# changelog

author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-1
changelog:
  - update to the final 1.1.1 version
  - for consistent support of security policies we build
    RC4 support in TLS (not default) and allow SHA1 in SECLEVEL 2
  - use only /dev/urandom if getrandom() is not available
  - disable SM4


author: Josef Ridky <jridky@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6 (#1468062)
  - Fix issue with capital letters in commands in manpage (#1468984)


author: Kamil Dudka <kdudka@redhat.com> - 2.8.9-0.17.dev16
changelog:
  - fix rpmlint warnings
  - do not depend on perl
  - update upstream project URL
  - update to the latest upstream pre-release


author: Kamil Dudka <kdudka@redhat.com> - 2.8.9-0.23.dev19
changelog:
  - do not require 'rsh' installed at build time (#1581747)
  - update to the latest upstream pre-release


author: - Andy Walsh <awalsh@redhat.com> - 6.2.0.109-4
changelog:
  - Fixed a bug in the vdo script which would fail with a python backtrace
    when the script was invoked with no arguments.
  - Resolves: rhbz#1581204
  - Modified the vdo script to not allow creation of a VDO device on top of
    an already running VDO device.
  - Made the ordering of the output of vdo list stable.
  - Resolves: rhbz#1584823
  - Fixed issues with UDS on platforms where "char" is an unsigned type.
  - Converted UDS to use GCC's built-in macros for determining endianness.
  - Fixed a bug in the --vdoLogLevel option to the vdo python script when
    using python 3
  - Resolves: rhbz#1586043


author: Christopher Snyder <csnyder@redhat.com> 1.23.8-28
changelog:
  - 1668152: Remove the Select SLA screen from initial-setup
    (nmoumoul@redhat.com)
  - 1676982: Do not make duplicate sync calls on syspurpose show
    (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.23.8-34
changelog:
  - 1666845: Always submit empty string for reset (csnyder@redhat.com)
  - 1666845: Always submit empty string for reset (csnyder@redhat.com)


author: Kalev Lember <klember@redhat.com> - 1.14.91-1
changelog:
  - Update to 1.14.91
  - Add new libwayland-egl subpackage and obsolete mesa-libwayland-egl
  - Remove ldconfig scriptlets


author: Petr Pisar <ppisar@redhat.com> - 1:2.0129-5
changelog:
  - Fix CVE-2017-10672 (use-after-free by controlling the arguments to
    a replaceChild call) (bug #1470205)


author: Kamil Dudka <kdudka@redhat.com> - 2.17-5
changelog:
  - do not update currency.units from network during build
  - units_cur: validate rate data from server (#1598913)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-8
changelog:
  - Add %_isa to -devel base package dependency.
  - Headers get installed by "make install", copying them from the HTML
    doc headers dir is not necessary.
  - Configure build with --disable-static.
  - Drop unneeded spec stuff (buildroot def, removal, clean, pkgconfig dep).
  - Using %defattr is not needed anymore.
  - Deduplicate documentation files in unversioned docdir (#1001276).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-9
changelog:
  - Fix HTML documentation installation location.
  - Replace CUnit-2.1-3-src.tar.bz2 tarball, which really
    is 2.1-2 in disguise according to configure.in, with 2.1-3 as
    published on 2014-04-24.
  - BR libtool
  - Run autoreconf instead of autoconf.
  - Drop --enable-curses because without BuildRequires ncurses-devel it
    would disable itself automatically (and if it were enabled, test programs
    would need to link with ncurses explicitly).


author: Sergio Correia <scorreia@redhat.com> - 2.8.0-5.1
changelog:
  - Resolves: CVE-2019-15605 http-parser: nodejs: HTTP request
                              smuggling using malformed Transfer-Encoding header


author: Dominik Mierzejewski <rpm[AT]greysector.net> 5.0.3-4
changelog:
  - fix FTBFS due to doc files in the wrong place (#1307717)
  - use license macro
  - drop unnecessary defattr declarations


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.39-1
changelog:
  - Resolves: #1684580 - Rebase libtevent to version 0.9.36 for Samba
  - Resolves: #1597318 - libtevent uses Python 2 to build
  - Resolves: #1567139 - libtevent: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com>
changelog:
  - Remove the python2 subpackages on upgrade
  - Resolves: #1567139 - libtevent: Drop Python 2 subpackage from RHEL 8


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2.4-9
changelog:
  - Python 2 binary package renamed to python2-dbus
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2.4-10
changelog:
  - Also add Provides for the old name without %_isa
  - Use %python_provide for the python3 subpackage and drop manual Provide which
    conflicts with %python_provide in the python2 subpackage.


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.06-15
changelog:
  - Add Test-Taint-1.06-Test-taintedness-on-X-instead-of-environment-variabl.patch.
    (Address RHBZ#1413022, F26FTBFS)


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-19
changelog:
  - bz1602447 - Please review important issues found by covscan in
    "autofs-5.1.4-18.el8+7"
    - covarity fixes.
  -Resolves: rhbz#1602447


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-20
changelog:
  - bz1612565 - Man page scan results for autofs
    - fix program usage message.
  - Resolves: rhbz#1612565


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-21
changelog:
  - bz1611866 - autofs reload is unable to activate new map entries,
    it is autofs restart which shows new map entries.
    - fix update_negative_cache() map source usage.
  - bz1613621 - [autofs]Removed entries still can be accessed
    - mark removed cache entry negative.
  - Resolves: rhbz#1611866 rhbz#1613621


author: Ian Kent <ikent@redhat.com> - 5.1.4-22
changelog:
  - bz1613630 - On Red Hat 7.x systems if you try to access local
    filesystems using the automounter through /net then the shell
    and mount could lock up *if* the filesystem your accessing is
    double exported.
    - set bind mount as propagation slave.
    - add master map pseudo options for mount propagation.
  - Resolves: rhbz#1613630


author: Ian Kent <ikent@redhat.com> - 5.1.4-23
changelog:
  - bz1615782 - autofs master map age is incorrectly set
    - fix age setting at startup.
  - Resolves: rhbz#1615782


author: Ian Kent <ikent@redhat.com> - 5.1.4-24
changelog:
  - bz1621938 - autofs can no longer get maps from IPA server
    - fix use after free in parse_ldap_config().
  - Resolves: rhbz#1621938


author: Ian Kent <ikent@redhat.com> - 5.1.4-26
changelog:
  - bz1630190 - yum update hanging while restarting autofs
    - fix incorrect locking in sss lookup.
  - bz1630194 - after upgrading to autofs-5.0.7-83.el7.x86_64 on
    RHEL 7 clients, amd maps /defaults key mount options are no
    longer working
    - fix amd parser opts option handling.
  - Resolves: rhbz#1630190 rhbz#1630194


author: Ian Kent <ikent@redhat.com> - 5.1.4-27
changelog:
  - bz1638487 - Drop dependency on hesiod
    - better handle hesiod support not built in.
    - exclude hesiod support from configure options
    - remove hesiod depends.
  - Resolves: rhbz#1638487


author: Ian Kent <ikent@redhat.com> - 5.1.4-28
changelog:
  - bz1638487 - Drop dependency on hesiod
    - actually update the spec file with the hesiod removal.
  - Related: rhbz#1638487


author: Ian Kent <ikent@redhat.com> - 5.1.4-29
changelog:
  - bz1654541 - autofs crash when parsing master map
    - fix hesiod string check in master_parse().
  - Resolves: rhbz#1654541


author: Chris Leech <cleech@redhat.com> - 1.0.1-3.git986eb2e
changelog:
  - 1303439 package should not attempt to own /etc/bash_completion.d
  - fix more build warning in rawhide


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.34-1
changelog:
  - update to 1.34 (CVE-2017-14062)
  - include soname in file list
  - use macros for ldconfig
  - add gcc to build requirements


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.34-2
changelog:
  - fix ABI compatibility with libidn-1.33 and earlier (#1566414 #1573961)
  - add texinfo to build requirements


author: Rex Dieter <rdieter@fedoraproject.org> - 5:2.0.14-7
changelog:
  - avoid linking all guile-devel consumers to libgc
  - BR: gcc
  - use %{make_build},%{make_install}
  - %check: make non-fatal


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3
changelog:
  - Remove CVE-2018-3639 mitigation due to performance regression and
      OpenJDK position on speculative execution vulnerabilities.
      https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4
changelog:
  - Revert SSBD removal for now, until appropriate messaging has been decided.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b05.
  - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
  - Revise b05 snapshot to include JDK-8236178.
  - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b07.
  - Switch to GA mode for final release.
  - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b08.
  - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions.
  - Resolves: rhbz#1785753


author: Petr Pisar <ppisar@redhat.com> - 4.15.2-10
changelog:
  - License corrected to "GPLv3+ and (GPLv3+ and BSD) and (LGPLv3+ or BSD) and
    LGPLv2+ and Public Domain and GFDL"


author: Phil Sutter - 1.8.2-2
changelog:
  - Point out that nftables-variants are installed in package description
  - Fix for deleting arptables rules by referencing them


author: Phil Sutter - 1.8.2-4
changelog:
  - Fix iptables init script for nftables-backend
  - Drop references to unsupported broute table from ebtables man page
  - xtables: Don't use native nftables comments


author: Phil Sutter - 1.8.2-6
changelog:
  - Improve performance with large rulesets
  - Fix for changes in arptables output
  - Fix for inserting rules at wrong position
  - Fix segfault when comparing rules with standard target
  - Fix ebtables output for negated values
  - Document missing arptables FORWARD chain


author: Karsten Hopp <karsten@redhat.com> - 2.0.0-37git}
changelog:
  - use versioned build requirement on pkgconfig(openssl) to prevent using
    compat-openssl10-devel instead of openssl-devel


author: Simone Caronni <negativo17@gmail.com> - 2:2.0.0-39.20180314gitf8baeb7
changelog:
  - Update to latest snapshot.
  - Fixes connection to RDP servers with the latest Microsoft patches:
    https://github.com/FreeRDP/FreeRDP/issues/4449


author: Miroslav Lichvar <mlichvar@redhat.com> 3.2-2
changelog:
  - fix chronyc getting stuck in infinite loop after clock step
  - don't allow packaging without vendor zone
  - suggest ntp-refclock
  - remove obsolete dependency
  - update description


author: Miroslav Lichvar <mlichvar@redhat.com> 3.3-2
changelog:
  - move pidfile to /var/run/chrony to allow chronyd to remove it on exit
    (#1584585)
  - avoid blocking in getrandom system call (#1592425)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.3-3
changelog:
  - fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2
    (#1614800)
  - add workaround for late reload of unit file (#1614751)


author: Tomas Orsava <torsava@redhat.com> - 4.5.1-7
changelog:
  - New subpackage platform-python-coverage without files from /usr/bin/*
  - python3-coverage contains only files from /usr/bin/* and depends
    on platform-python-coverage
  - Resolves: rhbz#1658674


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.2.11-24
changelog:
  - Python 2 binary package renamed to python2-libieee1284
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.23-4
changelog:
  - Fix tests build with fresh glibc that now provides struct statx in sys/stat.h.
  - Resolves #1611749.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-2
changelog:
  - Add transition for strace32 package pn those architectures that
    provided it in RHEL 7 (ppc64 and s390x).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-4
changelog:
  - Sync up thread handling unfairness fix with the upstream version.
  - Fix "xlat_idx: Unexpected xlat value 0 at index ..." messages (#1660759).
  - Remove "ptrace(SYSCALL): No such process" messages (#1662936).
  - Wire up rseq and kexec_file_load on aarch64 (#1676045).


author: Pavla Kratochvilova <pkratoch@redhat.org> - 0.7.4-1
changelog:
  - soname bump to "1"
  - incompatible API changes:
    * bindings: Selection.flags is now an attribute
    * repodata_lookup_num now works like the other lookup_num functions
  - new functions:
    * selection_make_matchsolvable
    * selection_make_matchsolvablelist
    * pool_whatmatchessolvable
    * repodata_search_arrayelement
    * repodata_lookup_kv_uninternalized
    * repodata_search_uninternalized
    * repodata_translate_dir
  - new repowriter interface to write solv files allowing better
    control over what gets written
  - support for filtered file lists with a custom filter
  - dropped support of (since a long time unused) REPOKEY_TYPE_U32
  - selected bug fixes:
    * fix nasty off-by-one error in repo_write
    * do not autouninstall packages because of forcebest updates
    * fixed a couple of null pointer derefs and potential memory
      leaks
    * made disfavoring recommended packages work if strong recommends
      is enabled
    * no longer disable infarch rules when they don't conflict with
      the job
    * repo_add_rpmdb: do not copy bad solvables from the old solv file
    * fix cleandeps updates not updating all packages
  - new features:
    * support rpm's new '^' version separator
    * support set/get_considered_list in bindings
    * new experimental SOLVER_FLAG_ONLY_NAMESPACE_RECOMMENDED flag
    * do favor evaluation before pruning allowing to (dis)favor
      specific package versions
    * bindings: support pool.matchsolvable(), pool.whatmatchessolvable()
      pool.best_solvables() and selection.matchsolvable()
    * experimental DISTTYPE_CONDA and REL_CONDA support


author: Kamil Dudka <kdudka@redhat.com> - 7.43.0-15
changelog:
  - enable vsftpd-based tests
  - run the test-suite for Python 3 only
  - do not disable TLS-SRP test because it is now supported by OpenSSL in Fedora


author: Cole Robinson <crobinso@redhat.com> - 1.18.0-2
changelog:
  - Fix rdma deps and don't restrict archs
  - Add --disable-werror to fix gcc8 build (bz #1556044)
  - Spec file cleanups (bz #1483290)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-5.el8
changelog:
  - libiscsi-iser_rcv_completion-unify-error-handling.patch [bz#1634541]
  - libiscsi-iser-fix-posting-of-receive-descriptors.patch [bz#1634541]
  - libiscsi-sync-remove-unnecessary-checks.patch [bz#1634541]
  - libiscsi-do-not-warn-for-strncpy.patch [bz#1634541]
  - libiscsi-avoid-fallthrough.patch [bz#1634541]
  - libiscsi-avoid-truncation-when-logging-message-that-includes-.patch [bz#1634541]
  - Resolves: bz#1634541
    (Fix important coverity issues (libiscsi))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> -
changelog:
  - libiscsi-fix-connection-to-LUN-with-IPv6-address.patch [bz#1597942]
  - Resolves: bz#1597942
    (Qemu-kvm fails to connect to iscsi LUN by IPV6 address)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-7.el8
changelog:
  - libiscsi-redhat-Remove-disable-werror-from-spec-file.patch [bz#1581025]
  - Resolves: bz#1581025
    (Remove --disable-werror from spec file)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.44-3
changelog:
  - Fix sg_turs help invocation in an old mode (#1683343)
  - Fix sg_raw printing error about device not specified on version request (#1627657)


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 2.21-8
changelog:
  - Fix invalid [ ... ] syntax which results in complaints by zsh.
    https://bugzilla.redhat.com/show_bug.cgi?id=1546221
  - Remove pointless Group tag, buildroot cleaning and %defattr.


author: Jeff Layton <jlayton@redhat.com> - 6.7-5
changelog:
  - more updates, switch to rst for manpages
  - update mount.cifs manpage to describe defaults better (BZ#1474539)


author: Kalev Lember <kalevlember@gmail.com> - 0.7.93-1
changelog:
  - Update to 0.7.93
  - Tighten deps with the _isa macro
  - Don't manually require pkgconfig; rpmbuild generates this automatically
  - Use license macro for the COPYING file


author: Kamil Dudka <kdudka@redhat.com> - 8.29-5
changelog:
  - drop BR for bison, which is not used during the build
  - make sure that parse-datetime.{c,y} ends up in debuginfo (#1555079)
  - fix build failure with glibc-2.28


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.26-10
changelog:
  - Improve output related to SSLv3 disabling
    Resolves: #1331702
  - Minor fixes in options, usage message and man page


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.26-17
changelog:
  - Remove unnecessary python-devel dependency
    (disables build of fetchmailconf, but we don't pack it into rpm anyway)
    Resolves: #1591710


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> 1.0.9-1
changelog:
  - update to 1.0.9
  - use license macro
  - tighten file list wildcards
  - switch to https for source URL


author: Björn Esser <fedora@besser82.io> - 0.3.3-12
changelog:
  - Rebuilt for /lib64/libglog.so: undefined reference to
    'gflags::FlagRegisterer::FlagRegisterer'-madness


author: Lubomir Rintel <lkundrak@v3.sk> - 1:2.6-11
changelog:
  - hostapd: Avoid key reinstallation in FT handshake (CVE-2017-13082)
  - Fix PTK rekeying to generate a new ANonce
  - Prevent reinstallation of an already in-use group key and extend
    protection of GTK/IGTK reinstallation of WNM-Sleep Mode cases
    (CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081,
    CVE-2017-13087, CVE-2017-13088)
  - Prevent installation of an all-zero TK
  - TDLS: Reject TPK-TK reconfiguration
  - WNM: Ignore WNM-Sleep Mode Response without pending request
  - FT: Do not allow multiple Reassociation Response frames


author: Jiří Klimeš <blueowl@centrum.cz> - 1:2.6-12
changelog:
  - Fix crash when using MACsec without loaded macsec.ko (rh #1497640)
  - Enable Fast BSS Transition for station mode (rh #1372928)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-15
changelog:
  - Disable build of wpa_gui (rh #1542234)
  - Fix build issue with latest kernel headers (rh #1582604)
  - Disable WEXT (rh #1537143)
  - Fix memory leak when macsec MKA/PSK is used (rh #1582511)
  - Fix authentication failure when the MAC is updated externally (rh #1582508)
  - Let the kernel discard EAPOL if packet type is PACKET_OTHERHOST (rh #1582501)


author: Paul Howarth <paul@city-fan.org> - 2:1.44-1
changelog:
  - Update to 1.44
    - Added a stringify() method, which does exactly the same thing as
      stringification overloading does (GH#58)
    - Added an is_last_day_of_month() method to indicate whether or not an object
      falls on the last day of its month (GH#60)


author: Paul Howarth <paul@city-fan.org> - 2:1.46-1
changelog:
  - Update to 1.46
    - Fixed the formatting for the CLDR "S" symbol, which in some cases would
      round up to 1 instead of truncating a value, e.g. the "SSS" symbol would
      format 999,999,999 nanoseconds as "1.000" (GH#71)


author: Paul Howarth <paul@city-fan.org> - 2:1.47-1
changelog:
  - Update to 1.47
    - DateTime::Duration->multiply now only allows integer multipliers (GH#73)
    - Added is_last_day_of_quarter() and is_last_day_of_year() methods (GH#72)
    - When an exception was thrown while adding a duration, the object could be
      left in a broken state with the duration partially applied; subsequent
      addition or subtraction would produce the wrong results (GH#74)
  - Add patch to support use without Sub::Util (GH#77, GH#78)


author: Paul Howarth <paul@city-fan.org> - 2:1.48-1
changelog:
  - Update to 1.48
    - The last release would die if Sub::Util was not available, but this should
      just be an optional requirement (GH#77, GH#78)


author: Paul Howarth <paul@city-fan.org> - 2:1.49-1
changelog:
  - Update to 1.49
    - Updated the ppport.h with the latest version of Devel::PPPort, which fixes
      a compilation warning when compiling with 5.27.11 (GH#81)
  - Switch upstream from search.cpan.org to metacpan.org


author: Paul Howarth <paul@city-fan.org> - 2:1.50-1
changelog:
  - Update to 1.50
    - The %F strftime pattern incorrectly zero-padded numbers less than four
      digits; according to POSIX::strftime, this should output the year as-is
      without padding (GH#83)


author: Phil Sutter - 1:0.9.0-4
changelog:
  - Add fixes for covscan report
  - Fix for ECN keyword in LHS of relational
  - Update meta pkt_type value description
  - Fix for segfault with JSON output if xt expression is present
  - Add missing nft suffix to files included from /etc/sysconfig/nftables.conf
  - Use native JSON API in nft monitor


author: Miro Hrončok <mhroncok@redhat.com> - 0.13-1
changelog:
  - Updated to 0.13
  - Added python3 and python2 subpackages
  - Add --with tests
  - Modernize spec
  - Remove merged patch
  - Update upstream URL


author: Lumír Balhar <lbalhar@redhat.com> - 0.14-3
changelog:
  - Backport patch from upstream/rhel7 which allows pifconfig to show
    multiple IPv4 addresses for each interface
  - Move patches to dist-git
  - Resolves: rhbz#1652174


author: Karsten Hopp <karsten@redhat.com> - 3.20.0-6
changelog:
  - apply upstream patch from Jonh Wendell to fix g_ptr_array_find types and make it
    build with latest glib2


author: Nils Philippsen <nils@redhat.com> - 1.2.1-3
changelog:
  - drop requirements on cmake, pkgconfig and rather own the directories for the
    files augmenting these packages


author: Andreas Schneider <asn@redhat.com> - 1.2.2-1
changelog:
  - Update to version 1.2.2:
    * Added support for fork'ed and then exec'ed processes
    * Added support for Alpha


author: Andreas Schneider <asn@redhat.com> - 1.2.4-1
changelog:
  - Update to version 1.2.4
    * Added deadlock workaround for glibc < 2.24
    * Fixed a possible deadlock bug if uid_wrapper is turned off
    * Logging is always turned on now
    * Fixed a memory leak
    * Limited number of groups during fork+exec


author: Pavel Raiskup <praiskup@redhat.com> - 1.2.11-1
changelog:
  - latest upstream release (rhbz#1409372)
  - cleanup rpmlint
  - revert fix for rhbz#985344
  - requires with %_isa tag
  - drop zlib Z_BLOCK flush patch (rhbz#1417355)


author: Jakub Martisko <jamartis@redhat.com> - 0.13.68-3
changelog:
  - Fix CVEs 2018-7725, 2018-7726, 2018-7727, 2018-6484, 2018-6869 
  - Resolves: 1555082
  - Resolves: 1545818


author: Jakub Martisko <jamartis@redhat.com> - 0.13.68-6
changelog:
  - Fix multilib regression by adding a 32bit version of the multilib patch
  - Properly bump the release number in the previous changelog message
  - Resolves: #1638337


author: Francesco Giudici <fgiudici@redhat.com> - 1.2.8-0.1
changelog:
  - Update to latest development snapshot of NetworkManager-libreswan 1.2.8
  - Introduced IKEv2 support (rh #1557035)
  - Introduced support to more Libreswan properties (rh #1557035)
  - Updated translations


author: Miroslav Lichvar <mlichvar@redhat.com> 6.0-14.20170916
changelog:
  - update to 6.0-20170916 (CVE-2017-13728 CVE-2017-13729 CVE-2017-13730
    CVE-2017-13731 CVE-2017-13732 CVE-2017-13733 CVE-2017-13734)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-5.20180224
changelog:
  - fix crash in parsing of terminfo use capability (CVE-2018-10754)
  - add gcc-c++ to build requirements


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-147.6.1.el8_1]
changelog:
  - [crypto] crypto: chelsio - count incomplete block in IV (Jonathan Toppins) [1798527 1725813]
  - [crypto] crypto: chelsio - Fix softlockup with heavy I/O (Jonathan Toppins) [1798527 1725813]
  - [crypto] crypto: chelsio - Fix NULL pointer dereference (Jonathan Toppins) [1798527 1725813]
  - [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1798381 1757525]
  - [mm] mm/page-writeback.c: don't break integrity writeback on ->writepage() error (Christoph von Recklinghausen) [1797962 1782117]
  - [lib] crc-t10dif: crc_t10dif_mutex can be static (Vladis Dronov) [1797961 1769462]
  - [lib] crc-t10dif: Allow current transform to be inspected in sysfs (Vladis Dronov) [1797961 1769462]
  - [lib] crc-t10dif: Pick better transform if one becomes available (Vladis Dronov) [1797961 1769462]
  - [crypto] api - Introduce notifier for new crypto algorithms (Vladis Dronov) [1797961 1769462]
  - [block] blk-mq: make sure that line break can be printed (Ming Lei) [1797960 1741462]
  - [block] blk-mq: avoid sysfs buffer overflow with too many CPU cores (Ming Lei) [1797960 1741462]
  - [scsi] hpsa: update driver version (Joseph Szczypek) [1797519 1761968]
  - [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1797519 1761968]
  - [arm64] arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Handle erratum 1418040 as a superset of erratum 1188873 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: errata: Add workaround for Cortex-A76 erratum #1463225 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Kconfig: Tidy up errata workaround help text (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Add part number for Neoverse N1 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (Mark Salter) [1797518 1757828]
  - [arm64] arm64: arch_timer: avoid unused function warning (Mark Salter) [1797518 1757828]
  - [arm64] arm64: Add workaround for Cortex-A76 erratum 1286807 (Mark Salter) [1797518 1757828]
  - [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1796490 1758605]
  - [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1796490 1758605]
  - [block] fix memleak of bio integrity data (Ming Lei) [1795338 1779898]
  - [powerpc] xive: Prevent page fault issues in the machine crash handler (Diego Domingos) [1795337 1756116]
  - [scsi] scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (Tomas Henzl) [1795335 1726251]
  - [powerpc] powerpc/perf: Disable trace_imc pmu (Steve Best) [1794061 1785573]
  - [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: handle skb allocation error gracefully (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: drop unwanted packets earlier in RX path (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: support per-frame invalidation (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: gather more detailed RX dropped/error statistics (Philipp Rudo) [1794059 1781085]
  - [s390] s390/net: Mark expected switch fall-throughs (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: consolidate skb RX processing in L3 driver (Philipp Rudo) [1794059 1781085]
  - [s390] s390/qeth: remove RX seqno in skb->cb (Philipp Rudo) [1794059 1781085]
  - [powerpc] kvm: ppc: book3s hv: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] 64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1794056 1777686] {CVE-2019-18660}
  - [firmware] efi/memreserve: Register reservations as 'reserved' in /proc/iomem (Bhupesh Sharma) [1792200 1772730]
  - [firmware] efi/memreserve: deal with memreserve entries in unmapped memory (Bhupesh Sharma) [1792200 1772730]
  - [s390] s390/cpum_sf: save TOD clock base in SDBs for time conversion (Philipp Rudo) [1792198 1743504]
  - [s390] s390/sclp: Fix bit checked for has_sipl (Philipp Rudo) [1791408 1748347]
  - [scsi] qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1790350 1782598]
  - [scsi] qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1790350 1782598]
  - [scsi] qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1790350 1782598]
  - [powerpc] powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction (Gustavo Duarte) [1788862 1750653] {CVE-2019-15030}
  - [powerpc] powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts (Gustavo Duarte) [1791630 1750653] {CVE-2019-15031}
  - [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1788206 1753031]
  - [scsi] qla2xxx: call dma_free_coherent with correct size in all cases in qla24xx_sp_unmap (Himanshu Madhani) [1788206 1753031]
  - [fs] devpts_pty_kill(): don't bother with d_delete() (Eric Sandeen) [1783959 1772718]
  - [fs] devpts: always delete dcache dentry-s in dput() (Eric Sandeen) [1783959 1772718]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-147.7.1.el8_1]
changelog:
  - [hid] hiddev: do cleanup in failure of opening a device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
  - [hid] hiddev: avoid opening a disconnected device (Benjamin Tissoires) [1803458 1803460] {CVE-2019-19527}
  - [nvme] nvmet: fix discover log page when offsets are used (Gopal Tiwari) [1801216 1745836]
  - [netdrv] ibmvnic: Serialize device queries (Steve Best) [1794060 1778037]
  - [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1794060 1778037]
  - [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1794060 1778037]
  - [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1794060 1778037]
  - [netdrv] ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (Steve Best) [1794060 1778037]
  - [tools] selftests/powerpc: Fix compile error on tlbie_test due to newer gcc (Desnes Augusto Nunes do Rosario) [1794058 1755707]
  - [tools] selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue (Desnes Augusto Nunes do Rosario) [1794058 1755707]
  - [powerpc] powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (Desnes Augusto Nunes do Rosario) [1794058 1755707]
  - [powerpc] powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (Desnes Augusto Nunes do Rosario) [1794058 1755707]
  - [powerpc] powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions (Desnes Augusto Nunes do Rosario) [1794058 1755707]


author: Peter Jones <pjones@redhat.com> - 15-1
changelog:
  - Update to efibootmgr 15
  - Make efibootmgr use EFIDIR / efibootmgr.efidir like fwupdate does
  - make --loader default build-time configurable
  - sanitize set_mirror()/get_mirror()
  - Add support for parsing loader options as UCS2
  - GCC 7 fixes
  - Don't use -fshort-wchar since we don't run on EFI machines.
  - Also rebuild for efivar-31-1.fc26 to get symbol versioning right.
    Resolves: rhbz#1468841


author: Tomas Popela <tpopela@redhat.com> - 2:3.28.1-3
changelog:
  - Add the Quit entry to the app menu
  - Handle Ctrl+Q shortcut for quitting the application
  - Resolves: rhbz#1638876


author: Kalev Lember <klember@redhat.com> - 2.38.1-1
changelog:
  - Update to 2.38.1
  - Use make_install macro
  - Set minimum versions for required libraries
  - Tighten -devel deps with the _isa macro


author: Paul Howarth <paul@city-fan.org> - 0.015-1
changelog:
  - Update to 0.015
    - Port to Perl 5.19.4, where the C type of array indices has changed
    - Update to accommodate PERL_OP_PARENT builds of Perl 5.21.11 or later
      (which is the default from Perl 5.25.1)
    - Trigger custom op generation via Devel::CallChecker rather than by hooking
      the underlying op checker
    - Update test suite not to rely on . in @INC, which is no longer necessarily
      there from Perl 5.25.7
    - No longer include a Makefile.PL in the distribution
    - Correct dynamic_config setting to 0
    - Use boolSV() where appropriate in XS code
    - Use cBOOL() where appropriate
    - Consistently use THX_ prefix on internal function names
    - Include META.json in distribution
    - Add MYMETA.json to .cvsignore
    - Convert .cvsignore to .gitignore
    - Update for changed S_croak_xs_usage() prototype in ExtUtils::ParseXS 3.30,
      requiring the new version of that module in order to build the XS
      implementation
    - In documentation, use four-column indentation for all verbatim material
    - In META.{yml,json}, point to public bug tracker
    - Correctly classify ExtUtils::ParseXS dependency as a recommendation rather
      than a requirement
    - Avoid some compiler warnings
  - Classify buildreqs by usage
  - Drop legacy spec file elements: %defattr and Group: tag
  - Make %files list more explicit


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.110-12.el8
changelog:
  - Pass in the distro-provided CFLAGS and LFLAGS. (Jeff Moyer)
  - Get rid of -nostartfiles -nostdlib (Jeff Moyer)
  - Resolves: rhbz#1630578


author: Christian Heimes <cheimes@redhat.com> - 3.0.0-0.2.b2
changelog:
  - New upstream release 3.0.0b2 (RHBZ #1496470)
  - Require OpenLDAP with fix for NSS issue (see #1520990)


author: Vit Mojzis <vmojzis@redhat.com> - 4.2.1-3
changelog:
  - Use 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS instead of -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection


author: Jindrich Novy <jnovy@redhat.com> - 0.7.2-5
changelog:
  - be sure to work properly also with older rhel8 kernels, thanks to Giuseppe Scrivano
  - Resolves: #1803495


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.48-51
changelog:
  - Modified the setting of the dm target version for VDO devices to only
    change when the dm interface (i.e. table line) changes instead of tying
    it to the VDO version.
    - Resolves: rhbz#1665298
  - Improved error handling when resizing VDO devices.
    - Resolves: rhbz#1659247
  - Reduced, removed, and/or rate limited error logging to avoid
    soft-lockups.
    - Resolves: rhbz#1678785
    - Resolves: rhbz#1698664
  - Began converting the VDO device to conform to the DM convention of not
    issuing I/O while suspended.
    - Relates: rhbz#1659303
  - Added a dmsetup message to close the UDS index of a running VDO device.
    - Relates: rhbz#1643291


author: Jindrich Novy <jnovy@redhat.com> - 1.6.2-5
changelog:
  - use btrfs_noversion to really disable BTRFS support
  - amend/reuse BUILDTAGS
  - still keep device-mapper-devel BR otherwise build fails
    despite dm support being disabled (build scripting invokes
    pkg-config for devmapper which is shipped by the dm-devel
    package)


author: Jindrich Novy <jnovy@redhat.com> - 1.6.3-2
changelog:
  - apply fix to not to fail gating tests:
    don't parse the config for cgroup-manager default
  - don't hang while on podman run --rm - bug 1767663


author: Jindrich Novy <jnovy@redhat.com> - 1.6.3-4
changelog:
  - use the file events logger backend if systemd isn't available
    (thanks to Giuseppe Scrivano)
  - Related: RHELPLAN-25138


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0.2-14
changelog:
  - Evolution of the previous (rhbz#1478089)
  - Make -devel package dependency on the main package arch-qualified


author: Paul Howarth <paul@city-fan.org> - 0.61-1
changelog:
  - Update to 0.61
    - Avoid relying on current working directory being in @INC
    - Documentation typo fixes
  - Drop redundant Group: tag
  - Simplify find commands using -empty and -delete


author: Pavel Březina <pbrezina@redhat.com> - 1.1-1
changelog:
  - Rebase to authselect-1.1 (RHBZ #1685516)
  - Notify that oddjob-mkhomedir needs to be enabled manually (RHBZ #1694103)
  - Ask for smartcard insertion when smartcard authentication is required (RHBZ #1674397)
  - Update translations (RHBZ #1689973)


author: Dave Anderson <anderson@redhat.com> - 7.2.3-12
changelog:
  - Address covscan issues
    Resolves: rhbz#1602466
  - Fix for x86_64 5-level pagetable vmalloc range expansion
    Resolves: rhbz#1637125


author: Dave Anderson <anderson@redhat.com> - 7.2.3-16
changelog:
  - Resurrect "dev -p" option.
  - Fix "dev -[dD]" options to account for request_queue.in_flight[] removal.
    Resolves: rhbz#1662039
  - Command line input fixes
    Resolves: rhbz#1664061


author: Dave Anderson <anderson@redhat.com> - 7.2.6-1
changelog:
  - Rebase to latest upstream sources
    Resolves: rhbz#1686560 
  - Utilize the VMCOREINFO PT_NOTE in /proc/kcore header
    Resolves: rhbz#1627528
  - Support extraction of CONFIG_PROC_VMCORE_DEVICE_DUMP data from dumpfile header
    Resolves: rhbz#1702535


author: Dave Anderson <anderson@redhat.com> - 7.2.6-2
changelog:
  - Fix "p" command regression
    Resolves: rhbz#1718417  
  - Fix arm64 debug kernel read error message during initialization
    Resolves: rhbz#1718736


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.17-1
changelog:
  - Set auto_save_interval to 5 (#1548913,#1523406,#1539180)
  - seapplet: Try send and close notifications (#1541624,#1541719,#1544222,#1539367)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.18-1
changelog:
  - Move sedispatch.conf to /etc/audit/plugins.d/
  - Fix summary and "if" text for AVCs with unknown target path


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.19-2
changelog:
  - Update "missing" scripts to automake-1.15
  - Add active polling for acquiring policy file
  - Fix translation of hex values in AVCs (#1477236, #1709742)
  - require initscripts to ensure that "service" call works properly


author: Brian C. Lane <bcl@redhat.com> - 0.26.5-1
changelog:
  - Rebase to 0.26.5 (CVE-2018-11235, CVE-2018-10887, CVE-2018-10888)
  - Disable SSH so that libssh2 is not required
  - Use python3 when building
  - Add README.rhel8 explaining why SSH is disabled


author: Brian C. Lane <bcl@redhat.com> - 0.26.8-1
changelog:
  - Update to 0.26.8
    Resolves: rhbz#1638880
  - Disable upstream online tests
    Related: rhbz#1638880
  - tests: Increase TOOBIG value used on i686
    Related: rhbz#1638880


author: Paul Wouters <pwouters@redhat.com> - 3.27-9
changelog:
  - Resolves: rhbz#1648776 limit connections to be ikev1only or ikev2only and make ikev2only the default [man page update]


author: Paul Wouters <pwouters@redhat.com> - 3.28-1
changelog:
  - Resolves: rhbz#1712555 libreswan rebase to 3.28
  - Resolves: rhbz#1683706 Libreswan shows incorrect error messages
  - Resolves: rhbz#1706180 Remove last usage of old (unused) PF_KEY API
  - Resolves: rhbz#1677045 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart
  - Resolves: rhbz#1686990 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE
  - Resolves: rhbz#1608353 /usr/sbin/ipsec part of the libreswan packages still invokes commands that were deprecated a decade ago
  - Resolves: rhbz#1699318 'ipsec show' has python3 invalid syntax
  - Resolves: rhbz#1679394 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure


author: Paul Wouters <pwouters@redhat.com> - 3.29-2
changelog:
  - Resolves: rhbz#1723957 libreswan is missing linux audit calls for failed IKE SAs and failed IPsec SAs required for Common Criteria


author: Paul Wouters <pwouters@redhat.com> - 3.29-3
changelog:
  - Resolves: rhbz#1725205 XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire


author: Paul Wouters <pwouters@redhat.com> - 3.29-6
changelog:
  - Resolves: rhbz#1714331 support NSS based IKE KDF's [require updated nss for rhbz 1738689, memleak fix]


author: Adam Jackson <ajax@redhat.com> - 7.7-25
changelog:
  - iceauth 1.0.8
  - xkill 1.0.5
  - xrdb 1.1.1
  - xrefresh 1.0.6
  - xset 1.2.4
  - xsetroot 1.1.2
  - HTTPS URLs


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-4
changelog:
  - Ensure gxps_archive_read_entry() fills the GError in case of failure
  - Handle errors returned by archive_read_data()
  - Fixes CVE-2018-10733
  - Resolves: #1576113


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-5
changelog:
  - Fix integer overflow in png decoder
  - Clear the error before trying to load an image again
  - Resolves: #1524378


author: Robert Scheck <robert@fedoraproject.org> 0.9.12-15
changelog:
  - Added patch to avoid a /usr/@DATADIRNAME@/locale/ directory
  - Use %{_udevrulesdir} macro rather /etc/udev/rules.d/ (#1226681)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.5-1
changelog:
  - update to 3.5 (#1685469 #1677218)
  - fix shellcheck warnings in helper scripts (#1711948)
  - update ntp2chrony script


author: Nick Clifton <nickc@redhat.com> - 8.77-1
changelog:
  - Another attempt at fixing the detection and reporting of missing -D_FORTIFY_SOURCE options.  (#1703500)


author: Nick Clifton <nickc@redhat.com> - 8.73-2
changelog:
  - Release bump in order to allow rebuild against latest version of gcc in RHEL-8 buildroot.  (#1657912)


author: Nick Clifton <nickc@redhat.com> - 8.76-1
changelog:
  - Report a missing -D_FORTIFY_SOUCRE option if -D_GLIBCXX_ASSERTIONS was detected.  (#1703500)
  - Do not report problems with -fstack-protection if the binary was not built by gcc or clang.  (#1703788)    
  - Add tests of clang command line options recorded in the DW_AT_producer attribute.


author: Nick Clifton <nickc@redhat.com> - 8.76-2
changelog:
  - Release bump in order to allow rebuild against latest version of gcc in RHEL-8 buildroot.  (#1720179)


author: Stephen Gallagher <sgallagh@redhat.com> - 2.3.0-1
changelog:
  - Update to 2.3.0
  - Switch to meson build system
  - Add support for non-DNS subjectAlternativeName values (issue #4)


author: Stephen Gallagher <sgallagh@redhat.com> - 2.3.3-5
changelog:
  - Autodetect the minimum key strength from the system security level.
  - Autodetect the hash algorithm to use from the system security level.
  - Disallow setting a key strength below the system minimum.
  - Resolves: rhbz#1653323


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.2.0-30
changelog:
  - Fixed building with libopenraw-0.1
  - Added rubygems to BuildRequires to fix build error
  - Modernised the .spec file a bit
  - Disabled silent build


author: Mukundan Ragavan <nonamedotc@fedoraproject.org> - 5.1.1-1
changelog:
  - Update to 5.1.1
  - Remove format security patch - not needed anymore
  - Edit patches to be version specific
  - Renamed patch4 to be consistent with others
  - Minor spec file housekeeping


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.3-13.20171209
changelog:
  - update to 1.3-20171209
  - fix build with multiple options in hardened ldflags (#1548400)
  - add gcc to build requirements
  - use macro for ldconfig scriptlets


author: Philip Kovacs <pkdevel@yahoo.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Added enviromnent module for pmi/pmix
  - Added pkgconfig files for pmix/pmi/pmi2
  - Ensure lexer sources are rebuilt
  - Removed obsolete sasl support
  - Use new ldconfig_scriplets macro


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.50.20160912git
changelog:
  - Resolves: 1557470 - netstat -i cut's interface names
  - Resolves: 1566084 - netstat -agn only shows 10 character interface name for IPv4 addressing


author: Kairui Song <kasong@redhat.com> 2:1.4.0-2
changelog:
  - Fix several memleak problems found by covscan (bz1606969)
  - Fix an possible overflow error (bz1606969)
  - Don't leak socket fd on connection error (bz1606969)
  - Check xen-dyn-event more flexible (bz1576164)


author: Kairui Song <kasong@redhat.com> 2:1.4.0-3
changelog:
  - Update document and remove dead options to fix manpage scan warning (bz1612706)
  - Fix gating test error (bz1680619)


author: Wim Taymans <wtaymans@redhat.com> - 1.13.1-2
changelog:
  - The gtk plugin was moved from -bad, make a new subpackage for it.
  - the mp3 plugins were moved from -ugly, add BuildRequires.
  - build requires GL now for gtkglsink


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-3
changelog:
  - -gtk: Obsoletes/Provides: gstreamer1-plugins-bad-free-gtk
  - Obsoletes/Provides: gstreamer1-plugin-mpg123


author: Paul Wouters <pwouters@redhat.com> - 1.7.3.2-1
changelog:
  - Resolves rhbz#1404290 socat build failure on rawhide
  - Resolves rhbz#1416597 socat-1.7.3.2 is available
  - Resolves rhbz#1417483 Failed DNS resolution causes SIGSEGV and endless loop
  - Removed obsoleted patch


author: Paul Howarth <paul@city-fan.org> - 4.077-1
changelog:
  - Update to 4.077
    - Added method is_local() to Lite.pm
    - Fix Util/Makefile.PL to work around bug in Android's sh
    - Add method full6m()
    - Fix Util/Makefile.PL issue with clang compiler (CPAN RT#86831)
  - Classify buildreqs by usage
  - Use %license where possible


author: Paul Howarth <paul@city-fan.org> - 4.079-1
changelog:
  - Update to 4.079
    - Correct non-suppression of leading zeros in certain instances of new_no use
    - Put in missing code to propagate NetAddr::IP::Lite :nofqdn to IP.pm
  - Explicitly BR: perl-devel, needed for EXTERN.h
  - Simplify find commands using -empty and -delete


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.12-6
changelog:
  - Python 2 binary package renamed to python2-pyyaml
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.12-9
changelog:
  - Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Miro Hrončok <mhroncok@redhat.com> - 3.12-12
changelog:
  - Rename python3-PyYAML to python3-pyyaml
  - Modernize spec
  - Fix python2 invocation

  - Cherry-picked from: https://src.fedoraproject.org/rpms/PyYAML/pull-request/2


author: Björn Esser <besser82@fedoraproject.org> - 2:4.5-9
changelog:
  - Add patch to include crypt.h, if present
  - Use %make_{build,install} macros
  - Refresh other patches for proper alignment


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-1
changelog:
  - Update to current upstream release 4.6
  - Raise limit for passwd and shadow entry length but also prevent
    writing longer entries (#1422497)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-5
changelog:
  - use cap_setxid file capabilities for newxidmap instead of making them setuid
  - limit the SYS_U/GID_MIN value to 1 as the algorithm does not work with 0
    and the 0 is always used by root anyway
  - manual page improvements
  - flush sssd caches - patch by Jakub Hrozek


author: Kalev Lember <klember@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Switch to new upstream at https://github.com/pygobject/pycairo
  - Switch to distutils build system
  - Tighten subpackage deps with the _isa macro
  - Rename Python 2 package to python2-cairo
  - Enable Python 3 support


author: Petr Viktorin <pviktori@redhat.com> - 1.16.3-2
changelog:
  - Allow Python 2 for build
    See: https://hurl.corp.redhat.com/rhel8-py2

  - Skip tests on Python 2 (python2-pytest is being removed)


author: Michal Hlavinka <mhlavink@redhat.com> 56-1
changelog:
  - Upgrade to 56 (#1479800)
  - fixes wait exit codes of co-processes when run in interactive mode (#1479320)


author: Neal Gompa <ngompa13@gmail.com> - 1.8.0-3
changelog:
  - Add patch to fix gmock segfaults (rhbz#1513522)
  - Add patch to properly version the libraries
  - Move the documentation to the right place
  - Drop unneeded ldconfig scriptlets:
      https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets
  - Some clean up


author: Robert Scheck <robert@fedoraproject.org> 1.4.2-3
changelog:
  - Move large documentation into -doc subpackage (#744416)
  - Reworked spec file to build libisofs1 for RHEL >= 6 (#744416)


author: Daiki Ueno <dueno@redhat.com> - 1.3.4-17
changelog:
  - Add ibus-m17n-content-type.patch
  - Fix bug 1024071 - ibus-m17n is enabled in the password entry field
    of the lock screen


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-1
changelog:
  - New version
  - Fixes CVE-2017-15705, CVE-2018-11780 and CVE-2018-11781
  - Resolves: rhbz#1629523
  - Resolves: rhbz#1629535
  - Resolves: rhbz#1629538


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-2
changelog:
  - Support systemd, not SysV init, drop initscripts requirement
  - Resolves: rhbz#1610288
  - Fix issues found by Coverity Scan
  - Resolves: rhbz#1602695


author: Andreas Schneider <asn@redhat.com> - 1.1.0-1
changelog:
  - Update to version 1.1.0
    * Added support for initgroups()
    * Added support for shadow files (getspnam(), etc.)
    * Improved support for multi address handling in getaddrinfo()
    * Improved file parser
    * Fixed compilation on machines without IPv4 support
    * Fixed service string sanity check in getaddrinfo() (bso #11501)
    * Fixed AI_NUMERICHOST handling in getaddrinfo() (bso #11477)


author: Andreas Schneider <asn@redhat.com> - 1.1.3-1
changelog:
  - Update to version 1.1.3
    * Added support for BSD 'struct passwd' members
    * Replaced strcpy() with snprintf()
    * Fixed segfault while reloading hosts file
    * Fixed issue where are not fault tolerant if an alias has already
      been added
    * Fixed nss_wrapper build on Solaris


author: Andrew Price <anprice@redhat.com> - 3.2.0-2
changelog:
  - fsck.gfs2: Don't check fs formats we don't recognise
  - libgfs2: Fix pointer cast byte order issue
    Resolves: rhbz#1622050


author: Petr Pisar <ppisar@redhat.com> - 6:0.99.18-7
changelog:
  - Remove useless build-time dependency on ExtUtils::CBuilder
  - Fix documentation about numify() and stringify() trailing zeros
    (CPAN RT#64635, CPAN RT#122858)


author: Michal Sekletár <msekleta@redhat.com> - 11.7.3-2
changelog:
  - sysstat's buildsystem doesn't really use LDFLAGS, we have to merge CFLAGS and LDFLAGS to get binaries with full RELRO (#1624177)


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.32-4.git1715c90
changelog:
  - Fixes @openshift/machine-config-operator#669
  - install /etc/containers/oci/hooks.d and /etc/containers/certs.d


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.20.00-2
changelog:
  - Added multiple upstream patches:
      tcsh-6.20.00-000-add-all-flags-for-gethost-build.patch
      tcsh-6.20.00-001-delay-arginp-interpreting.patch
      tcsh-6.20.00-002-type-of-read-in-prompt-confirm.patch (bug #1386129)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.20.00-5
changelog:
  - Added multiple upstream patches:
      tcsh-6.20.00-004-do-not-use-old-pointer-tricks.patch
      tcsh-6.20.00-005-reset-fixes-numbering.patch
      tcsh-6.20.00-006-cleanup-in-readme-files.patch
      tcsh-6.20.00-007-look-for-tgetent-in-libtinfo.patch
      tcsh-6.20.00-008-guard-ascii-only-reversion.patch
      tcsh-6.20.00-009-fix-regexp-for-backlash-quoting-tests.patch (bug #1424082)


author: Richard Hughes <richard@hughsie.com> 1.1.3-1
changelog:
  - New upstream release
  - Adds support for an upcoming Dell USB-C dock
  - Don't use an obsolete font when building the UEFI images
  - Resolves: #1607842


author: Richard Hughes <richard@hughsie.com> 1.1.4-1
changelog:
  - New upstream release
  - Use HTTPS_PROXY if set
  - Make the dell-dock plugin more robust in several ways
  - Adjust EVB board handling
  - Resolves: #1647557


author: Tomáš Mráz <tmraz@redhat.com> - 0.12-0.50.pre6
changelog:
  - drop disablement of TLS1.0 on second attempt to connect,
    it would not work correctly anyway and the code does not build
    with OpenSSL-1.1.0


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.51.pre6
changelog:
  - fix compatibility with OpenSSL 1.1 (#1423519)
  - make configure.ac recognize recent versions of GCC
  - apply patches automatically to ease maintenance


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.55.pre6
changelog:
  - drop support for JS engine that is no longer maintained
  - always build verbosely, drop outdated doc files


author: Ryan O'Hara <rohara@redhat.com> - 2.0.10-4.2
changelog:
  - Fix segfault when smtp alerts configured (#1693706)
  - Fix double free when smtp_helo_name copied from local_name (#1693706)


author: Björn Esser <besser82@fedoraproject.org> - 0.13-3
changelog:
  - Add upstream patch for adding size_t json_c_object_sizeof()
  - Enable partial multi-threaded support


author: Wim Taymans <wtaymans@redhat.com> - 1.23.8-3
changelog:
  - Remove pointless Enhances:
  - Fix splelling mistake
  - change package name from libs-devel to devel and add Obsolete:
  - see rhbz#1394147


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.9.6-8
changelog:
  - Python 2 binary package renamed to python2-cracklib
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4-2
changelog:
  - Fix broken reference following when the reference is split to
    more than one line
  - Fix possible incorrect selection of already loaded file when
    following cross reference
    Resolves: #1383057


author: Michal Sekletar <msekleta@redhat.com> - 0.26-14
changelog:
  - start timer after the installation (#1278587)
  - make mlocate-updatedb.service of the type simple, systemd will then not wait for its completion (#1282232)


author: Martin Gansser <martinkg@fedoraproject.org> - 1:0.9.57-1
changelog:
  - Update to 0.9.57
  - Dropped dependency on libgcrypt
  - Dropped dependency on openssl
  - Update tarball link to "https:"
  - Add examples from doc/examples


author: Steve Dickson <steved@redhat.com> 0.3.5-2
changelog:
  - nfs4_getfacl: Add new option -c/--omit-header (bz 1698281)
  - nfs4_setfacl: Skip comment field while reading ACE(s) (bz 1687299)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.5-1
changelog:
  - Update to version 0.8.5
    * Fixed an issue where global known_hosts file was ignored (#1649321)
    * Fixed ssh_get_fd() to return writable file descriptor (#1649319)
    * Fixed regression introduced in known_hosts parsing (#1649315)
    * Fixed a regression which caused only the first algorithm in known_hosts to
      be considered (#1638790)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.91-0.1
changelog:
  - Update to 0.9.0 pre release version (0.8.91)
  - Added default configuration files for client and server
  - Removed unused patch files left behind
  - Fixed issues found to run upstream test suite with SELinux


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.0-1
changelog:
  - Update to version 0.9.0
    https://www.libssh.org/2019/06/28/libssh-0-9-0/
  - Added explicit Requires for crypto-policies
  - Do not ignore known_hosts keys when SSH_OPTIONS_HOSTKEYS is set
  - Provide the configuration files in a separate libssh-config subpackage


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.0-3
changelog:
  - Add Obsoletes in libssh-config to avoid conflict with old libssh which
    installed the configuration files.


author: mosquito <sensor.wen@gmail.com> - 1.22.2-7
changelog:
  - Add GL_ARB_shader_texture_lod and copy_sub_image support (#1421055)
  - Add pkgconfig(egl) BReq for rawhide
  - Move BReqs to pkgconfig


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.5.0-1
changelog:
  - Update to latest upstream version
  - Change license to Eclipse Public License 1.0
  - Use %license
  - Fix URL


author: Nick Clifton <nickc@redhat.com> - 2.30-58.2
changelog:
  - Allow the BFD library to handle the copying of files containing secondary reloc sections.  (#1803825)


author: Kalev Lember <klember@redhat.com> - 1.55.2-1
changelog:
  - Update to 1.55.2
  - Drop /usr/bin/env shebang patch as the brp scripts now handle this correctly
  - Remove ldconfig scriptlets


author: Pavel Raiskup <praiskup@redhat.com> - 09.06.0310-1
changelog:
  - rebase to latest upstream version, per release notes:
    https://odbc.postgresql.org/docs/release.html


author: Pavel Raiskup <praiskup@redhat.com> - 09.06.0500-1
changelog:
  - update to new upstream release, per:
    https://www.postgresql.org/message-id/20170905143318.95448B4C411@winpg.jp


author: Pavel Raiskup <praiskup@redhat.com> - 10.00.0000-1
changelog:
  - update to new upstream release, per announcement:
    https://www.postgresql.org/message-id/20171013143455.9D0E5B4C412%40winpg.jp


author: Pavel Raiskup <praiskup@redhat.com> - 10.01.0000-1
changelog:
  - update to new upstream release, per announcement:
    https://www.postgresql.org/message-id/20171227144219.0ABC4B4C417%40winpg.jp


author: Pavel Raiskup <praiskup@redhat.com> - 10.02.0000-1
changelog:
  - build against libpq-devel and postgresql-test-rpm-macros
  - update to new upstream release, per announcement:
    https://www.postgresql.org/message-id/20180330143925.88CEDB40E51%40winpg.jp


author: Pavel Raiskup <praiskup@redhat.com> - 10.03.0000-1
changelog:
  - update: new upstream release, per announcement:
    https://www.postgresql.org/message-id/20180519131632.8E59CB40E51%40winpg.jp


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.0.4-0.27.20111007git
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  - Explicitly include <sys/sysmacros.h> due to glibc-headers changes.
  Definition of major and minor macros is no longer transitively included
  through <sys/types.h>, hence make it explicit.
  Ref:
  https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=NEWS;hb=HEAD


author: Martin Pitt <mpitt@redhat.com> - 177-1
changelog:
  - Support centrally-managed SSH known hosts rhbz#1622835
  - Drop support for Internet Explorer rhbz#1619993


author: Martin Pitt <mpitt@redhat.com> - 178-1
changelog:
  - Fix remote unauthenticated crash with crafted URLs rhbz#1627634
  - Fix large downloads stalling after a few megabytes rhbz#1626847
  - Recommend system-logos to ensure correct branding rhbz#1626066


author: Martin Pitt <mpitt@redhat.com> - 179-1
changelog:
  - Various crash fixes (coverity) rhbz#1635182
  - Updates for React 16 (for future backports) rhbz#1635182
  - Fix building with platform-python rhbz#1631174


author: Martin Pitt <mpitt@redhat.com> - 183-1
changelog:
  - Kernel Dump: Support non-local targets rhbz#1651691
  - Fix firewall page oops when not selecting anything rhbz#1652207
  - Fix changing user's own password rhbz#1652304
  - Never send Content-Length with chunked encoding rhbz#1652511
  - Include "Web Console" in package description rhbz#1653617
  - Respect SSH configuration


author: Mark Goodwin <mgoodwin@redhat.com> 6.0.2-1
changelog:
  - bump to latest upstream stable release 6.0.2-1
  - unbundle almost all remaining vendor code, see linked blockers in BZ#1670656


author: Mark Goodwin <mgoodwin@redhat.com> 6.1.3-1
changelog:
  - update to latest upstream stable release 6.1.3, see CHANGELOG
  - unbundle all vendor sources, replace with BuildRequires, see
    the long list of blocker BZs linked to BZ#1670656
  - BuildRequires go-plugin >= v1.0.0 for grpc_broker (thanks eclipseo)
  - tweak make_webpack to no longer use grunt, switch to prod build
  - add ExclusiveArch lua script (thanks quantum.analyst)
  - move db directory and plugins to /var/lib/grafana
  - split out into 6 patches, ready for upstream PRs
  - add check to run go tests for gating checks


author: Mark Goodwin <mgoodwin@redhat.com> 6.1.4-1
changelog:
  - update to latest upstream stable release 6.1.4, see CHANGELOG
  - use gobuild and gochecks macros, eliminate arch symlinks
  - re-enable grafana-debugsource package
  - fix GRAFANA_GROUP typo
  - fix more modes for brp-mangle-shebangs
  - vendor source unbundling now done in prep after patches
  - remove all rhel and fedora conditional guff


author: Mark Goodwin <mgoodwin@redhat.com> 6.1.6-1
changelog:
  - update to latest upstream stable release 6.1.6, see CHANGELOG
  - includes jQuery 3.4.0 security update


author: Mark Goodwin <mgoodwin@redhat.com> 6.2.2-1
changelog:
  - split out some datasource plugins to sub-packages
  - update to latest upstream community sources, see CHANGELOG


author: James Paul Turner <jamesturner246@fedoraproject.org> - 3.1.6-1
changelog:
  - Update to MPFR version 3.1.6
  - Use autosetup specfile macro for applying patches (patches 1 and 2 applied)
  - Removed iconv calls, as they were breaking .info files, which are now unicode
    resolves #1299649
  - Other minor cleanups
  - BuildRequire gcc per https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires


author: Petr Pisar <ppisar@redhat.com> - 1.8-1
changelog:
  - 1.8 bump
  - License changed from GPLv2+ to (GPLv3+ and GFDL)
  - Disable printing command failure in POSIX mode


author: Rob Crittenden <rcritten@redhat.com> - 0.79.6-4
changelog:
  - Improve handling of NSS tokens (#1624930)
  - Pull in upstream fixes discovered in coverity and clang (#1632449)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.23-5
changelog:
  - Resolves: #1585617 - Build against libdb only instead of libdb4
  - disabled strict checking for now (squid can not be built with GCC8)


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-1
changelog:
  - Resolves: #1656871 - squid rebase to 4.4
  - Resolves: #1645148 - CVE-2018-19131 squid: Cross-Site Scripting when
    generating HTTPS response messages about TLS errors
  - Resolves: #1645156 - CVE-2018-19132 squid: Memory leak in SNMP query
    rejection code


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-6
changelog:
  - Resolves: #1679526 - Missing detailed configuration file
  - Resolves: #1703117 - RHEL 7 to 8 fails with squid installed because dirs
    changed to symlinks
  - Resolves: #1691741 - Squid cache_peer DNS lookup failed when not all lower
    case
  - Resolves: #1683527 - "Reloading" message on a fresh reboot after enabling
    squid


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-8
changelog:
  - Resolves: # 1738485 - CVE-2019-12527 squid:4/squid: heap-based buffer overflow
    in HttpHeader::getAuth


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Update to 1.6.2
  - Make buildorder a signed integer to match modulemd specification
  - Obsolete unsupported pythonX-modulemd packages


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.0-0.beta2
changelog:
  - Update to 2.0.0beta2
  - Better validation of stored content during read and write operations
  - ModuleIndex now returns FALSE if any subdocument fails
  - Fix tests on 32-bit platforms
  - Make unknown keys in YAML maps non-fatal for libmodulemd1
  - Make unknown keys in YAML maps optionally fatal for libmodulemd 2.x
  - Fix RPM version requirements for libmodulemd1


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.0-1
changelog:
  - Update to 2.0.0 final
  - Assorted fixes for validation
  - Add modulemd-validator tool based on v2 code
  - Fix a crash when merging defaults
  - Add missing BuildRequires


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.18-9
changelog:
  - Do not use combined characters on preedit for compose keys
  - Fixed an infinite loop of extension preedit with xterm


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.18-14
changelog:
  - Fixed Man page scan results for ibus
  - Added IBUS_DISCARD_PASSWORD env variable for password dialog in firefox
  - Added history annotation for previous emojis


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.19-3
changelog:
  - Fix Bug SEGV Choose an emoji by mouse from the emoji category list
  - Fix Bug 1618682 - SEGV with ASCII on emojier in Wayland
  - Support Shift-Space on emojier preedit
  - Do not move Emojier popup with the active candidate in Xorg
  - Do not clear Unicode data when emoji annotation lang is changed


author: Ian Kent <ikent@redhat.com> - 5.1.4-30
changelog:
  - bz1689469 - [autofs] The log no longer print PID of automount process
    - remove autofs4 module load code.
    - add NULL check in prepare_attempt_prefix().
    - update build info with systemd.
    - use flags for startup boolean options.
    - move close stdio descriptors to become_daemon().
    - add systemd service command line option.
  - Resolves: rhbz#1689469


author: Ian Kent <ikent@redhat.com> - 5.1.4-31
changelog:
  - bz1689467 - path_resolution on an autofs managed path resets the timer. Can
    this be made configurable?
    - support strictexpire mount option.
  - Resolves: rhbz#1689467


author: Ian Kent <ikent@redhat.com> - 5.1.4-32
changelog:
  - bz1703876 - [RFE] Enable additional logging information for autofs
    - add NULL check for get_addr_string() return.
    - use malloc(3) in spawn.c.
    - add mount_verbose configuration option.
    - optionally log mount requestor process info.
    - log mount call arguments if mount_verbose is set.
  - Resolves: rhbz#1703876


author: Ian Kent <ikent@redhat.com> - 5.1.4-33
changelog:
  - bz1689466 - Sanitize autofs logging
    - make expire remaining log level debug.
  - bz1685805 - autofs doesn't expand macros in amd map selectors
    - allow period following macro in selector value.
    - fix macro expansion in selector values.
  - Resolves: rhbz#1689466 rhbz#1685805


author: Ian Kent <ikent@redhat.com> - 5.1.4-34
changelog:
  - bz1681956 - autofs changes blocked until gating tests are added
    - add gating.yaml for manual gate testing.
  - Related: rhbz#1681956


author: Ian Kent <ikent@redhat.com> - 5.1.4-35
changelog:
  - bz1681956 - autofs changes blocked until gating tests are added
    - correct test name in gating.yaml.
  - Related: rhbz#1681956


author: Jindrich Novy <jnovy@redhat.com> - 1.6.4-3
changelog:
  - fix "Podman support for FIPS Mode requires a bind mount inside the container"
  - Resolves: #1804194


author: Jack Magne <jmagne@redhat.com> - 1.1.2-6
changelog:
  - #Resolve: Bug 1638011 - esc docdir should not be versioned in rhel8.
  - #Resolve: Bug 1596915 - Remove XULRunner from ESC.


author: Lubomir Rintel <lkundrak@v3.sk> - 2.4.0-2
changelog:
  - Add the previously omitted systemd service file (rh #1352055)
  - Fix crash with invalid arguments (rh #1358472)


author: Paul Howarth <paul@city-fan.org> - 0.421-1
changelog:
  - Update to 0.421
    - Fix a lot of potential memory leaks when callbacks throw exceptions
    - Add some new functions: qsort, binsert, bremove, listcmp, arrayify
      (CPAN RT#17230), samples (CPAN RT#77562), minmaxstr (CPAN RT#106401),
      lower_bound, upper_bound, equal_range, frequencies, occurances, mode
      (CPAN RT#91991), zip6 (CPAN RT#42921), reduce_0, reduce_1, reduce_u
    - Improve tests
    - Make List::MoreUtils::XS independent from List::MoreUtils
      Note that List::MoreUtils::XS doesn't guarantee API stability: this
      feature is only provided through List::MoreUtils as frontend
    - Improve configure toolchain to use Config::AutoConf 0.315
    - Speed up some inner loops by hinting the expected result
    - Fix mind screwed up issue in upper_bound and reduce elements visited in
      equal_range
    - Correct license in META (CPAN RT#122702)
    - Fix issues with -DPERL_IMPLICIT_SYS on Windows with Strawberry-Perl


author: Paul Howarth <paul@city-fan.org> - 0.422-1
changelog:
  - Update to 0.422
    - Rename 'occurances' into 'occurrences' (CPAN RT#91991, CPAN RT#122806)
    - Add DESCRIPTION to Pod clarifying the role of List::MoreUtils::XS
    - Improve Makefile.PL regarding some build artifacts


author: Paul Howarth <paul@city-fan.org> - 0.423-1
changelog:
  - Update to 0.423
    - Fix dealing with lists with one element on bremove/binsert (GH#2)
    - Add support for compilers before C99
    - Fix some 32-bit compiler warnings
    - Add support for compilers without statement expression feature


author: Paul Howarth <paul@city-fan.org> - 0.426-1
changelog:
  - Update to 0.426
    - Fix broken format in part (GH#4)
    - Fix gcc 4.7 sequence point warning (GH#5)
    - Fix incorrect padname resolving for perl > 5.21.6 (CPAN RT#122883)
    - Fix compiling issue on CentOS 4 and CentOS 5


author: Paul Howarth <paul@city-fan.org> - 0.428-1
changelog:
  - Update to 0.428
    - Fix build fails on perl ≥ 5.27.4 with -DDEBUGGING (CPAN RT#123613)
    - Update ppport.h to 3.37 for improved blead support
    - Fix context arg to croak() (CPAN RT#123869)
    - Fix one() returning true on empty list (CPAN RT#123870)
    - Pamper $a/$b/$_ refcounting bugs (CPAN RT#123868)


author: Nikola Forró <nforro@redhat.com> - 1.0.0-13
changelog:
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1624172


author: Jan Synáček <jsynacek@redhat.com> - 4.0.0-2
changelog:
  - Fix 4.0.0 BuildRequires and Requires (#1503408)
    + Big thanks to Xavier Delaruelle for a spec patch!
  - Fix installing manpages as alternatives


author: Jan Synáček <jsynacek@redhat.com> - 4.1.1-1
changelog:
  - Update to 4.1.1 (#1546450, #1139165, #1545369)
    + Big thanks to Xavier Delaruelle for a spec patch!


author: Michal Ruprich <mruprich@redhat.com> - 0.16.105-3.1
changelog:
  - Resolves: #1779573 - CVE-2019-19333 libyang: stack-based buffer overflow in make_canonical when bits leaf type is used
  - Resolves: #1779576 - CVE-2019-19334 libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used


author: Martin Pitt <mpitt@redhat.com> - 176-1
changelog:
  - Fix Cockpit activation message (/etc/issue.d) rhbz#1615316
  - Suggest other browsers when browser is unsupported rhbz#1619993


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.28-6
changelog:
  - Switched kacpimon to dynamic connections (increased max connections
    from 20 to 1024)
    Resolves: rhbz#1450980
  - Consolidated new line delimiters


author: Jun Aruga <jaruga@redhat.com> - 1.1.4-1
changelog:
  - Update to pg 1.1.4 by merging Fedora master branch (commit: 397796e)
    * BuildRequires: s/postgresql-devel/libpq-devel/
    * Add marking lines at the start and end of the setup.log
    Resolves: rhbz#1672575


author: David King <amigadave@amigadave.com> - 1.3.5-1
changelog:
  - Update to 1.3.5 (#1197923)
  - Use license macro for COPYING
  - Tighten subpackage dependencies
  - Use make_install and make_build macros
  - Use pkgconfig for BuildRequires
  - Remove unnecessary Requires from devel subpackage
  - Remove obsolete Obsoletes


author: Kamil Dudka <kdudka@redhat.com> - 1.7.0-11
changelog:
  - do not escape UTF-8 chars in file names by default in UTF-8 locale (#1480778)
  - modernize spec file (Group, BuildRoot, autosetup, clean, defattr)


author: John Kacur <jkacur@redhat.com> - 2.7-8
changelog:
  - Install kernelshark manpage with kernelshark subpackage, not with trace-cmd
  Resolves: rhbz#1678252


author: Christophe Fergeau <cfergeau@redhat.com> - 0.1.5-7
changelog:
  - Add upstream patches for Python 3 support
  - Validate RANDR output property atoms
  - Add patch fixing crash with multiple QXL devices
  - This syncs the RHEL branch with both current rawhide and RHEL 7.6


author: Adam Jackson <ajax@redhat.com> - 1.0.1-0.6.git5baa1e5
changelog:
  - Enable %check for all but ppc64 and s390x, which has known but low-impact
    failures
  - Simplify %release


author: Tomas Bzatek <tbzatek@redhat.com> - 2.8.3-1
changelog:
  - Rebased to upstream 2.8.3 release (#1685210)
  - Fix leaking filedescriptors (#1614774)
  - Fix udisksctl pager scrolling (#1662336)
  - Fix LVM2 plugin CreateSnapshot() error (#1668291)
  - Add ISCSI plugin GetInitiatorNameRaw() method (#1710257)


author: Laine Stump <laine@redhat.com>
changelog:
  - Improve performance with large number of interfaces
     (Bug 1268384, Bug 1271341)
   - recognize bond devices with no slaves


author: Hans de Goede <hdegoede@redhat.com> - 1.0.21-0.1.git448584a
changelog:
  - Update to a pre 1.0.21 git snapshot to bring in libusb_interrupt_event_handler
    which chromium needs (rhbz#1270324)


author: Petr Pisar <ppisar@redhat.com> - 4:2.86-3
changelog:
  - Fix Encode::encode_utf8(undef) to return undef (CPAN RT#116904)
  - Refuse non-shortests UTF-8 representations in strict mode
  - Fix panic when encoding undefined scalars


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.1-2
changelog:
  - Add Provides for libssh_threads.so to unbreak applications
  - Fix ABIMap detection to not depend on python to build


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.3-1
changelog:
  - Update to version 0.8.3
    * Added support for rsa-sha2 (#1610882)
    * Added support to parse private keys in openssh container format (other than
      ed25519) (#1622983)
    * Added support for diffie-hellman-group18-sha512 and
      diffie-hellman-group16-sha512 (#1610885)
    * Added ssh_get_fingerprint_hash()
    * Added ssh_pki_export_privkey_base64()
    * Added support for Match keyword in config file
    * Improved performance and reduced memory footprint for sftp
    * Fixed ecdsa publickey auth
    * Fixed reading a closed channel
    * Added support to announce posix-rename@openssh.com and hardlink@openssh.com
      in the sftp server
    * Use -fstack-protector-strong if possible (#1624135)


author: Abhi Das <adas@redhat.com> - 4.3-19
changelog:
  - rhbz#1602698 - Fix coverity issues
    rhbz#1624173 - Fix annocheck failures
    rhbz#1716278 - limit max cpus in mksquashfs
    Resolves: rhbz#1602698, rhbz#1624173, rhbz#1716278


author: Stefano Brivio <sbrivio@redhat.com> - 6.38-3
changelog:
  - Fix loading of sets with dependencies on other sets (RHBZ#1647096), and
    hardcode 6.38-1.el7 for ipset-service upgrade and downgrade triggers, so that
    we don't run into issues with z-stream updates


author: Stefano Brivio <sbrivio@redhat.com> - 7.1-1
changelog:
  - Rebase to 7.1 (RHBZ#1649090):
    - Add compatibility support for strscpy()
    - Correct the manpage about the sort option
    - Add missing functions to libipset.map
    - configure.ac: Fix build regression on RHEL/CentOS/SL (Serhey Popovych)
    - Implement sorting for hash types in the ipset tool
    - Fix to list/save into file specified by option (reported by Isaac Good)
    - Introduction of new commands and protocol version 7, updated kernel include files
    - Add compatibility support for async in pernet_operations
    - Use more robust awk patterns to check for backward compatibility
    - Prepare the ipset tool to handle multiple protocol version
    - Fix warning message handlin
    - Correct to test null valued entry in hash:net6,port,net6 test
    - Library reworked to support embedding ipset completely
    - Add compatibility to support kvcalloc()
    - Validate string type attributes in attr2data() (Stefano Brivio)
    - manpage: Add comment about matching on destination MAC address (Stefano Brivio)
      (RHBZ#1649079)
    - Add compatibility to support is_zero_ether_addr()
    - Fix use-after-free in ipset_parse_name_compat() (Stefano Brivio) (RHBZ#1649085)
    - Fix leak in build_argv() on line parsing error (Stefano Brivio) (RHBZ#1649085)
    - Simplify return statement in ipset_mnl_query() (Stefano Brivio) (RHBZ#1649085)
    - tests/check_klog.sh: Try dmesg too, don't let shell terminate script (Stefano Brivio) 
  - Fixes:
    - Fix all shellcheck warnings in init script (RHBZ#1649085)
    - Make error reporting consistent, introduce different severities (RHBZ#1683711)
    - While restoring, on invalid entries, remove them and retry (RHBZ#1683713)
    - Fix covscan SC2166 warning in init script (RHBZ#1649085)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.2.8-5
changelog:
  - BR: libgs-devel (f28+)
  - .spec cleanup/cosmetics (drop deprecated tags, use %autosetup/%license, tighten subpkg dep)


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-6
changelog:
  - Add tss user if doesn't currently exist - PR#1 from Jerry Snitselaar
  - Removed source tarball and cleared it from .gitignore


author: Javier Martinez Canillas <javierm@redhat.com> - 2.0.0-1
changelog:
  - Download the distributed tarball instead of the source code tarball
  - Update URLs to point to the new project location
  - Update to 2.0.0 release


author: Sérgio Basto <sergio@serjux.com> - 1.9.2-1
changelog:
  - Update to 1.9.2 (#961876).
  - Modernize spec file.
  - Makefile.am handles mmx and sse flags well, so no need patch 01 and sed anymore.
  - Patch 02 disabled, I hope we already have asm fixed on X86_64.


author: Sérgio Basto <sergio@serjux.com> - 1.9.2-2
changelog:
  - Add license tag.
  - Add back sed on -O3 .
  - Not modify soundtouch_config.h because looks correct, just have one line !.


author: Lubos Uhliarik <luhliari@redhat.com> - 1.11.3-1
changelog:
  - new version 1.11.3
  - Resolves: #1633401 - CVE-2018-11763 mod_http2: httpd:  DoS for HTTP/2
    connections by continuous SETTINGS


author: Jerome Marchand <jmarchan@redhat.com> - 0.8.0-1
changelog:
  - Rebase on bcc-8.0.0
  - Replace the temporary s390x workaround by a proper fix
  - Remove the doc of excluded tool from the package
  - Fix print_log2_hist
  - Fix yet a few other python3 bytes vs strings issues


author: Michal Sekletár <msekleta@redhat.com> - 0.1.0-5
changelog:
  - if interface has name in expected format print it to stdout (#1643515)
  - don't assign names to virtual devices (#1644294)


author: Pavel Raiskup <praiskup@redhat.com> - 1.29-3
changelog:
  - revert back some docs
  - fix --create to use --xattrs-include/exclude (rhbz#1341787)
  - don't hang with '-x --skip-old-files --xattrs' (rhbz#1399036)


author: Pavel Raiskup <praiskup@redhat.com> - 1.30-1
changelog:
  - rebase to latest upstream release, per release notes
    http://lists.gnu.org/archive/html/info-gnu/2017-12/msg00011.html


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.0.4-1
changelog:
  - New version
    Resolves: rhbz#1468785
    Resolves: CVE-2017-10965
    Resolves: CVE-2017-10966
  - Dropped allow-negative-values-in-settings patch (not needed)


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.20-7
changelog:
  - the ownership of the spool directory should be root as at is configured
    with daemon username root
  - document the -n option


author: Nick Clifton <nickc@redhat.com> - 2.32-7
changelog:
  - Stop gold from aborting when it encounters input sections with the same name and different flags.  (#1722715)


author: Robert Scheck <robert@fedoraproject.org> 1.2.76-13
changelog:
  - Replace patch from openSUSE by the Debian one to not only build
    kyotocabinet with GCC >= 6 but also with GCC >= 7 (#1307706 #c15)


author: Paul Howarth <paul@city-fan.org> - 0.21-5
changelog:
  - Fix FTBFS due to missing buildreq perl-devel
  - Simplify find command using -empty and -delete
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Make %files list more explicit


author: Rex Dieter <rdieter@fedoraproject.org> - 0.9.11-2
changelog:
  - libvncclient sets +SRP in priority string (#1449605)
  - libvncserver blocks gtk-vnc clients >= 0.7.0 (#1451321)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-8
changelog:
  - properly audit group password change
  - do not add uid of a new (not yet added) user to the audit message
  - use lckpwdf() again to disable concurrent edits of databases by
    other applications
  - clarify chage manual page in regards to shadow and passwd
    inconsistency
  - fix minor issues in groupadd and login.defs manual pages
  - Ignore LOGIN_PLAIN_PROMPT variable in login.defs
  - force regeneration of getdate.c otherwise the date parsing fix
    is not applied


author: Richard Hughes <richard@hughsie.com> 0.2.10-1
changelog:
  - New upstream version
  - Correctly detect removed devices when rescanning
  - Fix a memory leak when using control tranfers
  - Fix symbol version table up to version 0.2.9


author: Paul Howarth <paul@city-fan.org> - 1:0.65-1
changelog:
  - Update to 0.65
    - Prevent warning about unused variables (GH#59)
    - Clarify documentation about exported functions


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:0.67-1
changelog:
  - Update to 0.67
    - Support standard tags !!str, !!map and !!seq instead of dying (GH#67)
    - Support JSON::PP::Boolean and boolean.pm via $YAML::XS::Boolean (GH#66)


author: Paul Howarth <paul@city-fan.org> - 1:0.68-1
changelog:
  - Update to 0.68
    - Fix regex roundtrip (GH#69, GH#70)
    - Fix loading of many regexes (GH#64, GH#71)


author: Paul Howarth <paul@city-fan.org> - 1:0.69-1
changelog:
  - Update to 0.69
    - Security fix: Add $LoadBlessed option to turn on/off loading objects
      (GH#73, GH#74)


author: Paul Howarth <paul@city-fan.org> - 1:0.70-1
changelog:
  - Update to 0.70
    - Fix format specifier/argument mismatch (GH#79)
    - Travis CI: Test on Perl 5.26 (GH#80)
    - Fix a C90-compatibility issue (GH#81)
  - Switch upstream from search.cpan.org to metacpan.org


author: Richard Hughes <richard@hughsie.com> 1.4.0-1
changelog:
  - New upstream version
  - Port to the Meson build system
  - Correctly build the ICC transfer curve for Rec709
  - Do not spin the Huey LEDs when the sensor is embedded
  - Do not use /tmp to create profiles
  - Use a different Huey unlock code on the W700 laptop


author: Richard Hughes <richard@hughsie.com> 1.4.1-1
changelog:
  - New upstream version
  - Include all the files in the GIR target
  - Include the correct file when using Colord-1.0.gir
  - Use gio-2.0 when generating the VAPI


author: Richard Hughes <richard@hughsie.com> 1.4.2-1
changelog:
  - New upstream version
  - Avoid buffer overflow when reading profile_id
  - Fix the detection of duplicate EDIDs
  - Set cd-create-profile date to SOURCE_DATE_EPOCH


author: Stefan Becker <chemobejk@gmail.com> - 1.22.1-1
changelog:
  - update to 1.22.1:
      - fix multiple client detection
      - speed up Lync Autodiscover
      - avoid rare SSL read deadlock
      - various bug fixes


author: Stefan Becker <chemobejk@gmail.com> - 1.23.0-1
changelog:
  - update to 1.23.0:
      - add support for IPv6 addresses in SIP & SDP messages
      - extend libpurple D-Bus interface
      - don't load buddy photos from unknown sites by default
  - add BR dbus-1, gstreamer-rtp-1.0 & krb5


author: Stefan Becker <chemobejk@gmail.com> - 1.23.1-1
changelog:
  - update to 1.23.1:
      - add support for user redirect in Lync autodiscover
      - enable audio/video calls for Office365 cloud-based accounts
  - drop obsolete patch for GCC 8.0 compilation error


author: Francisco Javier Tsao Santín <tsao@gpul.org> - 1:1.3-1
changelog:
  - Patch by Todd Lewis that adds option -x to exclude files with pcre lib 
  - This patch solves RH Bugzilla ID's 955246 1322198


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1:1.3-4
changelog:
  - remove manually added pcre2 requires (this is autogenerated)
  - removed BuildRoot, %defattr() and Group (new Fedora Packaging Guildline)
  - do not use straight gcc and add use %{__global_ldflags}
  - use %_licensedir is no longer needed
  - minor cleanups:
  -- reformat %description to 80 col
  -- added full URLs in Source fields
  -- more macros
  -- a bit simpler %prep


author: Jindrich Novy <jnovy@redhat.com> - 0.8.1-2
changelog:
  - backport https://github.com/coreos/go-iptables/pull/62
    from Michael Cambria
  - Resolves: #1627561


author: Paul Howarth <paul@city-fan.org> - 0.116-1
changelog:
  - Update to 0.116
    - Changes rephrasing
    - Restore 5.6 compatibility
    - Replace docs with a link to Ref::Util


author: Paul Howarth <paul@city-fan.org> - 0.116-2
changelog:
  - Incorporate package review feedback (#1450440)
    - Drop EL6-isms as we need Test::More 0.94, which EL-6 will never have


author: Paul Howarth <paul@city-fan.org> - 0.117-1
changelog:
  - Update to 0.117
    - Allow the custom OPs to be deparsed with B::Deparse
    - Optimize the shared object size by moving common call checker logic into a
      function


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Tomas Orsava <torsava@redhat.com> - 2.7.4-3
changelog:
  - Revert switching Python 3 subpackages to the python3X- prefix
  - Switch only the requires for python3-devel/debug to the python36-prefix:
    the rest of the packages in the python36 collection will have the python3
    prefix to be unified with the Python 3 packages for Platform-Python


author: Tomas Orsava <torsava@redhat.com> - 2.7.5-5
changelog:
  - Require python2-psycopg2 instead of python-psycopg2 from the
    python2-psycopg2-debug subpackage
  - Resolves: rhbz#1628242


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-10
changelog:
  - Fix null pointer (DoS) vulnerability via POST request to /cimom (CVE-2018-6644)
    (patch by Adam Majer)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-16
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Remove %defattr
    Resolves: #1638007


author: Jan Macku <jamacku@redhat.com> - 10.00.3-1
changelog:
  - rc.d/functions: fix escape sequence being output under systemd service units
  - Replace not working awk command with sed


author: Honza Horak <hhorak@redhat.com> - 3.0.5-2
changelog:
  - Add -config sub-package that delivers system-wide /etc/my.cnf and
    /etc/my.cnf.d directory, that other packages should use
    This package also obsoletes mariadb-config


author: Ville Skyttä <ville.skytta@iki.fi> - 3.2.6-15
changelog:
  - Fix source URL and switch to xz tarball (the only one available)
  - Do not own %{_localstatedir}/lib/rpm-state (#907618)
  - Ship gsettings-schema-convert manpage only in -devel (#893767)
  - Install COPYING as %license where available
  - Fix bogus dates in %changelog


author: Lukas Nykryn <lnykryn@redhat.com> - 048-34.git20180814
changelog:
  - TEST-50-MULTINIC/test.sh: fixed server startup
  - kernel-network-modules: add vlan kernel modules
  - test: fixed KVERSION and qemu backwards compatiblity
  - TEST-70-BONDBRIDGETEAMVLAN: load vlan kernel modules
  - test: also output server.log on failure
  - TEST-50-MULTINIC: s/--device/-device
  - enable parallel test suite
  - TEST-31-ISCSI-MULTI: use different port than TEST-30
  - load modules earlier for iscsi via dhcp root-path
  - test/{TEST-50-MULTINIC,TEST-70-BONDBRIDGETEAMVLAN}: use qemu-3.0 syntax
  - multipath-shutdown: fix shell syntax
  - dracut.spec: remove warpclock from z-series, not the other way round
  - iscsi: remove $() where it does not fit
  - mdraid: better handling of various UUID formats
  - dracut-functions: fix the word splitting
  - Add gpio and pinctrl drivers for arm*/aarch64
  - mdraid/parse-md.sh: also accept rd.md.uuid with ":"
  - spec: sort modules
  - spec: warpclock is not available on s390 or s390x
  - dracut.spec: Remove needless use of defattr
  - dracut.spec: add 00warpclock dracut module
  - Bring back 51-dracut-rescue-postinst.sh
  - lsinitrd: update help message and man page
  - lsinitrd: optimize performance when handling multiple files
  - lsinitrd: allow to only unpack certain files
  - NEWS: forgot to update the latest version
  - 00warpclock: Set correct timezone
  - dracut-install: skip modules with empty path
  - Record loaded kernel modules when hostonly mode is enabled
  - modules.d/95fcoe/cleanup-fcoe.sh: chmod +x
  - TEST-40-NBD: disable for now
  - TEST-30-ISCSI: readd multiple target test


author: Stephen Gallagher <sgallagh@redhat.com> - 2.5.0-2
changelog:
  - Fix memory corruption error using Module.search_rpms() from python
  - Speed up valgrind tests
  - Resolves: rhbz#1714766


author: Daiki Ueno <dueno@redhat.com> - 0.1.24-1
changelog:
  - Update to 0.1.24
  - Apply patch from upstream, which fixes scim-thai FTBFS with GCC6 (Closes: #1308117)


author: Paul Howarth <paul@city-fan.org> - 1.0.5-17
changelog:
  - ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
  - Drop legacy BuildRoot: and Group: tags
  - Drop redundant explicit buildroot cleaning
  - Specify all explicitly-used build requirements
  - Use %license where possible
  - Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 0.18-1
changelog:
  - Update to 0.18
    - Support binary and unicode symbol names (PR#8)
    - Fixed parsing error where the name contains a single colon but the last
      separator is ::


author: Paul Howarth <paul@city-fan.org> - 0.21-1
changelog:
  - Update to 0.21
    - Fix occasional segmentation fault on OpenBSD when malloc randomization
      causes nameptr to be at the beginning of the page (CPAN RT#117072)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.2.1-2
changelog:
  - Update $modincdir in mpifort after moving .mod files (#1301533)
  - Move compiler wrappers to mpich-devel (#1353621)
  - Remove bogus rpath (#1361586)


author: Jarod Wilson <jarod@redhat.com> - 3.2.1-8
changelog:
  - Remove python2 bits entirely, fix mpi lib dependencies
  - Remove obsolete Provides/Obsoletes for mpich2
  - Resolves: rhbz#1628628


author: Robert Scheck <robert@fedoraproject.org> 1.1.6-7
changelog:
  - Run autoreconf to recognize aarch64 (#925813)
  - Conditionalized usage of %{_lib} vs %{_libdir} for RHEL < 7
  - Tight run-time dependencies between sub-packages via %{?_isa}


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-12.2
changelog:
  - arm64: kdump: deal with a lot of resource entries in /proc/iomem
  - arm64: kexec: allocate memory space avoiding reserved regions
  - kexec: add variant helper functions for handling memory regions


author: Dave Anderson <anderson@redhat.com> - 1.3.1-3
changelog:
  - Fix x86_64 "invalid structure member offset: thread_struct_fs"
    Resolves: rhbz#1589019
  - Fix arm64 "invalid structure member offset: thread_struct_fpsimd_state"
    Resolves: rhbz#1625810


author: Jan Rybar <jrybar@redhat.com> - 23.1
changelog:
  - Rebase to the newest upstream official release
  - Source0 updated to latest functional SourceForge URL format
  - peekfd manpage now not present if peekfd binary missing on given architecture
  - URL of the project updated
  - new tool pslog added with rebase
  - Resolves: #1460695


author: Paul Howarth <paul@city-fan.org> - 2.2-1
changelog:
  - Update to 2.2
    - Convert to PERL_NO_GET_CONTEXT
      https://github.com/robinhouston/PadWalker/pull/2
  - Explicitly BR: perl-devel, needed for EXTERN.h


author: Paul Howarth <paul@city-fan.org> - 2.3-1
changelog:
  - Update to 2.3
    - Make tests work with -Ddefault_inc_excludes_dot (CPAN RT#120421)
  - Simplify find commands using -empty and -delete
  - Drop legacy Group: tag


author: Kalev Lember <klember@redhat.com> - 0.6.9-1
changelog:
  - Update to 0.6.9
  - Use make_install macro
  - Mark COPYING and COPYING.LIB as %license
  - Tighten -devel subpackage deps


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.13.01-3
changelog:
  - Fix use-after-free and heap buffer overflow vulnerabilities
  - Resolves: CVE-2017-10686, CVE-2017-11111


author: Michael Simacek <msimacek@redhat.com> - 2.13.02-1
changelog:
  - Update to upstream version 2.13.02
  - Resolves: CVE-2017-17810, CVE-2017-17811, CVE-2017-17812, CVE-2017-17813,
    CVE-2017-17814, CVE-2017-17815, CVE-2017-17816, CVE-2017-17817,
    CVE-2017-17818, CVE-2017-17819, CVE-2017-17820


author: Pavel Cahyna <pcahyna@redhat.com> - 5.2.4-1
changelog:
  - Rebase to upstream release 5.2.4
  - Add workaround for broken info generation (upstream bug
    https://sourceforge.net/p/gnuplot/bugs/1963/) from Debian
  - Use explicit path for texdir
  - Correct the description of command line options in manpage, bz#1612690
  - Install gnuplot-qt and gnuplot-wx manpage links, bz#1612690


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-2
changelog:
  - tigten subpkg deps
  - fix rpaths
  - update %files
  - use %ldconfig_scriptlets %make_build %make_install
  - %build: --disable-fatal-warnings --disable-silent-rules
  - Conflicts: gstreamer1-plugins-bad-free < 1.13


author: Tomas Popela <tpopela@redhat.com> - 1.14.0-2
changelog:
  - Enable Wayland support (previously disabled due to missing wayland-devel
    as a BR - before it was probably brought in by something else).


author: Richard W.M. Jones <rjones@redhat.com> - 0.31.2-3
changelog:
  - Add a series of upstream patches to enable compiler warnings and
    fix multiple issues.
  - Revert one of the checks which breaks processing of PE binaries.
  - Removed the 'Group' line, not needed with modern Fedora/RPM.


author: Richard W.M. Jones <rjones@redhat.com> - 0.31.3-1
changelog:
  - New upstream version 0.31.3.
  - This includes all the previous upstream patches, and reverts the
    check which broke processing of PE binaries.


author: Martin Gieseking <martin.gieseking@uos.de> - 0.32.3-1
changelog:
  - Updated to version 0.32.3.
  - Dropped patch to fix https://savannah.nongnu.org/bugs/?52319 (applied upstream)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.0.0-15
changelog:
  - Removed dependency on net-tools
    Resolves: #1496138
  - Removed init script, Group tag and macro from changelog in spec file
  - Slightly modified openssl-1.1 fix to be able build the package
    with OpenSSL version lower than 1.1


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.2.0-4
changelog:
  - Resolves: rhbz#1649632 - libosinfo test suite should collect+report all
                             failures, not exit on first error


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-3
changelog:
  - Resolves: rhbz#1727843 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: Petr Pisar <ppisar@redhat.com> - 1:2.56-368
changelog:
  - Fix a stack buffer overflow in deserialization of hooks (RT#130635)
  - Fix a memory leak of a class name from retrieve_hook() on an exception
    (RT#130635)


author: Tomas Orsava <torsava@redhat.com> - 3.6.1-6
changelog:
  - BuildRequire the python36-devel package when building for the python36 module
  - BuildRequire also python36-rpm-macros as part of the python36 module build


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.9.0-1
changelog:
  - New version
  - Dropped pptpsetup-mppe, vector-remove-fix, and call-use-after-free-fix
    patches (all upstreamed)
  - Dropped loading of nf_conntrack_pptp kernel module which was workaround and
    according to upstream only hides real problems


author: Josef Ridky <jridky@redhat.com> - 3.19.1-1
changelog:
  - Update to 3.19.1
  - Add patch to use libtirpc
  - Add BR gcc-c++
  - Resolves: #1580754 - FTBFS in RHEL-8


author: Petr Stodulka <pstodulk@redhat.com> - 1.7-1
changelog:
  - rebase to new upstream version 1.7
  - dropped all patches (almost all issues are fixed in new upstream version,
    sometimes in different way)
    - only patch gzip-1.3.12-openbsd-owl-tmp.patch is untested - code is changed
      significantly and patch is undocumented from archaic time, so I drop it too
    Resolves: #1321560


author: Jakub Martisko <jamartis@redhat.com> - 1.9-4
changelog:
  - Fix FTBFS bug (gnulib problems)
   - more details: https://lists.gnu.org/r/bug-gnulib/2018-03/msg00000.html
     Resolves 1611722


author: Adrian Reber <adrian@lisas.de> - 3.12-0.1
changelog:
  - Updated to 3.12 (pre-release)
  - Create libs subpackage
  - Build against SELinux (Fedora and RHEL8)
  - Build against libbsd (Fedora)


author: Jan Rybar <jrybar@redhat.com> - 6.6.3-2
changelog:
  - lastcomm: added new --pid option to show process PID and PPID
  - changelog update: 6.6.3-1 author change
  - spec file update: added correct access mode to created /var/account/pacct


author: Radovan Sroka <rsroka@redhat.com> - 0.16-6
changelog:
  - ported syslog format from rhel7
    resolves: rhbz#1584136
  - fixed crypto problem with libgcrypt
    resolves: rhbz#1584120


author: Radovan Sroka <rsroka@redhat.com> - 0.16-8
changelog:
  - fixed wrong line wrapping of messages in the syslog format
    resolves: rhbz#1628153
  - fixed coverity issues
    resolves: rhbz#1602441
  - fixed crash when processing .dynamic section
    resolves: rhbz#1597250


author: Radovan Sroka <rsroka@redhat.com> - 0.16-9
changelog:
  - Null pointer dereference fix spotted by coverity
    resolves: rhbz#1676487
  - aide.conf needs updates for RHEL 8
    resolves: rhbz#1708015


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30
    - Fix handling carriage return after c-indicator (CPAN RT#41141)
    - Fix CHECK_UTF8 SEGV with empty len=0 strings (CPAN RT#61562)
    - Add missing function declarations
    - Tighten the TODO tests; no passing TODOs now, but still JSON
    - SingleQuote and \/ and \u roundtrips do fail
  - Drop EL-5 support
    - Drop Group: and BuildRoot: tags
    - Drop buildroot cleaning in %install
    - Drop explicit %clean section


author: Matias Kreder <mkreder@gmail.com> - 1.6.2-34
changelog:
  - Removed uuid-php subpackage since php(api) is no longer provided on
  - PHP 7 and there is a replacement (pecl/uuid extension)


author: Rex Dieter <rdieter@fedoraproject.org> - 7.6.2-1
changelog:
  - 7.6.2 (#1531008)
  - libgc soname bump
  - -devel: include all docs here (ie, remove README's from main too)


author: Nick Clifton <nickc@redhat.com> - 2.32-15.1
changelog:
  - Fix a potential seg-fault in the BFD library when parsing pathalogical debug_info sections.  (#1779255)
  - Fix a potential memory exhaustion in the BFD library when parsing corrupt DWARF debug information.
  - Backport H.J.Lu's patch to add a workaround for the JCC Errata to the assembler. (#1783958)
  - Fix potential integer overflow in readelf.  (#1740470)
  - Fix potential integer overflow in GOLD.  (#1739491)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.12-22
changelog:
  - Python 2 binary package renamed to python2-libdnet
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.1-3
changelog:
  - support %bootstrap, %check: add autotests
  - build with -O1 to workaround serious autotest/code failures (f28+, #1551246)


author: Jiri Vymazal <jvymazal@redhat.com> - 1.2.13-1
changelog:
  - rebase to 1.2.13
    resolves: rhbz#1425638
  - added patch for GnuTLS crypto-policy adherence
    resolves: rhbz#1179317
  - added autoconf, automake and libtool because package
    has patches now


author: Matej Mužila <mmuzila@redhat.com> - 3:2.4-5
changelog:
  - Add "Wants" dependency on network-online.target
  - Remove "After" dependency on NetworkManager-wait-online.service


author: John Dennis <jdennis@redhat.com> - 1.0.1-1
changelog:
  * Add TLS 1.3 cipher suites.

    * ssl_cipher_info.py now attempts to enable TLS 1.3.

    * Fix build issue in setup.py. python-nss can now be build
      as Python wheel, e.g. `pip wheel -w dist .`

    * The following constants were added:

      - ssl.TLS_AES_128_GCM_SHA256
      - ssl.TLS_AES_256_GCM_SHA384
      - ssl.TLS_CHACHA20_POLY1305_SHA256


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.1-5
changelog:
  - Python 2 binary package renamed to python2-nss
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: <jdennis@redhat.com> - 1.0.1-10
changelog:
  - Move documentation generator from epydoc to Sphinx autodoc
  - Modify py2/py3 build logic to comply with new guidelines


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-7
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1704365 and rhbz#1703531


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.8-9
changelog:
  - Reduced default build flags used to build extension modules
    https://fedoraproject.org/wiki/Changes/Python_Extension_Flags
  Resolves: rhbz#1634784


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.8-12
changelog:
  - Use RPM built wheels of pip and setuptools in ensurepip instead of our rewheel patch
  - Require platform-python-setuptools from platform-python-devel to prevent packaging errors
  Resolves: rhbz#1701286


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-13
changelog:
  - Do not set PHA verify flag on client side (rhbz#1725721)
  - Enable TLS 1.3 post-handshake authentication in http.client (rhbz#1671353)


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-14
changelog:
  - Adding a new patch 329 that adds support for OpenSSL FIPS mode
  - Explicitly listing man pages in files section to fix an RPM warning
  Resolves: rhbz#1731424


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-15
changelog:
  - Patch 329 that adds support for OpenSSL FIPS mode has been improved and
    bugfixed
  Resolves: rhbz#1744670 rhbz#1745499 rhbz#1745685


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-15.1
changelog:
  - Patch 329 (FIPS) modified: Added workaround for mod_ssl:
    Skip error checking in _Py_hashlib_fips_error
  Resolves: rhbz#1760106


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.1.6-14
changelog:
  - build with hardening LDFLAGS (#1548717)
  - remove obsolete macro and comments
  - add gcc to build requirements


author: Brian C. Lane <bcl@redhat.com> - 3.2-37
changelog:
  - Add CI tests
    Resolves: rhbz#1653912
  - t6000-dm: Stop using private lvm root
    Related: rhbz#1653912


author: Paul Howarth <paul@city-fan.org> - 0.13-1
changelog:
  - Update to 0.13
    - Reformatted Changes to follow basic format in CPAN::Changes::Spec
    - Make tests pass without . in @INC


