# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-5
changelog:
  - Bump version to 1.3.10.1-5
  - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6
changelog:
  - Bump version to 1.3.10.1-6
  - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
  - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  - Resolves: Bug 1803052 - Memory leak in ACI using IP subject
  - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
  - Resolves: Bug 1809160 - Entry cache contention during base search


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7
changelog:
  - Bump version to 1.3.10.1-7
  - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-8
changelog:
  - Bump version to 1.3.10.1-8
  - Resolves: Bug 1809160 - Entry cache contention during base search (Fix crash - part 2)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-10
changelog:
  - Bump version to 1.3.10.1-10
  - Resolves: Bug 1814603 - 389-base-ds expected file permissions in package don't match final runtime permissions
  - Resolves: Bug 1836171 - intermittent SSL hang with rhds


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-11
changelog:
  - Bump version to 1.3.10.1-11
  - Resolves: Bug 1839173 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-14
changelog:
  - Bump version to 1.3.10.1-14
  - Resolves: Bug 1814603 - revert patch as it conflicts with 389-admin package


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-6
changelog:
  - Bump version to 1.3.9.1-6
  - Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
  - Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
  - Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
  - Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-7
changelog:
  - Bump version to 1.3.9.1-7
  - Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
  - Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
  - Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-8
changelog:
  - Bump version to 1.3.9.1-8
  - Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
  - Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
  - Resolves: Bug 1713361 - Update defaults.inf
  - Resolves: Bug 1708215 - maxlogsperdir accepting negative values
  - Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-9
changelog:
  - Bump version to 1.3.9.1-9
  - Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
  - Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-10
changelog:
  - Bump version to 1.3.9.1-10
  - Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-1
changelog:
  - Bump version to 1.3.10.1-1
  - Resolves: Bug 1639342 - Replace error by warning in the state machine defined in repl5_inc_run
  - Resolves: Bug 1691931 - memory leak in automember plugin
  - Resolves: Bug 1662461 - Log the actual base DN when the search fails with "invalid attribute request"
  - Resolves: Bug 1732053 - etime can contain invalid nanosecond value
  - Resolves: Bug 1546739 - consistency in the replication error codes while setting nsds5replicaid=65535


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-2
changelog:
  - Bump version to 1.3.10.1-2
  - Resolves: Bug 1748199 - EMBARGOED CVE-2019-14824 389-ds-base: 389-ds and IDM: allows authenticated unprivileged user to retrieve content of userPassword field for any user 
  - Resolves: Bug 1610234 - nsslapd-defaultnamingcontext does not change when the assigned suffix got deleted
  - Resolves: Bug 1723545 - Directory Server 10 not RFC 4511 compliant
  - Resolves: Bug 1724914 - LDAP server returning controltype in different sequence
  - Resolves: Bug 1739182 - CleanAllRUV task limit not enforced
  - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache
  - Resolves: Bug 1685059 - After running cl-dump dbdir/cldb/*ldif.done are not deleted


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-3
changelog:
  - Bump version to 1.3.10.1-3
  - Resolves: Bug 1756182 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
  - Resolves: Bug 1749236 - etime displayed has an order of magnitude 10 times smaller than it should be
  - Resolves: Bug 1758109 - AddressSanitizer: heap-use-after-free in import_free_job
  - Resolves: Bug 1676948 - After audit log file is rotated, DS version string is logged after each update
  - Resolves: Bug 1749595 - Extremely slow LDIF import with ldif2db


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-4
changelog:
  - Bump version to 1.3.10.1-4
  - Resolves: Bug 1765106 - ipa-server-install is failing with ipapython.admintool: ERROR failed to create DS instance Command


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1
changelog:
  - Bump version to  1.3.10.2-1
  - Resolves: Bug 1724761 - Entry cache contention during base search
  - Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
  - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
  - Resolves: Bug 1762901 - cenotaph errors on modrdn operations
  - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
  - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
  - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
  - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
  - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
  - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
  - Resolves: Bug 1796558 - Memory leak in ACI using IP subject
  - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2
changelog:
  - Bump version to  1.3.10.2-2
  - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
  - Resolves: Bug 1801327 - intermittent SSL hang with rhds
  - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
  - Resolves: Bug 1827284 - Memory leak in indirect COS


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3
changelog:
  - Bump version to 1.3.10.2-3
  - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
  - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5
changelog:
  - Bump version to 1.3.10.2-5
  - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6
changelog:
  - Bump version to 1.3.10.2-6
  - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7
changelog:
  - Bump version to 1.3.10.2-7
  - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
  - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8
changelog:
  - Bump version to 1.3.10.2-8
  - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
  - Resolves: Bug 1902042 - Entries conflict not resolved by replication


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10
changelog:
  - Bump version to 1.3.10.2-10
  - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
  - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
  - Resolves: Bug 1881968 - Replication Lag under high load


author: Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11
changelog:
  - Bump version to 1.3.10.2-11
  - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
  - Resolves: Bug 1931182 - information disclosure during the binding of a DN


author: Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13
changelog:
  - Bump version to 1.3.10.2-13
  - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
  - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
  - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
  - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule


author: Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14
changelog:
  - Bump version to 1.3.10.2-14
  - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
  - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)


author: Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15
changelog:
  - Bump version to 1.3.10.2-15
  - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
  - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search


author: Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16
changelog:
  - Bump version to 1.3.10.2-16
  - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
  - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
  - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
  - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17
changelog:
  - Bump version to 1.3.10.2-17
  - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
  - Resolves: Bug 2131083 - SIGSEGV in sync_repl


author: Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1
changelog:
  - Bump version to 1.3.11.1-1
  - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
  - Resolves: Bug 2170221 - Boolean attributes should be case insensitive
  - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-7
changelog:
  - Bump version to 1.3.6.1-7
  - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set(fix crash regression)
  - Resolves: bug 1381326 - dirsrv-snmp.service is provided by 389-ds-base instead of 389-ds-base-snmp
  - Resolves: bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-8
changelog:
  - Bump version to 1.3.6.1-8
  - Resolves: Bug 1432016 - Possible deadlock while installing an ipa replica
  - Resolves: Bug 1438029 - Overflow in memberof


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-9
changelog:
  - Bump version to 1.3.6.1-9
  - Resolves: Bug 1442880 - setup-ds-admin.pl -u with nsslapd-localhost changed
  - Resolves: Bug 1443682 - util_info_sys_pages should be able to detect memory restrictions in a cgroup


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-10
changelog:
  - Bump version to 1.3.6.1-10
  - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
  - Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
  - Resolves: Bug 1377452 - Integer overflow in performance counters
  - Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
  - Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
  - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-11
changelog:
  - Bump version to 1.3.6.1-11
  - Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
  - Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-13
changelog:
  - Bump version to 1.3.6.1-13
  - Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-14
changelog:
  - Bump version to 1.3.6.1-14
  - Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
  - Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
  - Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
  - Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
  - Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
  - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
  - Resolves: Bug 1451657 - -v option is not working for db2ldif.pl


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-15
changelog:
  - Bump version to 1.3.6.1-15
  - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
  - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
  - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
  - Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
  - Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-16
changelog:
  - Bump version to 1.3.6.1-16
  - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
  - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
  - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
  - Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
  - Resolves: Bug 1456774 - ipa-replica server fails to upgrade


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-17
changelog:
  - Bump version to 1.3.6.1-17
  - Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
  - Resolves: Bug 1476162 - Change the retrochangelog default cache size


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-18
changelog:
  - Bump version to 1.3.6.1-18
  - Require srvcore 4.1.3
  - Resolves: Bug 1479757 - dse.ldif and fsync
  - Resolves: Bug 1479755 - backup fails if changelog is enabled
  - Resolves: Bug 1479756 - Locked account provides different return code if password is correct


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-19
changelog:
  - Bump version to 1.3.6.1-19
  - Remove old mozldap and db4 requirements
  - Resolves: Bug 1483865 - Crash while binding to a server during replication online init


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-20
changelog:
  - Bump verions to 1.3.6.1-20
  - Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
  - Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
  - Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
  - Resolves: Bug 1489694 - crash in send_ldap_result
  - Resolves: Bug 1491778 - crash when adding invalid repl agmt
  - Resolves: Bug 1492830 - password expired control not sent
  - Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-21
changelog:
  - Bump verions to 1.3.6.1-21
  - Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-23
changelog:
  - Bump version to 1.3.6.1-23
  - Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
  - Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
  - Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-24
changelog:
  - Bump version to 1.3.6.1-24
  - Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
  - Resolves: Bug 1511940 - heap corruption during import
  - Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
  - Resolves: Bug 1509347 - cleanallruv task is not logging any information


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-25
changelog:
  - Bump version to 1.3.6.1-25
  - Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
  - Resolves: Bug 1523505 - opened connection are hanging, no longer poll
  - Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-10
changelog:
  - Bump version to 1.3.7.5-10
  - Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
  - Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
  - Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
  - Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
  - Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
  - Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
  - Resolves: Bug 1498980 - heap corruption during import
  - Resolves: Bug 1511462 - scope one searches give incorrect results
  - Resolves: Bug 1514033 - opened connection are hanging, no longer poll


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-11
changelog:
  - Bump version to 1.3.7.5-11
  - Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
  - Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
  - Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
  - Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-12
changelog:
  - Bump version to 1.3.7.5-12
  - Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
  - Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
  - Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
  - Resolves: Bug 1518287 - heap-use-after-free in csn_as
  - Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
  - Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
  - Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
  - Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
  - Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-13
changelog:
  - Bump version to 1.3.7.5-13
  - Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
  - Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
  - Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
  - Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
  - Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-14
changelog:
  - Bump version to 1.3.7.5-14
  - Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-15
changelog:
  - Bump version to 1.3.7.5-15
  - Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
  - Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
  - Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-16
changelog:
  - Bump version to 1.3.7.5-16
  - Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5.17
changelog:
  - Bump version to 1.3.7.5.17
  - Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
  - Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
  - Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp


author: Matus Honek <mhonek@redhat.com> - 1.3.7.5-19
changelog:
  - Bump version to 1.3.7.5-19
  - Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-20
changelog:
  - Bump version to 1.3.7.5-20
  - Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
  - Resolves: Bug 1559764 - memberof fails if group is moved into scope
  - Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
  - Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
  - Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
  - Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-21
changelog:
  - Bump version to 1.3.7.5-21
  - Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-22
changelog:
  - Bump version to 1.3.5.7-22
  - Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
  - Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
  - Resolves: Bug 1579698 - replicated operations should be serialized
  - Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
  - Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
  - Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-23
changelog:
  - Bump version to 1.3.7.5-23
  - Resolves: Bug 1581588 - ACI deny rules do not work correctly
  - Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-25
changelog:
  - Bump version to 1.3.7.5-25
  - Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-26
changelog:
  - Bump version to 1.3.7.5-26
  - Resolves: Bug 1615924 - Fine grained password policy can impact search performance
  - Resolves: Bug 1614836 - Disable nunc-stans by default
  - Resolves: Bug 1614861 - ldapsearch with server side sort crashes the ldap server


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-28
changelog:
  - Bump version to 1.3.7.5-28
  - Resolves: Bug 1628676 - 389-ds-base: race condition on reference counter leads to DoS using persistent search
  - Resolves: Bug 1628677 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-6
changelog:
  - Bump version to 1.3.8.4-6
  - Resolves: Bug 1595766 - backout this fix for now because it breaks FreeIPA


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-7
changelog:
  - Bump version to 1.3.8.4-7
  - Resolves: Bug 1595766 - backout this fix for now because it breaks FreeIPA (removed patch file all together)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-8
changelog:
  - Bump version to 1.3.8.4-8
  - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-9
changelog:
  - Bump version to 1.3.8.4-9
  - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-10
changelog:
  - Bump verison to 1.3.8.4-10
  - Resolves: Bug 1614501 - Disable nunc-stans by default
  - Resolves: Bug 1607078 - ldapsearch with server side sort crashes the ldap server


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-11
changelog:
  - Bump version to 1.3.8.4-11
  - Resolves: Bug 1614820 - Server crash through modify command with large DN


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-12
changelog:
  - Bump version to 1.3.8.4-12
  - Resolves: Bug 1616412 - filter optimization fix causes regression(fix reverted)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-13
changelog:
  - Bump version to 1.3.8.4-13
  - Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-16
changelog:
  - Bump version to 1.3.8.4-16
  - Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-18
changelog:
  - Bump version to 1.3.8.4-18
  - Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-19
changelog:
  - Bump version to 1.3.8.4-19
  - Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
  - Resolves: Bug 1645197 - on-line re-initialization hangs


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-21
changelog:
  - Bump version to 1.3.8.4-21
  - Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
  - Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-22
changelog:
  - Bump version to 1.3.8.4-22
  - Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-23
changelog:
  - Bump version to 1.3.8.4-23
  - Resolves: Bug 1672173 - import task should not be deleted after import finishes to be able to query the status
  - Resolves: Bug 1672177 - after certain failed import operation, impossible to replay an import operation.
  - Resolves: Bug 1672179 - cannot add cenotaph in read only consumer


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-24
changelog:
  - Bump version to 1.3.8.4-24
  - Resolves: Bug 1718184 - segfault when using pam passthru and addn plugins together


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-25
changelog:
  - Bump version to 1.3.8.4-25
  - Resolves: Bug 1722828 - referint update should discard any changes if mep update fails
  - Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character
  - Resolves: Bug 1719720 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-25.1
changelog:
  - Bump version to 1.3.8.4-25.1
  - Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character (missing patch file)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-1
changelog:
  * Bump version to 1.3.9.1-1
  - Resolves: Bug 1438144 - [RFE] Include autounmembering feature in IPA
  - Resolves: Bug 1645359 - Rebase 389-ds-base in RHEL 7.7 to 1.3.9
  - Resolves: Bug 1561769 - [RFE] revise the "transient error" message in a replication agreement's last update status
  - Resolves: Bug 1563999 - Is it possible for Directory server to reject the current password only?
  - Resolves: Bug 1597202 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
  - Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database
  - Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
  - Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck
  - Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass
  - Resolves: Bug 1643587 - default of "nsslapd-errorlog-maxlogsperdir: 1" causing huge log files
  - Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
  - Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
  - Resolves: Bug 1653163 - certmap fails when Issuer DN has comma in name
  - Resolves: Bug 1602001 - cannot add cenotaph in read only consumer
  - Resolves: Bug 1589144 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day)
  - Resolves: Bug 1600631 - In repicated topology a single-valued attribute can diverge
  - Resolves: Bug 1626375 - on-line re-initialization hangs
  - Resolves: Bug 1627846 - Contention on virtual attribute lookup
  - Resolves: Bug 1642838 - after certain failed import operation, impossible to replay an import operation
  - Resolves: Bug 1647099 - audit logs does not capture the operation where nsslapd-lookthroughlimit is modified 
  - Resolves: Bug 1648922 - during MODRDN referential integrity can fail erronously while updating large groups
  - Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy
  - Resolves: Bug 1663829 - import task should not be deleted after import finishes to be able to query the status.
  - Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements
  - Resolves: Bug 1622049 - db2bak.pl does not work with LDAPS, but ok with STARTTLS
  - Resolves: Bug 1633488 - fixup-memberof.pl -D cn=<> -w - -b <> -P LDAP fails with ldap_start_tls error
  - Resolves: Bug 1451460 - error messages during ldif2db after enabling encryption on an attribute
  - Resolves: Bug 1627512 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-2
changelog:
  - Bump version to 1.3.9.1-2
  - Resolves: Bug 1417340 - entry cache is not cleaned up if an operation is aborted
  - Resolves: Bug 1603140 - Export produces a non-importable ldif file
  - Resolves: Bug 1518320 - ns-slapd: crash in entrycache_add_int
  - Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
  - Resolves: Bug 1589144 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-3
changelog:
  - Bump version to 1.3.9.1-3
  - Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389
  - Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone 
  - Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members
  - Resolves: Bug 1673472 - the warning about skew time could last forever.
  - Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
  - Resolves: Bug 1482596 - referint update should discard any changes if mep update fails


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-4
changelog:
  - Bump version to 1.3.9.1-4
  - Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database.
  - Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements.
  - Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 & 3)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-5
changelog:
  - Bump version to 1.3.9.1-5
  - Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck 
  - Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
  - Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit
  - Resolves: Bug 1615155 - extended search fails to match entries
  - Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-11
changelog:
  - Bump version to 1.3.9.1-11
  - Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin
  - Resolves: Bug 1754831 - After audit log file is rotated, DS version string is logged after each update
  - Resolves: Bug 1763622 - Extremely slow LDIF import with ldif2db
  - Resolves: Bug 1763627 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
  - Resolves: Bug 1749289 - DB Deadlock on modrdn appears to corrupt database and entry cache


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-13
changelog:
  - Bump version to 1.3.9.1-13
  - Resolves: Bug 1801693 - ns-slapd is crashing while restarting ipactl
  - Resolves: Bug 1801695 - LDAP server returning controltype in different sequence
  - Resolves: Bug 1801700 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  - Resolves: Bug 1801701 - etime displayed has an order of magnitude 10 times smaller than it should be
  - Resolves: Bug 1801702 - Regression: NSS has interop problems as server when using limited cipher list
  - Resolves: Bug 1801704 - Log the actual base DN when the search fails with "invalid attribute request"
  - Resolves: Bug 1801705 - Directory Server 10 not RFC 4511 compliant
  - Resolves: Bug 1801706 - Replace error by warning in the state machine defined in repl5_inc_run


author: Aaron Young <Aaron.Young@oracle.com> - 1:1.2-2.el7
changelog:
  - Change Image.c image load error to DEBUG_WARN from DEBUG_ERROR since it is normal for some images to fail to load if the associated hardware is not present. Such is the case with Ramfb. (Aaron Young)  [Orabug: 28868674] 
  - Fix AAVMF build. Pull in OpenSSL code (as is done for x86_64) (Aaron Young)  
  - Update AAVMF change log for version 1.2 (Aaron Young)


author: Aaron Young <Aaron.Young@oracle.com> - 1:1.2-5.el7
changelog:
  - Update spec file to remove 'modprobe kvm-intel' and remove --enable-kvm arg to ovmf_vars_generator so qemu will not require kvm kernel module. (Aaron Young)  
  - Update spec file to modprobe kvm_intel module prior to running qemu to enroll default keys. (Aaron Young)  
  - Enroll Oracle cert/key for OL secureboot support. (Aaron Young)


author: Aaron Young <aaron.young@oracle.com>
changelog:
  - Create new 1.2 release for OL7 which includes the following fixed CVEs:
    {CVE-2017-5715} {CVE-2017-5731} {CVE-2017-5732} {CVE-2017-5733} {CVE-2017-5734} {CVE-2017-5735} {CVE-2017-5753} {CVE-2018-12178} {CVE-2018-12180} {CVE-2018-12181} {CVE-2018-3630}


author: Aaron Young <aaron.young@oracle.com>
changelog:
  - Create new 1.3 release for OL7 which includes the following fixed CVEs:
    {CVE-2018-12182} {CVE-2019-13224} {CVE-2019-13225} {CVE-2019-14553}


author: Aaron Young <aaron.young@oracle.com>
changelog:
  - Create new 1.4.0 release for OL7 which includes the following fixed CVEs:
    {CVE-2019-14584} {CVE-2019-14562} {CVE-2019-11098} {CVE-2019-14559} {CVE-2019-14575} {CVE-2019-14559} {CVE-2019-14587} {CVE-2019-14558} {CVE-2019-14586} {CVE-2019-14563}


author: Aaron Young <aaron.young@oracle.com>
changelog:
  - Create new 1.5.0 release for OL7 which includes the following fixed CVEs:
    {CVE-2021-23840} {CVE-2021-23841}


author: Aaron Young <aaron.young@oracle.com>
changelog:
  - Create new 1.5.0 release for OL7 which includes the following fixed CVEs:
    {CVE-2021-23840} {CVE-2021-23841} {CVE-2021-38575}


author: Aaron Young <aaron.young@oracle.com>
changelog:
  - Create new 1.6.6 release for OL7 which includes the following fixed CVEs:
    {CVE-2019-14560}
  - Update to OpenSSL 1.1.1v which includes the following fixed CVEs:
    {CVE-2023-3817} {CVE-2023-3446} {CVE-2023-2650} {CVE-2023-0465} {CVE-2023-0466} {CVE-2023-0464} {CVE-2023-0286} {CVE-2023-0215} {CVE-2022-4450} {CVE-2022-4304} {CVE-2022-2097} {CVE-2022-2068} {CVE-2022-1292} {CVE-2022-0778} {CVE-2021-4160} {CVE-2021-3712} {CVE-2021-3711} {CVE-2021-3450} {CVE-2021-3449} {CVE-2021-23841} {CVE-2021-23840} {CVE-2020-1971} {CVE-2020-1967} {CVE-2019-1551} {CVE-2019-1563} {CVE-2019-1549} {CVE-2019-1547} {CVE-2019-1552} {CVE-2019-1543} {CVE-2018-0734} {CVE-2018-0735}


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160419-2.git90bb4c5.el7
changelog:
  - Submit scratch builds from the exploded tree again to
    supp-rhel-7.3-candidate, despite FatPkg being OSS at this point; see
    bz#1329559.


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160608-1.git988715a.el7
changelog:
  - Resolves: bz#1341733
    (prevent SMM stack overflow in OVMF while enrolling certificates in "db")
  - Resolves: bz#1257882
    (FEAT: support to boot from virtio 1.0 modern devices)
  - Resolves: bz#1333238
    (Q35 machine can not boot up successfully with more than 3 virtio-scsi
    storage controller under switch)
  - Resolves: bz#1330955
    (VM can not be booted up from hard disk successfully when with a passthrough
    USB stick)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160608-2.git988715a.el7
changelog:
  - ovmf-ArmPkg-ArmGicV3Dxe-configure-all-interrupts-as-non-s.patch [bz#1349407]
  - ovmf-ArmVirtPkg-PlatformBootManagerLib-Postpone-the-shell.patch [bz#1353689]
  - Resolves: bz#1349407
    (AArch64: backport fix to run over gicv3 emulation)
  - Resolves: bz#1353689
    (AAVMF: Drops to shell with uninitialized NVRAM file)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160608-3.git988715a.el7
changelog:
  - ovmf-MdePkg-PCI-Add-missing-PCI-PCIE-definitions.patch [bz#1332408]
  - ovmf-ArmPlatformPkg-NorFlashDxe-accept-both-non-secure-an.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemu-switch-secure-boot-build-to-N.patch [bz#1353494]
  - ovmf-ArmPlatformPkg-NorFlashAuthenticatedDxe-remove-this-.patch [bz#1353494]
  - ovmf-ArmVirtPkg-add-FDF-definition-for-empty-varstore.patch [bz#1353494]
  - ovmf-redhat-package-the-varstore-template-produced-by-the.patch [bz#1353494]
  - ovmf-ArmVirtPkg-Re-add-the-Driver-Health-Manager.patch [bz#1353494]
  - ovmf-ArmVirtPkg-HighMemDxe-allow-patchable-PCD-for-PcdSys.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemuKernel-make-ACPI-support-AARCH.patch [bz#1353494]
  - ovmf-ArmVirtPkg-align-ArmVirtQemuKernel-with-ArmVirtQemu.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemu-factor-out-shared-FV.FvMain-d.patch [bz#1353494]
  - ovmf-ArmVirtPkg-factor-out-Rules-FDF-section.patch [bz#1353494]
  - ovmf-ArmVirtPkg-add-name-GUIDs-to-FvMain-instances.patch [bz#1353494]
  - ovmf-OvmfPkg-add-a-Name-GUID-to-each-Firmware-Volume.patch [bz#1353494]
  - ovmf-OvmfPkg-PlatformBootManagerLib-remove-stale-FvFile-b.patch [bz#1353494]
  - ovmf-MdePkg-IndustryStandard-introduce-EFI_PCI_CAPABILITY.patch [bz#1332408]
  - ovmf-MdeModulePkg-PciBusDxe-look-for-the-right-capability.patch [bz#1332408]
  - ovmf-MdeModulePkg-PciBusDxe-recognize-hotplug-capable-PCI.patch [bz#1332408]
  - ovmf-OvmfPkg-add-PciHotPlugInitDxe.patch [bz#1332408]
  - ovmf-ArmPkg-ArmGicLib-manage-GICv3-SPI-state-at-the-distr.patch [bz#1356655]
  - ovmf-ArmVirtPkg-PlatformBootManagerLib-remove-stale-FvFil.patch [bz#1353494]
  - ovmf-OvmfPkg-EnrollDefaultKeys-assign-Status-before-readi.patch [bz#1356913]
  - ovmf-OvmfPkg-EnrollDefaultKeys-silence-VS2015x86-warning-.patch [bz#1356913]
  - ovmf-CryptoPkg-update-openssl-to-ignore-RVCT-3079.patch [bz#1356184]
  - ovmf-CryptoPkg-Fix-typos-in-comments.patch [bz#1356184]
  - ovmf-CryptoPkg-BaseCryptLib-Avoid-passing-NULL-ptr-to-fun.patch [bz#1356184]
  - ovmf-CryptoPkg-BaseCryptLib-Init-the-content-of-struct-Ce.patch [bz#1356184]
  - ovmf-CryptoPkg-OpensslLib-Upgrade-OpenSSL-version-to-1.0..patch [bz#1356184]
  - Resolves: bz#1332408
    (Q35 machine can not hot-plug scsi controller under switch)
  - Resolves: bz#1353494
    ([OVMF] "EFI Internal Shell" should be removed from "Boot Manager")
  - Resolves: bz#1356184
    (refresh embedded OpenSSL to 1.0.2h)
  - Resolves: bz#1356655
    (AAVMF: stop accessing unmapped gicv3 registers)
  - Resolves: bz#1356913
    (fix use-without-initialization in EnrollDefaultKeys.efi)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160608b-1.git988715a.el7
changelog:
  - rework downstream-only commit dde83a75b566 "setup the tree for the secure
    boot feature (RHEL only)", excluding patent-encumbered files from the
    upstream OpenSSL 1.0.2g tarball [bz#1374710]
  - rework downstream-only commit dfc3ca1ee509 "CryptoPkg/OpensslLib: Upgrade
    OpenSSL version to 1.0.2h", excluding patent-encumbered files from the
    upstream OpenSSL 1.0.2h tarball [bz#1374710]


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20170228-1.gitc325e41585e3.el7
changelog:
  - Rebase to upstream c325e41585e3 [bz#1416919]
  - Resolves: bz#1373812
    (guest boot from network even set 'boot order=1' for virtio disk with OVMF)
  - Resolves: bz#1380282
    (Update OVMF to openssl-1.0.2k-hobbled)
  - Resolves: bz#1412313
    (select broadcast SMI if available)
  - Resolves: bz#1416919
    (Rebase OVMF for RHEL-7.4)
  - Resolves: bz#1426330
    (disable libssl in CryptoPkg)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-2.gitc325e41585e3.el7
changelog:
  - ovmf-MdeModulePkg-Core-Dxe-downgrade-CodeSegmentCount-is-.patch [bz#1433428]
  - Resolves: bz#1433428
    (AAVMF: Fix error message during ARM guest VM installation)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-3.gitc325e41585e3.el7
changelog:
  - ovmf-ArmVirtPkg-FdtClientDxe-supplement-missing-EFIAPI-ca.patch [bz#1430262]
  - ovmf-ArmVirtPkg-ArmVirtPL031FdtClientLib-unconditionally-.patch [bz#1430262]
  - ovmf-MdeModulePkg-RamDiskDxe-fix-C-string-literal-catenat.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-ACPI-GUID.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-PlatformHasAcpiLib.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-Device-Tree.patch [bz#1430262]
  - ovmf-ArmVirtPkg-add-PlatformHasAcpiDtDxe.patch [bz#1430262]
  - ovmf-ArmVirtPkg-enable-AcpiTableDxe-and-EFI_ACPI_TABLE_PR.patch [bz#1430262]
  - ovmf-ArmVirtPkg-FdtClientDxe-install-DT-as-sysconfig-tabl.patch [bz#1430262]
  - ovmf-ArmVirtPkg-PlatformHasAcpiDtDxe-don-t-expose-DT-if-Q.patch [bz#1430262]
  - ovmf-ArmVirtPkg-remove-PURE_ACPI_BOOT_ENABLE-and-PcdPureA.patch [bz#1430262]
  - Resolves: bz#1430262
    (AAVMF: forward QEMU's DT to the guest OS only if ACPI payload is unavailable)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-4.gitc325e41585e3.el7
changelog:
  - ovmf-ShellPkg-Shell-clean-up-bogus-member-types-in-SPLIT_.patch [bz#1442908]
  - ovmf-ShellPkg-Shell-eliminate-double-free-in-RunSplitComm.patch [bz#1442908]
  - Resolves: bz#1442908
    (Guest hang when running a wrong command in Uefishell)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-5.gitc325e41585e3.el7
changelog:
  - ovmf-OvmfPkg-EnrollDefaultKeys-update-SignatureOwner-GUID.patch [bz#1443351]
  - ovmf-OvmfPkg-EnrollDefaultKeys-expose-CertType-parameter-.patch [bz#1443351]
  - ovmf-OvmfPkg-EnrollDefaultKeys-blacklist-empty-file-in-db.patch [bz#1443351]
  - ovmf-OvmfPkg-introduce-the-FD_SIZE_IN_KB-macro-build-flag.patch [bz#1443351]
  - ovmf-OvmfPkg-OvmfPkg.fdf.inc-extract-VARS_LIVE_SIZE-and-V.patch [bz#1443351]
  - ovmf-OvmfPkg-introduce-4MB-flash-image-mainly-for-Windows.patch [bz#1443351]
  - ovmf-OvmfPkg-raise-max-variable-size-auth-non-auth-to-33K.patch [bz#1443351]
  - ovmf-OvmfPkg-PlatformPei-handle-non-power-of-two-spare-si.patch [bz#1443351]
  - ovmf-redhat-update-local-build-instructions-with-D-FD_SIZ.patch [bz#1443351]
  - ovmf-redhat-update-OVMF-build-commands-with-D-FD_SIZE_4MB.patch [bz#1443351]
  - Resolves: bz#1443351
    ([svvp][ovmf] job "Secure Boot Logo Test" failed  with q35&ovmf)


author: Paul Howarth <paul@city-fan.org> - 1.5.0-5
changelog:
  - Make GeoIP.dat -> GeoIP-initial.dat symlink in %install, not %post,
    and don't %ghost it
  - Run geoipupdate silently in %post and cron job
  - Create empty database files for %ghost to work with old rpm versions
  - Don't try to use noarch subpackages on old rpm versions
  - Update %description to mention database updates
  - Drop outdated README.Fedora


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-7
changelog:
  - Don't download the database in %post (#1029807)
  - Don't download GeoLiteASNum as it's no longer provided.


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-10
changelog:
  - Added base IPv6 database to GeoIP package
  - Added GeoIP-data subpackage with all other databases (#1201857)


author: Michal Ruprich <mruprich@redhat.com> - 1.5.0-12
changelog:
  - Removed clean section
  - Resolves: #1589860 - Update GeoIP legacy databases
  - Resolves: #1409060 -  Missing symlink at the GeoIP-update package


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 6.7.8.9-7
changelog:
  - add aarch64 as a target by using 64 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)


author: Jan Horak <jhorak@redhat.com> - 6.7.8.9-15
changelog:
  - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
    rhbz#1326834, rhbz#1334188, rhbz#1269553


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 6.7.8.9-7
changelog:
  - add aarch64 as a target by using 32 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.10.2-4
changelog:
  - settings: clear unsaved flag on new connections (rh #1525078)
  - platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.10.2-5
changelog:
  - wwan: add default route even if modem didn't return a gateway (rh #1527934)
  - dhcp: fix assertion failure for dhcp-client-id (rh #1531173)


author: Thomas Haller <thaller@redhat.com> - 1:1.10.2-6
changelog:
  - core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
  - core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
  - core: fix invalid assertion deleting volatile connection (rh #1506552)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.10.2-7
changelog:
  - po: import translations (rh #1481186)
  - device: increase carrier wait time to 6 seconds (rh #1520826)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.10.2-10
changelog:
  - device: skip IP configuration phase for external devices (rh #1530288)
  - platform: fix crash during route-get call (rh #1534721)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.10.2-11
changelog:
  - ovs-interface: avoid starting ip configuration twice (rh #1540063)
  - libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
  - nmcli: clear link-watchers before adding the new ones (rh #1533926)
  - libnm-core: update team.runner description (rh #1533799)
  - libnm-core: team: fix runner sys_prio default value (rh #1533810)
  - libnm: avoid a symbol clash with json-glib (rh #1535905)
  - libnm-core: team: add support to runner "random" (rh #1538699)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.10.2-12
changelog:
  - ppp: don't start IPv6 configuration on the device (rh #1515829)
  - device: avoid setting the IPv4 rp_filter (rh #1492472)
  - nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.10.2-14
changelog:
  - manager: retry activating devices when the parent becomes managed (rh #1553595)
  - manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
  - manager: fix starting teamd after service restart  (rh #1551958)


author: Thomas Haller <thaller@redhat.com> - 1:1.12.0-1
changelog:
  - Update to upstream 1.12.0 release (rh #1592311)
  - device: improve MTU handling for VLAN (rh #1586191)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-2
changelog:
  - device: disable rp_filter handling (rh #1593194)
  - ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.12.0-3
changelog:
  - cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
  - po: import Japanese translation (rh #1569438)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-6
changelog:
  - dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
  - initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
  - cli: fix parsing vpn secrets from password file (rh #1628946)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-7
changelog:
  - manager: accept non-null device for VPN activations (rh #1641174)
  - drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-10
changelog:
  - manager: ignore ovs-system master when assuming connections (rh #1676551)
  - device: do ARP announcements only after masters have a slave (rh #1678796)


author: Thomas Haller <thaller@redhat.com> - 1:1.12.0-0.1
changelog:
  - Update to upstream release 1.11.90 (release candidate) (rh #1592311)
  - libnm: properly handle cancelling of async operations (rh #1555281)
  - libnm: support handling checkpoints (rh #1496739)
  - core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
  - core: rework and improve IPv4 address collission detection (rh #1507864)
  - wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
  - macsec: enable sending SCI by default and make it configurable (rh #1588041)
  - ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
  - wwan: improve failure reason for unsupported IP methods (rh #1459529)
  - tun: use netlink kernel API for tun devices if available (rh #1547213)
  - ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
  - dhcp: improve handling DHCP timeouts (rh #1573780)
  - dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
  - dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
  - dns: avoid updating resolv.conf when exiting (rh #1541031)
  - ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
  - ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
  - iface-helper: fix invalid reentrant call to platform (rh #1546656)
  - doc: various improvments to documentation (rh #1543832)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-0.2.20190404git9a8fe5f339
changelog:
  - Update to a 1.18 snapshot:
  - clients: only ask secrets for settings that require them (rh #1506536)
  - checkpoint: remove a device from checkpoint if it disappears (rh #1578335)
  - lldp: support more VLAN TLVs (rh #1652211)
  - bridge: add VLAN filtering support (rh #1652910)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-0.3.20190408git43d9187c14
changelog:
  - infiniband: allow large MTU (rh #1534869) (rh #1653494)
  - sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)


author: Francesco Giudici <fgiudici@redhat.com> - 1:1.18.0-0.4.20190408git43d9187c14
changelog:
  - keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
  - dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)


author: Thomas Haller <thaller@redhat.com> - 1:1.18.0-1
changelog:
  - Update to 1.18.0 release
  - cli: fix crash handling gsm secrets (rh #1698495)
  - rules: fix duplicate policy routing rules (rh #1652653)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-2
changelog:
  - cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
  - device: fix reapply of MTU (rh #1702657)
  - settings: fix failed assertion when adding connections (rh #1707261)
  - core: ensure software devices are managed when networking gets enabled (rh #1701585)
  - device: restore IPv6 configuration on link up (rh #1548237)
  - dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
  - core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
  - tc: add suppor for mired action an fq_codel qdisc (rh #1546802)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-3
changelog:
  - team: don't kill teamd for external devices (rh #1711952)
  - ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
  - po: update translations (rh #1689962)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-4
changelog:
  - cli: don't wait forever in the editor on update connection failure (rh #1702203)
  - team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)


author: Thomas Haller <thaller@redhat.com> - 1:1.18.4-1
changelog:
  - Update to 1.18.4 release
  - cli: fix bash completion for slave-types (rh #1654062)
  - core: improve handling of policy routing rules when restarting daemon (rh #1696881)
  - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
  - tui: only add bond options to profile that are supported by tui (rh #1715720)
  - cli: fix resetting default value for properties (rh #1715887)
  - core: fix detecting parent device by connection's UUID (rh #1716438)
  - core: fix setting IPv6 route options and destination (rh #1727193)
  - core: support more "arp_validate" bond options (rh #1730793)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2
changelog:
  - dhcp: include conditionals from existing dhclient configuration (rh #1758550)
  - core: fix sending ARP announcements (rh #1767681)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1
changelog:
  - Update to 1.18.6 release
  - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
  - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
  - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)


author: Thomas Haller <thaller@redhat.com> - 1:1.18.6-2
changelog:
  - vpn: gracefully handle invalid routes from VPN plugins
  - workaround g_strtoll() failing with EAGAIN (rh #1797915)


author: Thomas Haller <thaller@redhat.com> - 1:1.18.8-1
changelog:
  - Update to 1.18.8 relase
  - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
  - ifcfg-rh: handle 802-1x.pin properties.


author: Thomas Haller <thaller@redhat.com> - 1:1.18.8-2
changelog:
  - Backport OVS related fixes (rh #1871935)
  - ovs: support changing the MTU of ovs interfaces (rh #1820052)
  - ovs: fix race condition in setting MAC address (rh #1852106)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-2
changelog:
  - core: fix persisting managed state of device (rh #1440171)
  - proxy: fix use-after-free (rh #1450459)
  - device: don't wrongly delay startup complete waiting for carrier (rh #1450444)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-3
changelog:
  - dhcp: don't add route to DHCP4 server (rh #1448987)
  - libnm: fix NUL termination of device's description (rh #1443114)
  - libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
  - core: fix device's UDI property on D-Bus (rh #1443114)
  - ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.8.0-4
changelog:
  - device: update external configuration before commit (rh #1449873)
  - bluetooth: fix crash on connecting to a NAP (rh #1454385)
  - device: release removed devices from master on cleanup (rh #1448907)
  - core: activate slaves using ifindex order by default (rh #1452585)
  - nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
  - po: update translations (rh #1382625)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-5
changelog:
  - ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
  - tui: fix crash during connect (rh #1456826)
  - libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-6
changelog:
  - connectivity: fix periodic connectivity check (rh #1458399)
  - bond: improve option matching on daemon restart (rh #1457909)
  - device: fix touching device after external activation (rh #1457242)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-7
changelog:
  - bond: fix crash comparing mode while generating bond connection (rh #1459580)
  - connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
  - device: persist nm-owned in run state (rh #1376199)
  - device: fix assuming master device on restart (rh #1452062)
  - device: apply route metric penality only when the default route exists (rh #1459604)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.8.0-8
changelog:
  - cli: fix output of iface in overview output (rh#1460219)
  - ppp: unexport NMPPPManager instance on dispose (rh#1459579)
  - cli: remove spurious device names from wifi subcommands output (rh#1460527)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-9
changelog:
  - device: don't change MTU unless explicitly configured (rh #1460760)
  - core: don't remove external IPv4 addresses (rh #1459813)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-11
changelog:
  - core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
  - core: fix unfreezing signals when unrealizing device fails (rh#1498755)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.8.0-0.4.rc3
changelog:
  - Update to third Release Candidate of NetworkManager 1.8
  - device: fix regressions in assuming devices on carryover from initrd (rh #1443878)
  - device: add support for SRIOV num_vfs (rh #1398934)
  - device: leave device up when setting it as unmanaged by user (rh #1371433)
  - core: properly track manager, route manager and default route manager references (rh #1440089)
  - route: properly deal with routes with non-empty host parts (rh #1439376)
  - vpn: fix a crash on disconnect (rh #1442064)
  - cli: fix hang on connection down (rh #1422786)
  - cli: fix interactive edit of bond slaves (rh #1440957)
  - vpn: fix early error handling on failed activations (rh #1440077)
  - core: only persist explicit managed state in device's state file (rh #1440171)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-1
changelog:
  - Update to upstream release 1.8.0
  - device: support dummy devices (rh#1398932)
  - core: support attaching user-data to connection profiles (rh#1421429)
  - core: fix allowing FQDN in dhcp-hostname setting (rh#1443437)
  - core: fix configuring firewall while device is activating (rh#1445242)
  - core: don't block activation without carrier for IPv6 DAD (rh#1446367)
  - tui: force writing master key to ifcfg file when editing connection (rh#1425409)


author: Lubomir Rintel <lrintel@redhat.com> - 1.2.0-0.1.beta3
changelog:
  - Update to 1.2-beta3:
  - Added support for main exchange type (rh #1292912)
  - A device libreswan is unable listen on no longer aborts connection (rh #1285367)
  - Added import/export support (rh #1129878)
  - Replace NetworkManager-openswan (rh #1264552)


author: Thomas Haller <thaller@redhat.com> - 1.2.4-1
changelog:
  - Update to 1.2.4 release
  - Move base VPN plugin library to base libreswan package
  - Don't require nm-connection-editor anymore


author: Nicolas Chauvet <kwizart@gmail.com> - 1.7.1-1
changelog:
  - Update to 1.7.1

  -* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.0-5
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild


author: Ledvinka Ales <aledvink@redhat.com> - 2.0.19-7
changelog:
  - Hint compilation to avoid strict aliasing and prevent type-punned pointer issues.
  - Fix rPath regression for OpenIPMI-perl library.


author: Boris Ranto <branto@redhat.com> - 2.0.19-12
changelog:
  - New release
  - Move OpenIPMI modprobe conf to /usr/lib/modprobe.d/ (#1195289)
  - Avoid warning on update/removal (#1256798)
  - Stop manually creating and shipping /var/run/OpenIPMI (#1296560)


author: Alexey Petrenko <alexey.petrenko@oracle.com> - 2.0.23-2.0.1
changelog:
  - IPMI SMB kernel module name is ipmi_ssif in all modern kernels. 
    openipmi-helper script fixed. Orabug: 27093288


author: Edward Leung <edward.leung@oracle.com> - 2.0.27-1.0.1
changelog:
  - IPMI SMB kernel module name is ipmi_ssif in all modern kernels. 
    openipmi-helper script fixed. [Orabug: 27093288]


author: Tom Lane <tgl@redhat.com> 4.0-1
changelog:
  - Update to PyGreSQL 4.0
  - Relabel license as PostgreSQL now that that's separately recognized by OSI.


author: Petr Pisar <ppisar@redhat.com> - 1.2.15-14
changelog:
  - Do not harness backing store by default. Export SDL_VIDEO_X11_BACKINGSTORE
    environment variable to enable it.
  - Resolves: rhbz#1245417


author: Wim Taymans <wtaymans@redhat.com> - 1.2.15-17
changelog:
  - Fix Some CVEs: CVE-2019-7572, CVE-2019-7573, CVE-2019-7574,
    CVE-2019-7575, CVE-2019-7576, CVE-2019-7577, CVE-2019-7578,
    CVE-2019-7635, CVE-2019-7636, CVE-2019-7637, CVE-2019-7638
  - Resolves: rhbz#1716201, rhbz#1716202, rhbz#1716206,
  - Resolves: rhbz#1716207, rhbz#1716208


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-46
changelog:
  - remove not implemented option AttemptHardlink in vmcore.conf
  - introduce unsafe reporting for not-reporable problems
  - rewrite skip_pfx() function to work with journal msgs
  - don't expect kernel's version '2.6.*' or '3.*.*'
  - Related: #1416586, #1257159, #1328264, #1378469


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-49
changelog:
  - Translation updates
  - Stop creating uReports for unpackaged executables
  - koops: add detailed taint flag description for kernel oopses
  - koops: fix kernel oops and fatal MCE recognition
  - python: provide more information about Python exceptions
  - vmcore: fix replication of vmcore files
  - Related: #1271213, #1460224, #1374648, #1361116, #1228344,
  - Related: #1395285, #1214730, #1446410, #1319828, #1501718


author: Matej Marusak <mmarusak@redhat.com> - 2.1.11-51
changelog:
  - a-a-s-p-data: fix segfault if GPGKeysDir isn't configured
  - spec: turn on --enable-native-unwinder aarch64
  - plugins: a-a-g-machine-id use dmidecode command
  - spec: use dmidecode instead of python-dmidecode
  - Related: #1566707, #1566707, #1260074, #1591141


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-53
changelog:
  - cli: load config file at the beginning
  - ccpp: fast dumping and abrt core limit
  - conf: increase MaxCrashReportsSize to 5GiB
  - vmcore: /var/tmp/abrt is no longer a dump location
  - koops: Filter kernel oopses based on logged hostname
  - daemon: Fix double closed fd race condition
  - Related: #1618818, #1647841, #1613236, #1613182, #1655241


author: Shaleen Bathla <shaleen.bathla@oracle.com> - 2.1.11-60.0.3
changelog:
  - Fix vmcore call trace parsing in x86 [Orabug: 32806769]
  - Fix vmcore call trace parsing in arm [Orabug: 33880911]
  - Fix vmcore call trace parsing in uek5 [Orabug: 33874060]


author: Jakub Filak <jfilak@redhat.com> - 1.0.6-6
changelog:
  - Make sure that agent_onload and agent_onunload are processed only once
  - Add test results for Linux-aarch64
  - Resolves: #1044756, #1063322


author: Ray Strode <rstrode@redhat.com> - 0.6.35-11
changelog:
  - address minor bug in previous patch
    Related: #1220904

  - fix memory leak in log handler
    Resolves: #1292543


author: Ray Strode <rstrode@redhat.com> - 0.6.42-2
changelog:
  - Update to 0.6.44
    Related: #1424623
  - export password expiration policy from shadow
    Resolves: #1334464


author: Ray Strode <rstrode@redhat.com> - 0.6.45-1
changelog:
  - Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
    Related: #1424623 #1334464


author: Ray Strode <rstrode@redhat.com> - 0.6.45-2
changelog:
  - Don't tread explicitly requested users as cached
    Fixes UncacheUser operation.
    Resolves: 1446620
    Related: #1432602


author: Ray Strode <rstrode@redhat.com> - 0.6.45-6
changelog:
  - Don't return bogus password expiration policy when
    shadow file is unavailable
    Resolves: #1530659


author: Kamil Dudka <dkdudka@redhat.com> - 2.2.51-13
changelog:
  - avoid failure of %check when building as root (#1085389)
  - setfacl.1: document the meaning of '-' in perms (#1337039)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-5
changelog:
  - Used unitdir macro instead of the hardcoded systemd paths
    Related: rhbz#1057268
  - Fixed bogus date in changelog (best effort)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-7
changelog:
  - Switched to dynamic connections (increased max connections from 20 to 1024)
    Resolves: rhbz#1351999
  - Simplified conversion script and moved it to posttrans to get rid of warnings
    during upgrade from RHEL-6 to RHEL-7
    Resolves: rhbz#1086686


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-9
changelog:
  - Switched kacpimon to dynamic connections (increased max connections
    from 20 to 1024)
    Resolves: rhbz#1450980


author: Sumit Bose <sbose@redhat.com> - 0.8.1-4
changelog:
  - adcli doesn't update kvno while joining system to AD domain (RODC) [#1471021]
  - adcli_tool_computer_delete description spelling [#1450179]
  - adcli man page should not only mention FILE type credential caches [#1423871]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-5
changelog:
  - enable "Trust this computer for delegation to any service (Kerberos only)" [#1538730]
  - realm join fails with Insufficient permissions [#1542354]
  - adcli update option cannot add principals for computer object [#1545568]
  - adcli refuses to add service principals [#1547013]
  - [RFE] Support adding SPN of a different host [#1547014]
  - adcli segfaults during AD join RHEL 7.5 [#1575554]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-6
changelog:
  - Couldn't set service principals on computer account [#1608212]
  - additional fix #1547014 and #1593240


author: Sumit Bose <sbose@redhat.com> - 0.8.1-7
changelog:
  - use autosetup macro to simplify patch handling
  - fixed rpmlint warnings in the spec file
  - join failed if hostname is not FQDN [#1649868]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-8
changelog:
  - Various updates for RHEL-7.7
  - many adcli-krb5-????? directories are created /tmp [#1588596]
  - adcli exports kerberos ticket with old kvno [#1642546]
  - [RFE] Have `adcli join` work without FQDN in `hostname` output [#1595911]
  - Improve handling of service principals [#1644311]
  - [RFE] adcli command with --unix-* options doesn't update
    values in UnixAttributes Tab for user [#1337489]
  - [RFE] adcli join should preserve SPN added by adcli preset-computer [#1630187]
  - [RFE] Need an option for adcli command which will show domain join status. [#1622583]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-9
changelog:
  - Fixes for RHEL-7.7 updates
  - additional patch for [RFE] adcli join should preserve SPN added by adcli
    preset-computer [#1630187]
  - new patches for many adcli-krb5-????? directories are created /tmp [#1588596]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-10
changelog:
  - adcli is failing with "Couldn't add keytab entries: FILE:/etc/krb5.keytab:
    Cannot allocate memory" [1665162]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-11
changelog:
  - Fixes and improvements for RHEL-7.8
  - Issue is that with arcfour-hmac as first encryption type in the config ... [#1683745]
  - adcli update --add-samba-data does not work as expected [#1738573]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-14
changelog:
  - Fixes for RHEL-7.9
  - Update' adcli update --add-samba-data ' info under correct section in man adcli [#1774622]
  - [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1802258]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-15
changelog:
  - More fixes for RHEL-7.9
  - No longer able to delete computer from AD using adcli [#1840752]
  - adcli: presetting $computer in $domain domain failed: Cannot set computer
    password: Authentication error [#1762633]


author: Stef Walter <stefw@redhat.com> - 0.7.4-1
changelog:
  - Update to upstream point release 0.7.4
  - Correctly handle truncating long host names [#1001667]
  - Try to contact all available addresses for discovery [#1004442]
  - Build fixes [#1004823]


author: Stef Walter <stefw@redhat.com> - 0.7.5-1
changelog:
  - Update to upstream point release 0.7.5
  - Workaround for discovery via IPv6 address [#1004442]
  - Correctly put IPv6 addresses in temporary krb5.conf


author: Sumit Bose <sbose@redhat.com> - 0.8.1-1
changelog:
  - Update to upstream release 0.8.1
  - Rebase adcli in RHEL-7.3 to version 0.8.0 [#1292530]
  - Support Host Keytab renewal [#1288485]
  - realmd not joining AD so ssh gssapi-with-mic works [#1061371]
  - technically wrong length checks in binary parsers  [#1027905]
  - avoid alloca in _adcli_ldap_have_in_mod [#1027889]
  - [RFE] adcli --stdin-password should be able to strip newline character from
    the input [#1134330]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-3
changelog:
  - fix crash when name is specified on the command line and detect names with
    lower case characters [#1359773]


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 2.5-9
changelog:
  - also remove include/agg_conv_gpc.h as it also carries a copy of the non-Free
    GPC license (upstream also recommends removing that file under
    http://www.antigrain.com/license/index.html#toc0005) (#559611)


author: Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-6
changelog:
  - warn if processing prelinked binary objects and the prelink binary
    is not available
    Resolves: rbhz#1004826


author: Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-10
changelog:
  - Updated the default configuration file. New defaults contributed
    by Steve Grubb.
    Resolves: rhbz#1304334


author: Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-4
changelog:
  - added patch to fix aide in FIPS mode
  - use only FIPS approved digest algorithms in aide.conf so that
    aide works by default in FIPS mode


author: Jacob Wang <jacob.wang@oracle.com> - 1.9.2-4.0.1
changelog:
  - add runtime dependecy on mysql-compat-server and remove runtime 
    dependency on mariadb-server for akonadi-mysql [20142098]


author: Jaroslav Kysela <jkysela@redhat.com> - 1.0.25-1
changelog:
  - Updated to 1.0.25
  - Moved plugin specific configuration from /etc/alsa/pcm to /usr/share/alsa/alsa.conf.d


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.0.26.1-3
changelog:
  - remove vendor tag from desktop file. https://fedorahosted.org/fpc/ticket/247
  - clean up spec to follow current guidelines
  - don't build -tools for RHEL. Bill Nottingham patch. Resolves rhbz#586030


author: Jaroslav Kysela <jkysela@redhat.com> - 1.1.0-1
changelog:
  - Updated to 1.1.0
  - Enable hda-verb, hdajackretast, hdajacksensetest for i686/x86_64
  - Resolves: rhbz#1172560


author: Josef Ridky <jridky@redhat.com> - 3.3.3-18
changelog:
  - Resolves: #1286330 - set non-blocking connection
  - Resolves: #1299761 - fix amindex: invalid service
  - Resolves: #1306980 - fix problem with handling compressed files


author: Josef Ridky <jridky@redhat.com> - 3.3.3-21
changelog:
  - Resolves: #1417830 - check return value from setreuid method
  - Resolves: #1423040 - fix local authentication issue


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.115-1
changelog:
  - Show a no network warning for network installation source. (vponcova)
    Related: rhbz#1418604
  - Show warnings about enabling the network time (vponcova)
    Resolves: rhbz#1418604
  - Fix generating UUID even for pre snapshots (jkonecny)
    Related: rhbz#1113207


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.116-1
changelog:
  - Allow nonstrict behaviour for all passwords in tui (vponcova)
    Resolves: rhbz#1450326
  - Fix setting errors and warnings in the StorageCheckHandler (vponcova)
    Resolves: rhbz#1453130
  - Mark post inst tools as disabled only if firstboot --disable is used
    (mkolman)
    Resolves: rhbz#1448940
  - Set the default filesystem type from a kickstart file (vponcova)
    Resolves: rhbz#1449099


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.117-1
changelog:
  - Root checking fixes password for password from kickstart (mkolman)
    Related: rhbz#1356966
  - Improve the GUI password checker (mkolman)
    Related: rhbz#1356966
  - Respect changesok policy on root password spoke (mkolman)
    Resolves: rhbz#1356966
  - Update translations of password checking strings (rvykydal)
    Resolves: rhbz#1383911


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.118-1
changelog:
  - rpmostreepayload: [rhel7only] Move tmpfiles to after mount setup (walters)
    Resolves: rhbz#1459623
  - rpmostreepayload: Handle /var as a user-specified mountpoint (walters)
    Resolves: rhbz#1459623


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.121-1
changelog:
  - rpmostreepayload: Stub out payload methods which use `import rpm` (walters)
    Related: rhbz#1462979


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 21.48.22.121-1.0.1
changelog:
  - Use shim from 7.3 for signing.
  - "autopart --nohome" can't disable creation of /home partition [bug 26279212]
  - Update the Oracle Linux install class to match latest RHEL install class.
  - Prevent crash when returning to install source page [bug 22262678]
  - Add patch to use kernel title to setup default kernel instead of index [bug 21957916]
  - Make sure that UEK kernel is default and /etc/sysconfig/kernel is written.
  - update Oracle Linux install class to match RHEL version [bug 21951255] (Kevin Lyons)
  - Fix crash when referencing proxy before it is initiated. [bug 21943737] (Kevin Lyons)
  - Remove help files [bug 20546064,20667883]
  - Make sure sort function is applied [bug 20121584]
  - Keep hugepage related boot parameters together and in the proper order
    [bug 20121584]
  - Remove reference to RH in pyanaconda/ui/gui/spokes/welcome.glade.h
  - Fix exception in software selection spoke [bug 20281627]
  - Handle "Beta" string in boot menuentry [bug 20275215]
  - pick up changes in rhel.py to ol.py by adding
    Set-first-boot-policy-regarding-ONBOOT-value.patch
  - Adjust GTK css file to fix background images [bug 18777671]
  - Put "with" in menuentry instead of "using" [bug 18504756]
  - Fix bug with UEK not being default on full install [bug 18706799]
  - Have XFS be first option for / for Oracle Linux.
  - replace redhat EULA reference with oracle EULA refernce [bug 18404893]
  - Make sure call to grub2-set-default is consistent with boot entry [bug 18259020]
  - Set UEK as default boot option if installed [bug 18177078]
  - Add install class for Oracle Linux
  - Remove user visisble RH references
  - Disable functionality to send install log files to RH bugzilla/Ticket systems
  - Include UEK in the kernels to install list, and have it be the default


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.127-1
changelog:
  - Enable SE/HMC file access to repo (vponcova)
    Resolves: rhbz#1289918
  - Support timeout and retries options in %packages section (vponcova)
    Resolves: rhbz#1448459


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.130-1
changelog:
  - kickstart: use RHEL7_Firewall instead of F28_Firewall (dusty)
    Related: rhbz#1526450
  - kickstart: support firewall --use-system-defaults (dusty)
    Resolves: rhbz#1526450
  - Check payload is set before accessing its data (mkolman)
    Resolves: rhbz#1524785
  - Fix bad bash '*' expansion when loading kernel modules (jkonecny)
    Resolves: rhbz#1519220


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.134-1
changelog:
  - Revert "UI support for configuring certain mitigations (mkolman)"
    Resolves: rhbz#1546267
  - Revert "Performance spoke related CI fixes" (mkolman)
    Related: rhbz#1546267
  - Revert "Fix mitigation toggling with kickstart" (mkolman)
    Related: rhbz#1546267


author: Bruce Hill <bruce.hill@oracle.com> - 21.48.22.134-1.0.1
changelog:
  - "autopart --nohome" can't disable creation of /home partition [bug 26279212]
  - Update the Oracle Linux install class to match latest RHEL install class.
  - Prevent crash when returning to install source page [bug 22262678]
  - Add patch to use kernel title to setup default kernel instead of index [bug 21957916]
  - Make sure that UEK kernel is default and /etc/sysconfig/kernel is written.
  - update Oracle Linux install class to match RHEL version [bug 21951255] (Kevin Lyons)
  - Fix crash when referencing proxy before it is initiated. [bug 21943737] (Kevin Lyons)
  - Remove help files [bug 20546064,20667883]
  - Make sure sort function is applied [bug 20121584]
  - Keep hugepage related boot parameters together and in the proper order
    [bug 20121584]
  - Remove reference to RH in pyanaconda/ui/gui/spokes/welcome.glade.h
  - Fix exception in software selection spoke [bug 20281627]
  - Handle "Beta" string in boot menuentry [bug 20275215]
  - pick up changes in rhel.py to ol.py by adding
    Set-first-boot-policy-regarding-ONBOOT-value.patch
  - Adjust GTK css file to fix background images [bug 18777671]
  - Put "with" in menuentry instead of "using" [bug 18504756]
  - Fix bug with UEK not being default on full install [bug 18706799]
  - Have XFS be first option for / for Oracle Linux.
  - replace redhat EULA reference with oracle EULA refernce [bug 18404893]
  - Make sure call to grub2-set-default is consistent with boot entry [bug 18259020]
  - Set UEK as default boot option if installed [bug 18177078]
  - Add install class for Oracle Linux
  - Remove user visisble RH references
  - Disable functionality to send install log files to RH bugzilla/Ticket systems
  - Include UEK in the kernels to install list, and have it be the default


author: Philip Copeland <philip.copeland@oracle.com> - 21.48.22.134-1.0.4
changelog:
  - For development add "--with git" as an option for rpmbuild. By default
    it will not try and add the extra git dependancies.
  - liveinst was not built since IS_LIVEINST_ARCH in configure.ac wasn't tweaked
    it should now build for armv5,6,7* and aarch64


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.140-1
changelog:
  - Preserve the boot option zfcp.allow_lun_scan (vponcova)
    Resolves: rhbz#1561662
  - Don't display "Alternate Architectures" in product name (rvykydal)
    Resolves: rhbz#1488558


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.143-1
changelog:
  - Add data loss warning to nvdimm reconfigure dialog. (rvykydal)
    Resolves: rhbz#1280500
  - Add UI feedback for disk repopulating after nvdimm reconfiguration.
    (rvykydal)
    Resolves: rhbz#1280500
  - Use only devices specified by nvdimm command for installation. (rvykydal)
    Resolves: rhbz#1280500
  - Add option to reconfigure nvdimm devices into sector mode. (rvykydal)
    Resolves: rhbz#1280500
  - Allow only devices in sector mode to be selected. (rvykydal)
    Resolves: rhbz#1280500
  - Add nvdimm devices to Advanced Storage spoke. (rvykydal)
    Resolves: rhbz#1280500
  - Add kickstart support for nvdimm reconfiguration to sector mode. (rvykydal)
    Resolves: rhbz#1280500


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.144-1
changelog:
  - Don't allow unlocking and using of LUKS2 devices (vponcova)
    Resolves: rhbz#1608251
  - Fix glade accelerator conflicts (rvykydal)
    Related: rhbz#1602436
  - Add nvdimm files to POTFILES.in (rvykydal)
    Related: rhbz#1602436
  - Support nvdimm only on x86_64 (rvykydal)
    Resolves: rhbz#1602436


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.146-1
changelog:
  - Revert "If someone really wants to eject the cdrom, then do it. (jkonecny)"
    Resolves: rhbz#1618408


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 21.48.22.147-1.0.2
changelog:
  - For development add "--with git" as an option for rpmbuild. By default
    it will not try and add the extra git dependancies. (philip.copeland@oracle.com)
  - liveinst was not built since IS_LIVEINST_ARCH in configure.ac wasn't tweaked
    it should now build for armv5,6,7* and aarch64 (philip.copeland@oracle.com)
  - Provide the liveinst binary [bug 27116016]


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.149-1
changelog:
  - Offer only supported sector sizes in NVDIMM reconfiguration dialog (rvykydal)
    Resolves: rhbz#1614049


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.153-1
changelog:
  - Fix tests and add new tests (jkonecny)
    Related: rhbz#1701032
  - Do not calculate hash for disabled repos (jkonecny)
    Related: rhbz#1701032
  - Test proxy only if set (jkonecny)
    Related: rhbz#1701032
  - Add certificate to the repo files (jkonecny)
    Resolves: rhbz#1701032
  - Use SSLOptions for RepoMDMetaHash object (jkonecny)
    Related: rhbz#1701032
  - Use SSLOptions for YUM calls (jkonecny)
    Related: rhbz#1701032
  - Use SSLOptions for Base repository (jkonecny)
    Related: rhbz#1701032
  - Use new ssl certificate KS option for .treeinfo (lars)
    Related: rhbz#1701032


author: EL Errata <el-errata_ww@oracle.com> - 21.48.22.156-1.0.1
changelog:
  - Remove logic to set spectre_v2=retpoline boot option [Orabug: 30100048]
  - iscsi services should not be started when in anaconda.target
    [Orabug: 29446153] (fred.herard@oracle.com)
  - "autopart --nohome" can't disable creation of /home partition [Orabug: 26279212]
  - Update the Oracle Linux install class to match latest RHEL install class.
  - Prevent crash when returning to install source page [Orabug: 22262678]
  - Add patch to use kernel title to setup default kernel instead of index [Orabug: 21957916]
  - Make sure that UEK kernel is default and /etc/sysconfig/kernel is written.
  - update Oracle Linux install class to match RHEL version [Orabug: 21951255] (Kevin Lyons)
  - Fix crash when referencing proxy before it is initiated. [Orabug: 21943737] (Kevin Lyons)
  - Make sure sort function is applied [Orabug: 20121584]
  - Keep hugepage related boot parameters together and in the proper order
    [Orabug: 20121584]
  - Remove reference to RH in pyanaconda/ui/gui/spokes/welcome.glade.h
  - Fix exception in software selection spoke [Orabug: 20281627]
  - Handle "Beta" string in boot menuentry [Orabug: 20275215]
  - pick up changes in rhel.py to ol.py by adding
    Set-first-boot-policy-regarding-ONBOOT-value.patch
  - Adjust GTK css file to fix background images [Orabug: 18777671]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Fix bug with UEK not being default on full install [Orabug: 18706799]
  - Have XFS be first option for / for Oracle Linux.
  - replace redhat EULA reference with oracle EULA refernce [Orabug: 18404893]
  - Make sure call to grub2-set-default is consistent with boot entry [Orabug: 18259020]
  - Set UEK as default boot option if installed [Orabug: 18177078]
  - Add install class for Oracle Linux
  - Remove user visisble RH references
  - Disable functionality to send install log files to RH bugzilla/Ticket systems
  - Include UEK in the kernels to install list, and have it be the default


author: EL Errata <el-errata_ww@oracle.com> - 21.48.22.156-1.0.2
changelog:
  - For development add "--with git" as an option for rpmbuild. By default
    it will not try and add the extra git dependancies. (philip.copeland@oracle.com)
  - liveinst was not built since IS_LIVEINST_ARCH in configure.ac wasn't tweaked
    it should now build for armv5,6,7* and aarch64 (philip.copeland@oracle.com)
  - Provide the liveinst binary [Orabug: 27116016]


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.158-1
changelog:
  - network: use DEVICETYPE for team when updating virtual slaves ifcfgs
    (rvykydal)
    Resolves: rhbz#1680606
  - dracut/parse-kickstart: Set DEVICETYPE instead of TYPE in a team master ifcfg file
    (ptalbert)
    Resolves: rhbz#1680606


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 21.48.22.159-1.0.1
changelog:
  - Update SMT URL [Orabbug: 30651310]
  - Remove logic to set spectre_v2=retpoline boot option [Orabug: 30100048]
  - iscsi services should not be started when in anaconda.target
    [Orabug: 29446153] (fred.herard@oracle.com)
  - "autopart --nohome" can't disable creation of /home partition [Orabug: 26279212]
  - Update the Oracle Linux install class to match latest RHEL install class.
  - Prevent crash when returning to install source page [Orabug: 22262678]
  - Add patch to use kernel title to setup default kernel instead of index [Orabug: 21957916]
  - Make sure that UEK kernel is default and /etc/sysconfig/kernel is written.
  - update Oracle Linux install class to match RHEL version [Orabug: 21951255] (Kevin Lyons)
  - Fix crash when referencing proxy before it is initiated. [Orabug: 21943737] (Kevin Lyons)
  - Make sure sort function is applied [Orabug: 20121584]
  - Keep hugepage related boot parameters together and in the proper order
    [Orabug: 20121584]
  - Remove reference to RH in pyanaconda/ui/gui/spokes/welcome.glade.h
  - Fix exception in software selection spoke [Orabug: 20281627]
  - Handle "Beta" string in boot menuentry [Orabug: 20275215]
  - pick up changes in rhel.py to ol.py by adding
    Set-first-boot-policy-regarding-ONBOOT-value.patch
  - Adjust GTK css file to fix background images [Orabug: 18777671]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Fix bug with UEK not being default on full install [Orabug: 18706799]
  - Have XFS be first option for / for Oracle Linux.
  - replace redhat EULA reference with oracle EULA refernce [Orabug: 18404893]
  - Make sure call to grub2-set-default is consistent with boot entry [Orabug: 18259020]
  - Set UEK as default boot option if installed [Orabug: 18177078]
  - Add install class for Oracle Linux
  - Remove user visisble RH references
  - Disable functionality to send install log files to RH bugzilla/Ticket systems
  - Include UEK in the kernels to install list, and have it be the default


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 21.48.22.159-1.0.3
changelog:
  - liveinst was not built since IS_LIVEINST_ARCH in configure.ac wasn't tweaked
    it should now build for armv5,6,7* and aarch64 (philip.copeland@oracle.com)
  - Provide the liveinst binary [Orabug: 27116016] 
  - Make sure that VMD driver is including in the initramfs creating during install
    [Orabug 31758304]


author: Martin Kolman <mkolman@redhat.com> - 7.3.1-1
changelog:
  - Bump epoch to fix upgrades from the Anaconda help content subpackage (mkolman)
    Resolves: rhbz#1275285
  - Add help content for the Subscription Manager addon spoke (cspicer)
    Resolves: rhbz#1260071


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 7.5.3-1.0.1
changelog:
  - Remove PPC and S390 help pages.
  - Use Oracle Linux for product name.
  - Update content with Oracle specific info and links [bug 20452290]


author: Miloš Jakubíček <xjakub@fi.muni.cz> - 0:2.7.7-23
changelog:
  - Add patch updating license on ShowString.java and StreamConverter.java
    examples (thanks to Tom Callaway, see BZ#848662)


author: Java SIG <java-devel@lists.fedoraproject.org> - 1.7-4
changelog:
  - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
  - Replace maven BuildRequires with maven-local


author: Jaromir Capik <jcapik@redhat.com> 3.2.1-13
changelog:
  - saxon dependency removed - not needed
  - minor spec file changes according to the latest guidelines


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.1.2-1
changelog:
  - Update to upstream version 1.1.2
  - Convert POM to POM macros
  - Remove OSGi manifest patch; fixed upstream


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.0.16-12
changelog:
  - Build with XMvn
  - Remove system-scoped dependency on tools.jar
  - Update to current packaging guidelines


author: Jesper Dangaard Brouer <brouer@redhat.com> - 0.0.4-5
changelog:
  - fix issues reported by static analysis tools
    Resolves: rhbz#1027762
  - add man-pages for arptables-{save,restore}
    Resolves: rhbz#1025726


author: Jesper Dangaard Brouer <brouer@redhat.com> - 0.0.4-8
changelog:
  - Add missing long option --set-counters and update documentation
    Corrosponding short option -c was implemented, but undocumented.
    Resolves: rhbz#1050854


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-16
changelog:
  - the correct solution is remove smp_flags, they don't work properly on ppc with
    the option mpower7
  - Related: rhbz#1048745


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-21
changelog:
  - correct the DST correction when using UTC time specification (#1328832)
  - clear non-job files from at dir and test for write error on fclose
    to fix bogus syslog messages


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-22.2
changelog:
  - fix handling of the aborted jobs (due to possibly
    temporary conditions) and avoid flooding the syslog


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-23
changelog:
  - fix the ownership of the spool directory (#1414228)
  - document the -n option of atd (#739870)
  - fix handling of the aborted jobs (due to possibly
    temporary conditions) and avoid flooding the syslog


author: Kalev Lember <kalev@smartlink.ee> - 2.22.2-4
changelog:
  - Spec cleanup
  - Actually co-own /usr/share/devhelp/ directory
  - Require base package from -doc subpackage


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 3.10.1-7
changelog:
  - change x86_64 archdef to P4, prefetch instruction from hammer is illegal on some pentium 4
  - add -fstack-protector-strong to flags
  - Resolves: rhbz#1070783


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 3.10.1-9
changelog:
  - ppcle patches (conflicting patches modified)
  - tests on ppcle disabled to shorten build time and fit into 24 hour limit
  - resolves bug 1125475
  - aarch64 patches
  - Resolves: rhbz#1061956


author: Jaromir Capik <jcapik@redhat.com> - 3.10.1-10
changelog:
  - patching for Power8 to pass performance tunings and tests on P8 builders
  - re-enabling tests on ppc64le
  - Resolves: rhbz#1125475


author: Jakub Martisko <jamartis@redhat.com> - 3.10.1-11
changelog:
  - apply patches 99 and 110 to all ppc variants
  - build lapack with -frecursive flag (#1176026)
  - fix possible memory leak (#1350536)
  - fix wrong sed substitutions (#1402627)
  - Resolves: rhbz#1350536
  - Related: rhbz#1176026


author: Jakub Martisko <jamartis@redhat.com> - 3.10.1-12
changelog:
  - cleanup: merge the application of ppc patches from previous commit
    into single block
  - Related: rhbz#1350536


author: Steve Grubb <sgrubb@redhat.com> 2.4.1-4
changelog:
  - Remove golang bindings added under the following bz
  resolves: #1115196 - Add golang bindings for libaudit


author: Steve Grubb <sgrubb@redhat.com> 2.6.5-4
changelog:
  resolves: #1382397 - write_logs option is not correctly handled
  resolves: #1414812 - Setting log_format to NOLOG make auditd core dump


author: Steve Grubb <sgrubb@redhat.com> 2.7.4-1
changelog:
  resolves: #1367703 - auvirt wasn't supporting date keywords
  resolves: #1396792 - augenrules includes files ending in regexp "rules"
  resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character


author: Steve Grubb <sgrubb@redhat.com> 2.7.5-1
changelog:
  resolves: #1437187 - audit rpm postinstall script points to non-existing file
  resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page & rules
  resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
  resolves: #1438997 - SECCOMP records have wrong syscall


author: Steve Grubb <sgrubb@redhat.com> 2.7.8-1
changelog:
  resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
  resolves: #1448526 - aureport shows the wrong auid "-1"
  resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
  resolves: #1482121 - python audit crash dereferencing auparse_state_t le field


author: Steve Grubb <sgrubb@redhat.com> 2.8.1-1
changelog:
  resolves: #982154 - Can't find the "avc" event with the auvirt command
  resolves: #1101605 - Ipv6 seems no working
  resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
  resolves: #1455598 - Default port is wrong in audisp-remote.conf
  resolves: #1476406 - Audit package rebase


author: Steve Grubb <sgrubb@redhat.com> 2.8.4-1
changelog:
  resolves: #1559032 - Rebase audit package to 2.8.4 to pick up bug fixes
  resolves: #1573889 - auditd busy loop in rotate_logs() with num_logs < 2
  resolves: #1534748 - incorrect addr field when using IPv6 for remote logging
  resolves: #1515903 - ausearch-expression man page missing \timestamp_ex
  resolves: #1511606 - aureport AVC report header is incomplete
  resolves: #1504251 - make auditd dump internal state for log writing status


author: Steve Grubb <sgrubb@redhat.com> 2.8.5-1
changelog:
  resolves: #1651761 - Rebase audit package to 2.8.5 to pick up bug fixes
  resolves: #1462178 - audit rule arch changed from b32 to b64 on ppc64le
  resolves: #1614833 - audispd loops reloading config 
  resolves: #1622194 - audisp-remote memory leak when using krb5 
  resolves: #1625156 - audisp-remote wont connect if remote ending action not reconnect
  resolves: #1628626 - aureport -a --failed does not display user_avc events 
  resolves: #1648005 - tcp listener socket fails when ipv6.disable=1 boot command
  resolves: #1650670 - space left in auditd.conf expressed as a percentage 
  resolves: #1663285 - ausearch device/inode missing when using a single file 
  resolves: #1672287 - max_log_file_action "keep_logs" doesn't behave as described


author: Dominic Cleal <dcleal@redhat.com> - 1.4.0-1
changelog:
  - Rebase to Augeas 1.4.0
  - Revert some changes for better compatibility with 1.1.0-17:
    * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
    * Dnsmasq: revert splitting of address/server options
    * Dovecot: restore quotes within values
    * Jaas: revert semicolon and line break changes
    * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
    * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
    * Syslog: restore tree without protocol for UDP hosts
    * UpdateDB: keep Simplevars to load config by default


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-4
changelog:
  - Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
  - Skip testSaveNoPermission when running as root (RHBZ#1269817)
  - Chrony: allow signed numbers (RHBZ#1302017)
  - Krb5: support includedir (RHBZ#1406111)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-5
changelog:
  - Cgconfig: allow fperm & dperm in admin & task (RHBZ#1325741)
  - Grub: handle top-level "boot" directive (RHBZ#1484261)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-9
changelog:
  - Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
    (RHBZ#1653766)
  - Anaconda: new lens (RHBZ#1657189)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-10
changelog:
  - Krb5: support realms that start with numbers; add more pkinit_* options;
    improve handling of [dbmodules]; allow include/includedir directives
    everywhere (RHBZ#1670420)
  - Grub: handle '+' in kernel command line options (RHBZ#1758357)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-10
changelog:
  - Add patch for IPRoute2, hex and hyphen protocols (RHBZ#1063961)
  - Add patch for IPRoute2, slashes in protocols (RHBZ#1063968)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-12
changelog:
  - Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
  - Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
  - Add patch for Krb5, parse braces in values (RHBZ#1066419)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-13
changelog:
  - aug_save: return error when unlink fails (RHBZ#1091143)
  - augtool: add aliases to autocomplete (RHBZ#1100076)
  - augtool: remove unused dump-xml arg (RHBZ#1100106)
  - Automounter: parse hostnames with hyphens (RHBZ#1075162)
  - Cgconfig: parse other valid controllers (RHBZ#1112543)
  - Chrony: add lens (RHBZ#1071947)
  - docs: update man page with new commands (RHBZ#1100077)
  - Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
  - Httpd: parse continued, quoted lines (RHBZ#1100551)
  - Ldso: parse hwcap lines (RHBZ#1102629)
  - NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
  - Rmt: add lens (RHBZ#1100549)
  - Services: permit colons in service name (RHBZ#1121527)
  - Shellvars: support arithmetic expansion (RHBZ#1100550)
  - Syslog: parse TCP loghosts (RHBZ#1129386)
  - Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
  - Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
  - Systemd: parse quoted environment vars (RHBZ#1100547)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-14
changelog:
  - Kdump: parse new options, EOL comments (RHBZ#1139298)
  - Rsyslog: parse property filters and templates (RHBZ#1138402)
  - Systemd: parse semicolons inside entry values (RHBZ#1139498)
  - Systemd: parse environment variables where value is quoted (RHBZ#1138508)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-16
changelog:
  - Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
  - Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
  - Shadow: add lens (RHBZ#1145249)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-9.el7_7.1
changelog:
  - Krb5: support realms that start with numbers; add more pkinit_* options;
    improve handling of [dbmodules]; allow include/includedir directives
    everywhere (RHBZ#1799021)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-9.el7_8.1
changelog:
  - Krb5: support realms that start with numbers; add more pkinit_* options;
    improve handling of [dbmodules]; allow include/includedir directives
    everywhere (RHBZ#1799022)


author: Pavel Březina <pbrezina@redhat.com> - 6.2.8-26
changelog:
  - CVE-2017-7488 authconfig: Information leak when SSSD is used for authentication against remote server (#1441604)


author: Pavel Raiskup <praiskup@redhat.com> - 2.69-6
changelog:
  - fedora-review (minor) fixes and typos: trim lines, remove defattr(,,), do not
    run `rm -rf %{buildroot} at the beginning of install section, use curly
    brackets only around rpm macros/variables and not around shell variables,
    remove clean section


author: Pavel Raiskup <praiskup@redhat.com> - 2.69-8
changelog:
  - the 'INSTALL' file can be used as template file for packages which are using
    autoconf - mark it for installation again (#661623)


author: Ian Kent <ikent@redhat.com> - 5.0.7-98
changelog:
  - bz1627502 - after upgrading to autofs-5.0.7-83.el7.x86_64 on RHEL 7 clients,
    amd maps /defaults key mount options are no longer working
    - fix amd parser opts option handling.
  - Resolves: rrhbz#1627502


author: Ian Kent <ikent@redhat.com> - 5.0.7-98
changelog:
  - bz1630189 - yum update hanging while restarting autofs
    - fix incorrect locking in sss lookup.
  -Resolves: rhbz#1630189


author: Ian Kent <ikent@redhat.com> - 5.0.7-100
changelog:
  - bz1599516 - [autofs] The log no longer print PID of automount process
    - add NULL check in prepare_attempt_prefix().
    - update build info with systemd.
    - use flags for startup boolean options.
    - move close stdio descriptors to become_daemon().
    - add systemd service command line option.
  - Resolves: rhbz#1599516


author: Ian Kent <ikent@redhat.com> - 5.0.7-101
changelog:
  - bz1640448 - path_resolution on an autofs managed path resets the timer. Can
    this be made configurable?
    - support strictexpire mount option.
  - Resolves: rhbz#1640448


author: Ian Kent <ikent@redhat.com> - 5.0.7-102
changelog:
  - bz1644910 - [RFE] Enable additional logging information for autofs
    - add NULL check for get_addr_string() return.
    - use malloc(3) in spawn.c.
    - add mount_verbose configuration option.
    - optionally log mount requestor process info.
    - log mount call arguments if mount_verbose is set.
  - Resolves: rhbz#1644910


author: Ian Kent <ikent@redhat.com> - 5.0.7-103
changelog:
  - bz1644933 - Segmentation fault in err_string_data_LHASH_COMP
    - openssl workaround.
  - Resolves: rhbz#1644933


author: Ian Kent <ikent@redhat.com> - 5.0.7-104
changelog:
  - bz1442063 - Parameter ghost not documented in the man pages
    - document ghost option in auto.master man page.
  - Resolves: rhbz#1442063


author: Ian Kent <ikent@redhat.com> - 5.0.7-105
changelog:
  - bz1680582 - Sanitize autofs logging
    - make expire remaining log level debug.
  - Resolves: rhbz#1680582


author: Ian Kent <ikent@redhat.com> - 5.0.7-106
changelog:
  - bz1685804 - autofs doesn't expand macros in amd map selectors
    - workaround getaddrinfo(3) ai_canonname bug.
    - improve hostname lookup error logging.
    - allow period following macro in selector value.
    - fix macro expansion in selector values.
  - Resolves: rhbz#1685804


author: Ian Kent <ikent@redhat.com> - 5.0.7-107
changelog:
  - bz1734057 - automount segfaults if a bad hosts entry is added
    in /etc/auto.master
    - fix reset flex scan buffer on init.
  - Resolves: rhbz#1734057


author: Ian Kent <ikent@redhat.com> - 5.0.7-108
changelog:
  - bz1728914 - getmntent returns additional "-hosts" entries when
    automounter is used with "hosts" map
    - remove unused function has_fstab_option().
    - remove unused function reverse_mnt_list().
    - remove a couple of old debug messages.
    - fix amd entry memory leak.
    - fix unlink_mount_tree() not umounting mounts.
    - add ignore mount option.
    - use ignore option for offset mounts as well.
    - add config option for "ignore" mount option
    - use bit flags for autofs mount types in mnt_list.
    - use mp instead of path in mnt_list entries.
    - always use PROC_MOUNTS to make mount lists.
    - add glibc getmntent_r().
    - use local getmntent_r in table_is_mounted().
    - refactor unlink_active_mounts() in direct.c.
    - don't use tree_is_mounted() for mounted checks.
    - use single unlink_umount_tree() for both direct and indirect mounts.
    - move unlink_mount_tree() to lib/mounts.c.
    - use local_getmntent_r() for unlink_mount_tree().
    - use local getmntent_r() in get_mnt_list().
    - use local getmntent_r() in tree_make_mnt_list().
  - Resolves: rhbz#1728914


author: Ian Kent <ikent@redhat.com> - 5.0.7-109
changelog:
  - bz1728914 - getmntent returns additional "-hosts" entries when
    automounter is used with "hosts" map
    - fix missing initialization of autofs_point flags.
  - Related: rhbz#1728914


author: Ian Kent <ikent@redhat.com> - 5.0.7-110
changelog:
  - bz1806514 - strictexpire option not set for offset mounts
    - also use strictexpire for offsets.
  - Resolves: rhbz#1806514


author: Ian Kent <ikent@redhat.com> - 5.0.7-111
changelog:
  - bz1806514 - strictexpire option not set for offset mounts
    - fix patch not applied.
  - Related: rhbz#1806514


author: Ian Kent <ikent@redhat.com> - 5.0.7-112
changelog:
  - bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
    - fix trailing dollar sun entry expansion.
  - Resolves: rhbz#1818664


author: Ian Kent <ikent@redhat.com> - 5.0.7-114
changelog:
  - bz1847762 - automount program crashes with "malloc(): invalid next size
    (unsorted)
    - initialize struct addrinfo for getaddrinfo() calls.
    - fix quoted string length calc in expandsunent().
    - fix autofs mount options construction.
  -Resolves: rhbz#1847762


author: Ian Kent <ikent@redhat.com> - 5.0.7-115
changelog:
  - bz1885511 - automount force unlink option (-F) does not work as expected
    on autofs-5.0.7-109.el7
    - fix direct mount unlink_mount_tree() path.
    - fix unlink mounts umount order.
  - bz1858586 - autofs share doesn't mount when using nobind over RDMA where
    nfs-server and nfs-client are the same systems
    - mount_nfs.c fix local rdma share not mounting.
  - Resolves: rhbz#1885511 rhbz#1858586


author: Ian Kent <ikent@redhat.com> - 5.0.7-116
changelog:
  - bz1885511 - automount force unlink option (-F) does not work as expected
    on autofs-5.0.7-109.el7
    - fix incorrect logical compare in unlink_mount_tree().
  - Related: rhbz#1885511


author: Ian Kent <ikent@redhat.com> - 5.0.7-116el7_9.1
changelog:
  - bz2107752 - autofs: send FAIL cmd/ioctl mess when encountering problems
    with mount trigger
    - fix kernel mount status notification.
  - Resolves: rhbz#2107752


author: Darren Archibald <darren.archibald@oracle.com> 5.0.7-116.0.3.el7_9.1
changelog:
  - add autofs-5.0.7-fix-empty-mounts-list-return-from-unlink_mount_tree.patch [Orabug: 32502309]
  - add autofs-5.0.5-lookup-mounts.patch [Orabug:12658280] (Bert Barbe)


author: Ian Kent <ikent@redhat.com> - 5.0.7-60
changelog:
  - bz1382093 - Improve logging in autofs
     - add the mount requestor's pid to pending_args.
     - create thread-local ID for mount attempts.
     - log functions to prefix messages with attempt_id if available.
     - factor out set_thread_mount_request_log_id().
     - add config option to use mount request log id.
  - Resolves: rhbz#1382093


author: Ian Kent <ikent@redhat.com> - 5.0.7-61
changelog:
  - bz1101782 - autofs configured with sssd is not finding any maps
    - work around sss startup delay.
    - add sss master map wait config option (wait initially 0, disabled).
  - Resolves: rhbz#1101782


author: Ian Kent <ikent@redhat.com> - 5.0.7-62
changelog:
  - bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
    - use autofs_point to store expire timeout where possibe.
  - Related: rhbz#1367576


author: Ian Kent <ikent@redhat.com> - 5.0.7-63
changelog:
  - bz1101782 - autofs configured with sssd is not finding any maps
    - fix work around sss startup delay.
  - bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
    - fix possible NULL derefernce.
  - Related: rhbz#1101782 rhbz#1367576


author: Ian Kent <ikent@redhat.com> - 5.0.7-64
changelog:
  - bz1440769 - autofs is facing scalability issues
    - improve scalability of direct mount path component creation.
  - Resolves: rhbz#1440769


author: Ian Kent <ikent@redhat.com> - 5.0.7-65
changelog:
  - bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
    - fix invalid reference in remount_active_mount().
  - Related: rhbz#1367576


author: Ian Kent <ikent@redhat.com> - 5.0.7-66
changelog:
  - bz1435736 - autofs fails with kernel: automount[3386]:
      segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
      error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
    - increase worker thread per-thread stack size.
    - limit getgrgid_r() buffer size.
    - add congigure option for limiting getgrgid_r() stack usage.
    - use above option to limit getgrgid_r() stack usage with configure.
  - Resolves: rhbz#1435736


author: Ian Kent <ikent@redhat.com> - 5.0.7-68
changelog:
  - bz1435736 - autofs fails with kernel: automount[3386]:
      segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
      error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
    - fix unset tsd group name handling.
  - Related: rhbz#1435736


author: Ian Kent <ikent@redhat.com> - 5.0.7-69
changelog:
  - bz1435736 - autofs fails with kernel: automount[3386]:
      segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
      error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
    - fix a couple of covarity warning resulting in group name handling change.
  - Related: rhbz#1435736


author: Ian Kent <ikent@redhat.com> - 5.0.7-70.el7_4
changelog:
  - bz1503945 - autofs option parsing for maps with fstype=autofs no longer
    works [rhel-7.4.z]
    - revert fix argc off by one in mount_autofs.c.
  - bz1503946 - autofs map entry options field does not accept dot character
    [rhel-7.4.z]
    - allow dot in OPTIONSTR value lexer pattern.
    - handle additional nfs versions in mount_nfs.c.
  - Resolves: rhbz#1503945 rhbz#1503946


author: Ian Kent <ikent@redhat.com> - 5.0.7-70.el7_4.1
changelog:
  - bz1515311 - Automount cannot access host shares after a reboot [rhel-7.4.z]
    - reset master map list on startup retry.
  - Resolves: rhbz#1515311


author: Ian Kent <ikent@redhat.com> - 5.0.7-75
changelog:
  - bz1489247 - autofs: config mount_nfs_default_protocol doesn't work
    - improve description of mount_nfs_default_protocol.
  - Resolves: rhbz#1489247


author: Ian Kent <ikent@redhat.com> - 5.0.7-76
changelog:
  - bz1504145 - Automount cannot access host shares after a reboot
    - reset master map list on startup retry.
  - Resolves: rhbz#1504145


author: Ian Kent <ikent@redhat.com> - 5.0.7-77
changelog:
  - bz1504145 - Automount cannot access host shares after a reboot
    - fix reject in patch changelog hunk.
  - Related: rhbz#1504145


author: Ian Kent <ikent@redhat.com> - 5.0.7-78
changelog:
  - bz1509043 - [RFE] "automount / amd: file system type program is not
    yet implemented"
    - improve debug logging of lookup key.
    - fix cachefs parse message not being logged.
    - fix typo in amd_parse.c.
    - add missing MODPREFIX to logging in amd parser.
    - fix symlink false negative in umount_multi().
    - remove expand_selectors() call on amd parser entry.
    - fix amd defaults map entry handling.
    - refactor amd_parse.c.
    - fix amd parser double quote handling.
    - fix expandamdent() quote handling.
    - fix possible memory leak during amd parse.
    - remove path restriction of amd external mount.
    - add function umount_amd_ext_mount().
    - add function ext_mount_inuse().
    - add function construct_argv().
    - add amd mount type program mount support.
  - Resolves: rhbz#1509043


author: Ian Kent <ikent@redhat.com> - 5.0.7-79
changelog:
  - bz1509043 - [RFE] "automount / amd: file system type program is not
    yet implemented"
    - fix memory leak in umount_amd_ext_mount().
    - fix strerror_r() parameter declaration in do program_mount().
    - fix incorrect check in validate_program_options().
  - Related: rhbz#1509043


author: Ian Kent <ikent@redhat.com> - 5.0.7-80
changelog:
  - bz1509088 - autofs hangs due to race condition in do_spawn
    - update configure to check for pipe2(2).
    - fix open calls not using open_xxxx() calls.
    - move open_xxxx() functions to spawn.c.
    - serialize calls to open_xxxx() functions.
  - Resolves: rhbz#1509088


author: Ian Kent <ikent@redhat.com> - 5.0.7-81
changelog:
  - bz1527815 - automount[1979]: segfault at 55f5101d30e8 ip 000055f50f177668
                sp 00007ffffa85fdd0 error 4 in automount[55f50f16d000+48000]
    - fix use after free in do_master_list_reset()
  - Resolves: rhbz#1527815


author: Ian Kent <ikent@redhat.com> - 5.0.7-82
changelog:
  - bz1527815 - automount[1979]: segfault at 55f5101d30e8 ip 000055f50f177668
                sp 00007ffffa85fdd0 error 4 in automount[55f50f16d000+48000]
    - fix deadlock in dumpmaps.
  - Related: rhbz#1527815


author: Ian Kent <ikent@redhat.com> - 5.0.7-83
changelog:
  - bz1509043 - [RFE] "automount / amd: file system type program is not
    yet implemented"
    - dont use array for path when not necessary.
    - fix prefix option handling in expand_entry().
    - fix sublink handling in do_nfs_mount().
    - add fix error return in do_nfs_mount().
  - Related: rhbz#1509043


author: Ian Kent <ikent@redhat.com> - 5.0.7-90
changelog:
  - bz1536526 - Ignore trailing slashes at the end of executable maps
    in auto.master config file
    - add man page note about extra slashes in paths.
  -Related: rhbz#1536526


author: Ian Kent <ikent@redhat.com> - 5.0.7-92
changelog:
  - bz1581502 - PID file never created or disappears
    - add units After line to include statd service.
    - use systemd sd_notify() at startup.
  -Resolves: rhbz#1581502


author: Ian Kent <ikent@redhat.com> - 5.0.7-93
changelog:
  - bz1581502 - PID file never created or disappears
    - add missing BuildRequires: systemd-devel.
    - fix changelog entry revision.
  -Related: rhbz#1581502


author: Ian Kent <ikent@redhat.com> - 5.0.7-94
changelog:
  - bz1609128 - autofs reload is unable to activate new map entries,
    it is autofs restart which shows new map entries.
    - fix update_negative_cache() map source usage.
  - Resolves: rhbz#1609128


author: Ian Kent <ikent@redhat.com> - 5.0.7-95
changelog:
  - bz1612914 - [autofs]Removed entries still can be accessed
    - mark removed cache entry negative.
  - Resolves: rhbz#1612914


author: Ian Kent <ikent@redhat.com> - 5.0.7-96
changelog:
  - bz1598640 - Server availability probe broke tunneling nfs via localhost
    - remove some redundant rpc library code.
    - add port parameter to rpc_ping().
    - dont probe NFSv2 by default.
    - add version parameter to rpc_ping().
  - Resolves: rhbz#1598640


author: Ian Kent <ikent@redhat.com> - 5.0.7-97
changelog:
  - bz1358887 - On Red Hat 7.x systems if you try to access local
    filesystems using the automounter through /net then the shell
    and mount could lock up *if* the filesystem your accessing is
    double exported.
    - set bind mount as propagation slave.
    - add master map pseudo options for mount propagation.
  - Resolves: rhbz#1358887


author: Miroslav Lichvar <mlichvar@redhat.com> - 5.18-1
changelog:
  - Update to 5.18
  - Fix multilib conflicts (#831379)
  - Make some dependencies arch-specific
  - Remove obsolete macros


author: Pavel Raiskup <praiskup@redhat.com> - 1.13.1-13
changelog:
  - remove old build dependency comment
  - fix bogus dates in changelog
  - use the %{_smp_mflags} also by `make check`


author: Pavel Raiskup <praiskup@redhat.com> - 1.13.1-14
changelog:
  - fix another requirement on perl package which may cause problems in future,
    thanks to Paul Howarth (#924938)
  - f-r: remove Buildroot tag, fix license tag


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-15
changelog:
  - enable hardened build (#1092506)
  - fix short option for --version, document -t option of avahi-autoipd (#948583)
  - fix crashes in D-Bus methods GetAlternativeHostName and GetAlternativeServiceName (#1003688)
  - fix bug when avahi-daemon ended up in a tight loop (#1081801)
  - remove prefix /home/lennart/tmp/avahi from references in man pages (#1120233)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-17
changelog:
  - fix crash due to use of deprecated Gtk3 API (#1263720)
  - don't add 0pointer.de and zeroconf.org to default browse list (#1340837)
  - fix not publishing entries if a probing interface is removed (#1222646)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-18
changelog:
  - create home directory for avahi-autoipd user (#1416287)
  - get rid of the dangling symlink to avahi-discover in debuginfo package (#1421229)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:2.1-6
changelog:
  - aqute-bndlib renamed to aqute-bnd (#745166)
  - Fix compilation with openjdk 1.7.0
  - Use new maven macros
  - Packaging tweaks


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.14.28-5
changelog:
  - Append python-botocore and python-jmespath bundled directory to
    search path where needed

    Resolves: rhbz#1509434


author: Nils Philippsen <nils@redhat.com> - 0.9.6-1
changelog:
  - version 0.9.6:
    * Backport r493-494: documentation typo fixes.
    * Make the CLDR import script work with Python 2.7.
    * Fix various typos.
    * Fixed Python 2.3 compatibility (ticket #146, #233).
    * Sort output of list-locales.
    * Make the POT-Creation-Date of the catalog being updated equal to
      POT-Creation-Date of the template used to update (ticket #148).
    * Use a more explicit error message if no option or argument (command) is
      passed to pybabel (ticket #81).
    * Keep the PO-Revision-Date if it is not the default value (ticket #148).
    * Make --no-wrap work by reworking --width's default and mimic xgettext's
      behaviour of always wrapping comments (ticket #145).
    * Fixed negative offset handling of Catalog._set_mime_headers (ticket #165).
    * Add --project and --version options for commandline (ticket #173).
    * Add a __ne__() method to the Local class.
    * Explicitly sort instead of using sorted() and don't assume ordering
      (Python 2.3 and Jython compatibility).
    * Removed ValueError raising for string formatting message checkers if the
      string does not contain any string formattings (ticket #150).
    * Fix Serbian plural forms (ticket #213).
    * Small speed improvement in format_date() (ticket #216).
    * Fix number formatting for locales where CLDR specifies alt or draft
      items (ticket #217)
    * Fix bad check in format_time (ticket #257, reported with patch and tests by
      jomae)
    * Fix so frontend.CommandLineInterface.run does not accumulate logging
      handlers (#227, reported with initial patch by dfraser)
    * Fix exception if environment contains an invalid locale setting (#200)
  - install python2 rather than python3 executable (#710880)


author: Ondrej Holy <oholy@redhat.com> - 3.14.1-1
changelog:
  - Update to 3.14.1
  - Remove obsolete upstream patch
  - Add translations updates from upstream
  - Resolves: #1174557


author: Ville Skyttä <ville.skytta@iki.fi> - 1:2.0-1
changelog:
  - Update to 2.0 (fixes #817902, #831835).
  - Don't try to python-bytecompile our non-python *.py (#813651).


author: Ville Skyttä <ville.skytta@iki.fi> - 1:2.1-1
changelog:
  - Update to 2.1 (fixes #860510, #906469, #912113, #919246, #928253).
  - Don't ship completions included in util-linux 2.23-rc2 for F-19+.


author: Roman Rakus <rrakus@redhat.com> - 2.1-4
changelog:
  - Added conditionals to not add completions for some commands; the packages
    has their own completions
    Resolves: #1007839


author: Jerome Marchand <jmarchan@redhat.com> - 0.6.1-1
changelog:
  - Rebase on v0.6.1
  - Fix tcpsubnet
  - Reinstate llcstat tool
  - Remove inject tool
  - Add NSS support to sslsniff
  - Fixes miscellaneous error uncovered by covscan


author: Jerome Marchand <jmarchan@redhat.com> - 0.10.0-1
changelog:
  - Rebase on bcc-0.10.0
  - Fix regression of vfscount
  - Drop tools that relies on features unavailable on RHEL 7


author: Ville Skyttä <ville.skytta@iki.fi> - 0:5.2-10
changelog:
  - Specify explicit source encoding to fix build with Java 7.
  - Install jar and javadocs unversioned.
  - Crosslink with JDK javadocs.


author: Andy Grimm <agrimm@gmail.com> - 0:5.2-13
changelog:
  - This package should not own _mavendepmapfragdir (RHBZ#850005)
  - Build with maven, and clean up deprecated spec constructs
  - Fix pom file (See http://jira.codehaus.org/browse/MEV-592)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2.4
changelog:
  - Limit number of queries triggered by a request (CVE-2020-8616)
  - Fix invalid tsig request (CVE-2020-8617)


author: Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2
changelog:
  - Prevent deadlock on reload (#1781576)
  - Disable unit test timer_test on ppc64le because of its instability


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1
changelog:
  - Fix tsig-request verify (CVE-2020-8622)
  - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
  - Correct update-policy type subdomain to match documentation (CVE-2020-8624)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10
changelog:
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2
changelog:
  - Rebase features patches
  - Disable autodetected eddsa algorithm ED448
  - Add versioned depends to all library subpackages
  - Fix multilib conflict of devel packages


author: Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59
changelog:
  - Support for additional signing algorithms in rndc (#1501531)
  - New autogenerated rndc keys will use hmac-sha256 algorithm


author: Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72
changelog:
  - Fix automatic selinux boolean named_write_master_zones (#1569466)
  - Allow starting named with readonly home again


author: Petr Menšík <pemensik@redhat.com> - 32:9.9.4-74.2
changelog:
  - Fix unstable zone transfers (#1724071)
  - Understand keep-response-order for backward compatibility


author: Petr Spacek <pspacek redhat com> - 8.0-1
changelog:
  - update to latest upstream version
  - resolves: #1204110 Rebase bind-dyndb-ldap to latest upstream version


author: Petr Spacek <pspacek@redhat.com> - 9.0-1
changelog:
  - update to latest upstream version
  - related: #1292145 Rebase bind-dyndb-ldap to latest upstream version


author: Petr Spacek <pspacek@redhat.com> - 10.0-1
changelog:
  - update to latest upstream version
  - resolves: #1292145 Rebase bind-dyndb-ldap to latest upstream version


author: Tomas Krizek <tkrizek@redhat.com> - 11.1-1
changelog:
  - update to letest upstream version
  - resolves: #1393889 Rebase to bind-dyndb-ldap 11+
  - resolves: #1165796 bind-dyndb-ldap crashes if server is shutting down and connection to LDAP is down
  - resolves: #1413805 bind-dyndb-ldap default schema is shipped with syntax error


author: Petr Menšík <pemensik@redhat.com> - 11.1-6
changelog:
  - Bump BIND version and fix library dependecies
  - Rebuild for bind 9.11.3. Minor tweaks to compile.
  - Support for bind 9.11.5 headers


author: Nick Clifton <nickc@redhat.com> 2.27-20.base
changelog:
  - Bump NVR so that the binutils rpms will be rebuilt, since they also have files that contain the offending relocs.
    (#1508954)


author: Nick Clifton <nickc@redhat.com> 2.27-21.base
changelog:
  - Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
    (#1513014)


author: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> 2.27-27.base.0.2
changelog:
  - Backports following patch with binutils-aarch64-stub-alignment.patch:
    9a2ebffd4dd9 - Ensure 8-byte alignment for AArch64 stubs.


author: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> 2.27-27.base.0.4
changelog:
  - Reverts the following RH patches to re-enable ifunc tests:
    Patch25: binutils-2.27-skip-ld-aarch64-ifunc-exec-tests.patch
    Patch27: binutils-2.27-remove-pr19784-test.patch
  - Backports the following patches with binutils-aarch64-ifunc-relocations.patch
    to fix "FAIL: Run pr18841 with libpr18841c.so"
    f2e6a8430e72 - [AArch64] Fix PR18841 ifunc relocation ordering
    545bc2b377db - [AArch64] Skip IFUNC relocations in debug sections
  - [Orabug: 26880935]


author: Jose E. Marchesi <jose.marchesi@oracle.com> 2.27-27.base.0.6
changelog:
  - Backport of upstream commit a5def14f1ca70e14d9433cb229c9369fa3051598
    Add a test for R_386_GOT32/R_386_GOT32X IFUNC reloc error
  - Backport of upstream commit 531ecb8262358e5432556fc4a8374194406ff81b.
    i386: Allow "lea foo@GOT, %reg" in PIC.
  - Orabug 27930573.


author: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> 2.27-27.base.0.8
changelog:
  - Rebase of an aarch64 OL 7.4 patch.
  - Backports following patch with binutils-aarch64-pr19327.patch:
    d68f19767dfb - [AArch64] Use SYMBOL_REFERENCES_LOCAL in one symbol check


author: EL Errata <el-errata_ww@oracle.com> - 2.27-28.base.0.2
changelog:
  - Rebase of an aarch64 OL 7.4 patch.
  - Backports following patch with binutils-aarch64-pr19327.patch:
    d68f19767dfb - [AArch64] Use SYMBOL_REFERENCES_LOCAL in one symbol check
  - Backport of upstream commit a5def14f1ca70e14d9433cb229c9369fa3051598
    Add a test for R_386_GOT32/R_386_GOT32X IFUNC reloc error
  - Backport of upstream commit 531ecb8262358e5432556fc4a8374194406ff81b.
    i386: Allow "lea foo@GOT, %reg" in PIC.
  - Orabug 27930573.
  - Reverts the following RH patches to re-enable ifunc tests:
    Patch25: binutils-2.27-skip-ld-aarch64-ifunc-exec-tests.patch
    Patch27: binutils-2.27-remove-pr19784-test.patch
  - Backports the following patches with binutils-aarch64-ifunc-relocations.patch
    to fix "FAIL: Run pr18841 with libpr18841c.so"
    f2e6a8430e72 - [AArch64] Fix PR18841 ifunc relocation ordering
    545bc2b377db - [AArch64] Skip IFUNC relocations in debug sections
  - [Orabug: 26880935]
  - Backports following patch with binutils-aarch64-stub-alignment.patch:
    9a2ebffd4dd9 - Ensure 8-byte alignment for AArch64 stubs.


author: Nick Clifton <nickc@redhat.com> 2.27-28.base
changelog:
  - Stop the x86_64 linker from crashing when asked to convert a reloc against the ABS section.
    (#1557346)
  - Stop strip from replacing unknown relocs with null relocs.
    (#1545386)


author: Nick Clifton <nickc@redhat.com> 2.27-30.base
changelog:
  - Version bump in order to allow a rebuild, in order to work around a transient problem with the compose database.


author: Nick Clifton <nickc@redhat.com> 2.27-32.base
changelog:
  - Fix seg-fault parsing DWARF-1 information.  (#1569580)
  - Fix seg-fault parsing DWARF-2 information.  (#1569891)
  - Fix seg-fault parsing COFF files.  (#1571917)


author: Nick Clifton <nickc@redhat.com> 2.27-33.base
changelog:
  - Fix seg-fault parsing ELF files.  (#1578979)
  - Fix seg-fault parsing DWARF-2 information.  (#1579065)
  - Fix seg-fault parsing DWARF-2 information.  (#1579051)
  - Fix seg-fault parsing a PE format file.  (#1579019)


author: Nick Clifton <nickc@redhat.com> 2.27-34.base
changelog:
  - Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
  - Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
  - Fix seg-fault parsing corrupt ELF format files.  (#1579801)


author: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> 2.27-34.base.0.2
changelog:
  - Adds 4 patches from the OL 7.5 Aarch64 source and does the following:
  - Reverts the following RH patches to re-enable ifunc tests:
    Patch25: binutils-2.27-skip-ld-aarch64-ifunc-exec-tests.patch
    Patch27: binutils-2.27-remove-pr19784-test.patch
  - Backports the following patches with binutils-aarch64-ifunc-relocations.patch
    to fix "FAIL: Run pr18841 with libpr18841c.so"
    f2e6a8430e72 - [AArch64] Fix PR18841 ifunc relocation ordering
    545bc2b377db - [AArch64] Skip IFUNC relocations in debug sections
    [Orabug: 26880935]
  - Backports following patch with binutils-aarch64-stub-alignment.patch:
    9a2ebffd4dd9 - Ensure 8-byte alignment for AArch64 stubs.
  - Backports following patch with binutils-aarch64-pr19327.patch:
    d68f19767dfb - [AArch64] Use SYMBOL_REFERENCES_LOCAL in one symbol check
    [Orabug: 27025570]


author: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> 2.27-34.base.0.4
changelog:
  - Backports with binutils-aarch64-gold-check-MOVW_xABS-relocations-for-plt.patch:
    7ae39e2d406d - Check if symbols with MOVW_.ABS relocations require PLT entries.
    [Orabug: 28829875]
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> - 2.27-41.base.0.2
changelog:
  Adds 5 patches from the OL 7.5 Aarch64 source and does the following:
  - Backports with binutils-aarch64-gold-check-MOVW_xABS-relocations-for-plt.patch:
    7ae39e2d406d - Check if symbols with MOVW_.ABS relocations require PLT entries.
    [Orabug: 28829875]
  - Reverts the following RH patches to re-enable ifunc tests:
    Patch25: binutils-2.27-skip-ld-aarch64-ifunc-exec-tests.patch
    Patch27: binutils-2.27-remove-pr19784-test.patch
  - Backports the following patches with binutils-aarch64-ifunc-relocations.patch
    to fix "FAIL: Run pr18841 with libpr18841c.so"
    f2e6a8430e72 - [AArch64] Fix PR18841 ifunc relocation ordering
    545bc2b377db - [AArch64] Skip IFUNC relocations in debug sections
    [Orabug: 26880935]
  - Backports following patch with binutils-aarch64-stub-alignment.patch:
    9a2ebffd4dd9 - Ensure 8-byte alignment for AArch64 stubs.
  - Backports following patch with binutils-aarch64-pr19327.patch:
    d68f19767dfb - [AArch64] Use SYMBOL_REFERENCES_LOCAL in one symbol check
    [Orabug: 27025570]
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Nick Clifton <nickc@redhat.com> 2.27-41.base.1
changelog:
  - Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)


author: Nick Clifton <nickc@redhat.com> - 2.27-41.base.3
changelog:
  - Allow the BFD library to handle the copying of files containing secondary reloc sections.  (#1804149)


author: Nick Clifton <nickc@redhat.com> 2.27-42.base
changelog:
  - Stop the BFD library from complaining about sections with multiple sets of relocations.  (#1749085)


author: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> - 2.27-43.base.0.2
changelog:
  - Complete the backport of upstream commit a5def14f1ca70e14d9433cb229c9369fa3051598
    Add a test for R_386_GOT32/R_386_GOT32X IFUNC reloc error
    [Orabug 27930573]
  - Backports with binutils-aarch64-gold-check-MOVW_xABS-relocations-for-plt.patch:
    7ae39e2d406d - Check if symbols with MOVW_.ABS relocations require PLT entries.
    [Orabug: 28829875]
  - Reverts the following RH patches to re-enable ifunc tests:
    Patch25: binutils-2.27-skip-ld-aarch64-ifunc-exec-tests.patch
    Patch27: binutils-2.27-remove-pr19784-test.patch
  - Backports the following patches with binutils-aarch64-ifunc-relocations.patch
    to fix "FAIL: Run pr18841 with libpr18841c.so"
    f2e6a8430e72 - [AArch64] Fix PR18841 ifunc relocation ordering
    545bc2b377db - [AArch64] Skip IFUNC relocations in debug sections
    [Orabug: 26880935]
  - Backports following patch with binutils-aarch64-stub-alignment.patch:
    9a2ebffd4dd9 - Ensure 8-byte alignment for AArch64 stubs.
  - Backports following patch with binutils-aarch64-pr19327.patch:
    d68f19767dfb - [AArch64] Use SYMBOL_REFERENCES_LOCAL in one symbol check
    [Orabug: 27025570]


author: Nick Clifton <nickc@redhat.com> - 2.27-43.base.1
changelog:
  - Allow the BFD library to handle the copying of files containing secondary reloc sections.  (#1804151)


author: Nick Clifton <nickc@redhat.com> 2.27-44.base
changelog:
  - Allow the BFD library to handle the copying of files which contain secondary reloc sections.  (#1785294)


author: David Faust <david.faust@oracle.com> - 2.27-44.base.0.2
changelog:
  - Merge the following patch set:
    * Wed Apr 01 2020 Egeyar Bagcioglu  <egeyar.bagcioglu@oracle.com> - 2.27-43.base.0.2
    - Complete the backport of upstream commit a5def14f1ca70e14d9433cb229c9369fa3051598
      Add a test for R_386_GOT32/R_386_GOT32X IFUNC reloc error
      [Orabug 27930573]
    - Backports with binutils-aarch64-gold-check-MOVW_xABS-relocations-for-plt.patch:
      7ae39e2d406d - Check if symbols with MOVW_.ABS relocations require PLT entries.
      [Orabug: 28829875]
    - Reverts the following RH patches to re-enable ifunc tests:
      Patch25: binutils-2.27-skip-ld-aarch64-ifunc-exec-tests.patch
      Patch27: binutils-2.27-remove-pr19784-test.patch
    - Backports the following patches with binutils-aarch64-ifunc-relocations.patch
      to fix "FAIL: Run pr18841 with libpr18841c.so"
      f2e6a8430e72 - [AArch64] Fix PR18841 ifunc relocation ordering
      545bc2b377db - [AArch64] Skip IFUNC relocations in debug sections
      [Orabug: 26880935]
    - Backports following patch with binutils-aarch64-stub-alignment.patch:
      9a2ebffd4dd9 - Ensure 8-byte alignment for AArch64 stubs.
    - Backports following patch with binutils-aarch64-pr19327.patch:
      d68f19767dfb - [AArch64] Use SYMBOL_REFERENCES_LOCAL in one symbol check
      [Orabug: 27025570]


author: Patsy Franklin <pfrankli@redhat.com> - 3.0.4-1
changelog:
  - Rebase to 3.0.4
    - Removed obsolete patch.
    - Added build require of flex so that tests will run.
    - Removed duplicate/unpackaged files.


author: Pravin Satpute <psatpute@redhat.com> - 0.3-13
changelog:
  - added lucida-typewriter and fixed subpackage
  - removed common subpackage
  - added conf file for each subpackage


author: Jakub Martisko <jamartis@redhat.com> - 3.4.2-7
changelog:
  - fix issue with creation of srpm where __isa_bits on noarch leads to an error
  - Related: rhbz#1176026


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.3-1
changelog:
  - Don't crash if blockdev mpath plugin isn't available. (#1672971) (dlehman)
  - iscsi: Add default value to unused 'storage' argument in 'write' (vtrefny)
  - Add exported property to LVMVolumeGroupDevice (vtrefny)
  - Add VG data to static_data (vtrefny)
  - Do not try to get format free space for non-existing formats (vtrefny)
  - Do not raise exception if can't get PV free space (vtrefny)
  - Fix undefined attribute in LVM info cache (vtrefny)
  - Use raw_device to get thinpool device in LVMThinPFactory (#1490174) (vtrefny)
  - Do not crash if DM RAID activation fails (#1661712) (vtrefny)
  - Remove the unused sysroot property (vponcova)
  - Remove unused attributes from the Blivet class (vponcova)
  - Remove the unused gpt flag (vponcova)
  - Copy the iSCSI initiator name file to the installed system (vtrefny)
  - Use udev to determine if disk is a multipath member. (dlehman)
  - Require libfc instead of fcoe for offloaded FCoE. (#1575953) (dlehman)


author: Pavel Cahyna <pcahyna@redhat.com> - 3.1.3-2
changelog:
  - Initial import of python-blivet3 by David Lehman <dlehman@redhat.com>
    derived from python-blivet-3.1.2-1
  - clear the old python-blivet %changelog except the most recent entry.


author: David Lehman <dlehman@redhat.com> - 3.1.3-3
changelog:
  - spec file requires fixes from pcahyna
  - adjust to older pyudev API
  - adjust tags implementation to absence of enum in python-2.7
  - fix bare imports in example scripts
  - update factory example to match latest API


author: Eric Sandeen <sandeen@redhat.com> - 1.0.5-7
changelog:
  - Add upstream cpu scalability patches (#1032368)
  - Remove "-k" option from manpage (#1300354)
  - Fix potential deadlock when calling stop_tracers (#1263189)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.1.0-1
changelog:
  - New version
  - Dropped office_scen patch (upstreamed)
  - Dropped hdparm patch (upstream added support for LVM)
  - Reworked rm_sudo patch


author: Ray Strode <rstrode@redhat.com> 1.3-5
changelog:
  - Rebuild against bluez5.  This won't work, but will
    at least prevent broken dependencies
    Related: #1174545 1219504


author: Don Zickus <dzickus@redhat.com> 5.41-1
changelog:
  - Update to 5.41
  - obexd fixes to prevent crashes
  - add /etc/bluetooth/main.conf config file
  Resolves: #1313363, #1336476, #1338895


author: David Arcari <darcari@redhat.com> 5.44-1
changelog:
  - Update to 5.44
  - Ship btattach tool
  - Configure systemctl settings for bluez-obex correctly
  - Add Provides: bluez-obexd
  Resolves: #1434581, #1401501


author: Christian Kellner <ckellner@redhat.com> - 0.7-1
changelog:
  - bolt 0.7 release with pre-bootacl support.
    Resolves: #1629713
  - Patch to fix a format string bug in the 0.7
  - Drop restricting-capabilities.patch (included in 0.7)
  - Patch to not use unsuppported unit file settings.
    Resolves: #1631050


author: Petr Machata <pmachata@redhat.com> - 1.53.0-18
changelog:
  - Turn off build flags pre-set by Boost distribution.
    (boost-1.53.0-buildflags.patch)
  - Pass RPM_OPT_FLAGS through user-config.jam.


author: Petr Machata <pmachata@redhat.com> - 1.53.0-21
changelog:
  - Fix atomic_cas32 (thanks Jaroslav Škarvada for figuring out where
    the problem is) (boost-1.54.0-interprocess-atomic_cas32-ppc.patch)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - do not use arch-specific BuildRequires (#1268268)
  - support TLS libraries without SSLv3 (#1298227)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - Install unpatched gcc.jam (#1305019).
  - Build libboost_python and libboost_python3 such that they depend on
    their respective libpython (#1302120).
    (boost-1.53.0-python-libpython_dep.patch,
    boost-1.53.0-python-abi_letters.patch)
  - Fix Boost.Python test suite so that PyImport_AppendInittab is called
    before PyInitialize, which broke the test suite with Python 3.
    (boost-1.53.0-python-test-PyImport_AppendInittab.patch)
  - Patch gcc.jam to not add bogus rpaths.


author: Jan Pokorný <jpokorny+rpm-booth@redhat.com> - 1.0-2.eb4256a.git
changelog:
  - update a subset of out-of-tree patches per
    https://github.com/ClusterLabs/booth/pull/22#issuecomment-216936987
  - pre-inclusion cleanups in the spec (apply systemd scriptlet operations
    with booth-arbitrator, avoid overloading file implicitly considered %doc
    as %license)
    Resolves: rhbz#1302087
    Related (Fedora): rhbz#1314865
    Related (Fedora): rhbz#1333509


author: Jan Pokorný <jpokorny+rpm-booth@redhat.com> - 1.0-3.570876d.git
changelog:
  - update per the changesets recently accepted by the upstream
    (memory/resource leaks fixes, patches previously attached separately
    that make unit test pass, internal cleanups, etc.)
    Resolves: rhbz#1302087


author: Jan Pokorný <jpokorny+rpm-booth@redhat.com> - 1.0-5.77d65dd.git
changelog:
  - update per the the current upstream, most notably the support for
    cluster-glue alternatives has been accepted (separate patches no
    longer needed)
  - make the main (envelope) package properly require the subpackages
    of the same version
  - add patches allowing for live_test.sh using pcs
  - allow building also against s390x architecture
    (per Pacemaker dependency constraint)
    Resolves: rhbz#1302087


author: Jan Pokorný <jpokorny+rpm-booth@redhat.com> - 1.0-6.ef769ef.git
changelog:
  - fix an issue with identity self-determination based on match
    between the addresses assigned at host and the configured addresses
    when a network-part-of-the-address-only match preceded a possible
    exact address match which would not be even tested if the length
    of the network prefix was the same (no longer for this exact one)
    Resolves: rhbz#1341720
  - fix a crash when running booth without determined identity
    (e.g., existing, yet empty configuration) under some circumstances
    Resolves: rhbz#1366616
  - make patches be applied using "git am" rather than "git apply"


author: Jan Pokorný <jpokorny+rpm-booth@redhat.com> - 1.0-8.ef769ef.git
changelog:
  - build for aarch64
    Resolves: rhbz#1422615
  - fix unconditional "dist" RPM macro reference in Release field
    Resolves: rhbz#1465933
  - ensure booth-arbitrator service will get restarted when it fails


author: Petr Sabata <contyk@redhat.com> - 1.5-1
changelog:
  - 1.5 bump
  - BuildRoot and defattr cleanup
  - Use macros in Sources
  - Drop show-ports and foreach patches -- those have been included upstream


author: Petr Sabata <contyk@redhat.com> - 1.5-2
changelog:
  - Add three latest bugfixes from upstream git on top of 1.5
  - Dropping params patch (included upstream variant)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-10
changelog:
  - Hardened build
    Resolves: rhbz#1092547
  - Fixed Braille display emulator to start
    Resolves: rhbz#1304725


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-11
changelog:
  - Fixed Braille characters not displaying in the XW driver window
    Resolves: rhbz#1324669
  - Added AT-SPI2 driver
    Resolves: rhbz#1324672
  - Fixed requirements
    Resolves: rhbz#1324850


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-12
changelog:
  - Improved fix for Braille characters not displaying in the XW driver window
    Related: rhbz#1324669


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-13
changelog:
  - Made brltty-config executable, currently useless, but FHS compliant
    Resolves: rhbz#1332981
  - Fixed multilib
    Related: rhbz#1324850


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-14
changelog:
  - Rebuilt for new architectures
    Resolves: rhbz#1379884
  - Added fix to support compilation with ocaml-4.04.0
    Resolves: rhbz#1393750


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-15
changelog:
  - Fixed build in case ocaml is preinstalled in the build root and
    support shouldn't be built
    Resolves: rhbz#1443907


author: Anand Jain <anand.jain@oracle.com> - 4.15.1-1.el7
changelog:
  - BUILDINFO: commit=5cf0257768947f9cfd279b38b9556517e7b4fc16
  - btrfs-progs: do not enable skinny_metadata feature by default for mkfs


author: Liu Bo <bo.li.liu@oracle.com> 4.9.1-1.0.2
changelog:
  - fix btrfs-convert to not create corrupted btrfs image
  - fix btrfs-convert to honor nodatasum option
  - Orabug 26281418


author: Petr Machata <pmachata@redhat.com> - 1.9.20111219-1
changelog:
  - Rebase to 20111219
    - add "-s" option
    - Resolves: #769237
  - Revert default stack size to 10000
    - Related: #743343


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.5.1-12
changelog:
  - Patch for failure to gpg sign commits with no gpg-agent 
    https://bugzilla.redhat.com/show_bug.cgi?id=905087


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5
changelog:
  - Apply a patch by Stephen Gallagher to patch autoconf, not configure to
    allow optflags to be passed in by build environment
  - Run autoreconf before configure
  - git rm obsolete patches
  - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1
changelog:
  - New upstream release 1.10
  - Obsolete upstreamed patches
  - Amend the multilib patch, there's no need to patch configure since we
    are running autoreconf anyways
  - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES


author: Kai Engert <kaie@redhat.com> - 2015.2.3-71
changelog:
  - Update to CKBI 2.3 from NSS 3.18 with legacy modifications.
  - Add an alternative version of the "Thawte Premium Server CA" root,
    which carries a SHA1-RSA signature, to allow OpenJDK to verify applets
    which contain that version of the root certificate.
    This change doesn't add trust for another key, because both versions
    of the certificate use the same public key (rhbz#1170982).
  - Add a patch to the source RPM that documents the changes from the
    upstream version.
  - Introduce the ca-legacy utility, a manual page, and the ca-legacy.conf
    configuration file.
  - The new scriptlets require the coreutils package.
  - Remove the obsolete blacklist.txt file.


author: Kai Engert <kaie@redhat.com> - 2017.2.11-71
changelog:
  - Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
  - Use comments in extracted bundle files.
  - Change packaging script to support empty legacy bundles.


author: Kai Engert <kaie@redhat.com> - 2017.2.11-72
changelog:
  - Changed the packaged bundle to use the flexible p11-kit-object-v1 file format,
    as a preparation to fix bugs in the interaction between p11-kit-trust and
    Mozilla applications, such as Firefox, Thunderbird etc.
  - For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true
  - Require p11-kit 0.23.5
  - Added an utility to help with comparing output of the trust dump command.


author: Kai Engert <kaie@redhat.com> - 2017.2.16-71
changelog:
  - Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
    Mozilla removed code signing trust from all CAs (rhbz#1472933)


author: Bob Relyea <rrelyea@redhat.com> - 2019.2.32-76
changelog:
  - Update to CKBI 2.32 from NSS 3.44
  -   Removing:
  -   # Certificate "Visa eCommerce Root"
  -   # Certificate "AC Raiz Certicamara S.A."
  -   # Certificate "TC TrustCenter Class 3 CA II"
  -   # Certificate "ComSign CA"
  -   # Certificate "S-TRUST Universal Root CA"
  -   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
  -   # Certificate "Certplus Root CA G1"
  -   # Certificate "Certplus Root CA G2"
  -   # Certificate "OpenTrust Root CA G1"
  -   # Certificate "OpenTrust Root CA G2"
  -   # Certificate "OpenTrust Root CA G3"
  -  Adding:
  -   # Certificate "GlobalSign Root CA - R6"
  -   # Certificate "OISTE WISeKey Global Root GC CA"
  -   # Certificate "GTS Root R1"
  -   # Certificate "GTS Root R2"
  -   # Certificate "GTS Root R3"
  -   # Certificate "GTS Root R4"
  -   # Certificate "UCA Global G2 Root"
  -   # Certificate "UCA Extended Validation Root"
  -   # Certificate "Certigna Root CA"
  -   # Certificate "emSign Root CA - G1"
  -   # Certificate "emSign ECC Root CA - G3"
  -   # Certificate "emSign Root CA - C1"
  -   # Certificate "emSign ECC Root CA - C3"
  -   # Certificate "Hongkong Post Root CA 3"


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-70.0
changelog:
  - Update to CKBI 2.41 from NSS 3.53.0
  -    Removing:
  -     # Certificate "AddTrust Low-Value Services Root"
  -     # Certificate "AddTrust External Root"
  -     # Certificate "UTN USERFirst Email Root CA"
  -     # Certificate "Certplus Class 2 Primary CA"
  -     # Certificate "Deutsche Telekom Root CA 2"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "Certinomis - Root CA"
  -    Adding:
  -     # Certificate "Entrust Root Certification Authority - G4"
  - fix permissions on ghosted files.


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.48-71
changelog:
  - Update to CKBI 2.48 from NSS 3.66
  -    Removing:
  -     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root CA"
  -     # Certificate "Sonera Class 2 Root CA"
  -     # Certificate "Taiwan GRCA"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Trustis FPS Root CA"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
  -    Adding:
  -     # Certificate "Microsoft ECC Root Certificate Authority 2017"
  -     # Certificate "Microsoft RSA Root Certificate Authority 2017"
  -     # Certificate "e-Szigno Root CA 2017"
  -     # Certificate "certSIGN Root CA G2"
  -     # Certificate "Trustwave Global Certification Authority"
  -     # Certificate "Trustwave Global ECC P256 Certification Authority"
  -     # Certificate "Trustwave Global ECC P384 Certification Authority"
  -     # Certificate "NAVER Global Root Certification Authority"
  -     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
  -     # Certificate "GlobalSign Secure Mail Root R45"
  -     # Certificate "GlobalSign Secure Mail Root E45"
  -     # Certificate "GlobalSign Root R46"
  -     # Certificate "GlobalSign Root E46"
  -     # Certificate "GLOBALTRUST 2020"
  -     # Certificate "ANF Secure Server Root CA"
  -     # Certificate "Certum EC-384 CA"
  -     # Certificate "Certum Trusted Root CA"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-71
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-72
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Adding:
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-74
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-71
changelog:
  - Update to CKBI 2.60_v7.0.306 from NSS 3.91
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "CCA India 2007"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "BJCA Global Root CA1"
  -     # Certificate "BJCA Global Root CA2"
  -     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
  -     # Certificate "A-Trust-Root-05"
  -     # Certificate "ADOCA02"
  -     # Certificate "StartCom Certification Authority G2"
  -     # Certificate "ATHEX Root CA"
  -     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "America Online Root Certification Authority 1"
  -     # Certificate "Juur-SK"
  -     # Certificate "ComSign CA"
  -     # Certificate "ComSign Secured CA"
  -     # Certificate "ComSign Advanced Security CA"
  -     # Certificate "Global Chambersign Root"
  -     # Certificate "Sonera Class2 CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "VeriSign, Inc."
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Equifax Secure Global eBusiness CA-1"
  -     # Certificate "Equifax"
  -     # Certificate "Class 1 Primary CA"
  -     # Certificate "Swiss Government Root CA III"
  -     # Certificate "Application CA G4 Root"
  -     # Certificate "SSC GDL CA Root A"
  -     # Certificate "GlobalSign Code Signing Root E45"
  -     # Certificate "GlobalSign Code Signing Root R45"
  -     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-72
changelog:
  - hand merge the two 'GlobalSign ECC Root CA R4' certs together and the two 'AC RAIZ FNMT-RCM' certs together to keep p11kit from getting confused.


author: David Howells <dhowells@redhat.com> 0.10.6-1
changelog:
  - Note the correct licence.
  - Handle malformed kernel status correctly.
  - Permit culling to be disabled on the command line with the -N flag.
  - Suspend culling when cache space is short and cache objects are pinned.


author: David Howells <dhowells@redhat.com> 0.10.8-1
changelog:
  - Use systemd interaction macros in specfile installation sections [RH BZ 850053].
  - Fix the service file to use /usr/sbin/ rather than /sbin/.
  - Turn on RELRO and PIE build hardening in RPM builds (#1092561).


author: Kalev Lember <kalevlember@gmail.com> - 1.10.0-1
changelog:
  - Update to 1.10.0
  - Have the -doc subpackage depend on the base package
  - Modernize the spec file
  - Really own /usr/share/devhelp directory


author: Peter Jones <pjones@redhat.com> - 10.2-8
changelog:
  - Incorporate changes from Matthias Saou:
  - Include install patch, to avoid all of the ugly manual installation.
  - Cosmetic fixes (libs group, scriplets, don't mix %name with hardcode...).


author: Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 10.2-15
changelog:
  - Patched configure to use config.{guess,sub} files so 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches  }" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches  }" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "aarch64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=aarch64-redhat-linux-gnu --host=aarch64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info macro can
    replace them with proper version. With this change it builds fine for AArch64
    architecture.
    Resolves: rhbz#1023783


author: Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 10.2-15
changelog:
  - Patched configure to use config.{guess,sub} files so 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -grecord-gcc-switches  -m64 -mtune=generic}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -grecord-gcc-switches  -m64 -mtune=generic}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -grecord-gcc-switches  -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -grecord-gcc-switches  -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info macro can
    replace them with proper version. With this change it builds fine for AArch64
    architecture.
    Resolves: rhbz#1023783


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-18
changelog:
  - ported from cdda-paranoia to libcdio-paranoia, modified paranoia-cdda.patch
  - fixed bogus date in changelog


author: Jakub Martisko <jamartis@redhat.com> - 1.1.11-25
changelog:
  - add support for device names of the form /dev/srN
  - fix provided by Frantisek Kluknavsky
  - resolves:rhbz#1058446


author: Boris Ranto <branto@redhat.com> - 1:10.2.5-1
changelog:
  - New version (1:10.2.5-1)
  - Makefile: Fix dencoder build
  - Add fake fcgiapp.h for rgw
  - common: Build more files of libcommon in client
  - libradosstripper: Build libradostripper for rados as noinst


author: Jan Cholasta <jcholast@redhat.com> - 0.78.4-1
changelog:
  - Resolves: #1249753 challenge password not added in csr using start-tracking
  - Resolves: #1250397 Remove certmonger rekey feature in 7.2
    - Remove rekey feature
  - Related:  #1205756 Rebase certmonger to 0.77 or later
    - Update to upstream 0.78.4


author: Jan Cholasta <jcholast@redhat.com> - 0.78.4-2
changelog:
  - Resolves: #1345755 Support for specifying IPA lightweight CA
    - Add 'issuer' request option for specifying issuer
    - Documentation: mark $CERTMONGER_CA_ISSUER as 0.79
    - Comment/whitespace fixup
    - ipa-submit: Retry without "ca" on OptionError
    - getcert: fix a potential out-of-bounds
    - Document the -X option in the ipa-submit man page
  - Resolves: #1351052 certmonger build for RHEL 7.3 failure
    - Stop assuming RSA 512 works
    - Stop assuming RSA 512 works, part two
    - Fix a flakiness in the 028-dbus test


author: Jan Cholasta <jcholast@redhat.com> - 0.78.4-3
changelog:
  - Resolves: #1367683 getcert request command fails to use Sub CA using -X
    argument
    - Fix CA option name for ipa cert-request


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-4
changelog:
  - Use required DER encoding when setting CA basic constraint (#1551635)
  - NSS 3.34 more strictly enforces length checking when verifying signatures
    (#1551702)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-5
changelog:
  - Add Requires on psmsic for killall in post script (#1458890)
  - upstream project migrated from fedorahosted.org to pagure.io (#1501723)
  - Strip CR/LF from passwords read from a file (#1545935)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-8
changelog:
  - Disable iterate-10 test which fails intermitently (#1596161)
  - Add BuildRequires for running autoreconf


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-9
changelog:
  - Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
    variables to helpers. The root cause was a bug in IPA (#1596161)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-12
changelog:
  - Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
    man page (#1651368)
  - SCEP: Don't set message=<ca ident> with GetCaps and GetCACert (#1608781)
  - SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
  - Document owner and permission parameters to getcert (#1549585)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-17
changelog:
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2015511)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.14-1
changelog:
  - make pathname canonicalization slightly smarter, to handle ".." in
    locations (#1131758)
  - updates to self-tests (#1144082)


author: Jan Cholasta <jcholast@redhat.com> - 0.75.14-2
changelog:
  - backport dogtag-submit: accept additional options to pass to the server when
    approving requests using agent creds (#1165155)


author: Jan Cholasta <jcholast@redhat.com> - 0.75.14-3
changelog:
  - backport change from git to correctly retrieve string values from DBus
    property interface replies (#1181022)


author: Jan Cholasta <jcholast@redhat.com> - 0.78.1-1
changelog:
  - Resolves: #1140241 RFE: Add SCEP support to certmonger
  - Resolves: #1148001 ipa-getcert killed by SIGABRT
  - Resolves: #1205756 Rebase certmonger to 0.77 or later
    - Update to upstream 0.78.1


author: Jan Cholasta <jcholast@redhat.com> - 0.78.3-1
changelog:
  - Resolves: #1244914 scep ca helper does not parse command line options
    correctly
  - Related:  #1205756 Rebase certmonger to 0.77 or later
    - Update to upstream 0.78.3


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-3.1
changelog:
  - Use required DER encoding when setting CA basic constraint (#1560961)
  - NSS 3.34 more strictly enforces length checking when verifying signatures
    (#1560960)


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream 
          * Fix errors found by coverity
          * implement default type policy syntax
          * Free allocated memory when clean up / exit.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-4
changelog:
  - Fix a segmentation fault if the --handle-unknown option was set without
  arguments.
  - Thanks to Alexandre Rebert and his team at Carnegie Mellon University
  for detecting this crash.


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix typos in test/dispol
  - Set flex as default lexer
  - Fix checkmodule output message
  - Build policy on systems not supporting DCCP protocol
  - Fail if module name different than output base filename


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-6
changelog:
  - Add ibendport ocontext handling
  - Add support for ibendportcon labels
  - Add ibpkey ocontext handling
  - Add support for ibpkeycon labels
  - Add binary module support for xperms


author: Hans de Goede <hdegoede@redhat.com> - 2:3.8.2-4
changelog:
  - Fix misbehavior when started without a camera
  - Don't crash when the (last) camera gets unplugged
  - Automatically use a newly plugged camera when going from 0 to 1 cameras
  - Misc. other bugfixes


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.62-1
changelog:
  - use systemctl preset, not systemctl enable
  - fix typo in manpage
  - partly support socket activated services


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.4-1
changelog:
  - ntsysv: show systemd services and sockets
  - fix combination --type xinetd --list service
  - leveldb: restore selinux context for xinetd conf files
  - alternatives: remove unused variable
  - alternatives: warn if the target is not a symlink
  - spec: add link to git
  - lets simplify version


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.5-1
changelog:
  - add systemd-sysv-install alias
  - don't create symlinks if they already exist
  - fix wrongly behaving LDFLAGS


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.6-1
changelog:
  - systemd-sysv-install: don't play ping-pong with systemctl
  - ntsysv: add description to systemd services
  - ntsysv: skip templates
  - Makefile: fix typo


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.7.2-1
changelog:
  - alternatives: introduce --keep-missing
  - alternatives: allow family in --set and display it in --config


author: Jan Macku <jamacku@redhat.com> - 1.7.5-1
changelog:
  - Fix issues with extra backslashes in path string - (#1485304)
  - Add documentation for --keep-missing option - (#1371146)


author: Pete Walter <pwalter@fedoraproject.org> - 8.2-2
changelog:
  - Package review fixes (#1343710)
  - Validate the desktop file
  - Don't own /etc/opt directory
  - Depend on mozilla-filesystem instead of co-owning mozilla directories
  - Depend on dbus and gnome-icon-theme/hicolor-icon-theme for directory
    ownership


author: Florian Müllner <fmuellner@redhat.com> - 10.1-4
changelog:
  - Adjust Fedora spec to build on RHEL:
    - build missing BuildRequire
    - use python2 instead of python3

    Related: #1643501


author: Miroslav Lichvar <mlichvar@redhat.com> 1.29.1-1
changelog:
  - update to 1.29.1 (#1053022, CVE-2014-0021)
  - fix selecting of sources with prefer option (#1061048)
  - fix potential bug in writing of drift files (#1061106)
  - replace hardening build flags with _hardened_build (#1061036)


author: Miroslav Lichvar <mlichvar@redhat.com> 2.1-1
changelog:
  - update to 2.1 (#1117882 #1169353 #1206504 #1209568 CVE-2015-1821
    CVE-2015-1822 CVE-2015-1853)
  - extend chrony-helper to allow using servers from DNS SRV records (#1211600)
  - add servers from DHCP with iburst option by default (#1219492)
  - execute test suite


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-1
changelog:
  - update to 3.1 (#1387223 #1274250 #1350669 #1406445)
  - don't start chronyd without capability to set system clock (#1306046)
  - fix chrony-helper to escape names of systemd units (#1418968)
  - package chronyd sysconfig file (#1396840)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.2-1
changelog:
  - update to 3.2 (#1482565 #1462081 #1454765)
  - use ID from /etc/os-release to set pool.ntp.org vendor zone


author: Miroslav Lichvar <mlichvar@redhat.com> 3.4-1
changelog:
  - update to 3.4 (#1636117, #1565544, #1565548, #1596239, #1600882)
  - drop support for HW timestamping on kernels < 3.10.0-613


author: Petr Machata <pmachata@redhat.com> - 0.13-11
changelog:
  - Add missing last entry in long options array
    (chrpath-0.13-getopt_long.patch)
  - Update config.sub and config.guess to support aarch64
    (chrpath-0.13-aarch64.patch)


author: Jeff Layton <jlayton@redhat.com> 6.2-3
changelog:
  - fixes for bugs reported by coverity:
  - update bad bit shift patch with one that patches getcifsacl.c too
  - remove some dead code from getcifsacl.c, asn1.c, and data_blob.c
  - fix bad handling of allocated memory in del_mtab in mount.cifs.c


author: Sachin Prabhu <sprabhu@redhat.com> - 6.2-8
changelog:
  - Prevent unnecessary linking of libwbclient
  - Uppercase orig_dev on 2nd try at mounting
  - Include paths.h in mtab.c
  - Clarify use of backupuid/backupgid in manpage
  - Ignore x-* mount options


author: Sachin Prabhu <sprabhu@redhat.com> - 6.2-10
changelog:
  - aclocal: fix typo in idmap.m4
  - mount.cifs: Removed extra comma in front of domain
  - mount.cifs: Accept empty domains on the command line
  - mount.cifs: Fixed command line parsing and aligned with kernel
  - mount.cifs: Remove unneeded stdbool header include
  - manpage: document mfsymlinks in the mount.cifs man page


author: Nathaniel McCallum <npmccallum@redhat.com> - 5-1
changelog:
  - New upstream release
  - Run clevis decryption from udisks2 under an unprivileged user
  - Reenable udisks2 subpackage


author: Nathaniel McCallum <npmccallum@redhat.com> - 6-1
changelog:
  - New upstream release
  - Specify unprivileged user/group during configuration
  - Move clevis user/group creation to base clevis package


author: Nathaniel McCallum <npmccallum@redhat.com> - 7-1
changelog:
  - Update to v7
  - Resolves: rhbz#1467907
  - Resolves: rhbz#1467908
  - Resolves: rhbz#1475406
  - Resolves: rhbz#1500975
  - Resolves: rhbz#1478888


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-16
changelog:
  - Disable NetworkManager management of resolv.conf if nameservers
    are specified by configuration.
    Resolves: rhbz#1454491


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-18
changelog:
  - Start the cloud-init init local service after the dbus socket is created
    so that the hostnamectl command works.
    Resolves: rhbz#1450521


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-23
changelog:
  - Fix a bug tha caused cloud-init to fail as a result of trying
    to rename bonds.
    Resolves: rhbz#1512247


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-24
changelog:
  - Set DHCP_HOSTNAME on Azure to allow for the hostname to be
    published correctly when bouncing the network.
    Resolves: rhbz#1434109


author: Lans Hung <lans.hung@oracle.com> 0.7.9-24.0.1
changelog:
  - Fix boot deplay in OCI (Oracle Bugdb 27724543)
  - Enable ec2_utils.py to stop retry when openstack getting ec2 metadata (Oracle Bugdb 27803956)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.7.9-24.el7_5.1
changelog:
  - ci-Revert-azure-Fix-publishing-of-hostname.patch [bz#1568717]
  - ci-DataSourceAzure.py-use-hostnamectl-to-set-hostname.patch [bz#1568717]
  - ci-sysconfig-Don-t-disable-IPV6_AUTOCONF.patch [bz#1578702]
  - Resolves: bz#1568717
    (Add patch to bounce NICs in Azure/update DNS [rhel-7.5.z])
  - Resolves: bz#1578702
    (cloud-init-0.7.9-9.el7_4.6 breaks IPv4/IPv6 dual-stack EC2 instances in AWS [rhel-7.5.z])


author: EL Errata <el-errata_ww@oracle.com> - 0.7.9-24.0.3
changelog:
  - Fix xfs grow (Oracle Bug 28077374)
  - Fix boot deplay in OCI (Oracle Bugdb 27724543)
  - Enable ec2_utils.py to stop retry when openstack getting ec2 metadata (Oracle Bugdb 27803956)


author: Lars Kellogg-Stedman <lars@redhat.com> - 0.7.6-8
changelog:
  - make rh_subscription plugin do nothing in the absence of a valid
    configuration [RH:1295953]
  - move rh_subscription module to cloud_config stage


author: Lars Kellogg-Stedman <lars@redhat.com> 0.7.9-6
changelog:
  - add power-state-change module to cloud_final_modules (rhbz#1252477)
  - remove 'tee' command from logging configuration (rhbz#1424612)
  - limit permissions on def_log_file (rhbz#1424612)
  - Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
  - OpenStack: add 'dvs' to the list of physical link types. (rhbz#1442783)


author: Lars Kellogg-Stedman <lars@redhat.com> 0.7.9-7
changelog:
  - Add missing sysconfig unit test data (rhbz#1438082)
  - Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
  - sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
  - Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
  - Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)


author: Lars Kellogg-Stedman <lars@redhat.com> 0.7.9-9
changelog:
  - RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
  - azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
  - Fix ipv6 subnet detection (rhbz#1438082)


author: Lans Hung <lans.hung@oracle.com> 18.2-1.0.1
changelog:
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch for 18.2:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader
    Resolves: Oracle-Bug:41660 (Bugzilla)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-1.el7_6.1
changelog:
  - ci-Adding-systemd-mount-options-to-wait-for-cloud-init.patch [bz#1633282]
  - ci-Azure-Ignore-NTFS-mount-errors-when-checking-ephemer.patch [bz#1633282]
  - ci-azure-Add-reported-ready-marker-file.patch [bz#1633282]
  - ci-Adding-disk_setup-to-rhel-cloud.cfg.patch [bz#1633282]
  - Resolves: bz#1633282
    ([Azure] cloud-init fails to mount /dev/sdb1 after stop(deallocate)&&start VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-1.el7_6.2
changelog:
  - ci-azure-Filter-list-of-ssh-keys-pulled-from-fabric.patch [bz#1684038]
  - Resolves: bz#1684038
    (EMBARGOED cloud-init: wrong list of ssh keys added to authorized_keys [rhel-7.6.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-2.el7
changelog:
  - ci-net-Wait-for-dhclient-to-daemonize-before-reading-le.patch [bz#1632967]
  - Resolves: bz#1632967
    ([Azure] cloud-init dhcp.py dhcp_discovery() race with dhclient with preprovisioned VM in Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-3.el7
changelog:
  - ci-cloud-init-per-don-t-use-dashes-in-sem-names.patch [bz#1664876]
  - ci-Enable-cloud-init-by-default-on-vmware.patch [bz#1623281]
  - Resolves: bz#1623281
    ([ESXi][RHEL7.6]Enable cloud-init by default on VMware)
  - Resolves: bz#1664876
    (cloud-init Storage-Management Functionality Is Erasing Filesystems)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-4.el7
changelog:
  - ci-azure-Filter-list-of-ssh-keys-pulled-from-fabric.patch [bz#1684040]
  - Resolves: bz#1684040
    (CVE-2019-0816 cloud-init: extra ssh keys added to authorized_keys [rhel-7.7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-5.el7
changelog:
  - ci-include-NOZEROCONF-yes-in-etc-sysconfig-network.patch [bz#1653131]
  - Resolves: bz#1653131
    (cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-1.el7
changelog:
  - Rebase to 18.5 [bz#1687565]
  - Resolves: bz#1687565
    (cloud-init 18.5 rebase for fast provisioning on Azure [RHEL 7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-2.el7
changelog:
  - ci-Azure-Ensure-platform-random_seed-is-always-serializ.patch [bz#1687565]
  - ci-DatasourceAzure-add-additional-logging-for-azure-dat.patch [bz#1687565]
  - ci-Azure-Changes-to-the-Hyper-V-KVP-Reporter.patch [bz#1687565]
  - ci-DataSourceAzure-Adjust-timeout-for-polling-IMDS.patch [bz#1687565]
  - ci-cc_mounts-check-if-mount-a-on-no-change-fstab-path.patch [bz#1687565]
  - Resolves: bz#1687565
    (cloud-init 18.5 rebase for fast provisioning on Azure [RHEL 7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-3.el7
changelog:
  - ci-Revert-azure-ensure-that-networkmanager-hook-script-.patch [bz#1707725]
  - Resolves: bz#1707725
    ([WALA][cloud] cloud-init dhclient-hook script has some unexpected side-effects on Azure)


author: EL Errata <el-errata_ww@oracle.com> - 18.5-3.0.1
changelog:
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch for 18.2:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-4.el7
changelog:
  - ci-Azure-Return-static-fallback-address-as-if-failed-to.patch [bz#1726701]
  - Resolves: bz#1726701
    ([Azure] [RHEL 7.8] Cloud-init fixes to support fast provisioning for Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-5.el7
changelog:
  - ci-Fix-for-network-configuration-not-persisting-after-r.patch [bz#1593010]
  - Resolves: bz#1593010
    ([cloud-init][RHVM]cloud-init network configuration does not persist reboot [RHEL 7.8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7
changelog:
  - ci-util-json.dumps-on-python-2.7-will-handle-UnicodeDec.patch [bz#1744526]
  - Resolves: bz#1744526
    ([cloud-init][OpenStack] cloud-init can't persist instance-data.json)


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 18.5-6.0.1
changelog:
  - Fix OL distro specific issues and dependency compatibility [Orabug: 30435672]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch for 18.2:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7_8.1
changelog:
  - ci-azure-avoid.patch [bz#1810064]
  - Resolves: bz#1810064
    (cloud-init Azure byte swap (hyperV Gen2 Only) [rhel-7.8.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7_8.2
changelog:
  - ci-cmd-main.py-Fix-missing-modules-init-key-in-modes-di.patch [bz#1802173]
  - Resolves: bz#1802173
    ([cloud-init][rhel-7.8.z]cloud-init cloud-final.service fail with KeyError: 'modules-init' after upgrade to version 18.2-1.el7_6.1 in RHV)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7_8.3
changelog:
  - ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1801094]
  - ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1801094]
  - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1801094]
  - Resolves: bz#1801094
    ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init [rhel-7.8.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7_8.4
changelog:
  - ci-New-data-source-for-the-Exoscale.com-cloud-platform.patch [bz#1827207]
  - ci-Add-support-for-publishing-host-keys-to-GCE-guest-at.patch [bz#1827207]
  - ci-exoscale-fix-sysconfig-cloud_config_modules-override.patch [bz#1827207]
  - ci-exoscale-Increase-url_max_wait-to-120s.patch [bz#1827207]
  - ci-ec2-Add-support-for-AWS-IMDS-v2-session-oriented-55.patch [bz#1827207]
  - Resolves: bz#1827207
    (Support for AWS IMDS v2 (available in cloud-init 19.4) [rhel-7.8.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7_8.5
changelog:
  - ci-url_helper-read_file_or_url-should-pass-headers-para.patch [bz#1832177]
  - Resolves: bz#1832177
    ([Azure] cloud-init provisioning failed in Azure [rhel-7.8.z])


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 18.5-6.0.5.el7_8.5
changelog:
  - Update OCI Datasource to support IMDSv2
  - Add cloud-init hotplug event handling support [Orabug: 30485135]
  - Oracle data source should configure secondary VNICs [Orabug: 30487563]
  - Add support for netfailover detection [Orabug: 30487591]
  - Avoid hotplug handling when configure_secondary_nics is disabled [Orabug: 31086905]
  - Set per-platform default NM_CONTROLLED=no for OCI [Orabug: 31086905]
  - Remove secondary VNIC config from cache for hot unplug [Orabug: 31086905]
  - Fix OL distro specific issues and dependency compatibility [Orabug: 30435672]
  - Changes to ignore all enslaved interfaces [Orabug: 30092148]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]
  - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch for 18.2:
    1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata
    2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-2.el7
changelog:
  - ci-Removing-cloud-user-from-wheel.patch [bz#1549638]
  - ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
  - ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
  - ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
  - ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
  - Resolves: bz#1549638
    ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
  - Resolves: bz#1574338
    (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
  - Resolves: bz#1748015
    ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
  - Resolves: bz#1812170
    (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
  - Resolves: bz#1812173
    (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el7
changelog:
  - ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
  - Resolves: bz#1772505
    ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el7
changelog:
  - ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
  - Resolves: bz#1772505
    ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el7
changelog:
  - ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
  - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
  - Resolves: bz#1748015
    ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
  - Resolves: bz#1772505
    ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el7
changelog:
  - ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
  - ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
  - Resolves: bz#1748015
    ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
  - Resolves: bz#1821999
    ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7
changelog:
  - ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
  - Resolves: bz#1821999
    ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)


author: Mark Will <mark.will@oracle.com> - 19.4-7.0.1
changelog:
  - Add Oracle Linux variant to known distros
  - Add cloud-init hotplug event handling support [Orabug: 30485135]
  - Oracle data source should configure secondary VNICs [Orabug: 30487563]
  - Add support for netfailover detection [Orabug: 30487591]
  - Avoid hotplug handling when configure_secondary_nics is disabled [Orabug: 31086905]
  - Set per-platform default NM_CONTROLLED=no for OCI [Orabug: 31086905]
  - Remove secondary VNIC config from cache for hot unplug [Orabug: 31086905]
  - Fix OL distro specific issues and dependency compatibility [Orabug: 30435672]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]


author: Rajesh Harekal <rajesh.harekal@oracle.com> - 19.4-7.0.3
changelog:
  - Add conditional restart of NetworkManager for cloud-final. [Orabug: 31965645]
  - Correct postinstall upgrade cloud-init.service mismerge order.


author: Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.2
changelog:
  - ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
  - ci-Changing-notation-of-subp-call.patch [bz#1839619]
  - ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
  - Resolves: bz#1839619
    ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
  - Resolves: bz#1871916
    ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 19.4-7.0.3.el7_9.2
changelog:
  - Add conditional restart of NetworkManager for cloud-final. [Orabug: 31965645]
  - Correct postinstall upgrade cloud-init.service mismerge order.
  - Add Oracle Linux variant to known distros
  - Add cloud-init hotplug event handling support [Orabug: 30485135]
  - Oracle data source should configure secondary VNICs [Orabug: 30487563]
  - Add support for netfailover detection [Orabug: 30487591]
  - Avoid hotplug handling when configure_secondary_nics is disabled [Orabug: 31086905]
  - Set per-platform default NM_CONTROLLED=no for OCI [Orabug: 31086905]
  - Remove secondary VNIC config from cache for hot unplug [Orabug: 31086905]
  - Fix OL distro specific issues and dependency compatibility [Orabug: 30435672]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]


author: Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3
changelog:
  - ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
  - Resolves: bz#1861871
  - ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])


author: Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3
changelog:
  - ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
  - Resolves: bz#1861871
    ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])


author: Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.4
changelog:
  - ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
  - Resolves: bz#1900807
    (Update existing user password RHEL7x)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7_9.5
changelog:
  - ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1897616]
  - Resolves: bz#1897616
    ([rhel-7]cloud-final.service fails if NetworkManager not installed.)


author: Alan Steinberg <alan.steinberg@oracle.com> - 19.4-7.0.3.el7_9.5
changelog:
  - Correct postinstall upgrade cloud-init.service mismerge order.
  - Add Oracle Linux variant to known distros
  - Add cloud-init hotplug event handling support [Orabug: 30485135]
  - Oracle data source should configure secondary VNICs [Orabug: 30487563]
  - Add support for netfailover detection [Orabug: 30487591]
  - Avoid hotplug handling when configure_secondary_nics is disabled [Orabug: 31086905]
  - Set per-platform default NM_CONTROLLED=no for OCI [Orabug: 31086905]
  - Remove secondary VNIC config from cache for hot unplug [Orabug: 31086905]
  - Fix OL distro specific issues and dependency compatibility [Orabug: 30435672]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]


author: Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.6
changelog:
  - ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2003231]
  - Resolves: bz#2003231
    (anything above 19.2 of cloud init it fails to assign default route and connect to the meta data service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.29-2.el7_6.2
changelog:
  - growpart: fix bug when resizing a middle partition with sgdisk [rhbz#1726564]
  - Resolves: rhbz#1726564
    (When growing GPT partitions use [start of next - 1] instead of [start of next] as the new end sector.)


author: Rex Dieter <rdieter@fedoraproject.org> 2.3.3.4-6
changelog:
  - contribs-lib is not built and installed even with config (#794795, upstream ID: 3392466)
  - pkgconfig file is missing clucene-shared (upstream ID: 3461512)
  - non-descriptive descripton (#757319)


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.70.0-2
changelog:
  - split -bin and -common packages, the former becoming the only arch-specific
  - also move python-specific (entry points, main files) back from -cli package
  - also add virtual provides for python-clufter as python2-clufter
  - bump upstream package (version rolling the above changes out)
  - build for ppc64le
    [rhbz#1402565]


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.75.0-1
changelog:
  - move nano fallback editor dependency to -cli package [PGissue#1]
  - bump upstream package, see https://pagure.io/clufter/releases


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.76.0-1
changelog:
  - factor "borrow validation schemas from pacemaker" out to a separate script
  - bump upstream package, see https://pagure.io/clufter/releases


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.77.0-2
changelog:
  - fix nodelist.node.name configuration option (originaly devised by pacemaker)
    not supported in corosync.conf with the built-in validation schema
    [rhbz#1517834]


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.77.1-1
changelog:
  - bump upstream package, see https://pagure.io/clufter/releases
  - build for aarch64
    [rhbz#1569111]


author: Owen Taylor <otaylor@redhat.com> - 1.20.0-8
changelog:
  - Add a patch that adds clutter_x11_enable_threaded_swap_wait(),
    enabling proper waiting for frame completion on NVIDIA.
  - Add a patch to fix Cogl Glib source added multiple times.
    See https://bugzilla.gnome.org/show_bug.cgi?id=768243
    Resolves: #1306801


author: Rui Matos <rmatos@redhat.com> - 1.20.0-10
changelog:
  - Add patches to make the backend driver selection explicit instead of
    changing the default to gl3
    Resolves: #1361251


author: Petr Machata <pmachata@redhat.com> - 2.8.11-2
changelog:
  - Pass -fno-strict-aliasing to cm_sha2.c to avoid strict aliasing
    problems that GCC warns about.
  - Icon name in CMake.desktop shouldn't include filename extension.


author: Patsy Franklin <pfrankli@redhat.com> - 2.8.12.2-1
changelog:
  - Rebase to 2.8.12.2 including some recent patches. (BZ #1195919)
  - Fix to find python libs version 3.4 (BZ #1246369)
  - Don't fail if certain Qt modules are unavailable. (BZ #1192188)


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-3
changelog:
  - Fix lvconvert --splitmirror for mirror type (2.02.178).
  - Do not pair cache policy and cache metadata format.
  - Fix mirrors honoring read_only_volume_list.
  - Fix vgcreate with sanlock when PVs are created automatically.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-7
changelog:
  - Fix ordering of lvm2 activation and rbdmap services.
  - Fix to avoid locking collisions when monitoring thin-pools.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-10.el7_6.3
changelog:
  - Fix component detection for MD RAID version 1.0 and 0.90.
  - Use sync io if async io_setup fails, or when use_aio=0 is set in config.
  - Fix dmstats report printing no output.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-10.el7_6.7
changelog:
  - Add io_memory_size configuration option.
  - Warn when metadata aproaches io_memory_size.
  - Ensure migration_threshold for cache is at least 8 chunks.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.179-3
changelog:
  - Add convenient conversions between stripe and linear.
  - Fix snapshot hanging on shutdown.
  - Fix internal error in lvs while pvmove in progress.
  - Fix more coverity issues.
  - Improve message for pvresize.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-1
changelog:
  - Never send any discard ioctl with test mode.
  - Fix thin-pool alloc which needs same PV for data and metadata.
  - Enhance vgcfgrestore to check for active LVs in restored VG.
  - Cache can use metadata format 2 with cleaner policy.
  - Fix lvmetad hanging on shutdown.
  - Fix check if resized PV can also fit metadata area.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-2
changelog:
  - Add vdo plugin for monitoring VDO devices.
  - Reject conversions on raid1 LVs with split tracked SubLVs.
  - Reject conversions on raid1 split tracked SubLVs.
  - Fix dmstats list failing when no regions exist.
  - Reject conversions of LVs under snapshot.
  - Limit suggested options on incorrect option for lvconvert subcommand.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.184-2
changelog:
  - Add support for vgsplit with cached devices.
  - Fix conversion of cache pool to RAID1 (2.02.184).
  - Fix signal delivery checking race in libdaemon (lvmetad).
  - Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.185-1
changelog:
  - Fix change of monitoring in clustered volumes.
  - Improve -lXXX%VG modifier which improves cache segment estimation.
  - Add synchronization with udev before removing cached devices.
  - Fix missing growth of _pmspare volume when extending _tmeta volume.
  - Automatically grow thin metadata, when thin data gets too big.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.185-2
changelog:
  - Fix cluster conversions from linear to mirror.
  - Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
  - Prevent shared active mirror LVs with lvmlockd.
  - Parsing of cache status understand no_discard_passdown.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-1
changelog:
  - Improve removal of cached devices.
  - Synchronize with udev when dropping snapshot.
  - Add missing device synchronization point before removing pvmove node.
  - Correctly set read_ahead for LVs when pvmove is finished.
  - Fix metadata writes from corrupting with large physical block size.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-2
changelog:
  - Prevent creating VGs with PVs with different logical block sizes.
  - Pvmove runs in exlusively activating mode for exclusively active LVs.
  - Activate thin-pool layered volume as 'read-only' device.
  - Enhance validation for thin and cache pool conversion and swapping.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-3
changelog:
  - Fix lvmetad shutdown and avoid lenghty timeouts when rebooting system.
  - Change allow_mixed_block_sizes default to 1.


author: Lukas Lemes <lukas.lemes@oracle.com> - 7:2.02.186-2.0.2
changelog:
  - Enable cluster support on aarch64 [Orabug:28712283] [Orabug:28785446]
  - Reduce delay in case of lvmetad update (ritika.srivastava@oracle.com)


author: EL Errata <el-errata_ww@oracle.com> - 7:2.02.186-7.0.2
changelog:
  - Enable cluster support on aarch64 [Orabug:28712283] [Orabug: 28785446](petr.benes@oracle.com)
  - Reduce delay in case of lvmetad update (ritika.srivastava@oracle.com)


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2
changelog:
  - Fix dmeventd crash with modified reserved_stack configuration option.
  - Fix lvm crashing when .cache file is changed by external tools.


author: David Kubat <david.kubat@oracle.com> - 7:2.02.187-6.0.4.el7_9.3
changelog:
  - Add Oracle Linux Boom profile [Orabug: 31603021]
  - Enable cluster support on aarch64 [Orabug:28712283] [Orabug: 28785446](petr.benes@oracle.com)
  - Reduce delay in case of lvmetad update (ritika.srivastava@oracle.com)


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5
changelog:
  - Fix fsadm failure due to accessing unbound variable.
  - Fix segfault in vgextend when a PV is missing in the processed VG.


author: Jan Safranek <jsafrane@redhat.com> - 0.5.2-6
changelog:
  - Fixed 'env' parameter value in 'get_providers()' function
    Resolves: #919082
  - Fixed embedded instance properties
    Resolves: #919081


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.9.5-3
changelog:
  - Fix placement of *.py[co] files
    Resolves: #921547
  - Remove /usr/share/cmpi - it's used by ruby binding that we don't build


author: Dominik Perpeet <dperpeet@redhat.com> 138-3
changelog:
  - Fix issues with connections between multiple hosts
  - Fix format string type mismatch on some architectures


author: Martin Pitt <mpitt@redhat.com> 138-10
changelog:
  - Backport upstream patches to fix integration tests
  - Fix unit test failure in mock with nspawn
  - Fix created timer units so that they can actually get enabled and started
    rhbz#1478832
  - Fix connecting to remote servers with non-standard ssh port rhbz#1478828


author: Bruce Hill <bruce.hill@oracle.com> - 138-10.0.2
changelog:
  - Revert to enable git patch and update patch 0024-remove-rh-reference.patch
  - Drop subscription-manager requires due to we did not ship it (tianyue.lan@oralce.com)
  - Remove Red Hat references.


author: EL Errata <el-errata_ww@oracle.com> - 138-9.0.1
changelog:
  - Drop subscription-manager requires due to we did not ship it (tianyue.lan@oralce.com)
  - Remove Red Hat references.


author: Martin Pitt <mpitt@redhat.com> 154-1
changelog:
  - Rebase to version 154, drop all patches rhbz#1470780
  - This allows ssh keys to be loaded from arbitrary directories
    rhbz#1425887


author: Martin Pitt <mpitt@redhat.com> 154-3
changelog:
  - Update source po for Japanese translations rhbz#1512923
  - Adjust build system to avoid build failure for the above


author: EL Errata <el-errata_ww@oracle.com> - 154-3.0.1
changelog:
  - turn off display of subscriptions menu item in GUI
  - Drop subscription-manager requirement since we do not ship it (tianyue.lan@oralce.com)
  - Remove Red Hat references.


author: Martin Pitt <mpitt@redhat.com> 169-3
changelog:
  - Rebase to version 169, drop all patches rhbz#1568728
  - Fix Subscriptions page hang when accessing as non-admin rhbz#1442540
  - Show an indicator on front page if updates are available rhbz#1495543
  - Properly localize "Log in" rhbz#1541454
  - Improve check for root privilege availability, to e. g. also work for FreeIPA
    admins rhbz#1574630


author: Martin Pitt <mpitt@redhat.com> 173-6
changelog:
  - Fix remote unauthenticated crash with crafted URLs rhbz#1627631
  - Fix off-by-one error in flow control rhbz#1626846


author: Martin Pitt <mpitt@redhat.com> 173.1-1
changelog:
  - Crash fixes spotted by coverity rhbz#1644345
  - Fix race condition with fslist channels rhbz#1644346
  - Fix remotectl crash on errors rhbz#1644348


author: Martin Pitt <mpitt@redhat.com> 190-1
changelog:
  - kdump: Add NFS and SSH dump targets rhbz#1533366
  - kdump: Fix confusing design of target selector rhbz#1536327
  - firewall: Hide already enabled items from "Add Services" dialog rhbz#1598625
  - networking: Gracefully handle when NetworkManager is  not running
    rhbz#1551615
  - web server: Mark deleted cookie as "secure", and add X-Content-Type-Options
    header rhbz#1677767
  - web server: Mark deleted cookie as "HttpOnly" rhbz#1656339
  - Fix various crashes spotted by coverity rhbz#1644209
  - Fix remotectl crash with inaccessible files rhbz#1644213
  - Fix race condition with fslist1 channels rhbz#1644223
  - Fix crash with parsing invalid bas64 headers rhbz#1663712


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 195-1.0.1
changelog:
  - Turn off display of subscriptions menu item in GUI
  - Drop subscription-manager requirement since we do not ship it (tianyue.lan@oracle.com)
  - Remove Red Hat references.


author: Martin Pitt <mpitt@redhat.com> 195.2-1
changelog:
  - firewall: Only reload firewall when adding custom services (rhbz#1725094)
  - networking: Activate a connection after clearing master/slave fields (rhbz#1729378)
  - Add Obsoletes: for ancient cockpit-shell package (rhbz#1744208)


author: Martin Pitt <mpitt@redhat.com> 195.3-1
changelog:
  - subscriptions: Add support for Red Hat Insights (rhbz#1748026)
  - systemd: Warn if not connected to Insights (rhbz#1748350)


author: Martin Pitt <mpitt@redhat.com> 195.8-1
changelog:
  - webserver: Fix large requests with TLS (rhbz#1785497)
  - Machines: Avoid D-Bus introspection to libvirt-dbus, to speed up polkit
    operations (rhbz#1780400)
  - Machines: Fix CPU statistics (rhbz#1763641)


author: Martin Pitt <mpitt@redhat.com> 195.9-1
changelog:
  - ws: Add support for EC certificates (rhbz#1841070)
  - Translation fixes (rhbz#1796834)
  - Use RHSM1 service instead of the deprecated (and now removed)
    com.redhat.SubscriptionManager


author: EL Errata <el-errata_ww@oracle.com> - 195.10-1.0.1
changelog:
  - Turn off display of subscriptions menu item in GUI
  - Drop subscription-manager requirement since we do not ship it (tianyue.lan@oracle.com)


author: Owen Taylor <otaylor@redhat.com> - 1.18.2-12
changelog:
  - Add patches to improve display synchronization on NVIDIA
      
    When testing quadbuffer stereo patches, GNOME Shell would sometimes
    hang up on restart. This turned out to be a problem with display
    synchronization on NVIDIA. The patches added here make display
    synchronization work much more similarly with the NVIDIA drivers
    and the open source drivers, which not only fixes this bug, but should
    reduce future bugs.
      
    Resolves: #1305076

  - Add patches improving frame completion events in Cogl


author: Richard Hughes <richard@hughsie.com> - 1-7
changelog:
  - Add the user-writable system-wide per-machine ICC profile directory from
    the new version of the OpenIccDirectoryProposal.


author: Richard Hughes <richard@hughsie.com> 1.0.0-1
changelog:
  - New upstream version
  - Add a config option for monitors with identical EDID values
  - Allow a different input and output format in CdTransform
  - Build all installed binaries with PIE
  - Build the colord binary with full RELRO
  - Do not show a warning when using 'colormgr device-get-profile-for-qualifier'
  - Fix crash in cd-iccdump by working around an lcms2 bug
  - Fix using the color sensors on ARM hardware
  - Set the STANDARD_space metadata for the print profiles
  - Show all the translations when dumping an ICC profile


author: Richard Hughes <richard@hughsie.com> 1.0.1-1
changelog:
  - New upstream version
  - Do not unconditionally enable BPC on the color transform
  - Fix profile created time for non-UTC timezones
  - Record the gamma table in the session helper error message


author: Richard Hughes <richard@hughsie.com> 1.0.2-1
changelog:
  - New upstream version
  - Add cd_icc_save_data() so that we can easily set _ICC_PROFILE
  - Add CdIccStore to monitor directories of ICC profiles
  - Add SystemVendor and SystemModel properties to the main interface
  - Allow to specify a non-qualified path when using FindProfileByFilename
  - Allow using the key 'Filename' when using FindProfileByProperty
  - Always return the error if any sync method failed
  - Fix GObject introspection when getting lists
  - Fix GObject introspection when getting metadata


author: Richard Hughes <richard@hughsie.com> 1.0.4-1
changelog:
  - Rebase to a new upstream version to fix small security bug
  - Use %ghost in the to avoid removing databases on upgrades
  - Resolves: #1012832


author: Richard Hughes <richard@hughsie.com> 0.1.22-2
changelog:
  - Backport a patch from git master that fixes an include issue with
    projects that want to use colord-gtk.h and colord.h at the same time.


author: Richard Hughes <richard@hughsie.com> 0.1.25-1
changelog:
  - New upstream version.
  - Give the sample widget slightly curved corners and a gray outline
  - Do not use deprecated functions from libcolord
  - Fix warnings when building ColordGtk-1.0.gir
  - Fix up the licence boilerplate for CdSampleWidget


author: Jan Grulich <jgrulich@redhat.com> - 0.26-1
changelog:
  - Spec file based on exiv2 package to provide old libraries before API change
    Resolves: bz#1668355


author: Jan Vcelak <jvcelak@redhat.com> 1:2.3.43-3
changelog:
  - enhancement: build with hardening flags (RELRO)
  - fix: querying for IPv6 DNS records when IPv6 is disabled on the host (#835013)
  - drop unnecessary patches
  - clean configure flags


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.0-3
changelog:
  - Workaround psm vs psm2 conflict by having two separate packages.
  - Related: #947311
  - Related: #1173305


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.0-4
changelog:
  - Disambiguate names of rpm macros among the built variants.
  - Use --with-verbs instead of the deprecated synonym --with-openib.
  - Related: #947311
  - Related: #1173305


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.0-10
changelog:
  - Remove psm2 package variant. Instead use MCA exclusion using config file.
  - Related: #947311
  - Related: #1173305


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.3-1
changelog:
  - Update to upstream release 1.10.3.
  - Stop excluding psm2 MTL by default. The psm/psm2 conflict has been resolved.
  - Resolves: #1273175
  - Resolves: #1285292


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.6-1
changelog:
  - Update to upstream release 1.10.6.
  - Fix missing RPM provides.
  - Resolves: #1382800
  - Resolves: #1365792


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.7-1
changelog:
  - Update to upstream release 1.10.7.
  - Add Open MPI 3.0.0 subpackage (openmpi3).
  - Resolves: #1452826


author: Jarod Wilson <jarod@redhat.com> - 1.10.7-3
changelog:
  - Update openmpi3 sub-package to OpenMPI v3.1.3
  - Resolves: #1637247
  - Rebuild against latest opensm
  - Resolves: #1670688


author: Doug Ledford <dledford@redhat.com> - 3.3.5-2
changelog:
  - Drop libibmad as it didn't soname bump, and also remove the lower level
    opensm libs, libosm{comp,vendor} as they didn't soname bump either
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 3.3.5-3
changelog:
  - Change the file spec so we don't accidentally pick up the debug files in
    the base package on 32bit arches
  - Resolves: bz732495


author: Honggang Li <honli@redhat.com> - 3.3.15-3
changelog:
  - Package up libosmcomp.so.3* to fix dependency issue after rebase
    opensm to release 3.3.21
  - Resolves: bz1670692


author: Marek Kasik <mkasik@redhat.com> - 0.22.5-4
changelog:
  - Add back glib, cpp and qt frontends so that existing applications
  - loads correct libpoppler.so.*.
  - Resolves: #1184215


author: Denys Vlasenko <dvlasenk@redhat.com> - 0.2.7-9
changelog:
  - Added commented-out "LimitNOFILE=" directive to conman.service.
  - This is systemd-esque way to change process limits for serivces.
  - Also and a comment when to use it.
  - Resolves: rhbz#1035228.


author: Paul Wouters <pwouters@redhat.com> - 1.4.2-8
changelog:
  - Resolves: rhbz#CVE-2015-6496
  - Fold in upstream patches since 1.4.2 release up to git 900d7e8
  - Fold in upstream patch set of 2015-08-18 for coverity issues


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-3
changelog:
  - Resolves: rhbz#1425552 (explicitely Require: libnetfilter_conntrack >= 1.0.6 as it is same .so version)


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-4
changelog:
  - Resolves: rhbz#1578059 Greatest NVR version of conntrack-tools for ppc64le and x86_64 are different


author: Phil Sutter <psutter@redhat.com> - 1.4.4-5
changelog:
  - Add git commit info to IPv6 NAT support patch
  - Backport: conntrackd: helpers: dhcpv6: Fix potential array overrun
  - Backport: nfct: Drop dead code in nfct_timeout_parse_params()
  - Backport: src: Fix for implicit-fallthrough warnings


author: Bastien Nocera <bnocera@redhat.com> - 3.22.2-1
changelog:
  + control-center-3.22.2-1
  - Update to 3.22.2
  - Add cursor size selection patch
  Resolves: #1386839, #1298881


author: Bastien Nocera <bnocera@redhat.com> - 3.22.2-5
changelog:
  + control-center-3.22.2-5
  - Don't show veth interfaces, we don't have code to set them up
  Resolves: #1457691


author: Bastien Nocera <bnocera@redhat.com> - 3.26.2-6
changelog:
  + control-center-3.26.2-6
  - Fix Clone MAC not being saved in Ethernet device properties
  - Resolves: #1467295


author: Bastien Nocera <bnocera@redhat.com> - 3.26.2-8
changelog:
  + control-center-3.26.2-8
  - Fix Wi-Fi networks not getting updated
  - Show "Wi-Fi disabled" page when Wi-Fi is disabled
  - Resolves: #1545713


author: Nils Philippsen <nphilipp@redhat.com> - 1.10-3
changelog:
  - don't expect find output to be sorted, move "make test" to %check (#237687,
    patch by Giuseppe Bonacci)
  - change license tag to "GPLv2"


author: Nils Philippsen <nphilipp@redhat.com> - 1.12-1
changelog:
  - version 1.12
  - remove obsolete tests patch
  - don't run md5sum against MD5sums as it lists a non-existing .MD5sums file
    which causes md5sum to error out
  - change license tag to "GPLv2 or GPLv3"


author: Robert Relyea <rrelyea@redhat.com> - 1.1.0-34
changelog:
  - recognize up to 32 keys and certs in coolkeys. (can go up to 62 with just #define changes)
  - own our cache file.
  - verify we are using the correct mechanisms


author: Jiri Vanek <jvanek@redhat.com> - 1.1-2
changelog:
  - package now "installs" also during pretrans, so pretrasn scripts can use it
  - pretrasn "install" is removed in postrans


author: Jiri Vanek <jvanek@redhat.com> - 1.1-3
changelog:
  - commented requires on lua posix to stop blocking composes.
  - changed it to 644 to dont mislead by executable flags
  - Resolves: rhbz#1296430


author: Jiri Vanek <jvanek@redhat.com> - 1.1-5
changelog:
  - posttrans silenced, the error is appearing only in state, when there is nothing to copy
  - Resolves: rhbz#1296430


author: Jiri Vanek <jvanek@redhat.com> - 2.2-1
changelog:
  - added "jre/lib/security/blacklisted.certs" to cared files
  - moved to newest release 2.1
  - moved to new upstream at pagure.io
  - added new script of copy_jdk_configs_fixFiles.sh 
  - copy_jdk_configs.lua  aligned to it
  - Resolves: rhbz#1427463


author: Ondrej Vasik <ovasik@redhat.com> 8.22-10
changelog:
  - cp/mv/install: do not crash when getfscreatecon() is
    returning a NULL context
  - fix the cut optimizations to UTF-8 locales only
  - unset the unnecessary envvars after colorls scripts


author: Ondrej Vasik <ovasik@redhat.com> - 8.22-13
changelog:
  - call utilities in colorls.* scripts with full path (#1222223)
  - tail: disable inotify in --follow for vxfs (#1109083)
  - remove circular dependency for util-linux (not relevant for RHEL 7 - #1155963)
  - sort: do not look at more than specified keys for mb locales (#1148347)
  - i18n patch: fix buffer overruns and compiler warnings (#1148347)
  - xfs: fix dd sparse false test failure on btrfs and xfs (#1223041)
  - dd: new status=progress level to print stats periodically (#1147701)
  - id/groups - print correct group for session (#1115430)
  - cp,install,mknod,mkfifo,mkdir: separate -Z and --context options
    in --help and manpage (#1084471)
  - ls: clarify --scontext/--context/--lcontext options behaviour
    in info documentation, mention deprecation (#1099508)
  - du: handle bindmount cycles more gracefully (#1238191)
  - mv: prevent possible race condition for hardlinks (#1166570)
  - df: improve filtering of NFS mounts and bind mounts
    (#1197463, #1100026, #1129661)


author: Ondrej Vasik <ovasik@redhat.com> - 8.22-18
changelog:
  - fix xfs build failure in chrooted environment (#1263341)
  - update filesystem lists for stat and tail from latest upstream
    (#1327881, #1280357) 
  - disable id/setgid.sh test(missing chroot feature), fix 
    cp-a-selinux test (#1266500,#1266501)
  - colorls.sh - change detection of interactive shell for ksh
    compatibility (#1321648)
  - fix date --date crash with empty or invalid TZ envvar (#1325786)
  - df -l: do not hang on a dead autofs mount point (#1309247)
  - sort -h: fix functionality of human readable numeric sort for other
    than first field (#1328360)


author: Kamil Dudka <kdudka@redhat.com> - 8.22-19
changelog:
  - timeout: fix race possibly terminating wrong process (#1439465)
  - ls: allow interruption when reading slow directories (#1421802)
  - fold: preserve new-lines in mutlibyte text (#1418505)


author: EL Errata <el-errata_ww@oracle.com> - 8.22-21.0.1
changelog:
  - clean up empty file if cp is failed [Orabug 15973168]
  - tests: avoid false failure when df lists no root file system


author: Kamil Dudka <kdudka@redhat.com> - 8.22-23
changelog:
  - update description of the -a/--all option in df.1 man page (#1553212)
  - sort -M: fix memory leak when using multibyte locale (#1540059)


author: Kamil Dudka <kdudka@redhat.com> - 8.22-24
changelog:
  - doc: improve description of the --kibibytes option of ls (#1527391)
  - doc: fix typo in date example (#1620624)
  - stat,tail: sync the list of file systems with coreutils-8.31 (#1659530)
  - df: avoid stat() for dummy file systems with -l (#1668137)
  - df: prioritize mounts nearer the device root (#1042840)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-2
changelog:
  - Resolves: rhbz#1363654

  - Config: Flag config uidgid entries (rhbz#1363654)
  - merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-3
changelog:
  - Related: rhbz#1363654

  - Enhance spec so corosync-qdevice subpackage depends on same version of
    the corosync and corosynclib packages.


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-4
changelog:
  - Resolves: rhbz#1367813

  - Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
  - merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
  - man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
  - merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
  - Qnetd LMS: Fix two partition use case (rhbz#1367813)
  - merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-6
changelog:
  - Resolves: rhbz#1371880

  - libvotequorum: Bump version (rhbz#1371880)
  - merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
  - votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
  - merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
  - votequorum: simplify reconfigure message handling (rhbz#1371880)
  - merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-7
changelog:
  - Related: rhbz#1371880

  - Fix build on RHEL7.3 latest (rhbz#1371880)
  - merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
  - Enable aarch64 build (bz#1422598)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-8
changelog:
  - Resolves: rhbz#1434528
  - Resolves: rhbz#1434529
  - Resolves: rhbz#1434534

  - cfg: Prevents use of uninitialized buffer (rhbz#1434528)
  - merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
  - man: Fix typos in man page (rhbz#1434529)
  - merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
  - Fix typo: Destorying -> Destroying (rhbz#1434529)
  - merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
  - init: Add doc URIs to the systemd service files (rhbz#1434529)
  - merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
  - man: Modify man-page according to command usage (rhbz#1434529)
  - merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
  - Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
  - merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
  - upstart: Add softdog module loading example (rhbz#1434529)
  - merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
  - Remove deprecated doxygen flags (rhbz#1434529)
  - merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
  - Remove redundant header file inclusion (rhbz#1434528)
  - merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
  - Qdevice: fix spell errors in qdevice (rhbz#1434529)
  - merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
  - doc: document watchdog_device parameter (rhbz#1434529)
  - merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
  - Logsys: Change logsys syslog_priority priority (rhbz#1434534)
  - merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
  - logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
  - merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-9
changelog:
  - Resolves: rhbz#1445001

  - Main: Call mlockall after fork (rhbz#1445001)
  - merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
  - Disable aarch64 build (bz#1422598)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-10
changelog:
  - Resolves: rhbz#1439205
  - Resolves: rhbz#1461450
  - Resolves: rhbz#1469170
  - Resolves: rhbz#1476214

  - main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
  - merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
  - totem: Propagate totem initialization failure (rhbz#1461450)
  - merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
  - totemcrypto: Refactor symmetric key importing (rhbz#1461450)
  - merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
  - totemcrypto: Use different method to import key (rhbz#1461450)
  - merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
  - main: Add option to set priority (rhbz#1469170)
  - merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
  - main: Add support for libcgroup (rhbz#1476214)
  - merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
  - totemcrypto: Fix compiler warning (rhbz#1461450)
  - merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)


author: Jan Friesse <jfriesse@redhat.com> 2.4.3-2
changelog:
  - Resolves: rhbz#1536219

  - logging: Make blackbox configurable (rhbz#1536219)
  - merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
  - logging: Close before and open blackbox after fork (rhbz#1536219)
  - merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)


author: Jan Friesse <jfriesse@redhat.com> 2.4.3-5
changelog:
  - Resolves: rhbz#1376819
  - Resolves: rhbz#1634710

  - configure: add --with-initconfigdir option (rhbz#1376819)
  - merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
  - Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
  - merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
  - totemcrypto: Fix importing of the private key (rhbz#1634710)
  - merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
  - qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
  - merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-1
changelog:
  - Resolves: rhbz#1732039
  - Resolves: rhbz#1153818
  - Resolves: rhbz#1647120

  - Rebase to Corosync 2.4.5


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-2
changelog:
  - Resolves: rhbz#1656492

  - totem: Increase ring_id seq after load (rhbz#1656492)
  - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)


author: Jan Friesse <jfriesse@redhat.com> - 2.4.5-3
changelog:
  - Resolves: rhbz#1737884
  - Resolves: rhbz#1737887

  - Do not set exec permission for service file
  - Fix CFLAGS definition


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-5
changelog:
  - Resolves: rhbz#1679792
  - Resolves: rhbz#1780134

  - votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
  - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
  - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
  - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
  - votequorum: set wfa status only on startup (rhbz#1679792)
  - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-6
changelog:
  - Resolves: rhbz#1835885

  - stats: Add basic schedule-miss stats to needle (rhbz#1835885)
  - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
  - main: Add schedmiss timestamp into message (rhbz#1835885)
  - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-7
changelog:
  - Related: rhbz#1835885

  - main: Make schedmiss in cmap and log equal (rhbz#1835885)
  - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-7.1
changelog:
  - Resolves: rhbz#1896311
  - Resolves: rhbz#1897087

  - spausedd: Fix log_perror (rhbz#1896311)
  - spausedd: Add ability to move process into root cgroup (rhbz#1897087)


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-17
changelog:
  - fix small memory leak in copyin.c (#919454)
  - remove %defattr and install 'cpio' to real %{_bindir}
  - CovScan: add %{?_rawbuild}


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-20
changelog:
  - fix another bogus date in changelog
  - update config.guess/config.sub for aarm64 build (#925189)
  - run autoreconf instead of autoheader


author: Marek Polacek <polacek@redhat.com> 4.8.5-20
changelog:
  - handle exceptions in basic_istream::sentry (#1469384)
  - don't run pr63354.c on ppc (#1468546)
  - ensure proxy privatization safety (#1491395)
  - fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
  - on aarch64, remove libatomic.so (#1465510)


author: Marek Polacek <polacek@redhat.com> 4.8.5-21
changelog:
  - fix 27_io/basic_fstream/53984.cc
  - fix for classes with bases with mutable members (PR c++/77375)
  - fix handling side-effects of parameters (PR c/77767)
  - fix combine's make_extraction (PR rtl-optimization/78378)
  - fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
  - fix -A / -B to A / B folding (PR middle-end/80362)
  - fix comparison of decimal float zeroes (PR middle-end/80692)
  - fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)


author: Jeff Law <law@redhat.com> 4.8.5-24
changelog:
  - Sync gcc48-rh1469697-13 patch to upstream (#1469697)
  - Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
  - Avoid infinite loop if probing interval is less than guard size (#1469697)
  - Fix debug information for large probing interval on aarch64 (#1469697)
  - Fix ICE on ppc port with large probing interval (#1469697)

  - rebuild to remove static relocations not known to older linkers (#1508968)


author: Jeff Law <law@redhat.com> 4.8.5-26
changelog:
  - Avoid red zone probing for zero residual dynamic allocation (#1469697)
  - Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)


author: Marek Polacek <polacek@redhat.com> 4.8.5-28
changelog:
  - Minor testsuite fixes to clean up test results (#1469697)
  - retpoline support for spectre mitigation (#1535655)


author: Bruce Hill <bruce.hill@oracle.com> 4.8.5-28.0.1
changelog:
  - [Orabug: 27557686] (Egeyar Bagcioglu)
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.


author: Jose E. Marchesi <jose.marchesi@oracle.com> 4.8.5-28.0.4.1
changelog:
  - Orabug 28212574.
  - Fix alignment for section anchor in aarch64 targets.
    Upstream f79e87ea93bc4a48ebff0db1b8c05dd6240e69e2.


author: Marek Polacek <polacek@redhat.com> 4.8.5-31
changelog:
  - backport s390 -mpic-data-is-text-relative feature (#1555397)
  - fix crash when write follows large read (#1463706)
  - fix emit_move_insn ICE (#1565536)
  - add missing rs6000-cpus.def (#1512202)


author: Marek Polacek <polacek@redhat.com> 4.8.5-34
changelog:
  - fix infinite looping in -fipa-cp-clone (#1546372)
  - don't look for vsld gcc.target/powerpc/pr72717.c


author: EL Errata <el-errata_ww@oracle.com> - 4.8.5-36.0.2
changelog:
  - Do not pass -export-dynamic to the linker in static links in aarch64.
  - Orabug 28841734.
  - Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - Orabug 28212574.
  - Fix alignment for section anchor in aarch64 targets.
    Upstream f79e87ea93bc4a48ebff0db1b8c05dd6240e69e2.


author: Marek Polacek <polacek@redhat.com> 4.8.5-36.2
changelog:
  - allow libitm to use HTM (#1674383)
  - fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)


author: EL Errata <el-errata_ww@oracle.com> - 4.8.5-36.0.1
changelog:
  - [Orabug: 27987827] (Michael Ploujnikov)
  - Enable stable binary output for Ksplice
  - [Orabug: 27557686] (Egeyar Bagcioglu)
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.


author: Natalya Naumova <natalya.naumova@oracle.com> - 4.8.5-36.0.2
changelog:
  - Do not pass -export-dynamic to the linker in static links in aarch64.
  - [Orabug: 28841734]
  - Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - [Orabug: 28212574]
  - Fix alignment for section anchor in aarch64 targets.
    Upstream f79e87ea93bc4a48ebff0db1b8c05dd6240e69e2.


author: Marek Polacek <polacek@redhat.com> 4.8.5-38
changelog:
  - fix mode mismatch in prepare_cmp_insn (#1641329, PR target/63442)
  - allow libitm to use HTM (#1659698)
  - fix up memset handling in DSE (#1640805, PR rtl-optimization/69891)
  - fix bits/bytes confusion in set_noop_p (#1594975, PR rtl-optimization/68814)
  - enable initializing statics with COMPOUND_LITERAL_EXPR in C99
    (#1672652, PR c/63567)
  - fix PIC_OFFSET_TABLE_REGNUM (#1614326)
  - quash spurious -Wmissing-field-initializers warnings (#1633716, PR c/60784)
  - fix ICE with alias template (#1648161, PR c++/53658)


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 4.8.5-39.0.2
changelog:
  - [Orabug: 27987827] (Michael Ploujnikov)
    Enable stable binary output for Ksplice
  - [Orabug: 27557686] (Egeyar Bagcioglu)
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
  - Do not pass -export-dynamic to the linker in static links in aarch64.
    [Orabug: 28841734]
    Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - [Orabug: 28212574]
    Fix alignment for section anchor in aarch64 targets
    Upstream f79e87ea93bc4a48ebff0db1b8c05dd6240e69e2


author: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> 4.8.5-39.0.4
changelog:
  - Backport the fix for the erratum 843419 of Cortex A53.
    [Orabug: 29777365]
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Marek Polacek <polacek@redhat.com> 4.8.5-43
changelog:
  - fix wrong code emitted for movv1qi on s390x (#1784759)
  - fix wrong code with EH due to a bug in LRA (#1800526)


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-3
changelog:
  - fix the python module to work with compressed dictionaries (#972542)
  - fix various dictionary lookup errors (#986400, #986401)
  - make the library reentrant and fix compilation warnings


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-5
changelog:
  - make the simplistic check and the purging of special characters much
    less aggressive (#1003624, #985378)


author: Dave Anderson <anderson@redhat.com> - 7.1.2-2
changelog:
  - Fix "kmem -s <address>", "bt -F[F]", and "rd -S[S]" options in kernels 
    configured with CONFIG_SLUB having multiple-page slabs.
    Resolves: rhbz#1244003
  - Fix for SIGSEGV generated by "bt -[f|F]" in ARM64 kernels.
    Resolves: rhbz#1248859


author: Dave Anderson <anderson@redhat.com> - 7.1.2-3
changelog:
  - crash fails to read or wrongly reads some parts of memory in sadump vmcore format
    Resolves: rhbz#1282997


author: Dave Anderson <anderson@redhat.com> - 7.1.5-1
changelog:
  - Rebase to upstream version 7.1.5
    Resolves: rhbz#1292566
  - Decode clflushopt instruction
    Resolves: rhbz#1262479
  - Support AArch64 QEMU generated dumps 
    Resolves: rhbz#1299873
  - crash: zero-size memory allocation (aarch64) 
    Resolves: rhbz#1312738


author: Dave Anderson <anderson@redhat.com> - 7.1.5-2
changelog:
  - Fix for kernel module symbol gathering when the ordering of module
    symbol name strings does not match the order of the kernel_symbol
    structures.
  - Resolves: rhbz#1375130


author: Dave Anderson <anderson@redhat.com> - 7.1.8-1
changelog:
  - Rebase to upstream version 7.1.8
    Resolves: rhbz#1393534
  - POWER9 - Power ISA 3.0 related support for crash utility
    Resolves: rhbz#1368711
  - crash package update - ppc64/ppc64le
    Resolves: rhbz#1384944
  - exception RIP: unknown or invalid address
    Resolves: rhbz#1350457
  - Crash does not always parse correctly the modules symbol tables
    Resolves: rhbz#1360415
  - ARM64: crash live system from: WARNING: cannot read linux_banner string
    Resolves: rhbz#1392007
  - kmem: invalid structure member offset: page_count
    Resolves: rhbz#1392011
  - Kernel address space randomization [KASLR] support 
    Resolves: rhbz#1392658
  - invalid structure size: tnt
    Resolves: rhbz#1420653


author: Dave Anderson <anderson@redhat.com> - 7.1.9-1
changelog:
  - Rebase to upstream version 7.1.9
    Resolves: rhbz#1393534
  - Fix gdb "set scope" option for KASLR kernels.
    Resolves: rhbz#1440725
  - Fix for the determination of the x86_64 "phys_base" value when it is
    not passed in the VMCOREINFO data of ELF vmcores
    Resolves: rhbz#1439170


author: Dave Anderson <anderson@redhat.com> - 7.1.9-2
changelog:
  - Rebase to github commits 87179026 to ad3b8476
    Resolves: rhbz#1393534
  - Prohibit native gdb disassemble command when KASLR
    Resolves: rhbz#1445649


author: Dave Anderson <anderson@redhat.com> - 7.2.0-1
changelog:
  - Rebase to upstream version 7.2.0
  - Rebase to github commits da9bd35a to e2efacdd
    Resolves: rhbz#1497316
  - ppc64le: fix for "WARNING: cannot access vmalloc'd module memory"
    Resolves: rhbz#1485391
  - Support for analyzing an SADUMP crash dump if KASLR is enabled
    Resolves: rhbz#1504467


author: Dave Anderson <anderson@redhat.com> - 7.2.0-3
changelog:
  - Rebase to github commits 494a796e to 63419fb9
    Resolves: rhbz#1497316
  - Fix IRQ stack transition failure due to kernel's removal of 64-byte gap
    Resolves: rhbz#1530887


author: Dave Anderson <anderson@redhat.com> - 7.2.0-5
changelog:
  - Additional support for analyzing an SADUMP dumpfile if KASLR
    and KPTI are both enabled
    Resolves: rhbz#1504467


author: Dave Anderson <anderson@redhat.com> - 7.2.3-1
changelog:
  - Rebase to upstream version 7.2.3
    Resolves: rhbz#1559460
  - eBPF support with new bpf command
    Resolves: rhbz#1559758


author: Dave Anderson <anderson@redhat.com> - 7.2.3-2
changelog:
  - Work around rhel-7.6 s390/s390x ptrace.h incompatiblity FTBFS issue
  - Rebase to github commit 46d21219
    Resolves: rhbz#1559460


author: Dave Anderson <anderson@redhat.com> - 7.2.3-5
changelog:
  - Rebase to github commits b9d76838 to c79a11fa
    Resolves: rhbz#1559460
  - Fix ppc64/ppc6le stacksize calculation
    Resolves: rhbz#1589685


author: Dave Anderson <anderson@redhat.com> - 7.2.3-7
changelog:
  - Support ppc64 increased VA range
  - Fix ppc64 "bt" command failure reporting invalid NIP value
    Resolves: rhbz#1617936


author: Dave Anderson <anderson@redhat.com> - 7.2.3-8
changelog:
  - Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. 
    Resolves: rhbz#1617936


author: Dave Anderson <anderson@redhat.com> - 7.2.3-9
changelog:
  - Alternate list loop detection option
    Resolves: rhbz#1595389
  - Readline library tab completion plugin
    Resolves: rhbz#1656165


author: Alex Burmashev <alexander.burmashev@oracle.com> - 7.2.7-1.0.1
changelog:
  - Update to 7.2.7 upstream
  - Drop not needed OL7 patchset [Orabug: 30521747]
  - Backport needed upstream patches [Orabug: 30352094]


author: HATAYAMA Daisuke <d.hatayama@jp.fujitsu.com> - 1.0-1
changelog:
  - Remove inclusion of kvmdump.h and unwind_x86_64.h due to non-supporting issue
    on crash-devel package. Instead, use a new interface for them.
  - Remove ppc64, ia64, s390 and s390x from ExclusiveArch, leave x86_64
    and %{ix86} there.
  - Add descriptions in BuildRequires and Requires about crash and crash-devel.


author: Dave Anderson <anderson@redhat.com> - 2.0-3
changelog:
  - Replace obsolete _init() and _fini() functions.
  - Fix possible segmentation violation on calloc() failure.
  - Initialize trace_dat to avoid compiler warning.


author: Dave Anderson <anderson@redhat.com> - 2.0.12
changelog:
  - Differentiate ppc64 .ring_buffer_read text symbol from ring_buffer_read data symbol
  - Fix for ring_buffer_per_cpu.nr_pages size change on big-endian systems 
  - Fix for Linux 4.7 change to the TRACE_EVENT_FL_TRACEPOINT flag
    Resolves: rhbz#1441914
    Resolves: rhbz#1440726


author: Dave Anderson <anderson@redhat.com> - 2.0.13
changelog:
  - Build requires crash-devel-7.2.0-2 and usage requires crash-7.2.0-2
    because of load_module structure change.
    Resolves: rhbz#1520825


author: John W. Linville <linville@redhat.com> - 1.1.3_2014.06.13-1
changelog:
  - Update wireless-regdb to version 2014.06.13
  - Add logger commands to setregdomain to make it more communicative


author: John W. Linville <linville@redhat.com> - 1.1.3_2015.04.06-2
changelog:
  - Update wireless-regdb to version 2015.04.06
  - Add patch for regdbdump to display DFS region
  - Make some improvements to setregdomain and its man page


author: Zdenek Pavlas <zpavlas@redhat.com> - 0.9.9-21
changelog:
  - update to latest HEAD
  - don't BuildRequire bash-completion in rhel
  - Fail for bad compress-type options to modifyrepo, like createrepo. BZ 886589
  - Fix options documentation. BZ 892657.
  - modifyrepo: fix --compress option bug. BZ 950724
  - modifyrepo: add --checksum and --{unique,simple}-md-filenames options


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-24
changelog:
  - mergerepo: merge package versions from multiple repos.
  - Related: bug#1178763
  - Close lock file before unlink().
  - Related: bug#1256216


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-26
changelog:
  - Make sure filename doesn't already contain a checksum.
  - Resolves: bug#1270784
  - Catch IOErrors when loading pkglist.
  - Resolves: bug#1083182
  - Add missing options to the manpage.
  - Resolves: bug#1285761


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-27
changelog:
  - Fix temporary files cleanup.
  - Resolves: bug#1406418
  - Fix --update for pkgs with same nevra.
  - Resolves: bug#1404239


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-28
changelog:
  - createrepo: allow xz and bz2 for xml files.
  - Resolves: bug#1125437
  - modifyrepo: fix handling of already compressed input.
  - Resolves: bug#1227782
  - modifyrepo: handle empty file with LZMA.
  - Resolves: bug#1287685
  - modifyrepo: docs: remove compat compress type.
  - Resolves: bug#1287714


author: Adrian Reber <adrian@lisas.de> - 3.12-0.1
changelog:
  - Updated to 3.12 (pre-release)
  - Create libs subpackage
  - Build against SELinux (Fedora and RHEL8)
  - Build against libbsd (Fedora)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.3-5
changelog:
  - Python 2 binary package renamed to python2-criu
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-14
changelog:
  - mark the 0hourly and dailyjobs crontabs as config
  - properly handle users for whose getpwnam() returns NULL temporarily
  - log when crond is shutting down


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-16
changelog:
  - disable mail from anacron with empty MAILTO
  - crontab: do not block access with PAM when running as root
  - improve the crontab man page
  - do not hardcode system_u selinux user but use the user from
    the current context


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18
changelog:
  - make anacron not to contradict itself in syslog
    (job output does not have to be necessarily mailed)


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18
changelog:
  - fix regression - spurious PAM log message from crontab (#1479064)
  - allow empty variables in crontabs (#1439217)


author: Marcel Plch <mplch@redhat.com> - 1.4.11-20
changelog:
  - Fix race condition when crontab is modified the same second
    before and after reading the crontab
  - Resolves: rhbz#1638691


author: Marcel Plch <mplch@redhat.com> - 1.4.11-22
changelog:
  - Backport upstream patch to fix cron failing on
    smart card authentication
  - Resolves: rhbz#1650314


author: Jan Staněk <jstanek@redhat.com> - 1.4.11-24
changelog:
  - Limit memory allocated for file descriptors
    Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
    Resolves: rhbz#2026289


author: Joe Orton <jorton@redhat.com> - 2.4.1-40.1
changelog:
  - keyutil: use SHA1 as default hash in created certs (#1030470)
  - genkey: default to 2048 bit keysize (#1039896)


author: Joe Orton <jorton@redhat.com> - 2.4.1-42
changelog:
  - genkey: skip cert generation after CSR for OpenSSL (#1039896)
  - keyutil: fix error reporting (#1039896)


author: Ondrej Kozina <okozina@redhat.com> - 1.6.3-1
changelog:
  - Update to cryptsetup 1.6.3.
  - various fixes related to block devices with 4KiB sectors
  - enable reencryption using specific keyslot (dracut module)
  - fix failure in reading last keyslot from external LUKS header
  - update FIPS POST to be complaint with actual requirements
  - fix hash limiting if parameter is not numeric
  - Resolves: #1028362 #1029032 #1029406 #1030288 #1034388 #1038097


author: Ondrej Kozina <okozina@redhat.com> - 1.6.7-1
changelog:
  - Update to cryptsetup 1.6.7.
  - patch: avoid use of kernel crypto API socket which is known
    to be broken in RHEL7.0 kernel (7.1+ is fine).
  - Resolves: #1206170


author: Ondrej Kozina <okozina@redhat.com> - 1.7.4-4
changelog:
  - patch: fix regression in blockwise functions
  - patch: avoid repeating error messages when device holders
    detected.
  - patch: add option to cryptsetup-reencrypt to print progress
    log sequentaly
  - patch: use --progress-frequency in reencryption dracut module
  - Resolves: #1480006 #1447632 #1479857


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-2
changelog:
  - patch: stop LUKS2 auto-recovery if device is no longer LUKS
    type
  - patch: update cryptsetup man page for --type option
  - patch: rephrase error message for invalid --type option in
    convert action
  - Resolves: #1599281 #1601477 #1601481


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-3
changelog:
  - Add expected permissions explicitly for locking directory.
  - Reinstate sed script removing library rpath from libtool
    script due to bug in upstream sources distribution.
  - Resolves: #1609847 #1610379


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-4
changelog:
  - patch: Fix broken LUKS2 api test.
  - patch: Allow cryptsetup to process all LUKS2 metadata variants
    according to LUKS2 specifiation.
  - Resolves: #1653388


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-5
changelog:
  - patch: calculate alignment offset correctly for LUKS2 devices.
  - patch: fix memory leak in LUKS2 validation.
  - Resolves: #1613953 #1693592


author: John Dennis <jdennis@redhat.com> - 5.8-11
changelog:
  - add ctags-5.8-memmove.patch
    bug #284 absoluteFilename uses strcpy on overlapping strings 
    http://sourceforge.net/p/ctags/bugs/284/  
    The bug was fixed upstream on 2012-03-26 in the following commit
    http://sourceforge.net/p/ctags/code/782/
    ctags-5.8-memmove.patch simply adds the same patch as the above commit.


author: Isaac Boukris <iboukris@redhat.com> - 4.10.16-2
changelog:
  - resolves: #1828354 - add additioanl hostnames to the keytab
  - resolves: #1836427 - add dnshostname option net-ads-join


author: Andreas Schneider <asn@redhat.com> - 4.10.16-8
changelog:
  - resolves: #1878205 - Fix restarting winbind on package upgrade
  - resolves: #1892632 - Fix CVE-2020-14318
  - resolves: #1891687 - Fix CVE-2020-14323
  - resolves: #1879834 - Fix CVE-2020-1472
  - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
  - resolves: #1868917 - Fix %U substitution for 'valid users' option
  - resolves: #1853272 - Fix 'require_membership_of' documentation in
                         pam_winbind{.conf} manpage


author: Andreas Schneider <asn@redhat.com> - 4.10.16-14
changelog:
  - resolves: #1937867 - Fix possible core dump with printing support
  - resolves: #1930747 - Ensure that libwbclient has been updated before
                         restarting services


author: Andreas Schneider <asn@redhat.com> - 4.10.16-16
changelog:
  - resolves: #2019661 - Fix CVE-2016-2124
  - resolves: #2019673 - Fix CVE-2020-25717
  - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl


author: Andreas Schneider <asn@redhat.com> - 4.10.16-18
changelog:
  - resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
  - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
  - resolves: #2046148 - Fix CVE-2021-44142


author: Andreas Schneider <asn@redhat.com> - 4.10.16-19
changelog:
  - resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                         mapping for uid/gid conflict


author: Andreas Schneider <asn@redhat.com> - 4.10.13-1
changelog:
  - resolves: #1785121 - Rebase to vesion 4.10.13
  - resolves: #1791208 - Fix CVE-2019-14907
  - resolves: #1737888 - Fix manual libwbclient alternative settings
  - resolves: #1634057 - Return correct stat for SMB1 with POSIX extensions


author: Andreas Schneider <asn@redhat.com> - 4.10.15-1
changelog:
  - related: #1785121 - Rebase to version 4.10.15
  - resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
  - resolves: #1801496 - Add missing ctdb directories


author: Andreas Schneider <asn@redhat.com> - 4.10.4-1
changelog:
  - resolves: #1497809 - Add --resolve-uids for 'smbstatus -L'
  - resolves: #1714947 - Fix idmap_tdb2 scripts


author: Andreas Schneider <asn@redhat.com> - 4.10.4-6
changelog:
  - resolves: #1753254 - Fix trusted domain enumeration in windind caused
                         a Active Directory update


author: Isaac Boukris <iboukris@redhat.com> - 4.10.4-7
changelog:
  - resolves: #1657428 - Fix spnego downgrade
  - resolves: #1663064 - Fix net ads join in hardened environments


author: Andreas Schneider <asn@redhat.com> - 4.10.4-11
changelog:
  - resolves: #1797560 - Fix Kerberos authentication with trusted domains
  - resolves: #1797561 - Fix smbclient mkdir log spam
  - resolves: #1797562 - Fix client tools log spam about messaging


author: Andreas Schneider <asn@redhat.com> - 4.6.2-7
changelog:
  - resolves: #1461336 - Fix smbclient username parsing
  - resolves: #1460937 - Fix username normalization with winbind


author: Andreas Schneider <asn@redhat.com> - 4.6.2-10
changelog:
  - resolves: #1484423 - Require at least krb5 version 1.15.1
  - resolves: #1484713 - Fix password changes for users via smbpasswd
  - resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                         returned errors


author: Andreas Schneider <asn@redhat.com> - 4.7.0-1
changelog:
  - resolves: #1470048 - Rebase Samba to version 4.7.0
  - resolves: #1335710 - Improve performance of smbd for a lot
                         of new client connections


author: Andreas Schneider <asn@redhat.com> - 4.7.0-3
changelog:
  - related: #1470048 - Fix dependency issues
  - resolves: #1486318 - Move /var/lib/samba/lock to common package
  - resolves: #1497162 - Fix smbcacls command line password handling


author: Andreas Schneider <asn@redhat.com> - 4.7.1-3
changelog:
  - resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                         correctly
  - resolves: #1495490 - Fix client rename over SMB2
  - resolves: #1510598 - Fix client volume cmd over SMB2


author: Andreas Schneider <asn@redhat.com> - 4.7.1-5
changelog:
  - resolves: #1505940 - Fix 'net ads keytab list'
  - resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                         faster


author: Andreas Schneider <asn@redhat.com> - 4.7.1-6
changelog:
  - resolves: #1476153 - Handle SMB echo responses more gracefully
  - resolves: #1523212 - Fix SMB2 client read-after-free issue


author: Andreas Schneider <asn@redhat.com> - 4.7.1-7
changelog:
  - resolves: #1581369 - Fix segfault updating dns during 'net ads join'
  - resolves: #1581373 - Fix segfault during NT1 session setup
  - resolves: #1581376 - Fix segfault in keytab handling
  - resolves: #1581377 - Fix segfault in smbclient dfsgetinfo


author: Andreas Schneider <asn@redhat.com> - 4.8.1-1
changelog:
  - related: #1558560 - Rebase to newer Samba version
  - resolves: #1567896 - Fix possible crash if secrets db is emtpy
  - resolves: #1570020 - Fix a crash in smbd when dfsgetinfo is called


author: Andreas Schneider <asn@redhat.com> - 4.8.1-3
changelog:
  - resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
  - resolves: #1525511 - Fix idmap_rid dependency on trusted domain list


author: Andreas Schneider <asn@redhat.com> - 4.8.3-1
changelog:
  - related: #1558560 - Rebase to Samba version 4.8.3
  - resolves: #1579398 - Add winbind localauth krb5 plugin


author: Andreas Schneider <asn@redhat.com> - 4.8.3-4
changelog:
  - resolves: #1614132 - Fix delete-on-close after smb2_find
  - resolves: #1614265 - Fix CVE-2018-1139
  - resolves: #1614269 - Fix CVE-2018-10858


author: Andreas Schneider <asn@redhat.com> - 4.9.1-1
changelog:
  - resolves: #1649434 - Update to version 4.9.1
  - resolves: #1648852 - Fix out of bound array access in ctdb
  - resolves: #1647960 - Fix segfault in the debug system with hardended build
  - resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
  - resolves: #1650452 - Add smbc_setOptionProtocols()
  - resolves: #1659513 - Fix testparm/pdbedit crash
  - resolves: #1529301 - Added new 'net ads spn' command
  - resolves: #1595277 - Fix manpage for 'net ads lookup'
  - resolves: #1600274 - Fix vfs_audit log which does not show full path names
  - resolves: #1623140 - Fix handling the 'disable netbios' option
  - resolves: #1624227 - Connect to spoolss with the correct version information
  - resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
  - resolves: #1579401 - Implement 'net ads leave --keep-account'
  - resolves: #1624227 - Fix spoolss client operations against newer Windows
                         versions
  - resolves: #1656405 - Fix looking up local system accounts


author: Andreas Schneider <asn@redhat.com> - 4.9.1-2
changelog:
  - resolves: #1674403 - Fix panic when setting 'force group' on a share with
                         an active connections
  - resolves: #1670720 - Fix installation of samba-python
  - resolves: #1669476 - Fix user lookup via UPN


author: Andreas Schneider <asn@redhat.com> - 4.9.1-3
changelog:
  - resolves: #1479451 - Fix 'net' command auth with Kerberos
  - resolves: #1686158 - Fix printing with CUPS
  - resolves: #1662408 - Fix username/password printing with CUPS


author: Andreas Schneider <asn@redhat.com> - 4.9.1-4
changelog:
  - resolves: #1690222 - Fix --max-protocol documentation of smbclient
  - resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
  - resolves: #1696524 - Fix CVE-2019-3880


author: Andreas Schneider <asn@redhat.com> - 4.9.1-8
changelog:
  - resolves: #1754838 - Fix username/password auth with smbspool
  - resolves: #1754835 - Fix builtin groups creation.


author: Andreas Schneider <asn@redhat.com> - 4.9.1-9
changelog:
  - resolves: #1759445 - Fix trusted domain enumeration in windind caused
                         a Active Directory update


author: Tim Waugh <twaugh@redhat.com> - 1:1.6.3-20
changelog:
  - Don't start jobs while cancelling others (bug #1233002, STR #4648).
  - Fix slow resume of jobs after restart (bug #1233006, STR #4646).
  - Fixes for post-install scriptlet (bug #1235035).


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-23
changelog:
  - 1257051 - cups-lpd man page incomplete
  - 1275790 - spec file includes triggers with overlapping version intervals
  - 1259770 - permission changed after writing to /etc/cups/subscriptions.conf


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-25
changelog:
  - 1297035 - gnome-settings-daemon leaks file descriptors
  - 1257751 - Email notifications ("lp -m") for printer classes don't work


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-30
changelog:
  - 1386751 - cups-lpd program did not catch all legacy usage of ISO-8859-1
  - 1441860 - CUPS may fail to start if NIS groups are used


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-32
changelog:
  - 1468747 - CUPS failover backend allows multiple jobs to get stuck in failed queue
  - 1469816 - Failover backend won't fail-over if the printer is disconnected


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-33
changelog:
  - 1466497 - Remove weak SSL/TLS ciphers from CUPS
  - 1434153 - CUPS print jobs show incorrect number under the "pages" column


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-39
changelog:
  - resolve covscan issue found in fix for 1570480
  - automake sometimes fails to generate correct macros - so force autoconf


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44
changelog:
  - 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
  - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
  - 1753809 - Settings in ~/.cups/client.conf aren't used


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46
changelog:
  - 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue


author: Tim Waugh <twaugh@redhat.com> - 1.0.35-16
changelog:
  - Applied upstream patch to fix BrowseAllow parsing issue
    (CVE-2014-4338, bug #1091568).
  - Applied upstream patch for cups-browsed DoS via
    process_browse_data() out-of-bounds read (CVE-2014-4337,
    bug #1111510).


author: Tim Waugh <twaugh@redhat.com> - 1.0.35-18
changelog:
  - Fix segfault in texttopdf filter (bug #1194263).
  - Improve cups-browsed efficiency (bug #1191691).
  - Fetch printer descriptions with cups-browsed (bug #1223719).
  - Fix cups-browsed "_" handling for printer names (bug #1167408).


author: Tim Waugh <twaugh@redhat.com> - 1.0.35-21
changelog:
  - Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
    CVE-2015-3258, CVE-2015-3279).


author: EL Errata <el-errata_ww@oracle.com> - 1.0.35-26.0.1
changelog:
  - Fixes [Orabug: 29163824] source indentation not following convention
  - 28265099 - header/footer not being printed in banner page


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28
changelog:
  - 1816109 - Queues are not cleaned up after stopping cups-browsed
  - 1811190 - cups-browsed leaks memory


author: EL Errata <el-errata_ww@oracle.com> - 1.0.35-28.0.1
changelog:
  - Fix memory leak problem [Orabug: 30574125]
  - Fixes [Orabug: 29163824] source indentation not following convention
  - 28265099 - header/footer not being printed in banner page


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-33
changelog:
  - fix re-using connections with wrong client cert (CVE-2016-5420)
  - fix TLS session resumption client cert bypass (CVE-2016-5419)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-34
changelog:
  - acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
    (required by the fix for CVE-2016-5419)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-37
changelog:
  - fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
  - handle cookies with numerical IPv6 address (#1341503)
  - make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
  - curl -E: allow to escape ':' in cert nickname (#1376062)
  - run automake in %prep to avoid patching Makefile.in files from now on


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-43
changelog:
  - curl --socks5-{basic,gssapi}: control socks5 auth (#1409208)
  - nss: fix a memory leak when CURLOPT_CRLFILE is used (#1427883)
  - nss: do not leak PKCS #11 slot while loading a key (#1444860)
  - nss: fix a possible use-after-free in SelectClientCert() (#1473158)


author: Kamil Dudka <kdudka@redhat.com> - 7.29.0-48
changelog:
  - fix RTSP bad headers buffer over-read (CVE-2018-1000301)
  - fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
  - fix LDAP NULL pointer dereference (CVE-2018-1000121)
  - fix RTSP RTP buffer over-read (CVE-2018-1000122)
  - http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
  - doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
  - update certificates in the test-suite because they expire soon (#1572723)


author: Kamil Dudka <kdudka@redhat.com> - 7.29.0-50
changelog:
  - remove dead code, detected by Coverity Analysis
  - remove unused variable, detected by GCC and Clang


author: Livy Ge <livy.ge@oracle.com> - 7.29.0-51.0.1.el7_6.3
changelog:
  - Security Fixes [OraBug: 28939992]
  - CVE-2016-8615 cookie injection for other servers (https://curl.haxx.se/docs/CVE-2016-8615.html)
  - CVE-2016-8616 case insensitive password comparison (https://curl.haxx.se/docs/CVE-2016-8616.html)
  - CVE-2016-8617 OOB write via unchecked multiplication (https://curl.haxx.se/docs/CVE-2016-8617.html)
  - CVE-2016-8618 double-free in curl_maprintf (https://curl.haxx.se/docs/CVE-2016-8618.html)
  - CVE-2016-8619 double-free in krb5 code (https://curl.haxx.se/docs/CVE-2016-8619.html)
  - CVE-2016-8621 curl_getdate read out of bounds (https://curl.haxx.se/docs/CVE-2016-8621.html)
  - CVE-2016-8622 URL unescape heap overflow via integer truncation (https://curl.haxx.se/docs/CVE-2016-8622.html)
  - CVE-2016-8623 Use-after-free via shared cookies (https://curl.haxx.se/docs/CVE-2016-8623.html)
  - CVE-2016-8624 invalid URL parsing with # (https://curl.haxx.se/docs/CVE-2016-8624.html)


author: Kamil Dudka <kdudka@redhat.com> - 7.29.0-52
changelog:
  - prevent curl --rate-limit from hanging on file URLs (#1281969)
  - fix NTLM password overflow via integer overflow (CVE-2018-14618)
  - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
  - backport options to force TLS 1.3 in curl and libcurl (#1672639)
  - prevent curl --rate-limit from crashing on https URLs (#1683292)


author: Lans Hung <lans.hung@oracle.com> - 7.29.0-54.0.5.el7_7.2
changelog:
  - Fix TFTP small blocksize heap buffer overflow (https://curl.haxx.se/docs/CVE-2019-5482.html)[CVE-2019-5482][Orabug:30568724]


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 7.29.0-57.0.1
changelog:
  - Fix TFTP small blocksize heap buffer overflow (https://curl.haxx.se/docs/CVE-2019-5482.html)[CVE-2019-5482][Orabug: 30568724]
  - Security Fixes [OraBug: 28939992]
  - CVE-2016-8615 cookie injection for other servers (https://curl.haxx.se/docs/CVE-2016-8615.html)
  - CVE-2016-8616 case insensitive password comparison (https://curl.haxx.se/docs/CVE-2016-8616.html)
  - CVE-2016-8617 OOB write via unchecked multiplication (https://curl.haxx.se/docs/CVE-2016-8617.html)
  - CVE-2016-8618 double-free in curl_maprintf (https://curl.haxx.se/docs/CVE-2016-8618.html)
  - CVE-2016-8619 double-free in krb5 code (https://curl.haxx.se/docs/CVE-2016-8619.html)
  - CVE-2016-8621 curl_getdate read out of bounds (https://curl.haxx.se/docs/CVE-2016-8621.html)
  - CVE-2016-8622 URL unescape heap overflow via integer truncation (https://curl.haxx.se/docs/CVE-2016-8622.html)
  - CVE-2016-8623 Use-after-free via shared cookies (https://curl.haxx.se/docs/CVE-2016-8623.html)
  - CVE-2016-8624 invalid URL parsing with # (https://curl.haxx.se/docs/CVE-2016-8624.html)


author: EL Errata <el-errata_ww@oracle.com> - 7.29.0-59.0.1
changelog:
  - Fix TFTP small blocksize heap buffer overflow (https://curl.haxx.se/docs/CVE-2019-5482.html)[CVE-2019-5482][Orabug: 30568724]
  - Security Fixes [OraBug: 28939992]
  - CVE-2016-8615 cookie injection for other servers (https://curl.haxx.se/docs/CVE-2016-8615.html)
  - CVE-2016-8616 case insensitive password comparison (https://curl.haxx.se/docs/CVE-2016-8616.html)
  - CVE-2016-8617 OOB write via unchecked multiplication (https://curl.haxx.se/docs/CVE-2016-8617.html)
  - CVE-2016-8618 double-free in curl_maprintf (https://curl.haxx.se/docs/CVE-2016-8618.html)
  - CVE-2016-8619 double-free in krb5 code (https://curl.haxx.se/docs/CVE-2016-8619.html)
  - CVE-2016-8621 curl_getdate read out of bounds (https://curl.haxx.se/docs/CVE-2016-8621.html)
  - CVE-2016-8622 URL unescape heap overflow via integer truncation (https://curl.haxx.se/docs/CVE-2016-8622.html)
  - CVE-2016-8623 Use-after-free via shared cookies (https://curl.haxx.se/docs/CVE-2016-8623.html)
  - CVE-2016-8624 invalid URL parsing with # (https://curl.haxx.se/docs/CVE-2016-8624.html)
  - Drop 1001-tftp-Alloc-maximum-blksize-and-use-default-unless-OA.patch


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 7.29.0-59.0.3.el7_9.2
changelog:
  - load CA certificates even with --insecure [Orabug: 32836997]
  - Fix TFTP small blocksize heap buffer overflow (https://curl.haxx.se/docs/CVE-2019-5482.html)[CVE-2019-5482][Orabug: 30568724]
  - Security Fixes [OraBug: 28939992]
  - CVE-2016-8615 cookie injection for other servers (https://curl.haxx.se/docs/CVE-2016-8615.html)
  - CVE-2016-8616 case insensitive password comparison (https://curl.haxx.se/docs/CVE-2016-8616.html)
  - CVE-2016-8617 OOB write via unchecked multiplication (https://curl.haxx.se/docs/CVE-2016-8617.html)
  - CVE-2016-8618 double-free in curl_maprintf (https://curl.haxx.se/docs/CVE-2016-8618.html)
  - CVE-2016-8619 double-free in krb5 code (https://curl.haxx.se/docs/CVE-2016-8619.html)
  - CVE-2016-8621 curl_getdate read out of bounds (https://curl.haxx.se/docs/CVE-2016-8621.html)
  - CVE-2016-8622 URL unescape heap overflow via integer truncation (https://curl.haxx.se/docs/CVE-2016-8622.html)
  - CVE-2016-8623 Use-after-free via shared cookies (https://curl.haxx.se/docs/CVE-2016-8623.html)
  - CVE-2016-8624 invalid URL parsing with # (https://curl.haxx.se/docs/CVE-2016-8624.html)
  - Drop 1001-tftp-Alloc-maximum-blksize-and-use-default-unless-OA.patch


author: Christian Heimes <cheimes@redhat.com> - 0.3.0-1
changelog:
  - Update to custodia 0.3.0
  - Vendor backports.configparser 3.5.0b2
  - Fix compatibility issues with old setuptools
  - Add tmpfiles.d config for /run/custodia


author: Christian Heimes <cheimes@redhat.com> - 0.3.0-4
changelog:
  - Fix whitespace handling in URLs
  - Use upstream patches to replace patches for setuptools and configparser
  - resolves: #1436763


author: Christian Heimes <cheimes@redhat.com> - 0.3.1-1
changelog:
  - Rebase to Custodia 0.3.1
  - Vendor custodia.ipa 0.1.0
  - Vendor backports.configparser 3.5.0 final
  - related: #1403214


author: Christian Heimes <cheimes@redhat.com> - 0.3.1-3
changelog:
  - Remove custodia user from tmpfiles.d, resolves #1460735
  - Add missing systemd hooks for service and socket files
  - Drop dependency on python-mock and skip mock tests in check block,
    resolves #1447426


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-29
changelog:
  - Correct handling systemd service (bug #737264)
  - Allow configuration with automake-1.13.1
  - Allow to stop all server instances by stopping cvs.target


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-30
changelog:
  - Fix texinfo documentation to work with texinfo-5.1 (bug #970716)
  - Do not crash if crypt(3) returns NULL (bug #966497)


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-31
changelog:
  - Allow CVS server to use any Kerberos key with cvs service name. This reverts
    canonicalization on clite side introduced with 1.11.23-20 and replaces it
    with a more benevolent key selection on server side. (bug #722972)


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-32
changelog:
  - Harden build for cvs in server role (bug #983164)
  - Add cvs.sh(5) manual page (bug #983164)
  - Add cvs.csh(5) manual page (bug #983164)


author: Jakub Jelen <jjelen@redhat.com> 2.1.26-18
changelog:
  - Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
  - Add and document ability to run saslauth as non-root user (#1188065)
  - Support AIX SASL GSSAPI (#1174322)
  - Update client library to be thread safe (#1147659)
  - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
  - Don't use unnecessary quotes around user description (#1082564)
  - Fix confusing message when config file has typo (#1022479)


author: Jay Fenlason <fenlason@redhat.com> 2.0.25-5.2.el6
changelog:
  - Actually install the signal-handler patch
    Resolves: bz667742	Error mapping bug in dapls_wait_comp_channel


author: Doug Ledford <dledford@redhat.com> - 2.0.32-1
changelog:
  - Update to latest upstream version (2.0.25 -> 2.0.32)
  - Remove 4 patches folded into upstream release
  - Rebuild against new libibverbs and librdmacm
  - Update exclusive arch to accommodate i686 arch
  - Related: bz724896, bz725016


author: Doug Ledford <dledford@redhat.com> - 2.0.34-1
changelog:
  - Update to latest upstream version
  - Rebuild against new libibverbs (FDR link speed capable and IBoE enabled)
  - Related: bz750609


author: Jay Fenlason <fenlason@redhat.com> - 2.0.39-1
changelog:
  - Upgrade to latest version
    Resolves: rhbz#985117
  - Fix a compile problem with NULL not being defined
    Resolves: rhbz#1029509


author: Doug Ledford <dledford@redhat.com> - 2.0.39-5
changelog:
  - Bump and rebuild after retagging the latest libibverbs and librdmacm
    into the build root
  - Related: bz1123996


author: Doug Ledford <dledford@redhat.com> - 2.1.5-1
changelog:
  - Update to latest upstream release
  - Include support for s390x
  - Include support for aarch64
  - Drop old fix for NULL not defined, upstream has it resolved
  - Resolves: bz1182180, bz1197216, bz1172462, bz1044727, bz1056487


author: Jeff Moyer <jmoyer@redhat.com> - 53.1-4
changelog:
  - Fix up duplicate "-v" documentation in man page
  - Fix bogus test in invalidate_namespace_options
  - Resolves: bz#1350404 bz#1271425


author: Jeff Moyer <jmoyer@redhat.com> - 56-1
changelog:
  - Rebase to upstream version 56
  - Default to 4k alignment for device dax
  - Resolves: bz#1384873 bz#1384642 bz#1349233 bz#1357451


author: Jeff Moyer <jmoyer@redhat.com> - 56-2
changelog:
  - Update documentation to reflect 4k alignment
  - Add support for the MSFT family of DSM functions
  - Resolves: bz#1440902 bz#1446689


author: Jeff Moyer <jmoyer@redhat.com> - 58.2-1
changelog:
  - rebase to v58.2
  - remove patches that were backported from later versions
  - we now support >4k faults, so remove rhel-only patches
  - add libpmem dependency, and gate it on x86_64
  - pull in static checker fix for uncheck sscanf result
  - fix up use of uninitialized variable
  - Related: bz#1457566 bz#1471807 bz#1456954


author: Tianyue Lan <tianyue.lan@oracle.com> - 58.2-3.0.2
changelog:
  - The exit code for multi-dax wasn't being set correctly 
    to distinguish a skipped test from a failure. Fix it by setting rc to 77
    prior to probing for nfit_test, and to 1 after it. [orabug 28001850]


author: Jeff Moyer <jmoyer@redhat.com> - 60.3-2.1
changelog:
  - Remove the btt.rules udev rule file.  This was fixed in-kernel. (Jeff Moyer)
  - Related: bz#1585122


author: Jeff Moyer <jmoyer@redhat.com> - 62-1
changelog:
  - Rebase to v62 (Jeff Moyer)
    - a new monitor command / daemon
    - an ndctl udev rule for recording the unsafe shutdown count
    - smart error injection
    - create-namespace fix for fragmented namespaces
  - Resolves: bz#1610649 bz#1611833 bz#1456320


author: Jeff Moyer <jmoyer@redhat.com> - 64.1-1
changelog:
  - Rebase to v64.1 (Jeff Moyer)
    - add security commands
    - fix broken udev rule for dirty shutdown count
  - Resolves: bz#1634348 bz#1635441


author: Jeff Moyer <jmoyer@redhat.com> - 65.1.el7
changelog:
  - Rebase to v65
    - clear-errors: new command to clear errors on a namespace
    - monitor: remove the requirement of a default config
    - sanitize-dimm: allow a zero-key for secure-erase
    - sanitize-dimm: preserve keys after an overwrite
    - load-keys: fix for non-TPM keys
  - Fix test harness to run against the rhel7 test kernel modules
  - Related: rhbz#1722481


author: Jeff Moyer <jmoyer@redhat.com> - 65.2.el7
changelog:
  - Remove 'daxctl migrate-device-model' command.  We won't
    support hot-plugging device dax into the memory hierarchy
    on RHEL 7.
  - Resolves: rhbz#1734153


author: Jeff Moyer <jmoyer@redhat.com> - 65.3.el7
changelog:
  - modify nvdimm-security.conf touse '&&' instead of ';'
    Without this change, the module doesn't load
  - Resolves: rhbz#1725405


author: Rex Dieter <rdieter@fedoraproject.org> - 1.1.1-3
changelog:
  - python3-dbus subpkg (#892474)
  - (main) Provides: python-dbus
  - BR: python-docutils
  - .spec cosmetics
  - skip failed tests on rawhide (#913936)


author: Colin Walters <walters@redhat.com> - 1.1.1-9
changelog:
  - Move modules to libdir to avoid multilib conflicts
  - And comment out test suite, since we were not actually
    failing if it failed, but it trips up an rpmdiff check
    on the output of the suite.
  - Resolves: #1076411


author: Marek Kasik <mkasik@redhat.com> - 0.26.0-1
changelog:
  - Update to 0.26.0
  - Remove editor subpackage
  - Return libdbus-1 library (not header or pkgconfig files)
  - Resolves: #1386841


author: Marek Kasik <mkasik@redhat.com> - 0.26.0-3
changelog:
  - Check mtimes of files in /etc/dconf/db/*.d/ directories
  - when running "dconf update"
  - Resolves: #1626372


author: Marek Kasik <mkasik@redhat.com> - 0.28.0-3
changelog:
  - Check mtimes of files in /etc/dconf/db/*.d/ directories
  - when running "dconf update"
  - Resolves: #1570569


author: Marek Kasik <mkasik@redhat.com> - 3.22.3-2
changelog:
  - Import dconf-editor package from Fedora 25
  - Add Conflicts tag
  - Version BuildRequires
  - Update License field
  - Resolves: #1388931


author: Jonathan Dieter <jdieter@lesbg.com> - 3.6-0.13.20130520git
changelog:
  - Clearer error message when applydeltaiso fails (#825428) (Thanks, John!)
  - Add details to applydeltaiso and makedeltaiso man pages (#569499)
  - Add fragiso man page to deltaiso package (#569776)
  - Fix section for applydeltaiso (#548970)
  - Add arch-specific requires (#677060)


author: Jonathan Dieter <jdieter@lesbg.com> - 3.6-1
changelog:
  - Update to 3.6 which, among other things, fixes a bug when applying a deltarpm
    to create a gzip-compressed rpm using full compression


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.171-1
changelog:
  - Fix dmstats and dmfilemapd permissions.
  - Fix memory warnings by using mempools for command definition processing.
  - Fix running commands from a script file.
  - Adjust pvresize/pvcreate messages and prompt if underlying device size
    differs.
  - Preserve region size on raid1 image count changes.
  - Handle insufficient space on RAID takeover.
  - Raise mirror/raid default regionsize to 2MiB.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.171-2
changelog:
  - Stop using '--yes' mode when fsadm runs without terminal.
  - Extend validation of filesystems resized by fsadm.
  - Enhance lvconvert automatic settings of possible (raid) LV types.
  - Allow lvchange to change properties on a thin pool data sub LV.
  - Fix lvcreate extent percentage calculation for mirrors.
  - Don't reinstate still-missing devices when correcting inconsistent metadata.
  - Properly handle subshell return codes in fsadm.
  - Disallow cachepool creation with policy cleaner and mode writeback.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.171-4
changelog:
  - Converting linear to raid1 using "recover" not "resync".
  - Print a warning about in-use PVs with no VG using them.
  - Disable automatic clearing of PVs that look like in-use orphans.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.171-5
changelog:
  - Improve lvcreate --cachepool arg validation.
  - Limit maximal size of thin-pool for specific chunk size.
  - Accept truncated files in calls to dm_stats_update_regions_from_fd().


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.171-6
changelog:
  - Reenable conversion of data and metadata thin-pool volumes to raid.
  - Improve handling of RAID status in lvs.
  - Disable RAID reshape/take-over in a cluster or when snapshot exists.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.176-1
changelog:
  - Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  - Do not allow storing VG metadata with LV without any segment.
  - Fix printed message when thin snapshot was already merged.
  - Remove created spare LV when creation of thin-pool failed.
  - Avoid reading ignored metadata when MDA gets used again.
  - Fix detection of moved PVs in vgsplit. (2.02.175)
  - Ignore --stripes/--stripesize on RAID takeover
  - Disallow creation of snapshot of mirror/raid subLV (was never supported).
  - Keep Install section only in *.socket systemd units.
  - Improve used paths for generated systemd units and init shells.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.176-4
changelog:
  - Avoid importing persistent filter in vgscan/pvscan/vgrename.
  - Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  - Do not print error when clvmd cannot find running clvmd.
  - Prevent start of new merge of snapshot if origin is already being merged.
  - Suppress integrity encryption keys in 'table' output unless --showkeys supplied.
  - Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  - Deactivate sub LVs when removing unused cache-pool.
  - Do not take backup with suspended devices.
  - Avoid RAID4 activation on incompatible kernels under all circumstances.
  - Reject conversion request to striped/raid0 on 2-legged raid4/5.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.176-5
changelog:
  - boom: Update man page.
  - boom: Allow users to disable grub2 configuration.
  - boom: Do not add snapshots submenu unless entries exist.
  - boom: Use fdatasync() for profile and entry files.
  - Fix lvmlockd to use pool lock when accessing _tmeta volume.
  - Report expected sanlock_convert errors only when retries fail.
  - Avoid blocking in sanlock_convert on SH to EX lock conversion.
  - Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  - Allow extending of raid LVs created with --nosync after a failed repair.
  - Merge adjacent segments when pvmove is finished.
  - Ensure very large numbers used as arguments are not casted to lower values. 
  - Enhance reading and validation of options stripes and stripes_size.
  - Fix printing of default stripe size when user is not using stripes.
  - Activation code for pvmove automatically discovers holding LVs for resume.
  - Make a pvmove LV locking holder.
  - Enhance activation code to automatically suspend pvmove participants.
  - Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  - Correct the steps to change lock type in lvmlockd man page.
  - Retry lock acquisition on recognized sanlock errors.
  - Fix lock manager error codes in lvmlockd.
  - Check raid reshape flags in vg_validate().
  - Add support for pvmove of cache and snapshot origins.
  - Ehnance pvmove locking.
  - Deactivate activated LVs on error path when pvmove activation fails.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.177-1
changelog:
  - boom: Add missing profiles
  - Avoid non-exclusive activation of exclusive segment types.
  - Fix trimming sibling PVs when doing a pvmove of raid subLVs.
  - Preserve exclusive activation during thin snaphost merge.
  - Check array boundaries in allocation tag processing.
  - When writing metadata, consistently skip mdas marked as failed.
  - Reduce checks for active LVs in vgchange before background polling.
  - Ensure _node_send_message always uses clean status of thin pool.
  - Activation tree of thin pool skips duplicated check of pool status.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.177-2
changelog:
  - boom: Better error handling.
  - boom: Warn user when grub2 integration is missing.
  - Reenable clustered pvmove.


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.177-3
changelog:
  - boom: Handle LVs passed in --root-device.
  - boom: Allow /dev/VG/LV notation for --root-lv.
  - boom: Detection of invalid root devices.
  - boom: Support long options without dash separator.
  - Add deprecation warning for mirrored mirror log.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-102
changelog:
  - Add 0207-UP-add-libmpathcmd.patch
    * New shared library, libmpathcmd, that sends and receives messages from
      multipathd. device-mapper-multipath now uses this library internally.
  - Add 0208-UPBZ-1430097-multipathd-IPC-changes.patch
    * validation that modifying commands are coming from root.
  - Add 0209-UPBZ-1430097-multipath-C-API.patch
    * New shared library. libdmmp, that presents the information from multipathd
      in a structured manner to make it easier for callers to use
  - Add 0210-RH-fix-uninstall.patch
    * Minor compilation fixes
  - Make 3 new subpackages
    * device-mapper-multipath-devel, libdmmp, and libdmmp-devel. libmpathcmd
      and libmpathprio are in device-mapper-multipath-libs and
      device-mapper-multipath-devel. libdmmp is in its own subpackages
  - Move libmpathprio devel files to device-mapper-multipath-devel
  - Resolves: bz #1430097


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-104
changelog:
  - Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
  - Modify 0209-UPBZ-1430097-multipath-C-API.patch
    * change _pkgconfdir and fixed double-closing fd
  - Add 0211-RH-strlen-fix.patch
    * checks that variables are not NULL before passing them to strlen
  - Related: bz #1430097


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-107
changelog:
  - Modify 0197-RHBZ-1394059-max-sectors-kb.patch
    * Make multipath only change max_sectors_kb on creates. On reloads, it
      just makes sure the new path matches the multipath device.
  - Refresh 0198-RHBZ-1372032-detect-path-checker.patch
  - Refresh 0201-RHBZ-1403552-silence-warning.patch
  - Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
  - Refresh 0207-UP-add-libmpathcmd.patch
  - Refresh 0212-RHBZ-1431562-for-read-only.patch
  - Resolves: bz #1394059


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-109
changelog:
  - Add 0214-RHBZ-1392115-set-paths-not-ready.patch
    * Set ENV{SYSTEMD_READY}="0" on multipath path devices
  - Resolves: bz #1392115


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-110
changelog:
  - Add 0215-RHBZ-1444194-fix-check-partitions.patch
    * make sure kpartx partions match the correct device
  - Add 0216-RHBZ-1448562-fix-reserve.patch
    * don't join threads that haven't been created
  - Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
    * blacklist db2.* devices
  - Add 0218-RHBZ-1448576-3PAR-config.patch
  - Resolves: bz #1444194, #1448562, #1437329, #1448576


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-111
changelog:
  - Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
    * Incorrect change, and the bug is already fixed.
  - Move 0218-RHBZ-1448576-3PAR-config.patch to
    0217-RHBZ-1448576-3PAR-config.patch
  - Resolves: bz #1448576


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-111.1
changelog:
  - Add 0218-RHBZ-1510837-add-feature-fix.patch
    * handle null feature string
  - Add 0219-RHBZ-1510834-unpriv-sgio.patch
    * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
      and paths
  - Add 0220-RHBZ-1510834-prkey.patch
    * allow setting reservation_key to "file" to set and read keys from
      prkey_file. Also add new multipathd commands to modify the prkey file.
  - Add 0221-RHBZ-1510839-nimble-config.patch
  - Resolves: bz #1510834, #1510837, #1510839


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-111.2
changelog:
  - Modify Add 0220-RHBZ-1510834-prkey.patch
    * Improve error checking for mpathpersist
  - Resolves: bz #1510834


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-112
changelog:
  - Modify 0191-RHBZ-1169168-disable-changed-paths.patch
    * man page fixup
  - Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
    * man page fixup
  - Modify 0205-RHBZ-1416569-reset-stats.patch
    * man page fixup
  - Add 0218-RHBZ-1459370-add-feature-fix.patch
    * handle null feature string
  - Add 0219-RHBZ-1448970-fix-resize.patch
    * if the resize fails, try to resume again with the old table.
  - Add 0220-RHBZ-1448223-fix-kpartx.patch
    * gracefully fail when run on something other than a file or block device
  - Add 0221-RH-harden-files.patch
    * change build parameters to use position independent code
  - Add 0222-RHBZ-1457288-fix-show-maps-json.patch
    * handle running "show maps json" with no multipath devices present
  - Add 0223-RHBZ-1452210-unpriv-sgio.patch
    * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
      and paths
  - Add 0224-RHBZ-1452210-prkey.patch
    * allow setting reservation_key to "file" to set and read keys from
      prkey_file. Also add new multipathd commands to modify the prkey file.
  - Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-113
changelog:
  - Modify 0224-RHBZ-1452210-prkey.patch
    * fix errow with telling multipathd to set prkeys
  - Add 0225-RH-udevdir.patch
    * fix rpmdiff complaint about udev rules installation
  - Resolves: bz #1452210


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-114
changelog:
  - Add 0226-RH-allow-overrides-section.patch
    * This is a dummy section that exists to help the transition to RHEL8
  - Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
  - Add 0228-RHBZ-1464634-hauwei-config-update.patch
  - Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
    * Do poll first, so udev_monitor_receive_device doesn't return error when
      there is no uevent
  - Add 0230-UP-allow-invalid-creates.patch
    * Allow creation of devices with no valid paths.
  - Add 0231-RHBZ-1458852-delay-readying.patch
    * Add ghost_delay configuration option to delay device activation when only
      ghost paths exist.
  - Add 0232-RHBZ-1456955-property-blacklist.patch
    * Add the "property" blacklist type.
  - Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-115
changelog:
  - Add 0233-RHBZ-1451852-1482629-nimble-config.patch
  - Add 0234-RHBZ-1500109-doc-typo.patch
  - Remove old triggerun scriptlet (bz1470384)
  - Resolves: bz #1451852, #1470384, #1482629, #1500109


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-116
changelog:
  - Add 0235-RHBZ-1480638-NVMe-support.patch
    * adds support for multipathing NVMe devices
  - Resolves: bz #1480638


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-117
changelog:
  - Modify 0235-RHBZ-1480638-NVMe-support.patch
    * remove overly-restrictive uevent filtering
  - Resolves: bz #1480638


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-118
changelog:
  - Modify 0224-RHBZ-1452210-prkey.patch
    * Improve error checking for mpathpersist
  - Resolves: bz #1452210


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-119.1
changelog:
  - Add 0237-RHBZ-1607749-add-transport-blacklist.patch
    * and new blacklist option, "protocol"
  - Resolves: bz #1607749


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-120
changelog:
  - Add 0237-RHBZ-1526876-show-sysfs-state.patch
    * Correctly get sysfs state for multipath -l output
  - Add 0238-RHBZ-1508483-mpathconf-info.patch
  - Add 0239-RHBZ-1544958-client-timeout.patch
    * increase maximum multipathd client reply timeout to 60 seconds
  - Add 0240-UPBZ-1568902-id_size.patch
    * increase maximum size of product and revision strings to deal with nvme
  - Add 0241-RHBZ-1554516-show-path-failures.patch
    * add a path failures multipathd path format wildcard
  - Add 0242-RHBZ-1541116-all-tg-pt.patch
    * add all_tg_pt configuration option to make mpathpersist send only
      one registration per host
  - Add 0243-RHBZ-1498724-save-persist-options.patch
    * allow ":aptpl" to be added to the reservation_key to fix multipathd
      aptpl persistent reservation handling
  - Add 0244-RHBZ-1562247-remove-rbd.patch
    * remove multipath support for rbd
  - Resolves: bz #1498724, #1508483, #1526876, #1541116, #1544958, #1554516
  - Resolves: bz #1562247, #1568902


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-121
changelog:
  - Add 0245-RHBZ-1584228-fix-readsector0_size.patch
    * correctly figure IO size
  - Add 0246-RHBZ-1593459-add-transport-blacklist.patch
    * and new blacklist option, "protocol"
  - Add 0247-RHBZ-1585824-mpathconf-allow-doc.patch
  - Resolves: bz #1584228, #1585824, #1593459


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-123
changelog:
  - Add 0249-RHBZ-1610263-mpathpersist-max-fds.patch
    * make mpathpersist honor max_fds multipath.conf parameter
  - Resolves: bz #1610263


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-124
changelog:
  - Add 0250-RHBZ-1610867-rescan-change.patch
    * Update multipath devices on change events.
  - Add 0251-RHBZ-1614011-discovery-timeout.patch
  - Add 0252-RHBZ-1623595-cmd-error-status.patch
  - Add 0253-RHBZ-1618549-mix-hw-handler.patch
    * Don't retain attached hw handler when different hw handlers are
      attached to different paths
  - Add 0254-RHBZ-1635819-fix-mpathpersist-crash.patch
  - Add 0255-RHBZ-1638651-marginal-path.patch
    * backport marginal_path options from upstream
  - Resolves: bz #1610867, #1614011, #1618549, #1623595, #1635819, #1638651


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125
changelog:
  - Modify 0250-RHBZ-1610867-rescan-change.patch
    * Fix memory Leak
  - Modify 0255-RHBZ-1638651-marginal-path.patch
    * Fix NULL dereference
  - Refresh 0252-RHBZ-1623595-cmd-error-status.patch
  - Resolves: bz #1610867, #1638651


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127
changelog:
  - Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
    * retry adding paths if they couldn't be opened initially
  - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
    * don't check if dm devices are multipath paths
  - Add 0258-RHBZ-1634183-ANA-prioritizer.patch
    * Add NVMe ANA path prioritizer
  - Resolves: bz #1634183, #1672175, #1679556


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128
changelog:
  - Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
    * minor change
  - Add 0259-RHBZ-1701604-fix-nr-active.patch
    * recalculate the number of active paths whenever a path is checked
  - Add 0260-RHBZ-1634183-prio-fixes.patch
  - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
    * ignore blacklisted paths in mpathpersist
  - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
    * allow forced reloads even if there are no reusable paths
  - Add 0263-RHBZ-1686708-nvme-hcil.patch
    * make nvme ids work like in upstream
  - Add 0264-RHBZ-1699441-de-series-config.patch
  - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129
changelog:
  - Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
    * only grab path information from necessary devices, and allow batch files.
  - Add 0266-RHBZ-1696817-fix-emc-checker.patch
    * fix detection of inactive snapshots
  - Add 0267-RHBZ-1661156-powermax-config.patch
  - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
    * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
  - Resolves: bz #1661156, #1696817, #1721855


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130
changelog:
  - Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
    * Fix issues in the mpathpersist speedup code
  - Resolves: bz #1721855


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131
changelog:
  - Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
    * The fix for 1721855 broke 1714506.
  - Resolves: bz #1714506


author: EL Errata <el-errata_ww@oracle.com> - 0.4.9-131.0.1
changelog:
  - Add 0001-multipath-fix-segfault-with-disable_changed_wwids.patch
    * fix segfault with disable_changed_wwids for orabug 29469903 (jianchao.w.wang@oracle.com)


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132
changelog:
  - Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
    * Remove the 256 device limit, when searching loop devices with kpartx
  - Resolves: bz #1804420


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133
changelog:
  - Add 0270-RHBZ-1775481-segfault-fix.patch
    * Fix segfault related to missing dm device tables
  - 0271-RHBZ-1806197-mpathconf-typo.patch
  - Resolves: bz #1775481, #1806197


author: Ritika Srivastava <ritika.srivastava@oracle.com> - 0.4.9-134.0.3
changelog:
  - mpathpersist: Fix Register and Ignore with 0x00 SARK [Orabug: 32696195]
  - mpathpersist: update prkeys file on changing registrations [Orabug: 32696195]


author: David Kubat <david.kubat@oracle.com> - 0.4.9-135.0.1
changelog:
  - mpathpersist: Fix Register and Ignore with 0x00 SARK [Orabug: 32696195]
  - mpathpersist: update prkeys file on changing registrations [Orabug: 32696195]
  - Keep upstream patch 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch 
    * fix segfault with disable_changed_wwids for orabug 29469903 (jianchao.w.wang@oracle.com)


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-0.1.rc5
changelog:
  - New thin_ls command.
  - era_invalidate may be run on live metadata if the --metadata-snap
    option is given.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-2
changelog:
  - Improve documentation and messages on output file preallocation
    when using thin_repair and thin_restore.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc3
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - New thin_show_duplicates command.
  - Add '--skip-mappings' and '--format custom' options to thin_dump.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc6
changelog:
  - Don't open devices as writeable if --clear-needs-check-flag is not set.
  - Fix cache metadata format version 2 superblock packing.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.2-1
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - Fix segfault when dump tools are given a tiny metadata file.
  - Fix -V exiting with 1.
  - Fix thin_check when running on XML dump instead of binary data.
  - Speed up free block searches.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.3-1
changelog:
  - Update to latest bugfix and documentation update release.
  - *_restore tools wipe superblock as a last resort.
  - Add thin_check --override-mapping-root.


author: Pavel Šimerda <psimerda@redhat.com> - 12:4.2.5-48
changelog:
  - Resolves: #1302282 - systemd fails to keep dhcpd running after repeated
    restarts by NetworkManager dispatcher.d script


author: Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-55
changelog:
  - Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
  - Fix syntax error in attr


author: Petr Menšík <pemensik@redhat.com> - 12:4.2.5-74
changelog:
  - Use bind-export-libs package instead of bind99
  - Use isc-config.sh to configure bind libs
  - Change requirement to bind-export-devel
  - Compile with recent bind includes, that does not include isc/util.h


author: Ondrej Kos <okos@redhat.com> - 0.3.0.1-18
changelog:
  - Apply patch to stop generating doxygen timestamps
  - Apply patch to include correct libini_config file


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.0.1-20
changelog:
  - Apply a patch by Dmitri Pal to strip trailing whitespace
  - Resolves: rhbz#1012434 - libiniconfig doesn't trim trailing whitespace


author: Jakub Hrozek <jhrozek@redhat.com> - 0.5.0.1-25
changelog:
  - Resolves: rhbz#1205557 - Include the latest upstream ding-libs release in 7.2
  - Port the SONAME hack


author: Jakub Hrozek <jhrozek@redhat.com> - 0.5.0.1-27
changelog:
  - Re-add the soname hack
  - Resolves: rhbz#1290382 - Rebase ding-libs to the latest available upstream


author: Michal Židek <mzidek@redhat.com> - 0.6.1-29
changelog:
  - Fix rpmdiff failure for 'Binary stripping'
  - Resolves: rhbz#1480270 - Rebase ding-libs to the latest upstream release


author: Michal Židek <mzidek@redhat.com> - 0.6.1-30
changelog:
  - Adopting to use Downstream Helper for bellow BZ backport
  - Related: rhbz#1507607 - ding-libs: libini_config: `ini_config_augment` reports errors on match failure


author: Michal Židek <mzidek@redhat.com> - 0.6.1-31
changelog:
  - Resolves: rhbz#1507607 - ding-libs: libini_config: `ini_config_augment` reports errors on match failure


author: Michal Židek <mzidek@redhat.com> - 0.6.1-32
changelog:
  - Previous change in spec file broke the application of downstream only patch
  - Related: rhbz#1507607 - ding-libs: libini_config: `ini_config_augment` reports errors on match failure


author: Petr Oros <poros@redhat.com> - 1:2.12-6
changelog:
  - Add preliminary support for SMBIOS 64-bit entry point (Mark Salter)
  - Add support for DDR4 memmory


author: Petr Oros <poros@redhat.com> - 1:2.12-9
changelog:
  - dmioem: Decode Acer-specific DMI type 170
  - dmioem: Decode HP-specific DMI types 212 and 219
  - dmioem: Decode HP-specific DMI type 233, and refactored 209 and 221 to use a common function
  - Resolves: #1232501


author: Lianbo Jiang <lijiang@redhat.com> - 1:3.2-4
changelog:
  - Fix System Slot Information for PCIe SSD
  - Resolves: rhbz#1793900
  - Sync with upstream(commit:62bce59fed1)
  - Resolves: rhbz#1767323


author: Petr Menšík <pemensik@redhat.com> - 2.76-2
changelog:
  - Fix a few coverity warnings
  - package is dual-licensed GPL v2 or v3
  - don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead


author: Petr Menšík <pemensik@redhat.com> - 2.76-5
changelog:
  - Fix CVE-2017-14491
  - Fix CVE-2017-14492
  - Fix CVE-2017-14493
  - Fix CVE-2017-14494
  - Fix CVE-2017-14496
  - Fix CVE-2017-14495
  - extra fixes


author: Petr Menšík <pemensik@redhat.com> - 2.76-16.1
changelog:
  - Accept responses only on correct sockets (CVE-2020-25684)
  - Use strong verification on queries (CVE-2020-25685)
  - Handle multiple identical DNS queries better (CVE-2020-25686)
  - Link against nettle for sha256 hash implementation


author: Sagar Sagar <sagar.sagar@oracle.com> - 2.76-17.0.3.3
changelog:
  - Fixed heap-based buffer overflow in sort_rrset (CVE-2020-25681) [Orabug: 35904921]
  - Fixed buffer overflow in extract_name() (CVE-2020-25682) [Orabug: 35904921]


author: Petr Menšík <pemensik@redhat.com> - 2.76-1
changelog:
  - Rebase to 2.76 (#1375527)
  - Include also dhcp_release6 (#1375569)
  - Fix compilation warnings
  - Correct manual about interface aliases, warn if used without --bind*


author: Tomas Hozza <thozza@redhat.com> - 0.11-20
changelog:
  - use systemd macros instead of directly using systemctl (#1058773)
  - Replace the "Fedora /EPEL" comment in dnssec-trigger.conf (#1055949)
  - Use more newer and more advanced dispatcher script (#1034813)


author: Tomas Hozza <thozza@redhat.com> - 0.11-21
changelog:
  - handle IndexError exception in NM script until NM provides better API (#1063735)
  - restart NM when stopping dnssec-trigger daemon instead of handling
    resolv.conf by ourself. (#1061370)


author: Tomas Hozza <thozza@redhat.com> - 0.11-22
changelog:
  - Improved text in the GUI panel in Hotspot sign-on mode (#1254473)
  - Build all binaries with PIE hardening (#1092526)


author: Ondrej Vasik <ovasik@redhat.com> - 1.0-53
changelog:
  - post and postun scriptlet requires sed (#593078)
  - use standard locations for catalog.xml(#591173)


author: Ondrej Vasik <ovasik@redhat.com> - 1.1-4
changelog:
  - fix loop in post catalog registration(incomplete sed
    coverage) #455680
  - fix broken catalogs for package updates
  - fix removal of files during updates


author: Ondrej Vasik <ovasik@redhat.com> 0.6.14-31
changelog:
  - fix escaping of double-quotes in docbook2man (#826139)
  - fix the wrong format of C-style functions in docbook2man (#662869)
  - fix stray .fi at the end of funcsynopsis section (#662869)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-7
changelog:
  - prevent warning messages from %post section if selinux-policy is
    not installed (yet) (#1057522)
  - compile with xz compression support enabled (#1176214)
  - fix crash in sieve script compilation (#1177852)
  - wait with start after network-online target (#1209006)
  - build with tcp wrappers enabled (#1229164)
  - fixed userdb extra fields handling in passdb failure (#1234868)
  - fix valgrind option detection for make check (#1249625)
  - first valid regular user id is 1000 (#1280433)
  - fixed race condition when creating a new mailbox and another process getting its GUID (#1331478)
  - fixed header parsing when there were multiple same header names (#1224496)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-1
changelog:
  - dovecot updated to 2.2.36, pigeonhole to 0.4.24
  - fixed dsync not replicating sieve scripts (#1419426)
  - fix plugins incorrectly reporting epipe errors(#1489943)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-3
changelog:
  - fix global ACL directory configuration search path (#1630380)
  - update first/last_valid_gid range patch (#1630409)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-3.1
changelog:
  - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
    when scanning data in quoted strings, leading to out of bounds heap
    memory writes (#1751383)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-5
changelog:
  - fix CVE-2019-3814: improper certificate validation (#1674369)
  - fix CVE-2019-7524: buffer overflow in indexer-worker process resulting in privilege 
    escalation (#1700398)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-6
changelog:
  - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
    when scanning data in quoted strings, leading to out of bounds heap
    memory writes (#1741787)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-6.1
changelog:
  - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1871841)
  - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1871843)
  - fix CVE-2020-12674 crash due to assert in RPA implementation (#1871842)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-7.1
changelog:
  - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1866752)
  - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1866757)
  - fix CVE-2020-12674 crash due to assert in RPA implementation (#1866764)


author: Rex Dieter <rdieter@fedoraproject.org> - 1:1.8.3-2
changelog:
  - doxygen is missing dependencies for texlive update (#891452)
  - doxywizard: tighten dep on main pkg


author: Than Ngo <than@redhat.com> - 1:1.8.4-3
changelog:
  - backport upstream patches to fix issues:
     * Generated XML is malformed
     * Missing space before optional option in method argument list
     * Closing ) of function in function documentation is in wrong color
     * Segmentation fault parsing a fortran file


author: Than Ngo <than@redhat.com> - 1:1.8.5-4
changelog:
  - Resolves: #1483569, incorrect processing of code blocks
  - Resolves: #1724173 - CVE-2016-10245, cross-site scripting


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-487
changelog:
  - add upstream tests
  - dracut.sh: fail hard, if we find modules and modules.dep is missing
  Resolves: rhbz#1298656
  - add dracut.pc pkg-config file
  Resolves: rhbz#1397853
  - systemd/dracut-cmdline.sh: unset "UNSET" $root
  Releated: rhbz#1365667
  - dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
  - fips/module-setup.sh: make tcrypt non-optional


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-495
changelog:
  - ifup: don't ifup team master indefinitely
  Resolves: rhbz#1416958
  - write-ifcfg: do't write MTU twice for regular eth devices
  Resolves: rhbz#1366163
  - network/ifup: write override file before dhcp_do
  Resolves: rhbz#1415004


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-499
changelog:
  - module-setup.sh: Add ARM specific driver to initramfs image
  Resolves: #1459277
  - Revert "systemd/dracut-initqueue.sh: don't go into emergency"
  Resolves: #1396865
  - udev-rules: pull in 40-redhat-cpu-hotplug.rules
  Resolves: #1460707


author: EL Errata <el-errata_ww@oracle.com> - 033-502.0.1
changelog:
  - Enhancement of module alias handling for kernel upgrade and downgrade compatibility [Orabug 24408414]
  - Increase timeout when waiting for carrier detection on a network interface [bug 24657828] (kevin.x.lyons@oracle.com)
  - Update 0001-Dracut-Handle-module-alias-of-the-running-kernel.patch to redirect to &1 instead of /dev/null [Orabug 24346754] [Orabug 24658791] (Manjunath Govind)
  - add Handle module alias of the running kernel [Orabug 24346754] (Manjunath Govind)
  - add Correctly handle module aliases [Orabug 22600855] (Fabian Vogt)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug 19191303] (Vaughan Cao)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-513
changelog:
  - spec: add missing modules
  - add 90multipath-hostonly module
  Resolves: #1457311
  - Add NTFS support to 90dmsquash-live module
  Resolves: #1449410
  - dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
  - rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
  - dracut.sh: introduce "--no-hostonly-default-device" argument
  Resolves: #1483838
  - 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
  Resolves: #1479325
  - dracut.cmdline: remove extra ":" from ip= doc
  Resolves: #1469997
  - Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
  - fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
  Resolves: #1415032


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-520
changelog:
  - network/ifup: don't arping for point-to-point connections
  Resolves: #1477339
  - network: Only bring up wired network interfaces
  Resolves: #1480246
  - dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
  Resolves: #1490777
  - Fix MTU on bond interface.
  - add 'mtu' parameter for bond options
  Resolves: #1494265
  - fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
  Resolves: #1378910
  - lvm_scan.sh: use -K when calling lvchange
  Resolves: #1489841


author: Lukas Nykryn <lnykryn@redhat.com> - 033-534
changelog:
  - base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
  - base/dracut-lib.sh: remove bashism
  - Align dev_unit_name() with systemd's function.
  - dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
  Resolves: #1306640
  - 90dmsquash-live-ntfs: fix depends()
  - 90dmsquash-live: we don't have find_binary inside initramdisk
  - dracut: Ajusting variables name for --include
  Resolves: #1489882


author: EL Errata <el-errata_ww@oracle.com> - 033-535.0.3.el7_5.1
changelog:
  - Enhancement of module alias handling for kernel upgrade and downgrade compatibility [Orabug 24408414]
  - Increase timeout when waiting for carrier detection on a network interface [bug 24657828] (kevin.x.lyons@oracle.com)
  - Update 0001-Dracut-Handle-module-alias-of-the-running-kernel.patch to redirect to &1 instead of /dev/null [Orabug 24346754] [Orabug 24658791] (Manjunath Govind)
  - add Handle module alias of the running kernel [Orabug 24346754] (Manjunath Govind)
  - add Correctly handle module aliases [Orabug 22600855] (Fabian Vogt)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug 19191303] (Vaughan Cao)
  - parametrize initrd DAD packets to boot faster [Orabug 27910517]
  - 01fips: Add sha3_generic module (Khalid Aziz <khalid.aziz@oracle.com>)


author: Lukas Nykryn <lnykryn@redhat.com> - 033-546
changelog:
  - fcoe: handle CNAs with DCB firmware support
  Resolves: #1442663
  - mdraid: wait for rd.md.uuid specified devices to be assembled
  Resolves: #1451660
  - dracut: Introduce --force-drivers parameter and force_drivers=+ config option
  Resolves: #1577626
  - Skip iscsi attachment if no info
  Resolves: #1513397
  - Fix loading of modules in modules-load.d
  Resolves: #1547730
  - 40network: introduce ip=either6 option
  Resolves: #1582398
  - dracut-functions.sh:check_vol_slaves() speedup LV -> VG name
  Resolves: #1531503
  - dracut-function.sh:check_block_and_slaves() check for block devices
  Resolves: #1549498
  - net-lib: bump carrier timeout to 15
  Resolves: #1401811
  - dracut.sh: workaround broken read from /proc/modules
  Resolves: #1578222


author: Lukas Nykryn <lnykryn@redhat.com> - 033-551
changelog:
  - Revert "add 90multipath-hostonly module"
  - Introduce tri-state hostonly mode
  Resolves: #1599592
  - Correct paths for firmware
  Resolves: #1608491
  - Record loaded kernel modules when hostonly mode is enabled
  Resolves: #1607744


author: EL Errata <el-errata_ww@oracle.com> - 033-554.0.1
changelog:
  - 40network scripts ifup and netlib updates for iSCSI [orabug 28502725]
  - Enhancement of module alias handling for kernel upgrade and downgrade compatibility [Orabug 24408414]
  - Increase timeout when waiting for carrier detection on a network interface [bug 24657828] (kevin.x.lyons@oracle.com)
  - Update 0001-Dracut-Handle-module-alias-of-the-running-kernel.patch to redirect to &1 instead of /dev/null [Orabug 24346754] [Orabug 24658791] (Manjunath Govind)
  - add Handle module alias of the running kernel [Orabug 24346754] (Manjunath Govind)
  - add Correctly handle module aliases [Orabug 22600855] (Fabian Vogt)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug 19191303] (Vaughan Cao)
  - parametrize initrd DAD packets to boot faster [Orabug 27910517]
  - 01fips: Add sha3_generic module (Khalid Aziz <khalid.aziz@oracle.com>)


author: Natalya Naumova <natalya.naumova@oracle.com> - 033-554.0.4
changelog:
  - Oracle kernels are now shipped with .xz compressed modules - strip .xz before calculating module name (backwards compatible) [orabug 28622864] (Alex Burmashev)


author: Lukas Nykryn <lnykryn@redhat.com> - 033-560
changelog:
  - fips: removed false-positive 'FATAL: Module xxx not found' error message when kernel provides a generic algo for module
  - fips: ensure fs module for /boot is installed
  - iscsi: always popd, even if there is no iscsi device
  - Harden dracut against BASH_ENV environment variable
  - fips: check fips integrity just before mounting local filesystems in /sysroot


author: EL Errata <el-errata_ww@oracle.com> - 033-564.0.1
changelog:
  - Oracle kernels are now shipped with .xz compressed modules - strip .xz before calculating module name ( backwards compatible ) [Orabug: 28622864] (Alex Burmashev)
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Enhancement of module alias handling for kernel upgrade and downgrade compatibility [Orabug: 24408414]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - Update 0001-Dracut-Handle-module-alias-of-the-running-kernel.patch to redirect to &1 instead of /dev/null [Orabug 24346754] [Orabug: 24658791] (Manjunath Govind)
  - add Handle module alias of the running kernel [Orabug: 24346754] (Manjunath Govind)
  - add Correctly handle module aliases [Orabug: 22600855] (Fabian Vogt)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)
  - parametrize initrd DAD packets to boot faster [Orabug: 27910517]
  - 01fips: Add sha3_generic module (Khalid Aziz <khalid.aziz@oracle.com>)


author: EL Errata <el-errata_ww@oracle.com> - 033-568.0.1
changelog:
  - bcache module removed (now in bcache-tools upstream) [Orabug: 30800803]
  - add ofb and cfb to 01fips kernel module list [Orabug: 30622681]
  - Fix dhclient classless static route parsing [Orabug: 28881975]
  - Add new rd.iscsi.bypass parameter to always prefer root=, if it exists [Orabug: 30312004]
  - Remove 0560-95iscsi-iscsiroot-synchronously-wait-until-iscsistar.patch [Orabug: 30100182]
  - Oracle kernels are now shipped with .xz compressed modules - strip .xz before calculating module name ( backwards compatible ) [Orabug: 28622864] (Alex Burmashev)
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Enhancement of module alias handling for kernel upgrade and downgrade compatibility [Orabug: 24408414]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - Update 0001-Dracut-Handle-module-alias-of-the-running-kernel.patch to redirect to &1 instead of /dev/null [Orabug 24346754] [Orabug: 24658791] (Manjunath Govind)
  - add Handle module alias of the running kernel [Orabug: 24346754] (Manjunath Govind)
  - add Correctly handle module aliases [Orabug: 22600855] (Fabian Vogt)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)
  - parametrize initrd DAD packets to boot faster [Orabug: 27910517]
  - 01fips: Add sha3_generic module (Khalid Aziz <khalid.aziz@oracle.com>)


author: Lukas Nykryn <lnykryn@redhat.com> - 033-571
changelog:
  - Drop dependency on bridge-utils
  - dracut.sh: disable lsinitrd logging when quiet
  - netlib: fix botched backport


author: EL Errata <el-errata_ww@oracle.com> - 033-572.0.1
changelog:
  - Fix boot disk hung due raid1 corruption [Orabug: 31134130]
  - Send DHCP query only on min BDF device to improve boot times by 50-60 secs [Orabug: 29962625]
  - bcache module removed (now in bcache-tools upstream) [Orabug: 30800803]
  - add ofb and cfb to 01fips kernel module list [Orabug: 30622681]
  - Fix dhclient classless static route parsing [Orabug: 28881975]
  - Add new rd.iscsi.bypass parameter to always prefer root=, if it exists [Orabug: 30312004]
  - Remove 0560-95iscsi-iscsiroot-synchronously-wait-until-iscsistar.patch [Orabug: 30100182]
  - Oracle kernels are now shipped with .xz compressed modules - strip .xz before calculating module name ( backwards compatible ) [Orabug: 28622864] (Alex Burmashev)
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Enhancement of module alias handling for kernel upgrade and downgrade compatibility [Orabug: 24408414]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - Update 0001-Dracut-Handle-module-alias-of-the-running-kernel.patch to redirect to &1 instead of /dev/null [Orabug 24346754] [Orabug: 24658791] (Manjunath Govind)
  - add Handle module alias of the running kernel [Orabug: 24346754] (Manjunath Govind)
  - add Correctly handle module aliases [Orabug: 22600855] (Fabian Vogt)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)
  - parametrize initrd DAD packets to boot faster [Orabug: 27910517]
  - 01fips: Add sha3_generic module (Khalid Aziz <khalid.aziz@oracle.com>)


author: Gulam Mohamed <gulam.mohamed@oracle.com> - 033-572.0.13
changelog:
  - Revert the fixes for bugs 31683267 and 33439056 due to regressions.
    The reverted patch had iBFT bypass code which was a check to see
    if iBFT table exists or not. Based upon this we use to decide if its
    an iscsiboot or PV boot. But this was giving issues for iscsi HW
    offload cards which doesn't support iBFT. [Orabug: 34688443]


author: Jiri Popelka <jpopelka@redhat.com> - 0.7.2-5
changelog:
  - enable to specify disks with path to device file or
    with symbolic link to the device file (#766443)
  - modernize spec


author: - <nick.alcock@oracle.com> - 1.0.0-3
changelog:
  - Internal development release.
  - New tests and test fixes (Kris Van Hees, Nicolas Droux)
    [Orabug: 27194352, 27282243]


author: - <nick.alcock@oracle.com> - 1.0.0-4
changelog:
  - Internal development release.
  - Eliminate new symbol at address 0 on KPTI-enabled kernels
    [Orabug: 27364377]
  - Boost some test timeouts


author: - <nick.alcock@oracle.com> - 1.0.0-6
changelog:
  - Internal development release.
  - ARM64 support [Orabug: 27438960, 27438993, 27438977]
  - Include correct procfs.h (Tomas Jedlicka) [Orabug: 27266725]


author: - <nick.alcock@oracle.com> - 1.0.0-7
changelog:
  - Internal development release.
  - Several latent porting bugs fixed (Kris Van Hees)
  - Make tests used in smoke testsuite rely on sdt less
    (Kris Van Hees)


author: - <nick.alcock@oracle.com> - 1.0.0-8
changelog:
  - Change dtrace_proc_*() public interfaces to take a struct dtrace_proc,
    avoiding lifecycle issues that can cause access to freed memory when
    victims are exec()ing rapidly [Orabug: 27501199]
  - Bump library soname to libdtrace.so.1 [Orabug: 27501199]
  - Improve handling of symbol name->address and address->name lookup
    (Eugene Loh) [Orabug: 27214992]
  - Check array bounds at compile time [Orabug: 27382268]
  - Fix dtrace -S not printing actions other than the first (Tomas Jedlicka)
    [Orabug: 27565023]
  - Drop expensive, unnecessary bad page state checking from testsuite
    [Orabug: 27577555]
  - Handle interruptions in the testsuite runner better [Orabug: 27577593]
  - Consider erratically failing tests in some directories to be passes
  - Test fixes [Orabug: 27583002, 27651838]


author: - <tomas.jedlicka@oracle.com> - 1.0.0-9
changelog:
  - Updated translators to match new kernel redesign of per-task and
    per-process data. [Orabug: 27731759]
  - Enhanced build system to support multiple kernels [Orabug: 27731756]
  - Added pid provider support (Kris Van Hees) [Orabug: 27609459]
  - Adjusted the interpretation of /proc/kallmodsyms for aarch64
    (Eugene Loh) [Orabug: 27214992]


author: - <nick.alcock@oracle.com> - 1.0.1-1
changelog:
  - ARM64 USDT and pid probe support (Kris Van Hees) [Orabug: 27847969]
  - Fix -c option on ARM64 (Kris Van Hees) [Orabug: 27847946]
  - Disable pid provider tests on UEK4.
  - Testsuite fixes [Orabug: 27921244, 27919918]


author: - <nick.alcock@oracle.com> - 1.0.3-1
changelog:
  - Fix disassembler coredump (Tomas Jedlicka) [Orabug: 28054399]
  - Fix process-termination-related crash and deadlock bugs
   (Nick Alcock, Tomas Jedlicka) [Orabug: 27961105, 28133496]
  - Fix deadlock on creation of new threads in -c/-p processes
    [Orabug: 28210986]
  - Speed up aggmod tests (Eugene Loh, Tomas Jedlicka)
    [Orabug: 28007146, 28119700]


author: - <nick.alcock@oracle.com> - 1.0.4-1
changelog:
  - Properly handle breakpoints tripped while DTrace is exiting
    [Orabug: 28473826]
  - Do not crash on self-grabs and on races with dtrace termination
    [Orabug: 28361373]
  - Test fixes (boost timeouts, kernel 4.17 compatibility,
    unskip a forgotten test).


author: - <nick.alcock@oracle.com> - 1.0.3-1
changelog:
  - Fix disassembler coredump (Tomas Jedlicka) [Orabug: 28054399]
  - Fix process-termination-related crash and deadlock bugs
   (Nick Alcock, Tomas Jedlicka) [Orabug: 27961105, 28133496]
  - Fix deadlock on creation of new threads in -c/-p processes
    [Orabug: 28210986]
  - Speed up aggmod tests (Eugene Loh, Tomas Jedlicka)
    [Orabug: 28007146, 28119700]

  Thu May 10 2018 - <nick.alcock@oracle.com> - 1.0.2-1
  - Testsuite fixes [Orabug: 27995907]


author: - <nick.alcock@oracle.com> - 1.1.0-1
changelog:
  - Add more DTRACE_PROBE definitions to sdt.h, for SystemTap
    compatibility, and test them (Tomas Jedlicka) [Orabug: 27721525]
  - New ctfpath option, allowing explicit specification of ctf archives
    to use for the running kernel (Tomas Jedlicka) [Orabug: 28178265]
  - Fix memory leaks and minor uninitialized-data bugs [Orabug: 28247636]
  - Add test for SDT argument retrieval from stack, in UEK4QU7
    (Kris Van Hees) [Orabug: 25949088]
  - Remove preallocation from the buffering testsuite (Tomas Jedlicka)
    [Orabug: 27998779]
  - Include the smoketests in make check [Orabug: 28128338]
  - Improve testsuite temporary file creation (Eugene Loh)
    [Orabug: 28142056]
  - Clean up compiler warnings (Eugene Loh) [Orabug: 27934422, 27998779]


author: - <nick.alcock@oracle.com> - 1.1.1-1
changelog:
  - Skip unstable tests, as this is a release branch
  - Boost timeouts on a few tests for VMs on which fork() is slow
  - Mark a few more tests unstable
  - Do not run noresolve tests on UEK4 (Vincent Lim)


author: - <nick.alcock@oracle.com> - 1.2.0-1
changelog:
  - Add pcap(skb, proto) action to support libpcap-based packet capture, with
    formatted output when tshark is installed (Alan Maguire, Nick Alcock)
    [Orabug: 28953618]
  - Fix memory leaks [Orabug: 29036502] [Orabug: 28990529]
  - Translator changes for kernel 4.19 and 4.20-pre compatibility
  - Improve resilience of signal.d generation in later glibc releases
    (Eugene Loh) [Orabug: 28951289]
  - Testsuite: handle systems on which ping6 is in /usr/bin (Eugene Loh)
    [Orabug: 28958357]
  - Testsuite: allow for increased SDT arg count (Kris Van Hees)
    [Orabug: 28217266]


author: - <nick.alcock@oracle.com> - 1.2.1-1
changelog:
  - Fix bug causing DTrace to fail to terminate if a subprocess grabbed with -c
    dies when the pid or usdt providers, ustack() or similar actions are in use
    [Orabug: 29195206]
  - Fix compilation failure with glibc 2.28+ due to makedev() [Orabug: 29196221]
  - Fix testsuite to work with GNU Awk 4.2+'s new plugin system (Eugene Loh)
    [Orabug: 29056323]


author: - <nick.alcock@oracle.com> - 1.2.2-1
changelog:
  - Fix problems with programs compiled with -z separate-code and with recent
    glibc versions [Orabug: 29589029]
  - Support recent Linux kernels (adapt to kallsyms changes in kernel 5.2,
    translator changes for kernels up to 5.6: all later kernels until 5.9 work
    fine with these changes) (Eugene Loh, Nick Alcock) [Orabug: 30149066] 
  - Correct overruns in printf code (David Mc Lean) [Orabug: 30404549]
  - Do not require yum [Orabug: 32196194]


author: Peter Jones <pjones@redhat.com> - 2.0-1
changelog:
  - This is the 2.0 release.  It is awesome and adds XML output in order to
    support automated validation of CD images.


author: Honza Horak <hhorak@redhat.com> - 7.1-9
changelog:
  - Allow buffer length of the block to be shorter than multiple of 16, 
    even in case of DAO writing (replaces the previous fix)
    Resolves: #810483


author: Honza Horak <hhorak@redhat.com> - 7.1-11
changelog:
  - Spec file cleanup
  - Print error in case we want to write already written DVD-RW in Sequential
    Recording mode (bug #810838)
  - Add man page for dvd+rw-format


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 7.1-13
changelog:
  - when formating blu-ray as srm+pow, handle it later correctly as srm+pow, not srm
  (credits Thomas Schmitt)


author: Jay Fenlason <fenlason@redhat.com> 3.5-1
changelog:
  - New upstream release, which obsoletes both patches.
  - Correct the Source url to point to sourceforge's current path.


author: Jay Fenlason <fenlason@redhat.com> - 3.5-8.1
changelog:
  - Add a patch to shut up some compiler warnings.  (and not segfault on
    machines that can't do unaligned accesses)
    Resolves: rhbz884472


author: Jakub Jelinek <jakub@redhat.com> 0.9-1
changelog:
  - fix up handling of DIE equality if more than one DIE in the same
    CU compare equal (#889283)
  - check DW_FORM_ref_addr properly during fi_multifile phase


author: Jakub Jelinek <jakub@redhat.com> 0.10-1
changelog:
  - when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
    and DW_FORM_data4 for dwarf[23] rather than vice versa (#919755)


author: Josh Stone <jistone@redhat.com> 8.1.2-6
changelog:
  - rhbz1063447: squash testsuite g++ optimization
  - rhbz1030969: backported additional patch to silence new warnings


author: Lukas Czerner <lczerner@redhat.com> - 1.42.9-4
changelog:
  - Fix posisble use after free in some error paths (#997982)
  - Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
  - Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
  - Allow to resize ext4 file system past 16TB (#982871)
  - Disable altivec instructions for libext2fs on ppc (#1074604)


author: Eric Sandeen <sandeen@redhat.com> 1.42.9-5
changelog:
  - Various manpage updates for chattr and mount (#1053885)
  - Fix resize2fs -P hang on corrupted filesystems (#1104612)


author: Eric Sandeen <sandeen@redhat.com> 1.42.9-8
changelog:
  - e4defrag: backwards-allocated files should be defragmented (#1176785)
  - tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
  - mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
  - libext2fs: prevent buffer overflows (#1293677)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-10
changelog:
  - libext2fs: don't ignore fsync errors (#1405049)
  - Fix nroff macro issue in chattr man page (#1429213)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-11
changelog:
  - libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
  - tune2fs: edit dire warning about check intervals (#1433233)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-13
changelog:
  - e2fsck: warn if checkinterval and broken_system_clock both set (#1365594)
  - e2fsprogs: fail to open 1k block size ext4 with bigalloc,meta_bg,^resize_inode (#1448019)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-14
changelog:
  - Various fixes and improvements (#1682935)
  - Automatically enable meta_bg to avoid failure when creating huge fs with small bs (#1608635)
  - don't ignore fsync errors in filefrag (#1451185)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-18
changelog:
  - fix out-of-bounds write on corrupted fs (#1797731)
  - fix out-of-bounds write on corrupted fs (#1768710)
  - fix e2fsprogs creating corrupted meta image (#1711880)
  - fix typo in ext4 man page (#1720130)
  - provide easy metod for creating compatible rhel6 fs (#1780277)
  - better handling of trivial dir link count problem (#1820048)


author: Jiri Vanek <jvanek@redhat.com> - 2.5.2-6
changelog:
  - Fixed for JDK7 - https://fedoraproject.org/wiki/Java7_Package_Rebuild_Status
  - Added and aplied patch0, easymock2-nameClash.patch.
    This patch is removing (in easymock3 deprecated) methods, and is keeping new 
    easymock3 api in EasyMock.java for capture set of methods.
    Old methods cant be kept as deprecated as JDK7 can not compile them.
    Test was derived from easymock3' one too.


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.5.2-8
changelog:
  - Install LICENSE with javadoc package
  - Don't own _mavendepmapfragdir
  - Install POM in _mavenpomdir instead of _datadir/maven2/poms
  - Update to current packaging guidelines


author: Thomas Woerner <twoerner@redhat.com> - 2.0.10-9
changelog:
  - fixed missing systemd unit file (RHBZ#818953)
    merged fedora patches from Tom Callaway
  - fixed NETWORK test in the init script (RHBZ#1026784)
  - fixed needed rpmdiff failures (RHBZ#883988)


author: Thomas Woerner <twoerner@redhat.com> - 2.0.10-14
changelog:
  - Fixed persmissions of ebtables.service (RHBZ#1288586)
  - Added upstream patch to add noflush option to ebtables-restore (RHBZ#1334271)


author: Elliott Baron <ebaron@redhat.com> - 1:4.5.2-2
changelog:
  - Build for JDK 1.6 target.
  - Add ecj-convertto1.6.patch.
  - Add Requires: java >= 1:1.6.0.
  - Resolves: rhbz#1379855


author: Peter Jones <pjones@redhat.com> - 0.8.0-4
changelog:
  - Fix buffer overflow when remove_from_boot_order removes nothing (lennysz)
    Resolves: rhbz#1168019


author: Peter Jones <pjones@redhat.com> - 0.8.0-6
changelog:
  - Handle -b and -o parsing in a way that matches the documentation.
    Resolves: rhbz#1174964
  - Use the right GUID when setting boot entries active/inactive
    Resolves: rhbz#1221771


author: Peter Jones <pjones@redhat.com> - 17-2
changelog:
  - Try to make covscan actually complete the scan...
    Related: rhbz#1570032
    Related: rhbz#1558937
    Related: rhbz#1520533


author: Peter Jones <pjones@redhat.com> - 0.10-1
changelog:
  - Update package to 0.10.
  - Fixes a build error due to different cflags in the builders vs updstream
    makefile.


author: Peter Jones <pjones@redhat.com> - 36-6
changelog:
  - Fix device path generation for block devices on nonstandard device path
    roots.
    Related: rhbz#1558937
    Resolves: rhbz#1591853


author: Peter Jones <pjones@redhat.com> - 36-10
changelog:
  - Work around platform ACPI PCI(e) root drivers that don't fill in the
    "driver" symlink in sysfs.
    Resolves: rhbz#1614944


author: Peter Jones <pjones@redhat.com> - 36-11
changelog:
  - Fix device probing with no matching probes where HD() will work
    Resolves: rhbz#1613698
  - Detect partitiond md devices correctly
    Resolves: rhbz#1602414
    Resolves: rhbz#1613370


author: Mark Wielaard <mjw@redhat.com> - 0.170-1
changelog:
  - New upstream release. Remove upstreamed patches.
  - Sync provide_yama_scope with fedora.
  - Add elfutils-0.170-x86_64-backtrace-test-override.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.171-1
changelog:
  - New upstream release.
    - DWARF5 and split dwarf, including GNU DebugFission, support.
    - readelf: Handle all new DWARF5 sections.
      --debug-dump=info+ will show split unit DIEs when found.
      --dwarf-skeleton can be used when inspecting a .dwo file.
      Recognizes GNU locviews with --debug-dump=loc.
    - libdw: New functions dwarf_die_addr_die, dwarf_get_units,
      dwarf_getabbrevattr_data and dwarf_cu_info.
      libdw will now try to resolve the alt file on first use
      when not set yet with dwarf_set_alt.
      dwarf_aggregate_size() now works with multi-dimensional arrays.
    - libdwfl: Use process_vm_readv when available instead of ptrace.
    - backends: Add a RISC-V backend.


author: Mark Wielaard <mjw@redhat.com> - 0.172-1
changelog:
  - New upstream release.
    - No functional changes compared to 0.171.
    - Various bug fixes in libdw and eu-readelf dealing with bad DWARF5
      data. Thanks to running the afl fuzzer on eu-readelf and various
      testcases.
    - eu-readelf -N is ~15% faster.


author: Mark Wielaard <mjw@redhat.com> - 0.176-1
changelog:
  - New upstream release (#1676504)
    CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
    CVE-2019-7664, CVE-2019-7665, CVE-2018-16062, CVE-2018-16402,
    CVE-2018-16403, CVE-2018-18310, CVE-2018-18521, CVE-2018-18520.


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.34.pre6
changelog:
  - update to latest upstream pre-release
  - drop unneeded patches
  - fix autoconf warnings
  - explicitly disable using OpenSSL and GnuTLS


author: Jan Synáček <jsynacek@redhat.com> - 1:24.3-21
changelog:
  - fix libjpeg detection fails with gcc7 (#1487557)
  - fix Emacs GUI Toolbar icons missing (#1477745)
  - fix hardening: TLS certificate warnings should be hard errors (#1403643)


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 11.86-6
changelog:
  - Replace define with global in macro definitions
  - Add patch to fix previewing of equations courtesy of Sato Ichi (BZ 646632)
  - Add defattr to doc sub-package


author: Karel Klíč <kklic@redhat.com> - 11.86-9
changelog:
  - ELisp source code is no longer distributed in a separate package
  - License filed includes GFDL for the documentation


author: Peter Schiffer <pschiffe@redhat.com> 4.6.1-1
changelog:
  - resolves: #861849
    updated to 4.6.1
  - cleaned .spec file
  - resolves: #759964
    fixed sigsegv
  - resolves: #812225
    fixed sigsegv
  - fixed requires/buildrequires
  - added tex(pdftex.map) and libjpeg-turbo-devel buildrequires


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 4.6.2-1
changelog:
  - Rebase to 4.6.2
  - Added explicit build dependency on ImageMagick. It somehow disappeared from emacs dependencies.
  - Patched gnuplot.texi, new latex refused to compile it.


author: Debarshi Ray <rishi@fedoraproject.org> - 3.12.12-4
changelog:
  - Fix certificate validation (use reference identities, handle validation
    failures correctly, fixed the test suite)
  - Resolves: #1386616


author: Adam Tkac <atkac redhat com> - 1.6.6-1
changelog:
  - update to 1.6.6
  - paches merged
    - enscript-1.6.4-hilight.patch
    - enscript-1.6.4-rh457719.patch


author: Orion Poplawski <orion@cora.nwra.com> - 3.2.10-2
changelog:
  - Add patch to comment out stray module use in modules file when not using
    versioning (bug #895555)
  - Add patch to fix module clear command (bug #895551)
  - Add patch from modules list to add completion to avail command


author: Jan Synáček <jsynacek@redhat.com> - 3.2.10-9
changelog:
  - fix: SourceVers wrongly sets version in nested directory (#1180652)
  - fix: unload from loaded modulefile broken (#1117327)


author: Jack Magne <jmagne@redhat.com> - 1.1.0-33
changelog:
  - Resolves: Bug #1163479 Errata 18562 TPS tests fails - esc rebuild failure because of xulrunner updates.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-34
changelog:
  - Resolves: Bug #1173774 - ESC Client does list 
  - the encryption and signing certs under the "Your Certificates" tab when an enrolled card is inserted.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-35
changelog:
  - Resolves: Bug #1176241 -  .redhat dir does not have the same permissions during manual and auto launch of ESC Client


author: Jack Magne <jmagne@redhat.com> - 1.1.0-36
changelog:
  - Resolves: Bug #1176241 -  .redhat dir does not have the same permissions during manual and auto launch of ESC Client
  - Minor additional fix.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-37
changelog:
  - Resolves: Bug #885898 - ESC incorrectly display Issuer information for a CAC smart card
  - Resolves: Bug 1070802 - missing -fstack-protector-strong


author: Jack Magne <jmagne@redhat.com> - 1.1.0-40
changelog:
  - Resolves: Bug #1466949, Relate: Bug #1523946 - [ppc64] ld switch to relro breaks GDB. This caused an rpmdiff failure.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-42
changelog:
  - Related: Bug# 1358500 - Segmentation fault happens when escd runs with a NULL display.
  - Resolve changelog entry error.


author: Jack Magne <jmagne@redhat.com> - 1.1.0-43
changelog:
  - Resolves: Bug# 1688904 - ESC - HTTP GET Requests incorrectly Being Sent To TPS for Token Operations.


author: Ivan Vecera <ivecera@redhat.com> - 2:4.5-3
changelog:
  - Added support for new ETHTOOL_xLINKSETTINGS API
  - Added support for diagnostics information for QSFP Plus/QSFP28 modules
  - Added support for 25G/50G/100G supported and advertised speed modes


author: Ivan Vecera <ivecera@redhat.com> - 2:4.8-2
changelog:
  - Added support for configurable RSS hash function
  - Fixed SFF 8079 cable technology bit parsing
  - Added support for HWTSTAMP_FILTER_NTP_ALL


author: Marek Kasik <mkasik@redhat.com> - 3.28.2-3
changelog:
  - Fix patch fixing crash in EvMediaPlayerKeys
  - Fix building of comics backend with libarchive 3.1.2
  - Resolves: #1567186


author: Marek Kasik <mkasik@redhat.com> - 3.28.2-4
changelog:
  - Change requires as requested by RPMDiff
  - Check returned size for negative value (CovScan)
  - Resolves: #1567186


author: Marek Kasik <mkasik@redhat.com> - 3.28.2-8
changelog:
  - Do not free EvDocumentInfo in ev_window_save_print_settings(),
  - it is freed in EvDocument's destructor
  - Resolves: #1541358


author: Milan Crha <mcrha@redhat.com> - 3.22.7-4
changelog:
  - Add patch for RH bug #1441608 (Use-after-free when setting summary for component with alarms)
  - Add patch for RH bug #1439590 ([IMAPx] Unsubscribed folders shown after refresh)


author: Milan Crha <mcrha@redhat.com> - 3.22.7-7
changelog:
  - Add patch for RH bug #1504071 (Prefer SSL over STARTTLS for mail when both are set in GOA)
  - Add patch for RH bug #1476329 (Deadlock on exit under e-categories.c:finalize_categories())


author: Milan Crha <mcrha@redhat.com> - 3.28.2-1
changelog:
  - Update to 3.28.2
  - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
  - Resolves: #1575495


author: Milan Crha <mcrha@redhat.com> - 3.28.5-4
changelog:
  - Add patch for RH bug #1392567 (Sync CategoryList with mail Labels)
  - Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)


author: Nikola Forró <nforro@redhat.com> - 2.2.0-9
changelog:
  - Fix CVE-2017-18233
    resolves: #1574865
  - Fix CVE-2017-18234
    resolves: #1656011
  - Fix CVE-2017-18236
    resolves: #1574905
  - Fix CVE-2017-18238
    resolves: #1572270
  - Fix CVE-2018-7730
    resolves: #1572631


author: Jan Grulich <jgrulich@redhat.com> - 0.26-2
changelog:
  - Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp
    Resolves: bz#1547207

    Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp
    Resolves: bz#1545232


author: Jan Grulich <jgrulich@redhat.com> - 0.26-3
changelog:
  - Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a
    remote attacker to cause a denial of service via a crafted tif file
    Resolves: bz#1548410


author: Jan Grulich <jgrulich@redhat.com> - 0.27.0-4
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990352


author: Kaylin Devchand <kaylin.devchand@oracle.com> - 2.1.0-12.0.1
changelog:
  - lib: Prevent integer overflow on groupSize [CVE-2021-46143][Orabug: 33910302]
  - lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910302]


author: Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13
changelog:
  - Fix multiple CVEs
  - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-23852
  - Resolves: CVE-2021-45960
  - Resolves: CVE-2021-46143
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.49-10
changelog:
  - Use vsnprintf instead of vsprintf to avoid buffer overflow
    (it happens e.g. when running systemtap testsuite)
    Resolves: #1038931


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-13
changelog:
  - Fix segfaults if Tcl is built with stubs and Expect is used directly from C program
    (patch taken from Debian project, written by Sergei Golovan)
    Resolves: #1091060


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-14
changelog:
  - Use different and probably better approach of fixing segfaults if Tcl is
    built with stubs and Expect is used directly from C program
    Resolves: #1091060


author: Michal Schmidt <mschmidt@redhat.com> - 1.1.0-0.2.rc1
changelog:
  - Packaging Guidelines conformance fixes and spec file cleanups
  - Fix libfabric dependency
  - Related: bz1235270


author: Chris Leech <cleech@redhat.com> - 1.0.30-4.git91c0c8c
changelog:
  - 1039779 replace README that contained mostly build instructions with
    README.redhat containing better distro-specific information


author: Chris Leech <cleech@redhat.com> - 1.0.31-1.git5dfd3e4
changelog:
  - 1274530 rebase to upstream 1.0.31+
  - no longer requires libhbaapi/libhbalinux
  - no longer attempts to connect to lldpad if DC_REQUIRED is configured off
    for all interfaces


author: Chris Leech <cleech@redhat.com> - 1.0.32-1
changelog:
  - 1384707 fcoeadm --target segfaults if non-FCoE FC targets are present
  - 1321611 fcoemon should only try to connect to lldpad when required


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-56
changelog:
  - fencing: add validate-all action
    Resolves: rhbz#1433948
  - fence_rhevm: add "--disable-http-filter" to be able to explicitly
    use oVirt API version 3
    Resolves: rhbz#1422499


author: Marek Grac <mgrac@redhat.com> - 4.0.11-57
changelog:
  - Set SELinux booleans required for fence agent integration with cluster
    Resolves: rhbz#1427986
  - Add consistency of parameters between STDIN and command-line
    Resolves: rhbz#1403028


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-66.3
changelog:
  - fence_compute/fence_scsi: fix issue with some parameters
    (for ABI compatibility)
    Resolves: rhbz#1497241


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-83
changelog:
  - fence_compute/fence_evacuate: add support for keystone v3 authentication
    Resolves: rhbz#1533170
  - fence_ilo3: default to onoff
    Resolves: rhbz#1519370


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-86
changelog:
  - fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
    dependencies
    Resolves: rhbz#1476009


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-86.1
changelog:
  - fence_azure_arm: add network-fencing
    Resolves: rhbz#1565670
  - fence_compute/fence_evacuate: fix parameters
    Resolves: rhbz#1565701


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-87
changelog:
  - fence_azure_arm: add network-fencing
    Resolves: rhbz#1553904
  - fence_compute/fence_evacuate: fix parameters
    Resolves: rhbz#1559977


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-90
changelog:
  - fence_gce: new fence agent
    Resolves: rhbz#1568753
  - fence_rhevm: dont require --ssl parameter when using --ssl-insecure
    Resolves: rhbz#1544093
  - fence_mpath: fix preemptive abort
    Resolves: rhbz#1556857
  - fence-agents-all: dont show manpage-tags in metadata
    Resolves: rhbz#1553908
  - fence_scsi: dont write duplicates to .dev-file
    Resolves: rhbz#1575973
  - fence_impilan: add iLO5-support
    Resolves: rhbz#1579391


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-1
changelog:
  - rebase to v4.2.1
    Resolves: rhbz#1236395
  - fence_mpath: add watchdog support
    Resolves: rhbz#1504202


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-8
changelog:
  - fence_aliyun: add logging
    Resolves: rhbz#1568742
  - fence_gce: add stackdriver-logging support, improve logging and
    set default mode to cycle
    Resolves: rhbz#1568753


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-11.8
changelog:
  - fence_rhevm: add RHEV v4 API support and auto-detection
    Resolves: rhbz#1708547
  - fence_azure_arm: use skip_shutdown feature
    Resolves: rhbz#1709110


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-12
changelog:
  - fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
    Resolves: rhbz#1645170
  - fence_hpblade: fix log_expect syntax
    Resolves: rhbz#1650526
  - fence_vmware_soap: cleanup when receiving SIGTERM
    Resolves: rhbz#1350908


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-18
changelog:
  - fence_rhevm: add RHEV v4 API support and auto-detection
    Resolves: rhbz#1402862
  - fence_azure_arm: use skip_shutdown feature
    Resolves: rhbz#1700544


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-26
changelog:
  - fence_mpath: fix watchdog reboot not triggered when multipath
    disconnected
    Resolves: rhbz#1751702


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-30
changelog:
  - fencing: only use inetX_only parameters for SSH based agents and
    fence_zvmip
    Resolves: rhbz#1722004


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31
changelog:
  - fence_compute/fence_evacuate: fix region_name content type and
    project shortopt in usage text and project-domain shortopt
    Resolves: rhbz#1760203
  - fence_rhevm: add cookie support
    Resolves: rhbz#1763675
  - fencing: improve stdin quote parsing
    Resolves: rhbz#1769784


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34
changelog:
  - fence_aws: improve parameter logic to allow setting region parameter
    while using credentials from ~/.aws/config
    Resolves: rhbz#1673468
  -


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39
changelog:
  - fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
    and avoid failing when hitting it during the monitor-action
    Resolves: rhbz#1654058


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1
changelog:
  - fence_lpar: fix issue with long username, hostname, etc not
    working when the command run by the agent exceeds 80 characters
  - fence_evacuate: enable evacuation of instances using private flavors

    Resolves: rhbz#1860545
    Resolves: rhbz#1862024


author: Ryan McCabe <rmccabe@redhat.com> - 0.3.2-4
changelog:
  - fence-virt: Enable the TCP listener plugin
    Resolves: rhbz#1334170
  - Allow fence_virtd to run as non-root
    Fix use of undefined define
    Resolves: rhbz#1334170


author: Ryan McCabe <rmccabe@redhat.com> - 0.3.2-13
changelog:
  - fence_virtd: Make the libvirt backend survive libvirtd restarts
    Resolves: rhbz#1384181
  - fence_xvm/fence_virt: Add support for the validate-all status
    Resolves: rhbz#1447700


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.24-3
changelog:
  - Fix fetchmail loses last line of message if the non-default "mimedecode" option
    is enabled and if that line is not properly terminated
    Resolves: #955814


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.24-6
changelog:
  - Fix bogus dates in the %changelog
  - Backport better SSL protocol support and documentation
    Resolves: #1273016
  - Minor fixes in options, usage message and man page
    Resolves: #949013


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 3.3.3-3
changelog:
  - After consultation with upstream, enable SSE2 also on x86, altivec on ppc
    and ppc64 and NEON on arm.


author: Jan Kaluza <jkaluza@redhat.com> - 5.11-27
changelog:
  - fix CVE-2014-0207 - cdf_read_short_sector insufficient boundary check
  - fix CVE-2014-0237 - cdf_unpack_summary_info() excessive looping DoS
  - fix CVE-2014-0238 - CDF property info parsing nelements infinite loop
  - fix CVE-2014-3478 - mconvert incorrect handling of truncated pascal string
  - fix CVE-2014-3479 - fix extensive backtracking in regular expression
  - fix CVE-2014-3480 - cdf_count_chain insufficient boundary check
  - fix CVE-2014-3487 - cdf_read_property_info insufficient boundary check
  - fix CVE-2014-3538 - unrestricted regular expression matching
  - fix CVE-2014-3587 - fix cdf_read_property_info
  - fix CVE-2014-3710 - out-of-bounds read in elf note headers
  - fix CVE-2014-8116 - multiple denial of service issues (resource consumption)
  - fix CVE-2014-8117 - denial of service issue (resource consumption)
  - fix CVE-2014-9652 - out of bounds read in mconvert()
  - fix CVE-2014-9653 - malformed elf file causes access to uninitialized memory


author: Jan Kaluza <jkaluza@redhat.com> 5.11-32
changelog:
  - fix #1278737 - add support for Java 1.7 and 1.8
  - fix #1281723 - show full executable name for core
  - fix #1271636 - add support for detection of Python 2.7 byte-compiled files
  - fix #1278768 - comment out too-sensitive Pascal magic


author: Ray Strode <rstrode@redhat.com> 3.14.2-6
changelog:
  - Add more goo to the compat desktop file to prevent it
    from getting exposed in control-center
    Related: #1259292


author: Hushan Jia <hushan.jia@gmail.com> 1.4.9.1-1
changelog:
  - Update to upstream 1.4.9.1 which have several bug fixes and enhancements
  - remove arch definitions, the syscalls are now detected during configuring


author: Ondrej Vasik <ovasik@redhat.com> - 3.2-25
changelog:
  - own /usr/share/locale and /usr/lib/modules
  - improve filesystem content file to include symlinks and rootdir


author: Kamil Dudka <kdudka@redhat.com> - 1:4.5.10-7
changelog:
  - fix specfile issues reported by the fedora-review script
  - do not use the AM_C_PROTOTYPES macro (removed in Automake 1.12)
  - do not require gets() to be declared


author: Tomas Hozza <thozza@redhat.com> - 0.17-49
changelog:
  - Compile finger with Full RELRO
  - Explicitly use gcc
  - Use only RPM_OPT_FLAGS and RPM_LD_FLAGS
  - Add systemd as BuildRequires because of unitdir macro


author: Adam Williamson <awilliam@redhat.com> - 3.0-3
changelog:
  - Re-enable ceph deps on ppc64 (it's building again)
  - Disable RDMA support on 32-bit ARM (#1484155)


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: EL Errata <el-errata_ww@oracle.com> - 102.10.0-1.0.1
changelog:
  - Remove upstream references [Orabug: 30143292]
  - Update distribution for Oracle Linux [Orabug: 30143292]
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file


author: Jan Horak <jhorak@redhat.com> - 60.1.0-8
changelog:
  - Fixed homepage and bookmarks (rhbz#1606778)
  - Fixed missing file associations in RHEL6 (rhbz#1613565)


author: Jan Horak <jhorak@redhat.com> - 60.1.0-9
changelog:
  - Do not set user agent (rhbz#1608065)
  - GTK dialogs are localized now (rhbz#1619373)
  - JNLP association works again (rhbz#1607457)


author: EL Errata <el-errata_ww@oracle.com> - 60.9.0-1.0.1
changelog:
  - Update distribution for Oracle Linux [Orabug: 30143292]
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file


author: EL Errata <el-errata_ww@oracle.com> - 68.10.0-1.0.1
changelog:
  - Remove upstream references [Orabug: 30143292] 
  - Update distribution for Oracle Linux [Orabug: 30143292]
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 68.12.0-1.0.1
changelog:
  - Remove upstream references [Orabug: 30143292] 
  - Update distribution for Oracle Linux [Orabug: 30143292]
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file
  - Improve bindgen configuration wrt clang (bmo#1526857)
  - Lift MOZ_SMP_FLAGS limit


author: EL Errata <el-errata_ww@oracle.com> - 91.10.0-1.0.1
changelog:
  - Remove upstream references [Orabug: 30143292]
  - Update distribution for Oracle Linux [Orabug: 30143292]
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file
  - Enabled aarch64 build


author: EL Errata <el-errata_ww@oracle.com> - 91.5.0-1.0.2
changelog:
  - Remove upstream references [Orabug: 30143292]
  - Update distribution for Oracle Linux [Orabug: 30143292]
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file
  - Enabled aarch64 builds


author: Eric Garver <egarver@redhat.com> - 0.4.4.4-7
changelog:
  - firewall.functions: New function get_nf_nat_helpers (RHBZ#1452681)
  - firewall.core.fw: Get NAT helpers and store them internally. (RHBZ#1452681)
  - firewall.core.fw_zone: Load NAT helpers with conntrack helpers (RHBZ#1452681)
  - firewalld.dbus: Add missing properties nf_conntrach_helper_setting and
    nf_conntrack_helpers (RHBZ#1452681)
  - D-Bus interfaces: Fix GetAll for interfaces without properties (RHBZ#1452017)
  - firewall.server.firewalld: New property for NAT helpers supported by the
    kernel (RHBZ#1452681)


author: Phil Sutter - 0.4.4.4-11
changelog:
  - core: Log unsupported ICMP types as informational only (RHBZ#1479951)
  - doc: firewall-cmd: Document --query-* options return codes (RHBZ#1372716)
  - doc: firewall-cmd: Document quirk in --reload option (RHBZ#1452137)
  - firewall-cmd: Use colors only if output is a TTY (RHBZ#1368544)
  - firewall-offline-cmd: Don't require root for help output (RHBZ#1445214)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.3-1
changelog:
  - Rebase to firewalld-0.4.4.3 (RHBZ#1414584)
  - Support disabled automatic helper assignment in firewalld (RHBZ#1006225)
  - Fix masquerade rules to be created always the same (RHBZ#1374001)
  - Properly handle quoted ifcfg file values (RHBZ#1395348)
  - Fix extension of ifcfg backup files (RHBZ#1400478)
  - Complete icmp types list (RHBZ#1401978)
  - Fix LOG rule placement for LogDenied (RHBZ#1402932)
  - Show error messages from NM and do not trace back (RHBZ#1405562)
  - Support icmp-type usage in rich rules (RHBZ#1409544)
  - New service file for freeipa-trust (RHBZ#1411650)
  - Fix --{set,get}-{short,description} for ipset in commands (RHBZ#1416325)
  - Speed up large ipset file loading and import (RHBZ#1416817)
  - Improve support for ipsets in firewalld (RHBZ#1419058)
  - ALREADY_ errors should result in warnings and zero exit code (RHBZ#1420457)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.4-1
changelog:
  - Rebase to firewalld-0.4.4.4
    http://www.firewalld.org/2017/03/firewalld-0-4-4-4-release
  - Drop references to fedorahosted.org from spec file and Makefile.am, use
    archive from github
  - Fix inconsistent ordering of rules in INPUT_ZONE_SOURCE (issue#166)
    (RHBZ#1421222)
  - Fix ipset overloading from /etc/firewalld/ipsets (RHBZ#1423941)
  - Fix permanent rich rules using icmp-type elements (RHBZ#1434763)
  - firewall-config: Deactivate edit, remove, .. buttons if there are no items
  - Check if ICMP types are supported by kernel before trying to use them
    (RHBZ#1401978)
  - firewall-config: Show invalid ipset type in the ipset configuration dialog
    in a special label (RHBZ#1419058)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.4-2
changelog:
  - Add support for sctp and dccp in ports, source-ports and forward-ports
    (RHBZ#1429808)
  - Fix firewall-offline-cmd --remove-service-from-zone= option (RHBZ#1438127)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.4-3
changelog:
  - Fix --{set,get}-{short,description} for zones (RHBZ#1416325)
  - Man pages: Add sctp and dccp for ports, ... (RHBZ#1429808)
  - Add support for new wait option in restore commands (RHBZ#1446162)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.4-4
changelog:
  - Add services for oVirt: ovirt-imageio, ovirt-vmconsole, ovirt-storageconsole,
    ctbc and nrpe (RHBZ#1449158)
  - Fix policy issue with the choice policies by using the .policy.choice
    extension (RHBZ#1449754)


author: Eric Garver <egarver@redhat.com> - 0.6.3-3
changelog:
  - backport recent upstream stable fixes
  - backport fix --remove-rules deleting all direct rules
  - backport fix unable to delete rich rule forward-port
  - backport fix forward-port for external zone hijacking internal zone
  - backport fix testsuite iptables locking


author: EL Errata <el-errata_ww@oracle.com> - 0.6.3-11.0.1
changelog:
  - Remove the service definition file for Sattelite and remove references in HA serivce file [Orabug: 30152337]


author: Eric Garver <egarver@redhat.com> - 0.6.3-1
changelog:
  - rebase package to v0.6.3, include recent stable fixes
  - use QT4 patch for firewall-applet
  - remove cockpit service definition, cockpit package still ships their own
  - remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
  - remove nftables support


author: Eric Garver <egarver@redhat.com> - 0.6.3-2
changelog:
  - backport recent upstream stable fixes
  - backport fix to enable IP forwarding only if toaddr specified


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 0.6.3-2.0.1
changelog:
  - Remove the service definition file for Sattelite and remove references in HA serivce file.
    [Orabug: 30152337]


author: Martin Kolman <mkolman@redhat.com> 19.9-4
changelog:
  - Handle next button naming also if there is only one module (#1107887) (mkolman@redhat.com)
    Related: rhbz#1107887


author: Martin Kolman <mkolman@redhat.com> 19.9-6
changelog:
  - Make Firstboot architecture specific due to s390-only files (#1162567) (mkolman@redhat.com)
    Resolves: rhbz#1162567


author: Martin Kolman <mkolman@redhat.com> 19.10-1
changelog:
  - Switch from Transifex to Zanata (#1273359) (mkolman@redhat.com)
    Related: rhbz#1273359
  - Update translations (#1273359) (mkolman@redhat.com)
    Resolves: rhbz#1273359


author: Miroslav Lichvar <mlichvar@redhat.com> 1.2.1-11.20121204gita43f56
changelog:
  - update to 20121204gita43f56
  - create libs subpackage
  - split documentation to base and devel subpackages
  - drop defattr macros
  - add GFDL to License tag


author: Miroslav Lichvar <mlichvar@redhat.com> 1.3.0-5
changelog:
  - fix buffer overflow when processing ID3v2 metadata (CVE-2014-8962)
  - fix buffer overflow with invalid blocksize (CVE-2014-9028)


author: David King <dking@redhat.com> - 0.8.4-2
changelog:
  - Sync bzip2 dependency with Fedora package
  - Make the libs subpackage depend on the base package for libostree
  - Fix multilib issues with XML-based documentation


author: Colin Walters <walters@verbum.org> - 0.8.7-2
changelog:
  - Fix libostree bundling:
    Ensure we do not Provide or Require libostree.
    Move the shared library into flatpak-libs so flatpak always
    depends on it.
    Keep the shared library filename as libostree, but put it
    under a private directory.  Renaming the file on disk did not
    really do much since the dynamic linker and RPM work from the
    soname.
    Resolves: #1476905
  - Tweak build to work both with and without BZ#1392354


author: David King <dking@redhat.com> - 0.8.7-3
changelog:
  - Fix crasher in xdg-desktop-portal
  - Tweak spec file so it still builds even though we need to
    autoreconf.


author: Colin Walters <walters@verbum.org> - 0.8.7-3
changelog:
  - Fix libostree bundling:
    Ensure we do not Provide or Require libostree.
    Move the shared library into flatpak-libs so flatpak always
    depends on it.
    Keep the shared library filename as libostree, but put it
    under a private directory.  Renaming the file on disk did not
    really do much since the dynamic linker and RPM work from the
    soname.
    Resolves: #1476905


author: Ray Strode <rstrode@redhat.com> - 0.8.8-2
changelog:
  - Fix crasher in xdg-desktop-portal
    Resolves: #1503579
  - Tweak spec file so it still builds even though we need to
    autoreconf.


author: Petr Machata <pmachata@redhat.com> - 2.5.35-15
changelog:
  - Rename flex-static to flex-devel so that it gets to repositories of
    minor multi-lib arch (i386 on x86_64 etc.)
  - Resolves: #674301


author: Petr Machata <pmachata@redhat.com> - 2.5.36-1
changelog:
  - Rebase to 2.5.36
    - Drop flex-2.5.35-sign.patch, flex-2.5.35-hardening.patch,
      flex-2.5.35-gcc44.patch, flex-2.5.35-missing-prototypes.patch
    - Add flex-2.5.36-bison-2.6.1.patch
    - Add a subpackage doc
  - Resolves #842073


author: Francois Aucamp <faucamp@fedoraproject.org> - 1.3-16
changelog:
  - Added patch declaring explicit libm linking dependency (RHBZ #564899)
  - Updated source and URL tags


author: Akira TAGOH <tagoh@redhat.com> - 2.10.94-1
changelog:
  - New upstream release.
  - migrate the configuration for XDG Base Directory spec automatically (#882267)


author: Akira TAGOH <tagoh@redhat.com> - 2.10.95-5
changelog:
  - Fix the race condition issue on updating cache (#1011510)
  - Fix crash issue in FcFontSort()
  - Fix an issue not copying all values from the font.


author: Akira TAGOH <tagoh@redhat.com> - 2.13.0-4.1
changelog:
  - Rebase to 2.13.0 (#1576501)
  - Rename fc-cache binary to fc-cache-{32,64} for multilib. (#1568968)
  - backport some fixes related to Flatpak.
  - Drop new syntax in config for compatibility.
  - Requires dejavu-sans-fonts instead of font(:lang=en) (#1484094)


author: Tomas Smetana <tsmetana@redhat.com> - 2.8.0-6
changelog:
  - fix #831336: fix broken menus; patch backported from upstream SVN revision
    1375 by Manfred Spraul


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.6-2
changelog:
  - spec update by Christopher Meng <rpm@cicku.me>
   - hardened build flags should include PIE also for bmc-watchdog.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.9-1
changelog:
  - Updated to upstream freeipmi-1.2.9
   - Fix threshold output corner case in ipmi-sensors.
   - Fix invalid declaration in libipmimonitoring header.
   - Fix older compiler build problems.
   -
   - Fix portability build bug on ARM systems.
   - Add 'internal IPMI error' troubleshooting to manpages.
   - Fix bmc-info corner case on Bull 510 systems.


author: Josef Ridky <jridky@redhat.com> - 1.5.7-1
changelog:
  - Rebase to the latest upstream release 1.5.7 (#1435848)
  - Fix manpage command examples (#1353981) in separate commit


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-1
changelog:
  - Upgrade to upstream v3.0.13 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
    Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                          compile time
    Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                          can't connect to mysql server
    Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-2
changelog:
  - Fix some issues found with static analyzers.
    Resolves: Bug#1432103 FreeRADIUS fails covscan checks
  - Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-3
changelog:
  - Explicitly disable rlm_cache_memcached to avoid error when the module's
    dependencies are installed, and it is built, but not packaged.
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  - Prevent segfaults by adding a missing handling of connection errors in
    rlm_ldap.
    Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
  - Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
    Resolves: Bug#1436619 radtest does not work with eap-md5


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-4
changelog:
  - Disable internal OpenSSL cache.
    Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass
  - Check sizeof(*packet), not sizeof(packet) in EAP-PWD
    Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
  - Parse port as well as address for dhcpclient destination
    Resolves: Bug#1457825 dhcpclient does no accept IP:PORT


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-5
changelog:
  - Refer to correct package version in configuration comments for Bug#1458746
    (CVE-2017-9148) fix.
    Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-6
changelog:
  - Avoid race condition when creating session cache file
    Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-7
changelog:
  - Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                          to improper output buffer size check in make_secret()
  - Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                          fr_dhcp_decode() when decoding option 63
  - Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                          data2vp_wimax()
  - Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                          exhaustion with 'concat' attributes
  - Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                          dhcp_attr2vp()
  - Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                          fr_dhcp_decode_suboptions()


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-8
changelog:
  - Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
  - Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                         data2vp_wimax()


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-9
changelog:
  - Fix double free in rlm_sql acct_redundant
    Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                          unknown value" when using module sql rlm_sql


author: Alexander Scheel <ascheel@redhat.com> - 3.0.13-10
changelog:
  - Fixes two EAP-PWD security issues
    Resolves: bz#1699413 authentication bypass with an invalid curve attack


author: Alexander Scheel <ascheel@redhat.com> - 3.0.13-10
changelog:
  - Fixes two EAP-PWD security issues
    Resolves: bz#1699414 authentication bypass with an invalid curve attack
    Resolves: bz#1699419 fake authentication using reflection


author: Alexander Scheel <ascheel@redhat.com> - 3.0.13-11
changelog:
  - Fixes logrotate, EAP-PWD vulnerability
    Resolves: bz#1719368 privilege escalation due to insecure logrotate configuration
    Resolves: bz#1751796 eap-pwd: Information leak due to aborting when needing more than 10 iterations


author: Alexander Scheel <ascheel@redhat.com> - 3.0.13-15
changelog:
  - Fixes EAP-PWD: DoS issues due to multithreaded BN_CTX access
    Resolves: bz#1818808

    * Fri Feb 7 2020 Alexander Scheel <ascheel@redhat.com> - 3.0.13-14
  - Fixes receiving of multiple RADIUS packets under load
    Resolves: bz#1630684


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.10-1
changelog:
  - Upgrade to upstream v3.0.10 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related: Bug#1202751
    Resolves: Bug#1340334 freeradius: Decryption of very long Tunnel-Passwords
                          can cause buffer overflow
  - Remove rlm_eap_tnc support as the required package "tncfhh" was retired.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.11-1
changelog:
  - Upgrade to upstream v3.0.11 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Resolves: Bug#1197551
    Resolves: Bug#1179745
    Resolves: Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
    Resolves: Bug#1289849 FreeRadius should start after ldap, ipa and krb5kdc
    Resolves: Bug#1208886 Add the latest Mikrotik dictionary into Freeradius
    Resolves: Bug#1198620 radutmp should not rotate
    Resolves: Bug#1180979 Freeradius is installing files under /etc/tmpfiles.d/
    Resolves: Bug#1187904 radiusd logrotate config file contains old style
                          "/sbin/service radius reload" reload call
    Resolves: Bug#1167846 radiusd fails to load clients from ldap
    Resolves: Bug#1422018 /usr/lib/systemd/system/radiusd.service is marked
                          executable. Please remove executable permission bits
    Resolves: Bug#1167843 support for older style generic attributes in
                          rlm_ldap doesn't work
    Resolves: Bug#1354234 home servers are marked as dead by radiusd


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.12-1
changelog:
  - Upgrade to upstream v3.0.12 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
    Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                          detail file
    Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
    Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
    Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                          load
    Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.12-2
changelog:
  - Do not fail logrotate if radiusd is not running.
    Resolves: Bug#1365226 error running non-shared postrotate script for
                          /var/log/radius/radius.log of
                          '/var/log/radius/radius.log '
  - Fix output to log file specified with -l option.
    Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                          option
  - Fix long hostnames interpreted as IP addresses.
    Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                          name as a domain name
  - Avoid clashes with libtool library symbols.
    Resolves: Bug#1391960 undefined symbol: get_vtable in
                          /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
  - Remove mentions of Auth-Type = System from docs.
    Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
  - Improve ip/v4/v6/addr documentation.
    Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                          and AAAA entries


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-7
changelog:
  - Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                          to improper output buffer size check in make_secret()
  - Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                          fr_dhcp_decode() when decoding option 63
  - Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                          data2vp_wimax()
  - Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                          exhaustion with 'concat' attributes
  - Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                          dhcp_attr2vp()
  - Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                          fr_dhcp_decode_suboptions()


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-8
changelog:
  - Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
  - Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                         data2vp_wimax()


author: Soren Sandmann <ssp@redhat.com> - 1.0.2-3
changelog:
  - Man page fixes
    - Document that multiple connections don't work (988294)
    - Document the list of plugins (988307, 988308)


author: Ondrej Holy <oholy@redhat.com> - 1.0.2-11
changelog:
  - Use boolean types defined stdbool.h (#1404575)
  - Prevent stucked keys on focus out and unmap events (#1415069)
  - Fix crashes when copying images (#1417536)
  - Enable TLS 1.1 connections and later (#1312967)


author: Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4
changelog:
  - CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
  - CVE-2020-11523: Fix integer overflow in region.c (#1837622)
  - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)


author: Marek Kasik <mkasik@redhat.com> - 2.4.11-11
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197740


author: Ernestas Kulik <ekulik@redhat.com> - 1.0-3
changelog:
  - Drop recordmydesktop sub-package (rhbz#1647170)
  - Load version 3.0 of Gtk namespace, silence a PyGObject warning (rhbz#1647170)


author: Jan Synáček <jsynacek@redhat.com> - 0.17-58
changelog:
  - Extend the input line buffer and the argument storage buffer
  - Prettify spec some more and remove trailing space


author: Ashish Samant <ashish.samant@oracle.com> - 2.9.4-1.0.1
changelog:
  - libfuse 2.9.4 from mainline with bug fixes.
  - New features backported and added from libfuse 3.0
  - For eg: writeback_cache, async_dio , readdirplus etc.
  - Conatins the numa patches as well.


author: Ashish Samant <ashish.samant@oracle.com> - 2.9.4-1.0.4.el7
changelog:
  - Revert "libfuse: add flags to ->rename()" (Ashish Samant)  
  - Revert "libfuse: Disable renameat2 until proper support is added" (Ashish Samant)  
  - libfuse: Fix definition of fuse_parse_cmdline() (Ashish Samant)  
  - libfuse: Remove preun script that deleted fuse group from spec file (Ashish Samant)  
  - Add compatibility symlinks for ol6 (Ashish Samant)  
  - fix fusermount so it can only be executed by memebers of the fuse group (Ashish Samant)


author: lans.hung@oracle.com <lans.hung@oracle.com> - 2.9.4-1.0.5.el7
changelog:
  - update to 2.9.4-1.0.5.el7 (lans.hung@oracle.com)  
  - update changelog in .spec file (lans.hung@oracle.com)  
  - move patch to buildrpm/ to fix build failure (lans.hung@oracle.com)  
  - Fix int64_t & uint64_t conflict issue on aarch64. This issue doesn't happen in x86_64 because its bits/sigcontext.h does not include asm/sigcontext.h, which it does on arm64, causing the __s64 definition conflict. This fix uses linux/types.h over manually defined int*_t and uint*_t in fuse_kernel.h. (Lans Hung)  [Orabug: 27889694]


author: Lans Hung <lans.hung@oracle.com> - 2.9.4-1.0.6.el7
changelog:
  - Reviewed-by: Laurence Rochfort <laurence.rochfort@oracle.com> (Lans Hung)  
  - add signed-off-by (Lans Hung)  
  - Security Update based on ELSA-2018-3324 fuse: bypass of the "user_allow_other" restriction when SELinux is active. [OraBugzilla: 43547][CVE-2018-10906] (Lans Hung)


author: Lans Hung <lans.hung@oracle.com> - 2.9.4-1.0.7.el7
changelog:
  - \n- bump release number to 2.9.4-1.0.7 (Lans Hung)  \n- fix missing Patch1,
    Patch2, Patch3 declaration in spec file after using 
  %setup       -q




  /usr/bin/cat /usr/src/redhat/SOURCES/fuse-0001-fix-int64_t-conflict-on-aarch64.patch | 
  /usr/bin/patch -p1 -s

  /usr/bin/cat /usr/src/redhat/SOURCES/fuse-0002-fusermount-refuse-unknown-options.patch | 
  /usr/bin/patch -p1 -s

  /usr/bin/cat /usr/src/redhat/SOURCES/fuse-0003-fusermount-don-t-feed-escaped-commas-into-mount-opti.patch | 
  /usr/bin/patch -p1 -s


author: Richard Hughes <richard@hughsie.com> 1.0.1-1
changelog:
  - Rebase to 1.0.1, specifically the wip/hughsie/rhel75 branch which adds
    back the automake build system and lowers the required versions of deps.
  - This also un-neuters fwupd so that most of the plugins are functional,
    for instance allowing updates of Thunderbolt controllers and Logitech
    Unifying devices. However, the LVFS is still disabled.
  - Resolves: #1313086


author: Peter Jones <pjones@redhat.com> - 9-6
changelog:
  - Rebuild to make some dependencies versioned, in order to make TPS's really
    broken builder setup work.
    Related: rhbz#1380825


author: Martin Bříza <mbriza@redhat.com> - 4.0.1-1
changelog:
  - Update to upstream 4.0.1 (#808005)
  - Corrected Source0 link to .tar.gz extension as not all releases are available as .tar.bz2
  - Resolves #724817 - gawk-4.0.0 regression in '\' escape handling in gsub()
  - Resolves #820550 - gawk: getline in BEGIN skips 2 lines


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 4.8.5-39.0.2
changelog:
  - [Orabug: 27987827] (Michael Ploujnikov)
  - Enable stable binary output for Ksplice
  - [Orabug: 27557686] (Egeyar Bagcioglu)
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
  - Do not pass -export-dynamic to the linker in static links in aarch64.
  - Orabug 28841734.
  - Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - Orabug 28212574.
  - Fix alignment for section anchor in aarch64 targets.
    Upstream f79e87ea93bc4a48ebff0db1b8c05dd6240e69e2.


author: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com> 4.8.5-39.0.4
changelog:
  - Backport the fix for the erratum 843419 of Cortex A53.
  - [Orabug: 29777365]
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Honza Horak <hhorak@redhat.com> - 2.0.35-19
changelog:
  - Spec file cleanup
  - Compile and run test suite during build
  - Using chrpath to get rid of --rpath in gd-progs


author: Filip Januš <fjanus@redhat.com> - 2.0.35-27
changelog:
  - Fix CVE-2016-5766
  - Resolves: #1356813
  - Upstream patch: https://github.com/libgd/libgd/commit/aba3db8


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.6.1-107.el7
changelog:
  - Fix backport of default signal handlers for spawned processes
    (RH BZ 1473411, found by Michal Kolar).


author: Weimin Pan <weimin.pan@oracle.com> - 7.6.1-119.0.1.el7
changelog:
  - Merge branches-7/el7-u8 with tags-7/gdb-7.6.1-119.el7.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Alex Burmashev <alexander.burmashev@oracle.com> - 7.6.1-119.0.2
changelog:
  - Include asm/ptrace.h for linux-aarch64-low.c.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Keith Seitz <keiths@redhat.com> - 7.6.120.el7
changelog:
  - Don't classify struct members as filenames (numerous, RH BZ 1815690)
  - Fix commas in source paths bugs (Keith Seitz, RH BZ 1779246)


author: Weimin Pan <weimin.pan@oracle.com> - 7.6.1-120.0.2.el7
changelog:
  - Merge branches-7/el7-u9 with tags-7/gdb-7.6.1-120.el7.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 7.6.1-120.0.4.el7
changelog:
  - Orabug 35335540 Prevent Ctrl-C to GDB during attach from stopping inferior.
    Fix-by:Isaac Chen <isaac.chen@oracle.com>
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Honza Horak <hhorak@redhat.com> - 1.9.1-1
changelog:
  - Updated to new upstream release 1.9.1
  - Dropped -filestruct, -ndbmlock and -fhs patches, they are not 
    needed anymore and GDBM_NOLOCK is used always
  - Run testsuite


author: Honza Horak <hhorak@redhat.com> - 1.10-1
changelog:
  - Updated to new upstream release 1.10
  - Dropped -shortread patch, which has been already applied by upstream
  - Disable large file support, that is enabled by default since 1.9, 
    but not compatible with db files created using gdbm-1.8.3 and lower
  - License change to GPLv3+
  - Add doc files THANKS AUTHORS NOTE-WARNING
  - Changed text in NOTE-WARNING to correspond with build settings


author: Ray Strode <rstrode@redhat.com> - 3.22.3-10
changelog:
  - Add patches to try to maintain some semblance of compatibility
    when live upgrading between 7.3 and 7.4
    Related: #1448786


author: Ray Strode <rstrode@redhat.com> - 3.22.3-4
changelog:
  - Drop reference to wayland in config file
  - use autosetup to simplify spec maintenance
    Related: #1386862


author: Ray Strode <rstrode@redhat.com> 3.22.3-8
changelog:
  - Reap transient login screens when they are no longer needed
  - Jump to login screen if we end up on a blank VT
    Resolves: #1301028


author: Ray Strode <rstrode@redhat.com> - 3.26.1-1
changelog:
  - Update to 3.26.1
    Resolves: #1489359
    Related:  #1481740
  - Enable wayland support
    Resolves: #1481740
  - Fix bogus wtmp entries
    Resolves: #1391156


author: Ray Strode <rstrode@redhat.com> - 3.26.2.1-1
changelog:
  - Update to 3.26.2.1
    Integrates a lot of the downstream patches
    Related: #1481740
  - Fixes race condition introduced by list display patch
    Related: #1413900


author: Ray Strode <rstrode@redhat.com> 3.28.2-12
changelog:
  - Allow multiple simultaneous XDMCP logins for a user if
    xdmcp/AllowMultipleSessionsPerUser=true
    Resolves: #1679914


author: Ray Strode <rstrode@redhat.com> - 3.28.2-15
changelog:
  - sync AllowMultipleSessionsPerUser patch from 7.6 branch
    Resolves: #1664353
  - Create dconf dirs by default
    Resolves: #1664284


author: Nils Philippsen <nils@redhat.com> - 0.2.0-11
changelog:
  - replace lua-5.2 patch by upstream commit
  - fix buffer overflow in and add plausibility checks to ppm-load op
    (CVE-2012-4433)
  - fix multi-lib issue in generated documentation


author: Paul Howarth <paul@city-fan.org> - 2.2.2-1
changelog:
  - Update to 2.2.2
    - geoipupdate now calls fsync on the database directory after a rename to
      make it durable in the event of a crash
  - Update autotools patch


author: Paul Howarth <paul@city-fan.org> - 2.3.1-1
changelog:
  - Update to 2.3.1
    - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
      greater
    - Previously, on an invalid gzip file, geoipupdate would output binary data
      to stderr; it now displays an appropriate error message
    - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
    - $(sysconfdir) is now created if it doesn't exist (GH#33)
    - The sample config file is now usable (GH#33)


author: Paul Howarth <paul@city-fan.org> - 2.4.0-1
changelog:
  - Update to 2.4.0
    - geoipupdate now checks that the database directory is writable: if it is
      not, it reports the problem and aborts
    - geoipupdate now acquires a lock when starting up to ensure only one
      instance may run at a time: a new option, 'LockFile', exists to set the
      file to use as a lock ('.geoipupdate.lock' in the database directory by
      default)
    - geoipupdate now prints out additional information from the server when a
      download request results in something other than HTTP status 2xx; this
      provides more information when the API does not respond with a database
      file
    - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
    - Previously, a variable named 'ERROR' was used, which caused issues building
      on Windows (GH#36)
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - noarch subpackages always available now
    - libcurl-devel always available now


author: Paul Howarth <paul@city-fan.org> - 2.5.0-1
changelog:
  - Update to 2.5.0
    - Replace use of strnlen() due to lack of universal availability (GH#71)
    - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
    - Remove unused base64 library (GH#68)
    - Add the new configuration option 'PreserveFileTimes'; if set, the
      downloaded files will get the same modification times as their original on
      the server (default is '0') (GH#63)
    - Use the correct types when calling 'curl_easy_setopt()'; this fixes
      warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
    - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
      'ProductIds' option was renamed to 'EditionIDs'; the old options will
      continue to work, but upgrading to the new names is recommended for
      forward compatibility


author: Michal Ruprich <mruprich@redhat.com> - 20180605-1
changelog:
  - Resolves: #1643472 - Add geolite2 package
  - Lowering the NVR due to the package version in el8. Higher NVR could make problems during migration from el7 to el8


author: Andrew Price <anprice@redhat.com> - 3.1.10-3
changelog:
  - libgfs2: Issue one write per rgrp when creating them
  - mkfs.gfs2: Fix resource group alignment issue
  - mkfs.gfs2: Free unnecessary cached pages, disable readahead
    Resolves: rhbz#1440269


author: Andrew Price <anprice@redhat.com> - 3.1.10-5
changelog:
  - Update URL in spec file
    Resolves: rhbz#1501738
  - fsck.gfs2: Make -p, -n and -y conflicting options
    Resolves: rhbz#1507091


author: Andrew Price <anprice@redhat.com> - 3.1.10-9
changelog:
  - fsck.gfs2: Don't check fs formats we don't recognise
  - libgfs2: Fix pointer cast byte order issue
    Resolves: rhbz#1616389


author: Andrew Price <anprice@redhat.com> - 3.1.10-10
changelog:
  - libgfs2: Use sizeof for 'reserved' fields in ondisk.c
  - fsck.gfs2: Disambiguate 'check_data'
  - gfs2-utils: Accept a char* instead of a buffer head in gfs2_check_meta
  - fsck.gfs2: Disambiguate check_metalist
  - fsck.gfs2: Fix segfault in build_and_check_metalist
  - fsck.gfs2: Retain context for indirect pointers in ->check_metalist
  - fsck.gfs2: Clear bad indirect block pointers when bitmap meets expectations
    Resolves: rhbz#1487726


author: Andrew Price <anprice@redhat.com> - 3.1.10-11
changelog:
  - gfs2_jadd: Handle out-of-space issues
  - gfs2_jadd: error handling overhaul
    Resolves: rhbz#1837640


author: Andrew Price <anprice@redhat.com> - 3.1.8-5
changelog:
  - gfs2-utils: Fix hang on withdraw (4 patches)
  - Include new withdraw helper scripts in files section
    Resolves: rhbz#1225634


author: Andrew Price <anprice@redhat.com> - 3.1.9-1
changelog:
  - Rebase to new upstream release 3.1.9
    Resolves: rhbz#1271674
    Resolves: rhbz#1162819
    Resolves: rhbz#1196321
    Resolves: rhbz#1202814
    Resolves: rhbz#1251036
    Resolves: rhbz#1257625
    Resolves: rhbz#1268045
    Resolves: rhbz#1283866
    Resolves: rhbz#1332728


author: Andrew Price <anprice@redhat.com> - 3.1.9-2
changelog:
  - fsck.gfs2: "undo" functions can stop too early on duplicates
    Resolves: rhbz#1348703
  - fsck.gfs2: link count checking wrong inode's formal inode number
    Resolves: rhbz#1350597
  - fsck.gfs2: check formal inode number when links go from 1 to 2
    Resolves: rhbz#1350600


author: Andrew Price <anprice@redhat.com> - 3.1.10-1
changelog:
  - Rebase to new upstream version 3.1.10
    Resolves: rhbz#1348601
    Resolves: rhbz#1356685
    Resolves: rhbz#1382087
    Resolves: rhbz#1405163
    Resolves: rhbz#1430399
  - Make dependency on libuuid explicit


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-19
changelog:
  - Import LCMS2 2.6 rebase changes into ghostscript (bug #959351)
  - Fix hanging of ghostscript when converting PDF -> PNG (bug #1302121)
  - Do not SIGSEGV after icc_profile error, report error instead (bug #1243784)
  - Fix the color printing on HP InkJet printers (bug #1225858)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-21
changelog:
  - Added security fixes for:
    - CVE-2013-5653 (bug #1380327)
    - CVE-2016-7977 (bug #1380415)
    - CVE-2016-7978 (bug #1382300)
    - CVE-2016-7979 (bug #1382305)
    - CVE-2016-8602 (bug #1383940)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-25
changelog:
  - Added security fix for CVE-2017-7207 (bug #1434353)
  - Added explicit requirement for lcms2 version we are build with (bug #1436273)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-29
changelog:
  - Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
  - Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-29.el7_5.1
changelog:
  - Added security fixes for:
    - CVE-2018-16509 (bug #1621156)
    - CVE-2018-15910 (bug #1621157)
    - CVE-2018-16542 (bug #1621380)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-31
changelog:
  - Added security fixes for:
    - CVE-2018-16509 (bug #1621158)
    - CVE-2018-15910 (bug #1621160)
    - CVE-2018-16542 (bug #1621382)


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.1
changelog:
  - Remove as many non-standard operators as possible to make the codebase
    closer to upstream for later CVEs
  - Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
    checker (699659)
  - Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
    issues (699657)
  - Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
    type checking (699660)


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.1
changelog:
  - Remove as many non-standard operators as possible to make the codebase
    closer to upstream for later CVEs
  - Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
    checker (699659)
  - Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
    in temp file handling to disclose contents of files (699658) 
  - Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
    issues (699657)
  - Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
    type checking (699660)


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.4
changelog:
  - Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
    access in the aesdecode operator (699665)
  - Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
    privilege" checking when running out of stack during exception handling
  - Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
    security check in zsetdevice function in psi/zdevice.c


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.5
changelog:
  - Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
    pagedevice replacement (699664)
  - Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
    exception table
  - Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
    can leak operator arrays
  - Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
    can leak operator arrays (incomplete fix for CVE-2018-17183)
  - Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
    allows a sandbox protection bypass
  - Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
    setpattern (700141)


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.6
changelog:
  - Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
    smooth shading object (Error: /rangecheck in --run--)


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.7
changelog:
  - Resolves: #1665919 pdf2ps reports an error when reading from stdin
  - Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
    copydevice handling (699661)
  - Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
    psi/zdevice2.c (700153)
  - Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
    psi/zicc.c
  - Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
    psi/zfjbig2.c (700168)


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.8
changelog:
  - Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
    pseudo-operators must themselves be pseudo-operators


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.10
changelog:
  - Resolves: #1673915 - ghostscript: Regression: double comment chars
    '%' in gs_init.ps leading to missing metadata
  - Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator
    is available (700585)
  - Resolves: #1680025 - CVE-2019-3838 ghostscript: forceput in DefineResource
    is still accessible (700576)


author: Martin Osvald <mosvald@redhat.com> - 9.07-31.el7_6.11
changelog:
  - Resolves: #1673398 - CVE-2019-3839 ghostscript: missing attack vector
    protections for CVE-2019-6116
  - fix for pdf2dsc regression added


author: Martin Osvald <mosvald@redhat.com> - 9.07-32
changelog:
  - Remove as many non-standard operators as possible to make the codebase
    closer to upstream for later CVEs
  - Resolves: #1621385 - CVE-2018-16511 ghostscript: missing type check in type
    checker (699659)
  - Resolves: #1649722 - CVE-2018-16539 ghostscript: incorrect access checking
    in temp file handling to disclose contents of files (699658) 
  - Resolves: #1621162 - CVE-2018-15908 ghostscript: .tempfile file permission
    issues (699657)
  - Resolves: #1621384 - CVE-2018-15909 ghostscript: shading_param incomplete
    type checking (699660)
  - Resolves: #1652902 - CVE-2018-16863 ghostscript: incomplete fix for
    CVE-2018-16509
  - Resolves: #1654045 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)
  - Resolves: #1651150 - CVE-2018-15911 ghostscript: uninitialized memory
    access in the aesdecode operator (699665)
  - Resolves: #1650061 - CVE-2018-16802 ghostscript: Incorrect "restoration of
    privilege" checking when running out of stack during exception handling
  - Resolves: #1652936 - CVE-2018-19409 ghostscript: Improperly implemented
    security check in zsetdevice function in psi/zdevice.c
  - Resolves: #1654622 - CVE-2018-16541 ghostscript: incorrect free logic in
    pagedevice replacement (699664)
  - Resolves: #1650211 - CVE-2018-17183 ghostscript: User-writable error
    exception table
  - Resolves: #1645517 - CVE-2018-18073 ghostscript: saved execution stacks
    can leak operator arrays
  - Resolves: #1648892 - CVE-2018-17961 ghostscript: saved execution stacks
    can leak operator arrays (incomplete fix for CVE-2018-17183)
  - Resolves: #1643117 - CVE-2018-18284 ghostscript: 1Policy operator
    allows a sandbox protection bypass
  - Resolves: #1655939 - CVE-2018-19134 ghostscript: Type confusion in
    setpattern (700141)
  - Resolves: #1657694 - ghostscript: Regression: Warning: Dropping incorrect
    smooth shading object (Error: /rangecheck in --run--)
  - Resolves: #1661210 pdf2ps reports an error when reading from stdin
  - Resolves: #1657334 - CVE-2018-16540 ghostscript: use-after-free in
    copydevice handling (699661)
  - Resolves: #1660570 - CVE-2018-19475 ghostscript: access bypass in
    psi/zdevice2.c (700153)
  - Resolves: #1660829 - CVE-2018-19476 ghostscript: access bypass in
    psi/zicc.c
  - Resolves: #1661279 - CVE-2018-19477 ghostscript: access bypass in
    psi/zfjbig2.c (700168)
  - Resolves: #1667443 - CVE-2019-6116 ghostscript: subroutines within
    pseudo-operators must themselves be pseudo-operators
  - Resolves: #1670443 - ghostscript: Regression: double comment chars
    '%' in gs_init.ps leading to missing metadata


