# changelog

author: Brian C. Lane <bcl@redhat.com> 28.14.30-1
changelog:
  - New lorax documentation - 28.14.30 (bcl)
    Related: rhbz#1709594
  - Assert that RuntimeErrors have correct messages (egoode)
    Related: rhbz#1709594
  - More descriptive error for a bad ref in repos.git (egoode)
    Related: rhbz#1709594
  - Add more tests for gitrpm.py (bcl)
    Related: rhbz#1709594
  - lorax-composer: Fix installing files from [[repos.git]] to / (bcl)
    Related: rhbz#1709594
  - Add tests using repos.git in blueprints (bcl)
    Related: rhbz#1709594
  - Move git repo creation into tests/lib.py (bcl)
    Related: rhbz#1709594
  - rpmgit: catch potential errors while running git (bcl)
    Related: rhbz#1709594
  - tests: Add test for Recipe.freeze() function (bcl)
    Related: rhbz#1709594
  - Add repos.git support to lorax-composer builds (bcl)
    Related: rhbz#1709594
  - Add pylorax.api.gitrpm module and tests (bcl)
    Related: rhbz#1709594
  - Add support for [[repos.git]] section to blueprints (bcl)
    Resolves: rhbz#1709594
  - [tests] Handle blueprints in setup_tests/teardown_tests correctly (atodorov)
    Related: rhbz#1714298
  - tests: Set BLUEPRINTS_DIR in all cases (lars)
    Related: rhbz#1714298


author: Brian C. Lane <bcl@redhat.com> 28.14.31-1
changelog:
  - tests: Document Azure setup (atodorov) (atodorov)
  - tests: unskip Azure scenario (atodorov) (atodorov)
  - Support CI testing against a bots project PR (martin) (martin)
  - Makefile: Update bots target for moved GitHub project (sanne.raymaekers)
  - Skip azure, live-iso & qcow2 tests due to infra issues (atodorov)
    Related: rhbz#1724073
  - tests: Add check to make sure the compose actually finished (bcl)
    Related: rhbz#1724073
  - Backport Cockpit CI changes for RHEL 8 (atodorov)
    Related: rhbz#1724073
  - tests: Drop sort from compose types test (bcl)
  - New test: assert toml files in git workspace (atodorov)
  - Use passwd --status for locked root account check (jikortus)
    Related: rhbz#1728571


author: Brian C. Lane <bcl@redhat.com> 28.14.32-1
changelog:
  - tests: Add tests for recipe checking functions (bcl)
    Related: rhbz#1716596
  - lorax-composer: Add basic case check to check_recipe_dict (bcl)
    Related: rhbz#1716596
  - lorax-composer: Add basic recipe checker function (bcl)
    Resolves: rhbz#1716596
  - Add live iso support to s390 (bcl)
    Related: rhbz#1746424
  - Disable some compose types on other architectures (bcl)
    Resolves: rhbz#1751998
  - aarch64: Fix live-iso creation on aarch64 (bcl)
    Resolves: rhbz#1752002


author: Brian C. Lane <bcl@redhat.com> 28.14.33-1
changelog:
  - New lorax documentation - 28.14.33 (bcl)
    Related: rhbz#1761653
  - docs: Increase root filesystem to 2000 in rhel-minimal.ks (bcl)
    Resolves: rhbz#1730937
  - Update ppc64le isolabel to match x86_64 logic (bcl)
    Related: rhbz#1757338
  - set inst.stage2 for ppc64le image (dan)
    Related: rhbz#1757338
  - docs: Override macboot/nomacboot documentation (bcl)
    Resolves: rhbz#1761653
  - tests: Keep beakerlib repo on the VM for tests which need it (atodorov)
    Related: rhbz#1769525
  - tests: unskip Qcow2 and Live-ISO scenarios (atodorov)
    Related: rhbz#1769525
  - tests: Ensure failure if beakerlib results file not found (atodorov)
    Related: rhbz#1769525
  - tests: Documentation updates (atodorov)
    Related: rhbz#1769525
  - tests: Use host repositories for make vm (atodorov)
    Related: rhbz#1769525
  - Remove unused make targets (atodorov)
    Related: rhbz#1769525
  - DRY when setting up, running & parsing results for beakerlib tests (atodorov)
    Related: rhbz#1769525
  - tests: Use journalctl -g to check for failed login (bcl)
    Related: rhbz#1769525
  - tests: Fix check_root_account when used with tar liveimg test (bcl)
    Related: rhbz#1769525
  - tests: Use the same asserts as before (atodorov)
    Related: rhbz#1769525
  - tests: switch to using podman instead of docker (atodorov)
    Related: rhbz#1769525
  - tests: Remove nested vm from tar liveimg kickstart test (bcl)
    Related: rhbz#1769525
  - tests: Use --http0.9 for curl ssh test (bcl)
    Related: rhbz#1769525
  - test: Boot the live-iso faster, and login using ssh key (bcl)
    Related: rhbz#1769525
  - tests: Split testing the image into a separate script (bcl)
    Related: rhbz#1769525
  - test: Split up the test class to allow booting other images (bcl)
    Related: rhbz#1769525
  - [tests] Collect compose logs after each build (atodorov)
    Related: rhbz#1769525
  - [tests] Use a function to wait for compose to finish (jikortus)
    Related: rhbz#1769525
  - [tests] Use functions for starting and stopping lorax-composer (atodorov)
    Related: rhbz#1769525
  - tests: Add kickstart tar installation test (jikortus)
    Related: rhbz#1733975
  - tests: add option to disable kernel command line parameters check (jikortus)
    Related: rhbz#1733975
  - tests: Use a loop to wait for VM and sshd to start (bcl)
    Related: rhbz#1733975
  - tests: Drop an old bug reference (bcl) (bcl)


author: Brian C. Lane <bcl@redhat.com> 28.14.34-1
changelog:
  - lorax-composer: Add cloud-init support to the vhd image (bcl)
    Resolves: rhbz#1754711
  - Add dmidecode on supported architectures (bcl)
    Related: rhbz#1714793


author: Brian C. Lane <bcl@redhat.com> 28.14.35-1
changelog:
  - tests: If TEST_OS isn't specified then match the host OS (atodorov)
    Related: rhbz#1769525
  - tests: enable compose_ext4 test to use CDN repos (jrusz)
    Related: rhbz#1777265
  - Add more lines to .gitignore (jrusz)
    Related: rhbz#1777265
  - Remove all repo files & install composer-cli from host repos (atodorov)
    Related: rhbz#1769525
  - Always remove lorax-composer & composer-cli RPMs before installing them (atodorov)
    Related: rhbz#1769525
  - Always remove existing VM image before building new one (atodorov)
    Related: rhbz#1769525


author: Brian C. Lane <bcl@redhat.com> 28.14.36-1
changelog:
  - composer-cli: Only display the available compose types (bcl)
    Related: rhbz#1751998
  - composer-cli: Return int from handle_api_result not bool (bcl)
    Related: rhbz#1779301
  - Add support for API v1 commands upload, and providers (bcl)
    Resolves: rhbz#1779301


author: Brian C. Lane <bcl@redhat.com> 28.14.37-1
changelog:
  - composer-cli: Add python3-pytoml to composer-cli requirements (bcl)
    Related: rhbz#1779301
  - composer-cli: Remove unneeded % from API WARNING message (bcl)
    Related: rhbz#1779301
  - Use mkisofs for the s390 live-iso template (bcl)
    Related: rhbz#1746424


author: Brian C. Lane <bcl@redhat.com> 28.14.38-1
changelog:
  - composer-cli: Increase DELETE timeout to 120s (bcl)
    Resolves: rhbz#1788461
  - Add test for running composer with --no-system-repos option (jikortus)
    Related: rhbz#1785154


author: Brian C. Lane <bcl@redhat.com> 28.14.39-1
changelog:
  - tests: Enable Elastic Network Adapter support for AWS (atodorov)
    Related: rhbz#1789308
  - AWS test: take into account different instance type for non x86 (atodorov)
    Related: rhbz#1789308
  - lorax-composer: Enable ami on aarch64 (bcl)
    Resolves: rhbz#1789308
  - Add test for canceling a running compose (jrusz)
    Related: rhbz#1788461


author: Brian C. Lane <bcl@redhat.com> 28.14.40-1
changelog:
  - tests: run ssh commands in batch mode (jrusz)
    Related: rhbz#1785154
  - tests: remove --test=2 from compose_sanity (jrusz)
    Related: rhbz#1788461
  - Add tests for metapackages and package name globs (bcl)
    Related: rhbz#1791612
  - tests: Check for cloud-init presence in azure image (jrusz)
    Related: rhbz#1754711


author: Brian C. Lane <bcl@redhat.com> 28.14.41-1
changelog:
  - tests: Add new test to run 'test' and 'check' in cockpit ci (jrusz)
    Related: rhbz#1785154
  - tests: rpm now returns str, drop decode() call (bcl)
    Related: rhbz#1785154
  - tests: Switch to using CentOS8 for the Docker tests (bcl)
    Related: rhbz#1785154
  - tests: Finish switch to using example-development in composer tests (bcl)
    Related: rhbz#1785154
  - tests: this_is_rhel function return true for CentOS or RHEL (bcl)
    Related: rhbz#1785154
  - tests: Disable pylint preexec-fn warning (bcl)
    Related: rhbz#1785154
  - pylint: whitelist the rpm module (bcl)
    Related: rhbz#1785154
  - tests: Use unittest.mock (bcl)
    Related: rhbz#1785154
  - Test & cleanup script for Alibaba cloud (atodorov)
    Related: rhbz#1785154


author: Brian C. Lane <bcl@redhat.com> 28.14.42-1
changelog:
  - lorax: Restore the 98dracut-systemd service files to the install.img (bcl)
    Related: rhbz#1805405
  - lorax: Add eject back into the boot.iso (bcl)
    Related: rhbz#1805405


author: Paul Howarth <paul@city-fan.org> 3:0.88-1
changelog:
  - Update to 0.88
  - Revert to Makefile.PL flow as upstream dropped Build.PL to avoid circular
    dependencies
  - Install into perl directories rather than vendor directories
  - Mark Pod files as %doc


author: Owen Taylor <otaylor@redhat.com> - 2.27.2-1
changelog:
  - Update to 2.27.2
  - Add an explicit dep on gobject-introspection 0.6.5 which is required 
    for the new version


author: Adam Miller <maxamillion@fedoraproject.org> - 2.28.0.20101015git-1
changelog:
  - Added dependency on a git build of gobject-introspect to solve some breakage
  - Also went ahead and made a new git tarball


author: Adam Miller <maxamillion@fedoraproject.org> - 2.29.1-2
changelog:
  - Bumped for new version of mutter and clutter
  - Added version requirement to gjs-devel because of dependency of build


author: Adam Miller <maxamillion@fedoraproject.org> - 2.31.2-2
changelog:
  - Added new version requirements for dependencies based on upstream releases
  - Added new file listings for gnome-shell-clock-preferences binary and .desktop
  - Added gnome-shell man page file listing


author: Owen Taylor <otaylor@redhat.com> - 2.91.1-1
changelog:
  - Update to 2.91.1
  - Add libcroco-devel to BuildRequires, apparently it was getting
    pulled in indirectly before
  - Add libcanberra-devel and pulseaudio-libs-devel BuildRequires


author: Nils Philippsen <nils@redhat.com> - 3.0.0.2-1
changelog:
  - Update to 3.0.0.2 (fixes missing import that was preventing extensions from
    loading.)
  - Update source URL


author: Dan Williams <dcbw@redhat.com> - 3.0.1-4
changelog:
  - Fix initial connections to WPA Enterprise access points (#699014)
  - Fix initial connections to mobile broadband networks


author: Owen Taylor <otaylor@redhat.com> - 3.4.0-2
changelog:
  - Change gnome-shell-favourite-apps-firefox.patch to also patch the JS code
    to handle the transition from mozilla-firefox.desktop to firefox.desktop.
    (#808894, reported by Jonathan Kamens)


author: Florian Müllner <fmuellner@redhat.com> - 3.6.1-2
changelog:
  - Remove avoid-redhat-menus patch

    The standard way of supporting a desktop-specific menu layout is
    to set XDG_MENU_PREFIX (which we made gnome-session do now).


author: Kalev Lember <kalevlember@gmail.com> - 3.9.1-2
changelog:
  - Add missing telepathy-logger runtime dep
  - Depend on gnome-session-xsession so that it gets pulled in for
    typical GNOME installs


author: Florian Müllner <fmuellner@redhat.com> - 3.11.90-3
changelog:
  - Add dependency on gnome-control-center - several panels are referenced
    by a number of menu items


author: Ray Strode <rstrode@redhat.com> 3.15.91-2
changelog:
  - Drop dep on NetworkManager-config-connectivity-fedora
    It's already required by fedora-release-workstation


author: Kalev Lember <klember@redhat.com> - 3.17.4-2
changelog:
  - Create empty directories for extensions and search providers
  - Move desktop file validation to %check section
  - Use make_install macro


author: Florian Müllner <fmuellner@redhat.com> - 3.21.90.1-1
changelog:
  - Update to 3.21.90.1
    (Fixes a corrupt .desktop file that made it from the build directory into
     the 3.21.90 tarball)


author: Adam Jackson <ajax@redhat.com> 1.2.2-2
changelog:
  - libvorbis-1.2.2-svn16228.patch: Backport a fix from pre-1.2.3 to hopefully
    fix small sound file playback. (#505610)


author: Jindrich Novy <jnovy@redhat.com> 1.3.2-2
changelog:
  - ship documentation only in -doc subpackage and only license
    in -devel (#540634) - thanks to Edward Sheldrake
  - -devel-doc subpackage requires -devel


author: Ville Skyttä <ville.skytta@iki.fi> - 1:1.3.3-3
changelog:
  - Run test suite during build.
  - Fix doc file permissions and duplicate doc dir ownership.
  - rpmlint warning fixes.


author: Paul Howarth <paul@city-fan.org> - 0.103004-2
changelog:
  - Add test suite patch to support building with Test::More < 0.88 so that we
    can build for EPEL-5, only applying the patch when necessary
  - Drop redundant versioned requirements of XXX >= 0.000
  - Drop BR: perl ≥ 1:5.6.0; even EL-3 could have satisfied that
  - BR: perl(base) and perl(Carp), which could be dual-lived
  - BR: perl(Test::Pod) for full test coverage
  - Run the release tests too
  - Don't need to remove empty directories from buildroot
  - Don't use macros for commands
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Drop %defattr, redundant since rpm 4.4
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.103005-1
changelog:
  - Update to 0.103005
    - Add MPL 2.0
  - BR: perl(File::Temp)
  - Release tests moved to xt/
  - Update patch for building with old Test::More versions


author: Paul Howarth <paul@city-fan.org> - 0.103007-1
changelog:
  - Update to 0.103007
    - Fix regex to allow guessing from meta things like perl_5
    - Replace 'use base' with 'use parent'
  - BR: perl(Try::Tiny) for the test suite
  - Update patch for building with old Test::More versions


author: Paul Howarth <paul@city-fan.org> - 0.103008-1
changelog:
  - Update to 0.103008
    - Faster!
    - Add new_from_short_name to LicenseUtils for spdx.org-style short names
    - Avoid double trailing dots in expanded licenses
    - Fix some errors in (3-clause) BSD license text
    - The 2-clause BSD ("FreeBSD") license no longer incorrectly puts "FreeBSD"
      as the owner in the license full text
  - Update patch for building with old Test::More versions


author: Paul Howarth <paul@city-fan.org> - 0.103009-1
changelog:
  - Update to 0.103009
    - Updated FSF mailing address in license text for GFDL version 1.2, GPL
      versions 1 and 2, and LGPL 2.1
  - Update patch for building with old Test::More versions
  - Don't try to run the extra tests with EL-5 or EL-6


author: Paul Howarth <paul@city-fan.org> - 0.103010-1
changelog:
  - Update to 0.103010
    - Fix guess_license_from_pod's return on GPL licenses
  - Update patch for building with old Test::More versions


author: William Poteat <wpoteat@redhat.com> 0.25.5-1
changelog:
  - Prepare downstream release (wpoteat@redhat.com)
  - Patch to exclude AHV from RPM (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.25.7-1
changelog:
  - 1499679: Check for duplicates in conf file; ENT-249 (jhnidek@redhat.com)
  - 1720154: Provide SYSTEM_UUID_FACT (piotr.kliczewski@gmail.com)
  - 1516120: Handling for incorrect config section headers (wpoteat@redhat.com)
  - 1722560: Make heartbeat more robust (jhnidek@redhat.com)
  - 1416298: Use unique guest attribute for state tracking (wpoteat@redhat.com)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Version 0.22
  - add explicit check for required glib2 version before we do the build,
    so we don't end up with bad RPMs on --nodeps builds
  - PreReq the glib2_version version, instead of 1.3.8 hardcoded that 
    no one had updated recently


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Up FreeType version to deal with FreeType-2.0.x / 2.1.x \
    ABI changes for pango's OpenType code.


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Remove fixed-ltmain.sh, relibtoolize; to fix relink problems without 
  - Fix bug causing hex boxes to be misrendered
    leaving RPATH (#66005)
  - For FT2 backend, supply FT_LOAD_NO_BITMAP to avoid problems with 
    fonts with embedded bitmaps (#67851)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Fix linked list manipulation problem that was causing hang for anaconda
  - Fix warning from loading mini-fonts with context == NULL


author: Havoc Pennington <hp@redhat.com>
changelog:
  - explicitly require pangoxft to be built, so we catch situations such
    as xft.pc moving to /usr/X11R6
  - also add /usr/X11R6/lib/pkgconfig to PKG_CONFIG_PATH as a temporary 
    hack


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Patch from CVS to synthesize GDEF tables for fonts
    without them, like the Kacst fonts in fonts-arabic


author: Tim Powers <timp@redhat.com> 1.2.1-3
changelog:
  - remove deps on Xft and Xft-devel since XFree86 no longer has the
    virtual prvodes. Instead, require XFree86-devel > 4.2.99


author: Owen Taylor <otaylor@redhat.com> 1.2.5-3.0
changelog:
  - Package pango-querymodules as pango-querymodules-{32,64}; look for 
    pango.modules in an architecture-specific directory.
    (Fixes #111511, Justin M. Forbes)


author: Owen Taylor <otaylor@redhat.com> 1.4.0-2
changelog:
  - Fix location for modules file on ppc/ppc64 (#114399)
  - Make the spec file check to avoid further mismatches


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-2
changelog:
  - Add patch from CVS to fix display of U+3000 (#132203,  
    reported upstream by Suresh Chandrasekharan, Federic Zhang)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-4
changelog:
  - Move place where we compute fontset metrics to fix problems with line 
    height in CJK locales (#131218)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-5
changelog:
  - Fix problem in the last patch where we weren't getting the metrics from the 
    right font description (#136428, Steven Lawrance)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-7
changelog:
  - Fix problem with pango_layout_get_attributes returning one too few items
    (Needed to fix problems mentioned in #135656, 
    http://bugzilla.gnome.org/show_bug.cgi?id=155912)


author: Behdad Esfahbod <besfahbo@redhat.com> - 1.15.3-3
changelog:
  - Move pango.modules generation to posttrans, to make sure modules available
    in an older version but not this one are removed.
  - Resolves #222217


author: Behdad Esfahbod <besfahbo@redhat.com> - 1.15.3-4
changelog:
  - Undo the posttrans change.  That's a no no.  We now regenerate the module
    file in postun if there are any other pango versions left.  This should
    take care of the problem in the future.


author: Behdad Esfahbod <besfahbo@redhat.com> - 1.15.4-1
changelog:
  - Update to 1.15.4
  - [Build]Require libthai[-devel]
  - Require pkgconfig in -devel
  - Remove "static libs" from -devel description, since we don't ship them.


author: Matthias Clasen <mclasen@redhat.com> - 1.32.1-1
changelog:
  - Update to 1.32.1
  - Move module cache file to /usr/lib64/pango/1.8.0/modules.cache
  - No more /etc/pango


author: Akira TAGOH <tagoh@redhat.com> - 1.35.2-2
changelog:
  - Fix duplicate file list for modules.cache
  - s/%define/%global/g
  - Fix bogus date in %changelog
  - Do not suppress the detailed build log.


author: Kalev Lember <kalevlember@gmail.com> - 1.37.0-1
changelog:
  - Update to 1.37.0
  - Remove modules support from packaging as it's gone upstream
  - Use license macro for the COPYING file


author: Paul Howarth <paul@city-fan.org> - 0.004-1
changelog:
  - Update to 0.004:
    - Generated from ADAMK/YAML-Tiny-1.50.tar.gz
  - BR: perl(Test::Version) for additional test coverage
  - Update patch for building with ExtUtils::MakeMaker < 6.30
  - Add patch to support building with Test::More < 0.88
  - Add patch to fix operation with Scalar::Util < 1.18


author: Paul Howarth <paul@city-fan.org> - 0.005-1
changelog:
  - Update to 0.005:
    - Fix documentation to clarify that users are responsible for UTF-8
      encoding/decoding


author: Paul Howarth <paul@city-fan.org> - 0.006-1
changelog:
  - Update to 0.006:
    - Set back configure_requires prerequisite for ExtUtils::MakeMaker
      from 6.30 to 6.17
  - BR: perl(Test::Requires)
  - BR: perl(Test::Spelling), perl(Pod::Wordlist::hanekomu) and aspell-en to
    enable the spell checker test
  - Drop patch for building with old ExtUtils::MakeMaker versions, no longer
    needed
  - Drop support for soon-to-be-EOL RHEL-4:
    - Drop %defattr, redundant since rpm 4.4
  - Update patch for building with Test::More < 0.88


author: Paul Howarth <paul@city-fan.org> - 0.008-1
changelog:
  - Update to 0.008:
    - Generated from ADAMK/YAML-Tiny-1.51.tar.gz
    - Updated from YAML-Tiny to fix compatibility with older Scalar::Util
  - Drop upstreamed patch for old Scalar::Util versions
  - Don't need to remove empty directories from the buildroot


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.008-2
changelog:
  - Don't BR: Pod::Wordlist::hanekomu for RHEL-7+ builds; RHEL package cannot
    have buildreq from EPEL
  - Add missing Data::Dumper dependency


author: Paul Howarth <paul@city-fan.org> - 0.008-7
changelog:
  - Run the extra tests in a separate test run, and only when not bootstrapping
  - Don't BR: perl(Test::Spelling) with RHEL ≥ 7 as we don't have the other
    dependencies needed do the spell check test


author: Paul Howarth <paul@city-fan.org> - 0.008-12
changelog:
  - Never BR: perl(Test::Version) for EL builds as perl(version) is too old
    prior to EL-7 and this package is included in RHEL ≥ 7 but Test::Version
    is only in EPEL


author: Paul Howarth <paul@city-fan.org> - 0.010-1
changelog:
  - Update to 0.010:
    - Generated from ETHER/YAML-Tiny-1.55.tar.gz
    - Makefile.PL will use UNINST=1 on old perls that might have an old version
      incorrectly installed into the core library path
    - Updated Makefile.PL logic to support PERL_NO_HIGHLANDER
  - Drop redundant BRs: perl(Pod::Wordlist::hanekomu), perl(Test::Requires),
    perl(Test::Spelling) and aspell-en
  - Add new test dependencies perl(IO::Handle) and perl(IPC::Open3)
  - Build with UNINST=0 to avoid build failures as we can't remove the system
    version of the package when building an rpm for a new version
  - Update patch for building with old Test::More, and add new patch to support
    building with Test::More < 0.94
  - Don't run the extra tests in EPEL as we don't have Test::Version there


author: Paul Howarth <paul@city-fan.org> - 0.011-1
changelog:
  - Update to 0.011:
    - Generated from ETHER/YAML-Tiny-1.60.tar.gz
  - Give up trying to support EPEL (test suite now requires Test::More 0.99)


author: Zeeshan Ali <zeenix@redhat.com> - 0.2.1-1
changelog:
  - Fix and simplify udev rule.
  - Fedora:
    - Fix minimum RAM requirements for F16 and F17.
  - Add data on:
    - Fedora 18
    - GNOME 3.6
    - Ubuntu 12.10
  - Fixes to doc build.
  - Install script:
    - Add get_config_param method.
    - Differenciate between expected/output script names.
    - Add more utility functions.
  - Add 'installer-reboots' parameter to medias.
  - osinfo-detect does not die of DB loading errors anymore.
  - More type-specific entity value getters/setters.
  - Fixe and update RNG file.
  - Add 'subsystem' property/attribute to devices.


author: Christophe Fergeau <cfergeau@redhat.com> 0.2.5-1
changelog:
  - New upstream release 0.2.5
  - Disable udev rule as it's no longer required with newer
    systemd/util-linux


author: Christophe Fergeau <cfergeau@redhat.com> - 0.2.5-2
changelog:
  - BuildRequires /usr/bin/pod2man as this will automatically pick the right
    package rather than conditionally requiring a package that is only
    available in f19+
  - Do not Requires: udev when building libosinfo without its udev rule
    (which is done on f19+)


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-3
changelog:
  - Resolves: rhbz#1727843 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: Eric Smith <brouhaha@fedoraproject.org> 2.09.1-3
changelog:
  - Run _build_tables.py to build the lextab.py and yacctab.py; otherwise
    they have to be regenerated at runtime for no benefit.


author: Eric Smith <brouhaha@fedoraproject.org> 2.09.1-4
changelog:
  - Upstream repository is now on github.
  - Fix rpmlint strange-permission complaint.
  - Rename patches, Source1 to all start with pycparser-{version}, to
    simplify updating patches for future upstream releases.


author: Eric Smith <brouhaha@fedoraproject.org> 2.09.1-5
changelog:
  - Renumbered Fedora-specific Patch1 to Patch100
  - Added new Patch1 to fix table generation when the build system
    already has a python-pycparser package installed.
  - Submitted Patch0 and Patch1 as upstream issues.
  - Added comments about patches.


author: Christian Heimes <cheimes@redhat.com> - 2.14-18
changelog:
  - Add build dependency on cpp for unit tests
  - Add dependency on python-ply version to prevent "yacc table file version is out of date"
  - Fixes RHBZ#1668230


author: Miro Hrončok <mhroncok@redhat.com> - 2.14-23
changelog:
  - Subpackage python2-ply has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 7.18.1-1
changelog:
  - Update to 7.18.1
  - Disable tests because it's not testing the built library, it's trying to
    test an installed library.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 7.18.2-1
changelog:
  - Update to 7.18.2
  - Thanks to Ville Skyttä re-enable the tests and fix a minor problem
    with the setup.py. (Bug # 45400)


author: Kamil Dudka <kdudka@redhat.com> - 7.19.0-15
changelog:
  - allow to return -1 from the write callback (#857875) 
  - remove the patch for curl-config --static-libs no longer needed
  - run the tests against the just built pycurl, not the system one


author: Kamil Dudka <kdudka@redhat.com> - 7.19.0-16.20120408git9b8f4e38
changelog:
  - sync with upstream 9b8f4e38 (fixes #928370)
  - add the GLOBAL_ACK_EINTR constant to the list of exported symbols (#920589)
  - temporarily disable tests/multi_socket_select_test.py


author: Kamil Dudka <kdudka@redhat.com> - 7.21.5-3
changelog:
  - remove explicit dependency on keyutils-libs (reported by rpmlint)
  - update FSF address in COPYING-LGPL (detected by rpmlint)


author: Kamil Dudka <kdudka@redhat.com> - 7.43.0.2-4
changelog:
  - fix populating list of decoded strings (#1792213)
  - fix programming mistakes detected by static analyzers (#1666003)


author: Adam Jackson <ajax@redhat.com> 0.7.39-2
changelog:
  - Rebuild to break bogus libpng dependency
  - Fix summaries for gtk3 subpackages to not talk about gtk2


author: Hans de Goede <hdegoede@redhat.com> - 0.11-4
changelog:
  - Add missing BuildRequires: usbutils, so that we get proper USB device
    descriptions in the USB device selection menu


author: Christophe Fergeau <cfergeau@redhat.com> - 0.11-5
changelog:
  - Fix build on PPC
  - Remove ExclusiveArch. While spice-gtk will build on ARM and PPC, it
    hasn't been tested on these arch, so there may be some bugs.


author: Christophe Fergeau <cfergeau@redhat.com> 0.25-6
changelog:
  - Run make install in gtk3 build after doing so in gtk2 build, otherwise
    we'll end up packaging gtk2 builds of spicy et al in spice-client-tools
    instead of gtk3 ones (#1145829)


author: Christophe Fergeau <cfergeau@redhat.com> 0.28-2
changelog:
  - Add upstream patch fixing an USB redirection crash
    Resolves: rhbz#1182226
  - Adjust build requires to new naming of phodav package


author: Christophe Fergeau <cfergeau@redhat.com> 0.32-2
changelog:
  - Add upstream patches fixing USB event thread leak
    Resolves: rhbz#1217202 (virt-manager)
    May help with rhbz#1338042 (gnome-boxes)


author: Cole Robinson <crobinso@redhat.com> - 0.33-5
changelog:
  - channel-usbredir: Fix crash on channel-up. Resolves: rhbz#1399838
  - usbutils no longer ships usb.ids, it is hwdata now, set path manually.
  - Backport fixes for "Couldn't find current GL or GLX context" Resolves: rhbz#1461802


author: Radek Vykydal <rvykydal@redhat.com> - 29.19.0.42-1
changelog:
  - Require blivet with flags.protect_cdrom support (rvykydal)
    Resolves: rhbz#1715344
  - Do not try to mount cdrom source also if it has been mounted in dracut.
    (rvykydal)
    Resolves: rhbz#1715344
  - Be more strict when checking for mounted dvd source. (rvykydal)
    Resolves: rhbz#1715344
  - Protect cdroms during tree population for image installs. (rvykydal)
    Resolves: rhbz#1715344
  - Use rhel-8.0 zanata version. (rvykydal)
    Related: rhbz#1715344
  - Rename zanata rhel-devel version (rvykydal)
    Related: rhbz#1715344


author: Jeremy Katz <katzj@redhat.com> 0.99.8-1
changelog:
  - 0.99.8
  - add some buildrequires
  - fixup to build with openssl 0.9.7
  - now includes a pop3 daemon (off by default)
  - clean up description and %preun
  - add dovecot user (uid/gid of 97)
  - add some buildrequires
  - move the ssl cert to %{_datadir}/ssl/certs
  - create a dummy ssl cert in %post
  - own /var/run/dovecot
  - make the config file a source so we get default mbox locks of fcntl


author: Jeremy Katz <katzj@redhat.com> 0.99.9.1-1
changelog:
  - update to 0.99.9.1
  - add patch from upstream to fix potential bug when fetching with 
    CR+LF linefeeds
  - tweak some things in the initscript and config file noticed by the 
    fedora folks


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.1
changelog:
  - 0.99.10-rc1
  - add fix for ssl detection
  - add zlib-devel to BuildRequires
  - change pam service name to dovecot
  - include pam config


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.2
changelog:
  - 0.99.10-rc2 (includes ssl detection fix)
  - a few tweaks from fedora
    - noreplace the config file
    - configure --with-ldap to get LDAP enabled


author: Jeremy Katz <katzj@redhat.com> 0.99.10-7
changelog:
  - another patch from upstream to fix returning invalid data on partial 
    BODY[part] fetches
  - patch to avoid confusion of draft/deleted in indexes


author: Warren Togami <wtogami@redhat.com> 0.99.10.4-4
changelog:
  - default auth config that is actually usable
  - Timo Sirainen (author) suggested functionality fixes
    maildir, imap-fetch-body-section, customflags-fix


author: John Dennis <jdennis@redhat.com> - 0.99.10.6-1
changelog:
  - bring up to date with upstream,
    recent change log comments from Timo Sirainen were:
    SHA1 password support using OpenSSL crypto library
    mail_extra_groups setting
    maildir_stat_dirs setting
    Added NAMESPACE capability and command
    Autocreate missing maildirs (instead of crashing)
    Fixed occational crash in maildir synchronization
    Fixed occational assertion crash in ioloop.c
    Fixed FreeBSD compiling issue
    Fixed issues with 64bit Solaris binary


author: John Dennis <jdennis@redhat.com> 0.99.10.7-1,FC3,1
changelog:
  - enable postgres and mySQL in build
  - fix configure to look for mysql in alternate locations
  - nuke configure script in tar file, recreate from configure.in using autoconf

  - bring up to latest upstream, which included:
  - Added outlook-pop3-no-nuls workaround to fix Outlook hang in mails with NULs.
  - Config file lines can now contain quoted strings ("value ")
  - If client didn't finish downloading a single mail in 30 seconds,
    Dovecot closed the connection. This was supposed to work so that
    if client hasn't read data at all in 30 seconds, it's disconnected.
  - Maildir: LIST now doesn't skip symlinks


author: John Dennis <jdennis@redhat.com> 0.99.10.9-1,FC3,1
changelog:
  - bring up to date with latest upstream, fixes include:
  - LDAP support compiles now with Solaris LDAP library
  - IMAP BODY and BODYSTRUCTURE replies were wrong for MIME parts which
    didn't contain Content-Type header.
  - MySQL and PostgreSQL auth didn't reconnect if connection was lost
    to SQL server
  - Linking fixes for dovecot-auth with some systems
  - Last fix for disconnecting client when downloading mail longer than
    30 seconds actually made it never disconnect client. Now it works
    properly: disconnect when client hasn't read _any_ data for 30
    seconds.
  - MySQL compiling got broken in last release
  - More PostgreSQL reconnection fixing


author: John Dennis <jdennis@redhat.com> 0.99.11-1.FC3.1
changelog:
  - bring up to latest upstream,
    comments from Timo Sirainen <tss at iki.fi> on release v0.99.11 2004-09-04  
    + 127.* and ::1 IP addresses are treated as secured with
      disable_plaintext_auth = yes
    + auth_debug setting for extra authentication debugging
    + Some documentation and error message updates
    + Create PID file in /var/run/dovecot/master.pid
    + home setting is now optional in static userdb
    + Added mail setting to static userdb
    - After APPENDing to selected mailbox Dovecot didn't always notice the
      new mail immediately which broke some clients
    - THREAD and SORT commands crashed with some mails
    - If APPENDed mail ended with CR character, Dovecot aborted the saving
    - Output streams sometimes sent data duplicated and lost part of it.
      This could have caused various strange problems, but looks like in
      practise it rarely caused real problems.


author: John Dennis <jdennis@redhat.com> 0.99.11-7.devel
changelog:
  - add UW to Dovecot migration documentation and scripts, bug #139954
    fix SSL documentation and scripts, add missing documentation, bug #139276


author: John Dennis <jdennis@redhat.com> 0.99.11-8.devel
changelog:
  - fix bug #129539, dovecot starts too early,
    set chkconfig to 65 35 to match cyrus-imapd
  - also delete some old commented out code from SSL certificate creation


author: John Dennis <jdennis@redhat.com> 0.99.13-1.devel
changelog:
  - bring up to date with latest upstream, 0.99.13, bug #143707
    also fix bug #14462, bad dovecot-uid macro name


author: John Dennis <jdennis@redhat.com> 0.99.13-2.devel
changelog:
  - make postgres & mysql conditional build
  - remove execute bit on migration example scripts so rpm does not pull
    in additional dependences on perl and perl modules that are not present
    in dovecot proper.
  - add REDHAT-FAQ.txt to doc directory


author: John Dennis <jdennis@redhat.com> 0.99.13-3.devel
changelog:
  - fix bug #145214, force mbox_locks to fcntl only
  - fix bug #145241, remove prereq on postgres and mysql, allow rpm auto
    dependency generator to pick up client lib dependency if needed.


author: John Dennis <jdennis@redhat.com> - 0.99.14-1.fc4
changelog:
  - fix bug #147874, update to 0.99.14 release
    v0.99.14 2005-02-11  Timo Sirainen <tss at iki.fi>
    - Message address fields are now parsed differently, fixing some
      issues with spaces. Affects only clients which use FETCH ENVELOPE
      command.
    - Message MIME parser was somewhat broken with missing MIME boundaries
    - mbox: Don't allow X-UID headers in mails to override the UIDs we
      would otherwise set. Too large values can break some clients and
      cause other trouble.
    - passwd-file userdb wasn't working
    - PAM crashed with 64bit systems
    - non-SSL inetd startup wasn't working
    - If UID FETCH notices and skips an expunged message, don't return
      a NO reply. It's not needed and only makes clients give error
      messages.


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2
changelog:
  - new upstream version, hopefully fixes #173928, #163550
  - fix #168866, use install -p to install documentation


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.3
changelog:
  - change the compiled-in defaults and adjust the default's configfile
    commented-out example settings to match compiled-in defaults,
    instead of changing the defaults only in the configfile, as per #179432
  - fix #179574 by providing a default uidl_format for pop3
  - half-fix #179620 by having plaintext auth enabled by default... this
    needs more thinking (which one we really want) and documentation
    either way


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.5
changelog:
  - fix #182240 by looking in lib64 for libs first and then lib
  - fix comment #1 in #182240 by copying over the example config files
    to documentation directory


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta8.2
changelog:
  - put back pop3_uidl_format default that got lost
    in the beta2->beta7 upgrade (would cause pop3 to not work
    at all in many situations)


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc2
changelog:
  - update to latest upstream release candidate
  - disable inotify for now, doesn't build -- this needs fixing though


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc7
changelog:
  - update to latest upstream release candidate, should fix occasional
    hangs and mbox issues... INBOX. namespace is still broken though
  - do not run over symlinked certificates in new locations on upgrade


author: Tomas Janousek <tjanouse@redhat.com> - 1.0-1.rc15
changelog:
  - update to latest upstream, fixes a few bugs, plus a security
    vulnerability (#216508, CVE-2006-5973)


author: Tomas Janousek <tjanouse@redhat.com> - 1.0.0-11.7
changelog:
  - specfile merge from 145241 branch
      - new sql split patch
      - support for not building all sql modules
      - split sql libraries to separate packages


author: Dan Horak <dan[at]danny.cz> - 1:1.0.13-8
changelog:
  - update scriptlets to follow UsersAndGroups guideline
  - remove support for upgrading from version < 1.0 from scriptlets
  - Resolves: #448095


author: Dan Horak <dan[at]danny.cz> - 1:1.0.14-1
changelog:
  - update to upstream version 1.0.14
  - remove setcred patch (use of setcred must be explictly enabled in config)


author: Dan Horak <dan[at]danny.cz> - 1:1.1.0-1
changelog:
  - update to upstream version 1.1.0
  - update sieve plugin to 1.1.5
  - remove unnecessary patches
  - enable ldap and gssapi plugins
  - change ownership of dovecot.conf (Resolves: #452088)


author: Dan Horak <dan[at]danny.cz> - 1:1.1.2-1
changelog:
  - update to upstream version 1.1.2
  - final solution for #445200 (add /etc/sysconfig/dovecot for start-up options)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.6-1
changelog:
  - update to upstream version 1.1.6
  - change permissions of deliver and dovecot.conf to prevent possible password exposure


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.7-2
changelog:
  - revert changes from 1:1.1.6-2 and 1:1.1.6-1
  - password can be stored in different file readable only for root 
    via !include_try directive


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.11-1
changelog:
  - updated to 1.1.11
  - IMAP: PERMANENTFLAGS list didn't contain \*, causing some clients
    not to save keywords.
  - auth: Using "username" or "domain" passdb fields caused problems
    with cache and blocking passdbs in v1.1.8 .. v1.1.10.   
  - userdb prefetch + blocking passdbs was broken with non-plaintext
    auth in v1.1.8 .. v1.1.10.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.1-1
changelog:
  - updated to 1.2.1
  - GSSAPI authentication is fixed (#506782)
  - logins now fail if home directory path is relative, because it was 
    not working correctly and never was expected to work
  - sieve and managesieve update


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.2-1.20090728snap
changelog:
  - updated to post 1.2.2 snapshot (including post release GSSAPI fix)
  - Fixed "corrupted index cache file" errors
  - IMAP: FETCH X-* parameters weren't working.
  - Maildir++ quota: Quota was sometimes updated wrong
  - Dovecot master process could hang if it received signals too rapidly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.3-1
changelog:
  - updated: dovecot 1.2.3, managesieve 0.11.8, sieve 0.1.11
  - Mailbox names with control characters can't be created anymore.
    Existing mailboxes can still be accessed though.
  - Allow namespace prefix to be opened as mailbox, if a mailbox
    already exists in the root dir.
  - Maildir: dovecot-uidlist was being recreated every time a mailbox
    was accessed, even if nothing changed.
  - listescape plugin was somewhat broken
  - ldap: Fixed hang when >128 requests were sent at once.
  - fts_squat: Fixed crashing when searching virtual mailbox.
  - imap: Fixed THREAD .. INTHREAD crashing.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.4-1
changelog:
  - updated: dovecot 1.2.4, managesieve 0.11.9, sieve 0.1.12
  - fixed a crash in index file handling
  - fixed a crash in saving messages where message contained a CR
    character that wasn't followed by LF
  - fixed a crash when listing shared namespace prefix
  - sieve: implemented the new date extension. This allows matching
    against date values in header fields and the current date at
    the time of script evaluation
  - managesieve: reintroduced ability to abort SASL with "*" response


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.5-1
changelog:
  - updated to dovecot 1.2.5
  - Authentication: DIGEST-MD5 and RPA mechanisms no longer require
    user's login realm to be listed in auth_realms. It only made
    configuration more difficult without really providing extra security.
  - zlib plugin: Don't allow clients to save compressed data directly.
    This prevents users from exploiting (most of the) potential security
    holes in zlib/bzlib.
  - fix index file handling that could have caused an assert-crash
  - IMAP: Fixes to QRESYNC extension.
  - deliver: Don't send rejects to any messages that have Auto-Submitted
    header. This avoids emails loops.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.6-1
changelog:
  - dovecot updated to 1.2.6
  - Added authtest utility for doing passdb and userdb lookups.
  - login: ssl_security string now also shows the used compression.
  - quota: Don't crash with non-Maildir++ quota backend.
  - imap proxy: Fixed crashing with some specific password characters.
  - fixed broken dovecot --exec-mail.
  - Avoid assert-crashing when two processes try to create index at the
    same time.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.6-3
changelog:
  - sieve updated to 0.1.13 which brings these changes:
  - Body extension: implemented proper handling of the :raw transform
    and added various new tests to the test suite. However, :content
    "multipart" and :content "message/rfc822" are still not working.
  - Fixed race condition occuring when multiple instances are saving the
    same binary (patch by Timo Sirainen).
  - Body extension: don't give SKIP_BODY_BLOCK flag to message parser,
    we want the body!
  - Fixed bugs in multiscript support; subsequent keep actions were not
    always merged correctly and implicit side effects were not always
    handled correctly.
  - Fixed a segfault bug in the sieve-test tool occuring when compile
    fails.
  - Fixed segfault bug in action procesing. It was triggered while
    merging side effects in duplicate actions.
  - Fixed bug in the Sieve plugin that caused it to try to stat() a NULL
    path, yielding a 'Bad address' error.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.7-1
changelog:
  - updated to dovecot 1.2.7
  - add man pages
  - IMAP: IDLE now sends "Still here" notifications to same user's
    connections at the same time. This hopefully reduces power usage
    of some mobile clients that use multiple IDLEing connections.
  - IMAP: If imap_capability is set, show it in the login banner.
  - IMAP: Implemented SORT=DISPLAY extension.
  - Login process creation could have sometimes failed with epoll_ctl()
    errors or without epoll probably some other strange things could
    have happened.
  - Maildir: Fixed some performance issues
  - Maildir: Fixed crash when using a lot of keywords.
  - Several fixes to QRESYNC extension and modseq handling
  - mbox: Make sure failed saves get rolled back with NFS.
  - dbox: Several fixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.9-1
changelog:
  - updated to 1.2.9
  - maildir: When saving, filenames now always contain ,S=<size>.
    Previously this was done only when quota plugin was loaded. It's
    required for zlib plugin and may be useful for other things too.
  - maildir: v1.2.7 and v1.2.8 caused assert-crashes in
    maildir_uidlist_records_drop_expunges()
  - maildir_copy_preserve_filename=yes could have caused crashes.
  - Maildir++ quota: % limits weren't updated when limits were read
    from maildirsize.
  - virtual: v1.2.8 didn't fully fix the "lots of mailboxes" bug
  - virtual: Fixed updating virtual mailbox based on flag changes.
  - fts-squat: Fixed searching multi-byte characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-1
changelog:
  - updated to 1.2.10
  - %variables now support %{host}, %{pid} and %{env:ENVIRONMENT_NAME}
    everywhere.
  - LIST-STATUS capability is now advertised
  - maildir: Fixed several assert-crashes.
  - imap: LIST "" inbox shouldn't crash when using namespace with
    "INBOX." prefix.
  - lazy_expunge now ignores non-private namespaces.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-2
changelog:
  - updated sive and managesieve
  - Added preliminary support for Sieve plugins and added support for
    installing Sieve development headers
  - Variables extension: added support for variable namespaces.
  - Added configurable script size limit. Compiler will refuse to
    compile files larger than sieve_max_script_size.
  - Fixed a bug in the i;ascii-numeric comparator. If one of the
    strings started with a non-digit character, the comparator would
    always yield less-than.
  - Imap4flags extension: fixed bug in removeflag: removing a single
    flag failed due to off-by-one error (bug report by Julian Cowley).
  - Fixed parser recovery. In particular cases it would trigger spurious
    errors after an initial valid error and sometimes additional errors
    were inappropriately ignored.
  - Implemented ManageSieve QUOTA enforcement.
  - Added MAXREDIRECTS capability after login.
  - Implemented new script name rules specified in most recent
    ManageSieve draft.
  - Fixed assertion failure occuring with challenge-response SASL
    mechanisms.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-3
changelog:
  - merged dovecot-sieve and dovecot-managesieve into dovecot-pigeonhole
  - merged dovecot-sqlite, dovecot-gssapi and dovecot-ldap into dovecot


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.11-1
changelog:
  - updated to 1.2.11
  - mbox: Message header reading was unnecessarily slow. Fetching a
    huge header could have resulted in Dovecot eating a lot of CPU.
    Also searching messages was much slower than necessary.
  - maildir: Reading uidlist could have ended up in an infinite loop.
  - IMAP IDLE: v1.2.7+ caused extra load by checking changes every
    0.5 seconds after a change had occurred in mailbox


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.4.beta4.20100406
changelog:
  - updated to snapshot 20100406
  - auth: If userdb lookup fails internally, don't cache the result.
  - Added support for userdb lookup to fail with a reason
  - sdbox: mailbox_update() could have changed UIDVALIDITY incorrectly
  - layout=maildir++: Fixed deleting mailboxes with mailbox=file storages
  - Fixed potential problems with parsing invalid address groups.
  - dsync: Don't repeatedly try to keep opening the same failing mailbox
  - lib-storage: Don't crash if root mail directory isn't given.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.5.beta4.20100414
changelog:
  - add make check
  - updated to snapshot 20100414
  - config: Added nn- prefix to *.conf files so the sort ordering makes more sense
  - lib-master: Log an error if login client disconnects too early
  - mdbox: If purging found corrupted files, it didn't auto-rebuild storage
  - lib-storage: Added support for searching save date
  - and more...
  - pigeonhole updated:
  - Mailbox extension: fixed memory leak in the mailboxexists test
  - added login failure handler


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.6.beta4.20100421
changelog:
  - updated to snapshot 20100421
  - mdbox: Purge crashed if it purged all messages from a file
  - lib-storage: Shared namespace's prefix_len wasn't updated after prefix was truncated
  - imap-quota: Iterate quota roots only once when replying to GETQUOTAROOT
  - idle: Do cork/uncork when sending "OK Still here" notification
  - login: If proxy returns ssl=yes and no port, switch port to imaps/pop3s


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.7.beta4.20100427
changelog:
  - updated to snapshot 20100427
  - doveconf <setting name> now prints only the one setting's value
  - mdbox: Automatically delete old temp.* files from storage/ directory
  - mdbox: use flock locking by default


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.8.beta4.20100505
changelog:
  - pigeonhole and dovecot updated to snapshot 20100505
  - mdbox: Avoid rebuilding storage if another process already did it
  - lib-storage: Fixed () sublists in IMAP SEARCH parser
  - example-config: auth-checkpassword include wasn't listed in 10-auth.conf
  - doveadm: Added search command
  - lib-master: Don't crash after timeouting an auth-master request
  - master: If inet listener uses DNS name, which returns multiple IPs, 
    listen in all of them


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.13.beta5.20100529
changelog:
  - dovecot and pigeonhole updated
  - enable solr fulltext search
  - master: Fixed crash on config reload
  - lib-storage: Don't assert-crash when copying a mail fails


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.14.beta5.20100610
changelog:
  - dovecot updated 
  - lib-storage: Fixed accessing uncommitted saved mails with dsync
  - example-config: Moved ACL and quota settings to a separate .conf files
  - dbox, mdbox: Fixed race conditions when creating mailboxes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.15.beta6.20100626
changelog:
  - updated dovecot, pigeonhole and man pages
  - moved disable_plaintext_auth to 10-auth.conf
  - mdbox: Fixed assert-crash on storage rebuild if file got lost
  - lib-charset: Don't assert-crash when iconv() skips lots of invalid input
  - master: Fixed crash on deinit (maybe also on reload)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.17.rc2.20100712
changelog:
  - dovecot and pigeonhole updated
  - fixed a crash with empty mail_plugins
  - fixed sharing INBOX to other users
  - director+LMTP proxy wasn't working correctly
  - v1.x config parser failed with some settings if pigeonhole wasn't installed.
  - virtual: If non-matching messages weren't expunged within same session,
    they never got expunged.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.18.rc2.20100716
changelog:
  - dovecot and pigeonhole updated
  - enabled pigeonhole's build time test suite
  - acl: Fixed crashon FS layout with non-default hierarchy separator
  - dbox renamed to sdbox
  - dsync fixes and improvements


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.19.rc3
changelog:
  - dovecot and pigeonhole updated
  - fixed lda + sieve crash
  - added mail_temp_dir setting, used by deliver and lmtp for creating
    temporary mail files. Default is /tmp.
  - imap: Fixed checking if list=children namespace has children.
  - mdbox: Race condition fixes related to copying and purging


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.20.rc4
changelog:
  - dovecot and pigeonhole updated
  - doveadm mailbox status: Fixed listing non-ASCII mailbox names. 
  - doveadm fetch: Fixed output when fetching message header or body
  - doveadm director map/add/remove: Fixed handling IP address as parameter. 
  - dsync: A few more fixes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.21.rc5
changelog:
  - dovecot and pigeonhole updated
  - Using more than 2 plugins could have caused broken behavior
  - Listescape plugin fixes
  - mbox: Fixed a couple of assert-crashes
  - mdbox: Fixed potential assert-crash when saving multiple messages 
    in one transaction


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-1
changelog:
  - dovecot and pigeonhole updated
  - dict quota didn't always decrease quota when messages were expunged
  - Shared INBOX wasn't always listed with FS layout


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.1-1
changelog:
  - dovecot and pigeonhole updated
  - sieve: sieved renamed to sieve-dump
  - when dsync is started as root, remote dsync command is now also executed 
    as root instead of with dropped privileges.
  - IMAP: QRESYNC parameters for SELECT weren't handled correctly.
  - UTF-8 string validity checking wasn't done correctly
  - dsync: Fixed a random assert-crash with remote dsyncing


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.2-1
changelog:
  - dovecot updated
  - vpopmail support is disabled for now, since it's broken. You can use
    it via checkpassword support or its sql/ldap database directly.
  - maildir: Fixed "duplicate uidlist entry" errors that happened at
    least with LMTP when mail was delivered to multiple recipients
  - Deleting ACLs didn't cause entries to be removed from acl_shared_dict
  - mail_max_lock_timeout setting wasn't working with all locks


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.3-1
changelog:
  - dovecot updated to 2.0.3
  - dovecot-lda: Removed use of non-standard Envelope-To: header as 
    a default for -a
  - dsync: Fixed handling \Noselect mailboxes
  - Fixed an infinite loop introduced by v2.0.2's message parser changes.
  - Fixed a crash introduced by v2.0.2's istream-crlf changes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.4-1
changelog:
  - dovecot updated to 2.0.4
  - multi-dbox: If :INDEX=path is specified, keep storage/dovecot.map.index* 
    files also in the index path rather than in the main storage directory.
  - dsync: POP3 UIDLs weren't copied with Maildir
  - dict file: Fixed fd leak (showed up easily with LMTP + quota)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.5-1
changelog:
  - dovecot updated to 2.0.5
  - acl: Fixed the logic of merging multiple ACL entries
  - sdbox: Fixed memory leak when copying messages with hard links. 
  - zlib: Fixed several crashes, which mainly showed up with mbox.
  - quota: Don't crash if user has quota disabled, but plugin loaded.
  - acl: Fixed crashing when sometimes listing shared mailboxes via dict proxy.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.6-1
changelog:
  - dovecot updated to 2.0.6
  - Pre-login CAPABILITY includes IDLE again. Mainly to make Blackberry
    servers happy.
  - auth: auth_cache_negative_ttl default was 0 in earlier v2.0.x, but it
    was supposed to be 1 hour as in v1.x. Changed it back to 1h.
  - doveadm: Added import command for importing mails from other storages.
  - Reduced NFS I/O operations for index file accesses
  - dbox, Maildir: When copying messages, copy also already cached fields
    from dovecot.index.cache
  - Maildir: LDA/LMTP assert-crashed sometimes when saving a mail.
  - Fixed leaking fds when writing to dovecot.mailbox.log.
  - Fixed rare dovecot.index.cache corruption
  - IMAP: SEARCH YOUNGER/OLDER wasn't working correctly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.7-1
changelog:
  - dovecot updated to 2.0.7
  - IMAP: Fixed LIST-STATUS when listing subscriptions with subscriptions=no namespaces.
  - IMAP: Fixed SELECT QRESYNC not to crash on mailbox close if a lot of changes were being sent. 
  - quota: Don't count virtual mailboxes in quota
  - doveadm expunge didn't always actually do the physical expunging
  - Fixed some index reading optimizations introduced by v2.0.5.
  - LMTP proxying fixes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.8-1
changelog:
  - dovecot updated to 2.0.8, pigeonhole updated to 0.2.2
  - services' default vsz_limits weren't being enforced correctly
  - added systemd support
  - dbox: Fixes to handling external mail attachments
  - imap, pop3: When service { client_count } was larger than 1, the
    log messages didn't use the correct prefix
  - MySQL: Only the first specified host was ever used


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-1
changelog:
  - dovecot updated to 2.0.9
  - fixed a high system CPU usage / high context switch count performance problem
  - lda: Fixed a crash when trying to send "out of quota" reply


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.11-1
changelog:
  - IMAP: Fixed hangs with COMPRESS extension
  - IMAP: Fixed a hang when trying to COPY to a nonexistent mailbox. 
  - IMAP: Fixed hang/crash with SEARCHRES + pipelining $.
  - IMAP: Fixed assert-crash if IDLE+DONE is sent in same TCP packet.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.12-1
changelog:
  - dbox: Fixes to handling external attachments
  - dsync: More fixes to avoid hanging with remote syncs
  - dsync: Many other syncing/correctness fixes
  - doveconf: v2.0.10 and v2.0.11 didn't output plugin {} section right


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.12-2
changelog:
  - pigeonhole updated to 0.2.3, which includes:
  - managesieve: fixed bug in UTF-8 checking of string values
  - sieve command line tools now avoid initializing the mail store unless necessary
  - removed header MIME-decoding to fix erroneous address parsing
  - fixed segfault bug in extension configuration, triggered when unknown
    extension is mentioned in sieve_extensions setting.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.13-1
changelog:
  - dovecot updated to 2.0.13
  - mdbox purge: Fixed wrong warning about corrupted extrefs.
  - script-login binary wasn't actually dropping privileges to the
    user/group/chroot specified by its service settings.
  - Fixed potential crashes and other problems when parsing header names
    that contained NUL characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.14-1
changelog:
  - dovecot updated to 2.0.14
  - userdb extra fields can now return name+=value to append to an
    existing name
  - script-login attempted an unnecessary config lookup, which usually
    failed with "Permission denied".
  - lmtp: Fixed parsing quoted strings with spaces as local-part for
    MAIL FROM and RCPT TO.
  - imap: FETCH BODY[HEADER.FIELDS (..)] may have crashed or not
    returned all data sometimes.
  - ldap: Fixed random assert-crashing with with sasl_bind=yes.
  - Fixes to handling mail chroots
  - Fixed renaming mailboxes under different parent with FS layout when
    using separate ALT, INDEX or CONTROL paths.
  - zlib: Fixed reading concatenated .gz files.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.15-1
changelog:
  - dovecot updated to 2.0.15
  - v2.0.14: Index reading could have eaten a lot of memory in some
    situations
  - mbox: Fixed crash during mail delivery when mailbox didn't yet have
    GUID assigned to it.
  - zlib+mbox: Fetching last message from compressed mailboxes crashed.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1-0.1.rc1
changelog:
  - updated to 2.1.rc1
  - major changes since 2.0.x:
  - plugins now use UTF-8 mailbox names rather than mUTF-7
  - auth_username_format default changed to %Lu
  - solr full text search backend changed to use mailbox GUIDs instead of
    mailbox names, requiring reindexing everything


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1-0.5.rc5
changelog:
  - updated to 2.1.rc5
  - director: With >2 directors ring syncing might have stalled during
    director connect/disconnect, causing logins to fail.
  - LMTP client/proxy: Fixed potential hanging when sending (big) mails
  - Compressed mails with external attachments (dbox + SIS + zlib) failed
    sometimes with bogus "cached message size wrong" errors.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1-0.7.rc6
changelog:
  - updated to 2.1.rc6
  - dbox: Fixed error handling when saving failed or was aborted
  - IMAP: Using COMPRESS extension may have caused assert-crashes
  - IMAP: THREAD REFS sometimes returned invalid (0) nodes.
  - dsync: Fixed handling non-ASCII characters in mailbox names.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.1-1
changelog:
  - dovecot updated to 2.1.1
  - acl plugin + autocreated mailboxes crashed when listing mailboxes
  - doveadm force-resync: Don't skip autocreated mailboxes (especially
    INBOX). 
  - If process runs out of fds, stop listening for new connections only
    temporarily, not permanently (avoids hangs with process_limit=1
    services)
  - auth: passdb imap crashed for non-login authentication (e.g. smtp).


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.2-1
changelog:
  - dovecot updated to 2.1.2
  - doveadm sync: If mailbox was expunged empty, messages may have
    become back instead of also being expunged in the other side.
  - imap_id_* settings were ignored before login.
  - Several fixes to mailbox_list_index=yes
  - Previous v2.1.x didn't log all messages at shutdown.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.3-1
changelog:
  - dovecot updated to 2.1.3
  - multi-dbox format in dovecot 2.1.2 was broken
  - temporarily disable check phase until bug #798968 is fixed


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.4-1
changelog:
  - dovecot updated to 2.1.4
  - Proxying SSL connections crashed in v2.1.[23]
  - fts-solr: Indexing mail bodies was broken.
  - director: Several changes to significantly improve error handling
  - doveadm import didn't import messages' flags
  - mail_full_filesystem_access=yes was broken
  - Make sure IMAP clients can't create directories when accessing
    nonexistent users' mailboxes via shared namespace.
  - Dovecot auth clients authenticating via TCP socket could have failed
    with bogus "PID already in use" errors.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.5-1
changelog:
  - IMAP: Several fixes related to mailbox listing in some configs
  - director: A lot of fixes and performance improvements
  - mbox: Deleting a mailbox didn't delete its index files.
  - pop3c: TOP command was sent incorrectly
  - trash plugin didn't work properly
  - LMTP: Don't add a duplicate Return-Path: header when proxying.
  - listescape: Don't unescape namespace prefixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.6-1
changelog:
  - v2.1.5: Using "~/" as mail_location or elsewhere failed to actually
    expand it to home directory.
  - dbox: Fixed potential assert-crash when reading dbox files.
  - trash plugin: Fixed behavior when quota is already over limit.
  - Proxying to backend server with SSL: Verifying server certificate
    name always failed, because it was compared to an IP address.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.7-1
changelog:
  - updated to 2.1.7
  - v2.1.5: Using "~/" as mail_location or elsewhere failed to actually
    expand it to home directory.
  - dbox: Fixed potential assert-crash when reading dbox files.
  - trash plugin: Fixed behavior when quota is already over limit.
  - mail_log plugin: Logging "copy" event didn't work.
  - Proxying to backend server with SSL: Verifying server certificate
    name always failed, because it was compared to an IP address.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.7-2
changelog:
  - fix changelog, 2.1.7-1 had copy-pasted upstream changelog, which was wrong
  - director: Don't crash with quickly disconnecting incoming director
    connections.
  - mdbox: If mail was originally saved to non-INBOX, and namespace
    prefix is non-empty, don't assert-crash when rebuilding indexes.
  - sdbox: Don't use more fds than necessary when copying mails.
  - auth: Fixed crash with DIGEST-MD5 when attempting to do master user
    login without master passdbs. 
  - Several fixes to mail_shared_explicit_inbox=no
  - imapc: Use imapc_list_prefix also for listing subscriptions.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.8-1
changelog:
  - dovecot updated to 2.1.8
  - imap: Mailbox names were accidentally sent as UTF-8 instead of mUTF-7
    in previous v2.1.x releases for STATUS, MYRIGHTS and GETQUOTAROOT commands.
  - lmtp proxy: Don't timeout connections too early when mail has a lot of RCPT TOs.
  - director: Don't crash if the director is working alone.
  - shared mailboxes: Avoid doing "@domain" userdb lookups.
  - doveadm: Fixed crash with proxying some commands.
  - fts-squat: Fixed handling multiple SEARCH parameters.
  - imapc: Fixed a crash when message had more than 8 keywords.
  - imapc: Don't crash on APPEND/COPY if server doesn't support UIDPLUS.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.8-2
changelog:
  - pigeonhole updated to 0.3.1
  - Fixed several small issues, including a few potential segfault bugs, based
    on static source code analysis.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.9-1
changelog:
  - dovecot updated to 2.1.9
  - Full text search indexing might have failed for some messages,
    always causing indexer-worker process to run out of memory.
  - fts-lucene: Fixed handling SEARCH HEADER FROM/TO/SUBJECT/CC/BCC when
    the header wasn't lowercased.
  - fts-squat: Fixed crash when searching a virtual mailbox.
  - pop3: Fixed assert crash when doing UIDL on empty mailbox on some
    setups. 
  - auth: GSSAPI RFC compliancy and error handling fixes.
  - Various fixes related to handling shared namespaces


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.10-1
changelog:
  - dovecot updated to 2.1.10, pigeonhole updated to 0.3.3
  - director: In some conditions director may have disconnected from
    another director (without logging about it), thinking it was sending
    invalid data.
  - imap: Various fixes to listing mailboxes.
  - login processes crashed if there were a lot of local {} or remote {}
    settings blocks.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.12-1
changelog:
  - dovecot updated to 2.1.12
  - lmtp proxy: Fixed hanging if remote server was down.
  - doveadm: Various fixes to handling doveadm-server connections.
  - auth: passdb imap was broken in v2.1.10.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.13-1
changelog:
  - dovecot updated to 2.1.13
  - Some fixes to cache file changes in v2.1.11.
  - virtual storage: Sorting mailbox by from/to/cc/bcc didn't work.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.14-1
changelog:
  - dovecot updated to 2.1.14
  - v2.1.11+ had a race condition where it sometimes overwrote data in
    dovecot.index.cache file. This could have caused Dovecot to return
    the same cached data to two different messages.
  - mdbox: Fixes to handling duplicate GUIDs during index rebuild


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.1.15-1
changelog:
  - dovecot updated to 2.1.15
  - v2.1.14's dovecot.index.cache fixes caused Dovecot to use more disk I/O
    and memory than was necessary.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2-0.3
changelog:
  - dovecot updated to 2.2 RC3
  - Fixed a crash when decoding quoted-printable content.
  - dsync: Various bugfixes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.0-1
changelog:
  - dovecot updated to 2.2.0
  - Mailbox list indexes weren't using proper file permissions based
    on the root directory.
  - replicator: doveadm commands and user list export may have skipped
    some users.
  - Various fixes to mailbox_list_index=yes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.1-1
changelog:
  - dovecot updated to 2.2.1
  - mailbox_list_index=yes was broken.
  - LAYOUT=index didn't list subscriptions.
  - auth: Multiple master passdbs didn't work.
  - Message parsing (e.g. during search) crashed when multipart message
    didn't actually contain any parts.
  - dovecot updated to 2.2.1


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.2-1
changelog:
  - dovecot updated to 2.2.2
  - IMAP: Various URLAUTH fixes.
  - IMAP: Fixed a hang with invalid APPEND parameters.
  - IMAP LIST-EXTENDED: INBOX was never listed with \Subscribed flag.
  - mailbox_list_index=yes still caused crashes.
  - maildir: Fixed a crash after dovecot-keywords file was re-read.
  - maildir: If files had reappeared unexpectedly to a Maildir, they
    were ignored until index files were deleted.
  - Maildir: Fixed handling over 26 keywords in a mailbox. 
  - imap/pop3-login proxying: Fixed a crash if TCP connection succeeded,
    but the remote login timed out.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.3-1
changelog:
  - dovecot updated to 2.2.3
  - IMAP: If subject contained only whitespace, Dovecot returned an
    ENVELOPE reply with a huge literal value, effectively causing the
    IMAP client to wait for more data forever.
  - IMAP: Various URLAUTH fixes.
  - imapc: Various bugfixes and improvements
  - pop3c: Various fixes to make it work in dsync (without imapc)
  - dsync: Fixes to syncing subscriptions. Fixes to syncing mailbox
    renames.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.4-1
changelog:
  - dovecot updated to 2.2.4
  - imap/pop3 proxy: Master user logins were broken in v2.2.3
  - sdbox/mdbox: A corrupted index header with wrong size was never
    automatically fixed in v2.2.3.
  - mbox: Fixed assert-crashes related to locking.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.5-1
changelog:
  - dovecot updated to 2.2.5
  - added some missing man pages (by Pascal Volk)
  - director: Users near expiration could have been redirected to
    different servers at the same time.
  - pop3: Avoid assert-crash if client disconnects during LIST.
  - mdbox: Corrupted index header still wasn't automatically fixed.
  - dsync: Various fixes to work better with imapc and pop3c storages.
  - ldap: sasl_bind=yes caused crashes, because Dovecot's lib-sasl
    symbols conflicted with Cyrus SASL library.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.6-1
changelog:
  - dovecot updated to 2.2.6, pigeonhole updated to 0.4.2
  - director: v2.2.5 changes caused "SYNC lost" errors
  - dsync: Many fixes and error handling improvements
  - doveadm -A: Don't waste CPU by doing a separate config lookup
    for each user
  - Long-running ssl-params process no longer prevents Dovecot restart
  - mbox: Fixed mailbox_list_index=yes to work correctly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.7-1
changelog:
  - dovecot updated to 2.2.7
  - master process was doing a hostname.domain lookup for each created
    process, which may have caused a lot of unnecessary DNS lookups.
  - dsync: Syncing over 100 messages at once caused problems in some
    situations, causing messages to get new UIDs.
  - fts-solr: Different Solr hosts for different users didn't work.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.8-1
changelog:
  - Fixed infinite loop in message parsing if message ends with
    "--boundary" and CR (without LF). Messages saved via SMTP/LMTP can't
    trigger this, because messages must end with an "LF.". A user could
    trigger this for him/herself though.
  - lmtp: Client was sometimes disconnected before all the output was
    sent to it.
  - replicator: Database wasn't being exported to disk every 15 minutes
    as it should have. Instead it was being imported, causing "doveadm
    replicator remove" commands to not work very well.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.9-1
changelog:
  - improved cache file handling exposed several old bugs related to fetching 
    mail headers.
  - iostream handling changes were causing some connections to be disconnected
    before flushing their output


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.10-1
changelog:
  - dovecot updated to 2.2.10
  - quota-status: quota_grace was ignored
  - ldap: Fixed memory leak with auth_bind=yes and without
    auth_bind_userdn.
  - imap: Don't send HIGHESTMODSEQ anymore on SELECT/EXAMINE when
    CONDSTORE/QRESYNC has never before been enabled for the mailbox.
  - imap: Fixes to handling mailboxes without permanent modseqs.
    (When [NOMODSEQ] is returned by SELECT, mainly with in-memory
    indexes.)
  - imap: Various fixes to METADATA support.
  - stats plugin: Processes that only temporarily dropped privileges
    (e.g. indexer-worker) may have been logging errors about not being
    able to open /proc/self/io.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.11-1
changelog:
  - dovecot updated to 2.2.11
  - imap: SEARCH/SORT PARTIAL reponses may have been too large.
  - doveadm backup: Fixed assert-crash when syncing mailbox deletion.


author: John Morris <john@zultron.com> - 1:2.2.12-2
changelog:
  - el6 build fixes (#1082384):
  - el6 autoconf too old to regen; use packaged files
  - fix compile error when __global_ldflags macro undefined


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.13-1
changelog:
  - dovecot updated to 2.2.13
  - fixes CVE-2014-3430: denial of service through maxxing out SSL connections
  - pop3 server was still crashing in v2.2.12 
  - maildir: Various fixes and improvements to handling compressed mails
  - fts-lucene, fts-solr: Fixed crash on search when the index contained
    duplicate entries.
  - mail_attachment_dir: Attachments with the last base64-encoded line
    longer than the rest wasn't handled correctly.
  - IMAP: SEARCH/SORT PARTIAL was handled completely wrong in v2.2.11+
  - acl: Global ACL file handling was broken when multiple entries
    matched the mailbox name


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.14-1
changelog:
  - dovecot updated to 2.2.14, pigeonhole updated to 0.4.3
  - fixed several race conditions with dovecot.index.cache handling that
    may have caused unnecessary "cache is corrupted" errors.
  - auth: If auth client listed userdb and disconnected before finishing,
    the auth worker process got stuck
  - imap-login, pop3-login: Fixed potential crashes when client
    disconnected unexpectedly.
  - imap proxy: The connection was hanging in some usage patterns.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.15-1
changelog:
  - dovecot updated to 2.2.15
  - various race condition fixes to LAYOUT=index
  - v2.2.14 virtual plugin crashed in some situations


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.16-1
changelog:
  - dovecot updated to 2.2.16
  - auth: Don't crash if master user login is attempted without
    any configured master=yes passdbs
  - Parsing UTF-8 text for mails could have caused broken results
    sometimes if buffering was split in the middle of a UTF-8 character.
    This affected at least searching messages.
  - String sanitization for some logged output wasn't done properly:
    UTF-8 text could have been truncated wrongly or the truncation may
    not have happened at all.
  - fts-lucene: Lookups from virtual mailbox consisting of over 32
    physical mailboxes could have caused crashes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.17-1
changelog:
  - dovecot updated to 2.2.17
  - pigeonhole updated to 0.4.7
  - auth: If auth_master_user_separator was set, auth process could be
    crashed by trying to log in with empty master username.
  - imap-login, pop3-login: Fixed crash on handshake failures with new
    OpenSSL versions (v1.0.2) when SSLv3 was disabled.
  - auth: If one passdb fails allow_nets check, it shouldn't have failed
    all the other passdb checks later on.
  - imap: Server METADATA couldn't be accessed
  - imapc: Fixed \Muted label handling in gmail-migration.
  - imapc: Various bugfixes and improvements.
  - Trash plugin fixes by Alexei Gradinari
  - mbox: Fixed crash/corruption in some situations


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.18-1
changelog:
  - director: Login UNIX sockets were normally detected as doveadm or
    director ring sockets, causing it to break in existing installations.
  - sdbox: When copying a mail in alt storage, place the destination to
    alt storage as well.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.18-2
changelog:
  - update pigeonhole to 0.4.8
  - Fixed problem in address test: erroneously decoded mime-encoded words in
    address headers.
  - extprograms plugin: Fixed failure occurring when connecting to script
    service without the need to read back the output from the external program.
  - Fixed bug in script storage path normalization occurring with relative
    symbolic links below root.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.19-1
changelog:
  - dovecot updated to 2.2.19
  - mdbox: Rebuilding could have caused message's reference count to
    overflow the 16bit number in some situations, causing problems when
    trying to expunge the duplicates.
  - Various search fixes (fts, solr, tika, lib-charset, indexer)
  - Various virtual plugin fixes
  - Various fixes and optimizations to dsync, imapc and pop3-migration
  - imap: Various RFC compliancy and crash fixes to NOTIFY
  - pigeonhole updated to 0.4.9
  - ManageSieve: Fixed an assert failure occurring when a client
    disconnects during the GETSCRIPT command.
  - doveadm sieve plugin: Fixed incorrect initialization (mem leaks) of mail user.
  - sieve-filter command line tool: Fixed handling of failure-related
    implicit keep when there is an explicit default destination folder.
  - lib-sieve: Fixed bug in RFC5322 header folding.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.20-1
changelog:
  - dovecot updated to 2.2.20
  - director: Backend tags weren't working correctly.
  - ldap: tls_* settings weren't used for ldaps URIs.
  - ldap, mysql: Fixed setting connect timeout.
  - auth: userdb lookups via auth-worker couldn't change username
  - dsync: Fixed handling deleted directories. Make sure we don't go to
    infinite mailbox renaming loop.
  - imap: Fixed crash in NOTIFY when there were watched namespaces that
    didn't support NOTIFY.
  - imap: After SETMETADATA was used, various commands (especially FETCH)
    could have started hanging when their output was large.
  - stats: Idle sessions weren't refreshed often enough, causing stats
    process to forget them and log errors about unknown sessions when
    they were updated later.
  - stats: Fixed "Duplicate session ID" errors when LMTP delivered to
    multiple recipients and fts_autoindex=yes.
  - zlib plugin: Fixed copying causing cache corruption when zlib_save
    wasn't set, but the source message was compressed.
  - fts-solr: Fixed escaping Solr query parameters.
  - lmtp: quota_full_tempfail=yes was ignored with
    lmtp_rcpt_check_quota=yes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.21-1
changelog:
  - dovecot updated to 2.2.21
  - doveadm mailbox list (and some others) were broken in v2.2.20
  - director: Fixed making backend changes when running with only a
    single director server.
  - virtual plugin: Fixed crash when trying to open nonexistent
    autocreated backend mailbox.
  - pigeonhole updated to 0.4.10
  - implemented the Sieve mime and foreverypart extensions (RFC 5703).
  + sieve body extension: Properly implemented the `:text' body
    transform. It now extracts text for HTML message parts.
  - variables extension: Fixed handling of empty string by the `:length'
    set modifier. An empty string yielded an empty string rather than "0".
  - Fixed memory leak in the Sieve script byte code dumping facility.
    Extension contexts were never actually freed.
  - doveadm sieve plugin: Fixed crashes caused by incorrect context
    allocation in the sieve command implementations.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.21-2
changelog:
  - pigeonhole updated to 0.4.11
  - Sieve mime extension: Fixed the header :mime :anychild test to work properly
    outside a foreverypart loop.
  - Fixed assert failure occurring when text extraction is attempted on a
    empty or broken text part.
  - Fixed assert failure in handling of body parts that are converted to text.
  - Fixed header unfolding for (mime) headers parsed from any mime part.
  - Fixed trimming for (mime) headers parsed from any mime part.
  - Fixed erroneous changes to the message part tree structure performed when
    re-parsing the message.
  - LDA Sieve plugin: Fixed bug in error handling of script storage initialization
  - Fixed duplication of discard actions in the script result.
  - Made sure that quota errors never get logged as errors in syslog.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.21-4
changelog:
  - pigeonhole updated to 0.4.12
  - multiscript: Fixed bug in handling of (implicit) keep; final keep action was
    always executed as though there was a failure. 
  - managesieve-login: Fixed proxy to allow SASL mechanisms other than PLAIN.
  - ldap storage: Prevent segfault occurring when assigning certain (global)
    configuration options.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.22-1
changelog:
  - dovecot updated to 2.2.22
  - auth: Auth caching was done too aggressively when %variables were
    used in default_fields, override_fields or LDAP pass/user_attrs.
    userdb result_* were also ignored when user was found from cache.
  - imap: Fixed various assert-crashes caused v2.2.20+. Some of them
    caught actual hangs or otherwise unwanted behavior towards IMAP
    clients.
  - Expunges were forgotten in some situations, for example when
    pipelining multiple IMAP MOVE commands.
  - quota: Per-namespaces quota were broken for dict and count backends
    in v2.2.20+
  - fts-solr: Search queries were using OR instead of AND as the
    separator for multi-token search queries in v2.2.20+.
  - Single instance storage support wasn't really working in v2.2.16+
  - dbox: POP3 message ordering wasn't working correctly.
  - virtual plugin: Fixed crashes related to backend mailbox deletions.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.23-1
changelog:
  - dovecot updated to 2.2.23, pigeonhole updated to 0.4.13
  - Various fixes to doveadm. Especially running commands via
    doveadm-server was broken.
  - director: Fixed user weakness getting stuck in some situations
  - director: Fixed a situation where directors keep re-sending
    different states to each others and never becoming synced.
  - director: Fixed assert-crash related to a slow "user killed" reply
  - Fixed assert-crash related to istream-concat, which could have
    been triggered at least by a Sieve script.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.24-1
changelog:
  - dovecot updated to 2.2.24
  - Huge header lines could have caused Dovecot to use too much memory
  - dsync: Detect and handle invalid/stale -s state string better.
  - dsync: Fixed crash caused by specific mailbox renames
  - auth: Auth cache is now disabled passwd-file. 
  - fts-tika: Don't crash if it returns 500 error
  - dict-redis: Fixed timeout handling
  - SEARCH INTHREAD was crashing
  - stats: Only a single fifo_listeners was supported, making it impossible to
    use both auth_stats=yes and mail stats plugin.
  - SSL errors were logged in separate "Stacked error" log lines instead of as
    part of the disconnection reason.
  - MIME body parser didn't handle properly when a child MIME part's --boundary
    had the same prefix as the parent.
  - pigeonhole updated to 0.4.14
  - extprograms plugin: Fixed epoll() panic caused by closing the output
    FD before the output stream.
  - Made sure that the local part of a mail address is encoded properly
    using quoted string syntax when it is not a dot-atom.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.25-1
changelog:
  - dovecot updated to 2.2.25
  - doveadm backup was sometimes deleting entire mailboxes unnecessarily.
  - doveadm: Command -parameters weren't being sent to doveadm-server.
  - if dovecot.index read failed e.g. because mmap() reached VSZ limit,
    an empty index could have been opened instead, corrupting the
    mailbox state.
  - lazy-expunge: Fixed a crash when copying failed. Various other fixes.
  - fts-lucene: Fixed crash on index rescan.
  - dict-ldap: Various fixes
  - dict-sql: NULL values crashed. Now they're treated as "not found".


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.26.0-1
changelog:
  - dovecot updated to 2.2.26.0, pigeonhole updated to 0.4.16
  - master process's listener socket was leaked to all child processes.
    This might have allowed untrusted processes to capture and prevent
    "doveadm service stop" comands from working.
  - login proxy: Fixed crash when outgoing SSL connections were hanging.
  - auth: userdb fields weren't passed to auth-workers, so %{userdb:*}
    from previous userdbs didn't work there.
  - auth: Fixed auth_bind=yes + sasl_bind=yes to work together
  - lmtp: %{userdb:*} variables didn't work in mail_log_prefix
  - Fixed writing >2GB to iostream-temp files (used by fs-compress,
    fs-metawrap, doveadm-http)
  - fts-solr: Fixed searching multiple mailboxes
  - and more...


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.27-1
changelog:
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large. This
    is because 3 bytes per email were being wasted that could have been
    used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is detected
    inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between different
    quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged together.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.28-1
changelog:
  - dovecot updated to 2.2.28, pigeonhole to 0.4.17
  - auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support them
    in lib-dsasl for client side.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual mailboxes.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is reused
    for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if Sieve
    was used. especially %{storage_id} was broken.
  - imapsieve plugin: Fixed assert failure occurring when used with virtual
    mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via attribute's
    string value.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.29-1
changelog:
  - dovecot updated to 2.2.29
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers, too much
    data was added to auth cache. This could have resulted in wrong
    replies when using multiple passdbs/userdbs.
  - auth: passdb { skip & mechanisms } were ignored for the first passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't always
    synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands via
    doveadm-server. Almost all errors used exit code 75 (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working correctly.
  - doveadm director status <user>: "Initial config" was always empty
  - imapc: Various reconnection fixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.29.1-1
changelog:
  - dovecot updated to 2.2.29.1
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - pigeonhole updated to 0.4.18
  - imapsieve plugin: Implemented the copy_source_after rule action. When this
    is enabled for a mailbox rule, the specified Sieve script is executed for
    the message in the source mailbox during a "COPY" event. This happens only
    after the Sieve script that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  - imapsieve plugin: Added non-standard Sieve environment items for the source
    and destination mailbox.
  - multiscript: The execution of the discard script had an implicit "keep",
    rather than an implicit "discard".


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.30.1-1
changelog:
  - dovecot updated to 2.2.30.1
  - More fixes to automatically fix corruption in dovecot.list.index
  - dsync-server: Fix support for dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and per-mailbox keys
    are used. Otherwise the copied mails can't be opened.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.30.2-1
changelog:
  - dovecot updated to 2.2.30.2
  - auth: Multiple failed authentications within short time caused crashes
  - push-notification: OX driver crashed at deinit


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.31-1
changelog:
  - dovecot updated to 2.2.31
  - Various fixes to handling mailbox listing. Especially related to
    handling nonexistent autocreated/autosubscribed mailboxes and ACLs.
  - Global ACL file was parsed as if it was local ACL file. This caused
    some of the ACL rule interactions to not work exactly as intended.
  - Using mail_sort_max_read_count may have caused very high CPU usage.
  - Message address parsing could have crashed on invalid input.
  - imapc_features=fetch-headers wasn't always working correctly and
    caused the full header to be fetched.
  - imapc: Various bugfixes related to connection failure handling.
  - quota=count: quota_warning = -storage=.. was never executed
  - quota=count: Add support for "ns" parameter
  - dsync: Fix incremental syncing for mails that don't have Date or
    Message-ID headers.
  - imap: Fix hang when client sends pipelined SEARCH +
    EXPUNGE/CLOSE/LOGOUT.
  - oauth2: Token validation didn't accept empty server responses.
  - imap: NOTIFY command has been almost completely broken since the
    beginning.
  - pigeonhole updated to 0.4.19
  - Fixed bug in handling of implicit keep in some cases.
  - include extension: Fixed segfault that (sometimes) occurred when the
    global script location was left unconfigured.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.32-1
changelog:
  - dovecot updated to 2.2.32
  - Modseq tracking didn't always work correctly. This could have caused
    imap unhibernation to fail or IMAP QRESYNC/CONDSTORE extensions to
    not work perfectly.
  - mdbox: "Inconsistency in map index" wasn't fixed automatically
  - dict-ldap: %variable values used in the LDAP filter weren't escaped.
  - quota=count: quota_warning = -storage=.. was never executed (try #2).
  - imapc: >= 32 kB mail bodies were supposed to be cached for subsequent
    FETCHes, but weren't.
  - quota-status service didn't support recipient_delimiter
  - acl: Don't access dovecot-acl-list files with acl_globals_only=yes
  - mail_location: If INDEX dir is set, mailbox deletion deletes its
    childrens' indexes. 
  - director: v2.2.31 caused rapid reconnection loops to directors
    that were down.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.32-2
changelog:
  - pigeonhole updated to 0.4.20
  - Made the retention period for redirect duplicate identifiers
    configurable. Changed the default retention period from 24 to 12 hours.
  - sieve-filter: Fixed memory leak: forgot to clean up script binary at
    end of execution
  - managesieve-login: Fixed handling of AUTHENTICATE command. A second
    authenticate command would be parsed wrong.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.1-1
changelog:
  - dovecot updated to 2.2.33.1, pigeonhole updated to 
  - Added %{if}, see https://wiki2.dovecot.org/Variables#Conditionals
  - sdbox: Mails were always opened when expunging, unless
    mail_attachment_fs was explicitly set to empty.
  - lmtp/doveadm proxy: hostip passdb field was ignored, which caused
    unnecessary DNS lookups if host field wasn't an IP
  - lmtp proxy: Fix crash when receiving unexpected reply in RCPT TO
  - quota_clone: Update also when quota is unlimited (broken in v2.2.31)
  - mbox, zlib: Fix assert-crash when accessing compressed mbox
  - doveadm director kick -f parameter didn't work
  - doveadm director flush <host> resulted flushing all hosts, if <host>
    wasn't an IP address.
  - director: Various fixes to handling backend/director changes at
     abnormal times, especially while ring was unsynced.
  - director: Use less CPU in imap-login processes when moving/kicking
    many users.
  - lmtp: Session IDs were duplicated/confusing with multiple RCPT TOs
    when lmtp_rcpt_check_quota=yes
  - LDA Sieve plugin: Fixed sequential execution of LDAP-based scripts. A
    missing LDAP-based script could cause the script sequence to exit earlier.
  - sieve-filter: Removed the (now) duplicate utf8 to mutf7 mailbox name
    conversion. This caused problems with mailbox names containing UTF-8
    characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.2-1
changelog:
  - dovecot updated to 2.2.33.2
  - doveadm: Fix crash in proxying (or dsync replication) if remote is
    running older than v2.2.33
  - auth: Fix memory leak in %{ldap_dn}
  - dict-sql: Fix data types to work correctly with Cassandra


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.2-2
changelog:
  - remove tcp_wrappers on Fedora 28 and later (#1518761)
  - use use mariadb-connector-c-devel instead of mysql-devel on Fedora 28 and later (#1493624)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-7
changelog:
  - do not print error message when restorecon is not present 
    during install (#1626395)
  - change default config to use minimal UID = 1000 (#1630410)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-10
changelog:
  - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
    when scanning data in quoted strings, leading to out of bounds heap
    memory writes (#1741788)


author: Radovan Sroka <rsroka@redhat.com> - 8.32.0-1
changelog:
  - initial clean build with plugins from rhel7
  - removed plugins:
    - libdbi
    - omruleset
    - pmrfc3164sd
  - imported from fedora26


author: Marek Tamaskovic <mtamasko@redhat.com> - 8.35.0-1
changelog:
  - rebase to 8.35
  - rebased patches from 8.32 to 8.35
    - fixed imjournal-duplicates
    - fixed imjournal-default-tag
    - fixed service patch
    - fixed in upstream deserialize-property-name


author: Jiri Vymazal <jvymazal@redhat.com> - 8.35.0-1
changelog:
  - spec file cleanup
  - enabled kafka and hiredis modules
    resolves: rhbz#1542497
    resolves: rhbz#1542504
  - renamed patch fixing imjournal duplicating messages
    resolves: rhbz#1544394


author: Jiri Vymazal <jvymazal@redhat.com> - 8.36.0-1
changelog:
  - rebase to 8.36
  - removed hiredis module
  - removed omudpspoof module
    resolves: rhbz#1593762
  - finished converting config to new-style syntax


author: Jiri Vymazal <jvymazal@redhat.com> - 8.36.0-1
changelog:
  - changed PID file name to follow upstream
  - removed config option to disable stdlog as it is now 
    disabled by default


author: Jiri Vymazal <jvymazal@redhat.com> - 8.36.0-3
changelog:
  - dropped json_nonoverwrite patch as there is no reason for
    keeping it
  - renumbered rest of patches
  - added release number to AC_INIT to have it in package error logs


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-10
changelog:
  RHEL 8.1.0 ERRATUM
  - added option for imfile endmsg.regex
    resolves: rhbz#1627941
  - added patch enhancing imfile rotation detection
    resolves: rhbz#1674471
  - added patch fixing msgOffset datatype preventing crash on
    message with too long other fields
    resolves: rhbz#1677037
  - added patch introducing "preservecase" option for imudp/imtcp
    resolves: rhbz#1614181


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-11
changelog:
  RHEL 8.1.0 ERRATUM
  - fixed memory leak in imjournal by proper cursor releasing
    resolves: rhbz#1716867


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-12
changelog:
  RHEL 8.1.0 ERRATUM
  - edited imjournal memleak patch to not cause double-free crash
    resolves: rhbz#1729995
  - added patch calling journald API only when there are no
    preceeding errors
    resolves: rhbz#1722165
  - added patch fixing imrelp module when invoked with old syntax
    resolves: rhbz#1724218


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-13
changelog:
  RHEL 8.1.0 ERRATUM
  - added patch enabling stricter TLS certs checking conforming to 
    common criteria requirements
    resolves: rhbz#1733244


author: Rob Crittenden <rcritten@redhat.com> - 0.4-1
changelog:
  - Rebase to upstream 0.4 (#1770346)
  - Create subpackage to split out core processing (#1771710)
  - Correct URL (#1773512)
  - Errors not translated to strings (#1752849)
  - JSON output not indented by default (#1729043)
  - Add dependencies to checks to avoid false-positives (#1727900)
  - Verify expected DNS records (#1695125)


author: Tim Powers <timp@redhat.com>
changelog:
  - cleaned up spec for use with RPM 4.0 (al la _sysconfdir _datadir etc)
  - update to 0.9.17
  - yay! a man page!


author: Tim Powers <timp@redhat.com>
changelog:
  - some ideas taken from the package available at the gaim website, mainly to install the applet stuff too.


author: Tim Powers <timp@redhat.com>
changelog:
  - updated to 0.11.0pre2
  - enable gnome support
  - updated ispell to aspell patch
  - cleaned up file list


author: Christopher Blizzard <blizzard@redhat.com> 0.59-7
changelog:
  - Include patch that uses htmlview instead of calling Netscape
    directly
  - Include patch that turns off the buddy ticker and changes the button
    look to the (sane) default.


author: Christopher Blizzard <blizzard@redhat.com> 1:0.75-0
changelog:
  - Update to 0.75.
  - Remove mem leak patch that is already included in 0.75.
  - Clean up a lot of old unused patches and old source tarballs.


author: Christopher Blizzard <blizzard@redhat.com> 1:0.75-1.1.0
changelog:
  - Include patch that fixes a bunch of buffer-related problems, mostly
    from nectar@freebsd.org and some of my own changes.


author: Warren Togami <wtogami@redhat.com>
changelog:
  - CVS snapshot, generated with automake-1.7.9
  - update #4
  - update #2 but disable
  - #5 no longer needed
  - default to gnome-open #6
  - some spec cleanup


author: Warren Togami <wtogami@redhat.com> 0.76-5
changelog:
  - CVS backports: 
    102 Fix ^F keybinding when gtkrc is set to emacs mode
    103 Add Missing File: evolution-1.5.x buildability
    104 When MSN server intermittently has problems accessing buddy list, MSN will crash with 0.76
    105, 106, 107 MSN Error reporting fixes
    108 History plugin causes unnecessary horizontal scrollbars
    109 Fix the text replace plugin 
    110 Prevent message sending while offline


author: Warren Togami <wtogami@redhat.com> 0.76-6
changelog:
  - CVS backports:
    111 Prevent Crash during password change if blank fields
    112 Prevent Crash if remote sends invalid characters
    113 Enable /etc/gaim/prefs.xml defaults for new profiles
  - Tray Icon enabled by default
  - Relabel internal version with V-R


author: Warren Togami <wtogami@redhat.com> 0.77-3
changelog:
  - remove gnome-open manual, since 0.77 has "GNOME Default" as default.
  - update default prefs.xml, disable buddy icons in buddy list
  - CVS backport 114: plugin prefs saving fix
                 115: autoreconn-suppress-dialogs
                 116: fix smileys in dialogs
                 117: gtk+ 2.0 compat


author: Warren Togami <wtogami@redhat.com> 0.77-6
changelog:
  - CVS backport 118: x86-64 yahoo auth fix
                 119: Copy/paste fixes for UCS-2 encoded selection
                 120: IRC reconnect segfault fix
  - remove relnot.so plugin because it is unusable in FC
  - Default enable logging and history.so plugin
            enable autoreconnect plugin
  - Fix Gnome Default url handler


author: Warren Togami <wtogami@redhat.com> 0.77-7
changelog:
  - CVS backport 121: byte order badness and crashing copy & paste fix
                 122: history.so scroll to bottom in new tabs fix


author: Warren Togami <wtogami@redhat.com> 0.78-7
changelog:
  - CVS backport 125: MSN disconnect on non-fatal error fix
                 126: Paste html with img crash fix
                 127: Misplaced free fix


author: Warren Togami <wtogami@redhat.com> 0.79-1
changelog:
  - update to 0.79
  - update desktop patch
  - update header and pkgconfig locations
  - update default prefs
  - FC3 sed behavior workaround
  - temporarily disable evolution integration


author: Warren Togami <wtogami@redhat.com> 0.79-2
changelog:
  - remove tray icon patch temporarily because it seems to cause more
    problems than it solves.
  - provide gaim-devel
  - CVS backport 128: Cached buddy icons fix


author: Warren Togami <wtogami@redhat.com> 0.80-1
changelog:
  - update to 0.80
  - enable ExtPlacement plugin by default
  - Smiley Theme "Default" by default (bug fix)
  - Insertions -> Control-{B/I/U} by default


author: Warren Togami <wtogami@redhat.com> 0.81-1
changelog:
  - 0.81
  - krb5-devel for Zephyr
  - evolution-data-server-devel integration
    plugin disabled by default because it seems very unstable


author: Warren Togami <wtogami@redhat.com> 0.81-3
changelog:
  - CVS backport 133: CAN-2004-0500 MSNLP buffer overflow
                 134: Select buddy icon in new account crash
                 135: Jabber join crash
                 136: Jabber tooltip fake self crash


author: Warren Togami <wtogami@redhat.com> 0.81-4
changelog:
  - conditionalize features for alternate target distributions
  - remove unnecessary ExclusiveArch
  - other cleanups


author: Warren Togami <wtogami@redhat.com> 0.82-1
changelog:
  - Update to 0.82 resolves several security issues and bugs
    CAN-2004-0500, CAN-2004-0754, CAN-2004-0784, CAN-2004-0785
    More details at http://gaim.sourceforge.net/security/


author: Warren Togami <wtogami@redhat.com> 1:1.1.3-2
changelog:
  - 1.1.3 including two security fixes
    CAN-2005-0472 Client freezes when receiving certain invalid messages
    CAN-2005-0473 Client crashes when receiving specific malformed HTML


author: Warren Togami <wtogami@redhat.com> 1:1.1.4-1
changelog:
  - 1.1.4 with MSN crash fix, g_stat() crash workaround
    CAN-2005-0208 Gaim HTML parsing DoS (another one)


author: Warren Togami <wtogami@redhat.com> 1:1.1.4-4
changelog:
  - 144: POSIX functions became macros, build fix (#150429)
  - 145: Fix non-proxy yahoo file transfer
  - 146: Fix non-proxy yahoo buddy icons


author: Warren Togami <wtogami@redhat.com> 1:1.3.0-1
changelog:
  - 1.3.0 many bug fixes and two security fixes
    long URL crash fix (#157017) CAN-2005-1261
    MSN bad messages crash fix (#157202) CAN-2005-1262


author: Warren Togami <wtogami@redhat.com> 1:1.3.1-0
changelog:
  - 1.3.1 more bug fixes
    CAN-2005-1269 CAN-2005-1934
  - enable Message Notification plugin by default


author: Warren Togami <wtogami@redhat.com> 1:1.4.0-4
changelog:
  - 149: MSN username with space disconnect fix
  - Do not own perl dir, remove empty files (#162994 jpo)


author: Warren Togami <wtogami@redhat.com> 1:1.4.0-5
changelog:
  - FC5+ automatic -fstack-protector-all switch
  - 150: MSN buddy names with space disconnect and profile corruption
         (supercedes patch 149)
  - 151: Gadu Gadu memory alignment crash
  - 152: Rename Group Merge crash
  - 153: mailto: parse crash (util.c)
  - 154: mailto: parse crash (MSN)
  - 155: mailto: parse crash (Zephyr)


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-1
changelog:
  - 1.5.0 security and bug fixes
    CAN-2005-2370 Gadu-Gadu memory alignment bug
    CAN-2005-2102 AIM/ICQ non-UTF-8 Filename Crash
    CAN-2005-2103 AIM/ICQ away message buffer overflow


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-2
changelog:
  - always use -z relro and FORTIFY_SOURCE opt flags for FC3+ and RHEL4+ 
    (compiler simply ignores these flags if they are unsupported)


author: Peter Jones <pjones@redhat.cm> - 1:1.5.0-4
changelog:
  - rebuild for new cairo, add -Wno-pointer-sign
  - add -Wno-pointer-sign until somebody maintaining this package makes it build
    without it.


author: Ray Strode <rstrode@redhat.com> - 1:1.5.0-7
changelog:
  - use upstream desktop file (except use generic name, because 
    this is our default instant messaging client)


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-9
changelog:
  - Ensure that security opt flags are used (#165795)
  - Many bug fixes from Peter Lawler (#171350)
    156: Fix Yahoo chatroom ignore on join
    157: Fix Italian yahoo profiles
    158: Strip HTML from status
    159: xmlnode cleanup
    160: Fix crash on non-terminated strings
    161: silc-close-gaim_request-window-prpl-disconnect-p1
    162: silc-close-gaim_request-window-prpl-disconnect-p2
    163: silc-close-gaim_request-window-prpl-disconnect-p3
    164: silc-close-gaim_request-window-prpl-disconnect-p4
    165: silc-close-gaim_request-window-prpl-disconnect-p5
    166: silc-close-gaim_request-window-prpl-disconnect-p6
    167: MSN data corruption fix
    168: msn-kill-convo-close-timeout-notices-p1
    169: msn-kill-convo-close-timeout-notices-p2
    170: msn-kill-convo-close-timeout-notices-p3
    171: forceful-connection_disconnect-not-wipe-password
    172: Clipboard leak and history scrolling fix
    173: smileys-logtype-p1
    174: smileys-logtype-p2
    175: Allow Italics in IRC
    176: Add more authors
    177: Update copyright
    178: Update HACKING doc
    179: Fix doc creation
    180: Fix AIM/ICQ Rate Limiting issue


author: Warren Togami <wtogami@redhat.com> 2.0.0-0.3.beta3
changelog:
  - more spec cleanups
  - buildreq libXScrnSaver-devel, gettext, intltool, desktop-file-utils
  - disable mono for now due to #196877


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.17.beta4
changelog:
  - temporary workaround for gstreamer build bug in beta4
    --enable-gstreamer prevented it from working =)
    NOTE: beta4 removed libao support entirely.  Distros that lack gstreamer-0.10+
    will need to use command line sound output from now on.
  - Gadu Gadu is re-included in beta4 without requirement of external library


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.19.beta4
changelog:
  - buildreq NetworkManager-glib-devel FC5+ (katzj)
  - #213800 debug window freeze fix
  - #212818 IRC SIGPIPE crash fix


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.22.beta5
changelog:
  - 2.0.0 beta5
  - Debian patches
      02_gnthistory-in-gtk
      03_gconf-gstreamer
      04_blist-memleak
      05_url-handler-xmpp
      06_jabber-registration-srv
      07_msn-custom-smiley-crash
  - SILC Account Edit Crash


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.31.beta6
changelog:
  - Removed debian-02_gnthistory-in-gtk
    Removed debian-03_gconf-gstreamer.patch
    Upstream recommended removing these patches.
  - Add fix-buggy-fetch-url
  - Enable type_chat and type_chat_nick in default prefs.xml


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.33.beta7devel
changelog:
  - pidgin-2.0.0 snapshot prior to beta7
  - rename gaim to pidgin/purple/finch in various places of spec (not complete)
  - ExcludeArch s390, s390x.  It never did work there.
  - Include meanwhile plugin by moving to Extras


author: Stu Tomlinson <stu@nosnilmot.com> - 2:2.0.0-0.34.beta7devel
changelog:
  - Split into pidgin, finch & libpurple, along with corresponding -devel RPMs
  - Remove ldconfig for plugin directories
  - Fix non-UTF8 %changelog


author: Warren Togami <wtogami@redhat.com> - 2.0.0-0.35.beta7devel
changelog:
  - upstream insists that we remove the Epoch
    rawhide users might need to use --oldpackage once to upgrade
  - remove mono and howl cruft


author: Stu Tomlinson <stu@nosnilmot.com>
changelog:
  - Update Gtk icon cache when installing or uninstalling (#238621)
  - Don't own all directories we put icons in


author: Stu Tomlinson <stu@nosnilmot.com> - 2.0.0-1
changelog:
  - 2.0.0
  - Add scriptlets to install & uninstall GConf schemas
  - Move schema file from libpurple to Pidgin to avoid GConf
    dependencies in libpurple
  - rename gaim-fedora-prefs.xml to purple-fedora-prefs.xml


author: Stu Tomlinson <stu@nosnilmot.com> - 2.0.1-4
changelog:
  - Fix purple-remote for AIM & ICQ accounts (#240589)
  - Add missing Requires to -devel packages
  - Add missing BuildRequires for libxml2-devel


author: Stu Tomlinson <stu@nosnilmot.com> - 2.1.0-1
changelog:
  - 2.1.0
  - Only include translations in libpurple instead of duplicating them in
    packages that depend on libpurple anyway


author: Warren Togami <wtogami@redhat.com> - 2.1.0-2
changelog:
  - Upstream fix backports
    115: gmail-notification-crash #2323
    117: drag-and-drop-mouse-click-group-header #2333
    118: jabber-confirm-authentication-unencrypted-crash #2493


author: Warren Togami <wtogami@redhat.com> - 2.2.0-2
changelog:
  - License clarification
  - Backport patches to fix memory leaks
  - Backport patches to fix proxy settings & status scores


author: Stu Tomlinson <stu@nosnilmot.com> 2.4.1-3
changelog:
  - Rebuild for new evolution-data-server
  - Clean up default prefs.xml
  - Enable nautilus integration plugin by default in prefs.xml (#242289)


author: Stu Tomlinson <stu@nosnilmot.com> 2.5.1-3
changelog:
  - Backport fixes from upstream:
    Add "Has You:" back to MSN tooltips
    Fix crash during removal of your own buddy icon
    Fix crash when handling self signed certificate with NSS SSL


author: Warren Togami <wtogami@redhat.com> 2.5.2-2
changelog:
  - Upstream backports:
    100: sametime-redirect-null crash
    101: NetworkManager-improvement
    102: no-password-in-dialog-if-not-remembering
    103: temporarily-remember-password-during-auto-reconnect
    104: smilie-theme-change-crash
    105: url_fetch_connect_cb-double-free crash
    106: GtkIMHtmlSmileys-remove-crash
    107: remove-dialog-from-open-dialog-list


author: Warren Togami <wtogami@redhat.com> 2.5.2-6
changelog:
  - Automatically detect booleans to enable build features from dist tag
  - Unify RHEL4 and RHEL5 spec with Fedora to make both easier to maintain


author: Stu Tomlison <stu@nosnilmot.com> 2.5.8-2
changelog:
  - Backport patch from upstream to enable NSS to recognize root CA
    certificates that use MD2 & MD4 algorithms in their signature, as
    used by some MSN and XMPP servers


author: Warren Togami <wtogami@redhat.com> 2.6.2-2
changelog:
  - Upstream backports:
      97e003ed2bc2bafbb993693c9ae9c6d667731cc1 aim-buddy-status-grab
      37aa00d044431100d37466517568640cb082680c yahoo-buddy-idle-time
      40005b889ee276fbcd0a4e886a68d8a8cce45698 yahoo-status-change-away
      cb46b045aa6e927a3814d9053c2b1c0f08d6fa62 crash-validate-jid


author: Warren Togami <wtogami@redhat.com> - 2.6.6-1
changelog:
  - 2.6.6 with security and numerous minor bug fixes
    CVE-2010-0277 CVE-2010-0420 CVE-2010-0423
  - Bug #528796: Get rid of #!/usr/bin/env python


author: Warren Togami <wtogami@redhat.com> - 2.6.6-2
changelog:
  - Upstream backports:
      0e3079d15adeb12c1e57ceaf5bf037f9b71c8abd Fix AIM SSL clientLogin
      b14ee507e932a395a0e1f29298af162c8614ca0f Fix AIM clientLogin with proxy


author: Stu Tomlinson <stu@nosnilmot.com> - 2.7.0-1
changelog:
  - 2.7.0 with features, bug fixes and a security fix: CVE-2010-1624 (#591806)
  - Use System SSL Certificates (#576721)
  - Add additional dependencies for Voice + Video (#581343)
  - Upstream backport:
      87ada76abf90c44e615679efc5f8128bb941bba1 Reduce MSN traffic


author: Stu Tomlinson <stu@nosnilmot.com> 2.7.0-2
changelog:
  - Upstream backports:
      3c30f64efedafc379b6536852bbb3b6ef5f1f6c9 - fix for receiving HTML on ICQ
      13fbe0815f84d5b3c001947559f5818c10275f4c - prevent null deref on disconnecting account (#592750)
      c4a874926d07b8597db4b78a181a89cf720a8418 - fix blinking tray icon on new message (#592691)
      cfe0e649dda34d9252d40d8f67e445336a247998 - prevent race condition on Yahoo! login
      e3dd36706068f3b8eabd630ff71d270c145cce42 - fix crash in Oscar (#548128)
      13fbe0815f84d5b3c001947559f5818c10275f4c - fix crash during network disconnect (#592750)


author: Stu Tomlinson <stu@nosnilmot.com> 2.7.1-1
changelog:
  - 2.7.1
  - Adds Direct Connection support for MSN
  - Numerous bug fixes
  - Evolution support moved to pidgin-evolution for F13+ (#581144)


author: Stu Tomlinson <stu@nosnilmot.com> 2.7.1-5
changelog:
  - Rebuild against newer libedataserver
  - spec file cleanup:
      replace %define with %global
      replace tabs with spaces for consistency
      mark prefs.xml as a config file


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.7.3-2
changelog:
  - use _isa in explicit Requires on libpurple to prevent yum from trying to 
    jump architectures to resolve dependency


author: Jon Ciesla <limburgher@gmail.com> - 2.10.2-1
changelog:
  - Update to 2.10.2, BZ 803293, 803299.
  - Dropping MSN patches.  Protocol patch not needed, won't connect
  - to 16 by default.  Crash patch was upstreamed.
  - Dropped nm09 patch, upstreamed.


author: Jon Ciesla <limburgher@gmail.com> - 2.10.4-1
changelog:
  - Update to 2.10.4, CVE-2012-2214, CVE-2012-2318, BZ 806839, 819454.
  - Port to farstream patch upstreamed.


author: Stu Tomlinson <stu@nosnilmot.com> 2.10.5-1
changelog:
  - Update to 2.10.5, CVE-2012-3374
  - Allow building only libraries (#831364)
  - Revive FT crash prevention patch


author: Orion Poplawski <orion@cora.nwra.com> - 2.10.7-5
changelog:
  - Fix setting -fstack-protector on F20+, use -fstack-protector-strong there
  - Filter out provides from plugins


author: Jan Synáček <jsynacek@redhat.com> - 2.10.10-1
changelog:
  - Update to 2.10.10, includes security fixes for CVE-2014-3694,
    CVE-2014-3695, CVE-2014-3696, CVE-2014-3697 and CVE-2014-3698


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.10.11-4
changelog:
  - Removed CFLAGS hacks
  - Fixed building with gcc-5 (by do-not-disable-wall patch)
    Resolves: rhbz#1197698


author: Jan Synáček <jsynacek@redhat.com> - 2.10.11-12
changelog:
  - Refix purple-remote when running in python3 (#1226468)
  - Add python3-dbus to Requires (needed by purple-remote from libpurple)


author: Robin Norwood <rnorwood@redhat.com> - 1.20-2
changelog:
  - Resolves: rhbz#226240
  - Incorporate changes from Steven Pritchard's package review
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - Remove check macro cruft.
  - Update build dependencies.
  - Package LICENSE.
  - BR unzip, zip for better test coverage.


author: Petr Pisar <ppisar@redhat.com> 1.22-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Remove BuildRoot and defattr code from spec
  - Do not export private module DB


author: Adam Williamson <awilliam@redhat.com> - 2.1.1-5
changelog:
  - Disable RDMA support on 32-bit ARM (#1484155)
  - Disable hanging opal_fifo test on ppc64le (gh #2526 / #2966)


author: Keith Seitz <keiths@redhat.com> 8.2-6.el8
changelog:
  - Fix yum vs dnf messaging for RHEL8 (RH BZ 1666249):
    Add gdb-rhbz1666249-suggest-yum-instead-of-dnf.pattch
    Do not define DNF_DEBUGINFO_INSTALL for RHEL.
  - Backport "Remove support for old mangling schemes"
    (Simon Marchi, RH BZ 1668635)
  - Backport "Add checks for the NT_ARM_SVE section in a core file."
    (Alan Hayward, RH BZ 1669953)
  - Backport more Power8 support (IBM, RH BZ 1187581)


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Removed mail patch.  It was included to be more compatible with an
    lpr we no longer ship.  Fixes bug #108762.


author: Tim Waugh <twaugh@redhat.com> 1.6.1-29
changelog:
  - Applied patch to fix CAN-2004-1186 (bug #144684).
  - Applied patch to fix CAN-2004-1185 (bug #144684).
  - Backported patch to fix CAN-2004-1184 (bug #144684).


author: Adam Tkac <atkac redhat com> 1.6.4-10
changelog:
  - updated patches due rpm 4.6
  - enscript -w is handled well (#457719)
  - mkafmmap -V is handled well (#457720)


author: Adam Tkac <atkac redhat com> - 1.6.4-15
changelog:
  - ship postscript files with .eps extension (#505775)
  - merge review fixes (#225729)
  - improve enscript-1.6.1-config.patch


author: Adam Tkac <atkac redhat com> - 1.6.5.1-1
changelog:
  - update to 1.6.5.1
  - patches merged
    - enscript-1.6.1-config.patch
    - enscript-doublefree.patch
    - enscript-1.6.1-CAN-2004-1185.patch
    - enscript-1.6.1-CAN-2004-1186.patch
    - enscript-CVE-2008-3863+CVE-2008-4306.patch
  - license changed to GPLv3+
  - add gettext to BuildRequires


author: Adam Tkac <atkac redhat com> - 1.6.6-1
changelog:
  - update to 1.6.6
  - paches merged
    - enscript-1.6.4-hilight.patch
    - enscript-1.6.4-rh457719.patch


author: Igor Gnatenko <ignatenko@redhat.com> - 0.5.1-1
changelog:
  - Fix Requires for createrepo_c in py3 subpkg
  - Fix crash on python2 due to non-existing shutil.which()


author: Jan Hutar <jhutar@redhat.com> - 0.5.3-1
changelog:
  - Support mixing noarch and archful packages in a yum repo build by Dan Callaghan <dcallagh@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.5-2
changelog:
  - Subpackage python2-rpmfluff has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jan Hutar <jhutar@redhat.com> - 0.5.6-1
changelog:
  - dshea: Add a add_manpage function
  - dshea: Sanitize the base directory name
  - dshea: Support subpackage scriptlets
  - dshea: Allow file directives to be added to symlinks
  - dshea: Use valid images for the test PNG and GIF data


author: Jan Hutar <jhutar@redhat.com> - 0.5.7-1
changelog:
  - Remove python 2 subpackage
  - ksrot: RPM now returns all string data as surrogate-escaped utf-8 strings
  - bcl: Tests fixes
  - bcl: pylint warnings
  - Better version of the check as advised by pmatilai


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.3-1
changelog:
  - update to 0.8.3 to also notice and reflect changes caused by internal
    add/modify/modrdn/delete operations


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.4-1
changelog:
  - update to 0.8.4 to fix:
    - problems updating references, particularly those for %referred() (#474478)
    - inability to notice internal add/modify/modrdn/delete operations (really
      this time) (#474426)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.5-2
changelog:
  - make the example nsslapd-pluginpath values the same on 32- and 64-bit
    systems, because we can depend on the directory server "knowing" which
    directory to search for the plugins


author: Nalin Dahyabhai <nalin@redhat.com> - 0.15-1
changelog:
  - fix %deref and %referred to fail rather than return a valid-but-empty
    result when they fail to evaluate (reported by Rob Crittenden)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.16-1
changelog:
  - fix NIS server startup problem when no port is explicitly configured and
    we're using portmap instead of rpcbind (#500903)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.17-3
changelog:
  - change buildreq from fedora-ds-base-devel to 389-ds-base-devel, which
    should avoid multilib conflicts from installing both arches of the new
    package (#511504)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.18-1
changelog:
  - update to 0.18
    - add a deref_rf function
    - schema-compat: don't respond to search requests for which there's no backend
    - schema-compat: add the ability to do standalone compat containers


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-1
changelog:
  - update to 0.21
    - schema-compat: don't look at standalone compat containers for a search,
      since we'll already have looked at the group container


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-2
changelog:
  - make sure we always pull in nss-devel and nspr-devel, and the right
    ldap toolkit for the Fedora or RHEL version


author: Nalin Dahyabhai <nalin@redhat.com> - 0.24-1
changelog:
  - carry our own yp.x, so that we don't get bitten if libc doesn't include
    yp client routines
  - we need rpcgen at build-time now


author: Nalin Dahyabhai <nalin@redhat.com> - 0.25-1
changelog:
  - speed up building compat entries which reference thousands of other entries
    (more of #692690)
  - 389-ds-base is apparently exclusive to x86_64 and %{ix86} on EL, so we have
    to be, too


author: Nalin Dahyabhai <nalin@redhat.com> - 0.26-1
changelog:
  - when building for 389-ds, use libpthread's read-write locks instead of
    NSPR's (part of #730394/#730403)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.27-1
changelog:
  - when building for 389-ds, use Slapi_RWLocks if they appear to be available
    (the rest of #730394/#730403)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.28-1
changelog:
  - when configured with --with-ldap=openldap, link with -lldap_r rather
    than -lldap (rmeggins, #769107)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.29-1
changelog:
  - add regmatchi/regsubi formatting functions which work like regmatch/regsub,
    but do matching in a case-insensitive manner
  - update NIS map defaults to match {CRYPT} userPassword values in a
    case-insensitive manner so that we also use {crypt} userPassword values
  - fix inconsistencies in the NIS service stemming from using not-normalized DNs
    in some places where it should have used normalized DNs


author: Nalin Dahyabhai <nalin@redhat.com> - 0.30-1
changelog:
  - skip recalculations when the attributes which changed don't factor into
    our calculations (part of #771493)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.33-1
changelog:
  - get more aggressive about skipping unnecessary calculations (most of
    the problem in #771444, though not the approach described there)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34-1
changelog:
  - do entry comparisons ourselves, albeit less throughly, to avoid the worst
    case in pathological cases (more of #771444)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.35-1
changelog:
  - add mmatch/mregmatch[i]/mregsub[i] formatting functions which work like
    match/regmatch[i]/regsub[i], but which can handle and return lists of
    zero or more results (part of #783274)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.36-1
changelog:
  - take steps to avoid making yp_first/yp_next clients loop indefinitely
    when a single LDAP entry produces multiple copies of the same NIS key
    for a given map


author: Nalin Dahyabhai <nalin@redhat.com> - 0.37-1
changelog:
  - fix a compile error on systems where LDAP_SCOPE_SUBORDINATE isn't defined
    (reported by Christian Neuhold)
  - conditionalize whether we have a build dependency on tcp_wrappers (older
    releases) or tcp_wrappers-devel (newer releases)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.39-1
changelog:
  - add a "default" function for trying to evaluate one expression, then
    another, then another... (part of #767372)
  - when creating a compat entry based on a real entry, set an entryUSN based on
    the source entry or the rootDSE (freeipa #864); the "scaffolding" entries
    won't have them


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-1
changelog:
  - treat padding values passed to the "link" function as expressions to be
    evaluated rather than simply as literal values (part of #767372)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.41-1
changelog:
  - log errors evaluating pad expressions in %link rather than continuing on
    until we hit an arithmetic exception (#810258)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a leak due to us assuming that slapi_mods_add_smod() not taking ownership
    of an smod along with its contents, when it just keeps the contents


author: Nalin Dahyabhai <nalin@redhat.com> - 0.43-1
changelog:
  - reintroduce support for directory server transactions (nhosoi, IPA#3046)
  - control transaction support at run-time, deciding when to do things based
    on the value of the nsslapd-pluginbetxn attribute in the plugin's entry
  - NIS: add default settings for shadow.byname and passwd.adjunct.byname maps


author: Nalin Dahyabhai <nalin@redhat.com> - 0.44-1
changelog:
  - add missing newline to a couple of debug log messages
  - note whether or not betxn support is compiled in as part of the
    nsslapd-pluginVersion value we report to the server
  - register callbacks in the same order in both plugins, so that
    their log messages are logged in the same order


author: Nalin Dahyabhai <nalin@redhat.com> - 0.44-2
changelog:
  - set betxn support to be disabled by default on Fedora 17 or EL 5 or older,
    which have versions of IPA < 3.0, per mkosek on freeipa-devel


author: Nalin Dahyabhai <nalin@redhat.com> - 0.46-1
changelog:
  - when checking if we can skip processing for a given change, pay attention to
    whether or not the changes cause the entry to need to be added or removed
    from a map (#912673)
  - check SLAPI_PLUGIN_OPRETURN in post-change hooks, in case the backend failed
    to update things but the server called us anyway


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.5-1
changelog:
  - merge Alexander Bokovoy's patches to
    - teach the schema compatibility plugin to optionally serve user and group
      information retrieved from libc as part of a set of compat entries
    - handle simple bind requests for those entries by calling out to PAM
    - to rewrite the DN of incoming bind requests to compat entries to point
      at the source entries, instead of returning a referral which most clients
      won't handle
  - include IPA-specific docs as docs


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.6-1
changelog:
  - only buildrequire libsss_nss_idmap-devel on releases that included SSSD
    version 1.10 or later, where it first appeared


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.7-1
changelog:
  - fix building against versions of directory server older than 1.3.0, which
    first introduced slapi_escape_filter_value()


author: Nalin Dahyabhai <nalin@redhat.com> - 0.48-1
changelog:
  - try to gracefully handle failures obtaining internal locks
  - fix locating-by-name of entries with names that require escaping
  - add self-tests for nsswitch and PAM functionality
  - make nsswitch mode properly handle user and group names with commas in them
  - handle attempts to PAM authenticate to compat groups (i.e., with failure)
  - drop the "schema-compat-origin" attribute


author: Nalin Dahyabhai <nalin@redhat.com> - 0.49-1
changelog:
  - add {nis,schema-compat}-ignore-subtree and -restrict-subtree settings,
    which should let us avoid deadlocks when tasks are modifying data in
    the backend database (#1007451)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.50-1
changelog:
  - if we get an EPIPE while registering with rpcbind, try to reconnect and
    retransmit before giving up


author: Nalin Dahyabhai <nalin@redhat.com> - 0.51-1
changelog:
  - fix another request argument memory leak in NIS server (#1040159)
  - fix miscellaneous items found by static analysis


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-1
changelog:
  - correctly reflect whether or not we're built with transaction support in
    the module's nsslapd-pluginVersion attribute
  - fix a couple of should've-used-memmove()-instead-of-memcpy() cases which
    would hit when removing maps or groups of maps (#1043546/#1043638)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-3
changelog:
  - remove ExclusiveArch if %{rhel} is 7 or higher, because 389-ds-base gets
    built for everything now (#1055711)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.53-1
changelog:
  - correct the default NIS map settings for hosts.byname and hosts.byaddr,
    from report by Rik Megens
  - fix several problems when hitting out-of-memory conditions, spotted by
    static analysis


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-1
changelog:
  - Add support for FreeIPA's ID views
  - Allow searching SSSD-provided users as memberUid case-insensitevly
    Fixes bug #1130131


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54.1-1
changelog:
  - support FreeIPA overrides in LDAP BIND callback
  - ignore FreeIPA override searchs outside configured schema compat subtrees


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54.2-1
changelog:
  - CVE-2015-0283 slapi-nis: infinite loop in getgrnam_r() and getgrgid_r() (#1206049)
  - Make sure nss_sss.so.2 module is used directly
  - Allow building slapi-nis with ID views against 389-ds-base from RHEL7.0/CentOS7.0 releases


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.55-1
changelog:
  - Support external members of IPA groups in schema compat
  - Support bind over ID overrides when uid is not overridden
  - Populate schema compat trees in parallel to LDAP server startup


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 4-1
changelog:
  - Release v4. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Extract user session recording functionality from tlog-rec into a new tool:
    tlog-rec-session. It should be used as the user's login shell now, and
    tlog-rec should be used as a general recording and testing tool.
  - Add (optional) support for writing to and reading from Systemd Journal - the
    "journal" reader and writer.
  - Make tlog-rec default to "file" writer, and tlog-rec-session to "journal",
    if built with Journal support, and to "syslog" otherwise.
  - Add "-o" option to tlog-rec as an alias to "--file-path".
  - Add "-i" option to tlog-play as an alias to "--file-path".
  - Assume locale charset is UTF-8, if ASCII charset is detected, since that is
    a likely indication the locale settings were lost. E.g. upon console login
    or "su -" on Fedora and RHEL.
  - Switch the "ver" JSON field type to string. Now it should be two numbers
    separated by a dot. The increase of the first number indicates
    forward-incompatible changes, the increase of the second number -
    forward-compatible. If the dot and the second number are omitted, the second
    number is considered to be zero. Bump the format version to "2".
  - Add a new JSON field: "rec", containing an opaque host-unique recording ID.
    Bump the format version to "2.1".
  - Add support for playback controls, both through the command line and via
    playback-time control keys, including: speed adjustment, pause/resume,
    fast-forward to a time, and packet-by-packet stepping through the recording.
  - Add optional rate-limiting of logged messages. Both throttling and dropping
    messages are supported.
  - Add "--lax" option to tlog-play to allow playing back recordings with
    missing messages.
  - Fix input being ignored when there is a lot of output, while recording.
  - Remove addition of tlog-rec (tlog-rec-session) to /etc/shells from RPM
    packaging to prevent users from changing their shells themselves once it has
    been assigned.
  - Add support for specifying the shell to start via the tlog-rec-session
    executable name. E.g. by making a tlog-rec-session-shell-zsh ->
    tlog-rec-session symlink and executing it. That can be used to specify
    particular shells to be recorded for specific users by assigning these
    symlinks as their login shells.
  - Make error messages from all the tools a bit less noisy and more readable.


author: Kirill Glebov <kgliebov@redhat.com> - 5-1
changelog:
  - Release v5. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Implement support for --configuration option for all programs.
    The option makes the program output its configuration in JSON and then
    exit.
  - Add BuildDependencies to allow yum-builddep.
  - Open JSON writer file with euid/egid. To allow creating protected log files
    with tlog-rec-session, open the JSON writer's file with the EUID and
    GUID the program was started with.
  - Installing Packages with the APT Addon instead of apt-get.
  - Switch to using TLOG_ERRS_RAISE macros.
  - Fix tlog-play cleanup-path segfault.
  - Modify command-line option parsing.
  - Remove "fields" field from ES query URL to fix compatibility with
    Elasticsearch 5.
  - Remove unused _source parameter from ES query URL.
  - Fix tlog-rec-session file permissions bug.
  - Use CLOCK_MONOTONIC for rate-limiting writing.
  - Filter out some more input control sequences.


author: Justin Stephenson <jstephen@redhat.com> - 6-1
changelog:
  - Release v6. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Add integration tests for end-to-end test coverage.
  - Fix compiler type comparison error with json-c json_object_array_length
    return value.
  - Fix a distribution issue causing incorrect M4_CONF_PATH expansion.
  - Log more detailed error when systemd journal is not present.


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Release v7
  - Allow tlog-play redirection of stdout
  - Add -i/--interactive option to tlog-rec-session. Allows login
    programs to call tlog-rec-session more transparently.
  - Make in_txt/out_txt fields optional. This handles missing fields
    when reading from Elasticsearch or other backends.


author: Chris Weyl <cweyl@alumni.drew.edu> 1.004000-1
changelog:
  - auto-update to 1.004000 (by cpan-spec-update 0.01)
  - altered br on perl(ExtUtils::MakeMaker) (6.31 => 6.42)


author: Chris Weyl <cweyl@alumni.drew.edu> 1.004004-1
changelog:
  - auto-update to 1.004004 (by cpan-spec-update 0.01)
  - added a new br on perl(ExtUtils::Install) (version 1.43)
  - added a new req on perl(CPAN) (version 1.80)
  - added a new req on perl(ExtUtils::CBuilder) (version 0)
  - added a new req on perl(ExtUtils::Install) (version 1.43)
  - added a new req on perl(ExtUtils::MakeMaker) (version 6.31)
  - added a new req on perl(ExtUtils::ParseXS) (version 0)
  - added a new req on perl(Module::Build) (version 0.28)


author: Iain Arnell <iarnell@gmail.com> 1.008001-1
changelog:
  - update to latest upstream version
  - drop R/BR perl(ExtUtils::CBuilder) and perl(ExtUtils::ParseXS)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added the umoven patch from James Youngman <jay@gnu.org>
  - fixed build problems on newer glibc releases


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - upgrade to 3.99 in order to
  -    add new 2.2.x open flags (#2955).
  -    add new 2.2.x syscalls (#2866).
  - strace 3.1 patches carried along for now.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - doh, actually apply the 2.4 syscalls patch
  - make it compile with 2.4.0-test7-pre4+ headers, add
    getdents64 and fcntl64


author: Preston Brown <pbrown@redhat.com> 4.3-1
changelog:
  - new upstream version.  Seems to have integrated most new syscalls
  - tracing threaded programs is now functional.


author: Jakub Jelinek <jakub@redhat.com> 4.4-8
changelog:
  - newer version of the clone fixing patch (Roland McGrath)
  - aio syscalls for i386/ia64/ppc (Ben LaHaise)


author: Roland McGrath <roland@redhat.com> 4.5.3-1
changelog:
  - new upstream version, mq_* calls (#120701), -p vs NPTL (#120462), more fixes (#118694, #120541, #118685)


author: Roland McGrath <roland@redhat.com> 4.5.6-1
changelog:
  - new upstream version, updates ioctl lists (#127398), fixes quotactl (#127393), more ioctl decoding (#126917)


author: Roland McGrath <roland@redhat.com> - 4.5.7-2
changelog:
  - new upstream version, misc fixes and updates (#128091, #129166, #128391, #129378, #130965, #131177)


author: Roland McGrath <roland@redhat.com> - 4.5.8-1
changelog:
  - fix multithreaded exit handling (#132150, #135254)
  - fix ioctl name matching (#129808)
  - print RTC_* ioctl structure contents (#58606)
  - grok epoll_* syscalls (#134463)
  - grok new RLIMIT_* values (#133594)
  - print struct cmsghdr contents for sendmsg (#131689)
  - fix clock_* and timer_* argument output (#131420)


author: Roland McGrath <roland@redhat.com> - 4.5.9-2
changelog:
  - update ia64 syscall list (#146245)
  - fix x86_64 syscall argument extraction for 32-bit processes (#146093)
  - fix -e signal=NAME parsing (#143362)
  - fix x86_64 exit_group syscall handling
  - improve socket ioctl printing (#138223)
  - code cleanups (#143369, #143370)
  - improve mount flags printing (#141932)
  - support symbolic printing of x86_64 arch_prctl parameters (#142667)
  - fix potential crash in getxattr printing


author: Roland McGrath <roland@redhat.com> - 4.5.10-1
changelog:
  - Fix select handling on nonstandard fd_set sizes.
  - Don't print errors for null file name pointers.
  - Fix initial execve output with -i (#143365).


author: Roland McGrath <roland@redhat.com> - 4.5.12-1
changelog:
  - Fix known syscall recognition for IA32 processes on x86-64 (#158934).
  - Fix bad output for ptrace on x86-64 (#159787).
  - Fix potential buffer overruns (#151570, #159196).
  - Make some diagnostics more consistent (#159308).
  - Update PowerPC system calls.
  - Better printing for Linux aio system calls.
  - Don't truncate statfs64 fields to 32 bits in output (#158243).
  - Cosmetic code cleanups (#159688).


author: Roland McGrath <roland@redhat.com> - 4.5.13-1
changelog:
  - Fix setsockopt decoding on 64-bit (#162449).
  - Fix typos in socket option name strings (#161578).
  - Display more IPV6 socket options by name (#162450).
  - Don't display inappropriate syscalls for -e trace=file (#159340).
  - New selector type -e trace=desc for file-descriptor using calls (#159400).
  - Fix 32-bit old_mmap syscall decoding on x86-64 (#162467, #164215).
  - Fix errors detaching from multithreaded process on interrupt (#161919).
  - Note 4.5.12 fix for crash handling bad signal numbers (#162739).


author: Roland McGrath <roland@redhat.com> - 4.5.14-1
changelog:
  - Fix biarch decoding of socket syscalls (#174354).
  - Fix biarch -e support (#173986).
  - Accept numeric syscalls in -e (#174798).
  - Fix ipc syscall decoding (#164755).
  - Improve msgrcv printing (#164757).
  - Man page updates (#165375).
  - Improve mount syscall printing (#165377).
  - Correct printing of restarting syscalls (#165469).


author: Jakub Jelinek <jakub@redhat.com> - 4.5.14-4
changelog:
  - Fix ia64 syscall decoding (#206768)
  - Fix build with glibc-2.4.90-33 and up on all arches but ia64
  - Fix build against 2.6.18+ headers


author: Roland McGrath <roland@redhat.com> - 4.5.15-1
changelog:
  - biarch fixes (#179740, #192193, #171626, #173050, #218433, #218043)
  - fix -ff -o behavior (#204950, #218435, #193808, #219423)
  - better quotactl printing (#118696)
  - *at, inotify*, pselect6, ppoll and unshare syscalls (#178633, #191275)
  - glibc-2.5 build fixes (#209856)
  - memory corruption fixes (#200621
  - fix race in child setup under -f (#180293)
  - show ipc key values in hex (#198179, #192182)
  - disallow -c with -ff (#187847)
  - Resolves: RHBZ #179740, RHBZ #192193, RHBZ #204950, RHBZ #218435
  - Resolves: RHBZ #193808, RHBZ #219423, RHBZ #171626, RHBZ #173050
  - Resolves: RHBZ #218433, RHBZ #218043, RHBZ #118696, RHBZ #178633
  - Resolves: RHBZ #191275, RHBZ #209856, RHBZ #200621, RHBZ #180293
  - Resolves: RHBZ #198179, RHBZ #198182, RHBZ #187847


author: Roland McGrath <roland@redhat.com> - 4.5.16-1
changelog:
  - fix multithread issues (#240962, #240961, #247907)
  - fix spurious SIGSTOP on early interrupt (#240986)
  - fix utime for biarch (#247185)
  - fix -u error message (#247170)
  - better futex syscall printing (##241467)
  - fix argv/envp printing with small -s settings, and for biarch
  - new syscalls: getcpu, eventfd, timerfd, signalfd, epoll_pwait,
    move_pages, utimensat


author: Roland McGrath <roland@redhat.com> - 4.5.17-1
changelog:
  - handle O_CLOEXEC, MSG_CMSG_CLOEXEC (#365781)
  - fix biarch stat64 decoding (#222275)
  - fix spurious "..." in printing of environment strings (#358241)
  - improve prctl decoding (#364401)
  - fix hang wait on exited child with exited child (#354261)
  - fix biarch fork/vfork (-f) tracing (#447475)
  - fix biarch printing of negative argument kill (#430585)
  - fix biarch decoding of error return values (#447587)
  - fix -f tracing of CLONE_VFORK (#455078)
  - fix ia64 register clobberation in -f tracing (#453438)
  - print SO_NODEFER, SA_RESETHAND instead of SA_NOMASK, SA_ONESHOT (#455821)
  - fix futex argument decoding (#448628, #448629)


author: Roland McGrath <roland@redhat.com> - 4.5.18-1
changelog:
  - build fix for newer kernel headers (#457291)
  - fix CLONE_VFORK handling (#455078)
  - Support new Linux/PPC system call subpage_prot and PROT_SAO flag.
  - In sigaction system call, display sa_flags value along with SIG_DFL/SIG_IGN.


author: Roland McGrath <roland@redhat.com> - 4.5.19-1
changelog:
  - New upstream release, work mostly by Dmitry V. Levin <ldv@altlinux.org>
    + exit/kill strace with traced process exitcode/signal (#105371);
    + fixed build on ARM EABI (#507576);
    + fixed display of 32-bit argv array on 64-bit architectures (#519480);
    + fixed display of 32-bit fcntl(F_SETLK) on 64-bit architectures (#471169);
    + fixed several bugs in strings decoder, including potential heap
      memory corruption (#470529, #478324, #511035).


author: Roland McGrath <roland@redhat.com> - 4.5.20-1
changelog:
  - New upstream release, work mostly by Andreas Schwab and Dmitry V. Levin.
    + fixed potential stack buffer overflow in select decoder (#556678);
    + fixed FTBFS (#539044).


author: Dmitry V. Levin <ldv@altlinux.org> - 4.8-1
changelog:
  - New upstream release:
    + fixed ERESTARTNOINTR leaking to userspace on ancient kernels (#659382);
    + fixed decoding of *xattr syscalls (#885233);
    + fixed handling of files with 64-bit inode numbers by 32-bit strace (#912790);
    + added aarch64 support (#969858).


author: Dmitry V. Levin <ldv@altlinux.org> - 4.9-1
changelog:
  - New upstream release:
    + fixed build when <sys/ptrace.h> and <linux/ptrace.h> conflict (#993384);
    + updated CLOCK_* constants (#1088455);
    + enabled ppc64le support (#1122323);
    + fixed attach to a process on ppc64le (#1129569).


author: Dmitry V. Levin <ldv@altlinux.org> - 4.11-1
changelog:
  - New upstream release:
    + print nanoseconds along with seconds in stat family syscalls (#1251176).


author: Dmitry V. Levin <ldv@altlinux.org> - 4.11.0.163.9720-1
changelog:
  - New upstream snapshot v4.11-163-g972018f:
    + fixed decoding of syscalls unknown to the kernel on s390/s390x (#1298294).


author: Dmitry V. Levin <ldv@altlinux.org> - 4.14-1
changelog:
  - v4.13 -> v4.14:
    + added printing of the mode argument of open and openat syscalls
      when O_TMPFILE flag is set (#1377846).


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.1-3
changelog:
  - Use SPDX abbreviations for licenses.
  - Add library directories to existing LDFLAGS and not override them.


author: Remi Collet <remi@fedoraproject.org> - 4.0.0-0.3.git647cb2b
changelog:
  - new snapshot with our pull request
  - allow to run test suite simultaneously on 32/64 arch
  - build warning free


author: Remi Collet <rcollet@redhat.com> - 4.0.2-2
changelog:
  - fix perm on config dir
  - improve SCL compatibility
  - always provides php-pecl-apc-devel and apc-panel


author: Remi Collet <remi@fedoraproject.org> - 4.0.3-1
changelog:
  - Update to 4.0.3 (beta)
  - install doc in pecl doc_dir
  - install tests in pecl test_dir (in devel)
  - cleanup SCL stuff


author: Timothy Redaelli <tredaelli@redhat.com> - 0.108-1
changelog:
  - Fix bash autocompletion (#1657020)
  - Fix --no-save to do not always returns with exit code 1
  - Return error code when unbinding a device from a driver fails


author: Paul Howarth <paul@city-fan.org> - 2.033-1
changelog:
  - Update to 2.033 (fixed typos and spelling errors - Perl RT#81816)
  - Use more explicit %files list
  - Simplify inclusion of IO::Compress::FAQ
  - Drop redundant explicit requires of Compress::Raw::{Bzip2,Zlib}
  - Drop installdirs patch, not needed with perl 5.12
  - Default installdirs are perl, so no need to specify it explicitly
  - Make %summary less generic


author: Paul Howarth <paul@city-fan.org> - 2.040-1
changelog:
  - Update to 2.040
    - IO::Compress::Zip:
      - Added CanonicalName option (note this option is set to true by default)
      - Added FilterName option
      - ExtAttr now populates MSDOS attributes
    - IO::Uncompress::Base:
      - Fixed issue where setting $\ would corrupt the uncompressed data
    - t/050interop-*.t:
      - Handle case when external command contains a whitespace (CPAN RT#71335)
    - t/105oneshot-zip-only.t:
      - CanonicalName test failure on Windows (CPAN RT#68926)


author: Paul Howarth <paul@city-fan.org> - 2.042-1
changelog:
  - Update to 2.042
    - IO::Compress::Zip:
      - Added exUnixN option to allow creation of the "ux" extra field, which
        allows 32-bit UID/GID to be stored
      - In one-shot mode use exUnixN rather than exUnix2 for the UID/GID
    - IO::Compress::Zlib::Extra::parseExtraField:
      - Fixed bad test for length of ID field (CPAN RT#72329, CPAN RT#72505)


author: Paul Howarth <paul@city-fan.org> - 2.043-1
changelog:
  - Update to 2.043
    - IO::Compress::Base:
      - Fixed issue that with handling of Zip files with two (or more) entries
        that were STORED; symptom is the first is uncompressed ok but the next
        will terminate early if the size of the file is greater than BlockSize
        (CPAN RT#72548)


author: Paul Howarth <paul@city-fan.org> - 2.044-1
changelog:
  - Update to 2.044
    - Moved FAQ.pod under the lib directory so it can get installed
    - Added bin/zipdetails
    - In IO::Compress::Zip, in one-shot mode, enable Zip64 mode if the input
      file/buffer ≥ 0xFFFFFFFF bytes
    - Update IO::Compress::FAQ


author: Paul Howarth <paul@city-fan.org> - 2.046-1
changelog:
  - Update to 2.046
    - Minor update to bin/zipdetails
    - Typo in name of IO::Compress::FAQ.pod
    - IO::Uncompress::Unzip:
      - Example for walking a zip file used eof to control the outer loop; this
        is wrong
    - IO::Compress::Zip:
      - Change default for CanonicalName to false (CPAN RT#72974)
  - Freeze Compress::Raw::* dependency versions until next synchronized release


author: Paul Howarth <paul@city-fan.org> - 2.048-1
changelog:
  - Update to 2.048
    - Set minimum Perl version to 5.6
    - Set minimum zlib version to 1.2.0
    - IO::Compress::Zip:
      - In one-shot zip, set the Text Flag if "-T" thinks the file is a text file
      - In one-shot mode, wrote mod time and access time in wrong order in the
        "UT" extended field
    - IO::Compress test suite fails with Compress::Raw::Zlib 2.047 and zlib < 1.2.4
      (CPAN RT#74503)
  - Resync Compress::Raw::* dependency versions
  - Add buildreqs for core perl modules, which might be dual-lived
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 2.049-1
changelog:
  - Update to 2.049
    - IO::Compress::Zip:
      - Error in t/cz-03zlib-v1.t that caused warnings with 5.15 (Perl RT#110736)


author: Paul Howarth <paul@city-fan.org> - 2.052-1
changelog:
  - Update to 2.052
    - IO::Compress::Zip: force a ZIP64 archive when it contains ≥ 0xFFFF entries
    - Fix typo in POD (CPAN RT#76130)
  - Don't need to remove empty directories from buildroot


author: Paul Howarth <paul@city-fan.org> - 2.055-1
changelog:
  - Update to 2.055
    - FAQ: added a few paragraphs on how to deal with pbzip2 files
      (CPAN RT#77743)
    - Compress::Zip: speed up compress, uncompress, memGzip and memGunzip
      (CPAN RT#77350)
  - BR: perl(lib)
  - Drop BR: perl(Test::Builder) and perl(Test::More) as they're bundled
  - Drop BR: perl(Config), perl(Fcntl), perl(File::Copy), perl(File::Glob),
    perl(POSIX) and perl(Symbol) as they're not dual-lived
  - Drop redundant explicit require for perl(Exporter)
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - IO::Compress::Zip
      - Allow member name and Zip Comment to be "0"
    - IO::Compress::Base::Common
      - Remove "-r" test - the file open will catch this
      - IO::Compress::Base::Common returned that it could not read readable files
        in NFS (CPAN RT#80855)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79820)
    - General performance improvements
    - Fix failing 01misc.t subtest introduced in 2.057 (CPAN RT#81119)
  - Explicitly install to 'perl' directories


author: Paul Howarth <paul@city-fan.org> - 2.059-1
changelog:
  - Update to 2.059
    - IO::Compress::Base
      - Added "Encode" option (fixes the encoding half of CPAN RT#42656)


author: Paul Howarth <paul@city-fan.org> - 2.060-1
changelog:
  - Update to 2.060
    - Updated POD
      - CPAN RT#82138: Example code not clear - gunzip() takes filenames!
    - IO::Compress::Base
      - Remove the flush call when opening a filehandle


author: Paul Howarth <paul@city-fan.org> - 2.061-1
changelog:
  - Update to 2.061
    - zipdetails (1.06)
      - Get it to cope with Android 'zipalign' non-standard extra fields; these
        are used to make sure that a non-compressed member starts on a 4 byte
        boundary
    - unzip example with IO::Uncompress::Unzip (CPAN RT#84647)


author: Paul Howarth <paul@city-fan.org> - 2.062-1
changelog:
  - Update to 2.062
    - Fix up tests for imminent bleadperl changes (CPAN RT#87335)
    - Typo fixes (CPAN RT#84647)
    - IO::Compress::Gzip test t/100generic-bzip2.t hung on Cygwin (CPAN RT#86814)


author: Paul Howarth <paul@city-fan.org> - 2.064-1
changelog:
  - Update to 2.064
    - Use android-compatible flags when calling gzip in
      IO-Compress/t/050interop-gzip.t (CPAN RT#90216)


author: Paul Howarth <paul@city-fan.org> - 2.066-1
changelog:
  - Update to 2.066
    - IO::Uncompress::Gzip
      - Documentation of ExtraFlags stated the XFL values for BEST_COMPRESSION
        and BEST_SPEED use the values 2 and 4 respectively; they should be 4 and
        2 (code for setting XFL was correct)
    - IO::Uncompress::Gunzip
      - Fix regression preventing gunzip to in-memory file handle (CPAN RT#95494)


author: Paul Howarth <paul@city-fan.org> - 2.067-1
changelog:
  - Update to 2.067
    - IO::Compress::RawDeflate unnecessarily loads IO::Seekable (CPAN RT#100257)
  - Classify buildreqs by usage


author: Paul Howarth <paul@city-fan.org> - 2.068-1
changelog:
  - Update to 2.068
    - Disable running of some of the slower test harnesses by default;
      COMPRESS_ZLIB_RUN_MOST needs to be set to run them, which makes life more
      bearable on legacy platforms


author: David King <amigadave@amigadave.com> - 3.15.90-1
changelog:
  - Update to 3.15.90
  - Use license macro for COPYING and COPYING.LIB
  - Use pkgconfig for BuildRequires


author: Owen Taylor <otaylor@redhat.com> - 3.20.1-2
changelog:
  - Remove dependency on system-backgrounds-gnome; this made sense when
    gnome-desktop contained the GConf schemas, but now the background
    settings live in gsettings-desktop-schemas and are overridden to
    point to a Fedora background with a file we drop in from
    desktop-backgrounds-gnome.


author: Thomas Woerner <twoerner@redhat.com> - 1.10.13.1
changelog:
  - Fix unit test: use platform-python, py.test-3, no flake8 (RHBZ#1576803)
  - Update of ValidShells (RHBZ#1633698)
  - Remove Python2 paths from TagsCheck.py (RHBZ#1633698)
  - Enable bash-competion scripts (RHBZ#1577890)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Put changelog at the end
  - Move .so files to devel subpackage
  - Don't mess with ld.so.conf
  - Don't use %{prefix}, this isn't a relocatable package
  - Don't define a bad docdir
  - Add BuildRequires
  - Use %{_tmppath}
  - Don't define name, version etc. on top of the file (why 
    do so many do that?)
  - s/Copyright/License/


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Add a patch that moves the includes to librsvg-1/librsvg
  - in preparation for a later librsvg 2 library.


author: Dan Williams <dcbw@redhat.com> - 2.6.4-7
changelog:
  - Fix usage of "%{_bindir}/update-gdk-pixbuf-loaders %{_host}" 
    to point to right place and architecture


author: Matthias Clasen <mclasen@redhat.com> - 2.8.1-2
changelog:
  - Must use the same rpm macro for the host triplet as the
    gtk2 package, otherwise things can fall apart.  (#137676)


author: Matthias Clasen <mclasen@redhat.com> - 2.31.0-0.1.20100628git
changelog:
  - Update to a git snapshot that builds against standalone gdk-pixbuf
  - Drop librsvg3 package
  - Drop svg theme engine


author: Adam Tkac <atkac redhat com> - 2.31.0-0.3.20100628git
changelog:
  - fix crash in rsvg-gobject.c:instance_dispose function
    (https://bugzilla.gnome.org/show_bug.cgi?id=623383)


author: Hans de Goede <hdegoede@redhat.com> - 2.35.0-3
changelog:
  - Fix including rsvg.h always causing a deprecated warning, as this breaks
    apps compiling with -Werror


author: David King <amigadave@amigadave.com> - 2.40.7-1
changelog:
  - Update to 2.40.7
  - Use license macro for COPYING and COPYING.LIB
  - Use pkgconfig for BuildRequires
  - Add URL


author: Jindrich Novy <jnovy@redhat.com> - 1.6.2-5
changelog:
  - use btrfs_noversion to really disable BTRFS support
  - amend/reuse BUILDTAGS
  - still keep device-mapper-devel BR otherwise build fails
    despite dm support being disabled (build scripting invokes
    pkg-config for devmapper which is shipped by the dm-devel
    package)


author: Jindrich Novy <jnovy@redhat.com> - 1.6.3-2
changelog:
  - apply fix to not to fail gating tests:
    don't parse the config for cgroup-manager default
  - don't hang while on podman run --rm - bug 1767663


author: Jindrich Novy <jnovy@redhat.com> - 1.6.3-4
changelog:
  - use the file events logger backend if systemd isn't available
    (thanks to Giuseppe Scrivano)
  - Related: RHELPLAN-25138


author: Rex Dieter <rdieter@fedoraproject.org> 5.0.0-0.1.beta2
changelog:
  - %build: -accessibility
  - macros.qt5: +%_qt5_archdatadir +%_qt5_settingsdir
  - pull in a couple more configure-related upstream patches


author: Rex Dieter <rdieter@fedoraproject.org> 5.0.1-4
changelog:
  - create/own %{_qt5_plugindir}/iconengines
  - -devel: create/own %{_qt5_archdatadir}/mkspecs/modules
  - cleanup .prl


author: Rex Dieter <rdieter@fedoraproject.org> 5.0.1-5
changelog:
  - -static subpkg, Requires: fontconfig-devel,glib2-devel,zlib-devel
  - -devel: Requires: pkgconfig(gl)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.2.0-0.1.alpha
changelog:
  - 5.2.0-alpha
  - -system-harfbuzz
  - rename subpkg -x11 => -gui
  - move some gui-related plugins base => -gui
  - don't use symlinks in %_qt5_bindir (more qtchooser-friendly)


author: Rex Dieter <rdieter@fedoraproject.org> 5.2.0-0.10.rc1
changelog:
  - 5.2.0-rc1
  - revert/omit recent egl packaging changes
  - -doc install changes-5.* files here (#989149)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.2.0-0.11.rc1
changelog:
  - needs a minimum version on sqlite build dependency (#1038617)
  - fix build when doc macro not defined


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.2.0-4
changelog:
  - fix QTBUG-35459 (too low entityCharacterLimit=1024 for CVE-2013-4549)
  - fix QTBUG-35460 (error message for CVE-2013-4549 is misspelled)
  - reenable docs on Fedora (accidentally disabled)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 5.3.1-4
changelog:
  - support the old versions of libxcb and libxkbcommon in F19 and F20
  - don't use the bundled libxkbcommon


author: Rex Dieter <rdieter@fedoraproject.org> - 5.3.1-5
changelog:
  - drop dep on xorg-x11-xinit (own shared dirs instead)
  - fix/improve qtchooser support using alternatives (#1122316)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.4.0-0.1.beta
changelog:
  - 5.4.0-beta
  - avoid extra -devel deps by moving *Plugin.cmake files to base pkgs
  - support bootstrap macro, to disable -doc,-examples


author: Rex Dieter <rdieter@fedoraproject.org> - 5.4.1-3
changelog:
  - pull in handful of upstream fixes, particularly...
  - Fix a division by zero when processing malformed BMP files (QTBUG-44547, CVE-2015-0295)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.4.1-12
changelog:
  - backport a couple more upstream fixes
  - introduce -common noarch subpkg, should help multilib issues


author: Helio Chissini de Castro <helio@kde.org> - 5.5.0-11
changelog:
  - Add mesa-dri-drivers as recommends on gui package as reported by Kevin Kofler
  - Reference https://bugzilla.redhat.com/1249280


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.5.0-14
changelog:
  - remove GDB hackery again, -12 built fine on i686, hack breaks ARM build
  - fix 10-qt5-check-opengl2.sh for multiple screens (#1245755)


author: Rex Dieter <rdieter@fedoraproject.org> 5.5.0-16
changelog:
  - backport 0055-Respect-manual-set-icon-themes.patch (kde#344469)
  - conditionally use valgrind only if needed


author: Rex Dieter <rdieter@fedoraproject.org> 5.5.0-18
changelog:
  - When a screen comes back online, the windows need to be told about it (QTBUG-47041)
  - xcb: Ignore disabling of outputs in the middle of the mode switch


author: Helio Chissini de Castro <helio@kde.org> - 5.5.1-8
changelog:
  - qt5-qdoc need requires >= current version, otherwise will prevent the usage further when moved to qttools


author: Helio Chissini de Castro <helio@kde.org> - 5.6.0-0.2
changelog:
  - Valgrind still needed as buildreq due recent split qdoc package, but we can get rid of
    specific arch set.
  - Added missing libproxy buildreq
  - Epel and RHEL doesn't have libinput, so a plugin need to be excluded for this distros


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-0.4
changelog:
  - re-introduce bootstrap/examples macros
  - put examples-manifest.xml in -examples
  - restore -doc multilib hack (to be on the safe side, can't hurt)
  - %build: s/-optimized-qmake/-optimized-tools/


author: Rex Dieter <rdieter@fedoraproject.org> 5.6.0-0.40.rc
changelog:
  - respin QTBUG-51649 patch
  - %build: use -dbus-runtime unconditionally
  - drop (unused) build deps: atspi, dbus, networkmanager


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-6
changelog:
  - macros.qt5: we really only want the null-pointer-checks flag here
    and definitely no arch-specific ones


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-8
changelog:
  - make 10-qt5-check-opengl2.sh xinit script more robust
  - enable journald support for el7+ (#1315239)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-17
changelog:
  - support out-of-tree build
  - better %check
  - pull in final/upstream fixes for QTBUG-51648,QTBUG-51649
  - disable examples/tests in bootstrap mode


author: Rex Dieter <rdieter@fedoraproject.org> - 5.7.0-10
changelog:
  - fix Source0: https://download.qt.io/official_releases/qt/5.9/5.9.0/submodules/qtbase-opensource-src-5.9.0.tar.xz


author: Rex Dieter <rdieter@fedoraproject.org> - 5.7.1-6
changelog:
  - namespace QT_VERSION_CHECK to workaround major/minor being pre-defined (#1396755)
  - update moc patch to define _SYS_SYSMACROS_H (#1396755)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.8.0-6
changelog:
  - bootstrap (rawhide)
  - revert some minor changes introduced since 5.7
  - move *Plugin.cmake items to runtime (not -devel)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.9.1-6
changelog:
  - enable openssl11 support only for f27+ (for now)
  - Use mariadb-connector-c-devel, f28+ (#1493909)
  - Backport upstream mariadb patch (#1491316)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.0-2
changelog:
  - re-enable gold linker (#1458003)
  - drop qt5_null_flag/qt5_deprecated_flag hacks (should be fixed upstream for awhile)
  - make qt_settings/journald support unconditional


author: Jan Grulich <jgrulich@redhat.com> - 5.11-1-7
changelog:
  - Move libQt5EglFSDeviceIntegration lib out of the -devel subpkg
    Resolves: bz#1692970

  - Fix QImage allocaion failure
    Resolve: bz#1667860

  - Fix double free in QXmlStreamReader
    Resolve: bz#1667858

  - Fix segmentation fault on malformed BMP file
    Resolve: bz#1667859


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - use new technology to filter python dep for inetdconvert instead
    of changing the -x bit on file permissions


author: Jay Fenlason <fenlason@redhat.com> 2.3.13-1
changelog:
  - Upgrade to new upstream version, which obsoletes most patches.
  - Add new tcp_rpc patch, to turn on the nolibwrap flag on tcp rpc services,
    since libwrap cannot be used on them.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add patch to allow multiple rpc services to cooexist as long as they're
    different program numbers or different versions.


author: Jay Fenlason <fenlason@redhat.com> 2:2.3.13-4
changelog:
  - Added patch committed to upstream CVS to fix bz#140084
    (error logging accidentally using one of [012] as the syslog
    descriptor)


author: Jay Fenlason <fenlason@redhat.com> 2:2.3.14-2
changelog:
  - Upgrade to new upstream version.  This obsoletes the -libwrap,
    -rpc, -banner, -bug140084 and -gcc4 patches.


author: Jan Safranek <jsafranek@redhat.com> - 2:2.3.14-12
changelog:
  - bind IPv6 socket by default and switch to IPv4 on error
    (bz#195265)
  - service xinetd status returns actual status (bz#232887)
  - use ssize_t instead of int (bz#211776)


author: Jan Safranek <jsafranek@redhat.com> - 2:2.3.14-21
changelog:
  - fix glitches found during package review (#226560)
  - make all files in .debuginfo package readable by everyone


author: Jan Zeleny <jzeleny@redhat.com> - 2:2.3.14-24
changelog:
  - select() function and it's supporting macros replaced by poll() and it's supporting macros
  - added patch of configure.in for clean compilation


author: Jan Zeleny <jzeleny@redhat.com> - 2:2.3.14-27
changelog:
  - last update of init script modified to work with SELinux correctly
  - added support for new configuration option - file limit for service


author: Jan Zeleny <jzeleny@redhat.com> - 2:2.3.14-30
changelog:
  - fixed flooding log with error messages when disabled service at runtime
  - updated release number to 30 to prevent rpm from detecting this as downgrade


author: Jan Zeleny <jzeleny@redhat.com> - 2:2.3.14-31
changelog:
  - corrected port parsing code (IPv4 and IPv6 were switched)
  - commented patches I'm familiar with in spec file


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 2:2.3.14-36
changelog:
  - Fix build warning about "dereferencing type-punned pointer"
    Related: #695674
  - Avoid possible hang while logging an unexpected signal
    Related: #501604
  - Let RPC services bind to a specific port
    Related: #624800


author: Jan Synáček <jsynacek@redhat.com> - 2:2.3.14-41
changelog:
  - Remove realloc inside svc_activate that was causing memory corruption
  - Number of alloc'd file descriptors is now determined by system limits (ulimit -n)
  - Add patch -realloc-remove


author: Jan Synáček <jsynacek@redhat.com> - 2:2.3.14-43
changelog:
  - Fix xinetd.service permissions
  - Remove useless INSTALL from package documentation
  - Implement reload in xinetd.service


author: Jan Synáček <jsynacek@redhat.com> - 2:2.3.14-45
changelog:
  - Fix: Service disabled due to bind failure
  - Update patch: xinetd-2.3.14-leaking-fds-2.patch
  - Resolves: #809272


author: Jan Synáček <jsynacek@redhat.com> - 2:2.3.15-1
changelog:
  - Update to 2.3.15
  - Drop patches merged by upstream
    (-log-crash, -tcp_rpc, -label, -contextconf, -ssize_t)
  - Update -pie, -PIE, -poll patch
  - Resolves: #820927
  - Add -bad-port-check patch


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-2
changelog:
  - Provide manual page for scap-security-guide
  - Remove percent sign from spec's changelog to silence rpmlint warning
  - Convert RHEL6 'Restrict Root Logins' section's rules to Fedora
  - Convert RHEL6 'Set Password Expiration Parameter' rules to Fedora
  - Introduce 'Account and Access Control' section
  - Convert RHEL6 'Verify Proper Storage and Existence of Password Hashes' section's
    rules to Fedora
  - Set proper name of the build directory in the spec's setup macro.
  - Replace hard-coded paths with macros. Preserve attributes when copying files.


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-3
changelog:
  - Add .gitignore for Fedora output directory
  - Set up Fedora release name and CPE based on build system properties
  - Use correct file paths in scap-security-guide(8) manual page 
    (RH BZ#1018905, c#10)
  - Apply further changes motivated by scap-security-guide Fedora RPM review
    request (RH BZ#1018905, c#8):
    * update package description,
    * make content files to be owned by the scap-security-guide package,
    * remove Fedora release number from generated content files,
    * move HTML form of the guide under the doc directory (together
      with that drop fedora/content subdir and place the content
      directly under fedora/ subdir).
  - Fixes for scap-security-guide Fedora RPM review request (RH BZ#1018905):
    * drop Fedora release from package provided files' final path (c#5),
    * drop BuildRoot, selected Requires:, clean section, drop chcon for
      manual page, don't gzip man page (c#4),
    * change package's description (c#4),
    * include PD license text (#c4).


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.3-1
changelog:
  - Update versioning scheme - move fedorassgrelease to be part of
    upstream version. Rename it to fedorassgversion to avoid name collision
    with Fedora package release.


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.4-1
changelog:
  - Fix remediation for sshd set keepalive (ClientAliveCountMax) and move
    it to /shared
  - Add shared remediations for sshd disable empty passwords and
    sshd set idle timeout
  - Shared remediation for sshd disable root login
  - Add empty -compat subpackage to ensure backward-compatibility with
    openscap-content and firstaidkit-plugin-openscap packages (RH BZ#1040335)
  - OVAL check for sshd disable root login
  - Fix typo in OVAL check for sshd disable empty passwords
  - OVAL check for sshd disable empty passwords
  - Unselect no shelllogin for systemaccounts rule from being run by default
  - Rename XCCDF rules
  - Revert Set up Fedora release name and CPE based on build system properties
  - Shared OVAL check for Verify that Shared Library Files Have Root Ownership
  - Shared OVAL check for Verify that System Executables Have Restrictive Permissions
  - Shared OVAL check for Verify that System Executables Have Root Ownership
  - Shared OVAL check for Verify that Shared Library Files Have Restrictive
    Permissions
  - Fix remediation for Disable Prelinking rule
  - OVAL check and remediation for sshd's ClientAliveCountMax rule
  - OVAL check for sshd's ClientAliveInterval rule
  - Include descriptions for permissions section, and rules for checking
    permissions and ownership of shared library files and system executables
  - Disable selected rules by default
  - Add remediation for Disable Prelinking rule
  - Adjust service-enable-macro, service-disable-macro XSLT transforms
    definition to evaluate to proper systemd syntax
  - Fix service_ntpd_enabled OVAL check make validate to pass again
  - Include patch from Šimon Lukašík to obsolete openscap-content
    package (RH BZ#1028706)
  - Add OVAL check to test if there's is remote NTP server configured for
    time data
  - Add system settings section for the guide (to track system wide
    hardening configurations)
  - Include disable prelink rule and OVAL check for it
  - Initial OVAL check if ntpd service is enabled. Add package_installed
    OVAL templating directory structure and functionality.
  - Include services section, and XCCDF description for selected ntpd's
    sshd's service rules
  - Include remediations for login.defs' based password minimum, maximum and
    warning age rules
  - Include directory structure to support remediations
  - Add SCAP "replace or append pattern value in text file based on variable"
    remediation script generator
  - Add remediation for "Set Password Minimum Length in login.defs" rule


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.5-1
changelog:
  - Fix fedora-srpm and fedora-rpm Make targets to work again
  - Include RHEL-6 and RHEL-7 datastream files to support remote RHEL system scans
  - EOL for Fedora 18 support
  - Include Fedora datastream file for remote Fedora system scans


author: Šimon Lukašík <slukasik@redhat.com> - 0.1.5-3
changelog:
  - Rebase the RHEL part of SSG to the latest upstream version (0.1.18)
  - Add STIG DISCLAIMER to the shipped documentation


author: Šimon Lukašík <slukasik@redhat.com> - 0.1.22-1
changelog:
  - update to the latest upstream release
  - only DataStream file is now available for Fedora
  - start distributing security baseline for Firefox
  - start distributing security baseline for Java RunTime deployments


author: Šimon Lukašík <slukasik@redhat.com> - 0.1.24-1
changelog:
  - update to the latest upstream release
  - created doc sub-package to ship all the guides
  - start distributing centos and scientific linux content
  - rename java content to jre


author: Jan iankko Lieskovsky <jlieskov@redhat.com> - 0.1.29-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.29 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.29
  - Do not ship Firefox/DISCLAIMER documentation file since it has been removed
    in 0.1.29 upstream release


author: Jan iankko Lieskovsky <jlieskov@redhat.com> - 0.1.30-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.30 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.30
  - Drop shell library for remediation functions since it is not required
    starting from 0.1.30 release any more


author: Martin Preisler <mpreisle@redhat.com> - 0.1.31-1
changelog:
  - update to the latest upstream release
  - new default location for content /usr/share/scap/ssg
  - install HTML tables in the doc subpackage


author: Watson Sato <wsato@redhat.com> - 0.1.35-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.35 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.35


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.36-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.36 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.36


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.37-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.37 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.37


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.38-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.38 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.38


author: Jan Černý <jcerny@redhat.com> - 0.1.39-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.39 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.39
  - Fix spec file to build using Python 3
  - Fix License because upstream changed to BSD-3


author: Watson Sato <wsato@redhat.com> - 0.1.40-3
changelog:
  - Use explicit path BuildRequires to get /usr/bin/python3 inside the buildroot
  - Only build content for rhel8 products


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.41-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.41 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.41
  - Add RHEL8 Product with OSPP4.2 and PCI-DSS Profiles


author: Matěj Týč <matyc@redhat.com> - 0.1.42-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.42 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.42
  - System-wide crypto policies are introduced for RHEL8
  - Patches introduced the RHEL8 product were dropped, as it has been upstreamed.


author: Matěj Týč <matyc@redhat.com> - 0.1.44-2
changelog:
  - Ported changelog from late 8.0 builds.
  - Disabled build of the OL8 product, updated other components of the cmake invocation.


author: Milan Lysonek <mlysonek@redhat.com> - 0.1.45-2
changelog:
  - Use crypto-policy rules in OSPP profile.
  - Re-enable FIREFOX and JRE product in build.
  - Change test suite logging message about missing profile from ERROR to WARNING.
  - Build only one version of SCAP content at a time.


author: Watson Sato <wsato@redhat.com> - 0.1.46-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.46 release
  - Align OSPP Profile with Common Criteria Requirements (RHBZ#1714798)


author: Thorsten Leemhuis <fedora[AT]leemhuis.info> 1.0.0-0.fdr.0.2.rc2
changelog:
  - Update to 1.0.0rc2
  - added alsamixer Script -- stores settings on shutdown, does nothing on startup
  - some minor corrections in spec-file style


author: Thorsten Leemhuis <fedora[AT]leemhuis.info> 1.0.0-0.fdr.0.3.rc2
changelog:
  - Integrate Michael Schwendt's script alsamixer-saver; Still not quite sure if
    this script is the right way -- but mine didn't work...


author: Colin Walters <walters@redhat.com> 1.0.7-2
changelog:
  - New patch alsa-utils-1.0.7-alsa-launch.patch, adds the
    alsa-launch command.
  - New source file xinit-alsa-launch.sh, integrates alsa-launch
    into X startup
  - BR xorg-x11-devel


author: Bill Nottingham <notting@redhat.com> 1.0.8-4
changelog:
  - replace the dev.d script with a program that calls alsactl to
    restore the volume if there is a saved config, and just unmutes
    the playback channels if there isn't one (#132575)


author: Bill Nottingham <notting@redhat.com> 1.0.9-4
changelog:
  - migrate the alsa restore program to a udev rule, not a dev.d program
  - conflict with appropriate udev
  - move alsaunmute, alsacard to /bin


author: Martin Stransky <stransky@redhat.com> 1.0.14-0.4.rc2
changelog:
  - added support for large files
  - minor fix in alsaunmute
  - fixed #209239 - alsaconf: Stale language-dependent files
  - fixed #233765 - alsa-utils : unowned directories


author: Martin Stransky <stransky@redhat.com> 1.0.14-0.5.rc2
changelog:
  - added more funcionality to salsa (save/load sound settings),
    moved volume settings to /etc/alsa/


author: Martin Stransky <stransky@redhat.com> 1.0.15-0.1.rc1
changelog:
  - new upstream
  - moved saved volume settings to /var/lib (#293301)
  - patched alsactl for that (#255421)


author: Matthias Saou <http://freshrpms.net/> 1.0.15-0.2.rc1
changelog:
  - Update License field.
  - Mark udev rule as config.
  - Use find_lang macro again to include translations (why was it removed?).


author: Jaroslav Kysela <jkysela@redhat.com> 1.0.18-1.rc3
changelog:
  - updated to 1.0.18rc3
  - updated alsa-info.sh script to 0.4.51
  - removed alsacard utility
  - removed salsa utility
  - changed alsaunmute to use 'alsactl init' now
  - updated ALSA udevd rules to use alsactl
  - moved /etc/alsa/asound.state back to /etc/asound.state


author: Jaroslav Kysela <jkysela@redhat.com> 1.0.18-2.rc3
changelog:
  - fixed /lib/alsa/init path for x86_64 (was /lib64/alsa/init)
  - added /etc/alsa/asound.state -> /etc/asound.state shift to post section
  - fix udev rules (ommited /dev/ prefix for the alsactl utility)
  - added --ignore option for alsactl (added also to upstream)


author: Jaroslav Kysela <jkysela@redhat.com> 1.0.23-3
changelog:
  - add requires line (bug#526492) for specific alsa-lib package
  - add requires line for dialog package (bug#561988)
  - added man page for alsaunmute (bug#526174)
  - updated alsa-info.sh script to 0.4.59


author: Jaroslav Kysela <jkysela@redhat.com> 1.0.24.1-2
changelog:
  - add missing systemd files, add dependency on systemd-units
  - use own udev rule file for /lib/udev/rules.d
  - create /var/lib/alsa directory for asound.state


author: Lennart Poettering <lpoetter@redhat.com> - 1.0.24.1-5
changelog:
  - When installing the Fedora service files make sure to override the
    actual service files with them instead of the symlinks to them
  - Drop StandardOutput=syslog since that is the default now and we
    don't want to needlessly override the default


author: Jaroslav Kysela <jkysela@redhat.com> - 1.0.27.1-1
changelog:
  - Updated to 1.0.27.1
  - Updated alsa-info.sh to 0.4.61
  - Remove dependency on the dialog package (it is optional for alsa-info.sh)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.11-3
changelog:
  - DBD::SQLite fails to build with the current FC-5 sqlite version (3.3.3);
    see bugzilla entry #183530.
    Forcing package rebuild with the included version of sqlite (3.2.7).


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.11-4
changelog:
  - Patch to build with system sqlite 3.3.x (#183530).
  - Patch to avoid type information segv (#187873).


author: Chris Weyl <cweyl@alumni.drew.edu> 1.25-1
changelog:
  - 1.25 needed for DBIx::Class 0.08103
  - auto-update to 1.25 (by cpan-spec-update 0.01)
  - added a new br on perl(File::Spec) (version 0.82)
  - altered br on perl(Test::More) (0 => 0.42)
  - added a new br on perl(DBI) (version 1.57)


author: Petr Sabata <psabata@redhat.com> - 1.31-1
changelog:
  - New release, v1.31
  - Significant FTS3 changes -- might break compatibility with pre-1.30 applications using FTS3
  - New FTS3 tests patch by Paul Howarth


author: Petr Pisar <ppisar@redhat.com> - 1.50-2
changelog:
  - Adjust to sqlite-3.11.0 (bug #1309675)
  - Rebase Remove-bundled-source-extentions.patch to prevent from packing backup
    files


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-11
changelog:
  - Various test fixes for RHEL 8
    Related: rhbz#1682561
  - Add upstream test suite to the SRPM
    Related: rhbz#1682561


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-12
changelog:
  - Deactivate incomplete VGs along with everything else
    Resolves: rhbz#1635125
  - Automatically adjust size of growable devices for new format
    Resolves: rhbz#1680013
  - Add flag for protecting cdrom devices during populate
    Resolves: rhbz#1719648
  - Clean up some errors evident in installer logs
    Resolves: rhbz#1579375
  - Use dasd disklabel for vm disks backed by dasds
    Resolves: rhbz#1676935


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 10.6.0-0.3
changelog:
  - Iryna Shcherbina <ishcherb@redhat.com>: Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
  - Rebased to PKI 10.6.0 beta2


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 10.6.1-1
changelog:
  - Rebased to PKI 10.6.1
  - Bug #1559047 - pki-core misses a dependency to pki-symkey
  - Bug #1573094 - FreeIPA external CA installation fails


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 10.6.2-3
changelog:
  - Fixed macro expressions
  - Bug #1566606 - pki-core: Switch to Python 3
  - Bug #1590467 - pki-core: Drop pylint dependency from RHEL 8


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 10.6.4-3
changelog:
  - Patch PKI to use Jackson 2 and avoid Jackson 1 dependency.
    Add direct dependency on slf4j-jdk14.


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 10.7.2-1
changelog:
  - Rebased to PKI 10.7.2
  - Bug #1721340 - TPS installation failure
  - Bug #1248216 - Incorrect pkidaemon status
  - Bug #1729215 - cert-fix: detect and prevent pkidbuser being used as --agent-uid
  - Bug #1698059 - pki-core implements crypto


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 10.7.3-1
changelog:
  - Rebased to PKI 10.7.3
  - Bug #1698084 - pkidestroy not working as expected
  - Bug #1468050 and Bug #1448235 - Support AES for LWCA key replication


author: Rex Dieter <rdieter@fedoraproject.org> 1.1-2
changelog:
  - -libs: Obsoletes: pulseaudio-libs-zeroconf
  - use versioned Obsoletes/Provides
  - tighten subpkg deps via %_isa
  - remove autoconf/libtool hackery


author: Rex Dieter <rdieter@fedoraproject.org> 3.99.1-1
changelog:
  - pulseaudio-3.99.1 (#952594)
  - RFE: Restore the pipe-sink and pipe-source modules (#958949)
  - prune (pre 1.x) changelog


author: Rex Dieter <rdieter@fedoraproject.org> - 4.0-11.gitf81e3
changelog:
  - handle jack/lirc modules better (#1056619)
  - -libs-devel: own some dirs to avoid deps on cmake/vala
  - -module-bluetooth: make dep arch'd for consistency


author: Wim Taymans <wtaymans@redhat.com> - 4.0-12.gitf81e3
changelog:
  - Use the statically allocated UID and GID from /usr/share/doc/setup/uidgid (#1056656)
  - The pulse-rt group doesn't exist (#885020)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.0-6
changelog:
  - rtp-recv: fix crash on empty UDP packets (CVE-2014-3970,#1104835,#1108011)
  - name HDMI outputs uniquely


author: Rex Dieter <rdieter@fedoraproject.org> - 6.0-6
changelog:
  - better autostart.patch, handle case were autospawn is disabled (or otherwise doesn't work, like for root user)


author: Rex Dieter <rdieter@fedoraproject.org> - 11.1-8
changelog:
  - exit-idle-time = 4 (#1510301)
  - f28+ ftbfs: memfd_create conflicts
  - drop getaffinity.patch (no longer needed)
  - enable webrtc support for all archs
  - make tests non-fatal on i686,s390x


author: Wim Taymans <wtaymans@redhat.com> - 11.1-23
changelog:
  - Add xauthority parameter to X11 modules
  - Fix compilation against newer alsa-lib
  - Resolves: rhbz#1723065


author: Chris Weyl <cweyl@alumni.drew.edu> 0.66-1
changelog:
  - update to 0.66 (0.65 update never pushed due to various issues)
  - misc spec cleanups
  - add br on perl(ExtUtils::MakeMaker) to satisfy any perl/perl-devel split


author: Jeff Johnson <jbj@redhat.com> 0.69-4
changelog:
  - update to 0.69.
  - add "make check" and segfault avoidance patch.
  - elfutils-libelf needs to run ldconfig.


author: Jakub Jelinek <jakub@redhat.com> 0.72-4
changelog:
  - fix arguments to gelf_getsymshndx and elf_getshstrndx
  - fix other warnings
  - reenable checks on s390x


author: Jakub Jelinek <jakub@redhat.com> 0.92-1
changelog:
  - full version
  - macroized spec file for GPL or OSL builds
  - include only libelf under GPL plus wrapper scripts


author: Roland McGrath <roland@redhat.com> - 0.107-1
changelog:
  - update to 0.107
    - readelf: improve DWARF output format
    - elflint: -d option to support checking separate debuginfo files
    - strip: fix ET_REL debuginfo files (#156341)


author: Roland McGrath <roland@redhat.com> - 0.108-1
changelog:
  - update to 0.108
    - merge strip fixes
    - sort records in dwarf_getsrclines, fix dwarf_getsrc_die searching
    - update elf.h from glibc


author: Roland McGrath <roland@redhat.com> - 0.109-2
changelog:
  - update to 0.109
    - verify that libebl modules are from the same build
    - new eu-elflint checks on copy relocations
    - new program eu-elfcmp
    - new experimental libdwfl library


author: Roland McGrath <roland@redhat.com> - 0.112-1
changelog:
  - update to 0.112
    - elfcmp: some more relaxation.
    - elflint: many more tests, especially regarding to symbol versioning.
    - libelf: Add elfXX_offscn and gelf_offscn.
    - libasm: asm_begin interface changes.
    - libebl: Add three new interfaces to directly access machine, class,
      and data encoding information.


author: Roland McGrath <roland@redhat.com> - 0.113-2
changelog:
  - update to 0.113
    - elflint: relax a bit.  Allow version definitions for defined symbols
      against DSO versions also for symbols in nobits sections.
      Allow .rodata section to have STRINGS and MERGE flag set.
    - strip: add some more compatibility with binutils.
    - libdwfl: bug fixes.
  - Separate libdw et al into elfutils-libs subpackage.


author: Roland McGrath <roland@redhat.com> - 0.114-1
changelog:
  - update to 0.114
    - new program eu-ranlib
    - libdw: new calls for inlines
    - libdwfl: new calls for offline modules


author: Roland McGrath <roland@redhat.com> - 0.115-2
changelog:
  - update to 0.115
    - New program eu-strings.
    - libdw: New function dwarf_getscopes_die.
    - libelf: speed-ups of non-mmap reading.
    - Implement --enable-gcov option for configure.


author: Roland McGrath <roland@redhat.com> - 0.116-1
changelog:
  - update to 0.116
    - libdw fixes, API changes and additions
    - libdwfl fixes (#169672)
    - eu-strip/libelf fix to preserve setuid/setgid permission bits (#167745)


author: Roland McGrath <roland@redhat.com> - 0.117-2
changelog:
  - update to 0.117
    - libdwfl: New function dwfl_module_return_value_location (#166118)
    - libebl: Backend improvements for several CPUs


author: Roland McGrath <roland@redhat.com> - 0.118-1
changelog:
  - update to 0.118
    - elflint: more tests.
    - libdwfl: New function dwfl_module_register_names.
    - libebl: New backend hook for register names.
  - Make sure -fexceptions is always in CFLAGS.


author: Roland McGrath <roland@redhat.com> - 0.120-2
changelog:
  - Update to 0.120
    - License changed to GPL, with some exceptions for using
      the libelf, libebl, libdw, and libdwfl library interfaces.
      Red Hat elfutils is an included package of the Open Invention Network.
    - dwarf.h updated for DWARF 3.0 final specification.
    - libelf: Fix corruption in ELF_C_RDWR uses (#187618).
    - libdwfl: New function dwfl_version; fixes for offline.


author: Roland McGrath <roland@redhat.com> - 0.121-1
changelog:
  - Update to 0.121
    - libelf: bug fixes for rewriting existing files when using mmap (#187618).
    - make all installed headers usable in C++ code (#193153).
    - eu-readelf: better output format.
    - eu-elflint: fix tests of dynamic section content.
    - libdw, libdwfl: handle files without aranges info.


author: Roland McGrath <roland@redhat.com> - 0.122-3
changelog:
  - Update to 0.122
    - Fix libdwfl sorting of modules with 64-bit addresses (#198225).
    - libebl: add function to test for relative relocation
    - elflint: fix and extend DT_RELCOUNT/DT_RELACOUNT checks
    - elflint, readelf: add support for DT_GNU_HASH
    - libelf: add elf_gnu_hash
    - elflint, readelf: add support for 64-bit SysV-style hash tables
    - libdwfl: new functions dwfl_module_getsymtab, dwfl_module_getsym.


author: Roland McGrath <roland@redhat.com> 0.123-1
changelog:
  - Update to 0.123
    - libebl: Backend build fixes, thanks to Stepan Kasal.
    - libebl: ia64 backend support for register names, return value location
    - libdwfl: Handle truncated linux kernel module section names.
    - libdwfl: Look for linux kernel vmlinux files with .debug suffix.
    - elflint: Fix checks to permit --hash-style=gnu format.


author: Roland McGrath <roland@redhat.com> - 0.124-1
changelog:
  - eu-strip -f: copy symtab into debuginfo file when relocs use it (#203000)
  - Update to 0.124
    - libebl: fix ia64 reloc support (#206981)
    - libebl: sparc backend support for return value location
    - libebl, libdwfl: backend register name support extended with more info
    - libelf, libdw: bug fixes for unaligned accesses on machines that care
    - readelf, elflint: trivial bugs fixed


author: Roland McGrath <roland@redhat.com> - 0.125-1
changelog:
  - Update to 0.125
    - elflint: Compare DT_GNU_HASH tests.
    - move archives into -static RPMs
    - libelf, elflint: better support for core file handling
    - Really fix libdwfl sorting of modules with 64-bit addresses (#220817).
  - Resolves: RHBZ #220817, RHBZ #213792


author: Roland McGrath <roland@redhat.com> - 0.126-1
changelog:
  - Update to 0.126
    - New program eu-ar.
    - libdw: fix missing dwarf_getelf (#227206)
    - libdwfl: dwfl_module_addrname for st_size=0 symbols (#227167, #227231)


author: Roland McGrath <roland@redhat.com> - 0.127-1
changelog:
  - Update to 0.127
    - libdw: new function dwarf_getsrcdirs
    - libdwfl: new functions dwfl_module_addrsym, dwfl_report_begin_add,
               dwfl_module_address_section


author: Roland McGrath <roland@redhat.com> - 0.128-2
changelog:
  - Update to 0.128
    - new program: unstrip
    - elfcmp: new option --hash-inexact
  - Replace Conflicts: with Provides/Requires using -arch


author: Roland McGrath <roland@redhat.com> - 0.129-1
changelog:
  - Update to 0.129
    - readelf: new options --hex-dump (or -x), --strings (or -p) (#250973)
    - addr2line: new option --symbols (or -S)
    - libdw: dwarf_getscopes fixes (#230235)
    - libdwfl: dwfl_module_addrsym fixes (#249490)


author: Roland McGrath <roland@redhat.com> - 0.130-1
changelog:
  - Update to 0.130
    - eu-readelf -p option can take an argument like -x for one section
    - eu-readelf --archive-index (or -c)
    - eu-readelf -n improved output for core dumps
    - eu-readelf: handle SHT_NOTE sections without requiring phdrs (#249467)
    - eu-elflint: ditto
    - eu-elflint: stricter checks on debug sections
    - eu-unstrip: new options, --list (or -n), --relocate (or -R)
    - libelf: new function elf_getdata_rawchunk, replaces gelf_rawchunk;
              new functions gelf_getnote, gelf_getauxv, gelf_update_auxv
    - libebl: backend improvements (#324031)
    - libdwfl: build_id support, new functions for it
    - libdwfl: dwfl_module_addrsym fixes (#268761, #268981)
    - libdwfl offline archive support, new script eu-make-debug-archive


author: Roland McGrath <roland@redhat.com> - 0.131-1
changelog:
  - Update to 0.131
    - libdw: DW_FORM_ref_addr support; dwarf_formref entry point now deprecated;
             bug fixes for oddly-formatted DWARF
    - libdwfl: bug fixes in offline archive support, symbol table handling;
               apply partial relocations for dwfl_module_address_section on ET_REL
    - libebl: powerpc backend support for Altivec registers


author: Roland McGrath <roland@redhat.com> - 0.132-3
changelog:
  - Update to 0.132
    - libelf: Use loff_t instead of off64_t in libelf.h header. (#377241)
    - eu-readelf: Fix handling of ET_REL files in archives.
    - libcpu: Implement x86 and x86-64 disassembler.
    - libasm: Add interface for disassembler.
    - all programs: add debugging of branch prediction.
    - libelf: new function elf_scnshndx.


author: Roland McGrath <roland@redhat.com> - 0.133-2
changelog:
  - Update to 0.133
    - readelf, elflint, libebl: SHT_GNU_ATTRIBUTE section handling (readelf -A)
    - readelf: core note handling for NT_386_TLS, NT_PPC_SPE, Alpha NT_AUXV
    - libdwfl: bug fixes and optimization in relocation handling
    - elfcmp: bug fix for non-allocated section handling
    - ld: implement newer features of binutils linker.
  - Install eu-objdump and libasm, now has limited disassembler support.


author: Roland McGrath <roland@redhat.com> - 0.134-1
changelog:
  - Update to 0.134
    - elflint: backend improvements for sparc, alpha (#204170)
    - libdwfl, libelf: bug fixes (#439344, #438867, #438263, #438190)
  - Remove Conflicts: libelf-devel from elfutils-libelf-devel. (#435742)


author: Roland McGrath <roland@redhat.com> - 0.135-1
changelog:
  - Update to 0.135
    - libdwfl: bug fixes
    - eu-strip: changed handling of ET_REL files wrt symbol tables and relocs


author: Roland McGrath <roland@redhat.com> - 0.137-2
changelog:
  - Update to 0.137
    - libdwfl: bug fixes; new segment interfaces;
               all the libdwfl-based tools now support --core=COREFILE option
  - Resolves: RHBZ #325021, RHBZ #447416


author: Roland McGrath <roland@redhat.com> - 0.138-1
changelog:
  - Update to 0.138
    - Install <elfutils/version.h> header file for applications to use in
      source version compatibility checks.
    - libebl: backend fixes for i386 TLS relocs; backend support for NT_386_IOPERM
    - libcpu: disassembler fixes (#469739)
    - libdwfl: bug fixes (#465878)
    - libelf: bug fixes
    - eu-nm: bug fixes for handling corrupt input files (#476136)


author: Roland McGrath <roland@redhat.com> - 0.139-1
changelog:
  - Update to 0.139
    - libcpu: Add Intel SSE4 disassembler support
    - readelf: Implement call frame information and exception handling dumping.
               Add -e option.  Enable it implicitly for -a.
    - elflint: Check PT_GNU_EH_FRAME program header entry.
    - libdwfl: Support automatic gzip/bzip2 decompression of ELF files. (#472136)


author: Roland McGrath <roland@redhat.com> - 0.141-1
changelog:
  - Update to 0.141
    - libebl: sparc backend fixes (#490585)
              some more arm backend support
    - libdwfl: fix dwfl_module_build_id for prelinked DSO case (#489439)
               fixes in core file support (#494858)
               dwfl_module_getsym interface improved for non-address symbols
    - eu-strip: fix infinite loop on strange inputs with -f
    - eu-addr2line: take -j/--section=NAME option for binutils compatibility
                    (same effect as '(NAME)0x123' syntax already supported)
  - Resolves: RHBZ #495213, RHBZ #465872, RHBZ #470055, RHBZ #484623


author: Roland McGrath <roland@redhat.com> - 0.142-1
changelog:
  - Update to 0.142
    - libelf: Bug fix in filling gaps between sections. (#512840)
    - libelf: Add elf_getshdrnum alias for elf_getshnum and elf_getshdrstrndx
              alias for elf_getshstrndx and deprecate original names.
    - libebl, elflint: Add support for STB_GNU_UNIQUE. (#511436)
    - readelf: Add -N option, speeds up DWARF printing
               without address->name lookups. (#505347)
    - libdw: Add support for decoding DWARF CFI into location description form.
             Handle some new DWARF 3 expression operations previously omitted.
             Basic handling of some new encodings slated for DWARF 4.


author: Roland McGrath <roland@redhat.com> - 0.143-1
changelog:
  - Update to 0.143
    - libdw: Various convenience functions for individual attributes now use
             dwarf_attr_integrate to look up indirect inherited attributes.
             Location expression handling now supports DW_OP_implicit_value.
    - libdwfl: Support automatic decompression of files in XZ format,
               and of Linux kernel images made with bzip2 or LZMA
               (as well as gzip).


author: Roland McGrath <roland@redhat.com> - 0.144-1
changelog:
  - Update to 0.144
    - libdw: New function dwarf_aggregate_size for computing (constant) type
             sizes, including array_type cases with nontrivial calculation.
    - readelf: Don't give errors for missing info under -a.
               Handle Linux "VMCOREINFO" notes under -n.
  - Resolves: RHBZ #527004, RHBZ #530704, RHBZ #550858


author: Roland McGrath <roland@redhat.com> - 0.145-1
changelog:
  - Update to 0.145
    - Fix build with --disable-dependency-tracking. (#564646)
    - Fix build with most recent glibc headers.
    - libdw: Fix CFI decoding. (#563528)
    - libdwfl: Fix address bias returned by CFI accessors. (#563528)
               Fix core file module layout identification. (#559836)
    - readelf: Fix CFI decoding.


author: Roland McGrath <roland@redhat.com> - 0.146-1
changelog:
  - Update to 0.146
    - libdwfl: New function dwfl_core_file_report.
    - libelf: Fix handling of phdrs in truncated file. (#577310)
    - libdwfl: Fix infinite loop handling clobbered link_map. (#576379)
  - Package translations.


author: Roland McGrath <roland@redhat.com> - 0.148-1
changelog:
  - Update to 0.148
    - libdw: Accept DWARF 4 format: new functions dwarf_next_unit,
             dwarf_offdie_types.
             New functions dwarf_lineisa, dwarf_linediscriminator,
             dwarf_lineop_index.
    - libdwfl: Fixes in core-file handling, support cores from PIEs. (#588818)
               When working from build IDs, don't open a named file
               that mismatches.
    - readelf: Handle DWARF 4 formats.


author: Roland McGrath <roland@redhat.com> - 0.149-1
changelog:
  - Update to 0.149
    - libdw: Decode new DW_OP_GNU_implicit_pointer operation;
             new function dwarf_getlocation_implicit_pointer.
    - libdwfl: New function dwfl_dwarf_line.
    - eu-addr2line: New flag -F/--flags to print more DWARF line info details.
    - eu-readelf: better .debug_loc processing (#627729)
    - eu-strings: Fix non-mmap file reading. (#609468)
    - eu-strip: -g recognizes .gdb_index as a debugging section. (#631997)


author: Roland McGrath <roland@redhat.com> - 0.150-1
changelog:
  - Update to 0.150
    - libdw: Fix for handling huge .debug_aranges section. (#638432)
    - libdwfl: Fix for handling prelinked DSO with separate debug file. (#652857)
    - findtextrel: Fix diagnostics to work with usual section ordering.


author: Roland McGrath <roland@redhat.com> - 0.151-1
changelog:
  - Update to 0.151
    - libdwfl: Fix for more prelink cases with separate debug file.
    - eu-strip: New flag --strip-sections to remove section headers entirely.


author: Roland McGrath <roland@redhat.com> - 0.152-1
changelog:
  - Update to 0.152
    - Various build and warning nits fixed for newest GCC and Autoconf.
    - libdwfl: Yet another prelink-related fix for another regression. (#674465)
    - eu-elfcmp: New flag --ignore-build-id to ignore differing build ID bits.
    - eu-elfcmp: New flag -l/--verbose to print all differences.


author: Mark Wielaard <mjw@redhat.com> - 0.153-1
changelog:
  - Update to 0.153
    - New --disable-werror for portability.
    - Support for .zdebug sections (#679777)
    - type_units and DW_AT_GNU_odr_signature support (#679815)
    - low level support DW_OP_GNU_entry_value and DW_TAG_GNU_call_site (#688090)
    - FTBFS on rawhide with gcc 4.7 (#783506)
      - Remove gcc-4.7 patch


author: Mark Wielaard <mjw@redhat.com> - 0.154-1
changelog:
  - Update to 0.154
    - elflint doesn't recognize SHF_INFO_LINK on relocation sections (#807823)
    - Update license to GPLv3+ and (GPLv2+ or LGPLv3+)
    - Remove elfutils-0.153-dwfl_segment_report_module.patch
  - Add elfutils-0.154-binutils-pr-ld-13621.patch


author: Mark Wielaard <mjw@redhat.com> - 0.155-1
changelog:
  - Update to 0.155.
    - #844270 - eu-nm invalid %N$ use detected.
    - #847454 - Ukrainian translation update.
    - Removed local ar 64-bit symbol patch, dwz support patch and xlatetom fix.


author: Mark Wielaard <mjw@redhat.com> - 0.155-5
changelog:
  - Add ARM variant to elfutils-0.155-binutils-pr-ld-13621.patch rhbz#914908.
  - rhel >= 5 has xz-devel


author: Jan Kratochvil <jan.kratochvil@redhat.com> 0.156-1
changelog:
  - Update to 0.156.
    - #890447 - Add __bss_start and __TMC_END__ to elflint.
    - #909481 - Only try opening files with installed compression libraries.
    - #914908 - Add __bss_start__ to elflint.
    - #853757 - Updated Polish translation.
    - #985438 - Incorrect prototype of __libdwfl_find_elf_build_id.
    - Drop upstreamed elfutils-0.155-binutils-pr-ld-13621.patch.
    - Drop upstreamed elfutils-0.155-mem-align.patch.
    - Drop upstreamed elfutils-0.155-sizeof-pointer-memaccess.patch.


author: Mark Wielaard <mjw@redhat.com> 0.156-4
changelog:
  - Add elfutils-0.156-et_dyn-kernels.patch.
    Fixes an issue on ppc64 with systemtap kernel address placement.


author: Mark Wielaard <mjw@redhat.com> 0.156-5
changelog:
  - Add elfutils-0.156-abi_cfi-ppc-s390-arm.patch.
    Sets up initial CFI return register, CFA location expression and
    register rules for PPC, S390 and ARM (dwarf_cfi_addrframe support).


author: Mark Wielaard <mjw@redhat.com> 0.157-1
changelog:
  - Update to 0.157.
  - Remove elfutils-0.156-abi_cfi-ppc-s390-arm.patch.
  - Remove elfutils-0.156-et_dyn-kernels.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.157-4
changelog:
  - Add elfutils-0.157-aarch64-got-special-symbol.patch.
  - Remove -Werror=format-security from RPM_OPT_FLAGS.


author: Mark Wielaard <mjw@redhat.com> - 0.159-1
changelog:
  - Update to 0.159.
    - Remove integrated upstream patches:
      robustify.patch, mod-e_type.patch and CVE-2014-0172.patch.
    - Remove special handling of now default compile and configure flags:
      Don't remove -Werror=format-security, don't configure --enable-dwz.


author: Mark Wielaard <mjw@redhat.com> - 0.159-5
changelog:
  - Add elfutils-0.159-aarch64-bool-ret.patch
  - Add elfutils-0.159-elf-h.patch
  - Add elfutils-0.159-ppc64le-elfv2-abi.patch (#1110249)


author: Mark Wielaard <mjw@redhat.com> - 0.160-1
changelog:
  - Update to 0.160.
    - Remove integrated upstream patches:
      elfutils-aarch64-user_regs_struct.patch
      elfutils-0.159-argp-attach.patch
      elfutils-0.159-aarch64-bool-ret.patch
      elfutils-0.159-elf-h.patch
      elfutils-0.159-ppc64le-elfv2-abi.patch
      elfutils-0.159-report_r_debug.patch
      elfutils-0.159-ko_xz.patch


author: Mark Wielaard <mjw@redhat.com> - 0.162-1
changelog:
  - Update to 0.162 (#1170810, #1139815, #1129756, #1020842)
  - Include elfutils/known-dwarf.h
  - Drop BuildRequires glibc-headers (#1230468)
  - Removed integrated upstream patches:
    - elfutils-0.161-aarch64relro.patch
    - elfutils-0.161-copyreloc.patch
    - elfutils-0.161-addralign.patch
    - elfutils-0.161-ar-long-name.patch
    - elfutils-0.161-formref-type.patch


author: Mark Wielaard <mjw@redhat.com> - 0.165-1
changelog:
  - Update to elfutils-0.165 (#1294079, #1236699, #807053)
    - Add eu-elfcompress
    - Add pkg-config files for libelf and libdw.


author: Mark Wielaard <mjw@redhat.com> - 0.166-1
changelog:
  - Upgrade to elfutils-0.166
    Drop upstreamed patches:
      - elfutils-0.165-nobitsalign-strip.patch.
      - elfutils-0.165-reloc.patch.
      - elfutils-0.165-elf-libelf.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.167-1
changelog:
  - Upgrade to elfutils-0.167
    Drop upstream elfutils-0.166-elfcmp-comp-gcc6.patch
    Fixes: #1365812, #1352232.


author: Mark Wielaard <mark@klomp.org> - 0.168-1
changelog:
  - New upstream release from new home https://sourceware.org/elfutils/
  - Resolves:
    - #1396092 Please implement eu-readelf --symbols[=SECTION]
    - #1388057 memory allocation failure in allocate_elf
    - #1387584 memory allocation failure in __libelf_set_rawdata_wrlock


author: Mark Wielaard <mark@klomp.org> - 0.168-5
changelog:
  - Add patches for new gcc warnings and new binutils ppc64 attributes.
    - elfutils-0.168-libasm-truncation.patch
    - elfutils-0.168-ppc64-attrs.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-1
changelog:
  - New upstream release. Remove upstreamed patches.
  - provide_yama_scope for either fedora >= 22 and rhel >= 7.


author: Mark Wielaard <mjw@redhat.com> - 0.170-2
changelog:
  - Config files under /usr/lib/sysctl.d (_sysctldir) aren't %config (#1506660)
    Admin can place the real config file under /etc/sysctl.d as override.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-8
changelog:
  - Add elfutils-0.170-sys-ptrace.patch
  - Make sure spec can be build even when ldconfig_scriplets aren't defined.
  - Add elfutils-0.170-m68k-packed-not-aligned.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-9
changelog:
  - Add elfutils-0.170-core-pid.patch
  - Add elfutils-0.170-elf_sync.patch
  - Add elfutils-0.170-new-notes-hack.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-11
changelog:
  - Add explict libstdc++-devel BuildRequires for demangle support.
  - Add elfutils-0.170-unwind.patch. (#1555726)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.171-1
changelog:
  - New upstream release.
    - DWARF5 and split dwarf, including GNU DebugFission, support.
    - readelf: Handle all new DWARF5 sections.
      --debug-dump=info+ will show split unit DIEs when found.
      --dwarf-skeleton can be used when inspecting a .dwo file.
      Recognizes GNU locviews with --debug-dump=loc.
    - libdw: New functions dwarf_die_addr_die, dwarf_get_units,
      dwarf_getabbrevattr_data and dwarf_cu_info.
      libdw will now try to resolve the alt file on first use
      when not set yet with dwarf_set_alt.
      dwarf_aggregate_size() now works with multi-dimensional arrays.
    - libdwfl: Use process_vm_readv when available instead of ptrace.
    - backends: Add a RISC-V backend.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.172-1
changelog:
  - New upstream release.
    - No functional changes compared to 0.171.
    - Various bug fixes in libdw and eu-readelf dealing with bad DWARF5
      data. Thanks to running the afl fuzzer on eu-readelf and various
      testcases.
    - eu-readelf -N is ~15% faster.


author: Mark Wielaard <mjw@redhat.com> - 0.173-1
changelog:
  - New upstream release
    - More fixes for crashes and hangs found by afl-fuzz. In particular
      various functions now detect and break infinite loops caused by bad
      DIE tree cycles.
    - readelf: Will now lookup the size and signedness of constant value
      types to display them correctly (and not just how they were encoded).
    - libdw: New function dwarf_next_lines to read CU-less .debug_line data.
      dwarf_begin_elf now accepts ELF files containing just .debug_line
      or .debug_frame sections (which can be read without needing a DIE
      tree from the .debug_info section).
      Removed dwarf_getscn_info, which was never implemented.
    - backends: Handle BPF simple relocations.
      The RISCV backends now handles ABI specific CFI and knows about
      RISCV register types and names.

  - Add scl macros and elfutils-0.173-dts.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.174-1
changelog:
  - New upstream release
    - libelf, libdw and all tools now handle extended shnum and shstrndx
      correctly
    - elfcompress: Don't rewrite input file if no section data needs
      updating.  Try harder to keep same file mode bits (suid) on rewrite.
    - strip: Handle mixed (out of order) allocated/non-allocated sections.
    - unstrip: Handle SHT_GROUP sections.
    - Fixes CVE-2018-16062, CVE-2018-16402 and CVE-2018-16403.


author: Mark Wielaard <mjw@redhat.com> - 0.176-1
changelog:
  - Update to elfutils-0.176.
    - Fixes CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
            CVE-2019-7664, CVE-2019-7665.


author: Mark Wielaard <mjw@redhat.com> - 0.176-4
changelog:
  - Add elfutils-0.176-gcc-pr88835.patch
  - Add elfutils-0.176-xlate-note.patch
  - Add elfutils-0.176-elf-update.patch


author: Dodji Seketeli <dodji@redhat.org> - 2.26.0-1
changelog:
  - Update to upstream release (2.26.1)
  - Add plugin files from %{_datadir}
  - Don't check for vte anymore, the package checks it pkg-config
  - Add 'bookmarks' to the plugin set


author: Dodji Seketeli <dodji@redhat.org> - 2.26.1-1
changelog:
  - Update to upstream release 2..26.1
  - Fixes GNOME bugzilla bug #576766 - Crash when Configuring "Draw Spaces"
  - Make sure to remove all *.la files
  - Remove BuildRequire libgnomeui-devel as needless now


author: Richard Hughes <rhughes@redhat.com> - 3.12.1-3
changelog:
  - Split out the plugins into subpackages
  - This allows us to add and remove them separately in gnome-software


author: Debarshi Ray <rishi@fedoraproject.org> - 3.14.0-2
changelog:
  - We need the new VTE API/ABI to run
  - Carry an upstream patch to pick up a last-minute VTE API break


author: Radovan Sroka <rsroka@redhat.com> - 0.9.1-2
changelog:
  RHEL 8.2 ERRATUM
  - rebase to v0.9.1
  - updated default configuration with new syntax
  - removed daemon mounts configuration
  Resolves: rhbz#1759895
  - default fapolicyd policy prevents Ansible from running
  - added ansible rule to default ruleset
  Resolves: rhbz#1746464
  - suspicious logs on service start
  Resolves: rhbz#1747494
  - fapolicyd blocks dracut from generating initramfs
  - added dracut rule to default configuration
  Resolves: rhbz#1757736
  - fapolicyd fails to identify perl interpreter
  Resolves: rhbz#1765039


author: Radovan Sroka <rsroka@redhat.com> - 0.9.1-3
changelog:
  RHEL 8.2 ERRATUM
  - fixed build time python interpreter detection (spec)
  - added python2-devel as a BuildRequires (spec)
  - allow running bash scripts in home directories
  Resolves: rhbz#1801872


author: Simo Sorce <simo@redhat.com> 1.1.0-1
changelog:
  - New minor release 1.1.0
  - New feature: Basic Auth support
  - Improvements: Better crypto for sesison cookies


author: Simo Sorce <simo@redhat.com> 1.2.0-1
changelog:
  - New minor release 1.2.0
  - Adds delegation support on Basic Auth
  - Response fix, send last auth token on successful auth


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.50.20180917-1.fc30
changelog:
  - Rebase to FSF GDB 8.2.50.20180917 (8.3pre).
  - Add 'gdb-rhbz795424-bitpos-arrayview.patch'.
  - Remove 'gdb-rhbz881849-ipv6-1of3.patch'.
  - Remove 'gdb-rhbz881849-ipv6-2of3.patch'.
  - Remove 'gdb-rhbz881849-ipv6-3of3.patch'.
  - Remove 'gdb-rhbz1187581-power8-regs-1of7.patch'.
  - Remove 'gdb-rhbz1187581-power8-regs-2of7.patch'.
  - Remove 'gdb-rhbz1187581-power8-regs-3of7.patch'.
  - Remove 'gdb-rhbz1187581-power8-regs-4of7.patch'.
  - Remove 'gdb-rhbz1187581-power8-regs-5of7.patch'.
  - Remove 'gdb-rhbz1187581-power8-regs-6of7.patch'.
  - Remove 'gdb-rhbz1187581-power8-regs-7of7.patch'.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.50.20181010-5.fc30
changelog:
  - Rebase to FSF GDB 8.2.50.20181010 (8.3pre).
  - Remove 'gdb-6.8-sparc64-silence-memcpy-check.patch'.
  - Remove 'gdb-7.2.50-sparc-add-workaround-to-broken-debug-files.patch'.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.50.20181016-6.fc30
changelog:
  - Rebase to FSF GDB 8.2.50.20181016 (8.3pre).
  - Enable and always run the unittests when building the package.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.50.20181114-8.fc30
changelog:
  - Rebase to FSF GDB 8.2.50.20181114 (8.3pre).
  - Drop gdb-6.3-ppc64syscall-20040622.patch.
  - Drop gdb-6.3-ppc64displaysymbol-20041124.patch.
  - Drop gdb-6.8-watchpoint-conditionals-test.patch.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.50.20181130-11.fc30
changelog:
  - Update gdb-6.3-gstack-20050411.patch (Pedro Alves).
  - Update gdb-archer-next-over-throw-cxx-exec.patch (Pedro Alves).
  - Update gdb-glibc-strstr-workaround.patch (Pedro Alves).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.50.20190120-13.fc30
changelog:
  - Rebase to FSF GDB 8.2.50.20190120 (8.3pre).
  - Fix 'gdb does crash randomly on loading symbols or setting a breakpoint'
    (RHBZ 1638798, Keith Seitz).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.50.20190219-18
changelog:
  - Rebase to FSF GDB 8.2.50.20190219 (8.3pre).
  - BuildRequire on 'source-highlight-devel' and enable styled output.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.90.20190304-19
changelog:
  - Rebase to FSF GDB 8.2.90.20190301 (8.3pre).
  - Rewrite gdb-6.6-buildid-locate.patch.
  - Add (temporarily) gdb-fix-aarch64-enable-unittests.patch.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.2.90.20190320-21
changelog:
  - Rebase to FSF GDB 8.2.90.20190320 (8.3pre).
  - Fix 'New gdb terminal colors are unreadable on GNOME Terminal "dark"
    theme.' (Tom Tromey, RH BZ 1688372).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-1
changelog:
  - Release GDB 8.3.
  - Fix 'gcore does not support COREFILTER_ELF_HEADERS' (Sergio Durigan
    Junior, RH BZ 1371380).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-2
changelog:
  - "Fix" segfault that happens on parse_macro_definition because
    debugedit corrupts the .debug_macro section (Sergio Durigan Junior,
    RH BZ 1708192).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 8.3-3
changelog:
  - Complement previous fix of a segfault that happens on
    parse_macro_definition (RHBZ 1715008, Sergio Durigan Junior).


author: Keith Seitz <keiths@redhat.com> - gcc-toolset-9 8.3-1
changelog:
  - Add Buildrequire for boost-devel.
  - Include guile support for RHEL.
  - Add gating for gcc-toolset-9.
  - Define global __python to workaround scl python issue.


author: Severin Gehwolf <sgehwolf@redhat.com> 4.1.1-2
changelog:
  - Add BR/R apache-commons-codec, since httpcomponents-client's
    MANIFEST.MF has an Import-Package: org.apache.commons.codec
    header.


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 4.2.1-2
changelog:
  - Install NOTICE.txt file
  - Fix javadir directory ownership
  - Fix directory permissions
  - Preserve timestamps
  - Replace add_to_maven_depmap with add_maven_depmap


author: Mat Booth <mat.booth@redhat.com> - 4.5.6-2
changelog:
  - Add a patch to allow building with mockito 2
  - Don't package tests jars, the tests jars have the same OSGi metadata as the
    main jars, which can cause tycho to resolve the wrong one when building
    eclipse plugins


author: Rex Dieter <rdieter@fedoraproject.org> - 5.7.1-2
changelog:
  - 5.7.1 dec5 snapshot
  - drop BR: cmake (handled by qt5-rpm-macros now)
  - BR: qt5-qtbase-private-devel


author: Petr Pisar <ppisar@redhat.com> - 0.038-2
changelog:
  - Croak on failed write into a file (bug #1031096)
  - Do not use already existing temporary files (bug #1031096)


author: Michal Schorm <mschorm@redhat.com> - 3:10.3.17-1
changelog:
  - Rebase to 10.3.17
    Resolves: #1711265
    Resolves: #1701687
  - Add patch for server pkgconfig file location
  - Use logrotatedir macro on one more spot
  - Fix building of TokuDB with Jemalloc 5
  - Fix building with / without lz4
  - Fix "ggsapi" -> "gssapi" typo but keep the broken behaviour
  - Control building of the CACHING_SHA2_PASSWORD plugin
  - Fix the license tag
    Resolves: #1702707


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-4
changelog:
  - backport upstream fixes
  - drop -fno-delete-null-pointer-checks hack (included in qt5-rpm-macros as needed now)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-10
changelog:
  - macro'ize no_sse2 hack (to make it easier to enable/disable)
  - re-introduce -fno-delete-null-pointer-checks here (following upstream)
  - add -fno-lifetime-dse too, helps fix i686/qml crasher (#1331593)
  - disable tests (for now, not useful yet)


author: Than Ngo <than@redhat.com> - 5.9.0-0.beta.4
changelog:
  - drop useless qtdeclarative-opensource-src-5.9.0-v4bootstrap.patch,
    apply correct qtdeclarative-opensource-src-5.9.0-no_sse2.patch to
    fix the build issue in JIT on ppc64/ppc64le/s390x


author: Paul Howarth <paul@city-fan.org> - 1.21-3
changelog:
  - Run author tests too for completeness
  - Add buildreqs needed for author tests
  - Add buildreqs for core perl modules, which may be dual-lived
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.23-1
changelog:
  - Update to 1.23
    - Silence "Statement unlikely to be reached" warning
    - Repository information fix, and typo fixes
    - Converted to using dzil
  - Specify all dependencies
  - Don't need to remove empty directories from the buildroot
  - Restore EL-5 compatibility


author: Paul Howarth <paul@city-fan.org> - 1.24-1
changelog:
  - Update to 1.24
    - No longer mark BSD::Resource as required (GH #6)
    - Skip core-dump tests on OS X; they're not as straightforward as the test
      script would like (GH #5)


author: Petr Pisar <ppisar@redhat.com> - 1.25-4
changelog:
  - Break build-cycle: perl-IPC-System-Simple → perl-Test-Perl-Critic
    → perl-Perl-Critic → perl-PPI → perl-IO-All → perl-File-MimeInfo
    → perl-File-BaseDir → perl-IPC-System-Simple


author: Josh Stone <jistone@redhat.com> - 1.40.0-1
changelog:
  - Update to 1.40.0.
  - Fix compiletest with newer (local-rebuild) libtest
  - Build compiletest with in-tree libtest
  - Fix ARM EHABI unwinding


author: Martin Kolman <mkolman@redhat.com> - 26.1-1
changelog:
  - Generate plain text variants of the help content files (mkolman)
  - Add a plain text version of of the placeholder (mkolman)
  - Fix some typos (mkolman)
  - Use /usr/bin/python3 in conversion script header (mkolman)
  - Update help content (mkolman)
  - Fix link to the installation guide git repository (mkolman)


author: Simo Sorce <simo@redhat.com> 2.3.6-0.20131125.3
changelog:
  - Initial packaging
  - Based on the spec file by Jean-Marc Liger <jmliger@siris.sorbonne.fr>
  - Code is updated to latest master via a jumbo patch while waiting for
    official upstream release.
  - Jumbo patch includes also additional patches sent to upstream list)
    to build on Fedora 20
  - Perl bindings are disabled as they fail to build
  - Disable doc building as it doesn't ork correctly for now


author: Simo Sorce <simo@redhat.com> 2.4.0-0
changelog:
  - Update to final 2.4.0 version
  - Drop all patches, they are now included in 2.4.0
  - Change Source URI


author: Remi Collet <rcollet@redhat.com> - 2.4.0-4
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/Php56
  - add numerical prefix to extension configuration file
  - drop unneeded dependency on pecl
  - add provides php-lasso


author: Simo Sorce <simo@redhat.com> - 2.4.1-2
changelog:
  - Enable perl bindings
  - Also add support for building with automake 1.15
  - Fix build issues on rawhide due to missing build dep on perl(Error)


author: Rob Crittenden <rcritten@redhat.com> - 2.4.1-3
changelog:
  - Add BuildRequires on libtool
  - Add -fPIC to LDFLAGS
  - Disable perl bindings, it fails to build on x86.


author: John Dennis <jdennis@redhat.com> - 2.5.1-1
changelog:
  - Upgrade to upstream 2.5.1 release
    See Changelog for details, mostly bugs fixes,
    most signficant is proper support of SHA-2
    Resolves: #1295472
    Resolves: #1303573
  - Add java_binding_lasso_log.patch to fix "make check" failure during rpmbuild
    upstream commit d8e3ae8


author: John Dennis <jdennis@redhat.com> - 2.5.1-3
changelog:
  - disbable PHP binding because PHP-7 is now the default and lasso
    only knows how to build with PHP-5


author: Tomas Orsava <torsava@redhat.com> - 2.6.0-5
changelog:
  - Require the Python interpreter directly instead of using the package name
  - Resolves: rhbz#1633617


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-7
changelog:
  - Resolves: rhbz#1634268 - ECP signature check fails with
                             LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when
                             assertion signed instead of response


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20190308git89910a39dcfd-2.el8
changelog:
  - edk2-redhat-provide-firmware-descriptor-meta-files.patch [bz#1600230]
  - Resolves: bz#1600230
    ([RHEL 8.1] RFE: provide firmware descriptor meta-files for the edk2-ovmf and edk2-aarch64 firmware images)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190308git89910a39dcfd-4.el8
changelog:
  - edk2-OvmfPkg-raise-the-PCIEXBAR-base-to-2816-MB-on-Q35.patch [bz#1666941]
  - edk2-OvmfPkg-PlatformPei-set-32-bit-UC-area-at-PciBase-Pc.patch [bz#1666941]
  - Resolves: bz#1666941
    (UEFI guest cannot boot into os when setting some special memory size)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190308git89910a39dcfd-5.el8
changelog:
  - edk2-redhat-add-D-TPM2_ENABLE-to-the-edk2-ovmf-build-flag.patch [bz#1693205]
  - Resolves: bz#1693205
    (edk2: Enable TPM2 support)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190308git89910a39dcfd-6.el8
changelog:
  - edk2-ArmVirtPkg-silence-DEBUG_VERBOSE-masking-0x00400000-.patch [bz#1714446]
  - edk2-OvmfPkg-QemuRamfbDxe-Do-not-report-DXE-failure-on-Aa.patch [bz#1714446]
  - edk2-ArmPkg-DebugPeCoffExtraActionLib-debugger-commands-a.patch [bz#1714446]
  - Resolves: bz#1714446
    (edk2-aarch64 silent build is not silent enough)


author: Matej Marusak <mmarusak@redhat.com> - 10-1
changelog:
  - Support for user containers
  - Show list of containers that use given image
  - Show placeholder while loading containers and images
  - Fix setting memory limit - bug 1732713
  - Add container Terminal - bug 1703245
  - Related: RHELPLAN-25138


author: Jindrich Novy <jnovy@redhat.com> - 11-1
changelog:
  - Fix Alert notification in Image Search Modal
  - Allow more than a single Error Notification for Container action errors
  - Various Alert cleanups
  - Translation updates
  - Related: RHELPLAN-25138


author: Paul Howarth <paul@city-fan.org> - 0.926-6
changelog:
  - Be more selective about what to exclude when bootstrapping
  - Don't use macros for commands
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Make %files list more explicit
  - Fix typo in %description


author: Paul Howarth <paul@city-fan.org> - 0.928-1
changelog:
  - Update to 0.928
    - Cope with subroutines with spaces in their names when catching warnings
    - Don't assume that the source sub isn't blessed in tests (!)


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 0.7.65-1
changelog:
  - Update to new stable 0.7.65
  - change ownership of logdir to root:root
  - add support for ipv6 (bug #561248)
  - add random_index_module
  - add secure_link_module


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 0.8.53-3
changelog:
  - Change ownership of /var/log/nginx to be 0700 nginx:nginx
  - update init script to use killproc -p
  - add reopen_logs command to init script
  - update init script to use nginx -q option


author: Keiran "Affix" Smith <fedora@affix.me> - 1.0.10-1
changelog:
  - Bugfix: a segmentation fault might occur in a worker process if resolver got a big DNS response. Thanks to Ben Hawkes.
  - Bugfix: in cache key calculation if internal MD5 implementation wasused; the bug had appeared in 1.0.4.
  - Bugfix: the module ngx_http_mp4_module sent incorrect "Content-Length" response header line if the "start" argument was used. Thanks to Piotr Sikora.


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.0.12-2
changelog:
  - update upstream URL
  - replace %define with %global
  - remove obsolete BuildRoot tag, %clean section and %defattr
  - remove various unnecessary commands
  - add systemd service file and update scriptlets
  - add Epoch to accommodate %triggerun as part of systemd migration


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.0.15-1
changelog:
  - update to upstream release 1.0.15
  - no need to apply auto-cc-gcc patch
  - add %global _hardened_build 1


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.0.15-4
changelog:
  - add nginx-upgrade to replace functionality from the nginx initscript
    that was lost after migration to systemd
  - add README.fedora to describe usage of nginx-upgrade
  - nginx.logrotate: use built-in systemd kill command in postrotate script
  - nginx.service: start after syslog.target and network.target
  - nginx.service: remove unnecessary references to config file location
  - nginx.service: use /bin/kill instead of "/usr/sbin/nginx -s" following
    advice from nginx-devel
  - nginx.service: use private /tmp


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.2.4-1
changelog:
  - update to upstream release 1.2.4
  - introduce new systemd-rpm macros (#850228)
  - link to official documentation not the community wiki (#870733)
  - do not run systemctl try-restart after package upgrade to allow the
    administrator to run nginx-upgrade and avoid downtime
  - add nginx man page (#870738)
  - add nginx-upgrade man page and remove README.fedora
  - remove chkconfig from Requires(post/preun)
  - remove initscripts from Requires(preun/postun)
  - remove separate configuration files in "/etc/nginx/conf.d" directory
    and revert to upstream default of a centralized nginx.conf file
    (#803635) (#842738)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.2.6-2
changelog:
  - send correct kill signal and use correct file permissions when rotating
    log files (#888225)
  - send correct kill signal in nginx-upgrade


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.2.6-5
changelog:
  - uncomment "include /etc/nginx/conf.d/*.conf by default but leave the
    conf.d directory empty (#903065)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.4.0-1
changelog:
  - update to upstream release 1.4.0
  - enable SPDY module (new in this version)
  - enable http gunzip module (new in this version)
  - enable google perftools module and add gperftools-devel to BR
  - enable debugging (#956845)
  - trim changelog


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.4.1-1
changelog:
  - update to upstream release 1.4.1 (#960605, #960606):
    CVE-2013-2028 stack-based buffer overflow when handling certain chunked
    transfer encoding requests


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.6.1-1
changelog:
  - update to upstream release 1.6.1
  - (#1126891) CVE-2014-3556: SMTP STARTTLS plaintext injection flaw


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.6.2-2
changelog:
  - create nginx-filesystem subpackage (patch from Remi Collet)
  - create /etc/nginx/default.d as a drop-in directory for configuration files
    for the default server block
  - clean up nginx.conf


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.8.0-4
changelog:
  - add TimeoutStopSec=5 and KillMode=mixed to nginx.service
  - set worker_processes to auto
  - add some common options to the http block in nginx.conf
  - run nginx-upgrade on package update
  - remove some redundant scriptlet commands
  - listen on ipv6 for default server (#1217081)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.8.0-8
changelog:
  - replace /bin/kill with /usr/bin/systemctl kill in logrotate script (#1231543)
  - remove After=syslog.target in nginx.service (#1231543)
  - replace ExecStop with KillSignal=SIGQUIT in nginx.service (#1231543)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.8.0-14
changelog:
  - consistently use '%global with_foo' style of logic
  - remove PID file before starting nginx (#1268621)


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 1:1.8.1-1
changelog:
  - update to upstream release 1.8.1
  - CVE-2016-0747: Insufficient limits of CNAME resolution in resolver
  - CVE-2016-0746: Use-after-free during CNAME response processing in resolver
  - CVE-2016-0742: Invalid pointer dereference in resolver


author: Björn Esser <besser82@fedoraproject.org> - 1:1.12.1-5
changelog:
  - Add patch to apply glibc bugfix if really needed only
  - Disable strict symbol checks in the link editor


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.0-1
changelog:
  - new version 1.16.0
  - enable ngx_stream_ssl_preread module
  - main package does NOT require all-modules package


author: Lubos Uhliarik <luhliari@redhat.com> - 1:1.16.1-1
changelog:
  - update to 1.16.1
  - Resolves: #1745697 - CVE-2019-9511 nginx:1.16/nginx: HTTP/2: large amount
    of data request leads to denial of service
  - Resolves: #1745690 - CVE-2019-9513 nginx:1.16/nginx: HTTP/2: flood using
    PRIORITY frames resulting in excessive resource consumption
  - Resolves: #1745645 - CVE-2019-9516 nginx:1.16/nginx: HTTP/2: 0-length
    headers leads to denial of service


author: Tomas Orsava <torsava@redhat.com> - 1:0.30.0-14
changelog:
  - Removed wheel's own implementation of crypto due to FIPS concerns
  Resolves: rhbz#1732325 rhbz#1732326


author: Tomas Orsava <torsava@redhat.com> - 1:0.30.0-15
changelog:
  - Fixed Patch0, which previously broken the metadata.json file generation
  Resolves: rhbz#1732325 rhbz#1732326


author: Jindrich Novy <jnovy@redhat.com> - 1.2.0-0.2.gitd0a45fe
changelog:
  - revert update to 1.6.0 due to new python3-pbr dependency which
    is not in RHEL
  - Related: RHELPLAN-25138


author: Rex Dieter <rdieter@fedoraproject.org> - 5.4.0-0.3.rc
changelog:
  - libQt5Designer should be in a subpackage (#1156685)
  - -doc: disable(boostrap for new clucene), drop dep on main pkg


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 5.4.0-0.4.rc
changelog:
  - disable bootstrap (reenable -doc)
  - system-clucene patch: drop -fpermissive flag
  - system-clucene patch: use toLocal8Bit instead of toStdString
  - system_clucene: BR clucene09-core-devel >= 0.9.21b-12 (-11 was broken)


author: Helio Chissini de Castro <helio@kde.org> - 5.6.0-3
changelog:
  - Reenable examples. Some interfaces marked as examples are needed from phonon
  - Update to second rc snapshot


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-0.5
changelog:
  - (re)fix bootstrap macro
  - include qt5-qdoc/qt5-qhelpgenerator build dep deps in -doc subpkg only
  - fix whitespace


author: Rex Dieter <rdieter@fedoraproject.org> - 5.8.0-4
changelog:
  - bootstrap 5.8.0 (rawhide)
  - Created a meta package called qt5-doctools to avoid the mess of multiple tools


author: Rex Dieter <rdieter@fedoraproject.org> - 5.9.1-4
changelog:
  - Obsoletes: qt5-designer-plugin-webkit (upgrade path when webkit support is not enabled)
  - resurrect bootstrap macro (commented)


author: Jay Greguske <jgregusk@redhat.com> - 1.1.16-2
changelog:
  - Sources now a zip rather than tarball
  - fix viostor 2k8-64 driver (rhbz#681958)
  - Removed .git in sources zip (rhbz#671187)


author: Jay Greguske <jgregusk@redhat.com> 1.1.16-4
changelog:
  - remove hypercall drivers included in error
  - add vioserial and balloon which were excluded in error


author: Jay Greguske <jgregusk@redhat.com> 1.3.0-1
changelog:
  - Added new vioserial drivers (rhbz#720540, rhbz#702258)
  - prewhql build: 0.1-12
  - included 00-ms-cross-cert.patch for the sake of completeness


author: Jay Greguske <jgregusk@redhat.com> 1.5.1-1
changelog:
  - Updated drivers for RHEL 6.3
  - Resolved: 677219, 695053, 713643, 730877, 744729, 744730,
              751952, 752743, 753723, 759361, 760022, 769495,
              770499, 771390, 799178, 799182, 799190, 799248,
              799264, 808322, 808654, 810694, 811161


author: Jay Greguske <jgregusk@redhat.com> 1.6.1-1
changelog:
  - Added drivers from submissions 1556359, 1557005, 1557012,
    1557004, 1557008, 1555597, 1552544, 1551826, 1549074,
    1546707
  - Enabled Win8/2012 platforms
  - Updated txtsetup.oem for Windows 2003
  - Resolves: 902977, 857832, 803633, 880569, 836915,
    838021, 714908, 750421, 760022, 768795, 782268, 790305,
    797030, 797032, 797695, 799864, 800247, 800716, 801238,
    805423, 807967, 814684, 814896, 815295, 816452, 819412,
    824814, 827000, 828275, 831570, 833659, 833671, 834174,
    834175, 834179, 834679, 836474, 837321, 837758, 838002,
    838005, 838008, 839143, 839853, 840911, 841169, 841544,
    842961, 843325, 855826, 858551, 859882, 864841, 873128,
    873960, 873971, 875155, 876033, 876061, 876397, 876504,
    877333, 878291, 879143, 879178
  - add the Windows guest agent and supporting .dlls to the .iso
    Resolves: 902977


author: Jay Greguske <jgregusk@redhat.com> 1.6.3-1
changelog:
  - Reorganize the VFDs to be 32/64 bit
  - Fix 1009 balloon coinstallers being resigned
  - Resolves: 908163, 891640


author: Mike Bonnet <mikeb@redhat.com> - 1.6.7-1
changelog:
  - Update to the latest version of the drivers
  - Add qemu-ga installers to the .iso
  - Resolves: rhbz#1018649 rhbz#1018652 rhbz#908609


author: Jeff E. Nelson <jen@redhat.com> - 1.7.4-1
changelog:
  - Resolves: bz#1183423 [rhel-7.2.0]
    (Change the copyright on all the Windows drivers to "2015" in virtio-win-preqhql build)
  - Resolves: bz#1195920 [rhel-7.2.0]
    (Windows 2012 R2 using virtio-scsi-driver with Direct LUNs causes BSODs)
  - Resolves: bz#1210208 [rhel-7.2.0]
    ([NetKVM] Malformed packet can cause BSOD)


author: Jeff E. Nelson <jen@redhat.com> - 1.7.4-1
changelog:
  - Correct NVR of virtio-win-prewhql-build

  - Resolves: bz#1183423 [rhel-7.2.0]
    (Change the copyright on all the Windows drivers to "2015" in virtio-win-preqhql build)
  - Resolves: bz#1195920 [rhel-7.2.0]
    (Windows 2012 R2 using virtio-scsi-driver with Direct LUNs causes BSODs)
  - Resolves: bz#1210208 [rhel-7.2.0]
    ([NetKVM] Malformed packet can cause BSOD)


author: Jeff E. Nelson <jen@redhat.com> - 1.8.0-1
changelog:
  - The virtio-win-1.8.0-1 release contains:
    - support for Windows 10
    - a new driver (pvpanic)
    - Bugfixes and improvements (see below for bugzilla list)

  - The drivers contained in this release are:
    - pvpanic build 103
    - Balloon build 105
    - viorng  build 105
    - viostor build 106
    - NetKVM  build 105 (Windows Server 2008) and build 110 (all others)
    - vioser  build 108
    - vioscsi build 102

  - Also included in this release are:
    - qemu guest agent 7.0-10
    - qxl 0.1-24

  This release addresses the following BZs:
  - Solves: bz#996479
    (RFE:pvpanic driver for windows guest)
  - Solves: bz#1010887
    ([virtio-win][balloon] Guest display did not show properly after hibernate guest(s4)& resume after enlarging memory during runtime)
  - Solves: bz#1017817
    (copying of 10+ MB plaintext from guest through spice clipboard to client results in: vio_serial write completion error 554)
  - Solves: bz#1037949
    ([virtio-win][viostor]guest bsod(9F) when do s4 while guest running iozone)
  - Solves: bz#1054640
    ([virtio-win][netkvm]windows 8.1 x86 BSOD on DRIVER_POWER_STATE_FAILURE (9f))
  - Solves: bz#1058115
    ([whql][netkvm]win2k8-32 BSOD with code 9F when run WLK job "Ethernet - NDISTest 6.5 (MPE)")
  - Solves: bz#1058121
    ([whql][netkvm]win2k8-32 BSOD with 7E code when run WLK job "Ethernet - NDISTest 6.5 (MPE)")
  - Solves: bz#1058225
    ([WHQL][netkvm]Job named PM_PowerStateTransition failed because error pop up while test app's running on win8/win8.1)
  - Solves: bz#1067249
    ([virtio-win][balloon]Balloon device can not be removed after blnsrv service installed)
  - Solves: bz#1085702
    ([WHQL][netkvm][macvtap][1 machine]OffloadRsc failed on win2012 and win8-64 guest)
  - Solves: bz#1096505
    ([NetKVM] Implement multiqueue support in Windows guest driver)
  - Resolves: bz#1098876
    ([virtio-win][netkvm]netkvm driver can not be installed on win8-64 guests)
  - Solves: bz#1100308
    ([NetKVM] Race condition in handling device stop)
  - Solves: bz#1103100
    ([virtio-win][netkvm]netkvm driver can not be load in win2008 guest)
  - Solves: bz#1106400
    ([whql][netkvm]NDISTest 6.5 - [2 Machine] - OffloadLSO failed)
  - Solves: bz#1109027
    ([virtio-win][netkvm]Name field is empty when using netsh command)
  - Solves: bz#1110129
    ([virtio-win][scsi]scsi driver can not be installed automately via pnputil)
  - Solves: bz#1111051
    ([virtio-win][netkvm]win7-32 guest bsod(8e) while performing long (several hours) netperf transfer with mq=on)
  - Resolves: bz#1112712
    ([virtio-win][netkvm]win8.1 32bit BSOD when loading virtio-win-prewhql-0.1 driver & indirect_desc=off option of virtio-net-pci)
  - Resolves: bz#1119966
    ([whql][netkvm][RHEL6]guests bsod (0xd1) when running job "NDISTest 6.5 - [1 Machine] - StandardizedKeywords")
  - Solves: bz#1121338
    ([WHQL][netkvm]NDISTest 6.5 - 2 Machine - OffloadChecksum failed via bridge on hck)
  - Solves: bz#1123288
    ([virtio-win][netkvm]BOSD occurs during guest reboot after disable nic when netserver running)
  - Solves: bz#1125796
    ("Guest moved used index from 10122 to 10253" when reboot win2012R2 guest with 129 virtio-scsi target)
  - Solves: bz#1126378
    ([virtio-win][vioscsi][rhel6]win2012 guest bsod(d1) when shutdown guest with multi virtio-scsi devices on the same scsi controller)
  - Solves: bz#1136023
    ([NetKVM] Google patches broke debug compilation of NetKVM driver)
  - Solves: bz#1136602
    ([whql][netkvm]Guest (64 bits Operating System) got BSOD (DRIVER_VERIFIER_DETECTED_VIOLATION) while run some jobs)
  - Solves: bz#1136606
    ([whql][netkvm]guests bsod(7E) when running job "NDISTest 6.0 - [1 Machine] - 1c_FaultHandling")
  - Solves: bz#1140447
    ([virtio-win][viorng]should use uniformed name for WDFCoinstallerXXX.dll)
  - Solves: bz#1142737
    ([virtio-win][netkvm]interface status is '2', but expect status is '7' after set_link NIC off)
  - Solves: bz#1147202
    ([virtio-win][WHQL][netkvm]Job named by InvalidPackets induce win81-32/64 to hang up.)
  - Solves: bz#1147203
    ([virtio-win][whql][netkvm]win2k8-64 bsod(7e) when run job "Ethernet - NDISTest 6.0")
  - Solves: bz#1147239
    (NetKVM with 2012R2 fails the HCK tests)
  - Solves: bz#1154419
    (NetKVM fails HCK test for 2008R2, single CPU)
  - Solves: bz#1154420
    (ParaNdis6_SendNetBufferList should dispatch each net buffer to a separate queue)
  - Solves: bz#1154435
    ([NetKVM] Incorrect message id assignment and queue allocation)
  - Solves: bz#1155891
    ([whql][netkvm]Job MPE failed while job was running on win2008R2 because of bsod (0A) on build 93 - 4 vcpus)
  - Solves: bz#1155910
    ([whql][netkvm]Job MPE failed while job was running on win2008R2 because of bsod (D1) on build 93 - 1 vcpus)
  - Resolves: bz#1156259
    (Win7-64 guest BSOD(0x000000A0) when doing s4)
  - Solves: bz#1157241
    ([NetKVM] Uninitialized reserved field in procNumber structure)
  - Solves: bz#1159732
    ([virtio-win][vioscsi]guest shutdown instead of S3/S4 while doing S3/S4 in guest)
  - Resolves: bz#1159754
    ([virtio-win][netkvm]Nic device doesn't work when guest is running in IRQ mode)
  - Solves: bz#1167539
    (win8.1.32 guest BSOD with error ' MEMORY_MANAGEMENT)
  - Solves: bz#1167614
    (win8.1.32 guest BSOD with error 'DRIVER_IRQL_NOT_LESS_OR_EQUAL' (netkvm.sys))
  - Solves: bz#1168119
    ([virtio-win][netkvm]win8.1.64 guest BSOD with error 'DRIVER_IRQL_NOT_LESS_OR_EQUAL' (netkvm.sys) after first reboot during os installation on AMD host)
  - Solves: bz#1168483
    ([virtio-win][netkvm]guest lost ip when change MTU between 500 and 575 via device manage)
  - Solves: bz#1168784
    ([virtio-win]win2012r2 guest shows black screen with error code "0x0000005c" after migration and reboot)
  - Solves: bz#1169673
    ([virtio-win][netkvm]qemu quit with "qemu-kvm: Guest moved used index from 0 to 257" when set MaxRxBuffers to 512/1024 in guest)
  - Solves: bz#1169718
    (CVE-2015-3215 [NetKVM] Malformed packet can cause BSOD [rhel-7.2])
  - Solves: bz#1170106
    (RFE: [virtio-win][qxl-win] Add windows 2008R2 QXL to the .vfd)
  - Solves: bz#1172920
    ([virtio-win][vioser]winxp guest bsod with D1 code when shutdown guest after hotunplug/hotplug serial port and serial pci)
  - Solves: bz#1173323
    (iperf stalls the NetKVM driver)
  - Solves: bz#1177063
    ([virtio-win][balloon]guest can't s3/s4 correctly if disable guest-stats-polling while balloon service running)
  - Solves: bz#1183423
    (Change the copyright on all the Windows drivers to "2015" in virtio-win-prewhql build)
  - Solves: bz#1184430
    (enable event index feature in Windows virtio-blk driver)
  - Resolves: bz#1184818
    (guest BSOD when reboot guest after enable qxl driver verifier)
  - Solves: bz#1188790
    (NetKVM driver crashed on pausing in MPE test)
  - Solves: bz#1190968
    ([whql][netkvm][mq]job "NDISTest 6.0 - [1 Machine] - 1c_Mini6RSSOids" last for hours and never stop w/ 4 queues)
  - Solves: bz#1191836
    ([whql][netkvm][mq]job "NDISTest 6.5 - [2 Machine] - GlitchFreeDevice" failed due to "not received the expected number of packets" w/ 4 queues)
  - Solves: bz#1195487
    (Windows guest performing out-of-bounds accesses on virtio device)
  - Resolves: bz#1195920
    (Windows 2012 R2 using virtio-scsi driver with Direct LUNs causes BSODs)
  - Solves: bz#1210208
    (CVE 2015-3215 [NetKVM] Malformed packet can cause BSOD [rhel-7.2])
  - Resolves: bz#1212392
    (need to do extra Refresh work when initiate virtio-blk disk while boot guest with OVMF)
  - Solves: bz#1217642
    (QXL XDDM is not shipped on the virtio-win ISO)
  - Resolves: bz#1217644
    (use hardlinks for .iso and /usr/share/virtio-win/drivers)
  - Solves: bz#1217799
    (Distribute *.oem, LICENSE, COPYING in -prewhql build)
  - Resolves: bz#1218449
    (Ship qemuserial.cat on the iso)
  - Solves: bz#1218937
    (QEMU Guest Agent VSS Provider is not started after guest tools install)
  - Solves: bz#1227164
    (viostor/vioscsi is not digital signed by Redhat)
  - Resolves: bz#1228967
    ([virtio-win][whql][viostor]job "Flush Test" failed on all guests with build 105)


author: Jeff E. Nelson <jen@redhat.com> - 1.8.0-2
changelog:
  The virtio-win-VVV-bin-for-rpm.zip file was previously a
  zip file. This has been switched to a .tar.gz file which
  provides better compresion and support for hard links.

  - Resolves: bz#1217644
    (use hardlinks for .iso and /usr/share/virtio-win/drivers)


author: Jeff E. Nelson <jen@redhat.com> - 1.8.0-3
changelog:
  Update virtio-win-1.8.0-for-rpm.tar.gz with the latest
  signed drivers. This corrects packaging mistakes that put
  drivers into the wrong directories; there are no new
  bugfixes.

  See the changelog entry for 1.8.0-1 for a full
  description of the changes in this release.

  - Resolves: bz#1217644
    (use hardlinks for .iso and /usr/share/virtio-win/drivers)


author: Jeff E. Nelson <jen@redhat.com> - 1.8.0-4
changelog:
  Drop /vioscsi/w10/amd64/vioscsi.DVL.XML which was included
  by mistake.

  See the changelog entry for 1.8.0-1 for a full
  description of the changes in this release.

  - Resolves: bz#1217644
    (use hardlinks for .iso and /usr/share/virtio-win/drivers)


author: Yash Mankad <ymankad@redhat.com> - 1.8.0-5
changelog:
  Add Windows 10 drivers to .vfd files (bz#1328275)
  Updates copyright notice in virtio-win_license.txt file to 2016 (bz#1303511)

   - Resolves: bz#1328275
     (virtio-win doesn't provide windows 10 drivers within vfd)
   - Resolves: bz#1303511
     (update copyright of license.txt file in virtio-win-1.7.5-0.el6 to 2016)


author: Yash Mankad <ymankad@redhat.com> - 1.9.0-1
changelog:
  - The virtio-win-1.9.0-1 release contains:
    - support for Windows 2016
    - Bugfixes and improvements (see below for bugzilla list)

  - The drivers contained in this release are:
    - pvpanic build 121
    - Balloon build 125
    - viorng  build 125
    - viostor build 125 (Win 10 and 2016) and 126 (all others)
    - NetKVM  build 126
    - vioser  build 125 (Win 10 and 2016) and 126 (all others)
    - vioscsi build 124

  - Also included in this release are:
    - qemu guest agent 7.3.2-1
    - qxl 0.1-24

  This release addresses the following BZs:
  - Resolves: bz#950611
    ([NetKVM] Pass WHQL tests with RSC feature enabled )
  - Resolves: bz#954183
    ([NetKVM] Static driver verifier fails with NetKVM )
  - Resolves: bz#1013336
    ([virtio-win][netkvm] BSoD occurs when running NDISTest6.5 -[2 Machine] - MPE_Ethernet job on windows 2012 (Win10))
  - Resolves: bz#1122364
    ([virtio-win][vioser][rhel6]win2k8r2 guest bsod(7e) when do continuous hotplug/unplug during virtio serial in use with driver verifier enabled)
  - Resolves: bz#1157987
    (Windows hangs at startup if virtio-scsi device is configured with vectors=1, 2, and 3)
  - Resolves: bz#1161453
    ([whql][vioscsi]Job named by SCSI Compliance Test (LOGO) failed on win2k8-R2 and win8-64 guest)
  - Resolves: bz#1190960
    ([whql][netkvm][mq]job failed due to "Received some net buffer lists out of order" w/ 4 queues)
  - Resolves: bz#1208465
    (Windows guest boots up slowly with multiple virtual NIC devices (I attached 232 with mutifunction=on))
  - Resolves: bz#1210166
    ([vioscsi] Add multiqueue support to Windows virtio-scsi driver.)
  - Resolves: bz#1214177
    ([virtio-win] [NetKVM] Compilation errors with Visual Studio 2015 while trying to compile NetKVM)
  - Resolves: bz#1214568
    ([RFE][virtio-win] Add WMI facility to check the virito-scsi mq enabled)
  - Resolves: bz#1219841
    ([RFE] vioscsi.sys should support MS Cluster Services)
  - Resolves: bz#1223426
    ([NetKVM] Performance degradation with multi-queue)
  - Resolves: bz#1234741
    ([virtio-win][vioscsi]win2012 guest bsod(c9) when whql test DPWLK-HotAdd(1104) job)
  - Resolves: bz#1234751
    ([virtio-win][vioscsi]win2012R2 guest bsod(d1) when whql test DPWLK-HotAdd(1104) job)
  - Resolves: bz#1235108
    ([virtio-win][vioscsi]VIOSCSI driver is not signed by redhat certification on win200832/64 platform)
  - Resolves: bz#1237024
    ([virtio-win][netkvm]ipv6 uploading speed is quite slow when set "TCP/UDP checksum offload(IPv6)" to "Rx & Tx Enabled")
  - Resolves: bz#1241986
    (win7 64bit BSOD when booting it on RHEL7.2 host)
  - Resolves: bz#1243229
    ([virtio-win][scsi][windows 10]win10 and win2016 guests bsod with D1 when run job "Bus Reset Test")
  - Resolves: bz#1245957
    ([WHQL][viostor][data-plane]it could not generate dump file on WIN2008-32/64 via WLK while running Crash Dump job)
  - Resolves: bz#1246993
    ([virtio-win][svvp][ws2016] job "Signed Driver Check (CheckLogo)" failed during ws2016 svvp test)
  - Resolves: bz#1247006
    ([virtio-win][svvp][ws2016] job "Profile Interrupt Test" failed during ws2016 svvp test)
  - Resolves: bz#1248873
    ([whql][netkvm]Job named NDISTest6.5-InvalidPackets failed with HCK on win8-32/win8-64(build 106))
  - Resolves: bz#1248977
    ([virtio-win][vioscsi] Cannot install vioscsi driver on win7-32&win2008-32)
  - Resolves: bz#1249867
    ([WHQL][vioscsi]Job hangs and it cannot continure on windows2008 guest via WLK)
  - Resolves: bz#1250854
    ([WHQL][vioscsi]The job named crash dump failed on windows 2008 -32/64 platform)
  - Resolves: bz#1256583
    (Win10 guest can't get ip address from dhcpserver when add mrg_rxbuf=off for virtio-net-pci)
  - Resolves: bz#1266340
    ([whql][netkvm]NDISTest6.5 Manual test failed and generate dump file on windows 2008 guest)
  - Resolves: bz#1270149
    ([virtio-win][netkvm] Check guest network link status of virtio nic with status=on failed (build 110))
  - Resolves: bz#1289406
    ([virtio-win][vioser] Cannot install vioser driver successfully)
  - Resolves: bz#1292788
    ([virtio-win][viostor] Cannot install viostor driver on win7-64&win2008-64&win2008R2)
  - Resolves: bz#1293042
    ([virtio-win][vioser] Extra '-' (dash) in serial driver name)
  - Resolves: bz#1293249
    ([virtio-win][vioser] IOCTL_GET_INFORMATION does not return required buffer size)
  - Resolves: bz#1296092
    ([virtio-win][balloon] balloon driver can not be installed automately via pnputil)
  - Resolves: bz#1303511
    (update copyright of license.txt file in virtio-win to 2016)
  - Resolves: bz#1303809
    (provide QEMU guest agent command for setting root/administrator account password - window guests)
  - Resolves: bz#1303988
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for NetKVM)
  - Resolves: bz#1304041
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for vioserial)
  - Resolves: bz#1304044
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for vioscsi)
  - Resolves: bz#1304049
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for viostor)
  - Resolves: bz#1313243
    ([virtio-win][netkvm][rhel6]win2008-32 guest bsod with HARDWARE_INTERRUP_STORM(f2) when running netperf for longevity test)
  - Resolves: bz#1313887
    ([RFE] provide QEMU guest agent command for setting root account password (Windows guest) [rhel-7.3])
  - Resolves: bz#1315984
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for baloon)
  - Resolves: bz#1315985
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for rng)
  - Resolves: bz#1321774
    ([virtio-win][vioscsi]fio jobs keep printing "0% done" in win2012r2 guest)
  - Resolves: bz#1325078
    (Add TargetOSVersion to driver inf files)
  - Resolves: bz#1328275
    (virtio-win doesn't provide windows 10 drivers within vfd [rhel-7.3])
  - Resolves: bz#1334736
    (On the LAN network, as long as the VMs receive the Network message, and will always blue screen.)
  - Resolves: bz#1336368
    ([virtio-win][viostor][virtio1.0]Cannot enlarge/shrink disk with virtio1.0 device)
  - Resolves: bz#1339175
    ([NetKVM] Turn on RSC feature in NetKVM driver)
  - Resolves: bz#1340571
    (Add Windows 2k16 drivers to virtio-win)
  - Resolves: bz#1352432
    ([virtio-win][vioscsi]Win2012-64&R2 guest occurred bsod(d1) when whql test DPWLK- Hot-Replace - Device Test - Verify driver support for D3 power state)
  - Resolves: bz#1352517
    ([virtio-win][balloon][whql]windows guest BSOD when run several WHQL jobs)
  - Resolves: bz#1352809
    ([virtio-win][viorng]wrong dervier version for virtio-win-prewhql-121)
  - Resolves: bz#1356363
    ([virtio-win][viorng] cannot install viorng driver on win2008-32/64 (build 122) )
  - Resolves: bz#1358125
    (Virtio 1.0 driver didn't work on win10 with q35 machine type)
  - Resolves: bz#1359072
    ([virtio-win][netkvm][whql]many whql jobs occurred BSOD(DRIVER_VERIFIER_DETECTED_VIOLATION (c4)) on build 122)
  - Resolves: bz#1361501
    ([virtio-win][balloon] report "VCRUNTIME120.dll is missing from your computer"error when using blnsvr.exe)


author: Yash Mankad <ymankad@redhat.com> - 1.9.0-2
changelog:
  This release updates the VirtIO Block and Serial drivers for
  Windows 10 and 2016 release to use the 126 build.

  See the changelog entry for 1.9.0-1 for a full description
  of the changes in this release.

  - Resolves: bz#1340571
    (Add Windows 2k16 drivers to virtio-win)


author: Yash Mankad <ymankad@redhat.com> - 1.9.0-3
changelog:
  Add Windows 2016 drivers to .vfd files
  Updates copyright notice in virtio-win_license.txt file (bz#1303511)

  See the changelog entry for 1.9.0-1 for a full description
  of the changes in this release.

  - Resolves: bz#1340571
    (Add Windows 2k16 drivers to virtio-win)
  - Resolves: bz#1303511
    (update copyright of license.txt file in virtio-win-1.7.5-0.el6 to 2016)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.9.1-0
changelog:
  This release contains the following drivers and build number:
   - pvpanic, build 137
   - vioinput, build 137
   - vioser, build 137
   - balloon, build 13
   - viorng, build 137
   - netkvm, build 139
   - vioscsi, build 136
   - viostor, build 136
   - qxl, build qxl-win-unsigned-0.1-24
   - qemupciserial, build 137
   - smbus, build 138
   - qemufwcfg, build 128


  This release addresses the following BZs:
  - Resolves: BZ#1075292
    ([virtio-win][qemu-ga-win] qemu guest agent should report correctly error description (windows guest))
  - Resolves: BZ#1202267
    ([virtio-win][wddm-qxl]The display of guest change to black-white mode after s4 on win8.1-32)
  - Resolves: BZ#1218449
    (Ship qemupciserial.cat on the iso)
  - Resolves: BZ#1256626
    (windows guest(win7/win10)  CTRL_VLAN=on/off  does not support for  virtio-net-pci)
  - Resolves: BZ#1303510
    (Change the copyright on all the Windows drivers to "2017" in virtio-win-prewhql build)
  - Resolves: BZ#1357406
    (Add virtio-input Windows guest driver)
  - Resolves: BZ#1369353
    (virtio_balloon: backport "available memory" stat support)
  - Resolves: BZ#1370351
    ([virtio-win][vioser] serial port can not transfer data when nr>=31)
  - Resolves: BZ#1372174
    (NIC device cannot start when boot a Win10 guest with multiple queues(256 queues))
  - Resolves: BZ#1374725
    (Output command {"execute": "guest-info"} includes unsupported qemu-ga-win commands)
  - Resolves: BZ#1387125
    (QEMU guest agent VSS Provider is crashed after snapshot deletion)
  - Resolves: BZ#1388775
    ([virtio-win][vioinput]guest bsod[DRIVER_PAGE_FAULT_IN_FREED_SPECIAL_POOL (d5)] when run virtio-input whql jobs)
  - Resolves: BZ#1388920
    ([NetKVM] review additional possible performance improvements)
  - Resolves: BZ#1389125
    (viostor extend viostor driver with STORAGE_REQUEST_BLOCK support)
  - Resolves: BZ#1389445
    (VirtIO library interface incompatiblity with NetKvm (bool definition))
  - Resolves: BZ#1390714
    ([RFE] [virtio-win] Add fw_cfg device in windows guest in order to make svvp test pass)
  - Resolves: BZ#1391844
    ([virtio-win][balloon][viorng][virtio-input] cannot install balloon, viorng and virtio-input driver successfully on win10-32 and win8.1-32(build 127))
  - Resolves: BZ#1392693
    ([virtio-win][vioser][whql] job "PCI Hardware Compliance Test For a Single Device(PCIHCT)" fail w/ "-M q35")
  - Resolves: BZ#1392719
    ([virtio-win][vioser]can't install serial driver successfuly on win10-64 guest with q35 machine type(build 128))
  - Resolves: BZ#1392819
    ([NetKVM] Race between ParaNdis_SetupRSSQueueMap and ParaNdis6_SendNetBufferLists due to the lack of synchronisation)
  - Resolves: BZ#1393140
    ([virtio-win][vioser][whql]BSOD when running job "WDF Logo Test-Final" w/ q35 on win2008-32)
  - Resolves: BZ#1393772
    (New unknown device "SM Bus Controller" shows in system device manager after booting with q35)
  - Resolves: BZ#1395790
    (vioscsi.sys BSOD when adding CPU to live Windows Server 2012R2 guest)
  - Resolves: BZ#1402496
    (Balloon: Stats don't work if balloon driver is disabled when blnsvr service starts)
  - Resolves: BZ#1406271
    ([virtio-win][qemu-ga-win] if guest is auto-released after 10s, the following "guest-fsfreeze-freeze" and "guest-fsfreeze-thaw" should not prompt error.)
  - Resolves: BZ#1408771
    ([virtio-win][viorng] Guest win2008-32 occurs BSoD when running job "WDF Logo Tests - Final" under q35)
  - Resolves: BZ#1408901
    ([virtio-win][whql][vioinput] Many jobs failed on win2012R2/ws2016 when running w/o GUI)
  - Resolves: BZ#1409298
    ([virtio-win][balloon] Guest win2008-32 occurs BSoD when running job 'Device Path Exerciser')
  - Resolves: BZ#1411092
    (4K virtual drives broken on Windows)
  - Resolves: BZ#1411596
    (Virtio driver of network device works abnormally when convert win2008 x86 guest from kvm to rhev by virt-v2v)
  - Resolves: BZ#1412067
    ([virtio-win][whql][netkvm] job 1c_IOCTLCoverage failed.)
  - Resolves: BZ#1419785
    ([virtio-win][whql][balloon] Guest WIN8-32 occured BSOD in job "DF - PNP Stop (Rebalance) Device Test (Certification)")
  - Resolves: BZ#1419854
    (vioinput: Driver is dropping rapid input events)
  - Resolves: BZ#1419900
    (BSOD of vioser.sys on Win10 in S0->S4->S0 flow)
  - Resolves: BZ#1421258
    (Add qemufwcfg driver to virtio-win)
  - Resolves: BZ#1421988
    ([virtio-win][virtio-input] Read wrong device in guest's device manager when do hot-plug a mouse device and keyboard device)
  - Resolves: BZ#1425967
    (Update qemupciserial.* files for virtio-win)
  - Resolves: BZ#1426482
    ([virtio-win][balloon] cost too much time when continues enlarge/evict during playing video)
  - Resolves: BZ#1429807
    ([virtio-win][whql][netkvm] guests bsod(d1) when running job "NDISTest 6.0 - [1 Machine] - 1c_FaultHandling")
  - Resolves: BZ#1431561
    ([NetKVM] Implement VIRTIO_NET_F_GUEST_ANNOUNCE feature in Windows virtio-net driver - IPv6)
  - Resolves: BZ#1432567
    ([virtio-win][vioscsi] Crash dump not generated with num_queues=4)
  - Resolves: BZ#1433266
    ([virtio-win][netkvm] cannot launch anti-virus software(ESET Endpoint Antivirus) with virtio NetKVM driver)
  - Resolves: BZ#1433830
    ([virtio-win][whql][netkvm] guests bsod(d1) when running job "NDISTest 6.5 - [2 Machine] - OffloadLSO")
  - Resolves: BZ#1434316
    ([qemu-ga-win] Guest agent might hang if VSS service is stoped during freeze)
  - Resolves: BZ#1435778
    (virtio-serial breaks when CPU hot added to Windows Server 2008R2 Datacenter)
  - Resolves: BZ#1438410
    (Net-KVM: Add VlanId property to Inf file)
  - Resolves: BZ#1439085
    ([virtio-win][netkvm] Guest win2008-32 failed in job Ethernet - NDISTest 6.0 with 1c_wmicoverage failure)
  - Resolves: BZ#1441595
    ([virtio-win][viostor]windows 2016 can not generate dump file on AMD host)
  - Resolves: BZ#1442322
    ([virtio-win][viostor]Cannot enlarge/shrink disk with virtio-blk-pci device.)
  - Resolves: BZ#1443019
    ([virtio-win][qemupciserial] job "PNP Rebanlance RequestNew Resources Device Test" and other two jobs failed on win10+ guests)
  - Resolves: BZ#1444271
    ([virtio-win][viorng]job "DF - InfVerif INF Verification" failed on HLK 1703)
  - Resolves: BZ#1451652
    (RFE: Add smbus driver to virtio-win)
  - Resolves: BZ#1456403
    (Net-KVM: Implement MTU report feature of the virtio-net device)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.9.2-0
changelog:
  - Resolves: BZ#1471073
    Latest latest virtio driver (network) for Windows drops lots of packets (edit)


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 1.9.6-3
changelog:
  - Resolves: BZ#1353099
    Drop unsupported Windows releases from virtio-win

  - Resolves: BZ#1533540
    Drop floppy (.vfd) files from virtio-win


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 1.9.6-4
changelog:
  - Resolves: BZ#1353099
    During the fix for 1353099, the smbus become empty. So it needs to be
    removed.


author: Petr Pisar <ppisar@redhat.com> 2.47-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Make devel sub-package architecture specific due to file location


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.135.07-240
changelog:
  - update the version to override the module from perl.srpm
  - bump release to override sub-package from perl.spec


author: Paul Wouters <paul@xelerance.com> 1.0.0-6
changelog:
  - added a make clean for 2.3.3 since .o files were left behind upstream,
    causing failure on ppc platform


author: Paul Wouters <paul@xelerance.com> 1.0.1-3
changelog:
  - Fixed changelog typo in date
  - Rebuild requested for PT_GNU_HASH support from gcc
  - Did not upgrade to 1.1.0 due to compile issues on x86_64


author: Paul Wouters <paul@xelerance.com> 1.2.0-2
changelog:
  - Own the /usr/include/ldns directory (bug #233858)
  - Removed obsoleted patch
  - Remove files form previous libtool run accidentally packages by upstream


author: Paul Wouters <paul@xelerance.com> 1.2.0-10
changelog:
  - Added sha256 DS record patch to ldns-key2ds
  - Minor tweaks for proper doc/man page installation.
  - Workaround for parallel builds


author: Paul Wouters <paul@xelerance.com> 1.2.0-11
changelog:
  - Patch for ldns-key2ds to write to stdout
  - Again remove extra set of man pages from doc
  - own /usr/include/ldns (bug 233858)


author: Paul Wouters <paul@xelerance.com> - 1.5.1-4
changelog:
  - Memory management bug when generating a sha256 key, see:
    https://bugzilla.redhat.com/show_bug.cgi?id=493953


author: Paul Wouters <paul@xelerance.com> - 1.6.0-3
changelog:
  - Added patch to compile with --without-ssl
  - Removed openssl dependancies
  - Recompiled with --without-ssl


author: Paul Wouters <paul@xelerance.com> - 1.6.1-2
changelog:
  - Added openssl dependancy back in, since we get more functionality
   when using openssl. Especially in 'drill'.


author: Paul Wouters <paul@xelerance.com> - 1.6.2-1
changelog:
  - Upgraded to 1.6.2. This fixes various bugs.
    (upstream released mostly to default with sha2 for the imminent
     signed root, but we already enabled that in our builds)


author: Paul Wouters <paul@xelerance.com> - 1.6.4-2
changelog:
  - Fix missing _ldns.so causing ldns-python to not work
  - Patch for installing ldns-python files
  - Patch for rpath in ldns-python
  - Don't install .a file for ldns-python


author: Paul Wouters <paul@xelerance.com> - 1.6.10-2
changelog:
  - Fix for losing nameserver when it drops UDP fragments in
    ldns_resolver_send_pkt [Willem Toorop <willem@NLnetLabs.nl>]
  - Added ldnsx module (to be merged into ldns soon)
    http://git.xelerance.com/cgi-bin/gitweb.cgi?p=ldnsx.git;a=summary


author: Paul Wouters <paul@xelerance.com> - 1.6.11-2
changelog:
  - Updated to 1.6.11, fixes rhbz#741026 which is CVE-2011-3581
  - Python goes into sitearch, not sitelib
  - Fix source link and spelling errors in description


author: Paul Wouters <pwouters@redhat.com> - 1.6.13-1
changelog:
  - Upgraded to 1.6.13, bugfix release
  - Added --disable-ecdsa as ECC is still banned
  - Removed --with-sha2 - it is always enabled and option was removed


author: Paul Wouters <pwouters@redhat.com> - 1.6.13-2
changelog:
  - Added reworked ldns-read-zone patch from trunk
    (adds -p for SOA padding, and -o for zeroizing timestamps/sigs)


author: Paul Wouters <pwouters@redhat.com> - 1.6.14-1
changelog:
  - [pulled before release]
  - Updated to 1.6.14
  - Removed merged in patch
  - Added new dependancy on ca-certificates for ldns-dane PKIX validation


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Paul Wouters <pwouters@redhat.com> - 1.6.17-1
changelog:
  - Updated to 1.6.17
  - Enable perl bindings via new ldns-perl sub-package
  - Enable ECDSA/GOST which is now allowed in Fedora
  - Removed patches merged upstream, ported multilib patch to 1.6.17


author: Tomas Hozza <thozza@redhat.com> - 1.6.17-2
changelog:
  - Fix error causing ldns to sometimes produce faulty DSA sign (#1077776)
  - Fix FTBFS due to perl modules


author: Paul Wouters <pwouters@redhat.com> - 1.6.17-3
changelog:
  - CVE-2014-3209 ldns: ldns-keygen generates keys with world readable permissions
  - Fix 1017958 - 32 and 64 bit ldns conflicts on some manual pages
  - Fix rhbz#1062874 - cannot install ldns.x86_64 in parallel to ldns.i686
  - Incorporate fixes from Tuomo Soini <tis@foobar.fi>
  - hardened build
  - fix ldns internal provides and requires filter
  - fix perl-ldns requirement to include %_isa
  - setup filters for perl and python bindings for internal stuff
  - split utils to separate package


author: Paul Wouters <pwouters@redhat.com> - 1.6.17-4
changelog:
  - Rename ldns-python to python-ldns
  - Rename ldns-perl to perl-ldns
  - Ensure ldns-utils is dragged it so an upgrade does not remove utils


author: Paul Wouters <pwouters@redhat.com> - 1.6.17-11
changelog:
  - Only cond_without sets "with ", so use underscores
  - multilib.patch was setting LIBDIR_SEC once without leading /


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.0-3
changelog:
  - explicitly track library soname (so bumps aren't a surprise)
  - use %license, drop dup'd README in -devel
  - BR: openssl-devel >= 1.1.0 (required for DANE verification)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.7.0-8
changelog:
  - Python 2 binary package renamed to python2-ldns
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Paul Wouters <paul@xelerance.com> 1.5.0.0-4
changelog:
  - Some filesystem defines moved from their specific (ext2)
    filesystem defines into the generic <linux/fs.h>.


author: Caolán McNamara <caolanm@redhat.com> - 1.7.1.1-5
changelog:
  - recreate autoconf to get correct includes when determining type
    sizes in order to build correctly


author: Paul Wouters <paul@xelerance.com> - 1.7.1.2-1
changelog:
  - Upgraded to 1.7.1.2
  - Link against compat-readline5 for GPLv2 license (Miroslav Lichvar)
    (bz #511310)


author: Paul Wouters <paul@xelerance.com> - 1.7.1.3-1
changelog:
  - Upgrade to 1.7.1.3
  - Includes fix for CVE-2010-2799 Stack overflow by lexical scanning of nested
    character patterns
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=620430


author: Paul Wouters <paul@nohats.ca> - 1.7.2.0-1
changelog:
  - Upgraded to 1.7.2.0 which allows tun/tap interfaces without IP address
    and introduces options openssl-compress and max-children.


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.1-1
changelog:
  - Updated to 1.7.2.1 for CVE-2012-0219, rhbz#821553, rhbz#821688
  - Remove patch merged upstream
  - Remove --disable-fips from configure


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.2-2
changelog:
  - Added two patches that fixes some -Wformat warnings. these fix 2 of 3
    failing test cases from test.sh
  - Enabled hardening with full relro/pie
  - Switch from readline5 to readline(6)


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.4-1
changelog:
  - Updated to 1.7.2.4 which contains many bugfixes
  - Run tests in make check
  - Add build dependancies for make test


author: Jan Safranek <jsafrane@redhat.com> 1.8.10-2
changelog:
  - fix issues found during package review:
    - clear Default-Start: line in the init script, the service should be 
      disabled by default
    - added Obsoletes: OpenIPMI-tools
    - compile with --disable-dependency-tracking to speed things up
    - compile with --enable-file-security
    - compile with --disable-intf-free, don't depend on FreeIPMI libraries
      (FreeIPMI has its own ipmitool-like utility)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.12-2
changelog:
  - Fixed starting ipmievd under systemd (#819234).
  - Updated RPM scriplets with latest systemd-rpm macros (#850161)


author: Praveen K Paladugu <praveen_paladugu@dell.com> 1.8.12-8
changelog:
  - service & scripts to allow OS to capture BMC's IP & URL info
  - Also pass the OS information to BMC
  - patches submitted by Charles Rose (charles_rose[at]dell.com)


author: Ales Ledvinka <aledvink@redhat.com> 1.8.12-13
changelog:
  - fixed argument parsing leaks
  - ask user for password only once and do so only when interactive password
    is the chosen password method.


author: Ray Strode <rstrode@redhat.com> 0.6.14-2
changelog:
  - Fix wtmp loading so users coming from the network are
    remembered in the user list in subsequent boots


author: Matthias Clasen <mclasen@redhat.com> 0.6.15-2
changelog:
  - Make resetting user icons work
  - Update to 0.6.15
  - Fixes session chooser at login screen when logged into vt


author: Ray Strode <rstrode@redhat.com> 0.6.35-2
changelog:
  - pass --enable-user-heuristics which fedora needs so users
    with UIDs less than 1000 show up in the user list.


author: Stef Walter <stefw@redhat.com> - 0.6.38-1
changelog:
  - Update to 0.6.38
  - Fixes polkit policy rhbz#1094138
  - Remove dbus-glib-devel dependency, accountsservice uses gdbus now


author: Ray Strode <rstrode@redhat.com> - 0.6.42-6
changelog:
  - Fix crash introduced by glibc/libxcrypt change
    https://fedoraproject.org/wiki/Changes/Replace_glibc_libcrypt_with_libxcrypt
    Resolves: #1538181


author: Radovan Sroka <rsroka@redhat.com> - 0.16-1
changelog:
  - rebase to stable v0.16
  - specfile cleanup
  - make doc readable
    resolves: #1421355
  - make aide binary runable for any user
    resolves: #1421351


author: Radovan Sroka <rsroka@redhat.com> - 0.16-9
changelog:
  - Null pointer dereference fix spotted by coverity
    resolves: rhbz#1676487
  - aide.conf needs updates for RHEL 8
    resolves: rhbz#1708015


author: Šimon Lukašík <slukasik@redhat.com> - 0.9.13-7
changelog:
  - do not obsolete openscap-conten just drop it (#1028706)
    scap-security-guide will bring the Obsoletes tag


author: Šimon Lukašík <slukasik@redhat.com> - 1.0.0-2
changelog:
  - dlopen libopenscap_sce.so.{current-age} explicitly
    That allows for SCE to work without openscap-engine-sce-devel


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2.14-8
changelog:
  - Python 2 binary package renamed to python2-openscap
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Jan Černý <jcerny@redhat.com> - 1.3.0_alpha1-1
changelog:
  - upgrade to the latest upstream release
  - change specfile to use CMake
  - dropped commands in the spec file that are no longer relevant
  - dropped subpackages in the spec file that are no longer relevant


author: Evgeny Kolesnikov <ekolesni@redhat.com> - 1.3.1-0
changelog:
  - Upgrade to the latest upstream release (rhbz#1718826)
  - Support for SCAP 1.3 Source Datastreams (evaluating, XML schemas, validation) (rhbz#1709429)
  - Tailoring files are included in ARF result files
  - Remote filesystems mounted using `autofs` direct maps are not recognized as local filesystems (rhbz#1655943)
  - Offline scan utilizing rpmverifyfile probe fails in fchdir and aborts (rhbz#1636431)


author: Tomas Korbar <tkorbar@redhat.com> - 0.16.105-1
changelog:
  - Change specfile accordingly to mosvald's review
  - Remove obsolete ldconfig scriptlets
  - libyang-devel-doc changed to noarch package
  - Add python_provide macro to python3-libyang subpackage
  - Remove obsolete Requires from libyang-cpp-devel
  - Start using cmake with smp_mflags macro


author: Jakub Filak <jfilak@redhat.com> - 1.0.7-1
changelog:
  - Use the last frame class path for executable
  - Gracefully handle JVMTI errors
  - Add an abstract to README
  - Add support for journald and syslog
  - Make log output disabled by default
  - Add support for changing log directory
  - Fix a race condition causing a crash of JVM


author: Jakub Filak <jfilak@redhat.com> - 1.0.8-1
changelog:
  - Do not report exceptions caught in a native method
  - Mark stack traces with 3rd party classes as not-reportable
  - Calculate 'duphash' & 'uuid' in satyr
  - Use the main class URL for 'executable'
  - Do not ship own reporting workflow definitions
  - Code optimizations


author: Jakub Filak <jfilak@redhat.com> - 1.0.8-2
changelog:
  - Make sure that agent_onload and agent_onunload are processed only once
  - Fix a pair of defects uncovered by coverity


author: Jakub Filak <jfilak@redhat.com> - 1.0.9-1
changelog:
  - Make the agent configurable via a configuration file
  - Include custom debug info in bug reports
  - Make the detection of 'executable' working with JAR files


author: Jakub Filak <jfilak@redhat.com> - 1.0.10-1
changelog:
  - Temporarily ignore failures of reporter-ureport until ABRT start using FAF2
  - Prevent users from reporting low quality stack traces


author: Ernestas Kulik <ekulik@redhat.com> - 1.1.0-16
changelog:
  - Add patch for #1721393
  - Add patch for https://github.com/abrt/abrt-java-connector/commit/ae2144f1674f163517f0aa18b5f1b4784c143572


author: Nalin Dahyabhai <nalin@redhat.com> 0.5-1
changelog:
  - update to 0.5
    - packaging fixes
    - add a selfsign-getcert client
    - self-signed certs now get basic constraints and their own serial numbers
    - accept id-ms-kp-sc-logon as a named EKU value in a request


author: Nalin Dahyabhai <nalin@redhat.com> 0.6-1
changelog:
  - update to 0.6
    - man pages
    - 'getcert stop-tracking' actually makes the server forget now
    - 'getcert request -e' was redundant, dropped the -e option
    - 'getcert request -i' now sets the request nickname
    - 'getcert start-tracking -i' now sets the request nickname


author: Nalin Dahyabhai <nalin@redhat.com> 0.7-1
changelog:
  - update to 0.7
    - first cut at a getting-started document
    - refactor some internal key handling with NSS
    - check for duplicate request nicknames at add-time


author: Nalin Dahyabhai <nalin@redhat.com> 0.8-1
changelog:
  - update to 0.8
    - encode windows UPN values in requests correctly
    - watch for netlink routing changes and restart stalled submission requests
    - 'getcert resubmit' can force a regeneration of the CSR and submission


author: Nalin Dahyabhai <nalin@redhat.com> 0.9-1
changelog:
  - update to 0.9
    - run external submission helpers correctly
    - fix signing of signing requests generated for keys stored in files
    - only care about new interface and route notifications from netlink,
      and ignore notifications that don't come from pid 0
    - fix logic for determining expiration status
    - correct the version number in self-signed certificates


author: Nalin Dahyabhai <nalin@redhat.com> 0.11-1
changelog:
  - update to 0.11
    - add XML-RPC submission for certmaster and IPA
    - prune entries with duplicate names from the data store


author: Nalin Dahyabhai <nalin@redhat.com> 0.12-1
changelog:
  - update to 0.12
    - add a crucial bit of error reporting when CAs reject our requests
    - count the number of configured CAs correctly


author: Nalin Dahyabhai <nalin@redhat.com> 0.13-1
changelog:
  - update to 0.13
    - change the default so that we default to trying to auto-refresh
      certificates unless told otherwise
    - preemptively enforce limitations on request nicknames so that they
      make valid D-Bus object path components


author: Nalin Dahyabhai <nalin@redhat.com> 0.14-1
changelog:
  - update to 0.14
    - check key and certificate location at add-time to make sure they're
      absolute paths to files or directories, as appropriate
    - IPA: dig into the 'result' item if the named result value we're looking
      for isn't in the result struct


author: Nalin Dahyabhai <nalin@redhat.com> 0.15-1
changelog:
  - update to 0.15
    - notice that a directory with a trailing '/' is the same location as the
      directory without it
    - fix handling of the pid file when we write one (by actually giving it
      contents)


author: Nalin Dahyabhai <nalin@redhat.com> 0.17-1
changelog:
  - update to 0.17
    - fix a hang in the daemon (Rob Crittenden)
    - documentation updates
    - fix parsing of submission results from IPA (Rob Crittenden)


author: Nalin Dahyabhai <nalin@redhat.com> 0.17-2
changelog:
  - make the D-Bus configuration file (noreplace) (#541072)
  - make the %check section and the deps we have just for it conditional on
    the same macro (#541072)


author: Nalin Dahyabhai <nalin@redhat.com> 0.18-1
changelog:
  - update to 0.18
    - add support for using encrypted storage for keys, using PIN values
      supplied directly or read from files whose names are supplied
    - don't choke on NSS database locations that use the "sql:" or "dbm:"
      prefix


author: Nalin Dahyabhai <nalin@redhat.com> 0.19-1
changelog:
  - update to 0.19
    - correctly initialize NSS databases that need to be using a PIN
    - add certmonger.conf, for customizing notification timings and settings,
      and use of digests other than the previously-hard-coded SHA256, and
      drop those settings from individual requests
    - up the default self-sign validity interval from 30 days to 365 days
    - drop the first default notification interval from 30 days to 28 days
      (these two combined to create a fun always-reissuing loop earlier)
    - record the token which contains the key or certificate when we're
      storing them in an NSS database, and report it
    - improve handling of cases where we're supposed to use a PIN but we
      either don't have one or we have the wrong one
    - teach getcert to accept a PIN file's name or a PIN value when adding
      a new entry
    - update the IPA submission helper to use the new 'request_cert' signature
      that's landing soon
    - more tests


author: Nalin Dahyabhai <nalin@redhat.com> 0.20-1
changelog:
  - update to 0.20
    - correctly parse certificate validity periods given in years (spotted by
      Stephen Gallagher)
    - setup for translation
      - es by Héctor Daniel Cabrera!
      - ru by Yulia Poyarkova!
      - uk by Yuri Chornoivan!
    - fix unpreprocessed defaults in certmonger.conf's man page
    - tweak the IPA-specific message that indicates a principal name also needs
      to be specified if we're not using the default subject name (#579542)
    - make the validity period of self-signed certificates into a configuration
      setting and not a piece of the state information we track about the signer
    - init script: exit with status 2 instead of 1 when invoked with an
      unrecognized argument (#584517)


author: Nalin Dahyabhai <nalin@redhat.com> 0.21-1
changelog:
  - update to 0.21
    - getcert/*-getcert: relay the desired CA to the local service, whether
      specified on the command line (in getcert) or as a built-in hard-wired
      default (in *-getcert) (#584983)
    - flesh out the default certmonger.conf so that people can get a feel for
      the expected formatting (Jenny Galipeau)


author: Nalin Dahyabhai <nalin@redhat.com> 0.22-1
changelog:
  - update to 0.22
    - new translations
      - de by Fabian Affolter!
    - certmaster-submit: don't fall over when we can't find a certmaster.conf
      or a minion.conf (i.e., certmaster isn't installed) (#588932)
    - when reading extension values from certificates, prune out duplicate
      principal names, email addresses, and hostnames


author: Nalin Dahyabhai <nalin@redhat.com> 0.23-1
changelog:
  - update to 0.23
    - new translations
      - pl by Piotr Drąg!
    - cancel daemon startup if we can't gain ownership of our well-known
      service name on the DBus (#596719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-1
changelog:
  - update to 0.24
    - keep the lock on the pid file, if we have one, when we fork, and cancel
      daemon startup if we can't gain ownership of the lock (the rest of #596719)
    - make the man pages note which external configuration files we consult when
      submitting requests to certmaster and ipa CAs


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-2
changelog:
  - don't create the daemon pidfile until after we've connected to the D-Bus
    (still more of #596719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-3
changelog:
  - more gracefully handle manual daemon startups and cleaning up of unexpected
    crashes (still more of #596719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-4
changelog:
  - init script: ensure that the subsys lock is created whenever we're called to
    "start" when we're already running (even more of #596719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.25-1
changelog:
  - update to 0.25
    - new translations
      - in by Okta Purnama Rahadian!
    - fix detection of cases where we can't access a private key in an NSS
      database because we don't have the PIN
    - teach '*getcert start-tracking' about the -p and -P options which the
      '*getcert request' commands already understand (#621670), and also
      the -U, -K, -E, and -D flags
    - double-check that the nicknames of keys we get back from
      PK11_ListPrivKeysInSlot() match the desired nickname before accepting
      them as matches, so that our tests won't all blow up on EL5
    - fix dynamic addition and removal of CAs implemented through helpers


author: Nalin Dahyabhai <nalin@redhat.com> 0.26-1
changelog:
  - update to 0.26
    - when canceling a submission request that's being handled by a helper,
      reap the child process's status after killing it (#624120)


author: Nalin Dahyabhai <nalin@redhat.com> 0.28-1
changelog:
  - update to 0.28
    - fix self-signing certificate notBefore and notAfter values on 32-bit
      machines


author: Nalin Dahyabhai <nalin@redhat.com> 0.29-1
changelog:
  - update to 0.29
    - fix 64-bit cleanliness issue using libdbus
    - actually include the full set of tests in tarballs


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-1
changelog:
  - update to 0.30
    - fix errors computing the time at the end of an interval that were
      caught by self-tests


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-2
changelog:
  - try to SIGHUP the messagebus daemon at first install so that it'll
    let us claim our service name if it isn't restarted before we are
    first started (#636876)


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-4
changelog:
  - explicitly require "dbus" to try to ensure we have a running system bus
    when we get started (#639126)


author: Nalin Dahyabhai <nalin@redhat.com> 0.32-1
changelog:
  - oops, rfc5280 says we shouldn't be populating unique identifiers, so
    make it a configuration option and default the behavior to off


author: Nalin Dahyabhai <nalin@redhat.com> 0.32-2
changelog:
  - depend on the e2fsprogs libuuid on Fedora and RHEL releases where it's
    not part of util-linux-ng


author: Nalin Dahyabhai <nalin@redhat.com> 0.33-1
changelog:
  - update to 0.33
    - new translations
      - id by Okta Purnama Rahadian!
    - updated translations
      - pl, uk
    - roll up assorted fixes for defects


author: Nalin Dahyabhai <nalin@redhat.com> 0.34-1
changelog:
  - update to 0.34
    - explicitly note the number of requests we're tracking in the output of
      "getcert list" (#652049)
    - try to offer some suggestions when we get certain specific errors back
      in "getcert" (#652047)
    - updated translations
      - es


author: Nalin Dahyabhai <nalin@redhat.com> 0.35.1-1
changelog:
  - fix a self-test that broke because one-year-from-now is now a day's worth
    of seconds further out than it was a few days ago


author: Nalin Dahyabhai <nalin@redhat.com> 0.36-1
changelog:
  - update to 0.36
    - fix some use-after-free bugs in the daemon (#689776)
    - fix a copy/paste error in certmonger-ipa-submit(8)
    - getcert now suppresses error details when not given its new -v option
      (#683926, more of #681641/#652047)
    - updated translations
      - de, es, pl, ru, uk
      - indonesian translation is now for "id" rather than "in"


author: Nalin Dahyabhai <nalin@redhat.com> 0.37-1
changelog:
  - update to 0.37
    - be more careful about checking if we can read a PIN file successfully
      before we even call an API that might need us to try (#688229)
    - fix strict aliasing warnings


author: Nalin Dahyabhai <nalin@redhat.com> 0.38-1
changelog:
  - update to 0.38
    - catch cases where we can't read a PIN file, but we never have to log
      in to the token to access the private key (more of #688229)


author: Nalin Dahyabhai <nalin@redhat.com> 0.39-1
changelog:
  - update to 0.39
    - fix use of an uninitialized variable in the xmlrpc-based submission
      helpers (#690886)


author: Nalin Dahyabhai <nalin@redhat.com> 0.40-1
changelog:
  - update to 0.40
    - fix validation check on EKU OIDs in getcert (#691351)
    - get session bus mode sorted
    - add a list of recognized EKU values to the getcert-request man page


author: Nalin Dahyabhai <nalin@redhat.com> 0.41-1
changelog:
  - read information about the keys we've just generated before proceeding
    to generating a CSR (part of #694184, part of #695675)
  - when processing a "resubmit" request from getcert, go back to key
    generation if we don't have keys yet, else go back to CSR generation as
    before (#694184, #695675)
  - configure with --with-tmpdir=/var/run/certmonger and own /var/run/certmonger
    (#687899), and add a systemd tmpfiles.d control file for creating
    /var/run/certmonger on Fedora 15 and later
  - let session instances exit when they get disconnected from the bus
  - use a lock file to make sure there's only one session instance messing
    around with the user's files at a time
  - fix errors saving certificates to NSS databases when there's already a
    certificate there with the same nickname (#695672)
  - make key and certificate location output from 'getcert list' more properly
    translatable (#7)


author: Nalin Dahyabhai <nalin@redhat.com> 0.42-1
changelog:
  - getcert: fix a buffer overrun preparing a request for the daemon when
    there are more parameters to encode than space in the array (#696185)
  - updated translations: de, es, id, pl, ru, uk


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - treat the ability to access keys in an NSS database without using a PIN,
    when we've been told we need one, as an error (#692766)
  - when handling "getcert resubmit" requests, if we don't have a key yet,
    make sure we go all the way back to generating one (#694184)
  - getcert: try to clean up tests for NSS and PEM file locations (#699059)
  - don't try to set reconnect-on-exit policy unless we managed to connect
    to the bus (#712500)
  - handle cases where we specify a token but the storage token isn't
    known (#699552)
  - getcert: recognize -i and storage options to narrow down which requests
    the user wants to know about (#698772)
  - output hints when the daemon has startup problems, too (#712075)
  - add flags to specify whether we're bus-activated or not, so that we can
    exit if we have nothing to do after handling a request received over
    the bus if some specified amount of time has passed
  - explicitly disallow non-root access in the D-Bus configuration (#712072)
  - migrate to systemd on releases newer than Fedora 15 or RHEL 6 (#718172)
  - fix a couple of incorrect calls to talloc_asprintf() (#721392)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if xmlrpc-c's struct xmlrpc_curl_xportparms has a gss_delegate field, set
    it to TRUE when we're doing Negotiate auth (#727864, #727863, #727866)


author: Nalin Dahyabhai <nalin@redhat.com> 0.44-1
changelog:
  - check specifically for cases where a specified token that we need to
    use just isn't present for whatever reason (#697058)


author: Nalin Dahyabhai <nalin@redhat.com> 0.46-1
changelog:
  - treat the ability to access keys in an NSS database without using a PIN,
    when we've been told we need one, as an error (#692766, really this time)


author: Nalin Dahyabhai <nalin@redhat.com> 0.47-1
changelog:
  - getcert: distinguish between {stat() succeeds but isn't a directory} and
    {stat() failed} when printing an error message (#739903)
  - getcert resubmit/start-tracking: when we're looking for an existing request
    by ID, and we don't find one, note that specifically (#741262)


author: Nalin Dahyabhai <nalin@redhat.com> 0.49-1
changelog:
  - when using an NSS database, skip loading the module database (#743042)
  - when using an NSS database, skip loading root certs
  - generate SPKAC values when generating CSRs, though we don't do anything
    with SPKAC values yet
  - internally maintain and use challenge passwords, if we have them
  - behave better when certificates have shorter lifetimes
  - add/recognize/handle notification type "none"
  - getcert: error out when "list -c" finds no matching CA (#743488)
  - getcert: error out when "list -i" finds no matching request (#743485)


author: Nalin Dahyabhai <nalin@redhat.com> 0.50-1
changelog:
  - really fix these this time:
   - getcert: error out when "list -c" finds no matching CA (#743488)
   - getcert: error out when "list -i" finds no matching request (#743485)


author: Nalin Dahyabhai <nalin@redhat.com> 0.51-1
changelog:
  - api: lift restrictions on characters used in request and CA nicknames by
    making their object names not incorporate their nicknames
  - api: add find_request_by_nickname and find_ca_by_nickname
  - certmonger-ipa-submit.8: list -k, -K, -t in the summary, document -K
  - getcert: print "invalid option" error messages ourselves (#756291)
  - ipa-submit: supply a Referer: header when submitting requests to IPA
    (#750617, needed for #747710)


author: Nalin Dahyabhai <nalin@redhat.com> 0.52-1
changelog:
  - note that SELinux usually confines us to writing only to cert_t in
    doc/getting-started.txt (#765599)
  - fix crashes when we add a request during our first run when we're
    populating the hard-coded CA list
  - properly deal with cases where a path is passed to us is "./XXX"
  - in session mode, create our data directories as we go


author: Nalin Dahyabhai <nalin@redhat.com> 0.53-1
changelog:
  - large changes to the D-Bus glue, exposing a lot of data which we were
    providing via D-Bus getter methods as properties, and providing more
    accurate introspection data
  - emit a signal when the daemon saves a certificate to the destination
    location, and provide an option to have the daemon spawn an arbitrary
    command at that point, too (#766167)
  - enable starting the service by default on RHEL (#765600)


author: Nalin Dahyabhai <nalin@redhat.com> 0.55-1
changelog:
  - allow root to use our implementation of org.freedesktop.DBus.Properties
  - take more care to not emit useless PropertiesChanged signals


author: Nalin Dahyabhai <nalin@redhat.com> 0.56-1
changelog:
  - when a caller sets the is-default flag on a CA, and another CA is no longer
    the default, emit the PropertiesChanged signal on the CA which is not the
    default, instead on the new default a second time
  - drop some dead code from the D-Bus message handlers (static analysis,
    - cache public keys when we read private keys
  - go back to printing an error indicating that we're missing a required
    argument when we're missing a required argument, not that the option is
    invalid (broken since 0.51, #796542)


author: Nalin Dahyabhai <nalin@redhat.com> 0.57-1
changelog:
  - clarify that the command passed to getcert -C is a "post"-save command
  - add a "pre"-save command option to getcert, specified with the -B flag (#9)
  - after we notify of an impending not-valid-after approaching, don't do it
    again immediately


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a command option (-T) to getcert for specifying which enrollment
    profile to tell a CA that we're using, in case it cares (#10)


author: Nalin Dahyabhai <nalin@redhat.com> 0.58-1
changelog:
  - add a "dogtag-ipa-renew-agent" CA so that we can renew certificates using
    an IPA server's internal Dogtag instance
  - export the requested profile and old certificate to enrollment helpers
  - make libxml and libcurl into hard build-time requirements
  - serialize all pre/save/post sequences to make sure that stop/save/start
    doesn't become stop1/save1/stop2/start1/save2/start2 when we're stopping
    a service while we muck with more than one of its certificates


author: Nalin Dahyabhai <nalin@redhat.com> 0.60-1
changelog:
  - adjust internals of logic for talking to dogtag to at least have a
    concept of non-agent cases
  - when talking to an IPA server's internal Dogtag instance, infer which
    ports the CA is listening on from the "dogtag_version" setting in the
    IPA configuration (Ade Lee)
  - send a notification (or log a message, whatever) when we save a new
    certificate (#766167)


author: Nalin Dahyabhai <nalin@redhat.com> 0.61-1
changelog:
  - fix a regression in reading old request tracking files where the
    request was in state NEED_TO_NOTIFY or NOTIFYING


author: Nalin Dahyabhai <nalin@redhat.com> 0.61-3
changelog:
  - backport change from git to not choke if X509_REQ_to_X509() fails when we're
    self-signing using OpenSSL
  - backport another change from git to represent this as a CA-rejected error


author: Nalin Dahyabhai <nalin@redhat.com> 0.62-1
changelog:
  - add a -u flag to getcert to enable requesting a keyUsage extension value
  - request subjectKeyIdentifier extensions from CAs, and include them in
    self-signed certificates
  - request basicConstraints from CAs, defaulting to requests for end-entity
    certificates
  - when requesting CA certificates, also request authorityKeyIdentifier
  - add support for requesting CRL distribution point and authorityInfoAccess
    extensions that specify OCSP responder locations
  - don't crash when OpenSSL can't build a template certificate from a request
    when we're in FIPS mode
  - put NSS in FIPS mode, when the system booted that way, except when we're
    trying to write certificates to a database
  - fix CSR generation and self-signing in FIPS mode with NSS
  - fix self-signing in FIPS mode with OpenSSL
  - new languages from the translation team: mai, ml, nn, ga


author: Nalin Dahyabhai <nalin@redhat.com> 0.63-1
changelog:
  - serialize access to NSS databases and the running of pre- and post-save
    commands which might also access them (possibly fixing part of #883484)


author: Nalin Dahyabhai <nalin@redhat.com> 0.64-1
changelog:
  - at startup, if we resume the state machine for a given certificate to a state
    which expects to have the newly-added lock already acquired, acquire it
    before moving on with the certificate's work (still aimed at fixing #883484)


author: Nalin Dahyabhai <nalin@redhat.com> 0.66-1
changelog:
  - build as position-independent executables with early binding (#883966)
  - also don't tag the unit file as a configuration file (internal tooling)


author: Nalin Dahyabhai <nalin@redhat.com> 0.67-1
changelog:
  - when saving certificates to NSS databases, try to preserve the trust
    value assigned to a previously-present certificate with the same nickname
    and subject, if one is found
  - when saving certificates to NSS databases, also prune certificates from
    the database which have both the same nickname and subject as the one
    we're adding, to avoid tripping up tools that only fetch one certificate
    by nickname


author: Nalin Dahyabhai <nalin@redhat.com> 0.67-3
changelog:
  - pull up a patch from master to adapt self-tests to certutil's diagnostic
    output having changed (#992050)


author: Nalin Dahyabhai <nalin@redhat.com> 0.68-1
changelog:
  - notice when the OpenSSL RNG isn't seeded
  - notice when saving certificates or keys fails due to filesystem-related
    permission denial (#996581)


author: Nalin Dahyabhai <nalin@redhat.com> 0.69-1
changelog:
  - tweak how we decide whether we're on the master or a minion when we're
    told to use certmaster as a CA
  - clean up one of the tests so that it doesn't have to work around internal
    logging producing duplicate messages
  - when logging errors while setting up to contact xmlrpc servers, explicitly
    note that the error is client-side
  - don't abort() due to incorrect locking when an attempt to save an issued
    certificate to the designated location fails (part of #1032760/#1033333,
    ticket #22)
  - when reading an issued certificate from an enrollment helper, ignore
    noise before or after the certificate itself (more of #1032760/1033333,
    ticket #22)
  - run subprocesses in a cleaned-up environment (more of #1032760/1033333,
    ticket #22)
  - clear the ca-error that we saved when we had an error talking to the CA if we
    subsequently succeed in talking to the CA
  - various other static-analysis fixes


author: Nalin Dahyabhai <nalin@redhat.com> 0.70-1
changelog:
  - add a --with-homedir option to configure, and use it, since subprocesses
    which we run and which use NSS may attempt to write to $HOME/.pki, and
    0.69's strategy of setting that to "/" was rightly hitting SELinux policy
    denials (#1047798)


author: Nalin Dahyabhai <nalin@redhat.com> 0.71-1
changelog:
  - check for cases where we fail to allocate memory while reading a request
    or CA entry from disk (John Haxby)
  - only handle one watch at a time, which should avoid abort() during
    attempts to reconnect to the message bus after losing our connection
    to it (#1055521)


author: Nalin Dahyabhai <nalin@redhat.com> 0.72-1
changelog:
  - update to 0.72
    - support generating DSA parameters and keys on sufficiently-new OpenSSL
      and NSS
    - support generating EC keys when OpenSSL and NSS support it, using key
      size to select the curve to use from among secp256r1, secp384r1,
      secp521r1 (which are the ones that are usually available, though
      secp521r1 isn't always, even if the other two are)
    - stop trying to cache public key parameters at all and instead cache public
      key info properly
    - encode the friendlyName attribute in signing requests as a BMPString,
      not as a PrintableString
    - catch more filesystem permissions problems earlier (more of #996581)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - updates for 0.73
    - set the flag to encode EC public key parameters using named curves
      instead of the default of all-the-details when using OpenSSL
    - don't break when NSS supports secp521r1 but OpenSSL doesn't
    - also pass the CA nickname to enrollment helpers in the environment as
      a text value in "CERTMONGER_CA_NICKNAME", so they can use that value
      when reading configuration settings
    - also pass the SPKAC value to enrollment helpers in the environment as
      a base64 value in "CERTMONGER_SPKAC"
    - also pass the request's SubjectPublicKeyInfo value to enrollment helpers
      in the environment as a base64 value in "CERTMONGER_SPKI" (part of #16)
    - when generating signing requests using NSS, be more accommodating of
      requested subject names that don't parse properly


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - updates to 0.73
    - also pass the key type to enrollment helpers in the environment as
      a the value of "CERTMONGER_KEY_TYPE"


author: Nalin Dahyabhai <nalin@redhat.com> 0.73-1
changelog:
  - updates to 0.73
    - getcert no longer claims to be stuck when a CA is unreachable,
      because the daemon isn't actually stuck


author: Nalin Dahyabhai <nalin@redhat.com> 0.74-1
changelog:
  - also save state when we exit due to SIGHUP
  - don't get tripped up when enrollment helpers hand us certificates which
    include CRLF line terminators (ticket #25)
  - be tolerant of certificate issuer names, subject names, DNS, email, and
    Kerberos principal namem subjectAltNames, and crl distribution point URLs
    that contain newlines
  - read and cache the certificate template extension in certificates
  - enforce different minimum key sizes depending on the type of key we're
    trying to generate
  - store DER versions of subject, issuer and template subject, if we have
    them (Jan Cholasta, ticket #26)
  - when generating signing requests with subject names that don't quite parse
    as subject names, encode what we're given as PrintableString rather than
    as a UTF8String
  - always chdir() to a known location at startup, even if we're not becoming
    a daemon
  - fix a couple of memory leaks (static analysis)
  - add missing buildrequires: on which


author: Nalin Dahyabhai <nalin@redhat.com> 0.74.92-1
changelog:
  - retrieve CA information from CAs, if the helpers can do so, and
    add a command to explicitly refresh that data: "getcert refresh-ca"
  - offer to save CA certificates to files and databases, when specified with
    new -a and -F flags to getcert request/resubmit/start-tracking (#1098208,
    trac #31)
  - add IP address subject alternate names when getcert request/resubmit
    is passed the -A option (trac #35)
  - read and cache the freshestCRL extension in certificates
  - properly interpret KDC-unreachable errors encountered in the IPA
    submission error as a server-unreachable error that we will retry,
    rather than a misconfiguration error which we won't
  - don't let tests get tripped up by new formatting used in dos2unix status
    messages (#1099080)
  - updated translations
  - be explicit that we are going to use bashisms in test scripts by calling
    the shell interpreter as 'bash' rather than 'sh' (trac #27)


author: Nalin Dahyabhai <nalin@redhat.com> 0.74.93-1
changelog:
  - add some self-tests
  - simplify the internal submit-to-CA logic
  - fixes for more problems found through static analysis


author: Nalin Dahyabhai <nalin@redhat.com> 0.74.94-1
changelog:
  - fix self-test errors that we trigger with new OpenSSL
  - fix a build error that would sometimes happen when we're told to
    build PIE binaries
  - quiet a compile warning


author: Nalin Dahyabhai <nalin@redhat.com> 0.74.96-1
changelog:
  - make the trust settings we apply to CA-supplied certificates while
    saving them to NSS databases run-time configurable
  - fix compiling against EL5-era OpenSSL
  - when saving CA certificates we pull from an IPA server, nickname
    it using the realm name with " IPA CA" appended rather than just
    naming it "IPA CA"
  - fix the local signer so that when it issues itself a new certificate,
    it uses the same subject name
  - add a -w flag to getcert's request, resubmit, and start-tracking
    commands, telling it to wait until either the certificate is issued,
    we get to a state where we know that we won't be able to get one, or
    we are waiting for a CA


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-1
changelog:
  - add a -w (wait) flag to the getcert's request/resubmit/start-tracking
    commands, and add a non-waiting status command


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.2-1
changelog:
  - when generating keys using OpenSSL, if key generation fails, try
    again with the default key size, in case we're in FIPS mode
  - documentation updates


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.3-1
changelog:
  - read and cache whether or not we saw a noOCSPcheck extension in certificates
  - documentation updates


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.4-2
changelog:
  - add a %trigger to remove knowledge of the "dogtag-ipa-renew-agent" CA
    when we detect certmonger versions prior to 0.58 being installed, to
    avoid cases where some older versions choke on CAs with nicknames that
    contain characters that can't legally be part of a D-Bus name (#948993)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.6-1
changelog:
  - avoid potential use-after-free and read overrun after a CA is added
    dynamically (thanks to Jan Cholasta)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.7-1
changelog:
  - fix an inconsistency in how we parse cookie values returned by CA helpers,
    in that single-line values would lose the end-of-line after a daemon
    restart, but not before
  - handle timeout values and exit status values when calling CA helpers
    in non-SUBMIT, non-POLL modes (#1118468)
  - rework how we save CA certificates so that we save CA certificates associated
    with end-entity certificates when we save that end-entity certificate, which
    requires running all of the involved pre- and post-save commands
  - drop package Requires: on systemd-sysv (#1104138)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.7-2
changelog:
  - reintroduce package Requires: on systemd-sysv on F19 and EL6 and older,
    conditionalized it so that it's ignored on newer releases, and make
    whether or not we call systemd-sysv-convert in triggers depend on that,
    too (#1104138)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.8-1
changelog:
  - add a 'refresh' option to the getcert command
  - add a '-a' flag to the getcert command's 'refresh-ca' option


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.9-1
changelog:
  - avoid potential use-after-free after a CA is removed dynamically (thanks to
    Keenan Brock) (#1125342)
  - add a "external-helper" property to CA objects


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.10-1
changelog:
  - when attempting to contact an IPA LDAP server, if no "ldap_uri" is set in
    default.conf, and no "host" is set either, try to construct the server URI
    using the "server" setting (#1126985)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.11-1
changelog:
  - when getcert is passed a -a flag, to indicate that CA root certificates
    should be stored in the specified database, don't ignore locations which
    don't include a storage scheme (#1129537)
  - when called to 'start-tracking' with the -a or -F flags, if we have
    applicable certificates on-hand for a CA that we're either told to use
    or which we decide is the correct one, save the certificates (#1129696)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.12-1
changelog:
  - correct encoding/decoding of variant-typed data which we receive and send
    as part of the org.freedesktop.DBus.Properties interface over the bus, and
    add some tests for them (based on patch from David Kupka, ticket #36)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.14-1
changelog:
  - make pathname canonicalization slightly smarter, to handle ".." in
    locations (#1131758)
  - updates to self-tests (#1144082)


author: Nalin Dahyabhai <nalin@redhat.com> 0.76-1
changelog:
  - require a single certificate to be specified to 'getcert status' (#1148001,
    - shorten the default help message which getcert prints when it's not given
    a specific command (#1131704)
  - add private listener (-l, -L, -P) mode to certmonger, to allow it to listen
    for connections directly from clients running under the same UID
  - add a command mode (-c) to certmonger, in which once it's started, it
    launches a specified command, and after that command exits, the daemon exits
  - when getcert is invoked with no bus running, if it's running as root, run
    certmonger in private listener mode with the same invocation of getcert as
    the command to start and wait for (#1134497)


author: Nalin Dahyabhai <nalin@redhat.com> 0.76.2-1
changelog:
  - ipa-submit: when we fail to locate/contact LDAP or XML-RPC servers,
    use discovery to find them (#1136900)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - rework the state machine so that we save an issued certificate's associated
    CA certificates, then re-read the certificate, then run the post hook and
    issue notifications, in that order, instead of saving CA certificates after
    running the post hook, which was always a surprising order (#1131700)
  - add a generic dogtag-submit helper that doesn't include any IPA defaults,
    to make it easier to know the difference between paramenters it requires
    and parameters which are optional (#12)


author: Nalin Dahyabhai <nalin@redhat.com> 0.76.3-1
changelog:
  - fixes for bugs found by static analysis
  - handle IDN correctly when doing service location using SRV records
  - documentation updates


author: Nalin Dahyabhai <nalin@redhat.com> 0.76.5-1
changelog:
  - avoid premature exit on CA data analysis failures (should fix an issue
    reported by Natxo Asenjo)


author: Nalin Dahyabhai <nalin@redhat.com> 0.76.7-1
changelog:
  - correctly read CA not-valid-after dates on 32-bit machines (also reported by
    Natxo Asenjo), so that we don't spin on polling them (#1163023)


author: Nalin Dahyabhai <nalin@redhat.com> 0.76.8-1
changelog:
  - dogtag-submit: accept additional options to pass to the server when
    approving requests using agent creds (#1165155, patch by Jan Cholasta)
  - getcert: print help output when 'status' isn't given any args (#1163541)


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.1-1
changelog:
  - update to 0.77
    - add initial, still rough, SCEP support (#1140241,#1161768)
      - add an scep-submit helper to handle part of it
    - getcert: add add-ca/add-scep-ca/modify-ca/remove-ca commands
    - getcert: add -l, -L flags to request/resubmit/start-tracking commands
      to provide a way to set a ChallengePassword in signing requests
    - lay some groundwork for rekeying support
    - bundled dogtag enrollment helpers now output debugging info to stderr (#)
    - ipa-getcert: fix a crash when using DNS discovery to locate servers (#39)
    - getcert: fix displaying of pre-request pre-/post-save commands (#1178190,
        - use Zanata for translations
    - getcert list: list the certificate's profile name, if it contains one


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.2-1
changelog:
  - expose the certificate's not-valid-before and not-valid-after dates as a
    property over D-Bus (ticket #41)
  - give the local signer its own configuration option to set the lifetime
    of its signing certificate, falling back to the lifetime configured for
    the self-signer as a default to match the previous behavior
  - fix a potential read segfault parsing the output of an enrollment helper,
    introduced in 0.77 (thanks to Steve Neuharth)
  - read the ns-certtype extension value in certificates
  - request an enrollment certtype extension to CSRs if we have a profile name
    that we want to use (ticket #17, possibly part of IPA ticket #57)


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.3-1
changelog:
  - fix a data loss bug when saving renewed certificates to NSS databases - the
    private key could be removed in error since 0.77
  - fixes for bugs found by static analysis
  - fix self-tests when built with OpenSSL 1.0.2


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.4-1
changelog:
  - don't display PINs in "getcert list" output (#42)
  - clean up launching of a private instance in "getcert"
  - expand on the don't-delete-private-key fix from 0.77.3 by letting NSS's
    own safety checks have an effect
  - backport record-keeping of key generation dates and counts of how many
    times we've gotten certificates using a given key pair


author: Nalin Dahyabhai <nalin@redhat.com> 0.77.5-1
changelog:
  - pass $CERTMONGER_REQ_IP_ADDRESS to enrollment helpers if the signing request
    includes IP address subjectAltName values
  - correctly verify signatures on SCEP server replies when the signer is neither
    the top-level CA nor the RA (feedback in #1161768)
  - correctly verify signatures on SCEP server replies when there is more than
    one certificate in the chain between the RA and the top-level CA (feedback in


author: Nalin Dahyabhai <nalin@redhat.com> 0.78-1
changelog:
  - switch to using popt for parsing command line arguments, continuing to
    use old help text for now so that we can catch up with translations (print
    old text for --help, new text (with longopts!) for -H)
  - add some plumbing for eventually receiving per-certificate roots in
    addition to issued certificates and chain certificates
  - add a "rekey" command to getcert, for triggering enrollment using a new
    key pair (#1087932)
  - scep-submit: check for the Renewal capability, and default to taking
    advantage of it during rekeying, unless the new -n flag is specified to it
  - dogtag-submit: add flags for passing user names, UDNs, passwords, and PINs
    to the helper (part of ticket #12)
  - dogtag-submit: add a flag for using the agent creds to do TLS client auth
    while submitting enrollment requests (more of ticket #12)
  - dogtag-submit: handle cases where we submit a request and the server
    returns a success code rather than just queuing the request (#12 again)
  - ipa-submit: pass requested profile names to the server as an argument
    named "profile_id"; if the server gives us an "unrecognized argument"
    error, retry without it for compatibility's sake (part of IPA ticket #57)
  - keygen: fix a possible crash if keygen fails to return a key from NSS
  - correct the certmonger(8) man page's description of the -c flag, which it
    used to call the -C flag
  - add logic for setting ownership and permissions on certificates and keys
    when saving them to disk
  - add configuration options "max_key_lifetime" and "max_key_use_count" for
    making automatic renewal prefer rekeying


author: Nalin Dahyabhai <nalin@redhat.com> 0.78.1-1
changelog:
  - self-tests: assume that certutil won't generate DSA keys with more than 1024
    bits, and will often short us by a few


author: Nalin Dahyabhai <nalin@redhat.com> 0.78.2-1
changelog:
  - tweak initialization so that we set up for providing our D-Bus API before we
    register our name with the bus, so that we can handle any requests that
    arrive before the acknowledgement of that registration
  - on systems that run systemd, add the right data file so that the service gets
    started when someone tries to talk to the daemon (ticket #38)
  - correctly check for error responses when sending GetCAChain requests to SCEP
    servers


author: Nalin Dahyabhai <nalin@redhat.com> 0.78.3-1
changelog:
  - call poptGetOptArg() correctly, to fix parsing of the -R flag to scep-submit
    and the -O and -o flags to dogtag-submit (#1244914)


author: Nalin Dahyabhai <nalin@redhat.com> 0.78.4-1
changelog:
  - fix the "getcert start-tracking" -L and -l options (#1249753)
  - output diagnostics about the second request when scep-submit encounters an
    error during a second request to the SCEP server


author: Nalin Dahyabhai <nalin@redhat.com> 0.78.5-1
changelog:
  - fix a possible uninitialized memory read (possibly #1260871)
  - log a diagnostic error when we fail to initialize libkrb5


author: Nalin Dahyabhai <nalin@redhat.com> 0.78.6-1
changelog:
  - document the -R, -N, -o, and -t flags for dogtag-ipa-renew-agent-submit
  - stop checking that we can generate 512 bit keys during self-tests


author: Nalin Dahyabhai <nalin@redhat.com> 0.78.6-3
changelog:
  - instead of using killall to send a SIGHUP to the system bus daemon in %post
    to get it to reload its configuration, use dbus-send to send a ReloadConfig
    request over the bus (should fix #1277573)


author: Nalin Dahyabhai <nalin@redhat.com> 0.78.6-4
changelog:
  - add backported fix to wait a reasonable amount of time after calling the
    'resubmit' method for a new certificate to be issued when we're exercising
    the D-Bus API during tests (Jan Cholasta, #1351052)


author: Nalin Dahyabhai <nalin@redhat.com> 0.79-1
changelog:
  - update to 0.79:
    - getcert now offers an option (-X) for requesting processing by a particular
      CA if the server we're contacting is running more than one
    - getcert also offers options (--for-ca, --not-for-ca, --ca-path-length) for
      requesting BasicConstraints values
    - getcert now displays times in local time instead of UTC, which was
      previously the only way they were displayed; the --utc option can often be
      used to switch back to its previous behavior
    - the SCEP enrollment helper now correctly issues GetCACertChain requests to
      SCEP servers, instead of issuing a GetCAChain request, which isn't part of
      the protocol; from report by Jason Garland
    - when issuing SCEP requests, the ID of the CA included in the HTTP request
      is now URL-encoded, as it should be
    - renewal or notification-of-impending-expiration logic is now triggered
      closer to TTL thresholds rather than waiting for a periodic check to pass a
      threshold
    - properly builds with OpenSSL 1.1, thanks to Lukas Slebodnik and Tomas Mraz
      for a lot of the legwork
  - resync .spec file with Fedora
  - upstream project migrated from fedorahosted.org to pagure.io


author: Rob Crittenden <rcritten@redhat.com> 0.79.4-1
changelog:
  - update to 0.79.4
    - fix CA option name for ipa cert-request
    - fix minor memory leak
    - fix build warnings
    - fix an incorrect date in the .spec changelog
    - bump gettext version to avoid warning


author: Rob Crittenden <rcritten@redhat.com> 0.79.4-2
changelog:
  - Reformat certificates returned by Dogtag. Dogtag was including
    a spurious newline before -----END CERTIFICATE-----


author: Rob Crittenden <rcritten@redhat.com> 0.79.5-1
changelog:
  - update to 0.79.5:
     - getcert start-tracking: use issuer option when specified
     - add support for specifying the MS certificate template
     - Reformat certificates returned by Dogtag to strip extra newline


author: Petr Pisar <ppisar@redhat.com> - 0.93-1
changelog:
  - 0.93 bump
  - Consolidate dependencies
  - Remove unversioned Requires
  - Update Summary and Description
  - Remove unneded file permission fixes


author: Caolán McNamara <caolanm@redhat.com> 3.2.99.1-2
changelog:
  - Related: rhbz#639945 pull in review changes
    + redland build-fix
    + replace awk script
    + validate .destop files


author: Caolán McNamara <caolanm@redhat.com> 3.2.99.2-1
changelog:
  - next LibreOffice milestone
  - drop integrated openoffice.org-2.3.0.ooo76649.httpencoding.patch
  - drop integrated workspace.dtardon03.patch
  - drop integrated openoffice.org-3.1.0.ooo61927.sw.ww6.unicodefontencoding.patch
  - drop integrated workspace.impress195.patch
  - drop integrated workspace.srb1.patch
  - drop integrated openoffice.org-3.2.0.ooo106502.svx.fixspelltimer.patch
  - drop integrated openoffice.org-3.3.0.ooo108246.svx.hide-sql-group-when-inactive.patch
  - drop integrated openoffice.org-3.2.0.ooo95369.sw.sortedobjs.patch
  - drop integrated openoffice.org-3.2.0.ooo110142.svx.safercolornames.patch
  - drop integrated openoffice.org-3.3.0.ooo111758.sd.xerror.patch
  - drop integrated openoffice.org-3.2.0.ooo111741.extras.malformed-xml-file.patch
  - drop integrated openoffice.org-3.3.0.ooo112059.sw.avoid-null-ptr-deref.patch
  - drop integrated openoffice.org-3.3.0.ooo100686.wizards.types.not.mediatypes.patch
  - drop integrated workspace.vcl113.patch
  - drop integrated openoffice.org-3.3.0.ooo112384.sw.export.doc.styledoesntexist.patch
  - drop integrated workspace.cmcfixes77.patch
  - drop integrated workspace.vcl114.patch
  - drop integrated openoffice.org-3.3.0.ooo106591.sal.tradcopy.patch
  - drop integrated workspace.vcl115.patch
  - drop integrated workspace.cmcfixes78.patch
  - drop integrated openoffice.org-3.3.0.ooo114012.sd.bada11ychain.patch
  - drop integrated workspace.cmcfixes79.patch
  - drop integrated openoffice.org-3.3.0.ooo114703.vcl.betterlocalize.font.patch
  - drop integrated openoffice.org-3.3.0.rh638185.editeng.cjkctlhtmlsizes.patch
  - drop integrated openoffice.org-3.3.0.rh637738.libgcrypt.addmutex.patch
  - drop integrated openoffice.org-3.2.0.rh632236.writerfilter.cleanup-cell-props.patch
  - drop workspace.gtk3.patch


author: Caolán McNamara <caolanm@redhat.com 3.2.99.3-1
changelog:
  - next Libreoffice milestone
  - drop integrated openoffice.org-2.0.1.rhXXXXXX.extensions.defaulttoevo2.patch
  - drop integrated openoffice.org-2.2.1.ooo7065.sw.titlepagedialog.patch
  - drop integrated openoffice.org-3.2.0.ooo108846.sfx2.qstartfixes.patch
  - drop integrated openoffice.org-3.3.0.ooo107490.cppu.lifecycle.patch
  - drop integrated libreoffice-buildfix.patch
  - drop integrated libreoffice-xdg632229.gnomeshell.patch
  - drop integrated 0001-strcpy-cannot-be-used-with-overlapping-src-and-dest.patch
  - drop integrated 0001-abort-doesn-t-gain-us-anything-here.patch
  - drop integrated 0001-latest-libX11-changed-header-guards.patch


author: Caolán McNamara <caolanm@redhat.com> 3.2.99.3-2
changelog:
  - Resolves: rhbz#610103 exit quickstarter when libs deleted
  - Resolves: rhbz#652695 release desktop in timeout
  - Resolves: rhbz#657541 don't crash during processing of auto. styles
    when joining paragraphs (dtardon)


author: Caolán McNamara <caolanm@redhat.com> 3.3.0.1-1
changelog:
  - release candidate 1
  - drop integrated qstart.dont-forceenabled-on-post-reg-restart.patch
  - drop integrated exit.quickstarter.when.deleted.patch
  - drop integrated 0001-destroydesktop.in.timeout.patch
  - drop integrated openoffice.org-3.3.0.rhbz657541.join-paragraphs.patch


author: Caolán McNamara <caolanm@redhat.com> 3.3.0.2-2
changelog:
  - Resolves: rhbz#663724 fdo32572-sc-dont-double-paste.patch
  - Resolves: rhbz#660342 Undo/Redo crash with postits


author: Caolán McNamara <caolanm@redhat.com> 3.3.0.3-1
changelog:
  - latest version
  - drop integrated 0001-Resoves-rhbz-663857-font-color-missing-C-FAQ-10.3-do.patch
  - drop integrated 0001-Avoid-double-paste-when-pasting-text-into-cell-comme.patch
  - drop integrated 0001-Resolves-rhbz-660342-Undo-Redo-crash-with-postits.patch
  - drop integrated 0001-Resolves-rhbz-666088-clean-up-search-cache-singleton.patch


author: Caolán McNamara <caolanm@redhat.com> 3.3.0.4-4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
  - Related: rhbz#610103 make this even more robust
  - Related: rhbz#672872 cancel gtk file dialog on terminate
  - Resolves: fdo#33509/ooo#62414 fix CTL spelling popup
  - Resolves: rhbz#673819 crash on changing position of header/footer object
  - Resolves: rhbz#670020 crash in slidesorting
  - Resolves: rhbz#676539 handle missing pWindows from xWindows
  - Resolves: rhbz#649310 don't crash deregistering diff. platform ext.
    (dtardon)
  - Resolves: rhbz#666440 don't pushback and process a corrupt extension


author: Caolán McNamara <caolanm@redhat.com> 3.3.1.1-1
changelog:
  - 3.3.1 rc1
  - drop integrated 0001-don-t-pushback-and-process-a-corrupt-extension.patch
  - drop integrated libreoffice-fdo32561.comphelper.patch
  - drop integrated 0001-Related-rhbz-610103-more-woes-on-rpm-upgrade-vs-rpm-.patch
  - drop integrated 0001-Resolves-rhbz-673819-crash-on-changing-position-of-d.patch
  - drop integrated 0001-rhbz-666440-don-t-pushback-and-process-a-corrupt-extension.patch


author: Caolán McNamara <caolanm@redhat.com> 3.3.1.2-3
changelog:
  - Resolves: rhbz#681159 crash in writer
  - Resolves: rhbz#672818 crash in writer
  - Resolves: fdo#33701 ensure node outlives path
  - Resolves: rhbz#681738 crash on writing config post-main


author: Caolán McNamara <caolanm@redhat.com> 3.3.1.2-8
changelog:
  - Related: rhbz#684477 make sure this is thread safe
  - Resolves: rhbz#684620 crash with NULL pTableBox


author: Caolán McNamara <caolanm@redhat.com> 3.3.2.2-1
changelog:
  - latest version
  - drop integrated 0001-Resolves-fdo-33701-ensure-node-outlives-path.patch
  - drop integrated 0001-valgrind-don-t-leave-an-evil-thread-running-after-ma.patch


author: Caolán McNamara <caolanm@redhat.com> 3.3.99.1-1
changelog:
  - 3.4 beta1
  - drop openoffice.org-1.9.123.ooo53397.prelinkoptimize.desktop.patch
    in favour of ooosplash
  - drop openoffice.org-2.2.0.gccXXXXX.solenv.javaregistration.patch
    because components are passively registered now
  - drop integrated openoffice.org-3.1.0.ooo102061.sc.cellanchoring.patch
  - drop integrated turn-script-providers-into-extensions.patch
  - drop integrated 0001-tidy-this-up-and-don-t-bail-out-on-mislength-records.patch
  - drop integrated 0001-free-ctxt-after-taking-lastError-details.patch
  - drop integrated 0001-Removed-suspect-hack.-Cursor-on-post-it-now-scrolls-.patch
  - drop integrated libreoffice-gcc4.6.0.patch
  - drop integrated 0001-fexceptions-fexceptions.patch
  - drop integrated 0001-Related-rhbz-672872-cancel-gtk-file-dialog-on-deskto.patch
  - drop vbahelper.visibility.patch
  - drop integrated 0001-Resolves-fdo-33509-i62414-out-by-one-breaks-CTL-spel.patch
  - drop integrated 0001-Resolves-rhbz-670020-crash-in-slidesorting.patch
  - drop integrated 0001-Resolves-rhbz-676539-handle-missing-pWindows-from-xW.patch
  - drop integrated 0001-Resolves-fdo-33750-i94623-use-optimal-border-width-w.patch
  - drop integrated 0001-rhbz-649310-don-t-crash-deregistering-diff.-platform.patch
  - drop integrated 0001-Resolves-rhbz-674330-dereference-of-NULL-mpBase.patch
  - drop integrated 0001-rhbz-678284-Get-correct-current-position-when-shift-page-up-and-.patch
  - drop integrated 0001-Resolves-rhbz-681159-bandaid-for-crash.patch
  - drop integrated 0001-Resolves-rhbz-672818-bandaid-for-crash-in-SwTxtNode-.patch
  - drop integrated 0001-install-high-resolution-icons.patch
  - drop integrated 0001-Resolves-rhbz-682716-pa-IN-isn-t-handled-by-fontconf.patch
  - drop integrated 0001-Related-rhbz-684477-make-sure-this-is-thread-safe.patch
  - drop integrated 0001-Resolves-rhbz-682621-better-resizing-of-overtall-gly.patch
  - drop integrated 0001-Resolves-rhbz-684620-crash-with-NULL-pTableBox.patch
  - drop integrated libreoffice-fdo33947.sd.print.crash.patch
  - drop integrated 0001-add-cairo_ft_font_face_create_for_pattern-wrapper.patch
  - drop integrated 0001-Related-rhbz-680460-reorganize-this-to-make-it-inher.patch
  - drop integrated 0001-Related-rhbz-680460-don-t-bother-with-an-interim-Fon.patch
  - drop integrated 0001-Resolves-rhbz-680460-honour-lcdfilter-subpixeling-et.patch
  - drop integrated 0001-Cut-Gordian-Knot-of-who-owns-the-font-options.patch
  - drop integrated 0001-beware-of-invalidated-iterator.patch
  - drop integrated rhbz680766.fix-mdds-crash.patch
  - drop integrated 0001-Resolves-rhbz-684580-X-and-strike-through-escapes-ra.patch
  - drop integrated 0001-set-mime-types-on-flat-xml-filters.patch
  - drop integrated 0001-add-flat-xml-types-to-.desktop-files-etc.patch
  - drop integrated libreoffice-fdo31271.icu.patch


author: Caolán McNamara <caolanm@redhat.com> 3.3.99.1-2
changelog:
  - Resolves: rhbz#695509 crash in RefreshDocumentLB
  - bubble down configure test findings on visibility


author: David Tardon <dtardon@redhat.com> 3.3.99.4-1
changelog:
  - 3.4 beta4
  - drop integrated 0001-Removed-duplicate-code-block-mis-merge-prolly.patch
  - drop integrated 7de0b88ce2dd932915894385b54be1897d5ee053.zip


author: Caolán McNamara <caolanm@redhat.com> - 3.4.0.2-4
changelog:
  - Resolves: rhbz#710556 't crash on missing graphics .pptx export
  - Resolves: rhbz#652604 better survive exceptions in autorecovery


author: Caolán McNamara <caolanm@redhat.com> - 3.4.0.2-5
changelog:
  - Resolves: rhbz#699909 crash in export of .doc in lcl_getField
  - Resolves: fdo#37584 Make a real copy of the text
  - Resolves: rhbz#709503/fdo#37668 bitwise operations on signed values


author: David Tardon <dtardon@redhat.com> - 3.4.1.1-1
changelog:
  - 3.4.1 RC1
  - drop integrated 0001-Resolves-rhbz-707317-avoid-crash-in-getRowSpan.patch
  - drop integrated 0001-Resolves-rhbz-710004-band-aid-for-immediate-crash-in.patch
  - drop integrated 0001-Resolves-rhbz-710556-don-t-crash-on-missing-graphics.patch
  - drop integrated 0001-Resolves-rhbz-699909-crash-in-export-of-.doc-in-lcl_.patch
  - drop integrated 0001-fdo-37584-Make-a-real-copy-of-the-text-where-to-coun.patch
  - drop integrated 0001-Resolves-fdo-37668-bitwise-operations-on-signed-numb.patch


author: Caolán McNamara <caolanm@redhat.com> - 3.4.1.1-4
changelog:
  - Related: rhbz#711087 band aid for crash in sc undo
  - Resolves: rhbz#714338 add a metapackage to install standard bits


author: David Tardon <dtardon@redhat.com> - 3.4.1.1-5
changelog:
  - Resolves: rhbz#714781 add Persian langpack
  - Resolves: rhbz#667082 do not crash importing section containing just
    an empty paragraph


author: David Tardon <dtardon@redhat.com> - 3.4.2.1-1
changelog:
  - 3.4.2 rc1
  - drop 0001-bad-merge-fix-to-enable-extensions-to-build-again.patch
  - drop 0001-fix-regression-in-SvGlobalName-operator.patch


author: Caolán McNamara <caolanm@redhat.com> - 3.4.2.1-2
changelog:
  - Rebuild (poppler-0.17.0), add libreoffice-poppler-0.17.0.patch
    seeing as the API changed for some reason or other


author: Caolán McNamara <caolanm@redhat.com> - 3.4.3.2-2
changelog:
  - Resolves: rhbz#733564 graphite2 now packaged into fedora
  - Related: fdo#37195 migrationoo3 not registered


author: Caolán McNamara <caolanm@redhat.com> - 3.4.3.2-11
changelog:
  - Resolves: rhbz#738133 fix bn discard string
  - Resolves: fdo#35513 avoid crash while processing incorrect print range


author: Caolán McNamara <caolanm@redhat.com> - 3.4.4.2-3
changelog:
  - Related: fdo#42534 0001-Related-i58612-don-t-crash-anyway.patch
  - Resolves: fdo#42749 KDE oxygen theme and scrollbars


author: Caolán McNamara <caolanm@redhat.com> - 3.4.4.2-6
changelog:
  - Resolves: rhbz#761009 IFSD_Equal is asymmetrical
  - Resolves: rhbz#767708 write to mmap'ed file w/o disk space: SIGBUS


author: David Tardon <dtardon@redhat.com> - 3.4.99.1-1
changelog:
  - 3.5.0 beta1
  - drop integrated 0001-Related-fdo-37195-migrationoo3-not-registered.patch
  - drop integrated 0001-Related-i58612-don-t-crash-anyway.patch
  - drop integrated 0001-Related-rhbz-652604-better-survive-exceptions-thrown.patch
  - drop integrated 0001-Related-rhbz-702833-addEventListener-without-removeE.patch
  - drop integrated 0001-Related-rhbz-711087-band-aid.patch
  - drop integrated 0001-Related-rhbz-718976-crash-in-SwTxtSizeInfo-GetMultiC.patch
  - drop integrated 0001-Related-rhbz-730225-avoid-segv-in-ld-this-was-set-to.patch
  - drop integrated 0001-Related-rhbz-753201-fedora-ant-java-1.5.0-gcj-won-t-.patch
  - drop integrated 0001-Resolves-fdo-32665-handle-that-FreeSerif-lacks-some-.patch
  - drop integrated 0001-Resolves-rhbz-693265-fix-crash-from-unhandled-except.patch
  - drop integrated 0001-Resolves-rhbz-695509-crash-in-RefreshDocumentLB.patch
  - drop integrated 0001-Resolves-rhbz-713154-pdf-export-dialog-too-tall-to-f.patch
  - drop integrated 0001-Resolves-rhbz-715549-use-fontconfig-s-detected-forma.patch
  - drop integrated 0001-Resolves-rhbz-738255-avoid-crash-on-NULL-pointer.patch
  - drop integrated 0001-Resolves-rhbz-751290-KDE-black-on-dark-tooltips.patch
  - drop integrated 0001-add-Oracle-Java-1.7.0-recognition.patch
  - drop integrated 0001-avoid-using-com.sun.org-apis.patch
  - drop integrated 0001-bubble-down-configure-test-findings-on-visibility.patch
  - drop integrated 0001-fix-horizontal-scrollbars-with-KDE-oxygen-style-bnc-.patch
  - drop integrated 0001-gtk3-fix-cairo-canvas-crash-for-non-X-or-svp-backend.patch
  - drop integrated 0001-helgrind-Related-rhbz-655686-get-order-of-shutdown-c.patch
  - drop integrated 0001-rhbz-667082-do-not-crash-importing-section-containin.patch
  - drop integrated 0001-rhbz-702635-set-correct-page-number-when-exporting-s.patch
  - drop integrated Backport-reading-AES-encrypted-ODF-1.2-documents.patch
  - drop integrated gdb-pretty-printers.patch
  - drop integrated kde4configure.patch
  - drop integrated libreoffice-ppc64.patch
  - drop integrated openoffice.org-3.3.0.ooo108637.sfx2.uisavedir.patch
  - drop integrated openoffice.org-3.3.0.ooo113273.desktop.resolvelinks.patch
  - drop integrated vbahelper.visibility.patch
  - drop libreoffice-testtools subpackage, because testtool has been
    removed by upstream


author: David Tardon <dtardon@redhat.com> - 3.4.99.2-1
changelog:
  - 3.5.0 beta2
  - drop integrated 0001-Resolves-rhbz-761009-IFSD_Equal-is-asymmetrical.patch
  - drop integrated 0001-Resolves-rhbz-767708-avoid-SIGBUS-writing-to-overcom.patch
  - drop integrated 0001-force-gbuild-stage-for-CustomTargets.patch
  - drop integrated 0001-these-translations-do-already-exist-in-translations-.patch
  - drop integrated 0001-Fix-typo-and-clean-up.patch
  - use system mysql-connector-c++


author: David Tardon <dtardon@redhat.com> - 3.4.99.3-1
changelog:
  - 3.5.0 beta3
  - drop integrated 0001-fix-syntactic-error.patch
  - drop integrated 0001-gcc-trunk-fix-error-unable-to-find-string-literal-op.patch
  - drop integrated 0001-gcc-trunk-avoid-confusion.patch
  - drop integrated 0001-workaround-for-LO-namespace-pollution-breaking-KDE4-.patch
  - drop integrated 0001-smath-does-not-handle-accents-in-MathML.patch
  - Resolves: rhbz#533318 smath does not handle accents in MathML
  - Resolves: rhbz#771108 English menu in writer despite installation of
    libreoffice-langpack-de


author: David Tardon <dtardon@redhat.com> - 3.5.0.1-1
changelog:
  - 3.5.0 rc1
  - drop integrated 0001-workaround-internal-compiler-error-with-gcc-4.7.patch
  - drop integrated 0001-fix-for-gcc-4.7-C-11-these-are-not-string-literal-op.patch
  - drop integrated 0001-fix-for-gcc-4.7-C-11-this-is-not-string-literal-oper.patch
  - drop integrated 0001-Revert-fast_merge-fix-mis-merge-of-first-module-s-st.patch
  - drop integrated 0001-fix-writing-of-strings-from-the-first-module.patch
  - drop integrated 0001-refactor-slightly-to-avoid-link-problems-with-gcc-4..patch


author: David Tardon <dtardon@redhat.com> - 3.5.0.3-1
changelog:
  - 3.5.0 rc3
  - Resolves: rhbz#786328 add nlpsolver subpackage
  - split legacy binary filters into subpackage


author: Stephan Bergmann <sbergman@redhat.com> - 3.5.0.3-2
changelog:
  - junit4 -> junit
  - Resolves: rhbz#788042 skip splashscreen with quickstarter
  - with split binfilter we need fix for fdo#43644


author: Caolán McNamara <caolanm@redhat.com> - 3.5.0.3-4
changelog:
  - ensure gdb .py files have the same timstamps so that multilib
    .pyc's and .pyo's have the same content (timestamp in binary cache)


author: David Tardon <dtardon@redhat.com> - 3.5.1.1-1
changelog:
  - 3.5.1 rc1
  - drop 0001-Resolves-fdo-43644-survive-registered-but-unavailabl.patch
  - drop 0001-Resolves-rhbz-789622-Adapt-SDK-to-changed-paths-in-L.patch
  - drop 0001-Fix-fdo-45177-avoid-linked-undo-for-the-while.patch
  - drop 0001-Fix-some-apparent-misuses-of-RTL_CONSTASCII_USTRINGP.patch
  - drop binfilter-Fix-some-apparent-misuses-of-RTL_CONSTASCII_USTRINGP.patch
  - Resolves: fdo#45177 avoid linked undo crash
  - Fix some apparent misuses of RTL_CONSTASCII_USTRINGPARAM (cherry-picked from
    upstream libreoffice-3-5 branch)


author: Caolán McNamara <caolanm@redhat.com> - 3.5.1.1-2
changelog:
  - Resolves: rhbz#788045 swriter --help doesn't show help
  - Resolves: rhbz#798667 missing .desktop icons


author: Caolán McNamara <caolanm@redhat.com> - 3.5.1.1-3
changelog:
  - Resolves: rhbz#799628 crash with chewing IM with g3g
  - Resolves: rhbz#799525 put flat odf mimetypes into xsltfilter.desktop
  - Resolves: rhbz#800272 complain about unknown commandline options


author: David Tardon <dtardon@redhat.com> - 3.5.3.1-1
changelog:
  - 3.5.3 rc1
  - drop integrated 0001-Introduced-SystemShellExecuteFlags-URIS_ONLY.patch
  - drop integrated 0001-Simplify-code-and-use-proper-register-names-for-linu.patch
  - drop integrated 0001-resolved-rhbz-813280-the-current-document-is-not-alw.patch


author: Caolán McNamara <caolanm@redhat.com> - 3.5.3.2-3
changelog:
  - Resolves: rhbz#805743 a11y crash in impress/draw
  - Resolves: rhbz#813202 opengl slide transitions still a bit
    problematic in Fedora 17


author: David Tardon <dtardon@redhat.com> - 3.5.3.2-4
changelog:
  - Resolves: rhbz#820439 KDE export dialog broken for most formats
  - Resolves: fdo#49365 Libreoffice fails to start on second screen with
    gtk vcl plugin
  - Resolves: rhbz#809019 Impress thinks a machine with 2 monitors in
    clone mode is multihead


author: David Tardon <dtardon@redhat.com> - 3.5.4.1-1
changelog:
  - 3.5.4 rc1
  - drop integrated 0001-do-not-prepend-n-twice-it-confuses-KFileDialog-rhbz-.patch
  - drop integrated 0001-incrementing-index-twice-in-one-run-seems-wrong.patch
  - drop integrated 0001-fdo-49365-correctly-map-monitor-index-back-to-screen.patch
  - drop integrated 0001-rhbz-809019-count-mirrored-monitors-as-one.patch


author: David Tardon <dtardon@redhat.com> - 3.5.5.1-1
changelog:
  - 3.5.5 rc1
  - drop integrated 0001-make-hsqldb-build-with-java-1.7.patch
  - drop integrated 0001-Related-rhbz-799628-crash-with-chewing-IM-with-g3g.patch
  - drop integrated 0001-silence-SolarMutex-not-locked-spew.patch
  - drop integrated 0001-gcc-trunk-fix-unable-to-find-string-literal-operator.patch
  - drop integrated 0001-ppc-yyinput-returns-a-int-truncating-to-unsigned-cha.patch
  - drop integrated 0001-Resolves-rhbz-826609-rhbz-820554-fix-smoketest-on-pp.patch


author: David Tardon <dtardon@redhat.com> - 3.6.0.0-1
changelog:
  - 3.6.0 beta2
  - drop integrated 0001-move-binfilter-mime-types-into-extra-.desktop-file.patch
  - drop integrated 0001-Resolves-rhbz-788042-skip-splashscreen-with-quicksta.patch
  - drop integrated libreoffice-ensure-non-broken-xml-tree.patch
  - drop integrated 0001-preserve-timestamps-for-.py-files.patch
  - drop integrated 0001-Resolves-rhbz-788045-swriter-help-etc-doesn-t-show-h.patch
  - drop integrated 0001-Resolves-rhbz-799525-put-flat-odf-mimetypes-in-xsltf.patch
  - drop integrated 0001-Resolves-rhbz-800272-complain-about-unknown-command-.patch
  - drop integrated 0001-Resolves-rhbz-806663-SlideshowImpl-can-outlive-SdMod.patch
  - drop integrated 0001-desktop-do-not-complain-about-soffice-command-line-o.patch
  - drop integrated 0001-Resolves-fdo-48096-torn-off-popups-trigger-keyboard-.patch
  - drop integrated 0001-fdo-38088-better-CSV-import-default-separators.patch
  - drop integrated 0001-save-register-arguments-first.patch
  - drop integrated 0001-do-not-let-gcc-use-registers-we-are-setting-ourselve.patch
  - drop integrated 0001-wrong-types-used-here-breaks-64bit-bigendian.patch
  - drop integrated 0001-Resolves-rhbz-805743-a11y-call-doShow-after-we-have-.patch
  - drop integrated 0001-Resolves-fdo-49849-implement-Unicode-6.1-hebrew-line.patch
  - drop integrated 0001-use-ure-instead-of-ure-link.patch
  - drop broken 0001-fix-setting-of-paper-tray-from-print-dialog-fdo-4393.patch


author: Caolán McNamara <caolanm@redhat.com> - 1:3.6.1.1-2
changelog:
  - Resolves: rhbz#846775 Clipboard must be disposed before selection
  - Resolves: rhbz#842292 crash in scrolling multiselection in draw


author: Caolán McNamara <caolanm@redhat.com> - 1:3.6.1.2-2
changelog:
  - Related: rhbz#850709 hunspell en-US available standalone so
    make English langpack require hunspell-en and core just
    bare bones hunspell-en-US


author: Caolán McNamara <caolanm@redhat.com> - 1:3.6.3.1-1
changelog:
  - 3.6.3 rc1
  - drop integrated 0001-Resolves-rhbz-855972-crash-on-switching-to-outline-v.patch
  - drop integrated 0001-fdo-52022-Simple-LargeControlPoints-actually-can-hav.patch
  - drop integrated 0001-fdo-46071-Do-not-hide-windows-based-on-nil-Visible-p.patch


author: Caolán McNamara <caolanm@redhat.com> - 1:4.0.0.3-5
changelog:
  - make evolution 3.6 work with address book
  - Resolves: rhbz#910176 cannot select directory with gtk folder picker
  - fixes for building against Boost 1.53.0


author: Eike Rathke <erack@redhat.com> - 1:4.0.0.3-8
changelog:
  - do not access vector elements beyond size, rhbz#847519 related
  - Resolves: rhbz#742780 let make OPT_FLAGS=... override SDK flags
  - Resolves: rhbz#907933 crash on removing second last para


author: Caolán McNamara <caolanm@redhat.com> - 1:4.0.1.2-2
changelog:
  - Related: rhbz#902884 check for NULL GetSelectedMasterPage
  - Resolves: fdo#61241 force area page to size itself
  - Resolves: fdo#61656 use order and orientation combobox
  - Resolves: fdo#56031 RSID attr changes drop content changes


author: Caolán McNamara <caolanm@redhat.com> - 1:4.1.0.0-5.beta1
changelog:
  - Resolves: rhbz#968892 block entire grapheme together for glyph fallback
  - Related: rhbz#968892 discard impossible languages for glyph fallback


author: David Tardon <dtardon@redhat.com> - 1:4.1.0.0-9.beta2
changelog:
  - Resolves: rhbz#971321 failing tests on ppc and s390
  - Resolves: rhbz#974062 incorrect rendering of text in outline blocks in
    Impress


author: Stephan Bergmann <sbergman@redhat.com> - 1:4.1.0.4-5
changelog:
  - Resolves: rhbz#989246 Honor user's JavaDriverClass override in mysql driver
  - Resolves: fdo#67045 fix several nasty screen selection issues


author: David Tardon <dtardon@redhat.com> - 1:4.1.1.2-1
changelog:
  - 4.1.1 rc2
  - Related: rhbz#895690 Always try to do a mount when opening a file via GIO
  - Resolves: rhbz#998136 wrong index to gWidgetData
  - Resolves: rhbz#998046 store last size/position of the base windows


author: Caolán McNamara <caolanm@redhat.com> - 1:4.1.2.3-2
changelog:
  - Resolves: rhbz#1013480 crash in EditLineList::operator[]
  - Resolves: rhbz#1014010 crash on start up
  - Resolves: rhbz#1013844 encrypted OOo 1.0 files don't reopen


author: Caolán McNamara <caolanm@redhat.com> - 1:4.1.2.3-3
changelog:
  - Resolves: rhbz#1015281 crash on clicking custom animation
  - Resolves: rhbz#996162 crash with no bullet font


author: Caolán McNamara <caolanm@redhat.com> - 1:4.1.2.3-4
changelog:
  - Resolves: rhbz#1001768: fix various a11y deadlocks and crashes
  - Resolves: rhbz#1016022 fix cut from impress and paste to writer
  - Resolves: rhbz#1003179 fix AUTOFMT related crashes in Writer Undo


author: Caolán McNamara <caolanm@redhat.com> - 1:4.1.3.1-2
changelog:
  - Resolves: rhbz#1020712 wrong default CTL font shown in editengine
  - Resolves: rhbz#919070 display -1 means span all screens


author: Stephan Bergmann <sbergman@redhat.com> - 1:4.1.3.2-2
changelog:
  - Resolves: fdo#67725 unoidl::AggregatingCursor must wrap modules for aggregation
  - Resolves: rhbz#1021915 force menubar menus to be up/down only
  - Resolves: rhbz#1025201 Incorrect rendering of Devanagari short i


author: Stephan Bergmann <sbergman@redhat.com> - 1:4.1.3.2-5
changelog:
  - Resolves: rhbz#1031989 Accept --pt in addition to deprecated -pt
  - Related: rhbz#1014990 valgrind reports uninitialized variables


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.0.0-2.beta2
changelog:
  - update to 4.2.0 beta2
  - Related: rhbz#1032774 bodge around reported NULL
  - Resolves: rhbz#1035092 no shortcut key for Italian 'Tools' menu
  - Resolves: rhbz#912529 Kerkis SmallCaps shown instead of Kerkis Regular
  - Resolves: rhbz#1038189 refresh printer list when print dialog launched
  - openssl no longer required to build


author: David Tardon <dtardon@redhat.com> - 1:4.2.0.4-2
changelog:
  - split LibreLogo into a separate subpackage
  - create a metapackage depending on all subpackages containing filters,
    for use of packages like unoconv


author: David Tardon <dtardon@redhat.com> - 1:4.2.0.4-3
changelog:
  - Resolves: rhbz#1017379 libreoffice impress imports animated motion paths
    incorrectly from powerpoint
  - Resolves: fdo#33852 Custom animation (Motionpath Left) isn't being
    imported correctly from .ppt


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.2.1-5
changelog:
  - Related: rhbz#1065807 wizards should find the right wizards subdir
    of Template_internal, who knew this stuff was so fragile


author: Michael Stahl <mstahl@redhat.com> - 1:4.2.2.1-6
changelog:
  - Resolves: rhbz#988516: DOCX import: fix context stack when importing header
  - Resolves: rhbz#1072553: Fix deselection problems of template view
  - Resolves: rhbz#1072607: fix crash in SvxRuler::MouseMove()
  - Resolves: rhbz#1043551: sw: avoid division-by-0 in Text Grid painting code
  - RTF import: import field parameters
  - RTF import: fix spurious page breaks at doc end


author: David Tardon <dtardon@redhat.com> - 1:4.2.3.2-2
changelog:
  - Resolves: rhbz#1080196 mdds/multi_type_vector_itr.hpp update_node():
    soffice.bin killed by SIGSEGV


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.3.3-2
changelog:
  - Resolves: rhbz#1081176 don't jump to cursor pos when we don't want to
  - Related: rhbz#1085916 kde startup woes


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.1-2
changelog:
  - every 2nd print job is incorrectly flagged as failed
  - Related: rhbz#1088625 PresenterPaintManager seen as NULL


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.1-3
changelog:
  - sometimes tables in impress don't resize when adding rows
  - Resolves: fdo#71423 crash while editing Impress tables


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.1-6
changelog:
  - Resolves: fdo#37130 use 10pt Default style font for comments
  - Resolves: fdo#60040 crash after undoing master page
  - vertically center printout when including comments


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.2-6
changelog:
  - center current slide after changing zoom
  - add a status bar icon to fit slide to window
  - Related: fdo#50697 reset the cache timeout on GetGraphic


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.2-9
changelog:
  - Resolves: rhbz#1096486 avoid access to nonexisting parent
  - Resolves: rhbz#1096295 hard to distinguish slides in slide pane


author: Caolán McNamara <caolanm@redhat.com> - 1:4.2.4.2-14
changelog:
  - render smart-art with a vector format so it can be scaled nicely
  - fix leak on pasting metafiles into office
  - fix leak on pasting draw items into office
  - fix another leak on scaling metric items


author: David Tardon <dtardon@redhat.com> - 1:4.3.0.0-9.beta2
changelog:
  - Resolves: rhbz#1105376 FlatODF import/export does not work unless
    libreoffice-xsltfilter is installed


author: Caolán McNamara <caolanm@redhat.com> - 1:4.3.1.1-6
changelog:
  - Resolves: rhbz#1131425 move libjawt-using office bean into a subpackage
  - Resolves: rhbz#1125588 port LibreOffice to ppc64le


author: Caolán McNamara <caolanm@redhat.com> - 1:4.3.2.2-2
changelog:
  - make brochure printing of impress/draw work out of the box
  - Resolves: rhbz#1133863 fix looping layout


author: Caolán McNamara <caolanm@redhat.com> - 1:4.3.3.2-4
changelog:
  - Resolves: fdo#60712 Inherits cell styles in inserting rows/columns
  - implement toggling off removeable master elements with delete
  - Resolves: fdo#78151 change underlying style on toggling bullets on/off in master view


author: Caolán McNamara <caolanm@redhat.com> - 1:4.3.4.1-5
changelog:
  - Resolves: rhbz#1164551 we want to ensure that a libjvm.so is available
    but we have no firm interest in which one that is


author: David Tardon <dtardon@redhat.com> - 1:4.4.0.2-2
changelog:
  - Resolves: rhbz#1180114 writerfilter: don't crash on w:customXmlDelRangeStart
    etc.
  - Resolves: rhbz#1175027 fix life cycle of SwConnectionDisposedListener_Impl


author: Stephan Bergmann <sbergman@redhat.com> - 1:4.4.2.2-3
changelog:
  - Resolves: rhbz#1197614 crash when updating extension
  - Resolves: rhbz#1134285 redundant user/password request for WebDAV access


author: Bastien Nocera <bnocera@redhat.com> 1:5.1.0.1-2
changelog:
  - Add GLSL files missing from the package
  - Split up inclusion of latin Serbian files to avoid duplicate listing


author: David Tardon <dtardon@redhat.com> - 1:5.1.0.3-1
changelog:
  - update to 5.1.0 rc3
  - Resolves: rhbz#1168757 Selecting multiple slides is not reflected in Print
    dialog


author: David Tardon <dtardon@redhat.com> - 1:5.1.2.1-1
changelog:
  - update to 5.1.2 rc1
  - split VCL plugins into subpackages
  - rename libreoffice-kde to libreoffice-kde4
  - only recommend fonts
  - remove hard dependency on English spell checker and auto-correction
    rules
  - disable quickstarter
  - move icons and other system-integration stuff to a noarch subpackage
  - disable browser plugin in preparation for its removal in 5.2


author: David Tardon <dtardon@redhat.com> - 1:5.2.0.1-1
changelog:
  - update to 5.1.0 rc1
  - Resolves: rhbz#1343752 wrong radiobutton and checkbutton behavior in
    "view" menu
  - Resolves: rhbz#1349261 do not pull in all variants of english dicts


author: David Tardon <dtardon@redhat.com> - 1:5.2.1.2-2
changelog:
  - Resolves: rhbz#1247399 install public jars according to packaging guidelines
  - Resolves: rhbz#1363874 install LibreOfficeKit headers


author: Caolán McNamara <caolanm@redhat.com> - 1:5.2.2.1-3
changelog:
  - Related: rhbz#1373933 do less on style-updated
  - Related: rhbz#1353069 don't clear XATTR_FILL from in use styles


author: David Tardon <dtardon@redhat.com> - 1:6.0.0.0-1.alpha1
changelog:
  - update to 6.0.0 alpha1
  - update location of appdata files
  - use weak dependencies
  - mark bundled packages


author: Michael Stahl <mstahl@fedoraproject.org> - 1:6.0.0.2-3
changelog:
  - add lots of .abignore files to restrict abipkgdiff to shared objects
    that actually have a stable ABI


author: Stephan Bergmann <sbergman@redhat.com> - 1:6.0.3.2-4
changelog:
  - Resolves: rhbz#1568579 LibreOffice --headless zombie process
  - Related: rhbz#1569331 end should be in terms of unicode chars, not bytes


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-3
changelog:
  - Add .gitignore for Fedora output directory
  - Set up Fedora release name and CPE based on build system properties
  - Use correct file paths in scap-security-guide(8) manual page
    (RH BZ#1018905, c#10)
  - Apply further changes motivated by scap-security-guide Fedora RPM review
    request (RH BZ#1018905, c#8):
    * update package description,
    * make content files to be owned by the scap-security-guide package,
    * remove Fedora release number from generated content files,
    * move HTML form of the guide under the doc directory (together
      with that drop fedora/content subdir and place the content
      directly under fedora/ subdir).
  - Fixes for scap-security-guide Fedora RPM review request (RH BZ#1018905):
    * drop Fedora release from package provided files' final path (c#5),
    * drop BuildRoot, selected Requires:, clean section, drop chcon for
      manual page, don't gzip man page (c#4),
    * change package's description (c#4),
    * include PD license text (#c4).


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.48-4
changelog:
  - Drop rsyslog rules from OSPP profile
  - Update COBIT URI
  - Add rules for strong source of RNG entropy
  - Enable build of RHEL8 STIG Profile (RHBZ#1755447)
  - STIG profile: added rsyslog rules and updated SRG mappings
  - Split audit rules according to audit component (RHBZ#1791312)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:1.9998.11-6
changelog:
  - Document Math::BigInt::CalcEmu requires Math::BigInt (bug #1689912) 
    - Petr Pisar <ppisar@redhat.com>
  - Rebuild with enable hardening (bug #1636329)


author: Christian Heimes <cheimes@redhat.com> - 0.2.0-4
changelog:
  - Add missing runtime requirement on python[23]-systemd.
  - Drop unnecesary build dependency on python%{python3_pkgversion}-configparser.
  - Fix tests, don't try to download dnspython3.


author: Christian Heimes <cheimes@redhat.com> - 0.3.0-1
changelog:
  - Update to custodia 0.3.0
  - Run tests with global site packages
  - Add tmpfiles.d config for /run/custodia


author: Christian Heimes <cheimes@redhat.com> - 0.3.0-2
changelog:
  - Run Custodia daemon with Python 3
  - Resolves: Bug 1426737 - custodia: Provide a Python 3 subpackage


author: Christian Heimes <cheimes@redhat.com> - 0.5.0-2
changelog:
  - Skip etcd store on PPC64
  - Add missing pre/post install hooks for systemd service
  - Custodia 0.5 is compatible with FreeIPA 4.4.5 and newer
  - Drop custodia user from tmpfiles.d conf


author: Rui Matos <rmatos@redhat.com> - 3.3.3-1
changelog:
  - Update to 3.3.3
  - Just list %{_datadir}/help/xx_YY/baobab in %files since %find_lang
    doesn't find those for us


author: David King <amigadave@amigadave.com> - 3.15.90-1
changelog:
  - Update to 3.15.90
  - Use license macro for COPYING and COPYING.docs
  - Use pkgconfig for BuildRequires
  - Update URL
  - Validate AppData in check
  - Update man page glob in files section


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0-7
changelog:
  - Update tests for the network role
  - Fix typo in a test for the timesync role
  - Tag tests suitable for Tier1 testing
  - Rebase the network role to add support for device features (PR#115,
    rhbz#1696703) and atomic changes (PR#119, rhbz#1695161)
  - network: apply upstream PR#121: allow modifying interface attributes
    without disrupting services (rhbz#1695157)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.0-10
changelog:
  - Add the storage_safe_mode option, true by default, to prevent accidental
    data removal: rhbz#1763242, issue #42, PR #43 and #51.


author: Steven Pritchard <steve@kspei.com> 0.62-3
changelog:
  - Use fixperms macro instead of our own chmod incantation.
  - Drop Test::Base build dependency to avoid a BR loop (#215637).
  - BR ExtUtils::MakeMaker.


author: Paul Howarth <paul@city-fan.org> - 0.71-1
changelog:
  - Update to 0.71 (use UTF-8 encoding in LoadFile/DumpFile: CPAN RT#25434)
  - Enable AUTOMATED_TESTING
  - BR: perl(Test::CPAN::Meta), perl(Test::MinimumVersion), perl(Test::Pod)
  - This release by ADAMK -> update source URL
  - Re-code docs as UTF-8


author: Paul Howarth <paul@city-fan.org> - 0.81-2
changelog:
  - R: perl(Carp) and perl(Data::Dumper)
  - BR: perl(Carp), perl(constant) and perl(Exporter)
  - Release tests no longer shipped, so drop buildreqs for them and don't bother
    setting AUTOMATED_TESTING; run tests even when bootstrapping


author: Paul Howarth <paul@city-fan.org> - 0.84-2
changelog:
  - Haven't needed to fix documentation character encoding since 0.79
  - Drop Test::Base build dependency again to avoid a BR loop (#215637)
  - Filter private provides perl(yaml_mapping), perl(yaml_scalar) and
    perl(yaml_sequence)
  - Don't need to remove empty directories from the buildroot
  - This release by MSTROUT -> update source URL


author: Paul Howarth <paul@city-fan.org> - 0.89-1
changelog:
  - Update to 0.89
    - Synopsis in YAML::Dumper didn't work as expected (CPAN RT#19838)
    - Address complex regular subexpression recursion limit (CPAN RT#90593)
    - Use latest Test::Builder (CPAN RT#90847)
    - Fixed tests to work under parallel testing
    - Switched to dzil release process
  - This release by INGY -> update source URL
  - Make %files list more explicit
  - Specify all dependencies


author: Paul Howarth <paul@city-fan.org> - 0.91-1
changelog:
  - Update to 0.91
    - Force escaping of single '-'
      (https://github.com/ingydotnet/yaml-pm/pull/22)


author: Paul Howarth <paul@city-fan.org> - 0.94-1
changelog:
  - Update to 0.94
    - Switch to Zilla::Dist
    - Add badges to doc
    - Fix regression introduced with earlier fix for complex regular
      subexpression recursion limit (GH#18)
    - Fix reference to non-existent sub Carp::Croak (GH#19)
  - Enumerate all files so we can mark POD files as %doc
  - Bump Test::More version requirement to 0.88 due to use of done_testing


author: Paul Howarth <paul@city-fan.org> - 0.96-1
changelog:
  - Update to 0.96
    - Fix Metadata and add Contributing file
    - Change Kwim to Swim
  - Upstream dropped all those pod files and manpages again


author: Paul Howarth <paul@city-fan.org> - 0.97-1
changelog:
  - Update to 0.97
    - Move remaining docs to Swim
  - Upstream reinstated all those pod files and manpages again


author: Paul Howarth <paul@city-fan.org> - 0.98-1
changelog:
  - Update to 0.98
    - Fix indexing of YAML::Any
    - Change IRC to irc.perl.org#yaml
  - Use %license
  - Drop workaround for #1115971


author: Paul Howarth <paul@city-fan.org> - 1.00-1
changelog:
  - Update to 1.00
    - Switch to external Test::Base
    - Fix bad encoding in Pod
  - Test::YAML is now unbundled
  - Take advantage of new features in recent EU::MM to simplify spec


author: Paul Howarth <paul@city-fan.org> - 1.09-1
changelog:
  - Update to 1.09
    - Add t/000-compile-modules.t
    - Eliminate File::Basename from test/
    - Eliminate spurious trailing whitespace
    - Meta 0.0.2
    - Change testdir to t
    - Add doc examples for YAML::Any (PR/8)
    - Dep on Test::YAML 1.05
    - Replace tabs with spaces


author: Paul Howarth <paul@city-fan.org> - 1.10-1
changelog:
  - Update to 1.10
    - Apply PR/138:
      - Report an error message mentioning indentation when choking on non-space
        indentation
      - die() should be called as a method of $self


author: Paul Howarth <paul@city-fan.org> - 1.19-1
changelog:
  - Update to 1.19
    - Add pod link to YAML::Shell (GH#164)
    - Fix infinite loop for aliases without a name (GH#151)
    - Improve error messages (GH#142, GH#162)
    - Trailing spaces after inline seq/map work now (GH#163)
    - Add test case for trailing comments (GH#154)


author: Remi Collet <rcollet@redhat.com> 1.12.1-3
changelog:
  - fixes from review comments #999313: clarify License
  - drop execution right from sources
  - BR libzip-devel always needed


author: Remi Collet <remi@fedoraproject.org> 1.12.2-1
changelog:
  - update to 1.12.2 (beta)
  - drop merged patches
  - install doc in pecl doc_dir
  - install tests in pecl test_dir


author: Remi Collet <remi@fedoraproject.org> 1.12.2-2
changelog:
  - upstream patch, don't use any libzip private struct
  - drop LICENSE_libzip when system version is used
  - always build ZTS extension


author: Remi Collet <remi@fedoraproject.org> - 1.13.1-3
changelog:
  - drop scriptlets (replaced file triggers in php-pear)
  - ignore 1 test (change in php, FTBFS detected by Koschei)


author: Matthias Clasen <mclasen@redhat.com> 2.11.1.1-2
changelog:
  - Undo the split into tiny subpackages, instead move
    the Python bindings and the editor into the main package.
  - Fix dependencies


author: Colin Walters <walters@verbum.org> - 3.0.0-2
changelog:
  - Ship applications-gnome.desktop; we don't want GNOME 3 to use redhat-menus.
  - Disable introspection, we're not using it right now


author: Florian Müllner <fmuellner@redhat.com> - 3.6.0-2
changelog:
  - Use gnome-applications.menu instead of applications-gnome.menu,
    in order to be able to use XDG_MENU_PREFIX instead of a downstream
    patch to gnome-shell


author: Martin Pitt <mpitt@redhat.com> - 0.3-1
changelog:
  - New version 0.3
  - Add/edit/remove sources
  - Remove new line in encrypted password rhbz#1655862
  - Resolve issues with changes saved to the workspace


author: Martin Pitt <mpitt@redhat.com> - 4-1
changelog:
  - Add additional blueprint name validation rhbz#1696415
  - Fix images not loading on refresh
  - Add notification for source repo deletion
  - Fix AppStream ID
  - Translation updates


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.5.0-4
changelog:
  - Python 2 binary package renamed to python2-sanlock
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 1.1.0-2
changelog:
  - Don't ignore the tests results but rather have a tolerance rate
  - Skip test_decomp on ppc64le as it currently segfaults


author: Petr Viktorin <pviktori@redhat.com> - 1.2.1-6
changelog:
  - Remove build dependency on python2-pytest-xdist and python2-pytest-timeout
  - Enable parallel tests in Python 3 %check
  - Use macros for Python interpreter in tests


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.1-1
changelog:
  - Update to 1.3.1 (#1674101)
  - Drop Python 2 packages (not supported by SciPy >= 1.3)
  - Backported upstream patch for cKDTree (fixes FTBFS)


author: Lumír Balhar <lbalhar@redhat.com> - 1.3.1-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983


author: Karsten Hopp <karsten@redhat.com> 0.1-8.git04fd09cfa.1
changelog:
  - Excludearch s390 s390x, as we don't have libusb1 on mainframe, we can't build
    the required libfprint package


author: Ray Strode <rstrode@redhat.com> 0.2.0-2
changelog:
  - Don't allow pam module to ever get unmapped, since that causes
    crashes in dbus-glib, gobject, etc.


author: Paul Howarth <paul@city-fan.org> - 2.125-1
changelog:
  - Update to 2.125
    - On Perls prior to v5.12, CPAN::Meta::Requirements will force UNINST=1 when
      necessary to remove stale copies from ExtUtils::MakeMaker
    - Updated Makefile.PL logic to support PERL_NO_HIGHLANDER
  - README.PATCHING renamed to CONTRIBUTING
  - Classify buildreqs by usage
  - Add note about logically-impossible constraints to %description


author: Paul Howarth <paul@city-fan.org> - 2.126-1
changelog:
  - Update to 2.126
    - Fixed compatibility with version.pm 0.77
    - Minor documentation fixes
    - Modernized distribution meta files
  - Use %license


author: Paul Howarth <paul@city-fan.org> - 2.130-1
changelog:
  - Update to 2.130
    - from_string_hash can take optional constructor arguments
    - bad_version_hook callback gets module name as well as version string
    - undefined/empty versions given to from_string_hash or
      add_string_requirement now carp and are coerced to "0" instead of being
      fatal; this is more consistent with how the other requirement functions
      work
  - Provide six-digit version in a more robust way


author: Paul Howarth <paul@city-fan.org> - 2.131-1
changelog:
  - Update to 2.131
    - Merging Module => 0 into requirements is now optimized
    - Scalar::Utils removed as a prerequisite


author: Paul Howarth <paul@city-fan.org> - 2.132-1
changelog:
  - Update to 2.132
    - Precision of version requirement "0.00" is preserved when merging
      requirements


author: Paul Howarth <paul@city-fan.org> - 2.133-1
changelog:
  - Update to 2.133
    - In fixing preservation of "0.00", some Module => 0 optimizations were lost;
      this restores those optimizations


author: Paul Howarth <paul@city-fan.org> - 2.140-1
changelog:
  - Update to 2.140
    - Added method for getting structured requirements
    - Skips impossible tests on Perls earlier than 5.8.0 (before v-string magic)
    - On Perls before 5.8.1, pad 1-part and 2-part literal v-strings to avoid old
      version.pm bugs with v-strings less than 3 characters
    - Protect internal _isa_version from non-refs that pass ->isa('version')
    - Much better error messages, explaining what conflicted and how
    - Repackage with fixed tests
    - Expanded dist.ini from author bundle to individual plugins


author: Nathan Scott <nathans@redhat.com> - 5.0.1-1
changelog:
  - Update to latest PCP v5 sources via rebase (BZ 1723598)
  - Resolve selinux policy installation issues (BZ 1730206)


author: Nathan Scott <nathans@redhat.com> - 5.0.2-1
changelog:
  - Update to latest PCP v5 sources via rebase (BZ 1723598)
  - Resolve selinux policy issue with bcc PMDA (BZ 1709237)
  - Resolve selinux policy issue with unbound PMDA (BZ 1778813)
  - Updates to perfevent PMDA for hv_24x7 events (BZ 1765434, 1779507)
  - Fix perl packaging dependency for postfix PMDA (BZ 1773459)
  - Fix pcp-dstat handling of large numbers of disks (BZ 1779419)
  - Fix pmie exit status on receipt of TERM signal (BZ 1780003)
  - Fix pmlogger timeout handling on fresh install (BZ 1780073)


author: Nathan Scott <nathans@redhat.com> - 5.0.2-3
changelog:
  - Fix issue with multilib pcp-devel installation (BZ 1788119)
  - Archive discovery fixes in pmproxy and libpcp_web (BZ 1785560)


author: Nathan Scott <nathans@redhat.com> - 5.0.2-4
changelog:
  - Restrict pcp-pmda-mssql to ODBC architectures (BZ 1795804)
  - Fix pcp-pmda-activemq perl module installation (BZ 1788881)
  - Update archive discovery code with latest fixes (BZ 1785560)
  - Update bpftrace and BCC PMDAs architecture lists (BZ 1795798)


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-19
changelog:
  - Constrain number of cycles in rescale filter
  - Compute correct coverage values for box filter
  - Resolves: #1688418


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-25
changelog:
  - Check whether input is RGB in PSOutputDev::checkPageSlice()
  - also when using "-optimizecolorspace" flag
  - Resolves: #1697576


author: Richard W.M. Jones <rjones@redhat.com> - 8.0-3
changelog:
  - Fix for CVE-2019-9755
    (heap-based buffer overflow leads to local root privilege escalation)
    resolves: rhbz#1698503


author: ELMORABITY Mohamed <melmorabity@fedoraproject.org> 0.1.3-1
changelog:
  - Update to 0.1.3
  - Remove useless call to 2to3 and corresponding BuildRequires
    python2-tools (this version supports Python 3)


author: Michal Ruprich <mruprich@redhat.com> - 0.16.105-3.1
changelog:
  - Resolves: #1779573 - CVE-2019-19333 libyang: stack-based buffer overflow in make_canonical when bits leaf type is used
  - Resolves: #1779576 - CVE-2019-19334 libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 2.09-2
changelog:
  - Applied two of the Ville's suggestions (#177166): trimmed down
    the description to the first paragraph and added the file ANNOUNCE
    as documentation.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 0.0.4-12
changelog:
  - Resolves: rhbz#1786466 Do not use %{?_isa} for GDB dependency. Recommend
    GDB, instead of requiring it.


author: Dan Walsh <dwalsh@redhat.com> - 0.7-1
changelog:
  - Fix setroubleshoot_dispatcher to catch all information from
     avc. Much cleaner interface and no longer uses audit2allow cruft.
  - Remove toolbar from popup window since it did nothing, and I
     think it looks better without it.
  - fix allow_execmod plugin to report better data.


author: Dan Walsh <dwalsh@redhat.com> - 0.8-1
changelog:
  - Added a bunch more plugins
      [Karl MacMillan <kmacmill@redhat.com>]
  - Add allow_cvs_read_shadow.py, allow_ftp_use_cifs, allow_ftp_use_nfs, and allow_gssd_read_tmp.
  - Change AVC to have additional helpers for matching messages.
  - Change Plugin to work better with more than one solution.


author: Dan Walsh <dwalsh@redhat.com> - 0.15-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  - Add generic templating mechanism to Plugin
  - Ported all plugins to use templating mechanism


author: Dan Walsh <dwalsh@redhat.com> - 0.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - modify SetFilter in server to return errors instead of
     throwing an exception. Default the filter list on each alert display.
  - minor tweaks to alert queue handling
  - fix analyze() parameter list in ftp_is_daemon.py plugin
  - sealert now responds to pending alerts more correctly, it shows
     how many pending alerts are in the queue, if you filter the pending
     alert status is updated, the next alert button will advance you
     to the next alert in the queue
  - simplify major pieces of sealert by coalescing common code
     into subroutines.
      [Dan  Walsh <dwalsh@redhat.com>]
  - Complete all boolean plugins except disable
  - Make Close button work.
  - Make setroubleshoot_dispatcher exit if it gets an avc about itself


author: Dan Walsh <dwalsh@redhat.com> - 0.17-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - clean up and rework the timestamp code in util.py so that
     time zones are handled properly, there were a number of bugs.
     Hopefully it's correct now because timezone handling is a pain.
  - change the time format in the browser so all times are displayed
     identically, the friendly time relative format was hard to compare.
  - modify the plugin 'make install' to delete all existing plugin's
     prior to installing the new ones
  - add popup menu to status icon to choose between browser and
     alert GUI (not fully connected yet). Several bug fixes related
     to changing the filter_type from a string to an int.
  - add filter selection to bottom pane, change filter_type from
     string to integer constant. Enhance how columns are handled.
     Get init_combo_box to work. Remove unused RPM and Bugzilla
     fields from bottom pane. Modify the default size of the browser
     window. Fix missing import in util.py.
  - add ability in broswer to sort on columns, initially the report
     count column and the last seen date column. The date column now
     stores a TimeStamp object instead of a string. Add new method
     to TimeStamp to return a friendly string relative to the current
     time. The date column in the browser now has a cell data function
     which invokes the friendly format method of the TimeStamp object.
  - add ability fo serialize to/from xml for classes which can
     inititialized from strings and serialized as strings (e.g. numbers,
     TimeStamps, etc.)
  - add count of how many times a signature is reported, the date
     when first and last reported, add columns for report count and
     last date count to browser.
  - checkpoint browser code, list pane and detail pane now working.
  - add initial support for browser applet, move some functions which
     kept getting reused to util.py
  - add reporting of environment to email alert (email alerts still
     need work)
      [Dan  Walsh <dwalsh@redhat.com>]
  - Fix disable_trans.py set_boolean call
  - Complete all boolean plugins except disable
  - Change interface to use audit unix domain socket


author: Dan Walsh <dwalsh@redhat.com> - 0.19-1
changelog:
  2006-08-08  Dan Walsh <dwalsh@redhat.com>
  - Fix up handling of mls ranges in context
  - Cleanup some pychecker errors

  2006-08-07  John Dennis <jdennis@redhat.com>
  - add first seen, last seen, and report count to alert detail view
  - make the seen icon work, if the alert has been displayed more
     than N seconds, mark the alert as having been seen by the user
     and update the icon is the list view
  - change the schema for the xml data; the database now has a version,
     there is a local id attached to each signature, the filter list in
     the siginfo was replaced by a list of per user data, the per user
     data now contains the filter, seen_flag. Modify all the code which
     was operating on the filter information to use the new model.
  - fix the xml serialization so that booleans can be used as a basic
     type and also so that non-string types can be used in element
     attributes (e.g. int, bool) and the serialization code will
     automatically convert between python types and strings.


author: John Dennis <jdennis@redhat.com> - 0.27-1
changelog:
  - load_plugins() now catches exceptions when a plugin won't load,
     reports the traceback in the log file, and continues with the next
     plugin. Previously a bad plugin caused the entire plugin loading
     to abort and no plugins were loaded.
  - Add "daemon_name" to automake variables, change pid file to match
  - turn off "noreplace" on config file till things settle down a bit
  - browser.py now validates data, also test for missing column data in the
     cell_data function to avoid exceptions.
  - add stub for analyzie_logfile() rpc call
  - turn off balloon notifications by default in config file,
     libnotify is just plain busted at this point :-(
  - only the setroubleshootd daemon creates it's log file
     under /var/log now, the user app's do it in /tmp, change file
     permissions on /var/log/setroubleshoot back to 0644.
  - sealert now looks up the username rather than hardcoding it to "foo"
  - CamelCase to lowercase_underscore clean up


author: John Dennis <jdennis@redhat.com> - 0.30-1
changelog:
  - fix bug 203479, missing requires of audit-libs-python
  - add support to sealert to listen on a dbus session signal to display
     the gui. This is needed for when the status icon is not visible and
     the user wants to see the UI. There is now a seperate program
     setroubleshoot_launch_gui which emits the signal.


author: Dan Walsh <dwalsh@redhat.com> - 0.32-1
changelog:
  - Add avc_syslog to syslog translated avc message
  - Fix submitbug button
      [John Dennis <jdennis@redhat.com>]
  - fix signature inflation, all data attached to a signature is now
     encapsulated in a SEFaultSignatureInfo (siginfo) class. The GUI no
     longer reaches into a signature looking for information, it looks
     in the siginfo. The Plugin class now defines the method
     get_signature() which report() calls to obtain the signature. The
     default signature provided by the Plugin class includes the
     analysisID, an AVC with just the src & target contexts, and the
     object_path. All data accesses and parameters which had been "sig
     and solution" are now done via the unified siginfo class. There is
     still a bit more work to be done on this but this represents a
     reasonble point to checkpoint the code in CVS.


author: Dan Walsh <dwalsh@redhat.com> - 0.34-1
changelog:
  - Standardize on the browser. remove alert window
      [John Dennis <jdennis@redhat.com>]
  - remove all vestiges of popup alert, now browser is the only
     UI game in town
  - restore the automatic updating of the browser window which had
     been a regression, the AlertClient class now emits signals which
     the GUI classes can connect to receive signals from the fault server,
     also fix the "mark seen" regression
  - browser.py: restore mark_seen timeout


author: John Dennis <jdennis@redhat.com> - 0.35-1
changelog:
  - add sorting on category column and seen column in browser,
     fix reference to my_draw() in print function.

  - make browser window hidden by default so it does not flash
     when it's first realized, connect to the "realize" signal to
     initially position the vpane, add signal handlers to track
     when the browser is visible, the presentation of the status
     icon now checks if the browser is visible, the status icon is
     not presented if the browser is already displayed.


author: Dan Walsh <dwalsh@redhat.com> - 0.38-1
changelog:
  [Dan  Walsh]
  - Hook up the rest of the menu bars on browser window
  - Add public_content.py plugin
      [John Dennis <jdennis@redhat.com>]
  - add delete_signatures() method to AlertClient class
  - start using the AppBar in the browser.
  - "open logfile" now connected all the way from browser menu
     to server rpc, still needs implementation, but "plumbing" is working.
  - fixes for the date/time dialog
  - remove install of setroubleshoot.glade, we now only use
     setroubleshoot_browser.glade
  - some fixed to DateTimeDialog


author: Dan Walsh <dwalsh@redhat.com> - 0.39-1
changelog:
  - Add Icon
      [John Dennis <jdennis@redhat.com>]
  - dispatcher.py: rework how audit messages injected into the
     system and processed. Much of this work was in support of log file
     scanning which should be coupled to the exact same processing code
     as audit messages arriving from the audit socket. In essence log
     file scanning synthesizes an audit message and we inject it into
     the system the same way socket messages are injected. This was
     also an excellent moment correctly handle out of order audit
     messages, something we were not able to handle previously. This
     may have been contributing to splitting what should have been a
     single alert into two or more separate alerts because we didn't
     recongize the incoming audit events as a single event. Correctly
     assembling out of order messages introduced a fair amount of extra
     complexity as we now maintain a cache of recent audit events, this
     is fully documented in dispatcher.py
  - Turn notifications back on by default.
      [Karl MacMillan <kmacmill@redhat.com>]
  - Separated out HTML rendering and made it easier to translate.


author: Dan Walsh <dwalsh@redhat.com> - 0.40-1
changelog:
  - Fix notification window problems.  Now dissappears and does not regenerate if
  it has already been seen


author: Dan Walsh <dwalsh@redhat.com> - 0.42-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  - Add rpm information for target.
  - Add hostname and uname to signature info
  - Add display of the full AVC
  - Add display of the analysis id
  - Change html generation to be separated out and us elemmenttree
      [John Dennis <jdennis@redhat.com>]
  - add CommunicationChannel class to encapsulate data transfer
     operations, in particular to provide an object threads can lock
     during data transfer.
  - checkpoint the logfile scanning code, somewhat working


author: Dan Walsh <dwalsh@redhat.com> - 0.43-1
changelog:
  - Fix mail handling
  - fix bugs related to recording per user per signature filtering
      [John Dennis <jdennis@redhat.com>]
  - fix bugs related to recording per user per signature filtering
      [Karl MacMillan <kmacmill@redhat.com>]
  - Add signal handling to client and server.
  - Fix minor plugin bugs.


author: Dan Walsh <dwalsh@redhat.com> - 0.46-1
changelog:
  - Add new plugins cvs_data, rsync_data, xen_image, swapfile, samba_share
      [John Dennis <jdennis@redhat.com>]
  - clear the GUI of old data before loading new data,
     fix the code used to display the filter icon in the filter column


author: Dan Walsh <dwalsh@redhat.com> - 0.48-1
changelog:
  - Sealert only notify dropped connection once
  - setroubleshoot shutdown cleanly
      [John Dennis <jdennis@redhat.com>]
  - Gui cleanups


author: Dan Walsh <dwalsh@redhat.com> - 1.0-1
changelog:
  - Release of first version
  - Fix icon
      [John Dennis <jdennis@redhat.com>]
  - Memory leak fixes
  - Substitution fixes
  - File names in hex fixes


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Speed enhancments
      [John Dennis <jdennis@redhat.com>]
  - log file parsing now approx 4 times faster
  - greatly enhance the statistics reporting capability in attempt
     to diagnose slow log file parsing performance
  - make gathering of environmenatal information optional,
     environment information is only relevant at the time the
     alert fires, not in a post processing scenario
  - clean up several places where environmental information was
     assumed and/or was always gathered, or gathered in the wrong place.


author: Dan Walsh <dwalsh@redhat.com> - 1.7-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - Add command line utilities
  - logfile scanning finally seems to work connected to browser
  - Additional Information section of report now includes line
     number information (if alert was generated from logfile)
  - replace database update_callback() with notify interface, a more
     generic solution more easily shared between components
  - object implementing rpc method is now explicitly attached via
     connect_rpc_interface() instead of walking the MRO chain with
     magic exclusions. explicitly connecting is more flexible and
     robust (no getting the wrong object by mistake)
  - fix handling of return args in local rpc case
  - fix signal connections between audit and logfile
  - split databae and database_properties for audit and logfile
  - fix initial connection state
  - fix lookup_local_id


author: John Dennis <jdennis@redhat.com> - 1.8.1-1
changelog:
  - Fixes 216936, bug 215290, add 'Copy Alert' edit menu item
  - clean up menu items, add tooltips
  - fix printing so it will work with multiple alerts, force font to
     monospace 10pt, display error dialog if printing fails.
  - Fixes 216908, platform and raw audit messages were not wrapped
     to fit on page.
  - Related: 216575, update i18n po files
  - Fixes 216941, set default folder for save operation, also set
     default filename
  - Fixes 216327 add menu items "toggle hide deleted", "select none". Add model
     filter to control visibility of alerts
  - Fixes 214218, sealert with no command line
     arguments induces startup as dbus service, this had been a
     regression.
  - Fixes 216327, rework how deletes are performed in browser. Delete
     now marks each seleted siginfo with a delete flag, expunge
     permanently deletes siginfo's marked for deletion, also add undelete
     command, removed delete confirmation dialog. Modify how text
     attributes in cell renderer are computed to allow for
     strike-throughs of alerts marked for deletion.
  - multiple alerts can now be selected, add select all command,


author: John Dennis <jdennis@redhat.com> - 1.8.3-1
changelog:
  - Fixes 217961, sealert needs pygtk2-libglade
  - more i18n translations
  - Fixes 217710, date representation did not respect locale,
     at the same time remove old date formatting code, now cruft since
     we can't use it because it was specific to US English.
  - fix how selections are handled when rows are expunged.
  - add Copy to Edit menu, for copying selection from detail pane,
     unfortunately gtkhtml2 widget does not preserve line breaks between
     table rows.


author: John Dennis <jdennis@redhat.com> - 1.8.5-1
changelog:
  - fix bug, "could not convert path to a GtkTreePath" when database 
     is initially empty, caused by last_selected_row == None


author: John Dennis <jdennis@redhat.com> - 1.8.6-1
changelog:
  - Fixes 218150,
     "If view is set to "hide delete" you cannot filter new entries"
     Actually, the bug was toggle cell renderer was connected to the
     base model instead of the model attached to the view, the sort
     model, this meant the toggle was occuring on the wrong row if
     the view was sorted differently than the base model.


author: John Dennis <jdennis@redhat.com> - 1.8.11-1
changelog:
  - Fixes 216575, more translations
  - Replace delete and expunge menu labels with something more intuitive
  - add ability for browser to be restarted with identical window
     position and state
  - add pkg version and protocol version to logon handshake, test for
     compatibility between clint and server, prompt for restart
  - add non-modal restart dialog
  - add dialog to display traceback if sealert faults with an uncaught
     exception, try to limit invisible errors
  - fix return args on rpc method
  - add instance id to server


author: John Dennis <jdennis@redhat.com> - 1.8.13-1
changelog:
  - update translations

  - change SETroubleshootDatabase so it is optional if it's backed
     by a file, this fixes the problem of us littering temporary files
     when scanning logfiles which does not require persistence.

  - disable the view logfile menu item if no logfile has been opened

  - fix redundant log messages for case where there is no log file and
     the console flag is set. When there is no log file the logging
     module opens a console stream, thus the console stream produced
     by the console flag was redundant.

  - add username and password command line arguments
     rework startup logic so that all command line args are processed
     before we do any real work
   
  - rework the email preferences so that each email address can
     have a filter type associated with it.

     add a new filter_type "Ignore After First Alert" which filters
     after the first alert has been delivered

  - add UI for setting the email addresses alerts are sent to.
     Add menu item to edit email list, add email list dialog.
     Remove 'recipient' config file entry, now list is stored
     in seperate file. Add rpc to query and set the email list,
     the GUI calls this to get the current list from the server
     and set it in the server, it is the server which reads and 
     writes the file. Add 'enable' flag to each email entry.
     Modify how the server iterates over the email list when it
     receives an alert. When marking an alert as having been sent
     the username is the email address but with 'email:' prepended so
     as not to collide with non-email filtering options for the same user.


author: John Dennis <jdennis@redhat.com> - 1.8.14-1
changelog:
  - Fixes 221850
     plugin module loading was failing in python 2.5 with the message
     "SystemError: Parent module 'plugins' not loaded". This is due to a
     change in behavior between python 2.4 and 2.5, in python 2.4 the lack
     of a parent module was silently ignored. The fix is to load
     plugins.__init__ first.


author: John Dennis <jdennis@redhat.com> - 1.8.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - Fixes Bug# 224343 sealert's "Aditional Info:" text should be in white box
  - Fixes Bug# 224336 sealert should have GtkRadioButtons in menu View
  - Related: bug 224351
     Rewrite parts of logging support to better support changing output
     categories, output destinations. Now -v -V verbose works in sealert.
  - Resolves bug 225161, granted AVC's incorrectly identified as a denial
  - add alert count to status bar
  - add "Help" command to Help menu, opens web browser on wiki User FAQ
      [Dan Walsh  <dwalsh@redhat.com>]
  - Make setroubleshoot.logrotate correctly


author: John Dennis <jdennis@redhat.com> - 1.9.3-1
changelog:
  - install icon in /usr/share/icons, refer to icon by name using standard API
  - Fix performance problems in setroubleshoot browser log file scanning
  - Significant rewrite of data/view management code in setroubleshoot
     browser. data and view now cleanly separated, can easily switch
     between data views while maintaining selections, view state, with
     proper update of status information in status area
  - Resolves Bug# 227806: right click context menu resets selection
  - Logfile scans now operate in independent thread, proper asynchronous
     updates of browser during scan, browser used to appear to hang
  - Resolves Bug# 224340: Rewrite Menu/Toobar/Popup to use UIManger instead of glade
  - Add toobar support
  - Implement GUI to edit email recipient list in setroubleshoot browser
  - Added user help to setroubleshoot browser
  - Related Bug# 224343: Fix setroubleshoot browser to respond to desktop theme changes
  - improve traceback error reporting in sealert
  - rewrite AboutDialog, replacing glade version
  - Resolves bug 229849  Bug# 230115, Relates bug 221850: fix uuid code to resolve
     '_uuid_generate_random' is not defined error


author: Dan Walsh <dwalsh@redhat.com> - 1.9.4-1
changelog:
  - Remove disable_trans boolean
  - Check for paths in filesystem before suggesting chcon -R 
  - Remove default to listen on local ports


author: John Dennis <jdennis@redhat.com> - 1.9.6-1
changelog:
  - add avc_auparse.py, now has option to use audit parsing library instead of
     built-in audit parsing.
  - fix bug in log file scanning and detail display update
  - Resolves Bug# 238516, python pkg directory not owned


author: John Dennis <jdennis@redhat.com> - 1.9.7-1
changelog:
  - Resolves Bug# 241739, this bug is the lead bug for several bug reports,
     all consequences of the same problem, setroubleshootd/sealert when run
     in a non latin language environment because of incompatibilities in
     i18n encoding between components.


author: John Dennis <jdennis@redhat.com> - 1.10.0-1
changelog:
  - move all plugins and their translations to independent package
  - wrap XML generation inside try/except
  - correct how access list is obtained in avc_auparse.py
  - add try/except around top level of AnalyzeThread.run so exceptions
     in the thread get reported and the analysis thread does not just die.
  - also add try/except around LogfileThread.process_logfile
  - add new function assure_file_ownership_permissions()
  - server now forces it's database file permissions/ownership to be 0600 root:root
  - rpm now forces the server's database file permissions/ownership to be 0600 root:root
  - Resolves Bug #251545: Review Request: setroubleshoot-plugins - analysis plugins for setroubleshoot
  - clean up some other rpmlint warnings in setroubleshoot.spec
  - fix missing install of setroubleshoot icon and sym link to it
  - Resolves Bug #251551, setroubleshoot shows up in in wrong desktop menu
     also run desktop-file-install in rpm install
  - add /etc/dbus-1/system.d/setroubleshootd.conf dbus configuration file
  - Resolves Bug #250979, Bug #250932 Missing dependencies
  - Restore plugins/Makefile.am which got nuked somehow
  - remove dus.dbus_bindings.bus_name_has_owner(), deprecated as of F7
  - wrap rpm transactions in try/except


author: John Dennis <jdennis@redhat.com> - 1.10.2-1
changelog:
  - remove all copied code from test_setroubleshootd, now we import
     from setroubleshoot
   
  - export ClientConnectionHandler from rpc.py as a base class.
     Derive SetroubleshootdClientConnectionHandler and
     AuditClientConnectionHandler from ClientConnectionHandler.

  - add audisp_listen as test program

  - create setroubleshoot sym link in top devel directory pointing
     to src so import setroubleshoot.foo if PYTHONPATH=topdir

  - add get_option, convert_cfg_type to config.py.in so that one
     can pass optional dict to override config file settings

  - rewrite log_init() so it's easier for other programs to use it,
     fix the import logic concering log & config

  - remove log code from test_setroubleshoot, now just does import
     from setroubleshoot.
   
  - test_setroubleshootd can now handle audit records in both text
     and binary formats, can be selected by command line arg. It can now
     either output to clients connecting on a socket or to stdout. Can
     now optionally exit after N socket client connections.

  - remove non audit record lines from test data

  - remove config_init() and log_init() from package __init__.py
     It was the wrong place to call them, now call them when the
     process initializes before the first setroubleshoot imports

  - add parse_config_setting() and set_config() to config module
  - setroubleshootd now accepts -c --config command line arg
  - test_sectroubleshoot: add err defines & program_error exception
     add is_valid() tests to assure we read a valid audit record
     log the unrecognized line if not valid, clean up socket close()

  - Relates Bug #247056, update initscript to LSB standards
     Note: LSB initscripts in Fedora is not yet a resolved issue,
     the changes implemented were to add an LSB block and support
     the new LSB try-restart and force-reload commands. However
     the new /lib/lsb/init-functions are NOT currently used as this
     is the unstable part.


author: John Dennis <jdennis@redhat.com> - 1.10.3-1
changelog:
  - modify avc_audit.py to use new audit_data.py implementation

  - can listen for audit events on either /var/run/audit_events
     in bindary protocol mode or /var/run/audisp_events in
     text protocol mode


author: John Dennis <jdennis@redhat.com> - 1.10.5-1
changelog:
  - update code for command line log file scanning to work with
     new log file scanning code introduced for the browser.

  - update Bulgarian translation (Doncho N. Gunchev (gunchev@gmail.com))

  - update Polish translation (Piotr Drąg (raven@pmail.pl))

  - Resolves bug 239893: sealert wakes up very often
     This was caused by the use of threads and pygtk's thread signal
     handling.  The only use of threads in sealert was for log file
     scanning so that the UI would remain responsive during a
     scan. Threads in sealert have now been completely
     removed. Instead the scanning work is performed in a gobject idle
     function called from the main loop. The idle function is written
     as a python generator function which allows for the function to
     perform a small amount of work, save it's execution state and
     return. The next time the idle function is called from the main
     loop it resumes execution from it's last state until it decides
     to yield control again. This way the long running scan/analysis
     can be performed in small successive units of work during the
     time the application is otherwise idle and it does not interfere
     with the rest of the GUI event processing. Everything now occurs
     in an event loop, think of it as the applications process/thread
     scheduler whose event handlers execute time slices.

  - rewrote parts of the audit input pipeline to use generators
     instead of callbacks, thus permitting the logfile scanning code
     to yield control with more granularity. Also updated
     test_setroubleshootd and audisp_listen to use the new
     generator/yield logic.

  - rewrote the dialog used for scanning log files, progress bar
     updates are now in the dialog, the scan can be terminated part
     way through, errors from the scan are reported in pop-up dialog,
     one can only dismiss the dialog with success if the scan had
     been successfully run to completion, otherwise the user is only
     left with the option to cancel.

  - Relates bug 252035  bug 247469, setroubleshootd and sealert should
     exit if SELinux is disabled.

  - add utility functions escape_html() and unescape_html()

  - fix initial sort order in browser, track sort order in browser

  - modify AVC.get_path() to only return a value if the 'path' field is
     set, formerly it also considered the fields 'name' & 'file' which were
     incorrect. get_path() now also looks to see if the string begins with a
     slash for a fully qualified path, if not it looks to see if its a 
     pseudo path such as 'pipe[12345]' or 'socket[12345]' and if so strips out
     the instance information inside the brackets and returns just the type of 
     the pseudo path. This is done because we do not want path information
     in the signature to be unique for each instance of the denial.

  - modify the TimeStamp class to hide it's internal datetime member,
     remove the cmp() method, the internal __cmp__ will be automatically invoked.

  - require selinux policy version in spec file to allow system dbus use
   
  - Resolves bug 256601: audit2allow generates incorrect syntax when comma "," in
     denied list

  - update po i18n files

  - Add support for pruning database by age and size


author: John Dennis <jdennis@redhat.com> - 1.10.7-1
changelog:
  - Fix spec file requires for opening an HTML page
     In configure.ac search for xdg-open and htmlview in priority order,
     set variable html_browser_open to the one found, in spec file require
     xdg-utils for fedora and htmlview for RHEL.

  - add "Host" column in browser
     add "Toggle Column Visibility" menu to toggle display of any column on/off

  - Resolves bug 310261: setroubleshoot notifications aren't throttled

  - add support for AUDIT_EOE, end-of-event, if AUDIT_EOE immediately
     emit cached event. Disable timeouts used to flush events if
     AUDIT_EOE has been seen.


author: <jdennis@redhat.com> - 2.0.0-1
changelog:
  - prepare for v2 test release
  - Completed most work for version 2 of setroubleshoot, prepare for test release
  - import Dan's changes from the mainline
     primarily allow_postfix_local_write_mail_spool plugin
  - escape html, fix siginfo.format_html(), siginfo.format_text()
  - add async-error signal
  - change identity to just username
  - make sure set_filter user validation works and reports error in browser
  - fix generation of line numbers and host when connected to audispd
  - add permissive notification, resolves bug 231334: Wording doesn't change for permissive mode
  - resolves bug 244345: avc path information incomplete
  - get the uid,gid when a client connects to the server
  - set_filter now verifies the filter is owned by the user,
  - resolves bug 288261: setroubleshoot lack of user authentication
  - remove filter options which weren't being used
  - change '@' in audit data hostname to '.'
  - remove restart dialog
     resolves bug 321171: sealert's dialog after update is higly confusing
  - fix rpc xml arg
  - fix handling of host value
  - tweak what fields are in signature
  - move data items which had been in 'avc' object into siginfo
  - clean up siginfo format
  - large parts of new audit data pipeline working, checkpoint
  - fix duplicate xml nodes when generating xml tree
  - audit event can now be xml serialized
  - switch from using int's for audit record types to strings
  - avoid conversion headaches and possibilty of not being
     able to convert a new unknown type
  - add logic to allow XmlSerialize to be subclassed and init_from_xml_node to be overridden
  - add support to xml serialize classes AuditEventID, AuditEvent, AuditRecord
  - use metaclass for xml class init
  - start adding xml support to audit data classes
  - Use metaclass to wrap class init
  - move xml serialization code from signature.py to xml_serialize.py
  - simplify aspect of the serialization code
  - add unstructured xml mapping, each xml element name has its content mapped to obj.name
  - modify xml serialization to be driven by xml contents
  - general clean up
  - checkpoint conversion of serialization to use metaclasses
  - clean up class/data specifications for XmlSerializable
  - add support for client rpc testing
  - add changelog entry
  - add SubProcess class to setroubleshootd in preparation to
  - run daemon as subprocess so we can gather results and
     compare them to the expected data we sent
  - rewrite all plugins to use new v2 audit data
  - add SubProcess class to setroubleshootd in preparation to 
            run daemon as subprocess so we can gather results and
            compare them to the expected data we sent
  - add new test support: add config section 'test', add boolean 'analyze' to
     config test section, add class TestPluginReportReceiver which is installed
     if test.analyze is True, it prints analysis report. In test_setroubleshootd
     send AUDIT_EOE to assure sequential event processing so analysis results
     have same ordering as events that are sent by test_setroubleshootd
  - alert signatures now include host information, alerts will be grouped by host


author: <jdennis@redhat.com> - 2.0.1-1
changelog:
  - make connection error message persist instead of timeout in browser
  - updated Brazilian Portuguese translation: Igor Pires Soares <igor@fedoraproject.org>
  - implement uid,username checks
  - rpc methods now check for authenticated state
  - fix html handling of summary string
  - add 'named' messages to status bar, make sure all messages either timeout or are named
  - fix ordering of menus, resolves bug 427418
  - add 'hide quiet' to browser view filtering, resolves bug 427421
  - tweak siginfo text formatting
  - add logon to SECommandLine so that sealert -l <local_id> works


author: <jdennis@redhat.com> - 2.0.2-1
changelog:
  - Resolve bug 428252: Problem with update/remove old version
  - Add code to validate xml database version, if file is incompatible it is not read,
     the next time the database is written it will be in the new version format.
     This means the database contents are not preserved across database version upgrades.
  - Remove postun trigger from spec file used to clear database between incompatible versions
     the new database version check during database read will handle this instead
  - bullet proof exit status in init script and rpm scriptlets
  - Resolve bug 247302: setroubleshoot's autostart .desktop file fails to start under a KDE session
  - Resolve bug 376041: Cannot check setroubleshoot service status as non-root
  - Resolve bug 332281: remove obsolete translation
  - Resolve bug 344331: No description in gnome-session-properties
  - Resolve bug 358581: missing libuser-python dependency
  - Resolve bug 426586: Renaming translation po file from sr@Latn to sr@latin
  - Resolve bug 427260: German Translation
  - enhance the sealert man page


author: <jdennis@redhat.com> - 2.0.4-1
changelog:
  - Resolve bug 430421: audit_listener_database.xml:3029: parser error in xmlParseDoc()
    rewrite the audit_msg_decode logic to beaware of specific audit fields
  - add new template substitution $SOURCE, a friendly name, $SOURCE_PATH still exists
    and is the full path name of $SOURCE, also add 'source' attribute in AVC class,
    fix how source and source_path are computed from audit's comm and exe fields
  - fix the computation of tpath to also look at the audit name field, formerly
    it had only been looking at path, fixes <Unknown> showing up for many targets
  - add exception handling around xml file writes (Alan Cox reports problem when /var is full)
  - add testing documentation
  - Resolve bug 430845: obsolete URL in setroubleshoot package description
  - Resolve bug 428960: Permissive message makes no sense.
  - init script now allows extra test options
  - show_browser() now opens and raises the window (e.g. presents) rather than just
    assuring it's realized (e.g. iconified, or hidden)
  - sealert -l message in syslog converts from html before writing to syslog
  - Resolve bug 320881: export setroubleshoot_selinux_symposium in PDF format
  - add code to verify all async rpc's have been cleared from the async rpc cache
  - add code to set a default rpc method return if the interface does not define a callbak
    (methods which did not have a callback were not returning anything and hence were no
     getting cleared from the cache)


author: John Dennis <jdennis@redhat.com> - 2.0.5-1
changelog:
  - allow sealert -l lookup to accept * wildcard
  - add a few more audit fields needing special decode handling


