# changelog

author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-4
changelog:
  - Update Requires on pki-ca to 10.1.2-4 (#1129558)
  - build: increase java stack size for all arches
  - Add ipaSshPubkey and gidNumber to the ACI to read ID user overrides (#891984)
  - Fix dns zonemgr validation regression (#1056202)
  - Handle profile changes in dogtag-ipa-ca-renew-agent (#886645)
  - Do not wait for new CA certificate to appear in LDAP in ipa-certupdate
    (#886645)
  - Add bind-dyndb-ldap working dir to IPA specfile
  - Fail if certmonger can't see new CA certificate in LDAP in ipa-cacert-manage
    (#886645)
  - Investigate & fix Coverity defects in IPA DS/KDC plugins (#1160756)
  - Deadlock in schema compat plugin (#1161131)
  - ipactl stop should stop dirsrv last (#1161129)
  - Upgrade 3.3.5 to 4.1 failed (#1161128)
  - CVE-2014-7828 freeipa: password not required when OTP in use (#1160877)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-5
changelog:
  - Update slapi-nis dependency to pull 0.54-2 (#891984)
  - ipa-restore: Don't crash if AD trust is not installed (#951581)
  - Prohibit setting --rid-base for ranges of ipa-trust-ad-posix type (#1138791)
  - Trust setting not restored for CA cert with ipa-restore command (#1159011)
  - ipa-server-install fails when restarting named (#1162340)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-6
changelog:
  - Fix: DNS installer adds invalid zonemgr email (#1056202)
  - ipaplatform: Use the dirsrv service, not target (#951581)
  - Fix: DNS policy upgrade raises asertion error (#1161128)
  - Fix upgrade referint plugin (#1161128)
  - Upgrade: fix trusts objectclass violationi (#1161128)
  - group-add doesn't accept gid parameter (#1149124)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-7
changelog:
  - ipa-csreplica-manage connect fails (#1157735)
  - error message which is not understandable when IDNA2003 characters are
    present in --zonemgr (#1163849)
  - Fix warning message should not contain CLI commands (#1114013)
  - Renewing the CA signing certificate does not extend its validity period end
    (#1163498)
  - RHEL7.1 ipa-server-install --uninstall Could not set SELinux booleans for
    httpd (#1159330)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-8
changelog:
  - Improve otptoken help messages (#919228)
  - Ensure users exist when assigning tokens to them (#919228)
  - Enable QR code display by default in otptoken-add (#919228)
  - Show warning instead of error if CA did not start (#1158410)
  - CVE-2014-7850 freeipa: XSS flaw can be used to escalate privileges (#1165774)
  - Traceback when adding zone with long name (#1164859)
  - Backup & Restore mechanism (#951581)
  - ignoring user attributes in migrate-ds does not work if uppercase characters
    are returned by ldap (#1159816)
  - Allow ipa-getkeytab to optionally fetch existing keys (#1007367)
  - Failure when installing on dual stacked system with external ca (#1128380)
  - ipa-server should keep backup of CS.cfg (#1059135)
  - Tracebacks with latest build for --zonemgr cli option (#1167270)
  - webui: use domain name instead of domain SID in idrange adder dialog
    (#891984)
  - webui: normalize idview tab labels (#891984)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-9
changelog:
  - schema update on RHEL-6.6 using latest copy-schema-to-ca.py from RHEL-7.1
    build fails (#1167196)
  - Investigate & fix Coverity defects in IPA DS/KDC plugins (#1160756)
  - "ipa trust-add ... " cmd says : (Trust status: Established and verified)
    while in the logs we see "WERR_ACCESS_DENIED" during verification step.
    (#1144121)
  - POODLE: force using safe ciphers (non-SSLv3) in IPA client and server
    (#1156466)
  - Add support/hooks for a one-time password system like SecureID in IPA
    (#919228)
  - Tracebacks with latest build for --zonemgr cli option (#1167270)
  - ID Views: Support migration from the sync solution to the trust solution
    (#891984)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-11
changelog:
  - Throw zonemgr error message before installation proceeds (#1163849)
  - Winsync: Setup is broken due to incorrect import of certificate (#1169867)
  - Enable last token deletion when password auth type is configured (#919228)
  - ipa-otp-lasttoken loads all user's tokens on every mod/del (#1166641)
  - add --hosts and --hostgroup options to allow/retrieve keytab methods
    (#1007367)
  - Extend host-show to add the view attribute in set of default attributes
    (#1168916)
  - Prefer TCP connections to UDP in krb5 clients (#919228)
  - [WebUI] Not able to unprovisioning service in IPA 4.1 (#1168214)
  - webui: increase notification duration (#1171089)
  - RHEL7.1 ipa automatic CA cert renewal stuck in submitting state (#1166931)
  - RHEL7.1 ipa-cacert-manage cannot change external to self-signed ca cert
    (#1170003)
  - Improve validation of --instance and --backend options in ipa-restore
    (#951581)
  - RHEL7.1 ipa replica unable to replicate to rhel6 master (#1167964)
  - Disable TLS 1.2 in nss.conf until mod_nss supports it (#1156466)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-12
changelog:
  - RHEL7.1 ipa-cacert-manage renewed certificate from MS ADCS not compatible
    (#1169591)
  - CLI doesn't show SSHFP records with SHA256 added via nsupdate (regression)
    (#1172578)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-13
changelog:
  - Expand the token auth/sync windows (#919228)
  - Access is not rejected for disabled domain (#1172598)
  - krb5kdc crash in ldap_pvt_search (#1170695)
  - RHEL7.1 IPA server httpd avc denials after upgrade (#1164896)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-14
changelog:
  - IPA Replicate creation fails with error "Update failed! Status: [10 Total
    update abortedLDAP error: Referral]" (#1166265)
  - running ipa-server-install --setup-dns results in a crash (#1072502)
  - DNS zones are not migrated into forward zones if 4.0+ replica is added
    (#1175384)
  - gid is overridden by uid in default trust view (#1168904)
  - When migrating warn user if compat is enabled (#1177133)
  - Clean up debug log for trust-add (#1168376)
  - No error message thrown on restore(full kind) on replica from full backup
    taken on master (#1175287)
  - ipa-restore proceed even IPA not configured (#1175326)
  - Data replication not working as expected after data restore from full backup
    (#1175277)
  - IPA externally signed CA cert expiration warning missing from log (#1178128)
  - ipa-upgradeconfig fails in CA-less installs (#1181767)
  - IPA certs fail to autorenew simultaneouly (#1173207)
  - More validation required on ipa-restore's options (#1176034)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-16
changelog:
  - PassSync does not sync passwords due to missing ACIs (#1181093)
  - ipa-replica-manage list does not list synced domain (#1181010)
  - Do not assume certmonger is running in httpinstance (#1181767)
  - ipa-replica-manage disconnect fails without password (#1183279)
  - Put LDIF files to their original location in ipa-restore (#1175277)
  - DUA profile not available anonymously (#1184149)
  - IPA replica missing data after master upgraded (#1176995)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-17
changelog:
  - Wrong directories created on full restore (#1186398)
  - ipa-restore crashes if replica is unreachable (#1186396)
  - idoverrideuser-add option --sshpubkey does not work (#1185410)


author: Martin Kosek <mkosek@redhat.com> - 4.1.0-18
changelog:
  - Fix ipa-pwd-extop global configuration caching (#1187342)
  - group-detach does not add correct objectclasses (#1187540)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-18.1
changelog:
  - "an internal error has occurred" during ipa host-del --updatedns (#1198431)
  - Renamed patch 1013 to 0114, as it was merged upstream
  - Fax number not displayed for user-show when kinit'ed as normal user.
    (#1198430)
  - Replication agreement with replica not disabled when ipa-restore done without
    IPA installed (#1199060)
  - Limit deadlocks between DS plugin DNA and slapi-nis (#1199128)


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.1.0-18.2
changelog:
  - IPA extdom plugin fails when encountering large groups (#1193759)
  - CVE-2015-0283 ipa: slapi-nis: infinite loop in getgrnam_r() and getgrgid_r()
    (#1202998)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-18.3
changelog:
  - [ipa-python] ipalib.errors.LDAPError: failed to decode certificate:
    (SEC_ERROR_INVALID_ARGS) security library: invalid arguments. (#1194312)


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-0.1.alpha1
changelog:
  - Resolves: #805188  [RFE] "ipa migrate-ds" ldapsearches with scope=1
  - Resolves: #1019272 With 20000+ users, adding a user to a group intermittently
    throws Internal server error
  - Resolves: #1035494 Unable to add Kerberos principal via kadmin.local
  - Resolves: #1045153 ipa-managed-entries --list -p <badpassword> still requires
    DM password
  - Resolves: #1125950 ipa-server-install --uinstall doesn't remove port 7389
    from ldap_port_t
  - Resolves: #1132540 [RFE] Expose service delegation rules in UI and CLI
  - Resolves: #1145584 ipaserver/install/cainstance.py creates pkiuser not
    matching uidgid
  - Resolves: #1176036 IDM client registration failure in a high load environment
  - Resolves: #1183116 Remove Requires: subscription-manager
  - Resolves: #1186054 permission-add does not prompt to enter --right option in
    interactive mode
  - Resolves: #1187524 Replication agreement with replica not disabled when
    ipa-restore done without IPA installed
  - Resolves: #1188195 Fax number not displayed for user-show when kinit'ed as
    normal user.
  - Resolves: #1189034 "an internal error has occurred" during ipa host-del
    --updatedns
  - Resolves: #1193554 ipa-client-automount: failing with error LDAP server
    returned UNWILLING_TO_PERFORM. This likely means that minssf is enabled.
  - Resolves: #1193759 IPA extdom plugin fails when encountering large groups
  - Resolves: #1194312 [ipa-python] ipalib.errors.LDAPError: failed to decode
    certificate: (SEC_ERROR_INVALID_ARGS) security library: invalid arguments.
  - Resolves: #1194633 Default trust view can be deleted in lower case
  - Resolves: #1196455 ipa-server-install step [8/27]: starting certificate
    server instance - confusing CA staus message on TLS error
  - Resolves: #1198263 Limit deadlocks between DS plugin DNA and slapi-nis
  - Resolves: #1199527 [RFE] Use datepicker component for datetime fields
  - Resolves: #1200867 [RFE] Make OTP validation window configurable
  - Resolves: #1200883 [RFE] Switch apache to use mod_auth_gssapi
  - Resolves: #1202998 CVE-2015-1827 ipa: memory corruption when using
    get_user_grouplist() [rhel-7.2]
  - Resolves: #1204637 slow group operations
  - Resolves: #1204642 migrate-ds: slow add o users to default group
  - Resolves: #1208461 IPA CA master server update stuck on checking getStatus
    via https
  - Resolves: #1211602 Hide ipa-server-install KDC master password option (-P)
  - Resolves: #1211708 ipa-client-install gets stuck during NTP sync
  - Resolves: #1215197 ipa-client-install ignores --ntp-server option during time
    sync
  - Resolves: #1215200 ipa-client-install configures IPA server as NTP source
    even if IPA server has not ntpd configured
  - Resolves: #1217009 OTP sync in UI does not work for TOTP tokens
  - Related:  #1204809 Rebase ipa to 4.2
    - Update to upstream 4.2.0.alpha1


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-0.2.alpha1
changelog:
  - Resolves: #1228671 pkispawn fails in ipa-ca-install and ipa-kra-install
  - Related:  #1204809 Rebase ipa to 4.2
    - Fix minimum version of slapi-nis
    - Require python-sss and python-sss-murmur (provided by sssd-1.13.0)


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-1
changelog:
  - Resolves: #846033  [RFE] Documentation for JSONRPC IPA API
  - Resolves: #989091  Ability to manage IdM/IPA directly from a standard LDAP
    client
  - Resolves: #1072383 [RFE] Provide ability to map CAC identity certificates to
    users in IdM
  - Resolves: #1115294 [RFE] Add support for DNSSEC
  - Resolves: #1145748 [RFE] IPA running with One Way Trust
  - Resolves: #1199520 [RFE] Introduce single upgrade tool - ipa-server-upgrade
  - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities
  - Resolves: #1200694 [RFE] Support for multiple cert profiles
  - Resolves: #1200728 [RFE] Replicate PKI Profile information
  - Resolves: #1200735 [RFE] Allow issuing certificates for user accounts
  - Resolves: #1204054 SSSD database is not cleared between installs and
    uninstalls of ipa
  - Resolves: #1204205 [RFE] ID Views: Automated migration tool from Winsync to
    Trusts
  - Resolves: #1204501 [RFE] Add Password Vault (KRA) functionality
  - Resolves: #1204504 [RFE] Add access control so hosts can create their own
    services
  - Resolves: #1206534 [RFE] Offer Kerberos over HTTP (kdcproxy) by default
  - Resolves: #1206613 [RFE] Configure IPA to be a trust agent by default
  - Resolves: #1209476 package ipa-client does not require package dbus-python
  - Resolves: #1211589 [RFE] Add option to skip the verify_client_version
  - Resolves: #1211608 [RFE] Generic support for unknown DNS RR types (RFC 3597)
  - Resolves: #1215735 ipa-replica-prepare automatically adds a DNS zone
  - Resolves: #1217010 OTP Manager field is not exposed in the UI
  - Resolves: #1222475 krb5kdc : segfault at 0 ip 00007fa9f64d82bb sp
    00007fffd68b2340 error 6 in libc-2.17.so
  - Related:  #1204809 Rebase ipa to 4.2
    - Update to upstream 4.2.0
    - Move /etc/ipa/kdcproxy to the server subpackage


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-2
changelog:
  - Resolves: #1131907 [ipa-client-install] cannot write certificate file
    '/etc/ipa/ca.crt.new': must be string or buffer, not None
  - Resolves: #1195775 unsaved changes dialog internally inconsistent
  - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities
    - Stageusedr-activate: show username instead of DN
  - Resolves: #1200694 [RFE] Support for multiple cert profiles
    - Prevent to rename certprofile profile id
  - Resolves: #1222047 IPA to AD Trust: IPA ERROR 4016: Remote Retrieve Error
  - Resolves: #1224769 copy-schema-to-ca.py does not overwrites schema files
    - copy-schema-to-ca: allow to overwrite schema files
  - Resolves: #1241941 kdc component installation of IPA failed
    - spec file: Update minimum required version of krb5
  - Resolves: #1242036 Replica install fails to update DNS records
    - Fix DNS records installation for replicas
  - Resolves: #1242884 Upgrade to 4.2.0 fails when enabling kdc proxy
    - Start dirsrv for kdcproxy upgrade


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-3
changelog:
  - Resolves: #1170770 [AD TRUST]IPA should detect inconsistent realm domains
    that conflicts with AD DC
    - trusts: Check for AD root domain among our trusted domains
  - Resolves: #1195339 ipa-client-install changes the label on various files
    which causes SELinux denials
    - sysrestore: copy files instead of moving them to avoind SELinux issues
  - Resolves: #1196656 [ipa-client][rhel71] enable debugging for spawned
    commands / ntpd -qgc $tmpfile hangs
    - enable debugging of ntpd during client installation
  - Resolves: #1205264 Migration UI Does Not Work When Anonymous Bind is Disabled
    - migration: Use api.env variables.
  - Resolves: #1212719 abort-clean-ruv subcommand should allow
    replica-certifyall: no
    - Allow value 'no' for replica-certify-all attr in abort-clean-ruv subcommand
  - Resolves: #1216935 ipa trust-add shows ipa: ERROR: an internal error has
    occurred
    - dcerpc: Expand explanation for WERR_ACCESS_DENIED
    - dcerpc: Fix UnboundLocalError for ccache_name
  - Resolves: #1222778 idoverride group-del can delete user and user-del can
    delete group
    - dcerpc: Add get_trusted_domain_object_type method
    - idviews: Restrict anchor to name and name to anchor conversions
    - idviews: Enforce objectclass check in idoverride*-del
  - Resolves: #1234919 Be able to request certificates without certmonger service
    running
    - cermonger: Use private unix socket when DBus SystemBus is not available.
    - ipa-client-install: Do not (re)start certmonger and DBus daemons.
  - Resolves: #1240939 Please add dependency on bind-pkcs11
    - Create server-dns sub-package.
    - ipaplatform: Add constants submodule
    - DNS: check if DNS package is installed
  - Resolves: #1242914 Bump minimal selinux-policy and add booleans to allow
    calling out oddjobd-activated services
    - selinux: enable httpd_run_ipa to allow communicating with oddjobd services
  - Resolves: #1243261 non-admin users cannot search hbac rules
    - fix hbac rule search for non-admin users
    - fix selinuxusermap search for non-admin users
  - Resolves: #1243652 Client has missing dependency on memcache
    - do not import memcache on client
  - Resolves: #1243835 [webui] user change password dialog does not work
    - webui: fix user reset password dialog
  - Resolves: #1244802 spec: selinux denial during kdcproxy user creation
    - Fix selinux denial during kdcproxy user creation
  - Resolves: #1246132 trust-fetch-domains: Do not chown keytab to the sssd user
    - oddjob: avoid chown keytab to sssd if sssd user does not exist
  - Resolves: #1246136 Adding a privilege to a permission avoids validation
    - Validate adding privilege to a permission
  - Resolves: #1246141 DNS Administrators cannot search in zones
    - DNS: Consolidate DNS RR types in API and schema
  - Resolves: #1246143 User plugin - user-find doesn't work properly with manager
    option
    - fix broken search for users by their manager


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-4
changelog:
  - Resolves: #1072383 [RFE] Provide ability to map CAC identity certificates to
    users in IdM
    - store certificates issued for user entries as
    - user-show: add --out option to save certificates to file
  - Resolves: #1145748 [RFE] IPA running with One Way Trust
    - Fix upgrade of sidgen and extdom plugins
  - Resolves: #1195339 ipa-client-install changes the label on various files
    which causes SELinux denials
    - Use 'mv -Z' in specfile to restore SELinux context
  - Resolves: #1198796 Text in UI should describe differing LDAP vs Krb behavior
    for combinations of "User authentication types"
    - webui: add LDAP vs Kerberos behavior description to user auth
  - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities
    - ULC: Fix stageused-add --from-delete command
  - Resolves: #1200694 [RFE] Support for multiple cert profiles
    - certprofile-import: do not require profileId in profile data
    - Give more info on virtual command access denial
    - Allow SAN extension for cert-request self-service
    - Add profile for DNP3 / IEC 62351-8 certificates
    - Work around python-nss bug on unrecognised OIDs
  - Resolves: #1204501 [RFE] Add Password Vault (KRA) functionality
    - Validate vault's file parameters
    - Fixed missing KRA agent cert on replica.
  - Resolves: #1225866 display browser config options that apply to the browser.
    - webui: add Kerberos configuration instructions for Chrome
    - Remove ico files from Makefile
  - Resolves: #1246342 Unapply idview raises internal error
    - idviews: Check for the Default Trust View only if applying the view
  - Resolves: #1248102 [webui] regression - incorrect/no failed auth messages
    - webui: fix regressions failed auth messages
  - Resolves: #1248396 Internal error in DomainValidator.__search_in_dc
    - dcerpc: Fix UnboundLocalError for ccache_name
  - Resolves: #1249455 ipa trust-add failed CIFS server configuration does not
    allow access to \\pipe\lsarpc
    - Fix selector of protocol for LSA RPC binding string
    - dcerpc: Simplify generation of LSA-RPC binding strings
  - Resolves: #1250192 Error in ipa trust-fecth-domains
    - Fix incorrect type comparison in trust-fetch-domains
  - Resolves: #1251553 Winsync setup fails with unexpected error
    - replication: Fix incorrect exception invocation
  - Resolves: #1251854 ipa aci plugin is not parsing aci's correctly.
    - ACI plugin: correctly parse bind rules enclosed in
  - Resolves: #1252414 Trust agent install does not detect available replicas to
    add to master
    - adtrust-install: Correctly determine 4.2 FreeIPA servers


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-5
changelog:
  - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities
    - user-undel: Fix error messages.
  - Resolves: #1200694 [RFE] Support for multiple cert profiles
    - Prohibit deletion of predefined profiles
  - Resolves: #1232819 testing ipa-restore on fresh system install fails
    - Backup/resore authentication control configuration
  - Resolves: #1243331 pkispawn fails when migrating to 4.2 server from 3.0
    server
    - Require Dogtag PKI >= 10.2.6
  - Resolves: #1245225 Asymmetric vault drops traceback when the key is not
    proper
    - Asymmetric vault: validate public key in client
  - Resolves: #1248399 Missing DNSSEC related files in backup
    - fix typo in BasePathNamespace member pointing to ods exporter config
    - ipa-backup: archive DNSSEC zone file and kasp.db
  - Resolves: #1248405 PassSync should be disabled after ipa-winsync-migrate is
    finished
    - winsync-migrate: Add warning about passsync
    - winsync-migrate: Expand the man page
  - Resolves: #1248524 User can't find any hosts using "ipa host-find $HOSTNAME"
    - adjust search so that it works for non-admin users
  - Resolves: #1250093 ipa certprofile-import accepts invalid config
    - Require Dogtag PKI >= 10.2.6
  - Resolves: #1250107 IPA framework should not allow modifying trust on AD trust
    agents
    - trusts: Detect missing Samba instance
  - Resolves: #1250111 User lifecycle - preserved users can be assigned
    membership
    - ULC: Prevent preserved users from being assigned membership
  - Resolves: #1250145 Add permission for user to bypass caacl enforcement
    - Add permission for bypassing CA ACL enforcement
  - Resolves: #1250190 idrange is not added for sub domain
    - idranges: raise an error when local IPA ID range is being modified
    - trusts: harden trust-fetch-domains oddjobd-based script
  - Resolves: #1250928 Man page for ipa-server-install is out of sync
    - install: Fix server and replica install options
  - Resolves: #1251225 IPA default CAACL does not allow cert-request for services
    after upgrade
    - Fix default CA ACL added during upgrade
  - Resolves: #1251561 ipa vault-add Unknown option: ipavaultpublickey
    - validate mutually exclusive options in vault-add
  - Resolves: #1251579 ipa vault-add --user should set container owner equal to
    user on first run
    - Fixed vault container ownership.
  - Resolves: #1252517 cert-request rejects request with correct
    krb5PrincipalName SAN
    - Fix KRB5PrincipalName / UPN SAN comparison
  - Resolves: #1252555 ipa vault-find doesn't work for services
    - vault: Add container information to vault command results
    - Add flag to list all service and user vaults
  - Resolves: #1252556 Missing CLI param and ACL for vault service operations
    - Added CLI param and ACL for vault service operations.
  - Resolves: #1252557 certprofile: improve profile format documentation
    - certprofile-import: improve profile format documentation
    - certprofile: add profile format explanation
  - Resolves: #1253443 ipa vault-add creates vault with invalid type
    - vault: validate vault type
  - Resolves: #1253480 ipa vault-add-owner does not fail when adding an existing
    owner
    - baseldap: Allow overriding member param label in LDAPModMember
    - vault: Fix param labels in output of vault owner commands
  - Resolves: #1253511 ipa vault-find does not use criteria
    - vault: Fix vault-find with criteria
  - Resolves: #1254038 ipa-replica-install pk12util error returns exit status 10
    - install: Fix replica install with custom certificates
  - Resolves: #1254262 ipa-dnskeysync-replica crash cannot contact kdc
    - improve the handling of krb5-related errors in dnssec daemons
  - Resolves: #1254412 when dirsrv is off ,upgrade from 7.1 to 7.2 fails with
    starting CA and named-pkcs11.service
    - Server Upgrade: Start DS before CA is started.
  - Resolves: #1254637 Add ACI and permission for managing user userCertificate
    attribute
    - add permission: System: Manage User Certificates
  - Resolves: #1254641 Remove CSR allowed-extensions restriction
    - cert-request: remove allowed extensions check
  - Resolves: #1254693 vault --service does not normalize service principal
    - vault: normalize service principal in service vault operations
  - Resolves: #1254785 ipa-client-install does not properly handle dual stacked
    hosts
    - client: Add support for multiple IP addresses during installation.
    - Add dependency to SSSD 1.13.1
    - client: Add description of --ip-address and --all-ip-addresses to man page


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-6
changelog:
  - Resolves: #1249226 IPA dnssec-validation not working for AD dnsforwardzone
    - DNSSEC: fix forward zone forwarders checks
  - Resolves: #1250190 idrange is not added for sub domain
    - trusts: format Kerberos principal properly when fetching trust topology
  - Resolves: #1252334 User life cycle: missing ability to provision a stage user
    from a preserved user
    - Add user-stage command
  - Resolves: #1252863 After applying RHBA-2015-1554 errata, IPA service fails to
    start.
    - spec file: Add Requires(post) on selinux-policy
  - Resolves: #1254304 Changing vault encryption attributes
    - Change internal rsa_(public|private)_key variable names
    - Added support for changing vault encryption.
  - Resolves: #1256715 Executing user-del --preserve twice removes the user
    pernamently
    - improve the usability of `ipa user-del --preserve` command


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-7
changelog:
  - Resolves: #1256840 [webui] majority of required fields is no longer marked as
    required
    - fix missing information in object metadata
  - Resolves: #1256842 [webui] no option to choose trust type when creating a
    trust
    - webui: add option to establish bidirectional trust
  - Resolves: #1256853 Clear text passwords in KRA install log
    - Removed clear text passwords from KRA install log.
  - Resolves: #1257072 The "Standard Vault" MUST not be the default and must be
    discouraged
    - vault: change default vault type to symmetric
  - Resolves: #1257163 renaming certificatte profile with --rename option leads
    to integrity issues
    - certprofile: prevent rename (modrdn)


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-8
changelog:
  - Resolves: #1254689 Storing big file as a secret in vault raises traceback
    - vault: Limit size of data stored in vault
  - Resolves: #1255880 ipactl status should distinguish between different
    pki-tomcat services
    - ipactl: Do not start/stop/restart single service multiple times


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-9
changelog:
  - Resolves: #1257074 The KRA agent cert is stored in a PEM file that is not
    tracked
    - cert renewal: Include KRA users in Dogtag LDAP update
    - cert renewal: Automatically update KRA agent PEM file
  - Resolves: #1257163 renaming certificatte profile with --rename option leads
    to integrity issues
    - certprofile: remove 'rename' option
  - Resolves: #1257968 kinit stop working after ipa-restore
    - Backup: back up the hosts file
  - Resolves: #1258926 Remove 'DNSSEC is experimental' warnings
    - DNSSEC: remove "DNSSEC is experimental" warnings
  - Resolves: #1258929 Uninstallation of IPA leaves extra entry in /etc/hosts
    - Installer: do not modify /etc/hosts before user agreement
  - Resolves: #1258944 DNSSEC daemons may deadlock when processing more than 1
    zone
    - DNSSEC: backup and restore opendnssec zone list file
    - DNSSEC: remove ccache and keytab of ipa-ods-exporter
    - DNSSEC: prevent ipa-ods-exporter from looping after service auto-restart
    - DNSSEC: Fix deadlock in ipa-ods-exporter <-> ods-enforcerd interaction
    - DNSSEC: Fix HSM synchronization in ipa-dnskeysyncd when running on DNSSEC
      key master
    - DNSSEC: Fix key metadata export
    - DNSSEC: Wrap master key using RSA OAEP instead of old PKCS v1.5.
  - Resolves: #1258964 revert to use ldapi to add kra agent in KRA install
    - Using LDAPI to setup CA and KRA agents.
  - Resolves: #1259848 server closes connection and refuses commands after
    deleting user that is still logged in
    - ldap: Make ldap2 connection management thread-safe again
  - Resolves: #1259996 AttributeError: 'NameSpace' object has no attribute
    'ra_certprofile' while ipa-ca-install
    - load RA backend plugins during standalone CA install on CA-less IPA master


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-10
changelog:
  - Resolves: #1260663 crash of ipa-dnskeysync-replica component during
    ipa-restore
    - IPA Restore: allows to specify files that should be removed
  - Resolves: #1261806 Installing ipa-server package breaks httpd
    - Handle timeout error in ipa-httpd-kdcproxy
  - Resolves: #1262322 Failed to backup CS.cfg message in upgrade.
    - Server Upgrade: backup CS.cfg when dogtag is turned off


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-11
changelog:
  - Resolves: #1258965 ipa vault: set owner of vault container
    - baseldap: make subtree deletion optional in LDAPDelete
    - vault: add vault container commands
    - vault: set owner to current user on container creation
    - vault: update access control
    - vault: add permissions and administrator privilege
    - install: support KRA update
  - Resolves: #1261586 ipa config-mod addattr fails for ipauserobjectclasses
    - config: allow user/host attributes with tagging options
  - Resolves: #1262315 Unable to establish winsync replication
    - winsync: Add inetUser objectclass to the passsync sysaccount


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-12
changelog:
  - Resolves: #1204205 [RFE] ID Views: Automated migration tool from Winsync to
    Trusts
    - winsync-migrate: Convert entity names to posix friendly strings
    - winsync-migrate: Properly handle collisions in the names of external groups
  - Resolves: #1261074 Adjust Firefox configuration to new extension signing
    policy
    - webui: use manual Firefox configuration for Firefox >= 40
  - Resolves: #1263337 IPA Restore failed with installed KRA
    - ipa-backup: Add mechanism to store empty directory structure
  - Resolves: #1264793 CVE-2015-5284 ipa: ipa-kra-install includes certificate
    and private key in world readable file [rhel-7.2]
    - install: fix KRA agent PEM file permissions
  - Resolves: #1265086 Mark IdM API Browser as experimental
    - WebUI: add API browser is experimental warning
  - Resolves: #1265277 Fix kdcproxy user creation
    - install: create kdcproxy user during server install
    - platform: add option to create home directory when adding user
    - install: fix kdcproxy user home directory
  - Resolves: #1265559 GSS failure after ipa-restore
    - destroy httpd ccache after stopping the service


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-13
changelog:
  - Resolves: #1217009 OTP sync in UI does not work for TOTP tokens
    - Fix an integer underflow bug in libotp
  - Resolves: #1262996 ipa vault internal error on replica without KRA
    - install: always export KRA agent PEM file
    - vault: select a server with KRA for vault operations
  - Resolves: #1269777 IPA restore overwrites /etc/passwd and /etc/group files
    - do not overwrite files with local users/groups when restoring authconfig
  - Renamed patch 1011 to 0138, as it was merged upstream


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-14
changelog:
  - Resolves: #1262996 ipa vault internal error on replica without KRA
    - upgrade: make sure ldap2 is connected in export_kra_agent_pem
  - Resolves: #1270608 IPA upgrade fails for server with CA cert signed by
    external CA
    - schema: do not derive ipaVaultPublicKey from ipaPublicKey


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15
changelog:
  - Resolves: #1252556 Missing CLI param and ACL for vault service operations
    - vault: fix private service vault creation


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-16
changelog:
  - Resolves: #1277696 IPA certificate auto renewal fail with "Invalid
    Credential"
    - cert renewal: make renewal of ipaCert atomic
  - Resolves: #1278330 installer options are not validated at the beginning of
    installation
    - install: fix command line option validation
  - Resolves: #1282845 sshd_config change on ipa-client-install can prevent sshd
    from starting up
    - client install: do not corrupt OpenSSH config with Match sections
  - Resolves: #1282935 ipa upgrade causes vault internal error
    - install: export KRA agent PEM file in ipa-kra-install
  - Resolves: #1283429 Default CA ACL rule is not created during
    ipa-replica-install
    - TLS and Dogtag HTTPS request logging improvements
    - Avoid race condition caused by profile delete and recreate
    - Do not erroneously reinit NSS in Dogtag interface
    - Add profiles and default CA ACL on migration
    - disconnect ldap2 backend after adding default CA ACL profiles
    - do not disconnect when using existing connection to check default CA ACLs
  - Resolves: #1283430 ipa-kra-install: fails to apply updates
    - suppress errors arising from adding existing LDAP entries during KRA
      install
  - Resolves: #1283748 Caching of ipaconfig does not work in framework
    - fix caching in get_ipa_config
  - Resolves: #1283943 IPA DNS Zone/DNS Forward Zone details missing after
    upgrade from RHEL 7.0 to RHEL 7.2
    - upgrade: fix migration of old dns forward zones
    - Fix upgrade of forwardzones when zone is in realmdomains
  - Resolves: #1284413 ipa-cacert-manage renew fails on nonexistent ldap
    connection
    - ipa-cacert-renew: Fix connection to ldap.
  - Resolves: #1284414 ipa-otptoken-import fails on nonexistent ldap connection
    - ipa-otptoken-import: Fix connection to ldap.
  - Resolves: #1286635 IPA server upgrade fails from RHEL 7.0 to RHEL 7.2 using
    "yum update ipa* sssd"
    - Set minimal required version for openssl
  - Resolves: #1286781 ipa-nis-manage does not update ldap with all NIS maps
    - Upgrade: Fix upgrade of NIS Server configuration
  - Resolves: #1289311 umask setting causes named-pkcs11 issue with directory
    permissions on /var/lib/ipa/dnssec
    - DNS: fix file permissions
    - Explicitly call chmod on newly created directories
    - Fix: replace mkdir with chmod
  - Resolves: #1290142 Broken 7.2.0 to 7.2.z upgrade - flawed version comparison
    - Fix version comparison
    - use FFI call to rpmvercmp function for version comparison
  - Resolves: #1292595 In IPA-AD trust environment some secondary IPA based Posix
    groups are missing
    - ipa-kdb: map_groups() consider all results
  - Resolves: #1293870 User should be notified for wrong password in password
    reset page
    - Fixed login error message box in LoginScreen page
  - Resolves: #1296196 Sysrestore did not restore state if a key is specified in
    mixed case
    - Allow to used mixed case for sysrestore
  - Resolves: #1296214 DNSSEC key purging is not handled properly
    - DNSSEC: Improve error reporting from ipa-ods-exporter
    - DNSSEC: Make sure that current state in OpenDNSSEC matches key state in
      LDAP
    - DNSSEC: Make sure that current key state in LDAP matches key state in BIND
    - DNSSEC: remove obsolete TODO note
    - DNSSEC: add debug mode to ldapkeydb.py
    - DNSSEC: logging improvements in ipa-ods-exporter
    - DNSSEC: remove keys purged by OpenDNSSEC from master HSM from LDAP
    - DNSSEC: ipa-dnskeysyncd: Skip zones with old DNSSEC metadata in LDAP
    - DNSSEC: ipa-ods-exporter: add ldap-cleanup command
    - DNSSEC: ipa-dnskeysyncd: call ods-signer ldap-cleanup on zone removal
    - DNSSEC: Log debug messages at log level DEBUG
  - Resolves: #1296216 ipa-server-upgrade fails if certmonger is not running
    - prevent crash of CA-less server upgrade due to absent certmonger
    - always start certmonger during IPA server configuration upgrade
  - Resolves: #1297811 The ipa -e skip_version_check=1 still issues
    incompatibility error when called against RHEL 6 server
    - ipalib: assume version 2.0 when skip_version_check is enabled
  - Resolves: #1298289 install fails when locale is "fr_FR.UTF-8"
    - Do not decode HTTP reason phrase from Dogtag
  - Resolves: #1300252 shared certificateProfiles container is missing on a
    freshly installed RHEL7.2 system
    - upgrade: unconditional import of certificate profiles into LDAP
  - Resolves: #1301674 --setup-dns and other options is forgotten for using an
    external PKI
    - installer: Propagate option values from components instead of copying them.
    - installer: Fix logic of reading option values from cache.
  - Resolves: #1301687 issues with migration from RHEL 6 self-signed to RHEL 7 CA
    IPA setup
    - ipa-ca-install: print more specific errors when CA is already installed
    - cert renewal: import all external CA certs on IPA CA cert renewal
    - CA install: explicitly set dogtag_version to 10
    - fix standalone installation of externally signed CA on IPA master
    - replica install: validate DS and HTTP server certificates
    - replica install: improvements in the handling of CA-related IPA config
      entries
  - Resolves: #1301901 [RFE] compat tree: show AD members of IPA groups
    - slapi-nis: update configuration to allow external members of IPA groups
  - Resolves: #1305533 ipa trust-add succeded but after that ipa trust-find
    returns "0 trusts matched"
    - upgrade: fix config of sidgen and extdom plugins
    - trusts: use ipaNTTrustPartner attribute to detect trust entries
    - Warn user if trust is broken
    - fix upgrade: wait for proper DS socket after DS restart
    - Insure the admin_conn is disconnected on stop
    - Fix connections to DS during installation
    - Fix broken trust warnings
  - Resolves: #1321092 Installers fail when there are multiple versions of the
    same certificate
    - certdb: never use the -r option of certutil
  - Related: #1317381 Crash during IPA upgrade due to slapd
    - spec file: update minimum required version of slapi-nis
  - Related: #1322691 CVE-2015-5370 CVE-2016-2110 CVE-2016-2111 CVE-2016-2112
    CVE-2016-2113 CVE-2016-2114 CVE-2016-2115 CVE-2016-2118 samba: various flaws
    [rhel-7.3]
    - Rebuild against newer Samba version


author: Jan Cholasta <jcholast@redhat.com> - 4.3.1-0.201605191449GITf8edf37
changelog:
  - Resolves: #837369 [RFE] Switch to client promotion to replica model
  - Resolves: #1199516 [RFE] Move replication topology to the shared tree
  - Resolves: #1206588 [RFE] Visualize FreeIPA server replication topology
  - Resolves: #1211602 Hide ipa-server-install KDC master password option (-P)
  - Resolves: #1212713 ipa-csreplica-manage: it could be nice to have also
    list-ruv / clean-ruv / abort-clean-ruv for o=ipaca backend
  - Resolves: #1267206 ipa-server-install uninstall should warn if no
    installation found
  - Resolves: #1295865 The Domain option is not correctly set in idmapd.conf when
    ipa-client-automount is executed.
  - Resolves: #1327092 URI details missing and OCSP-URI details are incorrectly
    displayed when certificate generated using IPA on RHEL 7.2up2.
  - Resolves: #1332809 ipa-server-4.2.0-15.el7_2.6.1.x86_64 fails to install
    because of missing dependencies
  - Related: #1292141 Rebase to FreeIPA 4.4+
    - Rebase to 4.3.1.201605191449GITf8edf37


author: Jan Cholasta <jcholast@redhat.com> - 4.3.1-0.201605191449GITf8edf37.1
changelog:
  - Resolves: #1332809 ipa-server-4.2.0-15.el7_2.6.1.x86_64 fails to install
    because of missing dependencies
    - Rebuild with krb5-1.14.1


author: Jan Cholasta <jcholast@redhat.com> - 4.3.1-0.201605241723GIT1b427d3
changelog:
  - Resolves: #1339233 CA installed on replica is always marked as renewal master
  - Related: #1292141 Rebase to FreeIPA 4.4+
    - Rebase to 4.3.1.201605241723GIT1b427d3


author: Jan Cholasta <jcholast@redhat.com> - 4.3.1-0.201605241723GIT1b427d3.1
changelog:
  - Resolves: #1339483 ipa-server-install fails with ERROR pkinit_cert_files
    - Fix incorrect rebase of patch 1001


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-0.1.alpha1
changelog:
  - Resolves: #712109 "krbExtraData not allowed" is logged in DS error log while
    setting password for default sudo binddn.
  - Resolves: #747612 [RFE] IPA should support and manage DNS sites
  - Resolves: #768316 [RFE] ipa-getkeytab should auto-detect the ipa server name
  - Resolves: #825391 [RFE] Replica installation should provide a means for
    inheriting nssldap security access settings
  - Resolves: #921497 Incorrect *.py[co] files placement
  - Resolves: #1029640 RHEL7 IPA to add DNA Plugin config for dnaRemote support
  - Resolves: #1029905 389 DS cache sizes not replicated to IPA replicas
  - Resolves: #1196958 IPA replica installation failing with high number of users
    (160000).
  - Resolves: #1219402 IPA suggests to uninstall a client when the user needs to
    uninstall a replica
  - Resolves: #1224057 [RFE] TGS authorization decisions in KDC based on
    Authentication Indicator
  - Resolves: #1234222 [WebUI] UI error message is not appropriate for "Kerberos
    principal expiration"
  - Resolves: #1234223 [WebUI] General invalid password error message appearing
    for "Locked user"
  - Resolves: #1254267 ipa-server-install failure applying ldap updates with
    limits exceeded
  - Resolves: #1258626 realmdomains-mod --add-domain command throwing error when
    doamin already is in forwardzone.
  - Resolves: #1259020 ipa-server-adtrust-install doesn't allow
    NetBIOS-name=EXAMPLE-TEST.COM (dash character)
  - Resolves: #1260993 DNSSEC signing enablement on dnszone should throw error
    message when DNSSEC master not installed
  - Resolves: #1262747 dnssec options missing in ipa-dns-install man page
  - Resolves: #1265900 Fail installation immediately after dirsrv fails to
    install using ipa-server-install
  - Resolves: #1265915 idoverrideuser-find fails if any SID anchor is not
    resolvable anymore
  - Resolves: #1268027 ipa-dnskeysync-replica crash with backtrace -
    LimitsExceeded: limits exceeded for this query
  - Resolves: #1269089 Certificate of managed-by host/service fails to resubmit
  - Resolves: #1269200 ipa-server crashing while trying to preserve admin user
  - Resolves: #1271321 Reduce ioblocktimeout and idletimeout defaults
  - Resolves: #1271579 Automember rule expressions disappear from tables on
    single expression delete
  - Resolves: #1275816 Incomplete ports for IPA ad-trust
  - Resolves: #1276351 [RFE] Remove
    /usr/share/ipa/updates/50-lockout-policy.update file from IPA releases
  - Resolves: #1277109 Add tool tips for Revert, Refresh, Undo, and Undo All in
    the IPA UI
  - Resolves: #1278426 Better error message needed for invalid ca-signing-algo
    option
  - Resolves: #1279932 ipa-client-install --request-cert needs workaround in
    anaconda chroot
  - Resolves: #1282521 Creating a user w/o private group fails when doing so in
    WebUI
  - Resolves: #1283879 ipa-winsync-migrate: Traceback message should be replaced
    by "IPA is not configured on this system"
  - Resolves: #1285071 ipa-kra-install fails on replica looking for admin cert
    file
  - Resolves: #1287194 [RFE] Support of UPN for trusted domains
  - Resolves: #1288967 Normalize Manager entry in ipa user-add
  - Resolves: #1289487 Priority field missing in Password Policy detail tab
  - Resolves: #1291140 ipa client should configure kpasswd_server directive in
    krb5.conf
  - Resolves: #1292141 Rebase to FreeIPA 4.4+
    - Rebase to 4.4.0.alpha1
  - Resolves: #1298848 [RFE] Centralized topology management
  - Resolves: #1300576 Browser setup page includes instructions for Internet
    Explorer
  - Resolves: #1301586 ipa host-del --updatedns should remove related dns
    entries.
  - Resolves: #1304618 Residual Files After IPA Server Uninstall
  - Resolves: #1305144 ipa-python does not require its dependencies
  - Resolves: #1309700 Process /usr/sbin/winbindd was killed by signal 6
  - Resolves: #1313798 Console output post ipa-winsync-migrate command should be
    corrected.
  - Resolves: #1314786 [RFE] External Trust with Active Directory domain
  - Resolves: #1319023 Include description for 'status' option in man page for
    ipactl command.
  - Resolves: #1319912 ipa-server-install does not completely change hostname and
    named-pkcs11 fails
  - Resolves: #1320891 IPA Error 3009: Validation error: Invalid 'ptrrecord':
    Reverse zone in-addr.arpa. requires exactly 4 IP address compnents, 5 given
  - Resolves: #1327207 ipa cert-revoke --help doesn't provide enough info on
    revocation reasons
  - Resolves: #1328549 "ipa-kra-install" command reports incorrect message when
    it is executed on server already installed with KRA.
  - Resolves: #1329209 ipa-nis-manage enable: change service name from 'portmap'
    to 'rpcbind'
  - Resolves: #1329275 ipa-nis-manage command should include status option
  - Resolves: #1330843 'man ipa' should be updated with latest commands
  - Resolves: #1333755 ipa cert-request causes internal server error while
    requesting certificate
  - Resolves: #1337484 EOF is not handled for ipa-client-install command
  - Resolves: #1338031 Insufficient 'write' privilege on some attributes for the
    members of the role which has "User Administrators" privilege.
  - Resolves: #1343142 IPA DNS should do better verification of DNS zones
  - Resolves: #1347928 Frontpage exposes runtime error with no cookies enabled in
    browser


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-0.2.alpha1
changelog:
  - Resolves: #1348948 IPA server install fails with build
    ipa-server-4.4.0-0.el7.1.alpha1
    - Revert "Increased mod_wsgi socket-timeout"


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-1
changelog:
  - Resolves: #747612 [RFE] IPA should support and manage DNS sites
  - Resolves: #826790 Disabling password expiration (--maxlife=0 and --minlife=0)
    in the default global_policy in IPA sets user's password expiration
    (krbPasswordExpiration) to be 90 days
  - Resolves: #896699 ipa-replica-manage -H does not delete DNS SRV records
  - Resolves: #1084018 [RFE] Add IdM user password change support for legacy
    client compat tree
  - Resolves: #1117306 [RFE] Allow multiple Principals per host entry (Kerberos
    aliases)
    - Fix incorrect check for principal type when evaluating CA ACLs
  - Resolves: #1146860 [RFE] Offer OTP generation for host enrollment in the UI
  - Resolves: #1238190 ipasam unable to lookup group in directory yet manual
    search works
  - Resolves: #1250110 search by users which don't have read rights for all attrs
    in search_attributes fails
  - Resolves: #1263764 Show Certificate displays in useless format
  - Resolves: #1272491 [WebUI] Certificate action dropdown does not display all
    the options after adding new certificate
  - Resolves: #1292141 Rebase to FreeIPA 4.4+
    - Rebase to 4.4.0
  - Resolves: #1294503 IPA fails to issue 3rd party certs
  - Resolves: #1298242 [RFE] API compatibility - compatibility of clients
  - Resolves: #1298848 [RFE] Centralized topology management
  - Resolves: #1298966 [RFE] Extend Smart Card support
  - Resolves: #1315146 Multiple clients cannot join domain simultaneously:
    /var/run/httpd/ipa/clientcaches race condition?
  - Resolves: #1318903 ipa server install failing when SUBCA signs the cert
  - Resolves: #1319003 ipa-winsync-migrate: Traceback should be fixed with proper
    console output
  - Resolves: #1324055 IPA always qualify requests for admin
  - Resolves: #1328552 [RFE] Allow users to authenticate with alternative names
  - Resolves: #1334582 Inconsistent UI and CLI options for removing certificate
    hold
  - Resolves: #1346321 Exclude o=ipaca subtree from Retro Changelog (syncrepl)
  - Resolves: #1349281 Fix `Conflicts` with ipa-python
  - Resolves: #1350695 execution of copy-schema script fails
  - Resolves: #1351118 upgrade failed for RHEL-7.3 from RHEL-7.2.z
  - Resolves: #1351153 AVC seen on Replica during ipa-server upgrade test
    execution to 7.3
  - Resolves: #1351276 ipa-server-install with dns cannot resolve itself to
    create ipa-ca entry
  - Related: #1343422 [RFE] Add GssapiImpersonate option


author: Petr Vobornik <pvoborni@redhat.com> - 4.4.0-2
changelog:
  - Resolves: #1356102 Server uninstall does not stop tracking lightweight sub-CA
    with certmonger
    - uninstall: untrack lightweight CA certs
  - Resolves: #1351807 ipa-nis-manage config.get_dn missing
    - ipa-nis-manage: Use server API to retrieve plugin status
  - Resolves: #1353452 ipa-compat-manage command failed,
    exception: NotImplementedError: config.get_dn()
    - ipa-compat-manage: use server API to retrieve plugin status
  - Resolves: #1353899 ipa-advise: object of type 'type' has no len()
    - ipa-advise: correct handling of plugin namespace iteration
  - Resolves: #1356134 'kinit -E' does not work for IPA user
    - kdb: check for local realm in enterprise principals
  - Resolves: #1353072 ipa unknown command vault-add
    - Enable vault-* commands on client
    - vault-add: set the default vault type on the client side if none was given
  - Resolves: #1353995 Default CA can be used without a CA ACL
    - caacl: expand plugin documentation
  - Resolves: #1356144 host-find should not print SSH keys by default, only
    SSH fingerprints
    - host-find: do not show SSH key by default
  - Resolves: #1353506 ipa migrate-ds command fails for IPA in RHEL 7.3
    - Removed unused method parameter from migrate-ds


author: Petr Vobornik <pvoborni@redhat.com> - 4.4.0-2.1
changelog:
  - Resolves: #1274524 [RFE] Qualify up to 60 IdM replicas
  - Resolves: #1320838 [RFE] Support IdM Client in a DNS domain controlled by AD
  - Related: #1356134 'kinit -E' does not work for IPA user


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-3
changelog:
  - Resolves: #1296140 Remove redhat-access-plugin-ipa support
    - Obsolete and conflict redhat-access-plugin-ipa
  - Resolves: #1351119 Multiple issues while uninstalling ipa-server
    - server uninstall fails to remove krb principals
  - Resolves: #1351758 ipa commands not showing expected error messages
    - frontend: copy command arguments to output params on client
    - Show full error message for selinuxusermap-add-hostgroup
  - Resolves: #1352883 Traceback on adding default automember group and hostgroup
    set
    - allow 'value' output param in commands without primary key
  - Resolves: #1353888 Fix the help for ipa otp and other topics
    - schema: Fix subtopic -> topic mapping
  - Resolves: #1354348 ipa trustconfig-show throws internal error.
    - allow 'value' output param in commands without primary key
  - Resolves: #1354381 ipa trust-add with raw option gives internal error.
    - trust-add: handle `--all/--raw` options properly
  - Resolves: #1354493 Replica install fails with old IPA master
    - DNS install: Ensure that DNS servers container exists
  - Resolves: #1354628 ipa hostgroup-add-member does not return error message
    when adding itself as member
    - frontend: copy command arguments to output params on client
  - Resolves: #1355856 ipa otptoken-add --type=totp gives internal error
    - messages: specify message type for ResultFormattingError
  - Resolves: #1356063 "ipa radiusproxy-add" command needs to prompt to enter
    secret key
    - expose `--secret` option in radiusproxy-* commands
    - prevent search for RADIUS proxy servers by secret
  - Resolves: #1356099 Bug in the ipapwd plugin
    - Heap corruption in ipapwd plugin
  - Resolves: #1356899 com.redhat.idm.trust.fetch_domains need update after thin
    client changes
    - Use server API in com.redhat.idm.trust-fetch-domains oddjob helper
  - Resolves: #1356964 Renaming a user removes all of his principal aliases
    - Preserve user principal aliases during rename operation


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-4
changelog:
  - Resolves: #1117306 [RFE] Allow multiple Principals per host entry (Kerberos
    aliases)
    - harden the check for trust namespace overlap in new principals
  - Resolves: #1351142 CLI is not using session cookies for communication with
    IPA API
    - Fix session cookies
  - Resolves: #1353888 Fix the help for ipa otp and other topics
    - help: Add dnsserver commands to help topic 'dns'
  - Resolves: #1354406 host-del updatedns options complains about missing ptr
    record for host
    - Host-del: fix behavior of --updatedns and PTR records
  - Resolves: #1355718 ipa-replica-manage man page example output differs actual
    command output
    - Minor fix in ipa-replica-manage MAN page
  - Resolves: #1358229 Traceback message should be fixed, seen while editing
    winsync migrated user information in Default trust view.
    - baseldap: Fix MidairCollision instantiation during entry modification
  - Resolves: #1358849 CA replica install logs to wrong log file
    - unite log file name of ipa-ca-install
  - Resolves: #1359130 ipa-server-install command fails to install IPA server.
    - DNS Locations: fix update-system-records unpacking error
  - Resolves: #1359237 AVC on dirsrv config caused by IPA installer
    - Use copy when replacing files to keep SELinux context
  - Resolves: #1359692 ipa-client-install join fail with traceback against
    RHEL-6.8 ipa-server
    - compat: fix ping call
  - Resolves: #1359738 ipa-replica-install --domain=<IPA primary domain> option
    does not work
    - replica-install: Fix --domain
  - Resolves: #1360778 Vault commands are available in CLI even when the server
    does not support them
    - Revert "Enable vault-* commands on client"
    - client: fix hiding of commands which lack server support
  - Related: #1281704 Rebase to softhsm 2.1.0
    - Remove the workaround for softhsm bug #1293340
  - Related: #1298288 [RFE] Improve performance in large environments.
    - Create indexes for krbCanonicalName attribute


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-5
changelog:
  - Resolves: #1353829 traceback message seen in ipaserver-uninstall.log file.
    - Do not initialize API in ipa-client-automount uninstall
  - Resolves: #1356899 com.redhat.idm.trust.fetch_domains need update after thin
    client changes
    - idrange: fix unassigned global variable
  - Resolves: #1360792 Migrating users doesn't update krbCanonicalName
    - re-set canonical principal name on migrated users
  - Resolves: #1362012 ipa hbactest produces error about cannot concatenate 'str'
    and 'bool' objects
    - Fix ipa hbactest output
  - Resolves: #1362260 ipa vault-mod no longer allows defining salt
    - vault: add missing salt option to vault_mod
  - Resolves: #1362312 ipa vault-retrieve internal error when using the wrong
    public key
    - vault: Catch correct exception in decrypt
  - Resolves: #1362537 ipa-server-install fails to create symlink from
    /etc/ipa/kdcproxy/ to /etc/httpd/conf.d/
    - Correct path to HTTPD's systemd service directory
  - Resolves: #1363756 Increase length of passwords generated by installer
    - Increase default length of auto generated passwords


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-6
changelog:
  - Resolves: #1309700 Process /usr/sbin/winbindd was killed by signal 6
    - Revert "spec: add conflict with bind-chroot to freeipa-server-dns"
  - Resolves: #1341249 Subsequent external CA installation fails
    - install: fix external CA cert validation
  - Resolves: #1353831 ipa-server-install fails in container because of
    hostnamectl set-hostname
    - server-install: Fix --hostname option to always override api.env values
    - install: Call hostnamectl set-hostname only if --hostname option is used
  - Resolves: #1356091 ipa-cacert-manage --help and man differ
    - Improvements for the ipa-cacert-manage man and help
  - Resolves: #1360631 ipa-backup is not keeping the
    /etc/tmpfiles.d/dirsrv-<instance>.conf
    - ipa-backup: backup /etc/tmpfiles.d/dirsrv-<instance>.conf
  - Resolves: #1361047 ipa-replica-install --help usage line suggests the replica
    file is needed
    - Update ipa-replica-install documentation
  - Resolves: #1361545 ipa-client-install starts rhel-domainname.service but does
    not rpm-require it
    - client: RPM require initscripts to get *-domainname.service
  - Resolves: #1364197 caacl: error when instantiating rules with service
    principals
    - caacl: fix regression in rule instantiation
  - Resolves: #1364310 ipa otptoken-add bytes object has no attribute confirm
    - parameters: move the `confirm` kwarg to Param
  - Resolves: #1364464 Topology graph: ca and domain adders shows question marks
    instead of plus icon
    - Fix unicode characters in ca and domain adders
  - Resolves: #1365083 Incomplete output returned for command ipa vault-add
    - client: add missing output params to client-side commands
  - Resolves: #1365526 build fails during "make check"
    - ipa-kdb: Fix unit test after packaging changes in krb5


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-7
changelog:
  - Resolves: #1361119 UPN-based search for AD users does not match an entry in
    slapi-nis map cache
    - support multiple uid values in schema compatibility tree


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-8
changelog:
  - Resolves: #1298288 [RFE] Improve performance in large environments.
    - cert: speed up cert-find
  - Resolves: #1317379 [EXPERIMENTAL][RFE] Web UI: allow Smart Card
    authentication
    - service: add flag to allow S4U2Self
    - Add 'trusted to auth as user' checkbox
    - Added new authentication method
  - Resolves: #1353881 ipa-replica-install suggests about
    non-existent --force-ntpd option
    - Don't show --force-ntpd option in replica install
  - Resolves: #1354441 DNS forwarder check is too strict: unable to add
    sub-domain to already-broken domain
    - DNS: allow to add forward zone to already broken sub-domain
  - Resolves: #1356146 performance regression in CLI help
    - schema: Speed up schema cache
    - frontend: Change doc, summary, topic and NO_CLI to class properties
    - schema: Introduce schema cache format
    - schema: Generate bits for help load them on request
    - help: Do not create instances to get information about commands and topics
    - schema cache: Do not reset ServerInfo dirty flag
    - schema cache: Do not read fingerprint and format from cache
    - Access data for help separately
    - frontent: Add summary class property to CommandOverride
    - schema cache: Read server info only once
    - schema cache: Store API schema cache in memory
    - client: Do not create instance just to check isinstance
    - schema cache: Read schema instead of rewriting it when SchemaUpToDate
  - Resolves: #1360769 ipa-server-certinstall couldnt unlock private key file
    - server install: do not prompt for cert file PIN repeatedly
  - Resolves: #1364113 ipa-password: ipa: ERROR: RuntimeError: Unable to create
    cache directory: [Errno 13] Permission denied: '/home/test_user'
    - schema: Speed up schema cache
  - Resolves: #1366604 `cert-find` crashes on invalid certificate data
    - cert: do not crash on invalid data in cert-find
  - Resolves: #1366612 Middle replica uninstallation in line topology works
    without '--ignore-topology-disconnect'
    - Fail on topology disconnect/last role removal
  - Resolves: #1366626 caacl-add-service: incorrect error message when service
    does not exists
    - Fix ipa-caalc-add-service error message
  - Resolves: #1367022 The ipa-server-upgrade command failed when named-pkcs11
    does not happen to run during dnf upgrade
    - DNS server upgrade: do not fail when DNS server did not respond
  - Resolves: #1367759 [RFE] [webui] warn admin if there is only one IPA server
    with CA
    - Add warning about only one existing CA server
    - Set servers list as default facet in topology facet group
  - Resolves: #1367773 thin client ignores locale change
    - schema check: Check current client language against cached one


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-9
changelog:
  - Resolves: #1081561 CA not start during ipa server install in pure IPv6 env
    - Fix ipa-server-install in pure IPv6 environment
  - Resolves: #1318169 Tree-root domains in a trusted AD forest aren't marked as
    reachable via the forest root
    - trust: make sure ID range is created for the child domain even if it exists
    - ipa-kdb: simplify trusted domain parent search
  - Resolves: #1335567 Update Warning in IdM Web UI API browser
    - WebUI: add API browser is tech preview warning
  - Resolves: #1348560 Mulitple domain Active Directory Trust conflict
    - ipaserver/dcerpc: reformat to make the code closer to pep8
    - trust: automatically resolve DNS trust conflicts for triangle trusts
  - Resolves: #1351593 CVE-2016-5404 ipa: Insufficient privileges check in
    certificate revocation
    - cert-revoke: fix permission check bypass (CVE-2016-5404)
  - Resolves: #1353936 custodia.conf and server.keys file is world-readable.
    - Remove Custodia server keys from LDAP
    - Secure permissions of Custodia server.keys
  - Resolves: #1358752 ipa-ca-install fails on replica when IPA server is
    converted from CA-less to CA-full
    - custodia: include known CA certs in the PKCS#12 file for Dogtag
    - custodia: force reconnect before retrieving CA certs from LDAP
  - Resolves: #1362333 ipa vault container owner cannot add vault
    - Fix: container owner should be able to add vault
  - Resolves: #1365546 External trust with root domain is transitive
    - trust: make sure external trust topology is correctly rendered
  - Resolves: #1365572 IPA server broken after upgrade
    - Require pki-core-10.3.3-7
  - Resolves: #1367864 Server assumes latest version of command instead of
    version 1 for old / 3rd party clients
    - rpcserver: assume version 1 for unversioned command calls
    - rpcserver: fix crash in XML-RPC system commands
  - Resolves: #1367773 thin client ignores locale change
    - schema cache: Fallback to 'en_us' when locale is not available
  - Resolves: #1368754 ipa server uninstall fails with Python "Global Name error"
    - Fail on topology disconnect/last role removal
  - Resolves: #1368981 ipa otptoken-add --type=hotp --key creates wrong OTP
    - otptoken, permission: Convert custom type parameters on server
  - Resolves: #1369414 ipa server-del fails with Python stack trace
    - Handled empty hostname in server-del command
  - Resolves: #1369761 ipa-server must depend on a version of httpd that support
    mod_proxy with UDS
    - Require httpd 2.4.6-31 with mod_proxy Unix socket support
  - Resolves: #1370512 Received ACIError instead of DuplicatedError in
    stageuser_tests
    - Raise DuplicatedEnrty error when user exists in delete_container
  - Resolves: #1371479 cert-find --all does not show information about revocation
    - cert: add missing param values to cert-find output
  - Renamed patch 1011 to 0100, as it was merged upstream


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-10
changelog:
  - Resolves: #1355753 adding two way non transitive(external) trust displays
    internal error on the console
    - Always fetch forest info from root DCs when establishing two-way trust
    - factor out `populate_remote_domain` method into module-level function
    - Always fetch forest info from root DCs when establishing one-way trust
  - Resolves: #1356101 Lightweight sub-CA certs are not tracked by certmonger
    after `ipa-replica-install`
    - Track lightweight CAs on replica installation
  - Resolves: #1357488 ipa command stuck forever on higher versioned client with
    lower versioned server
    - compat: Save server's API version in for pre-schema servers
    - compat: Fix ping command call
    - schema cache: Store and check info for pre-schema servers
  - Resolves: #1363905 man page for ipa-replica-manage has a typo in -c flag
    - Fix man page ipa-replica-manage: remove duplicate -c option
      from --no-lookup
  - Resolves: #1367865 webui: cert_revoke should use --cacn to set correct CA
    when revoking certificate
    - cert: include CA name in cert command output
    - WebUI add support for sub-CAs while revoking certificates
  - Resolves: #1368424 Unable to view certificates issued by Sub CA in Web UI
    - Add support for additional options taken from table facet
    - WebUI: Fix showing certificates issued by sub-CA
  - Resolves: #1368557 dnsrecord-add does not prompt for missing record parts
    internactively
    - dns: normalize record type read interactively in dnsrecord_add
    - dns: prompt for missing record parts in CLI
    - dns: fix crash in interactive mode against old servers
  - Resolves: #1370519 Certificate revocation in service-del and host-del isn't
    aware of Sub CAs
    - cert: fix cert-find --certificate when the cert is not in LDAP
    - Make host/service cert revocation aware of lightweight CAs
  - Resolves: #1371901 Use OAEP padding with custodia
    - Use RSA-OAEP instead of RSA PKCS#1 v1.5
  - Resolves: #1371915 When establishing external two-way trust, forest root
    Administrator account is used to fetch domain info
    - do not use trusted forest name to construct domain admin principal
  - Resolves: #1372597 Incorrect CA ACL evaluation of SAN DNS names in
    certificate request
    - Fix CA ACL Check on SubjectAltNames
  - Resolves: #1373272 CLI always sends default command version
    - cli: use full name when executing a command
  - Resolves: #1373359 ipa-certupdate fails with "CA is not configured"
    - Fix ipa-certupdate for CA-less installation
  - Resolves: #1373540 client-install with IPv6 address fails on link-local
    address (always)
    - Fix parse errors with link-local addresses


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-11
changelog:
  - Resolves: #1373359 ipa-certupdate fails with "CA is not configured"
    - Fix regression introduced in ipa-certupdate


author: Petr Vobornik <pvoborni@redhat.com> - 4.4.0-12
changelog:
  - Resolves: #1373910 IPA server upgrade fails with DNS timed out errors.
  - Resolves: #1375269 ipa trust-fetch-domains throws internal error


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-13
changelog:
  - Resolves: #1318616 CA fails to start after doing ipa-ca-install --external-ca
    - Keep NSS trust flags of existing certificates
  - Resolves: #1360813 ipa-server-certinstall does not update all certificate
    stores and doesn't set proper trust permissions
    - Add cert checks in ipa-server-certinstall
  - Resolves: #1371479 cert-find --all does not show information about revocation
    - cert: add revocation reason back to cert-find output
  - Resolves: #1375133 WinSync users who have First.Last casing creates users who
    can have their password set
    - ipa passwd: use correct normalizer for user principals
  - Resolves: #1377858 Users with 2FA tokens are not able to login to IPA servers
    - Properly handle LDAP socket closures in ipa-otpd
  - Resolves: #1387779 Make httpd publish CA certificate on Domain Level 1
    - Make httpd publish its CA certificate on DL1


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-14
changelog:
  - Resolves: #1378353 Replica install fails with old IPA master sometimes during
    replication process
    - spec file: bump minimal required version of 389-ds-base
  - Resolves: #1387779 Make httpd publish CA certificate on Domain Level 1
    - Fix missing file that fails DL1 replica installation
  - Resolves: #1387782 WebUI: Services are not displayed correctly after upgrade
    - WebUI: services without canonical name are shown correctly
  - Resolves: #1389709 Traceback seen in error_log when trustdomain-del is run
    - trustdomain-del: fix the way how subdomain is searched


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-14.1
changelog:
  - Resolves: #1370493 CVE-2016-7030 ipa: DoS attack against kerberized services
    by abusing password policy
    - password policy: Add explicit default password policy for hosts and
      services
  - Resolves: #1395311 CVE-2016-9575 ipa: Insufficient permission check in
    certprofile-mod
    - certprofile-mod: correctly authorise config update


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-14.2
changelog:
  - Resolves: #1382812 Creation of replica for disconnected environment is
    failing with CA issuance errors; Need good steps.
    - gracefully handle setting replica bind dn group on old masters
  - Resolves: #1397439 ipa-ca-install on promoted replica hangs on creating a
    temporary CA admin
    - replication: ensure bind DN group check interval is set on replica config
    - add missing attribute to ipaca replica during CA topology update
  - Resolves: #1401088 IPA upgrade of replica without DNS fails during restart of
    named-pkcs11
    - bindinstance: use data in named.conf to determine configuration status


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-14.3
changelog:
  - Resolves: #1398670 Check IdM Topology for broken record caused by replication
    conflict before upgrading it
    - Check for conflict entries before raising domain level


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-14.4
changelog:
  - Resolves: #1370493 CVE-2016-7030 ipa: DoS attack against kerberized services
    by abusing password policy
    - ipa-kdb: search for password policies globally
  - Renamed patches 1011 and 1012 to 0151 and 0150, as they were merged upstream


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-14.5
changelog:
  - Resolves: #1365858 ipa-ca-install fails on replica when IPA Master is
    installed without CA
    - Set up DS TLS on replica in CA-less topology
  - Resolves: #1398600 IPA replica install fails with dirsrv errors.
    - Do not configure PKI ajp redirection to use "::1"
  - Resolves: #1413137 CVE-2017-2590 ipa: Insufficient permission check for
    ca-del, ca-disable and ca-enable commands
    - ca: correctly authorise ca-del, ca-enable and ca-disable


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-14.6
changelog:
  - Resolves: #1416454 replication race condition prevents IPA to install
    - wait_for_entry: use only DN as parameter
    - Wait until HTTPS principal entry is replicated to replica
    - Use proper logging for error messages


author: Jan Cholasta <jcholast@redhat.com> - 4.4.0-14.7
changelog:
  - Resolves: #1419735 ipa-replica-install fails promotecustodia.create_replica
    with cert errors (untrusted)
    - added ssl verification using IPA trust anchor
  - Resolves: #1428472 batch param compatibility is incorrect
    - compat: fix `Any` params in `batch` and `dnsrecord`
  - Renamed patches 1011 and 1012 to 0159 and 0157, as they were merged upstream


author: Jan Cholasta <jcholast@redhat.com> - 4.5.0-1.el7
changelog:
  - Resolves: #828866 [RFE] enhance --subject option for ipa-server-install
  - Resolves: #1160555 ipa-server-install: Cannot handle double hyphen "--" in
    hostname
  - Resolves: #1286288 Insufficient 'write' privilege to the 'ipaExternalMember'
    attribute
  - Resolves: #1321652 ipa-server-install fails when using external certificates
    that encapsulate RDN components in double quotes
  - Resolves: #1327207 ipa cert-revoke --help doesn't provide enough info on
    revocation reasons
  - Resolves: #1340880 ipa-server-install: improve prompt on interactive
    installation
  - Resolves: #1353841 ipa-replica-install fails to install when resolv.conf
    incomplete entries
  - Resolves: #1356104 cert-show command does not display Subject Alternative
    Names
  - Resolves: #1357511 Traceback message seen when ipa is provided with invalid
    configuration file name
  - Resolves: #1358752 ipa-ca-install fails on replica when IPA server is
    converted from CA-less to CA-full
  - Resolves: #1366572 [RFE] Web UI: allow Smart Card authentication
  - Resolves: #1367572 improve error message in ipa migrate-ds: mention ipa
    config-mod --enable-migration=TRUE
  - Resolves: #1367868 Add options to retrieve lightweight CA certificate/chain
  - Resolves: #1371927 Implement ca-enable/disable commands.
  - Resolves: #1372202 Add Users into User Group editors fails to show Full names
  - Resolves: #1373091 Adding an auth indicator from the CLI creates an extra
    check box in the UI
  - Resolves: #1375596 Ipa-server WebUI - long user/group name show wrong error
    message
  - Resolves: #1375905 "Normal" group type in the UI is confusing
  - Resolves: #1376040 IPA client ipv6 - invalid --ip-address shows traceback
  - Resolves: #1376630 IDM admin password gets written to
    /root/.dogtag/pki-tomcat/ca/pkcs12_password.conf
  - Resolves: #1376729 ipa-server-install script option --no_hbac_allow should
    match other options
  - Resolves: #1378461 IPA Allows Password Reuse with History value defined when
    admin resets the password.
  - Resolves: #1379029 conncheck failing intermittently during single step
    replica installs
  - Resolves: #1379858 [RFE] better debugging for ipa-replica-conncheck
  - Resolves: #1384310 ipa dnsrecord-add fails with Keyerror stack trace
  - Resolves: #1392778 Update man page for ipa-adtrust-install by
    removing --no-msdcs option
  - Resolves: #1392858 Rebase to FreeIPA 4.5+
    - Rebase to 4.5.0
  - Resolves: #1399133 Delete option shouldn't be available for hosts applied to
    view.
  - Resolves: #1399190 [RFE] Certificates issued by externally signed IdM CA
    should contain full trust chain
  - Resolves: #1400416 RFE: Provide option to take backup of IPA server before
    uninstalling IPA server
  - Resolves: #1400529 cert-request is not aware of Kerberos principal aliases
  - Resolves: #1401526 IPA WebUI certificates are grayed out on overview page but
    not on details page
  - Resolves: #1402959 [RFE] Universal Smart Card to Identity mapping
  - Resolves: #1404750 ipa-client-install fails to get CA cert via LDAP when
    non-FQDN name of IPA server is first in /etc/hosts
  - Resolves: #1409628 [RFE] Semi-automatic integration with external DNS using
    nsupdate
  - Resolves: #1413742 Backport request for bug/issue Change IP address
    validation errors to warnings
  - Resolves: #1415652 IPA replica install log shows password in plain text
  - Resolves: #1427897 different behavior regarding system wide certs in master
    and replica.
  - Resolves: #1430314 The ipa-managed-entries command failed, exception:
    AttributeError: ldap2


author: Jan Cholasta <jcholast@redhat.com> - 4.5.0-2.el7
changelog:
  - Resolves: #1432630 python2-jinja2 needed for python2-ipaclient
    - Remove csrgen
  - Resolves: #1432903 Set GssProxy options to enable caching of ldap tickets
    - Add options to allow ticket caching


author: Jan Cholasta <jcholast@redhat.com> - 4.5.0-3.el7
changelog:
  - Resolves: #800545 [RFE] Support SUDO command rename
    - Reworked the renaming mechanism
    - Allow renaming of the sudorule objects
  - Resolves: #872671 IPA WebUI login for AD Trusted User fails
    - WebUI: check principals in lowercase
    - WebUI: add method for disabling item in user dropdown menu
    - WebUI: Add support for login for AD users
  - Resolves: #1200767 [RFE] Allow Kerberos authentication for users with
    certificates on smart cards (pkinit)
    - ipa-kdb: add ipadb_fetch_principals_with_extra_filter()
    - IPA certauth plugin
    - ipa-kdb: do not depend on certauth_plugin.h
    - spec file: bump krb5-devel BuildRequires for certauth
  - Resolves: #1264370 RFE: disable last successful authentication by default in
    ipa.
    - Set "KDC:Disable Last Success" by default
  - Resolves: #1318186 Misleading error message during external-ca IPA master
    install
    - certs: do not implicitly create DS pin.txt
    - httpinstance: clean up /etc/httpd/alias on uninstall
  - Resolves: #1331443 Re-installing ipa-server after uninstall fails with "ERROR
    CA certificate chain in ... incomplete"
    - certs: do not implicitly create DS pin.txt
    - httpinstance: clean up /etc/httpd/alias on uninstall
  - Resolves: #1366572 [RFE] Web UI: allow Smart Card authentication
    - configure: fix --disable-server with certauth plugin
    - rpcserver.login_x509: Actually return reply from __call__ method
    - spec file: Bump requires to make Certificate Login in WebUI work
  - Resolves: #1402959 [RFE] Universal Smart Card to Identity mapping
    - extdom: do reverse search for domain separator
    - extdom: improve cert request
  - Resolves: #1430363 [RFE] HBAC rule names command rename
    - Reworked the renaming mechanism
    - Allow renaming of the HBAC rule objects
  - Resolves: #1433082 systemctl daemon-reload needs to be called after
    httpd.service.d/ipa.conf is manipulated
    - tasks: run `systemctl daemon-reload` after httpd.service.d updates
  - Resolves: #1434032 Run ipa-custodia with custom SELinux context
    - Use Custodia 0.3.1 features
  - Resolves: #1434384 RPC client should use HTTP persistent connection
    - Use connection keep-alive
    - Add debug logging for keep-alive
    - Increase Apache HTTPD's default keep alive timeout
  - Resolves: #1434729 man ipa-cacert-manage install needs clarification
    - man ipa-cacert-manage install needs clarification
  - Resolves: #1434910 replica install against IPA v3 master fails with ACIError
    - Fixing replica install: fix ldap connection in domlvl 0
  - Resolves: #1435394 Ipa-kra-install fails with weird output when backspace is
    used during typing Directory Manager password
    - ipapython.ipautil.nolog_replace: Do not replace empty value
  - Resolves: #1435397 ipa-replica-install can't install replica file produced by
    ipa-replica-prepare on 4.5
    - replica prepare: fix wrong IPA CA nickname in replica file
  - Resolves: #1435599 WebUI: in self-service Vault menu item is shown even if
    KRA is not installed
    - WebUI: Fix showing vault in selfservice view
  - Resolves: #1435718 As a ID user I cannot call a command with --rights option
    - ldap2: use LDAP whoami operation to retrieve bind DN for current connection
  - Resolves: #1436319 "Truncated search results" pop-up appears in user details
    in WebUI
    - WebUI: Add support for suppressing warnings
    - WebUI: suppress truncation warning in select widget
  - Resolves: #1436333 Uninstall fails with No such file or directory:
    '/var/run/ipa/services.list'
    - Create temporaty directories at the begining of uninstall
  - Resolves: #1436334 WebUI: Adding certificate mapping data using certificate
    fails
    - WebUI: Allow to add certs to certmapping with CERT LINES around
  - Resolves: #1436338 CLI doesn't work after ipa-restore
    - Backup ipa-specific httpd unit-file
    - Backup CA cert from kerberos folder
  - Resolves: #1436342 Bump samba version, required for FIPS mode and privilege
    separation
    - Bump samba version for FIPS and priv. separation
  - Resolves: #1436642 [ipalib/rpc.py] - "maximum recursion depth exceeded" with
    ipa vault commands
    - Avoid growing FILE ccaches unnecessarily
    - Handle failed authentication via cookie
    - Work around issues fetching session data
    - Prevent churn on ccaches
  - Resolves: #1436657 Add workaround for pki_pin for FIPS
    - Generate PIN for PKI to help Dogtag in FIPS
  - Resolves: #1436714 [vault] cache KRA transport cert
    - Simplify KRA transport cert cache
  - Resolves: #1436723 cert-find does not find all certificates without
    sizelimit=0
    - cert: do not limit internal searches in cert-find
  - Resolves: #1436724 Renewal of IPA RA fails on replica
    - dogtag-ipa-ca-renew-agent-submit: fix the is_replicated() function
  - Resolves: #1436753 Master tree fails to install
    - httpinstance.disable_system_trust: Don't fail if module 'Root Certs' is not
      available


author: Jan Cholasta <jcholast@redhat.com> - 4.5.0-4.el7
changelog:
  - Resolves: #1434032 Run ipa-custodia with custom SELinux context
    - Require correct custodia version


author: Jan Cholasta <jcholast@redhat.com> - 4.5.0-5.el7
changelog:
  - Resolves: #1318186 Misleading error message during external-ca IPA master
    install
    - httpinstance: make sure NSS database is backed up
  - Resolves: #1331443 Re-installing ipa-server after uninstall fails with "ERROR
    CA certificate chain in ... incomplete"
    - httpinstance: make sure NSS database is backed up
  - Resolves: #1393726 Enumerate all available request type options in ipa
    cert-request help
    - Hide request_type doc string in cert-request help
  - Resolves: #1402959 [RFE] Universal Smart Card to Identity mapping
    - spec file: bump libsss_nss_idmap-devel BuildRequires
    - server: make sure we test for sss_nss_getlistbycert
  - Resolves: #1437378 ipa-adtrust-install produced an error and failed on
    starting smb when hostname is not FQDN
    - adtrust: make sure that runtime hostname result is consistent with the
      configuration
  - Resolves: #1437555 ipa-replica-install with DL0 fails to get annonymous
    keytab
    - Always check and create anonymous principal during KDC install
    - Remove duplicate functionality in upgrade
  - Resolves: #1437946 Upgrade to FreeIPA 4.5.0 does not configure anonymous
    principal for PKINIT
    - Upgrade: configure PKINIT after adding anonymous principal
    - Remove unused variable from failed anonymous PKINIT handling
    - Split out anonymous PKINIT test to a separate method
    - Ensure KDC is propery configured after upgrade
  - Resolves: #1437951 Remove pkinit-related options from server/replica-install
    on DL0
    - Fix the order of cert-files check
    - Don't allow setting pkinit-related options on DL0
    - replica-prepare man: remove pkinit option refs
    - Remove redundant option check for cert files
  - Resolves: #1438490 CA-less installation fails on publishing CA certificate
    - Get correct CA cert nickname in CA-less
    - Remove publish_ca_cert() method from NSSDatabase
  - Resolves: #1438838 Avoid arch-specific path in /etc/krb5.conf.d/ipa-certmap
    - IPA-KDB: use relative path in ipa-certmap config snippet
  - Resolves: #1439038 Allow erasing ipaDomainResolutionOrder attribute
    - Allow erasing ipaDomainResolutionOrder attribute


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-6.el7
changelog:
  - Resolves: #1382053 Need to have validation for idrange names
    - idrange-add: properly handle empty --dom-name option
  - Resolves: #1435611 Tracebacks seen from dogtag-ipa-ca-renew-agent-submit
    helper when installing replica
    - dsinstance: reconnect ldap2 after DS is restarted by certmonger
    - httpinstance: avoid httpd restart during certificate request
    - dsinstance, httpinstance: consolidate certificate request code
    - install: request service certs after host keytab is set up
    - renew agent: revert to host keytab authentication
    - renew agent, restart scripts: connect to LDAP after kinit
  - Resolves: #1436987 ipasam: gidNumber attribute is not created in the trusted
    domain entry
    - ipa-sam: create the gidNumber attribute in the trusted domain entry
    - Upgrade: add gidnumber to trusted domain entry
  - Resolves: #1438679 [ipa-replica-install] - IncorrectPasswordException:
    Incorrect client security database password
    - Add pki_pin only when needed
  - Resolves: #1438348 Console output message while adding trust should be
    mapped with texts changed in Samba.
    - ipaserver/dcerpc: unify error processing
  - Resolves: #1438366 ipa trust-fetch-domains: ValidationError: invalid
    'Credentials': Missing credentials for cross-forest communication
    - trust: always use oddjobd helper for fetching trust information
  - Resolves: #1441192 Add the name of URL parameter which will be check for
    username during cert login
    - WebUI: cert login: Configure name of parameter used to pass username
  - Resolves: #1437879 [copr] Replica install failing
    - Create system users for FreeIPA services during package installation
  - Resolves: #1441316 WebUI cert auth fails after ipa-adtrust-install
    - Fix s4u2self with adtrust


author: Jan Cholasta <jcholast@redhat.com> - 4.5.0-7.el7
changelog:
  - Resolves: #1431520 ipa cert-find runs a large number of searches, so IPA
    WebUI is slow to display user details page
    - cert: defer cert-find result post-processing
  - Resolves: #1435611 Tracebacks seen from dogtag-ipa-ca-renew-agent-submit
    helper when installing replica
    - server-install: No double Kerberos install
  - Resolves: #1437502 ipa-replica-install fails with requirement to
    use --force-join that is a client install option.
    - Add the force-join option to replica install
    - replicainstall: better client install exception handling
  - Resolves: #1437953 Server CA-less impossible option check
    - server-install: remove broken no-pkinit check
  - Resolves: #1441160 FreeIPA client <= 4.4 fail to parse 4.5 cookies
    - Add debug log in case cookie retrieval went wrong
  - Resolves: #1441548 ipa server install fails with --external-ca option
    - ext. CA: correctly write the cert chain
  - Resolves: #1441718 Conversion of CA-less server to CA fails on CA instance
    spawn
    - Fix CA-less to CA-full upgrade
  - Resolves: #1442133 Do not link libkrad, liblber, libldap_r and
    libsss_nss_idmap to every binary in IPA
    - configure: fix AC_CHECK_LIB usage
  - Resolves: #1442815 Replica install fails during migration from older IPA
    master
    - Fix RA cert import during DL0 replication
  - Related: #1442004 Building IdM/FreeIPA internally on all architectures -
    filtering unsupported packages
    - Build all subpackages on all architectures


author: Jan Cholasta <jcholast@redhat.com> - 4.5.0-8.el7
changelog:
  - Resolves: #1443869 Command "openssl pkcs12 ..." failed during IPA upgrade
    - Fix CAInstance.import_ra_cert for empty passwords


author: Jan Cholasta <jcholast@redhat.com> - 4.5.0-9.el7
changelog:
  - Resolves: #1200767 [RFE] Allow Kerberos authentication for users with
    certificates on smart cards (pkinit)
    - spec file: bump krb5 Requires for certauth fixes
  - Resolves: #1438729 Configure local PKINIT on DL0 or when '--no-pkinit' option
    is used
    - separate function to set ipaConfigString values on service entry
    - Allow for configuration of all three PKINIT variants when deploying KDC
    - API for retrieval of master's PKINIT status and publishing it in LDAP
    - Use only anonymous PKINIT to fetch armor ccache
    - Stop requesting anonymous keytab and purge all references of it
    - Use local anchor when armoring password requests
    - Upgrade: configure local/full PKINIT depending on the master status
    - Do not test anonymous PKINIT after install/upgrade
  - Resolves: #1442427 ipa.ipaserver.install.plugins.adtrust.
    update_tdo_gidnumber: ERROR Default SMB Group not found
    - upgrade: adtrust update_tdo_gidnumber plugin must check if adtrust is
      installed
  - Resolves: #1442932 ipa restore fails to restore IPA user
    - restore: restart/reload gssproxy after restore
  - Resolves: #1444896 ipa-server-install with external-ca fails in FIPS mode
    - Fix CA/server cert validation in FIPS
  - Resolves: #1444947 Deadlock between topology and schema-compat plugins
    - compat-manage: behave the same for all users
    - Move the compat plugin setup at the end of install
    - compat: ignore cn=topology,cn=ipa,cn=etc subtree
  - Resolves: #1445358 ipa vault-add raises TypeError
    - vault: piped input for ipa vault-add fails
  - Resolves: #1445382 ipa vault-retrieve fails to retrieve data from vault
    - Vault: Explicitly default to 3DES CBC
  - Resolves: #1445432 uninstall ipa client automount failed with RuntimeWarning
    - automount install: fix checking of SSSD functionality on uninstall
  - Resolves: #1446137 pki_client_database_password is shown in
    ipaserver-install.log
    - Hide PKI Client database password in log file


author: Jan Cholasta <jcholast@redhat.com> - 4.5.0-10.el7
changelog:
  - Resolves: #1438833 [ipa-replica-install] - 406 Client Error: Failed to
    validate message: Incorrect number of results (0) searching forpublic key for
    host
    - Make sure remote hosts have our keys
  - Resolves: #1442815 Replica install fails during migration from older IPA
    master
    - Refresh Dogtag RestClient.ca_host property
    - Remove the cachedproperty class
  - Resolves: #1444787 Update warning message when KRA installation fails
    - kra install: update installation failure message
  - Resolves: #1444896 ipa-server-install with external-ca fails in FIPS mode
    - ipa-server-install with external CA: fix pkinit cert issuance
  - Resolves: #1445397 GET in KerberosSession.finalize_kerberos_acquisition()
    must use FreeIPA CA
    - kerberos session: use CA cert with full cert chain for obtaining cookie
  - Resolves: #1447375 ipa-client-install: extra space in pkinit_anchors
    definition
    - ipa-client-install: remove extra space in pkinit_anchors definition
  - Resolves: #1447703 Fix SELinux contex of http.keytab during upgrade
    - Use proper SELinux context with http.keytab


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-12.el7
changelog:
  - Resolves: #1447284 Upgrade from ipa-4.1 fails when enabling KDC proxy
    - python2-ipalib: add missing python dependency
    - installer service: fix typo in service entry
    - upgrade: add missing suffix to http instance
  - Resolves: #1444791 Update man page of ipa-kra-install 
    - ipa-kra-install manpage: document domain-level 1
  - Resolves: #1441493 ipa cert-show raises stack traces when
    --certificate-out=/tmp 
    - cert-show: writable files does not mean dirs 
  - Resolves: #1441192 Add the name of URL parameter which will be check for
    username during cert login
    - Bump version of ipa.conf file
  - Resolves: #1378797 Web UI must check OCSP and CRL during smartcard login
    - Turn on NSSOCSP check in mod_nss conf
  - Resolves: #1322963 Errors from AD when trying to sign ipa.csr, conflicting
    template on
    - renew agent: respect CA renewal master setting
    - server upgrade: always fix certmonger tracking request
    - cainstance: use correct profile for lightweight CA certificates
    - renew agent: allow reusing existing certs
    - renew agent: always export CSR on IPA CA certificate renewal
    - renew agent: get rid of virtual profiles
    - ipa-cacert-manage: add --external-ca-type
  - Resolves: #1441593 error adding authenticator indicators to host 
    - Fixing adding authenticator indicators to host
  - Resolves: #1449525 Set directory ownership in spec file 
    - Added plugins directory to ipaclient subpackages
    - ipaclient: fix missing RPM ownership
  - Resolves: #1451279 otptoken-add-yubikey KeyError: 'ipatokenotpdigits'
    - otptoken-add-yubikey: When --digits not provided use default value


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-13.el7
changelog:
  - Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
    error observed during ipa upgrade with latest package. 
    - ipa-server-install: fix uninstall
  - Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
    replica 
    - ca install: merge duplicated code for DM password
    - installutils: add DM password validator
    - ca, kra install: validate DM password


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-14.el7
changelog:
  - Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
    handle PKINIT certificates/anchors
    - certdb: add named trust flag constants
    - certdb, certs: make trust flags argument mandatory
    - certdb: use custom object for trust flags
    - install: trust IPA CA for PKINIT
    - client install: fix client PKINIT configuration
    - install: introduce generic Kerberos Augeas lens
    - server install: fix KDC PKINIT configuration
    - ipapython.ipautil.run: Add option to set umask before executing command
    - certs: do not export keys world-readable in install_key_from_p12
    - certs: do not export CA certs in install_pem_from_p12
    - server install: fix KDC certificate validation in CA-less
    - replica install: respect --pkinit-cert-file
    - cacert manage: support PKINIT
    - server certinstall: support PKINIT
  - Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
    option
    - certs: do not export CA certs in install_pem_from_p12
    - server install: fix KDC certificate validation in CA-less
  - Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
    decommissioned
    - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
  - Resolves: #1451712 KRA installation fails on server that was originally
    installed as CA-less
    - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
  - Resolves: #1441499 ipa cert-show does not raise error if no file name
    specified
    - ca/cert-show: check certificate_out in options
  - Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
    - Remove pkinit-anonymous command
  - Resolves: #1449523 Provide an API command to retrieve PKINIT status
    in the FreeIPA topology
    - Allow for multivalued server attributes
    - Refactor the role/attribute member reporting code
    - Add an attribute reporting client PKINIT-capable servers
    - Add the list of PKINIT servers as a virtual attribute to global config
    - Add `pkinit-status` command
    - test_serverroles: Get rid of MockLDAP and use ldap2 instead
  - Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
    - Fix rare race condition with missing ccache file
  - Resolves: #1455045 Simple service uninstallers must be able to handle
    missing service files gracefully
    - only stop/disable simple service if it is installed
  - Resolves: #1455541 after upgrade login from web ui breaks
    - krb5: make sure KDC certificate is readable
  - Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
    command "ipa cert-request --add" after upgrade
    - Change python-cryptography to python2-cryptography


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-15.el7
changelog:
  - Resolves: #1442233 IPA client commands fail when pointing to replica 
    - httpinstance: wait until the service entry is replicated
  - Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
    not indexed
    - Fix index definition for ipaAnchorUUID
  - Resolves: #1438016 gssapi errors after IPA server upgrade
    - Avoid possible endless recursion in RPC call
    - rpc: preparations for recursion fix
    - rpc: avoid possible recursion in create_connection
  - Resolves: #1446087 services entries missing krbCanonicalName attribute.
    - Changing cert-find to do not use only primary key to search in LDAP.
  - Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
    - ipa-kdb: reload certificate mapping rules periodically
  - Resolves: #1455541 after upgrade login from web ui breaks
    - kdc.key should not be visible to all 
  - Resolves: #1435606 Add pkinit_indicator option to KDC configuration
    - ipa-kdb: add pkinit authentication indicator in case of a successful
      certauth
  - Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
    issuance when ipa-ca records are not resolvable
    - Turn off OCSP check
  - Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
    server_del - TypeError: 'NoneType' object is not iterable
    - fix incorrect suffix handling in topology checks


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-16.el7
changelog:
  - Resolves: #1377973 ipa-server-install fails when the provided or resolved
    IP address is not found on local interfaces
    - Only warn when specified server IP addresses don't match intf
  - Resolves: #1438016 gssapi errors after IPA server upgrade
    - Bump version of python-gssapi
  - Resolves: #1457942 certauth: use canonical principal for lookups
    - ipa-kdb: use canonical principal in certauth plugin
  - Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
    breaking older clients
    - Add code to be able to set default kinit lifetime
    - Revert setting sessionMaxAge for old clients


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-17.el7
changelog:
  - Resolve: #1455946 Provide a tooling automating the configuration 
    of Smart Card authentication on a FreeIPA master
    - server certinstall: update KDC master entry
    - pkinit manage: introduce ipa-pkinit-manage
    - server upgrade: do not enable PKINIT by default
    - Extend the advice printing code by some useful abstractions
    - Prepare advise plugin for smart card auth configuration
  - Resolve: #1461053 allow to modify list of UPNs of a trusted forest
    - trust-mod: allow modifying list of UPNs of a trusted forest
    - WebUI: add support for changing trust UPN suffixes


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-18.el7
changelog:
  - Resolves: #1449189 ipa-kra-install timeouts on replica
    - kra: promote: Get ticket before calling custodia


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-19.el7
changelog:
  - Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
    internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
    - ipa-sam: replace encode_nt_key() with E_md4hash() 
    - ipa_pwd_extop: do not generate NT hashes in FIPS mode
  - Resolves: #1377973 ipa-server-install fails when the provided or resolved
    IP address is not found on local interfaces 
    - Fix local IP address validation 
    - ipa-dns-install: remove check for local ip address
    - refactor CheckedIPAddress class
    - CheckedIPAddress: remove match_local param
    - Remove ip_netmask from option parser
    - replica install: add missing check for non-local IP address
    - Remove network and broadcast address warnings


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-20.el7
changelog:
  - Resolves: #1452216 Replica installation grants HTTP principal
    access in WebUI
    - Make sure we check ccaches in all rpcserver paths


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-21.el7
changelog:
  - Resolves: #1469246 Replica install fails to configure IPA-specific
    temporary files/directories
    - replica install: drop-in IPA specific config to tmpfiles.d
  - Resolves: #1469480 bind package is not automatically updated during
    ipa-server upgrade process
    - Bumped Required version of bind-dyndb-ldap and bind package


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-21.el7.1
changelog:
  - Resolves: #1455946 Provide a tooling automating the configuration 
    of Smart Card authentication on a FreeIPA master
    - smart-card advises: configure systemwide NSS DB also on master
    - smart-card advises: add steps to store smart card signing CA cert
    - Allow to pass in multiple CA cert paths to the smart card advises
    - add a class that tracks the indentation in the generated advises
    - delegate the indentation handling in advises to dedicated class
    - advise: add an infrastructure for formatting Bash compound statements
    - delegate formatting of compound Bash statements to dedicated classes
    - Fix indentation of statements in Smart card advises
    - Use the compound statement formatting API for configuring PKINIT
    - smart card advises: use a wrapper around Bash `for` loops
    - smart card advise: use password when changing trust flags on HTTP cert
    - smart-card-advises: ensure that krb5-pkinit is installed on client
  - Resolves: #1475238 Use CommonNameToSANDefault in default profile 
    (new installs only)
    - Add CommonNameToSANDefault to default cert profile
  - Resolves: #1464205 NULL LDAP context in call to ldap_search_ext_s
    during search in cn=ad,cn=trusts,dc=example,dc=com
    - NULL LDAP context in call to ldap_search_ext_s during search


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-21.el7.1.1
changelog:
  - Resolves: #1475238 Use CommonNameToSANDefault in default profile
    (new installs only)
    - Restore old version of caIPAserviceCert for upgrade only


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.0-21.el7.1.2
changelog:
  - Resolves: #1477703 IPA upgrade fails for latest ipa package
      - Restore old version of caIPAserviceCert for upgrade only


author: Felipe Barreto <fbarreto@redhat.com> - 4.5.0-21.el7.2
changelog:
  - Resolves: #1477178 - [ipa-replica-install] - 406 Client Error: Failed to
    validate message: Incorrect number of results (0) searching forpublic
    key for host
      - Always check peer has keys before connecting
  - Resolves: #1482802 - Unable to set ca renewal master on replica
      - Fix ipa config-mod --ca-renewal-master
  - Resolves: #1486283 - TypeError in renew_ca_cert prevents from swiching
    back to self-signed CA
      - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
  - Resolves: #1480102 - ipa-server-upgrade failes with "This entry already exists"
      - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
  - Resolves: #1484826 - FreeIPA/IdM installations which were upgraded from
    versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
    thus startup of Web UI fails
      - Adds whoami DS plugin in case that plugin is missing
  - Resolves: #1478251 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
      - Fixing how sssd.conf is updated when promoting a client to replica
  - Resolves: #1461177 - ipa-otptoken-import - XML file is missing PBKDF2
    parameters!
      - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
  - Resolves: #1484428 - Updating from RHEL 7.3 fails with Server-Cert not found
    (ipa-server-upgrade)
      - Backport 4-5: Fix ipa-server-upgrade with server cert tracking


author: Felipe Barreto <fbarreto@redhat.com> - 4.5.0-21.el7.2.2
changelog:
  - Resolves: #1477367 ipa-server-upgrade timeouts on wait_for_open ports
    expecting IPA services listening on IPv6 ports
      - Make sure upgrade also checks for IPv6 stack
      - control logging of host_port_open from caller
      - log progress of wait_for_open_ports
  - Resolves: #1477243 ipa help command returns traceback when no cache
    is present
      - Store help in Schema before writing to disk
      - Disable pylint in get_help function because of type confusion.


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.4-1.el7
changelog:
  - Use OpenJDK 8 to bootstrap on AArch64 until RH1482244 is resolved in
    buildroot
  - Resolves: #1470177 - Rebase IPA to latest 4.5.x version
  - Resolves: #1398594 ipa topologysuffix-verify should only warn about 
    maximum number of replication agreements. 
  - Resolves: #1404236 Web UI: Change "Host Based" and "Role Based" 
    to "Host-Based" and "Role-Based" 
  - Resolves: #1409786 Second phase of --external-ca ipa-server-install
    setup fails when dirsrv is not running
  - Resolves: #1451576 ipa cert-request failed to generate certificate from csr 
  - Resolves: #1452086 Pagination Size under Customization in IPA WebUI 
    accepts negative values
  - Resolves: #1458169 --force-join option is not mentioned in 
    ipa-replica-install man page 
  - Resolves: #1463186 IPA shouldn't allow objectclass if not all in lower case 
  - Resolves: #1478322 user-show command fails when sizelimit is configured 
    to number <= number of entity which is user member of 
  - Resolves: #1496775 Enterprise principals should be able to trigger
    a refresh of the trusted domain data in the KDC
  - Resolves: #1502533 Changing cert-find to go through the proxy 
    instead of using the port 8080
  - Resolves: #1502663 pkinit-status command fails after an upgrade from
    a pre-4.5 IPA
  - Resolves: #1498168 Error when trying to modify a PTR record
  - Resolves: #1457876 ipa-backup fails silently
  - Resolves: #1493531 In case full PKINIT configuration is failing during 
    server/replica install the error message should be more meaningful.
  - Resolves: #1449985 Suggest CA installation command in KRA installation
    warning


author: Felipe Barreto <fbarreto@redhat.com> - 4.5.4-2.el7
changelog:
  - Resolves: #1461177 ipa-otptoken-import  - XML file is missing PBKDF2
    parameters!
  - Resolves: #1464205 NULL LDAP context in call to ldap_search_ext_s during
    search in cn=ad, cn=trusts,dc=example,dc=com
  - Resolves: #1467887 iommu platform support for ipxe
  - Resolves: #1477178 [ipa-replica-install] - 406 Client Error: Failed to
    validate message: Incorrect number of results (0) searching forpublic key for
    host
  - Resolves: #1478251 IPA WebUI does not work after upgrade from IPA 4.4 to
    4.5
  - Resolves: #1480102 ipa-server-upgrade failes with "This entry already
    exists"
  - Resolves: #1482802 Unable to set ca renewal master on replica
  - Resolves: #1484428 Updating from RHEL 7.3 fails with Server-Cert not found
    (ipa-server-upgrade)
  - Resolves: #1484826 FreeIPA/IdM installations which were upgraded from
    versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
    thus startup of Web UI fails
  - Resolves: #1486283 TypeError in renew_ca_cert prevents from swiching back
    to self-signed CA
  - Resolves: #1469246 Replica install fails to configure IPA-specific
    temporary files/directories
  - Resolves: #1469480 bind package is not automatically updated during
    ipa-server upgrade process
  - Resolves: #1475238 Use CommonNameToSANDefault in default profile (new
    installs only)
  - Resolves: #1477703 IPA upgrade fails for latest ipa package


author: Rob Crittenden <rcritten@redhat.com> - 4.5.4-3.el7
changelog:
  - Drop workaround for building on AArch64 (#1482244)
  - Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)


author: Pavel Vomacka <pvomacka@redhat.com> - 4.5.4-4.el7
changelog:
  - Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
    - ldap: limit the retro changelog to dns subtree
  - Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
    of "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
  - Resolves: #1493145 ipa-replica-install might fail because of an already
    existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
  - Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
    - ds: ignore time skew during initial replication step
    - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
  - Resolves: #1500218 Replica installation at domain-level 0 fails against
    upgraded ipa-server
    - Fix ipa-replica-conncheck when called with --principal
  - Resolves: #1506188 server-del doesn't remove dns-server configuration
    from ldap


author: Thomas Woerner <twoerner@redhat.com> - 4.7.0-3.el8
changelog:
  - Resolves: #1614301 Remove --no-sssd and --noac options
  - Resolves: #1613879 Disable Domain Level 0
    - New patch sets to disable domain level 0
    - New adapted patch to disable DL0 specific tests (pytest_ipa vs.
      pytest_plugins)
    - Adapted branding patch in ipa-replica-install.1 due to DL0 removal


author: Thomas Woerner <twoerner@redhat.com> - 4.7.0-3.1.el8
changelog:
  - Resolves: #1609883 ipaserver/plugins/cert.py: Add reason to raise of
    errors.NotFound
  - Resolves: #1615765 do-not-use-RC4-in-FIPS-mode
    - Move fips_enabled to a common library to share across different plugins
    - ipasam: do not use RC4 in FIPS mode


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.7.1-12
changelog:
  - Remove strict dependencies to krb5-server version in order to allow
    update of krb5 to 1.17 and change dependency to KDB DAL version.
    Resolves: RHBZ#1700121


author: Thomas Woerner <twoerner@redhat.com> - 4.7.90-1
changelog:
  - Update to 4.7.90-pre1
    Related: RHBZ#1684528
  - Removed patches 0002 to 0031 as these are upsteram and part of 4.7.90-pre1
  - Added new patches 0001-revert-minssf-defaults.patch and
    0001-Correct-default-fontawesome-path-broken-by-da2cf1c5.patch


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.7.90-3
changelog:
  - Fix upgrade issue with AD trust when no trust yet established
    Fixes: RHBZ#1708874
    Related: RHBZ#1684528


author: Thomas Woerner <twoerner@redhat.com> - 4.8.0-1
changelog:
  - New upstream release 4.8.0
    - New subpackage: freeipa-client-samba
    - Added command ipa-cert-fix with man page
    - New sysconfdir sysconfig/certmonger
  - Updated pki_version, certmonger_version, sssd_version and kdcproxy_version
    Related: RHBZ#1684528


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.8.0-3
changelog:
  - Make sure ipa-server depends on krb5-kdb-version to pick up
    right MIT Kerberos KDB ABI
    Related: RHBZ#1700121
  - User field separator uses '$$' within ipaSELInuxUserMapOrder
    Fixes: RHBZ#1729099


author: Thomas Woerner <twoerner@redhat.com> - 4.8.0-5
changelog:
  - Remove posixAccount from service_find search filter
    Resolves: RHBZ#1731437
  - Fix repeated uninstallation of ipa-client-samba crashes
    Resolves: RHBZ#1732529
  - WebUI: Add PKINIT status field to 'Configuration' page
    Resolves: RHBZ#1518153


author: Thomas Woerner <twoerner@redhat.com> - 4.8.0-11
changelog:
  - Adtrust: avoid using timestamp in klist output
    Resolves: RHBZ#1750242
  - Add default access control configuration to trusted domain objects
    Resolves: RHBZ#1751707


author: Miro Hrončok <mhroncok@redhat.com> - 9.0.3-2
changelog:
  - Allow to import pip10's main from pip9's /usr/bin/pip
  - Do not show the "new version of pip" warning outside of venv
  Resolves: rhbz#1569488
  Resolves: rhbz#1571650
  Resolves: rhbz#1573755


author: Victor Stinner <vstinner@redhat.com> - 18.0-4
changelog:
  - Prevent removing of the system packages installed under /usr/lib
    when pip install -U is executed. Original patch by Michal Cyprian.
    Resolves: rhbz#1550368.


author: Miro Hrončok <mhroncok@redhat.com> - 19.1.1-2
changelog:
  - Fix root warning when pip is invoked via python -m pip
  - Remove a redundant second WARNING prefix form the abovementioned warning


author: Miro Hrončok <mhroncok@redhat.com> - 19.2.3-1
changelog:
  - Update to 19.2.3 (#1742230)
  - Drop patch that should strip path prefixes from RECORD files, the paths are relative


author: Matt Domsch <mdomsch@fedoraproject.org> - 0.9.9-1
changelog:
  - new upstream version 0.9.9
  -- plus patches from git up to 20090818 which fix build errors and
     other release-critical bugs.
  -- 0.9.9: added Attansic L1E and sis190/191 ethernet drivers.  Fixes
     and updates to e1000 and 3c90x drivers.
  -- 0.9.8: new commands: time, sleep, md5sum, sha1sum. 802.11 wireless
     support with Realtek 8180/8185 and non-802.11n Atheros drivers.
     New Marvell Yukon-II gigabet Ethernet driver.  HTTP redirection
     support.  SYSLINUX floppy image type (.sdsk) with usable file
     system.  Rewrites, fixes, and updates to 3c90x, forcedeth, pcnet32,
     e1000, and hermon drivers.


author: Matt Domsch <mdomsch@fedoraproject.org> - 1.0.1-1
changelog:
  - New drivers: Intel e1000, e1000e, igb, EFI snpnet, JMicron jme,
    Neterion X3100, vxge, pcnet32.
  - Bug fixes and improvements to drivers, wireless, DHCP, iSCSI,
    COMBOOT, and EFI.


author: Daniel P. Berrange <berrange@redhat.com> - 20120319-2.git0b2c788
changelog:
  - Remove BuildRoot & rm -rf of it in install/clean sections
  - Remove defattr in file section
  - Switch to use global, instead of define for macros
  - Add note about Patch1 not going upstream
  - Split BRs across lines for easier readability


author: Paolo Bonzini <pbonzini@redhat.com> - 20130103-3.git717279a
changelog:
  - Fix BuildRequires, use cross-compiler when building on 32-bit i686
  - Build UEFI drivers for QEMU and include them (patch from Gerd Hoffmann.
    BZ#958875)


author: Cole Robinson <crobinso@redhat.com> - 20140303-1.gitff1e7fc7
changelog:
  - Allow access to ipxe prompt if VM is set to pxe boot (bz #842932)
  - Enable PNG support (bz #1058176)


author: Paolo Bonzini <pbonzini@redhat.com> - 20150407-1.gitdc795b9f
changelog:
  - Update to latest upstream snapshot
  - Switch source to .tar.xz
  - Include patches from QEMU submodule
  - Use config file for configuration
  - Distribute additional permissions on top of GPLv2 ("UBDL")


author: Fabiano Fidêncio <fidencio@redhat.com> - 20190504-1
changelog:
  - Update to v20190504 release
  - Resolves: rhbz#1699990 - Rebase to the latest upstream release
  - Resolves: rhbz#1689817 - virt-manager cannot detect operating system name
                             for rhel8.0.0 tree automatically
  - Resolves: rhbz#1703480 - rhel8.0.x is not detected as rhel8.0
  - Resolves: rhbz#1685364 - Add win2019 to libosinfo


author: Tomas Orsava <torsava@redhat.com> - 4.13.0.1-2
changelog:
  - Added a license file
  - Added a dependency on rpm for the proper directory structure
  - Properly owning the __pycache__ directory


author: Tomas Orsava <torsava@redhat.com> - 5-5
changelog:
  - Create major-version provides only on major Python versions (2.7, 3.6)
  - Fix an extra parenthesis in python.attr
  - Resolves: rhbz#1776941


author: Mark Wielaard <mjw@fedoraproject.org> - 3.15.0-5
changelog:
  - Add valgrind-3.15.0-exp-sgcheck-no-aarch64.patch
  - Add valgrind-3.15.0-scalar-arm64.patch
  - Add valgrind-3.15.0-scalar-x86.patch


author: Mark Wielaard <mjw@redhat.com> - 3.15.0-6
changelog:
  - Update valgrind-3.15.0-copy_file_range.patch.
  - Update valgrind-3.15.0-some-stack-protector.patch to include getoff.
  - Add valgrind-3.15.0-some-Wl-z-now.patch
  - Add valgrind-3.15.0-s390x-wrap-drd.patch


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.6.0-5
changelog:
  - Bugzilla #1747987 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate


author: Deepak Bhole <dbhole@redhat.com> 1.0.2-2
changelog:
  - Fixed incorrect macro value for min_openjdk_version
  - Use posttrans instead of post, so that upgrade from old plugin works


author: Deepak Bhole <dbhole@redhat.com> 1.0.4-1
changelog:
  - Bump to 1.0.4
  - Fixed rhbz#718164: Home directory path disclosure to untrusted applications
  - Fixed rhbz#718170: Java Web Start security warning dialog manipulation


author: Ville Skyttä <ville.skytta@iki.fi> - 1.3.1-5
changelog:
  - Resolves: rhbz#875496
  - Build with $RPM_LD_FLAGS and %{_smp_mflags}.
  - Run unit tests during build.


author: Jiri Vanek <jvanek@redhat.com> 1.3.2-0
changelog:
  - Updated to latest ustream release of 1.3 branch - 1.3.2
   - Security Updates
    - CVE-2013-1927, RH884705: fixed gifar vulnerability
    - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path.
   - Common
    - Added new option in itw-settings which allows users to set JVM arguments when plugin is initialized.
   - NetX
    - PR580: http://www.horaoficial.cl/ loads improperly
   - Plugin
     PR1260: IcedTea-Web should not rely on GTK
     PR1157: Applets can hang browser after fatal exception
  - Removed upstreamed patch to remove GTK dependency
    - icedtea-web-pr1260-remove-gtk-dep.patch


author: Jiri Vanek <jvanek@redhat.com> 1.4-1
changelog:
  - Adapted to latest openjdk changes
  - added build requires for autoconf and automake
  - minor clean up
  - Updated to 1.4
  - See announcement for detail
   - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-May/023195.html
  - commented out check - some junit4  incompatibility


author: Jiri Vanek <jvanek@redhat.com> 1.4.1-0
changelog:
  - updated to 1.4.1
  - add icedtea-web man page
  - removed upstreamed  patch1 b25-appContextFix.patch
  - removed upstreamed  patch2 rhino-pac-permissions.patch
  - make check enabled again
  - should be build for non-standart archs !-)
  - removed unused multilib arches (yupii!)


author: Jiri Vanek <jvanek@redhat.com> 1.4.1-1
changelog:
  - added and applied patch0, christmasSplash3.diff. Will be upstreamed
  - Christmas release for Fedora !-)


author: Jiri Vanek <jvanek@redhat.com> 1.4.2-0
changelog:
  - updated to 1.4.2
  - removed upstreamed patches
  - added std=c++11 flag to CXXFLAGS (thanx omajid!)
  - removed autoreconf


author: Jiri Vanek <jvanek@redhat.com> 1.5-0.1.pre01
changelog:
  - updated to  bleeding edge as tracker before 1.5 actual release
  - named by https://fedoraproject.org/wiki/Packaging:NamingGuidelines#Pre-Release_packages
   - see commented original source0 line and setup line reusing versions
  - the source tarball is based on revision 892


author: Jiri Vanek <jvanek@redhat.com> 1.5-0.1.pre02
changelog:
  - updated to  bleeding edge as tracker before 1.5 actual release
   - based on revision 899
  - added policyeditor.desktop
  - removed -std=c++11  flag


author: Jiri Vanek <jvanek@redhat.com> 1.5-2
changelog:
  - add not yet upstreamed DE localisation of 1.5
   - patch0 DElocalizationforIcedTea-Web1.5-0001.patch
  - autoreconf gog  -vfi, see RH1077898
  - ./configure changed to %configure,see RH1077287


author: Richard Hughes <richard@hughsie.com> - 1.5-4
changelog:
  - Add MetaInfo file to show an addon in GNOME Software.
  - See http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=1907 for upstream.


author: Jiri Vanek <jvanek@redhat.com> 1.6-0.1.pre01
changelog:
  - update future 1.6 alpha pre01
  - added localised man pages
  - removed link to icedtea-web man page (now provided by upstream)


author: Jiri Vanek <jvanek@redhat.com> 1.6-0.1.pre02
changelog:
  - updated to pre02
  - upstreamed patch1, quoteDocsPaths.patch
  - temprarily disabled unittests
  - fixed nlp apps shortcut


author: Jiri Vanek <jvanek@redhat.com> 1.6-0.1.pre05
changelog:
  - updated to pre06
  - handled "Add Tab Completion for icedtea-web" change
  - this release contains numers, not yet upstreamed, but going to release features:
  - summary: Fixed resource test to pass for CZ localization
  - summary: Added Czech translation for 1.6.
  - summary: Messages from TextsProvider moved to properties
  - summary: various improvements to default set of properties
  - summary: Added MultipleDeploymentPropertiesModifier improvement to testsuite


author: Omair Majid <omajid@redhat.com> - 1.6-5
changelog:
  - Comply with newer java packaging guidelines
  - Require javapackages-tools in main package
  - Don't require jpackage-utils in -javadoc subpackage, since subpackage
    requires the main package


author: Jiri Vanek <jvanek@redhat.com> 1.6.1-3
changelog:
  - added and applied three patches scheduled for 1.6.2
  - patch2 fileLogInitializationError-1.6.patch to prevent consequences 1268909
  - patch1 donLogToFileBeforeFileLogsInitiate.patch
  - patch0 javadocFixes.patch


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-1
changelog:
  - updated to 1.6.2
  - fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-2
changelog:
  - added --family to make it part of javas alternatives alignment
  - java-javaver-openjdk collected into preffered_java


author: Jiri Vanek <jvanek@redhat.com> 1.7.1-16
changelog:
  - added patch1, patch4 and patch11 to fix CVE-2019-10182
  - added patch2 to fix CVE-2019-10181
  - added patch3 and patch33 to fix CVE-2019-10185
  - Resolves: rhbz#1724958 
  - Resolves: rhbz#1725928 
  - Resolves: rhbz#1724989


author: Jakub Filak <jfilak@redhat.com> 2.4.0-1
changelog:
  - spec: factor out core_pattern helper from addon-ccpp
  - ccpp: standalone hook
  - ccpp: save package data from hook in case of crash in container
  - a-a-s-package-data: save data from artifical chroots
  - spec: install containers tools
  - containers: add utility collecting containers info
  - ccpp: add support for containers
  - spec: install the daemon's D-Bus configuration file
  - daemon: add configuration enabling our name on the System bus
  - daemon: get rid of own main loop
  - init: set Type of abrtd.service to dbus
  - applet: Use libreport's helper to find applications
  - applet: Remove unused build information
  - build: Fix pkg-config warning related to abrt.pc
  - applet: Fix a massive leak in the app detection code
  - applet: Remove left-over code from the systray icon
  - applet: Use the easy way to detect empty lists
  - applet: Fix a number of "problems" memory leaks
  - applet: Make problem_info_t refcounted
  - applet: If gnome-abrt isn't there, don't offer to report
  - applet: Fix multiple notifications for the same problem
  - applet: Always defer auto-reporting without a network
  - applet: Don't ignore foreign problems if an admin
  - applet: Rename problem variable to "pi"
  - applet: Remove unused "flags" parameters
  - applet: Completely ignore incomplete problems
  - applet: Don't ignore repeat problems in the same app
  - applet: Fix warning when crash doesn't happen in app
  - applet: Remove unused functions
  - applet: Remove unused flags
  - applet: Rewrite notifications
  - applet: Don't run full reports from the applet
  - applet: Simplify "report" action
  - applet: Add helper to guess .desktop for a cmdline
  - applet: Get more details from the crash report
  - applet: Ignore other people's problems for non-admins
  - applet: Remove handling of "ignored" crashes
  - applet: Remove specific persistent notifications handling
  - applet: Rename applet to match gnome-abrt
  - applet: Initialise libnotify on startup
  - applet: Use g_new0() instead of xzalloc()
  - applet: Use g_strdup_printf()/g_strdup()
  - applet: Move variable inside block where it's used
  - daemon: process unpackaged by default
  - spec: fix abrt-applet requires
  - applet: Fix memory leak in fork_exec_gui()
  - applet: Detect whether gnome-abrt is available
  - applet: Use GUI_EXECUTABLE macro
  - autogen: move configure to the default case
  - applet: Use GIO to launch gnome-abrt
  - applet: Fix typo in "Oterwise"
  - applet: Use symbolic icon instead of abrt's in notifications
  - applet: Add some debug to new_dir_exists()
  - applet: Require at least libnotify 0.7
  - applet: Fix typo in "cuurent"
  - applet: Don't defer sending out uReports
  - applet: Use G_SOURCE_REMOVE in timeout callback
  - spec: Bump required glib2 version
  - applet: Use g_bus_own_name() for single-instance
  - applet: Remove status icon
  - applet: Use GDBus to filter crash signals
  - applet: Remove XSMP support
  - build: Launch configure after autogen.sh
  - make: make some python depencies optional
  - configure: fix typos
  - configure: check for python-sphinx and nose
  - spec: add gsettings-desktop-schemas to the build requires
  - core: use updated dump_fd_info()
  - switch from 'analyzer' to 'type'
  - spec: install abrt-dump-journal-core stuff
  - init: add abrt-journal-core service
  - introduce abrt-dump-journal-core
  - applet: Remove the automatic crash reporting message dialog
  - applet: Remove pre-glib 2.32 code
  - applet: Remove pointless custom signal handling
  - applet: Use GNetworkMonitor instead of NM directly
  - applet: Use GSettings to check whether to send uReports
  - Rewrite journalctl invocations: replace grep/tail pipeline with journalctl builtins.
  - Don't slurp unbounded amounts of data when invoking journalctl. Fixes #887.
  - console-notifications: add timeout
  - cli-status: use will_python_exception
  - ccpp-hook: move utility functions to hooklib
  - ccpp-hook: move /proc/[pid]/ utils to libreport
  - abrt-journal: add functions for reading/saving journald state
  - Do not use 'bool' in OPT_BOOL() macro : it expects 'int'
  - daemon: Own a D-Bus name
  - zanata: add gettext mappings
  - auto-reporting: add options to specify auth type
  - translations: move from transifex to zanata
  - spec: add missing augeas dependency
  - Only analyze vulnerabilities when coredump present
  - abrt-install-ccpp-hook check configuration
  - UUID from core backtrace if coredump is missing
  - Create core backtrace in unwind hook
  - abrt-hook-ccpp: minor refactoring
  - vmcore: remove original vmcore file in the last step
  - vmcore: catch IOErrors and OSErrors
  - python: load the configuration from correct file
  - Remove garbage from ccpp_event.conf
  - spec: update the required gdb version
  - gdb: make gdb aware of the abrt's debuginfo dir
  - Revert "gdb: disable loading of auto-loaded files"
  - spec: update the URL
  - koops: improve 'reason' text for page faults
  - sos: use all valuable plugins
  - a-a-g-machine-id: do not print any error from the event handler
  - a-a-g-machine-id: omit trailing new-line for one-liners only
  - a-a-g-machine-id: suppress its failures in abrt_event.conf
  - a-a-g-machine-id: add systemd's machine id
  - applet: ensure writable dump directory before reporting
  - make ABRT quieter
  - journal-oops: use the length result of sd_journal_get_data()
  - console-notifications: skip non-interactive shells
  - applet: don't show duphash instead of component
  - ureport: attach contact email if configured
  - console-notifications: use return instead of exit
  - Translation updates
  - a-a-s-p-d: add firefox on the package blacklist


author: Jakub Filak <jfilak@redhat.com> 2.5.0-1
changelog:
  - applet: cast to correct type to fix a warrning
  - applet: Use new problem_create_app_from_env() helper
  - doc: add documentation for GetProblemData
  - dbus: add a new method GetProblemData
  - abrt_event: run save package data event even if component exists
  - a-a-s-container-data: add a new argument --root
  - spec: add a-a-s-package-data to abrt-atomic
  - a-a-s-kernel-data: add --root argument
  - journal-oops: add an argument similar to '--merge'
  - spec: let configure generate the spec file
  - ccpp: create the dump location from standalone hook
  - retrace-client: stop failing on SSL2
  - spec: changes for Atomic hosts
  - add stuff necessary for Project Atomic
  - Python 3 fixes
  - ccpp: add support for multiple pkg mngrs
  - Python 3 compatibility
  - Revert "dbus: Allow admins to load problems without a password"
  - dbus: Allow admins to load problems without a password
  - abrtd: Don't allow users to list problems "by hand"
  - spec: Don't allow users to list problems "by hand"
  - spec: abrt-python requires libreport-python to build


author: Jakub Filak <jfilak@redhat.com> 2.5.1-1
changelog:
  - Translation updates
  - problem: use 'type' element instead of 'analyzer'
  - cli-status: don't return 0 if there is a problem older than limit
  - journal-oops: add an argument accepting journal directory
  - journal: open journal files from directory
  - lib: don't expect kernel's version '2.6.*' or '3.*.*'
  - cli: use the DBus methods for getting problem information
  - libabrt: add wrappers TestElemeExists and GetInfo for one element
  - dbus: add new method to test existence of an element
  - libabrt: add new function fetching full problem data over DBus
  - applet: use a shared function for getting problems over DBus
  - vmcore: generate 'reason' file in all cases
  - applet: Fix trivial indentation bug
  - applet: Don't show report button for unpackaged programs
  - applet: fix freeing of the notify problem list
  - applet: get the list of problems through D-Bus service
  - doc: D-Bus api: make desc of DeleteProblem clearer


author: Jakub Filak <jfilak@redhat.com> 2.6.0-1
changelog:
  - spec: add abrt-dbus to Rs of abrt-python
  - vmcore: use libreport dd API in the harvestor
  - ccpp: don't save the system logs by default
  - cli: exit with the number of unreported problems
  - spec: restart abrt-dbus in posttrans
  - cli: chown before reporting
  - hooks: use root for owner of all dump directories
  - ccpp: do not unlink failed and big user cores
  - ccpp: include the system logs only with root's coredumps
  - koops: don't save dmesg if kernel.dmesg_restrict=1
  - daemon, dbus: allow only root to create CCpp, Koops, vmcore and xorg
  - daemon: allow only root user to trigger the post-create
  - daemon: harden against race conditions in DELETE
  - ccpp: revert the UID/GID changes if user core fails
  - a-a-i-d-t-a-cache: sanitize umask
  - a-a-i-d-t-a-cache: sanitize arguments
  - dbus: report invalid element names
  - dbus: avoid race-conditions in tests for dum dir availability
  - dbus: process only valid sub-directories of the dump location
  - lib: add functions validating dump dir
  - daemon: use libreport's function checking file name
  - configure: move the default dump location to /var/spool
  - ccpp: avoid overriding system files by coredump
  - spec: add libselinux-devel to BRs
  - ccpp: emulate selinux for creation of compat cores
  - ccpp: harden dealing with UID/GID
  - ccpp: do not use value of /proc/PID/cwd for chdir
  - ccpp: do not override existing files by compat cores
  - ccpp: stop reading hs_error.log from /tmp
  - ccpp: fix symlink race conditions
  - turn off exploring crashed process's root directories
  - abrt-python: add proper PYTHONPATH to test shellscripts
  - abrt-python: unify unknown problem type handling
  - abrt-python: add not_reportable properties
  - spec: remove analyzer to type conversion
  - abrt-python: add Python3 problem type
  - abrt-python: add id, short_id and path to problem
  - abrt-python: add Problem.prefetch_data function
  - abrt-python: handle reconnection gracefully
  - config UI: Automatic reporting from GSettings
  - doc, polkit: Spelling/grammar fixes
  - applet: fix problem info double free
  - a-a-s-p-d: add new known interpreter to conf file
  - config UI: enable options without config files
  - config UI: read glade from a local file first
  - applet: migrate Autoreporting options to GSettings
  - abrt-action-list-dsos: do not decode not existing object
  - spec: add AUTHENTICATED_AUTOREPORTING conditional
  - abrt-auto-reporting: require rhtsupport.conf file only on RHEL
  - lib: add new kernel taint flags
  - spec: add a dependency on abrt-dbus to abrt-cli
  - cli: do not exit with segfault if dbus fails
  - applet: switch to D-Bus methods
  - upload: validate and sanitize uploaded dump directories


author: Matej Habrnal <mhabrnal@redhat.com> 2.6.1-1
changelog:
  - dbus: keep the polkit authorization for all clients
  - cli: enable polkit authentication on command line
  - spec: --enable-dump-time-unwind by default
  - ccpp: use TID to find crash thread
  - spec: remove PyGObject from all Requires
  - spec: update version of gdb because of -ascending
  - lib: make it easier to find the backtrace of th crash thread
  - ccpp: save TID in the file 'tid'
  - ccpp: get TID from correct cmd line argument
  - configui: add option always generate backtrace locally
  - a-a-p-ccpp-analysis: use ask_yes_no_save_result instead of ask_yes_no_yesforever
  - spec: use more appropriate url
  - spec: abrt requires libreport-plugin-rhtsupport on rhel
  - sosreport: add processor information to sosreport
  - doc: update abrt-cli man page


author: Jakub Filak <jfilak@redhat.com> 2.6.2-1
changelog:
  - applet: do not crash if the new problem has no command_line
  - ccpp: do not crash if generate_core_backtrace fails
  - abrt: Fixup component of select kernel backtraces
  - abrtd: de-prioritize post-create event scripts
  - spec: switch python Requires to python3
  - switch all python scripts to python3
  - spec: drop abrt-addon-python requires
  - a-dump-oops: allow update the problem, if more then one oops found
  - cli: use internal command impl in the command process
  - cli: remove useless code from print_crash()
  - cli: enable authetication for all commands


author: Matej Habrnal <mhabrnal@redhat.com> 2.6.3-1
changelog:
  - bodhi: introduce wrapper for 'reporter-bugzilla -h' and 'abrt-bodhi'
  - remove random code example from abrt-server
  - spec: introduce abrt-action-find-bodhi-update
  - api: fix pths -> paths rename
  - handle-event: remove obsolete workaround
  - remove 'not needed' code
  - events: fix example wording
  - doc: change /var/tmp/abrt to /var/spool/abrt
  - doc: actualize core_pattern content in documentation
  - doc: fix default DumpLocation in abrt.conf man page
  - events: improve example
  - events: comments not needed anymore
  - abrt-retrace-client: use atoll for _size conversion
  - abrt-dump-xorg: support Xorg log backtraces prefixed by (EE)
  - runtests: more verbose fail in get_crash_path
  - ureport-auth: force cp/mv when restoring configuration
  - runtests: stick to new BZ password rules
  - bodhi: fix typo in error messages
  - bodhi: fix a segfault when testing an os-release opt for 'rawhide'
  - doc: actualize the abrt-bodhi man page
  - autogen: use dnf instead of yum to install dependencies
  - bodhi: add parsing of error responses
  - bodhi: add ignoring of Rawhide
  - ccpp: do not break the reporting if a-bodhi fails
  - spec: add hawkey to BRs of abrt-bodhi
  - introduce bodhi2 to abrt-bodhi
  - a-handle-upload: pass bytes to file.write()
  - upload a problem data in the EVENT 'notify'
  - turn off several post-create scripts for remote problems
  - convert all 'ex.message' stmts to 'str(ex)'
  - cli: don't start reporting of not-reportable problems
  - a-a-s-p-d: add bash on the package blacklist
  - correct usage of abrt-gdb-exploitable
  - testsutie: first wait_for_hooks, then get_crash_path
  - ccpp: use global TID
  - ccpp: fix comment related to 'MakeCompatCore' option in CCpp.conf
  - cli: fix testing of DBus API return codes
  - dbus-api: unify reporting of errors
  - doc: fix related to conditional compilation of man page
  - abrt-auto-reporting: fix related to conditional compilation
  - vmcore: read vmcore by chunks
  - pass encoded Unicode to hashlib.sha1.update()
  - abrt-merge-pstoreoops: merge files in descending order
  - use gettext instead of lgettext in all python scripts
  - gitignore: add a generated man page source file


author: Matej Habrnal <mhabrnal@redhat.com> 2.7.0-1
changelog:
  - abrt-python: add problem.chown
  - a-a-a-ccpp-local don't delete build_ids
  - update .gitignore
  - spec: add cli-ng
  - cli-ng: initial


author: Jakub Filak <jfilak@redhat.com> 2.7.1-1
changelog:
  - spec: switch owner of the dump location to 'root'
  - abrtd: switch owner of the dump location to 'root'
  - lib: add convenient wrappers for ensuring writable dir
  - ccpp: save abrt core files only to new files
  - ccpp: ignore crashes of ABRT binaries if DebugLevel == 0
  - conf: introduce DebugLevel
  - a-a-i-d-to-abrt-cache: make own random temporary directory
  - update .gitignore
  - ccpp: make crashes of processes with locked memory not-reportable
  - a-a-s-p-data: fix segfault if GPGKeysDir isn't configured
  - a-dump-journal-xorg: make journal filter configurable
  - doc: a-a-analyze-xorg fix path to conf file
  - abrt-journal: use GList instead of char** in abrt_journal_set_journal_filter()
  - xorg: introduce tool abrt-dump-journal-xorg
  - abrt-xorg.service: change due to abrt-dump-journal-xorg
  - journal: add function abrt_journal_get_next_log_line
  - spec: add abrt-dump-journal-xorg to spec file
  - xorg: rewrite skip_pfx() function to work with journal msgs
  - xorg: introduce library xorg-utils
  - dbus: ensure expected bytes width of DBus numbers
  - a-d-journal-core: set root owner for created dump directory
  - doc: add missing man page for abrt-dump-journal-core
  - spec: add missing man page for abrt-dump-journal-core


author: Matej Habrnal <mhabrnal@redhat.com> 2.7.2-1
changelog:
  - ccpp: bug fix - undefined variables
  - a-a-c-o-f-hw-error: fix unicode error
  - ccpp: use error_msg_ignore_crash() instead of error_msg()
  - ccpp: add AllowedUsers and AllowedGroups feature
  - doc: fix formatting in abrt.conf man page
  - ccpp: use executable name from pid
  - a-a-c-o-f-hw-error: do not crash on invalid unicode
  - Use %s instead of %d.
  - configui: link GUI library with libabrt.so
  - Do not include system libabrt.h
  - ccpp: unify log message of ignored crashes
  - ccpp: add IgnoredPath option
  - lib: check_recent_crash_file do not produce error_msg


author: Matej Habrnal <mhabrnal@redhat.com> 2.8.1-1
changelog:
  - a-dump-journal-xorg: allow *libexec/X* to be executable element
  - a-dump-journal-xorg: add '_COMM=gnome-shell' to journal filter
  - build: update pkg names for systemd
  - a-d-journal-core: save core dump bytes from the journal field
  - a-d-journal-core: support lz4 compressed core dump files
  - a-a-install-debuginfo: do not try to split None
  - doc: improve documentation of AllowedGroups, AllowedUsers and IgnoredPaths
  - testcase: add serial field to uReport check
  - a-a-install-debuginfo: correct handling of DebuginfoLocation
  - a-a-s-container-data: update docker container ID parser
  - abrt-hook-ccpp: drop saving of container env vars
  - a-console-notification: do not leak variables
  - a-retrace-client: format security
  - daemon: avoid infinite crash loops
  - spec: drop abrt-action-save-kernel-data bits
  - spec: README -> README.md
  - Add basic documentation
  - a-a-install-debuginfo: fix BrokenPipe error
  - a-a-install-debuginfo: make tmpdir variable global
  - python3 addon: workaround a bug in traceback
  - CCpp: turn off compat cores
  - a-a-save-package-data: blacklist /usr/lib(64)/firefox/plugin-container
  - Fix minor typo: possition -> position
  - translations: add missing new line
  - Translation updates
  - translations: update zanata configuration
  - ccpp: drop %e from the core_pattern
  - Save Vendor and GPG Fingerprint


author: Matej Habrnal <mhabrnal@redhat.com> 2.8.2-1
changelog:
  - Translation updates
  - abrt-hook-ccpp: Fix mismatching argument
  - Allow selinux to be optional at build time
  - vmcore: use findmnt to get mountpoint
  - spec: add utils-linux to vmcore's Require
  - vmcore: fix finding partitions by UUID and LABEL
  - a-a-install-debuginfo: Exception may not have an argument errno
  - koops: do not assume version has 3 levels
  - Add ARM specific oops backtrace processing.
  - examples: add oops-kernel-panic-hung-tasks-arm
  - Add oops processing for kernel panics caused by hung tasks.
  - abrt-hook-ccpp: save get_fsuid() return values in int variables


author: Jakub Filak <jfilak@redhat.com> 2.9.0-1
changelog:
  - spec: install abrt_dbus_event.conf
  - dbus: use Problems2 API in abrt-dbus
  - dbus: Problems2 API implementation
  - spec: install Problems2 interfaces
  - dbus-doc: rewrite the XML to Problems2
  - Fix memory leaks
  - lib: introdcue a function checking post-create name
  - abrtd: change HTTP response code for duplicate problems to 303
  - autogen: fix typo in usage help string
  - daemon: send base names from abrt-server to abrtd
  - lib: normalize slashes of configured paths
  - lib: make configuration paths alterable at runtime
  - Add generated CCpp.conf to .gitignore
  - abrt-bodhi: use CCpp PackageManager configuration directive from configure
  - cli: introduce unsafe reporting for not-reporable problems
  - handle-event: stop creating post-create lock
  - daemon: trigger dump location cleanup after detection
  - hook-ccpp: dump own core file in debug mode


author: Jakub Filak <jakub@thefilaks.net> 2.10.0-1
changelog:
  - Translation updates
  - spec: bump required libreport and satyr versions
  - build: make the release-* targets smarter
  - Add CHANGELOG.md
  - a-a-notify: set env var before run report_systemd-journal event
  - use run_event_on_problem_dir() helper for running events
  - notify: do not require package element
  - spec: add catalog_journal_ccpp_format.conf file
  - reporter-s-journal: add formatting file for abrt-journal-core analyser
  - cli-ng: fix --fmt parameter
  - python: create analyzer element in dumpdir
  - abrt-action-list-dsos: fix typo in vendor variable name
  - cli-ng: chown problem before reporting
  - lib: stop printing out a debug message 'adding: '
  - cli: print out the not-reportable reason
  - cli: configure libreport to ignore not-reportable
  - cli-ng: force reporting even if not-reportable
  - cli-ng: introduce verbose argument
  - Import GObject from gi.repository
  - ccpp: configure package repositories for correct OS
  - a-a-s-c-data: adapt to current docker
  - daemon: don't drop problems from unknown containers
  - a-a-s-c-data: correct detection of container type
  - spec: install Bodhi event files
  - bodhi: factor out Bodhi updates lookup into a solo event
  - problems2: update the documentation
  - a-a-analyze-python: create exception_type element
  - a-a-analyze-xorg: create crash_function into dump dir
  - koops: create crash_function element
  - a-a-analyze-python: create crash_function element
  - a-a-analyze-c: create crash_function element
  - spec: add formatting files for reporter-systemd-journal
  - reporter-systemd-journal: add formatting files
  - vmcore: /var/tmp/abrt is no longer a dump location
  - events: add event report_systemd-journal to all addons
  - abrt-action-notify: notify to systemd journal
  - spec: add abrt's catalog source files
  - journal-catalog: add abrt's catalog source files
  - ccpp: retain partial core_backtrace upon error
  - ccpp: log waitpid errors
  - ccpp: inform users about not supported unwinding
  - ccpp: close stdin when we can let the process die
  - daemon: properly shutdown socket connection
  - daemon: close forgotten FD to /proc/[pid]
  - ccpp: pass proc pid FD instead of pid to *_at fns
  - ccpp+daemon: pass valid params to dd_open_item()
  - python: remove unused functions from sysexcept hook
  - build: add gettext-devel to sysdeps
  - spec: add libcap-devel to BRs of addon-ccpp
  - ccpp: avoid running elfutils under root
  - Add abrt-action-analyze-vulnerability to .gitignore
  - build: autoge.sh without args configures for debugging
  - conf: increase MaxCrashReportsSize to 5GiB
  - ccpp: fast dumping and abrt core limit
  - CI: make debugging easier with more log messages
  - doc: add a guide for ABRT hackers
  - vmcore: fix an undefined variable on error path
  - vmcore: read kdump.conf from an arbitrary location
  - ccpp: use libreport 'at' functions
  - ccpp: use abort() to exit in debug mode
  - python2: stop generating dso_list in the process
  - python: stop collecting ENVIRON in the process
  - abrtd: details of processes from different PID NS
  - abrtd: save interesting process details
  - a-a-s-package-data: add python3.6 to known Interpreters
  - spec: update gdb Requires
  - tree-wide: make path to GDB configurable
  - a-a-ureport: print out exit codes in verbose mode
  - daemon: stop replacing analyzer with type


author: Matej Habrnal <mhabrnal@redhat.com> 2.10.1-1
changelog:
  - changelog: update CHANGELOG.md
  - build: create tarball in release-* target
  - spec: sosreport is not a package
  - Fix Typo
  - bodhi: Remove dependency on hawkey
  - spec: Remove dependency on hawkey
  - build: do not upload tarball to fedorahosted.org
  - spec: do not use fedorahosted.org as source
  - spec: install new plugins
  - plugins: introduce Machine ID and SOS report
  - Update CHANGELOG.md
  - build: fix generating list of dependences in autogen.sh
  - spec: start abrt-journal-core instead of abrt-ccpp
  - build: fix scratch-build target
  - a-a-ureport: fix calling of run_event_on_problem_dir
  - spec: if using systemd, default to os-release ID for desktopvendor
  - kernel: modify suspicious string "invalid opcode:"
  - daemon: Allow rpm to be optional at build time
  - spec: allow any compression of man pages
  - spec: remove defattr
  - spec: remove cleaning buildroot
  - spec: use versioned provides
  - spec: remove changelog entries older than 2 years
  - remove Buildroot and Groups tags
  - spec: recommend libreport-plugin-systemd-journal on Fedoras
  - doc: document selinux change needed for automatic deletion of reports
  - ccpp: tell gdb to analyze saved binary image


author: Matej Habrnal <mhabrnal@redhat.com> 2.10.2-1
changelog:
  - Translation updates
  - spec: introduce migration to abrt-journal-core
  - abrt_event: Save cpuinfo in problem directories
  - koops: Improve fatal MCE check when dumping backtrace
  - lib: typo in header
  - Spelling fixes
  - Python 3.6 invalid escape sequence deprecation fix
  - koops_event: add check to restrict reporting of MCEs


author: Martin Kutlak <mkutlak@redhat.com> 2.10.3-1
changelog:
  - Translation updates
  - applet: add a default action to a notification
  - spec: require libreport-plugin-systemd-journal on Fedoras
  - changing load location from bin to libexec
  - changing location of abrt-action-save-container-data from bin to libexec
  - koops: Improve not-reportable for oopses with taint flags
  - This fixes #1173
  - python: provide more information about exception
  - abrt-journal: adapt to suspicious blacklist addition
  - koops: add suspicious strings blacklist
  - build: fix changelog adding in release target
  - changelog: update CHANGELOG.md


author: Matej Habrnal <mhabrnal@redhat.com> 2.10.4-1
changelog:
  - Translation updates
  - logging: rename log() to log_warning()
  - Quick hack to fix build with rpm >= 4.14
  - tests: Crash different binary in infinite event loop
  - tests: Revert not sufficient fix
  - tests: Reflect field changes in reporter-s-journal
  - tests: Get docker-inspect while container is running
  - cli,dbus: Allow polkit to be optional at build time
  - spec: add dependency for python{3}-gobject
  - a-d-journal-core: fix bad condition in creating reason msg
  - a-d-journal-core: use pid of crashed process in dumpdir name
  - changelog: update CHANGELOG.md


author: Julius Milan <jmilan@redhat.com> 2.10.5-1
changelog:
  - Translation updates
  - a-action-ureport: add option 'ProcessUnpackaged'
  - spec: change dependency on python{2,3}-gobject
  - applet: Additional changes to allow optional polkit
  - doc: remove obsolete doxygen tags
  - dbus: Additional changes to allow optional polkit
  - cli-ng: Explicitly state python version in shebangs
  - spec: rename python binary packages
  - a-d-journal-core: Save mountinfo from journal
  - a-d-journal-core: Save container cmdline
  - logging: rename omitted log() to log_warning()


author: Matej Habrnal <mhabrnal@redhat.com> 2.10.6-1
changelog:
  - Translation updates
  - hooks: introduce docker hook for Python3
  - spec: introduce Python3 hook for container
  - Remove deprecated is_error macro
  - ldconfig is not needed in rawhide
  - remove python_sitearch macro
  - remove python_site macro
  - move BuildRequires to top
  - remove systemd-units and replace it with systemd macro
  - remove init.d services
  - a-h-event: Do not deduplicate different containers
  - rpm: include epocho in package element if > 0


author: Matej Habrnal <mhabrnal@redhat.com> 2.10.7-1
changelog:
  - Translation updates
  - hooks: introduce docker hook for Python2
  - hook: add type to Python3 container exception handler
  - spec: introduce docker hook for Python2
  - Add ABRT hexa stickers
  - a-container-logger: workaround permission issue in minishift


author: Matej Habrnal <mhabrnal@redhat.com> 2.10.8-1
changelog:
  - Translation updates
  - spec: use Python3 as default in abrt-cli-ng
  - cli-ng: use Python3 as default
  - Add a new element 'interpreter' for python problems
  - retrace-client: Require nss-pem


author: Tim Waugh <twaugh@redhat.com> - 1.0.35-6
changelog:
  - Set cost for text filters to 200 so that the paps filter gets
    preference for the time being (bug #988909).


author: Tim Waugh <twaugh@redhat.com> - 1.0.36-3
changelog:
  - Upstream patch to re-work filter costs (bug #998977). No longer need
    text filter costs patch as paps gets used by default now if
    installed.


author: Tim Waugh <twaugh@redhat.com> - 1.0.41-4
changelog:
  - Adjust filter costs so application/vnd.adobe-read-postscript input
    doesn't go via pstotiff (bug #1008166).


author: Tim Waugh <twaugh@redhat.com> - 1.0.54-2
changelog:
  - Fix build issue (bug #1106101).
  - Don't use grep's -P switch in pstopdf as it needs execmem (bug #1079534).
  - Return work-around patch for bug #768811.


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.14.0-3
changelog:
  - update python Requires/BuildRequires accordingly to Fedora Guidelines for Python (python-cups -> python3-cups)


author: Adam Jackson <ajax@redhat.com> 2.4.41-1
changelog:
  - libdrm 2.4.41 plus git.  Done as a git snapshot instead of the released
    2.4.41 since the release tarball is missing man/ entirely. 
  - Pre-F16 changelog trim


author: Stephen Gallagher <sgallagh@redhat.com> - 1:8.2.0-1
changelog:
  - Update to v8.2.0
  - https://nodejs.org/en/blog/release/v8.2.0/
  - Update npm to 5.3.0
  - Adds npx command


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:8.3.0-1
changelog:
  - Update to v8.3.0
  - https://nodejs.org/en/blog/release/v8.3.0/
  - update V8 to 6.0
  - update minimal gcc and g++ requirements to 4.9.4


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:8.4.0-1
changelog:
  - Update to v8.4.0
  - https://nodejs.org/en/blog/release/v8.4.0/
  - http2 is now supported, add bundled nghttp2
  - remove openssl 1.0.1 patches, we won't be using them in fedora


author: Stephen Gallagher <sgallagh@redhat.com> - 1:8.9.3-2
changelog:
  - Update to 8.9.3
  - https://nodejs.org/en/blog/release/v8.9.3/
  - https://nodejs.org/en/blog/release/v8.9.2/


author: Stephen Gallagher <sgallagh@redhat.com> - 1:9.6.1-1
changelog:
  - Update to 9.6.1
  - https://nodejs.org/en/blog/release/v9.6.1/
  - https://nodejs.org/en/blog/release/v9.6.0/


author: Stephen Gallagher <sgallagh@redhat.com> - 1:9.11.1-1
changelog:
  - Update to 9.11.1
  - https://nodejs.org/en/blog/release/v9.11.0/
  - https://nodejs.org/en/blog/release/v9.11.1/


author: Stephen Gallagher <sgallagh@redhat.com> - 1:10.0.0-1
changelog:
  - Update to 10.0.0
  - https://nodejs.org/en/blog/release/v10.0.0/
  - Drop workaround patch
  - Temporarily drop node_g binary due to
    https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85587


author: P Linnell <scribusdocs at atlantictechsolutions.com> 0:0.37.0.fdr.1
changelog:
  - pgp'd tarball from inkscape.org
  - clean out the cvs tweaks in spec file
  - enable gnome-print
  - add the new tutorial files
  - make sure .mo file gets packaged
  - add provides: perlSVG
  - submit to Fedora QA


author: P Linnell <scribusdocs at atlantictechsolutions.com> 0:0.37.0.fdr.2
changelog:
  - add libsigc++-devel instead of add libsigc++ - duh
  - add BuildRequires:  perl-XML-Parser
  - fix package name to follow package naming guidelines


author: Jeremy Katz <katzj@redhat.com> - 0.41-4
changelog:
  - add patch for gcc4 problems (ignacio, #156228)
  - fix build on 64bit boxes.  sizeof(int) != sizeof(void*)


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 0.41-6
changelog:
  - remove explicit aclocal/autoconf calls in %build as they create a
    bad Makefile for FC4/i386, which causes build to fail (#156228),
    and no comment explains where they were added/needed


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 0.42-1
changelog:
  - update to 0.42 (also fixes #160326)
  - BR gnome-vfs2-devel
  - no files left in %_libdir/inkscape
  - include French manual page
  - GCC4 patch obsolete, 64-bit patch obsolete, dgettext patch split off


author: Denis Leroy <denis@poolshark.org> - 0.43-1
changelog:
  - Update to 0.43
  - Added 2 patches to fix g++ 4.1 compilation issues
  - Enabled new jabber/loudmouth-based inkboard feature


author: Denis Leroy <denis@poolshark.org> - 0.44-2
changelog:
  - Update to 0.44
  - Removed obsolete patches
  - Disabled experimental perl and python extensions
  - Added pstoedit, skencil, gtkspell and LittleCms support
  - Inkboard feature disabled pending further security tests


author: Denis Leroy <denis@poolshark.org> - 0.44.1-2
changelog:
  - Added patches to fix LaTex import (#217699)
  - Added patch to base postscript import on pstoedit plot-svg


author: Denis Leroy <denis@poolshark.org> - 0.45-1
changelog:
  - Update to 0.45
  - Enabled inkboard, perl and python extensions
  - Added patch for correct python autodetection
  - LaTex patch integrated upstreamed, removed
  - Some rpmlint cleanups


author: Lubomir Kundrak <lkundrak@redhat.com> - 0.45.1-2
changelog:
  - Use GTK print dialog
  - Added compressed SVG association (#245413)
  - popt headers went into popt-devel, post Fedora 7
  - Fix macro usage in changelog


author: Lubomir Kundrak <lkundrak@redhat.com> - 0.45.1+0.46pre1-1
changelog:
  - 0.46 prerelease
  - Minor cosmetic changes to satisfy the QA script
  - Dependency on Boost
  - Inkboard is not optional
  - Merge from Denis Leroy's svn16571 snapshot:
  - Require specific gtkmm24-devel versions
  - enable-poppler-cairo
  - No longer BuildRequire libsigc++20-devel


author: Lubomir Rintel <lkundrak@v3.sk> - 0.47-0.3.20090105svn
changelog:
  - Update to newer SVN
  - Drop upstreamed patches
  - Enable WordPerfect Graphics support
  - Enable embedded Perl scripting
  - Enable Imagemagick support
  - Disable OpenSSL due to licensing issues


author: Lubomir Rintel <lkundrak@v3.sk> - 0.47-0.3.20090227svn
changelog:
  - Past midnight! :)
  - More recent snapshot, our gcc44 fixes now upstream
  - One more gcc44 fix, it even compiles now
  - We install icons now, update icon cache
  - Disable inkboard, for it won't currently compile


author: Lubomir Rintel <lkundrak@v3.sk> - 0.47-0.4.20090301svn
changelog:
  - Bump to later SVN snapshot to fix inkscape/+bug/331864
  - Fix a startup crash when compiled with GCC 4.4
  - It even runs now! :)


author: Lubomir Rintel <lkundrak@v3.sk> - 0.47-0.16.pre3.20090925svn
changelog:
  - Move to a later snapshot
  - Drop debugging compiler flags, enable optimizations again
  - Make it build on everything since EL5 again


author: Stepan Kasal <skasal@redhat.com> - 0.47-5
changelog:
  - require perl(:MODULE_COMPAT_5.10.x) because the package requires libperl.so
  - the same for inkscape-view


author: Rex Dieter <rdieter@fedoraproject.org>
changelog:
  - 0.48.2-8
  - fix icon/desktop-file scriptlets (#739375)
  - drop .desktop vendor (f18+)
  - inkscape doesn't build with poppler-0.20.0 (#822413)


author: Jon Ciesla <limburgher@gmail.com> - 0.48.5-1
changelog:
  - Latest bugfix release.
  - Spurious comma patch upstreamed.
  - Dropped Freetype, poppler, gc patches.


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.91-4
changelog:
  - Cleanup spec
  - Use %license
  - Drop (now unneeded) perl requirements (rhbz#579390)
  - Drop ChangeLog as details are covered in NEWS


author: Jonathan Underwood <jonathan.underwood@gmail.com> - 0.91-22
changelog:
  - Drop --disable-strict-build since this is fixed:
    https://bugzilla.gnome.org/show_bug.cgi?id=752797
  - Drop export CXXFLAGS="%{optflags} -std=c++11" since that's now default


author: Jonathan Underwood <jonathan.underwood@gmail.com> - 0.91-23
changelog:
  - Break appdata file out of spec into its own file
  - Validate appdata file once installed
  - Add BuildRequires for libappstream-glib (provides appstream-util)
  - Remove commented out line in file list
  - Re-add export CXXFLAGS="%{optflags} -std=c++11" to fix build


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - build for main distribution
  - use %{_tmppath}
  - change name of specfile
  - don't use a find script to generate file lists
  - general cleanup
  - add descriptive summary and description


author: Jose Pedro Oliveira <jpo@di.uminho.pt> - 1.48-4
changelog:
  - (#154762)
  - License information: GPL or Artistic
  - Removed the Time::HiRes building requirement (see Changes)
  - Removed the empty .bs file
  - Corrected file permissions


author: Robin Norwood <rnorwood@redhat.com> - 1.56-1
changelog:
  - Update to latest CPAN version: 1.56
  - Move the filter requires step into %prep
  - Remove very old patch (for perl 5.8.1)
  - Fix a couple of rpmlint issues (non-UTF8 manpage and script with
    incorrect shebang line


author: Robin Norwood <rnorwood@redhat.com> - 1.601-1
changelog:
  - Update to latest CPAN version: 1.601
  - Fix some issues from package review:
    - patch to change #! line in script
    - make script executable
    - fix requires and buildrequires


author: Nikola Forró <nforro@redhat.com> - 8.1.0.0-1
changelog:
  - Upload new tarball
  - rpc.3: indicate that <rpc/rpc.h> is provided by libtirpc-devel, not glibc
    resolves: #1706882


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.0-1
changelog:
  - New upstream release 1.0
  - Remove patches, no longer needed for nodejs
  - Fix typo in -devel description
  - use github tarball instead of checkout


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 2.0-2.20121110git245f6f0
changelog:
  - latest git snapshot
  - fixes tests
  - use SMP make flags
  - build as Release instead of Debug
  - ship new strict variant


author: Sergio Correia <scorreia@redhat.com> - 2.8.0-4
changelog:
  - Resolves: rhbz#1666382: CVE-2018-12121 http-parser: nodejs: Denial of
                            Service with large HTTP headers [rhel-8]


author: Sergio Correia <scorreia@redhat.com> - 2.8.0-5.1
changelog:
  - Resolves: CVE-2019-15605 http-parser: nodejs: HTTP request
                              smuggling using malformed Transfer-Encoding header


author: Chris Weyl <cweyl@alumni.drew.edu> - 0.11-1
changelog:
  - Auto-update to 0.11 (by cpan-spec-update 0.01)
  - Altered br on perl(ExtUtils::MakeMaker) (0 => 6.42)
  - Altered br on perl(Class::C3) (0.19 => 0.20)


author: Paul Howarth <paul@city-fan.org> - 0.11-9
changelog:
  - Spec clean-up:
    - Only require Class::C3 with perl < 5.9.5
    - Require Class::C3::XS for performance and consistency, but only with
      perl < 5.9.5
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Make %files list more explicit
    - Classify buildreqs by build/module/test
    - Don't use macros for commands
    - Use tabs


author: Paul Howarth <paul@city-fan.org> - 0.12-1
changelog:
  - Update to 0.12
    - Bump Class::C3 dependency on 5.8, which in turn will automatically install
      Class::C3::XS if possible
    - Fix nonfunctional SYNOPSIS (CPAN RT#78325)
  - This release by BOBTFISH -> update source URL
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4
  - BR: perl(Cwd), perl(File::Path), perl(File::Spec) for bundled Module::Install
  - Bump perl(Class::C3) version requirement to 0.24
  - Drop unnecessary version requirement for perl(ExtUtils::MakeMaker)


author: Jaroslav Kysela <jkysela@redhat.com> - 1.0.22-1
changelog:
  - Updated to 1.0.22 final
  - Fix file descriptor leak in pcm_hw plugin
  - Fix sound distortions for S24_LE - softvol plugin


author: Vít Ondruch <vondruch@redhat.com> - 2.5.5-104
changelog:
  - Update to Ruby 2.5.5.
    * Remove Patch25: ruby-2.6.0-Update-for-tzdata-2018f.patch; subsumed
    * Remove Patch11: ruby-2.6.0-Try-to-update-cert.patch; subsumed
    * Remove Patch19: ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with
        -TLS-1.3.patch; subsumed
    Resolves: rhbz#1688758
  - Don't ship .stp files when SystemTap support is disabled.
    Related: rhbz#1657915
  - Fix CovScan issues.
    Resolves: rhbz#1628592


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-105
changelog:
  - Update to Ruby 2.6.3 by merging Fedora master branch (commit: 1cc2a49)
    * Properly generate "ruby(rubygems)" versioned dependencies.
    * Extract composition of dependecy strings into helper.
    * Loosen RDoc dependency.
    * Upstream fix adding -C flag instead of changing directory for gem build.
    * Remove obsolete Group tag
    * Fix ".include =" support in openssl.cnf.
    * Link IRB back to StdLib.
    * Link IRB files instead of directories.
    * Exclude irb.rb from ruby-libs.
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-106
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1672575


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.7-2
changelog:
  - Fix %files (to be able build -devel dependent packages)
  - Remove rpath from libraries
  - Spec file cleanup, rpmlint check


author: Praveen K Paladugu <praveen_paladugu@dell.com> - 1.6.0-1
changelog:
  - Updated to 1.6.0
  - removed the CIMOM dependencies
  - following the upstream packaging obsolete, sblim-cmpi-base-test pkg.
  - Added the patches from upstream packaging
  - fix to restart tog-pegasus properly


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.0-2
changelog:
  - Fix license, mofs registration for various CIMOMs, sblim-sfcb init script
    path in provider-register.sh, rpmlint warnings


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.2-7
changelog:
  - Use Pegasus root/interop instead of root/PG_Interop
  - Fix unversioned docdir change
    Resolves: #994073


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-2
changelog:
  - Update provider registration script to use systemctl to stop/start sfcb
  - Use new macros for %pre/%post/%preun from sblim-cmpi-devel


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-10
changelog:
  - Fix docdir patch (patch Makefile.am, not Makefile.in)
  - Use correct short name for Eclipse Public License 1.0
  - Use %license
  - Add explicit dependencies for libraries in Makefile.am (fixes FTBFS)
    Resolves: #1606302


author: Radek Novacek <rnovacek@redhat.com> 0.3-3
changelog:
  - Use updateConsumer API instead of updateConsumerFact (fixes limit 255 chars of uuid list)
  - Requires python-rhsm >= 0.96.13


author: Radek Novacek <rnovacek@redhat.com> 0.8-1
changelog:
  - Upstream version 0.8
  - RFE: command line improvements
  - Add support for accessing RHEV-M
  - Fix printing tracebacks on terminal


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.15-1
changelog:
  - Update spec for renamed README.md. (dgoodwin@redhat.com)
  - Moves fakevirt._decode() to util.decode() (csnyder@redhat.com)
  - Adds the report.config.name to log message when refusing to send a report due
    to lack of change (csnyder@redhat.com)
  - VirtWho: Clears list of reports on reload (csnyder@redhat.com)
  - Revises change detection tests to account for changes in master
    (csnyder@redhat.com)
  - Libvirtd: Sends a report on start up, and on events (csnyder@redhat.com)
  - Removes trailing line at the end of the file (csnyder@redhat.com)
  - Test_Esx: Test Oneshot to ensure it queues a report (csnyder@redhat.com)
  - Esx: only queue data if the version has changed (csnyder@redhat.com)
  - Test_VirtWho:Patches manager.Manager.fromOptions, removes unnecessary mocks
    (csnyder@redhat.com)
  - Removes unhelpful debug log message (csnyder@redhat.com)
  - Fix spacing, remove unused imports (csnyder@redhat.com)
  - Test_VirtWho: Adds test to show same report will not be sent twice
    (csnyder@redhat.com)
  - VirtWho: Adds basic change detection using report hashs (csnyder@redhat.com)
  - Adds hash property to config (csnyder@redhat.com)
  - Adds hash property to DomainListReport and HypervisorGuestAssociationReport
    (csnyder@redhat.com)
  - Hypervisor: Adds getHash class method (csnyder@redhat.com)
  - Limits interval settings (wpoteat@redhat.com)
  - Retry sending data to subscription manager multiple times before dropping
    (rnovacek@redhat.com)
  - SubscriptionManager: nicely order keys in debug report (rnovacek@redhat.com)
  - Fix serialization of guest list in print mode (rnovacek@redhat.com)
  - Do not exit oneshot mode if any job exists (rnovacek@redhat.com)
  - SubscriptionManager: check if report result has failedUpdate item
    (rnovacek@redhat.com)
  - SubscriptionManager: minor logging fixes (rnovacek@redhat.com)
  - SubscriptionManager: add env var to disable asynchronous reporting
    (rnovacek@redhat.com)
  - Check jobs status in increasing interval (rnovacek@redhat.com)
  - Esx: report host even if it doesn't have any guests (rnovacek@redhat.com)
  - Hypervisors reported by hyperv now include hostname. (csnyder@redhat.com)
  - Removes completed jobs. (csnyder@redhat.com)
  - Fix output format in print mode (rnovacek@redhat.com)
  - Fix using empty list as default parameter value (rnovacek@redhat.com)
  - satellite: support new hypervisor format (rnovacek@redhat.com)
  - Fix tests failures (rnovacek@redhat.com)
  - Removes timeouts for jobs. All jobs in the list are now executed just before
    a new report is sent. (csnyder@redhat.com)
  - The virtwho loop now blocks on the report queue with a one second timeout
    (csnyder@redhat.com)
  - Removes unnecessary imports and queue (csnyder@redhat.com)
  - Rewrite readme to markdown syntax (rnovacek@redhat.com)
  - CI: install unittest2 from pypi (rnovacek@redhat.com)
  - CI: add -y option to add-apt-repository (rnovacek@redhat.com)
  - CI: another attempt on cloud archive for libvirt (rnovacek@redhat.com)
  - CI: try to install newer version of libvirt from cloud archive
    (rnovacek@redhat.com)
  - CI: add libvirt-dev dependency (rnovacek@redhat.com)
  - CI: install libvirt-python via pip (rnovacek@redhat.com)
  - CI: another attempt without site-packages (rnovacek@redhat.com)
  - CI: install python-rhsm dependencies (rnovacek@redhat.com)
  - Adds support for facts in Hypervisor profile. (csnyder@redhat.com)
  - Adds count of unchanged mappings to the info logged for the result of an
    async job (csnyder@redhat.com)
  - Adds tests for jobs in virtwho, removes unnecessary tests for managerprocess.
    (csnyder@redhat.com)
  - Changes to ensure backwards compatibility with python-rhsm
    (csnyder@redhat.com)
  - Fixes RhevM.getHostGuestMapping() as suggested by rnovacek
    (csnyder@redhat.com)
  - Adds layer to hypervisorId. Removes completed TODO (csnyder@redhat.com)
  - Moves all functionality of managerprocess into virtwho. (csnyder@redhat.com)
  - CI: use python with system side packages enabled (rnovacek@redhat.com)
  - CI: install m2crypto using apt instead of pip (rnovacek@redhat.com)
  - CI: install python-libvirt using apt instead of pip (rnovacek@redhat.com)
  - Add requirements.txt and .travis.yml for the CI (rnovacek@redhat.com)
  - Adds tests to verify the hostGuestAssociation is generated correctly.
    (csnyder@redhat.com)
  - Updates libvirtd and tests to add host name to hypervisor profile
    (csnyder@redhat.com)
  - Updates managerprocess with better logging and changes for the new tests.~~
    (csnyder@redhat.com)
  - Updates to use the new hypervisor class (csnyder@redhat.com)
  - print mode: format debug message about found hypervisors
    (rnovacek@redhat.com)
  - Removing uncesasary comments (csnyder@redhat.com)
  - Removes unused dictionary of jobs and associated methods.
    (csnyder@redhat.com)
  - Fixes tests data to include "status" key. (csnyder@redhat.com)
  - Updates tests to make use of new Hypervisor class. (csnyder@redhat.com)
  - Host name is now included in the hypervisor profile using the new Hypervisor
    class (csnyder@redhat.com)
  - Adds new Hypervisor class. (csnyder@redhat.com)
  - Adds new test for the updates to subscriptionmanager.py (csnyder@redhat.com)
  - Updates fakevirt to make use of virt.Guest classes (csnyder@redhat.com)
  - Changes to ensure proper execution post-merge (csnyder@redhat.com)
  - Removing more unnecessary prints (csnyder@redhat.com)
  - Fixes oneshot mode for work with new managerprocess (csnyder@redhat.com)
  - Cleaning up unneeded prints and adding more useful debug log messages
    (csnyder@redhat.com)
  - Adds async job status polling for use with the new report API
    (csnyder@redhat.com)
  - This (along with python-rhsm/csnyder/new_report_api ee38f15, allows
    communication with new report api (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 0.19-1
changelog:
  - 1415497: Support rhev4 auto detection and usage (pcreech@redhat.com)
  - 1388577: Adding UTF-8 support (pcreech@redhat.com)
  - 1410000: Include org_id in hv base channel (pcreech@redhat.com)
  - 1400431: Fix AttributeError where val is missing (pcreech@redhat.com)
  - 1405967: Filter host via glob or regex (pcreech@redhat.com)
  - Adds --password option to virt-who-pasword (tstrachota@redhat.com)
  - 1392390 Fix default interval handling (pcreech@redhat.com)
  - BZ1405967  Add filter_hosts_regex, and exclude_hosts_regex to allow filtering
    large numbers of hosts easily (chris@chrisprocter.co.uk)
  - 1369107: Only load files with .conf extension (pcreech@redhat.com)
  - 1383436: Obey the interval setting (csnyder@redhat.com)
  - 1299643: Update virt-who-config man page to include NO_PROXY
    (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 0.20-1
changelog:
  - 1389729: Add missing xml section for test (fran@caosdigital.com)
  - 1389729: virt-who incorrectly reports 'name' instead of 'hostname' for RHEV
    hosts (fran@caosdigital.com)
  - 1450747: Continue running destination threads on internal failure
    (csnyder@redhat.com)
  - 1444718: Log name of config when duplicate reports are retrieved
    (csnyder@redhat.com)
  - 1447264: Keep running on InvalidPasswordFormat given other valid configs
    (csnyder@redhat.com)
  - 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
    (csnyder@redhat.com)
  - 1369107: Update docs and log messages to show the *.conf requirement
    (csnyder@redhat.com)
  - 1436517: Fix api base detection for rhevm version 3 and 4
    (csnyder@redhat.com)
  - 1442337: Send updates immediately the first run (csnyder@redhat.com)
  - Do not join threads not started, fix up fake backend (csnyder@redhat.com)
  - 1439317: Ensure reports are still sent despite duplicate configurations
    (csnyder@redhat.com)
  - DestinationThreads now send all reports (csnyder@redhat.com)
  - Adds IntervalThread base class and refactors Virt classes
    (csnyder@redhat.com)
  - Remove reference to nonexistant method _set_option (csnyder@redhat.com)
  - Update ConfigManager to produce destination and source mappings.
    (csnyder@redhat.com)
  - Implemements a threadsafe datastore (csnyder@redhat.com)
  - Move from using processes to threads (csnyder@redhat.com)
  - 1436517: Set Version header for version detect (pcreech@redhat.com)
  - 1403640: Fix syntax error in exception handling (pcreech@redhat.com)
  - Update the spec file for builds on more downstream platforms
    (csnyder@redhat.com)
  - Add releaser for rhel-7.4 (khowell@redhat.com)
  - 1391512: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 0.20.2-1
changelog:
  - 1458184: better reading of environment variables (jhnidek@redhat.com)
  - 1401867: Enable logging of rhsm module to rhsm.log (jhnidek@redhat.com)
  - 1404117: Check parameter consistency and refactoring (jhnidek@redhat.com)
  - Adds a patch number to virt-who versioning (csnyder@redhat.com)
  - 1401420: xen supports only uuid/hostname as hypervisor_id
    (jhnidek@redhat.com)
  - 1458674: Update use of result data to match the new async api
    (csnyder@redhat.com)
  - 1452436: virt-who prints host-to-quest mapping everytime (jhnidek@redhat.com)
  - 1357761: Do not check passwords to be in latin1 encoding (jhnidek@redhat.com)
  - 1457101: Continue running despite malformed configs (csnyder@redhat.com)
  - 1409984: Retry initial report retrieval on connection timeout
    (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 0.21.0-1
changelog:
  - Update hypervisorCheckInAsync test for new config sections
    (csnyder@redhat.com)
  - Update Config Refactor with changes from master (csnyder@redhat.com)
  - Removed usage of old Config (not unit tests) (jhnidek@redhat.com)
  - Further clean up of unit tests (jhnidek@redhat.com)
  - Create Xen Config Subclass (jhnidek@redhat.com)
  - Create Rhevm Config Subclass (jhnidek@redhat.com)
  - Create VDSM config subclass (wpoteat@redhat.com)
  - Clean up ConfigSection Unit tests (jhnidek@redhat.com)
  - Adds FakeVirtConfigSection (csnyder@redhat.com)
  - Configuration subclass for hyperv (wpoteat@redhat.com)
  - Implement EsxConfigSection (khowell@redhat.com)
  - Libvirtd ConfigSection Subclass (jhnidek@redhat.com)
  - Adds EffectiveConfig, ConfigSection (csnyder@redhat.com)
  - Adds warning message for deprecated env vars (csnyder@redhat.com)
  - 1503700: Updates to the job polling frequency (csnyder@redhat.com)
  - 1502821: Remove undocumented, broken env var "VIRTWHO_DISABLE_ASYNC"
    (csnyder@redhat.com)
  - 1466015: Warn of deprecation of command line options in next release
    (wpoteat@redhat.com)
  - remove non-existant variable fake_is_hypervisor (adarshvritant@gmail.com)
  - 1485865: Do not replace /etc/virt-who.conf on rpm upgrade
    (csnyder@redhat.com)
  - Utilize the owner from the first report seen, if we do not know the owner
    (csnyder@redhat.com)
  - Updates based on review (use str.format) (csnyder@redhat.com)
  - Fix example fake config in man docs (adarshvritant@gmail.com)
  - Add m2crypto dependency (adarshvritant@gmail.com)
  - 1211435: Don't send host-to-geust mapping, when env, owner are wrong
    (jhnidek@redhat.com)
  - 1408556: Log which owner updated mappings are being sent to
    (csnyder@redhat.com)


author: Kevin Howell <khowell@redhat.com> 0.21.1-1
changelog:
  - 1511308: Only ESX supports: exclude_host_parents and filter_host_parents.
    (jhnidek@redhat.com)
  - 1509596: Use qemu+ssh transport if not provided (libvirt)
    (csnyder@redhat.com)
  - 1511308: Xen and Hyper-V do not support some filter options
    (jhnidek@redhat.com)
  - 1510760: Ensure virt-who exits properly (w/ no good conf)
    (csnyder@redhat.com)
  - 1509606: Remove duplicate output of validation messages (csnyder@redhat.com)
  - 1509597: Fix issue with cli consistancy check for vdsm (csnyder@redhat.com)
  - 1509595: Only expect owner on HostGuestAssociationReports
    (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 0.21.2-1
changelog:
  - 1510310: Ensure that owner and env are required where necessary
    (csnyder@redhat.com)
  - 1512778: ESX should require username, password, and server values
    (csnyder@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.22.1-1
changelog:
  - 1542652: When the -c option is used, don't parse the default files
    (nmoumoul@redhat.com)
  - 1569299: try/exception needed for hypervisor_id check (wpoteat@redhat.com)
  - Update tito releasers to include newer versions of fedora
    (csnyder@redhat.com)
  - 1560461: Make env and owner options required for approprite cases
    (jhnidek@redhat.com)
  - 1554228: Unicode issue on status update call (wpoteat@redhat.com)
  - 1387800: [RFE] virt-who can report cluster in host-to-guest mapping
    (jhnidek@redhat.com)
  - Updates for future builds based on changing environments (wpoteat@redhat.com)
  - limit version of libvirt-python (wpoteat@redhat.com)
  - 1447022: Log warning, when wrong filter is in config file
    (jhnidek@redhat.com)
  - 1511644: Support running virt-who on python 3 (csnyder@redhat.com)
  - 1520236: Do not log traceback, when server returns 429 http error
    (jhnidek@redhat.com)
  - 1492074: Enable login to ESX using password with UTF-8 string
    (jhnidek@redhat.com)
  - 1353119: Add JSON-RPC support for VDSM (khowell@redhat.com)
  - 1509597: Enable to use virt-who wih VDSM again (jhnidek@redhat.com)
  - 1522383: Remove global option background (jhnidek@redhat.com)
  - 1523548: Options log_dir and log_file are not ignored (jhnidek@redhat.com)


author: William Poteat <wpoteat@redhat.com>
changelog:
  - Automatic commit of package [virt-who] release [0.22.2-1].
    (wpoteat@redhat.com)
  - kubevirt: warn user that dependencies are missing
    (piotr.kliczewski@gmail.com)
  - 1369634: Dont log proxy html errors for hyperv: - When hyperv gets an HTML
    page as error response from a proxy, don't log the whole html, but try to
    scrape the title off of it. - If scraping the title doesn't work, only log
    the http error code. - Changed all variables named 'xml' to 'xml_doc' in
    hyperv.py to avoid conflict with the new python keyword.
    (nmoumoul@redhat.com)
  - 1599725: Handle job status report errors (nmoumoul@redhat.com)
  - 1557296: Warn of commented out lines prefixed with space/tab (ENT-606) - When
    reading config files in python2, warn the user if a line continuation (starts
    with space/tab) is followed by '#' (nmoumoul@redhat.com)
  - kubevirt: Ignore vmis in Scheduling (piotr.kliczewski@gmail.com)
  - kubevirt: Update config (piotr.kliczewski@gmail.com)
  - Print/log debug information about filtered hosts (jhnidek@redhat.com)
  - 1577954: Added config option filter_type; ENT-580 (jhnidek@redhat.com)
  - Changed info about how filter_host_parents/exclude_host_parents filters work
    (ktordeur@redhat.com)
  - 1387800: set name of ESX cluster properly; ENT-793 (jhnidek@redhat.com)
  - Add release entry for RHEL 8 (wpoteat@redhat.com)
  - template update (wpinheir@iroman.home)
  - template update (wpinheir@iroman.home)
  - 1596041: Make python libvirt required (wpoteat@redhat.com)
  - updating RHV/RHEV/XenServer information (wpinheir@iroman.home)
  - 1581021: Decode error from unicode passwords (wpoteat@redhat.com)
  - 1510920: Change the choreography for the job status check
    (wpoteat@redhat.com)
  - ENT-493: Add option to command line to return version
    (adarshvritant@gmail.com)
  - Update executor.py (all_bright@live.com)
  - kubevirt: rename virtual machine instance (piotr.kliczewski@gmail.com)
  - Update for build process (wpoteat@redhat.com)
  - Fixed hyperv wmi query. Invalid response (500)
    (njmiller@lakemichigancollege.edu)
  - 1432140: Log when a duplicate hypervisor id is detected [ENT-568]
    (wpoteat@redhat.com)
  - 1368341: Warn that --sam/--satellite6 are unused & deprecated * Now logging a
    warning when --sam/--satellite6 are used. * man page and --help output
    updated to explaing that these options are unused and virt-who will report to
    either sam/satellite/stage candlepin regardless of their being there.
    (nmoumoul@redhat.com)
  - 1455062: Partial fix of high CPU usage, when many conf files used
    (jhnidek@redhat.com)
  - Correction to the spec file condition for python 3 (wpoteat@redhat.com)
  - ENT-554 Host reports for libvirt and rhevm include the system hardware uuid
    (wpoteat@redhat.com)
  - Add releaser for RHEL 7.6 (wpoteat@redhat.com)
  - Remove f26 releaser (f26 is EOL) (csnyder@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.24.1-1
changelog:
  - Merge in changes from Fedora packaging (wpoteat@redhat.com)
  - ENT-826 Added correlation id to virt-who reports (nmoumoul@redhat.com)
  - Releaser addition for rhel-7.7 (wpoteat@redhat.com)
  - Install subscription-manager, not python-rhsm which is deprecated: - Removed
    python-rhsm from the requirements, and added subscription-manager as
    dependency. - Added some dependencies that travis requires to install
    subscription-manager. (nmoumoul@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.24.2-1
changelog:
  - 1657104: Remove references to removed command line options
    (wpoteat@redhat.com)
  - Fixing kubevirt config path argument (piotr.kliczewski@gmail.com)
  - fix travis run (wpoteat@redhat.com)
  - 1650133: setuptools naming change (wpoteat@redhat.com)
  - 1638250: Proxy issue when https not specified (wpoteat@redhat.com)
  - Update branch definition for RHEL 8.0 branch (wpoteat@redhat.com)
  - ENT-896: Disable deprecated configuration options in python 3
    (wpoteat@redhat.com)
  - 1637407: vCenter mapping info failure due to TypeError (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com>
changelog:
  - 1667522: Omit ESX host from report when no hostname is present
    (wpoteat@redhat.com)
  - 1693858: Send hardware uuid on every check in for system reconcilliation
    (wpoteat@redhat.com)
  - kubevirt: provide user authentication (piotr.kliczewski@gmail.com)
  - 1486270: pass no_proxy from config files (wpoteat@redhat.com)
  - kubevirt: drop kubernetes and kubevirt dependencies
    (piotr.kliczewski@gmail.com)
  - 1638250: Improved fix for http proxy issue (wpoteat@redhat.com)
  - Update releaser (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com>
changelog:
  - Update releasers (wpoteat@redhat.com)
  - 1641953: Virt-who fails if one hypervisor has wrong encrypted password
    (wpoteat@redhat.com)
  - 1506167: Ignore new SIGHUP signals during signal handling
    (jhnidek@redhat.com)
  - 1522661: Constrict is_hypervisor field to fake virt (wpoteat@redhat.com)
  - 1695538: Provide support for hypervisor_id option
    (piotr.kliczewski@gmail.com)
  - 1695519: use correct uuid in kubevirt report (piotr.kliczewski@gmail.com)


author: William Poteat <wpoteat@redhat.com> 0.25.3-1
changelog:
  - 1530290: Remove enviroment as an input variable for the hypervisor check in
    (wpoteat@redhat.com)
  - 1523482: 1519704: Interval value set to empty string will revert to default
    value (wpoteat@redhat.com)
  - 1522384: Log at debug level when config uses default entries
    (wpoteat@redhat.com)
  - 1708524: update man page with kubevirt backend information
    (piotr.kliczewski@gmail.com)
  - 1708534: add kubeconfig to template (piotr.kliczewski@gmail.com)
  - 1516209: Configuration should be deemed invalid when server is not specified
    (wpoteat@redhat.com)
  - 1640967: Add xen type listing in /etc/virt-who.d/template.conf
    (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.25.4-1
changelog:
  - 1718304: Fix issue when instance["BIOSGUID"] returns None
    (phess@users.noreply.github.com)
  - 1652549: Add heartbeat call to virt-who cycle (wpoteat@redhat.com)
  - 1472727: Log error, when encrypted password is missing; ENT-1344
    (jhnidek@redhat.com)
  - 1714133: can't set data property (piotr.kliczewski@gmail.com)


author: William Poteat <wpoteat@redhat.com> 0.27.0-1
changelog:
  - Update for 8.2 (wpoteat@redhat.com)
  - 1727130: Correct man page for default interval (wpoteat@redhat.com)
  - 1743589: Content type header null coverage (wpoteat@redhat.com)
  - 1751624: Allow unicode username only if python-requests allows it
    (wpoteat@redhat.com)
  - 1745768: Make message unicode safe (wpoteat@redhat.com)
  - 1516209: Proper handling for empty server entry (wpoteat@redhat.com)
  - 1733286: add connection/request timeout (piotr.kliczewski@gmail.com)
  - Remove vdsm capability (wpoteat@redhat.com)
  - 1720048: Template for general configuration not properly formatted
    (wpoteat@redhat.com)
  - Add AHV v3 lenght and offset for the API calls. (amir.eibagi@nutanix.com)
  - 1530254: Update checking on environment variables (wpoteat@redhat.com)
  - 1714456: Update description of 'print_' config option (wpoteat@redhat.com)
  - Build fix (wpoteat@redhat.com)
  - 1499679: Check for duplicates in conf file; ENT-249 (jhnidek@redhat.com)
  - 1720154: Provide SYSTEM_UUID_FACT (piotr.kliczewski@gmail.com)
  - 1516120: Handling for incorrect config section headers (wpoteat@redhat.com)
  - 1722560: Make heartbeat more robust (jhnidek@redhat.com)
  - Update spec for build system (wpoteat@redhat.com)
  - Prepare downstream release (wpoteat@redhat.com)
  - Patch to exclude AHV from RPM (wpoteat@redhat.com)
  - 1416298: Use unique guest attribute for state tracking (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.27.5-1
changelog:
  - 1757985: better behavior of --config option (jhnidek@redhat.com)
  - 1750206: fix bug, when reporter_id is empty (jhnidek@redhat.com)


author: Sebastian Vahl <fedora@deadbabylon.de> 0.8-3
changelog:
  - require pkgconfig in devel subpkg
  - move api description to devel subpkg
  - keep timestamps in %install
  - avoid lib64 rpaths


author: Remi Collet <remi@fedoraproject.org> - 0.10-1
changelog:
  - update to 0.10
  - apply patch with changes from php bundled lib (thanks spot)
  - handle multiarch headers (ex from MySQL)


author: Rex Dieter <rdieter@fedoraproject.org> 0.10.1-4
changelog:
  - Warning about conflicting contexts for /usr/lib64/libzip/include/zipconf.h versus /usr/include/zipconf-64.h (#853954)


author: Remi Collet <rcollet@redhat.com> - 1.5.2-1
changelog:
  - update to 1.5.2
  - add all explicit cmake options to ensure openssl is used
    even in local build with other lilbraries available


author: Andreas Schneider <asn@redhat.com> - 1.0.1-1
changelog:
  - Update to version 1.0.1
    * Added --libs to pkg-config.
    * Added nss_wrapper-config.cmake
    * Fixed a bug packaging the obj directory.


author: Andreas Schneider <asn@redhat.com> - 1.0.1-2
changelog:
  - resolves: #1060906 - Fedora package.
  - Remove Group
  - Remove glibc-devel build requirement
  - Do not create a subpackage.


author: François Cami <fcami@redhat.com> - 0.2-4
changelog:
  - Fix ipa-healthcheck.sh installation path (rhbz#1729188)
  - Create and own log directory (rhbz#1729188)


author: François Cami <fcami@redhat.com> - 0.3-1
changelog:
  - Update to upstream 0.3 (#1701351)
  - Add logrotate configs + depend on anacron and logrotate (#1729207)


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-6
changelog:
  - Prevent spawning new daemons if outgoing operation exists (#1739117)
  - Force NT1 protocol version for workgroup support (#1739116)


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-7
changelog:
  - Remove libbluray support (#1747972)
  - CVE-2019-12448: Add query_info_on_read/write functionality (rhbz#1754506)
  - CVE-2019-12447: Use fsuid to ensure correct file ownership (rhbz#1752926)
  - CVE-2019-12449: Ensure correct ownership when moving to file:// uri (rhbz#1753972)


author: Jindrich Novy <jnovy@redhat.com> 2008-0.1
changelog:
  - initial packaging for TeX Live 2008
  - wrote tl2rpm.c to autogenerate packages and post scriptlets
  from TeX Live metadata
  - fix kpathsea default search path


author: Jindrich Novy <jnovy@redhat.com> 2008-0.2
changelog:
  - update to today's svn sources of binaries from upstream
  - fix directory -> symlink conversion
  - add ly1 (#488651)


author: Jindrich Novy <jnovy@redhat.com> 2009-0.2
changelog:
  - add tetex-* virtual provides
  - fix unversioned requires
  - filter out unwanted libs and utilities from source


author: Jindrich Novy <jnovy@redhat.com> 2009-0.3
changelog:
  - require system psutils and t1utils and don't build the TL ones
  - correctly obsolete old kpathsea
  - binaries now have -bin postfix
  - support for Fedora fonts


author: Jindrich Novy <jnovy@redhat.com> 2009-0.11
changelog:
  - fix generation of packages that ships only documentation
  - fix versioning of packages without version but with revision
  - fix heuristics for gathering .sty files dependencies
  - include packages under GFSL license
  - make files in old texmf tree from previous installs visible
  - do not obsolete old kpathsea, try to coexist
  - remove dvipdfm, dvipdfmx,depend of Fedora ones


author: Jindrich Novy <jnovy@redhat.com> 2009-2
changelog:
  - install man and info pages into proper locations visible
  by man and info
  - update scriptlets
  - remove xindy bits


author: Jindrich Novy <jnovy@redhat.com> 2009-3.20100326
changelog:
  - declare fmutil.cnf, updmap.cfg, context.cnf and texmf.cnf as config files
  so that they don't get overwritten with texlive-kpathsea update
  - move man and info pages to the main packages, not -doc


author: Jindrich Novy <jnovy@redhat.com> 2010-7.20100531
changelog:
  - switch to "tlpretest" source tree
  - add lua and ruby dependencies to packages requiring them
  - generate global package database "texlive.tlpdb" directly from
  tlpobj files shipped with each package


author: Jindrich Novy <jnovy@redhat.com> 2010-8.20100715
changelog:
  - move all the licenses and base directory hierarchy to texlive-base
  noarch subpackage
  - add automatic licensing code


author: Jindrich Novy <jnovy@redhat.com> 2010-9.20100814
changelog:
  - fix file attributes and rpmlint warnings
  - define libdir when calling configure
  - rebuild against new poppler


author: Jindrich Novy <jnovy@redhat.com> 2010-11.20101007
changelog:
  - sync with the latest TL2010 sources
  - don't make redundant copies of binaries, symlink them
  - fix symlinks to perl utilities


author: Jindrich Novy <jnovy@redhat.com> 2010-13.20101112
changelog:
  - temporarily disable dvi2tty because of failing test suite
  - package /etc/texmf and point texmf-config there


author: Jindrich Novy <jnovy@redhat.com> 2011-0.1.20110120
changelog:
  - bump release to 2011 (we are using the 2011/dev SVN version)
  - add more file virtual provides (TFM, TTF, TTC, PFA, PFB, PCF, OTF,
  TEX, CNF, CFG, DEF, DAT, LDF, FD, ENC, MAP, VF, VPL, CLO, BUG, BUG2)


author: Jindrich Novy <jnovy@redhat.com> 2011-0.1.20110227
changelog:
  - fix upgrade path with old TL2007 xetex, context or dvips installed
  - fix package generation bug that caused some package might be missing
  from the repository
  (http://www.linux.cz/pipermail/texlive/2011-February/000086.html)
  - fix upstream source URLs


author: Jindrich Novy <jnovy@redhat.com> 2012-2-20120926
changelog:
  - drop relase subpackage (no more needed as TL is now in Fedora)
  - fix -doc dependencies
  - remove (not-built) asymtote from source tarball
  - undefined catalogue version defaults to 0
  - perform automatic license audit
  - include also packages not part of any scheme
  - don't strip binaries so that we can generate debuginfo (#863635)
  - clean up depsolver


author: Jindrich Novy <jnovy@redhat.com> 2012-3-20120926
changelog:
  - obsolete chktex (#864211)
  - make config.ps a config file (#441171)
  - fix post/postun scriptlet dependencies
  - all subpackages now have %dist tag


author: Jindrich Novy <jnovy@redhat.com> 2012-3-20121019
changelog:
  - sync with upstream sources
  - make /usr/share/texmf visible to kpathsea, make texmf-local
  pointing to it (#867656, #864875)
  - fix versioning of binary packages


author: Jindrich Novy <jnovy@redhat.com> 2012-3-20121024
changelog:
  - sync with upstream - fixes problem lcdf-typetools tests
  - disable largefile support to fix pdflatex on 32bit arches (#872231)
  - put compatibility TEXMF tree reference into texm-local instead
  symlinking it to /usr/share/texmf directly


author: Jindrich Novy <jnovy@redhat.com> 2012-5-20121024
changelog:
  - don't conflict with latexmk (#868996)
  - unify versioning for both binary and noarch subpackages
  - remove lcdf-typetools hack for s390(x)


author: Jindrich Novy <jnovy@redhat.com> 2012-8-20121115
changelog:
  - prevent sed from being verbose in install log when uninstalling
  - be sure the old /usr/share/texmf tree is indexed and searched by
  kpathsea (#876710)
  - drop patch to fix build for dvisvgm, it is now applied upstream
  - fix dependencies in texlive and texlive-base subpackages (#875364)


author: Jindrich Novy <jnovy@redhat.com> 2012-9-20121120
changelog:
  - obsolete metapost-metauml (#573863)
  - update BR perl-MD5 to perl(Digest::MD5) - required for updmap
  - remove redundant posttrans executions in texlive-base (#865650)
  - own ls-R in texmf-local directory


author: Jindrich Novy <jnovy@redhat.com> 2012-10-20121205
changelog:
  - sync with CTAN
  - compile also C++ sources with -fno-strict-aliasing
  - ship adhocfilelist
  - fix changelog dates


author: Jindrich Novy <jnovy@redhat.com> 2012-11-20130102
changelog:
  - sync with CTAN
  - added new buildrequires
  - don't use texlive's psutils
  - don't obsolete latexmk (#868996)


author: Jindrich Novy <jnovy@redhat.com> 2012-12-20130102
changelog:
  - fix dependencies and upgrade path (#892054, #891709)
  - do not ship windows and other unneeded files


author: Jindrich Novy <jnovy@redhat.com> 2012-15-20130131
changelog:
  - enlarge tex(latex) dependency set, introduce tex(latex-base) (#904147)
  - fix post-scriptlets (#875257)
  - ship macros.texlive (#885762)
  - depend directly on texlive-kpathsea-lib
  - disable rpath


author: Jindrich Novy <jnovy@redhat.com> 2012-17-20130310
changelog:
  - run updmap-sys --syncwithtrees posttrans (#915086)
  - don't conflict with other packages (#913678)
  - obsolete tex-cm-lgc (#907728)
  - obsolete tex-kerkis (#907726)
  - fix clashes with xmltex (#877690)
  - use fedora latexmk instead of texlive latexmk (#914689)
  - fix broken symlinks in /usr/bin (#910952)
  - fmtutil doesn't print jadetex errors any more (#875266)
  - fix post scriptlets


author: Jindrich Novy <novyjindrich@gmail.com> - 2012-20-20130321
changelog:
  - bring chkweb back to life
  - fix context script (#924918)
  - prefer scripts installed from sources than from CTAN
  - BR: ghostscript-devel because of dvisvgm (#924662)


author: Jindrich Novy <novyjindrich@gmail.com> - 2012-21-20130427
changelog:
  - add missing shebang to context script
  - mark language.dat as config file (#929367)
  - add scripts for checking out sources and CTAN archives


author: Than Ngo <than@redhat.com> - 2:2012-34.20130427_r30134
changelog:
  - Resolves: bz#1064453, add missing texlive-metapost and groff.enc
    Resolves: bz#948532, add missing manpages for pdfxmltex, xmltex
    Resolves: bz#1213886, tex4ht-bin requires latex
    Resolves: bz#1217556, port for poppler-0.26.5
    Resolves: bz#1035679, scriptlet errors when installing texlive packages
    Resolves: bz#1184987, add texlive-titling


author: Than Ngo <than@redhat.com> - 7:20170524-3
changelog:
  - add anyfontsize, classpack, collection-htmlxml, latex2man
  - add provide tetex-tex4ht, jadetex, tetex-tex4ht, texlive-collection-htmlxml, tex(anyfontsize.sty), texlive-latex2man


author: Than Ngo <than@redhat.com> - 7:20170524-6
changelog:
  - fix wrong provides tex(english.ldf)
  - add babel-english. add fontawesome, awesomebox
  - add reference to support old texmf tree
  - fix build issue, not found html.sty and texinfo.tex


author: Rafael Fonseca <rdossant@redhat.com> - 0.4.0-1
changelog:
  - Resolves #1460482 - rebase to new release
  - Resolves #1505506 - add support for LLVM 5.0
  - Resolves #1460482 - BPF module compilation issue
  - Partially address #1479990 - location of man pages
  - Enable ppc64(le) support without lua
  - Soname versioning for libbpf by ignatenkobrain


author: Jerome Marchand <jmarchan@redhat.com> - 0.8.0-1
changelog:
  - Rebase on bcc-8.0.0
  - Replace the temporary s390x workaround by a proper fix
  - Remove the doc of excluded tool from the package
  - Fix print_log2_hist
  - Fix yet a few other python3 bytes vs strings issues


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-4
changelog:
  - Update to aarch64-shenandoah-jdk8u212-b04-shenandoah-merge-2019-04-30.
  - Update version logic to handle -shenandoah* tag suffix.
  - Drop PR3634 as applied upstream.
  - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp
  - Update 8214206 to use log2_long rather than casting to intptr_t, which may be smaller than size_t.
  - Resolves: rhbz#1688365
  - Resolves: rhbz#1688382


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-5
changelog:
  - Obsolete javadoc-debug and javadoc-debug-zip packages via javadoc and javadoc-zip respectively.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1
changelog:
  - Drop unnecessary build requirement on gtk2-devel, as OpenJDK searches for Gtk+ at runtime.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1
changelog:
  - Add missing build requirements for libXext-devel and libXrender-devel, previously masked by Gtk2+ dependency.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1
changelog:
  - fontconfig build requirement should be fontconfig-devel, previously masked by Gtk2+ dependency
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-2
changelog:
  - Backport FIPS mode patch to java-1.8.0-openjdk, simplifying provider removal.
  - Resolves: rhbz#1655466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-2
changelog:
  - nss.fips.cfg needs to be moved to %{etcjavadir} and symlinked into the JDK, like nss.cfg
  - Resolves: rhbz#1655466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-3
changelog:
  - SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file.
  - Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg.
  - Resolves: rhbz#1750752


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b01.
  - Switch to EA mode.
  - Drop JDK-8210761/RH1632174 as now upstream.
  - Drop JDK-8223219 as now upstream.
  - JDK-8226870 removed clhsdb and hdsdb from the JRE bin directory, so we should do likewise.
  - Add alternatives support for these two new SDK binaries.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b05.
  - Drop upstreamed patch JDK-8141570/PR3548.
  - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b09.
  - Switch to GA mode for final release.
  - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3
changelog:
  - Remove CVE-2018-3639 mitigation due to performance regression and
      OpenJDK position on speculative execution vulnerabilities.
      https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4
changelog:
  - Revert SSBD removal for now, until appropriate messaging has been decided.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b05.
  - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
  - Revise b05 snapshot to include JDK-8236178.
  - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b07.
  - Switch to GA mode for final release.
  - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b08.
  - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions.
  - Resolves: rhbz#1785753


author: Viktor Mihajlovski <mihajlov@de.ibm.com> - 1.5.1-1
changelog:
  - Upgrade to version 1.5.1 (SSL V3 enforced, default CACERT).
  - Created Fedora/RH specific spec file.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.2-7
changelog:
  - Fix wrong usage of libcurl API, which caused segfaults when wbemcli was used
    with https scheme (patch by kdudka@redhat.com)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.2-9
changelog:
  - Fix wbemcli doesn't accept dot (.) as password character on command line
    Resolves: #959885
  - Fix bogus date in the %changelog


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.32-4.git1715c90
changelog:
  - Fixes @openshift/machine-config-operator#669
  - install /etc/containers/oci/hooks.d and /etc/containers/certs.d


author: Chris Weyl <cweyl@alumni.drew.edu> - 0.103-1
changelog:
  - Auto-update to 0.103 (by cpan-spec-update 0.01)
  - Added a new br on perl(ExtUtils::MakeMaker) (version 6.42)


author: Paul Howarth <paul@city-fan.org> - 0.103-8
changelog:
  - Run Perl::Critic test in %check too
  - BR: perl(Test::Perl::Critic)
  - BR: perl(Carp) and perl(Symbol), which might be dual-lived
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Drop version requirement for perl(ExtUtils::MakeMaker); older versions work
    without problems, e.g. version 6.17 on EL-4
  - Make %files list more explicit
  - Don't use macros for commands
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 0.103-14
changelog:
  - Drop EPEL-4 support
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - BR: perl(File::Spec)


author: Paul Howarth <paul@city-fan.org> - 1.105-1
changelog:
  - Update to 1.105
    - Repackage, update bug tracker
    - Drop pod tests
  - Add patch to support building with Test::More < 0.88
  - Classify buildreqs by usage
  - Explicitly run the extra tests


author: Paul Howarth <paul@city-fan.org> - 1.106-1
changelog:
  - Update to 1.106
    - Update github links
    - Typo fix
  - Update patch for building with Test::More < 0.88


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.4.2-2
changelog:
  - Resolves: #1669197, #1705763, #1737077, #1671622, #1723879, #1730281,
  - Resolves: #1731117
  - built libpod v1.4.2-stable1


author: Jindrich Novy <jnovy@redhat.com> - 1.6.2-2
changelog:
  - drop oci-systemd-hook requirement
  - drop upstreamed CVE-2019-10214 patch
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1.6.2-3
changelog:
  - split podman and conmon packages
  - drop BR: device-mapper-devel and update BRs in general
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1.6.2-5
changelog:
  - use btrfs_noversion to really disable BTRFS support
  - amend/reuse BUILDTAGS
  - still keep device-mapper-devel BR otherwise build fails
    despite dm support being disabled (build scripting invokes
    pkg-config for devmapper which is shipped by the dm-devel
    package)
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1.6.3-2
changelog:
  - apply fix to not to fail gating tests:
    don't parse the config for cgroup-manager default
  - don't hang while on podman run --rm - bug 1767663
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1.6.3-4
changelog:
  - use the file events logger backend if systemd isn't available
    (thanks to Giuseppe Scrivano)
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-3
changelog:
  - merge podman-manpages with podman package and put man pages for
    podman-remote to its dedicated subpackage
  Resolves: #1788539


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-5
changelog:
  - fix "Podman support for FIPS Mode requires a bind mount inside the container"
  - Resolves: #1804193


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-6
changelog:
  - fix "CVE-2020-1726 podman: incorrectly allows existing files in volumes to be overwritten by a container when it is created"
  - Resolves: #1801572


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-8
changelog:
  - fix "[FJ8.2 Bug]: [REG]The "--group-add" option of "podman create" doesn't function."
  - Resolves: #1808705


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-9
changelog:
  - update fix for "podman (1.6.4) rhel 8.1 no route to host from inside container"
  - Resolves: #1806899


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-24
changelog:
  - tests: qemuxml2argv: add CAPS_ARCH_LATEST macro (rhbz#1698855)
  - qemu: Add ccw support for vhost-vsock (rhbz#1698855)
  - qemu: Allow creating ppc64 guests with graphics and no USB mouse (rhbz#1683681)
  - conf: Expose virDomainSCSIDriveAddressIsUsed (rhbz#1692354)
  - qemuhotplugtest: Don't plug a SCSI disk at unit 7 (rhbz#1692354)
  - qemu_hotplug: Check for duplicate drive addresses (rhbz#1692354)
  - cpu_map: Add support for cldemote CPU feature (rhbz#1537731)
  - util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1505998)
  - qemu: domain: Simplify non-VFIO memLockLimit calculation for PPC64 (rhbz#1505998)
  - qemu_domain: add a PPC64 memLockLimit helper (rhbz#1505998)
  - qemu_domain: NVLink2 bridge detection function for PPC64 (rhbz#1505998)
  - PPC64 support for NVIDIA V100 GPU with NVLink2 passthrough (rhbz#1505998)
  - cpu_x86: Do not cache microcode version (CVE-2018-12127, CVE-2019-11091, CVE-2018-12126, CVE-2018-12130)
  - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2019-11091, CVE-2018-12126, CVE-2018-12130)
  - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12127, CVE-2019-11091, CVE-2018-12126, CVE-2018-12130)
  - cpu_map: Define md-clear CPUID bit (CVE-2018-12127, CVE-2019-11091, CVE-2018-12126, CVE-2018-12130)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-25
changelog:
  - admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
  - locking: restrict sockets to mode 0600 (CVE-2019-10132)
  - logging: restrict sockets to mode 0600 (CVE-2019-10132)
  - util: skip RDMA detection for non-PCI network devices (rhbz#1693299)
  - virfile: Detect ceph as shared FS (rhbz#1698133)
  - virfile: added GPFS as shared fs (rhbz#1698133)
  - util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1716943)
  - qemu: Rework setting process affinity (rhbz#1716943)
  - qemu: Set up EMULATOR thread and cpuset.mems before exec()-ing qemu (rhbz#1716943)
  - conf: Add definitions for 'uid' and 'fid' PCI address attributes (rhbz#1508149)
  - qemu: Introduce zPCI capability (rhbz#1508149)
  - qemu: Enable PCI multi bus for S390 guests (rhbz#1508149)
  - conf: Introduce extension flag and zPCI member for PCI address (rhbz#1508149)
  - conf: Introduce address caching for PCI extensions (rhbz#1508149)
  - qemu: Auto add pci-root for s390/s390x guests (rhbz#1508149)
  - conf: use virXMLFormatElement() in virDomainDeviceInfoFormat() (rhbz#1508149)
  - conf: Introduce parser, formatter for uid and fid (rhbz#1508149)
  - qemu: Add zPCI address definition check (rhbz#1508149)
  - conf: Allocate/release 'uid' and 'fid' in PCI address (rhbz#1508149)
  - qemu: Generate and use zPCI device in QEMU command line (rhbz#1508149)
  - qemu: Add hotpluging support for PCI devices on S390 guests (rhbz#1508149)
  - qemuDomainRemoveRNGDevice: Remove associated chardev too (rhbz#1508149)
  - qemu_hotplug: remove erroneous call to qemuDomainDetachExtensionDevice() (rhbz#1508149)
  - qemu_hotplug: remove another erroneous qemuDomainDetachExtensionDevice() call (rhbz#1508149)
  - util: Propagate numad failures correctly (rhbz#1716907)
  - util: Introduce virBitmapUnion() (rhbz#1716908)
  - util: Introduce virNumaNodesetToCPUset() (rhbz#1716908)
  - qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1716908)
  - qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1716908)
  - qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1716908)
  - qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1716908)
  - qemuBuildMemoryBackendProps: Pass @priv instead of its individual members (rhbz#1624223)
  - qemu: Don't use -mem-prealloc among with .prealloc=yes (rhbz#1624223)
  - nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691356)
  - qemuProcessBuildDestroyMemoryPathsImpl: Don't overwrite error (rhbz#1658112)
  - qemu_security: Fully implement qemuSecurityDomainSetPathLabel (rhbz#1658112)
  - qemu: process: SEV: Assume libDir to be the directory to create files in (rhbz#1658112)
  - qemu: process: SEV: Relabel guest owner's SEV files created before start (rhbz#1658112)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-27
changelog:
  - RHEL: spec: Disable gluster on i686 (rhbz#1722668)
  - rpc: virnetlibsshsession: update deprecated functions (rhbz#1722735)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-29
changelog:
  - cpu: allow include files for CPU definition (rhbz#1686895)
  - cpu: fix cleanup when signature parsing fails (rhbz#1686895)
  - cpu: push more parsing logic into common code (rhbz#1686895)
  - cpu: simplify failure cleanup paths (rhbz#1686895)
  - cpu_map: Add support for arch-capabilities feature (rhbz#1693433)
  - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1686895)
  - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1686895)
  - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1686895)
  - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1686895)
  - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1686895)
  - cpu_x86: Separate ancestor model parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Separate vendor parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Separate feature list parsing from x86ModelParse (rhbz#1686895)
  - cpu_x86: Make sure CPU model names are unique in cpu_map (rhbz#1686895)
  - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1686895)
  - cpu_x86: Store CPU signature in an array (rhbz#1686895)
  - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1686895)
  - cpu_x86: Log decoded CPU model and signatures (rhbz#1686895)
  - qemu_capabilities: Inroduce virQEMUCapsGetCPUModelX86Data (rhbz#1686895)
  - qemu_capabilities: Introduce virQEMUCapsGetCPUModelInfo (rhbz#1686895)
  - qemu_capabilities: Use virQEMUCapsGetCPUModelInfo (rhbz#1686895)
  - cpu_x86: Add virCPUx86DataGetSignature for tests (rhbz#1686895)
  - cpu_map: Add hex representation of signatures (rhbz#1686895)
  - cputest: Test CPU signatures (rhbz#1686895)
  - cpu_map: Add more signatures for Conroe CPU model (rhbz#1686895)
  - cpu_map: Add more signatures for Penryn CPU model (rhbz#1686895)
  - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Westmere CPU model (rhbz#1686895)
  - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Haswell CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1686895)
  - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1686895)
  - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1686895)
  - cpu_x86: Require <cpuid> within <feature> in CPU map (rhbz#1697627)
  - cputest: Add data for Intel(R) Xeon(R) Platinum 8268 CPU (rhbz#1693433)
  - cpu_map: Add Cascadelake-Server CPU model (rhbz#1693433)
  - cpu_x86: Introduce virCPUx86DataItem container struct (rhbz#1697627)
  - cpu_x86: Rename virCPUx86Vendor.cpuid (rhbz#1697627)
  - cpu_x86: Rename virCPUx86DataItem variables (rhbz#1697627)
  - cpu_x86: Rename x86DataCpuidNext function (rhbz#1697627)
  - cpu_x86: Rename x86DataCpuid (rhbz#1697627)
  - cpu_x86: Rename virCPUx86CPUIDSorter (rhbz#1697627)
  - cpu_x86: Rename virCPUx86DataAddCPUIDInt (rhbz#1697627)
  - cpu_x86: Rename virCPUx86DataAddCPUID (rhbz#1697627)
  - cpu_x86: Rename virCPUx86VendorToCPUID (rhbz#1697627)
  - cpu_x86: Simplify x86DataAdd (rhbz#1697627)
  - cpu_x86: Introduce virCPUx86DataCmp (rhbz#1697627)
  - cpu_x86: Make x86cpuidSetBits more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidClearBits more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidAndBits more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidMatchMasked more general (rhbz#1697627)
  - cpu_x86: Make x86cpuidMatch more general (rhbz#1697627)
  - cpu_x86: Store virCPUx86DataItem content in union (rhbz#1697627)
  - cpu_x86: Add support for storing MSR features in CPU map (rhbz#1697627)
  - cpu_x86: Move *CheckFeature functions (rhbz#1697627)
  - cputest: Add support for MSR features to cpu-parse.sh (rhbz#1697627)
  - util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1697627)
  - vircpuhost: Add support for reading MSRs (rhbz#1697627)
  - virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1697627)
  - cpu_x86: Fix placement of *CheckFeature functions (rhbz#1697627)
  - cpu_conf: Introduce virCPUDefFilterFeatures (rhbz#1697627)
  - qemu_command: Use consistent syntax for CPU features (rhbz#1697627)
  - tests: Add QEMU caps data for future 4.1.0 (rhbz#1697627)
  - tests: Add domain capabilities case for QEMU 4.1.0 (rhbz#1697627)
  - qemuxml2argvtest: Add test for CPU features translation (rhbz#1697627)
  - qemu: Add APIs for translating CPU features (rhbz#1697627)
  - qemu: Probe for max-x86_64-cpu type (rhbz#1697627)
  - qemu: Probe for "unavailable-features" CPU property (rhbz#1697627)
  - qemu: Probe host CPU after capabilities (rhbz#1697627)
  - qemu_command: Use canonical names of CPU features (rhbz#1697627)
  - qemu: Translate feature names from query-cpu-model-expansion (rhbz#1697627)
  - qemu: Don't use full CPU model expansion (rhbz#1697627)
  - qemu: Make qemuMonitorGetGuestCPU usable on x86 only (rhbz#1697627)
  - cpu: Introduce virCPUDataAddFeature (rhbz#1697627)
  - qemu: Add type filter to qemuMonitorJSONParsePropsList (rhbz#1697627)
  - util: string: Introduce macro for automatic string lists (rhbz#1697627)
  - util: json: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1697627)
  - qemu: Introduce generic qemuMonitorGetGuestCPU (rhbz#1697627)
  - qemu_process: Prefer generic qemuMonitorGetGuestCPU (rhbz#1697627)
  - util: Rework virStringListAdd (rhbz#1697627)
  - conf: Introduce virCPUDefCheckFeatures (rhbz#1697627)
  - cpu_x86: Turn virCPUx86DataIteratorInit into a function (rhbz#1697627)
  - cpu_x86: Introduce virCPUx86FeatureFilter*MSR (rhbz#1697627)
  - cpu_x86: Read CPU features from IA32_ARCH_CAPABILITIES MSR (rhbz#1697627)
  - cpu_map: Introduce IA32_ARCH_CAPABILITIES MSR features (rhbz#1697627)
  - qemu: Forbid MSR features with old QEMU (rhbz#1697627)
  - qemu: Drop MSR features from host-model with old QEMU (rhbz#1697627)
  - cpu_x86: Fix memory leak - virCPUx86GetHost (rhbz#1697627)
  - qemu: Use @tmpChr in qemuDomainDetachChrDevice to build device string (rhbz#1624204)
  - qemu: Drop "user-" prefix for guestfwd netdev (rhbz#1624204)
  - qemu_hotplug: Attach guestfwd using netdev_add (rhbz#1624204)
  - qemu_hotplug: Detach guestfwd using netdev_del (rhbz#1624204)
  - qemuhotplugtest: Test guestfwd attach and detach (rhbz#1624204)
  - daemon: Register secret driver before storage driver (rhbz#1685151)
  - bhyve: Move autostarting of domains into bhyveStateInitialize (rhbz#1685151)
  - Revert "virStateDriver - Separate AutoStart from Initialize" (rhbz#1685151)
  - Revert "Separate out StateAutoStart from StateInitialize" (rhbz#1685151)
  - util: moving 'type' argument to avoid issues with mount() syscall. (rhbz#1689297)
  - util: cgroup: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1689297)
  - vircgroup: Rename structs to start with underscore (rhbz#1689297)
  - vircgroup: Introduce standard set of typedefs and use them (rhbz#1689297)
  - vircgroup: Extract file link resolving into separate function (rhbz#1689297)
  - vircgroup: Remove unused function virCgroupKill() (rhbz#1689297)
  - vircgroup: Unexport unused function virCgroupAddTaskController() (rhbz#1689297)
  - vircgroup: Unexport unused function virCgroupRemoveRecursively (rhbz#1689297)
  - vircgroup: Move function used in tests into vircgrouppriv.h (rhbz#1689297)
  - vircgroup: Remove pointless bool parameter (rhbz#1689297)
  - vircgroup: Extract mount options matching into function (rhbz#1689297)
  - vircgroup: Use virCgroupMountOptsMatchController in virCgroupDetectPlacement (rhbz#1689297)
  - vircgroup: Introduce virCgroupEnableMissingControllers (rhbz#1689297)
  - vircgroup: machinename will never be NULL (rhbz#1689297)
  - vircgroup: Remove virCgroupAddTaskController (rhbz#1689297)
  - vircgroup: Introduce virCgroupGetMemoryStat (rhbz#1689297)
  - lxc: Use virCgroupGetMemoryStat (rhbz#1689297)
  - vircgroup: fix MinGW build (rhbz#1689297)
  - vircgroup: Duplicate string before modifying (rhbz#1689297)
  - vircgroup: Extract controller detection into function (rhbz#1689297)
  - vircgroup: Extract placement validation into function (rhbz#1689297)
  - vircgroup: Split virCgroupPathOfController into two functions (rhbz#1689297)
  - vircgroup: Call virCgroupRemove inside virCgroupMakeGroup (rhbz#1689297)
  - vircgroup: Simplify if conditions in virCgroupMakeGroup (rhbz#1689297)
  - vircgroup: Remove obsolete sa_assert (rhbz#1689297)
  - tests: Resolve possible overrun (rhbz#1689297)
  - vircgroup: cleanup controllers not managed by systemd on error (rhbz#1689297)
  - vircgroup: fix bug in virCgroupEnableMissingControllers (rhbz#1689297)
  - vircgroup: rename virCgroupAdd.*Task to virCgroupAdd.*Process (rhbz#1689297)
  - vircgroup: introduce virCgroupTaskFlags (rhbz#1689297)
  - vircgroup: introduce virCgroupAddThread (rhbz#1689297)
  - vircgroupmock: cleanup unused cgroup files (rhbz#1689297)
  - vircgroupmock: rewrite cgroup fopen mocking (rhbz#1689297)
  - vircgrouptest: call virCgroupDetectMounts directly (rhbz#1689297)
  - vircgrouptest: call virCgroupNewSelf instead virCgroupDetectMounts (rhbz#1689297)
  - util: introduce vircgroupbackend files (rhbz#1689297)
  - vircgroup: introduce cgroup v1 backend files (rhbz#1689297)
  - vircgroup: extract virCgroupV1Available (rhbz#1689297)
  - vircgroup: detect available backend for cgroup (rhbz#1689297)
  - vircgroup: extract virCgroupV1ValidateMachineGroup (rhbz#1689297)
  - vircgroup: extract virCgroupV1CopyMounts (rhbz#1689297)
  - vircgroup: extract v1 detect functions (rhbz#1689297)
  - vircgroup: extract virCgroupV1CopyPlacement (rhbz#1689297)
  - vircgroup: extract virCgroupV1ValidatePlacement (rhbz#1689297)
  - vircgroup: extract virCgroupV1StealPlacement (rhbz#1689297)
  - vircgroup: extract virCgroupV1DetectControllers (rhbz#1689297)
  - vircgroup: extract virCgroupV1HasController (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetAnyController (rhbz#1689297)
  - vircgroup: extract virCgroupV1PathOfController (rhbz#1689297)
  - vircgroup: extract virCgroupV1MakeGroup (rhbz#1689297)
  - vircgroup: extract virCgroupV1Remove (rhbz#1689297)
  - vircgroup: extract virCgroupV1AddTask (rhbz#1689297)
  - vircgroup: extract virCgroupV1HasEmptyTasks (rhbz#1689297)
  - vircgroup: extract virCgroupV1BindMount (rhbz#1689297)
  - vircgroup: extract virCgroupV1SetOwner (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioWeight (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetBlkioIoServiced (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetBlkioIoDeviceServiced (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWeight (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceReadIops (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWriteIops (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceReadBps (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWriteBps (rhbz#1689297)
  - vircgroup: extract virCgroupV1SetMemory (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetMemoryStat (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetMemoryUsage (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)Memory*Limit (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetMemSwapUsage (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Allow|Deny)Device (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Allow|Deny)AllDevices (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpuShares (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpuCfsPeriod (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpuCfsQuota (rhbz#1689297)
  - vircgroup: extract virCgroupV1SupportsCpuBW (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetCpuacct*Usage (rhbz#1689297)
  - vircgroup: extract virCgroupV1GetCpuacctStat (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)FreezerState (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpusetMems (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpusetMemoryMigrate (rhbz#1689297)
  - vircgroup: extract virCgroupV1(Set|Get)CpusetCpus (rhbz#1689297)
  - vircgroup: rename virCgroupController into virCgroupV1Controller (rhbz#1689297)
  - vircgroup: rename controllers to legacy (rhbz#1689297)
  - vircgroup: remove VIR_CGROUP_SUPPORTED (rhbz#1689297)
  - vircgroup: include system headers only on linux (rhbz#1689297)
  - vircgroupv1: fix build on non-linux OSes (rhbz#1689297)
  - Revert "vircgroup: cleanup controllers not managed by systemd on error" (rhbz#1689297)
  - util: introduce cgroup v2 files (rhbz#1689297)
  - vircgroup: introduce virCgroupV2Available (rhbz#1689297)
  - vircgroup: introduce virCgroupV2ValidateMachineGroup (rhbz#1689297)
  - vircgroup: introduce virCgroupV2CopyMounts (rhbz#1689297)
  - vircgroup: introduce virCgroupV2CopyPlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2DetectMounts (rhbz#1689297)
  - vircgroup: introduce virCgroupV2DetectPlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2ValidatePlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2StealPlacement (rhbz#1689297)
  - vircgroup: introduce virCgroupV2DetectControllers (rhbz#1689297)
  - vircgroup: introduce virCgroupV2HasController (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetAnyController (rhbz#1689297)
  - vircgroup: introduce virCgroupV2PathOfController (rhbz#1689297)
  - vircgroup: introduce virCgroupV2MakeGroup (rhbz#1689297)
  - vircgroup: introduce virCgroupV2Remove (rhbz#1689297)
  - vircgroup: introduce virCgroupV2AddTask (rhbz#1689297)
  - vircgroup: introduce virCgroupV2HasEmptyTasks (rhbz#1689297)
  - vircgroup: introduce virCgroupV2BindMount (rhbz#1689297)
  - vircgroup: introduce virCgroupV2SetOwner (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioWeight (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetBlkioIoServiced (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetBlkioIoDeviceServiced (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWeight (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceReadIops (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWriteIops (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceReadBps (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWriteBps (rhbz#1689297)
  - vircgroup: introduce virCgroupV2SetMemory (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetMemoryStat (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetMemoryUsage (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)MemoryHardLimit (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)MemorySoftLimit (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)MemSwapHardLimit (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetMemSwapUsage (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)CpuShares (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)CpuCfsPeriod (rhbz#1689297)
  - vircgroup: introduce virCgroupV2(Set|Get)CpuCfsQuota (rhbz#1689297)
  - vircgroup: introduce virCgroupV2SupportsCpuBW (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetCpuacctUsage (rhbz#1689297)
  - vircgroup: introduce virCgroupV2GetCpuacctStat (rhbz#1689297)
  - vircgroup: register cgroup v2 backend (rhbz#1689297)
  - vircgroup: add support for hybrid configuration (rhbz#1689297)
  - vircgroupmock: change cgroup prefix (rhbz#1689297)
  - vircgroupmock: add support to test cgroup v2 (rhbz#1689297)
  - vircgrouptest: introduce initFakeFS and cleanupFakeFS helpers (rhbz#1689297)
  - vircgrouptest: prepare testCgroupDetectMounts for cgroup v2 (rhbz#1689297)
  - vircgrouptest: add detect mounts test for cgroup v2 (rhbz#1689297)
  - vircgrouptest: add detect mounts test for hybrid cgroups (rhbz#1689297)
  - vircgrouptest: prepare validateCgroup for cgroupv2 (rhbz#1689297)
  - vircgrouptest: add cgroup v2 tests (rhbz#1689297)
  - vircgrouptest: add hybrid tests (rhbz#1689297)
  - virt-host-validate: rewrite cgroup detection to use util/vircgroup (rhbz#1689297)
  - virt-host-validate: require freezer for LXC (rhbz#1689297)
  - virt-host-validate: Fix build on non-Linux (rhbz#1689297)
  - tests: Use correct function name in error path (rhbz#1689297)
  - util: Fix virCgroupGetMemoryStat (rhbz#1689297)
  - tests: Augment vcgrouptest to add virCgroupGetMemoryStat (rhbz#1689297)
  - vircgroup: introduce virCgroupKillRecursiveCB (rhbz#1689297)
  - vircgroupv2: fix virCgroupV2ValidateMachineGroup (rhbz#1689297)
  - util: implement virCgroupV2(Set|Get)CpusetMems (rhbz#1689297)
  - util: implement virCgroupV2(Set|Get)CpusetMemoryMigrate (rhbz#1689297)
  - util: implement virCgroupV2(Set|Get)CpusetCpus (rhbz#1689297)
  - util: enable cgroups v2 cpuset controller for threads (rhbz#1689297)
  - util: vircgroup: pass parent cgroup into virCgroupDetectControllersCB (rhbz#1689297)
  - internal: introduce a family of NULLSTR macros (rhbz#1689297)
  - util: vircgroup: improve controller detection (rhbz#1689297)
  - util: vircgroupv2: use any controller to create thread directory (rhbz#1689297)
  - util: vircgroupv2: enable CPU controller only if it's available (rhbz#1689297)
  - util: vircgroupv2: separate return values of virCgroupV2EnableController (rhbz#1689297)
  - util: vircgroupv2: don't error out if enabling controller fails (rhbz#1689297)
  - util: vircgroupv2: mark only requested controllers as available (rhbz#1689297)
  - Revert "util: vircgroup: pass parent cgroup into virCgroupDetectControllersCB" (rhbz#1689297)
  - util: vircgroupv2: stop enabling missing controllers with systemd (rhbz#1689297)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-30
changelog:
  - virWaitForDevices: Drop confusing part of comment (rhbz#1710575)
  - lib: Drop UDEVSETTLE (rhbz#1710575)
  - m4: Provide default value fore UDEVADM (rhbz#1710575)
  - m4: Drop needless string checks (rhbz#1710575)
  - util: vircgroup: introduce virCgroup(Get|Set)ValueRaw (rhbz#1658890)
  - util: vircgroup: move virCgroupGetValueStr out of virCgroupGetValueForBlkDev (rhbz#1658890)
  - util: vircgroupv1: add support for BFQ blkio files (rhbz#1658890)
  - util: vircgroupv2: add support for BFQ files (rhbz#1658890)
  - Handle copying bitmaps to larger data buffers (rhbz#1703160)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-31
changelog:
  - virDomainObjListAddLocked: fix double free (rhbz#1728530)
  - docs: schemas: Decouple the virtio options from each other (rhbz#1729675)
  - util: command: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1721434)
  - util: command: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1721434)
  - util: netdevopenvswitch: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1721434)
  - util: virnetdevopenvswitch: Drop an unused variable @ovs_timeout (rhbz#1721434)
  - util: netdevopenvswitch: use VIR_AUTOPTR for aggregate types (rhbz#1721434)
  - util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1721434)
  - virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1721434)
  - test: Introduce virnetdevopenvswitchtest (rhbz#1721434)
  - vircommand: Separate mass FD closing into a function (rhbz#1721434)
  - virCommand: use procfs to learn opened FDs (rhbz#1721434)
  - util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1721434)
  - util: Avoid possible error in virCommandMassClose (rhbz#1721434)
  - vircgroup: fix cgroups v2 controllers detection (rhbz#1689297)
  - vircgroupv2: store enabled controllers (rhbz#1689297)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32
changelog:
  - virDomainObjListAddLocked: Produce better error message than 'Duplicate key' (rhbz#1737790)
  - virdbus: Grab a ref as long as the while loop is executed (rhbz#1741900)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33
changelog:
  - vircgroupv2: fix parsing multiple values in single file (rhbz#1741825)
  - vircgroupv2: fix virCgroupV2GetCpuCfsQuota for "max" value (rhbz#1741837)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35.1.el8
changelog:
  - cpu_conf: Pass policy to CPU feature filtering callbacks (rhbz#1775133, rhbz#1775134, rhbz#1775137)
  - qemuxml2*test: Add tests for Icelake-Server, -pconfig (rhbz#1775133, rhbz#1775134, rhbz#1775137)
  - qemu: Drop disabled CPU features unknown to QEMU (rhbz#1775133, rhbz#1775134, rhbz#1775137)
  - cputest: Add data for Ice Lake Server CPU (rhbz#1775133, rhbz#1775134, rhbz#1775137)
  - cpu_map: Drop pconfig from Icelake-Server CPU model (rhbz#1775133, rhbz#1775134, rhbz#1775137)
  - qemu: Fix NULL ptr dereference caused by qemuDomainDefFormatBufInternal (rhbz#1775133, rhbz#1775134, rhbz#1775137)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35.2.el8
changelog:
  - cpu_map: Add TAA_NO bit for IA32_ARCH_CAPABILITIES MSR (CVE-2019-11135)
  - cpu_map: Add TSX_CTRL bit for IA32_ARCH_CAPABILITIES MSR (CVE-2019-11135)


author: Martin Osvald <mosvald@redhat.com> - 9.25-5
changelog:
  - Resolves: #1744011 - CVE-2019-14811 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdf_hook_DSC_Creator (701445)
  - Resolves: #1744015 - CVE-2019-14812 ghostscript: Safer Mode Bypass by .forceput Exposure in setuserparams (701444)
  - Resolves: #1744006 - CVE-2019-14813 ghostscript: Safer Mode Bypass by .forceput Exposure in setsystemparams (701443)
  - Resolves: #1744231 - CVE-2019-14817 ghostscript: Safer Mode Bypass by .forceput Exposure in .pdfexectoken and other procedures (701450)


author: Dennis Keefe <dkeefe@redhat.com> - 2.0.0-4
changelog:
  - Update to 2.0.0
  - Resolves: rhbz#1760906
  - Fix a bug where last update time for variable length metadata was not set
    properly on startup:
  - Resolves: rhbz#1720399
  - Specify path of PID file as "/run/stratisd.pid" instead of 
    "/var/run/stratisd.pid".
  - Resolves: rhbz#1754649
  - For a particular log entry, reduce log level from INFO to DEBUG and make the
    log message more detailed:
  - Resolves: rhbz#1680052


author: William Cohen <wcohen@redhat.com> - 7.99-0.12
changelog:
  - Fix static library and header file permissions.
  - Use sources from the dyninst git repositories.
  - Fix 32-bit library versioning for libdyninstAPI_RT_m32.so.


author: William Cohen <wcohen@redhat.com> - 7.99-0.18
changelog:
  - Rebase on newer git tree the has a number of merges into it.
  - Adjust spec file to allow direct use of git patches
  - Fix to eliminate unused varables.
  - Proper delete for array.


author: Josh Stone <jistone@redhat.com> - 7.99-0.21
changelog:
  - Rebase on newer git tree
  - Update context in dyninst-git.patch
  - Drop dyninst-delete_array.patch
  - Drop dyninst-common-makefile.patch


author: Josh Stone <jistone@redhat.com> 7.99-0.23
changelog:
  - Rebase on newer git tree.
  - Update license files with upstream additions.
  - Split documentation into -doc subpackage.
  - Claim ownership of {_libdir}/dyninst.


author: Josh Stone <jistone@redhat.com> 7.99.1-0.25
changelog:
  - Rebase on newer git tree.
  - Bump the fake version to 7.99.1 to account for ABI differences.
  - Enforce the minimum libdwarf version.
  - Drop the upstreamed R_PPC_NUM patch.


author: Josh Stone <jistone@redhat.com> 7.99.1-0.27
changelog:
  - Rebase to git dd8f40b7b4742ad97098613876efeef46d3d9e65
  - Use _smp_mflags to enable building in parallel.


author: Josh Stone <jistone@redhat.com> 8.0-1
changelog:
  - Update to release 8.0.
  - Updated "files doc" to reflect renames.
  - Drop the unused BuildRequires libxml2-devel.
  - Drop the 7.99.x version-munging patch.


author: Josh Stone <jistone@redhat.com>
changelog:
  - Tweak the configure/make commands
  - Disable the testsuite via configure.
  - Set the private includedir and libdir via configure.
  - Set VERBOSE_COMPILATION for make.
  - Use DESTDIR for make install.


author: Josh Stone <jistone@redhat.com> 8.0-5
changelog:
  - Add a dyninst-testsuite package.
  - Patch test2_4 to protect against running as root.
  - Make dyninst-static require dyninst-devel.


author: Josh Stone <jistone@redhat.com> 8.1.1-1
changelog:
  - Update to release 8.1.1.
  - Drop the backported dyninst-test2_4-kill-init.patch.
  - Drop the now-upstreamed dyninst-unused_vars.patch.
  - Update other patches for context.
  - Patch the installed symlinks to be relative, not $(DEST) filled.


author: Stan Cox <scox@redhat.com> - 10.1.0-4
changelog:
  - Resolves: rhbz#963475 dyninst must be ported to aarch64
    Remove Requires: glibc-static from %package testsuite


author: Paul Howarth <paul@city-fan.org> - 2.27105-1
changelog:
  - Update to 2.27105
    - Removed t/900_pod.t from package because of author test
  - Drop buildreq perl(Test::Pod), no longer needed


author: Paul Howarth <paul@city-fan.org> - 2.27200-241
changelog:
  - BR: perl(base), perl(constant) and perl(lib)
  - Install to vendor directories
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot


author: Petr Šabata <contyk@redhat.com> - 2.27200-242
changelog:
  - Correct the URL
  - Add a few missing buildtime dependencies
  - Drop Getopt::Long dep; json_pp isn't tested


author: Paul Howarth <paul@city-fan.org> - 2.27202-1
changelog:
  - Update to 2.27202
    - Fix test failures due to hash iterator randomization in perl 5.17.6 onwards
      (CPAN RT#83421)


author: Paul Howarth <paul@city-fan.org> - 2.27300-1
changelog:
  - Update to 2.27300
    - Fixed a problem about substr in perl 5.8.6 and below
  - Classify buildreqs by usage


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.2-1
changelog:
  - Fix dependencies of the release target (vpodzime)
  - Python overrides for the GI-generated bindings (vpodzime)
  - Pass version info to the code and use it to load plugins (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3-1
changelog:
  - Require volume_key-devel in a version that fixes build issues (vpodzime)
  - Fix Python 2 devel package name in BuildRequires (vpodzime)
  - Generate docs for the library and all plugins (vpodzime)
  - Make doc comments better for documentation generation (vpodzime)
  - Fix parameter names in function prototypes (vpodzime)
  - Add the metadatasize parameter to pvcreate (vpodzime)
  - Add the dataalignment parameter to lvm_pvcreate (vpodzime)
  - Export non-internal constants via introspection (vpodzime)
  - Expand size constants in the GI-scanned files (vpodzime)
  - Fix usage printing in the boilerplate_generator (vpodzime)
  - Add the build directory to .gitignore (vpodzime)
  - Add the md_run function (vpodzime)
  - Fix some issues in Python overrides (vpodzime)
  - Add the escrow_device function to the crypto plugin (vpodzime)
  - Fix version of GI files in the Makefile (vpodzime)
  - Make the order of release target's dependencies more explicit (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.4-1
changelog:
  - Improve the test for lvm_set_global_config (vpodzime)
  - Fix some minor issues in the spec file (vpodzime)
  - Fix issues with the LVM global config str (vpodzime)
  - Add couple more Python overrides (vpodzime)
  - Fix the name of the lvm_thlvpoolname() function in the header file (vpodzime)
  - Use assertEqual instead of assertTrue(a == b) (vpodzime)
  - Add the min_entropy parameter to luks_format (vpodzime)
  - Move internal dmraid-related macros into the source file (vpodzime)
  - Add an override for the md_add function (vpodzime)
  - Fix parameters in luks_open python overrides (vpodzime)
  - Prevent init() from being done multiple times and provide a test function (vpodzime)
  - Add the roadmap.rst document (vpodzime)
  - Remove an extra parenthesis in one of the docstrings (vpodzime)
  - Move the mddetail function next to the mdexamine function (vpodzime)
  - Add some more constants required by blivet (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.5-1
changelog:
  - Add tests for what we can easily test from the mpath plugin (vpodzime)
  - Add link to sources to the documentation (vpodzime)
  - Add missing symbols into the libblockdev-sections.txt file (vpodzime)
  - Do not build docs for testing (vpodzime)
  - Add the bd_try_init function (vpodzime)
  - Log stdout and stderr output when running processes (vpodzime)
  - Allow a subset of plugins to be load instead of all (vpodzime)
  - Make sure devmapper doesn't spam stdout with tons of messages (vpodzime)
  - Let debug messages go to stderr when running ipython (vpodzime)
  - Give plugins a way to initialize themselves (vpodzime)
  - Give plugins a way how to check if they could run properly (vpodzime)
  - Allow a subset of plugins to be load instead of all [TEST NEEDED] (vpodzime)
  - Make sure we use the whole /dev/mapper path for cryptsetup (vpodzime)
  - Fix vg_pv_count parsing when getting info about PV (vpodzime)
  - Set default values to data structures if real values are not available (vpodzime)
  - Fix the parameter name specifying pool metadata size (vpodzime)
  - Activate LUKS as ReadWrite in luks_open (vpodzime)
  - Make sure we pass key_size to cryptsetup in bytes (vpodzime)
  - Add the min_entropy parameter to luks_format Python overrides (vpodzime)
  - Pass size in KiB instead of B to lvcreate (vpodzime)
  - Add underscore into dataalignment and metadatasize parameter names (vpodzime)
  - Don't report error if non-mpath device is tested for being mpath member (vpodzime)
  - Fix name of the invoked utility in mpath_set_friendly_names (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.6-1
changelog:
  - Don't report error when non-existing swap's status is queried (vpodzime)
  - Make libblockdev-plugins-all pull the same version of plugins (vpodzime)
  - Don't report error when asked for a backing file of an uknown loop (vpodzime)
  - Fix accidental change in the spec's changelog (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.7-1
changelog:
  - Be ready for mdadm --examine to not provide some of the values we want (vpodzime)
  - Add exit code information to exec logging (vpodzime)
  - Improve and add tests (vpodzime)
  - Mark the test_force_plugin and test_reload as slow (vpodzime)
  - Make sure we get some devices when creating btrfs volume (vpodzime)
  - Add override for the lvremove function (vpodzime)
  - Do not create LUKS format with no passphrase and no key file (vpodzime)
  - Make sure we use the /dev/mapper/... path for luks_status (vpodzime)


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.7-2
changelog:
  - Ship license as per packaging guidelines
  - plugins-all should depend on base library too
  - Add dev docs


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.8-1
changelog:
  - Merge pull request #6 from vpodzime/master-sort_btrfs_subvolumes (vpodzime)
  - Don't be naïve about mdadm providing us data we would like (#1206394) (vpodzime)
  - Sort BTRFS subvolumes in a way that child never appears before parent (#1201120) (vpodzime)
  - Let libcryptsetup handle LUKSname->/dev/mapper/LUKSname for us (vpodzime)
  - Fix the crypto_luks_resize and create a test for it (vpodzime)
  - Add targets to create the SRPM and RPM files easily (vpodzime)
  - Don't round up to multiple of PE size bigger than max value of the rtype (vpodzime)
  - Mark majority of MD RAID tests as slow (vpodzime)
  - Merge pull request #1 from dashea/file-paths (vpodzime)
  - Don't report error for no loop device associated with given file (vpodzime)
  - Skip the detail_data.clean check when running tests in Jenkins (vpodzime)
  - Make package file paths more specific (dshea)
  - Implement and use MD RAID-specific wait for tests (vpodzime)
  - Try to give MD RAID time to sync things before querying them (vpodzime)
  - Fix the default value of the BDMDDetailData.clean field (vpodzime)
  - Do cleanup after every single MD RAID tests (vpodzime)
  - Do cleanup after every single LVM test (vpodzime)
  - Do cleanup after every single BTRFS test (vpodzime)
  - Make sure the LUKS device is closed and removed after tests (vpodzime)
  - Make sure DM maps from tests are removed after tests (vpodzime)
  - Make sure that loop devices are deactivated after tests (vpodzime)
  - Make the tearDown method of the mpath test case better visible (vpodzime)
  - Make sure that the swap is deactivated after tests (vpodzime)
  - Fix docstrings in tests' utils helper functions (vpodzime)
  - Improve the logging tests in utils_test.py (vpodzime)
  - Update the features.rst file (vpodzime)
  - Update the roadmap (vpodzime)
  - Don't check if we get a mountpoint for BTRFS operations (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.9-1
changelog:
  - Merge pull request #7 from vpodzime/master-fw_raid_fixes (vpodzime)
  - Try a bit harder when trying to determine MD RAID name (#1207317) (vpodzime)
  - Don't be naïve about mdadm --detail telling us what we want (#1207317) (vpodzime)
  - Ignore libblockdev tarballs (vpodzime)
  - Implement a test of btrfs_list_subvolumes on data from bug report (vpodzime)
  - Implement a context manager for running tests with fake utils (vpodzime)
  - Do not try to cannonicalize MD UUIDs if we didn't get them (#1207317) (vpodzime)
  - Fix the table in roadmap.rst (vpodzime)
  - Enrich the roadmap.rst file and add info about new plans (vpodzime)
  - Sync spec file with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.10-1
changelog:
  - Fix return type of the unload_plugins() function (vpodzime)
  - Close the DL handle when check() or init() fail (vpodzime)
  - Add one more check to the reload test (vpodzime)
  - Drop reference to check() and init() functions (vpodzime)
  - Add more cats to tests (vpodzime)
  - Make regexp for getting btrfs version more generic (vpodzime)
  - Merge pull request #8 from vpodzime/master-check_functions (vpodzime)
  - Fix parameters passed to unoverridden swapon function (vpodzime)
  - Implement and test swap plugin's check function (vpodzime)
  - Implement and test MD RAID plugin's check function (vpodzime)
  - Implement and test mpath plugin's check function (vpodzime)
  - Try harder to get util's version (vpodzime)
  - Implement and test loop plugin's check function (vpodzime)
  - Implement and test DM plugin's check function (vpodzime)
  - Implement and test BTRFS plugin's check function (vpodzime)
  - Implement and test LVM plugin's check function (vpodzime)
  - Init logging before loading plugins (vpodzime)
  - Add function for utility availability checking (vpodzime)
  - Fix default value for the fake_utils' path argument (vpodzime)
  - Add ErrorProxy instance for the utils functions (vpodzime)
  - Add function for version comparison (vpodzime)
  - Merge pull request #9 from clumens/master (vpodzime)
  - Disable pylint checking on the new exception proxy. (clumens)
  - Fix XRules application and add a test for it (vpodzime)
  - Raise NotImplementedError when an unavailable function is called (vpodzime)
  - Merge pull request #4 from vpodzime/master-error_proxy (vpodzime)
  - Merge branch 'master' into master-error_proxy (vpodzime)
  - Merge pull request #5 from vpodzime/master-not_implemented_error (vpodzime)
  - Add a simple test for unloaded/unavailable functions (vpodzime)
  - Unload the plugins properly when reinit() is called (vpodzime)
  - Raise error/exception when an unimplemented function is called (#1201475) (vpodzime)
  - Do an ugly but necessary hack to make local GI overrides work (vpodzime)
  - Add the __dir__ method to ErrorProxy (vpodzime)
  - Add a rationale for the ErrorProxy to the overrides' docstring (vpodzime)
  - Add some basic info about GI overrides to the documentation (vpodzime)
  - Use pylint to check for errors in python overrides (vpodzime)
  - Add the first small test for the ErrorProxy (vpodzime)
  - Put the GI overrides in a special dir so that they are preferred (vpodzime)
  - Add a cache for attributes already resolved by ErrorProxy (vpodzime)
  - Implement the ErrorProxy python class and use it (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.11-1
changelog:
  - Fix issues with using overriden functions over ErrorProxy (vpodzime)
  - Update the roadmap.rst and features.rst with new stuff (vpodzime)
  - Fix two minor issues with docs generation (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.12-1
changelog:
  - Require minimum version of libblockdev-utils in some plugins (vpodzime)
  - Report both stdout and stderr if exit code != 0 (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.13-1
changelog:
  - Prevent a leaky test from running in Jenkins (vpodzime)
  - Try harder when cleaning up after MD RAID tests (vpodzime)
  - Improve the MD RAID activate/deactivate test (vpodzime)
  - One more @contextmanager that needs try-finally (vpodzime)
  - Do not require metadata version to be reported by 'mdadm --examine' (#1217900) (vpodzime)
  - Make sure we always set things back in context managers (vpodzime)
  - Make the release date for version 1.0 more realistic (vpodzime)
  - Merge pull request #11 from vpodzime/master (vpodzime)
  - Run utilities with LC_ALL=C (vpodzime) (#1219033)
  - Free GMatchInfo instance even in case of no match (vpodzime)
  - Resolve /dev/md/ symlinks when checking swap status. (dlehman)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.0-1
changelog:
  - Adapt the release helper targets to autotools (vpodzime)
  - Fixes of paths in Makefile.am's inspired by build failures on s390 (vpodzime)
  - Add an s390-specific BuildRequires (vpodzime)
  - Distribute also the boilerplate_generator.py script (vpodzime)
  - Fix path to the generated blockdev.pc file (vpodzime)
  - Adapt tests that compile stuff to autotools (vpodzime)
  - Merge pull request #18 from vpodzime/master-autotools (vpodzime)
  - Merge pull request #20 from dashea/gtkdoc-sections (vpodzime)
  - Use the autotools building system instead of scons (vpodzime)
  - Add the two new functions to the 'blockdev' docs section (vpodzime)
  - Fix the line defining the docs file for the s390 section (vpodzime)
  - Add a missing #include to the kbd.api file (vpodzime)
  - Prevent s390-specific stuff from being used on other architectures (vpodzime)
  - Update the documentation of the is_initialized() function (vpodzime)
  - Merge pull request #19 from vpodzime/master-ensure_init (vpodzime)
  - Remove private macros from the gtkdoc sections file. (dshea)
  - Terminate ifdef statements for arch check. (sbueno+anaconda)
  - Return early from the init functions if setting up logging fails (vpodzime)
  - Add tests for the new and modified init functions (vpodzime)
  - Add new try_init() and try_reinit() functions (vpodzime)
  - Fix for adding number of loaded plugins (vpodzime)
  - Fix for ensure_init() (vpodzime)
  - Rename the try_init() function to ensure_init() and improve it (vpodzime)
  - Check number of loaded plugins and library initialization state (vpodzime)
  - Make 'reload' default to True instead of False in overrides (vpodzime)
  - Add the s390 plugin test file. (sbueno+anaconda)
  - Add the s390 plugin functions. (sbueno+anaconda)
  - Add the s390 plugin. (sbueno+anaconda)
  - Fix a typo in the spec file. (sbueno+anaconda)
  - Require the kmod-devel package for the build process (vpodzime)
  - Merge pull request #16 from dashea/escrow-encoding (vpodzime)
  - Merge pull request #13 from vpodzime/master-lvm_cache (vpodzime)
  - Merge pull request #12 from vpodzime/master-kbd_plugin (vpodzime)
  - Merge pull request #14 from vpodzime/master-better_is_multipath (vpodzime)
  - Use g_strdup() instead of g_strdup_printf() to just dup a string (vpodzime)
  - Fix the spelling of "escrow" (dshea)
  - Make the crypto plugin string parameters const (dshea)
  - Set encoding to NULL before writing the escrow packet. (dshea)
  - Get cache stats directly from the device mapper (vpodzime)
  - Reimplement the is_mpath_member() function using device mapper (vpodzime)
  - Add the LVM cache related symbols to the LVM section in the documentation (vpodzime)
  - Update the list of LVM cache related functions in features.rst (vpodzime)
  - Add tests for functions related to the LVM cache technology (vpodzime)
  - Implement the lvm_cache_stats() function (vpodzime)
  - Implement the lvm_cache_pool_name function (vpodzime)
  - Implement the lvm_cache_create_cached_lv() function (vpodzime)
  - Implement lvm_cache_attach/detach() functions (vpodzime)
  - Implement the lvm_cache_create_pool() function plus two support functions (vpodzime)
  - Implement the lvm_cache_get_default_md_size() function (vpodzime)
  - Add the 'type' parameter to the lvm_lvcreate function (vpodzime)
  - Teach boilerplate_generator to work with enum return types (vpodzime)
  - Teach boilerplate_generator to work with 'const' return types (vpodzime)
  - Add subpackages for the KBD plugin and its devel files (vpodzime)
  - Add provided symbols to the documentation section of the KBD plugin (vpodzime)
  - Implement the bcache_get_backing/cache_device functions (vpodzime)
  - Exclude bcache tests from the normal 'test' target (vpodzime)
  - Add some more and prolong some of the waits in KBD tests (vpodzime)
  - Zero all newly allocated structures (vpodzime)
  - Implement the bcache_status function and all it wants (vpodzime)
  - Fix for the zram stats (vpodzime)
  - Add bcache_get_mode and bcache_set_mode functions (vpodzime)
  - Teach boilerplate_generator to work with enum return types (vpodzime)
  - Teach boilerplate_generator to work with 'const' return types (vpodzime)
  - Add the zram_get_stats function (vpodzime)
  - Add the check() function for the KBD plugin (vpodzime)
  - Add ErrorProxy instance for the KBD plugin (vpodzime)
  - Add tests for bcache_create/attach/detach/destroy functions (vpodzime)
  - Add the 'rebuild' Makefile target (vpodzime)
  - Add bcache_create, bcache_attach, bcache_detach and bcache_destroy functions (vpodzime)
  - Implement a helper function to echo string into a file (vpodzime)
  - Add tests for zram_create_devices and zram_destroy_devices functions (vpodzime)
  - Add the zram_destroy_devices function to the KBD plugin (vpodzime)
  - Add first function to the KBD plugin: zram_create_devices (vpodzime)
  - Add the KernelBlockDevices plugin (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.1-1
changelog:
  - Clean generated boilerplate code on 'make clean' (vpodzime)
  - Merge pull request #31 from atodorov/use_lang_c (vpodzime)
  - tests: use LANG=C in test_backup_passphrase() (atodorov)
  - Merge pull request #30 from atodorov/makefile_updates (vpodzime)
  - Makefile.am:   - add separate check target   - add coverage targets   - make it possible to test with Python3 (atodorov)
  - Merge pull request #29 from atodorov/fix_issue_28 (vpodzime)
  - Merge pull request #27 from atodorov/fix_docs_url (vpodzime)
  - Merge pull request #26 from atodorov/test_docs (vpodzime)
  - Change the modified sources back in tearDown() method as well. Closes #28. (atodorov)
  - update URL to on-line documentation (atodorov)
  - add test documentation (atodorov)
  - Merge pull request #22 from dashea/escrow-tests (vpodzime)
  - Merge pull request #25 from dashea/python-dep (vpodzime)
  - Filter the python files from automatic rpm requires (dshea)
  - Added tests for escrow packets and backup passphrases (dshea)
  - Free leaked contexts from crypto_init (dshea)
  - Cooperate with volume_key's memory management (dshea)
  - Fix inheritance in the LVM tests to prevent multiple runs of some tests (vpodzime)
  - Make the regexp for testing crypto_generate_backup_passphrase() stricter (vpodzime)
  - Leave room in the backup passphrase for a trailing 0 (dshea)
  - Add functions to get names of data/metadata internal LVs (vpodzime)
  - Allow getting info for an internal LV (vpodzime)
  - Gather information about all LVs (vpodzime)
  - Round requested size to KBs in lvresize() (#1221247) (vpodzime)
  - Add overrides for the ensure_init() function (vpodzime)
  - Change the default value of the 'reload' parameter of try_reinit() (vpodzime)
  - Merge pull request #21 from vpodzime/master-thpool_size_discard (vpodzime)
  - Add overrides for the lvm_is_valid_thpool_chunk_size() function (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.2-1
changelog:
  - Merge pull request #40 from vpodzime/master-config_support (vpodzime)
  - Add tests for configuration support (vpodzime)
  - Add a function for getting the loaded soname for a plugin (vpodzime)
  - Add the default configuration (vpodzime)
  - Load and respect configuration files when loading plugins (vpodzime)
  - Add functions for finding and processing configuration files (vpodzime)
  - Merge pull request #38 from vpodzime/master-md_superblock_size (vpodzime)
  - Better document how MD RAID superblock size should be calculated (vpodzime)
  - Merge pull request #36 from phatina/master (vpodzime)
  - BTRFS: allow an arbitrary label to be set for a btrfs volume (phatina)
  - Merge pull request #32 from phatina/master (vpodzime)
  - BTRFS: fix parsing empty partition label (phatina)
  - Merge pull request #35 from vpodzime/master (vpodzime)
  - Define env variables for sudo via the env utility (vpodzime)
  - Merge pull request #34 from dashea/python3-tests (vpodzime)
  - Use unittest.addCleanup to simplify crypto_test. (dshea)
  - Run tests with both python2 and python3 in the ci target. (dshea)
  - Fix python3 issues in the unittests. (dshea)
  - Do not run all tests in the 'ci' target (vpodzime)
  - Merge pull request #33 from clumens/master (vpodzime)
  - Add a new makefile target that does everything needed for jenkins. (clumens)
  - Synchronize the .spec file with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.3-1
changelog:
  - Add missing python GI requires (vpodzime)
  - Merge pull request #49 from dashea/libblockdev-python (vpodzime)
  - Merge pull request #50 from vpodzime/master-fix_striped_lv (vpodzime)
  - Merge pull request #46 from vpodzime/master-bcache_destroy (vpodzime)
  - Merge pull request #39 from vpodzime/master-lvm_physical_space (vpodzime)
  - Add a missing ldconfig that rpmlint found. (dshea)
  - Move python files to separate packages (#1256758) (dshea)
  - Fix lvcreate calls for striped LVs (vpodzime)
  - Merge pull request #48 from vojtechtrefny/master_pvfree (vpodzime)
  - Add pv_free to BDLVMPVdata (vtrefny)
  - Merge pull request #47 from atodorov/add_coverage_report (vpodzime)
  - Produce coverage report in CI (atodorov)
  - Check bcache device's state before trying to detach the cache in destroy() (vpodzime)
  - Fix URLs in the spec (vpodzime)
  - Fix the int-float less-than comparison (vpodzime)
  - Fix the calculation of physical space taken by an LV (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.4-1
changelog:
  - Merge pull request #62 from vpodzime/master-clean_up (vpodzime)
  - Use addCleanup() instead of tearDown() in tests (vpodzime)
  - Merge pull request #58 from vpodzime/master-lvm_dbus_pr (vpodzime)
  - Add the VG renaming functionality (vpodzime)
  - Packaging of the lvm-dbus plugin (vpodzime)
  - The LVM DBus plugin (vpodzime)
  - Add more generic functions for logging (vpodzime)
  - Use MAX(a, b) instead of CLAMP(b, a, b) (vpodzime)
  - Merge pull request #59 from vpodzime/master-vgrename (vpodzime)
  - Add a function for renaming VGs (vpodzime)
  - Merge pull request #57 from clumens/master (vpodzime)
  - Fix error reporting when running "make test". (clumens)
  - Merge pull request #54 from vojtechtrefny/master-pvsize (vpodzime)
  - Do not try to create a PV with 4KiB metadata space (vpodzime)
  - Add pv_info to BDLVMPVdata (vtrefny)
  - btrfs now requires at least 128MiB device(s) (vpodzime)
  - Merge pull request #52 from vpodzime/master (vpodzime)
  - Round size in thpoolcreate() to KiB (vpodzime)
  - Sync the %changelog in spec with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.4-5
changelog:
  - Search for the LVM DBus service in activatable names (vpodzime)
  - Better check for the LVM DBus API (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.5-1
changelog:
  - Merge pull request #72 from vpodzime/master-faster_tests (vpodzime)
  - Ignore all .bak files (vpodzime)
  - Use python3-pylint and skip Python 2 tests (vpodzime)
  - Try a bit harder when deactivating MD arrays in tests (vpodzime)
  - Recompile only the LVM plugin in tests (vpodzime)
  - Merge pull request #65 from vpodzime/master-loc_indep_error (vpodzime)
  - Merge pull request #70 from vojtechtrefny/master-chunk_size (vpodzime)
  - Add bd_md_create_with_chunk_size() function (vtrefny)
  - Merge pull request #68 from vpodzime/master-no_intro_data (vpodzime)
  - Merge pull request #71 from vpodzime/master-ipython3 (vpodzime)
  - Run coverage with the right config directories (vpodzime)
  - Merge pull request #67 from phatina/master (vpodzime)
  - Merge pull request #69 from vpodzime/master-lvm_dbus_autostart (vpodzime)
  - Use ipython3 for debugging and testing sessions (vpodzime)
  - Don't expect to always get introspection data from DBus (vpodzime)
  - Make invocation of tests configurable (phatina)
  - Make error messages locale agnostic (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.6-1
changelog:
  - Ignore merge commits when creating changelog (vpodzime)
  - Only take the number of the first %changelog line found (vpodzime)
  - Add some more detailed description to the part plugin (vpodzime)
  - Fix a few extra issues with the const types (vpodzime)
  - Add function for getting best free region (vpodzime)
  - Add function for getting free regions (vpodzime)
  - Fix the error message when setting part flag fails (vpodzime)
  - Add function for setting disk flags (vpodzime)
  - Add function for getting information about disk(s) (vpodzime)
  - Do not set nonsense partition paths (vpodzime)
  - Add function for getting partition by position (vpodzime)
  - Indicate if there was error from parted or not in set_parted_error() (vpodzime)
  - Minor fixes for the bd_part_get_part_spec() function (vpodzime)
  - Add support for extra GPT flags (vpodzime)
  - Add functionality for partition types (GUIDs) (vpodzime)
  - Add functionality for partition names (vpodzime)
  - Do not destroy disk objects we didn't get (vpodzime)
  - Add a function for setting multiple partition flags at once (vpodzime)
  - Remove the unused definition USE_PYTHON3 from configure.ac (vpodzime)
  - Use different BTRFS_MIN_MEMBER_SIZE on aarch64 (vpodzime)
  - Better release memory from parted objects on failures (vpodzime)
  - Rework how we do optimal alignment (vpodzime)
  - Do not try to destroy object we didn't get (vpodzime)
  - Don't pass sizes in bytes to LVM (#1317373) (vpodzime)
  - Add the libbytesize-devel build requires (vpodzime)
  - Search for the LVM DBus service in both active and activatable names (vpodzime)
  - Adapt to another stupid change in btrfs-progs (vpodzime)
  - Add the XFS-related functions to the documentation (vpodzime)
  - Add tests for the XFS-related functions (vpodzime)
  - Add support for the XFS file system to the FS plugin (vpodzime)
  - Add chunk_size to BDMDExamineData (vtrefny)
  - Add the subpackage for the FS plugin (vpodzime)
  - Add the FS plugin to the docs (vpodzime)
  - Add tests for the ext4 functionality in the fs plugin (vpodzime)
  - Add the FS plugin and the ext4 support (vpodzime)
  - Add a function for running utility reporting error and exit code (vpodzime)
  - Add the subpackage for the part plugin (vpodzime)
  - Add a missing BuildRequires for parted-devel (vpodzime)
  - Tag as both libblockdev-$version and just $version (vpodzime)
  - Add the 'part' plugin to documentation (vpodzime)
  - Add tests for the newly added part plugin (vpodzime)
  - Add the part plugin with storaged-required functionality (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.7-1
changelog:
  - Include the LV roles in the LVdata (vpodzime)
  - Add a few missing items to the documentation (vpodzime)
  - Document fields of the structures (vpodzime)
  - Report (meta)data LV name properly for cache pools in lvm-dbus (vpodzime)
  - Add information about related LVs to LVMLVdata (vpodzime)
  - Remove unused code for getting supported functions (vpodzime)
  - Add zFCP functionality to s390 plugin (sbueno+anaconda)
  - Fix a few const params in the s390 plugin. (sbueno+anaconda)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.8-1
changelog:
  - Add a function to get all mpath member devices (vpodzime)
  - Fix backport issues in the zfcp-related functionality (#1348442) (vpodzime)
  - Revert "Fix a few const params in the s390 plugin." (vpodzime)
  - Fix creation of the version-only tags (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.9-1
changelog:
  - Add functions for creating thin/cache pools from existing LVs (vpodzime)
  - Add the new mpath_get_members() function to the docs (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.9-3
changelog:
  - Try to search for "RAID Level" in mdadm's output (vpodzime)
    Resolves: rhbz#1379865
  - Fix the number passed to LVM DBus as a job-creation timeout (vpodzime)
    Resolves: rhbz#1378970


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.9-4
changelog:
  - Do not report volume name for FW RAID container device (vpodzime)
    Related: rhbz#1379865
  - Search for just "UUID" in mdadm --examine output (vpodzime)
    Related: rhbz#1379865
  - Use 'mdadm --examine --export' to get MD RAID level (vpodzime)
    Related: rhbz#1379865


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.9-7
changelog:
  - Open the device file as RDWR when committing parts (vpodzime)
  - Handle mdadm --examine output during migration (adamw)
    Resolves: rhbz#1381996


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.9-8
changelog:
  - Revert "Prevent issues between libparted and udev" (vpodzime)
  - Revert "Open the device file as RDWR when committing parts" (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.1-1
changelog:
  - Do not require an exclusive lock on the device to commit part stuff (vpodzime)
  - Prevent failure if there are no btrfs subvolumes (vpodzime)
  - Fix the test for getting version of a failing utility (vpodzime)
  - Also run the utils tests (vpodzime)
  - Bump the version of the pkgconfig module (vpodzime)
  - Include utils.h in plugins that need it (vpodzime)
  - Fix dependency check in fs plugin (vtrefny)
  - Add support for setting part id (part type) on msdos part tables (vtrefny)
  - Trim the extra info for MD RAID's name (vpodzime)
  - Add xfsprogs and dosfstools as dependencies of the fs plugin (vpodzime)
  - Fix md_name_from_node to work with the "/dev/" prefix (vpodzime)
  - New major upstream release


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.2-1
changelog:
  - Use the .in file as source when bumping version (vpodzime)
  - Run pylint based on the python version and make it optional (vpodzime)
  - Disable python3 and bcache on RHEL (vpodzime)
  - Make bcache support optional (vpodzime)
  - Teach boileplate_generator.py to skip things based on patterns (vpodzime)
  - Require lower versions of some utilities (vpodzime)
  - Do not require python3 for the boilerplate generation script (vpodzime)
  - Use a proper initialization value for 'GPollFD fds[2]' (vpodzime)
  - Deal with older parted and libblkid (vpodzime)
  - Make python3 and gtk-doc optional (vpodzime)
  - Bump the version of the utils library (vpodzime)
  - Fix docstring for 'bd_md_node_from_name' (vtrefny)
  - Add tests for added mdraid methods (vtrefny)
  - Skip 'MDTestNominateDenominateActive' unless feeling lucky (vtrefny)
  - MDRaid tests: change 'wait_for_resync' to wait for given action (vtrefny)
  - Add functionality need by storaged to mdraid plugin (vtrefny)
  - Move 'echo_str_to_file' method to utils (vtrefny)
  - Add a function to setup a loop device from a file descriptor (vpodzime)
  - Add functions to get/set the autoclear flag on a loop device (vpodzime)
  - Fix checking /proc/mdstat for resync action (vtrefny)
  - Adapt the test config files to version 2.x (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.3-1
changelog:
  - Allow specifying raid 'name' in multiple way when calling md functions (vtrefny)
  - Allow using both path and raid name in bd_md_set_bitmap_location (vtrefny)
  - Fix potential memory issues in s390 sanitizate functions (vpodzime)
  - Try multiple times when probing device for wiping (vpodzime)
  - Check for libvolume_key.h and dmraid.h in configure.ac (vpodzime)
  - Define our own macro for testing required header files (vpodzime)
  - Include blockdev/utils.h in mdraid.h (vtrefny)
  - Fix misspelling (agrover)
  - Skip the bcache tests even on x86_64 (vpodzime)
  - Take a break between bcache creation tests (vpodzime)
  - Make sure ./configure fails if there are some soft failures (vpodzime)
  - Improve the error message on missing GI support (vpodzime)
  - Only require bcache-tools if supporting bcache (vpodzime)
  - Skip bcache tests on non-x86_64 architectures (vpodzime)
  - Try harder to register a new bcache device (vpodzime)
  - Reimplement swapon/swapoff functions by using syscalls (vpodzime)
  - Make sure bcache functions are correctly provided or not (vpodzime)
  - Changelog fixup (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.4-1
changelog:
  - Update specs.rst to use present-tense and current API (agrover)
  - Add functions using BLOBs as LUKS passphrases (vpodzime)
  - Make sure the _error_quark() functions are in the library (vtrefny)
  - Return a special error when trying to wipe empty device (vtrefny)
  - Adapt tests to use LIO devices instead of loop devices (vpodzime)
  - Add functions for creating and deleting LIO devices (vpodzime)
  - MDRAID: Allow path as input for functions that work with sysfs (vtrefny)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.5-1
changelog:
  - Do not try to get GVariant after not adding anything to its builder (vpodzime)
  - Replace NULL with "" when building ExtraArg (vpodzime)
  - Replace NULL with "" when adding it as a 's' GVariant (vpodzime)
  - Make sure we don't try to add NULL as GVariant to DBus params (vpodzime)
  - Add function for getting recommended thpool metadata size (vpodzime)
  - Make udev settle after we create a LIO device (vpodzime)
  - Always use '--yes' for lvremove (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.6-1
changelog:
  - Move the  part_err library before part and fs (vtrefny)
  - Fix BuildRequires for crypto and dm packages (vtrefny)
  - Fix mounting read-only devices (vtrefny)
  - Fix the bd_s390_dasd_is_ldl function. (vponcova)
  - Add the bd_s390_dasd_is_fba function to check if DASD is FBA (vponcova)
  - Disable MD RAID tests on 32bit systems (vpodzime)
  - Fix error message when mounting with a wrong fs type (vtrefny)
  - Only create RPMs for requested/configured  plugins (vpodzime)
  - Only check dependencies of plugins to be built (vpodzime)
  - Only build and distribute plugins if configured so (vpodzime)
  - Fix format-security and unused-result compiler warnings (vtrefny)
  - Add an AC macro for modular builds (vpodzime)
  - Add functions for mounting and unmounting filesystems (vtrefny)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7-1
changelog:
  - Skip btrfs min size tests on Fedora 25 (vtrefny)
  - Make sure the loop device doesn't disappear during tests (vpodzime)
  - Close the loop device when autoclear is (un)set (vpodzime)
  - Do not enforce Python 3 for running tests in CI (vpodzime)
  - Revert "Use different BTRFS_MIN_MEMBER_SIZE on aarch64" (vtrefny)
  - Use both 'old' and 'new' sysfs files to read zRAM stats (vtrefny)
  - Check if libparted-fs-resize pkgconfig is available (vpodzime)
  - Do not try to get name for inactive partitions (vtrefny)
  - Skip tests for getting free regions on CentOS/RHEL (vpodzime)
  - Free the container holding the specs of free regions (vpodzime)
  - Open loop devices as O_RDONLY when getting flags (vpodzime)
  - Resolve maximum partition size when we know its start (vpodzime)
  - Use --id instead of --part-type when setting partition id (vpodzime)
  - Fix mdadm command for removing failed device from an array (vtrefny)
  - Skip bcache tests on CentOS/RHEL 7 (vpodzime)
  - Use six.assertRaisesRegex in the FS tests (vpodzime)
  - Use mkdtemp() instead of TemporaryDirectory() (vpodzime)
  - Fix installation without specifying --exec-prefix (vpodzime)
  - Add options to force mkfs.ext4/vfat to create a FS on the whole device (vpodzime)
  - Skip the test for device escrow on CentOS/RHEL (vpodzime)
  - Define DEVNULL on our own if not in subprocess (vpodzime)
  - Remove the patches from the spec file (vpodzime)
  - Sync the spec file with downstream (vpodzime)
  - Stop skipping zRAM stats tests (vtrefny)
  - Add more tests for zRAM stats (vtrefny)
  - Fix reading zRAM properties from sysfs (vtrefny)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.8-1
changelog:
  - Temporarily skip vfat generic resize test on rawhide (vtrefny)
  - Use "safeprobe" in "bd_fs_wipe" (vtrefny)
  - Add a generic filesystem resize function (vtrefny)
  - Add a function to get mountpoint for a device (vtrefny)
  - Add a function to get filesystem type for a device (vtrefny)
  - Only include the LVM DBus config when shipping LVM DBus (vpodzime)
  - Skip the LVM DBus vgreduce tests on Rawhide (vpodzime)
  - Do not build the lvm-dbus plugin on RHEL/CentOS (vpodzime)
  - Give zRAM more time to settle before trying to remove a device (vpodzime)
  - Put zram tests adding/removing devices into a separate class (vpodzime)
  - Skip LVM cache and RAID tests on Rawhide (vpodzime)
  - Fix the skip_on decorator factory for tests (vpodzime)
  - Use 'blkid -p' instead of lsblk to get device's FS type (vpodzime)
  - Improve the lvm_set_global_config test (vpodzime)
  - Pass '-y' to pvresize (vpodzime)
  - Create a copy of os.environ for a child process (vpodzime)
  - Revert "Use the "C.UTF-8" locale instead of just "C"" (vpodzime)
  - Fix how we create vfat FS in tests (vpodzime)
  - Skip the test if requiring unavailable locales (vpodzime)
  - Use the "C.UTF-8" locale instead of just "C" (vpodzime)
  - Add functions for working with ext2 and ext3 filesystems (vtrefny)
  - Link to gobject when lvm or btrfs is enabled (andreas)
  - Link to libm where needed (andreas)
  - Add a function for cleaning a device (vtrefny)
  - Add few code exaples to documentation (vtrefny)
  - Use a special exception for no fs signature when doing wipe (vpodzime)
  - One more incompatible os.symlink() call (vpodzime)
  - Do not use pass-by-name in the os.symlink() call (vpodzime)
  - Ignore previous errors when falling back to using ioctl() (vpodzime)
  - Use ioctl() call to teardown loop devices (vpodzime)
  - Resolve the device to remove for mdadm (vpodzime)
  - Add a function for getting device symlinks (vpodzime)
  - Use the new resolve_device() function where appropriate (vpodzime)
  - Add the resolve_device() function to the utils library (vpodzime)
  - First try to read the 'autoclear' flag from /sys/ (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.9-1
changelog:
  - Fix hardcoded reference to gcc (timo.gurr)
  - Catch and ignore partial failures in LVM tests' cleanups (vpodzime)
  - Fix hardcoded reference to pkg-config (timo.gurr)
  - Make GObject introspection optional (vpodzime)
  - Do not link libraries required by plugins to the GI files (vpodzime)
  - Make sure the whole build status image is shown (vpodzime)
  - Show CI status in README (at the GH repo's front page) (vpodzime)
  - Always require the libudev pkg (tgurr)
  - Make sure we give kernel time to fully setup zram device(s) (vpodzime)
  - fs_test.py: Close FDs when calling utilities (tasleson)
  - crypto.c: Correct segmentation fault (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.10-1
changelog:
  - Only enable partition size tolerance with alignment (vpodzime)
  - Limit the requested partition size to maximum possible (vpodzime)
  - Do not verify vfat FS' size after generic resize (vpodzime)
  - Specify tolerance for partition size (kailueke)
  - Only use the exact constraint if not using any other (vpodzime)
  - Check resulting FS size in tests for generic FS resize (vpodzime)
  - Query setting FS label support and generic relabeling (kailueke)
  - Do not strictly require all FS utilities (vpodzime)
  - Compile everything with the C99 standard (vpodzime)
  - Add partition resize function (kailueke)
  - Generic Check and Repair Functions (kailueke)
  - Query functions for FS resize and repair support (kailueke)
  - Update the project/source URL in the spec file (vpodzime)
  - Add functions for opening/closing TrueCrypt/VeraCrypt volumes (vpodzime)
  - Adapt to a change in behaviour in new libmount (vpodzime)
  - Try RO mount also if we get EACCES (vpodzime)
  - Size in bytes for xfs_resize_device (kailueke)
  - src/plugins/Makefile.am: Remove hard coded include path in /usr prefix (tristan.vanberkom)
  - Fixed include for libvolume_key.h (tristan.vanberkom)
  - Ignore parted warnings if possible (squimrel)
  - bcache tests: Remove FEELINGLUCKY checks (tasleson)
  - kbd.c: Code review corrections (tasleson)
  - kbd.c: Make bd_kbd_bcache_create work without abort (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.11-1
changelog:
  - Make the KbdZRAMDevicesTestCase inherit from KbdZRAMTestCase (vpodzime)
  - Allow non-source directory builds (kailueke)
  - Add a way to disable runtime dependency checks (vpodzime)
  - Link to GObject even if no plugin is activated (kailueke)
  - Skip zram tests on Rawhide (vpodzime)
  - Keep most utilities available for tests (vpodzime)
  - Use new libmount function to get (un)mount error message (vtrefny)
  - Update the documentation URL (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.12-1
changelog:
  - Own directories /etc/libblockdev and /etc/libblockdev/conf.d (vtrefny)
  - Wait for resized partition (kailueke)
  - Make sure the device is opened for libparted (vpodzime)
  - Fix label check in swap_test (vtrefny)
  - Use "run_tests" script for running tests from Makefile (vtrefny)
  - Add a script for running tests (vtrefny)
  - Tests: Move library initialization to setUpClass method (vtrefny)
  - Stop skipping FAT resize tests on rawhide (vtrefny)
  - Close filesystem before closing the partition during FAT resize (vtrefny)
  - Use mountpoint for "xfs_info" calls (vtrefny)
  - Use libmount cache when parsing /proc/mounts (vtrefny)
  - Add some space for the CI status (vpodzime)
  - Confirm the force when creating PVs in FS tests (vpodzime)
  - Skip vgremove tests on 32bit Debian (vtrefny)
  - Fix names of backing files in tests (vtrefny)
  -  Fix checking for available locales (vtrefny)
  - Skip dependency checking in mpath tests on Debian (vtrefny)
  - Skip zRAM tests on Debian (vtrefny)
  - Skip the test for device escrow on Debian too (vtrefny)
  - Skip free region tests on Debian too (vtrefny)
  - Fix redirecting command output to /dev/null in tests (vtrefny)
  - Try harder to unmount devices in test cleanup (vtrefny)
  - Require only plugins that are needed for given test (vtrefny)
  - Try to get distribution info from "PrettyName" if "CPEName" isn't available (vtrefny)
  - Use -ff when creating PVs in FS tests (vpodzime)
  - Sync spec with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.13-1
changelog:
  - Fix the rpmlog and shortlog targets (vpodzime)
  - Add a function for enabling/disabling plugins' init checks (vpodzime)
  - Assign functions to tech-mode categories (vpodzime)
  - Add missing items to particular sections in the documentation (vpodzime)
  - Add a basic test for the runtime dependency checking (vpodzime)
  - Simplify what WITH_BD_BCACHE changes in the KBD plugin (vpodzime)
  - Add functions for querying available technologies (vpodzime)
  - Dynamically check for the required utilities (vpodzime)
  - Use shorter prefix for tempfiles (vtrefny)
  - Try harder when waiting for lio device to show up (vtrefny)
  - Better handle old and new zram sysfs api in tests (vtrefny)
  - Skip btrfs tests on CentOS 7 aarch64 (vtrefny)
  - Add new function for setting swap label (vtrefny)
  - Use only one git tag for new releases (vtrefny)
  - Fix source URL in spec file (vtrefny)
  - Add NEWS.rst file (vtrefny)
  - Do not include s390utils/vtoc.h in s390 plugin (vtrefny)
  - Use "AC_CANONICAL_BUILD" to check architecture instead of "uname" (vtrefny)
  - Bypass error proxy in s390 test (vtrefny)
  - Fix zFCP LUN max length (vtrefny)
  - Do not run g_clear_error after setting it (vtrefny)
  - Allow compiling libblockdev without s390 plugin (vtrefny)
  - Add a function for getting plugin name (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.14-1
changelog:
  - Support the legacy boot GPT flag (intrigeri)
  - Respect the version in the blockdev.pc file (vpodzime)
  - Add pkgconfig definitions for the utils library (vpodzime)
  - fs.c: Fix potential NULL pointer dereference (vtrefny)
  - dm.c: Fix uninitialized values in various dm plugin functions (vtrefny)
  - dm.c: Check return values of dm_task_set_name/run/get_info functions (vtrefny)
  - fs.c: Fix multiple "forward NULL" warnings in 'bd_fs_ntfs_get_info' (vtrefny)
  - lvm-dbus.c: Fix multiple "use after free" coverity warnings (vtrefny)
  - Fix duplicate 'const' in generated functions (vtrefny)
  - Add some test cases for NTFS (kailueke)
  - Add function wrappers for NTFS tools (kailueke)
  - exec.c: Fix error message in 'bd_utils_exec_and_report_progress' (vtrefny)
  - crypto.c: Fix waiting for enough entropy (vtrefny)
  - Ignore some coverity false positive errors (vtrefny)
  - exec.c: Ignore errors from 'g_io_channel_shutdown' (vtrefny)
  - part.c: Check if we've found a place to put new logical partitions (vtrefny)
  - kbd.c: Fix potential string overflow in 'bd_kbd_bcache_create' (vtrefny)
  - exec.c: Fix resource leaks in 'bd_utils_exec_and_report_progress' (vtrefny)
  - fs.c: Fix "forward null" in 'do_mount' and 'bd_fs_xfs_get_info' (vtrefny)
  - part.c: Fix possible NULL pointer dereference (vtrefny)
  - crypto.c: Use right key buffer in 'bd_crypto_luks_add_key' (vtrefny)
  - exec.c: Fix "use after free" in 'bd_utils_check_util_version' (vtrefny)
  - kbd.c: Fix double free in 'bd_kbd_zram_get_stats' (vtrefny)
  - part.c: Check if file discriptor is >= 0 before closing it (vtrefny)
  - mdraid.c: Fix resource leaks (vtrefny)
  - lvm.c: Fix "use after free" in 'bd_lvm_get_thpool_meta_size' (vtrefny)
  - fs.c: Fix for loop condition in 'bd_fs_get_fstype' (vtrefny)
  - fs.c: Check sscanf return value in 'bd_fs_vfat_get_info' (vtrefny)
  - fs.c: Fix resource leaks in 'bd_fs_get_fstype' (vtrefny)
  - blockdev.c.in: Fix unused variables (vtrefny)
  - Use libbytesize to parse bcache block size (vtrefny)
  - Use system values in KbdTestBcacheStatusTest (vtrefny)
  - Fix BSSize memory leaks in btrfs and mdraid plugins (vtrefny)
  - Skip btrfs subvolume tests with btrfs-progs 4.13.2 (vtrefny)
  - Added function to get DM device subsystem (japokorn)
  - Sync spec with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.15-1
changelog:
  - Do not use the 'btrfs' plugin in overrides tests (vpodzime)
  - Do not use the btrfs plugin in library tests (vpodzime)
  - Check for btrfs module availability in btrfs module (vtrefny)
  - Move kernel modules (un)loading and checking into utils (vtrefny)
  - Free locale struct in kbd plugin (vtrefny)
  - Add test for setting partition flags on GPT (vtrefny)
  - Use only sgdisk to set flags on GPT (vtrefny)
  - Move the fs.h file to its original place (vpodzime)
  - Add a HACKING.rst file (vpodzime)
  - Mark bcache tests as unstable (vpodzime)
  - Fix memory leaks in bd_fs_vfat_get_info() (vpodzime)
  - Revert the behaviour of bd_fs_check_deps() (vpodzime)
  - Split the bd_fs_is_tech_avail() implementation (vpodzime)
  - Split the FS plugin source into multiple files (vpodzime)
  - Fix bd_s390_dasd_format (vponcova)
  - Mark unstable tests as such (vpodzime)
  - bd_s390_dasd_is_ldl should be true only for LDL DADSs (vponcova)
  - Do not lie about tag creation (vpodzime)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.16-1
changelog:
  - Add tests for progress report (jtulak)
  - Add e2fsck progress (jtulak)
  - Add progress reporting infrastructure for Ext fsck (jtulak)
  - Add a function to test if prog. reporting was initialized (jtulak)
  - Add support for LUKS 2 opening and key management (vtrefny)
  - Fix few more links for project and documentation website (vtrefny)
  - Sync the spec file with downstream (vpodzime)
  - Check if 'journalctl' is available before trying to use it in tests (vtrefny)
  - Update 'Testing libblockdev' section in documentation (vtrefny)
  - Fix link to online documentation (vtrefny)
  - Fix how the new kernel module functions are added to docs (vpodzime)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.16-3
changelog:
  - Add the NVDIMM plugin (vtrefny)
  - Add tests for the NVDIMM plugin (vtrefny)
  - Add --without-xyz to DISTCHECK_CONFIGURE_FLAGS for disabled plugins (vtrefny)
  - Add function for getting NVDIMM namespace name from devname or path (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-9
changelog:
  - Remove device-mapper-multipath dependency from fs and part plugins (vtrefny)
    Resolves: rhbz#1700297


author: Alex Wood <awood@redhat.com> 1.2-1
changelog:
  - Correcting incorrect date in the changelog. (awood@redhat.com)
  - alter license per mkhusid (he is following up w/ legal to confirm)
    (cduryee@redhat.com)
  - rpmlint fixes (cduryee@redhat.com)
  - Removing .svn directory that was checked in accidentally. (awood@redhat.com)


author: Alex Wood <awood@redhat.com> 1.7-1
changelog:
  - 767749: subscription-manager-migration-data should require subscription-
    manager-migration. (awood@redhat.com)


author: Alex Wood <awood@redhat.com> 1.8-1
changelog:
  - 771615: fix mapping file syntax errors (jbowes@redhat.com)
  - 771615: add sanity-check script for mappings (jbowes@redhat.com)
  - update gitignore for swap files (jbowes@redhat.com)


author: Alex Wood <awood@redhat.com> 1.10-1
changelog:
  - 771615: Remove a dependency on the Linux 'file' command from the linting
    script. (awood@redhat.com)


author: Alex Wood <awood@redhat.com> 1.11.2.3-1
changelog:
  - Correcting logic on special hack for 180.pem (awood@redhat.com)
  - Adding additional product certs and mappings. (awood@redhat.com)
  - Adding special hack for 17{6|8}.pem and 180.pem (awood@redhat.com)
  - 840148: Adding cert and mapping for Server-EUCJP (awood@redhat.com)


author: Alex Wood <awood@redhat.com> 1.11.2.4-1
changelog:
  - Adding product certificate for RHB i386. (awood@redhat.com)
  - 820749: Correct mappings for i386 DTS. (awood@redhat.com)
  - 849274, 849305: Update mappings for JBEAP and RHEV Agent. (awood@redhat.com)


author: Alex Wood <awood@redhat.com> 1.11.2.5-1
changelog:
  - 861420: Add mapping and certificates for RHEV 3.0. (awood@redhat.com)
  - 861470: Add mapping and certificates for ELS-JBEAP. (awood@redhat.com)


author: Alex Wood <awood@redhat.com> 2.0.2-1
changelog:
  - Updating product cert mappings. (awood@redhat.com)
  - Point to newest rcm-metadata (awood@redhat.com)
  - Adding file explaining how to build on Fedora. (awood@redhat.com)


author: Alex Wood <awood@redhat.com> 2.0.4-1
changelog:
  - Adding RHEL 6.5 certificates. (awood@redhat.com)
  - Detect invalid channels more generally. (awood@redhat.com)


author: ckozak <ckozak@redhat.com> 2.0.8-1
changelog:
  - Updated releasers for rhel5.11 (ckozak@redhat.com)
  - Add mappings for RHEL 5.11 (awood@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 2.0.11-1
changelog:
  - Create new channel mappings based on most recent rcm-metadata. (jesusr@redhat.com)
  - Updating rcm-metadata (jesusr@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 2.0.12-1
changelog:
  - Create new channel mappings based on most recent rcm-metadata.  (jesusr@redhat.com)
  - Updating rcm-metadata (jesusr@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 2.0.27-1
changelog:
  - 1300766, 1300848: Adds RHEL 6.8 Release Product Certs, Adds rhev-mgmt-agent-*
    mappings back in. (csnyder@redhat.com)


author: Vritant Jain <adarshvritant@gmail.com> 2.0.28-1
changelog:
  - 1328579:  Add migration-data for RHEL 7.3 (adarshvritant@gmail.com)
  - Added 7.3 releaser (adarshvritant@gmail.com)


author: Christopher Snyder <csnyder@redhat.com> 2.0.38-1
changelog:
  - 1510200: Rebase subscription-manager-migration-data component to the latest
    upstream branch for RHEL 7.5 (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com>
changelog:
  - 1776461: Rebase subscription-manager-migration-data component to the latest
    upstream branch for RHEL 8.2.0 (csnyder@redhat.com)
  - 1776461: Update product certs to include those for 8.2 (csnyder@redhat.com)


author: Paul Howarth <paul@city-fan.org> - 0.008-1
changelog:
  - Update to 0.008
    - Switch to using merged_requirements
    - Test Env instead of Carp for version overshoot (CPAN RT#89591)
    - Document $incdirs in the right function


author: Paul Howarth <paul@city-fan.org> - 0.010-1
changelog:
  - Update to 0.010
    - Bump Module::Metadata prereq for $VERSION parsing (CPAN RT#101095)
    - Consistently require same version of CPAN::Meta::Requirements
  - Use %license


author: Paul Howarth <paul@city-fan.org> - 0.011-1
changelog:
  - Update to 0.011
    - Declare the minimum version required for the "merged_requirements"
      interface
  - Explicitly run the extra tests


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-2.20100411git
changelog:
  - Modified to initiate VPN connections with openswan whack interface
  - Fixed the issue of world readable conf and secret files
  - Cleaned conf and secret files after VPN connection is stopped
  - Fixed the issue of storing sensitive information like user
    password in a file (rhbz# 607352)
  - Changed PLUTO_SERVERBANNER to PLUTO_PEER_BANNER due
    to the same change in Openswan
  - Modifed GUI to remove unused configuration boxes


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-4.20100411git
changelog:
  - Modified fix for the bz 607352
  - Fix to read connection configuration from stdin
  - Fix to read Xauth user password from stdin
  - Fix to delete the secret file as soon as read by Openswan


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-6.20100411git
changelog:
  - Modified import and export interfaces to import_from_file and export_to_file, respectively,
    due to changes in NMVpnPluginUiInterface struct in NM (bz 631159).


author: Dan Williams <dcbw@redhat.com> - 0.8.999-1
changelog:
  - Update to 0.8.999 (0.9-rc2)
  - Port to GTK 3.0 and GtkBuilder
  - Fix some issues with secrets storage


author: Avesh Agarwal <avagarwa@redhat.com> - 0.9.8.4-1
changelog:
  - New upstream release 0.9.8.4
  - Fixed 926225
  - Fixed dependency to libreswan.
  - Created a new sub package NetworkManager-openswan-gnome
  - Various other spec file fixes.
  - Additional code changes are as follows:
  - Fixed an issue where proper network stack is not loaded unless
    _stackmanager is run before starting pluto daemon service.
  - Fixed the termination operation of pluto daemon to comply with
    libreswan changes.
  - Fixed various debug messages.
  - Fixed initiation of pluto daemon by this plugin to reflect the
    changes in libreaswan.
  - Fixed defaults values for more parameters to help the VPN
    connection stay more reliable.
  - Rewrote pluto watch API which watches the pluto process for its status.
    Fixed memory leak issues as not all child processes were reaped correctly.
    Also g_spwan_close_pid was not being called after children were reaped.
    Also modified debugs and added more to help with debugging in the future.
  - Fixed an issue where nm-openswan service is searching for ipsec binary in
    both /sbin and /usr/sbin leading to same operation twice, as /sbin is just
    symlink to /usr/sbin, so removed /sbin from the search paths.
  - Fixed some libreswan related macro changes.
  - Fixed netmask issue when sending IP information to the nm openswan
    plugin service.
  - Fixed the current code as it does not set the default route field
    NM_VPN_PLUGIN_IP4_CONFIG_NEVER_DEFAULT when sending VPN information
    to nm-openswan plugin. This fix sets the field to TRUE.
  - Fixed some issues found by coverity scan.
  - Fixed an issue where writing configuration on stdin should not end with
    \n as it gives error. It used to work previously, but not with latest
    NetworkManager versions.
  - libreswan related fixes, as some macros have been modified after forking
    to libreswan from openswan.
  - openswan/libreswan does not provide tun0 interface, so fixed the code
    where it sends tun0 interface.
  - Fix prcoessing of nm-openswan-dialog.ui file and added more error notifications.
  - Fixed dead code based on coverity scan.
  - Fixed gnomekeyring lib dependencies.
  - Fixed Networkmanager and related lib dependencies.
  - Fixed gtk label max width issue by setting it to 35.
  - NM-openswan was missing support for nm-openswan-auth-dialog.desktop.in.in.
    So added a new nm-openswan-auth-dialog.desktop.in.in, and modified related
    Makefile and configure.ac files.


author: Thomas Haller <thaller@redhat.com> - 1.2.4-1
changelog:
  - Update to 1.2.4 release
  - Move base VPN plugin library to base libreswan package
  - Don't require nm-connection-editor anymore


author: Brian Pepple <bpepple@fedoraproject.org> - 0.11.93-2
changelog:
  - Fix permission on tarball clean-up script.
  - Re-enable soundtouch-devel.
  - Add COPYING.LIB to package.
  - Use %global instead of %define.


author: Hans de Goede <hdegoede@}redhat.com> - 1.2.3-3
changelog:
  - Put the fluidsynth plugin in its own subpackage and make it require
    soundfont2-default (rhbz#1078925)


author: Kalev Lember <klember@redhat.com> - 1.6.0-1
changelog:
  - Update to 1.6.0
  - Remove lib64 rpaths from a few more libraries
  - Use license macro for COPYING and COPYING.LIB


author: Wim Taymans <wtaymans@redhat.com> - 1.7.1-1
changelog:
  - Update to 1.7.1
  - rename fragmented -> hls
  - remove liveadder
  - add gstplayer
  - add teletextdec and videoframe_audiolevel


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.7.1-4
changelog:
  - Append --disable-fatal-warnings to %configure to prevent
    building from aborting for negligible warnings (Fix F24FTBFS)
  - Append --disable-silent-rules to %configure to make
    building verbose.
  - Don't remove buildroot before installing.


author: Wim Taymans <wtaymans@redhat.com> - 1.7.91-1
changelog:
  - Update to 1.7.91
  - The opus parse was not moved so we still need opus-devel and we still
    ship a plugin.
  - the plugin was renamed to opusparse


author: Wim Taymans <wtaymans@redhat.com> - 1.9.1-2
changelog:
  - Merge patches from Kevin Kofler (#1267665)
  - Split gtksink into a -gtk subpackage (#1295444)
  - Split wildmidi plugin into a -wildmidi subpackage (#1267665)
  - BR mesa-libGLES-devel to enable OpenGL ES 2 support in GstGL (#1308290)


author: Wim Taymans <wtaymans@redhat.com> - 1.11.90-1
changelog:
  - Update to 1.11.90
  - Update plugin names
  - Remove old rawparse plugin
  - Add new allocator lib and legacyrawparse


author: Wim Taymans <wtaymans@redhat.com> - 1.16.1-1
changelog:
  - Update to 1.16.1
  - Remove upstreamed patches
  - Remove dependency on removed package
  - Add sctp and closedcaption plugins
  - The vcdsrc plugin was removed
  - Resolves: rhbz#1756299


author: Jindrich Novy <jnovy@redhat.com> - 0.7.2-5
changelog:
  - be sure to work properly also with older rhel8 kernels, thanks to Giuseppe Scrivano
  - Resolves: #1803495


author: Miro Hrončok <mhroncok@redhat.com> - 0.3.2-5
changelog:
  - Rebuild for Python 3.6
  - BR /usr/bin/tox instead of python-tox
  - Use %{python3_version_nodots} instead of hardcoded 35


author: Tomas Bzatek <tbzatek@redhat.com> - 2.8.3-1
changelog:
  - Rebased to upstream 2.8.3 release (#1685210)
  - Fix leaking filedescriptors (#1614774)
  - Fix udisksctl pager scrolling (#1662336)
  - Fix LVM2 plugin CreateSnapshot() error (#1668291)
  - Add ISCSI plugin GetInitiatorNameRaw() method (#1710257)


author: Mark Goodwin <mgoodwin@redhat.com> 5.4.3-2
changelog:
  - add patch to be standard FHS compliant, remove phantomjs
  - update to v5.4.3 upstream community sources


author: Mark Goodwin <mgoodwin@redhat.com> 5.4.3-7
changelog:
  - further refinement for spec doc section from Xavier Bachelot
  - disable debug_package to avoid empty debugsourcefiles.list


author: Mark Goodwin <mgoodwin@redhat.com> 5.4.3-8
changelog:
  - add BuildRequires (and unbundle) vendor sources available in Fedora
  - declare Provides for remaining (bundled) vendor go sources
  - do not attempt to unbundle anything on RHEL < 7 or Fedora < 28


author: Xavier Bachelot <xavier@bachelot.org> 5.4.3-9
changelog:
  - Remove extraneous slash (cosmetic)
  - Create directories just before moving stuff in them
  - Truncate long lines
  - Group all golang stuff
  - Simplify BuildRequires/bundled Provides
  - Sort BuildRequires/bundled Provides
  - Fix bundled go packages Provides


author: Mark Goodwin <mgoodwin@redhat.com> 5.4.3-11
changelog:
  - tweak after latest feedback, bump to 5.4.3-11 (BZ 1670656)
  - build debuginfo package again
  - unbundle BuildRequires for golang-github-hashicorp-version-devel
  - remove some unneeded development files
  - remove macros from changelog and other rpmlint tweaks


author: Mark Goodwin <mgoodwin@redhat.com> 6.0.1-1
changelog:
  - update to v6.0.1 upstream sources, tweak distro config, re-do patch
  - simplify make_webpack.sh script (Elliott Sales de Andrade)
  - vendor/github.com/go-ldap is now gone, so don't unbundle it


author: Mark Goodwin <mgoodwin@redhat.com> 6.0.2-1
changelog:
  - bump to latest upstream stable release 6.0.2-1
  - unbundle almost all remaining vendor code, see linked blockers in BZ#1670656


author: Mark Goodwin <mgoodwin@redhat.com> 6.1.3-1
changelog:
  - update to latest upstream stable release 6.1.3, see CHANGELOG
  - unbundle all vendor sources, replace with BuildRequires, see
    the long list of blocker BZs linked to BZ#1670656
  - BuildRequires go-plugin >= v1.0.0 for grpc_broker (thanks eclipseo)
  - tweak make_webpack to no longer use grunt, switch to prod build
  - add ExclusiveArch lua script (thanks quantum.analyst)
  - move db directory and plugins to /var/lib/grafana
  - split out into 6 patches, ready for upstream PRs
  - add check to run go tests for gating checks


author: Mark Goodwin <mgoodwin@redhat.com> 6.1.4-1
changelog:
  - update to latest upstream stable release 6.1.4, see CHANGELOG
  - use gobuild and gochecks macros, eliminate arch symlinks
  - re-enable grafana-debugsource package
  - fix GRAFANA_GROUP typo
  - fix more modes for brp-mangle-shebangs
  - vendor source unbundling now done in prep after patches
  - remove all rhel and fedora conditional guff


author: Mark Goodwin <mgoodwin@redhat.com> 6.1.6-1
changelog:
  - update to latest upstream stable release 6.1.6, see CHANGELOG
  - includes jQuery 3.4.0 security update


author: Mark Goodwin <mgoodwin@redhat.com> 6.2.2-1
changelog:
  - split out some datasource plugins to sub-packages
  - update to latest upstream community sources, see CHANGELOG


author: John Dennis <jdennis@redhat.com> - 1.10.0-1
changelog:
  - move all plugins and their translations from setroubleshoot-server
            package to this new independent package to allow easier updating
            of just the plugins


author: <jdennis@redhat.com> - 2.0.1-1
changelog:
  - Resolve bug #332281: remove obsolete translation
  	- Resolve bug #426586: Renaming translation po file from sr@Latn to sr@latin


author: <jdennis@redhat.com> - 2.0.4-1
changelog:
  - Resolve bug #416351: setroubleshoot does not escape regex chars in suggested cmds
  	- add new template substitution $SOURCE, a friendly name, $SOURCE_PATH still exists
  	  and is the full path name of $SOURCE


author: <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Execute catchall_boolean.py before allow_daemons_use_tty
  	- Fix chcon lines to match current policy


author: <dwalsh@redhat.com> - 2.1.1-1
changelog:
  - Add first plugins which will launch Red Star
  - Add Thomas Liu change to allow restorecon to execute fixit button  
    *   2009-06-19 Dan Walsh <dwalsh@redhat.com>
  	- Add setenforce.py from Thomas Liu
  	- Add sys_module.py, mmap_zero.py, kernel_modules.py, selinuxpolicy.py
  	- Allow restorecon to execute fixit command


author: <dwalsh@redhat.com> - 3.0.3-1
changelog:
  - Update translations
  - Fix catchall plugin to give better messages on capabilities and process avcs


author: <dwalsh@redhat.com> - 3.0.16-1
changelog:
  - Update translations
  - Change allow_execmod plugin to only fire if target_path is lib_t
  - Ignore errors from disabled IPv6
  Resolves: #674770


author: <dwalsh@redhat.com> - 3.0.47-1
changelog:
  - Update translations
  - Fix sys_resource.py to mention all types of resources
  - Fix unicode calls so catchall_booleans.py does not crash sealert


author: Dan Walsh <dwalsh@redhat.com> - 3.0.48-1
changelog:
  - Fix connect_ports and bind_ports to specify semanage command if only 1 port is available rather then to suggest user choices
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 3.0.52-1
changelog:
  - Update Translations
  - Only translate catchall_boolean descritpions if the are not unicode to start with.


author: Dan Walsh <dwalsh@redhat.com> - 3.0.53-1
changelog:
  - Update Translations
  - Add sandbox_connect plugin to point out the use of alternate types with the sandbox -X command.


author: Dan Walsh <dwalsh@redhat.com> - 3.0.57-1
changelog:
  - Add restorecon_source plugin, to check the source program is labeled correclty.
  - Fix restorecon.py to handle customized_files properly.
  - Update Translations


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.3-1
changelog:
  - Fix sshd_root.py setroubleshoot plugin to cover only /root/.ssh path as intended.
  - Suggest to use ausearch instead of grep
  - Update translations


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.4-1
changelog:
  - Suggest my-<command>.pp modules instead of mypol.pp (#1329037)
  - Suggest priority 300 for modules created by audit2allow


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.10-2
changelog:
  - update "file" plugin (#1649818)
  - Update "xen_image" plugin (#1649831)
  - Update qemu_blk_image and qemu_file_image (#1649838)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - first build against glibc
  - patched out the use of setresuid(), which is available only on kernels
    2.1.44 and later


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated the init script to use reconfigure option to restart squid instead
    of shutdown/restart (both safer and quicker)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - cache & log dirs shouldn't be world readable
  - remove preun script (leave logs & cache @ uninstall)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - switch to using group squid
  - turn off icmp (insecure)
  - update to 2.2.DEVEL3
  - build FAQ docs from source


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix compliance with ftp RFCs
    (http://www.wu-ftpd.org/broken-clients.html)
  - Work around a bug in some versions of autoconf
  - BuildPrereq sgml-tools - we're using sgml2html


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix init script again (#11699)
  - add --enable-delay-pools (#11695)
  - update to STABLE3
  - update FAQ


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix path references in QUICKSTART (#15114)
  - fix initscript translations (#24086)
  - fix shutdown logic (#24234), patch from <jos@xos.nl>
  - add /etc/sysconfig/squid for daemon options & shutdown timeouts
  - three more bugfixes from the Squid people
  - update FAQ.sgml
  - build and ship auth modules (#23611)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.STABLE1 + patches
  - enable some more configure options (#24981)
  - oops, ship /etc/sysconfig/squid


author: Bill Nottingham <notting@redhat.com>
changelog:
  - 2.4.STABLE3 + patches
  - turn off HTCP at request of maintainers
  - leave SNMP enabled in the build, but disabled in the default config


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE3-0
changelog:
  - Spec file change to enable the nul storage module. bugzilla #74654
  - Upgrade to 2.5STABLE3 with current official patches.
  - Added --enable-auth="basic,ntlm": closes bugzilla #90145
  - Added --with-winbind-auth-challenge: closes bugzilla #78691
  - Added --enable-useragent-log and --enable-referer-log, closes
  - bugzilla #91884


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-1
changelog:
  - New upstream version.
  - Fix the Source: line in this spec file to point to the correct URL.
  - redo the -location patch to work with the new upstream version.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Incorporate many upstream patches
  - Include many spec file changes from D.Johnson <dj@www.uk.linux.org>


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-3
changelog:
  - Clean up the spec file to work on 64-bit platforms (use %{_libdir}
    instead of /usr/lib, etc)
  - Make the release number in the changelog section agree with reality.
  - use -fPIE rather than -fpie.  s390 fails with just -fpie


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-1
changelog:
  - New upstream version, obsoletes many patches.
  - Fix --datadir passed to configure.  Configure automatically adds /squid
    so we shouldn't.
  - Remove the problematic triggerpostun trigger, since is's broken, and FC2
    never shipped with that old version.
  - add %{?_smp_mflags} to make line.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-2
changelog:
  - Include the first 10 upstream patches
  - Add a patch for the correct location of the winbindd pipe.  This closes
    bugzilla #107561
  - Remove the change to ssl_support.c from squid-2.5.STABLE3-build patch
    This closes #117851
  - Include /etc/pam.d/squid .  This closes #113404
  - Include a patch to close #111254 (assignment in assert)
  - Change squid.init to put output messages in /var/log/squid/squid.out
    This closes #104697
  - Only useradd the squid user if it doesn't already exist, and error out
    if the useradd fails.  This closes #118718.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5STABLE5-5
changelog:
  - Merge current upstream patches.
  - Fix the -pipe patch to have the correct name of the winbind pipe.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-1
changelog:
  - New upstream version, with 32 upstream patches.
    This closes #133970, #133931, #131728, #128143, #126726

  - Change the permissions on /etc/squid/squid.conf to 640.  This closes
    bugzilla #125007


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3
changelog:
  - include patch from Ulrich Drepper <drepper@redhat.com> to stop
    problems with O_NONBLOCK.  This closes #136049


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-1
changelog:
  - new upstream version, with 3 upstream patches.
    Updated the -build and -config patches
  - Include patch from Ulrich Drepper <frepper@redhat.com> to more
    intelligently close all file descriptors.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-2
changelog:
  - Add a triggerin on samba-common to make /var/cache/samba/winbindd_privileged
    accessable so that ntlm_auth will work.  It needs to be in this rpm,
    because the Samba RPM can't assume the squid user exists.
    Note that this will only work if the Samba RPM is recent enough to create
    that directory at install time instead of at winbindd startup time.
    That should be samba-common-3.0.0-15 or later.
    This fixes bugzilla #103726
  - Clean up extra whitespace in this spec file.
  - Add additional upstream patches. (Now 18 upstream patches).
  - patch #112 closes CAN-2005-0096 and CAN-2005-0097, remote DOS security holes.
  - patch #113 closes CAN-2005-0094, a remote buffer-overflow DOS security hole.
  - patch #114 closes CAN-2005-0095, a remote DOS security hole.
  - Remove the -nonbl (replaced by #104) and -close (replaced by #111) patches, since
    they're now fixed by upstream patches.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-4
changelog:
  - Include two more upstream patches for security vulns:
    bz#146783 Correct handling of oversized reply headers
    bz#146778 CAN-2005-0211 Buffer overflow in WCCP recvfrom() call


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE8-2
changelog:
  - new upstream version with 4 upstream patches.
  - Reorganize spec file to apply upstream patches first


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-4
changelog:
  - More upstream patches, including the fixed 2GB patch.
  - include the -libbind patch, which prevents squid from using the optional
    -lbind library, even if it's installed.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-6
changelog:
  - More upstream patches, including a fix for
    bz#157456 CAN-2005-1519 DNS lookups unreliable on untrusted networks


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-1
changelog:
  - new upstream version
  - enabled fakeauth utility (#154020)
  - enabled digest authentication scheme (#155882)
  - all error pages marked as config (#127836)
  - patch for 64bit statvfs interface (#153274)
  - added httpd config file for cachemgr.cgi (#112725)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-3
changelog:
  - removed "--enable-truncate" option (#165948)
  - added "--enable-cache-digests" option (#102134)
  - added "--enable-ident-lookups" option (#161640)
  - some clean up (#165949)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE11-5
changelog:
  - fix for #171213 - CVE-2005-3258 Squid crash due to malformed FTP response
  - more fixes from upstream


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE12-2
changelog:
  - rewriten patch squid-2.5.STABLE10-64bit.patch, it works with
    "--with-large-files" option now
  - fix for #72896 - squid does not support > 1024 file descriptors,
    new "--enable-fd-config" option for it.


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE1-1
changelog:
  - new upstream + the latest CVS snapshot from 2006/07/18
  - updated fd config patch
  - enabled epoll
  - fixed release format (#197405)
  - enabled WCCPv2 support (#198642)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-2
changelog:
  - upstream fixes:
    * Accept 00:00-24:00 as a valid time specification (upstream BZ #1794)
    * aioDone() could be called twice
    * Squid reconfiguration (upstream BZ #1800)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-3
changelog:
  - added fix for #183869 - squid can abort when getting status
  - added upstream fixes:
      * Bug #1796: Assertion error HttpHeader.c:914: "str"
      * Bug #1779: Delay pools fairness, correction to first patch
      * Bug #1802: Crash on exit in certain conditions where cache.log is not writeable
      * Bug #1779: Delay pools fairness when multiple connections compete for bandwidth
      * Clarify the select/poll/kqueue/epoll configure --enable/disable options
  - reworked fd patch for STABLE4


author: Martin Bacovsky <mbacovsk@redhat.com> - 7:2.6.STABLE16-2
changelog:
  - our fd_config patch was replaced by upstream's version 
  - Source1 (FAQ.sgml) points to local source (upstream's moved to wiki)


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE2-1
changelog:
  - upgrade to latest upstream 3.0.STABLE2
  - check config file before starting (#428998)
  - whitespace unification of init script
  - some minor path changes in the QUICKSTART file
  - configure with the --with-filedescriptors=16384 option


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE5-2
changelog:
  - fix configure detection of netfilter kernel headers (#435499),
    patch by aoliva@redhat.com
  - add support for negotiate authentication (#445337)


author: Jiri Skala <jskala@redhat.com> - 7:3.0.STABLE7-2
changelog:
  - used ncsa_auth.8 from man-pages. there will be this file removed due to conflict
  - fix #458593 noisy initscript
  - fix #463129 init script tests wrong conf file
  - fix #450352 - build.patch patches only generated files


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE13-2
changelog:
  - backported logfile.cc syslog parameters patch from 3.1 (b9443.patch)
  - GCC-4.4 workaround in src/wccp2.cc


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE17-2
changelog:
  - Bug #514014, update to 3.0.STABLE17 fixing the denial of service issues
    mentioned in Squid security advisory SQUID-2009_2.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-1
changelog:
  - Upgrade to next upstream release 3.1.0.13 with many new features
    * IPv6 support
    * NTLM-passthru
    * Kerberos/Negotiate authentication scheme support
    * Localized error pages based on browser language preferences
    * Follow X-Forwarded-For capability
    * and more..


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-7
changelog:
  - Include upstream patches fixing important operational issues
  - Enable ESI support now that it does not conflict with normal operation


author: Jiri Skala <jskala@redhat.com> 7:3.1.0.14-2
changelog:
  - fixed #532930 Syntactic error in /etc/init.d/squid
  - fixed #528453 cannot initialize cache_dir with user specified config file


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.15-3
changelog:
  - fixed #551302 PROXY needs libcap. Also increases security a little.
  - merged relevant upstream bugfixes waiting for next 3.1 release


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.16-4
changelog:
  - spec file modified to be fedora packaging guidline compliant
  - little shifting lines in init script header due to rpmlint complaint
  - fixes assertion during start up


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.16-6
changelog:
  - Patch for Squid security advisory SQUID-2010:2, denial of service
    issue in HTCP processing (CVE-2010-0639)


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.1-2
changelog:
  - Update to 3.1.1 Squid bug #2827 crash with assertion failed:
    FilledChecklist.cc:90: "conn() != NULL" under high load.


author: Jiri Skala <jskala@redhat.com>
changelog:
  - fixes #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.3-2
changelog:
  - Fully fix #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled
  - Various IPv6 related issues fixed, making tcp_outgoing_address behave
    as expected and no commResetFD warnings when using tproxy setups.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.4-1
changelog:
  - Upstream 3.1.4 bugfix release, issues relating to IPv6, TPROXY, Memory
    management, follow_x_forwarded_for, and stability fixes


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.5-2
changelog:
  - Upstream 3.1.5 bugfix release
  - Upstream patch for Bug #614665: Squid crashes with  ident auth
  - Upstream patches for various memory leaks


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.9-1
changelog:
  - upgrade to squid-3.2
  - fixes #720445 - Provide native systemd unit file
  - SysV initscript moved to subpackage
  - temproary disabled eCap


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.13-2
changelog:
  - fixes #747103 - squid does not start if /var/spool/squid is empty
  - fixes #747110 - squid does not start adding "memory_pools off"


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.2.0.14-6
changelog:
  - upstream gcc-4.7 patch
  - fix for bug #772483 running out of memory, mem_node growing out of bounds


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.3-2
changelog:
  - Resolved: #854356 - squid.service use PIDFile
  - Resolved: #859393 - Improve cache_swap script
  - Resolved: #791129 - disk space warning
  - Resolved: #862252 - reload on VPN or network up/down
  - Resolved: #867531 - run test suite during build
  - Resolved: #832684 - missing after dependency nss-lookup.target
  - Removed obsolete configure options


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.9-1
changelog:
  - Update to latest upstream version 3.2.9
  - Fixed: CVE-2013-1839
  - Removed: makefile-patch (+make check)


author: Ville Skyttä <ville.skytta@iki.fi> - 7:3.3.4-2
changelog:
  - Fix basic auth and log daemon DB helper builds.
  - Use xz compressed tarball, fix source URLs.
  - Fix bogus dates in %changelog.


author: Michal Luscon <mluscon@redhat.com> - 7:3.3.9-1
changelog:
  - Update to latest upstream version 3.3.9
  - Fixed #976815: file descriptors are hard coded to 16384
  - Fixed: active ftp crashing
  - Fixed: offset of patches


author: Michal Luscon <mluscon@redhat.com> - 7:3.4.1-1
changelog:
  - Rebase to latest stable upstream release 3.4.1
  - Fixed #1034306: fails to build for AArch64
  - Fixed: active ftp


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.4.12-1
changelog:
  - Update to latest upstream version 3.4.12
  - bug #1173946: Disable -march=native compile time optimization, use Fedora defaults.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.5.2-2
changelog:
  - Update to latest upstream version 3.5.2
  - Remove deprecated (and renamed) squid_msnt_auth basic auth helper. Only
    performs LM authentication and not considered useful in todays networks.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.13-3
changelog:
  - Resolves: #1308866 - CVE-2016-2390 squid: incorrect server error 
    handling resulting in denial of service


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.15-1
changelog:
  - new version 3.5.15
  - Resolves: #1311585 - squid: Multiple Denial of Service issues in
    HTTP Response processing
  - Resolves: #1312267 - squid: SQUID-2016_2 advisory, multiple DoS issues


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-6
changelog:
  - Resolves: #1679526 - Missing detailed configuration file
  - Resolves: #1703117 - RHEL 7 to 8 fails with squid installed because dirs
    changed to symlinks
  - Resolves: #1691741 - Squid cache_peer DNS lookup failed when not all lower
    case
  - Resolves: #1683527 - "Reloading" message on a fresh reboot after enabling
    squid


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-8
changelog:
  - Resolves: # 1738485 - CVE-2019-12527 squid:4/squid: heap-based buffer overflow
    in HttpHeader::getAuth


author: Caolán McNamara <caolanm@redhat.com> - 0.19.6-1
changelog:
  - Resolves: rhbz#1052148 latest fribidi
  - drop integrated signedwarning.patch
  - drop integrated fribidi-aarch64.patch


author: Radek Vokál <rvokal@redhat.com> 0.99.3-1
changelog:
  - upgrade to 0.99.3
  - Wireshark 0.99.3 fixes the following vulnerabilities:
  - the SCSI dissector could crash. Versions affected: CVE-2006-4330
  - the IPsec ESP preference parser was susceptible to off-by-one errors. CVE-2006-4331
  - a malformed packet could make the Q.2931 dissector use up available memory. CVE-2006-4333


author: Radek Vokál <rvokal@redhat.com> 0.99.5-1
changelog:
  - multiple security issues fixed (#227140)
  - CVE-2007-0459 - The TCP dissector could hang or crash while reassembling HTTP packets
  - CVE-2007-0459 - The HTTP dissector could crash.
  - CVE-2007-0457 - On some systems, the IEEE 802.11 dissector could crash.
  - CVE-2007-0456 - On some systems, the LLT dissector could crash.


author: Radek Vokal <rvokal@redhat.com> 0.99.7-0.pre2
changelog:
  - switch to libsmi from net-snmp
  - disable ADNS due to its lack of Ipv6 support
  - 0.99.7 prerelease 2


author: Radek Vokál <rvokal@redhat.com> 1.0.3-1
changelog:
  - upgrade to 1.0.3
  - Security-related bugs in the NCP dissector, zlib compression code, and Tektronix .rf5 file parser have been fixed.
  - WPA group key decryption is now supported.
  - A bug that could cause packets to be wrongly dissected as "Redback Lawful Intercept" has been fixed.


author: Radek Vokal <rvokal@redhat.com> - 1.2.5-1
changelog:
  - upgrade to 1.2.5
  - fixes security vulnaribilities, see https://www.wireshark.org/security/wnpa-sec-2009-09.html


author: Jeff Layton <jlayton@redhat.com> - 1.2.6-2
changelog:
  - add patch to allow decode of NFSv4.0 callback channel
  - add patch to allow decode of more SMB FIND_FILE infolevels


author: Jan Safranek <jsafrane@redhat.com> - 1.4.1-1
changelog:
  - upgrade to 1.4.1
  - see https://www.wireshark.org/docs/relnotes/wireshark-1.4.1.html
  - Own the %{_libdir}/wireshark dir (#644508)
  - associate *.pcap files with wireshark (#641163)


author: Jan Safranek <jsafrane@redhat.com> - 1.4.1-2
changelog:
  - temporarily disable zlib until
    https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4955 is resolved (#643461)


author: Jan Safranek <jsafrane@redhat.com> - 1.4.2-2
changelog:
  - rework the Wireshark security (#657490). Remove the console helper and
    allow only members of new 'wireshark' group to capture the packets.


author: Jan Safranek <jsafrane@redhat.com> - 1.4.3-2
changelog:
  - create the 'wireshark' group as system, not user
  - add few additional header files to -devel subpackage (#671997)


author: Jan Safranek <jsafrane@redhat.com> - 1.6.0-2
changelog:
  - added wspy_dissectors directory to the package
    - other packages can add Python plugins there
    - as side effect, removed following message:
      [Errno 2] No such file or directory: '/usr/lib64/wireshark/python/1.6.0/wspy_dissectors'
  - enabled zlib support


author: Jan Safranek <jsafrane@redhat.com> - 1.6.0-3
changelog:
  - fixed Fedora-specific message when user is not part of 'wireshark' group
    - now it does not contain '<' and '>' characters (#713545)


author: Steve Dickson <steved@redhat.com> - 1.6.2-3
changelog:
  - Fixed a regression introduce by upstream patch r38306
      which caused v4.1 traffic not to be displayed.
  - Added v4 error status to packet detail window.


author: Jan Safranek <jsafrane@redhat.com> - 1.6.2-4
changelog:
  - updated autoconf macros and pkgconfig file in wireshark-devel to reflect
    current config.h (#746655)


author: Jan Safranek <jsafrane@redhat.com> - 1.6.4-1
changelog:
  - upgrade to 1.6.4
  - see https://www.wireshark.org/docs/relnotes/wireshark-1.6.4.html
  - build with c-ares and libpcap (#759305)
  - fixed display of error message boxes on startup in gnome3 (#752559)


author: Jan Safranek <jsafrane@redhat.com> - 1.6.5-2
changelog:
  - fixed wireshark crashing when using combo box in import dialog (#773290)
  - added AES support into netlogon dissector


author: Jan Safranek <jsafrane@redhat.com> - 1.8.2-3
changelog:
  - added back compatibility with RHEL6
  - GeoIP build dependency made also conditional on with_GeoIP variable


author: Peter Lemenkov <lemenkov@gmail.com> - 1.10.2-5
changelog:
  - Convert automake/pkgconfig files into patches (better upstream integration)
  - Restored category in the *.desktop file
  - Install another one necessary header file - frame_data_sequence.h


author: Peter Lemenkov <lemenkov@gmail.com> - 1.10.3-5
changelog:
  - Updated RTPproxy dissector (again)
  - Allow packets more than 64k (for USB capture). See patch no. 13
  - Don't die during loading of some SIP capture files. See patch no. 14
  - Backport support for RTPproxy dissector timeouts detection. See patch no. 15


author: Peter Lemenkov <lemenkov@gmail.com> - 1.10.3-6
changelog:
  - Updated RTPproxy dissector (again), squashed patch no. 15 (applied upstream).
  - Use proper soname in the python scripts
  - Don't apply no longer needed fix for pod2man.
  - Fix for main window. See patch no. 15
  - Fix for SCTP dissection. See patch no. 16
  - Fix for rare issue in Base Station Subsystem GPRS Protocol dissection. See
    patch no. 17
  - Fix building w/o Lua


author: Peter Lemenkov <lemenkov@gmail.com> - 1.10.4-1
changelog:
  - Ver. 1.10.4
  - Don't apply upsteamed patches no. 13, 14, 15, 16, 17
  - Fix variable overflow (patch no. 18)
  - Updated RTPproxy dissector (backported three more patches from trunk)


author: Peter Lemenkov <lemenkov@gmail.com> - 1.10.4-2
changelog:
  - Fix endianness in the Bitcoin protocol dissector (patch no. 19)
  - Last-minute fix for wrongly backported change (patch no. 20)
  - Fix FTBFS in Rawhide (see patch no. 21 - recent Glib doesn't provide g_memmove macro anymore)


author: Peter Lemenkov <lemenkov@gmail.com> - 1.12.0-1
changelog:
  - Ver. 1.12.0
  - Dropped a lot of outdated patches.
  - Added /usr/sbin/captype application.
  - Added temporary workaround for wireshark.pc.in missing in the official
    tarball.
  - Removed outdated --with-dumpcap-group="wireshark" cli switch. It doesn't work
    during rpmbuild, and we still set group explicitly in the 'files' section.
  - Removed --enable-setcap-install. Likewise.
  - Some ANSI C header files were moved to epan/


author: Peter Lemenkov <lemenkov@gmail.com> - 1.12.7-2
changelog:
  - Enable libnl3 (see rhbz#1207386, rhbz#1247566)
  - Remove airpcap switch (doesn't have any effect on Linux)
  - Backport patch no. 11
  - Fixed building with F24+


author: Peter Lemenkov <lemenkov@gmail.com> - 1.12.8-2
changelog:
  - Fixed Wireshark detection in external projects using wireshark.m4 script.
    See https://bugzilla.redhat.com/1274831 for further details.


author: Peter Hatina <phatina@redhat.com> - 2.0.1-1
changelog:
  - Ver. 2.0.1
  - Introduced wireshark metapackage for wireshark-cli and wireshark-gtk
  - wireshark-qt and wireshark-gtk contain the GUI applications
  - See https://www.wireshark.org/docs/relnotes/wireshark-2.0.1.html


author: Peter Lemenkov <lemenkov@gmail.com> - 2.1.1-3
changelog:
  - No longer uses adns ( https://github.com/wireshark/wireshark/commit/7a1d3f6 )
  - Remove --with-ipv6 switch ( https://github.com/wireshark/wireshark/commit/fad1565 )
  - Change GTK option switch ( https://github.com/wireshark/wireshark/commit/d77029d )


author: Peter Robinson <pbrobinson@fedoraproject.org> 2.2.2-1
changelog:
  - Version 2.2.2
  - See https://www.wireshark.org/docs/relnotes/wireshark-2.2.2.html
  - Use %license, spec cleanups
  - Put udev rules in right location (rhbz #1365581)


author: Martin Sehnoutka <msehnout@redhat.com> - 2.2.6-5
changelog:
  - Add triggerin script to remove old alternatives
  - Remove appdata.xml as it is provided by upstream now


author: Michal Ruprich <mruprich@redhat.com> - 1:2.4.2-1
changelog:
  - New upstream version 2.4.2
  - Contains fixes for CVE-2017-15189, CVE-2017-15190, CVE-2017-15191, CVE-2017-15192, CVE-2017-15193, CVE-2017-13764, CVE-2017-13765, CVE-2017-13766, CVE-2017-13767


author: Michal Ruprich <mruprich@redhat.com> - 1:2.4.5-1
changelog:
  - New upstream version 2.4.5
  - Contains fixes for CVE-2018-7419, CVE-2018-7418, CVE-2018-7417, CVE-2018-7420, CVE-2018-7320, CVE-2018-7336, CVE-2018-7337, CVE-2018-7334, CVE-2018-7335, CVE-2018-6836, CVE-2018-5335,  CVE-2018-5334,  CVE-2017-6014, CVE-2017-9616, CVE-2017-9617, CVE-2017-9766
  - Removed GTK+ based GUI (rhbz#1486203)
  - Corrected LDFLAGS in spec (rhbz#1548665)
  - Alternatives are no longer needed (rhbz#1533701)


author: Michal Ruprich <mruprich@redhat.com> - 1:2.4.5-2
changelog:
  - Removing dependency on wireshark from wireshark-cli
  - Removing deprecated Group tags
  - Disabling portaudio on RHEL (rhbz#1554834)


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.0-1
changelog:
  - New version 2.6.0
  - Fix for CVE-2018-9256, CVE-2018-9257, CVE-2018-9258, CVE-2018-9259, CVE-2018-9260, CVE-2018-9261, CVE-2018-9262, CVE-2018-9263, CVE-2018-9264, CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268, CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272, CVE-2018-9273, CVE-2018-9274
  - Switch from autotools to cmake
  - Removed python2-devel(#1560284) and libssh2-devel from dependencies
  - Removed python scripts


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-11
changelog:
  - Resolves: #1695432 - CVE-2019-0211 httpd: privilege escalation
    from modules scripts
  - Resolves: #1696091 - CVE-2019-0215 httpd:2.4/httpd: mod_ssl: access control 
    bypass when using per-location client certification authentication


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-13
changelog:
  - Resolves: #1696142 - CVE-2019-0217 httpd:2.4/httpd: mod_auth_digest: access
    control bypass due to race condition
  - Resolves: #1696097 - CVE-2019-0220 httpd:2.4/httpd: URL normalization
    inconsistency
  - Resolves: #1669221 - `ExtendedStatus Off` directive when using mod_systemd
    causes systemctl to hang
  - Resolves: #1673022 - httpd can not be started with mod_md enabled


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-16
changelog:
  - Resolves: #1744999 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745086 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
    headers leads to denial of service
  - Resolves: #1745154 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request for
    large response leads to denial of service


author: Donnie Barnes <djb@redhat.com>
changelog:
  - updated to 8.8.7
  - added some spam filtration
  - combined some makefile patches
  - added BuildRoot support


author: Donnie Barnes <djb@redhat.com>
changelog:
  - made /etc/mail/deny.db a ghost
  - removed preun that used to remove deny.db (ghost handles that now)
  - NOTE: upgrading from the sendmail packages in 4.8, 4.8.1, and possibly
    4.9 (all Red Hat betas between 4.2 and 5.0) could cause problems.  You
    may need to do a makemap in /etc/mail and a newaliases after upgrading
    from those packages.  Upgrading from 4.2 or prior should be fine.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - added chkconfig support
  - various spec file cleanups
  - changed group to Networking/Daemons (from Daemons).  Sure, it runs on
    non networked systems, but who really *needs* it then?


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Allow empty QUEUE in /etc/sysconfig/sendmail for those who
    want to run sendmail in daemon mode without processing the
    queue regularly.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - provide a more sane /etc/mail/access default config file
  - use makemap to initializa the empty databases, not touch
  - added a small, but helpful /etc/mail/Makefile


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - make the redhat.mc be a separate source files. Sanitize patches that used
    to touch it.
  - install redhat.mc as /etc/sendmail.mc so that people can easily modify
    their sendmail.cf configurations.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fox the awk scripts in the postinstall
  - enable FEATURE(accept_unresolvable_domains) by default to make laptop
    users happy.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - install man pages, not groff output (#3746).
  - use dnl not '#' in m4 comment (#3749).
  - add FEATURE(mailtertable) to the config -- example file needs this (#4649).
  - use db2 not db1.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to (security release) 8.11.2
  - build also on RHL 6.x #16061
  - include smrsh man-page #17901
  - use the "-f" flag for makemap to preserve case for virtusertable
    and userdb in /etc/mail/Makefile - suggested by Harald Hoyer
  - fix /usr/doc -> usr/share/doc in docu #20611
  - wrong path in sendmail.mc #20691
  - tcp-wrapper support wasn't enabled correctly #21642
  - do not expose user "root" when masquerading like in older releases #21643
  - disable the VRFY and EXPN smtp commands #21801
  - disable queue-runs for normal users (restrictqrun privacy flag)
  - fix typo in sendmail.mc #21880, #22682
  - disable daemon mode to see what needs fixing


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - enable daemon mode again, but only listen to the loopback device
    instead of all devices.
  - do not include check.tar with old anti-spam rules


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add changes from Christopher McCrory <chrismcc@pricegrabber.com>:
  	- prepare /etc/mail/Makefile for more maps not shipped with this rpm
  	- changed sendmail.mc to include some more commented out options,
  	  so that people are directly pointed at important options
  	- add /etc/pam.d/smtp for AUTH
  	- add FEATURE(use_ct_file) and /etc/mail/trusted-users


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 8.11.3
  - add "localhost.localdomain" to the list of hostnames accepted
    for local delivery "Cw" in /etc/mail/sendmail.mc
  - add patches from Pekka Savola <pekkas@netcore.fi>
  	- Enable IPv6 at compile time, patch for glibc 2.2 from PLD
  	- Add a commented-out IPv6 daemon .mc line to sendmail.mc
  	- buildrequire: openldap-devel, cyrus-sasl-devel


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add libmilter docu
  - add support for userdb to /etc/mail/Makefile
  - use "btree" database files if a userdb is used
  - buildrequires tcp_wrappers


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - change "-q" to "-s" as option to make #57216
  - move milter lib into separate "devel" sub-package
  - add include files to devel sub-package #56064
  - fix pointer in access file to docu #54351


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - fix another path to correct docu
  - include sendmail/README in the docu
  - compile with -D_FFR_WORKAROUND_BROKEN_NAMESERVERS, but do not
    enable this at runtime
  - devel subpackage files owned by root now


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - integrate ugly logic to compile this src.rpm also on older Red Hat
    Linux releases
  - clean up spec file and patches a bit
  - add db4 support


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.2-1
changelog:
  - update to 8.12.2 (adds STARTTLS support without need for sfio)
  - don't forcibly strip binaries; let the build root handle it
  - add creation of the smmsp account (51/51) in %pre
  - enable hesiod map support
  - modify default config to use an MSP
  - comment out 'O AutoRebuildAliases' in %post, otherwise sendmail will
    fail to restart on upgrades


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - mv include files to /usr/include/libmilter/ #60795
  - do not use "-f" option to virtusertable #60196
  - ad an example smarthost entry to config file #58298


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - make sure more version information is in the cf file #54418
  - do not use "-b" flag when patching in spec file
  - require newer chkconfig version #61035
  - fix preun script #60880
  - add TMPF to access file creation #60956


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - suggestions form Stephane Lentz:
  	- add correct include statement into submit.mc (like sendmail.mc)
  	- add commented out further suggestions into submit.mc
  	- disable ident lookups


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Changed the behaviour in /etc/mail/Makefile to generate the sendmail.cf and
    submit.cf from the mc files if they changed.
  - Added a small README.redhat that descibed the new mc file behaviour and the
    split into sendmail.cf and submit.cf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove absolute path names from the PAM configuration, allowing it to be
    used by any arch on a multilib system


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add to submit.mc: define(`_MTA_HOST_', `[127.0.0.1]')
    to deliver directly to localhost IP instead of going through DNS
  - submit.mc: exchange msp and use_ct_file to better enable it
  - do not undefine UUCP_RELAY and BITNET_RELAY
  - sendmail.mc: use LOCAL_DOMAIN instead of "Cw" directly
  - sendmail.mc: add commented out MASQUERADE_AS example
  - re-enable DAEMON variable for now


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add the following changes from Adrian Havill <havill@redhat.com>
    to our default sendmail.mc file:
  	- added commented-out-by-default common AUTH/SSL examples
  	- updated m4 example and rpm reference
  	- added more comment documentation
  	- add commented out confAUTO_REBUILD example
  	- improve description about MASQUERADE_AS


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - always have a queue run interval for sm-msp-queue   #81424
  - Jos Vos suggests adding another variable for sm-client queue-run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add openssl-devel as a build-time requirement
  - preprocess the config file to add the right version of %{_lib}
  - add kerberos -I and -L flags to build configuration, needed for newer
    versions of libssl


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - sendmail-8.12.7-etrn.patch from Jos Vos <jos@xos.nl>
  - submit.mc: enable "use_ct_file" by default  #80519
  - add _FFR_MILTER_ROOT_UNSAFE  #78223


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - do not reject all numeric login names if hesiod support is
    compiled in. #80060
  - remove reference to non-existing man-pages #74552


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add a confTRUSTED_USER line into sendmail.mc, submit.mc is already ok
  - add patch from sendmail.org for cf/m4/proto.m4


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add correct db4-devel requirements for newer releases
  - completely re-do many ifdef code in the spec-file
  - fix some issues building for older RHL releases


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - call make with the target "all" #86005
  - add start/stop/restart as Makefile targets
  - add another security patch


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - mark /etc/mail/Makefile as config(noreplace) #87688
  - mark /etc/pam.d/smtp as config(noreplace) #87731


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.9-5
changelog:
  - configure to use libsasl2 instead of libsasl to avoid linking with both
    (we also link to libldap, which now uses libsasl2)
  - link with -ldb instead of -ldb-4.0 on all releases after RHL 7.3 instead
    of just 7.3 (all versions of db4-devel thereafter are expected to provide
    the right linking setup)


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.9-6
changelog:
  - move Sendmail.conf from /usr/lib/sasl to /usr/lib/sasl2 and change the
    default pwcheck method to "saslauthd"


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - run "make -C /etc/mail" (maybe generating new sendmail.cf, then newaliases
  - added $SENDMAIL_OPTARG that could be set by /etc/sysconfig/sendmail #99224


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - move debug information from sendmail into debuginfo rpm
  - on %post make sure /etc/aliases.db and /etc/mail/*.db is correctly
    owned by root
  - do not set confTRUSTED_USER to smmsp in sendmail-redhat.mc


author: Karsten Hopp <karsten@redhat.de> 8.12.10-3
changelog:
  - fix usage of RPM_OPT_FLAGS variable in spec file
  - add makecert.sh script to -doc subpackage
  - add cert paths to sendmail.mc


author: Thomas Woerner <twoerner@redhat.com> 8.12.10-6
changelog:
  - reverted to sasl1 for 3.0E: added with_sasl1
  - spec file cleanup
  - new location for statistics file (/var/log/)


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-1.2
changelog:
  - /usr/lib/sendmail is in alternatives, now
  - removed trailing / from stdir
  - fixed define for STATUS_FILE


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-2
changelog:
  - added information for saslauthd and AUTH (#113463)
  - fixed STATUS_FILE in sendmail-redhat.mc (#114302)
  - reset mta after update if mta was sendmail (#114257)
  - enabled pie for ia64 again


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-3
changelog:
  - RH3.0E version: sasl1, no pie, old_setup (provide /etc/aliases)
  - new switches for pie and old_setup


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-4.1
changelog:
  - added authinfo to possible sendmail maps: /etc/mail/Makefile (#119010)
  - fixed minor version in changelog


author: Thomas Woerner <twoerner@redhat.com> 8.13.0-1
changelog:
  - new version 8.13.0
  - made /etc/mail/Makefile complain missing sendmail-cf package (#123348)
  - fixed ownership of %{_includedir}/libmilter (#73977)
  - moved back to /usr/share/ssl/certs as certificate directory (see sendmail.mc)
  - extended sendmail.mc for spam protection


author: Thomas Woerner <twoerner@redhat.com> 8.13.0-1.1
changelog:
  - fixed init script to not complain missing sendmail-cf package (#126975)
  - better message in /etc/mail/Makefile for missing sendmail-cf package.


author: Thomas Woerner <twoerner@redhat.com> 8.13.3-1.1
changelog:
  - fixed gcc4 build: use double quotes for confOPTIMIZE to avoid m4 confusion
    with ','
  - fix for ppc: using tripple-quotes


author: Thomas Woerner <twoerner@redhat.com> 8.13.4-1
changelog:
  - new version 8.13.4
  - added requires for the sendmail base package in sendmail-cf, sendmail-devel
    and sendmail-doc
  - dropped upstream close_wait.p2 patch


author: Thomas Woerner <twoerner@redhat.com> 8.13.5-3
changelog:
  - fixed selinuxenabled path in initscript
  - fixed error handling with sigwait (#137709)
    Thanks to Jonathan Kamens for the patch
  - fixed prereq for cyrus-sasl: now using /usr/sbin/saslauthd
  - appended 'dnl' to cert tags in sendmail.mc


author: Thomas Woerner <twoerner@redhat.com> 8.13.7-1
changelog:
  - new version 8.13.7 (#195282)
  - fixes CVE-2006-1173 (VU#146718): possible denial of service issue caused by
    malformed multipart messages (#195776)


author: Thomas Woerner <twoerner@redhat.com> 8.13.7-3
changelog:
  - using new syntax for access database (#177566)
  - fixed failure message while shutting down sm-client (#119429)
    resolution: stop sm-client before sendmail
  - fixed method to specify persistent queue runners (#126760)
  - removed patch backup files from sendmail-cf tree (#152955)
  - fixed missing dnl on SMART_HOST define (#166680)
  - fixed wrong location of aliases and aliases.db file in aliases man page
    (#166744)
  - enabled CipherList config option for sendmail (#172352)
  - added user chowns for /etc/mail/authinfo.db and move check for cf files
    (#184341)
  - fixed Makefile of vacation (#191396)
    vacation is not included in this sendmail package
  - /var/log/mail now belongs to sendmail (#192850)


author: Thomas Woerner <twoerner@redhat.com> 8.13.8-3.1
changelog:
  - tcp_wrappers has a new devel and libs sub package, therefore changing build
    requirement for tcp_wrappers to tcp_wrappers-devel


author: Florian La Roche <laroche@redhat.com>
changelog:
  - #205803 add sparc/sparc64 to -fPIE list
  - change sendmail.cf reference into sendmail-cf package name


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-1
changelog:
  - new version 8.14.1
  - spec file cleanup for merge review (rhbz#226407)
  - dropped update support for sendmail versions prior to 8.12.0
  - using pdf documentation


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-2
changelog:
  - readded chkconfig add for sendmail in post script
  - dropped mysql support (useless without further patching)
  - fixed executable permissions for /usr/sbin/makemap and /usr/sbin/smrsh
  - dropped FFR_UNSAFE_SASL, because it has no effect anymore


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-4
changelog:
  - do not remove /etc/aliases.db on package removal (rhbz#223637)
  - fixed remaining paths to certs directory in sendmail.mc file
  - added contrib scripts to the doc package (rhbz#183723)
  - added LSB header to init script (rhbz#247053)
  - added plain login information for cyrus-sasl to access file
  - fixed compile problem with glibc-2.6.90+
  - fixed reoccuring m4 include problem (now using sinclude)


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-2
changelog:
  - add NM dispatcher script (#451575)
  - print warning on service start when sendmail-cf is required (#447148)
  - replace Makefile with shell script to avoid dependency on make (#467841)
  - fix multiarch conflicts (#343161)
  - preserve timestamps on config files
  - gzip RELEASE_NOTES
  - defuzz patches
  - drop gcc2690 patch


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-9
changelog:
  - fix milter file descriptors leaks (#485426)
  - skip colon separator when parsing service name in ServiceSwitchFile
  - return with non-zero exit code when free space is below MinFreeBlocks
  - fix service stop/restart when only smclient is running
  - fix submit.cf and helpfile permissions
  - more merge review fixes (#226407)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-1
changelog:
  - new version 8.14.4 (#552078)
  - RPM attributes S, 5, T not recorded for statistics file
  - adapted patches: makemapman, dynamic, switchfile (#552078)
  - movefiles patch incorporated into aliases_dir patch
  - drop exitpanic patch (fixed upstream)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-4
changelog:
  - used noreplace for sasl config
  - used ghost instead of explicit provides
  - deffattr changed to (-,root,root,-)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-6
changelog:
  - sasl2 config moved from {_libdir}/sasl2 to {_sysconfdir}/sasl2
  - added libdb5 patch for building with libdb-5
  - rebuilt with libdb-5


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-8
changelog:
  - all 'define' changed to 'global' in spec
  - perl interpreter path fixup moved from 'install' to 'prep'


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-10
changelog:
  - added stub man pages for hoststat and purgestat
  - rmail man page added to alternatives
  - updated subpackages description
  - sendmail-cf/cf/README is not packaged - it is useless for end users
  - added comments about purpose of files and patches
  - removed redundant license tag from milter subpackage


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-11
changelog:
  - README.libmilter moved to milter subpackage
  - updated description of doc subpackage
  - README.redhat removed (not needed any more)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-18
changelog:
  - add QoS support, patch from Philip Prindeville <philipp@fedoraproject.org>
    upstream reserved option ID 0xe7 for testing of this new feature (#576643)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-21
changelog:
  - fix negative ctx_id in milter debug output (#577558)
  - fix incomplete description of the -i option in man page (#676824)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-1
changelog:
  - New version 8.14.5
  - Removed m4-ldap-routing, milter-fix-negativeid, man-i-option-fix
    patches (upstreamed)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-4
changelog:
  - Removed dots from description (there are no dots in systemd packaging
    guidelines)
  - Changed service type to forking and explicitly specified PID files
  - Fixed creation of sm-client.pid
  - Added Wants to sm-client.service and sendmail.service
  - Replaced each occurrence of /var/run by /run in config files
  - More details are available in rhbz#697636


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-6
changelog:
  - Fixed systemctl disable command in preun section
  - Replaced reload by restart, dropped ExecReload from sendmail.service
    Resolves: rhbz#719931
  - Switched to systemctl in NetworkManager dispatcher script
  - Added ExecStartPre=-/etc/mail/make to sm-client.service
  - Hardcoded daemon option (-bd) to sendmail.service, dropped the DAEMON var
  - QUEUE var in /etc/sysconfig/sendmail replaced by SENDMAIL_OPTS var
  - Added default preset (-q1h) to SENDMAIL_OPTS var


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-7
changelog:
  - Hardened build with full relro
  - Provided SysV initscript in sysvinit subpackage for backward compatibility


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-9
changelog:
  - Enabled alternatives --initscript in post section
  - Improved sysvinit subpackage - switched to noarch, added scriptlets
  - Workarounded sm-client stop on SysV to systemd migration


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.6-2
changelog:
  - Fixed milter_helo regression (milter-helo-fix patch)
    Resolves: rhbz#895552
  - Fixed bogus dates in changelog


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.1-1
changelog:
  - New version
  - Dropped hesiod patch (not needed)
  - Dropped libdb5 patch (upstreamed)
  - Rebased patches


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-1
changelog:
  - New version
    Resolves: rhbz#1239185
  - Dropped ipv6-bad-helo patch (upstreamed)
  - Updated/defuzzified patches


author: Ondřej Lysoněk <olysonek@redhat.com> - 8.15.2-8
changelog:
  - Removed dependency for sendmail in sendmail-devel, renamed sendmail-devel
    to sendmail-milter-devel
    Resolves: rhbz#891288


author: Ondřej Lysoněk <olysonek@redhat.com> - 8.15.2-9
changelog:
  - Fixed Provides and Obsoletes in sendmail-milter-devel
  - Made 'Requires: sendmail-milter' in sendmail-milter-devel arch specific


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-11
changelog:
  - Added SASL AUTH_REALM into default configuration
    Resolves: rhbz#748279
  - Fixed compilation with openssl-1.1.0
    Resolves: rhbz#1400239


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-13
changelog:
  - Removed systemd limit for sendmail restarts to workaround failure due to
    rapid restarts caused by NetworkManager dispatcher script
    Resolves: rhbz#1422771


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-15
changelog:
  - Explicitly enabled sm-client statistics
    Related: rhbz#890585
  - Fixed compilation with -Werror=format-security which seems to be the
    default in f27+


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-19
changelog:
  - Replaced compile-fix patch by format-security patch from Debian not to
    change status codes
    Resolves: rhbz#1482808


author: Sam Lantinga <slouken@devolution.com>
changelog:
  - Re-integrated spec file into SDL distribution
  - 'name' and 'version' come from configure 
  - Some of the documentation is devel specific
  - Removed SMP support from %build - it doesn't work with libtool anyway


author: Tim Powers <timp@redhat.com>
changelog:
  - applied patch from Hans de Goede <hans@highrise.nl> for fullscreen toggling.
  - using  --enable-video-x11-dgamouse since it smoothes the mouse some.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - output same libraries for sdl-config whether --libs or --static-libs 
    selected.  Fixes compilation of most SDL programs.
  - properly packaged new HTML documentation


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.3-2
changelog:
  - Rebuild with new aRts, require arts-devel rather than kdelibs-sound-devel
  - Temporarily exclude alpha (compiler bugs)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.3-5
changelog:
  - dlopen() aRts and esd rather than linking directly to them.
  - make sure aRts and esd are actually used if they're running.


author: Thomas Woerner <twoerner@redhat.com> 1.2.6-2
changelog:
  - removed rpath
  - using O3 instead of O2, now (SDL_RLEaccel.c compile error)
  - added BuildRequires for nasm


author: Thomas Woerner <twoerner@redhat.com> 1.2.10-1
changelog:
  - new version 1.2.10
  - dropped the following patches because they are not needed anymore:
    ppc_modes, gcc4, yuv_mmx_gcc4 and no_exec_stack
  - new pagesize patch (drop PAGE_SIZE, use sysconf(_SC_PAGESIZE) instead)


author: Christopher Stone <chris.stone@gmail.com> 1.2.10-4
changelog:
  - added missing (build) requires for libXt libXrender libXrandr
  - remove %makeinstall macro (bad practice)
  - use %{buildroot} macro consistantly


author: Thomas Woerner <twoerner@redhat.com> 1.2.10-6
changelog:
  - dropped libXt build requires, because libSDL does not need libXt at all - 
    this was an autofoo bug (fixed already)
  - fixed multilib devel conflicts (#192749)
  - added buidrequires for imake: AC_PATH_X needs imake currently


author: Thomas Woerner <twoerner@redhat.com> 1.2.11-1
changelog:
  - new version 1.2.11
  - fixed man page SDL_ListModes (rhbz#208212)
  - fixed spurious esound, audiofile dependencies (rhbz#217389)
    Thanks to Ville Skyttä for the patch
  - dropped requirements for imake and libXt-devel (rhbz#226402)
  - made nasm arch %{ix86} only (rhbz#226402)
  - dropped O3 from options (rhbz#226402)
  - dropped tagname environment variable (rhbz#226402)


author: Thomas Woerner <twoerner@redhat.com> 1.2.12-1
changelog:
  - new version 1.2.12
    fixes TEXTRELs (rhbz#179407)
  - added arm support (rhbz#245411)
    Thanks to Lennert Buytenhek for the patch
  - added alpha support (rhbz#246463)
    Thanks to Oliver Falk for the patch
  - disabled yasm for SDL (rhbz#234823)
    Thanks to Nikolay Ulyanitsky for the patch


author: Warren Togami <wtogami@redhat.com> 1.2.12-4
changelog:
  - Build with --enable-pulseaudio-shared for testing purposes (#343911)
    It is known to not work in some cases, so not enabled by default.
  - Move pulseaudio enabler hack from SDL_mixer (#426275)
  - Make pulseaudio enabler hack conditional.  It will only attempt to use it if
    alsa-plugins-pulseaudio is installed.


author: Warren Togami <wtogami@redhat.com> 1.2.12-5
changelog:
  - correct stupid mistake that broke SDL-devel
    RPM should error out if a SourceX is defined twice...


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-1
changelog:
  - new version 1.2.13
    - fixes i810 video overlay problem (rhbz#310841)
    - fixes c++ style comments in header files (rhbz#426475)
  - review fixes: spec file cleanup, dropped static libs (rhbz#226402)
  - fixed pulseaudio hack scripts from Warren for multilib systems (rhbz#426579)
  - fixed pulseaudio detection in configure to enable dynamic use of pulseaudio
    libraries


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-6
changelog:
  - dropped pulseaudio hack (rhbz#448270)
  - pulseaudio is now used by default
  - simplified spec file for new architecture support (rhbz#433618)


author: Hans de Goede <hdegoede@redhat.com> 1.2.13-7
changelog:
  - Rewrite pulseaudio support to stop the crackle crackle with the
    new glitch free pulseaudio, this also gives us much better latency,
    as good as with directly using alsa (rh 474745, sdl 698)
  - Workaround an obscure bug in the inline-asm revcpy function (by disabling it) 
    This fixes Ri-li crashing on i386 (rh 484121, rh 484362, sdl 699)


author: Thomas Woerner <twoerner@redhat.com> 1.2.14-1
changelog:
  - new version 1.2.14
  - dropped patches for upstream fixes: libdir, dynamic-esd, x11dyn64,
    dynamic-pulse, pa-rewrite, rh484362 and rh487720


author: Thomas Woerner <twoerner@redhat.com> 1.2.14-4
changelog:
  - added repackage.sh script to remove joyos2,h and symbian.zip because of
    licensing problems
  - added comment about riva_mmio.h license


author: Petr Pisar <ppisar@redhat.com> - 1.2.14-6
changelog:
  - Make repacked source tar ball relative
  - Remove useless src/joystick/darwin/10.3.9-FIX/IOHIDLib.h because of APSL-2.0
    license
  - Apply SDL-1.2.14-xio_error-rh603984.patch (rh603984, sdl1009)
  - Escape spec file comments
  - Convert CREDITS to UTF-8


author: Petr Pisar <ppisar@redhat.com> - 1.2.14-7
changelog:
  - Fix left button press event in windowed mode (rh556608, sdl894)
  - Remove unrecognized --disable-debug and --enable-dlopen configure options
    (rh581056)


author: Petr Pisar <ppisar@redhat.com> - 1.2.15-14
changelog:
  - Do not harness backing store by default. Export SDL_VIDEO_X11_BACKINGSTORE
    environment variable to enable it. (bug #1073057)


author: Jeremy Hinegardner <jeremy@hinegardner.org> - 1.3.12.1-1
changelog:
  - switch to 1.3.12.1 branch
  - add patch from upstream with O'Reilly licensing updates.
  - convert ISO-8859-1 doc files to UTF-8


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.2-1
changelog:
  - update to 1.3.14.2
  - update make flags that changed with this upstream release
  - added man page installation


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.6-1
changelog:
  - update to 1.3.14.6
  - remove gcc 4.3 patch, it has been applied upstream
  - remove MIT license as that code has been removed from upstream


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.15.6-1
changelog:
  - update to 1.3.15.6
  - use new build targets from upstream
  - add in recommended build options for x86 from upstream


author: Robin Lee <cheeselee@fedoraproject.org> - 1.4.22-1
changelog:
  - Update to 1.4.22 (CVE-2012-2942, #824544)
  - Use linux2628 build target
  - No separate x86_64 build target for halog
  - halog build honors rpmbuild optflags
  - Specfile cleanup


author: Ryan O'Hara <rohara@redhat.com> - 1.4.23-1
changelog:
  - Update to 1.4.23 (CVE-2013-1912, #947697)
  - Drop supplementary groups after setuid/setgid (#894626)


author: Florian Weimer <fweimer@redhat.com> - 1.8.3-5
changelog:
  - Build halog and iprange with linker flags from redhat-rpm-config
  - Tell build to include <crypt.h>


author: Sandro Mani <manisandro@gmail.com> - 1.7.8-3.20130210gite09ff61
changelog:
  - Really remove -fno-strict-aliasing
  - Place comment on how to retreive source just above the Source0 line


author: Sandro Mani <manisandro@gmail.com> - 1.7.8-4.20130305git7866759
changelog:
  - Update to latest git snapshot
  - 0001-Cast-hash-table-values-to-unsigned-long.patch now upstream
  - Pillow-1.7.8-selftest.patch now upstream


author: Sandro Mani <manisandro@gmail.com> - 2.0.0-2.git2e88848
changelog:
  - Update to latest git
  - Remove python-pillow-disable-test.patch, gcc is now fixed
  - Add python-pillow_tempfile.patch to prevent a temporary file from getting packaged


author: Sandro Mani <manisandro@gmail.com> - 2.0.0-6.gitd1c6db8
changelog:
  - Update to latest git
  - python-pillow_quantization.patch now upstream
  - python-pillow_endianness.patch now upstream
  - Add subpackage for ImageQt module, with correct dependencies
  - Add PyQt4 and numpy BR (for generating docs / running tests)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0.0-7.gitd1c6db8
changelog:
  - Remove Obsoletes in the python-pillow-qt subpackage. Obsoletes isn't
    appropriate since qt support didn't exist in the previous python-pillow
    package so there's no reason to drag in python-pillow-qt when updating
    python-pillow.


author: Sandro Mani <manisandro@gmail.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Run tests in builddir, not installroot
  - Build python3-pillow docs with python3
  - python-pillow_endian.patch upstreamed


author: Sandro Mani <manisandro@gmail.com> - 2.1.0-4
changelog:
  - Add patch to fix incorrect PyArg_ParseTuple tuple signature, fixes rhbz#962091 and rhbz#988767.
  - Renable webp support on bigendian arches


author: Sandro Mani <manisandro@gmail.com> - 2.3.0-1
changelog:
  - Update to 2.3.0
  - Build with doc disabled to break circular python-pillow -> python-sphinx -> python pillow dependency


author: Sandro Mani <manisandro@gmail.com> - 2.4.0-2
changelog:
  - Enable Jpeg2000 support
  - Enable webp support also on s390* archs, bug #962091 is now fixed
  - Add upstream patch for ghostscript detection


author: Sandro Mani <manisandro@gmail.com> - 2.7.0-1
changelog:
  - Update to 2.7.0
  - Drop sane subpackage, is in python-sane now
  - Fix python3 headers directory
  - Drop Obsoletes: python3-pillow on python3-pillow-qt


author: Derek Parker <deparker@redhat.com> - 1.12.12-1
changelog:
  - Rebase to 1.12.12
  - Revert to Sign/Verify operations not expected unhashed inputs
  - Remove previously added verbose output
  - Better expose openssl errors


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-64.el8
changelog:
  - kvm-doc-fix-the-configuration-path.patch [bz#1645411]
  - kvm-Increase-number-of-iotests-being-run-as-a-part-of-RH.patch [bz#1664463]
  - kvm-Load-kvm-module-during-boot.patch [bz#1676907 bz#1685995]
  - kvm-qemu-kvm.spec.template-Update-pyton-path-to-system-i.patch []
  - Resolves: bz#1645411
    (the "fsfreeze-hook" script path shown by command "qemu-ga --help" or "man qemu-ga" is wrong)
  - Resolves: bz#1664463
    (Modify iotest behavior to include  luks and nbd and fail build if iotests fail)
  - Resolves: bz#1676907
    (/dev/kvm device exists but kernel module is not loaded on boot up causing VM start to fail in libvirt)
  - Resolves: bz#1685995
    (/dev/kvm device exists but kernel module is not loaded on boot up causing VM start to fail in libvirt)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-65.el8
changelog:
  - kvm-s390x-cpumodel-mepochptff-warn-when-no-mepoch-and-re.patch [bz#1664371]
  - kvm-s390x-cpumodel-add-z14-GA2-model.patch [bz#1664371]
  - kvm-redhat-s390x-cpumodel-enable-mepoch-by-default-for-z.patch [bz#1664371]
  - kvm-intel_iommu-fix-operator-in-vtd_switch_address_space.patch [bz#1662272]
  - kvm-intel_iommu-reset-intr_enabled-when-system-reset.patch [bz#1662272]
  - kvm-pci-msi-export-msi_is_masked.patch [bz#1662272]
  - kvm-i386-kvm-ignore-masked-irqs-when-update-msi-routes.patch [bz#1662272]
  - Resolves: bz#1662272
    (Boot guest with device assignment+vIOMMU, qemu prompts "vtd_interrupt_remap_msi: MSI address low 32 bit invalid: 0x0" when first rebooting guest)
  - Resolves: bz#1664371
    ([IBM 8.1 FEAT] Update hardware CPU Model z14 (kvm) - qemu part)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-66.el8
changelog:
  - kvm-iotests-153-Fix-dead-code.patch [bz#1694148]
  - kvm-file-posix-Include-filename-in-locking-error-message.patch [bz#1694148]
  - kvm-file-posix-Skip-effectiveless-OFD-lock-operations.patch [bz#1694148]
  - kvm-file-posix-Drop-s-lock_fd.patch [bz#1694148]
  - kvm-tests-Add-unit-tests-for-image-locking.patch [bz#1694148]
  - kvm-file-posix-Fix-shared-locks-on-reopen-commit.patch [bz#1694148]
  - kvm-iotests-Test-file-posix-locking-and-reopen.patch [bz#1694148]
  - kvm-block-file-posix-do-not-fail-on-unlock-bytes.patch [bz#1694148]
  - kvm-hostmem-file-remove-object-id-from-pmem-error-messag.patch [bz#1687596]
  - kvm-redhat-setting-target-release-to-rhel-8.1.0.patch []
  - kvm-redhat-removing-iotest-182.patch []
  - Resolves: bz#1687596
    ([Intel 8.1 BUG][KVM][Crystal Ridge]object_get_canonical_path_component: assertion failed: (obj->parent != NULL))
  - Resolves: bz#1694148
    (QEMU image locking needn't double open fd number, and it should not fail when attempting to release locks)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-68.el8
changelog:
  - kvm-s390x-ipl-Try-to-detect-Linux-vs-non-Linux-for-initi.patch [bz#1699070]
  - kvm-loader-Check-access-size-when-calling-rom_ptr-to-avo.patch [bz#1699070]
  - kvm-hw-s390x-Use-the-IEC-binary-prefix-definitions.patch [bz#1699070]
  - kvm-s390x-storage-attributes-fix-CMMA_BLOCK_SIZE-usage.patch [bz#1699070]
  - kvm-s390x-cpumodel-fix-segmentation-fault-when-baselinin.patch [bz#1699070]
  - kvm-hw-s390x-s390-pci-bus-Convert-sysbus-init-function-t.patch [bz#1699070]
  - kvm-s390x-pci-properly-fail-if-the-zPCI-device-cannot-be.patch [bz#1699070]
  - kvm-s390x-pci-rename-hotplug-handler-callbacks.patch [bz#1699070]
  - kvm-s390-avoid-potential-null-dereference-in-s390_pcihos.patch [bz#1699070]
  - kvm-s390x-pci-Send-correct-event-on-hotplug.patch [bz#1699070]
  - kvm-s390x-pci-Set-the-iommu-region-size-mpcifc-request.patch [bz#1699070]
  - kvm-s390x-pci-Always-delete-and-free-the-release_timer.patch [bz#1699070]
  - kvm-s390x-pci-Ignore-the-unplug-call-if-we-already-have-.patch [bz#1699070]
  - kvm-s390x-pci-Use-hotplug_dev-instead-of-looking-up-the-.patch [bz#1699070]
  - kvm-s390x-pci-Move-some-hotplug-checks-to-the-pre_plug-h.patch [bz#1699070]
  - kvm-s390x-pci-Introduce-unplug-requests-and-split-unplug.patch [bz#1699070]
  - kvm-s390x-pci-Drop-release-timer-and-replace-it-with-a-f.patch [bz#1699070]
  - kvm-s390x-pci-mark-zpci-devices-as-unmigratable.patch [bz#1699070]
  - kvm-s390x-pci-Fix-primary-bus-number-for-PCI-bridges.patch [bz#1699070]
  - kvm-s390x-pci-Fix-hotplugging-of-PCI-bridges.patch [bz#1699070]
  - kvm-s390x-pci-Warn-when-adding-PCI-devices-without-the-z.patch [bz#1699070]
  - kvm-s390x-pci-Unplug-remaining-requested-devices-on-pcih.patch [bz#1699070]
  - kvm-s390x-refactor-reset-reipl-handling.patch [bz#1699070]
  - kvm-s390-ipl-fix-ipl-with-no-reboot.patch [bz#1699070]
  - Resolves: bz#1699070
    (Backport s390x-related fixes for qemu-kvm)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-69.el8
changelog:
  - kvm-tests-crypto-Use-the-IEC-binary-prefix-definitions.patch [bz#1680231]
  - kvm-crypto-expand-algorithm-coverage-for-cipher-benchmar.patch [bz#1680231]
  - kvm-crypto-remove-code-duplication-in-tweak-encrypt-decr.patch [bz#1680231]
  - kvm-crypto-introduce-a-xts_uint128-data-type.patch [bz#1680231]
  - kvm-crypto-convert-xts_tweak_encdec-to-use-xts_uint128-t.patch [bz#1680231]
  - kvm-crypto-convert-xts_mult_x-to-use-xts_uint128-type.patch [bz#1680231]
  - kvm-crypto-annotate-xts_tweak_encdec-as-inlineable.patch [bz#1680231]
  - kvm-crypto-refactor-XTS-cipher-mode-test-suite.patch [bz#1680231]
  - kvm-crypto-add-testing-for-unaligned-buffers-with-XTS-ci.patch [bz#1680231]
  - Resolves: bz#1680231
    (severe performance impact using luks format)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-70.el8
changelog:
  - kvm-i386-Add-new-MSR-indices-for-IA32_PRED_CMD-and-IA32_.patch [bz#1561761]
  - kvm-i386-Add-CPUID-bit-and-feature-words-for-IA32_ARCH_C.patch [bz#1561761]
  - kvm-i386-Add-CPUID-bit-for-PCONFIG.patch [bz#1561761]
  - kvm-i386-Add-CPUID-bit-for-WBNOINVD.patch [bz#1561761]
  - kvm-i386-Add-new-CPU-model-Icelake-Server-Client.patch [bz#1561761]
  - kvm-Add-support-to-KVM_GET_MSR_FEATURE_INDEX_LIST-an.patch [bz#1561761]
  - kvm-x86-Data-structure-changes-to-support-MSR-based-feat.patch [bz#1561761]
  - kvm-x86-define-a-new-MSR-based-feature-word-FEATURE_WORD.patch [bz#1561761]
  - kvm-i386-remove-the-new-CPUID-PCONFIG-from-Icelake-Serve.patch [bz#1561761]
  - kvm-Revert-i386-Add-CPUID-bit-for-PCONFIG.patch [bz#1561761]
  - Resolves: bz#1561761
    ([Intel 8.1 Feat] qemu-kvm Introduce Icelake cpu model)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-71.el8
changelog:
  - kvm-s390-bios-Skip-bootmap-signature-entries.patch [bz#1683275]
  - Resolves: bz#1683275
    ([IBM 8.1 FEAT] KVM: Secure Linux Boot Toleration (qemu))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-72.el8
changelog:
  - kvm-Use-KVM_GET_MSR_INDEX_LIST-for-MSR_IA32_ARCH_CAP.patch [bz#1707706]
  - kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1707706]
  - Resolves: bz#1707706
    (/builddir/build/BUILD/qemu-2.12.0/target/i386/kvm.c:2031: kvm_put_msrs: Assertion `ret == cpu->kvm_msr_buf->nmsrs' failed.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-73.el8
changelog:
  - kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-named-CPU-mo.patch [bz#1561761]
  - kvm-i386-Disable-OSPKE-on-CPU-model-definitions.patch [bz#1561761]
  - Resolves: bz#1561761
    ([Intel 8.1 Feat] qemu-kvm Introduce Icelake cpu model)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-74.el8
changelog:
  - kvm-x86-cpu-Enable-CLDEMOTE-Demote-Cache-Line-cpu-featur.patch [bz#1696436]
  - kvm-memory-Fix-the-memory-region-type-assignment-order.patch [bz#1667249]
  - kvm-target-i386-sev-Do-not-pin-the-ram-device-memory-reg.patch [bz#1667249]
  - kvm-block-Fix-invalidate_cache-error-path-for-parent-act.patch [bz#1673010]
  - kvm-target-i386-define-md-clear-bit.patch [bz#1703302 bz#1703308]
  - Resolves: bz#1667249
    (Fail to launch AMD SEV VM with assigned PCI device)
  - Resolves: bz#1673010
    (Local VM and migrated VM on the same host can run with same RAW file as visual disk source while without shareable configured or lock manager enabled)
  - Resolves: bz#1696436
    ([Intel 8.0 Feat] KVM Enabling SnowRidge new NIs - qemu-kvm)
  - Resolves: bz#1703302
    (CVE-2018-12130 virt:rhel/qemu-kvm: hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS) [rhel-8])
  - Resolves: bz#1703308
    (CVE-2018-12127 virt:rhel/qemu-kvm: hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS) [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-75.el8
changelog:
  - kvm-s390x-cpumodel-enum-type-S390FeatGroup-now-gets-gene.patch [bz#1660912]
  - kvm-linux-headers-update-against-Linux-5.2-rc1.patch [bz#1660912]
  - kvm-s390x-cpumodel-ignore-csske-for-expansion.patch [bz#1660912]
  - kvm-s390x-cpumodel-Miscellaneous-Instruction-Extensions-.patch [bz#1660912]
  - kvm-s390x-cpumodel-msa9-facility.patch [bz#1660912]
  - kvm-s390x-cpumodel-vector-enhancements.patch [bz#1660912]
  - kvm-s390x-cpumodel-enhanced-sort-facility.patch [bz#1660912]
  - kvm-s390x-cpumodel-add-Deflate-conversion-facility.patch [bz#1660912]
  - kvm-s390x-cpumodel-add-gen15-defintions.patch [bz#1660912]
  - kvm-s390x-cpumodel-wire-up-8561-and-8562-as-gen15-machin.patch [bz#1660912]
  - kvm-spice-set-device-address-and-device-display-ID-in-QX.patch [bz#1712946]
  - kvm-hw-pci-Add-missing-include.patch [bz#1712946]
  - Resolves: bz#1660912
    ([IBM 8.1 FEAT] KVM s390x: Add hardware CPU Model - qemu part)
  - Resolves: bz#1712946
    (qemu-kvm build is broken due to spice_qxl_set_max_monitors being deprecated)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-76.el8
changelog:
  - kvm-Introduce-new-no_guest_reset-parameter-for-usb-host-.patch [bz#1713677]
  - kvm-usb-call-reset-handler-before-updating-state.patch [bz#1713677]
  - kvm-usb-host-skip-reset-for-untouched-devices.patch [bz#1713677]
  - kvm-usb-host-avoid-libusb_set_configuration-calls.patch [bz#1713677]
  - kvm-virtio-scsi-Move-BlockBackend-back-to-the-main-AioCo.patch [bz#1673396 bz#1673401]
  - kvm-scsi-disk-Acquire-the-AioContext-in-scsi_-_realize.patch [bz#1673396 bz#1673401]
  - kvm-virtio-scsi-Forbid-devices-with-different-iothreads-.patch [bz#1673396 bz#1673401]
  - kvm-Disable-VXHS-support.patch [bz#1714933]
  - Resolves: bz#1673396
    (qemu-kvm core dumped after hotplug the deleted disk with iothread parameter)
  - Resolves: bz#1673401
    (Qemu core dump when start guest with two disks using same drive)
  - Resolves: bz#1713677
    (Detached device when trying to upgrade USB device firmware when in doing USB Passthrough via QEMU)
  - Resolves: bz#1714933
    (Disable VXHS  in qemu-kvm)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-77.el8
changelog:
  - kvm-i386-Make-arch_capabilities-migratable.patch [bz#1709970]
  - kvm-spapr-Fix-ibm-max-associativity-domains-property-num.patch [bz#1710662]
  - kvm-linux-headers-Update-for-NVLink2-passthrough-downstr.patch [bz#1710662]
  - kvm-pci-Move-NVIDIA-vendor-id-to-the-rest-of-ids.patch [bz#1710662]
  - kvm-vfio-quirks-Add-common-quirk-alloc-helper.patch [bz#1710662]
  - kvm-vfio-Make-vfio_get_region_info_cap-public.patch [bz#1710662]
  - kvm-spapr-Support-NVIDIA-V100-GPU-with-NVLink2.patch [bz#1710662]
  - kvm-qemu-kvm.spec-bump-libseccomp-2.4.0.patch [bz#1719578]
  - Resolves: bz#1709970
    ([Intel 8.1 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM - qemu-kvm)
  - Resolves: bz#1710662
    ([IBM 8.1 FEAT] POWER9 - Virt: qemu: NVLink2 passthru to guest - Nvidia Volta (GPU) (kvm))
  - Resolves: bz#1719578
    (VM failed to start with error "failed to install seccomp syscall filter in the kernel")


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-78.el8
changelog:
  - kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1721983]
  - kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1721983]
  - Resolves: bz#1721983
    (qemu-kvm can't be build with new gluster version (6.0.6))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-80.el8
changelog:
  - kvm-qxl-check-release-info-object.patch [bz#1712705]
  - kvm-iotests-Make-182-do-without-device_add.patch [bz#1707598]
  - Resolves: bz#1707598
    (qemu-iotest 182 fails without device hotplugging support)
  - Resolves: bz#1712705
    (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-81.el8
changelog:
  - kvm-target-i386-add-MDS-NO-feature.patch [bz#1714792]
  - kvm-virtio-gpu-pass-down-VirtIOGPU-pointer-to-a-bunch-of.patch [bz#1531543]
  - kvm-virtio-gpu-add-iommu-support.patch [bz#1531543]
  - kvm-virtio-gpu-fix-unmap-in-error-path.patch [bz#1531543]
  - Resolves: bz#1531543
    ([RFE] add iommu support to virtio-gpu)
  - Resolves: bz#1714792
    ([Intel 8.1 FEAT] MDS_NO exposure to guest)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-82.el8
changelog:
  - kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1629906]
  - kvm-i386-Update-stepping-of-Cascadelake-Server.patch [bz#1629906]
  - kvm-target-i386-Disable-MPX-support-on-named-CPU-models.patch [bz#1629906]
  - kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-named-CPU-NEW.patch [bz#1629906]
  - kvm-i386-Disable-OSPKE-on-CPU-model-definitions-NEW.patch [bz#1629906]
  - kvm-block-ssh-Convert-from-DPRINTF-macro-to-trace-events.patch [bz#1513367]
  - kvm-block-ssh-Do-not-report-read-write-flush-errors-to-t.patch [bz#1513367]
  - kvm-qemu-iotests-Fix-paths-for-NFS.patch [bz#1513367]
  - kvm-qemu-iotests-Filter-NFS-paths.patch [bz#1513367]
  - kvm-iotests-Filter-SSH-paths.patch [bz#1513367]
  - kvm-block-ssh-Implement-.bdrv_refresh_filename.patch [bz#1513367]
  - kvm-iotests-Use-Python-byte-strings-where-appropriate.patch [bz#1513367]
  - kvm-iotests-Unify-log-outputs-between-Python-2-and-3.patch [bz#1513367]
  - kvm-ssh-switch-from-libssh2-to-libssh.patch [bz#1513367]
  - kvm-redhat-switch-from-libssh2-to-libssh.patch [bz#1513367]
  - kvm-block-gluster-limit-the-transfer-size-to-512-MiB.patch [bz#1728657]
  - kvm-s390-cpumodel-fix-description-for-the-new-vector-fac.patch [bz#1729975]
  - kvm-s390x-cpumodel-remove-esort-from-the-default-model.patch [bz#1729975]
  - kvm-s390x-cpumodel-also-change-name-of-vxbeh.patch [bz#1729975]
  - kvm-s390x-cpumodel-change-internal-name-of-vxpdeh-to-mat.patch [bz#1729975]
  - kvm-target-i386-sev-Do-not-unpin-ram-device-memory-regio.patch [bz#1728958]
  - kvm-i386-Save-EFER-for-32-bit-targets.patch [bz#1689269]
  - kvm-target-i386-rename-HF_SVMI_MASK-to-HF_GUEST_MASK.patch [bz#1689269]
  - kvm-target-i386-kvm-add-VMX-migration-blocker.patch [bz#1689269]
  - kvm-target-i386-kvm-just-return-after-migrate_add_blocke.patch [bz#1689269]
  - kvm-target-i386-kvm-Delete-VMX-migration-blocker-on-vCPU.patch [bz#1689269]
  - kvm-Introduce-kvm_arch_destroy_vcpu.patch [bz#1689269]
  - kvm-target-i386-kvm-Use-symbolic-constant-for-DB-BP-exce.patch [bz#1689269]
  - kvm-target-i386-kvm-Re-inject-DB-to-guest-with-updated-D.patch [bz#1689269]
  - kvm-target-i386-kvm-Block-migration-for-vCPUs-exposed-wi.patch [bz#1689269]
  - kvm-target-i386-kvm-do-not-initialize-padding-fields.patch [bz#1689269]
  - kvm-linux-headers-synchronize-generic-and-x86-KVM-header.patch [bz#1689269]
  - kvm-vmstate-Add-support-for-kernel-integer-types.patch [bz#1689269]
  - kvm-target-i386-kvm-Add-support-for-save-and-restore-nes.patch [bz#1689269]
  - kvm-target-i386-kvm-Add-support-for-KVM_CAP_EXCEPTION_PA.patch [bz#1689269]
  - kvm-target-i386-kvm-Add-nested-migration-blocker-only-wh.patch [bz#1689269]
  - kvm-target-i386-kvm-Demand-nested-migration-kernel-capab.patch [bz#1689269]
  - kvm-target-i386-skip-KVM_GET-SET_NESTED_STATE-if-VMX-dis.patch [bz#1689269]
  - kvm-i386-kvm-Do-not-sync-nested-state-during-runtime.patch [bz#1689269]
  - Resolves: bz#1513367
    (qemu with libssh)
  - Resolves: bz#1629906
    ([Intel 8.1 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
  - Resolves: bz#1689269
    (Nested KVM: support for migration of nested hypervisors - Slow Train)
  - Resolves: bz#1728657
    ('qemu-io write' to a raw image over libgfapi fails)
  - Resolves: bz#1728958
    (Hot unplug vfio-pci NIC devices from sev guest will cause qemu-kvm: sev_ram_block_removed: failed to unregister region)
  - Resolves: bz#1729975
    (RHEL 8.1 Pre-Beta - Fix for hardware CPU Model)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-83.el8
changelog:
  - kvm-hw-block-pflash_cfi01-Add-missing-DeviceReset-handle.patch [bz#1707192]
  - kvm-block-file-posix-Unaligned-O_DIRECT-block-status.patch [bz#1678979]
  - kvm-iotests-Test-unaligned-raw-images-with-O_DIRECT.patch [bz#1678979]
  - kvm-nbd-client-Lower-min_block-for-block-status-unaligne.patch [bz#1678979]
  - kvm-nbd-client-Reject-inaccessible-tail-of-inconsistent-.patch [bz#1678979]
  - kvm-nbd-client-Support-qemu-img-convert-from-unaligned-s.patch [bz#1678979]
  - kvm-block-Add-bdrv_get_request_alignment.patch [bz#1678979]
  - kvm-nbd-server-Advertise-actual-minimum-block-size.patch [bz#1678979]
  - kvm-slirp-check-sscanf-result-when-emulating-ident.patch [bz#1727642]
  - kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1727642]
  - kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1727642]
  - kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1727642]
  - kvm-tap-set-vhostfd-passed-from-qemu-cli-to-non-blocking.patch [bz#1732642]
  - kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734751]
  - Resolves: bz#1678979
    (qemu-img convert abort when converting image with unaligned size (qemu-img: block/io.c:2134: bdrv_co_block_status: Assertion `*pnum && (((*pnum) % (align)) == 0) && align > offset - aligned_offset\' failed))
  - Resolves: bz#1707192
    (implement missing reset handler for cfi.pflash01 - slow train)
  - Resolves: bz#1727642
    (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu())
  - Resolves: bz#1732642
    (enable the virtio-net frontend to work with the vhost-net backend in SEV guests)
  - Resolves: bz#1734751
    (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-8.1.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-84.el8
changelog:
  - kvm-vnc-detect-and-optimize-pageflips.patch [bz#1727033]
  - kvm-block-backend-Make-blk_inc-dec_in_flight-public.patch [bz#1716349]
  - kvm-virtio-blk-Increase-in_flight-for-request-restart-BH.patch [bz#1716349]
  - kvm-block-Fix-AioContext-switch-for-drained-node.patch [bz#1716349]
  - kvm-test-bdrv-drain-AioContext-switch-in-drained-section.patch [bz#1716349]
  - kvm-block-Use-normal-drain-for-bdrv_set_aio_context.patch [bz#1716349]
  - kvm-block-Fix-AioContext-switch-for-bs-drv-NULL.patch [bz#1716347]
  - kvm-iothread-fix-crash-with-invalid-properties.patch [bz#1687541]
  - kvm-iothread-replace-init_done_cond-with-a-semaphore.patch [bz#1687541]
  - kvm-RHEL-disable-hostmem-memfd.patch [bz#1740797]
  - Resolves: bz#1687541
    (qemu aborted when start guest with a big iothreads)
  - Resolves: bz#1716347
    (Qemu Core dump when quit vm that's in status "paused(io-error)" with data plane enabled)
  - Resolves: bz#1716349
    (qemu with iothreads enabled crashes on resume after enospc pause for disk extension)
  - Resolves: bz#1727033
    (vnc server should detect page-flips and avoid sending fullscreen updates then.)
  - Resolves: bz#1740797
    (Disable memfd in QEMU)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-85.el8
changelog:
  - kvm-console-Avoid-segfault-in-screendump.patch [bz#1684383]
  - kvm-usb-hub-clear-suspend-on-detach.patch [bz#1619661]
  - kvm-qemu-img-fix-regression-copying-secrets-during-conve.patch [bz#1727821]
  - Resolves: bz#1619661
    (the attach hub on one hub still exits in device manager after unhotplug)
  - Resolves: bz#1684383
    (qemu crashed when take screenshot for 2nd head of virtio video device if the display not opened by virt-viewer)
  - Resolves: bz#1727821
    (Failed to convert a source image to the qcow2 image encrypted by luks)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-86.el8
changelog:
  - kvm-Do-not-run-iotests-on-brew-build.patch [bz#1742819]
  - kvm-target-ppc-spapr-Add-workaround-option-to-SPAPR_CAP_.patch [bz#1744415]
  - kvm-target-ppc-spapr-Add-SPAPR_CAP_CCF_ASSIST.patch [bz#1744415]
  - kvm-i386-x86_cpu_list_feature_names-function.patch [bz#1747185]
  - kvm-i386-unavailable-features-QOM-property.patch [bz#1747185]
  - kvm-file-posix-Handle-undetectable-alignment.patch [bz#1738839]
  - kvm-iotests-Tweak-221-sizing-for-different-hole-granular.patch [bz#1738839]
  - kvm-iotests-Filter-175-s-allocation-information.patch [bz#1738839]
  - kvm-block-posix-Always-allocate-the-first-block.patch [bz#1738839]
  - kvm-iotests-Test-allocate_first_block-with-O_DIRECT.patch [bz#1738839]
  - Resolves: bz#1738839
    (I/O error when virtio-blk disk is backed by a raw image on 4k disk)
  - Resolves: bz#1742819
    (Remove iotests from qemu-kvm builds [RHEL 8.1.0])
  - Resolves: bz#1744415
    (Backport support for count cache flush Spectre v2 mitigation [slow train])
  - Resolves: bz#1747185
    ("filtered-features" QOM property is not available)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-88.el8
changelog:
  - Revert fix for bz#1749724 - this got delayed to 8.2
    (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-88.el8_1_0.1
changelog:
  - kvm-s390-PCI-fix-IOMMU-region-init.patch [bz#1764829]
  - Resolves: bz#1764829
    (RHEL8.1 Snapshot3 - Passthrough PCI card goes into error state if used in domain (kvm) [rhel-8.1.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-88.el8_1_0.2
changelog:
  - kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771970]
  - kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771970]
  - Resolves: bz#1771970
    (CVE-2019-11135 virt:rhel/qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-8.1.0.z])


author: Daniel Kopecek <dkopecek@redhat.com> 0.3-1
changelog:
  - Update to version 0.3
  - disabled silent rules
  - install license file
  - added man pages
  - use _hardened_build 1 instead of custom compilation flags
  - fix file permissions on files in /etc
  - do not install an empty rule set file


author: Daniel Kopecek <dkopecek@redhat.com> 0.3p3-1
changelog:
  - Update to version 0.3p3
  - added %check section
  - removed explicit -devel requires on systemd, libqb and
    libsodium devel files
  - added -devel requires on libstdc++-devel


author: Daniel Kopecek <dkopecek@redhat.com> 0.4-4
changelog:
  - Update to version 0.4
  - added usbguard CLI
  - added a tools subpackage with usbguard-rule-parser binary


author: Daniel Kopeček <dkopecek@redhat.com> 0.6.3-0.1.20170317
changelog:
  - Update to latest git snapshot
  - Use --enable-werror configure option as the upstream default
    changed to not use -Werror.


author: Daniel Kopeček <dkopecek@redhat.com> 0.7.0-1
changelog:
  - Update to 0.7.0
    - changed PresentDevicePolicy setting from keep to apply-policy
    - added AuditFilePath configuration option pointing to
      /var/log/usbguard/usbguard-audit.log file
    - install bash-completion script
    - use 0600 file permissions for usbguard-daemon.conf and rules.conf


author: Daniel Kopeček <dkopecek@redhat.com> 0.7.0-4
changelog:
  - Added patch to disable unused parameter warning for protobuf
    generated sources to fix compilation with newer protobuf version


author: Simo Sorce <simo@redhat.com> - 1.1.2-1
changelog:
  - New minor release.
  - Resolves #1254458
  - Fixes a crash bug when inquiring incomplete security contexts


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-9
changelog:
  - Update fix for bz#1657725. Previous fix was not correct, bootlist was still
    invoked only with one partition argument due to incorrect array expansion.
    See upstream PR2096, 2097, 2098.


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-10
changelog:
  - Apply upstream patch PR1993
    Automatically exclude $BUILD_DIR from the backup
    Resolves: rhbz1677733


author: Brian C. Lane <bcl@redhat.com> - 0.12.2-4
changelog:
  - Add upstream changes from 0.12.4
    Resolves: rhbz#1585318
  - Add TestJSON to the gating test from upstream
    Related: rhbz#1585318


author: Eric Moret <eric.moret@epita.fr> - 1.0.14-2
changelog:
  - Adding pulse as ALSA "default" pcm and ctl when the alsa-plugins-pulseaudio
  package is installed, fixing #251943.


author: Lennart Poettering <lpoetter@redhat.com> - 1.0.14-4
changelog:
  - In the pulse plugin: reflect the XRUN state back to the application.
    Makes XMMS work on top of the alsa plugin. (#307341)


author: Lennart Poettering <lpoetter@redhat.com> - 1.0.14-5
changelog:
  - Split pulse.conf into two, so that we can load one part from
    form /etc/alsa/alsa.conf. (#251943)


author: Lennart Poettering <lpoetter@redhat.com> - 1.0.14-6
changelog:
  - Merge the whole /etc/alsa/pcm/pulseaudio.conf stuff into
    /etc/alsa/pulse-default.conf, because the former is practically
    always ignored, since it is not referenced for inclusion by any other
    configuration file fragment (#251943)
    The other fragments installed in /etc/alsa/pcm/ are useless, too. But
    since we are in a freeze and they are not that important, I am not fixing
    this now.


author: Eric Moret <eric.moret@epita.fr> - 1.0.15-2
changelog:
  - Update to upstream 1.0.15 (#429249)
  - Add "Requires: pulseaudio" to alsa-plugins-pulseaudio (#368891)
  - Fix pulse_hw_params() when state is SND_PCM_STATE_PREPARED (#428030)
  - run /sbin/ldconfig on post and postun macros


author: Lubomir Kundrak <lkundrak@redhat.com> - 1.0.16-1
changelog:
  - New upstream, dropping upstreamed patches
  - Do not assert fail when pulseaudio is unavailable (#435148)


author: Eric Moret <eric.moret@gmail.com> - 1.0.19-1
changelog:
  - Updated to 1.0.19
  - Added Requires: alsa-utils to address #483322
  - Added dir {_sysconfdir}/alsa/pcm to address #483322


author: Jaroslav Kysela <jkysela@redhat.com> - 1.0.25-1
changelog:
  - Updated to 1.0.25
  - Moved plugin specific configuration from /etc/alsa/pcm to /usr/share/alsa/alsa.conf.d


author: Joe Orton <jorton@redhat.com> 1:1.4.9-2
changelog:
  - update to 1.4.9 (thanks to Remi Collet, #183359)
  - package /usr/share/pear/.pkgxml (#190252)
  - update to XML_RPC-1.4.8
  - bundle the v3.0 LICENSE file


author: Joe Orton <jorton@redhat.com> 1:1.4.11-3
changelog:
  - use BuildArch not BuildArchitectures (#226925)
  - fix to use preferred BuildRoot (#226925)
  - strip more buildroot-relative paths from *.reg
  - force correct gpg path in default pear.conf


author: Remi Collet <Fedora@FamilleCollet.com> 1:1.6.2-1
changelog:
  - update to 1.6.2
  - remove patches merged upstream
  - Fix : "pear install" hangs on non default channel (#283401)


author: Tim Jackson <rpm@timj.co.uk> 1:1.7.1-2
changelog:
  - Set cfg_dir to be %{_sysconfdir}/pear (and own it)
  - Update install-pear.php script
  - Add %pear_cfgdir and %pear_wwwdir macros


author: Remi Collet <remi@fedoraproject.org> 1:1.9.4-5
changelog:
  - Update Archive_Tar to 1.3.9
  - add patch from RHEL (Joe Orton)
  - fix install-pear.php URL (with our patch for doc_dir applied)


author: Remi Collet <remi@fedoraproject.org> 1:1.9.4-6
changelog:
  - fix Obsoletes version for XML_Util (#226295)
  - add link to upstream bug - please Provides LICENSE file
    https://pear.php.net/bugs/bug.php?id=19368
  - add link to upstream bug - Incorrect FSF address
    https://pear.php.net/bugs/bug.php?id=19367


author: Remi Collet <remi@fedoraproject.org> 1:1.9.4-9
changelog:
  - move tests to /usr/share/tests/pear
  - move pkgxml to /var/lib/pear
  - remove XML_RPC
  - refresh installer


author: Remi Collet <remi@fedoraproject.org> 1:1.9.4-14
changelog:
  - add explicit requires on all needed extensions (phpci)
  - fix pecl launcher (need ini to be parsed for some
    extenstions going to be build as shared, mainly simplexml)
  - add fix for new unpack format (php 5.5)


author: Remi Collet <remi@fedoraproject.org> 1:1.9.5-3
changelog:
  - update Archive_Tar to 1.3.13
  - requires httpd-filesystem for /var/www/html ownership (F21+)
  - fix license handling


author: Remi Collet <remi@fedoraproject.org> 1:1.9.5-4
changelog:
  - update Console_Getopt to 1.4.0
  - raise php minimum version to 5.4
  - cleanup registry after removal
  - drop old php-pear-XML-Util scriptlets
  - remove PHP from License, Console_Getopt is now BSD


author: Remi Collet <remi@fedoraproject.org> 1:1.10.0-0.1.dev2
changelog:
  - update PEAR to 1.10.0dev2
  - drop all patches, merged upstream
  - drop man pages from sources
  - add PEAR_Manpages upstream package


author: Remi Collet <remi@fedoraproject.org> 1:1.10.1-3
changelog:
  - use file triggers for pecl extensions (un)registration
  - define %pecl_install and %pecl_uninstall as noop macro


author: Remi Collet <remi@fedoraproject.org> 1:1.10.1-7
changelog:
  - fix https connection via a proxy
    patch from https://github.com/pear/pear-core/pull/51
  - silent the new scriplets


author: Remi Collet <remi@fedoraproject.org> 1:1.10.1-11
changelog:
  - add patch to fix XML_Serializer with XML_Util 1.4.1
    from https://github.com/pear/XML_Util/pull/8


author: Milan Zazrivec <mzazrivec@redhat.com> 2.1.16-1
changelog:
  - 1061013 - remove up2date_config.rpmmacros client action
  - 1061013 - remove macros.up2date from package build


author: Michael Mraka <michael.mraka@redhat.com> 2.3.2-1
changelog:
  - rhn-client-tools translations backported from RHEL6
  - rhn-client-tools translations updated from Transifex


author: Matej Kollar <mkollar@redhat.com> 2.3.10-1
changelog:
  - Localize error messages
  - Typo
  - 1036586 - separate username/password request
  - Remove unused variable
  - Indentation homogenization
  - Separate definitions from directly executed code
  - Remove unused import


author: Matej Kollar <mkollar@redhat.com> 2.3.11-1
changelog:
  - 1147425 - we might be registered also via rhsm
  - 1147425 - avoid "list index out of range"
  - Make indentation more PEP8


author: Grant Gainey 2.3.12-1
changelog:
  - Use plural for lists
  - Refactoring
  - Sanitize input
  - Fix grammar
  - Extract listing of available channels
  - Extract listing of base channel
  - Extract channels listing
  - Extract channel removal
  - Extract channel addition
  - Extract logging function
  - Cleanup
  - Pylint/Pep8
  - Get rid of unused global variable


author: Jan Dobes 2.5.2-1
changelog:
  - rhel client tools: po files updated
  - rhel client tools: remove virtualization host platform entitlement references
  - rhel client tools: drop references to update entitlements
  - client-tools: Remove 'provisioning_entitled' slot from RHEL and Debian
  - backend: unused reg_num parameter removed from documentation
  - client-tools: Remove 'monitoring_entitled' slot from RHEL and Debian


author: Michael Mraka <michael.mraka@redhat.com> 2.5.11-1
changelog:
  - 1259884 - fixed missing method for sorting of rhnChannels
  - 1259884 - open terminal for write only


author: Jan Dobes 2.5.12-1
changelog:
  - delete file with input files after template is created
  - try to generate more similar order of entries in template
  - pulling *.po translations from Zanata
  - fixing current *.po translations


author: Tomas Kasparek <tkasparek@redhat.com> 2.5.16-1
changelog:
  - updating copyright years
  - Regenerating .po and .pot files for rhn-client-tools.
  - Updating .po translations from Zanata


author: Jan Dobes 2.6.2-1
changelog:
  - fedora 24 client will not send it's smbios because there is a warning and it
    fails on syntax error


author: Gennadii Altukhov <galt@redhat.com> 2.7.6-1
changelog:
  - 1371871 - fix UnicodeDecodeError when running rhnreg_ks with a different
    locale than en_US
  - Updated links to github in spec files
  - Migrating Fedorahosted to GitHub


author: Jan Dobes 2.7.10-1
changelog:
  - Regenerating .po and .pot files for rhn-client-tools
  - Updating .po translations from Zanata
  - PR 500 - Add epoch information for deb packages


author: Michael Mraka <michael.mraka@redhat.com> 2.8.2-1
changelog:
  - install files into python_sitelib/python3_sitelib
  - let rpmbuild take care of .pyc/.pyo
  - move rhn-setup-gnome files into proper python2/python3 subpackages
  - move rhn-setup files into proper python2/python3 subpackages
  - move rhn-check files into proper python2/python3 subpackages
  - move rhn-client-tools files into proper python2/python3 subpackages
  - split rhn-setup-gnome into python2/python3 specific packages
  - split rhn-setup into python2/python3 specific packages
  - split rhn-check into python2/python3 specific packages
  - split rhn-client-tools into python2/python3 specific packages
  - simplified Requires/Provides definition
  - remove unused import


author: Michael Mraka <michael.mraka@redhat.com> 2.8.4-1
changelog:
  - require the same version of other packages
  - move client actions to rhn namespace
  - import methods from standard path
  - all python modules are now in standard sitelib


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.6-1
changelog:
  - 1494389 - detect if action has been picked up for 2nd time
  - 1494389 - Revert "[1260527] RHEL7 reboot loop"
  - 1494389 - Revert "fix except to be compatible with Python 2.4"


author: Michael Mraka <michael.mraka@redhat.com> 2.8.7-1
changelog:
  - 1502695 - removed dependency on libgnome
  - fixed typo introduced in 8ed741dfaf76b37dc88724692f90240aed7a85a5
  - gui has moved to standard path
  - removed settings for old RH build system


author: Michael Mraka <michael.mraka@redhat.com> 2.8.9-1
changelog:
  - make getting device properties compatible with older versions of pyudev
  - use new pyudev module on SUSE to get udev information
  - add getting device information using pyudev module


author: Michael Mraka <michael.mraka@redhat.com> 2.8.13-1
changelog:
  - dist cannot detect the distribution anymore
  - fix rpm names in SUSE
  - rhn-client-tools: fix filelist for SUSE and enable py3 build for Tumbleweed


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.15-1
changelog:
  - 1417185 - do chmod an the new file, not the old one which will be deleted
  - 1417185 - change permissions to default provided by rhn-client-tools rpm


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-5
changelog:
  - fix "Podman support for FIPS Mode requires a bind mount inside the container"
  - Resolves: #1804195


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-8
changelog:
  - fix "[FJ8.2 Bug]: [REG]The "--group-add" option of "podman create" doesn't function."
  - Resolves: #1808707


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-9
changelog:
  - update fix for "podman (1.6.4) rhel 8.1 no route to host from inside container"
  - Resolves: #1806901


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.1-5
changelog:
  - Add gating tests for CI
  - Restore correct behavior when live migration is interrupted
  - Improve clients' authentication of IPC servers (CVE-2018-16877)
  - Fix use-after-free with potential information disclosure (CVE-2019-3885)
  - Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
  - Resolves: rhbz#1682116
  - Resolves: rhbz#1684306
  - Resolves: rhbz#1694558
  - Resolves: rhbz#1694560
  - Resolves: rhbz#1694908


author: Ken Gaillot <kgaillot@redhat.com> - 2.0.2-1
changelog:
  - Add stonith_admin option to display XML output
  - Add new crm_rule tool to check date/time rules
  - List any constraints cleared by crm_resource --clear
  - crm_resource --validate can now get resource parameters from command line
  - Rebase on upstream version 2.0.2
  - Default concurrent-fencing to true
  - Resolves: rhbz#1555939
  - Resolves: rhbz#1572116
  - Resolves: rhbz#1631752
  - Resolves: rhbz#1637020
  - Resolves: rhbz#1695737
  - Resolves: rhbz#1715426


author: Klaus Wenninger <kwenning@redhat.com> - 2.0.2-2
changelog:
  - Synchronize fence-history on fenced-restart
  - Cleanup leftover pending-fence-actions when fenced is restarted
  - Improve fencing of remote-nodes
  - Resolves: rhbz#1708380
  - Resolves: rhbz#1708378
  - Resolves: rhbz#1721198
  - Resolves: rhbz#1695737


author: Gerd Hoffmann <kraxel@redhat.com> - 0.5.2-2
changelog:
  - Fix license: It is BSD, not GPL.
  - Cleanup specfile, drop bits not needed any more with
    recent rpm versions (F13+).


author: Matt Wilson <msw@redhat.com>
changelog:
  - rebuilt for next release
  - patched Makefile.in to take a hint on mandir (patch2)
  - use %{_mandir} and %makeinstall


author: Jakub Jelinek <jakub@redhat.com> 0.3.32-1
changelog:
  - update to 0.3.32
    - fix dict.c assertion (#114359)
    - x86_64 support
  - rewrite elf.[ch] using libelf
  - don't rely on st_value of SHN_UNDEF symbols in binaries,
    instead walk .rel{,a}.plt and compute the addresses (#115299)
  - fix x86-64 support
  - some ltrace.conf additions
  - some format string printing fixes


author: Jakub Jelinek <jakub@redhat.com> 0.3.36-2
changelog:
  - make x86_64 ltrace trace both 32-bit and 64-bit binaries (#141955,
    IT#55600)
  - fix tracing across execve
  - fix printf-style format handling on 64-bit arches


author: Petr Machata <pmachata@redhat.com> - 0.4-1
changelog:
  - Upstream 0.4
  - opt_x patch: New structure for opt_x list elements, now with
    'found'.  Using it in options.c, elf.c.
  - testsuite patch: Automated testsuite for ltrace.


author: Petr Machata <pmachata@redhat.com> - 0.4-1.2
changelog:
  - svn fix for opt_x patch
  - patches for testsuite for s390{,x}
  - turning off main-internal test. Fails on ia64, needs investigation.


author: Petr Machata <pmachata@redhat.com> - 0.4-1.4
changelog:
  - turn off opd translation on ia64, GElf already gives us function
    address.
  - turn on main-internal test, it should pass now.


author: Petr Machata <pmachata@redhat.com> - 0.4-1.6
changelog:
  - e_entry patch: use elf's e_entry field instead of looking up _start
    symbol, which failed on stripped binaries.


author: Petr Machata <pmachata@redhat.com> - 0.5-1.0.45svn
changelog:
  - adding upstream (svn) version.  It contains most of patches that we
    already use, and has support for secure PLTs.


author: Petr Machata <pmachata@redhat.com> - 0.5-1.0.45svn.5
changelog:
  - adding .gnu.hash patch to support new ELF hash table section
  - adding testsuite patch to silent some bogus failures


author: Petr Machata <pmachata@redhat.com> - 0.5-5.45svn
changelog:
  - fix plt handling on ppc32 (symval patch)
  - fix attaching to process (attach patch)
  - add fork & exec patches from IBM
  - adjust weak symbol handling (ppc32fc5 patch)


author: Petr Machata <pmachata@redhat.com> - 0.5-7.45svn
changelog:
  - added fork/exec patches, mostly IBM's work
  - added trace-exec tests into suite
  - added ia64 sigill patch


author: Petr Machata <pmachata@redhat.com> - 0.5-11.45svn
changelog:
  - Patch from James M. Leddy, fixes interaction of -c and -o
  - Fix compilation by using -D_LARGEFILE64_SOURCE
  - related: #447404


author: Petr Machata <pmachata@redhat.com> - 0.5-16.45svn.1
changelog:
  - When the value of undefined symbol in PPC 32-bit binary is 0, use
    PPC-specific magic to compute the PLT slots.
  - Fix a problem with tracing stripped binary after execl on
    architectures that need PLT reinitalisation breakpoint.
  - Support tracing of 31-bit binaries with 64-bit ltrace
  - Fix handling of the case where forked child is reported before
    parent's fork event
  - Patch from Supriya Kannery implements fetching 5th and further
    function arguments on s390


author: Petr Machata <pmachata@redhat.com> - 0.5-17.45svn
changelog:
  - Fix demangler resolution.  Libiberty is not in the default install
    anymore, and the fallback configure check for __cxa_demangle doesn't
    take into account the possibility that the symbol might be in
    libstdc++ instead.
  - Resolves: #631069 FTBFS


author: Petr Machata <pmachata@redhat.com> - 0.6.0-1
changelog:
  - Update to 0.6.0
    - Drop most patches
    - Port exec-stripped patch
    - Add return-string-n patch
    - Leave just the testsuite part in ia64-sigill patch


author: Petr Machata <pmachata@redhat.com> - 0.6.0-2
changelog:
  - Add upstream patches for tracing multi-threaded processes, endian
    fixes, and a test suite fixlet


author: Petr Machata <pmachata@redhat.com> - 0.6.0-3
changelog:
  - Add several upstream patches that fix various races in tracing
    multi-threaded processes
  - Add upstream patches for support of tracing across vfork
  - Add upstream patches for ppc: excessive shift, and fetching
    function arguments


author: Petr Machata <pmachata@redhat.com> - 0.6.0-5
changelog:
  - Add upstream patches for initial breakpoint insertion.  This mostly
    fixes tracing on PPC.
  - Resolves: #773050


author: Petr Machata <pmachata@redhat.com> - 0.6.0-6
changelog:
  - If we fail to attach to traced process, check whether deny_ptrace
    isn't enabled.  If yes, warn about it.
  - Resolves: #810973


author: Petr Machata <pmachata@redhat.com> - 0.6.0-11
changelog:
  - Fix detach from sleeping process
  - Add limited support for return from tail call
  - Fix singlestep over atomic instruction sequence on PPC
  - Add extensive upstream patch that implements
    - tracing calls done from DSOs
    - better tools for filtering symbol tables
    - support for tracing PLT calls on PPC64 (not entry points read from .plt)
    - support for PPC32 old-style (BSS) PLT table
  - Drop ppc-shift patch that was superseded by the above
  - Drop demangle patch that hasn't been applied for some time now


author: Petr Machata <pmachata@redhat.com> - 0.6.0-13
changelog:
  - Check -n argument for validity (ltrace-0.6.0-dash-n.patch)
  - Resolves: #818529
  - ltrace-0.6.0-libs-fixes-1.patch
    - Fix double free when process initialization fails for some reason
    - Don't indent first level of calls


