to 1.0.14
  - libmemcachedprotocol removed
  - sasl support is back
  - run test during build
  - report various issues to upstream
    https://bugs.launchpad.net/libmemcached/+bug/1079994 (bigendian)
    https://bugs.launchpad.net/libmemcached/+bug/1079995 (config.h)
    https://bugs.launchpad.net/libmemcached/+bug/1079996 (dtrace)
    https://bugs.launchpad.net/libmemcached/+bug/1079997 (-ldl)
    https://bugs.launchpad.net/libmemcached/+bug/1080000 (touch)


author: Remi Collet <remi@fedoraproject.org> - 1.0.15-1
changelog:
  - update to 1.0.15
  - libmemcachedprotocol is back
  - add memaslap command line tool
  - report various issues to upstream
    https://bugs.launchpad.net/libmemcached/+bug/1094413 (libevent)
    https://bugs.launchpad.net/libmemcached/+bug/1094414 (c99 MODE)


author: Remi Collet <remi@fedoraproject.org> - 1.0.16-1
changelog:
  - update to 1.0.16
  - ignore test result for memaslap (XFAIL but PASS)
    https://bugs.launchpad.net/libmemcached/+bug/1115357


author: Václav Pavlín <vpavlin@redhat.com> - 0.9.33
changelog:
  - Update to latest uptsream release 0.9.33 due to
    security issues.
    Resolves: rhbz#1039393, rhbz#1039387


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 1.0.1-5
changelog:
  - Remove conflict with libproxy, its not really necessary since
    we already have the latest libproxy in rawhide.


author: Rex Dieter <rdieter@fedoraproject.org> - 1.0-2
changelog:
  - %files: track lib soname (so bumps aren't a surprise)
  - tighten subpkg deps (%_isa)
  - %build: --disable-static


author: John5342 <john5342 at, fedoraproject.org> 4.2-1
changelog:
  - Rebase to new upstream version
  - Drop patches (they were already both upstream waiting for this new release)
  - No real changes in this version since we already carried all patches except the version change


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.4.alpha
changelog:
  - Avoid 'test/md5.c:126:3: warning: dereferencing type-punned pointer
    will break strict-aliasing rules' by adding -fno-strict-aliasing flag.


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.6.alpha
changelog:
  - Fixes for CVE-2018-14679 CVE-2018-14680 CVE-2018-14681 CVE-2018-14682
  - resolves: rhbz#1611550 rhbz#1611551 rhbz#1611552 rhbz#1611553


author: Christophe Fergeau <cfergeau@redhat.com> - 4.0.3-1
changelog:
  - New upstream 4.0.3 release, should fix a bug breaking metadata fetching
    from musicbrainz servers


author: Christophe Fergeau <cfergeau@redhat.com> - 5.0.1-1
changelog:
  - Package libmusicbrainz5, apart from the name/version it's identical to
    libmusicbrainz4 so this .spec is based on it.


author: Christophe Fergeau <cfergeau@redhat.com> - 5.0.1-2
changelog:
  - Address review comments (rhbz#832670)
      fix licence (LGPLv2+ -> LGPLv2)
      fix tarball URL
      remove obsolete use of RPM_BUILD_ROOT
      remove BuildRequires on pkg-config
      remove use of %defattr


author: Jiri Pirko <jpirko@redhat.com> - 1.2-1
changelog:
  - Update to 1.2
  - libndp: silently ignore packets with optlen 0 [1016064]
  - libndp: fix processing for larger options [1016064]
  - libndp: do not fail on receiving non-ndp packets [1016078]


author: Jiri Pirko <jpirko@redhat.com> - 1.2-3
changelog:
  - libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is used as parameter and destination in s[n]printf() [1044084]


author: Lubomir Rintel <lrintel@redhat.com> - 1.2-5
changelog:
  - libndp: validate the IPv6 hop limit [CVE-2016-3698]
  - libndb: reject redirect and router advertisements from non-link-local [CVE-2016-3698]


author: Eric Garver <egarver@redhat.com> - 1.2-7
changelog:
  - libndp: add option flags to send messages
  - ndptool: add option to send messages types
  - libndp: fix type of field "na" in "struct ndp_msgna"
  - libndp: revert API change for ndp_msg_send() and add


author: Steve Dickson <steved@redhat.com> 0.25-13
changelog:
  - Strip newlines out of IDMAP_LOG messages (bz 1261124)
  - Fixed some NEGATIVE_RETURNS that a Covscan scan found (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-15
changelog:
  - nss_getpwnam: correctly check for negative values (bz 1271449)
  - Fixed a memory leak in nss_name_to_gid() (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-16
changelog:
  - Add options to aid id mapping in multi domain environments (bz 1378557)
  - Query DNS for the the NFSv4 domain (bz 980925)


author: Steve Dickson <steved@redhat.com> 0.25-18
changelog:
  - Enlarge the TXT record to lager than 127 characters (bz 1498210)
  - Allow white spaces in static IP mapping (bz 1455923)


author: Phil Sutter <psutter@redhat.com> [1.0.6-5.el7]
changelog:
  - expr: lookup: give support for inverted matching (Phil Sutter) [1441084]
  - tests: stricter string attribute validation (Phil Sutter) [1441084]


author: Phil Sutter <psutter@redhat.com> [1.0.6-6.el7]
changelog:
  - chain: dynamically allocate name (Phil Sutter) [1353320]
  - src: Avoid returning uninitialized data (Phil Sutter) [1353319]
  - expr/limit: Drop unreachable code in limit_to_type() (Phil Sutter) [1353312]
  - ruleset: Initialize ctx.flags before calling nftnl_ruleset_ctx_set() (Phil Sutter) [1353322]
  - src: Fix nftnl_*_get_data() to return the real attribute length (Phil Sutter) [1353322]
  - expr/ct: prevent array index overrun in ctkey2str() (Phil Sutter) [1353309]
  - utils: Don't return directly from SNPRINTF_BUFFER_SIZE (Phil Sutter) [1353311]
  - set: prevent memleak in nftnl_jansson_parse_set_info() (Phil Sutter) [1353311]


author: Phil Sutter <psutter@redhat.com> [1.0.8-2.el7]
changelog:
  - trace: Check return value of mnl_attr_parse_nested() (Phil Sutter) [1510538]
  - set_elem: Don't return garbage in nftnl_set_elems_parse() (Phil Sutter) [1510538]
  - ruleset: Avoid reading garbage in nftnl_ruleset_cb() (Phil Sutter) [1510538]
  - object: Avoid returning garbage in nftnl_obj_do_parse() (Phil Sutter) [1510538]
  - gen: Remove a pointless call to mnl_nlmsg_get_payload() (Phil Sutter) [1510538]
  - data_reg: Add a missing break in nftnl_data_reg_snprintf (Phil Sutter) [1510538]


author: Dan Williams <dcbw@redhat.com> - 1.1-14
changelog:
  - Fix portmap position calculation (rh #677526) (rh #677725)
  - Make port allocation threadsafe (rh #677527) (rh #677724)


author: Thomas Haller <thaller@redhat.com> - 3.2.21-9
changelog:
  - improve local port handling for netlink socket with EADDRINUSE (rh #1249158)
  - rtnl: backport support for link-netnsid attribute (rh #1255050)


author: Lubomir Rintel <lrintel@redhat.com> - 1.4.0-1
changelog:
  - Update to network-manager-applet 1.4.0 release
  - c-e: add editor for teaming devices (rh #1079465)


author: Lubomir Rintel <lrintel@redhat.com> - 1.8.0-0.1.git20170326.f260f8a
changelog:
  - Update to network-manager-applet 1.8 snapshot
  - c-e: add missing mnemonic characters to buttons (rh #1434317)
  - c-e: fix handling of devices without permanent MAC address in devices combo box (rh #1380424)


author: Dan Mashal <dan.mashal@fedoraproject.org> - 0.7.5-5
changelog:
  - Fix RHBZ #925824
  - Update source URL
  - Fix mix of spaces and tabs in spec file
  - Fix bogus changelog date


author: Ray Strode <rstrode@redhat.com> 0.7.5-8
changelog:
  - Don't require desktop notification daemon (breaks a build loop with mutter/gnome-shell)
    Related: #1174722


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.0.9-1
changelog:
  - Updated to 0.0.9
  - Dropped obsolete Group, Buildroot, %clean and %defattr
  - Switched to .bz2 sources
  - Dropped included patches


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.1.0-3
changelog:
  - Resolves: rhbz#1712458 - [machines] The function of 'Auto-detect guest
                             operating system' is not available on rhel 7.7


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.1.0-4
changelog:
  - Resolves: rhbz#1727842 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5
changelog:
  - display also first packet when capturing in cooked mode (#1176612)
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is account for


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6
changelog:
  - libpcap now correctly recognizes Netlink datalink type (#1031974)
  - fix vlan tagged packet filtering (#1079525)


author: Tom Lane <tgl@redhat.com> 2:1.5.10-3
changelog:
  - Remove compat subpackage (it's now a separate package "libpng12")
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 2:1.5.12-1
changelog:
  - Update to libpng 1.5.12 for minor bug fixes
  - Activate chunk size limits by default, with a very generous default limit


author: Petr Hracek <phracek@redhat.com> - 2:1.5.13-7
changelog:
  - Security fix for CVE-2015-8126
  - Changing png_ptr to info_ptf based on upstream
  - Related: #1283576


author: Petr Hracek <phracek@redhat.com> - 2:1.5.13-7
changelog:
  - Security fix for CVE-2015-8126
  - Changing png_ptr to info_ptr base on upstream
  - Related: #1283575


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-1
changelog:
  - fix leak when throwing PWQError exception
  - added pkgconfig file
  - call the simplicity checks before the cracklib check
  - add enforce_for_root option to the PAM module
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-1
changelog:
  - use rpm built-in filtering of provides (rhbz#830153)
  - remove strain debug fprintf() (rhbz#831567)


author: Tomas Mraz <tmraz@redhat.com> 1.2.0-1
changelog:
  - add maxsequence check for too long monotonic character sequence.
  - clarified alternative licensing to GPLv2+.
  - add local_users_only option to skip the pwquality checks for
    non-locals. (thanks to Stef Walter)


author: Tomas Mraz <tmraz@redhat.com> 1.2.1-1
changelog:
  - properly free pwquality settings
  - add extern "C" to public header
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.2.2-1
changelog:
  - manual page fixes
  - make it possible to set the maxsequence configuration value
  - updated translations from Transifex


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-1
changelog:
  - fix problem with parsing the pam_pwquality options
    patch by Vladimir Sorokin.
  - updated translations from Transifex
  - treat empty user or password as NULL
  - move the library to /usr


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-5
changelog:
  - fix brittle configuration settings (#1259633)
  - fix abort when generating large passwords on some architectures


author: David Vossel <dvossel@redhat.com> - 0.17.1-1.1
changelog:
  Fix bug that prevents ipc server from working in pid with realtime priority.

    Resolves: rhbz#1198718


author: Christine Caulfield <ccaulfie@redhat.com> - 0.17.1-2.1
changelog:
  Increase size of the buffer where we make the socket name to allow for longer PIDs
    Resolves bz#1114852


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-2
changelog:
  Detect IPC Shared memory corruption in peek as well as read. Prevents
    the mainloop from spinning if multithreaded IPC (which is currently 
    not supported) is attempted without locking.
    Resolves: rhbz#1422454


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-3
changelog:
  Allow IPC system to use filesystem sockets instead of abstract
    sockets if a configuration file exists.
    Resolves: rhbz#1446254


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-4
changelog:
  Revert git patch 189ca28 which caused problems with pacemaker CIB
    closing down.
    Resolves: rhbz#1459276


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-5
changelog:
  Put backpatch 189ca28 as it's not the culprit
    
    Don't truncate IPC files in the client as it can cause servers to crash.
    I've also had to (for this release) disable one of the tests as it checks
    for truncated files.
    Resolves: rhbz#1459276


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-7
changelog:
  Prevent crashes when client truncates SHM segment
    I've reverted the patch for 1459276 which is no longer needed as this
    is a proper fix.
    Resolves: rhbz#1473695


author: Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17
changelog:
  - Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
  - Resolves: rhbz#1610692 silence console warnings from print dialog


author: David Kubat <david.kubat@oracle.com> - 1:5.3.6.1-25.0.1
changelog:
  - adjust color palette to match Redwood style.
  - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile
  - Build with --with-vendor="Oracle America, Inc."


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.11-1
changelog:
  - Substitute vars in URL in the lr_downloadtarget_new()
  - New module repoconf for reading of *.repo files
  - Add LRE_VALUE code + LR_REPOCONF_ERROR error domain
  - Fail if gpgcheck enabled but repomd.xml signature is not available
  - Support for RHEL6
  - Add LRO_GNUPGHOMEDIR option
  - Refactoring to prevent RhBug: 1144741
  - fastest_mirror: Use <0.0 (-1.0) instead of DBL_MAX when a connection time wasn't measured
  - Add sanity checks in order to avoid bugs like: 1166533, 1160087
  - Refactoring


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.12-1
changelog:
  - downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
  - downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
  - downloader: Show also calculated checksums in error message about bad checksum
  - Python: Return all strings in unicode


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.13-1
changelog:
  - Fix ABI compatibility (RhBug: 1185180)
  - fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
  - downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
  - Make building tests and docs optional
  - librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-1
changelog:
  - tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
  - Add LRO_OFFLINE
  - Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
  - Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
  - Add LR_VERSION constant with version string
  - python: Import contants from C librepo module in a loop
  - repoconf: Add support for failover and skip_if_unavailable options
  - handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
  - Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
  - util: Add lr_is_local_path()
  - New module repoconf for reading *.repo files
  - Add LRO_HTTPHEADER option (RhBug: 1181123)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.15-1
changelog:
  - Do not inlude header in the body output (RhBug: 1207685)
  - metalink: Proper error handling
  - New LRR_RPMMD_* contants
  - Support for client certificates
  - Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
  - CMakeLists.txt: do not check for CXX
  - build: Use solely pkg-config to find glib


author: Colin Walters <tmlcoch@redhat.com> - 1.7.16-1
changelog:
  - Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
  - downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
  - test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
  - repoconf: Proper handling of gint64 and guint64 types
  - build: Be compatible with cmake 2.8
  - handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
  - utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
  - Python: call lr_global_init() during module initialization
  - Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
  - util: Honor RFC 3986 (Issue #55)


author: Marek Blaha <mblaha@redhat.com> - 1.8.1-1
changelog:
  - Add yumrecord substitution mechanism (mluscon)
  - Fix a memory leak in signature verification (cwalters)
  - Add new option LRO_FTPUSEEPSV
  - downloader prepare_next_transfer(): simplify long line
  - downloader prepare_next_transfer(): add missing error check
  - downloader prepare_next_transfer(): cleanup error path
  - downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
  - handle: Don't use proxy cache for downloads of metalink/mirrorlist
  - handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
  - downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
  - Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
  - New test: always try to download from the fastest mirror (Alexander Todorov)


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-31
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Related: #1266853


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-32
changelog:
  - Save remote name in reported_to
  - Add a function for compressing dumpdirs
  - Introduce global configuration + option for excluded elements
  - attach the URL of the uploaded problem to the relevant report
  - Resolves: #1300780


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-33
changelog:
  - lib: allow report SELinux denial from sealert under common user
  - mailx: stop creating dead.letter on mailx failures
  - mailx: introduce debug parameter -D
  - mailx: mail formatting: add comment right after %oneline
  - mailx: use problem report api to define an emais' content
  - lib: remove unused function make_description_bz
  - rhtsupport: attach all dump dir's element to a new case
  - rhtsupport: add pkg_vendor, reproducer and reproducible to description
  - rhtsupport: use problem report API to create description
  - lib: add Problem Format API
  - augeas: trim spaces before key value
  - rhtsupport: Discourage users from reporting in non Red Hat stuff
  - rhtsupport: Discourage users from opening one-shot crashes
  - report-gtk: Require Reproducer for RHTSupport
  - Add workflow for RHEL anonymous report
  - bugzilla: don't report private problem as comment
  - lib: move CREATE_PRIVATE_TICKET to the global configuration
  - event config: add support for 'restricted access'
  - report-gtk: offer users to create private ticket
  - bugzilla: make the event configurable
  - uploader: /etc/libreport/plugins/upload.conf as default conf file
  - dd: make function uid_in_group() public
  - uploader: add possibility to set SSH keyfiles
  - uploader: move username and password to the advanced options
  - uploader: allow empty username and password
  - curl: add possibility to configure SSH keys
  - Resolves #1289513, #1277849, #1289513, #1279453, #1258482, #1236613, #1261358, #1281312, #1309317, #1264921


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-36
changelog:
  - introduce 'stop_on_not_reportable' option
  - fix a double free of config at exit in reporter-rhtsupport
  - Related: #1373094, #1257159


author: EL Errata <el-errata_ww@oracle.com> - 2.1.11-38.0.1
changelog:
  - Remove -Werror to fix build issue
  - Update workflow xml for Oracle [18945470]
  - Add oracle-enterprise.patch and oracle-enterprise-po.patch
  - Remove libreport-plugin-rhtsupport and libreport-rhel
  - Added orabug20390725.patch to remove redhat reference [bug 20390725]
  - Added Bug20357383.patch to remove redhat reference [bug 20357383]


author: EL Errata <el-errata_ww@oracle.com> - 2.1.11-38.0.1
changelog:
  - Update workflow xml for Oracle [18945470]
  - Add oracle-enterprise.patch and oracle-enterprise-po.patch
  - Remove libreport-plugin-rhtsupport and libreport-rhel
  - Added orabug20390725.patch to remove redhat reference [bug 20390725]
  - Added Bug20357383.patch to remove redhat reference [bug 20357383]


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-39
changelog:
  - Introduce workflow for adding data to existing case
  - Change default URL to the FAF server
  - wizard: fix 'Show log' window not displaying correctly
  - augeas: fix parsing spaces in configuration files
  - Related: #1303326, #1435256, #1463313


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-43
changelog:
  - dd: extend the scope of DD_DONT_WAIT_FOR_LOCK
  - dd: log lock warning only once not x times per sec
  - dd: add functions for opening dd item
  - testsuite: Add macros for value comparison
  - testsuite: assert for common function results
  - testsuite: expose the last check result
  - testsuite: fix dd_open_item_file test
  - tests: include testsuite.h in the dist archive
  - spec: include testsuite headers in the devel package
  - Related: #1588272, #1613236


author: Edward Leung <edward.leung@oracle.com> - 2.1.11-43.0.1
changelog:
  - Update workflow xml for Oracle [Orabug: 18945470]
  - Add oracle-enterprise.patch and oracle-enterprise-po.patch
  - Remove libreport-plugin-rhtsupport and libreport-rhel
  - Added orabug20390725.patch to remove redhat reference [Orabug: 20390725]
  - Added Bug20357383.patch to remove redhat reference [Orabug: 20357383]


author: Paul Wouters <pwouters@redhat.com> - 3.15-4
changelog:
  - Resolves: rhbz#1267370 libreswan should support strictcrlpolicy alias
  - Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address
  - Resolves: rhbz#1166146 Pluto crashes on INITIATOR site during 'service ipsec stop'
  - Resolves: rhbz#1259209 CVE-2015-3240
  - Resolves: rhbz#1199374 libreswan does not enforce all FIPS or IPsec Suite B restrictions
  - Resolves: rhbz#1207689 libreswan ignores module blacklist rules
  - Merge rhel6 and rhel7 spec into one
  - Be lenient for racoon padding behaviour
  - Fix seedev option to /dev/random
  - Some IKEv1 PAM methods always gave 'Permission denied'
  - Parser workarounds for differences in gcc/flex/bison on rhel6/rhel7
  - Parser fix to allow specifying time without unit (openswan compat)
  - Fix Labeled IPsec on rekeyed IPsec SA's
  - Workaround for wrong padding by racoon2
  - Disable NSS HW GCM to workaround rhel6 xen builers bug


author: Paul Wouters <pwouters@redhat.com> - 3.15-6
changelog:
  - Resolves: rhbz#1283468 keyingtries=0 is broken
  - Resolves: rhbz#1297816 When using SHA2 as PRF algorithm, nonce payload is below the RFC minimum size
  - Resolves: rhbz#1344567 CVE-2016-5361 libreswan: IKEv1 protocol is vulnerable to DoS amplification attack
  - Resolves: rhbz#1313747 ipsec pluto returns zero even if it fails
  - Resolves: rhbz#1302778 fips does not check hash of some files (like _import_crl)
  - Resolves: rhbz#1278063 Unable to authenticate with PAM for IKEv1 XAUTH
  - Resolves: rhbz#1257079 Libreswan doesn't call NetworkManager helper in case of a connection error
  - Resolves: rhbz#1272112 ipsec whack man page discrepancies
  - Resolves: rhbz#1280449 PAM xauth method does not work with pam_sss
  - Resolves: rhbz#1290907 ipsec initnss/checknss custom directory not recognized
  - Resolves: rhbz#1309764 ipsec barf does not show pluto log correctly in the output
  - Resolves: rhbz#1347735 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
  - Resolves: rhbz#1219049 Pluto does not handle delete message from responder site in ikev1
  - Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request
  - Resolves: rhbz#1315412 ipsec.conf manpage does not contain any mention about crl-strict option
  - Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address


author: Paul Wouters <pwouters@redhat.com> - 3.15-7
changelog:
  - Resolves: rhbz#1311360  When IKE rekeys, if on a different tunnel, all subsequent attempts to rekey fail
  - Resolves: rhbz#1361721 libreswan pluto segfault


author: Paul Wouters <pwouters@redhat.com> - 3.15-8
changelog:
  - Resolves: rhbz#1361721 libreswan pluto segfault [UPDATED]
  - Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request [UPDATED]
  - Resolves: rhbz#1309764 ipsec barf [additional man page update and --no-pager]


author: Paul Wouters <pwouters@redhat.com> - 3.20-2
changelog:
  - Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels
  - Resolves: rhbz#1444115 FIPS: libreswan must generate RSA keys with a minimal exponent of F4, nor E=3
  - Resolves: rhbz#1341353 Allow Preshared Key authentication in FIPS mode for libreswan


author: Paul Wouters <pwouters@redhat.com> - 3.20-3
changelog:
  - Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels [updated]
  - Resolves: rhbz#1458227 CAVS test driver does not work in FIPS mode
  - Resolves: rhbz#1452672 (new-ksk-libreswan-el7) DNSSEC trust anchor cannot be updated without recompilation


author: Paul Wouters <pwouters@redhat.com> - 3.20-4
changelog:
  - Resolves: rhbz#1501809 libreswan does not establish IKE with xauth enabled but modecfg disabled
  - Resolves: rhbz#1503949 xauth password length limited to 64 bytes while XAUTH_MAX_PASS_LENGTH (128)


author: Paul Wouters <pwouters@redhat.com> - 3.22-2
changelog:
  - Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555)
  - Resolves: rhbz#1372050 RFE: Support IKE and ESP over TCP: RFC 8229


author: Paul Wouters <pwouters@redhat.com> - 3.22-3
changelog:
  - Resolves: rhbz#1475434 Add support for AES-GMAC for ESP (RFC-4543) to libreswan
  - Resolves: rhbz#1300759 Implement RFC-7427 Digital Signature authentication


author: Paul Wouters <pwouters@redhat.com> - 3.22-5
changelog:
  - Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [updated]
  - Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
  - Resolves: rhbz#1375776 [IKEv2 Conformance] Test IKEv2.EN.R.1.2.2.1: Receipt of retransmitted CREATE_CHILD_SA reques failed
  - Resolves: rhbz#1375750 SECCOMP support for libreswan [updated for libunbound syscalls]
  - Resolves: rhbz#1300763 Implement draft-ietf-ipsecme-split-dns for libreswan


author: Paul Wouters <pwouters@redhat.com> - 3.23-0.1.rc4
changelog:
  - Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [client support]
  - Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
  - Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
  - Resolves: rhbz#1492501 Reboot or 'systemctl stop ipsec' brings down _ethernet_ interfaces on _both_ ends of ipv4 ipsec tunnel
  - Resolves: rhbz#1324421 libreswan works not well when setting leftid field to be email address
  - Resolves: rhbz#1136076 After IKE rekeying Pluto sends DPD even if there is active SA


author: Paul Wouters <pwouters@redhat.com> - 3.23-2
changelog:
  - Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
  - Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]


author: Paul Wouters <pwouters@redhat.com> - 3.23-4
changelog:
  - Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode when RSA key is generated
  - Resolves: rhbz#1574456 Shared IKE SA leads to rekey interop issues
  - Resolves: rhbz#1574457 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted


author: Paul Wouters <pwouters@redhat.com> - 3.23-4
changelog:
  - Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
  - Resolves: rhbz#1553406 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted
  - Resolves: rhbz#1572425 shared IKE SA leads to rekey interop issues


author: Paul Wouters <pwouters@redhat.com> - 3.25-1
changelog:
  - Resolves: rhbz#1591817 rebase libreswan to 3.25
  - Resolves: rhbz#1536404 CERT_PKCS7_WRAPPED_X509 error
  - Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
  - Resolves: rhbz#1574011 libreswan is missing a Requires: unbound-libs >= 1.6.6


author: Paul Wouters <pwouters@redhat.com> - 3.25-2
changelog:
  - Resolves: rhbz#1597322 Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendors


author: Paul Wouters <pwouters@redhat.com> - 3.25-3
changelog:
  - Resolves: rhbz#1655440 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth


author: Paul Wouters <pwouters@redhat.com> - 3.25-4
changelog:
  - Resolves: rhbz#1660536 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
  - Resolves: rhbz#1660544 config: recursive include check doesn't work
  - Resolves: rhbz#1660542 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
  - Resolves: rhbz#1664244 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.1
changelog:
  - Resolves: rhbz#1665369 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are >= 3072 bits [rhel-7.6.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.2
changelog:
  - Resolves: rhbz#1672921 - Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated bugfix]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.3
changelog:
  - Resolves: rhbz#1680483 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure [rhel-7.6.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.4
changelog:
  - Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart [rhel-7.6.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.5
changelog:
  - Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart [rhel-7.6.z] [updated]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.6
changelog:
  - Resolves: rhbz#1680483 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure [rhel-7.6.z] [updated]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.7
changelog:
  - Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start [updated for eclipsed handling]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.8
changelog:
  - Resolves: rhbz#1708060 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE [rhel-7.6.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-5
changelog:
  - Resolves: rhbz#1639404 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth
  - Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
  - Resolves: rhbz#1629902 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
  - Resolves: rhbz#1623279 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11
  - Resolves: rhbz#1625303 config: recursive include check doesn't work
  - Resolves: rhbz#1664521 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are >= 3072 bits


author: Paul Wouters <pwouters@redhat.com> - 3.25-6
changelog:
  - Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated]
  - Resolves: rhbz#1679735 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure


author: Paul Wouters <pwouters@redhat.com> - 3.25-7
changelog:
  - Resolves: rhbz#1673105 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart


author: Paul Wouters <pwouters@redhat.com> - 3.25-8
changelog:
  - Resolves: rhbz#1686991 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE


author: Paul Wouters <pwouters@redhat.com> - 3.25-8.1
changelog:
  - Resolves: rhbz#1746052 libreswan: XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire [rhel-7.7.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-9
changelog:
  - Resolves: rhbz#1724200 libreswan: XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire


author: Paul Moore <pmoore@redhat.com> - 2.2.1-1
changelog:
  - Removed '--disable-static' from the build to ensure that scmp_sys_resolver
    is self contained and resolve RPATH issues


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - Fix location of selinuxfs mount point (#1321086)
  - Only mount /proc if necessary
  - procattr: return einval for <= 0 pid args
  - procattr: return error on invalid pid_t inpu


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix setexecfilecon() to work better in a chroot (#1329931)
  - Fix typo in sefcontext_compile.8 (#1320062)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-4
changelog:
  - Clarify is_selinux_mls_enabled() description
  - Explain how to free policy type from selinux_getpolicytype()
  - Compare absolute pathname in matchpathcon -V
  - Add selinux_snapperd_contexts_path()
  - Modify audit2why analyze function to use loaded policy
  - Sort object files for deterministic linking order
  - Respect CC and PKG_CONFIG environment variable
  - Avoid mounting /proc outside of selinux_init_load_policy()
  - Fix multiple spelling errors


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-10
changelog:
  - Add missing av_permission values (#1025931)
  - Set an appropriate errno in booleans.c (#1402140)
  - Change matchpathcon usage to match with matchpathcon manpage (#1412797)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Sort object files for deterministic linking order
  - Support overriding Makefile RANLIB
  - Respect CC and PKG_CONFIG environment variable
  - Fix multiple spelling errors
  - genhomedircon: %{USERID} and %{USERNAME} support and code cleanups


author: Petr Lautrbach <plautrba@redhat.com> 2.5-4
changelog:
  - genhomedircon: add support for Development/Debug syntax
  - genhomedircon: generate contexts for logins mapped to the default user
  - Validate and compile file contexts before installing
  - Swap tcp and udp protocol numbers


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-8
changelog:
  - Save linked policy, skip re-link when possible
  - Replace access(,F_OK) checks to make setuid programs work (#1186431)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-9
changelog:
  - Update semanage to allow runtime labeling of Infiniband Pkeys (#1466274)
  - Update semanage to allow runtime labeling of ibendports (#1466274)
  - Keep copy of file_contexts.homedirs in policy store (#1409813)
  - Add support for listing fcontext.homedirs file (#1409813)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-12
changelog:
  - Do not change file mode of seusers and users_extra (#1512639)
  - Improve warning for installing disabled module (#1337199)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-14
changelog:
  - Include user name in ROLE_REMOVE audit events (#1622045)
  - Improve "reset umask before creating directories"


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Correctly detect unknown classes in sepol_string_to_security_class
  - Sort object files for deterministic linking order
  - Fix neverallowxperm checking on attributes
  - Remove libsepol.map when cleaning
  - Add high-level language line marking support to CIL
  - Change logic of bounds checking to match change in kernel
  - Fix multiple spelling errors
  - Only apply bounds checking to source types in rules
  - Fix CIL and not add an attribute as a type in the attr_type_map
  - Build policy on systems not supporting DCCP protocol
  - Fix extended permissions neverallow checking
  - Fix CIL neverallow and bounds checking
  - Android.mk: Add -D_GNU_SOURCE to common_cflags


author: Petr Lautrbach <plautrba@redhat.com> 2.5-5
changelog:
  - Warn instead of fail if permission is not resolved
  - Ignore object_r when adding userrole mappings to policydb


author: Petr Lautrbach <plautrba@redhat.com> 2.5-6
changelog:
  - Fix memory leak in expand.c
  - Fix invalid read when policy file is corrupt
  - Fix possible use of uninitialized variables


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-7
changelog:
  - Define cgroup_seclabel policy capability (rhbz#1493517)
  - Fix unitialized jmp and invalid dereference


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-8.1
changelog:
  - Define nnp_nosuid_transition policy capability (rhbz#1480519)
  - use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  - Allow runtime labeling of ibendports (rhbz#1464489)
  - Allow runtime labeling of Infiniband Pkeys (rhbz#1464489)
  - Add IB end port handling to CIL (rhbz#1464489)
  - Add ibendport ocontext handling (rhbz#1464489)
  - Add support for ibendportcon labels (rhbz#1464489)
  - Add Infiniband Pkey handling to CIL (rhbz#1464489)
  - Add ibpkey ocontext handling (rhbz#1464489)
  - Add support for ibpkeycon labels (rhbz#1464489)
  - Remove unused attribute on a used argument from avrule_read() (rhbz#1464489)
  - Add binary module support for xperms
  - Add support for converting extended permissions to CIL


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Update to upstream 
  	* filename_trans: use some better sorting to compare and merge
  	* coverity fixes
  	* implement default type policy syntax
  	* Fix memory leak issues found by Klocwork
  - Add CONTRAINT_NAMES to the kernel


author: kwizart < kwizart at gmail.com > - 2.2.2-2
changelog:
  - Fix http://bugzilla.redhat.com/415121
  - Add disable-static
  - Don't use makeinstall macro
  - Update License field


author: Kalev Lember <kalev@smartlink.ee> - 2.2.8-4
changelog:
  - Spec cleanup
  - Use macro for automatically calculating ftp directory name with
    first two digits of tarball version.
  - Dropped R: pkgconfig from -devel as it's now automatically added by rpm
  - Own /usr/share/doc/libsigc++-2.0/ dir and mark /usr/share/devhelp/ as %doc
  - Require base package from -doc subpackage
  - Drop unneeded doxygen and graphviz BRs


author: Tom Callaway <spot@fedoraproject.org> - 0.4.8-9
changelog:
  - mark symbols which conflict with RPM as "internal", resolves bz 864324
    Thanks to Michele Baldessari


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0.25-2
changelog:
  - Patch to use system libgsm instead of a bundled copy.
  - Make main package dep in -devel ISA qualified.
  - Drop -octave Provides (not actually built with octave > 3.0).
  - Don't build throwaway static lib.
  - Run test suite during build.


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12.1
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)


author: Jaroslav Mracek <jmracek@redhat.com> - 0.6.34-3
changelog:
  - Make sure that targeted updates don't do reinstalls
  - Resolves: bug#1668256
  - Fix NULL pointer dereference (CVE-2018-20532, CVE-2018-20533)
  - Resolves: bug#1669562
  - Resolves: bug#1669576
  - Fix illegal address access in pool_whatprovides (CVE-2018-20534)
  - Resolves: bug#1670453


author: Milan Crha <mcrha@redhat.com> - 2.62.2-2
changelog:
  - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c: get_cookies() on empty hostnames
  - Resolves: #1598838


author: Jan Grulich <jgrulich@redhat.com> - 1.4.4-11.20101004cvs
changelog:
  - Fix global buffer overflow
    Resolves: bz#1301202

  - Fix improper handling of CSRC count and extension header length in RTP header
    Resolves: bz#1323705

  - Fix buffer overflow in application of crypto profiles
    Resolves: bz#1141897


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-9
changelog:
  - curl consumes too much memory during scp download (#1080459)
  - prevent a not-connected agent from closing STDIN (#1147717)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-12
changelog:
  - session: avoid printing misleading debug messages (#1503294)
  - scp: send valid commands for remote execution (#1489733)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-12.el7_6.1
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)


author: Qing Lin <qing.lin@oracle.com> 1.4.3-12.0.1.el7_6.2
changelog:
  - [Orabug: 29909723] Added patch CVE-2019-3862
    added length checks to prevent out-of-bounds reads and writes in _libssh2_packet_add()(CVE-2019-3862)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-12.el7_6.3
changelog:
  - fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)


author: Kamil Dudka <kdudka@redhat.com> 1.8.0-2
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
  - fix out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
  - fix zero-byte allocation in SFTP packet processing resulting in out-of-bounds read (CVE-2019-3858)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)


author: Gris Ge <fge@redhat.com> 1.4.0-1
changelog:
  - Add Python3 support.
  - New sub rpm package python3-libstoragemgmt.
  - Add support of lmiwbem.
  - Allow plugin test to be run concurrently.
  - Bug fixes:
      * Fix megaraid plugin for dell PERC.
      * Fix local disk rotation speed query on NVMe disk.
      * Fix lsmcli incorrect try-expect on local disk query.
      * Fix all the gcc compile warnings.
      * Fix the obsolete usage of AC_OUTPUT in configure.ac.
  - Library adds:
      * Query serial of local disk:
          lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
      * Query LED status of local disk:
          lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
      * Query link speed of local disk:
          lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()


author: Gris Ge <fge@redhat.com> - 1.5.0-2
changelog:
  - Fix multilib confliction of nfs-plugin by move binrary file to
    another subpackage libstoragemgmt-nfs-plugin-clibs


author: Tony Asleson <tasleson@redhat.com> - 1.8.1-2
changelog:
  - https://bugzilla.redhat.com/show_bug.cgi?id=1872745
  - https://bugzilla.redhat.com/show_bug.cgi?id=1903665


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.8-1
changelog:
  - Rebase to libtalloc 2.1.8
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.9-1
changelog:
  - Rebase to libtalloc 2.1.9
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.10-1
changelog:
  - Rebase to libtalloc 2.1.10
  - Resolves: rhbz#1470053 - Rebase libtalloc to enable samba rebase to
                             version 4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.14-1
changelog:
  - Rebase to libtalloc 2.1.14
  - Resolves: rhbz#1658747 - Rebase libtalloc to version 2.1.14 for Samba


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-1
changelog:
  - Rebase to libtalloc 2.1.16
  - Resolves: rhbz#1736005 - Rebase libtalloc to version 2.1.16 for Samba


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.6-2
changelog:
  - Resolves: rhbz#1241015 - tdb deadlocks if you acquire allrecord_lock
                             and start two traverses


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.12-2
changelog:
  - Resolves: rhbz#1441231 - The tdb robust mutexes runtime check is not thread safe and ends in a deadlock


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.15-1
changelog:
  - Resolves: rhbz#1470049 - Rebase libtdb to enable samba rebase to
                             version 4.7.x


author: Marcelo Ricardo Leitner <mleitner@redhat.com> - 1.25-2
changelog:
  - Updated to 1.25 [1286840 1286063]
  - Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]


author: Marcelo Ricardo Leitner <mleitner@redhat.com> - 1.25-4
changelog:
  - Added patches to avoid hung on shutdown [1330550]
  - Added patch to fix an out-of-bound write with zero-length hardware
    address [1286840]


author: Xin Long <lxin@redhat.com> - 1.25-5
changelog:
  - Added patch to escape some sensitive characters [1383997]
  - Added patch to check port link_up when a port is added for lb runner
    [1393430]


author: Xin Long <lxin@redhat.com> - 1.27-5
changelog:
  - Added patch to fix runner.sys_prio default in man docs [1533813]
  - Added patch to empty LDFLAGS before checking for libnl3 in configure.ac [1533847]
  - Added patch to not crash when trying to print unregistered device name [1563155]


author: Xin Long <lxin@redhat.com> - 1.27-7
changelog:
  - Added an option to force log output to stdout, stderr or syslog [1596917]
  - Fixed s32/u32 data storage on big endian [1545574]
  - Documented ARP Ping link_watch.vlanid option [1645169]
  - Sent LACPDU when port state transitions from DEFAULT to CURRENT [1645169]


author: Xin Long <lxin@redhat.com> - 1.29-1
changelog:
  - man teamd.conf: update some parameter default values [1732586]
  - 1.29 release
  - teamd: improve the error output for non-integer port prio
  - teamd: return 0 if tdport doesn't exist in teamd_config_port_set
  - teamd: add port_master_ifindex_changed for link_watch_port_watch_ops [1720137]
  - initscripts: fix if/fi align
  - teamd: fix a json object memleak in get_port_obj() [1704451]
  - libteam: set netlink event socket as non-blocking [1680655]
  - libteam: double NETLINK_RCVBUF to fix -ENOMEM error
  - teamd: add a default value 1000 for link_watch.interval
  - teamd: use enabled option_changed to sync enabled to link_up for lb runner [1629670]
  - teamd: tdport has to exist if item->per_port is set in __find_by_item_path
  - teamd: remove port if adding fails
  - teamd: lacp: update port state according to partner's sync bit
  - man: fix runner.min_ports default value
  - teamd: lw: nsna_ping: only send ns on enabled port [1730558]
  - teamd: lw: arp_ping: only check arp reply message
  - teamd: config: update local prio to kernel [1714440]
  - teamnl: update help message


author: Xin Long <lxin@redhat.com> - 1.29-2
changelog:
  - teamd/lacp: fix segfault due to NULL pointer dereference [1758072]
  - teamd: fix build error in expansion of macro teamd_log_dbgx [1758072]
  - teamd: update ctx->hwaddr after setting team dev to new hwaddr [1772799]
  - libteam: wapper teamd_log_dbg with teamd_log_dbgx [1758072]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.21-2
changelog:
  - Allow building with RHEL-7.0 libtalloc
  - Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.21-3
changelog:
  - BuildRequire the minimal applicable libtalloc version
  - Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.33-1
changelog:
  - Resolves: #1470054 - Rebase libtevent to enable samba rebase to version
                         4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.34-1
changelog:
  - Resolves: #1512414 - tevent can cause a Samba file corruption bug under
                         heavy threaded load


author: Hans de Goede <hdegoede@redhat.com> - 1:1.1.1-6
changelog:
  - run autoreconf for aarch64 support (#925898)
  - add a patch from upstream fixing a crash when compiled with gcc-4.8 (#959001)
  - cleanup spec-file


author: Nikola Forró <nforro@redhat.com> - 4.0.3-21
changelog:
  - Remove patches for CVEs:
    CVE-2014-8127, CVE-2014-8129, CVE-2014-8130,
    CVE-2014-9330, CVE-2015-7554, CVE-2015-8665,
    CVE-2015-8683, CVE-2015-8781, CVE-2015-8784
  - Add patches for CVEs:
    CVE-2016-3632, CVE-2016-3945, CVE-2016-3990,
    CVE-2016-3991, CVE-2016-5320
  - Update patches for CVEs:
    CVE-2014-9655, CVE-2015-1547, CVE-2015-8668
  - Related: #1299921


author: Nikola Forró <nforro@redhat.com> - 4.0.3-25
changelog:
  - Add patches for CVEs:
    CVE-2015-7554, CVE-2015-8683, CVE-2015-8665,
    CVE-2015-8781, CVE-2015-8782, CVE-2015-8783,
    CVE-2015-8784
  - Related: #1299921


author: Nikola Forró <nforro@redhat.com> - 4.0.3-26
changelog:
  - Add patches for CVEs:
    CVE-2016-9533, CVE-2016-9534, CVE-2016-9535,
    CVE-2016-9536, CVE-2016-9537, CVE-2016-9540,
    CVE-2016-5652, CVE-2015-8870
  - Resolves: #1412080


author: Nikola Forró <nforro@redhat.com> - 4.0.3-26
changelog:
  - Add patches for CVEs:
    CVE-2016-9533, CVE-2016-9534, CVE-2016-9535,
    CVE-2016-9536, CVE-2016-9537, CVE-2016-9540,
    CVE-2016-5652, CVE-2015-8870
  - Resolves: #1412081


author: Nikola Forró <nforro@redhat.com> - 4.0.3-28
changelog:
  - Fix CVE-2016-3186
  - Resolves: #1319503
  - Fix CVE-2018-7456
  - Resolves: #1561318
  - Fix CVE-2018-8905
  - Resolves: #1574548
  - Fix CVE-2018-10779
  - Resolves: #1598503
  - Fix CVE-2018-10963
  - Resolves: #1598726
  - Fix CVE-2018-12900
  - Resolves: #1600430
  - Fix CVE-2018-17100
  - Resolves: #1632578
  - Fix CVE-2018-17101
  - Resolves: #1632579
  - Fix CVE-2018-18557
  - Resolves: #1647737
  - Fix CVE-2018-18661
  - Resolves: #1647965


author: David Shea <dshea@redhat.com> - 0.4.1-2
changelog:
  - Make whitespace and indentation consistent (iain.lane@canonical.com)
  - Switched to a git-formatted patch for the FSF address to make things easier
    for me to track (dshea)
  - Create local copies of string properties. (dshea)
  - Moved CcTimezoneLocation into its own file. (dshea)
  - Don't close a NULL file pointer. (dshea)
  - Turn on and fix g-ir-scanner warnings. (dshea)
  - Added a .bzrignore file to ignore all the files generated by the build. (dshea)
  - Ignore the INSTALL file (dshea)
  - Added a function to clear the location set for a CcTimezoneMap (dshea)
  - Allow the timezone highlight to be manually set separately from the location. (dshea)


author: David Shea <dshea@redhat.com> - 0.4.1-4
changelog:
  - Merge fixes from lp:timezonemap
  - Add cc-timezone-location.h to timezonemapincludes_HEADERS so it gets installed (iain.lane)
  - Set en_name correctly (iain.lane)
  - Don't call g_type_init() on glib >= 2.35; it's deprecated (iain.lane)


author: David Shea <dshea@redhat.com> - 0.4.2-6
changelog:
  - Updated the time zone map images
  - Updated the city data from geonames.org
  - Fix a memory leak and potential crash with the locations list
  - Cycle through a smaller list of map locations on repeated clicks


author: David Shea <dshea@redhat.com> - 0.4.4-1
changelog:
  - Fixes for LP#1440157:
    Port to libsoup directly for geoname results
    Fix some memory leaks
    Do not reuse GCancellables
  - Upstream merges of SVG update and constrained location cycles


author: Steve Dickson <steved@redhat.com> 0.2.4-0.7
changelog:
  - Backported upstream debugging (bz 1273159)
  - Fixed memory leak in svc_vc_create (bz 1276685)
  - Fixed memory leaks in server-side GSS authenticator (bz 1282488)


author: Steve Dickson <steved@redhat.com> 0.2.4-0.16
changelog:
  - getnetconfig.c: fix a BAD_FREE (CWE-763) (bz 1631609)
  - Fix EOF detection on non-blocking socket (bz 1331554)


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.2-14
changelog:
  - allow root to copy files into NFS in libtoolize (#740079)
  - pre-filter sed's input by dd (#636045)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.1.2-2.el7
changelog:
  - Fix crash when loop-deleting non-loop device (#1036076)
  - Fix some thread safety issues (#1036099)
  - Fix lingering mount after CD-ROM drive is ejected (#835120)
  - Fix some uninitializes variables (#1056580)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7.3-2
changelog:
  - Put back the hack to ensure hardening
    Related: rhbz#1477736
  - Fix the relationship between new udisks2 and storaged
    Related: rhbz#1477736


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7.3-3
changelog:
  - Add and use a service for cleaning up mount point directories
    Resolves: rhbz#1384796
  - Do not try to create file watchers for RAIDs without redundancy
    Resolves: rhbz#1400056


author: Vojtech Trefny <vtrefny@redhat.com> - 2.7.3-7
changelog:
  - core: Add Encrypted.Resize method
    Resolves: rhbz#1567992
  - Fix checking for distribution and version in integration tests
    Resolves: rhbz#1508385
  - Do not skip integration tests on CentOS/RHEL
    Resolves: rhbz#1511974
  - Fix failing MDRAID integration test
    Resolves: rhbz#1511986


author: Tomas Bzatek <tbzatek@redhat.com> - 2.7.3-9
changelog:
  - Build udisks2-lsm subpackage (#1672664)
  - Fix sigint source removal on daemon exit (#1643350)
  - CVE-2018-17336: Fix format string vulnerability in udisks_log (#1637427)
  - Describe command options in the udisksctl man page (#1568269)


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-2
changelog:
  - lu-Fix-rpmdiff-failure.patch [bz#1229359]
  - lu-Fix-buffer-overflow-reported-by-Coverity.patch [bz#1233114]
  - Resolves: bz#1229359
    (Fix multilib support)
  - Resolves: bz#1233114
    (fix off-by-one in dwarf_to_unw_regnum (CVE-2015-3239))


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-5
changelog:
  - Version bumped [bz#1238864]
  - Resolves: bz#1238864
    libunwind: bump version to win against existing branches


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-6.el7
changelog:
  - Fix update from EPEL version [bz#1289950]
  - Resolves: bz#1289950
    (libunwind in RHEL 7.2 has a smaller release than the last libunwind package in EPEL-7)


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-2.el7
changelog:
  - Rebase to 1.2 [bz#1384435]
  - Resolves: bz#1384435
    (Rebase libunwind package (and add for ppc64le): libunwind)


author: Miloslav Trmač <mitr@redhat.com> - 0.58-2
changelog:
  - Always use secure_getenv() or __secure_getenv(), fail build if neither is
    available.  Patch by Viktor Hercinger <vhercing@redhat.com>.


author: Jarod Wilson <jarod@redhat.com> - 2.0.1-1
changelog:
  - Update to libusnic_verbs v2.0.1 and usnic-tools v1.1.0.0
  - Use actual upstream tarballs
  - Call usnic-tools usnic-tools instead of libusnic_verbs-utils
  - Resolves: bz1281635


author: Jarod Wilson <jarod@redhat.com> - 2.0.1-3
changelog:
  - Add missing Requires: libusnic_verbs to usnic-tools sub-package
  - Bump to usnic-tools v1.1.1.0, drop patch that was merged upstream
  - BuildRequires: libibverbs v1.2.0 or later now, and infinipath-psm-devel
  - Related: bz1096997


author: Jarod Wilson <jarod@redhat.com>
changelog:
  - Drop libusnic_verbs from package, obsoleted by rdma-core
  - Update to usnic-tools v1.1.2.0 upstream release
  - Fix upgrade paths with rdma-core
  - Resolves: rhbz#1507612


author: Hans de Goede <hdegoede@redhat.com> - 0.8.8-1
changelog:
  - New upstream release 0.8.8
  - Add patches from upstream git to improve Pixart JPEG decoding
  - Add patch from upstream git to fix building with latest kernels (rhbz#823863)


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2
changelog:
  - Add a few libv4l2rds patches from upstream, which bring libv4l2rds to its
    final API / ABI, so that apps build against it won't need a rebuild in the
    future


author: Benjamin Tissoires <benjamin.tissoires@redhat.com>
changelog:
  - Resolves rhbz #1253829 - fix 3 CVEs:
   - CVE-2015-5198: libvdpau incorrect check for security transition
   - CVE-2015-5199: libvdpau directory traversal in dlopen
   - CVE-2015-5200: libvdpau vulnerability in trace functionality


author: Wim ten Have <wim.ten.have@oracle.com> - 4.0.0-1
changelog:
  - BUILDINFO: commit=94e4b69d436915f6a51c7ae1a642692affa1b4ff
  - Set #ovm-4.0.1 buildrpm changes to version 4.0.0


author: Wim ten Have <wim.ten.have@oracle.com> - 4.0.0-2.el7
changelog:
  - BUILDINFO: commit=96e75ca2223c6b3e1beddb2e8d60142968462926
  - qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (Daniel P. Berrangé)   {CVE-2018-5748} {CVE-2018-1064}
  - log: fix deadlock obtaining hostname (related CVE-2018-6764) (Daniel P. Berrangé)   {CVE-2018-6764}
  - util: Fix syntax-check (Andrea Bolognani)  
  - virlog: determine the hostname on startup CVE-2018-6764 (Lubomir Rintel)   {CVE-2018-6764}


author: Wim ten Have <wim.ten.have@oracle.com> - 4.0.0-3.el7
changelog:
  - BUILDINFO: commit=6243d728b06bbef5eebe9d5825b178a500b5f8a3
  - buildrpm: fully disable xen dependency for OL7u4. (Wim ten Have)  [Orabug: 27818616]


author: Wim ten Have <wim.ten.have@oracle.com> - 4.0.0-4.el7
changelog:
  - BUILDINFO: commit=181fafde6d3ac51d79aba55787263b6399ad4023
  - storage: extend preallocation flags support for qemu-img (Wim ten Have)  [Orabug: 27103216]


author: Wim ten Have <wim.ten.have@oracle.com> - 4.0.0-5.el7
changelog:
  - BUILDINFO: commit=7f6a6aef31894e00f7c16946c567010f87a85ed0
  - Exadata required changes transitioning guests towards vNUMA (Wim ten Have)


author: Wim ten Have <wim.ten.have@oracle.com> - 4.10.0-2.el7
changelog:
  - BUILDINFO: commit=0e4be9ebf1099f0bb692d8a523ae286f6128aada
  - qemu: implement CPU packing (Wim ten Have)  
  - qemu: driver configuration changes to add CPU packing detail (Wim ten Have)  
  - libvirt: domain changes reserving capabilities for CPU packing (Wim ten Have)


author: Wim ten Have <wim.ten.have@oracle.com> - 4.10.0-3.el7
changelog:
  - BUILDINFO: commit=e1983231a407d33e0cc84d63062774acbf192565
  - qemuxml2argvdata: Fix tests for numatune added memset (Wim ten Have)  
  - domain: vNUMA bind memory under auto partitioning (Wim ten Have)


author: Menno Lageman <menno.lageman@oracle.com> - 4.4.0-2.el7
changelog:
  - BUILDINFO: commit=d619b4e4e81d3bcffa43df2af2fe7c7b52b85345
  - Update version to 4.4.0 (Menno Lageman)


author: Wim ten Have <wim.ten.have@oracle.com> - 4.4.0-3.el7
changelog:
  - BUILDINFO: commit=78eb927c310ee13bf4d7d5f80555b612a6da0293
  - qemuxml2argvdata: add tests that exercise autopartition vNUMA topology (Wim ten Have)  
  - qemu: enable vNUMA autoconf support for KVM architecture. (Wim ten Have)  
  - libxl: enable vNUMA autoconf support for Xen architecture. (Wim ten Have)  
  - domain: auto target guests providing the machine NUMA topology (Wim ten Have)


author: Wim ten Have <wim.ten.have@oracle.com> - 4.4.0-4.el7
changelog:
  - BUILDINFO: commit=69c7503bb6f81210bbf056c9305da15b5bdfc59d
  - qemuxml2argvdata: adjust tests that exercise autopartition vNUMA topology (Wim ten Have)  [Orabug: 28447977] 
  - domain: target auto partitioned guests by disjoint vNUMA cpu ranges (Wim ten Have)  [Orabug: 28447977]


author: Wim ten Have <wim.ten.have@oracle.com> - 4.7.0-2.el7
changelog:
  - BUILDINFO: commit=e5b1a9fd903207e44ce6064240df0ef408d83862
  - qemu: xml2argv, argv2xml fixes for mem-lock and cpu-pm targetted guests (Wim ten Have)  
  - qemu: parse and apply domain mem-lock and cpu-pm if such applies (Wim ten Have)  
  - domain: add hypervisor features mem-lock and cpu-pm support for kvm (Wim ten Have)  
  - qemu: xml2argv, argv2xml fixes for kvm-hint-dedicated targetted guests (Wim ten Have)  
  - qemu: parse and apply domain kvm-hint-dedicated if such applies (Wim ten Have)  
  - domain: add hypervisor feature kvm-hint-dedicated support for kvm (Wim ten Have)


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-3.el7
changelog:
  - BUILDINFO: commit=b335d6fa26d61fc28159d39b0644240b4733ef4b
  - qemu: Fix nr_hugepages host auto-tuning computation (Wim ten Have)  [Orabug: 29625524] 
  - qemu: fix driver SEGV reaping existing guests (Wim ten Have)  [Orabug: 29655677]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-5.el7
changelog:
  - qemu: disable setmem change requests for vNUMA targets (Wim ten Have)  [Orabug: 29797366] 
  - domain: Disable memballoon memory configuration support for vNUMA guests (Wim ten Have)  [Orabug: 29797366] 
  - qemu: Driver change to target for vNUMA setmaxmem change request (Wim ten Have)  [Orabug: 29749852] 
  - domain: Add domain memory config support for vNUMA guests (Wim ten Have)  [Orabug: 29749852] 
  - logging: restrict sockets to mode 0600 (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}
  - locking: restrict sockets to mode 0600 (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}
  - admin: reject clients unless their UID matches the current UID (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-6.el7
changelog:
  - qemu: Driver change adding private lock to auto-tune hugepages (Wim ten Have)
    [Orabug: 29809943]


author: Mark Kanda <mark.kanda@oracle.com> - 5.0.0-7.el7
changelog:
  - cpu_map: Define md-clear CPUID bit (Jiri Denemark)  [Orabug: 29874181]
    {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2019-11091}


author: Menno Lageman <menno.lageman@oracle.com> - 5.0.0-8.el7
changelog:
  - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (Ján Tomko)  [Orabug: 29955742]  {CVE-2019-10161}
  - domain: Define explicit flags for saved image xml (Eric Blake)  [Orabug: 29955742] 
  - api: disallow virDomainManagedSaveDefineXML on read-only connections (Ján Tomko)  [Orabug: 29955742]  {CVE-2019-10166}
  - api: disallow virConnectGetDomainCapabilities on read-only connections (Ján Tomko)  [Orabug: 29955742]  {CVE-2019-10167}
  - api: disallow virConnect*HypervisorCPU on read-only connections (Ján Tomko)  [Orabug: 29955742]  {CVE-2019-10168}


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-9.el7
changelog:
  - qemu: remove cpuhostmask and cpuguestmask from virCaps structure (Wim ten
    Have)  [Orabug: 29956508]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-10.el7
changelog:
  - qemuxml2argvdata: Fix tests for vNUMA nodes and threads per core match (Wim ten Have)  [Orabug: 29826947] 
  - qemu: Add SMT support to CPU packing (Wim ten Have)  [Orabug: 29826947] 
  - domain: Add support for SMT to auto vNUMA feature (Wim ten Have)  [Orabug: 29826947]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-11.el7
changelog:
  - qemu: Add hotplug support for vNUMA node topology (Wim ten Have)  
  - domain: correct vNUMA autopartition validation check (Wim ten Have)


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-12.el7
changelog:
  - qemu: Driver change to support vNUMA setvcpus config change request (Wim ten Have)  [Orabug: 30030162] 
  - domain: Add vNUMA auto partition support for persistent domains (Wim ten Have)  [Orabug: 30030162]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-14.el7
changelog:
  - qemuxml2argvdata: Adjust a test for vNUMA nodes and threads per core match (Wim ten Have)  [Orabug: 30189275] 
  - qemu: Fix vNUMA hotplug request checking the node mapped cores. (Wim ten Have)  [Orabug: 30189275] 
  - libvirt: Add vNUMA online and hotplug rendered detail (Wim ten Have)  [Orabug: 30189275]


author: Menno Lageman <menno.lageman@oracle.com> - 5.0.0-15.el7
changelog:
  - qemu: ensure whole cores during hot(un)plug on Exadata (Menno Lageman)  [Orabug: 30239774] 
  - qemu: exadata KVM set vcpu granularity must be number of CPUs in core (Menno Lageman)  [Orabug: 30224846]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-16.el7
changelog:
  - libvirt: Add single node vNUMA forced configuration enhancement (Wim ten Have)  [Orabug: 30380799] 
  - libvirt: vNUMA auto partitioning can't downscale vcpus/vcpu sets. (Wim ten Have)  [Orabug: 29995967] 
  - qemuxml2argvdata: Adjust numa-interleave test. (Wim ten Have)  [Orabug: 30258966] 
  - qemu: Fix CPU topology less vNUMA rendered guests. (Wim ten Have)  [Orabug: 30258966] 
  - libvirt: Fix vNUMA online and hotplug render detail. (Wim ten Have)  [Orabug: 30258966]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-2.el7
changelog:
  - BUILDINFO: commit=568af469d4e54975e0ffdf61a8f7063c57cb77eb
  - domain: fix vNUMA auto partition pinning on imbalanced configurations (Wim ten Have)  [Orabug: 29503554] 
  - qemu: fix driver initialization SEGV under initial bootstrap (Wim ten Have)  [Orabug: 29502935]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-4.el7
changelog:
  - logging: restrict sockets to mode 0600 (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}
  - locking: restrict sockets to mode 0600 (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}
  - admin: reject clients unless their UID matches the current UID (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}


author: Menno Lageman <menno.lageman@oracle.com> - 5.7.0-4.el7
changelog:
  - build: skip copyright check for gnulib (Menno Lageman)  
  - Revert "network: pull global chain init into separate method" (Menno Lageman)  [Orabug: 30611188] 
  - Revert "network: add more debugging of firewall chain creation" (Menno Lageman)  [Orabug: 30611188] 
  - Revert "network: delay global firewall setup if no networks are running" (Menno Lageman)  [Orabug: 30611188] 
  - qemu-submodule-init: Add Git submodule init script (Karl Heubaum)  [Orabug: 30796221]


author: Menno Lageman <menno.lageman@oracle.com> - 5.7.0-5.el7
changelog:
  - exadata: can not configure shared memory hosted disk devices for
    vhostmd.service (Menno Lageman)  [Orabug: 30598065]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-8.el7
changelog:
  - domain groups: End Of BETA (Wim ten Have)  
  - domaingroups: ExaData Domain Groups POC (Wim ten Have)  
  - domaingroup: preliminary virsh support for domain groups - drop #4 (Menno Lageman)  
  - tests: add various tests to exercise vNUMA host partitioning (Wim ten Have)  [Orabug: 29720293] 
  - qemu: driver changes for new vNUMA Host and Nodeset partitioning (Wim ten Have)  [Orabug: 29720293] 
  - XML definitions for guest vNUMA and parsing routines (Wim ten Have)  [Orabug: 29720293] 
  - Revert "exadata: can not configure shared memory hosted disk devices for vhostmd.service" (Menno Lageman)  
  - qemu: Forcibly mknod() even if it exists (Michal Prívozník)


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-9.el7
changelog:
  - vNUMA: distinguish standard and vNUMA memory 'setmaxmem' operations (Wim ten
    Have)  [Orabug: 30894536]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-10.el7
changelog:
  - domain groups: refresh dgbase depending host capabilities before rendering the cpuguestmask (Wim ten Have)  [Orabug: 30987361] 
  - conf: domain group validation errors should print correct group info (Menno Lageman)  [Orabug: 30988428] 
  - qemu: reserve hugepages when memoryBacking when live attaching memory (Wim ten Have)  [Orabug: 30985510] 
  - domain groups: avoid virDomainGroupInit if exadataConfig is disabled (Wim ten Have)  [Orabug: 30985907]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-11.el7
changelog:
  - domain groups: Add functionality to control NUMA node alignment (Wim ten Have)  [Orabug: 30988105] 
  - domain groups: A rename should always update active and config domain definitions (Wim ten Have)  [Orabug: 30999730]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-12.el7
changelog:
  - libvirt: vNUMA automatic host paritioning allows erroneous vcpu settings (Wim ten Have)  [Orabug: 31050313] 
  - remote: do not stop libvirtd after period of inactivity (Menno Lageman)  [Orabug: 31003707] 
  - remote: do not use socket activation by default (Menno Lageman)  [Orabug: 31003707] 
  - qemu driver: handle targetNode under memory hot-plug operations (Wim ten Have)  [Orabug: 31009716] 
  - domain groups: refresh dgbase host capabilities prior to defining a new group (Wim ten Have)  [Orabug: 31026069] 
  - domain groups: Always cleanup system.slice controlled hugepage reservations (Wim ten Have)  [Orabug: 31025853] 
  - domain groups: Enable DGs upon fresh groups arrival (Wim ten Have)  [Orabug: 31021247] 
  - domain groups: Skip undefined domain groups when validating lists (Wim ten Have)  [Orabug: 31030117]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-13.el7
changelog:
  - domain groups: Fix multiple Domain Group vCPU administration flaws (Wim ten Have)  [Orabug: 31145304] 
  - qemu: fix missing #if defined(ENABLE_EXADATA) (Menno Lageman)  
  - build: Fix qemu-submodule-init syntax-check issue (Wim ten Have)  
  - libvirt: Fix various introduced Fedora/RHEL build violations (Wim ten Have)  [Orabug: 31143337] 
  - qemu: don't hold both jobs for suspend (Jonathon Jongsma)  [Orabug: 31073098]  {CVE-2019-20485}
  - domain groups: qemu driver error refers to pCPUs instead of vCPUs (Wim ten Have)  [Orabug: 31075757] 
  - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (Jiang Kun)  [Orabug: 31070337]


author: Menno Lageman <menno.lageman@oracle.com> - 5.7.0-14.el7
changelog:
  - vmx: make 'fileName' optional for CD-ROMs (Pino Toscano)  [Orabug: 31350200] 
  - vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (Pino Toscano)  [Orabug: 31350200] 
  - domain group: Fix a potential SEGV while restoring guest domains (Wim ten Have)  [Orabug: 31285615] 
  - cpu_map: Distinguish Cascadelake-Server from Skylake-Server (Jiri Denemark)  [Orabug: 31214897] 
  - cpu_map: Add more -noTSX x86 CPU models (Christian Ehrhardt)  [Orabug: 31214897] 
  - qemuDomainGetStatsIOThread: Don't leak array with 0 iothreads (Peter Krempa)  [Orabug: 31251756]  {CVE-2020-12430}


author: Menno Lageman <menno.lageman@oracle.com> - 5.7.0-16.el7
changelog:
  - qemu: format 'x-aw-bits' on intel-iommu command line (Menno Lageman)  
  - qemu: format address wdith on intel-iommu command line (Menno Lageman)  
  - conf: add address width attribute to iommu (Menno Lageman)  
  - tests: add tests for host-phys-bits KVM feature (Menno Lageman)  [Orabug: 31354547] 
  - qemu: support host-phys-bits KVM feature (Menno Lageman)  [Orabug: 31374547] 
  - storage: Fix daemon crash on lookup storagepool by targetpath (Yi Li)  [Orabug: 31439483]  {CVE-2020-10703}


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-17.el7
changelog:
  - qemu: Fix cpu boundary checks when starting or configuring guest domains. (Wim ten Have)  [Orabug: 31469231] 
  - libvirt: Allocate max possible CPUs for QEMU to prepare guest memory (Wim ten Have)  [Orabug: 31064560]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-19.el7
changelog:
  - qemu: Verify use of hugepages when releasing its acquired status (Wim ten
    Have)  [Orabug: 31839035]


author: Menno Lageman <menno.lageman@oracle.com> - 5.7.0-20.el7
changelog:
  - qemu: remove use of qemuDomainObjBeginJobWithAgent() (Jonathon Jongsma)  [Orabug: 31990187]  {CVE-2019-20485}
  - qemu: don't hold monitor and agent job when setting time (Jonathon Jongsma)  [Orabug: 31990187]  {CVE-2019-20485}
  - qemu: don't hold a monitor and agent job for reboot (Jonathon Jongsma)  [Orabug: 31990187]  {CVE-2019-20485}
  - qemu: don't take agent and monitor job for shutdown (Jonathon Jongsma)  [Orabug: 31990187]  {CVE-2019-20485}
  - qemu: agent: set ifname to NULL after freeing (Ján Tomko)  [Orabug: 31964426]  {CVE-2020-25637}
  - rpc: require write acl for guest agent in virDomainInterfaceAddresses (Ján Tomko)  [Orabug: 31964426]  {CVE-2020-25637}
  - rpc: add support for filtering @acls by uint params (Ján Tomko)  [Orabug: 31964426]  {CVE-2020-25637}
  - rpc: gendispatch: handle empty flags (Ján Tomko)  [Orabug: 31964426]  {CVE-2020-25637}
  - qemu: blockcopy: Fix conditions when virStorageSource should be initialized (Peter Krempa)  [Orabug: 31517934] 
  - qemu: blockcopy: Report error on image format detection failure (Peter Krempa)  [Orabug: 31517934]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-21.el7
changelog:
  - exadata: Fix the validation when defining domain groups (Wim ten Have)  [Orabug: 32085856] 
  - Revert "qemu: don't take agent and monitor job for shutdown" (Menno Lageman)  [Orabug: 32080283] 
  - Revert "qemu: don't hold a monitor and agent job for reboot" (Menno Lageman)  [Orabug: 32080283] 
  - Revert "qemu: don't hold monitor and agent job when setting time" (Menno Lageman)  [Orabug: 32080283] 
  - Revert "qemu: remove use of qemuDomainObjBeginJobWithAgent()" (Menno Lageman)  [Orabug: 32080283] 
  - qemu: improve error message when guest vcpu count exceeds domain group limit (Menno Lageman)  [Orabug: 31985111] 
  - qemu: Autonomous hugepage acquisition for 2-MiB and 1-GiB guest memoryBacking. (Wim ten Have)  
  - qemu: Fix a qemuMemReleaseHostHugepages state error (Wim ten Have)  [Orabug: 32069203] 
  - qemu: avoid guest CPU process handling if exadataConfig is disabled (Wim ten Have)  [Orabug: 32053696] 
  - domain_conf: Relax SCSI addr used check (Michal Prívozník)  [Orabug: 31386162] 
  - domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (Michal Prívozník)  [Orabug: 31386162]


author: Menno Lageman <menno.lageman@oracle.com> - 5.7.0-22.el7
changelog:
  - build: add dependency to help patch tooling (Menno Lageman)  [Orabug: 32284540] 
  - Exadata: fix active guest dgroup-delete requests (Wim ten Have)  [Orabug: 32095306] 
  - Exadata: fix a rogue Domain Groups dgroup-undefine flaw (Wim ten Have)  [Orabug: 31945084]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-23.el7
changelog:
  - util: remove unneeded cleanup labels (Wim ten Have)  [Orabug: 32399255] 
  - virnuma: Don't work around numa_node_to_cpus() for non-existent nodes (Wim ten Have)  [Orabug: 32379098]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-24.el7
changelog:
  - exadata: Add configurable libvirtd mlockall support (Wim ten Have)  [Orabug: 32479237] 
  - exadata: hint a configurable number of memory init threads to qemu (Wim ten Have)  [Orabug: 32460334] 
  - Exadata: domain group should allow for asymmetric creation (Wim ten Have)  [Orabug: 32060622]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-26.el7
changelog:
  - exadata: Fix autonomous hugepage acquisition barrier hang (Wim ten Have)  [Orabug: 32537538] 
  - exadata: Fix CPU Packing when out of pCPUs (Wim ten Have)  [Orabug: 32527311]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-27.el7
changelog:
  - Exadata: protect libvirt hugepage acquisition from QEMU async init (Wim ten
    Have)  [Orabug: 32561685]


author: Joe Jin <joe.jin@oracle.com> - 5.7.0-28.el7
changelog:
  - qemu_capabilities: Rework domain caps cache (Michal Prívozník)  [Orabug: 32664432] 
  - tests: fix virArchFromHost() redefine error (Joe Jin)  [Orabug: 32664432] 
  - qemu: cache host arch separately from virCapsPtr (Daniel P. Berrangé)  [Orabug: 32664432] 
  - cpu.c: Check properly for virCapabilitiesGetNodeInfo() retval (Michal Prívozník)  [Orabug: 32664432] 
  - virStorageSourceParseBackingJSONRaw: Parse 'offset' and 'size' attributes (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemu: Add test data for the new <slice> element (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Add support for slices of type 'storage' (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemublock: Add cases for creating image overlays on top of disks with <slice> (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: Properly format storage slice into backing store strings (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domain: Store nodenames of slice in status XML (Peter Krempa)  [Orabug: 32164351] 
  - conf: Implement support for <slices> of disk source (Peter Krempa)  [Orabug: 32164351] 
  - docs: Document the new <slices> sub-element of disk's <source> (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: forbid creation of storage sources with <slice> (Peter Krempa)  [Orabug: 32164351] 
  - qemuDomainValidateStorageSource: Reject unsupported slices (Peter Krempa)  [Orabug: 32164351] 
  - qemuBlockStorageSourceGetFormatRawProps: format 'offset' and 'size' for slice (Peter Krempa)  [Orabug: 32164351] 
  - util: virstoragefile: Add data structure for storing storage source slices (Peter Krempa)  [Orabug: 32164351] 
  - tests: virstorage: Add test data for json specified raw image with offset/size (Peter Krempa)  [Orabug: 32164351] 
  - docs: formatdomain: Close <source> on one of disk examples (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domain: Refactor formatting of node names into status XML (Peter Krempa)  [Orabug: 32164351] 
  - tests: virstorage: Add test cases for "json:" pseudo-URI without 'file' wrapper (Peter Krempa)  [Orabug: 32164351] 
  - virStorageSourceParseBackingJSON: Prevent arbitrary nesting with format drivers (Peter Krempa)  [Orabug: 32164351] 
  - virStorageSourceParseBackingJSON: Allow 'json:' pseudo URIs without 'file' wrapper (Peter Krempa)  [Orabug: 32164351] 
  - virStorageSourceJSONDriverParser: annotate 'format' drivers (Peter Krempa)  [Orabug: 32164351] 
  - virStorageSourceParseBackingJSON: Move deflattening of json: URIs out of recursion (Peter Krempa)  [Orabug: 32164351] 
  - virStorageSourceParseBackingJSON: Pass around original backing file string (Peter Krempa)  [Orabug: 32164351] 
  - qemu: enable blockdev support (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Instantiate pflash via -machine when using blockdev (Peter Krempa)  [Orabug: 32164351] 
  - qemu: command: Build the 'pflash' drives via -machine (Peter Krempa)  [Orabug: 32164351] 
  - qemu: command: Build -blockdev-s for backing of pflash (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domain: Introduce helper to convert <loader> into virStorageSource (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domain: Store virStorageSources representing pflash backing (Peter Krempa)  [Orabug: 32164351] 
  - qemu: command: Extract formatting of -drive for pflash (Peter Krempa)  [Orabug: 32164351] 
  - qemu: capabilities: Add detection of the 'savevm' fix for -blockdev (Peter Krempa)  [Orabug: 32164351] 
  - qemu: qapi: Add support for command features (Peter Krempa)  [Orabug: 32164351] 
  - qemu: caps: Add capability for dynamic 'auto-read-only' support for files (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemucapabilities: Refresh data for unreleased qemu-4.2 on x86_64 (Peter Krempa)  [Orabug: 32164351] 
  - qemu: caps: Base support of 'backingStoreInput' domain feature on QEMU_CAPS_BLOCKDEV (Peter Krempa)  [Orabug: 32164351] 
  - docs: Document support for obeying <backingStore> of <disk> on input (Peter Krempa)  [Orabug: 32164351] 
  - conf: domcaps: Add 'backingStoreInput' domain capability (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domcaps: Simplify adding new domaincaps based on qemu caps (Peter Krempa)  [Orabug: 32164351] 
  - domaincaps: Store domain capability features in an array (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domcaps: Initialize all features (Peter Krempa)  [Orabug: 32164351] 
  - domcaps: Add function for initializing domain caps as unsupported (Peter Krempa)  [Orabug: 32164351] 
  - conf: domaincaps: Use virXMLFormatElement in virDomainCapsFormatFeatures (Peter Krempa)  [Orabug: 32164351] 
  - conf: domaincaps: Extract formatting of the <features> subelement (Peter Krempa)  [Orabug: 32164351] 
  - conf: domaincaps: Replace FORMAT_SINGLE macro by a function (Peter Krempa)  [Orabug: 32164351] 
  - conf: capabilities: Modernize virCapabilitiesFormatMemoryBandwidth (Peter Krempa)  [Orabug: 32164351] 
  - conf: caps: Modernize virCapabilitiesFormatCaches (Peter Krempa)  [Orabug: 32164351] 
  - conf: turn virDomainMemtuneFormat void (Peter Krempa)  [Orabug: 32164351] 
  - conf: domain: Split up formatting of <memtune> and <memoryBacking> (Peter Krempa)  [Orabug: 32164351] 
  - conf: Rename virDomainCapsFeature to virDomainProcessCapsFeature (Peter Krempa)  [Orabug: 32164351] 
  - conf: storagecaps: Fix broken attempt at being const-correct (Peter Krempa)  [Orabug: 32164351] 
  - conf: domaincaps: Fix broken attempt at being const-correct (Peter Krempa)  [Orabug: 32164351] 
  - qemu: caps: Make capability filler functions void (Peter Krempa)  [Orabug: 32164351] 
  - util: buffer: Add init macro for automatically setting child XML indent (Peter Krempa)  [Orabug: 32164351] 
  - qemu: snapshot: Fix inactive external snapshots when backing chain is present (Peter Krempa)  [Orabug: 32164351] 
  - qemu: blockjob: Transfer 'readonly' state of images after active layer block commit (Peter Krempa)  [Orabug: 32164351] 
  - qemu: command: Use XML based disk bus convertor in error message (Peter Krempa)  [Orabug: 32164351] 
  - storagefile: Fill in meta->externalDataStore (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Add externalDataStore member (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Split out virStorageSourceNewFromChild (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Don't access backingStoreRaw directly in FromBackingRelative (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Fill in meta->externalDataStoreRaw (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Add externalDataStoreRaw member (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Fix backing format \0 check (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Rename qcow2GetExtensions 'format' argument (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Rename qcow2GetBackingStoreFormat (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Push extension_end calc to qcow2GetBackingStoreFormat (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Push 'start' into qcow2GetBackingStoreFormat (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Use qcowXGetBackingStore directly (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Drop now unused isQCow2 argument (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Check version to determine if qcow2 or not (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: qcow1: Let qcowXGetBackingStore fill in format (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: qcow1: Fix check for empty backing file (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: qcow1: Check for BACKING_STORE_OK (Cole Robinson)  [Orabug: 32164351] 
  - qemu: snapshot: Don't update current snapshot until we're done (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: Replace snapshot transaction action generator (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemumonitor: Add testing for the 'transaction' command and generators (Peter Krempa)  [Orabug: 32164351] 
  - qemu: monitor: Add transaction generators for snapshot APIs (Peter Krempa)  [Orabug: 32164351] 
  - qemu: monitor: Add transaction generators for dirty bitmap APIs (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemucapabilities: fix 4.2.0 qemucapabilities (Joe Jin)  [Orabug: 32164351] 
  - qemu: checkpoint: Do ACL check prior to snapshot interlocking (Peter Krempa)  [Orabug: 32164351] 
  - qemu: driver: Remove misplaced qemuDomainObjEndJob in qemuDomainCheckpointGetXMLDesc (Peter Krempa)  [Orabug: 32164351] 
  - conf: Drop pointless 'domain' argument from virDomainSnapshotRedefinePrep (Peter Krempa)  [Orabug: 32164351] 
  - conf: Drop pointless 'domain' argument from virDomainCheckpointRedefinePrep (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemucapabilities: Update caps of qemu-4.1 to released version (Peter Krempa)  [Orabug: 32164351] 
  - tests: add qemu capabilities data for qemu 4.2 (Peter Krempa)  [Orabug: 32164351] 
  - lxc: fix compile error (Joe Jin)  [Orabug: 32164351] 
  - qemu: driver: Remove QEMU_ADD_BLOCK_PARAM_LL macro (Peter Krempa)  [Orabug: 32164351] 
  - qemu: driver: Don't return anything from qemuDomainBlockStatsGatherTotals (Peter Krempa)  [Orabug: 32164351] 
  - qemu: driver: Remove pointless macro QEMU_BLOCK_STAT_TOTAL (Peter Krempa)  [Orabug: 32164351] 
  - qemu: monitor: Change fields in qemuBlockStats to 'unsigned' (Peter Krempa)  [Orabug: 32164351] 
  - qemu: monitor: Refactor cleanup in qemuMonitorJSONGetAllBlockStatsInfo (Peter Krempa)  [Orabug: 32164351] 
  - qemu: monitor: Refactor cleanup in qemuMonitorJSONGetOneBlockStatsInfo (Peter Krempa)  [Orabug: 32164351] 
  - qemu: monitor: Refactor cleanup in qemuMonitorJSONBlockStatsCollectData (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Remove stale comment for qemuDomainBlockStats (Peter Krempa)  [Orabug: 32164351] 
  - qemu_blockjob: Remove secdriver metadata for whole backing chain on job completion (Michal Prívozník)  [Orabug: 32164351] 
  - qemu: hotplug: Use VIR_AUTOFREE() instead VIR_FREE for strings (Daniel Henrique Barboza)  [Orabug: 32164351] 
  - qemu: snapshot: Do ACL check prior to checkpoint interlocking (Peter Krempa)  [Orabug: 32164351] 
  - qemuCheckDiskConfigAgainstDomain: Validate disk's SCSI address iff disk is SCSI (Xu Yandong)  [Orabug: 32164351] 
  - qemuSharedDeviceEntryRemove: Free domain name before VIR_DELETE_ELEMENT (Xu Yandong)  [Orabug: 32164351] 
  - qemu_capabilities: Temporarily disable dbus-vmstate capability (Michal Prívozník)  [Orabug: 32164351] 
  - Revert "qemu: add socket datagram capability" (Michal Prívozník)  [Orabug: 32164351] 
  - tests: qemustatusxml2xml: Fix disk target mess (Peter Krempa)  [Orabug: 32164351] 
  - snapshot: Store both config and live XML in the snapshot domain (Maxiwell S. Garcia)  [Orabug: 32164351] 
  - qemu: formatting XML from domain def choosing the root name (Maxiwell S. Garcia)  [Orabug: 32164351] 
  - qemu: Don't leak domain def when RevertToSnapshot fails (Jiri Denemark)  [Orabug: 32164351] 
  - qemu: Fix regression in snapshot-revert (Eric Blake)  [Orabug: 32164351] 
  - lib: Define and use autofree for virConfPtr (Michal Prívozník)  [Orabug: 32164351] 
  - qemu_conf: Use more of VIR_AUTOUNREF() (Michal Prívozník)  [Orabug: 32164351] 
  - qemu_conf: Use more of VIR_AUTOFREE() (Michal Prívozník)  [Orabug: 32164351] 
  - qemu_conf: Drop a pair of needless 'cleanup' labels (Michal Prívozník)  [Orabug: 32164351] 
  - virhostdev: Don't unref @pcidevs twice (Michal Prívozník)  [Orabug: 32164351] 
  - qemu_conf.c: introduce qemuAddRemoveSharedDeviceInternal (Daniel Henrique Barboza)  [Orabug: 32164351] 
  - qemu_conf.c: introduce qemuAddRemoveSharedDiskInternal (Daniel Henrique Barboza)  [Orabug: 32164351] 
  - qemu_conf.c: introduce qemuAddRemoveSharedHostdevInternal (Daniel Henrique Barboza)  [Orabug: 32164351] 
  - remote: fix UNIX socket path being incorrectly built for libvirtd (eater)  [Orabug: 32164351] 
  - lib: Grab write lock when modifying list of domains (Michal Prívozník)  [Orabug: 32164351] 
  - qemu: reset VM id after external devices stop (Marc-André Lureau)  [Orabug: 32164351] 
  - qemu: add dbus-vmstate capability (Marc-André Lureau)  [Orabug: 32164351] 
  - tests: fix xml2xml tpm-emulator.xml test (Marc-André Lureau)  [Orabug: 32164351] 
  - qemu: migration: Switch to blockdev mode for non-shared storage migration (Peter Krempa)  [Orabug: 32164351] 
  - qemu: migration: Refactor cleanup in qemuMigrationSrcNBDStorageCopy (Peter Krempa)  [Orabug: 32164351] 
  - qemu: migration: Refactor cleanup in qemuMigrationSrcNBDStorageCopyBlockdev (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Defer support checks for external active snapshots to blockdev code or qemu (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Add -blockdev support for external snapshots (Peter Krempa)  [Orabug: 32164351] 
  - qemu: snapshot: Skip overlay file creation/interogation if unsupported (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Merge use of 'reuse' flag in qemuDomainSnapshotDiskPrepareOne (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Disband qemuDomainSnapshotCreateSingleDiskActive (Peter Krempa)  [Orabug: 32164351] 
  - qemu: snapshot: Rename external disk snapshot handling functions (Peter Krempa)  [Orabug: 32164351] 
  - qemu: snapshot: Move error preservation to qemuDomainSnapshotDiskDataCleanup (Peter Krempa)  [Orabug: 32164351] 
  - qemu: snapshot: Save status and config XMLs only on success (Peter Krempa)  [Orabug: 32164351] 
  - qemu: snapshot: Fix image lock handling when taking a snapshot (Peter Krempa)  [Orabug: 32164351] 
  - qemu: driver: Fix shallow non-reuse block copy (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Explicitly pass backing store to qemuBuildStorageSourceChainAttachPrepareBlockdevTop (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: explicitly pass backing store to qemuBlockStorageSourceAttachPrepareBlockdev (Peter Krempa)  [Orabug: 32164351] 
  - qemu: command: Refactor qemuBuildStorageSourceChainAttachPrepareBlockdevInternal (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: Explicitly specify backingStore when creating format layer props (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: Unify conditions to format backing store of format node definition (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Prevent storage causing too much nested XML (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domain: Refactor cleanup in qemuDomainDetermineDiskChain (Peter Krempa)  [Orabug: 32164351] 
  - qemu: hotplug: Setup disk throttling with blockdev (Peter Krempa)  [Orabug: 32164351] 
  - qemu: hotplug: Use VIR_AUTOFREE in qemuDomainAttachDiskGeneric (Peter Krempa)  [Orabug: 32164351] 
  - qemu: hotplug: Simplify cleanup in qemuDomainChangeMediaLegacy (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Fix qemuDomainObjTaint with virtlogd (Jiri Denemark)  [Orabug: 32164351] 
  - qemu: monitor: Fix formatting of 'offset' in qemuMonitorJSONSaveMemory (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemublock: Use bigger numbers as dummy capacity/physical (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: Use correct type when creating image size JSON entries (Peter Krempa)  [Orabug: 32164351] 
  - Exadata: protect vNUMA/SMT from artificially injected faults (Wim ten Have)  [Orabug: 32708041] 
  - virnetserver: fix some memory leaks in virNetTLSContextReloadForServer (Jin Yan)  
  - virt-admin: Introduce command srv-update-tls (Zhang Bo)  [Orabug: 32768102] 
  - admin: Introduce virAdmServerUpdateTlsFiles (Zhang Bo)  [Orabug: 32768102] 
  - tls: Add a mutex lock on 'tlsCtxt' (Zhang Bo)  [Orabug: 32768102] 
  - virnetserver: Introduce virNetServerUpdateTlsFiles (Zhang Bo)  [Orabug: 32768102]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-29.el7
changelog:
  - qemu: vCORE distribution under vNUMA host partitioning should balance guests vCPU:pCPU pinning (Wim ten Have)  [Orabug: 32355455] 
  - qemuDomainSnapshotDiskPrepareOne: Don't load the relative path with blockdev (Peter Krempa)  [Orabug: 33151464] 
  - qemu: block: Support VIR_DOMAIN_BLOCK_COMMIT/PULL/REBASE_RELATIVE with blockdev (Peter Krempa)  [Orabug: 33151464] 
  - qemu: Tell secdrivers which images are top parent (Michal Prívozník)  [Orabug: 33086913] 
  - security: Introduce VIR_SECURITY_DOMAIN_IMAGE_PARENT_CHAIN_TOP flag (Michal Prívozník)  [Orabug: 33086913]


author: Menno Lageman <menno.lageman@oracle.com> - 5.7.0-30.el7
changelog:
  - qemuDomainSnapshotDiskPrepareOne: Fix logic of relative backing store update (Peter Krempa)  [Orabug: 33086913] 
  - qemu: Don't set NVRAM label when creating it (Michal Prívozník)  [Orabug: 33319048] 
  - qemu: protect guestCPUs from drift under vcpu guest timeouts (Wim ten Have)  [Orabug: 33368490]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-31.el7
changelog:
  - qemu: Do not latch guestCPUs when guests hotplug with active domain groups
    (Wim ten Have)  [Orabug: 33440015]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-32.el7
changelog:
  - qemu: Validate config->exadata before reaping guests (Wim ten Have)  [Orabug: 33763967] 
  - qemu: Make vNUMA/SMT pCPU packing L3-cache aware on AMD/E4 (Wim ten Have)  [Orabug: 33268059] 
  - qemu: work exadataConfig flags directly from the QEMUdriver structure (Wim ten Have)  [Orabug: 33268059] 
  - qemu: Label restore path outside of secdriver transactions (Michal Prívozník)  [Orabug: 33351242] 
  - security: Introduce virSecurityManagerDomainSetPathLabelRO (Michal Prívozník)  [Orabug: 33351242]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-33.el7
changelog:
  - qemu: refresh vNUMA/SMT pinning. (Wim ten Have)  [Orabug: 34083505] 
  - qemu driver: Check exadataConfig and packCPUs whenever vNUMA/SMT applies (Wim ten Have)  [Orabug: 34023508] 
  - nwfilter: fix crash when counting number of network filters (Daniel P. Berrangé)  [Orabug: 33973639]  {CVE-2022-0897}


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-34.el7
changelog:
  - qemu: blockcopy: Allow late opening of the backing chain of a shallow copy (Peter Krempa)  [Orabug: 33091019] 
  - qemu: capabilities: Introduce QEMU_CAPS_BLOCKDEV_SNAPSHOT_ALLOW_WRITE_ONLY (Peter Krempa)  [Orabug: 33091019] 
  - qemuDomainBlockCopyCommon: Record updated flags to block job (Peter Krempa)  [Orabug: 33091019] 
  - qemuDomainBlockPivot: Move check prior to executing the pivot steps (Peter Krempa)  [Orabug: 33091019] 
  - qemuDomainBlockPivot: Copy bitmaps backing checkpoints for virDomainBlockCopy (Peter Krempa)  [Orabug: 33091019] 
  - qemu: block: Introduce function to calculate bitmap handling for block-copy (Peter Krempa)  [Orabug: 33091019] 
  - qemu: block: Add validator for bitmap chains accross backing chains (Peter Krempa)  [Orabug: 33091019] 
  - qemu: blockjob: Store 'flags' for all the block job types (Peter Krempa)  [Orabug: 33091019] 
  - qemu: blockjob: Store 'jobflags' with block job data (Peter Krempa)  [Orabug: 33091019] 
  - util: json: Introduce virJSONValueArrayConcat (Peter Krempa)  [Orabug: 33091019] 
  - qemu: block: Extract calls of qemuBlockGetNamedNodeData into a helper function (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Track and relabel images for bitmap merging (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Introduce support for deleting checkpoints accross snapshots (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Extract calculation of bitmap merging for checkpoint deletion (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Introduce helper to find checkpoint disk definition in parents (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: tolerate missing disks on checkpoint deletion (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Use disk definition directly when creating checkpoint (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: rename disk->chkdisk in qemuCheckpointAddActions (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: rename disk->chkdisk in qemuCheckpointDiscardBitmaps (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: split out checkpoint deletion bitmaps (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Store whether deleted checkpoint is current in a variable (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Extract and export rollback of checkpoint metadata storing (Peter Krempa)  [Orabug: 33091019] 
  - qemu: block: Introduce qemuBlockNamedNodeDataGetBitmapByName (Peter Krempa)  [Orabug: 33091019] 
  - qemu: snapshot: Propagate active bitmaps through external snapshots (Peter Krempa)  [Orabug: 33091019] 
  - qemu: monitor: Add 'granularity' parameter for block-dirty-bitmap-add (Peter Krempa)  [Orabug: 33091019] 
  - qemu: snapshot: Fold formatting of snapshot transaction into prepare func (Peter Krempa)  [Orabug: 33091019] 
  - qemu: Check for explicit failure of qemuBlockSnapshotAddBlockdev (Peter Krempa)  [Orabug: 33091019] 
  - qemu: monitor: Extract internals of qemuMonitorJSONBlockGetNamedNodeData (Peter Krempa)  [Orabug: 33091019] 
  - qemu: monitor: Extract data about dirty-bimaps in qemuMonitorBlockGetNamedNodeData (Peter Krempa)  [Orabug: 33091019] 
  - qemu: block: enable the snapshot image deletion feature (Pavel Mores)  [Orabug: 33091019] 
  - qemu: block: propagate the delete flag to where it can actually be used (Pavel Mores)  [Orabug: 33091019] 
  - qemu: checkpoint: fix NULL dereference at create time (Cole Robinson)  [Orabug: 33091019] 
  - qemu: snapshot: Mark file becoming backingStore as read-only (Peter Krempa)  [Orabug: 33091019] 
  - util: consolidate on one free callback for hash data (Daniel P. Berrangé)  [Orabug: 33091019] 
  - conf: stop using hash key when free'ing hash entries (Daniel P. Berrangé)  [Orabug: 33091019] 
  - qemu: checkpoint: Use qemuMonitorTransactionBitmapMergeSourceAddBitmap (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Fix rollback and access to unlocked 'vm' when deleting checkpoints (Peter Krempa)  [Orabug: 33091019] 
  - qemu: snapshot: split out preparation of a snapshot with blockdev (Peter Krempa)  [Orabug: 33091019] 
  - qemu: monitor: Add helper for generating data for block bitmap merging (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Extract finalizing steps of checkpoint creation (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Split out checkpoint creation code (Peter Krempa)  [Orabug: 33091019] 
  - qemu: block: Don't query monitor in qemuBlockStorageSourceCreateDetectSize (Peter Krempa)  [Orabug: 33091019] 
  - qemu: monitor: Introduce new interface to query-named-block-nodes (Peter Krempa)  [Orabug: 33091019] 
  - util: hash: Introduce virHashHasEntry (Peter Krempa)  [Orabug: 33091019] 
  - util: hash: Add new constructor 'virHashNew' (Peter Krempa)  [Orabug: 33091019] 
  - util: hash: Add possibility to use simpler data free function in virHash (Peter Krempa)  [Orabug: 33091019] 
  - conf: Introduce virDomainDiskByTarget (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Don't update current checkpoint until we are done (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Replace open-coded transaction action generators (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Refactor cleanup in qemuCheckpointCreateXML (Peter Krempa)  [Orabug: 33091019] 
  - qemu: domain: Move checkpoint related code to qemu_checkpoint.c (Peter Krempa)  [Orabug: 33091019] 
  - qemu: driver: Move checkpoint-related code to qemu_checkpoint.c (Peter Krempa)  [Orabug: 33091019] 
  - qemu: Move, rename and export qemuDomObjFromDomain (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Don't forbid checkpoint when VM is marked for autodestroy (Peter Krempa)  [Orabug: 33091019] 
  - Prepare to hotplug vNUMA targets for non-X86_64 guests (Wim ten Have)  [Orabug: 34256070] 
  - qemu: Add missing lock in qemuProcessHandleMonitorEOF (Peng Liang)  [Orabug: 34210159]  {CVE-2021-3975}
  - libvirt: Fix Auto host partitioning threads under single-socket hosts (Wim ten Have)  [Orabug: 34153152]


author: Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-35.el7
changelog:
  - util: add virNetDevGetPhysPortName (Moshe Levi)  [Orabug: 34329649] 
  - util: Add phys_port_name support on virPCIGetNetName (Dmytro Linkin)  [Orabug: 34329649]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-36.el7
changelog:
  - conf: virNetDevSupportsBandwidth: move into the C file (Wim ten Have)  [Orabug: 34510458] 
  - util: Netdev fixes for phys_port_id to get the ifname of a VF (Wim ten Have)  [Orabug: 34417160] 
  - qemuProcessStop: Don't try to remove QoS on already removed TAP (Michal Prívozník)  [Orabug: 34206752] 
  - virnetdevopenvswitch: Fix 'burst' value passed to ovs-vsctl (Michal Prívozník)  [Orabug: 34206752] 
  - util: Avoid null pointer dereference when setting QoS on OVS (Jiri Denemark)  [Orabug: 34206752] 
  - virnetdevopenvswitch: unify calculation of ovs and tc (zhangjl02)  [Orabug: 34206752] 
  - virnetdevopenvswitch: Fix qos cleaning residual on multi interfaces (Jinsheng Zhang)  [Orabug: 34206752] 
  - virnetdevopenvswitch: Introduce virNetDevOpenvswitchInterfaceClearTxQos and virNetDevOpenvswitchInterfaceClearRxQos (Jinsheng Zhang)  [Orabug: 34206752] 
  - virnetdevopenvswitch: Extract common code block to a single function (Jinsheng Zhang)  [Orabug: 34206752] 
  - virnetdevopenvswitch: Extract conversion parameters between virNetDevBandwidth and ovs (Jinsheng Zhang)  [Orabug: 34206752] 
  - virnetdevopenvswitch: Add vmuuid notes on virNetDevOpenvswitchInterfaceSetQos (Jinsheng Zhang)  [Orabug: 34206752] 
  - qemu: interface: check and use ovs command to set qos of ovs managed port (zhangjl02)  [Orabug: 34206752] 
  - qemu: interface: remove setting noqueue for ovs port (zhangjl02)  [Orabug: 34206752] 
  - virDomain: interface: add virNetDevOpenvswitchInterfaceSetQos and virNetDevOpenvswitchInterfaceClearQos (zhangjl02)  [Orabug: 34206752] 
  - virDomain: interface: add virDomainNetDefIsOvsport (zhangjl02)  [Orabug: 34206752] 
  - openvswitch: don't delete existing OVS port prior to recreating same port (Laine Stump)  [Orabug: 34206752] 
  - virnetdev: move virNetDevSetRootQDisc to virnetdevbandwidth (Pavel Hrdina)  [Orabug: 34206752] 
  - virnetdevbandwidth: Don't generate burst outside of boundaries (Michal Prívozník)  [Orabug: 34206752] 
  - qemu_hotplug: Don't dereference NULL pointer @newb in qemuDomainChangeNet() (Michal Prívozník)  [Orabug: 34206752] 
  - qemu: Restore default root qdisc when QoS is cleared out (Michal Prívozník)  [Orabug: 34206752] 
  - virnetdevopenvswitch: Simplify OVS_VSCTL cmd creation (Michal Prívozník)  [Orabug: 34206752] 
  - qemu: Set noqueue qdisc for TAP devices (Michal Prívozník)  [Orabug: 34206752] 
  - virnetdev: Introduce virNetDevSetRootQDisc() (Michal Prívozník)  [Orabug: 34206752] 
  - syntax-check: Don't forbid curly braces around single line condition body (Peter Krempa)  [Orabug: 34206752] 
  - src: util: rename some program macros (Pavel Hrdina)  [Orabug: 34206752] 
  - conf: rename virNetDevSupportBandwidth to virNetDevSupportsBandwidth (Ján Tomko)  [Orabug: 34206752] 
  - qemu: do not revert to NULL bandwidth (Ján Tomko)  [Orabug: 34206752] 
  - conf: return a const from virDomainNetGetActualVirtPortProfile (Laine Stump)  [Orabug: 34206752] 
  - qemu: move runtime netdev validation into a separate function (Laine Stump)  [Orabug: 34206752] 
  - conf: make arg to virDomainNetGetActualVirtPortProfile() a const (Laine Stump)  [Orabug: 34206752]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-37.el7
changelog:
  - vNUMA: Auto adjust 'maxvcpus' for vCORE placement (Wim ten Have)  [Orabug: 34670399] 
  - qemu: support kvm-poll-control performance hint (Wim ten Have)  [Orabug: 34695476] 
  - qemu: fix EFI nvram removal on domain undefine (Pavel Mores)  [Orabug: 34543837] 
  - util: keep the pidfile locked (Marc-André Lureau)  [Orabug: 34500172] 
  - qemuProcessStartManagedPRDaemon: Don't pass -f pidfile to the daemon (Michal Prívozník)  [Orabug: 34500172] 
  - virCommand: Actually acquire pidfile instead of just writing it (Michal Prívozník)  [Orabug: 34500172] 
  - qemu: Don't explicitly remove pidfile after virPidFileForceCleanupPath() (Michal Prívozník)  [Orabug: 34500172] 
  - virPipeImpl: Don't overwrite error (Peter Krempa)  [Orabug: 34500172] 
  - src: introduce a wrapper for the pipe2() system call (Daniel P. Berrangé)  [Orabug: 34500172]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-38.el7
changelog:
  - qemu: Don't report spurious errors from vCPU tid validation on hotunplug timeout (Shaleen Bathla)  [Orabug: 34826758] 
  - security: fix SELinux label generation logic (Daniel P. Berrangé)  [Orabug: 34773029]  {CVE-2021-3631}
  - spec: Require iproute-tc dependency for OL7 also (Shaleen Bathla)  [Orabug: 34724925] 
  - qemu: Set default qdisc before setting bandwidth (Michal Prívozník)  [Orabug: 34724925] 
  - qemu: Taint cpu host-passthrough only after migration (Cole Robinson)  [Orabug: 34724925]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-40.el7
changelog:
  - build: change dependency to allow post install erasing of /usr/bin/nc (Wim ten Have)  [Orabug: 35289777] 
  - util: Make virFileClose() quiet on success (Andrea Bolognani)  [Orabug: 35090886]


author: Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-41.el7
changelog:
  - qemu_monitor: Add defensive protection on mon->msg (Wim ten Have)  [Orabug: 35699260] 
  - vircpi: Add PCIe 5.0 and 6.0 link speeds (Michal Prívozník)  [Orabug: 35496776] 
  - qemuProcessSetupVcpusVnuma: add NULL check for def->cpu (Shaleen Bathla)  [Orabug: 35332038]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-7.el7
changelog:
  - domaingroups: ExaData Domain Groups POC (Wim ten Have)  
  - domaingroup: preliminary virsh support for domain groups - drop #4 (Menno Lageman)  
  - tests: add various tests to exercise vNUMA host partitioning (Wim ten Have)  [Orabug: 29720293] 
  - qemu: driver changes for new vNUMA Host and Nodeset partitioning (Wim ten Have)  [Orabug: 29720293] 
  - XML definitions for guest vNUMA and parsing routines (Wim ten Have)  [Orabug: 29720293] 
  - Revert "exadata: can not configure shared memory hosted disk devices for vhostmd.service" (Menno Lageman)  
  - qemu: Forcibly mknod() even if it exists (Michal Prívozník)


author: John Ferlan <jferlan@redhat.com> 0.6.3-15
changelog:
  - Add in upstream submit to support bz#1075874
  - Added missing address element for filesystem 'disk'


author: John Ferlan <jferlan@redhat.com> 0.6.3-19
changelog:
  - Add in upstream changes post bz#1075874 to fix a couple of issues
    with supporting patch and to avoid future potential build issue


author: Bryan Kearney <bkearney@redhat.com) - 0.4.7-1
changelog:
  - Only throw errors on real errors.
  - Remote non thread safe error reporting
  - BZ 600819 Incorrect scheduler parameter value passed to native API.


author: Daniel Veillard <veillard@redhat.com> - 0.4.8-1
changelog:
  - Add flags to StoragePoolRefresh
  - use byte[] array for secretGetValue
  - Fix for the jna parameter passing issue
  - Added domain flags and error constants for libvirt 0.9.12


author: Daniel Veillard <veillard@redhat.com> - 0.4.9-1
changelog:
  - Change Licence to MIT and release 0.4.9
  - Fix IndexOutOfBoundsException for unknown error codes
  - Fix javadoc warnings
  - Fix typo in Domain.java


author: Wim ten Have <wim.ten.have@oracle.com> - 4.0.0-3.el7
changelog:
  - BUILDINFO: commit=b1ef754d41dbe742dbc4e43d3f13814275a644e3
  - buildrpm: fix missing objects after upstream merge.


author: Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-34.el7
changelog:
  - libvirt-python.spec: Bump "Obsoletes" version number for libvirt-python (Karl
    Heubaum)  [Orabug: 34185868]


author: Michal Privoznik <mprivozn@redhat.com> - 0.0.3-5
changelog:
  - Rebuild for fixed net-snmp (libvirt-snmp BZ: 1064346 net-snmp BZ: 1064437)
  - Fix day name in the changelog (Feb 2 2011 was Wed not Thu)


author: Michal Privoznik <mprivozn@redhat.com> - 0.0.3-5.el7_6.1
changelog:
  - Replace placeholder org OID with libvirt OID (BZ: 1603154)
  - Fix object OIDs for SNMP traps (BZ: 1641995)
  - Modernize spec file


author: Michal Privoznik <mprivozn@redhat.com> - 0.0.3-6
changelog:
  - Replace placeholder org OID with libvirt OID (BZ: 1603154)
  - Fix object OIDs for SNMP traps (BZ: 1624839)
  - Send sysUptime in traps (BZ: 1624879)
  - Modernize spec file


author: Caolán McNamara <caolanm@redhat.com> - 0.4.0-8
changelog:
  - defining inline causes problems trying to build against libvisual headers, 
    e.g. libvisual-plugins


author: Alex Vainman <alexv@mellanox.com> - 7.0.14-1
changelog:
  - New upstream release
  - Removal of redundant macros and obsolete/unneeded tags
  - Added ExcludeArch, BuildRequires and Require sections
  - Fixes and cleanups in the build and installation sections
  - Install 30-libvma-limits.conf file under 
    /etc/security/limits.d/
  - Fixes related to files/directories ownerships
  - Removal of vma_perf_envelope.sh from the utility package
  - Update Source tag URL
  - Fix most of the rpmlint warnings


author: Alex Vainman <alexv@mellanox.com> - 7.0.14-2
changelog:
  - Added reasoning for archs exclusion
  - Package description improvement
  - Removal of the pre scriplet
  - Added COPYING and LICENSE files to the package


author: Alex Vainman <alexv@mellanox.com> - 8.0.1-1
changelog:
  - New upstream release
  - Move to dual license: GPLv2 or BSD
  - ExcludeArch update
  - Removal of extra space in:
    config(noreplace) {_sysconfdir}/security/limits.d/30-libvma-limits.conf
  - Add V=1 to make


author: Donald Dutile <ddutile@redhat.com> - 8.1.1-1
changelog:
  - Rebase to 8.1.1, re-apply patch to 8.0.1-2
  - Add (Build)Requires of libibverbs to 1.2.2
  - Resolves: rhbz#1353704


author: Jarod Wilson <jarod@redhat.com> - 8.1.3-1
changelog:
  - Patch in additional coverity fixes from upstream git tree
  - Rebase to 8.1.3 to pick up copious coverity corrections
  - Related: rhbz#1271624


author: Jarod Wilson <jarod@redhat.com> - 8.1.4-1
changelog:
  - Rebase to 8.1.4 after latest round of coverity fixes upstream
    reduced reported defects to 0
  - Related: rhbz#1271624


author: Petr Pisar <ppisar@redhat.com> - 0.9.9-10
changelog:
  - Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
  - Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
    (bug #1157671)
  - Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
    handling) (bug #1157671)
  - Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
    (bug #1157671)
  - Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
    handling) (bug #1157671)


author: Petr Pisar <ppisar@redhat.com> - 0.9.9-11
changelog:
  - Fix a crash in the VNC server library on connecting an IPv4 client if the
    server could not start listening on an IPv6 socket (bug #1314814)


author: Petr Pisar <ppisar@redhat.com> - 0.9.9-13
changelog:
  - Fix CVE-2018-15127 (Heap out-of-bounds write in
    rfbserver.c:rfbProcessFileTransferReadBuffer()) (bug #1662995)


author: Petr Pisar <ppisar@redhat.com> - 0.9.9-13
changelog:
  - Fix CVE-2018-15127 (Heap out-of-bounds write in
    rfbserver.c:rfbProcessFileTransferReadBuffer()) (bug #1662996)


author: Petr Pisar <ppisar@redhat.com> - 0.9.9-9.1
changelog:
  - Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157670)
  - Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
    (bug #1157670)
  - Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
    handling) (bug #1157670)
  - Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
    (bug #1157670)
  - Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
    handling) (bug #1157670)


author: Jindrich Novy <jnovy@redhat.com> 1.3.2-2
changelog:
  - ship documentation only in -doc subpackage and only license
    in -devel (#540634) - thanks to Edward Sheldrake
  - -devel-doc subpackage requires -devel


author: Ville Skyttä <ville.skytta@iki.fi> - 1:1.3.3-3
changelog:
  - Run test suite during build.
  - Fix doc file permissions and duplicate doc dir ownership.
  - rpmlint warning fixes.


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.3.0-1
changelog:
  - upstream release 0.3.0
  - enable gif2webp
  - add build requires on giflib-devel and libtiff-devel
  - use make_install and hardened macros
  - list binaries explicitly


author: Jaromir Capik <jcapik@redhat.com> - 0.3.0-5
changelog:
  - Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
  - Resolves: rhbz#1127230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.3.6-7
changelog:
  - Fix bogus date in the %changelog
  - Build with full relro
  - Fix requires/provides
    Resolves: #881316


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.3.6-14
changelog:
  - Backport option for disabling various SSL protocols
    Resolves: #1190689
  - Fix curl_easy_setopt call for CURLOPT_SSL_VERIFYPEER/HOST
    Resolves: #1319949


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.3-1.git4391e5c
changelog:
  - Update to openwsman-2.6.3 from upstream VCS
    Resolves: #1208364 #1296198
  - Backport support for configuring used cipher suite
    Resolves: #1454607


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.3-4.git4391e5c
changelog:
  - Explicitly disable build of java bindings
    Resolves: #1540723
  - Add support for ECDH key exchange algorithm
    Resolves: #1547144


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.3-6.git4391e5c
changelog:
  - Update the fix for CVE-2019-3816
    Resolves: #1668657
  - Remove Dist Tag from the oldest changelog entry


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.3-6.git4391e5c
changelog:
  - Update the fix for CVE-2019-3816
    Resolves: #1668658
  - Remove Dist Tag from the oldest changelog entry


author: Ondrej Vasik <ovasik@redhat.com> - 4.6.1-2
changelog:
  - Merge review changes: added few comments, do not use "-fpermissive"
    for COPTS, use parallel build (#226061)


author: Michal Sekletar <msekleta@redhat.com> - 4.6.1-9
changelog:
  - put static libraries into subpackage
  - disable strict aliasing optimizations to prevent warnings and possible crashes
  - fix changelog dates


author: Rex Dieter <rdieter@fedoraproject.org> - 1.11-4
changelog:
  - fix fpath (use autoreconf -f)
  - -devel: tighten deps via %{?_isa}, drop Requires: pkgconfig (add explicit BR: pkgconfig)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.7.1-2
changelog:
  - Fixes for
    CVE-2018-15864, CVE-2018-15863, CVE-2018-15862, CVE-2018-15861,
    CVE-2018-15859  CVE-2018-15857, CVE-2018-15856, CVE-2018-15855,
    CVE-2018-15854, CVE-2018-15853


author: Rui Matos <rmatos@redhat.com> - 5.4-7
changelog:
  - Explicitly disable vala bindings support
  Resolves: #1246040 - error: Installed (but unpackaged) file(s) found


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-6
changelog:
  - Fix missing entities after CVE-2014-3660 fix
  - CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
  - Fix regressions introduced by CVE-2014-0191 patch


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-6.2
changelog:
  - Fix a series of CVEs (rhbz#1286496)
  - CVE-2015-7941 Stop parsing on entities boundaries errors
  - CVE-2015-7941 Cleanup conditional section error handling
  - CVE-2015-8317 Fail parsing early on if encoding conversion failed
  - CVE-2015-7942 Another variation of overflow in Conditional sections
  - CVE-2015-7942 Fix an error in previous Conditional section patch
  - Fix parsing short unclosed comment uninitialized access
  - CVE-2015-7498 Avoid processing entities after encoding conversion failures
  - CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
  - CVE-2015-5312 Another entity expansion issue
  - CVE-2015-7499 Add xmlHaltParser() to stop the parser
  - CVE-2015-7499 Detect incoherency on GROW
  - CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
  - CVE-2015-8242 Buffer overead with HTML parser in push mode
  - CVE-2015-1819 Enforce the reader to run in constant memory


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.9.1-6.3
changelog:
  - Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
  - Bug 763071: Heap-buffer-overflow in xmlStrncat <https://bugzilla.gnome.org/show_bug.cgi?id=763071> (CVE-2016-1834)
  - Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup <https://bugzilla.gnome.org/show_bug.cgi?id=757711> (CVE-2016-1840)
  - Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal <https://bugzilla.gnome.org/show_bug.cgi?id=758588> (CVE-2016-1838)
  - Bug 758605: Heap-based buffer overread in xmlDictAddString <https://bugzilla.gnome.org/show_bug.cgi?id=758605> (CVE-2016-1839)
  - Bug 759398: Heap use-after-free in xmlDictComputeFastKey <https://bugzilla.gnome.org/show_bug.cgi?id=759398> (CVE-2016-1836)
  - Fix inappropriate fetch of entities content (CVE-2016-4449)
  - Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
  - Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
  - Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
  - Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
  - Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
  - Avoid building recursive entities (CVE-2016-3627)
  - Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
  - More format string warnings with possible format string vulnerability (CVE-2016-4448)


author: David King <dking@redhat.com> - 2.9.1-6.4
changelog:
  - Fix CVE-2015-8035 (#1595697)
  - Fix CVE-2018-14404 (#1602817)
  - Fix CVE-2017-15412 (#1729857)
  - Fix CVE-2016-5131 (#1714050)
  - Fix CVE-2017-18258 (#1579211)
  - Fix CVE-2018-1456 (#1622715)


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.9.1-6.0.1.4
changelog:
  - Update doc/redhat.gif in tarball
  - Add libxml2-oracle-enterprise.patch and update logos in tarball


author: David King <dking@redhat.com> - 2.9.1-6.5
changelog:
  - Fix CVE-2019-19956 (#1793000)
  - Fix CVE-2019-20388 (#1810057)
  - Fix CVE-2020-7595 (#1810073)
  - Fix xsd:any schema validation (#1812145)


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-1
changelog:
  - upstream release of 2.9.1
  - a couple more API entry point
  - compatibility with python3
  - a lot of bug fixes


author: EL Errata <el-errata_ww@oracle.com> - 2.9.1-6.0.3
changelog:
  - Rebuild to include attribution logo [Orabug: 33024216]
  - Update doc/redhat.gif in tarball
  - Add libxml2-oracle-enterprise.patch and update logos in tarball


author: Remi Collet <remi@fedoraproject.org> - 0.10-1
changelog:
  - update to 0.10
  - apply patch with changes from php bundled lib (thanks spot)
  - handle multiarch headers (ex from MySQL)


author: Rex Dieter <rdieter@fedoraproject.org> 0.10.1-4
changelog:
  - Warning about conflicting contexts for /usr/lib64/libzip/include/zipconf.h versus /usr/include/zipconf-64.h (#853954)


author: Livy Ge <livy.ge@oracle.com> - 20180220-62.git6d51311.0.1
changelog:
  - add ql2700_fw.bin ql8300_fw.bin ql2600_fw.bin [27732699]
  - add phanfw-4.0.*.bin [27732699]
  - retain iwlwifi-*, v4l-cx23418*, sd8688* [27732699]
  - remove DISCLAIMER and post section


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20201016-999.6.git58d41d0f.el7
changelog:
  - BUILDINFO: commit=35dfe8d14ecd8d2488be7528619672227a57cb08
  - Rebase to latest upstream linux-firmware


author: Miroslav Lichvar <mlichvar@redhat.com> 1.4-1.20140718gitbdb6a3
changelog:
  - update to 20140718gitbdb6a3 (#1108795, #1059039)
  - fix PIE linking (#1092537)
  - replace hardening build flags with _hardened_build
  - include simulation test suite


author: Miroslav Lichvar <mlichvar@redhat.com> 1.4-2.20140718gitbdb6a3
changelog:
  - add timemaster (#1085580)
  - send peer messages to correct address
  - make NTP SHM segment number configurable
  - update UDS handling to allow running multiple ptp4l/phc2sys instances
  - fix warnings from static analysis


author: Miroslav Lichvar <mlichvar@redhat.com> 1.4-3.20140718gitbdb6a3
changelog:
  - fix resetting of linreg servo (#1165045)
  - fix phc2sys automatic mode with multiple interfaces (#1108795)


author: Miroslav Lichvar <mlichvar@redhat.com> 1.8-5
changelog:
  - add support for active-backup bonding (#1002657)
  - add support for IP over InfiniBand (#1472880)
  - fix handling of unknown/invalid management TLVs in pmc (#1459446 #1459449)


author: Miroslav Lichvar <mlichvar@redhat.com> 1.8-6
changelog:
  - add support for bonding to timemaster (#1549015)
  - improve timemaster to restart terminated processes (#1527170)
  - start ptp4l, timemaster and phc2sys after network-online target (#1541991)
  - don't forward management requests to UDS port (#1520366)


author: Miroslav Lichvar <mlichvar@redhat.com> 2.0-1
changelog:
  - update to 2.0 (#1623919)
  - add support for more accurate synchronization to phc2sys (#1643977)
  - add support for active-backup team interface (#1650672)
  - limit unicast message rate per address and grant duration


author: Chris Leech <cleech@redhat.com> - 1.0.1-3.git036e314
changelog:
  - 1273663 sync with upstream v1.0.1-26-g036e314
    system capability incorrect advertised as station only


author: Jaromir Capik <jcapik@redhat.com> - 3.3.4-8
changelog:
  - Fixing use of uninitialized 'vendor_id' value on ppc (#996590)
  - Fixing bogus date in the changelog


author: Martin Sehnoutka <msehnout@redhat.com> - 3.4.0-0.20160601gitf9185e5.1
changelog:
  - New upstream release
  - Drop patches that are already present in upstream
  - Apply upstream fix for systemd paths
  - Resolves: #1297795


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-6.20160601gitf9185e5
changelog:
  - Fix License field capitalization
  - Resolves: rhbz#1577175
  - Add detection of AMD Ryzen w/ Vega graphics
  - Resolves: rhbz#1569542
  - Fix issues found by Coverity Scan
  - Resolves: rhbz#1578007


author: Bryan Mason <bmason@redhat.com> - 3.4.0-8.20160601gitf9185e5.el7_9.1
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.
  - Resolves: RHEL-17699


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.2.17-18
changelog:
  - Fix Unsafe deserialization flaw in Chainsaw log viewer
  - Fix SQL injection when application is configured to use JDBCAppender
  - Fix remote code execution when application is configured to use JMSSink
  - Resolves: CVE-2022-23307, CVE-2022-23305, CVE-2022-23302


author: Jan Kaluza <jkaluza@redhat.com> - 3.8.6-5
changelog:
  - mention copy/copytruncate/renamecopy influence to olddir option (#1175292)
  - delete last log when dateformat cannot be sorted alphabetically (#1174208)
  - mark cron.daily/logrotate as config file (#1174207)
  - create olddir diectory if it does not exist (#1187161)


author: Jan Kaluza <jkaluza@redhat.com> - 3.8.6-8
changelog:
  - fix #1201252 - delete unused entries in state file, fix bad performance
    with big state file
  - fix #1272236 - move logrotate.status to /var/lib/logrotate and add it to rwtab.d


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-10
changelog:
  - fix #1192936 - provide diagnostic in case log does not need rotating
  - fix #1321980 - do not exit if status file is corrupted


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-13
changelog:
  - fix #1393247 - migration of state file from previous versions of logrotate
  - fix #1374331 - preserve SELinux context with 'compress' and 'sharedscripts'
  - fix #1377335 - make 'createolddir' preserve sticky bit
  - fix #1369438 - heap buffer overflow when using long date format
  - fix #1375638 - make olddir respect the missingok flag


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-14
changelog:
  - fix #1381719 - make /var/lib/logrotate/logrotate.status the default state file
  - fix #1387533 - make 'su' directive accept usernames starting with digits


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-15
changelog:
  - fix #1483800 - update references to project page
  - fix #1472984 - improve the error message for bad config file mode
  - fix #1465720 - trigger weekly rotations more predictably
  - fix #1461907 - make 'copy' and 'copytruncate' work together


author: Kamil Dudka <kdudka@redhat.com> - 3.8.6-18
changelog:
  - fix #1680436 - do not treat errors in reading configuration as fatal
  - fix #1631218 - rename already existing file


author: Jan Synáček <jsynacek@redhat.com> - 7.4.0-29.20130522svn140
changelog:
  - Fix disrupted sentence in default logwatch.conf file (#1126848)
  - Fix smartd copyright message needs to be suppressed again (#1162741)
  - Fix Logwatch cron files not marked correctly as %config(noreplace) (#1221903)
  - Fix When filesystem name is long, the disk full check fails to work (#1293360)
  - Fix Should not change the case of $logdir (#1293624)
  - Fix logwatch --service sshd --detail 8 does not print Kerberos summary (#1295888)
  - Fix logwatch puppet-agent unknown entries (#1299181)
  - Fix logwatch fails with argument list too long (#1300170)


author: Jan Synáček <jsynacek@redhat.com> - 7.4.0-32.20130522svn140
changelog:
  - Refix logwatch fails with argument list too long (#1300170)
  - Fix Typos in sshd service script output (#1335493)


author: Jan Synáček <jsynacek@redhat.com> - 7.4.0-33.20130522svn140
changelog:
  - SSHD log format is going to change (#1422797)
  - logwatch encode=base64 generates invalid mime block (#1123093)


author: Brian C. Lane <bcl@redhat.com> 19.6.98-1
changelog:
  - Write a list of installed packages to /root/lorax-packages.log (bcl)
    Resolves: rhbz#1416155
  - Set the releasever and install gpg keys when using --repo (bcl)
    Related: rhbz#1430479


author: Brian C. Lane <bcl@redhat.com> 19.6.103-1
changelog:
  - Keep hid-multitouch and i2c-hid modules. (rhbz#1526323) (sbueno+anaconda)
    Resolves: rhbz#1526323


author: EL Errata <el-errata_ww@oracle.com> - 19.6.104-1.0.1
changelog:
  - Add to_check_if_uek_kernel.patch to make sure pick up uek kernel when to boot uek boot iso [bug 23180571]
  - Do not create early mircrocode initrd.img by default [bug 18920725] 
  - Adjust menu so text is not hidden [bug 19029563]
  - Add logic to enable UEK kernel in boot ISO (kevin.x.lyons@oracle.com)
  - Updated lorax package to adjust ISO splash screen text so it is
    aligned better (kevin.x.lyons@oracle.com)
  - Added oracle-logos.patch


author: Alan Steinberg <alan.steinberg@oracle.com> - 19.6.92-1.0.1
changelog:
  - Add to_check_if_uek_kernel.patch to make sure pick up uek kernel when to boot uek boot iso [bug 23180571]
  - Do not create early mircrocode initrd.img by default [bug 18920725] 
  - Adjust menu so text is not hidden [bug 19029563]
  - Add logic to enable UEK kernel in boot ISO (kevin.x.lyons@oracle.com)
  - Updated lorax package to adjust ISO splash screen text so it is
    aligned better (kevin.x.lyons@oracle.com)
  - Added oracle-logos.patch
  - Support shim-signed-0.9-2.0.6.el7 from OL7.3


author: Brian C. Lane <bcl@redhat.com> 19.6.105-1
changelog:
  - Retry losetup if loop_attach fails (bcl)
    Resolves: rhbz#1589084
  - Add reqpart to example kickstart files (bcl)
    Resolves: rhbz#1545289
  - Increase default ram used with lmc and virt to 2048 (bcl)
    Resolves: rhbz#1538747
  - Add --virt-uefi to boot the VM using OVMF (bcl)
    Resolves: rhbz#1546715
    Resolves: rhbz#1544805
  - Add --dracut-arg support to lorax (bcl)
    Resolves: rhbz#1452220
  - livemedia-creator: Search for kernel/initrd under /images/pxeboot (bcl)
    Resolves: rhbz#1522629


author: Brian C. Lane <bcl@redhat.com> 19.7.16-2
changelog:
  - Rebase of lorax-composer branch onto 19.6.105-1
  - See https://github.com/weldr/lorax/tree/lorax-composer for individual commits
    for 19.7.1-1 thru 19.7.16-1
    Resolves: rhbz#1547759


author: Brian C. Lane <bcl@redhat.com> 19.7.19-1
changelog:
  - Add documentation for --dracut-arg to lorax.1 (bcl)
    Related: rhbz#1452220
  - Add the dracut options to the lorax help output (bcl)
    Related: rhbz#1452220


author: Brian C. Lane <bcl@redhat.com> 19.7.20-1
changelog:
  - Add cancel_func to virt and novirt_install functions (bcl)
    Resolves: rhbz#1659129
  - lorax: Move default tmp dir to /var/tmp/lorax (bcl)
    Resolves: rhbz#1668520
  - New cli test covering basic compose commands (atodorov) (atodorov)
  - Execute bash tests for composer-cli (atodorov) (atodorov)
  - Add pylint testing (bcl) (bcl)


author: Brian C. Lane <bcl@redhat.com> 19.7.21-1
changelog:
  - Do not include /usr/bin/delv (bcl)
    Resolves: rhbz#1688767
  - Remove SELinux Permissive checks (bcl)
    Resolves: rhbz#1654795
  - Remove lorax-composer tests (bcl)
    Resolves: rhbz#1679798


author: Brian C. Lane <bcl@redhat.com> 19.7.22-1
changelog:
  - Improve logging for template syntax errors (bcl)
    Related: rhbz#1689314
  - Add extra boot args to the livemedia-creator iso templates (bcl)
    Resolves: rhbz#1689314
  - Use hd:LABEL= for inst.stage2 on ppc (bcl)
    Resolves: rhbz#1402328
  - Don't remove chmem and lsmem from install.img (bcl)
    Resolves: rhbz#1511358


author: Brian C. Lane <bcl@redhat.com> 19.7.25-1
changelog:
  - lorax: Add --rootfs-size (bcl)
    Resolves: rhbz#1715116
  - lorax: pass size from Lorax.run to create_runtime (bcl)
    Related: rhbz#1715116
  - Fix path to generic.prm (jstodola)
    Resolves: rhbz#1712491


author: EL Errata <el-errata_ww@oracle.com> - 19.7.25-1.0.1
changelog:
  - Add to_check_if_uek_kernel.patch to make sure pick up uek kernel when to boot uek boot iso [Orabug: 23180571]
  - Do not create early mircrocode initrd.img by default [Orabug: 18920725] 
  - Adjust menu so text is not hidden [Orabug: 19029563]
  - Add logic to enable UEK kernel in boot ISO (kevin.x.lyons@oracle.com)
  - Updated lorax package to adjust ISO splash screen text so it is
    aligned better (kevin.x.lyons@oracle.com)
  - Added oracle-logos.patch


author: Brian C. Lane <bcl@redhat.com> 19.7.27-1
changelog:
  - Change --make-pxe-live --no-virt to use a fsimage (bcl)
    Resolves: rhbz#1802591
  - Makefile: Add the ability to use podman instead of docker (bcl)
    Related: rhbz#1472622
  - tests: Add tests for _install_branding with and without variant (bcl)
    Related: rhbz#1472622
  - lorax: Move get_yum_base_object into pylorax.yumbase (bcl)
    Related: rhbz#1472622
  - lorax: Update how the release package is chosen (bcl)
    Resolves: rhbz#1472622


author: Petr Oros <poros@redhat.com> - B.02.18-8
changelog:
  - Proper detect vendor_id/device_id for virtual functions
  - Sync SMBIOS with latest specification
  - Resolves: #1445473


author: Lianbo Jiang <lijiang@redhat.com> - B.02.18-14
changelog:
  - Add a class 'nvme' for NVMe devices
  - Fix lshw crashes with SEGV in privileged containers
  - Display proper logical name of network device


author: Lianbo Jiang <lijiang@redhat.com> - B.02.18-15
changelog:
  - Update help message and man page
  - Do not show modified time with -notime option
  - specfile: Fix version issue


author: Petr Oros <poros@redhat.com> - B.02.18-1
changelog:
  - Rebase to lshw-B.02.18
  - Sync with upstream git
  - Apply patches from beaker-fork
  - Resolves: #1368704


author: Petr Machata <pmachata@redhat.com> - 0.7.91-6
changelog:
  - Fix a problem when attempting to trace a command that hasn't been
    found (ltrace-0.7.91-cant_open.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-12
changelog:
  - Add upstream fix for a bug in labeling PLT slots
    (ltrace-0.7.91-x86-plt_map.patch,
    ltrace-0.7.91-x86-unused_label.patch)
  - Add upstream fixes for tracing multi-threaded processes without -f
    (ltrace-0.7.91-multithread-no-f-1.patch,
    ltrace-0.7.91-multithread-no-f-2.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-13
changelog:
  - Fix system_call_params.exp and system_calls.exp for aarch64.
    (#1225550)
  - xfail part of trace-irelative.exp for aarch64, fix trace-clone
    for aarch64 (#1225568)


author: Tim Niemueller <tim@niemueller.de> - 5.1.4-7
changelog:
  - Add patch to from lua.org with smaller bugfixes
  - sed -i -e 's/5\.1\.3/5.1.4/g' on autotoolize patch, bug #641144


author: Thomas Tanaka <thomas.tanaka@oracle.com> - 1.1.5-2.0.2
changelog:
  - [Orabug 22451776] lxc-create doesn't work properly on OL 7.2
  - lxc-create code cleanup
  - [Orabug 22379008] Link /etc/mtab to /proc/self/mounts for OL5&6


author: Thomas Tanaka <thomas.tanaka@oracle.com> - 1.1.5-2.0.3
changelog:
  - setproctile fix
  - [Orabug 22534959] btrfs bus error issue on sparc
  - [Orabug 22653555] lxc.network.hwaddr field is getting populated twice
    in config file
  - start lxc-net in OL6, include CRIU dependency


author: Thomas Tanaka <thomas.tanaka@oracle.com> - 1.1.5-2.0.5
changelog:
  - [Orabug 23096664] lxc-create completion message prints wrong bridge
  - Removed CRIU dependency for LXC-1.1.5


author: Thomas Tanaka <thomas.tanaka@oracle.com> - 1.1.5-2.0.6
changelog:
  - [Orabug 23203992] lxc-create assumes a bridge name and may get it wrong
  - [Orabug 23555384] LXC: Unable to login to newly created OL7.2 container
  - [Orabug 23557613] lxc: oracle user uid/gid do not match between ol6/ol7


author: Dwight Engen <dwight.engen@oracle.com> - 1.1.0-2.0.1
changelog:
  - update to upstream 1.1.0
  - incorporate patches for correct setting of selinux labels on
    devices nodes created by autodev


author: Thomas Tanaka <thomas.tanaka@oracle.com> - 1.1.4-2.0.1
changelog:
  - update to upstream 1.1.4
  - incorporate patches from 1.1.0-2.0.1
  - incorporate various patches from 1.0.7-2.0.4 for various Oracle
    products certification on LXC


author: pjp <pjp@fedoraproject.org> - r128-1
changelog:
  - lz4cli sparse file support
  - Restored lz4hc compression ratio
  - lz4 cli supports long commands
  - Introduced lz4-static sub package BZ#1208203


author: pjp <pjp@fedoraproject.org> - r129-1
changelog:
  - New LZ4_compress_fast() API.
  - New LZ4 CLI improved performance with multiple files.
  - Other bug fix and documentation updates.


author: pjp <pjp@fedoraproject.org> - r130-1
changelog:
  - Fixed: incompatibility sparse mode vs console.
  - Fixed: LZ4IO exits too early when frame crc not present.
  - Fixed: incompatibility sparse mode vs append mode.
  - Performance fix: big compression speed boost for clang(+30%).


author: pjp <pjp@fedoraproject.org> - r131-1
changelog:
  - New: Dos/DJGPP target #114.
  - Added: Example using lz4frame library #118.
  - Changed: liblz4.a no longer compiled with -fPIC by default.


author: Simon Xu <xu.simon@oracle.com> - 1.7.5-1 - 2.0.1
changelog:
  - Do not copy owner, file permissions and modification time to /dev/null (Simon Xu)  [Orabug: 28154655]


author: Jakub Martisko <jamartis@rehat.com> - 1.8.3-1
changelog:
  - Rebase to 1.8.3
  - Drop the patch from 1.7.5-3. It is now part of the upstream archive
  - Resolves: #1813245


author: Parag Nemade <pnemade AT redhat DOT com> - 1.1.13-5
changelog:
  - Resolves:rh#803571-[Punjabi-Jhelum] Addition to keyboard layout
  - Resolves:rh#815385-[kn_IN] Add Kannada typewriter keyboard layout
  - Resolves:rh#803652-Inscript2 for Bengali contains a wrong key mapping
  - Resolves:rh#804898-[bn_IN] Add missing 'z' key mapping in inscript2 keymap
  - Resolves:rh#803207-(as_IN)Instead of Assamese ra (u09f0) Bengali ra (u09b0) is mapped
  - Resolves:rh#803236-(as_IN)Letter 'ma' (ম) and 'wa' (ৱ) not mapped for Assamese


author: Parag Nemade <pnemade AT redhat DOT com> - 1.6.2-3
changelog:
  - Resolves:rh#650802-[si] stick characters with cursor, while input with si-wijesekera.mim
  - Resolves:rh#651289-zh-cangjie.mim: excessive space after committing Chinese word
  - Drop obsoletes/provides added in f14


author: Miloslav Trmač <mitr@redhat.com> - 0.21.1-10
changelog:
  - Replace expired certificates in the test suite
  - Fix running the test suite against recent OpenSSL versions


author: Miloslav Trmač <mitr@redhat.com> - 0.21.1-12
changelog:
  - Fix occasional spurious failures in test_makefile_timeout_fires
    Resolves: #969077
  - Fix incorrect exception handling of SSL_CTX_new (manifesting in FIPS mode)
    Resolves: #879043
  - Add minimal SNI support, based on a patch by Sander Steffann
    <sander@steffann.nl>
    Resolves: #1038795
  - Use only ECC curves available in Fedora in the test suite
    Related: #1038813
  - Fix terminating test suite helper processes when running in Koji
    Related: #1038813
  - Run test suite in %check, don't ship it in the package.  Based on a patch by
    Matěj Cepl <mcepl@redhat.com>.
    Resolves: #1038813


author: Miloslav Trmač <mitr@redhat.com> - 0.21.1-14
changelog:
  - Don't assume that export ciphers are enabled in the test suite
    Resolves: #1048887
  - Let the kernel allocate free ports for use by the test suite
    Resolves: #1048887


author: Miloslav Trmač <mitr@redhat.com> - 0.21.1-17
changelog:
  - Fix spurious failures of test_cookie_str_changed_mac
    Resolves: #1073950
  - Add support for IP addresses in subjectAltName
    Resolves: #1080142


author: Jan Kaluza <jkaluza@redhat.com> - 3:2.1.15-18
changelog:
  - fix #1107652 - add support for DMARC
  - fix #1180981 - install tmpfiles.d into /usr/lib instead of /etc
  - fix #1188043 - set 2775 permission for /etc/mailman


author: Pavel Šimerda <psimerda@redhat.com> - 3:2.1.15-23
changelog:
  - Resolves: #1232749 - fix bad subject of the welcome email when creating list
    using newlist command


author: Peter Schiffer <pschiffe@redhat.com> - 12.5-7
changelog:
  - cleaned .spec file
  - resolves: #805410
    fixed SIGSEGV crash in which_protocol() function
  - updated get-upstream-tarball.sh script and added it as additional source


author: Peter Schiffer <pschiffe@redhat.com> - 12.5-9
changelog:
  - related: #912785
    used -D_FILE_OFFSET_BITS=64 flag at the compile time
  - return error code when TMPDIR is set to an invalid path while sending email
  - added missing -v option to the usage message


author: Nikola Forró <nforro@redhat.com> - 12.5-13
changelog:
  - fix SIGSEGV crash in smtp_auth_var()
  - add warning message for empty from variable
    resolves: #1113611


author: Petr Machata <pmachata@redhat.com> - 1:3.82-18
changelog:
  - Backport upstream patch that adds wildcard expansion to pattern
    rules. (make-3.82-stem_glob.patch)


author: Petr Machata <pmachata@redhat.com> - 1:3.82-19
changelog:
  - make now restores rlimit to its original values before launching
    subprocess via $(shell) (make-3.82-func_shell-rlimit.patch)
  - Determinize one test (make-3.82-tests-SECONDARY.patch)


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-22
changelog:
  - Check if the target-specific variable is the same as the global
    variable, and if it is, don't free it.  Savannah bug #31743.
    Resolves: #1323206


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-23
changelog:
  - In very obscure situations we may incorrectly write the free token
    back to the pipe.
    Resolves: #1322670


author: DJ Delorie <dj@redhat.com> - 1:3.82-24
changelog:
  - Change fatal() to error() when a mix of explicit and implicit
    targets (in that order) is detected.
    Resolves: #1582545


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.3-6
changelog:
  - resolves: #948695
    fixed double free
  - fixed certain man pages to match options with --help and --usage


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.3-1
changelog:
  - resolves: #858577
    updated to 2.6.3
  - cleaned .spec file
  - resolves: #855632
    fixed SIGABRT crash
  - adds support for man-pages-overrides


author: Peter Schiffer <pschiffe@redhat.com> - 3.52-1
changelog:
  - resolves: #981385
    updated to 3.52
  - fixed broken sentence on the futex(7) man page
  - resolves: #885740
    documented O_PATH flag on the open(2) man page


author: Peter Schiffer <pschiffe@redhat.com> - 3.53-5
changelog:
  - resolves: #1058101
    added note about default values to the nscd.conf(5) man page
  - resolves: #1059829
    added three pthread_mutex* man pages from POSIX.1-2008
  - resolves: #1062906
    removed boot(7) man page


author: Jens Petersen <petersen@redhat.com> - 1.55-20
changelog:
  - revert license tags and add only GPL+ and GPLv2+ and LDP
    (a more detailed license audit of the manpages is really needed)


author: Jens Petersen <petersen@redhat.com> - 3.44-1
changelog:
  - update to man-pages-fr-3.44-1 and newer mansupfr tarball
  - update main project url to Alioth perkamon


author: Mike FABIAN <mfabian@redhat.com> - 3.45-1
changelog:
  - Resolves: #905826 - Due to problems in the man-pages-fr.spec file
    and the Makefile in man-pages-extras-fr-0.8.1.tar.bz2,
    many French man-pages are not included in man-pages-fr
  - fix Makefile, “make install” in the subdirectory “afaire” was
    not executed because the target had the same name as the directory
    and was not marked .PHONY
  - install the man-pages from mansupfr.tar.bz2 unless an identical
    man-page is already installed by man-pages-fr-3.45-1.tar.bz2 or
    man-pages-extras-fr-0.8.1.tar.bz2
    (installing the above extra man-pages fixes #903048 because
    man-pages for “less”, “more”, “bash”, and “echo” are now available.
    A man-page for “man” is still not available, this should be added
    to the “man-db” package instead).
  - edit also xinetd.8 man page with sed to make it clear that it is
    not up-to-date (for #891277 and #891278).
  - fix sed pattern to add the notice that a man-page is not up-to-date
  - suggest to use “LANG=en_US.UTF-8 man $name” instead of
    ”LANG=en man $name” to view English man-pages (“en” is an invalid locale)
  - Resolves: #880076 (add license tags inherited from packages whose
    translated man-pages are included here)


author: Mike FABIAN <mfabian@redhat.com> - 3.45-2
changelog:
  - Resolves: #913536 - awesome : Conflicts with man-pages-fr
  - remove French awesome man-pages because they are already included
    in the awesome package.


author: Mike FABIAN <mfabian@redhat.com> - 3.45-3
changelog:
  - Fix wrong weekday names in .spec file discovered by rpmdiff/Brewtap
  - Overwrite mgetty.8 with fedora/rhel specific mgettyfedora.8 man-page


author: Mike FABIAN <mfabian@redhat.com> - 3.15-1
changelog:
  - Resolves: #906215 - man-pages-it package contains many man-pages
    which are not translated to Italian but are in English
  - update to 3.15. The update contains:
  - all the man pages from the sections man0p, man1p, and man3p are gone.
    But that is no problem, these were the untranslated English versions anyway!
  - new manpages: abc2abc.1 abc2ly.1 abcqps.1 dselect.1 utmpx.5
  - removed manpages: dselect.8


author: Daiki Ueno <dueno@redhat.com> - 2:20050219-22
changelog:
  - Drop buildroot preparation from %intall and %clean
  - Drop BuildRoot
  - Drop %defattr from %doc
  - Add comment to explain what the patch0 is for


author: jchaloup <jchaloup@redhat.com> - 7.2.4-1
changelog:
  - New patch for fpurge with MT introduced since the first evaluation
  - Remove mkfifoat.3 man page
  - Upload new tarball
    related: #1197850


author: Nikola Forró <nforro@redhat.com> - 7.3.0-1
changelog:
  - Upload new tarball
    resolves: #1343004
  - remove bug fixed in original component: #1147538 (xinetd)
  - remove bug fixed in original component: #1147550 (vsftpd)
  - remove bug fixed in original component: #1147551 (vsftpd)
  - remove bug fixed in original component: #1147552 (pam_krb5)
  - remove bug fixed in original component: #1147572 (wget)
  - remove bug fixed in original component: #1155006 (mc)
  - remove bug fixed in original component: #1218284 (stunnel)
  - remove bug fixed in original component: #1147564 (edac-utils)
  - __fpurge.3: add missing man page
    resolves: #1267657
  - cciss.4: replace man page content with notice about driver removal
    resolves: #1112307
  - libpaf-dsc.3, libpaf-ebb.3: fix formatting and examples
    resolves: #1181670
  - captest.8: describe --init-grp option
    resolves: #1255283
  - png.5: fix invalid RFC URL
    resolves: #1263575
  - socket.7: document SO_REUSEPORT option
    resolves: #1269549
  - userhelper.8: fix up exit status description and consistency
    resolves: #1274949
  - recv.2: change description of flags argument to apply also to recvfrom and recvmsg
    resolves: #1278492
  - nsswitch.conf.5: add list of files being read when "files" service is used
    resolves: #1289915
  - prctl.2: add description of Intel MPX calls
    resolves: #1297898
  - iconv.1, locale.1, localedef.1, repertoiremap.5, iconvconfig.8: add new man pages
  - charmap.5, locale.5, charsets.7, locale.7: sync with upstream
    resolves: #1301661
  - tcp.7: document TCP_USER_TIMEOUT
    resolves: #1312875
  - recv.2, cmsg.3: fix type of cmsg_len member of cmsghdr structure
    resolves: #1315605
  - clone.2, fork.2: document ERESTARTNOINTR error code
    resolves: #1330661
  - open.2: document O_TMPFILE option
    resolves: #1330740
  - setfacl.1: document the meaning of '-' in perms
    resolves: #1337039
  - cp.1, install.1, mkdir.1, mkfifo.1, mknod.1: update security context options
    to reflect coreutils change
    resolves: #1263629
  - cp.1, install.1, mkdir.1, mkfifo.1, mknod.1: update security context options
    to reflect coreutils change
    resolves: #1263632
  - cp.1, install.1, mkdir.1, mkfifo.1, mknod.1: update security context options
    to reflect coreutils change
    resolves: #1263635
  - cp.1, install.1, mkdir.1, mkfifo.1, mknod.1: update security context options
    to reflect coreutils change
    resolves: #1263637


author: Nikola Forró <nforro@redhat.com> - 7.3.1-1
changelog:
  - Upload new tarball
    related: #1343004
  - remove bug fixed in original component: #1240948 (psacct)
  - recv.2: add deprecation note about recv() syscall on aarch64
    resolves: #1361588
  - libpng.3: fix invalid RFC URL
    related: #1263575
  - recv.2: change description of flags argument also on aarch64
    related: #1278492
  - localedef.1: add missing --old-style option
    related: #1301661
  - recv.2: fix type of cmsg_len member of cmsghdr structure also on aarch64
    related: #1315605
  - clone.2: document ERESTARTNOINTR error code also on aarch64
    related: #1330661
  - open.2: document O_TMPFILE option also on aarch64
    related: #1330740


author: Nikola Forró <nforro@redhat.com> - 7.3.2-1
changelog:
  - Upload new tarball
    related: #1343004
  - prctl.2, capabilities.7: document ambient capabilities
    resolves: #1360898


author: Nikola Forró <nforro@redhat.com> - 7.4.0-1
changelog:
  - Upload new tarball
    resolves: #1435590
  - remove bug fixed in original component: #1147568 (mailx)
  - remove bug fixed in original component: #1147570 (mailx)
  - remove bug fixed in original component: #1147565 (ecj)
  - remove bug fixed in original component: #1349833 (paflib)
  - ipvsadm.8: add missing option
    resolves: #1085531
  - cp.1, install.1, mkdir.1, mkfifo.1, mknod.1: update security context options
    to reflect coreutils change
    resolves: #1263636
  - mcstransd.8: fix typos
    resolves: #1316009
  - memparse.1: remove incorrect description
    resolves: #1411979
  - nsswitch.conf.5: add information about sss service
    resolves: #1390935
  - packet.7: add missing socket options
    resolves: #1404478
  - namespaces.7, pid_namespaces.7, user_namespaces.7: add new manpages
    resolves: #1377583


author: Nikola Forró <nforro@redhat.com> - 7.4.1-1
changelog:
  - Upload new tarball
    related: #1435590
  - remove bug fixed in original component: #1167833 (net-tools)


author: Nikola Forró <nforro@redhat.com> - 7.4.2-1
changelog:
  - Upload new tarball
    related: #1435590
  - stat.2: update to cover latest things used in RHEL7
    resolves: #1452424
  - clone.2: document features related to namespaces
    resolves: #1452368


author: Nikola Forró <nforro@redhat.com> - 7.5.0-1
changelog:
  - Upload new tarball
    resolves: #1505892
  - remove bug fixed in original component: #1349841 (acl)
  - cups-browsed.8: fix paths to AUTHORS and README
    resolves: #1430271
  - vsftpd.conf.5: mention conflict between chroot_local_user
    and text_userdb_names options
    resolves: #1439724
  - imtest.1, lmtptest.1, mupdatetest.1, nntptest.1, pop3test.1, sivtest.1,
    smtptest.1: document -w option
    resolves: #1488506
  - vsftpd.conf.5: document allow_writeable_chroot option
    resolves: #1507143


author: Nikola Forró <nforro@redhat.com> - 7.5.0-2
changelog:
  - vsftpd.conf.5: extend description of ascii_download_enable
    and ascii_upload_enable
    resolves: #1517216


author: Nikola Forró <nforro@redhat.com> - 7.5.2-1
changelog:
  - Upload new tarball
  - remove obsolete patch
    related: #1505892
  - recvmmsg.2, sendmmsg.2: point out that error handling is unreliable
    resolves: #1422950


author: Nikola Forró <nforro@redhat.com> - 7.6.0-1
changelog:
  - Upload new tarball
    resolves: #1592800
  - remove bug fixed in original component: #1508021 (vsftpd)
  - remove bug fixed in original component: #1508022 (vsftpd)
  - remove bug fixed in original component: #1517227 (vsftpd)
  - madvise.2: document MADV_WIPEONFORK and MADV_KEEPONFORK
    resolves: #1560191
  - mlock.2, mlock2.2: document mlock2(2) and MCL_ONFAULT
    resolves: #1573281
  - host.conf.5: remove description of never-implemented spoof options
    resolves: #1577265
  - membarrier.2: add new man page
    resolves: #1566315
  - mount.cifs.8: describe seal option
    resolves: #1495572
  - ip-route.8: fix synopsis of ssthresh parameter
    resolves: #1538499
  - tc-vlan.8: fix incorrect example
    resolves: #1543420


author: Nikola Forró <nforro@redhat.com> - 7.6.2-1
changelog:
  - Upload new tarball
    related: #1592800
  - remove bug fixed in original component: #1147562 (socat)
  - perf_event_open.2: sync with upstream
    resolves: #1619272
  - resolv.conf.5: document no-reload (RES_NORELOAD) option
    resolves: #1598288
  - proc.5: document missing fields in /proc/[pid]/smaps and /proc/[pid]/status
    resolves: #1607318


author: Nikola Forró <nforro@redhat.com> - 7.7.0-1
changelog:
  - Upload new tarball
  - name_to_handle_at.2, open_by_handle_at.2: add new manpages
    resolves: #1635584
  - execve.2: document EAGAIN error
    resolves: #1642394


author: Nikola Forró <nforro@redhat.com> - 7.7.1-1
changelog:
  - Upload new tarball
    resolves: #1669129
  - remove bug fixed in original component: #1508363 (cyrus-imapd)


author: Nikola Forró <nforro@redhat.com> - 7.7.2-1
changelog:
  - Upload new tarball
    related: #1669129
  - remove bug fixed in original component: #1538499 (iproute)
  - remove bug fixed in original component: #1543420 (iproute)


author: Nikola Forró <nforro@redhat.com> - 7.7.3-1
changelog:
  - Upload new tarball
    related: #1669129
  - remove bug fixed in original component: #1274949 (usermode)


author: Nikola Forró <nforro@redhat.com> - 7.8.0-1
changelog:
  - Upload new tarball
    resolves: #1739400
  - remove bug fixed in original component: #1508018 (cups-filters)
  - core.5: RLIMIT_CORE is not enforced when piping core dump to a program
    resolves: #1705157
  - mmap.2: fix EINVAL conditions
    resolves: #1595662
  - resolv.conf.5: update information about search list
    resolves: #1730803
  - adcli.8: extend description of adcli update --add-samba-data
    resolves: #1665794
  - iperf3.1: remove unsupported options
    resolves: #1589421
  - paperconf.1, papersize.5: fix grammar mistakes
    resolves: #1733904


author: Ivana Hutarova Varekova <varekova@redhat.com> - 0.24-12
changelog:
  - Resolves: #701467
    update sigaction.2 manual page
    the patch was created by Mira Bielecka, thanks


author: Peter Schiffer <pschiffe@redhat.com> - 1:0.2-1
changelog:
  - resolves: #823199
    updated tarball from the new upstream project
  - resolves: #842284
    file conflict fixed with update to the new tarball


author: Alexey Kurov <nucleo@fedoraproject.org> - 0.98-1
changelog:
  - updated Source to 0.98 (0.97-0.98 patch)
  - updated Source1 to 3.25-2064-1352-20100717
  - moved encoding converting to prep section


author: Michal Schorm <mschorm@redhat.com> - 5.5.52-2
changelog:
  - Extension of mariadb-prepare-db-dir script
  - Resolves: #1356897

  - Rebase to 5.5.52, that also include fix for CVE-2016-6662
    Resolves: #1377974


author: Honza Horak <hhorak@redhat.com> - 1:5.5.56-1
changelog:
  - Rebase to 5.5.56
    That release also fixes the following security issues:
    CVE-2016-5617/CVE-2016-6664 CVE-2017-3312 CVE-2017-3238 CVE-2017-3243
    CVE-2017-3244 CVE-2017-3258 CVE-2017-3313 CVE-2017-3317 CVE-2017-3318
    CVE-2017-3291 CVE-2017-3302 CVE-2016-5483/CVE-2017-3600 CVE-2017-3308
    CVE-2017-3309 CVE-2017-3453 CVE-2017-3456 CVE-2017-3464
    Resolves: #1458933
    New deps required by upstream: checkpolicy and policycoreutils-python
    License text removed by upstream: COPYING.LESSER
    Do not ignore test-suite failure
    Downstream script mariadb-prepare-db-dir fixed for CVE-2017-3265
    Resolves: #1458940


author: Honza Horak <hhorak@redhat.com> - 1:5.5.56-2
changelog:
  - Do not fix context and change owner if run by root in mariadb-prepare-db-dir
    Related: #1458940
  - Check properly that datadir includes only expected files
    Related: #1356897


author: Michal Schorm <mschorm@redhat.com> - 1:5.5.60-1
changelog:
  - Rebase to 5.5.60
  - CVE's fixed: #1558256, #1558260, #1559060
    CVE-2017-3636 CVE-2017-3641 CVE-2017-3653 CVE-2017-10379
    CVE-2017-10384 CVE-2017-10378 CVE-2017-10268 CVE-2018-2562
    CVE-2018-2622 CVE-2018-2640 CVE-2018-2665 CVE-2018-2668
    CVE-2018-2755 CVE-2018-2819 CVE-2018-2817 CVE-2018-2761
    CVE-2018-2781 CVE-2018-2771 CVE-2018-2813
  - Resolves: #1535217, #1491833, #1511982, #1145455, #1461692


author: Michal Schorm <mschorm@redhat.com> - 1:5.5.64-1
changelog:
  - Rebase to 5.5.64
  - Resolves: #1490398
  - CVE's fixed: #1610986
    CVE-2018-3058 CVE-2018-3063 CVE-2018-3066 CVE-2018-3081
  - CVE's fixed: #1664043
    CVE-2018-3282 CVE-2019-2503
  - CVE's fixed: #1701686
    CVE-2019-2529


author: Honza Horak <hhorak@redhat.com> - 1:5.5.65-1
changelog:
  - Rebase to 5.5.65
    Also fixes:
    CVE-2019-2737 CVE-2019-2739 CVE-2019-2740 CVE-2019-2805
    Resolves: #1741357
  - Revert upstream changes that make the mysql_install_db relocatable
    because it broke mysql_install_db when run without --rpm arg
    Resolves: #1731062
  - Add openssl BR that was missing for the tests


author: Michal Schorm <mschorm@redhat.com> - 1:5.5.66-1
changelog:
  - Rebase to 5.5.66
  - Related to: rhbz#1834835
  - CVE's fixed: rhbz#1769276 rhbz#1830110
    CVE-2019-2974 CVE-2020-2780


author: Michal Schorm <mschorm@redhat.com> - 1:5.5.68-1
changelog:
  - Rebase to 5.5.68
    This is the last upstream release. This major version reached upstream EOL
  - Related to: rhbz#1834835


author: Daiki Ueno <dueno@redhat.com> - 0.2.1-2
changelog:
  - remove unnesseary BR
  - don't embed rpath in executables
  - add docs
  - drop buildroot cleanup
  - preserve timestamp when make install


author: Daiki Ueno <dueno@redhat.com> - 0.2.2-1
changelog:
  - new upstream release
  - for Fedora 19 or later, use 'ruby(release)' instead of 'ruby(abi)',
    and also update the required Ruby ABI/release version to 2.0.0


author: Daiki Ueno <dueno@redhat.com> - 0.2.4-1.1
changelog:
  - use 'ruby(release)' on RHEL 7 as well as Fedora 19 (Closes: #1002870)
  - disable workaround for ruby bindings needed for earlier Fedora 19


author: Jindrich Novy <jnovy@redhat.com> 4.8.7-3
changelog:
  - attempt to fix segfault while passing messages to widgets (#907045, #912033)
  - fix possible segfault when freeing a VFS (#923415)


author: Dan Walsh <dwalsh@redhat.com> - 0.3.3-7
changelog:
  - Add secolor.conf.5 man page
  - Make mcstransd watch for content being written to /run/setrans for files names containing translations.
  -- This will allow apps like libvirt to write content nameing randomly selected MCS labels
  - Fix memory leak in mcstransd


author: Xiao Ni <xni@redhat.com> - 4.0-4
changelog:
  - Imsm should not allow combing 512 and 4096 sector size disks in
    one volume and Wrong array size shown for array built on 4096
    sector size disks
  - Resolves rhbz#1454390 and rhbz#1454379


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.4-12
changelog:
  - Apply additional required patch to fix buffer overrun using long device
    names
  - Resolves rhbz#1369891


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.4-13
changelog:
  - Make udev-md-array-arrays.rules more resilient to races if arrays are
    assembled and stopped and reassembled quick after each other.
  - Resolves rhbz#1331709


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.4-14
changelog:
  - The fix for 1331709 caused a problem with container arrays (IMSM) as
    these can show up with a valid size of 0. Work around this to only
    exit for non container arrays.
  - Resolves rhbz#1379194


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.4-15
changelog:
  - Resolve case where a reshape could hang if started right after the
    completion of a resync.
  - Resolves rhbz#1386700


author: Xiao Ni <xni@redhat.com> - 4.0-4
changelog:
  - Imsm should not allow combing 512 and 4096 sector size disks in 
    one volume and Wrong array size shown for array built on 4096 
    sector size disks
  - Resolves rhbz#1454390 and rhbz#1454379


author: Sudhakar Panneerselvam<sudhakar.panneerselvam@oracle.com> - 4.1-7.0.1
changelog:
  - imsm: limit support to first NVMe namespace [Orabug: 32564199]
  - imsm: nvme multipath support [Orabug: 32564199]
  - Grow: Block reshape when exernal metadata and write intent bitmap [Orabug: 32564199]
  - Create: Block automatic enabling bitmap for external metadata [Orabug: 32564199]
  - imsm: Update subarray for write intent bitmap [Orabug: 32564199]
  - Add "bitmap" to allowed command line values [Orabug: 32564199]
  - imsm: Adding a spare to an existing array with bitmap [Orabug: 32564199]
  - imsm: write intent bitmap support [Orabug: 32564199]
  - Enable bitmap support for external metadata [Orabug: 32564199]
  - Modify mdstat parsing for volumes with the bitmap [Orabug: 32564199]


author: Simone Caronni <negativo17@gmail.com> - 1.1.0-9
changelog:
  - Added patches for file transfer and status time workaround:
    http://www.lilotux.net/~mikael/pub/meanwhile/
  - Spec file formatting.


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.15-10
changelog:
  - fix binding to IPv6 address (#1298603)
  - enable SASL support (#1263696)
  - don't allow authentication with bad SASL credentials (CVE-2013-7239)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.15-10.el7_3.1
changelog:
  - fix vulnerabilities allowing remote code execution (CVE-2016-8704,
    CVE-2016-8705, CVE-2016-8706)


author: Jeff Law <law@redhat.com> 0.1.4-2
changelog:
  - Remove commands/directives automatically handled by rpm
  - Add comment on how to build the tarball
  - Change Requires to reference package rather than file
  - Add comments on licensing issues
  - Add autoconf and automake to BuildRequires


author: Jeff Law <law@redhat.com> 0.1.4-3
changelog:
  - Change %define to %global for git hash
  - Remove git hash from version # in changelog
  - Build with -fno-strict-aliasing
  - Fix minor spelling error in description


author: Michal Sekletar <msekleta@redhat.com> - 1.1.36-20
changelog:
  - resolves: #754235 #947919
  - improvement to systemd configuration for vgetty
  - added systemd unit for mgetty
  - implemented device locking using lockdev library


author: Michal Sekletar <msekleta@redhat.com> - 1.1.36-22
changelog:
  - disable strict-aliasing optimizations
  - fix dates in changelog
  - fix device locking in other tools than mgetty (#982711)


author: Michal Sekletar <msekleta@redhat.com> - 1.1.36-24
changelog:
  - enable hardeninig on every architecture
  - add uucp group and user to mgetty package since we no longer ship uucp in RHEL7


author: Michal Sekletar <msekleta@redhat.com> - 1.1.36-27
changelog:
  - Fix [Install] section of unit file. Enable mgetty and vgetty under getty.target (#1127898)
  - Declare conflict with hylafax+ only for mgetty-sendfax subpackage (#1129054)


author: <jsafrane@redhat.com> - 47-14
changelog:
  - Fixed importing /etc/hosts and /etc/services, duplicate entries
    are now skipped. (#916623)
  - Added missing patches.


author: Michal Hlavinka <mhlavink@redhat.com> - 40i-0.20120630
changelog:
  - Upgrade to pre-release of 40i
  - includes new legacy shell lksh for old scripts requiring pdksh or similar old
    ksh-88 shell, see man lksh for differences


author: Thorsten Glaser <tg@mirbsd.org> 45-1
changelog:
  - Upgrade mksh to R45 and the other files to the accompanying versions
  - Drop workaround for GCC PR55009 (no longer needed)
  - Use https for homepage


author: Miloslav Trmač <mitr@redhat.com> - 0.24-1
changelog:
  - Update to mlocate-0.24
    Resolves: #675189
  - Explicitly exclude fuse.sshfs.  Ideally we'd like to exclude all fuse.* file
    systems, sshfs is urgent because it it can hang updatedb.
    Resolves: #604145, #608094


author: Miloslav Trmač <mitr@redhat.com> - 0.26-1
changelog:
  - Update to mlocate-0.26
  - Drop no longer necessary %clean and %defattr commands.
  - Enable hardened build
    Resolves: #853189


author: Miloslav Trmač <mitr@redhat.com> - 0.26-3
changelog:
  - Update cron packaging for https://fedoraproject.org/wiki/Packaging:CronFiles
    Notably, the cron script (previously not %config) was renamed.


author: Michal Sekletar <msekleta@redhat.com> - 0.26-6
changelog:
  - index zfs filesystems despite the fact they are marked as nodev (#1304416)
  - add gpfs to PRUNEFS (#1180672)
  - mlocate.db is ghost file created with non-default attrs, list them explicitly so rpm --verify doesn't report errors (#1182306)
  - use more strict permissions for cron script (#1179633)


author: Michal Sekletar <msekleta@redhat.com> - 0.26-7
changelog:
  - don't index fuse.glusterfs filesystems (#1331870)
  - don't index files on ceph filesystem (#1333152)
  - update link to upstream repository (#1502361)


author: Matěj Cepl <mcepl@redhat.com> - 1.20101231-1
changelog:
  - Update to latest upstream checkout including:
  	Afghanistan, Argentina, Armenia, Australia, Austria, Bahrain, Canada,
  	Croatia, Denmark, Dominican Republic, Finland, France, French Polynesia,
  	Germany, Greece, Hong Kong, Hungary, China, Iceland, India, Indonesia,
  	Iran, Israel, Israel, Italy, Latvia, Luxembourg, Mexico, Montenegro,
  	Netherlands, New Zealand, Nicaragua, Norway, Paraguay, Philippines,
  	Poland, Portugal, Romania, Rwanda/Burundi, Slovakia, Slovenia, Spain,
  	Sudan, Sweden, Switzerland, Thailand, Tunisia, Uganda, United Arab
  ,


author: Matěj Cepl <mcepl@redhat.com> - 1.20110218-1
changelog:
  - Update to latest upstream checkout including:
  	* south africa: add 8.ta (Telkom) provider (bgo #641916),
  	  remove username for Cell-C (bgo #640794)
  	* switzerland: update Orange plans and APNs (bgo #638115)
  	* tanzania: add Sasatel and TTCL, add CDMA for Zantel (bgo #634609)
  	* india: new unified BSNL APNs (rh #667280)
  	* ec: add Movistar Ecuador (bgo #638223)


author: Simo Sorce <simo@redhat.com> 1.3.1-1
changelog:
  - Various bugfixes and minor new features
  - resolves: #1258168
  - resolves: #1258171
  - resolves: #1258172
  - resolves: #1258456


author: Jan Kaluza <jkaluza@redhat.com> - 5.4-25
changelog:
  - don't fail with error 500 when ticket is expired and Authorization header is
    provided by client (#982521)


author: John Dennis <jdennis@redhat.com> - 0.10.0-1
changelog:
  - Rebase to upstream 0.10.0 release
  - Apply upstream commits post 0.10.0 release
  - Apply ECP pending patches
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.10.0-2
changelog:
  - Rebase to upstream 0.10.0 release
  - Apply upstream commits post 0.10.0 release
  - Apply revised ECP pending patches
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.10.0-3
changelog:
  - Rebase to upstream 0.10.0 release
  - Apply upstream commits post 0.10.0 release
  - Apply revised ECP pending patches,
    fix patch to pickup change in configure script that causes
    HAVE_ECP to be defined
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.11.0-1
changelog:
  - Upgrade to upstream 0.11.0 release.
  - Includes ECP support, see NEWS for all changes.
  - Update mellon_create_metadata.sh to match internally generated metadata,
    includes AssertionConsumerService for postResponse, artifactResponse &
    paosResponse.
  - Add lasso 2.5.0 version dependency
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.11.0-2
changelog:
  - Resolves: bug #1296286
    mod_auth_mellon emits CRITICAL warning message in Apache log when doing ECP
  - Resolves: bug #1324536
    Installing mod_auth_mellon causes working Kerberos authentication
    to start failing
  - Add ECP.rst documentation file that was erroneously omitted


author: John Dennis <jdennis@redhat.com> - 0.11.0-4
changelog:
  - Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
    Rebuilding due to missing comment in Changelog


author: John Dennis <jdennis@redhat.com> - 0.13.1-1
changelog:
  - Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
  - Adds the following upstream bug fixes on top of 0.13.1:
    * ee97812 Add Mellon User Guide
    * daa5d1e If no IdP's are defined explicitly log that fact
    * c291232 Make MellonUser case-insensitive.
    * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
    * 5c5ed1d Fix segmentation fault with POST field without a value.
    * 4c924d9 Fix some log message typos
    * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
      show both the expected and received values.
  - Add new mellon user guide to installed docdir


author: John Dennis <jdennis@redhat.com> - 0.13.1-2
changelog:
  - Resolves: rhbz#1553854 Add diagnostic logging
  - Add MellonSignatureMethod config option to set signature method used
    to sign SAML messages sent by Mellon. Defaults to original sha1.


author: John Dennis <jdennis@redhat.com> - 0.13.1-3
changelog:
  - Resolves: rhbz#1553854 Add diagnostic logging
  - Add README.redhat.rst doc, explains how to enable diagnostic logging


author: John Dennis <jdennis@redhat.com> - 0.13.1-2
changelog:
  - Resolves: rhbz#1481330 Add diagnostic logging
  - Resolves: rhbz#1295472 Add MellonSignatureMethod config option to set
    signature method used to sign SAML messages sent by Mellon.
    Defaults to original sha1.


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-2.1
changelog:
  - Resolves: rhbz#1692455 - CVE-2019-3878 mod_auth_mellon: authentication
                             bypass in ECP flow [rhel-7.6.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-2.2
changelog:
  - Resolves: rhbz#1697487 - mod_auth_mellon Cert files name wrong when
                             hostname contains a number


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-2.3
changelog:
  - Resolves: rhbz#1697488 - CVE-2019-3877 mod_auth_mellon: open redirect
                             in logout url when using URLs with backslashes
                             [rhel-7] [rhel-7.6.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-2.4
changelog:
  - Actually apply the patch in the previous build
  - Resolves: rhbz#1697488 - CVE-2019-3877 mod_auth_mellon: open redirect
                             in logout url when using URLs with backslashes


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-3
changelog:
  - Resolves: rhbz#1652980 - mod_auth_mellon Cert files name wrong when
                             hostname contains a number


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-4
changelog:
  - Resolves: rhbz#1576719 - ECP flow not triggering, instead client access
                             secured resources without ECP authentication


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-5
changelog:
  - Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                             in logout url when using URLs with backslashes
                             [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-6
changelog:
  - Apply the patch from the previous commit
  - Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                             in logout url when using URLs with backslashes
                             [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-7
changelog:
  - Resolves: rhbz#1727789 - mod_auth_mellon fix for AJAX header name
                             X-Requested-With


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-8
changelog:
  - Resolves: rhbz#1731052 - CVE-2019-13038 mod_auth_mellon: an Open Redirect via
                             the login?ReturnTo= substring which could facilitate
                             information theft [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-9
changelog:
  - Resolves: rhbz#1791264 - Backport SameSite=None cookie from upstream to
                             support latest browsers


author: John Dennis <jdennis@redhat.com> - 1.8.8-3
changelog:
  - fix unit test failure caused by apr_jwe_decrypt_content_aesgcm()
    failing to null terminate decrypted string
    Resolves: bug#1292561 New package: mod_auth_openidc


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.8-4
changelog:
  - Resolves: rhbz#1626299 - CVE-2017-6059 mod_auth_openidc: Shows
                             user-supplied content on error pages [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.8-5
changelog:
  - Resolves: rhbz#1626297 - CVE-2017-6413 mod_auth_openidc: OIDC_CLAIM and
                             OIDCAuthNHeader not skipped in an "AuthType oauth20"
                             configuration [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.8-6
changelog:
  - Resolves: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
                             issue exists in URLs with slash and backslash [rhel-7]
  - Resolves: rhbz#1805067 - CVE-2019-14857 mod_auth_openidc: Open redirect
                             in logout url when using URLs with leading slashes
                             [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.8-7
changelog:
  - Fix a regression in the previous patches
  - Related: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
                            issue exists in URLs with slash and backslash [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.8-8
changelog:
  - Resolves: rhbz#1823762 - Backport SameSite=None cookie from
                             mod_auth_openidc upstream to support
                             latest browsers [rhel-7.9.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.8-9
changelog:
  - Rebuild to pick up the proper build tag
  - Related: rhbz#1823762 - Backport SameSite=None cookie from
                            mod_auth_openidc upstream to support
                            latest browsers [rhel-7.9.z]


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.6-1
changelog:
  - Make pam_authenticate_with_login_password available for other modules.
  - Reformat documentation to make the Basic Auth usage less prominent.


author: Joe Orton <jorton@redhat.com> - 1.7.14-13
changelog:
  - fix mod_authz_svn regression with mod_auth_kerb (#1306431)
  - fix "svn diff" property handling (#1378178)
  - fix permissions of /run/svnserve to match tmpfiles (#1496243)


author: Paul Howarth <paul@city-fan.org> 2.3.7-1
changelog:
  - Update to 2.3.7
    - Introduce FcgidWin32PreventOrphans directive on Windows to use OS Job
      Control Objects to terminate all running fcgi's when the worker process
      has been abruptly terminated (PR: 51078)
    - Periodically clean out the brigades that are pulling in the request body
      for handoff to the fcgid child (PR: 51749)
    - Resolve crash during graceful restarts (PR: 50309)
    - Solve latency/congestion of resolving effective user file access rights
      when no such info is desired, for config-related filename stats (PR: 51020)
    - Fix regression in 2.3.6 that broke process controls when using
      vhost-specific configuration
    - Account for first process in class in the spawn score
  - Drop patch for CVE-2012-1181, now included in upstream release


author: Paul Howarth <paul@city-fan.org> 2.3.9-1
changelog:
  - Update to 2.3.9
    - SECURITY: Fix possible heap buffer overwrite (CVE-2013-4365)
    - Add experimental cmake-based build system for Windows
    - Correctly parse quotation and escaped spaces in FcgidWrapper and the AAA
      Authenticator/Authorizor/Access directives' command line argument, as
      currently documented (PR#51194)
    - Honor quoted FcgidCmdOptions arguments (notably for InitialEnv
      assignments) (PR#51657)
    - Conform script response parsing with mod_cgid and ensure no response body
      is sent when ap_meets_conditions() determines that request conditions are
      met
    - Improve logging in access control hook functions
    - Avoid making internal sub-requests and processing Location headers when in
      FCGI_AUTHORIZER mode, as the auth hook functions already treat Location
      headers returned by scripts as an error since redirections are not
      meaningful in this mode
    - Revert fix for PR#53693, added in 2.3.8 but undocumented
    - Fix issues with a minor optimization added in 2.3.8


author: Luboš Uhliarik <luhliari@redhat.com> - 2.3.9-4.1
changelog:
  - Resolves: #1501307 - mod_fcgid cause Segmentation fault error while doing
    large file uploads over HTTPS


author: Luboš Uhliarik <luhliari@redhat.com> - 2.3.9-5
changelog:
  - Resolves: #1486653 - mod_fcgid cause Segmentation fault error while doing
    large file uploads over HTTPS


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.7-1
changelog:
  - No longer call lookup_identity_hook explicitly, hook order does
    the same.
  - Silence compile warnings by specifying C99.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.8-1
changelog:
  - 1109923 - Fix module loading/configuration for Apache 2.4.
  - Document the runtime dependency on pam_authenticate_with_login_password.
  - Comment/code cleanup.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.0-1
changelog:
  - Add support for '+'-prefixed note/variable names.
  - Silence compile warnings by specifying C99.
  - Fix format of logs of dbus calls.


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-1
changelog:
  - Rebase to 1.0.14 (#1299063)
  - Add support for Server Name Indication (SNI) (#1053327)
  - Use upstream method to not execute live tests as root (#1256887)
  - Always call SSL_ShutdownServerSessionIDCache() in ModuleKill
    (#1263301, #1296685)
  - Don't require NSSProxyNickname (#1280287)
  - Make link to libnssckbi.so an absolute link (#1288471)
  - Fail for colons in credentials with FakeBasicAuth (#1295970)
  - Don't ignore NSSProtocol when NSSFIPS is enabled (#1312491)
  - Check filesystem permissions on NSS database at startup (#1312583)
  - OpenSSL ciphers stopped parsing at +, CVE-2016-3099 (#1323913)
  - Patch to match available ciphers so tests pass (#1299063)
  - Patch to fix tests in brew (#1299063)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-6
changelog:
  - Check the NSS certificate database directory for read permissions
    by the Apache user. (#1312583)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-8
changelog:
  - Fail start start when there are invalid Protocols defined (#1389114)
  - Handle group membership when testing NSS database filesystem
    permissions (#1395300)
  - Add OCSP cache tuning directives (#1392582) 
  - Don't share mod_nss NSS database with nss_pcache (#1382102)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-9
changelog:
  - Update nss_pcache.8 to drop directory and prefix options (#1382102)

  - Don't share mod_nss NSS database with nss_pcache (#1382102)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-12
changelog:
  - Correct URL and Source entries to point to pagure.io (#1502362)
  - Remove deprecated NSSSessionCacheTimeout from default config (#1257662)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-14
changelog:
  - Bugzilla Bug #861999 - mod_revocator exec CLR URIs fail to load: unable to
    load Revocation module, NSS error -8187 - stephen.capstick64@gmail.com
    (mod_revocator-waitpid.patch)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-16
changelog:
  - Bugzilla Bug #948875 - Man page scan results for mod_revocator
  - Moved 'ldapget' from %bindir to %sbindir (provided compatibility link)
  - Moved 'crlhelper' from %bindir to %libexecdir (provided compatibility link)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-17
changelog:
  - Add the following explanation to the 'Brewtap results' textbox in rpmdiff:
    The '/etc/httpd/conf.d/revocator.conf' file does not require a man page
    because its parameters are sufficiently documented within the
    configuration file itself.
    The '/etc/httpd/conf.modules.d/11-revocator.conf' file does not require
    a man page because the file merely contains the line
    'LoadModule rev_module modules/mod_rev.so' to support httpd
    loading of Dynamic Shared Objects ('/etc/httpd/conf/httpd.conf').


author: Rob Crittenden <rcritten@redhat.com> - 1.0.3-20
changelog:
  - Clean up semaphore in crlhelper on shutdown (#1326840)
  - Update URL to https://fedorahosted.org/mod_revocator/


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.1-3
changelog:
  - Add some missing directives RHBZ #569360
  - Fix multipart/invalid part ruleset bypass issue (CVE-2012-4528)
    (RHBZ #867424, #867773, #867774)


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.1-5
changelog:
  - Use conditional for loading mod_unique_id (rhbz #879264)
  - Fix syntax errors on httpd 2.4.x by using IncludeOptional (rhbz #879264, comment #2)


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.3-2
changelog:
  - Fix NULL pointer dereference (DoS, crash) (CVE-2013-2765) (RHBZ #967615)
  - Fix a possible memory leak.


author: Daniel Kopecek <dkopecek@redhat.com> - 2.9.2-1
changelog:
  - RHEL-7.5 erratum
   - Update to 2.9.2
   - Fixed bogus dates in the spec file
   - Enabled mlogc subpackage
   - Enabled collection global lock to prevent collection
     removal failures
    Resolves: rhbz#1388656
    Resolves: rhbz#1139728
    Resolves: rhbz#1473420


author: Joe Orton <jorton@redhat.com> - 3.4-3
changelog:
  - use a NULL c->sbh pointer with httpd 2.4 (possible fix for #867276)
  - add logging for unexpected daemon process loss


author: Jan Kaluza <jkaluza@redhat.com> - 3.4-7
changelog:
  - compile with -fno-strict-aliasing to workaround Python
    bug http://www.python.org/dev/peps/pep-3123/


author: Peter Jones <pjones@redhat.com> - 11-0.1
changelog:
  - Update to 11-0.1 to match shim-11-1
    Related: rhbz#1310766
  - Fix regression in PE loader
    Related: rhbz#1310766
  - Fix case where BDS invokes us wrong and we exec shim again as a result
    Related: rhbz#1310766


author: Livy Ge <livy.ge@oracle.com> - 12-1.0.1
changelog:
  - New secure boot signing key
  - aarch64 is not supported by Oracle Linux thus aarch64 shim is not needed
  - Use redhat as efidir to maintain compatibility with RedHat
  - updated with shim.efi signed by Microsoft
  - shim update


author: Peter Jones <pjones@redhat.com> - 12-2
changelog:
  - Fix /boot/efi/... permissions to match the filesystem's requirements
    Related: rhbz#1512749
  - Minor .spec cleanups
    Related: rhbz#1512749


author: Livy Ge <livy.ge@oracle.com> - 15-1.0.1
changelog:
  - Pack files in efidir with disabled rpm verification
    [bug 27166040]
  - updated with shimia32.efi and shimx64.efi signed by Microsoft
  - Use redhat as efidir to maintain compatibility with RedHat


author: Livy Ge <livy.ge@oracle.com> - 15-1.0.1
changelog:
  - Pack files in efidir with disabled rpm verification
    [bug 27166040]
  - updated with shimia32.efi and shimx64.efi signed by Microsoft
  - New secure boot signing key
  - aarch64 is not supported by Oracle Linux thus aarch64 shim is not needed
  - Use redhat as efidir to maintain compatibility with RedHat
  - updated with shim.efi signed by Microsoft
  - shim update


author: Livy Ge <livy.ge@oracle.com> - 15-2.0.1
changelog:
  - updated BOOT*.CSV files to contain Oracle Linux
    [Orabug: 28073193]
  - Pack files in efidir with disabled rpm verification
    [bug 27166040]
  - updated with shimia32.efi and shimx64.efi signed by Microsoft
  - Use redhat as efidir to maintain compatibility with RedHat


author: Ilya Okomin <ilya.okomin@oracle.com> - 15-2.0.6
changelog:
  - removed shim{efiarchlc}-redhat.efi [Orabug: 31663209]
  - updated with shimia32.efi and shimx64.efi signed by Microsoft [Orabug: 31663209]
  - added oracle(grub2-sig-key) and oracle(kernel-sig-key) to package Requires [Orabug: 31663209]
  - added shim-{efiarchlc} to yum protected [Orabug: 31663209]


author: Thomas Woerner <twoerner@redhat.com> - 2.3.4-8
changelog:
  - mwm: do not see outline of window when moving (RHBZ#1080548)
    Clone of RHBZ#997241
  - Fixed rendering issues seen while scrolling window (RHBZ#1134365)
    (MotifZone bug #1654)


author: Thomas Woerner <twoerner@redhat.com> - 2.3.4-9
changelog:
  - Fixed motif issue while navigating drop down menus with arrow keys
    (RHBZ#1396514) (MotifZone bug #1564)


author: Carlos Soriano <csoriano@redhat.com> - 2.3.4-10
changelog:
  - Fix last commit that is actually MotifZone#1565 and removes that patch since
    it was causing more problems. Fixes MotifZone#1576.
    Resolves: rhbz#1448509


author: Carlos Soriano <csoriano@redhat.com> - 2.3.4-13
changelog:
  - Fix motifzone 1665. Motif was deactivating shorcuts in cascade menus when
    closing them by mouse.
    Resolves: RHBZ#1467303


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-5
changelog:
  - dropped file requires for /usr/share/X11/XKeysymDB, not needed and not 
    available anymore
  - added flex-static build requirement, because of flex package split


author: Thomas Woerner <twoerner@redhat.com> 2.3.4-1
changelog:
  - new version 2.3.4 with LGPL license
  - fixed some rpmlint warnings
  - new sub package for static libraries
  - added /etc/X11/mwm directory
  - removed defattrs


author: Thomas Woerner <twoerner@redhat.com> 2.3.4-2
changelog:
  - fixed requirements according to review (RHBZ#870049)
  - flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7


author: Thomas Woerner <twoerner@redhat.com> - 2.3.4-8.1
changelog:
  - Fixed motif issue while navigating drop down menus with arrow keys
    (RHBZ#1415153) (RHBZ#1396514) (MotifZone bug #1564)


author: Colin Walters <walters@redhat.com> - 17.0.0-12
changelog:
  - Add patch for aarch64
  - Fix for aarch64 64k pagesize. BZ#1076181 (Mark Salter <msalter@redhat.com>)
  - Resolves: #1027067


author: Colin Walters <walters@redhat.com> - 17.0.0-16
changelog:
  - Add patch for aarch64 48bit VA limits
    This changes the API/ABI only on aarch64, and hence we also bump
    the soname solely on those architectures.  We do retain the same pkg-config
    file name though, so dependencies should only need a rebuild.
  - Resolves: #1324216


author: Yaakov Selkowitz <yselkowi@redhat.com> - 17.0.0-19.p1
changelog:
  - Switch to upstream aarch64 48bit VA patch
    This reverts the previous API/ABI break on aarch64, so dependencies
    must be rebuilt again.
  - Resolves: #1393548


author: Björn Esser <besser82@fedoraproject.org> - 52.5.0-3
changelog:
  - SpiderMonkey tests do not fail on any arch
  - Basic JIT tests are failing on s390 arches, only
  - Use macro for ppc64 arches
  - Run tests using Python2 explicitly
  - Simplify %check
  - Use the %{major} macro consequently
  - Replace %define with %global


author: Wim Taymans <wtaymans@redhat.com> - 1.23.8-3
changelog:
  - Remove pointless Enhances:
  - Fix splelling mistake
  - change package name from libs-devel to devel and add Obsolete:
  - see rhbz#1394147


author: Michal Schmidt <mschmidt@redhat.com> - 3.2-1
changelog:
  - Update to upstream version mpich-3.2 with patches from Fedora.
  - Keep 3.0.4 as 'mpich-3.0' for backwards compatibility.
  - Resolves: rhbz1091532
  - Resolves: rhbz1142117
  - Resolves: rhbz1148992


author: Michal Schmidt <mschmidt@redhat.com> - 3.2-2
changelog:
  - Remove bad rpath in two binaries in mpich-3.2.
  - Restore trimming of shebang lines in config files in mpich-3.0-devel.
  - Related: rhbz1091532


author: Jay Fenlason <fenlason@redhat.com> 3.2-10
changelog:
  - Add BuildRequires for libibmad-devel
  - Build against mpich, now that we have a mpi-3 version of it.
  - rebuild against new mvapich2
    Resolves: rhbz1011910, rhbz1011915


author: Michal Schmidt <mschmidt@redhat.com> - 4.1-1
changelog:
  - Update IMB to 4.1.
  - Update OSUMB to 5.3.
  - Add subpackages for new mpich and mvapich2 versions and variants.
  - Resolves: rhbz961885
  - Resolves: rhbz1093466


author: Michal Schmidt <mschmidt@redhat.com> - 5.4-1
changelog:
  - Update IMB to 2018.0.
  - Update OMB to 5.4.
  - Add builds for openmpi 3 and mvapich 2.3.
  - Build IMB NBC and RMA tests.
  - Build OSUMB collective async tests.
  - Add precise Requires.
  - Resolves: rhbz1358437


author: Honggang Li <honli@redhat.com> - 4.11.0-5
changelog:
  - Rebase to latest upstream release v4.11.0-5
  - mstconfig support for prio_tag and ttl_wa
  - Resolves: bz1694703


author: Doug Ledford <dledford@redhat.com> - 3.0-0.6.g6961daa.1
changelog:
  - Update to latest upstream version, which resovles some licensing issues
    on some of the source files


author: Michal Srb <msrb@redhat.com> - 1:2013.5.1-3
changelog:
  - Do not build module with unclear licensing (relames)
  - Replace %add_to_maven_depmap with %add_maven_depmap


author: Michal Sekletar <msekleta@redhat.com> - 2:0.85-3
changelog:
  - migrate from consolehelper to policykit (#1014074)
  - introduce grace period (#1014073)
  - query all ipv6 nameservers (#1014075)
  - add missing documentation (#949030)
  - enable hardened build (#1018907)
  - specfile cleanup


author: Dan Horák <dan[at]danny.cz> 1.3.12-5
changelog:
  - dropped debug output when tools are called with wrong number of arguments (#538403)
  - added patch to support DESTDIR for installing


author: Matej Muzila <mmuzila@redhat.com> 5:1.5.21-27
changelog:
  - Resolves #1388511 (System default CA bundle not set as default in compiled-in
    default or config)
  - Resolves #1388512 (mutt sends e-mail with broken "From" header, which has no
    host part)


author: Matej Muzila <mmuzila@redhat.com> - 5:1.5.21-29
changelog:
  - Fix IMAP header caching path traversal vulnerability
  - Resolves: #1608011
  - Resolves: CVE-2018-14355


author: Florian Müllner <fmuellner@redhat.com> - 3.24.3-11
changelog:
  - Prevent crash when removing workspace with on-all-workspaces windows
    present (like desktop icons)
  - Resolves: #1453065


author: Florian Müllner <fmuellner@redhat.com> - 3.26.2-7
changelog:
  - Fix crash during session saving
    Resolves: #1535080
  - Fix XWayland prevented from starting
    Resolves: #1540986


author: Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-10
changelog:
  - Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
    Resolves: #1499788
  - Fix tablet pressure curve configuration not being applied
    Resolves: #1543693


author: Kalev Lember <klember@redhat.com> - 3.28.3-1
changelog:
  - Update to 3.28.3
  - Apply HW cursor on-demand patches
  - Apply monitor transform regression patch
  - Resolves: #1569736


author: Jay Fenlason <fenlason@redhat.com> 1.8-1
changelog:
  - New upstream version, with man pages again.
    This fixes the following bugs:
    Related: rhbz739138
    Resolves: rhbz613696
    Resolves: rhbz625620
    Resolves: rhbz735954
    Resolves: rhbz782263


author: Jay Fenlason <fenlason@redhat.com> 1.8-2
changelog:
  - Add BuildRequires on flex and bison
  - Add "export AR=ar" to allow builds on RHEL-7 to work.
    Resolves: rhbz822527


author: Jay Fenlason <fenlason@redhat.com> 1.8-3
changelog:
  - Move the module files to the (correct for RHEL-7) mpi/ directory.
  - Add MANPATH to the module files.


author: Jay Fenlason <fenlason@redhat.com> 2.0a-1
changelog:
  - Add Build Requires on autoconf, automake, libtool,
    perl-Digest-MD5, hwloc-devel, and libibmad-devel.
  - remove build requires on java
  - New upstream version, edited so it can pass a license audit.
    Resolves: rhbz1001718


author: Kyle McMartin <kmcmarti@redhat.com> - 2.0a-3
changelog:
  - aarch64: add get_cycles implementation since <asm/timex.h> is not
    an exported header.
  - Resolves: #1100046


author: Michal Schmidt <mschmidt@redhat.com> - 2.2-0.1.rc1
changelog:
  - Update to 2.2rc1
  - Includes -psm2 variant for Intel OPA.
  - Still build the previous version for compatibility, as 2.0 subpackages.
  - Resolves: #948504
  - Resolves: #1093453
  - Resolves: #1173318


author: Jarod Wilson <jarod@redhat.com> - 2.2-1.5
changelog:
  - Update mvapich23 (TrueScale) bits to 2.3 release
  - Fix libmpi.a being built w/o -fPIC
  - Resolves: #1625672


author: Tom Lane <tgl@redhat.com> 1:5.1.17-5
changelog:
  - Switch to noarch (non-GCJ) build
  Resolves: #688937, #819139
  - Fix mysql-connector-java-jdbc-4.1.patch to cover both driver classes
  Related: #816696


author: Honza Horak <hhorak@redhat.com> - 5.2.5-1
changelog:
  - Update to 5.2.5
  - Enlarge buffer size for query string when getting info about tables
    Related: #948619


author: Marcin Juszkiewicz <mjuszkiewicz redhat com> - 5.2.5-4
changelog:
  - Build failed because whether to use lib64 or not is done by checking
    list of known 64-bit architectures. So added AArch64 to that list.
    Resolves: #1041348


author: Keshav Sharma <keshav.sharma@oracle.com> 1.0-2
changelog:
  - Enhance logic to detect oci instance [ OraBug 29241080]
  - Do not overwrite /etc/yun/vars/ociregion file.


author: Mathieu Bridon <bochecha@fedoraproject.org> - 1.2-2
changelog:
  - added comment explaining how the source is obtained (as it is modified from upstream)
  - temporary fix for RHBZ#490830 while not fixed upstream


author: Carlos Soriano <csoriano@redhat.com> 3.14.3-8
changelog:
  - Backport fix for jp2 images crashing nautilus
  - Apply downstream translations
    Resolves: #1271297 #1272881


author: Carlos Soriano <csoriano@redhat.com> 3.14.3-9
changelog:
  - Apply downstream translations
  - Restrict icons on desktop to the primary monitor
    Resolves: #1207646 #1046876 #1272881


author: Miroslav Lichvar <mlichvar@redhat.com> 5.9-8.20130126
changelog:
  - update to 20130126
  - clear scrollback buffer in clear (#815790)
  - make -base and -term subpackages noarch
  - make some dependencies arch-specific


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-21
changelog:
  - Fixed crash on reloading 'exec' configuration options (#1228893)
  - Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
  - Fixed storageUseNFS functionality in hrStorageTable (#1193006)
  - Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
  - Fixed hrStorageTable to contain 31 bits integers (#1192221)
  - Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
  - Fixed log level of SMUX messages (#1189393)
  - Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
  - Fixed client utilities reporting 'read_config_store open failure on
    /var/lib/net-snmp/snmpapp.conf' (#1151310)
  - Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
  - Added 'diskio' option to snmpd.conf, it's possible to monitor only
    selected devices in diskIOTable (#1092308)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-23
changelog:
  - Fixed parsing of invalid variables in incoming packets (#1248414)
  - Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
    becomes writable (#1241897)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-24
changelog:
  - Fixed lmSensorsTable not reporting sensors with duplicate names
    (#1252053)
  - Fixed close() overhead of extend commands (#1252048)
  - Fixed out-of-bounds write in python code (#1252034)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-27
changelog:
  - Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
  - snmpd: Speed up ipAddressTable loading. (#1327240)
  - Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
  - Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-29
changelog:
  - Move net-snmp-config from devel package to general package (#1486733)
  - Fix SCTP parser (#1329338)
  - Fix strstr() crash (#1428609)
  - Add support for TCP and UDP 64 bit counters (#1448082)
  - Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
  - Fix wrong usage of structure iterator (#1461666)
  - Fix issue with statistics from autofs (#1501144)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-35
changelog:
  - Add fsync to prevet data lose on power failure (#1520761)
  - Add ZFS support (#1533943)
  - Fix man page (#1537460)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-39
changelog:
  - adjust logging of statfs (#1314610)
  - link libnetsnmptrapd against MYSQL LIBS (#1468084)
  - expand SNMPCONFPATH (#1514501)
  - remove date in mailheader (#1585940)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-44
changelog:
  - add support for glusterfs (#1316386)
  - change services to start after network-online.target (#1388118)
  - fix interface fadeout configuration (#1547355)
  - fix scanf pattern for ICMP stats (#1693547)
  - change buffer size in pass_common.c file (#1695363 and #1731357)
  - remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
  - fix for CVE-2018-18066 (#1638911)
  - add Counter64 support for UCD-SNMP-MIB (#1703752)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-49
changelog:
  - add missing part of memory leak patch (#1794168)
  - fix if_inet6 messages floood (#1765449)
  - revert bz#1486733 (#1771050)
  - fix issue for process status when process name contains whitespace (#1782180)


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 1:5.7.2-49.0.1.2
changelog:
  - skip setting asp->index if already set in function netsnmp_wrap_up_request
    (nishant.nayan@oracle.com) [Orabug: 33054569]


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.18.20131004git
changelog:
  - Resolves: #1063913 - netstat doesn't list sctp servers in -A mode
  - Resolves: #1257549 - netstat tool does not throw correct exit code on wrong parameter
  - Resolves: #1392910 - ifconfig inaccurately rounds exabytes


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.25.20131004git
changelog:
  - Resolves: #1632905 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Laine Stump <laine@redhat.com> - 0.2.3-6
changelog:
  - resolves rhbz#961184
  - wait for IFF_UP and IFF_RUNNING after calling ifup
  - resolves rhbz#1020204
  - remove extraneous quotes from BONDING_OPTS
  - resolves rhbz#1044681
  - eliminate use of uninitialized data when getting mac
  - resolves rhbz#1046594
  - support systemd based netcf transaction


author: Laine Stump <laine@redhat.com> - 0.2.3-8
changelog:
  - resolves rhbz 1060076
  - Transform STP value from yes/no to on/off
  - resolves rhbz 1060317
  - Require bridge-utils for netcf-libs in the specfile


author: Laine Stump <laine@redhat.com> - 0.2.6-1
changelog:
  - resolves rhbz#1115176
   - rebase to upstream 0.2.6
   - allow interleaved elements in interface XML schema
   - allow <link> element in vlan and bond interfaces
   - report link state/speed in interface status
   - change DHCPv6 to DHCPV6C in ifcfg files
   - max vlan id is 4095, not 4096


author: - Laine Stump <laine@redhat.com> 0.2.6-2
changelog:
  - resolves rhbz#1138196
   - report file path and reason when aug_save fails
   - resolves rhbz#1147650
   - recognize IPADDR0/PREFIX0/NETMASK0/GATEWAY0
   - use git to apply patches to source tree


author: Laine Stump <laine@redhat.com> - 0.2.8-1
changelog:
  - Rebase to netcf-0.2.8
   - resolve rhbz#1165965 - CVE-2014-8119
   - resolve rhbz#1159000
   - support multiple IPv4 addresses in interface config (redhat driver)
   - resolve rhbz#1113983
   - allow static IPv4 config simultaneous with DHCPv4 (redhat driver)
   - resolve rhbz#1170941
   - remove extra quotes from IPV6ADDR_SECONDARIES (redhat+suse drivers)
   - resolve rhbz#1090011
   - limit names of new interfaces to IFNAMSIZ characters
   - resolve rhbz#761246
   - properly parse ifcfg files with comments past column 1


author: Paul Moore <pmoore@redhat.com> - 0.20-0
changelog:
  - Version bump to match latest upstream
  - Cleanups in the specfile due to changes in the upstream package


author: Paul Moore <pmoore@redhat.com> - 0.20-3
changelog:
  - Fix a problem when adding a CIPSO DOI with a large number of translations
  - Remove old patches
    Resolves: #1053687


author: Josef Ridky <jridky@redhat.com> - 10.79.00-4
changelog:
  - Resolves: #1523176 - add manual page for ppmtopga
  - Resolves: #1530606 - pbmtoepson command line option fix


author: Daniel Borkmann <dborkman@redhat.com> - 0.5.8-1
changelog:
  - Initial netsniff-ng spec file for RHEL, import of 0.5.8-rc1. Note that
    RHEL packaging differs significantly from Fedora as we only do a partial
    build and have a small fraction of dependencies that are available on
    RHEL.


author: Daniel Borkmann <dborkman@redhat.com> - 0.5.8-3
changelog:
  - Package Wrangler feedback from Thomas Graf
  - Note: 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches  }" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches  }" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "aarch64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=aarch64-redhat-linux-gnu --host=aarch64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info does not work with upstream's build system here as CFLAGS
    will be overwritten. Changes would need to be proposed to upstream first.


author: Daniel Borkmann <dborkman@redhat.com> - 0.5.8-4
changelog:
  - GeoIP was added to RHEL7, so we can make use of that to enable
    astraceroute and features in netsniff-ng.
  - For this we also need zlib in order to make the updater work.


author: Eric Garver - 0.5.8-7
changelog:
  - netsniff-ng: add packet fanout support
  - doc: authors: add Michal as contributor
  - man: netsniff-ng: document fanout options
  - netsniff-ng: add example for fanout into man page


author: Daniel Borkmann <dborkman@redhat.com> - 0.5.8-3
changelog:
  - Package Wrangler feedback from Thomas Graf
  - Note: 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "x86_64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info does not work with upstream's build system here as CFLAGS
    will be overwritten. Changes would need to be proposed to upstream first.


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.7.1-5
changelog:
  - Fixed SHA-3 implementation to conform to final standard (#1252936)
  - Fixed CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 which caused issues
    in secp256r1 and secp384r1 calculations (#1314374)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.7.1-8
changelog:
  - Use a cache-silent version of mpz_powm to prevent cache-timing
    attacks against RSA and DSA in shared VMs. (#1364897,CVE-2016-6489)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.13-1
changelog:
  - add support for changing colors in individual labels, scrollbars, entries,
    textboxes and scales, add custom colorsets 
  - add support for NEWT_COLORS and NEWT_COLORS_FILE variables (#689903)
  - allow resizing of form
  - fix errors found by coverity
  - fix va_list usage (Gwenole Beauchesne)
  - fix building and installing on Mac OS X (#652479)
  - check for slang.h header, support DESTDIR variable, add --without-python
    option (Otavio Salvador)
  - add Persian, Low German translations


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.14-1
changelog:
  - fix returning strings in whiptail and whiptcl (#752818)
  - fix configure to work with multiple python versions (#737998)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.15-1
changelog:
  - fix errors found by gcc-with-cpychecker (#800075)
  - fix building with tcl8.6 (#902561)
  - add fallback to python-config (#783627)
  - replace tabs in snack.py (#870647)
  - compile snackmodule.c with flag -fPIC (Kang Kai)
  - include new translations from transifex
  - allow newtWinMenu and newtWinEntries with no buttons or items
  - don't draw scale when not mapped
  - build with large-file support for stat64
  - remove unused variables in test code
  - update FSF address
  - remove obsolete macros
  - make some dependencies arch-specific


author: Steve Dickson <steved@redhat.com> 1.3.0-0.40
changelog:
  - gssd: ensure that preferred_realm is non-NULL (bz 1432643)
  - mountstats: handle KeyError in accumulate_iostats() (bz 1400106)
  - mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1404121)
  - sm-notify: ending the grace period early should be configurable (bz 1424599)
  - Fixed a couple typos that effected the '--mounts' nfsstat option (bz 1425956)
  - Manual page bug: two inaccuracies in nfsd(7) (bz 1432750)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.41
changelog:
  - nfsdcltrack: silence some expected errors (bz 1443176)
  - Conditionally restart gssproxy now that config file is installed (bz 1440887)
  - systemd: NFS server services should use network-online (bz 1409012)
  - Cleaned up some fuzzy patches (bz 1409012)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.43
changelog:
  - mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
  - spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.48
changelog:
  - exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
  - Correctly set the minor version when set in nfsmount.conf (1458504)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.49
changelog:
  - mount: handle EACCES during version negotiation (bz 1479573)
  - mount: Fix problems with parsing minorversion= (bz 1489262)
  - mountstats:  Remove a shebang (bz 987031)
  - nfsdcltrack: remove a warning (bz 1475462)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.50
changelog:
  - rpc.nfsd: Do not fail when all address families are not support (bz 1450528)
  - mount.nfs: merge in vers= and nfsvers= options (bz 1496822)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.51
changelog:
  - systemd: add a generator for the rpc_pipefs mountpoint (bz 1358333)
  - nfsdcltrack: return an non-zero value for invalid options (bz 1461349)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.52
changelog:
  - nfs(5): update some version information (bz 1452461)
  - nfsiostat: avoid parsing "no device mounted ..." line (bz 1508046)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.55
changelog:
  - mountstats: use correct RDMA terminology (bz 1527938)
  - nfs-server: restart gssproxy when the server is restarted. (bz 1527653)
  - nfsd: Set default minor versions (bz 1436977)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.56
changelog:
  - exportfs: move ro/rw option back to secinfo_flag_displaymap table (bz 1532688)
  - nfsdcltrack: getopt_long() fails on a non x86_64 archs (bz 1551903)
  - Fixed typo in nfsmount.conf (bz 1592235)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.57
changelog:
  - rpc.gssd: truncates 32-bit UIDs/GIDs to 16 bits architectures (bz 1602836)
  - Added back lockd vars to nfs-utils_env.sh and sysconfig (bz 1413272)
  - Document nfs v4 mounts will use Kerberos we available (bz 1334510)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.63
changelog:
  - nfs.conf: Fixed manage-gids option typo (bz 1677403)
  - sm-notify: Added -f flag to nfs.conf parsing (bz 1688932)
  - Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1688918)
  - nfs-server: Use reload not restart to start gssproxy (bz 1644169)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.67
changelog:
  - rpc.gssd: removed a number memory leaks (bz 1807110)
  - mount: Report correct error in the fall_back cases (bz 1752329)
  - gssd: daemonize earlier (bz 1645083)


author: Steve Dickson <steved@redhat.com> 0.3.3-15
changelog:
  - Allow spaces in group principal names (bz 1284597)
  - Fixed FD leak in edit_ACL() (bz 1284608)
  - Added RELRO check (bz 1092556)


author: Steve Dickson <steved@redhat.com> 0.3.3-15
changelog:
  - Allow spaces in group principal names (bz 1284597)
  - Fixed FD leak in edit_ACL() (bz 1284608)
  - Added the RELRO check (bz 1092556)


author: Phil Sutter <psutter@redhat.com> [0.6-3.el7]
changelog:
  - nftables.spec: Require at least libnftnl-1.0.6-4 (Phil Sutter) [1358705]
  - evaluate: Fix datalen checks in expr_evaluate_string() (Phil Sutter) [1360240]
  - netlink_delinearize: Avoid potential null pointer deref (Timothy Redaelli) [1360257]
  - src: use new range expression for != [a,b] intervals (Phil Sutter) [1358705]


author: Phil Sutter <psutter@redhat.com> [0.6-4.el7]
changelog:
  - evaluate: Avoid undefined behaviour in concat_subtype_id() (Phil Sutter) [1360789]
  - src: Interpret OP_NEQ against a set as OP_LOOKUP (Phil Sutter) [1440011]
  - include: refresh uapi/linux/netfilter/nf_tables.h copy (Phil Sutter) [1440011]
  - datatype: time_type should send milliseconds to userspace (Phil Sutter) [1427114]
  - meta: fix memory leak in tc classid parser (Phil Sutter) [1380326]
  - src: meta priority support using tc classid (Phil Sutter) [1380326]
  - src: simplify classid printing using x instead of 04x (Phil Sutter) [1380326]
  - src: rename datatype name from tc_handle to classid (Phil Sutter) [1380326]
  - payload: don't update protocol context if we can't find a description (Timothy Redaelli) [1446534 1399764]
  - evaluate: reject: Have a generic fix for missing network context (Timothy Redaelli) [1360354]


author: Phil Sutter <psutter@redhat.com> [0.8-6.el7]
changelog:
  - netlink_linearize: exthdr op must be u32 (Phil Sutter) [1524246]
  - src: fix protocol context update on big-endian systems (Phil Sutter) [1523016]


author: Phil Sutter <psutter@redhat.com> [0.8-9.el7]
changelog:
  - evaluate: explicitly deny concatenated types in interval sets (Phil Sutter) [1576426]
  - Deprecate add/insert rule 'position' argument (Phil Sutter) [1571968]
  - doc: reword insert position, this expects rule handle to insert, not a relative postition (Phil Sutter) [1571968]
  - nft.8: Fix reject statement documentation (Phil Sutter) [1571938]
  - netlink_delinearize: Fix resource leaks (Phil Sutter) [1504157]
  - netlink: Complain if setting O_NONBLOCK fails (Phil Sutter) [1504157]
  - hash: Fix potential null-pointer dereference in hash_expr_cmp() (Phil Sutter) [1504157]
  - evaluate: Fix memleak in stmt_reject_gen_dependency() (Phil Sutter) [1504157]
  - erec: Avoid passing negative offset to fseek() (Phil Sutter) [1504157]
  - cli: Drop pointless check in cli_append_multiline() (Phil Sutter) [1504157]
  - monitor: Make JSON/XML output respect output_fp (Phil Sutter) [1504157]
  - monitor: Make trace events respect output_fp (Phil Sutter) [1504157]
  - Review switch statements for unmarked fall through cases (Phil Sutter) [1504157]


author: Phil Sutter <psutter@redhat.com> [0.8-11.el7]
changelog:
  - src: Reject 'export vm json' command (Phil Sutter) [1646336]
  - monitor: Drop fake XML support (Phil Sutter) [1646336]
  - src: bail out when exporting ruleset with unsupported output (Phil Sutter) [1646336]


author: Phil Sutter <psutter@redhat.com> [0.8-13.el7]
changelog:
  - doc: Add minimal description of (v)map statements (Phil Sutter) [1628974]
  - nft.8: Update meta pkt_type value description (Phil Sutter) [1628694]


author: Daiki Ueno <dueno@redhat.com> - 3.020-1
changelog:
  - new upstream release
  - update the priority
    nhn-nanum-fonts -> 65-0, un-core-fonts -> 65-1, baekmuk-ttf-fonts -> 65-2


author: Michal Hlavinka <mhlavink@redhat.com> - 2:6.40-5
changelog:
  - ncat should try to connect to all resolved addresses, not only the first one (#1192143)
  - do not print debug messages during normal use (#1134412)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-2
changelog:
  - Restore previously used s390x patch as it isn't upstream yet
  - Related: rhbz#1031465 - CVE-2013-5607


author: Elio Maldonado <emaldona@redhat.com> 4.10.6-2
changelog:
  - Generic 32/64 bit platform detection (fix ppc64le build)
  - Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le


author: Elio Maldonado <emaldona@redhat.com> - 4.10.6-3
changelog:
  - Restore s390x related patch as it hasn't been applied upstream yet
  - Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269363 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption


author: Elio Maldonado <emaldona@redhat.com> - 4.11.0-1
changelog:
  - Rebase to NSPR 4.11
  - Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-3
changelog:
  - Make sure 32bit nss-pem always be installed with 32bit nss in
    multlib environment, patch by Kamil Dudka
  - Enable new algorithms supported by the new nss-softokn


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-4
changelog:
  - Utilize CKA_NSS_MOZILLA_CA_POLICY attribute, patch by Kai Engert
  - Backport changes adding SSL alert callbacks from upstream
  - Add nss-check-policy-file.patch from Fedora
  - Install policy config in /etc/pki/nss-legacy/nss-rhel7.config


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-5
changelog:
  - Switch default hash algorithm used by tools from SHA-1 to SHA-256
  - Avoid race condition in nssSlot_IsTokenPresent()
  - Enable SHA-2 and AES in pk12util
  - Disable RSA-PSS for now


author: Daiki Ueno <dueno@redhat.com> - 3.28.4-3
changelog:
  - Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
    https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9


author: Daiki Ueno <dueno@redhat.com> - 3.33.0-1
changelog:
  - Rebase to NSS 3.33
  - Disable TLS 1.3, temporarily disable failing gtests (Skip13Variants)
  - Temporarily disable race.patch and nss-3.16-token-init-race.patch,
    which causes a deadlock in newly added test cases
  - Remove upstreamed patches: moz-1320932.patch,
    nss-tstclnt-optspec.patch,
    nss-1334976-1336487-1345083-ca-2.14.patch, nss-alert-handler.patch,
    nss-tools-sha256-default.patch, nss-is-token-present-race.patch,
    nss-pk12util.patch, nss-ssl3gthr.patch, and nss-transcript.patch


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-3
changelog:
  - Decrease the iteration count of PKCS#12 for compatibility with Windows
  - Fix deadlock when a token is re-inserted while a client process is running


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-7
changelog:
  - Backport upstream fix for CVE-2018-12384
  - Remove nss-lockcert-api-change.patch, which turned out to be a
    mistake (the symbol was not exported from libnss)


author: Daiki Ueno <dueno@redhat.com> - 3.43.0-7
changelog:
  - Don't override date in man-pages
  - Revert the change to use XDG basedirs (mozilla#818686)
  - Enable SSL2 compatible ClientHello by default
  - Disable SSL3 and RC4 by default


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-1
changelog:
  - Rebase to NSS 3.44
  - Restore fix-min-library-version-in-SSLVersionRange.patch to keep
    SSL3 supported in the code level while it is disabled by policy
  - Skip TLS 1.3 tests under FIPS mode


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-2
changelog:
  - Skip sysinit gtests properly
  - Fix shell syntax error in tests/ssl/ssl.sh
  - Regenerate manual pages


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-3
changelog:
  - Disable TLS 1.3 under FIPS mode
  - Disable RSASSA-PKCS1-v1_5 in TLS 1.3
  - Fix post-handshake auth transcript calculation if
    SSL_ENABLE_SESSION_TICKETS is set


author: Bob Relyea <rrelyea@redhat.com> - 3.44.0-6
changelog:
  - back out out-of-bounds patch (patch for nss-softokn).
  - Fix segfault on empty or malformed ecdh keys (#1777712)


author: Bob Relyea <rrelyea@redhat.com> - 3.44.0-7
changelog:
  - Increase timeout on ssl_gtest so that slow platforms can complete when
     running on a busy system.


author: Bob Relyea <rrelyea@redhat.com> - 3.44.0-5
changelog:
  - Fix pkix name constraints processing to only process the common name if the
    certusage you are checking is IPSEC or SSL Server.


author: Daiki Ueno <dueno@redhat.com> - 3.53.1-3
changelog:
  - Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
  - Explicitly enable upgradedb/sharedb test cycles


author: Bob Relyea <rrelyea@redhat.com> - 3.67.0-3
changelog:
  - revert sql default language in man pages
  - fix SEC_PKCS12EnableCipher so python-nss tests will still work.


author: Jakub Hrozek <jhrozek@redhat.com> 0.8.13-8
changelog:
  - Fix a potential use-after-free in nsswitch module
  - Resolves: rhbz#1036030 - New defect found in nss-pam-ldapd-0.8.13-4.el7


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-9
changelog:
  - Resolves: rhbz#1420576 - 'systemctl status nslcd' always returns FAILURE
                             status even though the service is stopped with
                             'systemctl stop nslcd


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-10
changelog:
  - Resolves: rhbz#1357493 - In RHEL 7, authentication failing when using
                             nslcd + pam_ldap where user has different in
                             nis/passwd and ldap.


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-11
changelog:
  - Resolves: rhbz#1497761 - Incorrect password tries to bind to all domain
                             controllers and locks user out


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-12
changelog:
  - Resolves: rhbz#1425790 - Unable to authenticate with 64 character password
                             using nss-pam-ldapd


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-14
changelog:
  - Resolves: rhbz#1288429 - /etc/tmpfiles.d/nss-pam-ldapd.conf shipped when
                             /etc/tmpfiles.d is reserved for the local
                             administrator


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-15
changelog:
  - Resolves: rhbz#1204202 - fix doc to describe actual uri format in
                             nslcd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-16
changelog:
  - Resolves: rhbz#1151675 - NSLCD WRAPS LDAP USER UIDNUMBER > 2^31 SO UID
                             IS WRONG (AND A NEGATIVE NUMBER)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-18
changelog:
  - Resolves: rhbz#1612543 - Password expiration notification is not sent if
                             the LDAP user doesn't have the objectClass shadowAccount.


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-20
changelog:
  - Resolves: rhbz#1714763 - [RHEL7] Correct startup dependencies for cgcred service for nslcd/LDAP clients


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-21
changelog:
  - Resolves: rhbz#1618558 - AD authentication on RHEL using nslcd fails
                             with error "pwdLastSet: password changed in the
                             future"


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-22
changelog:
  - Do not enable the password expiration controls by default
  - Document the option and its default
  - Resolves: rhbz#1612543 - Password expiration notification is not sent
                             if the LDAP user doesn't have the objectClass
                             shadowAccount.


author: Tomas Halman <thalman@redhat.com> - 0.8.13-22.1
changelog:
  - Extend password buffer length to allow modern hashes
  - Resolves: rhbz#1819648 - Truncated shadowPasswords in nslcd 0.8.13


author: Tomas Halman <thalman@redhat.com> - 0.8.13-23
changelog:
  - Extend password buffer length to allow modern hashes
  - Resolves: rhbz#1773506 - Truncated shadowPasswords in nslcd 0.8.13


author: Tomas Halman <thalman@redhat.com> - 0.8.13-24
changelog:
  - Extend dns name buffers to allow long dns names
  - Resolves: rhbz#1685610 - nslcd aborts when rhost is large and UseDNS is true


author: Tomas Halman <thalman@redhat.com> - 0.8.13-24
changelog:
  - Unify password expire message
  - Resolves: rhbz#1771439 - Different password expiration message for LDAP users
                             with and without ObjectClass ShadowAccount


author: Nalin Dahyabhai <nalin@redhat.com> 0.8.12-4
changelog:
  - in %post, attempt to rewrite any instances of "map group uniqueMember ..."
    to be "map group member ..." in nslcd.conf, as the attribute name changed
    in 0.8.4 (via freeipa ticket #3589)


author: Nalin Dahyabhai <nalin@redhat.com> 0.8.13-4
changelog:
  - compile nslcd/log.c with -fPIC instead of the current hardened-build default
    of -fPIE, which doesn't seem to avoid relocations for its thread-local
    variables on s390x (#1002834)


author: Jakub Hrozek <jhrozek@redhat.com> 0.8.13-6
changelog:
  - Change the error messages the tests expect to those printed on RH based
    systems
  - Resolves: rhbz#1044482


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-14
changelog:
  - Pick up upstream freebl patch for CVE-2015-2730
  - Check for P == Q or P ==-Q before adding P and Q


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-2
changelog:
  - Update to NSS 3.28.3
  - Remove upstreamed patches for the previous FIPS validation
  - Package lowkeyi.h and lowkeyti.h in freebl-devel
  - Pick up a patch in the Fedora package to fix build issue


author: Bob Relyea <rrelyea@redhat.com> - 3.28.3-4
changelog:
  - include new PKCS12 NSS specific mechanisms.
  - alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
  - add RSA PSS oid to decrypting PKCS #5 key blobs.
  - move ec public key check from softokn to freebl so apps like Java can benefit.


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-5
changelog:
  - fix login handling for FIPS slots, patch from rhbz#1390154
  - backport upstream fix for CVE-2017-5462 (DRBG leak)


author: Ilya Okomin <ilya.okomin@oracle.com> - 3.28.3-8.0.1
changelog:
  - Add fips140-2 DSA Known Answer Test fix [Orabug 26679337]
  - Add fips140-2 ECDSA/RSA/DSA Pairwise Consistency Test fix [Orabug 26617814],
    [Orabug 26617879], [Orabug 26617849]
  - Add fips140-2 ECDSA Known Answer Test fix [Orabug 26679353]


author: Daiki Ueno <dueno@redhat.com> - 3.33.0-1
changelog:
  - Update to NSS 3.33.0
  - Remove upstreamed patches: nss-softokn-basicutil-dependency.patch,
    nss-softokn-pss-modulus-bits.patch, nss-softokn-pkcs12-sha2.patch,
    nss-softokn-pkcs12-rsa-pss.patch,
    nss-softokn-ec-derive-pubkey-check.patch, and nss-softokn-fix-drbg.patch


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-0.1.beta
changelog:
  - Update to NSS 3.36 BETA
  - Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
  - Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
  - Remove upstreamed nss-softokn-fix-ecc-post.patch


author: EL Errata <el-errata_ww@oracle.com> - 3.44.0-5.0.1
changelog:
  - Add fips140-2 DSA Known Answer Test fix [Orabug: 26679337]
  - Add fips140-2 ECDSA/RSA/DSA Pairwise Consistency Test fix [Orabug: 26617814],
    [Orabug: 26617879], [Orabug: 26617849]


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-3
changelog:
  - include patches for CVE-2020-6829, CVE-2020-12400,
    and CVE-2020-12401 from upstream (ECC constant time issues).
  - include patches for CVE-2020-12403 from upstream
    (CHACHA issues).
  - include self-tests for kdfs and cmac.


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-6
changelog:
  - turn of ALTIVEC instruction for powerpc because they require
    power8 and we need to support power7 on RHEL7 still.
  - Fix typo in measure.
  - Make sure only 2048 and greater primes are used in FIPS mode
    for dh.


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-6
changelog:
  - turn off ALTIVEC instruction for powerpc because they require
    power8 and we need to support power7 on RHEL7 still.
  - Fix typo in measure.
  - Make sure only 2048 and greater primes are used in FIPS mode
    for dh.


author: Bob Relyea <rrelyea@redhat.com> - 3.67.0-3
changelog:
  - Include softoken specific patches required by the NSS 3.67
    release including:
  -  sdb timeout fixes.
  -  coverity patch.
  -  fixing private key macing


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-1
changelog:
  - Rebase to NSS 3.79.
  - add reader/writer lock on encrypted attribute access
  - skip attribute verification on attributes with default values
  - don't export trust objects if they are default trust objects from dbm


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-1
changelog:
  - Rebase to nss-util from nss 3.21
  - Resolves: Bug 1297940 - Rebase RHEL 7.3 to NSS-util 3.21 in preparation for Firefox 45


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-4
changelog:
  - Manual merge from the rhel-7.2 branch
  - Fix one alias for naming compatibility with prior release
  - Remove an unused patch


author: Daiki Ueno <dueno@redhat.com> - 3.21.3-1
changelog:
  - Rebase to nss-3.21.3
  - Remove patch for CVE-2016-1950, which is included in the release
  - Related: Bug 1347908


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-19
changelog:
  - don't generate weak control key for resolver (CVE-2014-9293)
  - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
  - fix buffer overflows via specially-crafted packets (CVE-2014-9295)
  - don't mobilize passive association when authentication fails (CVE-2014-9296)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-20
changelog:
  - validate lengths of values in extension fields (CVE-2014-9297)
  - drop packets with spoofed source address ::1 (CVE-2014-9298)
  - reject packets without MAC when authentication is enabled (CVE-2015-1798)
  - protect symmetric associations with symmetric key against DoS attack (CVE-2015-1799)
  - fix generation of MD5 keys with ntp-keygen on big-endian systems (CVE-2015-3405)
  - add option to set Differentiated Services Code Point (DSCP) (#1202828)
  - add nanosecond support to SHM refclock (#1117702)
  - allow creating all SHM segments with owner-only access (#1122012)
  - allow different thresholds for forward and backward step (#1193154)
  - allow symmetric keys up to 32 bytes again (#1191111)
  - don't step clock for leap second with -x option (#1191122)
  - don't drop packets with source port below 123 (#1171640)
  - retry joining multicast groups (#1207014)
  - increase memlock limit again (#1053569)
  - warn when monitor can't be disabled due to limited restrict (#1191108)
  - use larger RSA exponent in ntp-keygen (#1191116)
  - fix crash in ntpq mreadvar command (#1180721)
  - move sntp kod database to allow SELinux labeling (#1082934)
  - fix typos in ntpd man page (#1195211)
  - improve documentation of restrict command (#1213953)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-22
changelog:
  - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
  - allow only one step larger than panic threshold with -g (CVE-2015-5300)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-24
changelog:
  - fix crash with invalid logconfig command (CVE-2015-5194)
  - fix crash when referencing disabled statistic type (CVE-2015-5195)
  - don't hang in sntp with crafted reply (CVE-2015-5219)
  - don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
    CVE-2015-7702)
  - fix memory leak with autokey (CVE-2015-7701)
  - don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
  - don't crash in ntpq with crafted packet (CVE-2015-7852)
  - check key ID in packets authenticated with symmetric key (CVE-2015-7974)
  - fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)
  - don't allow spoofed packets to demobilize associations (CVE-2015-7979,
    CVE-2016-1547)
  - don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
  - fix infinite loop in ntpq/ntpdc (CVE-2015-8158)
  - fix resetting of leap status (#1242553)
  - extend rawstats log (#1242877)
  - report clock state changes related to leap seconds (#1242935)
  - allow -4/-6 on restrict lines with mask (#1304492)
  - explain synchronised state in ntpstat man page (#1309594)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-25
changelog:
  - don't allow spoofed packet to enable symmetric interleaved mode
    (CVE-2016-1548)
  - check mode of new source in config command (CVE-2016-2518)
  - make MAC check resilient against timing attack (CVE-2016-1550)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-25.el7_3.1
changelog:
  - don't limit rate of packets from sources (CVE-2016-7426)
  - don't change interface from received packets (CVE-2016-7429)
  - fix calculation of root distance again (CVE-2016-7433)
  - require authentication for trap commands (CVE-2016-9310)
  - fix crash when reporting peer event to trappers (CVE-2016-9311)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-28
changelog:
  - fix buffer overflow in datum refclock driver (CVE-2017-6462)
  - fix crash with invalid unpeer command (CVE-2017-6463)
  - fix potential crash with invalid server command (CVE-2017-6464)
  - add Spectracom TSYNC driver (#1491797)
  - fix initialization of system clock status (#1493452)
  - fix typos in ntpd man page (#1420453)
  - use SHA1 request key by default (#1442083)
  - use network-online target in ntpdate and sntp services (#1466947)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-29
changelog:
  - fix CVE-2016-7429 patch to restore default ttl configuration (#1550637)
  - fix buffer overflow in parsing of address in ntpq and ntpdc (CVE-2018-12327)
  - fix crash in parsing of received address in ntpq (#1616250)
  - avoid reading freed memory after disabling netlink socket (#1555401)
  - don't disable netlink socket on ENOBUFS error (#1555413)
  - replace ntpstat with shell script using ntpq and supporting chrony (#1592871)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-29.el7_8.2
changelog:
  - don't update transmission time on invalid response (CVE-2020-11868)
  - randomize transmit timestamp in client requests (CVE-?, #1813787)


author: Jan Setje-Eilers <jan.setjeeilers@oracle.com> 4.2.6p5-29.0.3.el7_8.2
changelog:
  - Add OL specific patch to allow suppression of real-time-clock updates despite running ntpd [Orabug: 33793295]


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-3
changelog:
  - Update License
  - Fix rpmlint warnings
  - Increase verbosity level of tests
  - Disable python 3 build
  - Fix rhbz#987032 (SCL related: wrong shebang)


author: Ade Lee <alee@redhat.com> - 1.0.1-10
changelog:
  - Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch
  - reverted the previous change.  ppc64le now removed from ExcludeArch


author: Ade Lee <alee@redhat.com> 1.0.2-1
changelog:
  - Allow passwords to be retrieved post-init phase
  - Fix null termination issue on returned stored passwords


author: Ade Lee <alee@redhat.com> 1.0.3-5.1
changelog:
  - Resolves: rhbz#1503753 - nuxwdog is cutting off long ExeArgs
  - Resolves: rhbz#1534030 - add option to set process uid


author: Dogtag Team <pki-devel@redhat.com> 1.0.5-1
changelog:
  - Resolves: rhbz #1509040 - nuxwdog spec file has outdated
    source for tarballs (dmoluguw)
  - Rebase to upstream nuxwdog 1.0.5-1


author: Edward Leung <edward.leung@oracle.com> - 1.9-2.el7
changelog:
  - Added Build requirement for libuuid-devel (Edward Leung)  
  - Bump release: rebuild with libuuid-devel (Lukas Lemes)


author: Junxiao Bi <junxiao.bi@oracle.com> - 1.8.6-6.el7
changelog:
  - vendor: rhel: remove redhat-lsb* dependency (Junxiao Bi)  
  - scandisk: remove unnecessary scansysfs op (Junxiao Bi)


author: Junxiao Bi <junxiao.bi@oracle.com> - 1.8.6-8.el7
changelog:
  - BUILDINFO: commit=f0e130273b7eed12385e1d0aa7704b414bceeff0
  - vendor: rhel5: fix build failure (Junxiao Bi)  
  - tunefs.ocfs2: fix double free bug (Junxiao Bi)  
  - fsck.ocfs2: the members of 'o2fsck_state' need to be freed at the end of main() (Jun Piao)  
  - fsck.ocfs2: fix the mistake of clearing valid flag in o2fsck_check_blocks() (Jun Piao)  
  - mkfs.ocfs2: disable append-dio feature by default (Junxiao Bi)  
  - fsck.ocfs2: support append direct io incompat feature (Joseph Qi)  
  - tunefs.ocfs2: support append direct io incompat feature (Joseph Qi)  
  - mkfs.ocfs2: support append direct io incompat feature (Joseph Qi)  
  - mkfs.ocfs2: clean up deadcode in is_cluster_info_valid() (Jun Piao)  
  - fsck.ocfs2: return error if o2fsck_check_journals fails (Joseph Qi)  
  - ocfs2: fix cluster unlocked if journal is replayed (Joseph Qi)  
  - fsck.ocfs2: close ost_fs in case of check superblock fails (Joseph Qi)  
  - mkfs.ocfs2: fix a potential segment fault in main() (Jun Piao)  
  - fsck.ocfs2: clean up useless assignment in dup_insert() (piaojun)  
  - o2info: clean up useless branch in o2info_append_task() (piaojun)  
  - tunefs.ocfs2: fix the parameter misuse of tunefs_dlm_lock (Weiwei Wang)  
  - debugfs.ocfs2: encode 'M' lockname with generation only for sysfile (piaojun)  
  - mkfs.ocfs2: fix memory leak problems in main() (piaojun)  
  - tunefs.ocfs2: fix memory leak problems in tunefs_journal_check() and parse_options() (piaojun)  
  - o2image: fix a memory leak problem in ocfs2_image_free_bitmap() (piaojun)  
  - debugfs.ocfs2: fix NULL pointer dereference risk in dump_dir_entry (Joseph Qi)  
  - o2image: clean up unused variable 'install_flag' in o2image_initialize() (piaojun)  
  - libocfs2: close fd if read fails in create_generation (Joseph Qi)  
  - o2image: Free 'filepath' before return in prompt_image_creation() (Jun Piao)  
  - libocfs2: fix risk of using uninitialized variables (Joseph Qi)  
  - mkfs.ocfs2: fix command line segfault (Valentin Vidic)  
  - debugfs.ocfs2: fix command line segfault (Valentin Vidic)  
  - Update udev rule for newer kernels (Valentin Vidic)  
  - ocfs2-tools: add support for vd devices (Valentin Vidić)  
  - fsck.ocfs2: Free 'ci' in each cycle of for loop in check_journal_walk (Jun Piao)


author: Junxiao Bi <junxiao.bi@oracle.com> - 1.8.6-9.el7
changelog:
  - BUILDINFO: commit=8b8e9d3b017f6e9bb23bd137878669831eec0f4d
  - o2cb.service: drop unknown lvalue ExecRestart (Junxiao Bi)


author: Junxiao Bi <junxiao.bi@oracle.com> - 1.8.6-12.el7
changelog:
  - ocfs2-tools: to support aarch64 on ol8 (Shuning Zhang)  [Orabug: 30317888] 
  - tunefs.ocfs2: read journal superblock even for online operations (Ashish Samant)  [Orabug: 28804934] 
  - ocfs2-tools: added spec rhel8 for jenkins (Shuning Zhang)  [Orabug: 29292163] 
  - ocfs2-tools: added support for rhel8 rpm package build (Shuning Zhang)  [Orabug: 29292163] 
  - ocfs2-tools: fix the conflict of gcc option in Makefile (Shuning Zhang)  [Orabug: 29292163] 
  - tunefs.ocfs2: fix format security warning (Shuning Zhang)  [Orabug: 29292163] 
  - o2image: fix unknown type name 'loff_t' (Shuning Zhang)  [Orabug: 29292163] 
  - mounted.ocfs2: use <sys/sysmacros.h> include for makedev (Valentin Vidic)  [Orabug: 29292163] 
  - fsck.ocfs2: fix compile error when glibc upgrade (Gang He)  [Orabug: 29292163] 
  - ocfs2-libocfs2: fix unknown type name 'loff_t' (Shuning Zhang)  [Orabug: 29292163]


author: Junxiao Bi <junxiao.bi@oracle.com> - 1.8.6-10.el7
changelog:
  - ocfs2-tools: added spec rhel8 for jenkins (Shuning Zhang)  [Orabug: 29292163] 
  - ocfs2-tools: added support for rhel8 rpm package build (Shuning Zhang)  [Orabug: 29292163] 
  - ocfs2-tools: fix the conflict of gcc option in Makefile (Shuning Zhang)  [Orabug: 29292163] 
  - tunefs.ocfs2: fix format security warning (Shuning Zhang)  [Orabug: 29292163] 
  - o2image: fix unknown type name 'loff_t' (Shuning Zhang)  [Orabug: 29292163] 
  - mounted.ocfs2: use <sys/sysmacros.h> include for makedev (Valentin Vidic)  [Orabug: 29292163] 
  - fsck.ocfs2: fix compile error when glibc upgrade (Gang He)  [Orabug: 29292163] 
  - ocfs2-libocfs2: fix unknown type name 'loff_t' (Shuning Zhang)  [Orabug: 29292163]


author: Ashish Samant <ashish.samant@oracle.com> - 1.8.6-11.el7
changelog:
  - tunefs.ocfs2: read journal superblock even for online operations (Ashish
    Samant)  [Orabug: 28804934]


author: Gautham Ananthakrishna <gautham.ananthakrishna@oracle.com> - 1.8.6-15.el7
changelog:
  - fsck.ocfs2: Avoid taking all available physical pages for cache (Gautham
    Ananthakrishna)  [Orabug: 34497901]


author: Junxiao Bi <junxiao.bi@oracle.com> - 1.8.6-1
changelog:
  - mkfs.ocfs2: fix default slots number in man doc [Orabug 20443780]
  - o2cb: fix systemd o2cb.service failure [Orabug 21071245]


author: Junxiao Bi <junxiao.bi@oracle.com> - 1.8.6-2.el7
changelog:
  - tools: up to 1.8.6-2 (Junxiao Bi)  
  - ocfs2-tools: mount not showing fully resolved path (Srinivas Eeda)


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.2-2
changelog:
  - add missing requires(post) on killall, which we use to poke the message
    bus daemon to get it to reload its configuration, spotted by rcritten


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.3-2
changelog:
  - use %systemd_postun_with_restart instead of plain old %systemd_postun,
    because we can be restarted in the %postun


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.4-1
changelog:
  - add an [Install] section containing WantedBy=sysinit.target to the systemd
    unit file (#963722), allowing it to actually be "enabled"


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.5-1
changelog:
  - add man(5) pages for the configuration files that we include which get
    included by others, just to be tidy (#884552)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.31.5-4
changelog:
  - correctly check the error returned from getpwnam_r(), so that we don't
    miss an ERANGE error (#1098616, part of #1108398)
  - add a note to pam_oddjob_mkhomedir's manual pointing to where the
    configuration would actually go (part of #1108398)
  - stop overriding the system-wide UMASK default in our default
    oddjobd-mkhomedir.conf file (#995097,#1123860), and stop using its
    proprocessor-input file as a reference, since we're patching it now


author: Jakub Jelen <jjelen@redhat.com> - 3.5-2
changelog:
  - icsf token does not validate data length for verify operation for ECDSA (#1344383)
  - Create lock and log directories from opencryptoki (#1343671)
  - Create log directory with appropriate permissions (#1185421)
  - Added support for rc=8, reasoncode=2028 in icsf token (#1348803)
  - Fix for session handle not set in session issue (#1348804)
  - Fix memory leak in icsf specific code


author: Sinny Kumari <skumari@redhat.com> - 3.5-6
changelog:
  - RHBZ#1371095: coverity scan fixes - memory leak and variable initialization
  - RHBZ#1372188: fix illegal instruction on pkcscca tool


author: Sinny Kumari <skumari@redhat.com> - 3.6.2-1
changelog:
  - Rebase opencryptoki to 3.6.2
  - Remove patches from spec file applied during 3.5 release
  - Resolves: #1391559, #1380784, #1417905


author: Sinny Kumari <skumari@redhat.com> - 3.10.0-1
changelog:
  - Rebase to 3.10.0
  - Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
  - Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
  - Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0


author: Than Ngo <than@redhat.com> - 3.11.0-1
changelog:
  - Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
  - Resolves: #1641027 - enhanced IBM z14 functions
  - Resolves: #1641026 - support m_*Single functions from ep11 lib
  - Resolves: #1641025 - rebase to 3.11.0
  - Resolves: #1519386 - use CPACF hashes in ep11 token
  - Resolves: #1373833 - lock file directory is %ghost now


author: Than Ngo <than@redhat.com> - 3.11.0-3
changelog:
  - Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key


author: Jakub Jelen <jjelen@redhat.com> 3.4.1-3
changelog:
  - Few more issues reported by Coverity
  - Fix Segfault when trace in enabled in api_interface.c
  - Fix the misleading indentation
  - Fix memory leak by closing the lock file descriptor in C_Final


author: Paul Wouters <pwouters@redhat.com> - 1.4.6-2
changelog:
  - Changed conf.xml to reference softhsm at /usr/lib64/pkcs11/libsofthsm2.so
  - Updated Requires: to softhsm >= 2.0.0b1-2


author: Dan Horák <dhorak@redhat.com> - 3.7.0-1
changelog:
  - rebased to 3.7.0 (#1507619)
  - fix test-suite run under root (#1267928)
  - Resolves: #1507619, #1267928


author: Matus Honek <mhonek@redhat.com> - 2.4.44-5
changelog:
  - fix CVE-2017-9287 openldap: Double free vulnerability in servers/slapd/back-mdb/search.c (#1458210)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-10
changelog:
  - Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
  - Fix issues in MozNSS compatibility layer (#1400578)
    + Force write file with fsync to avoid race conditions
    + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
    + Allow missing cert and key which is a valid usecase
    + Create extraction folder only in /tmp to simplify selinux rules
    + Fix Covscan issues


author: Matus Honek <mhonek@redhat.com> - 2.4.44-11
changelog:
  - MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
    + Fix a possible invalid dereference (covscan)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-12
changelog:
  - MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
    + Warn just before use of a PIN about key file extraction


author: Matus Honek <mhonek@redhat.com> - 2.4.44-13
changelog:
  - MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
  - MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
  - MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-17
changelog:
  - MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
  - Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
  - MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-18
changelog:
  - MozNSS Compat. Layer: Make log messages more clear (#1543955)
  - Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-22
changelog:
  - Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)


author: Simon Pichugin <spichugi@redhat.com> - 2.4.44-23
changelog:
  - Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)


author: Simon Pichugin <spichugi@redhat.com> - 2.4.44-25
changelog:
  - Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation (#2040539)
  - Fix CVE-2020-25710 openldap: assertion failure in CSN normalization with invalid input (#2040538)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-10
changelog:
  - fix: slapd fails to start on boot (#1315958)
  - fix: id_query option is not available after rebasing openldap to 2.4.39 (#1311832)
  - Include sha2 module (#1292568)
  - Compile AllOp together with other overlays (#990893)
  - Missing mutex unlock in accesslog overlay (#1261003)
  - ITS#8337 fix missing olcDbChecksum config attr (#1292590)
  - ITS#8003 fix off-by-one in LDIF length (#1292619)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-12
changelog:
  - fix: slapd crash in do_search (#1316450)
  - fix: Setting olcTLSProtocolMin does not change supported protocols (#1249093)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-13
changelog:
  - fix: Bad log levels in check_password module
  - fix: We can't search expected entries from LDAP server
  - fix: OpenLDAP ciphersuite parsing doesn't match OpenSSL ciphers man page
    + Add TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 to list of ciphers
    + Add DH cipher string parsing option
    + Correct handling kECDH ciphers with aRSA or aECDSA


author: Jan Synáček <jsynacek@redhat.com> - 0.4.2-3
changelog:
  - Correctly fill FSCreationClassName and FSName
  - Replace thread-unsafe functions
  - Resolves: rhbz#1042843 rhbz#1050841


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.4.2-4
changelog:
  - Fix service methods report success before the action is actually finished
  - Add description to service methods
  - Fan provider made thread-safe
  - Resolves: rhbz#1049819 rhbz#1049816 rhbz#1031650


author: Radek Novacek <rnovacek@redhat.com> 0.2.2-3
changelog:
  - Fix LMI_IPElementSettingData refering bridging master setting instead of slave setting
  - Support connections that has interface-name option specified
  - Fix that bond slave names are not going above 2
  - allow virtual device name change for bonds
  - Resolves: #1064215, #1064324, #1064280, #1064334


author: Radek Novacek <rnovacek@redhat.com> 0.2.2-4
changelog:
  - Fix IPv6Type property of LMI_IPAssignmentSettingData class for DHCPv6
  - React to IP configuration change
  - Resolves: #1066853, #1069169


author: Jan Safranek <jsafrane@redhat.com> - 0.7.0-8
changelog:
  - Added dist tag to Release.
  - Removed unimplemented classed from MOF files (#1042743).
  - Fixed LMI_MDRAIDElementCapabilities.GetInstance call (#1043932).


author: Jan Safranek <jsafrane@redhat.com> - 0.7.1-2
changelog:
  - Fix CreateOrModifyStoragePool exception (#1054144).
  - Fixed reloading of blivet after mount (#1054177).


author: Jan Safranek <jsafrane@redhat.com> - 0.7.1-3
changelog:
  - The provider now removes physical volume metadata from all member devices
    when a volume group is destroyed (#1057692).
  - Fixed listing of mounts of MD RAID volumes (#1057666).


author: Peter Hatina <phatina@redhat.com> - 0.9-21
changelog:
  - CWD is by default appended in search path
  - introduced CLI option --cwd-first-in-path which prepends
    CWD in search path
  - Related: #1072252


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.5-3
changelog:
  - Drop obex_test program, as it is just for testing purposes
    and has some problems with multiple stack overflows etc.
    Resolves: #521663


author: Tomas Hozza <thozza@redhat.com> - 1.5-6
changelog:
  - changing not working Source0 URL and some minor changes in %prep
  - new source archive openobex-1.5.0-Source.zip


author: Jakub Jelen <jjelen@redhat.com> - 0.16.0-2.20170227git
changelog:
  - Add support for CardOS 5.3
  - Fix coverity issues
  - Provide simple tool to swith PKCS#11 library in NSS DB


author: Jakub Jelen <jjelen@redhat.com> - 0.16.0-6.20170227git
changelog:
  - Use label from certificate DN if there is none (#1448555)
  - Use Cardholder name in the token label (#1449740)
  - Avoid infinite loop when reading CAC cards (#1473335)
  - Workaround for CAC Alt tokens (#1473418)


author: Jakub Jelen <jjelen@redhat.com> - 0.16.0-8.20170227git
changelog:
  - Copy labels from certificate (#1448555)
  - Avoid infinite loop in CAC driver when reading non-CAC cards (#1473335)
  - Properly parse Simple TLV structures in CAC driver (#1473418)


author: Jakub Jelen <jjelen@redhat.com> - 0.16.0-9.20170227git
changelog:
  - make ECPoint behavior standards compliant by default (#1562572)
  - allow mechanism to be specified in hexadecimal (#1562572)
  - Disable pinpad by default (#1547117, #1547744)


author: Jakub Jelen <jjelen@redhat.com> - 0.19.0-1
changelog:
  - Rebase to new upstream release (#1656791)
    - Add Support for HID Crescendo 144K (#1612372)
    - Add Support for CAC Alt tokens (#1645581)
    - Fix usage detection from certificates (#1672898)
    - Fix security issues:
      - CVE-2018-16391
      - CVE-2018-16392
      - CVE-2018-16393
      - CVE-2018-16418
      - CVE-2018-16419
      - CVE-2018-16420
      - CVE-2018-16421
      - CVE-2018-16422
      - CVE-2018-16423
      - CVE-2018-16426
      - CVE-2018-16427


author: Martin Preisler <mpreisle@redhat.com> - 1.2.12-1
changelog:
  - Upgrade to the latest upstream release
  - improved HTML report by referencing links
  - fixed validity errors in ARF files
  - fixed CVE parsing
  - fixed injecting xccdf:check-content-ref references in ARF results
  - fixed oscap-docker incompliance reporting (#1387248)
  - fixed oscap-docker man page (#1387166)


author: Martin Preisler <mpreisle@redhat.com> - 1.2.13-1
changelog:
  - Upgrade to the latest upstream release
  - Added --thin-results CLI override to oscap xccdf eval
  - Added --without-syschar CLI override to oscap xccdf eval
  - Remediations are not filtered by applicability
  - Fixed segmentation faults in XCCDF and OVAL processing
  - Added a warning on generating an ARF from XCCDF 1.1


author: Jan Černý <jcerny@redhat.com> - 1.2.14-1
changelog:
  - Upgrade to the latest upstream release
  - Detailed information about ARF files in 'oscap info'
  - Generating remediation scripts from ARF
  - HTML report UX improvements
  - Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
  - Fixed systemd probes crashes inside containers (#1431186)
  - Fixed output on terminals with white background (#1365911)
  - Error handling in oscap-vm (#1391754)
  - Fixed SCE stderr stalling (#1420811)
  - Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
  - Fixed segmentation faults in RPM probes (#1414303, #1414312)
  - Fixed missing header in result-oriented Ansible remediations


author: Martin Preisler <mpreisle@redhat.com> - 1.2.14-2
changelog:
  - RPM probes to return not applicable on non-rpm systems (#1447629)
  - fixed sysctl tests on s390x architecture (#1447649)
  - Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)


author: EL Errata <el-errata_ww@oracle.com> - 1.2.14-2.0.1
changelog:
  - [Orabug 24285365] fix linux family check for Oracle in cpe oval configuration file
  - [Orabug 22143829] add Oracle Linux product


author: Jan Černý <jcerny@redhat.com> - 1.2.15-1
changelog:
  - upgrade to the latest upstream release
  - short profile names can be used instead of long IDs
  - new option --rule allows to evaluate only a single rule
  - new option --fix-type in "oscap xccdf generate fix" allows choosing
    remediation script type without typing long URL
  - "oscap info" shows profile titles
  - OVAL details in HTML report are easier to read
  - HTML report is smaller because unselected rules are removed
  - HTML report supports NIST 800-171 and CJIS
  - remediation scripts contain headers with useful information (#1439813)
  - remediation scripts report progress when they run
  - basic support for Oracle Linux (CPEs, runlevels)
  - remediation scripts can be generated from datastreams that contain
    multiple XCCDF benchmarks
  - basic support for OVAL 5.11.2 (only schemas, no features)
  - enabled offline RPM database in rpminfo probe
  - added Fedora 28 CPE
  - fixed oscap-docker with Docker >= 2.0
  - fixed behavior of sysctl probe to be consistent with sysctl tool
  - fixed generating remediation scripts
  - severity of tailored rules is not discarded
  - fixed errors in RPM probes initialization
  - oscap-docker shows all warnings reported by oscap
  - fixed pkgconfig file


author: Matěj Týč <matyc@redhat.com> - 1.2.16-1
changelog:
  - upgrade to the latest upstream release
  - moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies


author: Matěj Týč <matyc@redhat.com> - 1.2.16-2
changelog:
  - moved oscap-docker to newly created openscap-containers.
  - moved man of oscap-chroot to oscap-scanner.


author: Matěj Týč <matyc@redhat.com> - 1.2.17-6
changelog:
  - Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
  - Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).


author: Jan Černý <jcerny@redhat.com> - 1.2.17-10
changelog:
  - Fix segfault in systemdunitdependency probe (RHBZ#1478285)
  - Build and ship HTML manual (RHBZ#1465661)
  - Fix oscap-ssh with --sudo (RHBZ#1803114)
  - Change category of verbose message (RHBZ#1640522)
  - Fix segfault in CVRF module (RHBZ#1642283)


author: David Sloboda <david.x.sloboda@oracle.com> - 1.2.17-11.0.1
changelog:
  - Remove subpkg openscap-containers and its deps [Orabug: 30525588]
  - Added bug30138845-remove-upstream-references.patch [Orabug: 30138845]
  - Obsolete openscan-containers < 1.2.17-9.0.1 for openscap-utils [Orabug: 31126771]


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 1.2.17-13.0.1
changelog:
  - Add OL8 CPE name to OpenSCAP dictionary [Orabug: 31956860]
  - Remove subpkg openscap-containers and its deps [Orabug: 30525588]
  - Added bug30138845-remove-upstream-references.patch [Orabug: 30138845]
  - Obsolete openscan-containers < 1.2.17-9.0.1 for openscap-utils [Orabug: 31126771]


author: Marcus Burghardt <maburgha@redhat.com> - 1.2.17-14
changelog:
  - Fix memory leaks in probe-api (RHBZ#1861793)
  - Prevent duplicate variables in Ansible Playbooks (RHBZ#1944683)
  - Fix trailing whitespace in Ansible Playbooks
  - Fix inconsistent result from security_patches_up_to_date (RHBZ#1858502)
  - Fix multiple segfaults and broken test (RHBZ#1911999)
  - Improve --stig-viewer output when there is no 1:1 connection between rules
  - Lower memory limits and improve their checking (RHBZ#1932833)


author: EL Errata <el-errata_ww@oracle.com> - 1.2.17-15.0.1
changelog:
  - Fix for image tests failing with explicit entrypoint [Orabug: 33993652]
  - Replace argument --disable-atomic with --enable-atomic [JIRA: OLDIS-82]
  - Change logic to silently use disabled atomic by default [JIRA: OLDIS-82]
  - Backport non-atomic oscap-docker functionality [JIRA: OLDIS-82]
  - Add support for Oracle Linux container-cve for oscap-docker [JIRA: OLDIS-82]
  - Adapt some new code to python2 [JIRA: OLDIS-82]
  - Enable back openscap-containers [JIRA: OLDIS-82]
  - Add OL8 CPE name to OpenSCAP dictionary [Orabug: 31956860]
  - Remove subpkg openscap-containers and its deps [Orabug: 30525588]
  - Added bug30138845-remove-upstream-references.patch [Orabug: 30138845]
  - Obsolete openscan-containers < 1.2.17-9.0.1 for openscap-utils [Orabug: 31126771]


author: Matěj Týč <matyc@redhat.com> - 1.2.17-1
changelog:
  - Rebased to the 1.2.17 upstream release (#1564900).
  - Fixed the offline scanning (#1547107, #1556988).
  - HTML Guide user experience improvements.
  - New options in HTML report "Group By" menu.
  - oscap-ssh supports --oval-results.
  - For more news, see https://github.com/OpenSCAP/openscap/releases/tag/1.2.17


author: Jan Černý <jcerny@redhat.com> - 1.2.17-3
changelog:
  - Fix unwanted recursion into mounted remote filesystems (#1655943)
  - Evaluate SCAP 1.3 datastreams without downloading remote data (#1709423)


author: EL Errata <el-errata_ww@oracle.com> - 1.2.17-9.0.1
changelog:
  - Remove subpkg openscap-containers and its deps [Orabug: 30525588]
  - Added bug30138845-remove-upstream-references.patch [Orabug: 30138845]


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1:2.0.0-8
changelog:
  - Fix a heap-based buffer overflow vulnerability leading to
    remote code execution, CVE-2019-5544
    Resolves: #1781701


author: Doug Ledford <dledford@redhat.com> - 3.3.15-2
changelog:
  - More tweaks to systemd setup (proper scriptlets now)
  - More tweaks to old sysv init script support (fix Requires)


author: Doug Ledford <dledford@redhat.com> - 3.3.15-5
changelog:
  - Drop the old sysv init script
  - Fix opensm-launch to restart opensm in a loop.  This works around the
    fact that systemd starts opensm so early that we very well might not have
    sync on the link yet.  Without the physical link being up, opensm exits
    immediately.  This way opensm will get restarted every 30 seconds until
    sync is active on the link or until the opensm service is stopped.
  - Always install the newly generated opensm-%{version}.conf as opensm.conf
  - Make the launch work properly in the event that no GUIDs are set and
    there are no numbered config files


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-1 + 0.10.3-1
changelog:
  - Rebase to openssh 7.4 and pam_ssh_agent_auth 0.10.3 (#1341754)
  - detach -cavs subpackage
  - enable seccomp filter for sandboxed child


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-2 + 0.10.3-1
changelog:
  - Fix coverity scan results
  - Adjust FIPS algorithms list (#1420910)
  - Revert problematic feature for chroot(#1418062)
  - Fix CBC weakness in released OpenSSH 7.5


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-3 + 0.10.3-1
changelog:
  - Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
  - Remove wrong coverity patches


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-5 + 0.10.3-1
changelog:
  - Fix the default key exchange proposal in FIPS mode (#1438414)
  - Remove another wrong coverity chunk to unbreak gsskex (#1438414)


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-15 + 0.10.3-2
changelog:
  - Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
  - Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
  - Do not segfault in audit code during cleanup (#1488083)
  - Add WinSCP 5.10+ compatibility (#1496808)
  - Clatch between ClientAlive and rekeying timeouts (#1480510)
  - Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
  - Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-18 + 0.10.3-2
changelog:
  - invalidate supplemental group cache used by temporarily_use_uid()
    when the target uid differs (#1583735)


author: Herbert van den Bergh <herbert.van.den.bergh@oracle.com> - 7.4p1-21.0.1
changelog:
  - enlarge format buffer size for certificate serial
    number so the log message can record any 64-bit integer without
    truncation (openssh bz#3012) [Orabug: 30448895]


author: Kaylin Devchand <kaylin.devchand@oracle.com> - 7.4p1-23.0.3
changelog:
  - add KEX_INITIAL flag [Orabug: 36160445] 
  - implement "strict key exchange" [CVE-2023-48795][Orabug: 36160445]


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-50
changelog:
  - improved fix for CVE-2015-1791
  - add missing parts of CVE-2015-0209 fix for corectness although unexploitable


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-52
changelog:
  - fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
  - fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
  - fix CVE-2015-3196 - race condition when handling PSK identity hint


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-55
changelog:
  - fix CVE-2016-0702 - side channel attack on modular exponentiation
  - fix CVE-2016-0705 - double-free in DSA private key parsing
  - fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-56
changelog:
  - fix 1-byte memory leak in pkcs12 parse (#1312112)
  - document some options of the speed command (#1312110)
  - fix high-precision timestamps in timestamping authority
  - enable SCTP support in DTLS 
  - use correct digest when exporting keying material in TLS1.2 (#1289620)
  - fix CVE-2016-0799 - memory issues in BIO_printf
  - add support for setting Kerberos service and keytab in
    s_server and s_client


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-57
changelog:
  - fix CVE-2016-2105 - possible overflow in base64 encoding
  - fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
  - fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
  - fix CVE-2016-2108 - memory corruption in ASN.1 encoder
  - fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-60
changelog:
  - fix CVE-2016-2177 - possible integer overflow
  - fix CVE-2016-2178 - non-constant time DSA operations
  - fix CVE-2016-2179 - further DoS issues in DTLS
  - fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
  - fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
  - fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
  - fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
  - fix CVE-2016-6304 - unbound memory growth with OCSP status request
  - fix CVE-2016-6306 - certificate message OOB reads
  - mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
    112 bit effective strength


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-4
changelog:
  - add support for additional STARTTLS protocols to s_client
    original backported patch by Robert Scheck (#1396209)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-12
changelog:
  - fix CVE-2017-3737 - incorrect handling of fatal error state
  - fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-13
changelog:
  - add S390x assembler updates
  - make CA name list comparison function case sensitive (#1548401)
  - fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
  - fix CVE-2018-0732 - large prime DH DoS of TLS client
  - fix CVE-2018-0737 - RSA key generation cache timing vulnerability
  - fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-16
changelog:
  - fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
  - fix incorrect error message on FIPS DSA parameter generation (#1603597)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-16.1
changelog:
  - use SHA-256 in FIPS RSA pairwise key check
  - fix CVE-2018-5407 - EC signature local timing side-channel key extraction


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-17
changelog:
  - use SHA-256 in FIPS RSA pairwise key check
  - fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
    timing side-channel key extraction


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-18
changelog:
  - fix CVE-2018-0734 - DSA signature local timing side channel
  - fix CVE-2019-1559 - 0-byte record padding oracle
  - close the RSA decryption One & done EM side channel (#1619558)


author: Ilya Okomin <ilya.okomin@oracle.com> 1.0.2k-21.0.1
changelog:
  - Fix DH self-test to add shared secret comparison [Orabug: 32467026]
  - Add DH support changes for SP 800-56A rev3 requirements [Orabug: 32467059]
  - Add TLS KDF self-test [Orabug: 32467193]
  - Add EC keys pairwise consistency test [Orabug: 32467059]


author: Ilya Okomin <ilya.okomin@oracle.com> 1.0.2k-21.0.3
changelog:
  - Revert "Fix DH self-test to add shared secret comparison" [Orabug: 32849192]
  - Revert "Add DH support changes for SP 800-56A rev3 requirements" [Orabug: 32849192]
  - Revert "Add TLS KDF self-test" [Orabug: 32849192]
  - Revert "Add EC keys pairwise consistency test" [Orabug: 32849192]


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-22
changelog:
  - fix CVE-2021-23841 openssl: NULL pointer dereference
    in X509_issuer_and_serial_hash()
  - fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
  - Resolves: rhbz#1932132, rhbz#1932126


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-23
changelog:
  - fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
  - Resolves: rhbz#1996054


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-24
changelog:
  - Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
  - Resolves: rhbz#2039993


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.0.2k-25
changelog:
  - Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Related: rhbz#2067160


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2j-2
changelog:
  - deprecate and disable verification of insecure hash algorithms
  - add support for /etc/pki/tls/legacy-settings also for minimum DH length
    accepted by SSL client
  - compare the encrypt and tweak key in XTS as required by FIPS


author: William Cohen <wcohen@redhat.com> - 0.9.9-17
changelog:
  - Define some  Intel broadwell default unit masks by names
  - Add support for Harrisonville (Denverton SoC)
  - Add support for Skylake-SP server
  - Add support for Kabylake-U/Y
  - Add support for Kabylake-H/S
  - Make Nehalem, Westmere, and Haswell event names unique.


author: William Cohen <wcohen@redhat.com> - 0.9.9-22
changelog:
  - Update ppc64/ppc64le support. rhbz1385007
  - Add recognition check for POWER8NV and POWER8NVL. rhbz1426426


author: Keshav Sharma <keshav.sharma@oracle.com> 1.0-3
changelog:
  - Use https for OCI yum mirror repositories  [OraBug: 31220677]
  - Use IMDS v2 for OCI.
  - Updated repository name to fix duplicate repository name [Orabug: 30425667]


author: Jingdong Lu <jingdong.lu@oracle.com> - 70.0.3-4.0.3
changelog:
  - Replace kde-splash/RHEL7/Preview.png
  - Update anaconda backgrounds with Oracle images
  - Restore anaconda banners


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 70.0.3-4.0.9
changelog:
  - Remove orcl_linux_em12c_750x120.png as it has been replaced with generic image [bug 27681288]
  - Regenerate backgrounds/*.jpg from backgrounds/default.png to remove black dot [bug 21375206]


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 70.7.0-1.0.2
changelog:
  - Replaced with Oracle images:
        fedora/fedora_logo.svg
        fedora/fedora_darkbackground.svg
        icons/hicolor/scalable/apps/xfce4_xicon1.svg
        pixmaps/fedora-logo-sprite.svg
  - Added:
        icons/hicolor/22x22/apps/system-logo-icon.png
        icons/hicolor/256x256/apps/system-logo-icon.png
  - Removed unneeded subdirectories in anaconda.


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 70.7.0-1.0.3
changelog:
  - Pickup change to anaconda/Makefile from 70.0.3 to make sure rnotes images are picked up
    [Orabug: 30096672]


author: Alan Steinberg <alan.steinberg@oracle.com> - 70.7.0-1.0.7
changelog:
  - Fixe incorrect logo on the GDM login screen [Orabug: 31598155]
  - Added missing wallpapers from settings app [Orabug: 31598176]


author: Keshav Sharma <keshav.sharama@oracle.com> 1.0-6
changelog:
  - Added olcne version 1.2 repository [OraBug: 32201021]
  - Enable olcne version 1.1 repository by default [OraBug: 32201021]


author: Keshav Sharma <keshav.sharma@oracle.com> 1.0-4
changelog:
  - Enhance logic to detect oci instance [ OraBug 29241080]
  - Do not overwrite /etc/yun/vars/ociregion file.
  - Exit ol_yum_configure.sh if another yum command running


author: Keshav Sharma <keshav.sharma@oracle.com> 1.0-13
changelog:
  - Added OL7 Beta repositories [OraBug: 31482423]
  - Enable UEKR6 and disable UEKR5 repositories [OraBug: 31482423]


author: Keshav Sharma <keshav.sharma@oracle.com> 1.0-13.1
changelog:
  - Enable UEKR6 and disable UEKR5 repositories [OraBug: 31482423]
  - Remove beta repositories
  - Added 7.9 repositories [OraBug: 31957552]


author: Keshav Sharma <keshav.sharma@oracle.com> 1.0-14
changelog:
  - Add ocidomain as yum variable [ OraBug: 31840501]
  - Added 7.9 repositories [OraBug: 31957552]
  - Enable UEKR6 and disable UEKR5 repositories [OraBug: 31482423]


author: Keshav Sharma <keshav.sharma@oracle.com> 1.0-17
changelog:
  - Added Oracle Linux 7.8 security validation repository.
  - Fixed architecture for ol7_ociyum_config repository [OraBug: 32754445]


author: Wim Taymans <wtaymans@redhat.com> - 0.4.22-2
changelog:
  - Don't run tests during build
  - add new source
  - remove old patches, add new patch
  - Resolves: #1174391


author: Wim Taymans <wtaymans@redhat.com> - 0.4.22-5
changelog:
  - Run backup functions on s390x instead of emulation
  - Fix load of parameters smaller than 64 bits
  - Related: rhbz#1249506


author: Jan Grulich <jgrulich@redhat.com> - 1:0.20.0-10
changelog:
  - Add check for user UID when connecting to pipe (#1005261)
  - Add length check in stunEncodeMessage (#1005218)
  - Add sign and overflow checks (#1005219)
  - Remove hardcoded username and password (#1005216)


author: rmarshall@redhat.com - 1.58-6
changelog:
  - Adding handling to skip probing extended dos partitions
    Resolves: rhbz#1322957
  - Improve Windows detection for dual boot and support Windows 10
    Resolves: rhbz#1322956
  - Suppress non-blocking dmraid sector size warning message
    Resolves: rhbz#1198918


author: rmarshall@redhat.com - 1.58-7
changelog:
  - Do not resolve device mapper links when generating stanzas
    for bootloader.
    Resolves: rhbz#1300262


author: rmarshall@redhat.com - 1.58-8
changelog:
  - Resolve some coverity concerns with how the previous patch detected
    whether or not a partition was a device mapper device.
    Related: rhbz#1300262


author: rmarshall@redhat.com - 1.58-9
changelog:
  - Fix regular expression that missed a corner case when detecting
    extended dos partitions.
    Resolves: rhbz#1322957


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.7-6
changelog:
  - Specify the name of the help content file
    Resolves: rhbz#1254884
  - Skip files unrecognized by the 'oscap info' command
    Resolves: rhbz#1255075
  - Only allow DS and XCCDF ID selection if it makes sense
    Resolves: rhbz#1254876


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.7-9
changelog:
  - Use the System hub category provided by Anaconda
    Resolves: rhbz#1269211
  - Wait for Anaconda to settle before evaluation
    Resolves: rhbz#1265552
  - Make the changes overview scrollable and smaller
    Related: rhbz#1263582
  - Make the list of profiles scrollable
    Resolves: rhbz#1263582
  - Do not try to create a single file multiple times
    Related: rhbz#1263315
  - Avoid crashes on extraction errors
    Resolves: rhbz#1263315
  - Disable GPG checks when installing content to the system
    Resolves: rhbz#1263216
  - Allow fixing root password in graphical installations
    Resolves: rhbz#1265116
  - Enforce the minimal root password length
    Resolves: rhbz#1238281
  - Just report misconfiguration instead of crashing in text mode
    Resolves: rhbz#1263207
  - Do not verify SSL if inst.noverifyssl was given
    Resolves: rhbz#1263257
  - Also catch data_fetch.DataFetchError when trying to get content
    Resolves: rhbz#1263239
  - Use new method signature with payload class
    Related: rhbz#1288636


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.7-11
changelog:
  - Don't require blank stderr when running the oscap tool
    Resolves: rhbz#1360765
  - Beware of the invalid profiles
    Resolves: rhbz#1365130
  - Properly set the seen property for root passwords
    Resolves: rhbz#1357603


author: Martin Preisler <mpreisle@redhat.com> - 0.7-13
changelog:
  - Avoid long delay before a GeoIP related timeout in case internet is not available
    Resolves: rhbz#1379479


author: Watson Sato <wsato@redhat.com> - 0.8-2
changelog:
  - Add japanese translation
  - Update other translations
    Resolves: rhbz#1481190
  - Fix selection of RHEL datastream
    Resolves: rhbz#1520358


author: Watson Yuuma Sato <wsato@redhat.com> - 0.9-1
changelog:
  - Rebase to the upstream version 0.9
  - Drop patch that fixed selection of RHEL Alternate Architecture datastream
    Resolves: rhbz#1564903
  - Update project URL
    Resolves: rhbz#1502379


author: Jan Černý <jcerny@redhat.com> - 0.9-3
changelog:
  - Enable translation of title 'SECURITY POLICY' at Installation Summary screen
    Resolves: rhbz#1543318


author: EL Errata <el-errata_ww@oracle.com> - 20170423-2.0.1
changelog:
  - Update Oracle Linux OS info [bug 26135475]
  - Add Oracle Linux OS info [bug 18501468]
  - Pack ol.xml into tarball [bug 20410527]
  - Update libosinfo to add all Oracle linux OS release/updates information [bug 26135475]


author: Felipe Borges <feborges@redhat.com> - 20170813-1
changelog:
  - Update source URL to Pagure
   - Drop the rhel-7.4 data patch
   - Update to new release
   - Resolves: rhbz#1479731


author: EL Errata <el-errata_ww@oracle.com> - 20170813-6.0.1
changelog:
  - add win2016 support in 'osinfo-query os' [bug 27210429]
  - osinfo-query command error with OL7U5 [bug 27700001]
  - Update OL7U5 osinfo-db to add OL7U5 release support [bug 27700063]
  - add ol7.4 os info [bug 27175558]
  - Update Oracle Linux OS info [bug 26135475]
  - Add Oracle Linux OS info [bug 18501468]
  - Pack ol.xml into tarball [bug 20410527]
  - Update libosinfo to add all Oracle linux OS release/updates information [bug 26135475]


author: EL Errata <el-errata_ww@oracle.com> - 20180531-1.0.1
changelog:
  - add ol7.6 os info
  - add ol5 ol6 ol7 os type [orabug 27932947]
  - add win2016 support in 'osinfo-query os' [bug 27210429]
  - osinfo-query command error with OL7U5 [bug 27700001]
  - Update OL7U5 osinfo-db to add OL7U5 release support [bug 27700063]
  - add ol7.4 os info [bug 27175558]
  - Update Oracle Linux OS info [bug 26135475]
  - Add Oracle Linux OS info [bug 18501468]
  - Pack ol.xml into tarball [bug 20410527]
  - Update libosinfo to add all Oracle linux OS release/updates information [bug 26135475]


author: Fabiano Fidêncio <fidencio@redhat.com> - 20190805-1
changelog:
  - Resolves: rhbz#1737367 - Update to latest upstream release
  - Resolves: rhbz#1737369 - Add 7.8 to the osinfo-db which will be used on 7.8


author: Fabiano Fidêncio <fidencio@redhat.com> - 20190805-2
changelog:
  - Resolves: rhbz#1750807 - Fedora/RHEL/CentOS JeOS kickstart files for
                             unattended installation are broken


author: Fabiano Fidêncio <fidencio@redhat.com< - 20200529-1
changelog:
  - Resolves: rhbz#1839905 - [RHEL7.9] "virt-install --os-variant rhel7.9"i
                             fails with error
  - Resolves: rhbz##1840085 - Rebase to the latest upstream release


author: EL Errata <el-errata_ww@oracle.com> - 20200529-1.0.1
changelog:
  - Added Oracle OS info for OL7.9.
  - Update Oracle os info files - Add OL8.2 template [Orabug: 31395425]
  - Update Oracle os info files - Add OL8.1 template [Orabug: 30596927]
  - Add Oracle os info files


author: Pravin Satute <psatute AT redhat DOT com> - 2.1-1
changelog:
  - Resolves: rhbz#1284772 - Upstream new release with ttfautohint
  - Changed url to https://github.com/RedHatBrand/overpass/, https://overpassfont.org looks dead.
  - Add Light variant font.
  - Add metainfo file to show this font in gnome-software.


author: Rex Dieter <rdieter@fedoraproject.org> 1.1.1-2
changelog:
  - workaround anaconda main menu not visible in F18 Beta TC2 KDE Live (#864058)
  - -DENABLE_INNER_SHADOWS_HACK=0


author: Stef Walter <stefw@redhat.com> - 0.20.7-1
changelog:
  - Update to upstream stable 0.20.7 release
  - Expose pkcs11x.h header and defines for attached extensions rhbz#1142305


author: Daiki Ueno <dueno@redhat.com> - 0.23.5-3
changelog:
  - Avoid reference to thread-unsafe strerror rhbz#1378947
  - Fix PKCS#11 OAEP interface rhbz#1191209
  - Update documentation to follow RFC7512 rhbz#1165977


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-4
changelog:
  - Add support for container bundles
  - Treat systemd reloading state as monitor success
  - Resolves: rhbz#1432722
  - Resolves: rhbz#1436696


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-5
changelog:
  - Keep man pages compressed
  - Bugfixes for container bundles
  - Resolves: rhbz#1410886
  - Resolves: rhbz#1432722


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-7
changelog:
  - Avoid fencing old DC if it is shutting down while another node is joining
  - Improve crmd's handling of repeated fencing failures
  - Correct behavior when guest created by bundle has a node attribute
  - Show Red Hat bugzilla URL rather than upstream when generating cluster report
  - Resolves: rhbz#1430112
  - Resolves: rhbz#1432722


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-9
changelog:
  - Allow cleanup of guest nodes when guest is unmanaged
  - Allow bundles to run on Pacemaker Remote nodes
  - Handle slow IPC clients better
  - Update crmd throttle information when CPUs are hot-plugged in
  - Order pacemaker systemd unit after resource-agents-deps target
  - Resolves: rhbz#1303742
  - Resolves: rhbz#1432722
  - Resolves: rhbz#1435067
  - Resolves: rhbz#1444728
  - Resolves: rhbz#1446669


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-10
changelog:
  - Fix issues when running bundles on Pacemaker Remote nodes
  - Reap orphaned processes when running Pacemaker Remote as pid 1
  - Order remote actions after remote connection recovery
    (fixes regression in RHEL 7.3)
  - Avoid local resource manager daemon (lrmd) crash when an
    in-flight systemd operation is cancelled
  - Resolves: rhbz#1432722
  - Resolves: rhbz#1441603
  - Resolves: rhbz#1448772
  - Resolves: rhbz#1451170


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-4
changelog:
  - Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
  - Resolves: rhbz#1381754
  - Resolves: rhbz#1474428
  - Resolves: rhbz#1499217
  - Resolves: rhbz#1508373


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-5
changelog:
  - Properly clean up primitive inside bundle
  - Scalability improvements
  - Resolves: rhbz#1499217
  - Resolves: rhbz#1508373


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-6
changelog:
  - Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
  - If on-fail=ignore, migration-threshold should also be ignored
  - Resolves: rhbz#1474428
  - Resolves: rhbz#1507344


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-7
changelog:
  - Avoid node attribute write delay when corosync.conf has only IP addresses
  - Fix regressions in "pcs resource cleanup" behavior
  - Restore ordering of unfencing before fence device starts
  - Ensure --wait options work when bundles are in use
  - Fix possible invalid transition with bundle ordering constraints
  - Resolves: rhbz#1454960
  - Resolves: rhbz#1508350
  - Resolves: rhbz#1517796
  - Resolves: rhbz#1519812
  - Resolves: rhbz#1522822


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-10
changelog:
  - Always trigger transition when quorum changes
  - Match clone names correctly with crm_resource --cleanup
  - Fix pcs resource --wait timeout when bundles are used
  - Observe colocation constraints correctly with bundles in master role
  - Resolves: rhbz#1464068
  - Resolves: rhbz#1508350
  - Resolves: rhbz#1519812
  - Resolves: rhbz#1527072


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-11.1
changelog:
  - Do not schedule notifications for unrunnable actions
  - Do not expire remote failures if fencing is pending
  - Do not consider attribute order difference as CIB change in crm_diff
  - Resolves: rhbz#1563345
  - Resolves: rhbz#1566533
  - Resolves: rhbz#1568720


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-13
changelog:
  - Pull latest upstream 1.1 branch fixes
  - Resolves: rhbz#1478451
  - Resolves: rhbz#1501505
  - Resolves: rhbz#1514492
  - Resolves: rhbz#1550829
  - Resolves: rhbz#1564536
  - Resolves: rhbz#1576148
  - Resolves: rhbz#1577300


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-1
changelog:
  - Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
  - Allow crm_node to work on Pacemaker Remote nodes
  - Implement new --validate option to stonith_admin
  - Support .path, .mount, and .timer systemd unit files as resources
  - Handle INFINITY fail count correctly in crm_failcount
  - Resolves: rhbz#1374175
  - Resolves: rhbz#1434936
  - Resolves: rhbz#1562255
  - Resolves: rhbz#1590483
  - Resolves: rhbz#1591045


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-2
changelog:
  - Ensure resource agent meta-data actions can get local node name
  - Do not record pending clone notifications in CIB
  - Resolves: rhbz#1374175
  - Resolves: rhbz#1570130


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-4
changelog:
  - Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
  - Resolves: rhbz#1478451


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-7
changelog:
  - Shutdown corosync locally if fenced
  - Count start failure once
  - Resolves: rhbz#1448221
  - Resolves: rhbz#1549576


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-8.1
changelog:
  - Route remote clone notifications through correct cluster node
  - Allow clean-up of managed guest nodes and bundle nodes
  - Allow use of guest nodes and bundles in clusters with sbd fencing
  - Resolves: rhbz#1646347
  - Resolves: rhbz#1646350
  - Resolves: rhbz#1646872


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-8.3
changelog:
  - Fix regression in crm_resource --refresh
  - Order resource moves after remote connection starts
  - Resolves: rhbz#1664242
  - Resolves: rhbz#1664243


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-1
changelog:
  - pcs status now shows when a standby node still has active resources
  - Allow clean-up of guest nodes and bundles without unmanaging first
  - pcs status now shows pending and failed fence actions by default
  - Improve pcs status display when disconnected from cluster
  - Ensure node attributes are recorded if attrd writer is shutting down
  - Synchronize fencing history across all nodes
  - Add stonith_admin option to clear fencing history
  - Don't schedule unneeded bundle actions when connection is on different node
  - Allow use of sbd in clusters with guest nodes and bundles
  - Schedule bundle clone notifications correctly when connection is moving
  - Rebase on upstream 1.1.20-rc1 version
  - Avoid unneeded resource restarts when remote connection fails to start
  - Allow crm_resource --move to work when a previous move had a lifetime
  - Wait for all replies when refreshing a resource
  - Don't schedule clone notifications for a stopped bundle
  - Allow option to crm_resource --clear to clear only expired constraints
  - Fix result reporting when cleanup is done while an operation is in-flight
  - Resolves: rhbz#1419548
  - Resolves: rhbz#1448467
  - Resolves: rhbz#1461964
  - Resolves: rhbz#1486869
  - Resolves: rhbz#1535221
  - Resolves: rhbz#1555938
  - Resolves: rhbz#1595422
  - Resolves: rhbz#1627948
  - Resolves: rhbz#1638593
  - Resolves: rhbz#1644076
  - Resolves: rhbz#1644864
  - Resolves: rhbz#1648507
  - Resolves: rhbz#1648620
  - Resolves: rhbz#1652053
  - Resolves: rhbz#1652752
  - Resolves: rhbz#1658650
  - Resolves: rhbz#1665343


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-2
changelog:
  - Assume unprivileged ACL if unable to get user information from host
  - Delay 2 seconds before re-attempting a failed node attribute write
  - SNMP alert sample script now sends all OIDs with every alert
  - Recover dependent resources correctly with asymmetric ordering
  - Rebase on upstream 1.1.20 final version
  - Resolves: rhbz#1596125
  - Resolves: rhbz#1597695
  - Resolves: rhbz#1608979
  - Resolves: rhbz#1628966
  - Resolves: rhbz#1644864


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-3
changelog:
  - Support more than 64KB of fence agent output
  - Avoid unnecessary recovery of group member
  - Improve IPC clients' authentication of servers (CVE-2018-16877)
  - Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
  - Fix use-after-free with potential information disclosure (CVE-2019-3885)
  - Resolves: rhbz#1549366
  - Resolves: rhbz#1609453
  - Resolves: rhbz#1694556
  - Resolves: rhbz#1694559
  - Resolves: rhbz#1694907


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-4
changelog:
  - Update security patches
  - Resolves: rhbz#1694556
  - Resolves: rhbz#1694559
  - Resolves: rhbz#1694907


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.21-1
changelog:
  - Recover from quiesced DC disk
  - Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
  - Default serialized order constraints to symmetrical=false
  - Avoid fence loops due to incorrect Pacemaker Remote ordering
  - Default concurrent-fencing to true
  - Harden GnuTLS priorities
  - Rebase on upstream 1.1.21 final version
  - Resolves: rhbz#1596125
  - Resolves: rhbz#1625671
  - Resolves: rhbz#1672225
  - Resolves: rhbz#1704870
  - Resolves: rhbz#1710422
  - Resolves: rhbz#1727280
  - Resolves: rhbz#1731189


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.21-3
changelog:
  - Avoid invalid transition when guest node's host is unclean but can't be fenced
  - Resolves: rhbz#1755659


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.22-1
changelog:
  - Show correct disabled resource count in status display
  - Run-time option for Pacemaker Remote bind address
  - Avoid restart loop when migration is left dangling
  - Improve help for clean-up option
  - Do not overweight group colocation scores
  - Rebase on upstream 1.1.22+63d2d79
  - Resolves: rhbz#1458953
  - Resolves: rhbz#1743373
  - Resolves: rhbz#1757951
  - Resolves: rhbz#1758969
  - Resolves: rhbz#1760669
  - Resolves: rhbz#1792492


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.23-1
changelog:
  - Improve help for clean-up option
  - Avoid pending DC fencing getting "stuck" in status display
  - Rebase on upstream 1.1.23-rc1
  - Resolves: rhbz#1758969
  - Resolves: rhbz#1787749
  - Resolves: rhbz#1792492


author: Naveen Kumar <nkumar@redhat.com> - 3.0-8
changelog:
  - add ur-in, ur-pk & pa-pk locale-specific overrides rule in 67-paktype-naskh-basic.conf
  - add ur-in, ur-pk & pa-pk locale-specific overrides rule in 67-paktype-naskh-basic-sa.conf
  - resolves bug #586789


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-9
changelog:
  - fix CVE-2014-2583: potential path traversal issue in pam_timestamp
  - pam_pwhistory: call the helper if SELinux enabled


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-11
changelog:
  - be tolerant to corrupted opasswd file
  - audit the module names that granted access
  - pam_userdb: correct the example in man page (#1078784)
  - pam_limits: check whether the utmp login entry is valid (#1080023)
  - pam_console_apply: do not print error if console.perms.d is empty
  - pam_limits: nofile refers to open file descriptors (#1111220)
  - apply PIE and full RELRO to all binaries built


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-14
changelog:
  - pam_unix: add no_pass_expiry option for ignoring password
    expiration in crond and sshd with public key authentication
  - add manual page for environment(5) (#1110257)
  - pam_loginuid: log if auditd not detected
  - always ignore audit error when -EPERM is returned (#1287800)
  - pam_lastlog: fix possible NULL dereference when localtime fails (#1313537)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-19
changelog:
  - pam_access: (group) match syntax is prioritized over network@netgroup
    match (#1358881), add support for additional /etc/security/access.d/*.conf
    files, improve documentation (#1421735)
  - pam_lastlog: fix pt_BR translation (#1185697)
  - pam_faillock: support admin_group with users equivalent to root in
    faillock handling (#1285550)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-23
changelog:
  - pam_get_authtok_verify: ensure no double verification happens
  - manual page fixes for pam_tty_audit and pam_wheel
  - pam_unix: lower the excessive maximum number of closed fd descriptors
    when spawning handlers
  - pam_loginuid: do not prevent login in unprivileged containers


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.6-1
changelog:
  - handle ccache creation correctly for users who are mapped to principal
    names in realms other than the default (#999604)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.7-1
changelog:
  - drop some no-longer-necessary code to cede ownership of keyring ccaches
    to an unprivileged user at login-time to work better with upcoming changes
    to libkrb5's keyring ccache support (libkrb5: #991148, this one's #1005376)
  - if we don't have a ccname_template, if we're built against a libkrb5 that
    provides interfaces for reading its configuration files, try to read the
    default_ccache_name value from the [libdefaults] section before falling
    back to the default we've set at compile-time (#more of #1005376)
  - stop specifying a default ccache location at compile-time on F21 and later,
    to make our unconfigured default better line up with libkrb5's unconfigured
    default


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.8-4
changelog:
  - fix to only prompt for passwords when obtaining credentials for performing
    password changes by toggling the subsequent_prompt default to off when
    called to perform a password change (#1063933)


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-22
changelog:
  - Don't rebuild documentation for each platform. Doing so creates unique 
  document files which are shared and conflict on multilib installations.


author: Bob Relyea <rrelyea@redhat.com> 0.6.2.29
changelog:
  - Coverity and compilier warning fixes
  - Use the PKIX validator
  - Fix crash when ldap connection fails and debugging is enabled.


author: Akira TAGOH <tagoh@redhat.com> - 1.34.1-2
changelog:
  - Fix duplicate file list for modules.cache
  - s/%define/%global/g
  - Fix bogus date in %changelog
  - Do not suppress the detailed build log.


author: William Cohen <wcohen@redhat.com> - 5.2.0-15
changelog:
  - Update papi L1 cache events on POWER7
  - Prevent papi-testsuite segfaults
  - Identify kernels that support rdpmc
  - Correct papi-testsuite byte_profile and sprofile tests on ppc64le
  - Update PAPI_L1_TCM event on Haswells


author: William Cohen <wcohen@redhat.com> - 5.2.0-25
changelog:
  - Update IBM Power 9 events. rhbz1510684
  - Make lmsensor dynamically size internal array. rhbz1510497


author: Akira TAGOH <tagoh@redhat.com> - 0.6.8-23
changelog:
  - the spec file cleanup
  - Fix the undefined symbol issue in libpaps.so.0
  - Correct FSF address in the COPYING.LIB


author: Nathan Scott <nathans@redhat.com> - 0.4.0-5
changelog:
  - Use RPM macros to ease dropwizard metrics enablement.
  - Correct the dependency on systems.uom:systems-unicode-java8


author: Brian C. Lane <bcl@redhat.com> 3.1-21
changelog:
  - Backport fix for 1 sector logical partition separation from start of extended
    Resolves: rhbz#1212323


author: Brian C. Lane <bcl@redhat.com> 3.1-22
changelog:
  - Use 512b sector size when communicating with device-mapper
    Resolves: rhbz#1188431
  - Add a test to make sure partitions are the correct size on device-mapper
    Related: rhbz#1188431


author: Brian C. Lane <bcl@redhat.com> 3.1-23
changelog:
  - libparted: Use read only when probing devices on linux
    Resolves: rhbz#1245144
  - tests: Use wait_for_dev_to_ functions
    Related: rhbz#1245144


author: Brian C. Lane <bcl@redhat.com> 3.1-24
changelog:
  - tests: Add udevadm settle to wait_for_ loop
    Related: rhbz#1260664
  - tests: Add-wait-to-t9042
    Resolves: rhbz#1257415
  - tests: Fix t1700 failing on a host with a 4k xfs file
    Related: rhbz#1260664


author: Brian C. Lane <bcl@redhat.com> 3.1-25
changelog:
  - docs: Add list of filesystems for fs-type
    Resolves: rhbz#1311596
  - libparted: Remove fdasd geometry code from alloc_metadata
    Resolves: rhbz#1244833


author: Brian C. Lane <bcl@redhat.com> - 3.1-29
changelog:
  - Add support for NVMe devices
    Resolves: rhbz#1316239
  - Backport partition resize command
    Resolves: rhbz#1423357


author: Brian C. Lane <bcl@redhat.com> - 3.1-30
changelog:
  - partprobe: always close dev when probing disks
    Resolves: rhbz#1551411
  - tests: Add t4201 to test partprobe with 1025 devices
    Related: rhbz#1551411


author: Brian C. Lane <bcl@redhat.com> - 3.1-31
changelog:
  - Backport patches for dasd on virtio
    fdasd: geometry handling updated from upstream s390-tools
    dasd: enhance device probing
    parted: fix build error on s390
    fdasd.c: Safeguard against geometry misprobing
    Resolves: rhbz#1676604
  - Add part-label documentation to mkpart command
    Resolves: rhbz#1686659


author: Tomas Mraz <tmraz@redhat.com> 0.78.99-1
changelog:
  - use better (auditable) libselinux calls for checking
    the access to passwd (#518268)
  - add support for the -e option as seen on Debian passwd
  - make the binary PIE and full RELRO (#784483)


author: Jiri Kucera <jkucera@redhat.com> - 0.79-5
changelog:
  - Backport ca46cac (allow passwords longer than 79 characters)
    Backport Steve Grubb's patches
    - stop double auditing, use appropriate record types, update op field in
      audit events, don't audit status check, fix password aging logging
    Backport 02d4478 (better document -S option)
    Fix URL and Source tags
    Resolves: #1276570, #1489086, #1638105, #1145256, #1472567


author: Jiri Kucera <jkucera@redhat.com> - 0.79-6
changelog:
  - Fix incorrect -S output when password field in /etc/passwd is empty but the
    password information in /etc/shadow is set
    Resolves: #1686436


author: Than Ngo <than@redhat.com> - 2.7.1-11
changelog:
  - Fixed CVE-2016-10713 - Out-of-bounds access in pch_write_line function 
  - Fixed CVE-2018-6952 - Double free of memory
  - Resolves: #1626473, honor new file mode 100755 when applying patches
  - Resolves: #1653294, Added virtual provides for bundled gnulib library


author: Tim Waugh <twaugh@redhat.com> 2.7-1
changelog:
  - 2.7.  No longer need sigsegv, get-arg, CVE-2010-4651,
    backup-if-mismatch or coverity-leak patches.


author: Hans de Goede <hdegoede@redhat.com> - 2.0-8
changelog:
  - Add a patch fixing various crashes due to referencing freed memory (#1133339)
  - Cherry-pick some other fixes from upstream git


author: Kalev Lember <kalevlember@gmail.com> - 3.0-1
changelog:
  - Update to 3.0
  - Use license macro for the LICENCE file
  - Use desktop-file-validate instead of desktop-file-install


author: Dave Brolley <brolley@redhat.com> - 3.10.5-3
changelog:
  - Update with missing package dependency for pmda-lustrecomm.
  - Rebuild to pickup bintils fix (BZ 1238469)


author: Nathan Scott <nathans@redhat.com> - 3.10.6-1
changelog:
  - Export the softnet_stat kernel networking metrics (BZ 1190912)
  - Latest upstream PCP, dropping all earlier patches (BZ 1200584)
  - Re-enable the pcp-pmda-jsonpointer package build (BZ 1238134)
  - Fix failing test cases and bugs from Red Hat QE (BZ 1241591)
  - pcp2graphite support for exporting from archives (BZ 1242622)
  - Remove percpu interrupt metrics from default set (BZ 1243809)
  - pcp-collector meta-package enables pmcd+pmlogger (BZ 1249090)


author: Nathan Scott <nathans@redhat.com> - 3.10.6-2
changelog:
  - Fixes targetting several QE reported test failures (BZ 1241591)
  - Remove tool-specific interval settings for pmlogconf (BZ 1243809)


author: Nathan Scott <nathans@redhat.com> - 3.11.2-1
changelog:
  - Improve PMAPI python clients signal handling (BZ 1238550)
  - Fix issues in postfix PMDA search for mail log (BZ 1252308)
  - Fix local_sock() souble free error in perl API (BZ 1258860)
  - Fix sigsegv in pcp-uptime(1) --archive option (BZ 1262721)
  - Update to current stable PCP version (BZ 1284307)
  - Fix pcp-compat dependency drawing in many packages (BZ 1293466)
  - Support for per-processor softnet kernel metrics (BZ 1316085)
  - Fix GFS2 PMDA Install script PMNS parsing error (BZ 1320591)
  - Report Docker version 1.10+ container information (BZ 1327737)


author: Nathan Scott <nathans@redhat.com> - 3.11.3-1
changelog:
  - Latest upstream PCP, dropping all earlier patches (BZ 1284307)
  - Minimal package dependencies for PMAPI applications (BZ 1298993)
  - Resolve perl Net:SNMP pmdasnmp dependency problem (BZ 1332624)
  - Improve time taken to detect pmcd startup failure (BZ 1336210)
  - Fix cron service stopping disabled pmie/pmlogger (BZ 1336792)
  - Fix instance domain handling in derived metrics (BZ 1337212)
  - Include latest Oracle database PMDA enhancements (BZ 1340430)
  - Workaround valgrind failure for pmmgr test case (BZ 1343319)


author: Nathan Scott <nathans@redhat.com> - 3.11.3-3
changelog:
  - Install the missing /etc/pcp/nssdb directory (BZ 1360206)
  - pcp-pmda-ds389 requires perl-LDAP dependency (BZ 1357605)
  - Switch pcp-pmda-ds389log to the dirsrv user (BZ 1357607)
  - pcp-pmda-ds389log requires perl-Date-Manip (BZ 1354055)
  - Remove multi-archive loglabel timezone check (BZ 1351223)


author: Nathan Scott <nathans@redhat.com> - 3.11.8-2
changelog:
  - Drop pcp-pmda-nutcracker package, missing deps (BZ 1425880)
  - Incorporate several fixes from Coverity scan review.


author: Nathan Scott <nathans@redhat.com> - 3.11.8-4
changelog:
  - Enable collecting POWER9 NEST PMU perf metrics (BZ 1419490)
  - SELinux policy updates (BZs 1381301,1432086,1433271,1443632)
  - zeroconf package added (BZs 1211432, 1371950)


author: Lukas Berk <lberk@redhat.com> - 3.12.2-1
changelog:
  - Selinux policy updates (BZs 1459165,1460131,1488116,1447585,1449671)
  - PCP bash completions not working (BZ 1482605)
  - pmdabash man page fix (BZ 1459907)


author: Lukas Berk <lberk@redhat.com> - 3.12.2-2
changelog:
  - Selinux policy updates (BZs 1517655,1517656,1480447,1505888,1515928,1517281,1517862)
  - Multilib corrections (BZ 1513503)


author: Nathan Scott <nathans@redhat.com> - 3.12.2-3
changelog:
  - Update Source2 for external grafana webapp (BZ 1516933)
  - Remove an unhelpful log metadata diagnostic (BZ 1472153)


author: Lukas Berk <lberk@redhat.com> - 3.12.2-5
changelog:
  - Correction to spec file and selinux policy (BZ 1488116)
  - Show all perfevent metrics in pcpatop (BZ 1525864)
  - Multilib corrections (BZ 1537623)


author: Nathan Scott <nathans@redhat.com> - 4.0.2-1
changelog:
  - Ensure sans font dependency resolved for webapps (BZ 1568109)
  - Ensure sans font dependency resolved for pmchart (BZ 1546640)
  - Update to latest PCP sources (BZ 1565370).


author: Nathan Scott <nathans@redhat.com> - 4.0.2-3
changelog:
  - Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
  - Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
  - Fix pmlogger_daily log rotation open port issue (BZ 1579881)


author: Nathan Scott <nathans@redhat.com> - 4.3.2-1
changelog:
  - Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
  - Update PCP selinux policy rules (BZs 1692305, 1695066)
  - Adjust spec file /var/run/pcp settings (BZ 1533154)
  - Fix pmdaproc kernel process misreporting (BZ 1673250)
  - Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
  - Ensure pmdaroot reaps all of its children (BZ 1698517)
  - Corrections to python version dependencies (BZ 1676867)
  - Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
  - Update to a more recent PCP bug fix release (BZ 1647308)


author: Nathan Scott <nathans@redhat.com> - 4.3.2-2
changelog:
  - Rework the pcp-libs ldconfig post-op (BZ 1705362)
  - Resolve a QA file permissions diagnostic issue


author: Nathan Scott <nathans@redhat.com> - 4.3.2-4
changelog:
  - Fix a pmdaproc memory leak (BZ 1721107)
  - Rebuild with selinux runtime dependency update (BZ 1714101)
  - Update selinux-policy to latest upstream (BZs 1699830, 1700989)


author: Nathan Scott <nathans@redhat.com> - 4.3.2-7
changelog:
  - Fix hugepage metrics in pmdalinux (BZ 1730107)
  - Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
  - Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
  - Fix pcp-atopsar sample count command line argument (BZ 1764748)
  - Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
  - Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)


author: Nathan Scott <nathans@redhat.com> - 4.3.2-8
changelog:
  - Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
  - Resolve an selinux policy issue with pmlogger (BZ 1792859)


author: Nathan Scott <nathans@redhat.com> - 4.3.2-13
changelog:
  - Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
  - Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)


author: Sagar Sagar <sagar.sagar@oracle.com> - 4.3.2-13.0.15
changelog:
  - Fixed pipe Error with pcp python utilities [Orabug: 35081709]
  - Fixed python exception with ps utility issue [Orabug: 35087942]
  - PCP python utilities man pages fix and update [Orabug: 35574702]
  - PCP free utility enhancement to view free memory in terabytes [Orabug: 35574708]
  - Fixed Initial archive file is unreadable by mpstat utility issue [Orabug: 35564281]


author: Nathan Scott <nathans@redhat.com> - 1.5.8-2
changelog:
  - Update to latest PCP GUI sources.
  - Build fix when building against older PCP headers.
  - Force PCP_PMSNAPCONTROL_PATH to the preferred location.


author: Nathan Scott <nathans@redhat.com> - 1.5.9-1
changelog:
  - Fix problems with pmchart Samples/Visible History (BZ 968825)
  - Fix pmchart startup handling lack of metrics source (BZ 957007)
  - Fix missing metric handling for archive View files (BZ 981140)
  - UX improvements for the New/Edit Chart Apply button (BZ 957669)
  - Resolve packaging issue where /usr/bin was installed (BZ 988176)
  - Improve pmchart show-/hide-time-control mechanism (BZ 957002)
  - Add a close button to pmchart Preferences dialog (BZ 922198)
  - Fix pmchart Preferences dialog color scheme sigsegv (BZ 963505)


author: Nathan Scott <nathans@redhat.com> - 1.5.10-1
changelog:
  - Updates to the PCP Users and Administrators Guide.
  - Updates to the PCP Programmers Guide.
  - Install a known-good pdf version of each book (BZ 990303).
  - Improve pmchart hostname reporting via pmGetContextHostName.


author: Nathan Scott <nathans@redhat.com> - 1.5.11-1
changelog:
  - Updates to the PCP Programmers Guide.
  - Fix pmchart value/units reporting issue on chart selection.


author: Petr Pisar <ppisar@redhat.com> - 8.32-13
changelog:
  - Disable unsupported JIT mode on little-endian 64-bit PowerPC platform
    (bug #1125642)
  - Raise optimization level to 3 on little-endian 64-bit PowerPC (bug #1123498)


author: Petr Pisar <ppisar@redhat.com> - 8.32-15
changelog:
  - Fix compiling expression where start-anchored character with more than one
    other case follows circumflex in multiline UTF mode (bug #1110621)
  - Fix character class with a literal quotation (bug #1111091)
  - Fix empty-matching possessive zero-repeat groups in interpreted mode
    (bug #1119320)
  - Fix compiler crash for zero-repeated groups with a recursive back reference
    (bug #1119356)
  - Reset non-matched groups within capturing group up to forced match
    (bug #1161597)
  - Fix static linking (bug #1217111)
  - Package pcredemo.c as a documentation for pcre-devel (bug #1217118)


author: Petr Pisar <ppisar@redhat.com> - 8.32-16
changelog:
  - Fix CVE-2015-2328 (infinite recursion compiling pattern with recursive
    reference in a group with indefinite repeat) (bug #1330509)
  - Fix CVE-2015-8385 (buffer overflow caused by named forward reference to
    duplicate group number) (bug #1330509)
  - Fix CVE-2015-8386 (buffer overflow caused by lookbehind assertion)
    (bug #1330509)
  - Fix CVE-2015-3217 (stack overflow caused by mishandled group empty match)
    (bug #1330509)
  - Fix CVE-2015-5073 and CVE-2015-8388 (buffer overflow for forward reference
    within backward assertion with excess closing parenthesis) (bug #1330509)
  - Fix CVE-2015-8391 (inefficient posix character class syntax check)
    (bug #1330509)
  - Fix CVE-2016-3191 (workspace overflow for (*ACCEPT) with deeply nested
    parentheses) (bug #1330509)


author: Petr Pisar <ppisar@redhat.com> - 8.32-17
changelog:
  - Let [:graph:], [:print:], and [:punct:] POSIX classes to handle Unicode
    characters in UCP mode to match Perl behavior (bug #1400267)
  - Fix matching Unicode ranges in JIT mode (bug #1402288)


author: Petr Pisar <ppisar@redhat.com> - 10.22-7
changelog:
  - Fix pcre2-config --libs-posix output (upstream bug #1924)
  - Fix a memory leak and a typo in a documentation (upstream bug #1973)
  - Fix a buffer overflow in partial match test for CRLF in an empty buffer
    (upstream bug #1975)
  - Fix a crash in pcre2test when displaying a wide character with a set locate
    (upstream bug #1976)


author: Petr Pisar <ppisar@redhat.com> - 10.22-8
changelog:
  - Fix a crash when doing an extended substitution for \p, \P, or \X
    (upstream bug #1977)
  - Fix a crash in substitution if starting offest was specified beyond the
    subject end (upstream bug #1992)


author: Petr Pisar <ppisar@redhat.com> - 10.23-2
changelog:
  - Handle memmory allocation failures in pcre2test tool
  - Fix a crash when finding a Unicode property for a character with a code
    point greater than 0x10ffff in UTF-32 library while UTF mode is disabled
    (upstream bug #2052)


author: Ivan Devat <idevat@redhat.com> - 0.9.157-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1362493 rhbz#1315627 rhbz#1378742 rhbz#1334429 rhbz#1402374 rhbz#1389941 rhbz#1303969 rhbz#1415080 rhbz#1328882 rhbz#1434972 rhbz#1413958


author: Ivan Devat <idevat@redhat.com> - 0.9.158-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1447702 rhbz#1176018 rhbz#1433016 rhbz#1303969 rhbz#1386114 rhbz#1386512 rhbz#1390609 rhbz#1165821 rhbz#1315992 rhbz#1373614 rhbz#1422667 rhbz#1254984


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.158-2
changelog:
  - Fixed crash of the `pcs cluster setup` command when the `--force` flag was used
  - Fixed crash of the `pcs cluster destroy --all` command when the cluster was not running
  - Fixed crash of the `pcs config restore` command when restoring pacemaker authkey
  - Fixed "Error: unable to get cib" when adding a node to a stopped cluster
  - Resolves: rhbz#1176018


author: Ivan Devat <idevat@redhat.com> - 0.9.158-3
changelog:
  - Added option to create not hardened cluster with the `pcs cluster setup` command using the `--no-hardened` flag
  - Added option to create not hardened cluster from web UI
  - Fixed a crash in the `pcs cluster node add-remote` command when an id conflict occurs
  - Fixed creating a new cluster from the web UI
  - `pcs cluster node add-guest` now works with the flag `--skipp-offline`
  - `pcs cluster node remove-guest` can be run again when the guest node was unreachable first time
  - Fixed "Error: Unable to read /etc/corosync/corosync.conf" when running `pcs resource create`([rhbz#1386114])
  - Binary data are stored in corosync authkey
  - Resolves: rhbz#1284404 rhbz#1373614 rhbz#1165821 rhbz#1176018 rhbz#1386114


author: Ivan Devat <idevat@redhat.com> - 0.9.158-4
changelog:
  - Added support for enable and disable in bundles
  - New clusters are created with corosync encryption disabled by default
  - Flag `--master` is backward compatible in `pcs resource create`
  - Resolves: rhbz#1165821 rhbz#1433016 rhbz#1458153


author: Ivan Devat <idevat@redhat.com> - 0.9.158-5
changelog:
  - `pcs cluster setup` uses existing pacemaker authkey if it exists
  - `pcs resource create` shows only warning when case of remote node is detected
  - Resolves: rhbz#1459503


author: Ivan Devat <idevat@redhat.com> - 0.9.158-6
changelog:
  - It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
  - Fixed timeout when cluster setup takes long time in web UI
  - It is now mandatory to specify container type in the "resource bundle create" command
  - Resolves: rhbz#1447910 rhbz#1284404


author: Ivan Devat <idevat@redhat.com> - 0.9.160-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1499749 rhbz#1443647 rhbz#1432283 rhbz#1421702 rhbz#1443418 rhbz#1464781 rhbz#1435697 rhbz#1441673 rhbz#1420437 rhbz#1388783 rhbz#1463327 rhbz#1418199 rhbz#1341582 rhbz#1489682 rhbz#1491631 rhbz#1213946


author: Ivan Devat <idevat@redhat.com> - 0.9.161-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1499749 rhbz#1415197 rhbz#1501274 rhbz#1502715 rhbz#1230919 rhbz#1503110


author: Ondrej Mular <omular@redhat.com> - 0.9.162-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1389943 rhbz#1389209 rhbz#1506220 rhbz#1508351 rhbz#1415197 rhbz#1506864 rhbz#1367808 rhbz#1499749


author: Ivan Devat <idevat@redhat.com> - 0.9.162-2
changelog:
  - Changed snmp agent logfile path
  - It is now possible to set the `action` option of stonith devices in GUI by using force
  - Do not crash when `--wait` is used in `pcs stonith create`
  - A warning is displayed in `pcs status` and a stonith device detail in web UI  when a stonith device has its `method` option set to `cycle`
  - Resolves: rhbz#1367808 rhbz#1421702 rhbz#1522813 rhbz#1523378


author: Ivan Devat <idevat@redhat.com> - 0.9.162-3
changelog:
  - Pcs now properly exits with code 1 when an error occurs in pcs cluster node add-remote and pcs cluster node add-guest commands
  - Fixed a crash in the pcs booth sync command
  - Resolves: rhbz#1464781 rhbz#1527530


author: Ondrej Mular <omular@redhat.com> - 0.9.162-5
changelog:
  - Fixed `pcs cluster auth` in a cluster when not authenticated and using a non-default port
  - Fixed `pcs cluster auth` in a cluster when previously authenticated using a non-default port and reauthenticating using an implicit default port
  - Resolves: rhbz#1415197


author: Ondrej Mular <omular@redhat.com> - 0.9.162-5.el7_5.1
changelog:
  - Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure
  - Fixed CVE-2018-1079 pcs: Privilege escalation via authorized user malicious REST call
  - Fixed CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb
  - Resolves: rhbz#1557253


author: EL Errata <el-errata_ww@oracle.com> - 0.9.162-5.0.3.el7_5.1
changelog:
  - Unlike RHEL we DO have corosync/pacemaker for aarch64 on EL7
  - replace logo pcsd/public/favicon.ico in tarball
  - remove Source1 HAM-logo.png


author: Ivan Devat <idevat@redhat.com> - 0.9.165-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1572886 rhbz#1581150 rhbz#1579911 rhbz#1533849 rhbz#1557252 rhbz#1568353 rhbz#1574898 rhbz#1427273 rhbz#1475318 rhbz#1476862 rhbz#1535967 rhbz#1566382 rhbz#1588667 rhbz#1590533 rhbz#1403832 rhbz#1517333 rhbz#1529508


author: Ivan Devat <idevat@redhat.com> - 0.9.165-2
changelog:
  - Fixed validation for an unaccessible resource inside a bundle 
  - Fixed test of watchdog devices
  - Fixed command `pcs cluster node add-outside`
  - Fixed large key files distribution
  - Resolves: rhbz#1462248 rhbz#1475318 rhbz#1599758 rhbz#1600169


author: Ondrej Mular <omular@redhat.com> - 0.9.165-5
changelog:
  - Fixed `pcs stonith sbd watchdog test` error messages
  - Fixed avaliable watchdog devices listing
  - Resolves: rhbz#1475318


author: Ondrej Mular <omular@redhat.com> - 0.9.165-6
changelog:
  - Fix instance attributes setting for fence agents `fence_compute` and
    `fence_evacuate`
  - Resolves: rhbz#1623181


author: EL Errata <el-errata_ww@oracle.com> - 0.9.165-6.0.1
changelog:
  - Revert the prior change to disable aarch64 build
  - Unlike RHEL we DO have corosync/pacemaker for aarch64 on EL7
  - replace logo pcsd/public/favicon.ico in tarball
  - remove Source1 HAM-logo.png


author: Ivan Devat <idevat@redhat.com> - 0.9.165-6.el7_6.1
changelog:
  - `pcs` no longer spawns unnecessary processes for reading node tokens
  - Fixed a bug causing most of the messages not being logged into pcsd.log
  - Lower load caused by periodical config files syncing in pcsd by making it sync less frequently
  - Improve logging of periodical config files syncing in pcsd
  - Resolves: rhbz#1683959 rhbz#1683957 rhbz#1683958


author: Ivan Devat <idevat@redhat.com> - 0.9.167-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1649732 rhbz#1554302 rhbz#1447349 rhbz#1647640 rhbz#1594738 rhbz#1676956 rhbz#1474747 rhbz#1679534 rhbz#1642514 rhbz#1389140 rhbz#1522858 rhbz#1676944 rhbz#1638376 rhbz#1515021 rhbz#1598197


author: Edward Leung <edward.leung@oracle.com> - 0.9.167-3.0.1
changelog:
  - remove change for favicon.ico from replace-favicon.patch
  - replace logo pcsd/public/favicon.ico in tarball
  - remove Source1 HAM-logo.png


author: Ivan Devat <idevat@redhat.com> - 0.9.168-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829


author: Ivan Devat <idevat@redhat.com> - 0.9.168-2
changelog:
  - Do not generate custom DH key if it was not requested by setting its custom length
  - Resolves: rhbz#1760434


author: Ivan Devat <idevat@redhat.com> - 0.9.168-3
changelog:
  - More fixes for the case when PATH environment variable is not set
  - Pcsd no longer sends Server HTTP header
  - Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
  - Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174


author: Ondrej Mular <omular@redhat.com> - 0.9.168-4
changelog:
  - Added command 'pcs resource relations'
  - Added command 'pcs resource safe-disable'
  - Resolves: rhbz#1770975 rhbz#1770973


author: Ivan Devat <idevat@redhat.com> - 0.9.169-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569


author: Ivan Devat <idevat@redhat.com> - 0.9.169-2
changelog:
  - Keep autogenerated IDs of set constraints reasonably short
  - Use fixed version of python module subprocess (package python2-subprocess32)
  - Resolves: rhbz#1820813 rhbz#1824206


author: Ivan Devat <idevat@redhat.com> - 0.9.169-3
changelog:
  - Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
  - Fixed race-condition when removing multiple resources from web UI
  - Resolves: rhbz#1833115 rhbz#1843593


author: Ivan Devat <idevat@redhat.com> - 0.9.169-3.el7_3.1
changelog:
  - Explicitly close libcurl connections to prevent stalled TCP connections in CLOSE-WAIT state
  - Added support for loading DH keys from a file
  - Resolves: rhbz#1870551 rhbz#1888479


author: Robert Relyea <rrelyea@redhat.com> - 1.8.8-7
changelog:
  - Don't hang if the daemon is blocked by systemd
  - Make sure we have a new enough systemd-devel to have the udev headers


author: Robert Relyea <rrelyea@redhat.com - 1.4.10-13
changelog:
  - Add support for missing readers (broadcom, cherry).
  - mark deprecated readers as unsupported and needing an update


author: Jarod Wilson <jarod@redhat.com> - 3.0-6
changelog:
  - Update to upstream 3.0-3.1.gb36a595 tarball for upstream fixes
  - Add in manpages
  - Related: rhbz#1365750
  - Resolves: rhbz#948476


author: Jarod Wilson <jarod@redhat.com> - 3.0-7
changelog:
  - Address a myriad more coverity/clang warnings
  - Add raw_ethernet_* man page symlinks
  - Related: rhbz#1273176
  - Related: rhbz#948476


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-284
changelog:
  - Use a macro to cover all 64-bit PowerPC architectures (bug #1061792)
  - Declare dependencies for cpan tool (bug #1122368)
  - Use stronger algorithm needed for FIPS in t/op/crypt.t (bug #1084796)
  - Make *DBM_File desctructors thread-safe (bug #1107542)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-286
changelog:
  - Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
  - Rebuild with corrected binutils to fix systemtap support (bug #1238472)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-288
changelog:
  - Fix CRLF conversion in ASCII FTP upload (bug #1263734)
  - Don't leak the temp utf8 copy of namepv (bug #1063330)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-291
changelog:
  - Backported and sub-packaged libraries historically supplied with Perl 4
    into perl-Perl4-CoreLibs


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-293
changelog:
  - Add SSL support to Net::SMTP (bug #1557574)
  - Do not overload ".." in Math::BigInt (bug #1497734)
  - Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)


author: Paul Howarth <paul@city-fan.org> - 2.05.03-3
changelog:
  - Don't BR: perl(LWP::Simple) for optional tests when bootstrapping; this is a
    cleaner fix than nobbling perl-URI's runtime dependencies


author: Paul Howarth <paul@city-fan.org> - 20081208-8
changelog:
  - Clean up for modern rpmbuild:
    - Drop BuildRoot specification
    - Drop %clean section
    - Don't bother cleaning buildroot in %install section
    - Make %files list more explicit
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Use %{_fixperms} macro rather than our own chmod incantation
    - Replace provides filter with version that works with rpm ≥ 4.9
  - Include tests as %doc since they're referred to by examples/README


author: Paul Howarth <paul@city-fan.org> - 20120719-1
changelog:
  - Update to 20120719:
    - Support using data from RangeMessage.xml, so you can use the latest data
      from ISBN without updating this module
  - Fix shellbang and permissions of make_data.pl script to placate rpmlint
  - Filter dependency on perl(LWP::Simple), required only by make_data.pl script,
    not in normal operation
  - Don't need to remove empty directories from the buildroot
  - BR: perl(Carp), perl(File::Spec::Functions) and perl(Test::Manifest) ≥ 1.14
  - BR: at least version 1.00 of perl(Test::Pod)


author: Paul Howarth <paul@city-fan.org> - 20120719.001-1
changelog:
  - Update to 20120719.001:
    - Require Test::More ≥ 0.95 for subtest support
    - No code or feature changes
  - Bump Test::Manifest version requirement to 1.21
  - Bump Test::More version requirement to 0.95
  - Drop redundant buildreq perl(Test::Prereq)


author: Paul Howarth <paul@city-fan.org> - 0.008-7
changelog:
  - Run the extra tests in a separate test run, and only when not bootstrapping
  - Don't BR: perl(Test::Spelling) with RHEL ≥ 7 as we don't have the other
    dependencies needed do the spell check test


author: Paul Howarth <paul@city-fan.org> - 0.008-12
changelog:
  - Never BR: perl(Test::Version) for EL builds as perl(version) is too old
    prior to EL-7 and this package is included in RHEL ≥ 7 but Test::Version
    is only in EPEL


author: Paul Howarth <paul@city-fan.org> - 0.19-7
changelog:
  - New upstream re-release of 0.19 by DROLSKY
    - The load_class() subroutine now returns the class name on success
      (CPAN RT#76931)
    - Exceptions and errors from Class::Load no longer contain references to line
      numbers in Class::Load or Module::Runtime; this applies to exceptions
      thrown by load_class, load_first_existing_class, and load_optional_class,
      as well as the error returned by try_load_class
    - Exceptions are now croaked properly so they appear to come from the calling
      code, not from an internal subroutine; this makes the exceptions look more
      like the ones thrown by Perl's require (CPAN RT#68663)
  - This release by DROLSKY -> update source URL
  - BR: perl(Scalar::Util) for the module
  - BR: perl(lib) for the test suite
  - Drop buildreqs perl(strict) and perl(warnings) - not dual-lived


author: Paul Howarth <paul@city-fan.org> - 2.055-1
changelog:
  - Update to 2.055
    - Fix misuse of magic in API (CPAN RT#78080)
  - Drop redundant explicit requires for perl(Exporter) and perl(File::Temp)


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - Compress::Raw::Bzip2 needs to use PERL_NO_GET_CONTEXT (CPAN RT#80318)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79811)
    - Update to ppport.h that includes SvPV_nomg_nolen (CPAN RT#78080)


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - Compress::Raw::Zlib needs to use PERL_NO_GET_CONTEXT (CPAN RT#80319)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79812)
    - Update to ppport.h that includes SvPV_nomg_nolen (CPAN RT#78079)


author: Paul Howarth <paul@city-fan.org> - 2.061-1
changelog:
  - Update to 2.061
    - Include zlib 1.2.8 source
    - Typo fix (CPAN RT#85431)
    - Silence compiler warning by making 2nd parameter to DispStream a const char*


author: Paul Howarth <paul@city-fan.org> - 0.64-3
changelog:
  - Remove circular BR: perl(Net::SSL) provided by this package
  - Placate rpmlint regarding file permissions
  - Don't need to remove empty directories from the buildroot


author: Marcela Mašláňová <mmaslano@redhat.com> 1.34-1
changelog:
  - update by Fedora::App::MaintainerTools 0.006
  - updating to latest GA CPAN version (1.34)
  - replaced old BR on perl(Test::Simple) with Test::More
  - added a new req on perl(DBI) (version 1.21)


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.135.07-240
changelog:
  - update the version to override the module from perl.srpm
  - bump release to override sub-package from perl.spec


author: Paul Howarth <paul@city-fan.org> - 0.107-3
changelog:
  - package LICENSE file
  - run test suite even when bootstrapping, as it should still pass
  - run release tests too
  - enhance %description so it makes sense
  - BR: perl(Test::More)


author: Paul Howarth <paul@city-fan.org> - 0.107-4
changelog:
  - drop -tests subpackage (general lack of interest in this), but include
    them as documentation for the main package
  - drop redundant %{?perl_default_filter}
  - don't use macros for commands
  - can't find any dependency cycle so drop %{?perl_bootstrap} usage
  - drop ExtUtils::MakeMaker version requirement to 6.30, actual working minimum


author: Petr Pisar <ppisar@redhat.com> - 2:1.04-6
changelog:
  - Restore object after failed truncate() call (bug #1095111)
  - Add 2015-06-30 and 2016-12-31 leap seconds (bug #1353509)


author: Petr Pisar <ppisar@redhat.com> - 1.70-1
changelog:
  - 1.70 bump (bug #1101251)
  - Regenerate Perl code from timezone sources (bug #1101251)
  - Update time zone data to Olson 2017b (bug #1101251)


author: Paul Howarth <paul@city-fan.org> - 1:2.08-8
changelog:
  - Spec clean-up:
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - BR: perl(Carp)
    - BR: perl(Test::Pod) and perl(Test::Pod::Coverage) if not bootstrapping
    - Use %{_fixperms} macro instead of our own chmod incantation
    - Make %files list more explicit


author: Petr Pisar <ppisar@redhat.com> - 2.51-6
changelog:
  - Rebuild against "file" package fixed by Jan Kaluza to correct run-time
    dependencies (bug #1048910)


author: Paul Howarth <paul@city-fan.org> - 1:0.17020-1
changelog:
  - Update to 0.17020
    - Change to Shlomi Fish's new E-mail and web address
    - Clarify the licence of lib/Error/Simple.pm (CPAN RT#81277)
    - Correct typos (CPAN RT#85023)
  - Don't use macros for commands
  - Don't need to remove empty directories from the buildroot
  - Make %files list more explicit
  - Drop %defattr, redundant since rpm 4.4
  - Avoid provides/requires from examples


author: Petr Šabata <contyk@redhat.com> - 2.46-1
changelog:
  - 2.46 bump
  - Specify all dependencies
  - Drop command macros
  - Modernize the spec and clean whitespace


author: Paul Howarth <paul@city-fan.org> - 3.20-10
changelog:
  - Clean up spec file for modern rpmbuild:
    - Drop BuildRoot definition
    - Drop %defattr
    - Drop %clean section
    - Drop cleaning of buildroot in %install
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Use %{_fixperms} macro rather than our own chmod incantation
    - Don't use macros for commands
  - Break build dependency loop by only using perl(Test::Pod) if we're not
    bootstrapping
  - BR: perl(Test::More)


author: Paul Howarth <paul@city-fan.org> - 1:5.02-4
changelog:
  - Don't BR: perl(Test::LeakTrace) when bootstrapping
  - Don't use macros for commands
  - Don't need to remove empty directories from the buildroot
  - Drop explicit provides for perl(HTML::Tree) now that CPAN and RPM versions
    are back in sync


author: Petr Pisar <ppisar@redhat.com> 6.00-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Remove BuildRoot stuff
  - Conflicts with perl-libwww-perl-5* and older


author: Petr Pisar <ppisar@redhat.com> - 0.033-2
changelog:
  - Croak on failed write into a file (bug #1031096)
  - Do not use already existing temporary files (bug #1031096)


author: Paul Howarth <paul@city-fan.org> - 2.055-1
changelog:
  - Update to 2.055
    - FAQ: added a few paragraphs on how to deal with pbzip2 files
      (CPAN RT#77743)
    - Compress::Zip: speed up compress, uncompress, memGzip and memGunzip
      (CPAN RT#77350)
  - BR: perl(lib)
  - Drop BR: perl(Test::Builder) and perl(Test::More) as they're bundled
  - Drop BR: perl(Config), perl(Fcntl), perl(File::Copy), perl(File::Glob),
    perl(POSIX) and perl(Symbol) as they're not dual-lived
  - Drop redundant explicit require for perl(Exporter)
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - IO::Compress::Zip
      - Allow member name and Zip Comment to be "0"
    - IO::Compress::Base::Common
      - Remove "-r" test - the file open will catch this
      - IO::Compress::Base::Common returned that it could not read readable files
        in NFS (CPAN RT#80855)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79820)
    - General performance improvements
    - Fix failing 01misc.t subtest introduced in 2.057 (CPAN RT#81119)
  - Explicitly install to 'perl' directories


author: Paul Howarth <paul@city-fan.org> - 2.059-1
changelog:
  - Update to 2.059
    - IO::Compress::Base
      - Added "Encode" option (fixes the encoding half of CPAN RT#42656)


author: Paul Howarth <paul@city-fan.org> - 2.060-1
changelog:
  - Update to 2.060
    - Updated POD
      - CPAN RT#82138: Example code not clear - gunzip() takes filenames!
    - IO::Compress::Base
      - Remove the flush call when opening a filehandle


author: Paul Howarth <paul@city-fan.org> - 2.061-1
changelog:
  - Update to 2.061
    - zipdetails (1.06)
      - Get it to cope with Android 'zipalign' non-standard extra fields; these
        are used to make sure that a non-compressed member starts on a 4 byte
        boundary
    - unzip example with IO::Uncompress::Unzip (CPAN RT#84647)


author: Paul Howarth <paul@city-fan.org> - 2.66-1
changelog:
  - Update to 2.66
    - Fix inet_pton/inet_ntop import warnings (CPAN RT#55901)
    - Fix listening on :: or 0.0.0.0 (CPAN RT#54656)
    - Add test listen_port_only.t
    - Solved problems with multihomed and family order (CPAN RT#57676)
    - Fix select timeout issue in t/io_multihomed6.t
    - Fix t/io_multihomed6.t on systems with broken getaddrinfo() (CPAN RT#58198)
    - Made the "use Socket" call import constants selectively, and not rely on
      @EXPORT's whims


author: Paul Howarth <paul@city-fan.org> - 2.69-1
changelog:
  - Update to 2.69:
    - Solved symbol clashes in t/io_multihomed6.t (CPAN RT#72769)
    - Fix the imports on t/io_multihomed6.t (CPAN RT#72769)
    - Update the link to the repository in Build.PL
  - BR: perl(IO::Socket)
  - BR: perl(Socket)
  - Use %{_fixperms} macro instead of our own chmod incantation


author: Paul Howarth <paul@city-fan.org> - 1.91-1
changelog:
  - Update to 1.91
    - Added IO::Socket::SSL::Utils for easier manipulation of certificates and
      keys
    - Moved SSL interception into IO::Socket::SSL::Intercept and simplified it
      using IO::Socket::SSL::Utils
    - Enhance meta information in Makefile.PL
  - Bump openssl version requirement to 0.9.8a
  - Need at least version 6.58 of ExtUtils::MakeMaker (CPAN RT#85739)


author: Paul Howarth <paul@city-fan.org> - 1.92-1
changelog:
  - Update to 1.92
    - Intercept: use sha1-fingerprint of original cert for id into cache unless
      otherwise given
    - Fix pod error in IO::Socket::SSL::Utils (CPAN RT#85733)


author: Paul Howarth <paul@city-fan.org> - 1.93-1
changelog:
  - Update to 1.93
    - Need at least OpenSSL version 0.9.8 now, since last 0.9.7 was released 6
      years ago; remove code to work around older releases
    - Changed AUTHOR in Makefile.PL from array back to string, because the array
      feature is not available in MakeMaker shipped with 5.8.9 (CPAN RT#85739)
  - Set openssl version requirement to 0.9.8
  - Drop ExtUtils::MakeMaker version requirement back to 6.46


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Makefile.PL reported wrong version of openssl if Net::SSLeay was not
      installed, instead of reporting a missing dependency of Net::SSLeay


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-4
changelog:
  - Respect OpenSSL default ciphers and protocol versions (bug #1127322)
  - Fix typo in Utils.pm (bug #1097710)


author: Paul Howarth <paul@city-fan.org> 2.110-17
changelog:
  - spec clean-up:
    - nobody else likes macros for commands
    - use DESTDIR rather than PERL_INSTALL_ROOT
    - add buildreqs for core perl modules, which may be dual-lived


author: Paul Howarth <paul@city-fan.org> 2.110-18
changelog:
  - don't build-require modules that this package provides (problem stupidly
    introduced in previous release)
  - don't need to remove empty directories from buildroot
  - drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 2.27200-241
changelog:
  - BR: perl(base), perl(constant) and perl(lib)
  - Install to vendor directories
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot


author: Petr Šabata <contyk@redhat.com> - 2.27200-242
changelog:
  - Correct the URL
  - Add a few missing buildtime dependencies
  - Drop Getopt::Long dep; json_pp isn't tested


author: Paul Howarth <paul@city-fan.org> - 2.27202-1
changelog:
  - Update to 2.27202
    - Fix test failures due to hash iterator randomization in perl 5.17.6 onwards
      (CPAN RT#83421)


author: Petr Pisar <ppisar@redhat.com> - 1:0.56-3
changelog:
  - Do not set SSL ciphers at all by default (bug #1091316)
  - Pass actual length to syswrite() instead of default 1500 B (bug #1104243)


author: Petr Pisar <ppisar@redhat.com> 6.01-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Remove BuildRoot stuff
  - Conflicts with perl-libwww-perl 5* and older


author: Paul Howarth <paul@city-fan.org> - 0.33-1
changelog:
  - Update to 0.33
    - Updated can_xs to fix a bug in it
  - Reinstate compatibility with old distributions like EL-5
  - Drop Test::More version requirement to 0.42
  - BR: perl(ExtUtils::MakeMaker)
  - BR: perl(Test::LeakTrace) except on EL-4/EL-5 where it's not available
  - BR: perl(Pod::Simple), perl(Test::CPAN::Meta), perl(Test::MinimumVersion)
    (if we're not bootstrapping) and perl(Test::Pod), and run the developer tests
    too
  - Don't use macros for commands
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Make %files list more specific
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 0.33-7
changelog:
  - BR:/R: perl(Carp)
  - BR: perl(constant), perl(Exporter) and perl(ExtUtils::CBuilder)
  - Add commentary regarding non-use of Test::LeakTrace for EL-7 builds
  - Use Test::LeakTrace for EL-5 builds
  - Drop support for EL-4 builds since it was EOL-ed ages ago
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Remove more command macros


author: Petr Šabata <contyk@redhat.com> - 0.39-7.1
changelog:
  - Add a few more missing build-time deps
  - Correct the licence tag
  - Modernize the spec a bit
  - Package the example scripts in their directory


author: Paul Howarth <paul@city-fan.org> - 2.8.0-3
changelog:
  - Fix broken POD (CPAN RT#86060)
  - Work around test suite failures with Net::DNS ≥ 0.68 (CPAN RT#78214)


author: Paul Howarth <paul@city-fan.org> - 2.08-3
changelog:
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - One buildreq per line for readability
  - Add buildreqs for core perl modules, which might be dual-lived


author: Paul Howarth <paul@city-fan.org> - 2.09-1
changelog:
  - Update to 2.09
    - Remove dependency to Test::Pod by moving 99pod.t from t/ to xt/
      (CPAN RT#69918)
  - BR: perl(Net::Domain) ≥ 1.05 and perl(Net::SMTP) ≥ 1.03
  - Explicitly run xt/ tests


author: Paul Howarth <paul@city-fan.org> 2.10-1
changelog:
  - Update to 2.10
    - Mail::Mailer::smtp set from address twice (CPAN RT#77161)
    - Mail::Mailer::smtps did not support the From option (CPAN RT#77161)
    - Mail::Util::mailaddress has now an optional parameter to set the returned
      value explicitly (CPAN #75975)
  - BR: perl(base)
  - Drop BR: perl(Config) and perl(POSIX), not dual-lived
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> 2.12-1
changelog:
  - Update to 2.12
    - Default for Mail::Header::new(Modify) is 'false', not 'true'
      (CPAN RT#79985)
    - Mail::Address take username with rindex(), a bit better than index() but
      still poor (CPAN RT#82056)
    - Check for bad folding of header lines (CPAN RT#79993)
    - Add a note about better to avoid Mail::Address->name() (CPAN RT#81459)
  - Drop UTF8 patch, no longer needed


author: Paul Howarth <paul@city-fan.org> - 0.03-3
changelog:
  - Incorporate feedback from package review (#788258)
    - Correct License tag, which should be Artistic 2.0
    - BR: perl(lib) for test suite
    - Explicitly require perl(Carp), not automatically detected


author: Paul Howarth <paul@city-fan.org> - 0.04-1
changelog:
  - Update to 0.04
    - This module no longer installs an _implementation() subroutine in callers;
      instead, you can call Module::Implementation::implementation_for($package)
      to get the implementation used for a given package
  - Update patch for building with old Test::More versions


author: Paul Howarth <paul@city-fan.org> - 0.05-1
changelog:
  - Update to 0.05
    - Make Test::Taint an optional dependency; it requires XS, and requiring a
      compiler for Module::Implementation defeats its purpose (CPAN RT#74817)
  - BR: perl(Test::Requires)
  - Update patch for building with old Test::More versions


author: Paul Howarth <paul@city-fan.org> - 0.06-3
changelog:
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from buildroot
  - Add commentary regarding conditionalized buildreqs


author: Paul Howarth <paul@city-fan.org> - 1.000012-1
changelog:
  - Update to 1.000012
    - Improved package detection heuristics
    - Fix ->contains_pod (CPAN RT#84932)
    - Fix detection of pod after __END__ (CPAN RT#79656)
  - This release by ETHER -> update source URL
  - Package new upstream README file


author: Paul Howarth <paul@city-fan.org> - 1.000014-1
changelog:
  - Update to 1.000014
    - Fix reliance on recent Test::Builder
    - Make tests perl 5.6 compatible
  - This release by BOBTFISH -> update source URL


author: Paul Howarth <paul@city-fan.org> - 1.000016-1
changelog:
  - Update to 1.000016
    - Re-release to fix prereqs and other metadata
  - This release by ETHER -> update source URL
  - Specify all dependencies


author: Paul Howarth <paul@city-fan.org> - 1.000018-1
changelog:
  - Update to 1.000018
    - Re-release of de-tainting fix without unstated non-core test dependencies
  - Drop BR: perl(Test::Fatal)


author: Paul Howarth <paul@city-fan.org> - 0.68-5
changelog:
  - BR: perl(constant), perl(Data::Dumper) and perl(lib)
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 0.69-1
changelog:
  - Update to 0.69
    - Support for gpg under these alternate names: gpg gpg2 gnupg gnupg2
  - This release by AUDREYT -> update source URL
  - BR:/R: perl(Text::Diff)
  - Include Andreas Koenig's GPG key in the SRPM and import it in %prep so
    that we don't need to get it from a keyserver in %check


author: Paul Howarth <paul@city-fan.org> - 0.73-1
changelog:
  - Update to 0.73
    - Constrain the user-specified digest name to /^\w+\d+$/
    - Only allow loading Digest::* from absolute paths in @INC (CVE-2013-2145)


author: Paul Howarth <paul@city-fan.org> - 1.51-1
changelog:
  - update to 1.51
    - fixed a problem where SSL_set_SSL_CTX is not available with
      OpenSSL < 0.9.8f (CPAN RT#81940)
  - fix bogus date in spec changelog


author: Paul Howarth <paul@city-fan.org> - 1.52-1
changelog:
  - update to 1.52
    - rebuild package with gnu format tar, to prevent problems with unpacking on
      other systems such as old Solaris


author: Paul Howarth <paul@city-fan.org> - 1.54-1
changelog:
  - update to 1.54
    - added support for SSL_export_keying_material where present (i.e. in OpenSSL
      1.0.1 and later)
    - changed t/handle/external/50_external.t to use www.airspayce.com instead of
      perldition.org, who no longer have an https server
    - patch to fix a crash: P_X509_get_crl_distribution_points on an X509
      certificate with values in the CDP extension that do not have an ia5 string
      would cause a segmentation fault when accessed
    - change in t/local/32_x509_get_cert_info.t to not use
      Net::SSLeay::ASN1_INTEGER_get, since it works differently on 32 and 64 bit
      platforms
    - updated author and distribution location details to airspayce.com
    - improvement to test 07_sslecho.t so that if set_cert_and_key fails we can
      tell why


author: Paul Howarth <paul@city-fan.org> - 1.55-1
changelog:
  - update to 1.55
    - added support for TLSV1_1 and TLSV1_2 methods with SSL_CTX_tlsv1_1_new(),
      SSL_CTX_tlsv1_2_new(), TLSv1_1_method() and TLSv1_2_method(), where
      available in the underlying openssl
    - added CRL support functions X509_CRL_get_ext(), X509_CRL_get_ext_by_NID(),
      X509_CRL_get_ext_count()
    - fixed a problem that could cause content with a value of '0' to be
      incorrectly encoded by do_httpx3 and friends (CPAN RT#85417)
    - added support for SSL_get_tlsa_record_byname() required for DANE support in
      openssl-1.0.2 and later
    - testing with openssl-1.0.2-stable-SNAP-20130521
    - added X509_NAME_new and X509_NAME_hash


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.55-6
changelog:
  - Deleted support for SSL_get_tlsa_record_byname (bug #1422435)
  - Removed tests which fails due to changes openssl 1.0.1h and later


author: Paul Howarth <paul@city-fan.org> - 4.064-1
changelog:
  - Update to 4.064
    - Updated GPL v2.0 text and address in all modules
    - Added support for rfc3021 /31 networks to hostenum
  - Update UTF8 patch


author: Paul Howarth <paul@city-fan.org> - 4.067-1
changelog:
  - Update to 4.067
    - Improved diagnostic message for "die" with bad mask for hostenum,
      hostenumref, split, splitref, rsplit, rsplitref
  - Include new docfile About-NetAddr-IP.txt


author: Paul Howarth <paul@city-fan.org> - 4.069-1
changelog:
  - Update to 4.069
    - Add proper pod encoding in Lite.pm
    - Changed Makefile.PL to check for config.h when building for XS with 'gcc',
      try building with 'cc', and check again; if config.h is not found, force
      Pure Perl mode
    - Kill XS in winduhs and Darwin, both of which misbehave when compiling XS
      code
  - Drop UTF8 patch, no longer needed


author: Paul Howarth <paul@city-fan.org> - 0.12-1
changelog:
  - Update to 0.12:
    - Fix tests to pass with Carp 1.25 (CPAN RT#75520)
  - BR: perl(Test::Spelling), aspell-en
  - Add patch to accept "deprecations" as a valid dictionary word
  - Update patches to apply cleanly
  - Don't need to remove empty directories from buildroot
  - Don't use macros for commands
  - Drop EPEL-4 support:
    - Drop patch supporting build with ExtUtils::MakeMaker < 6.30


author: Paul Howarth <paul@city-fan.org> - 0.13-1
changelog:
  - Update to 0.13:
    - Fix dist.ini to not add Test::Spelling as a requirement
  - Drop %defattr, redundant since rpm 4.4
  - Test::Requires available on all supported distributions


author: Paul Howarth <paul@city-fan.org> - 0.32-1
changelog:
  - Update to 0.32
    - Bring the behavior of has_symbol for nonexistant scalars into line with the
      XS version
    - Invalid package names (for instance, Foo:Bar) are not allowed
    - Invalid stash entry names (anything containing ::) are not allowed
  - Update patches to apply cleanly
  - Bump perl(Package::Stash::XS) version requirement to 0.24


author: Paul Howarth <paul@city-fan.org> - 0.33-6
changelog:
  - Drop EPEL-4 support
    - Drop %defattr, redundant since rpm 4.4
    - Test::LeakTrace, Test::Requires and Test::Script are now universally available
    - A suitably recent version of ExtUtils::MakeMaker is now universally available
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.34-1
changelog:
  - Update to 0.34
    - Support anonymous stashes on newer perl versions
    - Prevent harmful effects from invalid settings for
      $ENV{PACKAGE_STASH_IMPLEMENTATION}
    - Switch to Module::Implementation
  - BR: perl(Module::Implementation) ≥ 0.06
  - BR: perl(base) for test suite
  - Bump Package::Stash::XS version requirement to 0.26
  - Explicitly run extra tests (except on RHEL ≥ 7, where the necessary
    build dependencies may not be available)
  - Update patch for building with old Test::More version in EPEL-5


author: Paul Howarth <paul@city-fan.org> - 0.25-1
changelog:
  - Update to 0.25
    - Invalid package names (for instance, Foo:Bar) are not allowed
    - Invalid stash entry names (anything containing ::) are not allowed
  - Update patches to apply cleanly


author: Paul Howarth <paul@city-fan.org> - 0.25-6
changelog:
  - Drop EPEL-4 support
    - Test::LeakTrace now universally available
    - Suitably recent version of ExtUtils::MakeMaker now universally available
    - Drop %defattr, redundant since rpm 4.4
  - BR: perl(File::Temp)
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - Internal refactorings to support Package::Anon stashes
  - BR: perl(base) and perl(Test::Requires) for test suite
  - Update patch for old distro compatibility
  - Explicitly run the release/author tests


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.08-1
changelog:
  - Upstream update.
  - Update patch.
  - Update BRs.
  - Add %bcond --with network.
  - Fix up %changelog dates.


author: Paul Howarth <paul@city-fan.org> - 1.002-241
changelog:
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Don't delete the extra tests when bootstrapping, but don't run them either


author: Paul Howarth <paul@city-fan.org> - 1.003-1
changelog:
  - Update to 1.003
    - Fixed detection of VOS; $^O reports 'vos', not 'VOS'
    - Additional release tests
  - BR: perl(File::Spec::Functions), perl(List::Util),
    perl(Perl::Critic::Policy::Lax::ProhibitStringyEval::ExceptForRequire),
    perl(Pod::Wordlist::hanekomu), perl(Test::MinimumVersion),
    perl(Test::Perl::Critic), perl(Test::Spelling) and perl(Test::Version)
  - Identify purpose of each build requirement
  - Update patches for building on old distributions
  - Don't run extra tests for EPEL-5/6 builds


author: Petr Pisar <ppisar@redhat.com> 0.003-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Do not build-require File::Find, Socket, and warnings::register which are
    not exercised by tests
  - Sort provides by English rules


author: Petr Pisar <ppisar@redhat.com> - 0.54-4
changelog:
  - Support cpu_type on ARM and AArch64 (bug #1093266)
  - Accept undefined cpu_clock on ARM and AArch64 (bug #1093266)


author: Daniel P. Berrangé <berrange@redhat.com> - 4.5.0-2
changelog:
  - Fix typed parameter memory handling (rhbz#1613227)
  - Fix missing NWFilterBinding module (rhbz#1608755)


author: Petr Pisar <ppisar@redhat.com> - 2.30-17
changelog:
  - Modernize spec file
  - Specify all dependencies
  - Change license to "(Copyright only) and (Artistic or GPL+)" because of
    ppport.h


author: Petr Pisar <ppisar@redhat.com> - 1.48-3
changelog:
  - Clarify license (bug #1065946)
  - Remove run-time dependency on Test::Builder::Tester (bug #1065944)
  - Declare run-time dependency on File::Find (bug #1066006)


author: Paul Howarth <paul@city-fan.org> - 0.98-241
changelog:
  - Merge tests sub-package back into main package
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4
  - Make %files list more explicit
  - Don't use macros for commands
  - Mark Tutorial.pod as %doc
  - Drop explicit dependency on perl-devel


author: Jitka Plesnikova <jplesnik@redhat.com> - 0.04-18
changelog:
  - Update dependencies
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Remove build root cleaning, BuildRoot definition and %defattr


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:1.20-10
changelog:
  - Remove perl(base) from BR
  - Package README and ChangeLog
  - Replace PERL_INSTALL_ROOT with DESTDIR
  - Remove deleting empty directories


author: Paul Howarth <paul@city-fan.org> - 0.11-4
changelog:
  - BR: perl(Carp)
  - Don't need to remove empty directories from buildroot
  - Don't use macros for commands
  - Drop redundant %{?perl_default_filter}
  - Enhance %description
  - Reinstate EPEL-5 compatibility:
    - Define buildroot
    - Clean buildroot in %install and %clean
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 1.59-3
changelog:
  - Break build dependency loop by only using perl(Business::ISBN) if we're not
    bootstrapping
  - BR: perl(Carp) and perl(Exporter)
  - Make %files list more explicit
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 1.60-1
changelog:
  - Update to 1.60
    - Do not reverse the order of new parameters
    - Avoid test failure if the local hostname is 'foo' (CPAN RT#75519)
    - Work around a stupid join bug in 5.8.[12] (CPAN RT#59274)
    - Updated repository URL
  - Don't need to remove empty directories from buildroot
  - BR: perl(constant)


author: Paul Howarth <paul@city-fan.org> - 1.60-8
changelog:
  - Retain runtime dependency of perl(Business::ISBN) when bootstrapping; a
    better fix for the build dependency cycle was to drop LWP::Simple as a
    buildreq of perl-Business-ISBN (needed only for optional tests) when
    bootstrapping


author: Petr Pisar <ppisar@redhat.com> - 1:2.0016-1
changelog:
  - 2.0016 bump (disable XML_PARSE_HUGE by default to prevent from
    CVE-2003-1564, a recursive XML entity expansion leads to memory exhaustion
    in a XML parser)


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.41-8
changelog:
  - Update dependencies and summary
  - Remove pre-RPM-4.9 filters
  - Remove deleting empty directories
  - Update REC-xml-19980210.xml to match new encoding


author: Paul Howarth <paul@city-fan.org> - 0.99-3
changelog:
  - Drop redundant runtime dependencies on perl(XML::LibXML) and
    perl(XML::LibXML::Common), which cause circular build dependencies (#720974)
  - Simplify provides and requires filters
  - Don't need to remove empty directories from buildroot
  - Mark POD files as %doc


author: Jitka Plesnikova <jplesnik@redhat.com> - 0.99-7
changelog:
  - Update dependencies and summary
  - Remove xmltest.xml due to copyright
  - Replace PERL_INSTALL_ROOT with DESTDIR


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.08-6
changelog:
  - Update dependencies
  - Replace PERL_INSTALL_ROOT with DESTDIR
  - Update description and summary
  - Remove deleting empty directories
  - Remove dist.ini from %doc


author: Petr Šabata <contyk@redhat.com> - 0.621-1
changelog:
  - 0.621 bump
  - Lots of bugfixes
  - Packaging examples
  - Fixing build-time deps and removing unneeded lines
  - Fixing changelog issues


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.13-17
changelog:
  - 680418 - missing man page for xpath
  - applied debian patch, which added POD into xpath code, but also fix debian bug(#185292)


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.13-22
changelog:
  - revert the patch. It breaks backward compatibility for some apps. 
  - the xpath has still man page installed.
  - Resolves: rhbz#1067903


author: Paul Howarth <paul@city-fan.org> - 0.81-2
changelog:
  - R: perl(Carp) and perl(Data::Dumper)
  - BR: perl(Carp), perl(constant) and perl(Exporter)
  - Release tests no longer shipped, so drop buildreqs for them and don't bother
    setting AUTOMATED_TESTING; run tests even when bootstrapping


author: Paul Howarth <paul@city-fan.org> - 0.84-2
changelog:
  - Haven't needed to fix documentation character encoding since 0.79
  - Drop Test::Base build dependency again to avoid a BR loop (#215637)
  - Filter private provides perl(yaml_mapping), perl(yaml_scalar) and
    perl(yaml_sequence)
  - Don't need to remove empty directories from the buildroot
  - This release by MSTROUT -> update source URL


author: Petr Šabata <contyk@redhat.com> - 1.05-26.2
changelog:
  - Fix the package for el7
  - Modernize the spec
  - Correct a bogus date in changelog
  - Unify spec whitespace


author: Petr Šabata <contyk@redhat.com> - 0.08-18
changelog:
  - Correct buildtime dependencies
  - Correct the licence tag
  - Update the provides filter
  - Drop command macros
  - Modernize spec


author: Marcela Mašláňová <mmaslano@redhat.com> - 1:0.225-4
changelog:
  - Install to vendor directories rather than perl core directories so as to
    avoid conflicts between our debuginfo and the main perl-debuginfo package


author: Paul Howarth <paul@city-fan.org> - 1:0.225-6
changelog:
  - Reinstate compatibility with old distributions like EL-5
    - Add back buildroot definition and cleaning
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Make %files list more explicit
  - Drop redundant %{?perl_default_filter}
  - Don't use macros for commands
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 1:0.225-242
changelog:
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.42-2
changelog:
  - Add BR perl(File::Spec)
  - Replace PERL_INSTALL_ROOT with DESTDIR
  - Remove deleting empty directories
  - Remove defattr


author: Darren Archibald <darren.archibald@oracle.com> - 0.109-11.0.1
changelog:
  - RPM macro fix (Petr Benes)
  - updates for Oracle Linux test certificate (Alexey Petrenko)
  - update Oracle Linux certificates (Alexey Petrenko)


author: Remi Collet <rcollet@redhat.com> - 5.4.16-33
changelog:
  - core: use after free vulnerability in unserialize()
    CVE-2014-8142 and CVE-2015-0231
  - core: fix use-after-free in unserialize CVE-2015-2787
  - core: fix NUL byte injection in file name argument of
    move_uploaded_file() CVE-2015-2348
  - date: use after free vulnerability in unserialize CVE-2015-0273
  - enchant: fix heap buffer overflow in enchant_broker_request_dict
    CVE-2014-9705
  - exif: free called on unitialized pointer CVE-2015-0232
  - fileinfo: fix out of bounds read in mconvert CVE-2014-9652
  - gd: fix buffer read overflow in gd_gif_in.c CVE-2014-9709
  - phar: use after free in phar_object.c CVE-2015-2301
  - soap: fix type confusion through unserialize


author: Remi Collet <rcollet@redhat.com> - 5.4.16-34
changelog:
  - fix memory corruption in fileinfo module on big endian
    machines #1082624
  - fix segfault in pdo_odbc on x86_64 #1159892
  - fix segfault in gmp allocator #1154760


author: Remi Collet <rcollet@redhat.com> - 5.4.16-35
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4025, CVE-2015-4026, #1213407
  - fileinfo: fix denial of service when processing a crafted
    file #1213442
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix buffer over-read in metadata parsing CVE-2015-2783
  - phar: invalid pointer free() in phar_tar_process_metadata()
    CVE-2015-3307
  - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - soap: fix type confusion through unserialize #1222538
  - apache2handler: fix pipelined request executed in deinitialized
    interpreter under httpd 2.4 CVE-2015-3330


author: Remi Collet <rcollet@redhat.com> - 5.4.16-38
changelog:
  - curl: add options to enable TLS #1291667
  - mysqli: fix segfault in mysqli_stmt::bind_result() when
    link is closed #1096800
  - fpm: fix incorrectly defined SCRIPT_NAME variable when
    using Apache #1138563
  - core: fix segfault when a zend_extension is loaded twice #1289457
  - openssl: change default_md algo from MD5 to SHA1 #1073388
  - wddx: fix segfault in php_wddx_serialize_var #1131979


author: Remi Collet <rcollet@redhat.com> - 5.4.16-41
changelog:
  - gd: fix integer overflow in _gd2GetHeader() resulting in
    heap overflow CVE-2016-5766
  - gd: fix integer overflow in gdImagePaletteToTrueColor()
    resulting in heap overflow CVE-2016-5767
  - mbstring: fix double free in _php_mb_regex_ereg_replace_exec
    CVE-2016-5768


author: Remi Collet <rcollet@redhat.com> - 5.4.16-43
changelog:
  - gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
  - gd: Signed Integer Overflow gd_io.c CVE-2016-10168


author: Remi Collet <rcollet@redhat.com> - 5.4.16-44
changelog:
  - fix php should provide php(httpd) #1215429
  - fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
    default value is "yes", preserving previous behaviour
  - openssl: fix default_socket_timeout does not work with SSL #1378196


author: Remi Collet <rcollet@redhat.com> - 5.4.16-47
changelog:
  - fix stack-buffer-overflow while parsing HTTP response CVE-2018-7584
  - fix out-of-bounds read in base64_decode_xmlrpc CVE-2019-9024
  - fix reflected XSS in phar 404 page CVE-2018-5712
  - fix reflected XSS in phar 403 and 404 error pages CVE-2018-10547


author: Remi Collet <remi@fedoraproject.org> 1:1.9.4-14
changelog:
  - add explicit requires on all needed extensions (phpci)
  - fix pecl launcher (need ini to be parsed for some
    extenstions going to be build as shared, mainly simplexml)
  - add fix for new unpack format (php 5.5)


author: Remi Collet <remi@fedoraproject.org> - 3.0.7-5
changelog:
  - add patch for https://bugs.php.net/59602
    segfault in getExtendedStats
  - also provides php-memcache


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-1
changelog:
  - Require "nss >= 3.28.3" as a build and runtime requirement
  - Require "jss >= 4.4.0-4" as a build and runtime requirement
  - Require "tomcatjss >= 7.2.1-3" as a build and runtime requirement
  - dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
    failure (edewata)
  - ############################################################################
  - Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
  - Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
    pki-console to 10.4.x
  - ############################################################################
  - RHEL 7.4:
  - ############################################################################
  - ############################################################################
  - RHCS 9.2:
  - ############################################################################
  - ############################################################################
  - Common Criteria
  - ############################################################################
  - Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
    implementation (cfu)
  - Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
    cert requests (cfu)
  - Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
    (edewata)
  - Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
    protection cert mechanism (cfu)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-2
changelog:
  - ############################################################################
  - RHEL 7.4:
  - ############################################################################
  - Bugzilla Bug #1282504 - Installing pki-server in container reports
    scriptlet failed, exit status 1 (jpazdziora)
  - Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
    enabled system (edewata)
  - Bugzilla Bug #1410650 - [RFE] Add SCP03 support
    for sc 7 g & d cards (RHEL) (jmagne)
  - Bugzilla Bug #1437591 - cli authentication using expired cert throws an
    exception (edewata)
  - Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
    request (edewata)
  - ############################################################################
  - RHCS 9.2:
  - ############################################################################
  - Bugzilla Bug #1274086 - [RFE] Add SCP03 support
    for sc 7 g & d cards (RHCS) (jmagne)
  - ############################################################################
  - Common Criteria
  - ############################################################################
  - Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
    (edewata)
  - Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
  - Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
    implementation (cfu)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-3
changelog:
  - ############################################################################
  - RHEL 7.4:
  - ############################################################################
  - Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
    conjuction with FreeIPA (ftweedal)
  - Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
    startTime parameter is not working as expected. (jmagne)
  - Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
    certificate requests (cfu)
  - Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
  - Bugzilla Bug #1445088 - profile modification cannot remove existing config
    parameters (ftweedal)
  - Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
    (RHEL) (alee)
  - Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
    pki CLI terminates SSL connection (edewata)
  - Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
  - ############################################################################
  - RHCS 9.2:
  - ############################################################################
  - Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
    (RHCS) (alee)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-4
changelog:
  - ##########################################################################
  - RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
    HSM is used. (alee)
  - Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
  - Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
    error (cfu)
  - Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
    the KRA (ftweedal)
  - Bugzilla Bug #1448204 - pkispawn of clone install fails with
    InvalidBERException (ftweedal)
  - Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
    thales hsm (alee)
  - Updated "jss" build and runtime requirements (mharmsen)
  - ##########################################################################
  - RHCS 9.2:
  - ##########################################################################
  - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-5
changelog:
  - ##########################################################################
  - RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
    non-signing cert requests (cfu)
  - Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
    CMC with identity proof (cfu)
  - Bugzilla Bug #1447144 - CA brought down during separate KRA instance
    creation (mharmsen)
  - Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
    defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
  - Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
  - Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
  - Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
    ConnectorServlet. (edewata)
  - Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
  - Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
    audit event. (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-7
changelog:
  - ##########################################################################
  - RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
    using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
  - Bugzilla Bug #1445519 - CA Server installation with HSM fails
    (jmagne)
  - Bugzilla Bug #1452617 - Unable to create IPA Sub CA
    (ftweedal)
  - Bugzilla Bug #1454471 - Enabling all subsystems on startup
    (edewata)
  - Bugzilla Bug #1455617 - Key recovery on token fails because
    key record is not marked encrypted (alee)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-8
changelog:
  - Require "selinux-policy-targeted >= 3.13.1-159" as a runtime requirement
  - Require "tomcatjss >= 7.2.1-4" as a build and runtime requirement
  - ##########################################################################
  - RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
    enabled system (edewata)
  - Bugzilla Bug #1447144 - CA brought down during separate KRA instance
    creation (edewata)
  - Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
    ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
  - Bugzilla Bug #1454450 - SubCA installation failure with 2 step
    installation in fips enabled mode (edewata)
  - Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
    is asking for password when already provided (edewata)
  - Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
  - Bugzilla Bug #1458043 - Key recovery using externalReg fails
    with java null pointer exception on KRA (alee)
  - Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
    (edewata)
  - Bugzilla Bug #1458429 - client-cert-import --ca-cert should
    import CA cert with trust bits "CT,C,C" (edewata)
  - ##########################################################################
  - RHCS 9.2:
  - ##########################################################################
  - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-9
changelog:
  - ##########################################################################
  - RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
    using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
  - Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
    non-signing certificate requests (cfu)
  - Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
     revocation non-signing cert requests (cfu)
  - Bugzilla Bug #1458047 - change the way aes clients refer to
    aes keysets (alee)
  - Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
    (alee)
  - Bugzilla Bug #1460028 - In keywrap mode, key recovery on
    KRA with HSM causes KRA to crash (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-10
changelog:
  - ##########################################################################
  - RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1458043 - Key recovery on token fails with
    invalid public key error on KRA (alee)
  - Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
    authentication cert against CMC signer (cfu)
  - Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
    deleting the any of the subsystem certs from it (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-11
changelog:
  - Resolves: rhbz #1469432
  - ##########################################################################
  - RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1469432 - CMC plugin default change
  - Resolves CVE-2017-7537
  - Fixes BZ #1470948


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-12
changelog:
  - Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
  - ##########################################################################
  - RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
    certificate requests (cfu)
    [PREVIOUS PATCH:  pki-core-beta.patch]
    [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
  - Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
    error (cfu)
    [PREVIOUS PATCH:  pki-core-post-beta.patch]
  - Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
    against CMC signer (cfu)
    [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
  - Bugzilla Bug #1463350 - Access banner validation (edewata)
    [pki-core-server-access-banner-validation.patch]
  - Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
    non-signing cert requests (cfu)
    [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
    [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
  - Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
    [pki-core-platform-dependent-python-import.patch]
  - Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
    id-cmc-statusInfoV2 (cfu)
    [pki-core-CMC-id-cmc-statusInfoV2.patch]
  - Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
    (dmoluguw)
    [pki-core-subsystem-cert-update-CLI-cert-option.patch]
  - Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
    (jmagne)
    [pki-core-HSM-key-changeover-SCP03-support.patch]
  - Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
    certificates (cfu)
    [pki-core-system-cert-CMC-enroll-profile.patch]


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-13
changelog:
  - Resolves: rhbz #1463350
  - ##########################################################################
  - RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1463350 - Access banner validation (edewata)
    [pki-core-server-access-banner-retrieval-validation.patch]


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-14
changelog:
  - Require "jss >= 4.4.0-8" as a build and runtime requirement
  - ##########################################################################
  - RHEL 7.4:
  - ##########################################################################
  - Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
  - Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
    [RHEL 7.4.z] (ftweedal)
  - Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
    in cmc user-signed [rhel-7.4.z] (cfu)
  - Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
    RHEL 7.1 [rhel-7.4.z] (ftweedal)
  - Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
    [rhel-7.4.z] (ftweedal)
  - Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
    for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
  - dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
    TypeError: ... is not JSON serializable (ftweedal)
  - ##########################################################################
  - RHCS 9.2:
  - ##########################################################################
  - Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
  - Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
    "tokenType" certificate attribute for recovered certificates. (cfu)
  - Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
    for token certificates on TPS UI (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-16
changelog:
  - ###########################################################################
  - ## RHCS 9.2
  - ###########################################################################
  - #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
    - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
    - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
    - ###########################################################################
  - ## RHEL 7.4
  - ###########################################################################
  - Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
    in some cases [rhel-7.4.z] (cfu)
  - Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
    issuance failure [rhel-7.4.z] (ftweedal)
  - Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
    [rhel-7.4.z] (ftweedal)
    NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
          associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
          update number range in few cases (which is not yet fully resolved)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-17
changelog:
  - ###########################################################################
  - ## RHCS 9.2
  - ###########################################################################
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-5
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    (RHEL)
  - Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
    (jmagne)
  - Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
    setup with CMC signed certificates (cfu)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-6
changelog:
  - Updated jss, nuxwdog, and openssl dependencies
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    (RHEL)
  - Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
    few cases (ftweedal)
  - Bugzilla Bug #1428021 - CC: shared token storage and retrieval
    mechanism (cfu)
  - Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
    would cause error (cfu)
  - Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
     (alee)
  - Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
    pkispawn (alee)
  - Bugzilla Bug #1520526 - p12 admin certificate is missing when
    certificate is signed Externally (edewata)
  - Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
     instance (alee)
  - Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
    missing nextupdate field (ftweedal)
  - Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
  - Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
    in several different files after installation completes (alee)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-7
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
    set (RHEL) (edewata)
  - Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
    audit event logging at startup (jmagne)
  - Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
    (alee)
  - Bugzilla Bug #1525306 - CC: missing CMC request and response record
    (cfu)
  - Bugzilla Bug #1532933 - Installing subsystems with external CMC
    certificates in HSM environment shows import error (edewata)
  - Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
    (edewata)
  - Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
    permitted in fips mode (mharmsen)
  - Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
    outcomes. (edewata)
  - Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
    SharedToken scenario's (cfu)
  - Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
    revRequest.issuer (cfu)
  - Bugzilla Bug #1541853 - ProfileService: config values with
    backslashes have backslashes removed (ftweedal)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
    - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
    - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-8
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    - Bugzilla Bug #1542210 - pki console configurations that involves ldap
    passwords leave the plain text password in debug logs (jmagne)
  - Bugzilla Bug #1543242 - Regression in lightweight CA key replication
    (ftweedal)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-9
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
    set (RHEL) (edewata)
  - Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
  - Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
    and FIPS (edewata)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
    - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-10
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1550581 - CMCAuth throws
    org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
    temporary database [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
    and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
  - Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
    [rhel-7.5.z] (cheimes, mharmsen)
  - Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
    in a certifcate [rhel-7.5.z] (ftweedal)
  - Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
    standard conformance [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
    by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
  - Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
    CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
    StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
  - Bugzilla Bug #1558919 - Not able to generate certificate request
    with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1560233 - libtps does not directly depend on libz


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-11
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
    standard conformance [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
    CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1560233 - libtps does not directly depend on libz


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-12
changelog:
  - Updated "jss" build and runtime requirements (mharmsen)
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
    CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1572548 - IPA install with external-CA is failing when
    FIPS mode enabled. [rhel-7.5.z] (edewata)
  - Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
    [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1575521 - subsystem -> subsystem SSL handshake issue
    with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
    improvement [rhel-7.5.z] (jmagne)
  - Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
    pkispawn configuration step [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
    input class_id [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
    9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-13
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1553068 - Using a Netmask produces an odd
    entry in a certifcate [rhel-7.5.z] (ftweedal)
  - Bugzilla Bug #1585945 - CMC CRMF requests result in
    InvalidKeyFormatException when signing algorithm is ECC
    [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1587826 - ExternalCA: Installation failed during
    csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
  - Bugzilla Bug #1588944 - Cert validation for installation with
    external CA cert [rhel-7.5.z] (edewata)
  - Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
    option to do no key archival (cfu)
  - Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
    ACL configuration in AAclAuthz.java reverses rules that allow
    and deny access [rhel-7.5.z] (ftweedal, cfu)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-14
changelog:
  - Updated "jss" build and runtime requirements (mharmsen)
  - Updated "tomcatjss" build and runtime requirements (mharmsen)
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
    [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1593585 - Need proper default subjectDN for CMC request
    authenticated through SharedToken [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1594128 - CMC: Audit Events needed for failures in
    SharedToken scenario's [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1595606 - AuditVerify failure due to line breaks
    [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1596525 - Address ECC profile overrides [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1596551 - X500Name.directoryStringEncodingOrder overridden
    by CSR encoding [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1553068 - Using a Netmask produces an odd entry in a
    certifcate [rhel-7.5.z] (ftweedal)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-15
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1600905 - pki console configurations that involves ldap
    passwords leave the plain text password in signed audit logs
    [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1611245 - Certificate generation happens with partial
    attributes in CMCRequest file [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1611250 - Better understanding of
    NSS_USE_DECODED_CKA_EC_POINT for ECC [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1612880 - CMC Revocations throws exception with
    same reqIssuer & certissuer [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1614837 - ipa-replica-install --setup-kra broken on
    DL0 with latest version [rhel-7.5.z] (abokovoy)
  - Bugzilla Bug #1614839 - CC: Enable all config audit events
    [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1615266 - ECC keys not supported for signing audit
    logs [rhel-7.5.z] (cfu)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1539933 - keyGen fails when only Identity


author: Dogtag Team <pki-devel@redhat.com> 10.5.0-1
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    (RHEL)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - #Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-7
changelog:
  - Require "tomcatjss >= 7.2.1-8" as a build and runtime requirement
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1632116 - CC: missing audit event for CS acting as
    TLS client [rhel-7.6.z] (cfu)
  - Bugzilla Bug #1632120 - Unsupported RSA_ ciphers should be
    removed from the default ciphers list [rhel-7.6.z] (cfu)
  - Bugzilla Bug #1632615 - Permit certain SHA384 FIPS ciphers to be
    enabled by default for RSA and ECC . . . [rhel-7.6.z] (cfu)
  - Bugzilla Bug #1632616 - X500Name.directoryStringEncodingOrder
    overridden by CSR encoding (coverity changes) [rhel-7.6.z] (mharmsen)
  - Bugzilla Bug #1633104 - CMC: add config to allow non-clientAuth
    [rhel-7.6.z] (cfu)
  - Bugzilla Bug #1636490 - Installation of CA using an existing CA fails
    [rhel-7.6.z] (edewata)
  - Bugzilla Bug #1643878 - pki cli command for RHCS doesn't prompt for
    a password [rhel-7.6.z] (edewata)
  - Bugzilla Bug #1643879 - CC: Identify version/release of pki-ca, pki-kra,
    pki-ocsp, pki-tks, and pki-tps remotely [RHEL] [rhel-7.6.z] (cfu, jmagne)
  - Bugzilla Bug #1643880 - PKI subsystem process is not shutdown when
    there is no space on the disk to write logs [rhel-7.6.z] (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-8
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1645262 - pkidestroy may not remove all files [rhel-7.6.z]
    (dmoluguw)
  - Bugzilla Bug #1645263 - Auth plugins leave passwords in the access
    log and audit log using REST [rhel-7.6.z] (dmoluguw)
  - Bugzilla Bug #1645429 - pkispawn fails due to name collision with
    /var/log/pki/<instance> [rhel-7.6.z] (dmoluguw)
  - Bugzilla Bug #1655951 - CC: tools supporting CMC requests output
    keyID needs to be captured in file [rhel-7.6.z] (cfu)
  - Bugzilla Bug #1656297 - Unable to install with admin-generated keys
    [rhel-7.6.z] (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-9
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
    if enableOCSP is true [rhel-7.6.z] (jmagne)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-10
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
    configuration [rhel-7.6.z] (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
    - # Added Batch Update Information to Product Version (mharmsen)


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-11
changelog:
  - Updated jss dependencies
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1671245 - CC: unable to verify cert before import
    [rhel-7.6.z] (ascheel)
  - Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
    [rhel-7.6.z] (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-13
changelog:
  - Updated jss dependencies
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1671245 - CC: unable to verify cert before import
    [rhel-7.6.z] [manpage] (ascheel)
  - Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
    [rhel-7.6.z] (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)


author: Dogtag Team <pki-devel@redhat.com> 10.5.16-1
changelog:
  - Updated jss dependencies
  - ##########################################################################
  - # RHEL 7.7:
  - ##########################################################################
  - Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
  - ##########################################################################
  - # RHCS 9.5:
  - ##########################################################################
  - # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.16-2
changelog:
  - ##########################################################################
  - # RHEL 7.7:
  - ##########################################################################
  - Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
    Certificate Request [ftweedal]
  - ##########################################################################
  - # RHCS 9.5:
  - ##########################################################################
  - # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.16-3
changelog:
  - ##########################################################################
  - # RHEL 7.7:
  - ##########################################################################
  - Bugzilla Bug #1638379 - PKI startup initialization process should not
    depend on LDAP operational attributes [ftweedal]
  - ##########################################################################
  - # RHCS 9.5:
  - ##########################################################################
  - Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
    pki-console to 10.5.16 in RHCS 9.5


author: Dogtag Team <pki-devel@redhat.com> 10.5.16-4
changelog:
  - ##########################################################################
  - # RHEL 7.7:
  - ##########################################################################
  - Bugzilla Bug #1743122 - RHCS-9 CA clone SSL server cert not issued with its
    custom SAN extension, RHEL-7.6 and HSM [rhel-7.7.z] (edewata)
  - ##########################################################################
  - # RHCS 9.5:
  - ##########################################################################
  - # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.16-5
changelog:
  - ##########################################################################
  - # RHEL 7.7:
  - ##########################################################################
  - Bugzilla Bug #1750277 - CC: missing audit event for CS acting as TLS client
    [rhel-7.7.z] (cfu)
  - ##########################################################################
  - # RHCS 9.5:
  - ##########################################################################
  - # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.16-6
changelog:
  - ##########################################################################
  - # RHEL 7.7:
  - ##########################################################################
  - Bugzilla Bug #1754845 - number range depletion when multiple clones
    created from same master (ftweedal)
  - ##########################################################################
  - # RHCS 9.5:
  - ##########################################################################
  - # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.16-3
changelog:
  - ##########################################################################
  - # RHEL 7.7:
  - ##########################################################################
  - Bugzilla Bug #1638379 - PKI startup initialization process should not
    depend on LDAP operational attributes [ftweedal]
  - ##########################################################################
  - # RHCS 9.5:
  - ##########################################################################
  - # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.17-1
changelog:
  - Updated jss, nuxwdog, and tomcatjss dependencies
  - ##########################################################################
  - # RHEL 7.8:
  - ##########################################################################
  - Bugzilla Bug #1733586 - Rebase pki-core from 10.5.16 to 10.5.17 (RHEL)
  - ##########################################################################
  - # RHCS 9.6:
  - ##########################################################################
  - # Bugzilla Bug #1718418 - Update RHCS version of CA, KRA, OCSP, and TKS so
    - # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


