# changelog

author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-66
changelog:
  - Update Intel CPU microcode to microcode-20200508 release (#1835549):
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46
      up to 0x78.
  - Change the URL in the intel-microcode2ucode.8 to point to the GitHub
    repository since the microcode download section at Intel Download Center
    does not exist anymore.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-67
changelog:
  - Update Intel CPU microcode to microcode-20200520 release (#1783103):
    - Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f
      up to 0x621;
    - Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718
      up to 0x71a.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-68
changelog:
  - Update Intel CPU microcode to microcode-20200602 release, addresses
    CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795352, #1795355, #1827190):
    - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
    - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
      up to 0x2f;
    - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
      up to 0x26;
    - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
    - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
      up to 0x22;
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
      up to 0xdc;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
      up to 0x1000157;
    - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
      (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
      up to 0x2006906;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
      up to 0x4002f01;
    - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
      up to 0x5002f01;
    - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
      up to 0xdc;
    - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
      from revision 0xca up to 0xd6;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
      0xca up to 0xd6;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
    - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-70
changelog:
  - Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
    0xdc, use 0xd6 by default (#1846133).


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-73
changelog:
  - Update Intel CPU microcode to microcode-20200609 release (#1826589):
    - Fixed a typo in the release note file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-73.1
changelog:
  - Add README file to the documentation directory.
  - Add publicly-sourced codenames list to supply to gen_provides.sh; update
    the latter to handle the somewhat different format.
  - Add SUMMARY.intel-ucode file containing metadata information from
    the microcode file headers.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-73.20
changelog:
  - Update Intel CPU microcode to microcode-20231009 release, addresses
    CVE-2023-23583 (RHEL-3920):
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xac up to 0xb4;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
      up to 0xd0003b9;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
      up to 0x1000268;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
      up to 0xc2;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
      to 0x34;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
      to 0x4e;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
      up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
      up to 0x430;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
      to 0x5;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
      to 0x5d;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
      to 0x11d;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
      up to 0x411c;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
      to 0x12;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32.


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:2.1-64
changelog:
  - Re-generate initramfs not only for the currently running kernel,
    but for several recently installed kernels as well (#1773347).


author: <jsafrane@redhat.com> - 47-14
changelog:
  - Fixed importing /etc/hosts and /etc/services, duplicate entries
    are now skipped. (#916623)
  - Added missing patches.


author: Stepan Kasal <skasal@redhat.com> - 1.5.5-1
changelog:
  - do not require dosfstools nor mkinitrd; tey are not needed for --iso
  - Resolves: 549098, #549099
  - various cosmetic changes
  - drop obsolete conflicts tag
  - better buildroot


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.5.5-3
changelog:
  - Added license file into package
  - Fixed rpmlint warning
  - Added sparc64 to ExclusiveArch
    Resolves: rhbz#226145


author: Michal Hlavinka <mhlavink@redhat.com> - 40i-0.20120630
changelog:
  - Upgrade to pre-release of 40i
  - includes new legacy shell lksh for old scripts requiring pdksh or similar old
    ksh-88 shell, see man lksh for differences


author: Thorsten Glaser <tg@mirbsd.org> 45-1
changelog:
  - Upgrade mksh to R45 and the other files to the accompanying versions
  - Drop workaround for GCC PR55009 (no longer needed)
  - Use https for homepage


author: Miloslav Trmač <mitr@redhat.com> - 0.23.1-3
changelog:
  - Exclude /mnt by default
    Resolves: #674635
  - Drop %triggerpostun on slocate - it is long obsolete, and rpm started
    rejecting "Requries(triggerpostun)"


author: Miloslav Trmač <mitr@redhat.com> - 0.24-1
changelog:
  - Update to mlocate-0.24
    Resolves: #675189
  - Explicitly exclude fuse.sshfs.  Ideally we'd like to exclude all fuse.* file
    systems, sshfs is urgent because it it can hang updatedb.
    Resolves: #604145, #608094


author: Miloslav Trmač <mitr@redhat.com> - 0.26-1
changelog:
  - Update to mlocate-0.26
  - Drop no longer necessary %clean and %defattr commands.
  - Enable hardened build
    Resolves: #853189


author: Miloslav Trmač <mitr@redhat.com> - 0.26-3
changelog:
  - Update cron packaging for https://fedoraproject.org/wiki/Packaging:CronFiles
    Notably, the cron script (previously not %config) was renamed.


author: Michal Sekletar <msekleta@redhat.com> - 0.26-6
changelog:
  - index zfs filesystems despite the fact they are marked as nodev (#1304416)
  - add gpfs to PRUNEFS (#1180672)
  - mlocate.db is ghost file created with non-default attrs, list them explicitly so rpm --verify doesn't report errors (#1182306)
  - use more strict permissions for cron script (#1179633)


author: Michal Sekletar <msekleta@redhat.com> - 0.26-7
changelog:
  - don't index fuse.glusterfs filesystems (#1331870)
  - don't index files on ceph filesystem (#1333152)
  - update link to upstream repository (#1502361)


author: Dan Williams <dcbw@redhat.com> - 1.20090918-1
changelog:
  - Update to latest upstream release including:
  - Algeria, Australia, Belarus, Belgium, Brazil
  - Brunei, Bulgaria, Egypt, Finland, Ghana, Greece
  - India, Italy, Kazakhstan, Korean CDMA operators
  - Kuwait, Mali, Netherlands, Paraguay, Serbia
  - Spain, Sweden, UK


author: Dan Williams <dcbw@redhat.com> - 1.20100122-1
changelog:
  - Update to latest upstream release including:
  - Cyprus, Austria, Ireland, Ukraine, Romainia, Cambodia (rh #530981), 
  - Iraq, India, Sri Lanka, UK, Australia, Singapore,
  - South Korea, Italy, United States, China (rh #517253), Nigeria,
  - Tanzania, Germany, Qatar, Russia, and Finland (rh #528988)


author: Matěj Cepl <mcepl@redhat.com> - 1.20101231-1
changelog:
  - Update to latest upstream checkout including:
  	Afghanistan, Argentina, Armenia, Australia, Austria, Bahrain, Canada,
  	Croatia, Denmark, Dominican Republic, Finland, France, French Polynesia,
  	Germany, Greece, Hong Kong, Hungary, China, Iceland, India, Indonesia,
  	Iran, Israel, Israel, Italy, Latvia, Luxembourg, Mexico, Montenegro,
  	Netherlands, New Zealand, Nicaragua, Norway, Paraguay, Philippines,
  	Poland, Portugal, Romania, Rwanda/Burundi, Slovakia, Slovenia, Spain,
  	Sudan, Sweden, Switzerland, Thailand, Tunisia, Uganda, United Arab
  ,


author: Matěj Cepl <mcepl@redhat.com> - 1.20110218-1
changelog:
  - Update to latest upstream checkout including:
  	* south africa: add 8.ta (Telkom) provider (bgo #641916),
  	  remove username for Cell-C (bgo #640794)
  	* switzerland: update Orange plans and APNs (bgo #638115)
  	* tanzania: add Sasatel and TTCL, add CDMA for Zantel (bgo #634609)
  	* india: new unified BSNL APNs (rh #667280)
  	* ec: add Movistar Ecuador (bgo #638223)


author: Simo Sorce <simo@redhat.com> 1.3.1-1
changelog:
  - Various bugfixes and minor new features
  - resolves: #1258168
  - resolves: #1258171
  - resolves: #1258172
  - resolves: #1258456


author: Joe Orton <jorton@redhat.com> - 5.4-16
changelog:
  - hard-code use of /run/user/apache for cache dir
  - package /run/user/apache
  - move tmpfiles drop-in to /usr/lib


author: Jan Kaluza <jkaluza@redhat.com> - 5.4-25
changelog:
  - don't fail with error 500 when ticket is expired and Authorization header is
    provided by client (#982521)


author: Simo Sorce <simo@redhat.com> 0.8.0-1
changelog:
  - New upstream realease version 0.8.0
  - Upstream moved to github
  - Drops patches as they have been all included upstream


author: John Dennis <jdennis@redhat.com> - 0.10.0-1
changelog:
  - Rebase to upstream 0.10.0 release
  - Apply upstream commits post 0.10.0 release
  - Apply ECP pending patches
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.10.0-2
changelog:
  - Rebase to upstream 0.10.0 release
  - Apply upstream commits post 0.10.0 release
  - Apply revised ECP pending patches
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.10.0-3
changelog:
  - Rebase to upstream 0.10.0 release
  - Apply upstream commits post 0.10.0 release
  - Apply revised ECP pending patches,
    fix patch to pickup change in configure script that causes
    HAVE_ECP to be defined
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.11.0-1
changelog:
  - Upgrade to upstream 0.11.0 release.
  - Includes ECP support, see NEWS for all changes.
  - Update mellon_create_metadata.sh to match internally generated metadata,
    includes AssertionConsumerService for postResponse, artifactResponse &
    paosResponse.
  - Add lasso 2.5.0 version dependency
  - Resolves: #1205345


author: John Dennis <jdennis@redhat.com> - 0.11.0-2
changelog:
  - Resolves: bug #1296286
    mod_auth_mellon emits CRITICAL warning message in Apache log when doing ECP
  - Resolves: bug #1324536
    Installing mod_auth_mellon causes working Kerberos authentication
    to start failing
  - Add ECP.rst documentation file that was erroneously omitted


author: John Dennis <jdennis@redhat.com> - 0.11.0-4
changelog:
  - Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
    Rebuilding due to missing comment in Changelog


author: John Dennis <jdennis@redhat.com> - 0.13.1-1
changelog:
  - Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
  - Adds the following upstream bug fixes on top of 0.13.1:
    * ee97812 Add Mellon User Guide
    * daa5d1e If no IdP's are defined explicitly log that fact
    * c291232 Make MellonUser case-insensitive.
    * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
    * 5c5ed1d Fix segmentation fault with POST field without a value.
    * 4c924d9 Fix some log message typos
    * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
      show both the expected and received values.
  - Add new mellon user guide to installed docdir


author: John Dennis <jdennis@redhat.com> - 0.13.1-2
changelog:
  - Resolves: rhbz#1553854 Add diagnostic logging
  - Add MellonSignatureMethod config option to set signature method used
    to sign SAML messages sent by Mellon. Defaults to original sha1.


author: John Dennis <jdennis@redhat.com> - 0.13.1-3
changelog:
  - Resolves: rhbz#1553854 Add diagnostic logging
  - Add README.redhat.rst doc, explains how to enable diagnostic logging


author: John Dennis <jdennis@redhat.com> - 0.13.1-2
changelog:
  - Resolves: rhbz#1481330 Add diagnostic logging
  - Resolves: rhbz#1295472 Add MellonSignatureMethod config option to set
    signature method used to sign SAML messages sent by Mellon.
    Defaults to original sha1.


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-2.1
changelog:
  - Resolves: rhbz#1692455 - CVE-2019-3878 mod_auth_mellon: authentication
                             bypass in ECP flow [rhel-7.6.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-2.2
changelog:
  - Resolves: rhbz#1697487 - mod_auth_mellon Cert files name wrong when
                             hostname contains a number


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-2.3
changelog:
  - Resolves: rhbz#1697488 - CVE-2019-3877 mod_auth_mellon: open redirect
                             in logout url when using URLs with backslashes
                             [rhel-7] [rhel-7.6.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-2.4
changelog:
  - Actually apply the patch in the previous build
  - Resolves: rhbz#1697488 - CVE-2019-3877 mod_auth_mellon: open redirect
                             in logout url when using URLs with backslashes


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-3
changelog:
  - Resolves: rhbz#1652980 - mod_auth_mellon Cert files name wrong when
                             hostname contains a number


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-4
changelog:
  - Resolves: rhbz#1576719 - ECP flow not triggering, instead client access
                             secured resources without ECP authentication


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-5
changelog:
  - Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                             in logout url when using URLs with backslashes
                             [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-6
changelog:
  - Apply the patch from the previous commit
  - Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                             in logout url when using URLs with backslashes
                             [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-7
changelog:
  - Resolves: rhbz#1727789 - mod_auth_mellon fix for AJAX header name
                             X-Requested-With


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-8
changelog:
  - Resolves: rhbz#1731052 - CVE-2019-13038 mod_auth_mellon: an Open Redirect via
                             the login?ReturnTo= substring which could facilitate
                             information theft [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.14.0-9
changelog:
  - Resolves: rhbz#1791264 - Backport SameSite=None cookie from upstream to
                             support latest browsers


author: Simo Sorce <simo@redhat.com> 0.7.0-0
changelog:
  - Initial Fedora release based on version 0.7.0
  - Based on an old spec file by Jean-Marc Liger <jmliger@siris.sorbonne.fr>


author: Simo Sorce <simo@redhat.com> 0.7.0-3
changelog:
  - Backport of useful patches from upstream
    - Better handling of IDP reported errors
    - Better handling of session data storage size


author: John Dennis <jdennis@redhat.com> - 1.8.8-3
changelog:
  - fix unit test failure caused by apr_jwe_decrypt_content_aesgcm()
    failing to null terminate decrypted string
    Resolves: bug#1292561 New package: mod_auth_openidc


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.8-4
changelog:
  - Resolves: rhbz#1626299 - CVE-2017-6059 mod_auth_openidc: Shows
                             user-supplied content on error pages [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.8-5
changelog:
  - Resolves: rhbz#1626297 - CVE-2017-6413 mod_auth_openidc: OIDC_CLAIM and
                             OIDCAuthNHeader not skipped in an "AuthType oauth20"
                             configuration [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.8-6
changelog:
  - Resolves: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
                             issue exists in URLs with slash and backslash [rhel-7]
  - Resolves: rhbz#1805067 - CVE-2019-14857 mod_auth_openidc: Open redirect
                             in logout url when using URLs with leading slashes
                             [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.8-7
changelog:
  - Fix a regression in the previous patches
  - Related: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
                            issue exists in URLs with slash and backslash [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.8-8
changelog:
  - Resolves: rhbz#1823762 - Backport SameSite=None cookie from
                             mod_auth_openidc upstream to support
                             latest browsers [rhel-7.9.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.8.8-9
changelog:
  - Rebuild to pick up the proper build tag
  - Related: rhbz#1823762 - Backport SameSite=None cookie from
                            mod_auth_openidc upstream to support
                            latest browsers [rhel-7.9.z]


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.6-1
changelog:
  - Make pam_authenticate_with_login_password available for other modules.
  - Reformat documentation to make the Basic Auth usage less prominent.


author: Paul Howarth <paul@city-fan.org> 2.3.6-5
changelog:
  - Fix regression in 2.3.6 that broke process controls when using vhost-specific
    configuration (upstream issue 49902, #783742, CVE-2012-1181)


author: Paul Howarth <paul@city-fan.org> 2.3.6-6
changelog:
  - Fix compatibility with httpd 2.4 in F-18/RHEL-7 onwards
  - Use /run rather than /var/run from F-15/RHEL-7 onwards


author: Paul Howarth <paul@city-fan.org> 2.3.7-1
changelog:
  - Update to 2.3.7
    - Introduce FcgidWin32PreventOrphans directive on Windows to use OS Job
      Control Objects to terminate all running fcgi's when the worker process
      has been abruptly terminated (PR: 51078)
    - Periodically clean out the brigades that are pulling in the request body
      for handoff to the fcgid child (PR: 51749)
    - Resolve crash during graceful restarts (PR: 50309)
    - Solve latency/congestion of resolving effective user file access rights
      when no such info is desired, for config-related filename stats (PR: 51020)
    - Fix regression in 2.3.6 that broke process controls when using
      vhost-specific configuration
    - Account for first process in class in the spawn score
  - Drop patch for CVE-2012-1181, now included in upstream release


author: Paul Howarth <paul@city-fan.org> 2.3.9-1
changelog:
  - Update to 2.3.9
    - SECURITY: Fix possible heap buffer overwrite (CVE-2013-4365)
    - Add experimental cmake-based build system for Windows
    - Correctly parse quotation and escaped spaces in FcgidWrapper and the AAA
      Authenticator/Authorizor/Access directives' command line argument, as
      currently documented (PR#51194)
    - Honor quoted FcgidCmdOptions arguments (notably for InitialEnv
      assignments) (PR#51657)
    - Conform script response parsing with mod_cgid and ensure no response body
      is sent when ap_meets_conditions() determines that request conditions are
      met
    - Improve logging in access control hook functions
    - Avoid making internal sub-requests and processing Location headers when in
      FCGI_AUTHORIZER mode, as the auth hook functions already treat Location
      headers returned by scripts as an error since redirections are not
      meaningful in this mode
    - Revert fix for PR#53693, added in 2.3.8 but undocumented
    - Fix issues with a minor optimization added in 2.3.8


author: Luboš Uhliarik <luhliari@redhat.com> - 2.3.9-4.1
changelog:
  - Resolves: #1501307 - mod_fcgid cause Segmentation fault error while doing
    large file uploads over HTTPS


author: Luboš Uhliarik <luhliari@redhat.com> - 2.3.9-5
changelog:
  - Resolves: #1486653 - mod_fcgid cause Segmentation fault error while doing
    large file uploads over HTTPS


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.7-1
changelog:
  - No longer call lookup_identity_hook explicitly, hook order does
    the same.
  - Silence compile warnings by specifying C99.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.8-1
changelog:
  - 1109923 - Fix module loading/configuration for Apache 2.4.
  - Document the runtime dependency on pam_authenticate_with_login_password.
  - Comment/code cleanup.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.6-1
changelog:
  - Use org.freedesktop.sssd.infopipe.GetUserGroups for group lists.
  - Support new org.freedesktop.sssd.infopipe.GetUserAttr parameters /
    return values.
  - Removed LookupOutputGroupsSeparator.
  - LookupOutputGroups and LookupUserAttr now support separator as
    optional second parameter.
  - Added LookupUserGroupsIter and LookupUserAttrIter.
  - Added LookupDbusTimeout.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.8.1-1
changelog:
  - Ensure we run before mod_headers so that our result can be put to
    request headers for mod_proxy.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.0-1
changelog:
  - Add support for '+'-prefixed note/variable names.
  - Silence compile warnings by specifying C99.
  - Fix format of logs of dbus calls.


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-30
changelog:
  - Resolves: rhbz #1029360
  - Bugzilla Bug #1029360 - ambiguous/invalid ENVR in httpd-mmn Provides/Requires


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-31
changelog:
  - Resolves: rhbz #1029360
  - Bugzilla Bug #1029360 - ambiguous/invalid ENVR in httpd-mmn Provides/Requires
  - corrected typo on date


author: Rob Crittenden <rcritten@redhat.com> - 1.0.11-3
changelog:
  - Fix logical and support in cipher strings CVE-2015-3277
    (#1253570)
  - Add missing BuildRequires and small patch to use requests.urllib3
    to fix make check (#1253570)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.11-5
changelog:
  - Don't enable NULL ciphers in DEFAULT macro (#1253570)
  - Add OpenSSL cipher macro EECDH (#1160745)
  - Disable the live server testing in make check because it
    may run as root and fail horribly (#1160745)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.11-6
changelog:
  - Add the supported NSS SHA384 ciphers (#1253570)
  - Add kECDH, AECDH, ECDSA and aECDSA macros (#1253570)
  - Bump the NSS BR and Requires so the new ciphers are available
  - Bump the NSPR Requires to match NSS


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-1
changelog:
  - Rebase to 1.0.14 (#1299063)
  - Add support for Server Name Indication (SNI) (#1053327)
  - Use upstream method to not execute live tests as root (#1256887)
  - Always call SSL_ShutdownServerSessionIDCache() in ModuleKill
    (#1263301, #1296685)
  - Don't require NSSProxyNickname (#1280287)
  - Make link to libnssckbi.so an absolute link (#1288471)
  - Fail for colons in credentials with FakeBasicAuth (#1295970)
  - Don't ignore NSSProtocol when NSSFIPS is enabled (#1312491)
  - Check filesystem permissions on NSS database at startup (#1312583)
  - OpenSSL ciphers stopped parsing at +, CVE-2016-3099 (#1323913)
  - Patch to match available ciphers so tests pass (#1299063)
  - Patch to fix tests in brew (#1299063)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-6
changelog:
  - Check the NSS certificate database directory for read permissions
    by the Apache user. (#1312583)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-8
changelog:
  - Fail start start when there are invalid Protocols defined (#1389114)
  - Handle group membership when testing NSS database filesystem
    permissions (#1395300)
  - Add OCSP cache tuning directives (#1392582) 
  - Don't share mod_nss NSS database with nss_pcache (#1382102)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-9
changelog:
  - Update nss_pcache.8 to drop directory and prefix options (#1382102)

  - Don't share mod_nss NSS database with nss_pcache (#1382102)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.14-12
changelog:
  - Correct URL and Source entries to point to pagure.io (#1502362)
  - Remove deprecated NSSSessionCacheTimeout from default config (#1257662)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-18
changelog:
  - Actually apply the patch to use memmove in place of memcpy since the
    buffers can overlap (#669118)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-21
changelog:
  - Bugzilla Bug #884115 - Package mod_nss-1.0.8-18.1.el7 failed RHEL7 RPMdiff
    testing
  - Bugzilla Bug #906082 - mod_nss requires manpages for gencert and nss_pcache
  - Bugzilla Bug #906089 - Fix dangling symlinks in mod_nss
  - Bugzilla Bug #906097 - Correct RPM Parse Warning in mod_nss.spec
  - Bugzilla Bug #948601 - Man page scan results for mod_nss


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-21.1
changelog:
  - Add the following explanation to the 'Dangling symlinks' textbox in rpmdiff:
    Symlink 'etc/httpd/alias/libnssckbi.so' is deliberate.
    This test does not belong in rpmdiff. This test belongs in TPS.
    Since the symlink points to a file in another package, e.g. a
    dependency or a system file, rpmdiff cannot detect this. Remember,
    rpmdiff does not install or even know about package dependencies.
    That's TPS's job.
  - Add the following explanation to the 'Brewtap results' textbox in rpmdiff:
    The '/etc/httpd/conf.d/nss.conf' file does not require a man page
    because its parameters are sufficiently documented within the
    configuration file itself.
    The '/etc/httpd/conf.modules.d/10-nss.conf' file does not require
    a man page because the file merely contains the line
    'LoadModule nss_module modules/libmodnss.so' to support httpd
    loading of Dynamic Shared Objects ('/etc/httpd/conf/httpd.conf').


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-24
changelog:
  - Add '--enable-ecc' option to '
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -grecord-gcc-switches  -m32 -mcpu=power7 -mtune=power7}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -grecord-gcc-switches  -m32 -mcpu=power7 -mtune=power7}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -grecord-gcc-switches  -m32 -mcpu=power7 -mtune=power7 -I/usr/lib/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -grecord-gcc-switches  -m32 -mcpu=power7 -mtune=power7 -I/usr/lib/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=ppc-redhat-linux-gnu --host=ppc-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info' line under '%build' section of
    this spec file (mharmsen)
  - Bumped version build/runtime requirements for NSPR and NSS (mharmsen)
  - [mod_nss-PK11_ListCerts_2.patch]
  - Bugzilla Bug #1022295 - PK11_ListCerts called to retrieve all user
    certificates for every server (rcritten)
  - [mod_nss-array_overrun.patch]
  - Bugzilla Bug #1022298 - overrunning array when executing nss_pcache
    (rcritten)
  - [mod_nss-clientauth.patch]
  - Bugzilla Bug #1022921 - mod_nss: FakeBasicAuth authentication bypass
    [rhel-7.0] (rcritten)
  - [mod_nss-no_shutdown_if_not_init_2.patch]
  - Bugzilla Bug #1022303 - File descriptor leak after "service httpd reload"
    or httpd doesn't reload (rrelyea)
  - [mod_nss-proxyvariables.patch]
  - Bugzilla Bug #1022309 - mod_nss insists on Required value NSSCipherSuite
    not set. (mharmsen)
  - [mod_nss-tlsv1_1.patch]
  - Bugzilla Bug #1022310 - current nss support TLS 1.1 so mod_nss should pick
    it up (mharmsen)
  - [mod_nss-sslmultiproxy_2.patch]
  - Fixes Bugzilla Bug #1021458 - [RFE] Support ability to share mod_proxy with
    other SSL providers (jorton, mharmsen, nkinder, & rcritten)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-24
changelog:
  - Add '--enable-ecc' option to %configure line under %build section of
    this spec file (mharmsen)
  - Bumped version build/runtime requirements for NSPR and NSS (mharmsen)
  - [mod_nss-PK11_ListCerts_2.patch]
  - Bugzilla Bug #1022295 - PK11_ListCerts called to retrieve all user
    certificates for every server (rcritten)
  - [mod_nss-array_overrun.patch]
  - Bugzilla Bug #1022298 - overrunning array when executing nss_pcache
    (rcritten)
  - [mod_nss-clientauth.patch]
  - Bugzilla Bug #1022921 - mod_nss: FakeBasicAuth authentication bypass
    [rhel-7.0] (rcritten)
  - [mod_nss-no_shutdown_if_not_init_2.patch]
  - Bugzilla Bug #1022303 - File descriptor leak after "service httpd reload"
    or httpd doesn't reload (rrelyea)
  - [mod_nss-proxyvariables.patch]
  - Bugzilla Bug #1022309 - mod_nss insists on Required value NSSCipherSuite
    not set. (mharmsen)
  - [mod_nss-tlsv1_1.patch]
  - Bugzilla Bug #1022310 - current nss support TLS 1.1 so mod_nss should pick
    it up (mharmsen)
  - [mod_nss-sslmultiproxy_2.patch]
  - Fixes Bugzilla Bug #1021458 - [RFE] Support ability to share mod_proxy with
    other SSL providers (jorton, mharmsen, nkinder, & rcritten)


author: Joe Orton <jorton@redhat.com> - 1.0.8-26
changelog:
  - [mod_nss-SSLEngine-off.patch]
  - Bugzilla Bug #1029042 - Implicit SSLEngine for 443 port breaks mod_nss
    configuration (jorton)
  - [mod_nss-unused-filter_ctx.patch]
  - Bugzilla Bug #1029665 - Remove unused variable 'filter_ctx' (mharmsen)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-27
changelog:
  - Resolves: CVE-2013-4566
  - Bugzilla Bug #1024536 - mod_nss: incorrect handling of NSSVerifyClient in
    directory context [rhel-7.0] (rcritten)
  - Bugzilla Bug #1030845 - mod_nss: do not use %configure in %changelog
    (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-28
changelog:
  - Resolves: rhbz #1030276
  - [mod_nss-usecases.patch]
  - Bugzilla Bug #1030276 - mod_nss not working in FIPS mode


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-7
changelog:
  - Bugzilla Bug #716355 - mod_revocator does not shut down httpd server if
    expired CRL is fetched
  - Bugzilla Bug #716361 - mod_revocator does not bring down httpd server if
    CRLUpdate fails


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-9
changelog:
  - Bugzilla Bug #716874 - httpd (32 bit) failed to start if mod_revocator
    (32 bit) is installed on ppc64


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-14
changelog:
  - Bugzilla Bug #861999 - mod_revocator exec CLR URIs fail to load: unable to
    load Revocation module, NSS error -8187 - stephen.capstick64@gmail.com
    (mod_revocator-waitpid.patch)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-16
changelog:
  - Bugzilla Bug #948875 - Man page scan results for mod_revocator
  - Moved 'ldapget' from %bindir to %sbindir (provided compatibility link)
  - Moved 'crlhelper' from %bindir to %libexecdir (provided compatibility link)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-17
changelog:
  - Add the following explanation to the 'Brewtap results' textbox in rpmdiff:
    The '/etc/httpd/conf.d/revocator.conf' file does not require a man page
    because its parameters are sufficiently documented within the
    configuration file itself.
    The '/etc/httpd/conf.modules.d/11-revocator.conf' file does not require
    a man page because the file merely contains the line
    'LoadModule rev_module modules/mod_rev.so' to support httpd
    loading of Dynamic Shared Objects ('/etc/httpd/conf/httpd.conf').


author: Rob Crittenden <rcritten@redhat.com> - 1.0.3-20
changelog:
  - Clean up semaphore in crlhelper on shutdown (#1326840)
  - Update URL to https://fedorahosted.org/mod_revocator/


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.1-1
changelog:
  - Update to 2.7.1
  - Remove libxml2 build patch (upstreamed)
  - Update spec since upstream moved to github


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.1-3
changelog:
  - Add some missing directives RHBZ #569360
  - Fix multipart/invalid part ruleset bypass issue (CVE-2012-4528)
    (RHBZ #867424, #867773, #867774)


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.1-5
changelog:
  - Use conditional for loading mod_unique_id (rhbz #879264)
  - Fix syntax errors on httpd 2.4.x by using IncludeOptional (rhbz #879264, comment #2)


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.7.3-2
changelog:
  - Fix NULL pointer dereference (DoS, crash) (CVE-2013-2765) (RHBZ #967615)
  - Fix a possible memory leak.


author: Daniel Kopecek <dkopecek@redhat.com> - 2.9.2-1
changelog:
  - RHEL-7.5 erratum
   - Update to 2.9.2
   - Fixed bogus dates in the spec file
   - Enabled mlogc subpackage
   - Enabled collection global lock to prevent collection
     removal failures
    Resolves: rhbz#1388656
    Resolves: rhbz#1139728
    Resolves: rhbz#1473420


author: Joe Orton <jorton@redhat.com> - 3.4-3
changelog:
  - use a NULL c->sbh pointer with httpd 2.4 (possible fix for #867276)
  - add logging for unexpected daemon process loss


author: Jan Kaluza <jkaluza@redhat.com> - 3.4-7
changelog:
  - compile with -fno-strict-aliasing to workaround Python
    bug http://www.python.org/dev/peps/pep-3123/


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.5-5
changelog:
  - Add JPP depmap for maven-project to override versionless depmap
  - Add missing BR/R: maven-project
  - Remove unneeded BR: jpa_api


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.7-2
changelog:
  - Build with xmvn
  - Use better description
  - Simplify build-requires
  - Update to current packaging guidelines


author: Thomas Woerner <twoerner@redhat.com> 2.3.4-1
changelog:
  - new version 2.3.4 with LGPL license
  - fixed some rpmlint warnings
  - new sub package for static libraries
  - added /etc/X11/mwm directory
  - removed defattrs


author: Thomas Woerner <twoerner@redhat.com> 2.3.4-2
changelog:
  - fixed requirements according to review (RHBZ#870049)
  - flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7


author: Thomas Woerner <twoerner@redhat.com> - 2.3.4-8
changelog:
  - mwm: do not see outline of window when moving (RHBZ#1080548)
    Clone of RHBZ#997241
  - Fixed rendering issues seen while scrolling window (RHBZ#1134365)
    (MotifZone bug #1654)


author: Thomas Woerner <twoerner@redhat.com> - 2.3.4-9
changelog:
  - Fixed motif issue while navigating drop down menus with arrow keys
    (RHBZ#1396514) (MotifZone bug #1564)


author: Carlos Soriano <csoriano@redhat.com> - 2.3.4-10
changelog:
  - Fix last commit that is actually MotifZone#1565 and removes that patch since
    it was causing more problems. Fixes MotifZone#1576.
    Resolves: rhbz#1448509


author: Carlos Soriano <csoriano@redhat.com> - 2.3.4-13
changelog:
  - Fix motifzone 1665. Motif was deactivating shorcuts in cascade menus when
    closing them by mouse.
    Resolves: RHBZ#1467303


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-2
changelog:
  - fixed LabelGadget draws background over border of its parent (rhbz#584300)
    (MotifZone bug #1517)
  - fixed LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-4
changelog:
  - fixed Label draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521 refixed)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-5
changelog:
  - dropped file requires for /usr/share/X11/XKeysymDB, not needed and not 
    available anymore
  - added flex-static build requirement, because of flex package split


author: Thomas Woerner <twoerner@redhat.com> - 2.3.4-8.1
changelog:
  - Fixed motif issue while navigating drop down menus with arrow keys
    (RHBZ#1415153) (RHBZ#1396514) (MotifZone bug #1564)


author: Colin Walters <walters@redhat.com> - 17.0.0-12
changelog:
  - Add patch for aarch64
  - Fix for aarch64 64k pagesize. BZ#1076181 (Mark Salter <msalter@redhat.com>)
  - Resolves: #1027067


author: Colin Walters <walters@redhat.com> - 17.0.0-16
changelog:
  - Add patch for aarch64 48bit VA limits
    This changes the API/ABI only on aarch64, and hence we also bump
    the soname solely on those architectures.  We do retain the same pkg-config
    file name though, so dependencies should only need a rebuild.
  - Resolves: #1324216


author: Yaakov Selkowitz <yselkowi@redhat.com> - 17.0.0-20
changelog:
  - Switch to upstream aarch64 48bit VA patch
    This reverts the previous API/ABI break on aarch64, so dependencies
    must be rebuilt again.
  - Resolves: #1393548


author: Björn Esser <besser82@fedoraproject.org> - 52.5.0-3
changelog:
  - SpiderMonkey tests do not fail on any arch
  - Basic JIT tests are failing on s390 arches, only
  - Use macro for ppc64 arches
  - Run tests using Python2 explicitly
  - Simplify %check
  - Use the %{major} macro consequently
  - Replace %define with %global


author: Wim Taymans <wtaymans@redhat.com> - 1.23.8-3
changelog:
  - Remove pointless Enhances:
  - Fix splelling mistake
  - change package name from libs-devel to devel and add Obsolete:
  - see rhbz#1394147


author: Michal Schmidt <mschmidt@redhat.com> - 3.2-1
changelog:
  - Update to upstream version mpich-3.2 with patches from Fedora.
  - Keep 3.0.4 as 'mpich-3.0' for backwards compatibility.
  - Resolves: rhbz1091532
  - Resolves: rhbz1142117
  - Resolves: rhbz1148992


author: Michal Schmidt <mschmidt@redhat.com> - 3.2-2
changelog:
  - Remove bad rpath in two binaries in mpich-3.2.
  - Restore trimming of shebang lines in config files in mpich-3.0-devel.
  - Related: rhbz1091532


author: Jay Fenlason <fenlason@redhat.com> 3.2-3.el6
changelog:
  - Build using new mvapich, mvapich2, and openmpi.
    Add support for the -psm variants of the three mpi stacks.
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 3.2-5.el6
changelog:
  - Rebuild against newer infinipath-psm, openmpi, mvapich, mvapich2
    This removes the openmpi-psm subpackage, as openmpi now switches between
     psm and non- at runtime.
  - Correct version numbers for IMB and OSU benchmarkes in the description.
  - Update spec file to fix pkgwrangler warnings.
    Resolves: rhbz557803
    Related: rhbz739138


author: Jay Fenlason <fenlason@redhat.com> 3.2-10
changelog:
  - Add BuildRequires for libibmad-devel
  - Build against mpich, now that we have a mpi-3 version of it.
  - rebuild against new mvapich2
    Resolves: rhbz1011910, rhbz1011915


author: Michal Schmidt <mschmidt@redhat.com> - 4.1-1
changelog:
  - Update IMB to 4.1.
  - Update OSUMB to 5.3.
  - Add subpackages for new mpich and mvapich2 versions and variants.
  - Resolves: rhbz961885
  - Resolves: rhbz1093466


author: Michal Schmidt <mschmidt@redhat.com> - 5.4-1
changelog:
  - Update IMB to 2018.0.
  - Update OMB to 5.4.
  - Add builds for openmpi 3 and mvapich 2.3.
  - Build IMB NBC and RMA tests.
  - Build OSUMB collective async tests.
  - Add precise Requires.
  - Resolves: rhbz1358437


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.3-2
changelog:
  - Fix 'undefined subroutine &SNMP_Session::inet_ntop called at
    /usr/bin/../lib64/mrtg2/SNMP_Session.pm line 549.' error


author: Doug Ledford <dledford@redhat.com> - 1.4-3.el6
changelog:
  - Don't include mtcr.h as we don't really expect anything to need Mellanox
    card register definitions except this program, and we already have the
    file.
  - Change to ExcludeArch instead of ExclusiveArch so we build in all the right
    places.
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.4-7
changelog:
  - The upstream tarball as provided is broken.  Clean up the tarball so
    the package builds properly


author: Doug Ledford <dledford@redhat.com> - 3.0-0.6.g6961daa.1
changelog:
  - Update to latest upstream version, which resovles some licensing issues
    on some of the source files


author: Honggang Li <honli@redhat.com> - 4.11.0-5
changelog:
  - Rebase to latest upstream release v4.11.0-5
  - mstconfig support for prio_tag and ttl_wa
  - Resolves: bz1694703


author: Michal Srb <msrb@redhat.com> - 1:2013.5.1-3
changelog:
  - Do not build module with unclear licensing (relames)
  - Replace %add_to_maven_depmap with %add_maven_depmap


author: Peter Hutterer <peter.hutterer@redhat.com> 1.1.2-3
changelog:
  - Drop xorg-x11-util-macros build requires, not needed anymore
  - Don't build on s390 (or ppc, if on RHEL)
  - Force autoreconf to avoid libtool errors


author: Michal Sekletar <msekleta@redhat.com> - 2:0.85-3
changelog:
  - migrate from consolehelper to policykit (#1014074)
  - introduce grace period (#1014073)
  - query all ipv6 nameservers (#1014075)
  - add missing documentation (#949030)
  - enable hardened build (#1018907)
  - specfile cleanup


author: Dan Horák <dan[at]danny.cz> 1.3.12-5
changelog:
  - dropped debug output when tools are called with wrong number of arguments (#538403)
  - added patch to support DESTDIR for installing


author: Matej Muzila <mmuzila@redhat.com> 5:1.5.21-27
changelog:
  - Resolves #1388511 (System default CA bundle not set as default in compiled-in
    default or config)
  - Resolves #1388512 (mutt sends e-mail with broken "From" header, which has no
    host part)


author: Matej Muzila <mmuzila@redhat.com> - 5:1.5.21-29
changelog:
  - Fix IMAP header caching path traversal vulnerability
  - Resolves: #1608011
  - Resolves: CVE-2018-14355


author: Rui Matos <rmatos@redhat.com> - 3.14.4-17
changelog:
  - Fix a crash when plugging monitors
    Resolves: #1275215
  - Avoid a critical message when unplugging monitors
    Resolves: #1275220
  - Fix monitors remaining undetected on resume from suspend
    Resolves: #1219476


author: Owen Taylor <otaylor@redhat.com> - 3.14.4-26
changelog:
  - Turn on newly added "threaded swap wait" functionality in Cogl
    so that on NVIDIA cards, frame completion is handled in a proper
    non-blocking fashion, fixing bugs with idles not running when
    they should.
    Resolves: #1305076


author: Rui Matos <rmatos@redhat.com> - 3.14.4-29
changelog:
  - Allow clutter to fallback to the classic gl driver since mesa's
    software driver doesn't support gl3
    Related: #1361251


author: Florian Müllner <fmuellner@redhat.com> - 3.24.3-11
changelog:
  - Prevent crash when removing workspace with on-all-workspaces windows
    present (like desktop icons)
  - Resolves: #1453065


author: Florian Müllner <fmuellner@redhat.com> - 3.26.2-7
changelog:
  - Fix crash during session saving
    Resolves: #1535080
  - Fix XWayland prevented from starting
    Resolves: #1540986


author: Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-10
changelog:
  - Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
    Resolves: #1499788
  - Fix tablet pressure curve configuration not being applied
    Resolves: #1543693


author: Kalev Lember <klember@redhat.com> - 3.28.3-1
changelog:
  - Update to 3.28.3
  - Apply HW cursor on-demand patches
  - Apply monitor transform regression patch
  - Resolves: #1569736


author: Owen Taylor <otaylor@redhat.com> - 3.8.4-7
changelog:
  - Add an upstream patch that fixes a bug with left-over window
    shadows that show up when we add patches to Clutter to stop
    redrawing the entire screen on every window move.
    Resolves: rhbz#1063984


author: Owen Taylor <otaylor@redhat.com> 3.8.4-13
changelog:
  - Add patches for quadbuffer stereo suppport
    Fix a bad performance problem drawing window thumbnails
    Resolves: rhbz#861507


author: Jay Fenlason <fenlason@redhat.com> 1.4-4.el6
changelog:
  - Move -devel requires to the -devel subpackage.
    Resolves: bz568450
  - Add defattr as required by packaging guidelines
    Related: bz555835


author: Jay Fenlason <fenlason@redhat.com> 1.6-1.el6
changelog:
  - New upstream release, with different build process, and without
    man pages, because we don't have the sowing package, and its
    licensing status is unclear (no licence description of any kind in
    the tarball).
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.6-2.el6
changelog:
  - Fix the psm RPM macros so that we can build a -psm variant of
    mpitests
  - remove the osu-micro-benchmarks, which are being installed with a
    bogus rpath, and which are included in mpitests
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.6-3.el6
changelog:
  - Change the requires on mvapich2-psm-devel to mvapich2-psm from mvapich2
    so that mpitests will build
  - clean up the build to not use .{non-}psm directories.
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.8-1
changelog:
  - New upstream version, with man pages again.
    This fixes the following bugs:
    Related: rhbz739138
    Resolves: rhbz613696
    Resolves: rhbz625620
    Resolves: rhbz735954
    Resolves: rhbz782263


author: Jay Fenlason <fenlason@redhat.com> 1.8-2
changelog:
  - Add BuildRequires on flex and bison
  - Add "export AR=ar" to allow builds on RHEL-7 to work.
    Resolves: rhbz822527


author: Jay Fenlason <fenlason@redhat.com> 1.8-3
changelog:
  - Move the module files to the (correct for RHEL-7) mpi/ directory.
  - Add MANPATH to the module files.


author: Jay Fenlason <fenlason@redhat.com> 2.0a-1
changelog:
  - Add Build Requires on autoconf, automake, libtool,
    perl-Digest-MD5, hwloc-devel, and libibmad-devel.
  - remove build requires on java
  - New upstream version, edited so it can pass a license audit.
    Resolves: rhbz1001718


author: Kyle McMartin <kmcmarti@redhat.com> - 2.0a-3
changelog:
  - aarch64: add get_cycles implementation since <asm/timex.h> is not
    an exported header.
  - Resolves: #1100046


author: Michal Schmidt <mschmidt@redhat.com> - 2.2-0.1.rc1
changelog:
  - Update to 2.2rc1
  - Includes -psm2 variant for Intel OPA.
  - Still build the previous version for compatibility, as 2.0 subpackages.
  - Resolves: #948504
  - Resolves: #1093453
  - Resolves: #1173318


author: Jarod Wilson <jarod@redhat.com> - 2.2-1.5
changelog:
  - Update mvapich23 (TrueScale) bits to 2.3 release
  - Fix libmpi.a being built w/o -fPIC
  - Resolves: #1625672


author: Tom Lane <tgl@redhat.com> 1:5.1.17-5
changelog:
  - Switch to noarch (non-GCJ) build
  Resolves: #688937, #819139
  - Fix mysql-connector-java-jdbc-4.1.patch to cover both driver classes
  Related: #816696


author: Tom Lane <tgl@redhat.com> 5.1.9-1
changelog:
  - Update to 5.1.9
  - Add --with-unixODBC-libs to configure command for safer multilib behavior
  Related: #757088


author: Honza Horak <hhorak@redhat.com> - 5.2.5-1
changelog:
  - Update to 5.2.5
  - Enlarge buffer size for query string when getting info about tables
    Related: #948619


author: Marcin Juszkiewicz <mjuszkiewicz redhat com> - 5.2.5-4
changelog:
  - Build failed because whether to use lib64 or not is done by checking
    list of known 64-bit architectures. So added AArch64 to that list.
    Resolves: #1041348


author: Mathieu Bridon <bochecha@fedoraproject.org> - 1.2-2
changelog:
  - added comment explaining how the source is obtained (as it is modified from upstream)
  - temporary fix for RHBZ#490830 while not fixed upstream


author: Kamil Dudka <kdudka@redhat.com> - 2.3.0-1
changelog:
  - new upstream release (#680736)
  - use hunspell as default spell-checker (#681000)
  - fix for http://thread.gmane.org/gmane.editors.nano.devel/2911


author: Carlos Soriano <csoriano@redhat.com> 3.14.3-8
changelog:
  - Backport fix for jp2 images crashing nautilus
  - Apply downstream translations
    Resolves: #1271297 #1272881


author: Carlos Soriano <csoriano@redhat.com> 3.14.3-9
changelog:
  - Apply downstream translations
  - Restrict icons on desktop to the primary monitor
    Resolves: #1207646 #1046876 #1272881


author: Ray Strode <rstrode@redhat.com> 3.14.3-2
changelog:
  - Add backward compatible nautilus.desktop for user defined mime associations
    Related: #1174562 1235413


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.3-1
changelog:
  - New stable version 1.2.3.
  - Add patch to work around libvirt problem with relative socket paths.
  - Add patch to fix the xz plugin test with recent guestfish.
  - Fix version in VDDK plugin spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-1
changelog:
  - New stable version 1.2.4.
  - Remove upstream patches.
  - Enable tarball signatures.
  - Add upstream patch to fix tests when guestfish not available.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-2
changelog:
  - Add all upstream patches since 1.2.4 was released.
  - Drop example4 and tar plugins since they depend on Perl.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.5-1
changelog:
  - New stable version 1.2.5.
  - Enable VDDK plugin on x86-64 only.
  - Small refactorings in the spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.0-3
changelog:
  - Fix for CVE-2019-14850 denial of service due to premature opening
    of back-end connection
    resolves: rhbz#1757261


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: nbdkit.ini
  -->  Config file for automated patch script
  - Added Patch: 0001-Rebase-off-of-https-github.com-libguestfs-nbdkit.patch
  -->  Fix use of write -u


author: Ondrej Vasik <ovasik@redhat.com> - 4.2.4-51
changelog:
  - check malloc success (#473488)
  - fix few compiler warnings, free malloc memory before exit
  - new URL


author: Miroslav Lichvar <mlichvar@redhat.com> 5.9-8.20130126
changelog:
  - update to 20130126
  - clear scrollback buffer in clear (#815790)
  - make -base and -term subpackages noarch
  - make some dependencies arch-specific


author: Jeff Moyer <jmoyer@redhat.com> - 53.1-4
changelog:
  - Fix up duplicate "-v" documentation in man page
  - Fix bogus test in invalidate_namespace_options
  - Resolves: bz#1350404 bz#1271425


author: Jeff Moyer <jmoyer@redhat.com> - 56-1
changelog:
  - Rebase to upstream version 56
  - Default to 4k alignment for device dax
  - Resolves: bz#1384873 bz#1384642 bz#1349233 bz#1357451


author: Jeff Moyer <jmoyer@redhat.com> - 56-2
changelog:
  - Update documentation to reflect 4k alignment
  - Add support for the MSFT family of DSM functions
  - Resolves: bz#1440902 bz#1446689


author: Jeff Moyer <jmoyer@redhat.com> - 58.2-1
changelog:
  - rebase to v58.2
  - remove patches that were backported from later versions
  - we now support >4k faults, so remove rhel-only patches
  - add libpmem dependency, and gate it on x86_64
  - pull in static checker fix for uncheck sscanf result
  - fix up use of uninitialized variable
  - Related: bz#1457566 bz#1471807 bz#1456954


author: Jeff Moyer <jmoyer@redhat.com> - 60.3-2.1
changelog:
  - Remove the btt.rules udev rule file.  This was fixed in-kernel. (Jeff Moyer)
  - Related: bz#1585122


author: Jeff Moyer <jmoyer@redhat.com> - 62-1
changelog:
  - Rebase to v62 (Jeff Moyer)
    - a new monitor command / daemon
    - an ndctl udev rule for recording the unsafe shutdown count
    - smart error injection
    - create-namespace fix for fragmented namespaces
  - Resolves: bz#1610649 bz#1611833 bz#1456320


author: Jeff Moyer <jmoyer@redhat.com> - 64.1-1
changelog:
  - Rebase to v64.1 (Jeff Moyer)
    - add security commands
    - fix broken udev rule for dirty shutdown count
  - Resolves: bz#1634348 bz#1635441


author: Jeff Moyer <jmoyer@redhat.com> - 65.1.el7
changelog:
  - Rebase to v65
    - clear-errors: new command to clear errors on a namespace
    - monitor: remove the requirement of a default config
    - sanitize-dimm: allow a zero-key for secure-erase
    - sanitize-dimm: preserve keys after an overwrite
    - load-keys: fix for non-TPM keys
  - Fix test harness to run against the rhel7 test kernel modules
  - Related: rhbz#1722481


author: Jeff Moyer <jmoyer@redhat.com> - 65.2.el7
changelog:
  - Remove 'daxctl migrate-device-model' command.  We won't
    support hot-plugging device dax into the memory hierarchy
    on RHEL 7.
  - Resolves: rhbz#1734153


author: Jeff Moyer <jmoyer@redhat.com> - 65.3.el7
changelog:
  - modify nvdimm-security.conf touse '&&' instead of ';'
    Without this change, the module doesn't load
  - Resolves: rhbz#1725405


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-3
changelog:
  - Added direct dependency on perl-devel with architectute in
    net-snmp-devel package to pull proper dependencies.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-5
changelog:
  - Fixed snmpd in FIPS mode (#874440)
  - Removed APSL licensed code (#830796)
  - Synchronized with RHEL-6.4


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-6
changelog:
  - Removed unused patch
  - Added net-snmp-agent-libs dependency where appropriate
  - Added full relro
  - Make net-snmp-create-v3-user multilib safe


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-8
changelog:
  - Removed APSL patch (#830796)
  - fixed net-snmp-create-v3-user to have the same content on all architectures
  - /var/lib/net-snmp/mib_indexes and cert_indexes added to net-snmp-libs
    (#906761)
  - Python: fixed IPADDRESS size on 64-bit systems (#895357)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-9
changelog:
  - fixed potential memory leak on realloc failure when processing 'extend'
    option (#978384)
  - added precise enumeration of configuration files searched to
    snmp_config(5) man page (#978398)
  - set permissions of snmpd.conf and snmptrapd conf to 0600 (#919240)
  - fixed kernel threads in hrSWRunTable (#979329)
  - fixed snmpd crashing in the middle of agentx request processing when
    a subagent disconnects (#969061)
  - updated UCD-SNMP-MIB::dskTable to dynamically add/remove disks if
    'includeAllDisks' is specified in snmpd.conf (#982644)
  - fixed crash in extTable on empty command line (#955609)
  - lowered severity of few debugging messages in dot3statsTable (#915302)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-11
changelog:
  - fixed parsing of integer variable sizes (#953926, #983116)
  - added support of simfs and vzfs to hrStorageTable (#861152, #989498)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-14
changelog:
  - move tmpfiles.d config file to /usr/lib (#881218)
  - fixed dashes in net-snmp-config.h (#1038642)
  - fixed snmpd crashing on monitor trigger evaluation (#1050971)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-17
changelog:
  - fixed various error codes in Python module (#1064338)
  - fixed net-snmp-config.h header file (#1064437)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-19
changelog:
  - Fixed not-increasing OIDs in IP-FORWARD-MIB::ipCidrRouteTable (#1172013)
  - Fixed HOST-RESOURCES-MIB::hrProcessorTable on machines with >100 CPUs
    (#1070076)
  - skip 'mvfs' (ClearCase) when skipNFSInHostResources is enabled (#1086606)
  - Added clear error message when port specified in 'clientaddrr' config
    option cannot be bound (#1086925)
  - fixed proxying of out-of-tree GETNEXT requests (#1087801)
  - use python/README to net-snmp-python subpackage (#1158391)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-21
changelog:
  - Fixed crash on reloading 'exec' configuration options (#1228893)
  - Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
  - Fixed storageUseNFS functionality in hrStorageTable (#1193006)
  - Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
  - Fixed hrStorageTable to contain 31 bits integers (#1192221)
  - Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
  - Fixed log level of SMUX messages (#1189393)
  - Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
  - Fixed client utilities reporting 'read_config_store open failure on
    /var/lib/net-snmp/snmpapp.conf' (#1151310)
  - Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
  - Added 'diskio' option to snmpd.conf, it's possible to monitor only
    selected devices in diskIOTable (#1092308)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-23
changelog:
  - Fixed parsing of invalid variables in incoming packets (#1248414)
  - Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
    becomes writable (#1241897)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-24
changelog:
  - Fixed lmSensorsTable not reporting sensors with duplicate names
    (#1252053)
  - Fixed close() overhead of extend commands (#1252048)
  - Fixed out-of-bounds write in python code (#1252034)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-27
changelog:
  - Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
  - snmpd: Speed up ipAddressTable loading. (#1327240)
  - Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
  - Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-29
changelog:
  - Move net-snmp-config from devel package to general package (#1486733)
  - Fix SCTP parser (#1329338)
  - Fix strstr() crash (#1428609)
  - Add support for TCP and UDP 64 bit counters (#1448082)
  - Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
  - Fix wrong usage of structure iterator (#1461666)
  - Fix issue with statistics from autofs (#1501144)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-35
changelog:
  - Add fsync to prevet data lose on power failure (#1520761)
  - Add ZFS support (#1533943)
  - Fix man page (#1537460)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-39
changelog:
  - adjust logging of statfs (#1314610)
  - link libnetsnmptrapd against MYSQL LIBS (#1468084)
  - expand SNMPCONFPATH (#1514501)
  - remove date in mailheader (#1585940)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-44
changelog:
  - add support for glusterfs (#1316386)
  - change services to start after network-online.target (#1388118)
  - fix interface fadeout configuration (#1547355)
  - fix scanf pattern for ICMP stats (#1693547)
  - change buffer size in pass_common.c file (#1695363 and #1731357)
  - remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
  - fix for CVE-2018-18066 (#1638911)
  - add Counter64 support for UCD-SNMP-MIB (#1703752)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.2-49
changelog:
  - add missing part of memory leak patch (#1794168)
  - fix if_inet6 messages floood (#1765449)
  - revert bz#1486733 (#1771050)
  - fix issue for process status when process name contains whitespace (#1782180)


author: Jaromír Končický <jkoncick@redhat.com> - 2.0-0.10.20130607git
changelog:
  - use all interfaces instead of default (#1003875)
  - reverted all changes on ether-wake.c and put original file


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-0.13.20131004git
changelog:
  - latest snapshot (#1013530)
  - remove %ifarch alpha condition from %prep
  - improve sctp-statistics.patch (#982638#c10)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.18.20131004git
changelog:
  - Resolves: #1063913 - netstat doesn't list sctp servers in -A mode
  - Resolves: #1257549 - netstat tool does not throw correct exit code on wrong parameter
  - Resolves: #1392910 - ifconfig inaccurately rounds exabytes


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.25.20131004git
changelog:
  - Resolves: #1632905 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Laine Stump <laine@redhat.com> - 0.1.8-1
changelog:
  - Rebase to netcf-0.1.8
  - new transactional change APIs: ncf_change_(begin|commit|rollback)
  - add stdout/stderr to error text when an external program fails
  - make error reporting of failed execs more exact/correct
  - Remove unnecessary "Requires" of libxml2 and augeas from pkgconfig file
    to pulling in extra packages when building an application that uses netcf.


author: Laine Stump <laine@redhat.com> - 0.1.9-1
changelog:
  - Rebase to netcf-0.1.9
  - always add <bridge> element to bridge, even if there is no physdev present
  - don't log error if interface isn't found in kernel during status report
  - allow building with C++
  - update gnulib


author: Laine Stump <laine@redhat.com> - 0.2.1-1
changelog:
  - Rebase to netcf-0.2.1
  - update gnulib to fix broken build on systems with nwer glibc (which no
    longer provides gets()).
  - add ncftool manpage
  - interfaces are only "active" if both UP and RUNNING.
  - add "bundled(gnulib)" to specfile to indicate that we use a local
    copy of gnulib sources (used by Fedora/RHEL when determining the scope
    of security bugs).
  - Fix ipcalc_netmask, which was trimming off the last digit in
    character representations of full-length netmasks (all 4 octets
    having 3 chars each)
  - other minor bugfixes


author: Laine Stump <laine@redhat.com> - 0.2.2-1
changelog:
  - Rebase to netcf-0.2.2
  - specfile: require libnl3-devel for rpm builds on Fedora 18+ and
    RHEL7+. Likewise, force libnl1 for F17- and RHEL6.x-, even if
    libnl3-devel is installed.


author: Laine Stump <laine@redhat.com> - 0.2.3-1
changelog:
  - Rebase to netcf-0.2.3
  - eliminate calls to nl_cache_mngt_provide(), to avoid
    non-threadsafe code in libnl (and because it isn't needed
    anyway) (This non-threadsafe code could lead to a segfault)
  - portability fixes for FreeBSD
  - fix bug when a config file has two config parameters with
    identical names
  - add HACKING document
  - always bail immediately if get_augeas fails (doing otherwise
    could lead to a segfault)


author: Laine Stump <laine@redhat.com> - 0.2.3-6
changelog:
  - resolves rhbz#961184
  - wait for IFF_UP and IFF_RUNNING after calling ifup
  - resolves rhbz#1020204
  - remove extraneous quotes from BONDING_OPTS
  - resolves rhbz#1044681
  - eliminate use of uninitialized data when getting mac
  - resolves rhbz#1046594
  - support systemd based netcf transaction


author: Laine Stump <laine@redhat.com> - 0.2.3-8
changelog:
  - resolves rhbz 1060076
  - Transform STP value from yes/no to on/off
  - resolves rhbz 1060317
  - Require bridge-utils for netcf-libs in the specfile


author: Laine Stump <laine@redhat.com> - 0.2.6-1
changelog:
  - resolves rhbz#1115176
   - rebase to upstream 0.2.6
   - allow interleaved elements in interface XML schema
   - allow <link> element in vlan and bond interfaces
   - report link state/speed in interface status
   - change DHCPv6 to DHCPV6C in ifcfg files
   - max vlan id is 4095, not 4096


author: - Laine Stump <laine@redhat.com> 0.2.6-2
changelog:
  - resolves rhbz#1138196
   - report file path and reason when aug_save fails
   - resolves rhbz#1147650
   - recognize IPADDR0/PREFIX0/NETMASK0/GATEWAY0
   - use git to apply patches to source tree


author: Laine Stump <laine@redhat.com> - 0.2.8-1
changelog:
  - Rebase to netcf-0.2.8
   - resolve rhbz#1165965 - CVE-2014-8119
   - resolve rhbz#1159000
   - support multiple IPv4 addresses in interface config (redhat driver)
   - resolve rhbz#1113983
   - allow static IPv4 config simultaneous with DHCPv4 (redhat driver)
   - resolve rhbz#1170941
   - remove extra quotes from IPV6ADDR_SECONDARIES (redhat+suse drivers)
   - resolve rhbz#1090011
   - limit names of new interfaces to IFNAMSIZ characters
   - resolve rhbz#761246
   - properly parse ifcfg files with comments past column 1


author: Peter Vrabec <pvrabec@redhat.com> - 0.19-7
changelog:
  - make initscript LSB compliant (#522818)
  - show version of netlabelctl and libnetlabel in help (#602577)


author: Paul Moore <pmoore@redhat.com> - 0.20-0
changelog:
  - Version bump to match latest upstream
  - Cleanups in the specfile due to changes in the upstream package


author: Paul Moore <pmoore@redhat.com> - 0.20-3
changelog:
  - Fix a problem when adding a CIPSO DOI with a large number of translations
  - Remove old patches
    Resolves: #1053687


author: Jindrich Novy <jnovy@redhat.com> 10.60.04-1
changelog:
  - update to 10.60.04
  - fixes pamtotiff, pnmmontage, pnmpsnr, pbmpscale, pgmhist,
    pampick, pamtompfont
  - fix dates in changelog


author: Josef Ridky <jridky@redhat.com> - 10.79.00-4
changelog:
  - Resolves: #1523176 - add manual page for ppmtopga
  - Resolves: #1530606 - pbmtoepson command line option fix


author: Daniel Borkmann <dborkman@redhat.com> - 0.5.8-1
changelog:
  - Initial netsniff-ng spec file for RHEL, import of 0.5.8-rc1. Note that
    RHEL packaging differs significantly from Fedora as we only do a partial
    build and have a small fraction of dependencies that are available on
    RHEL.


author: Daniel Borkmann <dborkman@redhat.com> - 0.5.8-3
changelog:
  - Package Wrangler feedback from Thomas Graf
  - Note: 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "x86_64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info does not work with upstream's build system here as CFLAGS
    will be overwritten. Changes would need to be proposed to upstream first.


author: Daniel Borkmann <dborkman@redhat.com> - 0.5.8-4
changelog:
  - GeoIP was added to RHEL7, so we can make use of that to enable
    astraceroute and features in netsniff-ng.
  - For this we also need zlib in order to make the updater work.


author: Eric Garver - 0.5.8-7
changelog:
  - netsniff-ng: add packet fanout support
  - doc: authors: add Michal as contributor
  - man: netsniff-ng: document fanout options
  - netsniff-ng: add example for fanout into man page


author: Daniel Borkmann <dborkman@redhat.com> - 0.5.8-3
changelog:
  - Package Wrangler feedback from Thomas Graf
  - Note: 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -grecord-gcc-switches  -m32}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -grecord-gcc-switches  -m32}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -grecord-gcc-switches  -m32 -I/usr/lib/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -grecord-gcc-switches  -m32 -I/usr/lib/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=ppc-redhat-linux-gnu --host=ppc-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info does not work with upstream's build system here as CFLAGS
    will be overwritten. Changes would need to be proposed to upstream first.


author: Daniel Borkmann <dborkman@redhat.com> - 0.5.8-3
changelog:
  - Package Wrangler feedback from Thomas Graf
  - Note: 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m32 -mcpu=power7 -mtune=power7}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m32 -mcpu=power7 -mtune=power7}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m32 -mcpu=power7 -mtune=power7 -I/usr/lib/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m32 -mcpu=power7 -mtune=power7 -I/usr/lib/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=ppc-redhat-linux-gnu --host=ppc-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info does not work with upstream's build system here as CFLAGS
    will be overwritten. Changes would need to be proposed to upstream first.


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.7.1-5
changelog:
  - Fixed SHA-3 implementation to conform to final standard (#1252936)
  - Fixed CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 which caused issues
    in secp256r1 and secp384r1 calculations (#1314374)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.7.1-8
changelog:
  - Use a cache-silent version of mpz_powm to prevent cache-timing
    attacks against RSA and DSA in shared VMs. (#1364897,CVE-2016-6489)


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-6.git20130906
changelog:
  - libnm-gtk: fix for enabling the Apply button for PEAP and TTLS (rh #1000564)
  - libnm-gtk: only save CA certificate ignored value when connection is saved
  - editor: fix display of VLAN parent interface


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-7.git20131011
changelog:
  - editor: add support for Team devices (rh #1003646)
  - editor: don't use deprecated WEP40 and WEP104 values for pairwise (rh #1005171)
  - editor: add 'primary' option for bond interfaces (rh #1013727)
  - editor: dis-allow IPv6 scopes in DNS server entry (rh #962449)


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-8.git20131108
changelog:
  - editor: improve handling of NPAR/SRIOV devices in bonds (rh #804527)
  - editor: allow creating bridge masters without slaves


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-9.git20131212
changelog:
  - applet: fix crash if some resources were not available (rh #1034500)
  - editor: default to user-saved secrets and allow changing secret storage (rh #879566)
  - applet/editor: fix various Coverity-found defects (rh #1025894)


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.9.0-13.git20140307
changelog:
  - Update to new git master snapshot
  - connection-editor: allow VLANs/slaves of more device types (rh #1045203)
  - connection-editor: add DCB configuration UI (bgo #711032) (rh #1068688)


author: Dan Williams <dcbw@redhat.com> - 0.9.8.1-3.git20130430
changelog:
  - editor: fix possible crash canceling connection edit dialog
  - applet: only request secrets from the user when allowed to
  - applet: fix signal icons with newer libpng
  - applet: fix possible crash getting secrets with libsecret


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-5.git20130906
changelog:
  - editor: fix missing user/password when re-editing a connection (rh #1000564)
  - editor: fix handling of missing CA certificate prompts (rh #758076) (rh #809489)
  - editor: fix handling of bonding modes (rh #953076)
  - applet/editor: add InfiniBand device support (rh #867273)


author: Lubomir Rintel <lrintel@redhat.com> - 1.0.3-1.git20160615.28a0e28
changelog:
  - New snapshot:
  - applet: make new auto connections only available for current user (rh #1176042)
  - editor: allow forcing always-on-top windows for installer (rh #1097883)
  - editor: allow changing bond MTU (rh #1177582)
  - editor: use ifname instead of UUID in slaves' master property (rh #1083186)
  - editor: allow adding Bluetooth connections (rh #1229471)


author: Lubomir Rintel <lrintel@redhat.com> - 1.0.6-1
changelog:
  - Align with the 1.0.6 upstream release:
  - editor: add support for setting MTU on team connections (rh #1255927)
  - editor: offer bond connections in vlan slave picker (rh #1255735)


author: Jiří Klimeš <jklimes@redhat.com> - 1.0.6-2
changelog:
  - libnm-gtk: fix a possible crash on widgets destroy (rh #1267326)
   - libnm-gtk: use symbolic icons for password store menu (rh #1267330)


author: Jiří Klimeš <jklimes@redhat.com> - 1.0.6-2
changelog:
  - libnm-gtk: fix a possible crash on widgets destroy (rh #1267326)
  - libnm-gtk: use symbolic icons for password store menu (rh #1267330)


author: Lubomir Rintel <lrintel@redhat.com> - 1.4.0-1
changelog:
  - Update to network-manager-applet 1.4.0 release
  - c-e: add editor for teaming devices (rh #1079465)


author: Lubomir Rintel <lrintel@redhat.com> - 1.8.0-0.1.git20170326.f260f8a
changelog:
  - Update to network-manager-applet 1.8 snapshot
  - c-e: add missing mnemonic characters to buttons (rh #1434317)
  - c-e: fix handling of devices without permanent MAC address in devices combo box (rh #1380424)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.12-1
changelog:
  - fix whiptail --gauge and its description in man page (#620083)
  - remove space after \n in whiptail texts (#620083)
  - remove NLS code from snack (#599608)
  - expose more keys to python as shortcuts in dialogs (Jakob Kemi)
  - release python global-thread-lock during dialog displays (Jakob Kemi)
  - fix warnings in whiptcl.c and include Tcl_PkgProvide() call (Mikhail T.)
  - don't NULL deref when an invalid array is specified in checkboxtree
    (Arnaldo Carvalho de Melo)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.13-1
changelog:
  - add support for changing colors in individual labels, scrollbars, entries,
    textboxes and scales, add custom colorsets 
  - add support for NEWT_COLORS and NEWT_COLORS_FILE variables (#689903)
  - allow resizing of form
  - fix errors found by coverity
  - fix va_list usage (Gwenole Beauchesne)
  - fix building and installing on Mac OS X (#652479)
  - check for slang.h header, support DESTDIR variable, add --without-python
    option (Otavio Salvador)
  - add Persian, Low German translations


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.14-1
changelog:
  - fix returning strings in whiptail and whiptcl (#752818)
  - fix configure to work with multiple python versions (#737998)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.15-1
changelog:
  - fix errors found by gcc-with-cpychecker (#800075)
  - fix building with tcl8.6 (#902561)
  - add fallback to python-config (#783627)
  - replace tabs in snack.py (#870647)
  - compile snackmodule.c with flag -fPIC (Kang Kai)
  - include new translations from transifex
  - allow newtWinMenu and newtWinEntries with no buttons or items
  - don't draw scale when not mapped
  - build with large-file support for stat64
  - remove unused variables in test code
  - update FSF address
  - remove obsolete macros
  - make some dependencies arch-specific


author: Steve Dickson <steved@redhat.com> 1.2.8-2.0
changelog:
  - Update to latest upstream RC release: nfs-utils.1.2.9-rc1
  - Added GSS_USE_PROXY variable to nfs.sysconfig (bz 967112)


author: Steve Dickson <steved@redhat.com> 1.2.9-0.2
changelog:
  - gssd, is started by default to fix a 15sec kernel hang (bz 1029573)
  - gssd will return immediately when a keytab is not readable (bz 1029573)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.12
changelog:
  - Fixed nfs-idmap start race (bz 1164064)
  - Updated nfsdcltrack v2 schema (bz 1234598)
  - Added missing arguments in rpc.mountd man page (bz 1003558)
  - Added nfsconfig.conf to nfs.man and mount.nfs.man (bz 1196646)
  - nfs-server now Requires rpcbind.service (bz 1171603)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.18
changelog:
  - Stop gssd from silenty reaps cache (bz 1256469)
  - Remove errant echo call from spec file (bz 1257144)
  - Add more symlinks to make systemd scripts backwards compatible (bz 1159183)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.21
changelog:
  - Stop gssd from flooding the KDC with TGT fetches (bz 1264999)
  - Decouple the start/stop of rpcbind with nfs-server and rpc-statd (bz 1266993)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.21_2
changelog:
  - exportfs: Restore the EAI_NONAME check in host_pton() (bz 1288435)
  - gssd: Don't assume the machine account will be in uppercase (bz 1288433)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.24
changelog:
  - rpcgssd: added upstream debugging support (bz 1273163)
  - start-statd: start rpc.statd only once (bz 1300007)
  - exportfs: Don't stop the server from coming up when exportfs fails (bz 1287468)
  - Changed install permissions on /var/lib/nfs/rpc_pipefs (bz 1291514)
  - nfs.sysconfig: added note about the default keytab needing to exist (bz 1292607)
  - mount.nfs: skip server address resolution on remount (bz 1313550)
  - nfs_connect_nb: handle EINTR during connection establishment (bz 1299003)
  - statd: Update existing record if we rece SM_MON with new cookie (bz 1284576)
  - nfsidmap: updated to add in two new features (bz 1290488)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.25
changelog:
  - mountstats.man:  Remove a few bogus .R macros (bz 1266013)
  - systemd: ensure nfs-config service is re-run as needed (bz 1331460)
  - exportfs: Deal with path's trailing "/"  (bz 1276534)
  - exportfs: replace one xlog(D_GENERAL) in host_canonname() (bz 1331801)
  - exportfs: Fix buf size in test_export() dump() (bz 1243234)
  - blkmapd: Added a usage routine (bz 1001431)
  - rpc.idmapd: Added a usage routine (bz 1001438)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.26
changelog:
  - gssd: use pthreads to handle upcalls (bz 1331540)
  - gssd: Fix inner-loop variable reuse (bz 1334848)
  - mount: run START_STATD fully as root (bz 1275082)
  - lockd: added lockd.conf to set module parameters (bz 1264387)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.27
changelog:
  - nfsd: use correct byte order on rdma port (bz 1310691)
  - blkmapd: Add the -h flag on the man page (bz 1001431)
  - nfsd: Remove some warnings nfsd.c (bz 1336419)
  - mountd.man: Update to change -P option as an alias for -p (bz 1037924)
  - mountd: cleaned up usage message (bz 1003716)
  - mountstats.man: fixed typo in man page (bz 1263966)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.29
changelog:
  - mountd: fix netgroup lookup for resolvable IP addresses (bz 1341908)
  - umount: fixed typo in usage message (bz 1246329)
  - mount.nfs: added usage output when no arguemnts are given (bz 1001443)
  - nfsidmap: added the -h option (bz 1339877)
  - exportfs: Do not fail on empty exports file (bz 1340788)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.30
changelog:
  - statd: suppress a benign log message in nsm_delete_host() (bz 1347030)
  - start-statd: Use flock to serialize the running of this script (bz 1300007)
  - spec: update requires version of libtirpc-devel (bz 1346711)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.39
changelog:
  - nfsstats: fix some exit codes (bz 1400658)
  - Added server-generator to improve ordering (bz 1437190)
  - nfsman: document minorversion (bz 1389827)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.40
changelog:
  - gssd: ensure that preferred_realm is non-NULL (bz 1432643)
  - mountstats: handle KeyError in accumulate_iostats() (bz 1400106)
  - mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1404121)
  - sm-notify: ending the grace period early should be configurable (bz 1424599)
  - Fixed a couple typos that effected the '--mounts' nfsstat option (bz 1425956)
  - Manual page bug: two inaccuracies in nfsd(7) (bz 1432750)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.41
changelog:
  - nfsdcltrack: silence some expected errors (bz 1443176)
  - Conditionally restart gssproxy now that config file is installed (bz 1440887)
  - systemd: NFS server services should use network-online (bz 1409012)
  - Cleaned up some fuzzy patches (bz 1409012)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.43
changelog:
  - mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
  - spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.48
changelog:
  - exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
  - Correctly set the minor version when set in nfsmount.conf (1458504)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.49
changelog:
  - mount: handle EACCES during version negotiation (bz 1479573)
  - mount: Fix problems with parsing minorversion= (bz 1489262)
  - mountstats:  Remove a shebang (bz 987031)
  - nfsdcltrack: remove a warning (bz 1475462)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.50
changelog:
  - rpc.nfsd: Do not fail when all address families are not support (bz 1450528)
  - mount.nfs: merge in vers= and nfsvers= options (bz 1496822)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.51
changelog:
  - systemd: add a generator for the rpc_pipefs mountpoint (bz 1358333)
  - nfsdcltrack: return an non-zero value for invalid options (bz 1461349)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.52
changelog:
  - nfs(5): update some version information (bz 1452461)
  - nfsiostat: avoid parsing "no device mounted ..." line (bz 1508046)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.55
changelog:
  - mountstats: use correct RDMA terminology (bz 1527938)
  - nfs-server: restart gssproxy when the server is restarted. (bz 1527653)
  - nfsd: Set default minor versions (bz 1436977)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.56
changelog:
  - exportfs: move ro/rw option back to secinfo_flag_displaymap table (bz 1532688)
  - nfsdcltrack: getopt_long() fails on a non x86_64 archs (bz 1551903)
  - Fixed typo in nfsmount.conf (bz 1592235)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.57
changelog:
  - rpc.gssd: truncates 32-bit UIDs/GIDs to 16 bits architectures (bz 1602836)
  - Added back lockd vars to nfs-utils_env.sh and sysconfig (bz 1413272)
  - Document nfs v4 mounts will use Kerberos we available (bz 1334510)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.63
changelog:
  - nfs.conf: Fixed manage-gids option typo (bz 1677403)
  - sm-notify: Added -f flag to nfs.conf parsing (bz 1688932)
  - Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1688918)
  - nfs-server: Use reload not restart to start gssproxy (bz 1644169)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.67
changelog:
  - rpc.gssd: removed a number memory leaks (bz 1807110)
  - mount: Report correct error in the fall_back cases (bz 1752329)
  - gssd: daemonize earlier (bz 1645083)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.0
changelog:
  - Updated to latest upstream release: nfs-utils-1-3-0
    - mount.nfs: Fix fallback from tcp to udp (bz 984901)
    - nfsidmap: Keys need to be invalidated instead of revoked (bz 1080505)
  - Removed RDMA_PORT stub from /etc/sysconfig/nfs (bz 1078792)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.1
changelog:
  - Added configurable timeout to rpc.gssd (bz 1009528)
  - Added callback to sm_notify (bz 1108105)
  - mountd: Fixed path in start-statd (bz 1116794)
  - rpc.gssd: Fixed silent error message (bz 1117384)
  - rpc.gssd: add the acceptor name to the info passed in downcall (bz 1088011)
  - nfs-utils.spec: fixed runtime configuration files (bz 1118177)
  - exportfs: fix test of NULL pointer in host_pton() (bz 1083018)
  - gssd: Fixed errno typo in get_servername() (bz 1082480)
  - nfsiostat: documented the output better (bz 1109864)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.2
changelog:
  - Upgrade to latest upstream systemd scripts  (bz 1144440)
  - Taught start-statd to use systemd  (bz 1144440)
  - Repaced rpc.svcgssd with gssproxy (bz 1082746)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.6
changelog:
  - Corrected argument names in the systemd scripts (bz 1170364)
  - Added RELRO check (bz 1092543)
  - Properly parse IPv6 literal strings with null termination (bz 1161490)
  - Added the 'nordirplus' export flag to disable v3 readdirplus (bz 1161458)


author: Steve Dickson <steved@redhat.com> 1.3.0-0.8
changelog:
  - Stop sm-notify from running in HA environments (bz 1182692)
  - Set the GSS_USE_PROXY variable in nfs-utils_env.sh (bz 1183821)


author: Steve Dickson <steved@redhat.com> 1.2.9-0.5
changelog:
  - Reverted patch for bz1029573. The kernel can now detect 
    when rpc.gssd is or is not running (bz1031197)
  - gssd: always reply to rpc-pipe requests from kernel. (bz1031197)


author: Steve Dickson <steved@redhat.com> 1.2.9-2.0
changelog:
  - Updated to the latest upstream RC release nfs-utils-1.2.10-rc2
    - mount.nfs: Eliminated long delays during mount (bz 1031643)
    - exportfs: Corrected erroneously error messages (bz 1049589)


author: Steve Dickson <steved@redhat.com> 1.2.9-3.0
changelog:
  - Updated to the latest upstream RC release nfs-utils-1.2.10-rc3
    - exportfs: Exit with correct value when an error occurs (bz 1053933)
    - mount.nfs: Removed supported flag from usage string (bz 1000989)
    - gssd: Improve first attempt at acquiring GSS credentials (bz 1053877)
    - rpc.idmapd: Remove no longer supported flags from man page (bz 1003513)
    - rpc.statd: Allow usage messages to be displayed when statd is running. (bz 1037044)


author: Steve Dickson <steved@redhat.com> 0.3.3-15
changelog:
  - Allow spaces in group principal names (bz 1284597)
  - Fixed FD leak in edit_ACL() (bz 1284608)
  - Added RELRO check (bz 1092556)


author: Steve Dickson <steved@redhat.com> 0.3.3-15
changelog:
  - Allow spaces in group principal names (bz 1284597)
  - Fixed FD leak in edit_ACL() (bz 1284608)
  - Added the RELRO check (bz 1092556)


author: Phil Sutter <psutter@redhat.com> [0.6-3.el7]
changelog:
  - nftables.spec: Require at least libnftnl-1.0.6-4 (Phil Sutter) [1358705]
  - evaluate: Fix datalen checks in expr_evaluate_string() (Phil Sutter) [1360240]
  - netlink_delinearize: Avoid potential null pointer deref (Timothy Redaelli) [1360257]
  - src: use new range expression for != [a,b] intervals (Phil Sutter) [1358705]


author: Phil Sutter <psutter@redhat.com> [0.6-4.el7]
changelog:
  - evaluate: Avoid undefined behaviour in concat_subtype_id() (Phil Sutter) [1360789]
  - src: Interpret OP_NEQ against a set as OP_LOOKUP (Phil Sutter) [1440011]
  - include: refresh uapi/linux/netfilter/nf_tables.h copy (Phil Sutter) [1440011]
  - datatype: time_type should send milliseconds to userspace (Phil Sutter) [1427114]
  - meta: fix memory leak in tc classid parser (Phil Sutter) [1380326]
  - src: meta priority support using tc classid (Phil Sutter) [1380326]
  - src: simplify classid printing using x instead of 04x (Phil Sutter) [1380326]
  - src: rename datatype name from tc_handle to classid (Phil Sutter) [1380326]
  - payload: don't update protocol context if we can't find a description (Timothy Redaelli) [1446534 1399764]
  - evaluate: reject: Have a generic fix for missing network context (Timothy Redaelli) [1360354]


author: Phil Sutter <psutter@redhat.com> [0.8-6.el7]
changelog:
  - netlink_linearize: exthdr op must be u32 (Phil Sutter) [1524246]
  - src: fix protocol context update on big-endian systems (Phil Sutter) [1523016]


author: Phil Sutter <psutter@redhat.com> [0.8-9.el7]
changelog:
  - evaluate: explicitly deny concatenated types in interval sets (Phil Sutter) [1576426]
  - Deprecate add/insert rule 'position' argument (Phil Sutter) [1571968]
  - doc: reword insert position, this expects rule handle to insert, not a relative postition (Phil Sutter) [1571968]
  - nft.8: Fix reject statement documentation (Phil Sutter) [1571938]
  - netlink_delinearize: Fix resource leaks (Phil Sutter) [1504157]
  - netlink: Complain if setting O_NONBLOCK fails (Phil Sutter) [1504157]
  - hash: Fix potential null-pointer dereference in hash_expr_cmp() (Phil Sutter) [1504157]
  - evaluate: Fix memleak in stmt_reject_gen_dependency() (Phil Sutter) [1504157]
  - erec: Avoid passing negative offset to fseek() (Phil Sutter) [1504157]
  - cli: Drop pointless check in cli_append_multiline() (Phil Sutter) [1504157]
  - monitor: Make JSON/XML output respect output_fp (Phil Sutter) [1504157]
  - monitor: Make trace events respect output_fp (Phil Sutter) [1504157]
  - Review switch statements for unmarked fall through cases (Phil Sutter) [1504157]


author: Phil Sutter <psutter@redhat.com> [0.8-11.el7]
changelog:
  - src: Reject 'export vm json' command (Phil Sutter) [1646336]
  - monitor: Drop fake XML support (Phil Sutter) [1646336]
  - src: bail out when exporting ruleset with unsupported output (Phil Sutter) [1646336]


author: Phil Sutter <psutter@redhat.com> [0.8-13.el7]
changelog:
  - doc: Add minimal description of (v)map statements (Phil Sutter) [1628974]
  - nft.8: Update meta pkt_type value description (Phil Sutter) [1628694]


author: Daiki Ueno <dueno@redhat.com> - 3.020-1
changelog:
  - new upstream release
  - update the priority
    nhn-nanum-fonts -> 65-0, un-core-fonts -> 65-1, baekmuk-ttf-fonts -> 65-2


author: Ben Boeckel <mathstuf@gmail.com> - 1.7.1-1
changelog:
  - update to 1.7.1
  - fix bash completion for the binary rename (#1352330)
  - disable test which fails to koji rlimit settings


author: Michal Hlavinka <mhlavink@redhat.com> - 2:6.40-5
changelog:
  - ncat should try to connect to all resolved addresses, not only the first one (#1192143)
  - do not print debug messages during normal use (#1134412)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-1
changelog:
  - Update to NSPR_4_10_2_RTM
  - Avoid unsigned integer wrapping in PL_ArenaAllocate
  - Resolves: rhbz#1031465 - CVE-2013-5607


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-2
changelog:
  - Restore previously used s390x patch as it isn't upstream yet
  - Related: rhbz#1031465 - CVE-2013-5607


author: Elio Maldonado <emaldona@redhat.com> 4.10.6-2
changelog:
  - Generic 32/64 bit platform detection (fix ppc64le build)
  - Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le


author: Elio Maldonado <emaldona@redhat.com> - 4.10.6-3
changelog:
  - Restore s390x related patch as it hasn't been applied upstream yet
  - Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269362 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269363 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption


author: Elio Maldonado <emaldona@redhat.com> - 4.11.0-1
changelog:
  - Rebase to NSPR 4.11
  - Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-4
changelog:
  - Install symlink to nss-sysinit.sh without the .sh suffix
  - Resolves: rhbz#982723 - nss-sysinit man page has wrong path for the script


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-1
changelog:
  - Rebase to nss-3.15.2
  - Resolves: rhbz#1012656 - pick up NSS 3.15.2 to fix CVE-2013-1739 and disable MD5 in OCSP/CRL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-2
changelog:
  - Add description of the certutil's --email option to it's manpage
  - Resolves: rhbz#Bug 948495 - Man page scan results for nss


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-4
changelog:
  - Enable fips when system is in fips mode
  - Resolves: rhbz#852023 - FIPS mode detection does not work


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-6
changelog:
  - Fix errors in ssl disabling patches for both library and tests
  - Add s390x to the multilib_arches definition used for alt_ckbi
  - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-7
changelog:
  - Fix bash syntax error in patch for disabling ssl2 tests
  - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-8
changelog:
  - Fix patch for disabling ssl2 in ssl to correctly set error code
  - Fix syntax error reported in the build.log even tough it succeeds
  - Add patch top ignore setpolicy result 
  - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites
  - Resolves: rhbz#1026677 - Attempt to run ipa-client-install fails


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-6
changelog:
  - Fix a coverity scan compile time warning for the pem module
  - Resolves: Bug 1002271 - NSS pem module should not require unique base file names


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-7
changelog:
  - Move several nss-sysinit manpages tar archives to the %files
  - Resolves: Bug 1050163 - Same files in two packages create rpm conflict


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-8
changelog:
  - Fix the spec file to apply the nss ecc list patch for bug 752980
  - Resolves: Bug 752980 - Support ECDSA algorithm in the nss package via puggable ecc


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-9
changelog:
  - Rebase to nss-3.15.4
  - Resolves: Bug 1054457 - CVE-2013-1740 nss: false start PR_Recv information disclosure security issue
  - Remove no longer needed patches for manpages that were applied upstream
  - Remove no longer needed patch to disable ocsp stapling tests
  - Update iquote.patch on account of upstream changes
  - Update and rename patch to pem/rsawrapr.c on account of upstream changes
  - Use the pristine upstream sources for nss without repackaging
  - Avoid unneeded manual step which may introduce errors


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-3
changelog:
  - Remove spurious man5 wildcard entry as all manpages are listed by name
  - Resolves: Bug 1050163 - Same files in two packages create rpm conflict


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-4
changelog:
  - Update pem sources to latest from nss-pem upstream
  - Pick up pem module fixes verified on RHEL and applied upstream
  - Remove no loger needed pem patches on acccount on this update
  - Add comments documenting the iquote.patch 
  - Resolves: Bug 1054457 - CVE-2013-1740


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-5
changelog:
  - Pick up a fix from rhel-6 and fix an rpm conflict
  - Don't hold issuer cert handles in crl cache
  - Resolves: Bug 1034409 - deadlock in trust domain and object lock
  - Move nss shared db files to the main package
  - Resolves: Bug 1050163 - Same files in two packages create rpm conflict


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-6
changelog:
  - Disallow disabling the internal module
  - Resolves: Bug 1056036 - nss segfaults with opencryptoki module


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-1
changelog:
  - Rebase to nss-3.16.2
  - Resolves: Bug 1124659 - Rebase RHEL 7 to at least NSS 3.16.1 (FF 31)
  - Fix test failure detection in the %check section
  - Move removal of unwanted source directories to the end of the %prep section
  - Update various patches on account of the rebase
  - Remove unused patches rendered obsolete by the rebase
  - Fix libssl and test patches that disable ssl2 support
  - Replace expired PayPal test certificate that breaks the build


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-2
changelog:
  - Restore missing options descriptions fix for certutil manpage
  - Document certutil options --dump-ext-val, --extGeneric, and --extSAN
  - Related: Bug 1124659 - Rebase RHEL 7 to at least NSS 3.16.1


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-1
changelog:
  - Resolves: Bug 1165525 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Support TLS_FALLBACK_SCSV in tstclnt and ssltap


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Restore patch for certutil man page
  - supply missing options descriptions
  - Resolves: Bug 1165525 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-1
changelog:
  - Rebase to nss-3.16.2
  - Resolves: Bug 1103252 - Rebase RHEL 7.1 to at least NSS 3.16.1 (FF 31)
  - Fix test failure detection in the %check section
  - Move removal of unwanted source directories to the end of the %prep section
  - Update various patches on account of the rebase
  - Remove unused patches rendered obsolete by the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-2
changelog:
  - Fix libssl and test patches that disable ssl2 support
  - Resolves: Bug 1123435
  - Replace expired PayPal test certificate with current one


author: Elio Maldonado <pbrobinson@redhat.com> 3.16.2-3
changelog:
  - Generic 32/64 bit platform detection (fix ppc64le build)
  - Resolves: Bug 1125619 - nss fails to build on arch: ppc64le (missing dependencies)
  - Fix contributed by Peter Robinson <pbrobinson@redhat.com>


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-10
changelog:
  - Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Support TLS_FALLBACK_SCSV in tstclnt and ssltap


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Restore patch for certutil man page
  - supply missing options descriptions
  - Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-4
changelog:
  - Fix race condition
  - Resolves: Bug 1094468 - 389-ds-base server reported crash in stan_GetCERTCertificate
  - under the replication replay failure condition


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-5
changelog:
  - Reverse the sense of a test in patch to fix pk12util segfault
  - Resolves: Bug 1174527 - Segfault in pk12util when using -l option with certain .p12 files


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-1
changelog:
  - Resolves: Bug 1211371 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]
  - Fix shell syntax error on nss/tests/all.sh
  - Replace expired PayPal test certificate that breaks the build


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-2
changelog:
  - Update and reenable nss-646045.patch on account of the rebase
  - Resolves: Bug 1211371 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-9
changelog:
  - Fix checks to skip ssl2/export cipher suites tests to not skip needed tests
  - Fix libssl ssl2/export disabling patch to handle NULL cipher cases
  - Enable additional cipher suites by default


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-12
changelog:
  - Support TLS > 1.0 by support while still allowing to connect to SSL3 only servers
  - Enable ECDSA cipher suites by default, a subset of the ones requested


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-13
changelog:
  - Reorder the cipher suites and enable two more by default
  - Fix some of the ssauth sni and ocsp stapling tests


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-14
changelog:
  - Update the required_softokn_build_version to -14
  - Add references to bugs filed upstream for new patches
  - Merge ocsp stapling and sslauth sni tests patches into one


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-16
changelog:
  - Fix check for public key size of DSA certificates
  - Use size of prime P not the size of dsa.publicValue


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-17
changelog:
  - Change the required_softokn_build_version back to -13
  - Ensure we use nss-softokn-3.16.2.3-13.el7_1


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-19
changelog:
  - Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
  - Resolves: Bug 1289883


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-4
changelog:
  - Add support for sha384 tls cipher suites
  - Add support for server-side hde key exchange
  - Add support for DSS+SHA256 ciphersuites


author: Kai Engert <kaie@redhat.com> - 3.19.1-5
changelog:
  - Incremental patches to fix SSL/TLS test suite execution,
    fix the earlier SHA384 patch, and inform clients to use SHA384 with
    certificate_verify if required by NSS.


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-13
changelog:
  - Fix reuse of session cache entry
  - Resolves: Bug 1241172 - Certificate verification fails with multiple https urls


author: Kai Engert <kaie@redhat.com> - 3.21.0-14
changelog:
  - Support TLS 1.2 certificate_verify hashes other than PRF,
    backported fix from NSS 3.25 (upstream bug 1179338).


author: Kai Engert <kaie@redhat.com> - 3.21.0-16
changelog:
  - enable ssl_gtests (without extended master secret tests), Bug 1298692
  - call SECMOD_RestartModules in nss_Init, Bug 1317691


author: Daiki Ueno <dueno@redhat.com> - 3.28.2-1.0
changelog:
  - Rebase to NSS 3.28.2
  - Remove NSS_ENABLE_ECC and NSS_ECC_MORE_THAN_SUITE_B setting, which
    is no-op now
  - Enable gtests when requested
  - Remove nss-646045.patch and fix-nss-test-filtering.patch, which are
    not necessary
  - Remove sslauth-no-v2.patch and
    nss-sslstress-txt-ssl3-lower-value-in-range.patch, as SSLv2 is
    already disabled in upstream
  - Remove ssl-server-min-key-sizes.patch, as we decided to support DH
    key size greater than 1023 bits
  - Remove local patches for SHA384 cipher suites (now supported in
    upstream): dhe-sha384-dss-support.patch,
    client_auth_for_sha384_prf_support.patch,
    nss-fix-client-auth-init-hashes.patch, nss-map-oid-to-hashalg.patch,
    nss-enable-384-cipher-tests.patch, nss-fix-signature-and-hash.patch,
    fix-allowed-sig-alg.patch, tests-extra.patch
  - Remove upstreamed patches: rh1238290.patch,
    fix-reuse-of-session-cache-entry.patch, flexible-certverify.patch,
    call-restartmodules-in-nssinit.patch


author: Daiki Ueno <dueno@redhat.com> - 3.28.2-1.2
changelog:
  - Reorder cipher suites for compatibility
  - Re-enable BUILD_OPT, mistakenly disabled in the previous build


author: Daiki Ueno <dueno@redhat.com> - 3.28.2-1.4
changelog:
  - Add patch to fix bash syntax error in tests/ssl.sh
  - Build with support for SSLKEYLOGFILE
  - Disable the use of RSA-PSS with SSL/TLS


author: Daiki Ueno <dueno@redhat.com> - 3.28.2-1.6
changelog:
  - Restore ssl-server-min-key-sizes.patch
  - Disable TLS_ECDHE_{RSA,ECDSA}_WITH_AES_128_CBC_SHA256 by default
  - Enable 4 AES_256_GCM_SHA384 ciphersuites, enabled by the downstream
    patch in the previous release
  - Fix crash with tstclnt -W


author: Daiki Ueno <dueno@redhat.com> - 3.28.4-3
changelog:
  - Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
    https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-3
changelog:
  - Make sure 32bit nss-pem always be installed with 32bit nss in
    multlib environment, patch by Kamil Dudka
  - Enable new algorithms supported by the new nss-softokn


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-4
changelog:
  - Utilize CKA_NSS_MOZILLA_CA_POLICY attribute, patch by Kai Engert
  - Backport changes adding SSL alert callbacks from upstream
  - Add nss-check-policy-file.patch from Fedora
  - Install policy config in /etc/pki/nss-legacy/nss-rhel7.config


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-5
changelog:
  - Switch default hash algorithm used by tools from SHA-1 to SHA-256
  - Avoid race condition in nssSlot_IsTokenPresent()
  - Enable SHA-2 and AES in pk12util
  - Disable RSA-PSS for now


author: Daiki Ueno <dueno@redhat.com> - 3.33.0-1
changelog:
  - Rebase to NSS 3.33
  - Disable TLS 1.3, temporarily disable failing gtests (Skip13Variants)
  - Temporarily disable race.patch and nss-3.16-token-init-race.patch,
    which causes a deadlock in newly added test cases
  - Remove upstreamed patches: moz-1320932.patch,
    nss-tstclnt-optspec.patch,
    nss-1334976-1336487-1345083-ca-2.14.patch, nss-alert-handler.patch,
    nss-tools-sha256-default.patch, nss-is-token-present-race.patch,
    nss-pk12util.patch, nss-ssl3gthr.patch, and nss-transcript.patch


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-3
changelog:
  - Decrease the iteration count of PKCS#12 for compatibility with Windows
  - Fix deadlock when a token is re-inserted while a client process is running


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-7
changelog:
  - Backport upstream fix for CVE-2018-12384
  - Remove nss-lockcert-api-change.patch, which turned out to be a
    mistake (the symbol was not exported from libnss)


author: Daiki Ueno <dueno@redhat.com> - 3.43.0-7
changelog:
  - Don't override date in man-pages
  - Revert the change to use XDG basedirs (mozilla#818686)
  - Enable SSL2 compatible ClientHello by default
  - Disable SSL3 and RC4 by default


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-1
changelog:
  - Rebase to NSS 3.44
  - Restore fix-min-library-version-in-SSLVersionRange.patch to keep
    SSL3 supported in the code level while it is disabled by policy
  - Skip TLS 1.3 tests under FIPS mode


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-2
changelog:
  - Skip sysinit gtests properly
  - Fix shell syntax error in tests/ssl/ssl.sh
  - Regenerate manual pages


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-3
changelog:
  - Disable TLS 1.3 under FIPS mode
  - Disable RSASSA-PKCS1-v1_5 in TLS 1.3
  - Fix post-handshake auth transcript calculation if
    SSL_ENABLE_SESSION_TICKETS is set


author: Bob Relyea <rrelyea@redhat.com> - 3.44.0-6
changelog:
  - back out out-of-bounds patch (patch for nss-softokn).
  - Fix segfault on empty or malformed ecdh keys (#1777712)


author: Bob Relyea <rrelyea@redhat.com> - 3.44.0-7
changelog:
  - Increase timeout on ssl_gtest so that slow platforms can complete when
     running on a busy system.


author: Bob Relyea <rrelyea@redhat.com> - 3.44.0-5
changelog:
  - Fix pkix name constraints processing to only process the common name if the
    certusage you are checking is IPSEC or SSL Server.


author: Daiki Ueno <dueno@redhat.com> - 3.53.1-3
changelog:
  - Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
  - Explicitly enable upgradedb/sharedb test cycles


author: Bob Relyea <rrelyea@redhat.com> - 3.67.0-3
changelog:
  - revert sql default language in man pages
  - fix SEC_PKCS12EnableCipher so python-nss tests will still work.


author: Jakub Hrozek <jhrozek@redhat.com> 0.8.13-8
changelog:
  - Fix a potential use-after-free in nsswitch module
  - Resolves: rhbz#1036030 - New defect found in nss-pam-ldapd-0.8.13-4.el7


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-9
changelog:
  - Resolves: rhbz#1420576 - 'systemctl status nslcd' always returns FAILURE
                             status even though the service is stopped with
                             'systemctl stop nslcd


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-10
changelog:
  - Resolves: rhbz#1357493 - In RHEL 7, authentication failing when using
                             nslcd + pam_ldap where user has different in
                             nis/passwd and ldap.


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-11
changelog:
  - Resolves: rhbz#1497761 - Incorrect password tries to bind to all domain
                             controllers and locks user out


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-12
changelog:
  - Resolves: rhbz#1425790 - Unable to authenticate with 64 character password
                             using nss-pam-ldapd


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-14
changelog:
  - Resolves: rhbz#1288429 - /etc/tmpfiles.d/nss-pam-ldapd.conf shipped when
                             /etc/tmpfiles.d is reserved for the local
                             administrator


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-15
changelog:
  - Resolves: rhbz#1204202 - fix doc to describe actual uri format in
                             nslcd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-16
changelog:
  - Resolves: rhbz#1151675 - NSLCD WRAPS LDAP USER UIDNUMBER > 2^31 SO UID
                             IS WRONG (AND A NEGATIVE NUMBER)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-18
changelog:
  - Resolves: rhbz#1612543 - Password expiration notification is not sent if
                             the LDAP user doesn't have the objectClass shadowAccount.


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-20
changelog:
  - Resolves: rhbz#1714763 - [RHEL7] Correct startup dependencies for cgcred service for nslcd/LDAP clients


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-21
changelog:
  - Resolves: rhbz#1618558 - AD authentication on RHEL using nslcd fails
                             with error "pwdLastSet: password changed in the
                             future"


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8.13-22
changelog:
  - Do not enable the password expiration controls by default
  - Document the option and its default
  - Resolves: rhbz#1612543 - Password expiration notification is not sent
                             if the LDAP user doesn't have the objectClass
                             shadowAccount.


author: Tomas Halman <thalman@redhat.com> - 0.8.13-22.1
changelog:
  - Extend password buffer length to allow modern hashes
  - Resolves: rhbz#1819648 - Truncated shadowPasswords in nslcd 0.8.13


author: Tomas Halman <thalman@redhat.com> - 0.8.13-23
changelog:
  - Extend password buffer length to allow modern hashes
  - Resolves: rhbz#1773506 - Truncated shadowPasswords in nslcd 0.8.13


author: Tomas Halman <thalman@redhat.com> - 0.8.13-24
changelog:
  - Extend dns name buffers to allow long dns names
  - Resolves: rhbz#1685610 - nslcd aborts when rhost is large and UseDNS is true


author: Tomas Halman <thalman@redhat.com> - 0.8.13-24
changelog:
  - Unify password expire message
  - Resolves: rhbz#1771439 - Different password expiration message for LDAP users
                             with and without ObjectClass ShadowAccount


author: Nalin Dahyabhai <nalin@redhat.com> 0.8.12-1
changelog:
  - update to 0.8.12 (#846793)
  - make building pam_ldap conditional on the targeted release
  - add "After=named.service dirsrv.target slapd.service" to nslcd.service,
    to make sure that nslcd is started after them if they're to be started
    on the local system (#832706)
  - alter the versioned Obsoletes: on pam_ldap to include the F18 package
  - use %{_unitdir} when deciding where to put systemd configuration, based
    on patch from Václav Pavlín (#850232)
  - use new systemd macros for scriptlet hooks, when available, based on
    patch from Václav Pavlín (#850232)


author: Nalin Dahyabhai <nalin@redhat.com> 0.8.12-4
changelog:
  - in %post, attempt to rewrite any instances of "map group uniqueMember ..."
    to be "map group member ..." in nslcd.conf, as the attribute name changed
    in 0.8.4 (via freeipa ticket #3589)


author: Nalin Dahyabhai <nalin@redhat.com> 0.8.13-4
changelog:
  - compile nslcd/log.c with -fPIC instead of the current hardened-build default
    of -fPIE, which doesn't seem to avoid relocations for its thread-local
    variables on s390x (#1002834)


author: Jakub Hrozek <jhrozek@redhat.com> 0.8.13-6
changelog:
  - Change the error messages the tests expect to those printed on RH based
    systems
  - Resolves: rhbz#1044482


author: Elio Maldonado <emaldona@redhat.com> - 3.15-0.1.beta.1
changelog:
  - Update to NSS_3_15_BETA1
  - Update spec file, patches, and helper scrips on account of a shallwer source tree


author: Elio Maldonado <emaldona@redhat.com> - 3.15-0.1.beta.2
changelog:
  - Add lowhashtest and pk11gcmtest as unsupported tools
  - Modify nss-softoken-split script to include them in the split


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-3
changelog:
  - Add export NSS_ENABLE_ECC=1 rto the %build and %check sections
  - Resolves: rhbz#752980 - [7.0 FEAT] Support ECDSA algorithm in the nss packag


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-1
changelog:
  - Rebase to nss-softoken from nss-3.15.2
  - Resolves: rhbz#1012679 - pick up NSS-SOFTOKN 3.15.2 (required for bug 1012656)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Fix to allow level 1 fips mode if the db has no password
  - Resolves: Bug 852023 - FIPS mode detection does not work


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Rebase to nss-3.15.4
  - Resolves: Bug 1054457 - CVE-2013-1740
  - Update softokn splitting script to oparate on the upstream pristine source
  - Using the .gz archives directly, not repackaging as .bz2 ones
  - Avoid unneeded manual steps that could introduce errors
  - Update the iquote and build softoken only patches on account of the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-1
changelog:
  - Update to nss-3.16.2
  - Resolves: Bug 1124659 - Rebase RHEL 7.1 to at least NSS-SOFTOKN 3.16.1 (FF 31)


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-5
changelog:
  - Skip the fips checks if the action is newslot or delslot.
  - Resolves: Bug 1156406 - NSS fails to access sql:/etc/pki/nssdb in system FIPS mode


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-6
changelog:
  - Update fix for flaws reported by coverity scan  
  - Resolves: Bug 1154764 - Defects found in nss-softokn


author: Robert Relyea <rrelyea@redhat.com> - 3.16.2.3-7
changelog:
  - Use RHEL-7 dracut semantics rather than RHEL-6
  - fix dependencies so nss-softokn pulls in nss-softokn-freebl
  - keep dummy libfreebl3.chk for dracut kernel.


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-8
changelog:
  - fix permissions on dracut install file.
  - Resolves: Bug 1169957 - curl unable to download url when url is https and environment is dracut


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-10
changelog:
  - Use the TLS 1.2 mechanisms for PKCS #11 added for V2.40
  - Resolves: Bug 1216909 - Need to support SHA384 TLS cipher suites


author: Robert Relyea <rrelyea@redhat.com> - 3.16.2.3-11
changelog:
  - Make sure we have enough space for generating keyblocks for ciphers with HMAC_SHA384 (TLS).
  - Resolves: Bug 1216909 - Need to support SHA384 TLS cipher suites


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-13
changelog:
  - Pick up upstream freebl patch for CVE-2015-2730
  - Check for P == Q or P ==-Q before adding P and Q


author: Robert Relyea <rrelyea@redhat.com> 3.16.2-12
changelog:
  - Add support for encrypt_derive.
  - Allow us to init database at level1 while already in FIPS mode.
  - Allow UserDBOpen'ed FIPS tokens to do all the mechanisms as well as
    the main fips token.
  - Silence SIGCHLD when prelink is used.


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Remove temporary workaround for brew build problems now resolved
  - Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Robert Relyea <rrelyea@redhat.com> - 3.16.2.3-3
changelog:
  - Resolves: Bug 1153602 - libfreebl3.so runs prelink during the initialization phase
  - Decouple libfreebl3.so from the actual library.
  - Blacklist the freebl libraries
  - Turn off calling prelink to unprelink the binary


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-2
changelog:
  - Update to NSS 3.28.3
  - Remove upstreamed patches for the previous FIPS validation
  - Package lowkeyi.h and lowkeyti.h in freebl-devel
  - Pick up a patch in the Fedora package to fix build issue


author: Bob Relyea <rrelyea@redhat.com> - 3.28.3-4
changelog:
  - include new PKCS12 NSS specific mechanisms.
  - alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
  - add RSA PSS oid to decrypting PKCS #5 key blobs.
  - move ec public key check from softokn to freebl so apps like Java can benefit.


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-5
changelog:
  - fix login handling for FIPS slots, patch from rhbz#1390154
  - backport upstream fix for CVE-2017-5462 (DRBG leak)


author: Daiki Ueno <dueno@redhat.com> - 3.33.0-1
changelog:
  - Update to NSS 3.33.0
  - Remove upstreamed patches: nss-softokn-basicutil-dependency.patch,
    nss-softokn-pss-modulus-bits.patch, nss-softokn-pkcs12-sha2.patch,
    nss-softokn-pkcs12-rsa-pss.patch,
    nss-softokn-ec-derive-pubkey-check.patch, and nss-softokn-fix-drbg.patch


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-0.1.beta
changelog:
  - Update to NSS 3.36 BETA
  - Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
  - Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
  - Remove upstreamed nss-softokn-fix-ecc-post.patch


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-3
changelog:
  - include patches for CVE-2020-6829, CVE-2020-12400,
    and CVE-2020-12401 from upstream (ECC constant time issues).
  - include patches for CVE-2020-12403 from upstream
    (CHACHA issues).
  - include self-tests for kdfs and cmac.


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-6
changelog:
  - turn of ALTIVEC instruction for powerpc because they require
    power8 and we need to support power7 on RHEL7 still.
  - Fix typo in measure.
  - Make sure only 2048 and greater primes are used in FIPS mode
    for dh.


author: Bob Relyea <rrelyea@redhat.com> - 3.53.1-6
changelog:
  - turn off ALTIVEC instruction for powerpc because they require
    power8 and we need to support power7 on RHEL7 still.
  - Fix typo in measure.
  - Make sure only 2048 and greater primes are used in FIPS mode
    for dh.


author: Bob Relyea <rrelyea@redhat.com> - 3.67.0-3
changelog:
  - Include softoken specific patches required by the NSS 3.67
    release including:
  -  sdb timeout fixes.
  -  coverity patch.
  -  fixing private key macing


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-1
changelog:
  - Rebase to NSS 3.79.
  - add reader/writer lock on encrypted attribute access
  - skip attribute verification on attributes with default values
  - don't export trust objects if they are default trust objects from dbm


author: Elio Maldonado <emaldona@redhat.com> - 3.15.beta1-0.1.beta.1
changelog:
  - Update to NSS_3_15_BETA1
  - Update spec file, patches, and helper scripts on account of a shallower source tree


author: Elio Maldonado <emaldona@redhat.com> - 3.15-0.1.beta1.2
changelog:
  - Don't include prtypes.h from hasht.t
  - Resolves: rhbz#953277 - rawhide build of glibc fails due to fatal error from nss3/hasht.h


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Add the nss-util portion of a fix for a bug in nss and nss-util
  - Resolves: Bug 752980 - Support ECDSA via pluggable ECC in the nss package


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Update to nss-3.15.4
  - Modified the nss-split-util script to use the nss upstream pristine sources
  - Resolves: Bug 1054457 - CVE-2013-1740 nss: false start PR_Recv information disclosure security issue [rhel-7.0]


author: Peter Robinson <pbrobinson@redhat.com> 3.16.2-2
changelog:
  - Generic 32/64 bit platform detection (fix ppc64le build)
  - Resolves: Bug 1126244 - Ensure nss-util is built for 64 bit on ppc64le
  - Fix contributed by Peter Robinson <pbrobinson@redhat.com>


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Bump the release number to be higher than the one for rhel-7.0
  - Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-1
changelog:
  - Rebase to nss-util from nss 3.21
  - Resolves: Bug 1297940 - Rebase RHEL 7.3 to NSS-util 3.21 in preparation for Firefox 45


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-4
changelog:
  - Manual merge from the rhel-7.2 branch
  - Fix one alias for naming compatibility with prior release
  - Remove an unused patch


author: Daiki Ueno <dueno@redhat.com> - 3.21.3-1
changelog:
  - Rebase to nss-3.21.3
  - Remove patch for CVE-2016-1950, which is included in the release
  - Related: Bug 1347908


author: Andreas Schneider <asn@redhat.com> - 1.0.1-1
changelog:
  - Update to version 1.0.1
    * Added --libs to pkg-config.
    * Added nss_wrapper-config.cmake
    * Fixed a bug packaging the obj directory.


author: Andreas Schneider <asn@redhat.com> - 1.0.1-2
changelog:
  - resolves: #1060906 - Fedora package.
  - Remove Group
  - Remove glibc-devel build requirement
  - Do not create a subpackage.


author: Michael Adam <madam@redhat.com> - 1.0.3-2
changelog:
  - Fix format of changelog entries.
  - Require cmake.
  - Don't own _libdir/pkgconfig, and require pkgconfig instead.


author: Andreas Schneider <asn@redhat.com> - 1.1.0-1
changelog:
  - Update to version 1.1.0
    * Added support for initgroups()
    * Added support for shadow files (getspnam(), etc.)
    * Improved support for multi address handling in getaddrinfo()
    * Improved file parser
    * Fixed compilation on machines without IPv4 support
    * Fixed service string sanity check in getaddrinfo() (bso #11501)
    * Fixed AI_NUMERICHOST handling in getaddrinfo() (bso #11477)


author: Andreas Schneider <asn@redhat.com> - 1.1.3-1
changelog:
  - Update to version 1.1.3
    * Added support for BSD 'struct passwd' members
    * Replaced strcpy() with snprintf()
    * Fixed segfault while reloading hosts file
    * Fixed issue where are not fault tolerant if an alias has already
      been added
    * Fixed nss_wrapper build on Solaris


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-5
changelog:
  - fix crash in FIPS mode (#839280)
  - use systemd macros if available (#850235)
  - remove obsolete macros


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-6
changelog:
  - bind broadcast client to new interfaces (#722690)
  - decode hex encoded passwords in ntpq/ntpdc
  - remove sample MD5 keys from default keys config


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-7
changelog:
  - allow selection of cipher for private key files
  - set identity modulus size in ntp-keygen
  - create sntp subpackage
  - add sntp service
  - use system libopts
  - add Wants=ntp-wait.service to ntpd service
  - don't fail when /etc/sysconfig/ntpd is missing
  - modify mlock and multiopts patches to use autogen
  - make perl subpackage noarch


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-11
changelog:
  - avoid rereading /etc/services (#768804)
  - remove ntp-wait dependency from ntpd service (#906753)
  - add missing and remove unrecognized options in documentation
  - update comments in some config files


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-12
changelog:
  - workaround failing autogen
  - move files from /lib
  - don't own ntp-units.d directory
  - drop old systemd scriptlets
  - fix dates in changelog


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-13
changelog:
  - ignore duplicate servers from dhclient
  - don't use -Wstrict-overflow with -fno-strict-overflow
  - buildrequire systemd-units
  - remove pie test


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-16
changelog:
  - refresh peers on routing updates (#1048132)
  - fix calculation of root dispersion (#1045377)
  - remove unnecessary IPv6 restrict line from default ntp.conf (#1048255)
  - remove kod from default restrict in ntp.conf (#1048255)
  - update logconfig documentation for patched default (#1048252)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-19
changelog:
  - don't generate weak control key for resolver (CVE-2014-9293)
  - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
  - fix buffer overflows via specially-crafted packets (CVE-2014-9295)
  - don't mobilize passive association when authentication fails (CVE-2014-9296)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-19.el7_1.3
changelog:
  - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
  - allow only one step larger than panic threshold with -g (CVE-2015-5300)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-20
changelog:
  - validate lengths of values in extension fields (CVE-2014-9297)
  - drop packets with spoofed source address ::1 (CVE-2014-9298)
  - reject packets without MAC when authentication is enabled (CVE-2015-1798)
  - protect symmetric associations with symmetric key against DoS attack (CVE-2015-1799)
  - fix generation of MD5 keys with ntp-keygen on big-endian systems (CVE-2015-3405)
  - add option to set Differentiated Services Code Point (DSCP) (#1202828)
  - add nanosecond support to SHM refclock (#1117702)
  - allow creating all SHM segments with owner-only access (#1122012)
  - allow different thresholds for forward and backward step (#1193154)
  - allow symmetric keys up to 32 bytes again (#1191111)
  - don't step clock for leap second with -x option (#1191122)
  - don't drop packets with source port below 123 (#1171640)
  - retry joining multicast groups (#1207014)
  - increase memlock limit again (#1053569)
  - warn when monitor can't be disabled due to limited restrict (#1191108)
  - use larger RSA exponent in ntp-keygen (#1191116)
  - fix crash in ntpq mreadvar command (#1180721)
  - move sntp kod database to allow SELinux labeling (#1082934)
  - fix typos in ntpd man page (#1195211)
  - improve documentation of restrict command (#1213953)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-22.el7_2.2
changelog:
  - don't allow spoofed packets to demobilize associations (CVE-2015-7979,
    CVE-2016-1547)
  - don't allow spoofed packet to enable symmetric interleaved mode
    (CVE-2016-1548)
  - check mode of new source in config command (CVE-2016-2518)
  - make MAC check resilient against timing attack (CVE-2016-1550)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-24
changelog:
  - fix crash with invalid logconfig command (CVE-2015-5194)
  - fix crash when referencing disabled statistic type (CVE-2015-5195)
  - don't hang in sntp with crafted reply (CVE-2015-5219)
  - don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
    CVE-2015-7702)
  - fix memory leak with autokey (CVE-2015-7701)
  - don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
  - don't crash in ntpq with crafted packet (CVE-2015-7852)
  - check key ID in packets authenticated with symmetric key (CVE-2015-7974)
  - fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)
  - don't allow spoofed packets to demobilize associations (CVE-2015-7979,
    CVE-2016-1547)
  - don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
  - fix infinite loop in ntpq/ntpdc (CVE-2015-8158)
  - fix resetting of leap status (#1242553)
  - extend rawstats log (#1242877)
  - report clock state changes related to leap seconds (#1242935)
  - allow -4/-6 on restrict lines with mask (#1304492)
  - explain synchronised state in ntpstat man page (#1309594)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-25
changelog:
  - don't allow spoofed packet to enable symmetric interleaved mode
    (CVE-2016-1548)
  - check mode of new source in config command (CVE-2016-2518)
  - make MAC check resilient against timing attack (CVE-2016-1550)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-25.el7_3.1
changelog:
  - don't limit rate of packets from sources (CVE-2016-7426)
  - don't change interface from received packets (CVE-2016-7429)
  - fix calculation of root distance again (CVE-2016-7433)
  - require authentication for trap commands (CVE-2016-9310)
  - fix crash when reporting peer event to trappers (CVE-2016-9311)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-28
changelog:
  - fix buffer overflow in datum refclock driver (CVE-2017-6462)
  - fix crash with invalid unpeer command (CVE-2017-6463)
  - fix potential crash with invalid server command (CVE-2017-6464)
  - add Spectracom TSYNC driver (#1491797)
  - fix initialization of system clock status (#1493452)
  - fix typos in ntpd man page (#1420453)
  - use SHA1 request key by default (#1442083)
  - use network-online target in ntpdate and sntp services (#1466947)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-29
changelog:
  - fix CVE-2016-7429 patch to restore default ttl configuration (#1550637)
  - fix buffer overflow in parsing of address in ntpq and ntpdc (CVE-2018-12327)
  - fix crash in parsing of received address in ntpq (#1616250)
  - avoid reading freed memory after disabling netlink socket (#1555401)
  - don't disable netlink socket on ENOBUFS error (#1555413)
  - replace ntpstat with shell script using ntpq and supporting chrony (#1592871)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-29.el7_8.2
changelog:
  - don't update transmission time on invalid response (CVE-2020-11868)
  - randomize transmit timestamp in client requests (CVE-?, #1813787)


author: Tomas Tomecek <ttomecek@redhat.com> - 1:1.7.1-3
changelog:
  - Update License
  - Fix rpmlint warnings
  - Increase verbosity level of tests
  - Disable python 3 build
  - Fix rhbz#987032 (SCL related: wrong shebang)


author: Orion Poplawski <orion@nwra.com> - 1:1.7.0-0.3.b1
changelog:
  - Add patch from github pull 371 to fix python 3.3 pickle issue
  - Remove cython .c source regeneration - fails now


author: Ade Lee <alee@redhat.com> - 1.0.1-10
changelog:
  - Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch
  - reverted the previous change.  ppc64le now removed from ExcludeArch


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Eliminated rpmbuild "bogus date" error due to inconsistent weekday,
    by assuming the date is correct and changing the weekday.
    Wed Dec 16 2010 --> Wed Dec 15 2010 or Thu Dec 16 2010 or Wed Dec 22 2010 or ....


author: Ade Lee <alee@redhat.com> 1.0.0-14
changelog:
  - Resolves: #643546 - [RFE] Add nuxwdog to RHEL.
  - Remove old encryption scheme
  - Store passwords in kernel keyring


author: Ade Lee <alee@redhat.com> 1.0.2-1
changelog:
  - Allow passwords to be retrieved post-init phase
  - Fix null termination issue on returned stored passwords


author: Ade Lee <alee@redhat.com> 1.0.3-5.1
changelog:
  - Resolves: rhbz#1503753 - nuxwdog is cutting off long ExeArgs
  - Resolves: rhbz#1534030 - add option to set process uid


author: Dogtag Team <pki-devel@redhat.com> 1.0.5-1
changelog:
  - Resolves: rhbz #1509040 - nuxwdog spec file has outdated
    source for tarballs (dmoluguw)
  - Rebase to upstream nuxwdog 1.0.5-1


author: Krzysztof Czurylo <krzysztof.czurylo@intel.com> - 1.1-1
changelog:
  - NVML 1.1 release
  - Update link to source tarball
  - Add libpmempool subpackage
  - Remove obsolete patches


author: Jeff Moyer <jmoyer@redhat.com> - 1.2.1-1.el7
changelog:
  - Update to latest stable release
  - Pull in pending stable patches for the test harness
  - disable % check temporarily until all test issues are resolved
  - Resolves: bz#1383467 bz#1382407


author: Jeff Moyer <jmoyer@redhat.com> - 1.5.1-1.el7
changelog:
  - rebase to pmdk 1.5.1
    - libpmemobj C++ bindings moved to separate package
    - pmempool convert is now a thin wrapper around pmdk-convert
    - add ownership information for libpmemobj headers directory
    - remove broken pmemcto library
  - Related: rhbz#1634347


author: gil cattaneo <puntogil@libero.it> 0:4.0-1
changelog:
  - Upgrade to 4.0
  - Rename objectweb-asm4
  - Adapt to current guidelines
  - Fixed poms groupId org.ow2.asm
  - Fixed Group field


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-10
changelog:
  - Include patch to link dllthreads.so with -lpthread explicitly, to
    fix problem with 'pthread_atfork' symbol missing (statically linked)
    on ppc64.


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-11
changelog:
  - ppc64: Fix position of stack arguments to external C functions
    when there are more than 8 parameters.


author: Richard W.M. Jones <rjones@redhat.com> 3.12.1-12
changelog:
  - ppc64: Include fix for minor heap corruption because of unaligned
    minor heap register (RHBZ#826649).
  - Unset MAKEFLAGS before running build.


author: Richard W.M. Jones <rjones@redhat.com> 4.00.0-0.3.beta2
changelog:
  - Upgrade to OCaml 4.00.0 beta 2.
  - The language is now officially called OCaml (not Objective Caml, O'Caml etc)
  - Rebase patches on top:
    . New ARM backend patch no longer required, since upstream.
    . Replacement config.guess, config.sub no longer required, since upstream
      versions are newer.
  - PPC64 backend rebased and fixed.
    . Increase the default size of the stack when compiling.
  - New tool: ocamloptp (ocamlopt profiler).
  - New VERSION file in ocaml-runtime package.
  - New ocaml-compiler-libs subpackage.
  - Rearrange ExclusiveArch alphanumerically.
  - alpha, ia64 native backends have been removed upstream, so they are
    no longer supported as native compiler targets.
  - Remove defattr.
  - Make OCaml dependency generator self-contained so it doesn't need
    previous version of OCaml around.


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-14
changelog:
  - Remove ExclusiveArch.
  - Add ocaml-srpm-macros subpackage containing arch macros.
  - See: RHBZ#1087794


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-22
changelog:
  - Update to last 4.01 version from OCaml git.
  - Fix bug in argument parsing
    resolves: rhbz#1139803


author: Richard W.M. Jones <rjones@redhat.com> - 4.01.0-22.2
changelog:
  - Use -fno-strict-aliasing when building the compiler
  - ppc, ppc64, ppc64le: Mark stack as non-executable.
    resolves: rhbz#990521
  - Provides ocaml(runtime) 4.01.1.
    related: rhbz#1098459


author: Richard W.M. Jones <rjones@redhat.com> - 4.05.0-4
changelog:
  - Rebase to 4.05.0 (same as Fedora Rawhide).
  - Adds support for POWER, z/VM.
  - Improves support for aarch64.
    resolves: rhbz#1447988


author: Richard W.M. Jones <rjones@redhat.com> - 2.01.1-5
changelog:
  - Replace %define with %global.
  - Use upstream RPM 4.8 OCaml dependency generator.
  - Suppress bogus requires as well as provides.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.3-2
changelog:
  - New upstream version 1.2.3.
  - New upstream location.
  - Clean up the spec file.
  - Remove patches since they are no longer relevant.
  - New setup appears to require ocamldoc.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.3-7
changelog:
  - Rebuild for OCaml 4.05.0
  - Add missing/implicit dependency on ocamlbuild.
    resolves: rhbz#1447992


author: Richard W.M. Jones <rjones@redhat.com> - 1.5.3-1
changelog:
  - New upstream version 1.5.3.
  - Remove patch, now upstream.
  - Clean up the spec file.
  - Rebuild for OCaml 4.00.1.


author: Richard W.M. Jones <rjones@redhat.com> - 0.4.4-2
changelog:
  - New upstream version 0.4.4.
  - Clean up the spec file.
  - Fix homepage and download URLs.
  - Don't use configure macro.  Upstream are using some sort of non-autoconf
    brokenness.
  - Rename text files as *.txt.  There is no 'api' directory any more.


author: Richard W.M. Jones <rjones@redhat.com> - 0.4.4-8
changelog:
  - Rebuild for OCaml 4.05.0
  - Remove bogus dependency on camlp4.
  - Add missing/implicit dependency on ocamlbuild.
    resolves: rhbz#1447989


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.1-1
changelog:
  - New upstream version 1.3.1.
  - This is required for programs using findlib and OCaml 4.00.0.
  - Add small patch to fix build of topfind.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-1
changelog:
  - New upstream version 1.3.3.
  - Remove patch for OCaml 4 which has been obsoleted by upstream changes.


author: Richard W.M. Jones <rjones@redhat.com> - 1.7.3-6
changelog:
  - Remove BRs on ocaml-camlp4 and ocaml-labltk.
  - Enable stripping and debuginfo on s390x.
  - Use ocaml_native_compiler macro instead of opt test.
    related: rhbz#1447988


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.7-1
changelog:
  - Update to new upstream version 0.3.7.
  - New URL.
  - Include upstream patches since 0.3.7 was released.
  - Rebuild for OCaml 4.05.0
  - ExcludeArch s390, but build for s390x.
    resolves: rhbz#1447987


author: Richard W.M. Jones <rjones@redhat.com> - 0.6.1.1-1
changelog:
  - New upstream version 0.6.1.1.
  - Remove mlvirsh subpackage, no longer upstream.
  - Replace custom configure with RPM macro configure.
  - Use RPM global instead of define.
  - Use built-in RPM OCaml dependency generator.


author: Richard W.M. Jones <rjones@redhat.com> - 0.6.1.2-5
changelog:
  - Modernise the spec file.
  - Add upstream patch to remove unnecessary get_cpu_stats second parameter
    (thanks Hu Tao).


author: Richard W.M. Jones <rjones@redhat.com> - 4-1
changelog:
  - s390x is now a native architecture with OCaml 4.04 in Fedora >= 26.
  - Add riscv64 as a native arch using out of tree backend.


author: Richard W.M. Jones <rjones@redhat.com> - 2.3-0.1.svn234
changelog:
  - Update to latest version (subversion release 234).
  - Includes fix for CVE-2012-3514 - moderate impact hash table collisions
    (resolves: rhbz#787890).
  - Clean up the spec file and bring up to modern standards.
  - Add tests.


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.2-1
changelog:
  - refer to $local_fs instead of $localfs in the init script (#802719)
  - install a systemd unit file instead of an init script on still-in-development
    releases (#820137,818963)
  - build binaries position-independent and marked for earliest-possible symbol
    resolution (#852800)
  - don't worry about moving things from /usr to / when they're the same (#852800)


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.2-2
changelog:
  - add missing requires(post) on killall, which we use to poke the message
    bus daemon to get it to reload its configuration, spotted by rcritten


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.3-2
changelog:
  - use %systemd_postun_with_restart instead of plain old %systemd_postun,
    because we can be restarted in the %postun


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.4-1
changelog:
  - add an [Install] section containing WantedBy=sysinit.target to the systemd
    unit file (#963722), allowing it to actually be "enabled"


author: Nalin Dahyabhai <nalin@redhat.com> 0.31.5-1
changelog:
  - add man(5) pages for the configuration files that we include which get
    included by others, just to be tidy (#884552)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.31.5-4
changelog:
  - correctly check the error returned from getpwnam_r(), so that we don't
    miss an ERANGE error (#1098616, part of #1108398)
  - add a note to pam_oddjob_mkhomedir's manual pointing to where the
    configuration would actually go (part of #1108398)
  - stop overriding the system-wide UMASK default in our default
    oddjobd-mkhomedir.conf file (#995097,#1123860), and stop using its
    proprocessor-input file as a reference, since we're patching it now


author: Michal Schmidt <mschmidt@redhat.com> - 10.0.0.0-436
changelog:
  - Update to new upstream snapshot with unbundled 3rd party software.
  - Follow upstream spec file changes.
  - Related: bz1173309


author: Honggang Li <honli@redhat.com> - 10.3.1.0-9
changelog:
  - Rebase to latest upstream branch v10_3_1 as required.
  - Clean up change log.
  - Apply Epoch tag.
  - Resolves: bz1382796


author: Honggang Li <honli@redhat.com> - 10.7.0.0.133-1
changelog:
  - Rebase to upstream release v10.7.0.0.133
  - Delete opapacketcapture
  - Resolves: bz1483552, bz1457762


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: opa-ff.ini
  -->  Config file for automated patch script
  - Added Patch: opa-ff_add_dist_to_list.patch
  -->  Detect SL is an EL


author: Michal Schmidt <mschmidt@redhat.com> - 10.0.0.0-438
changelog:
  - Initial packaging for RHEL, based on upstream spec file.
  - Cleaned up spec.
  - Moved /opt/opafm -> /usr/lib/opa-fm.
  - Fix scriptlets.


author: Michal Schmidt <mschmidt@redhat.com> - 10.0.0.0-440
changelog:
  - Respect optflags.
  - Avoid overflowing prog path due to /opt -> /usr/lib substitution.
  - Resolves: bz1257087
  - Resolves: bz1257093


author: Honggang Li <honli@redhat.com> - 10.0.0.0-443
changelog:
  - Apply one missed patch to fix various /tmp races
  - Revert the script for building (S)RPMs
  - Resolves: bz1262327


author: Honggang Li <honli@redhat.com> - 10.3.1.0-8
changelog:
  - Rebase to upstream branch v10_3_1 as required.
  - Clean up change log.
  - Apply Epoch tag.
  - Resolves: bz1257452, bz1382792


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: opa-fm_add_dist_to_list.patch
  -->  Detect SL is an EL
  - Added Source: opa-fm.ini
  -->  Config file for automated patch script


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.10.2-1
changelog:
  - Package new upstream version open-vm-tools-9.10.2-2822639
  - Removed the patches that are no longer needed
    resolves: rhbz#1172833


author: Richard W.M. Jones <rjones@redhat.com> - 10.0.5-2
changelog:
  - Rebase to open-vm-tools 10.0.5 (from Fedora Rawhide)
    resolves: rhbz#1268537
  - Remove PAM calls to pam_unix2.so module
    resolves: rhbz#1313071


author: Richard W.M. Jones <rjones@redhat.com> - 10.0.5-4
changelog:
  - Fix failure to quiesce filesystem when Docker containers are running
    resolves: rhbz#1406483
  - Fix for deadlock when taking a snapshot
    resolves: rhbz#1398802


author: Richard W.M. Jones <rjones@redhat.com> - 10.1.5-1
changelog:
  - Rebase to open-vm-tools 10.1.5 from Fedora Rawhide
    resolves: rhbz#1406901
  - Enable vgauthd.
    resolves: rhbz#1269243
  - Add runtime dependency on pciutils (1388766).


author: Ravindra Kumar <ravindrakumar@vmware.com> - 10.2.0-1
changelog:
  - Package new upstream version open-vm-tools-10.2.0-7253323.
  - Remove the patches that are no longer needed.
  - New version builds with gtk3 by default.
  - Package vmware-user symlink in desktop.
  - Add a new test package for test utilities.
  - Pick a fix to a conditional from Miroslav Vadkerti <mvadkert@redhat.com>.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 10.2.0-3
changelog:
  - Patch for a Wayland related crash in the desktopEvents plugin (RHBZ#1526952).
  - gdk_set_allowed_backends() is available in version 3.10 and later only.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 10.2.5-1
changelog:
  - Package new upstream version open-vm-tools-10.2.5-8068406 (RHBZ#1431376).
  - Added use-tirpc.patch to use libtirpc instead of deprecated Sun RPC.
  - Removed wayland-crash.patch which is no longer needed.


author: Miroslav Rezanina <mrezanin@redhat.com> - 10-2.5-3
changelog:
  - ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
  - Resolves: bz#1601559
    ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.3.0-2.el7
changelog:
  - ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
  - ovt-Fix-RELRO-flag.patch [bz#1678576]
  - Resolves: bz#1662278
    ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
  - Resolves: bz#1678576
    ([ESXi][RHEL7.6] Several files lost Full RELRO)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.3.0-2.el7_7.1
changelog:
  - ovt-Fix-memory-leaks-in-vix-tools.patch [bz#1772825]
  - ovt-End-VGAuth-impersonation-in-the.patch [bz#1772825]
  - ovt-Fix-leaks-in-ListAliases-and.patch [bz#1772825]
  - Resolves: bz#1772825
    ([ESXi][RHEL7.7.z]Need to backport some severe memory leak fixes from upstream [rhel-7.7.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.3.10-1
changelog:
  - Rebase to 10.3.10 [bz#1725187]
  - Resolves: bz#1725187
    ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.3.10-2.el7
changelog:
  - ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
  - ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
  - ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
  - Resolves: bz#1760625
    ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.3.10-2.el7_8.1
changelog:
  - ovt-Avoid-freezing-mount-points-for-same-device.patch [bz#1812934]
  - ovt-Implement-the-https-pagure.io-packaging-committee-is.patch [bz#1813913]
  - Resolves: bz#1812934
    ([ESXi] [open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed due to a deadlock condition of the 'vmtoolsd' task [rhel-7.8.z])
  - Resolves: bz#1813913
    ([ESXi][RHEL7.3]open-vm-tools SSL/TLS certificates needs to be unique per instance or install but this value is created at install-time and not during the first run. [rhel-7.8.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-1
changelog:
  - Rebase to 11.0.5 [bz#1806675]
  - Resolves: bz#1806675
   ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-2.el7
changelog:
  - ovt-Fix-ldconfig-call.patch [bz#1815549]
  - ovt-add-appinfo-plugin.patch [bz#1809753]
  - Resolves: bz#1809753
    ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
  - Resolves: bz#1815549
    ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-3.el7
changelog:
  - ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
  - ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
  - Resolves: bz#1818109
    ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-3.el7_9.1
changelog:
  - ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
  - Resolves: bz#1840309
    ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])


author: Jon Maloy <jmaloy@redhat.com> - 11.0.5-3.el7_9.2
changelog:
  - ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
  - Resolves: bz#1911853
    ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-3.el7_9.3
changelog:
  - ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
  - Resolves: bz#1937420
    ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])


author: Jon Maloy <jmaloy@redhat.com> - 11.0.5-3.el7_9.4
changelog:
  - ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
  - Resolves: bz#2119310
    (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-3.el7_9.5
changelog:
  - ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
  - Resolves: bz#1880404
    ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
  - Resolves: bz#1994590
    ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)


author: Jon Maloy <jmaloy@redhat.com> - 11.0.5-3.el7_9.6
changelog:
  - ovt-Remove-some-dead-code.patch [bz#2215562]
  - Resolves: bz#2215562
    ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-3.el7_9.7
changelog:
  - ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
  - Resolves: RHEL-2413
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])


author: Jon Maloy <jmaloy@redhat.com> - 11.0.5-3.el7_9.8
changelog:
  - ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [bz#2226921]
  - Resolves: bz#2226921
    ([RHEL7.9][ESXi]Latest version of open-vm-tools breaks VM backups)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.0.5-3.el7_9.9
changelog:
  - ovt-Don-t-accept-tokens-with-unrelated-certs.patch [RHEL-14642]
  - ovt-File-descriptor-vulnerability-in-the-open-vm-tools-v.patch [RHEL-14676]
  - Resolves: RHEL-14642
    (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-7.9.z])
  - Resolves: RHEL-14676
    (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-7.9.z])


author: Richard W.M. Jones <rjones@redhat.com> - 9.4.0-4
changelog:
  - Removed unnecessary package dependency on 'dbus'
  - Moved 'vm-support' script to /usr/bin
  - Added a call to 'tools.set.version' RPC to inform VMware
    platform when open-vm-tools has been uninstalled
  - Add missing package dependency on 'which' (BZ#1045709)
  - Add missing package dependencies (BZ#1045709, BZ#1077320)


author: Ravindra Kumar <ravindrakumar at vmware.com> - 9.2.2-10
changelog:
  - Addressed formal review comments from Simone Caronni.
  - Removed %check section because 'make check' brings font file back.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.2-12
changelog:
  - Removed %defattr and BuildRoot.
  - Added ExclusiveArch.
  - Replaced /usr/sbin/ldconfig with /sbin/ldconfig.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.3-1
changelog:
  - Package new upstream version open-vm-tools-9.2.3-1031360.
  - Removed configure options CUSTOM_PROCPS_NAME (for libproc) and
    -Wno-deprecated-declarations as these have been addressed in
    open-vm-tools-9.2.3-1031360.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.3-5
changelog:
  - Renamed source file open-vm-tools.service -> vmtoolsd.service
    to match it with the service name.


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.2.3-10
changelog:
  - Added options for hardening build (bug 990549). 
  - Excluded unwanted file mount.vmhgfs from packaging (bug 990547).
  - Removed deprecated key "Encoding" from "Desktop Entry" (bug 990552).


author: Ravindra Kumar <ravindrakumar@vmware.com> - 9.4.0-1
changelog:
  - Package new upstream version open-vm-tools-9.4.0-1280544.
  - Added CUSTOM_PROCPS_NAME=procps and -Wno-deprecated-declarations
    for version 9.4.0.


author: Stephan Wiesand <stephan wiesand desy de> 1.6.2-0.144.SLx
changelog:
  - do some more work in modules script
  - print debug output from kmod scripts if variable "verbose" is set


author: Stephan Wiesand <stephan wiesand desy de> 1.6.2-145.SLx
changelog:
  - 1.6.5 security release addressing openafs-sa-2013-0003 and -0004
  - see SECURITY.txt for important info on how to actually secure your site
  - just updating to this build is *not* sufficient


author: Stephan Wiesand <stephan wiesand desy de> 1.6.5.1-146.SLx
changelog:
  - 1.6.5.1 bugfix release
  - modify buildroot to use mktemp, allowing simultaneous builds (Pat)
  - fix the AFS mountpoint in the cacheinfo file generated in the SPEC


author: Stephan Wiesand <stephan wiesand desy de> 1.6.5.1-147.SLx
changelog:
  - patch1080 with http://gerrit.openafs.org/10578 to fix RHBZ #1038315 on EL 4.6
  - fix build on EL 5.10


author: Stephan Wiesand <stephan wiesand desy de> 1.6.9-150.SLx
changelog:
  - update to release 1.6.9
  - 1st stab at support for SL7
  -  ship systemd unit files on this platform, rather than init scripts
  -  the init scripts are then installed as /sbin/openafs-{client,server}-init.sh
  -  they are called in "prepare" mode from the unit files
  -  in this mode, they do the usual checks/autoconfig, ...
  -  and then they write the environment files used in the unit files
  - added BOSSERVER_OPTIONS variable to sysconfig (and server startup files)
  - added ENABLE_DYNROOT_SPARSE to sysconfig (and client init script)
  -  defaults to on on SL7, off on SL5/6
  - patches 1080..83 are already in
  - use the right path to depmod, and generally the right sbin


author: Stephan Wiesand <stephan wiesand desy de> 1.6.9-151.SLx
changelog:
  - allow building with a "name suffix"
  - defaults to "" on SL5/6 and "-1.6-sl" on SL7
  - can be overridden on the command line (nsfx macro)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.10-152.SLx
changelog:
  - updated to 1.6.10-pre1
  - package the new volscan executable + manpage, in -server
  - don't package the xfs_size_check manpage
  - buildrequire systemd on SL7 (replaces systemd-units)
  - client/server: require systemd in post, preun and postun on SL7
  - client/server: run systemd_ macros in post, preun and postun on SL7
  - client/server: prepended a . to the generated sysconfig file names on SL7
  - client/server: ship preset files on SL7 rather than disabling in %post
  - simply install the init scripts as usual on SL7, no need to move/rename them
  - support "--with modsign" to sign the kernel module (works on SL7+ only)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.5.1-147.SLx
changelog:
  - patch1080 with http://gerrit.openafs.org/10578 to fix RHBZ #1038315 on EL 6.5
  - fix build on EL 5.10


author: Stephan Wiesand <stephan wiesand desy de> 1.6.10-153.SLx
changelog:
  - update to release 1.6.10
  - patch 1084 to revert gerrit 11358
  - patch 1085 with aklog/krb524 fix from gerrit 11538
  - package the new volscan executable + manpage, in -server
  - don't package the xfs_size_check manpage
  - removed the old lwp versions of butc, fileserver, volserver
  - support for SL7
  -  support "--with modsign" to sign the kernel module
  -  ship systemd unit files on this platform, rather than init scripts
  -  the old init scripts are called in "prepare" mode from the unit files
  -  in this mode, they do the usual checks/autoconfig, ...
  -  and then they write the environment files used in the unit files
  - added BOSSERVER_OPTIONS variable to sysconfig (and server startup files)
  - added ENABLE_DYNROOT_SPARSE to sysconfig (and client init script)
  -  defaults to on on SL7, off on SL5/6
  - patches 1080..83 are already in
  - use the right path to depmod, and generally the right sbin


author: Stephan Wiesand <stephan wiesand desy de> 1.6.11-204.SLx
changelog:
  - update to release 1.6.11
  - patch 1084 should no longer be needed (should...)
  - patch 1085 is included in 1.6.11
  - added "Provides: openafs-sl-client = %{version}" as requested by Pat


author: Stephan Wiesand <stephan wiesand desy de> 1.6.10-153.SLx
changelog:
  - update to release 1.6.10
  - patch 1084 to revert gerrit 11358
  - patch 1085 with aklog/krb524 fix from gerrit 11538
  - package the new volscan executable + manpage, in -server
  - do not package the xfs_size_check manpage
  - removed the old lwp versions of butc, fileserver, volserver
  - support for SL7
  -  support "--with modsign" to sign the kernel module
  -  ship systemd unit files on this platform, rather than init scripts
  -  the old init scripts are called in "prepare" mode from the unit files
  -  in this mode, they do the usual checks/autoconfig, ...
  -  and then they write the environment files used in the unit files
  - added BOSSERVER_OPTIONS variable to sysconfig (and server startup files)
  - added ENABLE_DYNROOT_SPARSE to sysconfig (and client init script)
  -  defaults to on on SL7, off on SL5/6
  - patches 1080..83 are already in
  - use the right path to depmod, and generally the right sbin


author: Stephan Wiesand <stephan wiesand desy de> 1.6.11-205.SLx
changelog:
  - fixed dependency of the -kpasswd subpackage (spotted by Pat Riehecky)
  - fixed on_network test to work on EL7 in server rc file too (reported by
    Otto-Michael Braun)
  - fixed unsatisfied dependencies on shared libs from -authlib-devel by turning
    AutoReq off for that package (reported by Ben Meekhof)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.11.1-206.SLx
changelog:
  - first test build of 1.6.11.1, based on HEAD at 9e1cf26
  - + 11760/1 (Linux 4.0) + 11808 (aklog fix) + 11809 (FBSD kbuild)
  - + 11820 (NEWS) + 11819 (make 1.6.11.1)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.14-218.SLx
changelog:
  - update to release 1.6.14
  - fixes a 1.6.13 regression in vlserver when volumes are queried by regex
  - the "backup" util does this, unless vols are specified with ".*" or "" only


author: Stephan Wiesand <stephan wiesand desy de> 1.6.15-221.SLx
changelog:
  - update to release 1.6.15 (security release)
  - addresses OPENAFS-SA-2015-007 (CVE-2015-7762, CVE-2015-7763)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.17-234.SLx
changelog:
  - update to release 1.6.17 (security release)
  - install service unit files with mode 644, not 755 (rt.central.org #132662)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.20-256.SLx
changelog:
  - update to security release 1.6.20
  - added RemainAfterExit=true in afs.service, to fix the case where only
    kernel threads remain after the client has started


author: Stephan Wiesand <stephan wiesand desy de> 1.6.23-289.SLx
changelog:
  - update to release 1.6.23 (security release)
  - addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003


author: Stephan Wiesand <stephan wiesand desy de> 1.6.24-290.SLx
changelog:
  - update to release 1.6.24 (security release)
  - addresses OPENAFS-SA-2019-001, OPENAFS-SA-2019-002, OPENAFS-SA-2019-003
  - fix build on EL 6.10


author: Milan Crha <mcrha@redhat.com> - 1.0-7
changelog:
  - Add patch to use system's popt.h
  - Add patch to compile only certain parts of the package
  - Disable openchange-server for rawhide too (due to samba4 changes)


author: Milan Crha <mcrha@redhat.com> - 1.0-8
changelog:
  - Add patch for OpenChange bug #397 (crash under MAPIUninitialize)
  - Disable build of python and mapiproxy


author: Dan Horák <dan[at]danny.cz> - 3.0-8
changelog:
  - include token specific directories (#1013017, #1045775, #1054442)
  - fix pkcsconf crash for non-root users (#1054661)
  - the libs subpackage must care of creating the pkcs11 group, it's the first to be installed
  - fix build with -Werror=format-security (#1037228)
  - Resolves: #1054442, #1054661


author: Petr Lautrbach <plautrba@redhat.com> 3.0-11.1
changelog:
  - Add a pkcscca tool to help migrate cca private token objects
    from v2 (encrypted with cca hardware) to v3 (encrypted in software)
    (#1165621)


author: Dan Horák <dan[at]danny.cz> - 2.4.2-3
changelog:
  - add virtual opencryptoki(token) Provides to token modules and as Requires
    to main package (#904986)


author: Jakub Jelen <jjelen@redhat.com> - 3.5-2
changelog:
  - icsf token does not validate data length for verify operation for ECDSA (#1344383)
  - Create lock and log directories from opencryptoki (#1343671)
  - Create log directory with appropriate permissions (#1185421)
  - Added support for rc=8, reasoncode=2028 in icsf token (#1348803)
  - Fix for session handle not set in session issue (#1348804)
  - Fix memory leak in icsf specific code


author: Sinny Kumari <skumari@redhat.com> - 3.5-6
changelog:
  - RHBZ#1371095: coverity scan fixes - memory leak and variable initialization
  - RHBZ#1372188: fix illegal instruction on pkcscca tool


author: Sinny Kumari <skumari@redhat.com> - 3.6.2-1
changelog:
  - Rebase opencryptoki to 3.6.2
  - Remove patches from spec file applied during 3.5 release
  - Resolves: #1391559, #1380784, #1417905


author: Sinny Kumari <skumari@redhat.com> - 3.10.0-1
changelog:
  - Rebase to 3.10.0
  - Resolves: #1519383 - openCryptoki token for EP11 - crucial enhancements for s390x
  - Remove opencryptoki-3.4-fix-root-checks.patch, fixed in 3.9.0
  - Remove opencryptoki-3.2-conditional-manpages.patch, fixed in 3.9.0


author: Than Ngo <than@redhat.com> - 3.11.0-1
changelog:
  - Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
  - Resolves: #1641027 - enhanced IBM z14 functions
  - Resolves: #1641026 - support m_*Single functions from ep11 lib
  - Resolves: #1641025 - rebase to 3.11.0
  - Resolves: #1519386 - use CPACF hashes in ep11 token
  - Resolves: #1373833 - lock file directory is %ghost now


author: Than Ngo <than@redhat.com> - 3.11.0-3
changelog:
  - Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key


author: Petr Lautrbach <plautrba@redhat.com> 3.2-3
changelog:
  - Correctly declare OAEP parameter in RSA Wrap tests to prevent a possible
    scope issue (#1088512)
  - several fixes for pkcsep11_migrate


author: Jakub Jelen <jjelen@redhat.com> 3.4.1-3
changelog:
  - Few more issues reported by Coverity
  - Fix Segfault when trace in enabled in api_interface.c
  - Fix the misleading indentation
  - Fix memory leak by closing the lock file descriptor in C_Final


author: Nicolas Chauvet <kwizart@gmail.com> - 2.4.4-0.1.beta
changelog:
  - Update to 2.4.4 beta
  - Drop python-imaging also from requires
  - Drop merged patch for additionals codecs
  - Disable the java binding for now (untested)


author: Paul Wouters <pwouters@redhat.com> - 1.4.6-2
changelog:
  - Changed conf.xml to reference softhsm at /usr/lib64/pkcs11/libsofthsm2.so
  - Updated Requires: to softhsm >= 2.0.0b1-2


author: Dan Horák <dhorak@redhat.com> - 3.7.0-1
changelog:
  - rebased to 3.7.0 (#1507619)
  - fix test-suite run under root (#1267928)
  - Resolves: #1507619, #1267928


author: Rex Dieter <rdieter@fedoraproject.org> 1.5.1-3
changelog:
  - int main() in t1_generate_luts.c breaks mplayer (issue#152)
  - jp2_read_boxhdr() can trigger random pointer memory access (issue#155)
  - missing range check in j2k_read_coc et al (issue#166)
  - division by zero in j2k_read_siz (issue#169)


author: Nikola Forró <nforro@redhat.com> - 1.5.1-11
changelog:
  - Fix decoding of chroma-subsampled images
  - Add patches for CVE-2016-9573 and CVE-2016-9675
  - Fix Coverity issues
    Resolves: #1419772


author: Jan Vcelak <jvcelak@fedoraproject.org> 2.4.34-1
changelog:
  - new upstream release (#917603)
  - fix: slapcat segfaults if cn=config.ldif not present (#872784)
  - use systemd-rpm macros in spec file (#850247)


author: Jan Synáček <jsynacek@redhat.com> 2.4.34-1
changelog:
  - enable perl backend (#820547)
  - package ppolicy-check-password (#829749)
  - add perl specific BuildRequires
  - fix bogus dates


author: Jan Synáček <jsynacek@redhat.com> 2.4.34-2
changelog:
  - fix: syncrepl push DELETE operation does not recover (#920482)
  - run autoreconf every build, drop autoreconf patch (#926280)


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-1
changelog:
  - new upstream release (#947235)
  - fix: slapd.service should ensure that network is up before starting (#946921)
  - fix: NSS related resource leak (#929357)


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-3
changelog:
  - fix: minor documentation fixes
  - set SASL_NOCANON to on by default (#949864)
  - remove trailing spaces


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-4
changelog:
  - do not needlessly run ldconfig after installing openldap-devel
  - fix: LDAPI with GSSAPI does not work if SASL_NOCANON=on (#960222)
  - fix: lt_dlopen() with back_perl (#960048)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-4
changelog:
  - support TLS 1.1 and later (#1160468)
  - fix: /etc/openldap/certs directory is empty after installation (#1064251)
  - fix: Typo in script to generate /usr/libexec/openldap/generate-server-cert.sh (#1087490)
  - fix: remove correct tmp file when generating server cert (#1103101)
  - fix: slapd.ldif olcFrontend missing important/required objectclass (#1132094)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-5
changelog:
  - add documentation reference to service file (#1087288)
  - fix: tls_reqcert try has bad behavior (#1027613)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-5
changelog:
  - enhancement: support TLS 1.1 and later (#1231522,#1160467)
  - fix: openldap ciphersuite parsing code handles masks incorrectly (#1231522)
  - fix the patch in commit da1b5c (fix: OpenLDAP crash in NSS shutdown handling) (#1231228)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-7
changelog:
  - Merge two MozNSS cipher suite definition patches into one. (#1245279)
  - Use what NSS considers default for DEFAULT cipher string. (#1245279)
  - Remove unnecesary defaults from ciphers' definitions (#1245279)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-8
changelog:
  - NSS does not support string ordering (#1231522)
  - implement and correct order of parsing attributes (#1231522)
  - add multi_mask and multi_strength to correctly handle sets of attributes (#1231522)
  - add new cipher suites and correct AES-GCM attributes (#1245279)
  - correct DEFAULT ciphers handling to exclude eNULL cipher suites (#1245279)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-10
changelog:
  - fix: slapd fails to start on boot (#1315958)
  - fix: id_query option is not available after rebasing openldap to 2.4.39 (#1311832)
  - Include sha2 module (#1292568)
  - Compile AllOp together with other overlays (#990893)
  - Missing mutex unlock in accesslog overlay (#1261003)
  - ITS#8337 fix missing olcDbChecksum config attr (#1292590)
  - ITS#8003 fix off-by-one in LDIF length (#1292619)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-12
changelog:
  - fix: slapd crash in do_search (#1316450)
  - fix: Setting olcTLSProtocolMin does not change supported protocols (#1249093)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-13
changelog:
  - fix: Bad log levels in check_password module
  - fix: We can't search expected entries from LDAP server
  - fix: OpenLDAP ciphersuite parsing doesn't match OpenSSL ciphers man page
    + Add TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 to list of ciphers
    + Add DH cipher string parsing option
    + Correct handling kECDH ciphers with aRSA or aECDSA


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-1
changelog:
  - new upstream release (#1147982)
  - fix: PIE and RELRO check (#1092562)
  - fix: slaptest doesn't convert perlModuleConfig lines (#1184585)
  - fix: OpenLDAP crash in NSS shutdown handling (#1158005)
  - fix: slapd.service may fail to start if binding to NIC ip (#1198781)
  - fix: deadlock during SSL_ForceHandshake when getting connection to replica (#1125152)
  - improve check_password (#1174723, #1196243)
  - provide an unversioned symlink to check_password.so.1.1 (#1174634)
  - add findutils to requires (#1209229)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-5
changelog:
  - fix CVE-2017-9287 openldap: Double free vulnerability in servers/slapd/back-mdb/search.c (#1458210)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-10
changelog:
  - Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
  - Fix issues in MozNSS compatibility layer (#1400578)
    + Force write file with fsync to avoid race conditions
    + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
    + Allow missing cert and key which is a valid usecase
    + Create extraction folder only in /tmp to simplify selinux rules
    + Fix Covscan issues


author: Matus Honek <mhonek@redhat.com> - 2.4.44-11
changelog:
  - MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
    + Fix a possible invalid dereference (covscan)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-12
changelog:
  - MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
    + Warn just before use of a PIN about key file extraction


author: Matus Honek <mhonek@redhat.com> - 2.4.44-13
changelog:
  - MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
  - MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
  - MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-17
changelog:
  - MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
  - Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
  - MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-18
changelog:
  - MozNSS Compat. Layer: Make log messages more clear (#1543955)
  - Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-22
changelog:
  - Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)


author: Simon Pichugin <spichugi@redhat.com> - 2.4.44-23
changelog:
  - Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)


author: Simon Pichugin <spichugi@redhat.com> - 2.4.44-25
changelog:
  - Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation (#2040539)
  - Fix CVE-2020-25710 openldap: assertion failure in CSN normalization with invalid input (#2040538)


author: Radek Novacek <rnovacek@redhat.com> 0.2.0-1
changelog:
  - Version 0.2.0
  - Add -doc subpackage
  - Remove dependency on sblim-cmpi-base
  - Resolves: rhbz#1012549, rhbz#1011903


author: Radek Novacek <rnovacek@redhat.com> 0.2.1-3
changelog:
  - Use proper classname of slave SettingData in CreateSlaveSetting
  - bridging: Don't forget master setting when modifying slave setting
  - fix the tests
  - Fix potential crash when setting master connection that not exists
  - Resolves: rhbz#1035674, rhbz#1035676


author: Radek Novacek <rnovacek@redhat.com> 0.2.2-3
changelog:
  - Fix LMI_IPElementSettingData refering bridging master setting instead of slave setting
  - Support connections that has interface-name option specified
  - Fix that bond slave names are not going above 2
  - allow virtual device name change for bonds
  - Resolves: #1064215, #1064324, #1064280, #1064334


author: Radek Novacek <rnovacek@redhat.com> 0.2.2-4
changelog:
  - Fix IPv6Type property of LMI_IPAssignmentSettingData class for DHCPv6
  - React to IP configuration change
  - Resolves: #1066853, #1069169


author: Radek Novacek <rnovacek@redhat.com> 0.1.0-1
changelog:
  - Version 0.1.0
  - Add profile registration
  - New provider: openlmi-pcp
  - Split openlmi-python to openlmi-python-base and openlmi-python-providers


author: <jsafrane@redhat.com> 0.1.0-2
changelog:
  - Correctly obsolete openlmi-python package
  - Remove dependency between openlmi-python-base and openlmi-providers


author: Michal Minar <miminar@redhat.com> 0.2.0-1
changelog:
  - Version 0.2.0
  - Enhancement in software api.
  - Added openlmi-account-doc package with admin guide.
  - Fixed installation of python packages.


author: Roman Rakus <rrakus@redhat.com> - 0.3.0-1
changelog:
  - Version 0.3.0
  - Enhancement in account api.
  - per provider configuration files as well as global configuration files
  - Define crypto algorithms for passwords in Account providers
    Resolves: #1004296, #1007251, #999410, #999487, #1001636, #1002531, #1004221,


author: Jan Safranek <jsafrane@redhat.com> - 0.4.1-16
changelog:
  - Fixed openlmi-mof-register not to crash when CIMOM is down
  - Added another bunch of software bugfixes.
  - Resolves: rhbz#1039018 rhbz#1032590 rhbz#1043243
  - Resolves: rhbz#1045058 rhbz#1043161 rhbz#1049389


author: Jan Synáček <jsynacek@redhat.com> - 0.4.2-3
changelog:
  - Correctly fill FSCreationClassName and FSName
  - Replace thread-unsafe functions
  - Resolves: rhbz#1042843 rhbz#1050841


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.4.2-4
changelog:
  - Fix service methods report success before the action is actually finished
  - Add description to service methods
  - Fan provider made thread-safe
  - Resolves: rhbz#1049819 rhbz#1049816 rhbz#1031650


author: Jan Safranek <jsafrane@redhat.com> - 0.5.2-1
changelog:
  - Added adjustments for separate SELinux policy for the provider.
  - Renamed root/PG_interop to root/interop.
  - New upstream release.


author: Jan Safranek <jsafrane@redhat.com> - 0.6.0-1
changelog:
  - New upstrem version.
    - Added documentation to openlmi-storage-doc subpackage.
    - Reworked logging.


author: Jan Safranek <jsafrane@redhat.com> - 0.7.0-8
changelog:
  - Added dist tag to Release.
  - Removed unimplemented classed from MOF files (#1042743).
  - Fixed LMI_MDRAIDElementCapabilities.GetInstance call (#1043932).


author: Jan Safranek <jsafrane@redhat.com> - 0.7.1-2
changelog:
  - Fix CreateOrModifyStoragePool exception (#1054144).
  - Fixed reloading of blivet after mount (#1054177).


author: Jan Safranek <jsafrane@redhat.com> - 0.7.1-3
changelog:
  - The provider now removes physical volume metadata from all member devices
    when a volume group is destroyed (#1057692).
  - Fixed listing of mounts of MD RAID volumes (#1057666).


author: Peter Hatina <phatina@redhat.com> - 0.9-21
changelog:
  - CWD is by default appended in search path
  - introduced CLI option --cwd-first-in-path which prepends
    CWD in search path
  - Related: #1072252


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.0-3
changelog:
  - Workaround psm vs psm2 conflict by having two separate packages.
  - Related: #947311
  - Related: #1173305


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.0-4
changelog:
  - Disambiguate names of rpm macros among the built variants.
  - Use --with-verbs instead of the deprecated synonym --with-openib.
  - Related: #947311
  - Related: #1173305


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.0-10
changelog:
  - Remove psm2 package variant. Instead use MCA exclusion using config file.
  - Related: #947311
  - Related: #1173305


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.3-1
changelog:
  - Update to upstream release 1.10.3.
  - Stop excluding psm2 MTL by default. The psm/psm2 conflict has been resolved.
  - Resolves: #1273175
  - Resolves: #1285292


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.6-1
changelog:
  - Update to upstream release 1.10.6.
  - Fix missing RPM provides.
  - Resolves: #1382800
  - Resolves: #1365792


author: Michal Schmidt <mschmidt@redhat.com> - 1.10.7-1
changelog:
  - Update to upstream release 1.10.7.
  - Add Open MPI 3.0.0 subpackage (openmpi3).
  - Resolves: #1452826


author: Jarod Wilson <jarod@redhat.com> - 1.10.7-3
changelog:
  - Update openmpi3 sub-package to OpenMPI v3.1.3
  - Resolves: #1637247
  - Rebuild against latest opensm
  - Resolves: #1670688


author: Orion Poplawski <orion@cora.nwra.com> 1.6.3-4
changelog:
  - Add patch to fix libmpi_f90.so version
  - Add patch to link tests with system libltdl
  - Run make check


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 1.5-3
changelog:
  - Drop obex_test program, as it is just for testing purposes
    and has some problems with multiple stack overflows etc.
    Resolves: #521663


author: Tomas Hozza <thozza@redhat.com> - 1.5-6
changelog:
  - changing not working Source0 URL and some minor changes in %prep
  - new source archive openobex-1.5.0-Source.zip


author: Milan Broz <mbroz@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0 (#890770)
  - Remove no longer provided onepin-opensc-pkcs11.so.
  - Add iasecc-tool, openpgp-tool and sc-hsm-tool.


author: Stef Walter <stefw@redhat.com> - 0.13.0-4
changelog:
  - Use the standard name format for p11-kit module configs
  - Put the p11-kit module config is the system location


author: Jakub Jelen <jjelen@redhat.com> - 0.16.0-2.20170227git
changelog:
  - Add support for CardOS 5.3
  - Fix coverity issues
  - Provide simple tool to swith PKCS#11 library in NSS DB


author: Jakub Jelen <jjelen@redhat.com> - 0.16.0-6.20170227git
changelog:
  - Use label from certificate DN if there is none (#1448555)
  - Use Cardholder name in the token label (#1449740)
  - Avoid infinite loop when reading CAC cards (#1473335)
  - Workaround for CAC Alt tokens (#1473418)


author: Jakub Jelen <jjelen@redhat.com> - 0.16.0-8.20170227git
changelog:
  - Copy labels from certificate (#1448555)
  - Avoid infinite loop in CAC driver when reading non-CAC cards (#1473335)
  - Properly parse Simple TLV structures in CAC driver (#1473418)


author: Jakub Jelen <jjelen@redhat.com> - 0.16.0-9.20170227git
changelog:
  - make ECPoint behavior standards compliant by default (#1562572)
  - allow mechanism to be specified in hexadecimal (#1562572)
  - Disable pinpad by default (#1547117, #1547744)


author: Jakub Jelen <jjelen@redhat.com> - 0.19.0-1
changelog:
  - Rebase to new upstream release (#1656791)
    - Add Support for HID Crescendo 144K (#1612372)
    - Add Support for CAC Alt tokens (#1645581)
    - Fix usage detection from certificates (#1672898)
    - Fix security issues:
      - CVE-2018-16391
      - CVE-2018-16392
      - CVE-2018-16393
      - CVE-2018-16418
      - CVE-2018-16419
      - CVE-2018-16420
      - CVE-2018-16421
      - CVE-2018-16422
      - CVE-2018-16423
      - CVE-2018-16426
      - CVE-2018-16427


author: Šimon Lukašík <slukasik@redhat.com> - 0.9.13-7
changelog:
  - do not obsolete openscap-conten just drop it (#1028706)
    scap-security-guide will bring the Obsoletes tag


author: Šimon Lukašík <slukasik@redhat.com> - 1.0.0-2
changelog:
  - dlopen libopenscap_sce.so.{current-age} explicitly
    That allows for SCE to work without openscap-engine-sce-devel


author: Šimon Lukašík <slukasik@redhat.com> - 1.1.1-2
changelog:
  - STIG-generated results contain var_ref without var_check (#1159289)
  - Probes failed to stop by USR1 signal as specified (#1165139)


author: Raphael Sanchez Prudencio <rsprudencio@redhat.com> - 1.2.10-3
changelog:
  - fix oscap-docker bug that incorrectly informs about incompliance of the assessed system (#1410409)


author: Martin Preisler <mpreisle@redhat.com> - 1.2.12-1
changelog:
  - Upgrade to the latest upstream release
  - improved HTML report by referencing links
  - fixed validity errors in ARF files
  - fixed CVE parsing
  - fixed injecting xccdf:check-content-ref references in ARF results
  - fixed oscap-docker incompliance reporting (#1387248)
  - fixed oscap-docker man page (#1387166)


author: Martin Preisler <mpreisle@redhat.com> - 1.2.13-1
changelog:
  - Upgrade to the latest upstream release
  - Added --thin-results CLI override to oscap xccdf eval
  - Added --without-syschar CLI override to oscap xccdf eval
  - Remediations are not filtered by applicability
  - Fixed segmentation faults in XCCDF and OVAL processing
  - Added a warning on generating an ARF from XCCDF 1.1


author: Jan Černý <jcerny@redhat.com> - 1.2.14-1
changelog:
  - Upgrade to the latest upstream release
  - Detailed information about ARF files in 'oscap info'
  - Generating remediation scripts from ARF
  - HTML report UX improvements
  - Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
  - Fixed systemd probes crashes inside containers (#1431186)
  - Fixed output on terminals with white background (#1365911)
  - Error handling in oscap-vm (#1391754)
  - Fixed SCE stderr stalling (#1420811)
  - Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
  - Fixed segmentation faults in RPM probes (#1414303, #1414312)
  - Fixed missing header in result-oriented Ansible remediations


author: Martin Preisler <mpreisle@redhat.com> - 1.2.14-2
changelog:
  - RPM probes to return not applicable on non-rpm systems (#1447629)
  - fixed sysctl tests on s390x architecture (#1447649)
  - Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)


author: Jan Černý <jcerny@redhat.com> - 1.2.15-1
changelog:
  - upgrade to the latest upstream release
  - short profile names can be used instead of long IDs
  - new option --rule allows to evaluate only a single rule
  - new option --fix-type in "oscap xccdf generate fix" allows choosing
    remediation script type without typing long URL
  - "oscap info" shows profile titles
  - OVAL details in HTML report are easier to read
  - HTML report is smaller because unselected rules are removed
  - HTML report supports NIST 800-171 and CJIS
  - remediation scripts contain headers with useful information (#1439813)
  - remediation scripts report progress when they run
  - basic support for Oracle Linux (CPEs, runlevels)
  - remediation scripts can be generated from datastreams that contain
    multiple XCCDF benchmarks
  - basic support for OVAL 5.11.2 (only schemas, no features)
  - enabled offline RPM database in rpminfo probe
  - added Fedora 28 CPE
  - fixed oscap-docker with Docker >= 2.0
  - fixed behavior of sysctl probe to be consistent with sysctl tool
  - fixed generating remediation scripts
  - severity of tailored rules is not discarded
  - fixed errors in RPM probes initialization
  - oscap-docker shows all warnings reported by oscap
  - fixed pkgconfig file


author: Matěj Týč <matyc@redhat.com> - 1.2.16-1
changelog:
  - upgrade to the latest upstream release
  - moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies


author: Matěj Týč <matyc@redhat.com> - 1.2.16-2
changelog:
  - moved oscap-docker to newly created openscap-containers.
  - moved man of oscap-chroot to oscap-scanner.


author: Jan Černý <jcerny@redhat.com> - 1.2.17-3
changelog:
  - Fix unwanted recursion into mounted remote filesystems (#1655943)
  - Evaluate SCAP 1.3 datastreams without downloading remote data (#1709423)


author: Matěj Týč <matyc@redhat.com> - 1.2.17-6
changelog:
  - Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
  - Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).


author: Jan Černý <jcerny@redhat.com> - 1.2.17-10
changelog:
  - Fix segfault in systemdunitdependency probe (RHBZ#1478285)
  - Build and ship HTML manual (RHBZ#1465661)
  - Fix oscap-ssh with --sudo (RHBZ#1803114)
  - Change category of verbose message (RHBZ#1640522)
  - Fix segfault in CVRF module (RHBZ#1642283)


author: Marcus Burghardt <maburgha@redhat.com> - 1.2.17-14
changelog:
  - Fix memory leaks in probe-api (RHBZ#1861793)
  - Prevent duplicate variables in Ansible Playbooks (RHBZ#1944683)
  - Fix trailing whitespace in Ansible Playbooks
  - Fix inconsistent result from security_patches_up_to_date (RHBZ#1858502)
  - Fix multiple segfaults and broken test (RHBZ#1911999)
  - Improve --stig-viewer output when there is no 1:1 connection between rules
  - Lower memory limits and improve their checking (RHBZ#1932833)


author: Matěj Týč <matyc@redhat.com> - 1.2.17-1
changelog:
  - Rebased to the 1.2.17 upstream release (#1564900).
  - Fixed the offline scanning (#1547107, #1556988).
  - HTML Guide user experience improvements.
  - New options in HTML report "Group By" menu.
  - oscap-ssh supports --oval-results.
  - For more news, see https://github.com/OpenSCAP/openscap/releases/tag/1.2.17


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1:2.0.0-8
changelog:
  - Fix a heap-based buffer overflow vulnerability leading to
    remote code execution, CVE-2019-5544
    Resolves: #1781701


author: Doug Ledford <dledford@redhat.com> - 3.3.13-1
changelog:
  - Update to latest upstream version
  - Fix a minor issue in init scripts that would cause systemd to try and
    start/stop things in the wrong order
  - Add a patch to allow us to specify the subnet prefix on the command line


author: Doug Ledford <dledford@redhat.com> - 3.3.15-2
changelog:
  - More tweaks to systemd setup (proper scriptlets now)
  - More tweaks to old sysv init script support (fix Requires)


author: Doug Ledford <dledford@redhat.com> - 3.3.15-5
changelog:
  - Drop the old sysv init script
  - Fix opensm-launch to restart opensm in a loop.  This works around the
    fact that systemd starts opensm so early that we very well might not have
    sync on the link yet.  Without the physical link being up, opensm exits
    immediately.  This way opensm will get restarted every 30 seconds until
    sync is active on the link or until the opensm service is stopped.
  - Always install the newly generated opensm-%{version}.conf as opensm.conf
  - Make the launch work properly in the event that no GUIDs are set and
    there are no numbered config files


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-7 + 0.9.3-5
changelog:
  - use hmac_suffix for ssh{,d} hmac checksums
  - bump the minimum value of SSH_USE_STRONG_RNG to 14 according to SP800-131A
  - automatically restart sshd.service on-failure after 42s interval


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-8 + 0.9.3-5
changelog:
  - sshd-keygen: generate only RSA keys by default (#1010361)
  - use dist tag in suffixes for hmac checksum files


author: Petr Lautrbach <plautrba@redhat.com> 6.2p2-9 + 0.9.3-5
changelog:
  - use dracut-fips package to determine if a FIPS module is installed (#1001566)
  - revert -fips subpackages and hmac files suffixes


author: Petr Lautrbach <plautrba@redhat.com> 6.3p1-2 + 0.9.3-6
changelog:
  - use default_ccache_name from /etc/krb5.conf for a kerberos cache (#991186)
  - increase the size of the Diffie-Hellman groups (#1010607)
  - sshd-keygen to generate ECDSA keys <i.grok@comcast.net> (#1019222)


author: Petr Lautrbach <plautrba@redhat.com> 6.3p1-4 + 0.9.3-7
changelog:
  - adjust gss kex mechanism to the upstream changes (#1024004)
  - don't use xfree in pam_ssh_agent_auth sources <geertj@gmail.com> (#1024965)


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-2 + 0.9.3-1
changelog:
  - fix fatal() cleanup in the audit patch (#1029074)
  - fix parsing logic of ldap.conf file (#1033662)


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-3 + 0.9.3-8
changelog:
  - sshd-keygen - use correct permissions on ecdsa host key (#1023945)
  - use only rsa and ecdsa host keys by default


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-5 + 0.9.3-8
changelog:
  - use tty allocation for a remote scp (#985650)
  - run ssh-copy-id in the legacy mode when SSH_COPY_ID_LEGACY variable is set (#969375)
  - FIPS mode - adjust the key echange DH groups and ssh-keygen according toSP800-131A (#1001748)


author: Petr Lautrbach <plautrba@redhat.com> 6.4p1-7 + 0.9.3-8
changelog:
  - log fipscheck verification message into syslog authpriv
  - ssh-keygen - relative-specified certificate expiry time should be relative
    to current time and not the validity start time (#1058234)
  - use the size of security of 3des for DH (#1053107)
  - ssh-copy-id.1 man page fix (#1058792)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-2 + 0.9.3-9
changelog:
  - slightly change systemd units logic - use sshd-keygen.service (#1066615)
  - log when a client requests an interactive session and only sftp is allowed (#1130198)
  - sshd-keygen - don't generate DSA and ED25519 host keys in FIPS mode (#1143867)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-4 + 0.9.3-9
changelog:
  - revert the default of KerberosUseKuserok back to yes
  - fix kuserok patch which checked for the existence of .k5login unconditionally
    and hence prevented other mechanisms to be used properly


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-8 + 0.9.3-9
changelog:
  - increase size of AUDIT_LOG_SIZE to 256 (#1171163)
  - record pfs= field in CRYPTO_SESSION audit event (#1171248)


author: Petr Lautrbach <plautrba@redhat.com> 6.6.1p1-10 + 0.9.3-9
changelog:
  - add new option GSSAPIEnablek5users and disable using ~/.k5users by default CVE-2014-9278
    (#1169843)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-13 + 0.9.3-9
changelog:
  - Increase limit of files for glob match in sftp (#1160377)
  - Add pam_reauthorize.so to /etc/pam.d/sshd (#1204233)
  - Show all config values in sshd test mode (#1187597)
  - Document required selinux boolean for working ssh-ldap-helper (#1178116)
  - Consistent usage of pam_namespace in sshd (#1125110)
  - Fix auditing when using combination of ForcedCommand and PTY (#1199112)
  - Add sftp option to force mode of created files (#1197989)
  - Ability to specify an arbitrary LDAP filter in ldap.conf for ssh-ldap-helper (#1201753)
  - Provide documentation line for systemd service and socket (#1181591)
  - Provide LDIF version of LPK schema (#1184938)
  - Document TERM environment variable (#1162683)
  - Fix ssh-copy-id on non-sh remote shells (#1201758)
  - Do not read RSA1 hostkeys for HostBased authentication in FIPS (#1197666)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-14 + 0.9.3-9
changelog:
  - Fix ldif schema to have correct spacing on newlines (#1184938)
  - Add missing values for sshd test mode (#1187597)
  - ssh-copy-id: tcsh doesnt work with multiline strings (#1201758)
  - Fix memory problems with newkeys and array transfers (#1223218)
  - Enhance AllowGroups documentation in man page (#1150007)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-15 + 0.9.3-9
changelog:
  - One more typo in manual page documenting TERM variable (#1162683)
  - Fix race condition with auditing messages answers (#1240613)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-17 + 0.9.3-9
changelog:
  - Security fixes released with openssh-6.9 (CVE-2015-5352) (#1247864)
   - XSECURITY restrictions bypass under certain conditions in ssh(1) (#1238231)
   - weakness of agent locking (ssh-add -x) to password guessing (#1238238)


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-20 + 0.9.3-9
changelog:
  - Fix vulnerabilities published with openssh-7.0 (#1265807)
   - Privilege separation weakness related to PAM support
   - Use-after-free bug related to PAM support


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-23 + 0.9.3-9
changelog:
  - Disable undocumented feauture Roaming for good (#1298218)
  - prevents CVE-2016-0777 and CVE-2016-0778


author: Jakub Jelen <jjelen@redhat.com> 6.6.1p1-26 + 0.9.3-9
changelog:
  - Drop glob patch for sftp client preventing listing many files (#1310303)
  - Fix race condition between audit messages from different processes (#1310684)
  - Make systemd service forking to properly report state (#1291172)
  - Get rid of rpm triggers for openssh-5.x (#1312013)
  - Generate the host keys when the key files are empty (#1266043)
  - pam_ssh_agent_auth: authorized_keys_command option (#1317858)
  - Don't use MD5 digest from pam_ssh_agent_auth in FIPS mode (#1317952)


author: Jakub Jelen <jjelen@redhat.com> - 6.6.1p1-27 + 0.9.3-9
changelog:
  - Coverity and RPMDiff build issues (#1334326)
  - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (#1329191)
  - Check for real location of .k5login file (#1328243)
  - close ControlPersist background process stderr (#1335540)


author: Jakub Jelen <jjelen@redhat.com> - 6.6.1p1-28 + 0.9.3-9
changelog:
  - SFTP force permission collision with umask (#1344614)
  - Make closefrom() ignore FD's to /dev/ devices on s390 (#1318760)
  - Create a default value for AuthenticationMethods any (#1237129)
  - Fix ssh-copy-id with LogLevel=quiet (#1349556)
  - Expose more information to PAM (#1312304)
  - Move MAX_DISPLAYS to a configuration option (#1341302)
  - Add a wildcard option to PermitOpen directive (host) (#1344106)


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-1 + 0.10.3-1
changelog:
  - Rebase to openssh 7.4 and pam_ssh_agent_auth 0.10.3 (#1341754)
  - detach -cavs subpackage
  - enable seccomp filter for sandboxed child


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-2 + 0.10.3-1
changelog:
  - Fix coverity scan results
  - Adjust FIPS algorithms list (#1420910)
  - Revert problematic feature for chroot(#1418062)
  - Fix CBC weakness in released OpenSSH 7.5


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-3 + 0.10.3-1
changelog:
  - Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
  - Remove wrong coverity patches


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-5 + 0.10.3-1
changelog:
  - Fix the default key exchange proposal in FIPS mode (#1438414)
  - Remove another wrong coverity chunk to unbreak gsskex (#1438414)


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-15 + 0.10.3-2
changelog:
  - Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
  - Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
  - Do not segfault in audit code during cleanup (#1488083)
  - Add WinSCP 5.10+ compatibility (#1496808)
  - Clatch between ClientAlive and rekeying timeouts (#1480510)
  - Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
  - Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)


author: Jakub Jelen <jjelen@redhat.com> - 7.4p1-18 + 0.10.3-2
changelog:
  - invalidate supplemental group cache used by temporarily_use_uid()
    when the target uid differs (#1583735)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-20
changelog:
  - document the nextprotoneg option in manual pages
    original patch by Hubert Kario
  - try to avoid some races when updating the -fips subpackage


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-21
changelog:
  - make DTLS1 work in FIPS mode
  - avoid RSA and DSA 512 bits and Whirlpool in 'openssl speed' in FIPS mode
  - drop the -fips subpackage, installation of dracut-fips marks that the FIPS
    module is installed
  - avoid dlopening libssl.so from libcrypto
  - fix small memory leak in FIPS aes selftest
  - fix segfault in openssl speed hmac in the FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-26
changelog:
  - fix CVE-2013-6449 - crash when version in SSL structure is incorrect
  - drop weak ciphers from the default TLS ciphersuite list
  - add back some symbols that were dropped with update to 1.0.1 branch
  - more FIPS validation requirement changes


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-28
changelog:
  - fix CVE-2013-4353 - Invalid TLS handshake crash
  - fix CVE-2013-6450 - possible MiTM attack on DTLS1


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-31
changelog:
  - print ephemeral key size negotiated in TLS handshake (#1057715)
  - add DH_compute_key_padded needed for FIPS CAVS testing
  - make expiration and key length changeable by DAYS and KEYLEN
    variables in the certificate Makefile (#1058108)
  - change default hash to sha256 (#1062325)
  - lower the actual 3des strength so it is sorted behind aes128 (#1056616)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-34.3
changelog:
  - fix CVE-2010-5298 - possible use of memory after free
  - fix CVE-2014-0195 - buffer overflow via invalid DTLS fragment
  - fix CVE-2014-0198 - possible NULL pointer dereference
  - fix CVE-2014-0221 - DoS from invalid DTLS handshake packet
  - fix CVE-2014-0224 - SSL/TLS MITM vulnerability
  - fix CVE-2014-3470 - client-side DoS when using anonymous ECDH


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-34.4
changelog:
  - fix CVE-2014-3505 - doublefree in DTLS packet processing
  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
  - fix CVE-2014-3507 - avoid memory leak in DTLS
  - fix CVE-2014-3508 - fix OID handling to avoid information leak
  - fix CVE-2014-3509 - fix race condition when parsing server hello
  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS
  - fix CVE-2014-3511 - disallow protocol downgrade via fragmentation


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-34.6
changelog:
  - fix CVE-2014-3567 - memory leak when handling session tickets
  - fix CVE-2014-3513 - memory leak in srtp support
  - add support for fallback SCSV to partially mitigate CVE-2014-3566
    (padding attack on SSL3)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-34.7
changelog:
  - fix CVE-2014-3570 - incorrect computation in BN_sqr()
  - fix CVE-2014-3571 - possible crash in dtls1_get_record()
  - fix CVE-2014-3572 - possible downgrade of ECDH ciphersuite to non-PFS state
  - fix CVE-2014-8275 - various certificate fingerprint issues
  - fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export
    ciphersuites and on server
  - fix CVE-2015-0205 - do not allow unauthenticated client DH certificate
  - fix CVE-2015-0206 - possible memory leak when buffering DTLS records


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-37
changelog:
  - add support for RFC 5649 (#1119738)
  - do not pass the FIPS integrity check if the .hmac files are empty (#1128849)
  - add ECC TLS extensions to DTLS (#1119803)
  - do not send ECC ciphersuites in SSLv2 client hello (#1090955)
  - properly propagate encryption failure in BIO_f_cipher (#1072439)
  - fix CVE-2014-0224 fix that broke EAP-FAST session resumption support
  - improve documentation of ciphersuites - patch by Hubert Kario (#1108026)
  - use case insensitive comparison for servername in s_server (#1081163)
  - add support for automatic ECDH curve selection on server (#1080128)
  - FIPS mode: make the limitations on DSA, DH, and RSA keygen
    length enforced only if OPENSSL_ENFORCE_MODULUS_BITS environment
    variable is set


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-40
changelog:
  - use FIPS approved method for computation of d in RSA
  - copy digest algorithm when handling SNI context switch


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-42
changelog:
  - test in the non-FIPS RSA keygen for minimal distance of p and q
    similarly to the FIPS RSA keygen


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-42.3
changelog:
  - fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey()
  - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison
  - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  - fix CVE-2015-0292 - integer underflow in base64 decoder
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-42.5
changelog:
  - drop the AES-GCM restriction of 2^32 operations because the IV is
    always 96 bits (32 bit fixed field + 64 bit invocation field)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-42.3
changelog:
  - fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey()
  - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison
  - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  - fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
  - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  - fix CVE-2015-0292 - integer underflow in base64 decoder
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-42.6
changelog:
  - fix CVE-2015-4000 - prevent the logjam attack on client - restrict
    the DH key size to at least 768 bits (limit will be increased in future)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-42.7
changelog:
  - fix CVE-2014-8176 - invalid free in DTLS buffering code
  - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
  - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
  - fix CVE-2015-1791 - race condition handling NewSessionTicket
  - fix CVE-2015-1792 - CMS verify infinite loop with unknown hash function
  - fix CVE-2015-3216 - regression in RAND locking that can cause segfaults on
    read in multithreaded applications


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-42.8
changelog:
  - improved fix for CVE-2015-1791
  - add missing parts of CVE-2015-0209 fix for corectness although unexploitable


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48
changelog:
  - fix CVE-2015-3216 - regression in RAND locking that can cause segfaults on
    read in multithreaded applications


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-49
changelog:
  - fix CVE-2014-8176 - invalid free in DTLS buffering code
  - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
  - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
  - fix CVE-2015-1791 - race condition handling NewSessionTicket
  - fix CVE-2015-1792 - CMS verify infinite loop with unknown hash function


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-51.1
changelog:
  - fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
  - fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
  - fix CVE-2015-3196 - race condition when handling PSK identity hint


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-51.4
changelog:
  - fix CVE-2016-0702 - side channel attack on modular exponentiation
  - fix CVE-2016-0705 - double-free in DSA private key parsing
  - fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-51.5
changelog:
  - fix CVE-2016-2105 - possible overflow in base64 encoding
  - fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
  - fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
  - fix CVE-2016-2108 - memory corruption in ASN.1 encoder
  - fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
  - fix CVE-2016-0799 - memory issues in BIO_printf


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-51.7
changelog:
  - fix CVE-2016-2177 - possible integer overflow
  - fix CVE-2016-2178 - non-constant time DSA operations
  - fix CVE-2016-2179 - further DoS issues in DTLS
  - fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
  - fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
  - fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
  - fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
  - fix CVE-2016-6304 - unbound memory growth with OCSP status request
  - fix CVE-2016-6306 - certificate message OOB reads
  - mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
    112 bit effective strength
  - replace expired testing certificates


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-56
changelog:
  - fix 1-byte memory leak in pkcs12 parse (#1312112)
  - document some options of the speed command (#1312110)
  - fix high-precision timestamps in timestamping authority
  - enable SCTP support in DTLS 
  - use correct digest when exporting keying material in TLS1.2 (#1289620)
  - fix CVE-2016-0799 - memory issues in BIO_printf
  - add support for setting Kerberos service and keytab in
    s_server and s_client


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-57
changelog:
  - fix CVE-2016-2105 - possible overflow in base64 encoding
  - fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
  - fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
  - fix CVE-2016-2108 - memory corruption in ASN.1 encoder
  - fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-60
changelog:
  - fix CVE-2016-2177 - possible integer overflow
  - fix CVE-2016-2178 - non-constant time DSA operations
  - fix CVE-2016-2179 - further DoS issues in DTLS
  - fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
  - fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
  - fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
  - fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
  - fix CVE-2016-6304 - unbound memory growth with OCSP status request
  - fix CVE-2016-6306 - certificate message OOB reads
  - mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
    112 bit effective strength


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-60.1
changelog:
  - fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher
  - fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-4
changelog:
  - add support for additional STARTTLS protocols to s_client
    original backported patch by Robert Scheck (#1396209)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-12
changelog:
  - fix CVE-2017-3737 - incorrect handling of fatal error state
  - fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-13
changelog:
  - add S390x assembler updates
  - make CA name list comparison function case sensitive (#1548401)
  - fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
  - fix CVE-2018-0732 - large prime DH DoS of TLS client
  - fix CVE-2018-0737 - RSA key generation cache timing vulnerability
  - fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-16
changelog:
  - fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
  - fix incorrect error message on FIPS DSA parameter generation (#1603597)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-16.1
changelog:
  - use SHA-256 in FIPS RSA pairwise key check
  - fix CVE-2018-5407 - EC signature local timing side-channel key extraction


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-17
changelog:
  - use SHA-256 in FIPS RSA pairwise key check
  - fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
    timing side-channel key extraction


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-18
changelog:
  - fix CVE-2018-0734 - DSA signature local timing side channel
  - fix CVE-2019-1559 - 0-byte record padding oracle
  - close the RSA decryption One & done EM side channel (#1619558)


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-22
changelog:
  - fix CVE-2021-23841 openssl: NULL pointer dereference
    in X509_issuer_and_serial_hash()
  - fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
  - Resolves: rhbz#1932132, rhbz#1932126


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-23
changelog:
  - fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
  - Resolves: rhbz#1996054


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-24
changelog:
  - Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
  - Resolves: rhbz#2039993


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.0.2k-25
changelog:
  - Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Related: rhbz#2067160


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2j-2
changelog:
  - deprecate and disable verification of insecure hash algorithms
  - add support for /etc/pki/tls/legacy-settings also for minimum DH length
    accepted by SSL client
  - compare the encrypt and tweak key in XTS as required by FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-13
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-14
changelog:
  - fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-15
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-27
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use secure_getenv() everywhere instead of getenv() (#839735)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-29.3
changelog:
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server
  - fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
  - disable SSLv2 in the generic TLS method


author: Flavio Leitner <fbl@redhat.com> - 1.11.0-6
changelog:
  - applied upstream commit 5b56f96aaad4a55a26576e0610fb49bde448dabe
    rhel: Prevent duplicate ifup calls.


author: Flavio Leitner <fbl@redhat.com> - 1.11.0-7
changelog:
  - applied upstream commit 32aa46891af5e173144d672e15fec7c305f9a4f3
    rhel: Set STP of a bridge during bridge creation.


author: Flavio Leitner <fbl@redhat.com> - 1.11.0-8
changelog:
  - applied upstream commit 7b75828bf5654c494a53fa57be90713c625085e2
    rhel: Option to create tunnel through ifcfg scripts.


author: Flavio Leitner <fbl@redhat.com> - 2.0.0-3
changelog:
  - util: use gcc builtins to better check array sizes
    (upstream commit 878f1972909b33f27b32ad2ded208eb465b98a9b)


author: Flavio Leitner <fbl@redhat.com> - 2.0.0-4
changelog:
  - fedora package: fix systemd ordering and deps.
    (upstream commit b49c106ef00438b1c59876dad90d00e8d6e7b627)


author: Flavio Leitner <fbl@redhat.com> - 2.0.0-6
changelog:
  - Enable DHCP support for internal ports
    (upstream commit 490db96efaf89c63656b192d5ca287b0908a6c77)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.3.6-7
changelog:
  - Fix bogus date in the %changelog
  - Build with full relro
  - Fix requires/provides
    Resolves: #881316


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.3.6-14
changelog:
  - Backport option for disabling various SSL protocols
    Resolves: #1190689
  - Fix curl_easy_setopt call for CURLOPT_SSL_VERIFYPEER/HOST
    Resolves: #1319949


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.3-1.git4391e5c
changelog:
  - Update to openwsman-2.6.3 from upstream VCS
    Resolves: #1208364 #1296198
  - Backport support for configuring used cipher suite
    Resolves: #1454607


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.3-4.git4391e5c
changelog:
  - Explicitly disable build of java bindings
    Resolves: #1540723
  - Add support for ECDH key exchange algorithm
    Resolves: #1547144


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.3-6.git4391e5c
changelog:
  - Update the fix for CVE-2019-3816
    Resolves: #1668657
  - Remove Dist Tag from the oldest changelog entry


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.3-6.git4391e5c
changelog:
  - Update the fix for CVE-2019-3816
    Resolves: #1668658
  - Remove Dist Tag from the oldest changelog entry


author: Will Cohen <wcohen@redhat.com> - 0.9.9-5
changelog:
  - Update Intel Haswell events.
  - Add support for Intel Silvermont (Avoton).
  - Add support for Intel Broadwell.
  - Add support for aarch64.
  - Update IBM power8 events.


author: William Cohen <wcohen@redhat.com> - 0.9.9-11
changelog:
  - Avoid setting POSIXLY_CORRECT for the children tasks of operf and ocount.
  - Fix handling of default unit masks longer than 11 char.
  - Fix extra and default unitmasks selection.
  - Allow operf to record information for Java anon_huges.


author: Will Cohen <wcohen@redhat.com> - 0.9.7-3
changelog:
  - Use correct macros for /etc and /user/share. rhbz #226222
  - Consistently use macros for buildroot.
  - Preserve timestamp for installed files.
  - Remove the clean section.
  - Fix the source location.
  - Remove unneeded BuildRequires: binutils-devel
  - Remove unneeded depends.
  - Correct Buildreq to java-1.7.0-openjdk-devel.
  - Fix macro-in-comment and macro-in-changelog
  - Remove '.' from Summary lines
  - Correct license GPLv2+ and LGPLv2+.
  - Do not remove oprofile user or group.


author: William Cohen <wcohen@redhat.com> - 0.9.9-17
changelog:
  - Define some  Intel broadwell default unit masks by names
  - Add support for Harrisonville (Denverton SoC)
  - Add support for Skylake-SP server
  - Add support for Kabylake-U/Y
  - Add support for Kabylake-H/S
  - Make Nehalem, Westmere, and Haswell event names unique.


author: William Cohen <wcohen@redhat.com> - 0.9.9-22
changelog:
  - Update ppc64/ppc64le support. rhbz1385007
  - Add recognition check for POWER8NV and POWER8NVL. rhbz1426426


author: Weiping Pan <wpan@redhat.com> 2.0.8 5
changelog:
  - build oracleasm for 7.0.z, 
  - codes from git://oss.oracle.com/git/linux-uek3-3.8.git,
  - commit 73eec1df4b6aec6e850db5015d74dbf6dee01e01
  - patch0 is to replace create_proc_entry with proc_create.


author: Petr Oros <poros@redhat.com> 2.0.8-14
changelog:
  - Classify device connectivity issues as global errors
  - For >= kernel-3.10.0-319.el7
  - Resolves: #1265218


author: Eugene Syromiatnikov <esyr@redhat.com> 2.0.8-22.1
changelog:
  - For >= kernel-3.10.0-957.el7
  - Add "use-after-free-asm-request.patch"
  - (oracleasm: Fix use after free for request processing timer)
  - Resolves: #1679239


author: Eugene Syromiatnikov <esyr@redhat.com> 2.0.8-24
changelog:
  - Add "use-after-free-asm-request.patch"
  - (oracleasm: Fix use after free for request processing timer)
  - Resolves: #1672733


author: Eugene Syromiatnikov <esyr@redhat.com> 2.0.8-26
changelog:
  - Revert the addition
    of "oracleasm-claim-FMODE_EXCL-access-on-disk-during-asm.patch"
    as it introduces regressions ("ERROR: -15 ... asm_open error
    Operation not permitted").
  - Rebuilt against kernel-3.10.0-1043.el7
  - Resolves: #1700382


author: Weiping Pan <wpan@redhat.com> 2.0.8.rh1 2
changelog:
  - rebuild oracleasm for RHEL6.4, sync to upstream commit d368091e98dc
  - (oracleasm: Add support for new error return codes from block/SCSI)


author: Wim Taymans <wtaymans@redhat.com> - 0.4.22-2
changelog:
  - Don't run tests during build
  - add new source
  - remove old patches, add new patch
  - Resolves: #1174391


author: Wim Taymans <wtaymans@redhat.com> - 0.4.22-5
changelog:
  - Run backup functions on s390x instead of emulation
  - Fix load of parameters smaller than 64 bits
  - Related: rhbz#1249506


author: Jan Grulich <jgrulich@redhat.com> - 1:0.20.0-10
changelog:
  - Add check for user UID when connecting to pipe (#1005261)
  - Add length check in stunEncodeMessage (#1005218)
  - Add sign and overflow checks (#1005219)
  - Remove hardcoded username and password (#1005216)


author: Hedayat Vatankhah <hedayat.fwd+rpmchlog@gmail.com> - 1.53-2
changelog:
  - Add support for OSes installed on Linux mdraid partitions, bug #752402
  - Add Fedora's grub2 config path, fixes generating menu entries for other
    installed Fedora's
  - Fixed bug in parsing yaboot.conf: accept spaces around '=' for append, 
    bug #825041


author: Hedayat Vatankhah <hedayat.fwd+rpmchlog@gmail.com> - 1.53-3
changelog:
  - Consider usrmoved distribtions in fallback linux detector (bug #826754)
  - Remove patch backup files from final rpm package (by not creating a backup!)


author: Hedayat Vatankhah <hedayat.fwd+rpmchlog@gmail.com> - 1.57-1
changelog:
  - Update to 1.57 (#890409)
  - Use shell string processing rather than 'basename' (#875356)
  - Make it possible to disable logging debug messages by assigning a value to
    OS_PROBER_DISABLE_DEBUG environment variable (Gene Czarcinski) (#893997).
  - Detect multi btrfs pools/volumes (Gene Czarcinski) (#888341)


author: Hedayat Vatankhah <hedayat.fwd+rpmchlog@gmail.com> - 1.57-2
changelog:
  - Fix a bug in recent btrfs patch when an extended partition is examined. 
    (H.J. Lu) (bug #906847)
  - Fix naming of /boot partitions according to their fstab entry (bug #893472)
  - Don't generate .btrfsfix files which will be included in final rpm
  - Fix wrong boot partition set by linux-boot-prober when / and /boot are
    mounted (bug #906886)
  - Factor out 'logger', so that it is run once and logs are piped to it (John
    Reiser) (bug #875356)


author: rmarshall@redhat.com - 1.58-6
changelog:
  - Adding handling to skip probing extended dos partitions
    Resolves: rhbz#1322957
  - Improve Windows detection for dual boot and support Windows 10
    Resolves: rhbz#1322956
  - Suppress non-blocking dmraid sector size warning message
    Resolves: rhbz#1198918


author: rmarshall@redhat.com - 1.58-7
changelog:
  - Do not resolve device mapper links when generating stanzas
    for bootloader.
    Resolves: rhbz#1300262


author: rmarshall@redhat.com - 1.58-8
changelog:
  - Resolve some coverity concerns with how the previous patch detected
    whether or not a partition was a device mapper device.
    Related: rhbz#1300262


author: rmarshall@redhat.com - 1.58-9
changelog:
  - Fix regular expression that missed a corner case when detecting
    extended dos partitions.
    Resolves: rhbz#1322957


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3-1
changelog:
  - Implement and use our own better function for joining paths
  - The content entry should have focus if there is no content
  - RPM is just a weird archive in the pre-installation phase
  - Ignore RPM files as well
  - Adapt tests to dir constants now ending with "/"
  - CpioArchive cannot be created from a piped output
  - Fix namespace definitions in the testing XCCDF file
  - Prevent putting None into xccdf_session_is_sds
  - Fix the __all__ variable in the common module
  - Strip content dir prefix when setting xccdf/cpe paths
  - Inform user we now support archive URLs as well
  - Ignore various file types in the git repository
  - Try to find content files in the fetched archive or RPM
  - Run pylint -E as part of the test target
  - Return list of extracted files/directories when extracting archive
  - Do not try to search for empty file paths in archives
  - Properly set the content type based on the URL's suffix
  - Switch profiles on double-click
  - Hook urlEntry's activate signal to fetchButton click
  - Save the spoke's glade file with a new Glade
  - The addon now requires the python-cpio package
  - Use really_hide for the UI elements for datastream-id and xccdf-id
  - Support for RPM content in the GUI spoke
  - RPM content support for kickstart processing
  - Add property for the raw post-installation content path
  - Make content type case insensitive
  - Rest of the code needed for RPM extraction
  - Actually look for the file path in entry names
  - Basic stuff needed for the RPM content support
  - Run tests in paralel
  - Specify files in a better way in spec


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.4-1
changelog:
  - Beware of running Gtk actions from a non-main thread
  - Fix path to the tailoring file when getting rules
  - A git hook for running tests when pushing
  - Inform user if no profile is selected
  - Visually mark the selected profile
  - Better UX with content URL entry and progress label
  - React on invalid content properly (#1032846)
  - Stop spinner when data fetching is finished
  - Make the data fetching thread non-fatal (#1049989)
  - Exit code 2 from the oscap tool is not an error for us (#1050913)
  - Be ready to work with archives/RPMs containing data streams
  - Add unit tests for the keep_type_map function
  - Add support for namedtuples to keep_type_map
  - Add target for running pylint check
  - Add target for running just unittests
  - On the way to tailoring
  - Tests for kickstart XCCDF tailoring handling
  - Kickstart support for XCCDF tailoring
  - Check session validity also when using XCCDF benchmark


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.7-4
changelog:
  - Better handle and report erroneous states
    Resolves: rhbz#1241064
  - Make sure (some more) GUI actions run in the main thread
    Resolves: rhbz#1240967
  - Beware of RPM->cpio entries' paths having absolute paths
    Related: rhbz#1241064
  - Only output the kickstart section with content and profile set
    Resolves: rhbz#1241395
  - Just report integrity check failure instead of traceback
    Resolves: rhbz#1240710
  - Properly react on download/loading issues in text+kickstart mode
    Related: rhbz#1240710
  - Fetch and process the content even if GUI doesn't take care of it
    Resolves: rhbz#1240625


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.7-5
changelog:
  - Make sure DS and XCCDF ID lists are correctly refreshed
    Resolves: rhbz#1240946
  - Make sure the DS and XCCDF ID combo boxes are visible for DS content
    Resolves: rhbz#1249951
  - Try to load the OSCAP session early for DS content
    Resolves: rhbz#1247654
  - Test preinst_content_path before raw_preinst_content_path
    Resolves: rhbz#1249937
  - Clear any error if switching to the dry-run mode
    Related: rhbz#1247677
  - Do not continue with and invalid profile ID
    Resolves: rhbz#1247677
  - Cover all potential places with a non-main thread changing Gtk stuff
    Resolves: rhbz#1240967


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.7-6
changelog:
  - Specify the name of the help content file
    Resolves: rhbz#1254884
  - Skip files unrecognized by the 'oscap info' command
    Resolves: rhbz#1255075
  - Only allow DS and XCCDF ID selection if it makes sense
    Resolves: rhbz#1254876


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.7-9
changelog:
  - Use the System hub category provided by Anaconda
    Resolves: rhbz#1269211
  - Wait for Anaconda to settle before evaluation
    Resolves: rhbz#1265552
  - Make the changes overview scrollable and smaller
    Related: rhbz#1263582
  - Make the list of profiles scrollable
    Resolves: rhbz#1263582
  - Do not try to create a single file multiple times
    Related: rhbz#1263315
  - Avoid crashes on extraction errors
    Resolves: rhbz#1263315
  - Disable GPG checks when installing content to the system
    Resolves: rhbz#1263216
  - Allow fixing root password in graphical installations
    Resolves: rhbz#1265116
  - Enforce the minimal root password length
    Resolves: rhbz#1238281
  - Just report misconfiguration instead of crashing in text mode
    Resolves: rhbz#1263207
  - Do not verify SSL if inst.noverifyssl was given
    Resolves: rhbz#1263257
  - Also catch data_fetch.DataFetchError when trying to get content
    Resolves: rhbz#1263239
  - Use new method signature with payload class
    Related: rhbz#1288636


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.7-11
changelog:
  - Don't require blank stderr when running the oscap tool
    Resolves: rhbz#1360765
  - Beware of the invalid profiles
    Resolves: rhbz#1365130
  - Properly set the seen property for root passwords
    Resolves: rhbz#1357603


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: oscap-anaconda-addon_use_sl_stig.patch
  -->  "Use the SL SCAP guide"
  - Added Source: oscap-anaconda-addon.ini
  -->  Config file for automated patch script


author: Martin Preisler <mpreisle@redhat.com> - 0.7-13
changelog:
  - Avoid long delay before a GeoIP related timeout in case internet is not available
    Resolves: rhbz#1379479


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.7-3
changelog:
  - Do not output redundant/invalid fields for the SSG content (vpodzime)
    Resolves: rhbz#1240285
  - Better handle unsupported URL types (vpodzime)
    Resolves: rhbz#1232631
  - React better on network issues (vpodzime)
    Resolves: rhbz#1236657
  - Improve the description of the default profile (vpodzime)
    Resolves: rhbz#1238080
  - Use the openscap-scanner package instead of openscap-utils (vpodzime)
    Resolves: rhbz#1240249
  - Better handle the case with no profile selected (vpodzime)
    Resolves: rhbz#1235750
  - Add newline and one blank line after the %addon section (vpodzime)
    Resolves: rhbz#1238267
  - Word-wrap profile descriptions (vpodzime)
    Resolves: rhbz#1236644


author: Watson Sato <wsato@redhat.com> - 0.8-2
changelog:
  - Add japanese translation
  - Update other translations
    Resolves: rhbz#1481190
  - Fix selection of RHEL datastream
    Resolves: rhbz#1520358


author: Watson Yuuma Sato <wsato@redhat.com> - 0.9-1
changelog:
  - Rebase to the upstream version 0.9
  - Drop patch that fixed selection of RHEL Alternate Architecture datastream
    Resolves: rhbz#1564903
  - Update project URL
    Resolves: rhbz#1502379


author: Jan Černý <jcerny@redhat.com> - 0.9-3
changelog:
  - Enable translation of title 'SECURITY POLICY' at Installation Summary screen
    Resolves: rhbz#1543318


author: Felipe Borges <feborges@redhat.com> - 20170813-1
changelog:
  - Update source URL to Pagure
   - Drop the rhel-7.4 data patch
   - Update to new release
   - Resolves: rhbz#1479731


author: Fabiano Fidêncio <fidencio@redhat.com> - 20190805-1
changelog:
  - Resolves: rhbz#1737367 - Update to latest upstream release
  - Resolves: rhbz#1737369 - Add 7.8 to the osinfo-db which will be used on 7.8


author: Fabiano Fidêncio <fidencio@redhat.com> - 20190805-2
changelog:
  - Resolves: rhbz#1750807 - Fedora/RHEL/CentOS JeOS kickstart files for
                             unattended installation are broken


author: Fabiano Fidêncio <fidencio@redhat.com< - 20200529-1
changelog:
  - Resolves: rhbz#1839905 - [RHEL7.9] "virt-install --os-variant rhel7.9"i
                             fails with error
  - Resolves: rhbz##1840085 - Rebase to the latest upstream release


author: Pravin Satute <psatute AT redhat DOT com> - 2.1-1
changelog:
  - Resolves: rhbz#1284772 - Upstream new release with ttfautohint
  - Changed url to https://github.com/RedHatBrand/overpass/, https://overpassfont.org looks dead.
  - Add Light variant font.
  - Add metainfo file to show this font in gnome-software.


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160419-2.git90bb4c5.el7
changelog:
  - Submit scratch builds from the exploded tree again to
    supp-rhel-7.3-candidate, despite FatPkg being OSS at this point; see
    bz#1329559.


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160608-1.git988715a.el7
changelog:
  - Resolves: bz#1341733
    (prevent SMM stack overflow in OVMF while enrolling certificates in "db")
  - Resolves: bz#1257882
    (FEAT: support to boot from virtio 1.0 modern devices)
  - Resolves: bz#1333238
    (Q35 machine can not boot up successfully with more than 3 virtio-scsi
    storage controller under switch)
  - Resolves: bz#1330955
    (VM can not be booted up from hard disk successfully when with a passthrough
    USB stick)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160608-2.git988715a.el7
changelog:
  - ovmf-ArmPkg-ArmGicV3Dxe-configure-all-interrupts-as-non-s.patch [bz#1349407]
  - ovmf-ArmVirtPkg-PlatformBootManagerLib-Postpone-the-shell.patch [bz#1353689]
  - Resolves: bz#1349407
    (AArch64: backport fix to run over gicv3 emulation)
  - Resolves: bz#1353689
    (AAVMF: Drops to shell with uninitialized NVRAM file)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160608-3.git988715a.el7
changelog:
  - ovmf-MdePkg-PCI-Add-missing-PCI-PCIE-definitions.patch [bz#1332408]
  - ovmf-ArmPlatformPkg-NorFlashDxe-accept-both-non-secure-an.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemu-switch-secure-boot-build-to-N.patch [bz#1353494]
  - ovmf-ArmPlatformPkg-NorFlashAuthenticatedDxe-remove-this-.patch [bz#1353494]
  - ovmf-ArmVirtPkg-add-FDF-definition-for-empty-varstore.patch [bz#1353494]
  - ovmf-redhat-package-the-varstore-template-produced-by-the.patch [bz#1353494]
  - ovmf-ArmVirtPkg-Re-add-the-Driver-Health-Manager.patch [bz#1353494]
  - ovmf-ArmVirtPkg-HighMemDxe-allow-patchable-PCD-for-PcdSys.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemuKernel-make-ACPI-support-AARCH.patch [bz#1353494]
  - ovmf-ArmVirtPkg-align-ArmVirtQemuKernel-with-ArmVirtQemu.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemu-factor-out-shared-FV.FvMain-d.patch [bz#1353494]
  - ovmf-ArmVirtPkg-factor-out-Rules-FDF-section.patch [bz#1353494]
  - ovmf-ArmVirtPkg-add-name-GUIDs-to-FvMain-instances.patch [bz#1353494]
  - ovmf-OvmfPkg-add-a-Name-GUID-to-each-Firmware-Volume.patch [bz#1353494]
  - ovmf-OvmfPkg-PlatformBootManagerLib-remove-stale-FvFile-b.patch [bz#1353494]
  - ovmf-MdePkg-IndustryStandard-introduce-EFI_PCI_CAPABILITY.patch [bz#1332408]
  - ovmf-MdeModulePkg-PciBusDxe-look-for-the-right-capability.patch [bz#1332408]
  - ovmf-MdeModulePkg-PciBusDxe-recognize-hotplug-capable-PCI.patch [bz#1332408]
  - ovmf-OvmfPkg-add-PciHotPlugInitDxe.patch [bz#1332408]
  - ovmf-ArmPkg-ArmGicLib-manage-GICv3-SPI-state-at-the-distr.patch [bz#1356655]
  - ovmf-ArmVirtPkg-PlatformBootManagerLib-remove-stale-FvFil.patch [bz#1353494]
  - ovmf-OvmfPkg-EnrollDefaultKeys-assign-Status-before-readi.patch [bz#1356913]
  - ovmf-OvmfPkg-EnrollDefaultKeys-silence-VS2015x86-warning-.patch [bz#1356913]
  - ovmf-CryptoPkg-update-openssl-to-ignore-RVCT-3079.patch [bz#1356184]
  - ovmf-CryptoPkg-Fix-typos-in-comments.patch [bz#1356184]
  - ovmf-CryptoPkg-BaseCryptLib-Avoid-passing-NULL-ptr-to-fun.patch [bz#1356184]
  - ovmf-CryptoPkg-BaseCryptLib-Init-the-content-of-struct-Ce.patch [bz#1356184]
  - ovmf-CryptoPkg-OpensslLib-Upgrade-OpenSSL-version-to-1.0..patch [bz#1356184]
  - Resolves: bz#1332408
    (Q35 machine can not hot-plug scsi controller under switch)
  - Resolves: bz#1353494
    ([OVMF] "EFI Internal Shell" should be removed from "Boot Manager")
  - Resolves: bz#1356184
    (refresh embedded OpenSSL to 1.0.2h)
  - Resolves: bz#1356655
    (AAVMF: stop accessing unmapped gicv3 registers)
  - Resolves: bz#1356913
    (fix use-without-initialization in EnrollDefaultKeys.efi)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160608b-1.git988715a.el7
changelog:
  - rework downstream-only commit dde83a75b566 "setup the tree for the secure
    boot feature (RHEL only)", excluding patent-encumbered files from the
    upstream OpenSSL 1.0.2g tarball [bz#1374710]
  - rework downstream-only commit dfc3ca1ee509 "CryptoPkg/OpensslLib: Upgrade
    OpenSSL version to 1.0.2h", excluding patent-encumbered files from the
    upstream OpenSSL 1.0.2h tarball [bz#1374710]


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20170228-1.gitc325e41585e3.el7
changelog:
  - Rebase to upstream c325e41585e3 [bz#1416919]
  - Resolves: bz#1373812
    (guest boot from network even set 'boot order=1' for virtio disk with OVMF)
  - Resolves: bz#1380282
    (Update OVMF to openssl-1.0.2k-hobbled)
  - Resolves: bz#1412313
    (select broadcast SMI if available)
  - Resolves: bz#1416919
    (Rebase OVMF for RHEL-7.4)
  - Resolves: bz#1426330
    (disable libssl in CryptoPkg)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-2.gitc325e41585e3.el7
changelog:
  - ovmf-MdeModulePkg-Core-Dxe-downgrade-CodeSegmentCount-is-.patch [bz#1433428]
  - Resolves: bz#1433428
    (AAVMF: Fix error message during ARM guest VM installation)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-3.gitc325e41585e3.el7
changelog:
  - ovmf-ArmVirtPkg-FdtClientDxe-supplement-missing-EFIAPI-ca.patch [bz#1430262]
  - ovmf-ArmVirtPkg-ArmVirtPL031FdtClientLib-unconditionally-.patch [bz#1430262]
  - ovmf-MdeModulePkg-RamDiskDxe-fix-C-string-literal-catenat.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-ACPI-GUID.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-PlatformHasAcpiLib.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-Device-Tree.patch [bz#1430262]
  - ovmf-ArmVirtPkg-add-PlatformHasAcpiDtDxe.patch [bz#1430262]
  - ovmf-ArmVirtPkg-enable-AcpiTableDxe-and-EFI_ACPI_TABLE_PR.patch [bz#1430262]
  - ovmf-ArmVirtPkg-FdtClientDxe-install-DT-as-sysconfig-tabl.patch [bz#1430262]
  - ovmf-ArmVirtPkg-PlatformHasAcpiDtDxe-don-t-expose-DT-if-Q.patch [bz#1430262]
  - ovmf-ArmVirtPkg-remove-PURE_ACPI_BOOT_ENABLE-and-PcdPureA.patch [bz#1430262]
  - Resolves: bz#1430262
    (AAVMF: forward QEMU's DT to the guest OS only if ACPI payload is unavailable)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-4.gitc325e41585e3.el7
changelog:
  - ovmf-ShellPkg-Shell-clean-up-bogus-member-types-in-SPLIT_.patch [bz#1442908]
  - ovmf-ShellPkg-Shell-eliminate-double-free-in-RunSplitComm.patch [bz#1442908]
  - Resolves: bz#1442908
    (Guest hang when running a wrong command in Uefishell)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-5.gitc325e41585e3.el7
changelog:
  - ovmf-OvmfPkg-EnrollDefaultKeys-update-SignatureOwner-GUID.patch [bz#1443351]
  - ovmf-OvmfPkg-EnrollDefaultKeys-expose-CertType-parameter-.patch [bz#1443351]
  - ovmf-OvmfPkg-EnrollDefaultKeys-blacklist-empty-file-in-db.patch [bz#1443351]
  - ovmf-OvmfPkg-introduce-the-FD_SIZE_IN_KB-macro-build-flag.patch [bz#1443351]
  - ovmf-OvmfPkg-OvmfPkg.fdf.inc-extract-VARS_LIVE_SIZE-and-V.patch [bz#1443351]
  - ovmf-OvmfPkg-introduce-4MB-flash-image-mainly-for-Windows.patch [bz#1443351]
  - ovmf-OvmfPkg-raise-max-variable-size-auth-non-auth-to-33K.patch [bz#1443351]
  - ovmf-OvmfPkg-PlatformPei-handle-non-power-of-two-spare-si.patch [bz#1443351]
  - ovmf-redhat-update-local-build-instructions-with-D-FD_SIZ.patch [bz#1443351]
  - ovmf-redhat-update-OVMF-build-commands-with-D-FD_SIZE_4MB.patch [bz#1443351]
  - Resolves: bz#1443351
    ([svvp][ovmf] job "Secure Boot Logo Test" failed  with q35&ovmf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-1.git92d07e48907f.el7
changelog:
  - Rebase to 92d07e48907f [bz#1469787]
  - Resolves: bz#1469787
    ((ovmf-rebase-rhel-7.5) Rebase OVMF for RHEL-7.5)
  - Resolves: bz#1434740
    (OvmfPkg/PciHotPlugInitDxe: don't reserve IO space when IO support is disabled)
  - Resolves: bz#1434747
    ([Q35] code12 error when hotplug x710 device in win2016)
  - Resolves: bz#1447027
    (Guest cannot boot with 240 or above vcpus when using ovmf)
  - Resolves: bz#1458192
    ([Q35] recognize "usb-storage" devices in XHCI ports)
  - Resolves: bz#1468526
    (>1TB RAM support)
  - Resolves: bz#1488247
    (provide "OVMF_CODE.secboot.verbose.fd" for log capturing; silence "OVMF_CODE.secboot.fd")
  - Resolves: bz#1496170
    (Inconsistent MOR control variables exposed by OVMF, breaks Windows Device Guard)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-2.git92d07e48907f.el7
changelog:
  - ovmf-MdeModulePkg-Bds-Remove-assertion-in-BmCharToUint.patch [bz#1513632]
  - ovmf-MdeModulePkg-Bds-Check-variable-name-even-if-OptionN.patch [bz#1513632]
  - ovmf-MdeModulePkg-PciBus-Fix-bug-that-PCI-BUS-claims-too-.patch [bz#1514105]
  - ovmf-OvmfPkg-make-it-a-proper-BASE-library.patch [bz#1488247]
  - ovmf-OvmfPkg-create-a-separate-PlatformDebugLibIoPort-ins.patch [bz#1488247]
  - ovmf-OvmfPkg-save-on-I-O-port-accesses-when-the-debug-por.patch [bz#1488247]
  - ovmf-OvmfPkg-enable-DEBUG_VERBOSE-RHEL-only.patch [bz#1488247]
  - ovmf-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-QemuVide.patch [bz#1488247]
  - ovmf-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-NvmExpre.patch [bz#1488247]
  - ovmf-Revert-redhat-introduce-separate-silent-and-verbose-.patch [bz#1488247]
  - Resolves: bz#1488247
    (make debug logging no-op unless a debug console is active)
  - Resolves: bz#1513632
    ([RHEL-ALT 7.5] AAVMF fails to boot after setting BootNext)
  - Resolves: bz#1514105
    (backport edk2 commit 6e3287442774 so that PciBusDxe not over-claim resources)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-3.git92d07e48907f.el7
changelog:
  - ovmf-UefiCpuPkg-CpuDxe-Fix-multiple-entries-of-RT_CODE-in.patch [bz#1518308]
  - ovmf-MdeModulePkg-DxeCore-Filter-out-all-paging-capabilit.patch [bz#1518308]
  - ovmf-MdeModulePkg-Core-Merge-memory-map-after-filtering-p.patch [bz#1518308]
  - Resolves: bz#1518308
    (UEFI memory map regression (runtime code entry splitting) introduced by c1cab54ce57c)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-4.git92d07e48907f.el7
changelog:
  - ovmf-MdeModulePkg-Core-Dxe-log-informative-memprotect-msg.patch [bz#1520485]
  - ovmf-MdeModulePkg-BdsDxe-fall-back-to-a-Boot-Manager-Menu.patch [bz#1515418]
  - Resolves: bz#1515418
    (RFE: Provide diagnostics for failed boot)
  - Resolves: bz#1520485
    (AAVMF: two new messages with silent build)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20180508-2.gitee3198e672e2
changelog:
  - OvmfPkg/PlatformBootManagerLib: connect consoles unconditionally [bz#1577546]
  - build OVMF varstore template with SB enabled / certs enrolled [bz#1561128]
  - connect Virtio RNG devices again [bz#1579518]
  - Resolves: bz#1577546
    (no input consoles connected under certain circumstances)
  - Resolves: bz#1561128
    (OVMF Secure boot enablement (enrollment of default keys))
  - Resolves: bz#1579518
    (EFI_RNG_PROTOCOL no longer produced for virtio-rng)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20180508-3.gitee3198e672e2.el7
changelog:
  - ovmf-redhat-provide-virtual-bundled-OpenSSL-in-OVMF.patch [bz#1607792]
  - Resolves: bz#1607792
    (add 'Provides: bundled(openssl) = 1.1.0h' to the spec file)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20180508-3.gitee3198e672e2.el7_6.1
changelog:
  - ovmf-MdeModulePkg-PartitionDxe-Ensure-blocksize-holds-MBR.patch [bz#1684006]
  - ovmf-MdeModulePkg-RamDiskDxe-Restrict-on-RAM-disk-size-CV.patch [bz#1684006]
  - Resolves: bz#1684006
    (CVE-2018-12180 OVMF: edk2: Buffer Overflow in BlockIo service for RAM disk [rhel-7.6.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20180508-4.gitee3198e672e2.el7
changelog:
  - ovmf-redhat-provide-firmware-descriptor-meta-files.patch [bz#1608599]
  - Resolves: bz#1608599
    ([RHEL 7.7] RFE: provide firmware descriptor meta-files for OVMF)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20180508-5.gitee3198e672e2.el7
changelog:
  - ovmf-MdeModulePkg-Variable-Fix-Timestamp-zeroing-issue-on.patch [bz#1666586]
  - ovmf-MdePkg-Add-more-checker-in-UefiDecompressLib-to-acce.patch [bz#1666586]
  - ovmf-IntelFrameworkModulePkg-Add-more-checker-in-UefiTian.patch [bz#1666586]
  - ovmf-BaseTools-Add-more-checker-in-Decompress-algorithm-t.patch [bz#1666586]
  - ovmf-BaseTools-Fix-UEFI-and-Tiano-Decompression-logic-iss.patch [bz#1666586]
  - ovmf-MdePkg-BaseUefiDecompressLib-Fix-UEFI-Decompression-.patch [bz#1666586]
  - ovmf-IntelFrameworkModulePkg-Fix-UEFI-and-Tiano-Decompres.patch [bz#1666586]
  - ovmf-MdeModulePkg-PartitionDxe-Ensure-blocksize-holds-MBR.patch [bz#1684007]
  - ovmf-MdeModulePkg-RamDiskDxe-Restrict-on-RAM-disk-size-CV.patch [bz#1684007]
  - ovmf-redhat-openssl-update-introduce-MOCK-shorthand-for-m.patch [bz#1650390]
  - ovmf-redhat-openssl-update-enable-the-bootstrap-container.patch [bz#1650390]
  - ovmf-redhat-consume-OpenSSL-1.1.0i-from-Fedora-28.patch [bz#1650390]
  - ovmf-Upgrade-OpenSSL-to-1.1.0j.patch [bz#1650390]
  - Resolves: bz#1650390
    (CVE-2018-5407 OVMF: openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) [rhel-7])
  - Resolves: bz#1666586
    (CVE-2017-5731 CVE-2017-5732 CVE-2017-5733 CVE-2017-5734 CVE-2017-5735 CVE-2018-3613 OVMF: various flaws [rhel-7])
  - Resolves: bz#1684007
    (CVE-2018-12180 OVMF: edk2: Buffer Overflow in BlockIo service for RAM disk [rhel-7.7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20180508-6.gitee3198e672e2.el7
changelog:
  - ovmf-MdeModulePkg-HiiDatabase-Fix-potential-integer-overf.patch [bz#1691479]
  - ovmf-MdeModulePkg-HiiImage-Fix-stack-overflow-when-corrup.patch [bz#1691479]
  - ovmf-MdeModulePkg-PartitionDxe-Add-check-for-underlying-d.patch [bz#1691647]
  - ovmf-MdeModulePkg-UdfDxe-Refine-boundary-checks-for-file-.patch [bz#1691647]
  - ovmf-MdeModulePkg-UdfDxe-Add-boundary-check-the-read-of-F.patch [bz#1691647]
  - ovmf-MdeModulePkg-UdfDxe-Add-boundary-check-for-Component.patch [bz#1691647]
  - ovmf-MdeModulePkg-UdfDxe-Add-boundary-check-for-getting-v.patch [bz#1691647]
  - ovmf-MdeModulePkg-UsbBusDxe-Fix-wrong-buffer-length-used-.patch [bz#1697534]
  - Resolves: bz#1691479
    (CVE-2018-12181 OVMF: edk2: Stack buffer overflow with corrupted BMP [rhel-7])
  - Resolves: bz#1691647
    (CVE-2019-0160 OVMF: edk2: buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media [rhel-7])
  - Resolves: bz#1697534
    (CVE-2019-0161 ovmf: edk2: stack overflow in XHCI causing denial of service [rhel-7])


author: Rex Dieter <rdieter@fedoraproject.org> 1.1.1-2
changelog:
  - workaround anaconda main menu not visible in F18 Beta TC2 KDE Live (#864058)
  - -DENABLE_INNER_SHADOWS_HACK=0


author: Stef Walter <stefw@redhat.com> - 0.17.5-1
changelog:
  - Make 'p11-kit extract-trust' call update-ca-trust
  - Work around 32-bit oveflow of certificate dates
  - Build fixes


author: Stef Walter <stefw@redhat.com> - 0.18.0-1
changelog:
  - Update to new upstream stable release
  - Various logging tweaks (#928914, #928750)
  - Make the 'p11-kit extract-trust' explicitly reject
    additional arguments


author: Stef Walter <stefw@redhat.com> - 0.18.3-1
changelog:
  - Update to new upstream stable release
  - Fix intermittent firefox cert validation issues (#960230)
  - Include the manual pages in the package


author: Stef Walter <stefw@redhat.com> - 0.18.5-1
changelog:
  - Update to new upstream point release
  - Use freebl for hash algorithms
  - Don't load configs in home dir when setuid or setgid
  - Use $TMPDIR instead of $TEMP while testing
  - Open files and fds with O_CLOEXEC
  - Abort initialization if critical module fails to load
  - Don't use thread-unsafe: strerror, getpwuid
  - Fix p11_kit_space_strlen() result when empty string


author: Stef Walter <stefw@redhat.com> - 0.20.7-1
changelog:
  - Update to upstream stable 0.20.7 release
  - Expose pkcs11x.h header and defines for attached extensions rhbz#1142305


author: Daiki Ueno <dueno@redhat.com> - 0.23.5-3
changelog:
  - Avoid reference to thread-unsafe strerror rhbz#1378947
  - Fix PKCS#11 OAEP interface rhbz#1191209
  - Update documentation to follow RFC7512 rhbz#1165977


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-10
changelog:
  + Fix: pengine: Do not re-allocate clone instances that are blocked in the Stopped state
    + Fix: pengine: Do not allow colocation with blocked clone instances


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-11
changelog:
  + Fix: systemd: Prevent glib assertion - only call g_error_free() with non-NULL arguments
    + Fix: systemd: Prevent additional assertions in g_error_free
    + Fix: logging: glib CRIT messages should not produce core files by default
    + Doc: controld: Update the description
    + Fix: pengine: Correctly account for the location preferences of things colocated with a group
    + Fix: cib: Correctly log short-form xml diffs
    + Fix: crmd: Correcty update the history cache when recurring ops change their return code
    + Log: pengine: Better indicate when a resource has failed
    + Log: crm_mon: Unmunge the output for failed operations


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-13
changelog:
  + Fencing: Support agents that need the host to be unfenced at startup
      Resolves: rhbz#996576
    + crm_report: Collect corosync quorum data
      Resolves: rhbz#839342


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-14
changelog:
  + Fix: xml: Location constraints are allowed to specify a role
    + Bug rhbz#902407 - crm_resource: Handle --ban for master/slave resources as advertised
      Resolves: rhbz#902407


author: David Vossel <dvossel@redhat.com> - 1.1.10-15
changelog:
  + Fix: crmd: Allow transient attributes to be set on remote-nodes.
    + Fix: pengine: Handle orphaned remote-nodes properly
    + Low: cts: Add RemoteLXC regression test.

    Resolves: rhbz#1006465
    Resolves: rhbz#1006471


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.10-16
changelog:
  - Remove unsupported resource agent
  - Log: crmd: Supply arguments in the correct order
  - Fix: crm_report: Correctly redirect error message to /dev/null
  - Fix: Bug rhbz#1011618 - Consistently use 'Slave' as the role for unpromoted master/slave resources
  - Fix: pengine: Location constraints with role=Started should prevent masters from running at all
  - Fix: crm_resource: Observe --master modifier for --move
  - Provide a meaningful error if --master is used for primitives and groups
  - Fix: Fencing: Observe pcmk_host_list during automatic unfencing
      Resolves: rhbz#996576


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.10-17
changelog:
  Resolves: rhbz#720543

  - Fix: core: Do not enabled blackbox for cli tools
  - Fix: Command-line tools should stop after an assertion failure
  - Fix: crmd: Dont add node_state to cib, if we have not seen or fenced this node yet
  - Fix: crmd: Correctly update expected state when the previous DC shuts down
  - Fix: crmd: Cache rsc_info retrieved from lrmd and pacemaker_remoted
  - Fix: crmd: Pad internal lrmd rsc_info and metadata retrieval timeout
  - Fix: crm_attribute: Detect orphaned remote-nodes when setting attributes
  - Fix: crm_mon: Prevent use-of-NULL when ping resources do not define a host list
  - Fix: crm_report: Record the output of the collector
  - Fix: crm_report: Do not print garbage when collecting from the local node
  - Fix: crm_resource: Wait for all replies when cleaning up resources
  - Fix: fencing: Do not broadcast suicide if the on action is being executed
  - Fix: fencing: Allow fencing for node after topology entries are deleted
  - Fix: fencing: Deep copy current topology level list on remote op
  - Fix: lrmd: Correctly cancel monitor actions for lsb/systemd/service resources on cleaning up
  - Fix: pengine: Dont prevent clones from running due to dependant resources
  - Fix: pengine: Probe containers not expected to be up
  - Fix: ipc: Raise the default buffer size to 128k
  - Fix: ipc: Use the higher of the configured buffer size or the default
  - Fix: iso8601: Prevent dates from jumping backwards a day in some timezones
  - Fix: remote: Properly version the remote connection protocol
  - Fix: remote: Handle endian changes between client and server and improve forward compatibility
      Resolves: rhbz#720543


author: David Vossel <dvossel@redhat.com> - 1.1.10-19
changelog:
  - Fix: controld: Use the correct variant of dlm_controld for
    corosync-2 clusters

      Resolves: rhbz#1028627


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-20
changelog:
  - Fix: tools: Fixes formatting of remote-nodes in crm_mon and crm_simulate
  - Fix: Corosync: Attempt to retrieve a peers node name if it is not already known
      Resolves: rhbz#720543


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-23
changelog:
  - mcp: Tell systemd not to respawn us if we return 100
  - services: Detect missing agents and permission errors before forking
  - Use native DBus library for systemd support to avoid problematic use of threads
      Resolves: rhbz#720543 (aka. 1057697)


author: David Vossel <dvossel@redhat.com> - 1.1.10-24
changelog:
  - controld: handling startup fencing within the controld agent, not the dlm
      Resolves: rhbz#1064519
  - controld: Do not consider the dlm up until the address list is present
      Resolves: rhbz#1067536


author: David Vossel <dvossel@redhat.com> - 1.1.10-25
changelog:
  - pengine: cl#5187 - Prevent resources in an anti-colocation from even temporarily running on a same node
      Resolves: rhbz#1069284


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-26
changelog:
  - Run automated regression tests after every build
  - Fencing: Send details of stonith_api_time() and stonith_api_kick() to syslog
  - Fencing: Pass the correct options when looking up the history by node name
  - Fencing: stonith_api_time_helper now returns when the most recent fencing operation completed
  - crm_report: Additional dlm detail if dlm_controld is running
  - crmd: Gracefully handle actions that cannot be initiated
  - pengine: Gracefully handle bad values for XML_ATTR_TRANSITION_MAGIC
      Resolves: rhbz#1070916


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.10-27
changelog:
  - crm_resource: Prevent use-of-NULL
  - systemd: Prevent use-of-NULL when determining if an agent exists
  - Fencing: Remove shadow definition and use of variable 'progress'
      Resolves: rhbz#1070916


author: David Vossel <dvossel@redhat.com> - 1.1.10-28
changelog:
  - Fix: pengine: fixes invalid transition caused by clones with more than 10 instances
      Resolves: rhbz#1078504


author: David Vossel <dvossel@redhat.com> - 1.1.10-28
changelog:
  - pengine: fixes invalid transition caused by clones with more than 10 instances
      Resolves: rhbz#1078504


author: Andrew Beekhof <abeekhof@redhat.com> 1.1.10-30
changelog:
  - crmd: Do not erase the status section for unfenced nodes
  - crmd: Correctly react to successful unfencing operations
  - crmd: Report unsuccessful unfencing operations
  - crmd: Do not overwrite existing node state when fencing completes
  - fencing: Correctly record which peer performed the fencing operation
  - fencing: Automatically switch from 'list' to 'status' to 'static-list' if those actions are not advertised in the metadata
  - fencing: Filter self-fencing at the peers to allow unfencing to work correctly
  - pengine: Automatically re-unfence a node if the fencing device definition changes
  - pengine: Fencing devices default to only requiring quorum in order to start
  - pengine: Delay unfencing until after we know the state of all resources that require unfencing
  - pengine: Ensure unfencing occurs before fencing devices are (re-)probed
  - pengine: Ensure unfencing only happens once, even if the transition is interrupted
  - pengine: Do not unfence nodes that are offline, unclean or shutting down
  - pengine: Unfencing is based on device probes, there is no need to unfence when normal resources are found active
  - logging: daemons always get a log file, unless explicitly set to configured 'none'
  - lrmd: Expose logging variables expected by OCF agents
  - crm_report: Suppress logging errors after the target directory has been compressed
  - crm_resource: Wait for the correct number of replies when cleaning up resources
      Resolves: rhbz#1078078


author: David Vossel <dvossel@redhat.com> - 1.1.10-31
changelog:
  - fencing: Fence using all required devices
  - fencing: Execute all required fencing devices regardless of what topology level they are at
  - fencing: default to 'off' when agent does not advertise 'reboot' in metadata
      Resolves: rhbz#1078078


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-32
changelog:
  - Fix: lrmd: Handle systemd reporting 'done' before a resource is actually stopped
      Resolves: rhbz#1115024


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.10-32.el7_0.1
changelog:
  - Fix: Bug rhbz#1139701 - Unref dbus reply to prevent systemd action timeouts
      Resolves: rhbz#1145740


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-9
changelog:
  - Update patch level to upstream fb94901
  - Prevent blocking by performing systemd reloads asynchronously


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-10
changelog:
  - Update patch level to upstream 98b6688
  - Support an intelligent resource restart operation
  - Exclusive discovery implies running the resource is only possible on the listed nodes


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-11
changelog:
  - Update patch level to upstream 7dd9022
  - Ensure all internal caches are updated when nodes are removed from the cluster
    Resolves: rhbz#1162727


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-13
changelog:
  - Update patch level to upstream a433de6
  - Ensure we wait for long running systemd stop operations to complete
    Resolves: rhbz#1165423


author: David Vossel <dvossel@redhat.com> - 1.1.12-18
changelog:
  - clone order constraint require-all option.
  - fix memory leaks in crmd and pacemakerd

    Resolves: rhbz#1176210


author: David Vossel <dvossel@redhat.com> - 1.1.12-19
changelog:
  - Imply stop on actions within containers during host fencing
  - acl correctly implement the reference acl direct

    Resolves: rhbz#1117341


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.13-10.1
changelog:
  - Prevent lrmd crash when logging certain systemd operation failures
  - Handle systemd shutdown properly
  - Don't delete fence device when deleting an attribute
  - Handle new top output format in HealthCPU resource
  - Implement graceful stopping of pacemaker_remote
  - Update CTS to match applied code patches
  - Resolves: rhbz#1299339
  - Resolves: rhbz#1299340
  - Resolves: rhbz#1299341
  - Resolves: rhbz#1299342
  - Resolves: rhbz#1299348


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.13-10.4
changelog:
  - Fix multiple issues with crm_resource --restart
  - Properly handle descendents of unrunnable clones
  - Resolves: rhbz#1347806
  - Resolves: rhbz#1349493


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-2
changelog:
  - Rebase to upstream 25920dbdbc7594fc944a963036996f724c63a8b8 (1.1.15-rc4)
  - Resolves: rhbz#1304771
    Resolves: rhbz#773656
    Resolves: rhbz#1240330
    Resolves: rhbz#1281450
    Resolves: rhbz#1286316
    Resolves: rhbz#1287315
    Resolves: rhbz#1323544


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-3
changelog:
  - Rebase to upstream e174ec84857e087210b9dacee3318f8203176129 (1.1.15)
  - Resolves: rhbz#1304771
    Resolves: rhbz#1303765
    Resolves: rhbz#1327469
    Resolves: rhbz#1337688
    Resolves: rhbz#1345876
    Resolves: rhbz#1346726


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-8
changelog:
  - Quote timestamp-format correctly in alert_snmp.sh.sample
  - Unregister CIB callbacks correctly
  - Print resources section heading consistently in crm_mon output
  - Resolves: rhbz#773656
  - Resolves: rhbz#1361533


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-10
changelog:
  - Only clear remote node operation history on startup
  - Resend a lost shutdown request
  - Correctly detect and report invalid configurations
  - Don't include manual page for resource agent that isn't included
  - Resolves: rhbz#1288929
  - Resolves: rhbz#1310486
  - Resolves: rhbz#1352039


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-11
changelog:
  - Sanitize readable CIB output collected by crm_report
  - Document crm_report --sos-mode option
  - Speed up crm_report on Pacemaker Remote nodes
  - Avoid sbd fencing when upgrading pacemaker_remote package
  - Resolves: rhbz#1219188
  - Resolves: rhbz#1235434
  - Resolves: rhbz#1323544
  - Resolves: rhbz#1372009


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-11.5
changelog:
  - Avoid lrmd segmentation fault when cancelling in-flight systemd operation
  - Resolves: rhbz#1452196


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-3
changelog:
  - Avoid hang when shutting down unmanaged remote node connections
  - Get correct node name when crm_node or crm_attribute is run on remote node
  - Ignore action when configured as a stonith device parameter
  - Include recent upstream bug fixes
  - Resolves: rhbz#1388489
  - Resolves: rhbz#1410886
  - Resolves: rhbz#1417936
  - Resolves: rhbz#1421700


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-4
changelog:
  - Add support for container bundles
  - Treat systemd reloading state as monitor success
  - Resolves: rhbz#1432722
  - Resolves: rhbz#1436696


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-5
changelog:
  - Keep man pages compressed
  - Bugfixes for container bundles
  - Resolves: rhbz#1410886
  - Resolves: rhbz#1432722


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-7
changelog:
  - Avoid fencing old DC if it is shutting down while another node is joining
  - Improve crmd's handling of repeated fencing failures
  - Correct behavior when guest created by bundle has a node attribute
  - Show Red Hat bugzilla URL rather than upstream when generating cluster report
  - Resolves: rhbz#1430112
  - Resolves: rhbz#1432722


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-9
changelog:
  - Allow cleanup of guest nodes when guest is unmanaged
  - Allow bundles to run on Pacemaker Remote nodes
  - Handle slow IPC clients better
  - Update crmd throttle information when CPUs are hot-plugged in
  - Order pacemaker systemd unit after resource-agents-deps target
  - Resolves: rhbz#1303742
  - Resolves: rhbz#1432722
  - Resolves: rhbz#1435067
  - Resolves: rhbz#1444728
  - Resolves: rhbz#1446669


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-10
changelog:
  - Fix issues when running bundles on Pacemaker Remote nodes
  - Reap orphaned processes when running Pacemaker Remote as pid 1
  - Order remote actions after remote connection recovery
    (fixes regression in RHEL 7.3)
  - Avoid local resource manager daemon (lrmd) crash when an
    in-flight systemd operation is cancelled
  - Resolves: rhbz#1432722
  - Resolves: rhbz#1441603
  - Resolves: rhbz#1448772
  - Resolves: rhbz#1451170


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-12.1
changelog:
  - Add cluster-ipc-limit option to avoid CIB eviction in large clusters
  - Implement ordering constraints involving bundles
  - Always re-check resource placement after quorum loss
  - Avoid stonithd crash when disabling fence device with queued actions
  - Allow re-enabled fence devices to be used
  - Resolves: rhbz#1478298
  - Resolves: rhbz#1481139
  - Resolves: rhbz#1481140
  - Resolves: rhbz#1481141
  - Resolves: rhbz#1481142


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-12.3
changelog:
  - Allow unfencing of remote nodes
  - Support clone notifications for bundle resources
  - Support colocation constraints involving bundles
  - Support container-attribute-target resource meta-attribute
  - Resolves: rhbz#1491544
  - Resolves: rhbz#1497602


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-12.5
changelog:
  - Fix multiple issues with bundle resources
  - Handle clean-ups of primitive within bundle properly
  - Resolves: rhbz#1509871
  - Resolves: rhbz#1509874


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-12.6
changelog:
  - Fix unfencing regression
  - Prevent invalid transition with bundles
  - Resolves: rhbz#1524828
  - Resolves: rhbz#1527810


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-12.8
changelog:
  - Fix pcs resource --wait timeout when bundles are used
  - Observe colocation constraints correctly with bundles in master role
  - Resolves: rhbz#1520798
  - Resolves: rhbz#1537557


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-2
changelog:
  - Rebase to upstream 5cccc41c95d6288eab27d93901b650b071f976dc (1.1.18-rc2)
  - Default record-pending to true
  - Resolves: rhbz#1323546
  - Resolves: rhbz#1376556
  - Resolves: rhbz#1382364
  - Resolves: rhbz#1461976
  - Resolves: rhbz#1474428
  - Resolves: rhbz#1500509
  - Resolves: rhbz#1501903
  - Resolves: rhbz#1501924


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-4
changelog:
  - Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
  - Resolves: rhbz#1381754
  - Resolves: rhbz#1474428
  - Resolves: rhbz#1499217
  - Resolves: rhbz#1508373


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-5
changelog:
  - Properly clean up primitive inside bundle
  - Scalability improvements
  - Resolves: rhbz#1499217
  - Resolves: rhbz#1508373


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-6
changelog:
  - Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
  - If on-fail=ignore, migration-threshold should also be ignored
  - Resolves: rhbz#1474428
  - Resolves: rhbz#1507344


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-7
changelog:
  - Avoid node attribute write delay when corosync.conf has only IP addresses
  - Fix regressions in "pcs resource cleanup" behavior
  - Restore ordering of unfencing before fence device starts
  - Ensure --wait options work when bundles are in use
  - Fix possible invalid transition with bundle ordering constraints
  - Resolves: rhbz#1454960
  - Resolves: rhbz#1508350
  - Resolves: rhbz#1517796
  - Resolves: rhbz#1519812
  - Resolves: rhbz#1522822


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-10
changelog:
  - Always trigger transition when quorum changes
  - Match clone names correctly with crm_resource --cleanup
  - Fix pcs resource --wait timeout when bundles are used
  - Observe colocation constraints correctly with bundles in master role
  - Resolves: rhbz#1464068
  - Resolves: rhbz#1508350
  - Resolves: rhbz#1519812
  - Resolves: rhbz#1527072


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-11.1
changelog:
  - Do not schedule notifications for unrunnable actions
  - Do not expire remote failures if fencing is pending
  - Do not consider attribute order difference as CIB change in crm_diff
  - Resolves: rhbz#1563345
  - Resolves: rhbz#1566533
  - Resolves: rhbz#1568720


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-11.3
changelog:
  - Fix regression in handling of mixed-case node names
  - Avoid multiple recovery of stonith devices
  - Resolves: rhbz#1583747
  - Resolves: rhbz#1585741


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-12
changelog:
  - Pull in latest fixes from upstream 1.1 branch
  - Build for aarch64
  - Resolves: rhbz#1422602
  - Resolves: rhbz#1463015
  - Resolves: rhbz#1469255
  - Resolves: rhbz#1519379
  - Resolves: rhbz#1543278
  - Resolves: rhbz#1545449
  - Resolves: rhbz#1550829
  - Resolves: rhbz#1561617
  - Resolves: rhbz#1562255
  - Resolves: rhbz#1565187
  - Resolves: rhbz#1568593
  - Resolves: rhbz#1570130


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-13
changelog:
  - Pull latest upstream 1.1 branch fixes
  - Resolves: rhbz#1478451
  - Resolves: rhbz#1501505
  - Resolves: rhbz#1514492
  - Resolves: rhbz#1550829
  - Resolves: rhbz#1564536
  - Resolves: rhbz#1576148
  - Resolves: rhbz#1577300


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-1
changelog:
  - Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
  - Allow crm_node to work on Pacemaker Remote nodes
  - Implement new --validate option to stonith_admin
  - Support .path, .mount, and .timer systemd unit files as resources
  - Handle INFINITY fail count correctly in crm_failcount
  - Resolves: rhbz#1374175
  - Resolves: rhbz#1434936
  - Resolves: rhbz#1562255
  - Resolves: rhbz#1590483
  - Resolves: rhbz#1591045


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-2
changelog:
  - Ensure resource agent meta-data actions can get local node name
  - Do not record pending clone notifications in CIB
  - Resolves: rhbz#1374175
  - Resolves: rhbz#1570130


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-4
changelog:
  - Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
  - Resolves: rhbz#1478451


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-7
changelog:
  - Shutdown corosync locally if fenced
  - Count start failure once
  - Resolves: rhbz#1448221
  - Resolves: rhbz#1549576


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-8.1
changelog:
  - Route remote clone notifications through correct cluster node
  - Allow clean-up of managed guest nodes and bundle nodes
  - Allow use of guest nodes and bundles in clusters with sbd fencing
  - Resolves: rhbz#1646347
  - Resolves: rhbz#1646350
  - Resolves: rhbz#1646872


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-8.3
changelog:
  - Fix regression in crm_resource --refresh
  - Order resource moves after remote connection starts
  - Resolves: rhbz#1664242
  - Resolves: rhbz#1664243


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-8.5
changelog:
  - Improve clients' authentication of IPC servers (CVE-2018-16877)
  - Fix use-after-free with potential information disclosure (CVE-2019-3885)
  - Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
  - Resolves: rhbz#1694555
  - Resolves: rhbz#1700704
  - Resolves: rhbz#1700705


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-1
changelog:
  - pcs status now shows when a standby node still has active resources
  - Allow clean-up of guest nodes and bundles without unmanaging first
  - pcs status now shows pending and failed fence actions by default
  - Improve pcs status display when disconnected from cluster
  - Ensure node attributes are recorded if attrd writer is shutting down
  - Synchronize fencing history across all nodes
  - Add stonith_admin option to clear fencing history
  - Don't schedule unneeded bundle actions when connection is on different node
  - Allow use of sbd in clusters with guest nodes and bundles
  - Schedule bundle clone notifications correctly when connection is moving
  - Rebase on upstream 1.1.20-rc1 version
  - Avoid unneeded resource restarts when remote connection fails to start
  - Allow crm_resource --move to work when a previous move had a lifetime
  - Wait for all replies when refreshing a resource
  - Don't schedule clone notifications for a stopped bundle
  - Allow option to crm_resource --clear to clear only expired constraints
  - Fix result reporting when cleanup is done while an operation is in-flight
  - Resolves: rhbz#1419548
  - Resolves: rhbz#1448467
  - Resolves: rhbz#1461964
  - Resolves: rhbz#1486869
  - Resolves: rhbz#1535221
  - Resolves: rhbz#1555938
  - Resolves: rhbz#1595422
  - Resolves: rhbz#1627948
  - Resolves: rhbz#1638593
  - Resolves: rhbz#1644076
  - Resolves: rhbz#1644864
  - Resolves: rhbz#1648507
  - Resolves: rhbz#1648620
  - Resolves: rhbz#1652053
  - Resolves: rhbz#1652752
  - Resolves: rhbz#1658650
  - Resolves: rhbz#1665343


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-2
changelog:
  - Assume unprivileged ACL if unable to get user information from host
  - Delay 2 seconds before re-attempting a failed node attribute write
  - SNMP alert sample script now sends all OIDs with every alert
  - Recover dependent resources correctly with asymmetric ordering
  - Rebase on upstream 1.1.20 final version
  - Resolves: rhbz#1596125
  - Resolves: rhbz#1597695
  - Resolves: rhbz#1608979
  - Resolves: rhbz#1628966
  - Resolves: rhbz#1644864


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-3
changelog:
  - Support more than 64KB of fence agent output
  - Avoid unnecessary recovery of group member
  - Improve IPC clients' authentication of servers (CVE-2018-16877)
  - Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
  - Fix use-after-free with potential information disclosure (CVE-2019-3885)
  - Resolves: rhbz#1549366
  - Resolves: rhbz#1609453
  - Resolves: rhbz#1694556
  - Resolves: rhbz#1694559
  - Resolves: rhbz#1694907


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-4
changelog:
  - Update security patches
  - Resolves: rhbz#1694556
  - Resolves: rhbz#1694559
  - Resolves: rhbz#1694907


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-5.1
changelog:
  - Handle losing remote node while it is shutting down
  - Allow configurable GnuTLS cipher priorities and use stricter default
  - Resolves: rhbz#1732335
  - Resolves: rhbz#1733187


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-5.2
changelog:
  - Avoid invalid transition when guest node's host is unclean but can't be fenced
  - Resolves: rhbz#1770734


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.21-1
changelog:
  - Recover from quiesced DC disk
  - Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
  - Default serialized order constraints to symmetrical=false
  - Avoid fence loops due to incorrect Pacemaker Remote ordering
  - Default concurrent-fencing to true
  - Harden GnuTLS priorities
  - Rebase on upstream 1.1.21 final version
  - Resolves: rhbz#1596125
  - Resolves: rhbz#1625671
  - Resolves: rhbz#1672225
  - Resolves: rhbz#1704870
  - Resolves: rhbz#1710422
  - Resolves: rhbz#1727280
  - Resolves: rhbz#1731189


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.21-3
changelog:
  - Avoid invalid transition when guest node's host is unclean but can't be fenced
  - Resolves: rhbz#1755659


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.22-1
changelog:
  - Show correct disabled resource count in status display
  - Run-time option for Pacemaker Remote bind address
  - Avoid restart loop when migration is left dangling
  - Improve help for clean-up option
  - Do not overweight group colocation scores
  - Rebase on upstream 1.1.22+63d2d79
  - Resolves: rhbz#1458953
  - Resolves: rhbz#1743373
  - Resolves: rhbz#1757951
  - Resolves: rhbz#1758969
  - Resolves: rhbz#1760669
  - Resolves: rhbz#1792492


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.23-1
changelog:
  - Improve help for clean-up option
  - Avoid pending DC fencing getting "stuck" in status display
  - Rebase on upstream 1.1.23-rc1
  - Resolves: rhbz#1758969
  - Resolves: rhbz#1787749
  - Resolves: rhbz#1792492


author: Naveen Kumar <nkumar@redhat.com> - 3.0-8
changelog:
  - add ur-in, ur-pk & pa-pk locale-specific overrides rule in 67-paktype-naskh-basic.conf
  - add ur-in, ur-pk & pa-pk locale-specific overrides rule in 67-paktype-naskh-basic-sa.conf
  - resolves bug #586789


author: Tomáš Mráz <tmraz@redhat.com> 1.1.6-9
changelog:
  - do not fail if btmp file is corrupted (#906852)
  - fix strict aliasing warnings in build
  - UsrMove
  - use authtok_type with pam_pwquality in system-auth
  - remove manual_context handling from pam_selinux (#876976)
  - other minor specfile cleanups


author: Tomáš Mráz <tmraz@redhat.com> 1.1.6-13
changelog:
  - add auditing of SELinux policy violation in pam_rootok (#965723)
  - add SELinux helper to pam_pwhistory


author: Tomáš Mráz <tmraz@redhat.com> 1.1.6-14
changelog:
  - use links instead of w3m to create txt documentation
  - recognize login session in pam_sepermit to prevent gdm from locking (#969174)
  - add support for disabling password logging in pam_tty_audit


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-7
changelog:
  - rename the 90-nproc.conf to 20-nproc.conf (#1071618)
  - canonicalize user name in pam_selinux (#1071010)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-9
changelog:
  - fix CVE-2014-2583: potential path traversal issue in pam_timestamp
  - pam_pwhistory: call the helper if SELinux enabled


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-11
changelog:
  - be tolerant to corrupted opasswd file
  - audit the module names that granted access
  - pam_userdb: correct the example in man page (#1078784)
  - pam_limits: check whether the utmp login entry is valid (#1080023)
  - pam_console_apply: do not print error if console.perms.d is empty
  - pam_limits: nofile refers to open file descriptors (#1111220)
  - apply PIE and full RELRO to all binaries built


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-14
changelog:
  - pam_unix: add no_pass_expiry option for ignoring password
    expiration in crond and sshd with public key authentication
  - add manual page for environment(5) (#1110257)
  - pam_loginuid: log if auditd not detected
  - always ignore audit error when -EPERM is returned (#1287800)
  - pam_lastlog: fix possible NULL dereference when localtime fails (#1313537)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-19
changelog:
  - pam_access: (group) match syntax is prioritized over network@netgroup
    match (#1358881), add support for additional /etc/security/access.d/*.conf
    files, improve documentation (#1421735)
  - pam_lastlog: fix pt_BR translation (#1185697)
  - pam_faillock: support admin_group with users equivalent to root in
    faillock handling (#1285550)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.8-23
changelog:
  - pam_get_authtok_verify: ensure no double verification happens
  - manual page fixes for pam_tty_audit and pam_wheel
  - pam_unix: lower the excessive maximum number of closed fd descriptors
    when spawning handlers
  - pam_loginuid: do not prevent login in unprivileged containers


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.2-1
changelog:
  - update to 2.4.2
    - don't override the primary ccache selection when updating DIR: caches
    - handle the signature of trace callbacks being different between 1.10 and
      1.11


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.5-1
changelog:
  - update to 2.4.5
    - handle non-unique ccname templates
  - switch to a non-unique default ccname template on newer releases


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.6-1
changelog:
  - handle ccache creation correctly for users who are mapped to principal
    names in realms other than the default (#999604)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.7-1
changelog:
  - drop some no-longer-necessary code to cede ownership of keyring ccaches
    to an unprivileged user at login-time to work better with upcoming changes
    to libkrb5's keyring ccache support (libkrb5: #991148, this one's #1005376)
  - if we don't have a ccname_template, if we're built against a libkrb5 that
    provides interfaces for reading its configuration files, try to read the
    default_ccache_name value from the [libdefaults] section before falling
    back to the default we've set at compile-time (#more of #1005376)
  - stop specifying a default ccache location at compile-time on F21 and later,
    to make our unconfigured default better line up with libkrb5's unconfigured
    default


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.8-4
changelog:
  - fix to only prompt for passwords when obtaining credentials for performing
    password changes by toggling the subsequent_prompt default to off when
    called to perform a password change (#1063933)


author: Bob Relyea <rrelyea@redhat.com> - 0.6.2-1
changelog:
  - Pick up the latest pam_pkcs11 from upstream

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild


author: Bob Relyea <rrelyea@redhat.com> - 0.6.2-14
changelog:
  - Install into /usr/lib/system rather then /lib/system (rpmdiff error)
  - Fix coverity issues
  - Silence coverity warnings


author: Bob Relyea <rrelyea@redhat.com> - 0.6.2-14
changelog:
  - Install into /usr/lib64/system rather then /lib64/system (rpmdiff error)
  - Fix coverity issues
  - Silence coverity warnings


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-22
changelog:
  - Don't rebuild documentation for each platform. Doing so creates unique 
  document files which are shared and conflict on multilib installations.


author: Bob Relyea <rrelyea@redhat.com> 0.6.2.29
changelog:
  - Coverity and compilier warning fixes
  - Use the PKIX validator
  - Fix crash when ldap connection fails and debugging is enabled.


author: Akira TAGOH <tagoh@redhat.com> - 1.34.1-2
changelog:
  - Fix duplicate file list for modules.cache
  - s/%define/%global/g
  - Fix bogus date in %changelog
  - Do not suppress the detailed build log.


author: William Cohen <wcohen@redhat.com> - 5.2.0-7
changelog:
  - Update papi presets for Intel processors. Resolves rhbz1126090 
  - Eliminate some errors found by coverity. Releated rhbz1057778


author: William Cohen <wcohen@redhat.com> - 5.2.0-15
changelog:
  - Update papi L1 cache events on POWER7
  - Prevent papi-testsuite segfaults
  - Identify kernels that support rdpmc
  - Correct papi-testsuite byte_profile and sprofile tests on ppc64le
  - Update PAPI_L1_TCM event on Haswells


author: William Cohen <wcohen@redhat.com> - 5.1.1-5
changelog:
  - rhbz986673 - /usr/lib64/libpapi.so is unowned
  - Package files in /usr/share/papi only once.
  - Avoid dependency problem with parallel make of man pages.


author: William Cohen <wcohen@redhat.com> - 5.2.0-25
changelog:
  - Update IBM Power 9 events. rhbz1510684
  - Make lmsensor dynamically size internal array. rhbz1510497


author: Akira TAGOH <tagoh@redhat.com> - 0.6.8-23
changelog:
  - the spec file cleanup
  - Fix the undefined symbol issue in libpaps.so.0
  - Correct FSF address in the COPYING.LIB


author: Nathan Scott <nathans@redhat.com> - 0.4.0-5
changelog:
  - Use RPM macros to ease dropwizard metrics enablement.
  - Correct the dependency on systems.uom:systems-unicode-java8


author: Brian C. Lane <bcl@redhat.com> 3.1-6
changelog:
  - Use dm_udev_wait for dm operations (#844257) (bcl)
  - use largest_partnum in _dm_reread_part_table (bcl)
  - set uuid on dm partitions (#832145) (bcl)


author: Brian C. Lane <bcl@redhat.com> 3.1-8
changelog:
  - change partition UUID to use partX-UUID (#858704)
  - fixup losetup usage in tests
  - add support for implicit FBA DASD partitions (#707027)
  - add support for EAV DASD partitions (#707032)


author: Brian C. Lane <bcl@redhat.com> 3.1-10
changelog:
  - libparted: mklabel to support EAV DASD (#707032)
  - libparted: Avoid dasd as default disk type while probe (#707032)


author: Brian C. Lane <bcl@redhat.com> 3.1-13
changelog:
  - libparted: Recognize btrfs filesystem (#857101)
  - tests: Add btrfs and xfs to the fs probe test (#857101)


author: Brian C. Lane <bcl@redhat.com> 3.1-16
changelog:
  - tests: Remove rmmod loop from t8001
    Resolves: rhbz#1040504
  - tests: Increase size of container filesystem in t4100
    Resolves: rhbz#1036149
  - tests: Disable t4100 dvh test for now
    Resolves: rhbz#1036093
  - libparted: Make sure not to treat percentages as exact
    Resolves: rhbz#1045957
  - tests: Use mkfs.xfs to create files
    Resolves: rhbz#1036152


author: Brian C. Lane <bcl@redhat.com> 3.1-18
changelog:
  - Fix manpage NAME so whatis works with parted
    Resolves: rhbz#948424
  - GPT add support for PReP GUID
    Resolves: rhbz#1108196


author: Brian C. Lane <bcl@redhat.com> 3.1-21
changelog:
  - Backport fix for 1 sector logical partition separation from start of extended
    Resolves: rhbz#1212323


author: Brian C. Lane <bcl@redhat.com> 3.1-22
changelog:
  - Use 512b sector size when communicating with device-mapper
    Resolves: rhbz#1188431
  - Add a test to make sure partitions are the correct size on device-mapper
    Related: rhbz#1188431


author: Brian C. Lane <bcl@redhat.com> 3.1-23
changelog:
  - libparted: Use read only when probing devices on linux
    Resolves: rhbz#1245144
  - tests: Use wait_for_dev_to_ functions
    Related: rhbz#1245144


author: Brian C. Lane <bcl@redhat.com> 3.1-24
changelog:
  - tests: Add udevadm settle to wait_for_ loop
    Related: rhbz#1260664
  - tests: Add-wait-to-t9042
    Resolves: rhbz#1257415
  - tests: Fix t1700 failing on a host with a 4k xfs file
    Related: rhbz#1260664


author: Brian C. Lane <bcl@redhat.com> 3.1-25
changelog:
  - docs: Add list of filesystems for fs-type
    Resolves: rhbz#1311596
  - libparted: Remove fdasd geometry code from alloc_metadata
    Resolves: rhbz#1244833


author: Brian C. Lane <bcl@redhat.com> - 3.1-29
changelog:
  - Add support for NVMe devices
    Resolves: rhbz#1316239
  - Backport partition resize command
    Resolves: rhbz#1423357


author: Brian C. Lane <bcl@redhat.com> - 3.1-30
changelog:
  - partprobe: always close dev when probing disks
    Resolves: rhbz#1551411
  - tests: Add t4201 to test partprobe with 1025 devices
    Related: rhbz#1551411


author: Brian C. Lane <bcl@redhat.com> - 3.1-31
changelog:
  - Backport patches for dasd on virtio
    fdasd: geometry handling updated from upstream s390-tools
    dasd: enhance device probing
    parted: fix build error on s390
    fdasd.c: Safeguard against geometry misprobing
    Resolves: rhbz#1676604
  - Add part-label documentation to mkpart command
    Resolves: rhbz#1686659


author: Tomas Mraz <tmraz@redhat.com> 0.77-5
changelog:
  - first part of fix for pam_gnome_keyring prompting (#578624)
    needs support for use_authtok to be added to pam_gnome_keyring


author: Tomas Mraz <tmraz@redhat.com> 0.78.99-1
changelog:
  - use better (auditable) libselinux calls for checking
    the access to passwd (#518268)
  - add support for the -e option as seen on Debian passwd
  - make the binary PIE and full RELRO (#784483)


author: Jiri Kucera <jkucera@redhat.com> - 0.79-5
changelog:
  - Backport ca46cac (allow passwords longer than 79 characters)
    Backport Steve Grubb's patches
    - stop double auditing, use appropriate record types, update op field in
      audit events, don't audit status check, fix password aging logging
    Backport 02d4478 (better document -S option)
    Fix URL and Source tags
    Resolves: #1276570, #1489086, #1638105, #1145256, #1472567


author: Jiri Kucera <jkucera@redhat.com> - 0.79-6
changelog:
  - Fix incorrect -S output when password field in /etc/passwd is empty but the
    password information in /etc/shadow is set
    Resolves: #1686436


author: Than Ngo <than@redhat.com> - 2.7.1-11
changelog:
  - Fixed CVE-2016-10713 - Out-of-bounds access in pch_write_line function 
  - Fixed CVE-2018-6952 - Double free of memory
  - Resolves: #1626473, honor new file mode 100755 when applying patches
  - Resolves: #1653294, Added virtual provides for bundled gnulib library


author: Tim Waugh <twaugh@redhat.com> 2.7-1
changelog:
  - 2.7.  No longer need sigsegv, get-arg, CVE-2010-4651,
    backup-if-mismatch or coverity-leak patches.


author: Hans de Goede <hdegoede@redhat.com> - 2.0-8
changelog:
  - Add a patch fixing various crashes due to referencing freed memory (#1133339)
  - Cherry-pick some other fixes from upstream git


author: Kalev Lember <kalevlember@gmail.com> - 3.0-1
changelog:
  - Update to 3.0
  - Use license macro for the LICENCE file
  - Use desktop-file-validate instead of desktop-file-install


author: Nathan Scott <nathans@redhat.com> - 3.9.10-7
changelog:
  - Tackle bugs and test failures found by QE (BZ 1161515)
  - Resolve pcp web packaging issues, regression (BZ 1163560)


author: Dave Brolley <brolley@redhat.com> - 3.10.5-2
changelog:
  - Update to latest PCP sources (BZ 1200584)
  - Support for per-containtainer cgroup metrics (BZ 1121218)
  - Allow pmlogger/pmie start when not chkconfig on (BZ 1186012)
  - No pmlogger_daily messages when not chkconfig on (BZ 1208699)
  - Fix pmdamounts potential stack corruption (BZ 1213833)
  - Tackle numerous testsuite issues on aarch64 (BZ 1190680)
  - Tackle numerous testsuite issues on ppc64le (BZ 1194244)
  - Allow pmlogger to run in local context mode (BZ 1129539)
  - Deprecate hinv.map.lvname for hinv.map.dmname (BZ 1109539)


author: Dave Brolley <brolley@redhat.com> - 3.10.5-3
changelog:
  - Update with missing package dependency for pmda-lustrecomm.
  - Rebuild to pickup bintils fix (BZ 1238469)


author: Nathan Scott <nathans@redhat.com> - 3.10.6-1
changelog:
  - Export the softnet_stat kernel networking metrics (BZ 1190912)
  - Latest upstream PCP, dropping all earlier patches (BZ 1200584)
  - Re-enable the pcp-pmda-jsonpointer package build (BZ 1238134)
  - Fix failing test cases and bugs from Red Hat QE (BZ 1241591)
  - pcp2graphite support for exporting from archives (BZ 1242622)
  - Remove percpu interrupt metrics from default set (BZ 1243809)
  - pcp-collector meta-package enables pmcd+pmlogger (BZ 1249090)


author: Nathan Scott <nathans@redhat.com> - 3.10.6-2
changelog:
  - Fixes targetting several QE reported test failures (BZ 1241591)
  - Remove tool-specific interval settings for pmlogconf (BZ 1243809)


author: Nathan Scott <nathans@redhat.com> - 3.11.2-1
changelog:
  - Improve PMAPI python clients signal handling (BZ 1238550)
  - Fix issues in postfix PMDA search for mail log (BZ 1252308)
  - Fix local_sock() souble free error in perl API (BZ 1258860)
  - Fix sigsegv in pcp-uptime(1) --archive option (BZ 1262721)
  - Update to current stable PCP version (BZ 1284307)
  - Fix pcp-compat dependency drawing in many packages (BZ 1293466)
  - Support for per-processor softnet kernel metrics (BZ 1316085)
  - Fix GFS2 PMDA Install script PMNS parsing error (BZ 1320591)
  - Report Docker version 1.10+ container information (BZ 1327737)


author: Nathan Scott <nathans@redhat.com> - 3.11.3-1
changelog:
  - Latest upstream PCP, dropping all earlier patches (BZ 1284307)
  - Minimal package dependencies for PMAPI applications (BZ 1298993)
  - Resolve perl Net:SNMP pmdasnmp dependency problem (BZ 1332624)
  - Improve time taken to detect pmcd startup failure (BZ 1336210)
  - Fix cron service stopping disabled pmie/pmlogger (BZ 1336792)
  - Fix instance domain handling in derived metrics (BZ 1337212)
  - Include latest Oracle database PMDA enhancements (BZ 1340430)
  - Workaround valgrind failure for pmmgr test case (BZ 1343319)


author: Nathan Scott <nathans@redhat.com> - 3.11.3-3
changelog:
  - Install the missing /etc/pcp/nssdb directory (BZ 1360206)
  - pcp-pmda-ds389 requires perl-LDAP dependency (BZ 1357605)
  - Switch pcp-pmda-ds389log to the dirsrv user (BZ 1357607)
  - pcp-pmda-ds389log requires perl-Date-Manip (BZ 1354055)
  - Remove multi-archive loglabel timezone check (BZ 1351223)


author: Nathan Scott <nathans@redhat.com> - 3.11.8-2
changelog:
  - Drop pcp-pmda-nutcracker package, missing deps (BZ 1425880)
  - Incorporate several fixes from Coverity scan review.


author: Nathan Scott <nathans@redhat.com> - 3.11.8-4
changelog:
  - Enable collecting POWER9 NEST PMU perf metrics (BZ 1419490)
  - SELinux policy updates (BZs 1381301,1432086,1433271,1443632)
  - zeroconf package added (BZs 1211432, 1371950)


author: Lukas Berk <lberk@redhat.com> - 3.12.2-1
changelog:
  - Selinux policy updates (BZs 1459165,1460131,1488116,1447585,1449671)
  - PCP bash completions not working (BZ 1482605)
  - pmdabash man page fix (BZ 1459907)


author: Lukas Berk <lberk@redhat.com> - 3.12.2-2
changelog:
  - Selinux policy updates (BZs 1517655,1517656,1480447,1505888,1515928,1517281,1517862)
  - Multilib corrections (BZ 1513503)


author: Nathan Scott <nathans@redhat.com> - 3.12.2-3
changelog:
  - Update Source2 for external grafana webapp (BZ 1516933)
  - Remove an unhelpful log metadata diagnostic (BZ 1472153)


author: Lukas Berk <lberk@redhat.com> - 3.12.2-5
changelog:
  - Correction to spec file and selinux policy (BZ 1488116)
  - Show all perfevent metrics in pcpatop (BZ 1525864)
  - Multilib corrections (BZ 1537623)


author: Nathan Scott <nathans@redhat.com> - 3.8.10-1
changelog:
  - Add symbol-versioning for PCP shared libraries (BZ 1037771)
  - Fix pmcd/Avahi interaction with multiple ports (BZ 1035513)
  - Confine set of exported symbols from DSO PMDAs (BZ 1025694)
  - Ensure pcpqa user created by pcp-testsuite rpm (BZ 1025688)
  - Remove empty pmlogger configuration directory (BZ 1025599)
  - Resolve warning messages from pcp rpm scripts (BZ 1025587)
  - Remove world-writeable private temp directory (BZ 1025583)
  - Tackle remaining failing pcp-testsuite cases (BZ 987086)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.8.10-2
changelog:
  - Fix pmdalinux failure on unexpected ICMP types (BZ 1055826)
  - Add man pages for all of the PMDAs missing out (BZ 1053094)


author: Nathan Scott <nathans@redhat.com> - 3.8.10-5
changelog:
  - Resolve pmdammv induced pmcd segv during tests (BZ 1061330)
  - Fix python-pcp time API wrapper implementation (BZ 1062467)


author: Nathan Scott <nathans@redhat.com> - 3.8.10-6
changelog:
  - Added missing qualified output for test qa/844 (BZ 1064311)
  - Fix pmdalinux memory corruption issue on s390x (BZ 1064254)
  - PMDA installation works without a running pmcd (BZ 1062443)
  - Fix some more issues in pcpqa account creation (BZ 1025688)


author: Nathan Scott <nathans@redhat.com> - 3.8.10-7
changelog:
  - Fix a handful of QE-found test-induced failures (BZ 987086)
  - Multilib packaging support for libs and devel (BZ 1059642)


author: Nathan Scott <nathans@redhat.com> - 3.8.1-1
changelog:
  - Update to latest PCP sources.
  - Fix log import silently dropping >1024 metrics (BZ 968210)
  - Move some commonly used tools on the usual PATH (BZ 967709)
  - Improve pmatop handling of missing proc metrics (BZ 963085)
  - Stop out-of-order records corrupting import logs (BZ 958745)


author: Nathan Scott <nathans@redhat.com> - 3.8.2-1
changelog:
  - Update to latest PCP sources.
  - Integrate gluster related stats with PCP (BZ 969348)
  - Fix for iostat2pcp not parsing iostat output (BZ 981545)
  - Start pmlogger with usable config by default (BZ 953759)
  - Fix pmatop failing to start, gives stacktrace (BZ 963085)


author: Nathan Scott <nathans@redhat.com> - 3.8.3-1
changelog:
  - Default to Unix domain socket (authenticated) local connections.
  - Introduces new pcp-pmda-infiniband sub-package.
  - Disable systemtap-sdt-devel usage on ppc.


author: Nathan Scott <nathans@redhat.com> - 3.8.4-1
changelog:
  - Very minor release containing mostly QA related changes.
  - Enables many more metrics to be logged for Linux hosts.


author: Nathan Scott <nathans@redhat.com> - 3.8.6-1
changelog:
  - Update to latest PCP sources.
  - Rework pmpost test which confused virus checkers (BZ 1024850)
  - Tackle pmatop reporting issues via alternate metrics (BZ 998735)


author: Nathan Scott <nathans@redhat.com> - 3.9.10-1
changelog:
  - Convert PCP init scripts to systemd services (BZ 1044682)
  - Improve hinv device mapper metric instances (BZ 1109539)
  - Fix pmcollect dev instance domain handling (BZ 1097095)
  - Remove bogus pmlogger_daily cron messages (BZ 1125700)
  - Update to latest PCP sources (BZ 1107734).


author: Nathan Scott <nathans@redhat.com> - 4.0.2-1
changelog:
  - Ensure sans font dependency resolved for webapps (BZ 1568109)
  - Ensure sans font dependency resolved for pmchart (BZ 1546640)
  - Update to latest PCP sources (BZ 1565370).


author: Nathan Scott <nathans@redhat.com> - 4.0.2-3
changelog:
  - Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
  - Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
  - Fix pmlogger_daily log rotation open port issue (BZ 1579881)


author: Nathan Scott <nathans@redhat.com> - 4.3.2-1
changelog:
  - Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
  - Update PCP selinux policy rules (BZs 1692305, 1695066)
  - Adjust spec file /var/run/pcp settings (BZ 1533154)
  - Fix pmdaproc kernel process misreporting (BZ 1673250)
  - Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
  - Ensure pmdaroot reaps all of its children (BZ 1698517)
  - Corrections to python version dependencies (BZ 1676867)
  - Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
  - Update to a more recent PCP bug fix release (BZ 1647308)


author: Nathan Scott <nathans@redhat.com> - 4.3.2-2
changelog:
  - Rework the pcp-libs ldconfig post-op (BZ 1705362)
  - Resolve a QA file permissions diagnostic issue


author: Nathan Scott <nathans@redhat.com> - 4.3.2-4
changelog:
  - Fix a pmdaproc memory leak (BZ 1721107)
  - Rebuild with selinux runtime dependency update (BZ 1714101)
  - Update selinux-policy to latest upstream (BZs 1699830, 1700989)


author: Nathan Scott <nathans@redhat.com> - 4.3.2-7
changelog:
  - Fix hugepage metrics in pmdalinux (BZ 1730107)
  - Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
  - Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
  - Fix pcp-atopsar sample count command line argument (BZ 1764748)
  - Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
  - Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)


author: Nathan Scott <nathans@redhat.com> - 4.3.2-8
changelog:
  - Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
  - Resolve an selinux policy issue with pmlogger (BZ 1792859)


author: Nathan Scott <nathans@redhat.com> - 4.3.2-13
changelog:
  - Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
  - Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)


author: Nathan Scott <nathans@redhat.com> - 1.5.8-2
changelog:
  - Update to latest PCP GUI sources.
  - Build fix when building against older PCP headers.
  - Force PCP_PMSNAPCONTROL_PATH to the preferred location.


author: Nathan Scott <nathans@redhat.com> - 1.5.9-1
changelog:
  - Fix problems with pmchart Samples/Visible History (BZ 968825)
  - Fix pmchart startup handling lack of metrics source (BZ 957007)
  - Fix missing metric handling for archive View files (BZ 981140)
  - UX improvements for the New/Edit Chart Apply button (BZ 957669)
  - Resolve packaging issue where /usr/bin was installed (BZ 988176)
  - Improve pmchart show-/hide-time-control mechanism (BZ 957002)
  - Add a close button to pmchart Preferences dialog (BZ 922198)
  - Fix pmchart Preferences dialog color scheme sigsegv (BZ 963505)


author: Nathan Scott <nathans@redhat.com> - 1.5.10-1
changelog:
  - Updates to the PCP Users and Administrators Guide.
  - Updates to the PCP Programmers Guide.
  - Install a known-good pdf version of each book (BZ 990303).
  - Improve pmchart hostname reporting via pmGetContextHostName.


author: Nathan Scott <nathans@redhat.com> - 1.5.11-1
changelog:
  - Updates to the PCP Programmers Guide.
  - Fix pmchart value/units reporting issue on chart selection.


author: Petr Pisar <ppisar@redhat.com> - 8.32-4
changelog:
  - Fix forward search in JIT when link size is 3 or greater
  - Fix buffer over-read in UTF-16 and UTF-32 modes with JIT


author: Petr Pisar <ppisar@redhat.com> - 8.32-5
changelog:
  - Fix bad handling of empty lines in pcregrep tool (bug #961789)
  - Fix possible pcretest crash with a data line longer than 65536 bytes


author: Petr Pisar <ppisar@redhat.com> - 8.32-13
changelog:
  - Disable unsupported JIT mode on little-endian 64-bit PowerPC platform
    (bug #1125642)
  - Raise optimization level to 3 on little-endian 64-bit PowerPC (bug #1123498)


author: Petr Pisar <ppisar@redhat.com> - 8.32-15
changelog:
  - Fix compiling expression where start-anchored character with more than one
    other case follows circumflex in multiline UTF mode (bug #1110621)
  - Fix character class with a literal quotation (bug #1111091)
  - Fix empty-matching possessive zero-repeat groups in interpreted mode
    (bug #1119320)
  - Fix compiler crash for zero-repeated groups with a recursive back reference
    (bug #1119356)
  - Reset non-matched groups within capturing group up to forced match
    (bug #1161597)
  - Fix static linking (bug #1217111)
  - Package pcredemo.c as a documentation for pcre-devel (bug #1217118)


author: Petr Pisar <ppisar@redhat.com> - 8.32-15.1
changelog:
  - Fix CVE-2015-2328 (infinite recursion compiling pattern with recursive
    reference in a group with indefinite repeat) (bug #1330508)
  - Fix CVE-2015-8385 (buffer overflow caused by named forward reference to
    duplicate group number) (bug #1330508)
  - Fix CVE-2015-8386 (buffer overflow caused by lookbehind assertion)
    (bug #1330508)
  - Fix CVE-2015-3217 (stack overflow caused by mishandled group empty match)
    (bug #1330508)
  - Fix CVE-2015-5073 and CVE-2015-8388 (buffer overflow for forward reference
    within backward assertion with excess closing parenthesis) (bug #1330508)
  - Fix CVE-2015-8391 (inefficient posix character class syntax check)
    (bug #1330508)
  - Fix CVE-2016-3191 (workspace overflow for (*ACCEPT) with deeply nested
    parentheses) (bug #1330508)


author: Petr Pisar <ppisar@redhat.com> - 8.32-16
changelog:
  - Fix CVE-2015-2328 (infinite recursion compiling pattern with recursive
    reference in a group with indefinite repeat) (bug #1330509)
  - Fix CVE-2015-8385 (buffer overflow caused by named forward reference to
    duplicate group number) (bug #1330509)
  - Fix CVE-2015-8386 (buffer overflow caused by lookbehind assertion)
    (bug #1330509)
  - Fix CVE-2015-3217 (stack overflow caused by mishandled group empty match)
    (bug #1330509)
  - Fix CVE-2015-5073 and CVE-2015-8388 (buffer overflow for forward reference
    within backward assertion with excess closing parenthesis) (bug #1330509)
  - Fix CVE-2015-8391 (inefficient posix character class syntax check)
    (bug #1330509)
  - Fix CVE-2016-3191 (workspace overflow for (*ACCEPT) with deeply nested
    parentheses) (bug #1330509)


author: Petr Pisar <ppisar@redhat.com> - 8.32-17
changelog:
  - Let [:graph:], [:print:], and [:punct:] POSIX classes to handle Unicode
    characters in UCP mode to match Perl behavior (bug #1400267)
  - Fix matching Unicode ranges in JIT mode (bug #1402288)


author: Petr Pisar <ppisar@redhat.com> - 10.22-7
changelog:
  - Fix pcre2-config --libs-posix output (upstream bug #1924)
  - Fix a memory leak and a typo in a documentation (upstream bug #1973)
  - Fix a buffer overflow in partial match test for CRLF in an empty buffer
    (upstream bug #1975)
  - Fix a crash in pcre2test when displaying a wide character with a set locate
    (upstream bug #1976)


author: Petr Pisar <ppisar@redhat.com> - 10.22-8
changelog:
  - Fix a crash when doing an extended substitution for \p, \P, or \X
    (upstream bug #1977)
  - Fix a crash in substitution if starting offest was specified beyond the
    subject end (upstream bug #1992)


author: Petr Pisar <ppisar@redhat.com> - 10.23-2
changelog:
  - Handle memmory allocation failures in pcre2test tool
  - Fix a crash when finding a Unicode property for a character with a code
    point greater than 0x10ffff in UTF-32 library while UTF mode is disabled
    (upstream bug #2052)


author: Chris Feist <cfeist@redhat.com> - 0.9.115-22
changelog:
  - Fixed selection arrow when selecting new resource on resources page
  - Fixed permissions on pcsd.service file


author: Chris Feist <cfeist@redhat.com> - 0.9.115-24
changelog:
  - Added support for meta attributes in the GUI
  - Moved pcmk_host_list/map/check to optional arguments


author: Chris Feist <cfeist@redhat.com> - 0.9.115-26
changelog:
  - Fixed dialog text when removing a fence device
  - Show tool tips for optional fence agent arguments
  - Fix bad link on resource remove sprite
  - When removing a resource or fence device, show blank info
  - Fix resource management issues when pacemaker is not running
  - If first node is down, allow other nodes to show resource/stonith forms
  - Removing all nodes, now removes cluster configuration
  - Added ability to see nodes corosync/pacemaker/pcsd startup settings
  - Added extra colspan to improve long cluster name display
  - Added ability to configure IPv6 cluster
  - Added ability to set corosync transport in GUI
  - Added ability to set advanced cluster options on creation
  - Renamed last_node_standing to last_man_standing
  - On cluster creation color unauthorized nodes in orange
  - Added proper redirect when session variable times out
  - Fixed traceback when missing authentication tokens


author: Chris Feist <cfeist@redhat.com> - 0.9.115-28
changelog:
  - Remove leading/trailing white space in resource descriptions
  - Added tooltips for advanced cluster creation options
  - Fixed other 'Remove fence devices' button
  - When deleting a resource with pcsd use --force to prevent issues
  - Add proper tooltip for resource description info icon
  - Fix for long cluster names in menu
  - Do a better job of detecting when to send a redirect and when to notif
  - Don't silently ignore bad operation names


author: Chris Feist <cfeist@redhat.com> - 0.9.115-29
changelog:
  - Don't allow users to clone groups that have already been cloned
  - Fix order remove <resource> to remove resources from sets
  - Don't allow a user to force-start a group, clone or master/slave
  - When using debug-start use proper return code
  - Added cluster properties hover text
  - Fixed issue with stripping a nil value
  - HTML escape resource descriptions


author: Chris Feist <cfeist@redhat.com> - 0.9.115-30
changelog:
  - Fix traceback with bad arguments to location rules
  - Fix results code when attempting to remove an order that doesn't exist


author: Chris Feist <cfeist@redhat.com> - 0.9.115-32.el7_0.1
changelog:
  - Do pcs resource create --clone/--master/--group in one step instead of
    two to prevent race conditions
  - Resolves: rhbz#1184223


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-4
changelog:
  - Fixed displaying globally-unique clones in GUI
  - Added latest version of clufter package
  - Resolves: rhbz#1170150 rhbz#1133897


author: Chris Feist <cfeist@redhat.com> - 0.9.137-5
changelog:
  - Fixed error message when creating a user with the same name as a role
  - When a role is removed in the GUI the user is now automatically deleted
    if they aren't members of another role
  - Resolves: rhbz#1054491


author: Chris Feist <cfeist@redhat.com> - 0.9.137-6
changelog:
  - Allowed configuration of resource-discovery option on location constraint
    rules
  - Resolves: rhbz#1054491


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-7
changelog:
  - When a role is removed in the GUI the user is now automatically deleted
    if they aren't members of another role
  - Resolves: rhbz#1054491


author: Chris Feist <cfeist@redhat.cmo> 0.9.137-8
changelog:
  - Configuration of resource-discovery is now available on advanced location
    constraint rules
  - Resolves: rhbz#1054491


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-9
changelog:
  - Added acl enable and disable commands
  - Display whether acls are enabled in the 'pcs acl' output
  - Resolves: rhbz#1054491


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-11
changelog:
  - Stop cluster nodes in parallel and keep cluster quorate during pacemaker
    shutdown
  - Resolves: rhbz#1180506


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-13.el7_1.4
changelog:
  - Fixed session and cookies processing
  - Fixed command injection vulnerability
  - Resolves: rhbz#1253289 rhbz#1253293


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-5
changelog:
  - Fixed pcsd certificates synchronization
  - Multiple fixes in web UI
  - Resolves: #rhbz1158566 #rhbz1158577 #rhbz1189857


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-7
changelog:
  - Multiple fixes in web UI
  - Fixed crash on missing nagios agents metadata
  - Check user/group membership on each request
  - Print output of crm_resource in pcs resource cleanup
  - Resolves: #rhbz1158571 #rhbz1189857 #rhbz1235022 #rhbz1257369


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-8
changelog:
  - Fixes in loading cluster status for web UI
  - Fixed checking user/group membership
  - Fixed a typo in an error message
  - Resolves: #rhbz1158566 #rhbz1158569 #rhbz1158571


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-9
changelog:
  - Multiple fixes in web UI (dashboard, nodes, resources, fence devices)
  - Fixed an authentication issue in web UI
  - Port parameter of fence agents is now considered optional
  - Resolves: rhbz#1158566 rhbz#1188361 rhbz#1189857


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-10
changelog:
  - Web UI fixes
  - Added more detailed warnings for 'pcs stonith confirm'
  - Resolves: rhbz#1189857 rhbz#1245264


author: Chris Feist <cfeist@redhat.com> - 0.9.143-12
changelog:
  - Fixed issue managing resources that were clones and had the unmanaged
    meta attribute set under the clone/master
  - Resolves: rhbz#1268801


author: Chris Feist <cfeist@redhat.com> - 0.9.143-14
changelog:
  - Fixed remaining issues when managing resources/groups/etc. that were
    previously unmanaged
  - Resolves: rhbz#1268801


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: pcs_spec-use-upstream-img.patch
  -->  Remove TUV's branding logo
  - Added Patch: 99999-Use-SL-Favicon.patch
  -->  Remove TUV's branding logo
  - Added Source: pcs.ini
  -->  Config file for automated patch script


author: Ivan Devat <idevat@redhat.com> - 0.9.152-3
changelog:
  - Added support for pacemaker alerts
  - Added support for qdevice/qnetd provided by corosync
  - Fixed sbd calls on python3
  - Fixed bad request when resource removal takes longer than pcs expects
  - Added support for set expected votes on a live cluster
  - Added a wrapper for holding SELinux context when pcsd is started by systemd
  - Resolves: rhbz#1315371 rhbz#1158805 rhbz#1164402 rhbz#1346852 rhbz#1327739 rhbz#1348579 rhbz#1349465


author: Ivan Devat <idevat@redhat.com> - 0.9.152-4
changelog:
  - Added colocation constraint support in web UI
  - Fixed displaying cluster config when cib is provided as a file
  - Removed side effect on /etc/hosts during build
  - Recipient id is used as identifier in alarms
  - Improved quorum device commands syntax
  - Fixed pcs client for running on a remote node
  - Resolves: rhbz#1281364 rhbz#1269242 rhbz#1353607 rhbz#1315371 rhbz#1158805 rhbz#1289418


author: Ivan Devat <idevat@redhat.com> - 0.9.152-5
changelog:
  - Fixed traceback when stopping pcsd shortly after start
  - Fixed removing a dead node from a cluster
  - Added support for clufter's 'dist' parameter
  - Fixed filtering by property name in "pcs property show"
  - Fixed an error in web UI when removing resources takes a long time
  - Fixed occasional missing optional arguments of resources in web UI
  - Improved help for alerts
  - Fixed recreating a remote node resource
  - Fixed exceptions when authenticating cluster nodes
  - Fixed permissions for bash completion file
  - Resolves: rhbz#1348579 rhbz#1225423 rhbz#1357945 rhbz#1302010 rhbz#1301993 rhbz#1346852 rhbz#1231858 rhbz#1315371 rhbz#1303136 rhbz#1329472 rhbz#1359154 rhbz#1349465


author: Ivan Devat <idevat@redhat.com> - 0.9.152-6
changelog:
  - Fixed documentation regarding clufter
  - Added possibility to change order of resources in a group in web UI
  - Added support for unmanaged resources in web UI
  - Added support for booth (cluster ticket manager)
  - Resolves: rhbz#1357945 rhbz#1281391 rhbz#1264360 rhbz#1308514


author: Ivan Devat <idevat@redhat.com> - 0.9.152-7
changelog:
  - Added possibility to hide inactive resources in "pcs resource show" command
  - Fixed exceptions handling when waiting for response from user in command line
  - Fixed nonexisting resource detection in pcsd
  - Fixed SBD_WATCHDOG_TIMEOUT option value validation
  - Removed possibility to change SBD_PACEMAKER
  - Fixed exception when disabling service on systemd systems
  - Added automatic auto_tie_breaker quorum option set whenever it is needed for SBD to work
  - Fixed setting sbd watchdog in config
  - Fixed error handling when upgrading cib schema
  - Improved consistency of syntax 'pcs alert recipient add' command
  - Resolves: rhbz#1298585 rhbz#1354498 rhbz#1346852 rhbz#1164402 rhbz#1315371 rhbz#1366307


author: Ivan Devat <idevat@redhat.com> - 0.9.152-8
changelog:
  - Fixed error message in node maintenance/unmaintenance commands
  - Fixed missing line at the end of booth config 
  - Fixed documentation regarding booth
  - Fixed remove multiple booth resources with "--force" flag
  - Fixed cleanup of ip resource if it fails to create booth resource
  - Added bash completion for booth
  - Fixed display full booth configuration
  - Added ability to display booth config from remote node
  - Added support for ticket options during adding booth ticket
  - Fixed adding node to cluster when booth is not installed
  - Added restart command for booth
  - Fixed check if auto_tie_breaker is required when enabling sbd
  - Improved way of displaying status of unmanaged primitive resources in web UI
  - Resolves: rhbz#1247088 rhbz#1308514 rhbz#1164402 rhbz#1264360


author: Ivan Devat <idevat@redhat.com> - 0.9.152-9
changelog:
  - Added warning when stopping/destroying qdevice instance which is being used 
  - Fiexed removing qdevice from a cluster which uses sbd
  - Fixed re-running "pcs cluster node add" if it failed due to qdevice
  - Fixed documentation regarding booth
  - Added warning when using unknown booth ticket option
  - Added constraint ticket remove command
  - Fixed return code and message when displaying node utilization for nonexistent node
  - Fixed setting utilization attributes in web UI
  - Fixed support for node utilization on remote node
  - Fixed updating of selected group when displaying new resource dialog
  - Fixed group list when managing cluster running older pcs in web UI 
  - Fixed displaying unmanaged status for resources for older pcs in web UI
  - Fixed clone/master/unclone group/ungroup buttons for older pcs in web UI
  - Fixed node standby/unstandby for older pcs in web UI
  - Resolves: rhbz#1158805 rhbz#1308514 rhbz#1305049 rhbz#1158500 rhbz#1231858


author: Ivan Devat <idevat@redhat.com> - 0.9.152-10
changelog:
  - Fixed error when stopping qdevice if is not running
  - Fixed removing qdevice from a cluster
  - Fixed documentation regarding booth
  - Fixed return code when no matching ticket constraint found during remove
  - Resolves: rhbz#1158805 rhbz#1305049


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: pcs.ini
  -->  Config file for automated patch script
  - Added Patch: 99999-Use-SL-Favicon.patch
  -->  Remove TUV's branding logo


author: Ivan Devat <idevat@redhat.com> - 0.9.152-10.el7_3.1
changelog:
  - Fixed resolving resource agent name containing systemd service instance
  - Added posibility to push only diff of cib in 'cluster cib push'
  - Resolves: rhbz#1408476 rhbz#1404233


author: Ivan Devat <idevat@redhat.com> - 0.9.152-10.el7_3.3
changelog:
  - Provide a better error message in `pcs cluster cib-push` when the diff of the old and the new CIB is empty
  - Resolves: rhbz#1420757


author: Ivan Devat <idevat@redhat.com> - 0.9.156-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1409821 rhbz#1404233 rhbz#1408476 rhbz#1262001 rhbz#1389443 rhbz#1389941 rhbz#1315992 rhbz#1261116 rhbz#1389501 rhbz#1404229 rhbz#1284404 rhbz#1339355 rhbz#1347335 rhbz#1344712 rhbz#1395226 rhbz#1382004 rhbz#1378107 rhbz#1398562 rhbz#1402475 rhbz#1382597 rhbz#1389453 rhbz#1390071 rhbz#1390066 rhbz#1387670 rhbz#1292858 rhbz#1396462 rhbz#1419903 rhbz#1419661


author: Ivan Devat <idevat@redhat.com> - 0.9.157-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1362493 rhbz#1315627 rhbz#1378742 rhbz#1334429 rhbz#1402374 rhbz#1389941 rhbz#1303969 rhbz#1415080 rhbz#1328882 rhbz#1434972 rhbz#1413958


author: Ivan Devat <idevat@redhat.com> - 0.9.158-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1447702 rhbz#1176018 rhbz#1433016 rhbz#1303969 rhbz#1386114 rhbz#1386512 rhbz#1390609 rhbz#1165821 rhbz#1315992 rhbz#1373614 rhbz#1422667 rhbz#1254984


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.158-2
changelog:
  - Fixed crash of the `pcs cluster setup` command when the `--force` flag was used
  - Fixed crash of the `pcs cluster destroy --all` command when the cluster was not running
  - Fixed crash of the `pcs config restore` command when restoring pacemaker authkey
  - Fixed "Error: unable to get cib" when adding a node to a stopped cluster
  - Resolves: rhbz#1176018


author: Ivan Devat <idevat@redhat.com> - 0.9.158-3
changelog:
  - Added option to create not hardened cluster with the `pcs cluster setup` command using the `--no-hardened` flag
  - Added option to create not hardened cluster from web UI
  - Fixed a crash in the `pcs cluster node add-remote` command when an id conflict occurs
  - Fixed creating a new cluster from the web UI
  - `pcs cluster node add-guest` now works with the flag `--skipp-offline`
  - `pcs cluster node remove-guest` can be run again when the guest node was unreachable first time
  - Fixed "Error: Unable to read /etc/corosync/corosync.conf" when running `pcs resource create`([rhbz#1386114])
  - Binary data are stored in corosync authkey
  - Resolves: rhbz#1284404 rhbz#1373614 rhbz#1165821 rhbz#1176018 rhbz#1386114


author: Ivan Devat <idevat@redhat.com> - 0.9.158-4
changelog:
  - Added support for enable and disable in bundles
  - New clusters are created with corosync encryption disabled by default
  - Flag `--master` is backward compatible in `pcs resource create`
  - Resolves: rhbz#1165821 rhbz#1433016 rhbz#1458153


author: Ivan Devat <idevat@redhat.com> - 0.9.158-5
changelog:
  - `pcs cluster setup` uses existing pacemaker authkey if it exists
  - `pcs resource create` shows only warning when case of remote node is detected
  - Resolves: rhbz#1459503


author: Ivan Devat <idevat@redhat.com> - 0.9.158-6
changelog:
  - It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
  - Fixed timeout when cluster setup takes long time in web UI
  - It is now mandatory to specify container type in the "resource bundle create" command
  - Resolves: rhbz#1447910 rhbz#1284404


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Removed Source: HAM-logo.png
  -->  Remove TUV's branding logo
  - Added Source: pcs.ini
  -->  Config file for automated patch script
  - Added Patch: 99999-Use-SL-Favicon.patch
  -->  Remove TUV's branding logo
  - Added Source: HAM-logo.png
  -->  Add SL branding


author: Ivan Devat <idevat@redhat.com> - 0.9.158-6.el7_4.1
changelog:
  - `resurce update` no longer exits with an error when the `remote-node` meta attribute is set to the same value that it already has
  - Resolves: rhbz#1507399


author: Ivan Devat <idevat@redhat.com> - 0.9.160-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1499749 rhbz#1443647 rhbz#1432283 rhbz#1421702 rhbz#1443418 rhbz#1464781 rhbz#1435697 rhbz#1441673 rhbz#1420437 rhbz#1388783 rhbz#1463327 rhbz#1418199 rhbz#1341582 rhbz#1489682 rhbz#1491631 rhbz#1213946


author: Ivan Devat <idevat@redhat.com> - 0.9.161-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1499749 rhbz#1415197 rhbz#1501274 rhbz#1502715 rhbz#1230919 rhbz#1503110


author: Ondrej Mular <omular@redhat.com> - 0.9.162-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1389943 rhbz#1389209 rhbz#1506220 rhbz#1508351 rhbz#1415197 rhbz#1506864 rhbz#1367808 rhbz#1499749


author: Ivan Devat <idevat@redhat.com> - 0.9.162-2
changelog:
  - Changed snmp agent logfile path
  - It is now possible to set the `action` option of stonith devices in GUI by using force
  - Do not crash when `--wait` is used in `pcs stonith create`
  - A warning is displayed in `pcs status` and a stonith device detail in web UI  when a stonith device has its `method` option set to `cycle`
  - Resolves: rhbz#1367808 rhbz#1421702 rhbz#1522813 rhbz#1523378


author: Ivan Devat <idevat@redhat.com> - 0.9.162-3
changelog:
  - Pcs now properly exits with code 1 when an error occurs in pcs cluster node add-remote and pcs cluster node add-guest commands
  - Fixed a crash in the pcs booth sync command
  - Resolves: rhbz#1464781 rhbz#1527530


author: Ondrej Mular <omular@redhat.com> - 0.9.162-5
changelog:
  - Fixed `pcs cluster auth` in a cluster when not authenticated and using a non-default port
  - Fixed `pcs cluster auth` in a cluster when previously authenticated using a non-default port and reauthenticating using an implicit default port
  - Resolves: rhbz#1415197


author: Ondrej Mular <omular@redhat.com> - 0.9.162-5.el7_5.1
changelog:
  - Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure
  - Fixed CVE-2018-1079 pcs: Privilege escalation via authorized user malicious REST call
  - Fixed CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb
  - Resolves: rhbz#1557253


author: Ondrej Mular <omular@redhat.com> - 0.9.162-5.el7_5.2
changelog:
  - Fix instance attributes setting for fence agents `fence_compute` and `fence_evacuate`
  - Resolves: rhbz#1628070


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: pcs.ini
  -->  Config file for automated patch script
  - Added Patch: 99999-Use-SL-Favicon.patch
  -->  Remove TUV's branding logo
  - Added Source: HAM-logo.png
  -->  Add SL branding


author: Ivan Devat <idevat@redhat.com> - 0.9.165-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1572886 rhbz#1581150 rhbz#1579911 rhbz#1533849 rhbz#1557252 rhbz#1568353 rhbz#1574898 rhbz#1427273 rhbz#1475318 rhbz#1476862 rhbz#1535967 rhbz#1566382 rhbz#1588667 rhbz#1590533 rhbz#1403832 rhbz#1517333 rhbz#1529508


author: Ivan Devat <idevat@redhat.com> - 0.9.165-2
changelog:
  - Fixed validation for an unaccessible resource inside a bundle 
  - Fixed test of watchdog devices
  - Fixed command `pcs cluster node add-outside`
  - Fixed large key files distribution
  - Resolves: rhbz#1462248 rhbz#1475318 rhbz#1599758 rhbz#1600169


author: Ondrej Mular <omular@redhat.com> - 0.9.165-5
changelog:
  - Fixed `pcs stonith sbd watchdog test` error messages
  - Fixed avaliable watchdog devices listing
  - Resolves: rhbz#1475318


author: Ondrej Mular <omular@redhat.com> - 0.9.165-6
changelog:
  - Fix instance attributes setting for fence agents `fence_compute` and
    `fence_evacuate`
  - Resolves: rhbz#1623181


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Replaced Source: HAM-logo.png
  -->  Remove TUV's branding logo and use SL
  - Added Source: pcs.ini
  -->  Config file for automated patch script
  - Added Patch: 99999-Use-SL-Favicon.patch
  -->  Remove TUV's branding logo


author: Ivan Devat <idevat@redhat.com> - 0.9.165-6.el7_6.1
changelog:
  - `pcs` no longer spawns unnecessary processes for reading node tokens
  - Fixed a bug causing most of the messages not being logged into pcsd.log
  - Lower load caused by periodical config files syncing in pcsd by making it sync less frequently
  - Improve logging of periodical config files syncing in pcsd
  - Resolves: rhbz#1683959 rhbz#1683957 rhbz#1683958


author: Ivan Devat <idevat@redhat.com> - 0.9.167-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1649732 rhbz#1554302 rhbz#1447349 rhbz#1647640 rhbz#1594738 rhbz#1676956 rhbz#1474747 rhbz#1679534 rhbz#1642514 rhbz#1389140 rhbz#1522858 rhbz#1676944 rhbz#1638376 rhbz#1515021 rhbz#1598197


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Replaced Source: HAM-logo.png
  -->  Remove TUV's branding logo and use SL
  - Added Source: pcs.ini
  -->  Config file for automated patch script


author: Ivan Devat <idevat@redhat.com> - 0.9.167-3.el7_3.1
changelog:
  - Fixed id conflict with current bundle configuration in `pcs resource bundle reset`
  - Resolves: rhbz#1734687


author: Ivan Devat <idevat@redhat.com> - 0.9.168-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829


author: Ivan Devat <idevat@redhat.com> - 0.9.168-2
changelog:
  - Do not generate custom DH key if it was not requested by setting its custom length
  - Resolves: rhbz#1760434


author: Ivan Devat <idevat@redhat.com> - 0.9.168-3
changelog:
  - More fixes for the case when PATH environment variable is not set
  - Pcsd no longer sends Server HTTP header
  - Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
  - Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174


author: Ondrej Mular <omular@redhat.com> - 0.9.168-4
changelog:
  - Added command 'pcs resource relations'
  - Added command 'pcs resource safe-disable'
  - Resolves: rhbz#1770975 rhbz#1770973


author: Ivan Devat <idevat@redhat.com> - 0.9.169-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569


author: Ivan Devat <idevat@redhat.com> - 0.9.169-2
changelog:
  - Keep autogenerated IDs of set constraints reasonably short
  - Use fixed version of python module subprocess (package python2-subprocess32)
  - Resolves: rhbz#1820813 rhbz#1824206


author: Ivan Devat <idevat@redhat.com> - 0.9.169-3
changelog:
  - Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
  - Fixed race-condition when removing multiple resources from web UI
  - Resolves: rhbz#1833115 rhbz#1843593


author: Ivan Devat <idevat@redhat.com> - 0.9.169-3.el7_3.1
changelog:
  - Explicitly close libcurl connections to prevent stalled TCP connections in CLOSE-WAIT state
  - Added support for loading DH keys from a file
  - Resolves: rhbz#1870551 rhbz#1888479


author: Robert Relyea <rrelyea@redhat.com> - 1.8.8-7
changelog:
  - Don't hang if the daemon is blocked by systemd
  - Make sure we have a new enough systemd-devel to have the udev headers


author: Robert Relyea <rrelyea@redhat.com - 1.4.10-13
changelog:
  - Add support for missing readers (broadcom, cherry).
  - mark deprecated readers as unsupported and needing an update


author: Kalev Lember <kalevlember@gmail.com> - 1.4.5-1
changelog:
  - Update to 1.4.5
  - Switch to systemctl for restarting pcscd after upgrade now that it is using
    native systemd unit files.


author: Doug Ledford <dledford@redhat.com> - 1.2-13.el5
changelog:
  - Update to ofed 1.4.1 final bits
  - Rebuild against non-XRC libibverbs
  - Related: bz506097, bz506258


author: Doug Ledford <dledford@redhat.com> - 1.3.0-1
changelog:
  - Update to latest upstream release (1.2.3 -> 1.3.0)
  - Strip rocee related code out of upstream update
  - Add a buildrequires on libibumad because upstream needs it now
  - Fix lack of build on i686
  - Related: bz725016
  - Resolves: bz724896


author: Doug Ledford <dledford@redhat.com> - 1.3.0-2
changelog:
  - Update to latest upstream release
  - Initial import into Fedora
  - Remove runme from docs section (review item)
  - Improve description of package (review item)


author: Kyle McMartin <kmcmarti@redhat.com> - 2.0-4
changelog:
  - aarch64: add get_cycles implementation since <asm/timex.h> is no longer
    exported by the kernel.
  - Resolves: #1100043


author: Jarod Wilson <jarod@redhat.com> - 3.0-6
changelog:
  - Update to upstream 3.0-3.1.gb36a595 tarball for upstream fixes
  - Add in manpages
  - Related: rhbz#1365750
  - Resolves: rhbz#948476


author: Jarod Wilson <jarod@redhat.com> - 3.0-7
changelog:
  - Address a myriad more coverity/clang warnings
  - Add raw_ethernet_* man page symlinks
  - Related: rhbz#1273176
  - Related: rhbz#948476


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-271
changelog:
  - Sub-package Time-HiRes (bug #957048)
  - Remove bundled Getopt-Long, Locale-Maketext, and Sys-Syslog


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-272
changelog:
  - Make regular expression engine safe in a signal handler (bug #849703)
  - Remove bundled ExtUtils-ParseXS, and Time-HiRes


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-277
changelog:
  - Move CPANPLUS-Dist-Build files from perl-CPANPLUS
  - Move CPAN-Meta-Requirements files from CPAN-Meta
  - Add perl-Scalar-List-Utils to perl-core dependencies


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-278
changelog:
  - Update SystemTap scripts to recognize new phase__change marker and new probe
    arguments (bug #971094)
  - Update h2ph(1) documentation (bug #948538)
  - Update pod2html(1) documentation (bug #948538)
  - Do not double-own archlib directory (bug #894195)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-279
changelog:
  - Do not distribute File::Spec::VMS (bug #973713)
  - Remove bundled CPANPLUS-Dist-Build (bug #973041)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-284
changelog:
  - Use a macro to cover all 64-bit PowerPC architectures (bug #1061792)
  - Declare dependencies for cpan tool (bug #1122368)
  - Use stronger algorithm needed for FIPS in t/op/crypt.t (bug #1084796)
  - Make *DBM_File desctructors thread-safe (bug #1107542)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-286
changelog:
  - Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
  - Rebuild with corrected binutils to fix systemtap support (bug #1238472)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-288
changelog:
  - Fix CRLF conversion in ASCII FTP upload (bug #1263734)
  - Don't leak the temp utf8 copy of namepv (bug #1063330)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.16.3-291
changelog:
  - Backported and sub-packaged libraries historically supplied with Perl 4
    into perl-Perl4-CoreLibs


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-293
changelog:
  - Add SSL support to Net::SMTP (bug #1557574)
  - Do not overload ".." in Math::BigInt (bug #1497734)
  - Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: 0001-Fix-Time-Local-tests.patch
  -->  Fix date test, BZ#1751381
  - Added Source: perl.ini
  -->  Config file for automated patch script


author: Paul Howarth <paul@city-fan.org> - 1.11-1
changelog:
  - Update to 1.11
    - Add new keywords for 5.16: __SUB__ and evalbytes
  - Use DESTDIR rather than PERL_INSTALL_ROOT


author: Paul Howarth <paul@city-fan.org> - 1.12-1
changelog:
  - Update to 1.12
    - Add new keyword fc (Unicode casefolding) for 5.16
    - Added diag before each big t/11keywords.t loop
  - This release by RURBAN -> update source URL
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 1.13-1
changelog:
  - Update to 1.13
    - Removed diag before each big t/11keywords.t loop
    - Added lots of suggested keywords from CPAN RT#62382
    - Moved exp from @Barewords to @Functions
    - Added $^CHILD_ERROR_NATIVE $^GLOBAL_PHASE $^LAST_FH $^MATCH $^PREMATCH
      $^POSTMATCH $^UTF8CACHE $^WIN32_SLOPPY_STAT to @Scalars
    - Added English names for %!, @F (perlrun) and @ARG for @_
    - Added %+ %- and $LAST_SUBMATCH_RESULT
  - BR: perl(Test::Pod)
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 2.05.03-3
changelog:
  - Don't BR: perl(LWP::Simple) for optional tests when bootstrapping; this is a
    cleaner fix than nobbling perl-URI's runtime dependencies


author: Paul Howarth <paul@city-fan.org> - 20081208-8
changelog:
  - Clean up for modern rpmbuild:
    - Drop BuildRoot specification
    - Drop %clean section
    - Don't bother cleaning buildroot in %install section
    - Make %files list more explicit
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Use %{_fixperms} macro rather than our own chmod incantation
    - Replace provides filter with version that works with rpm ≥ 4.9
  - Include tests as %doc since they're referred to by examples/README


author: Paul Howarth <paul@city-fan.org> - 20120719-1
changelog:
  - Update to 20120719:
    - Support using data from RangeMessage.xml, so you can use the latest data
      from ISBN without updating this module
  - Fix shellbang and permissions of make_data.pl script to placate rpmlint
  - Filter dependency on perl(LWP::Simple), required only by make_data.pl script,
    not in normal operation
  - Don't need to remove empty directories from the buildroot
  - BR: perl(Carp), perl(File::Spec::Functions) and perl(Test::Manifest) ≥ 1.14
  - BR: at least version 1.00 of perl(Test::Pod)


author: Paul Howarth <paul@city-fan.org> - 20120719.001-1
changelog:
  - Update to 20120719.001:
    - Require Test::More ≥ 0.95 for subtest support
    - No code or feature changes
  - Bump Test::Manifest version requirement to 1.21
  - Bump Test::More version requirement to 0.95
  - Drop redundant buildreq perl(Test::Prereq)


author: Paul Howarth <paul@city-fan.org> - 0.17-1
changelog:
  - Update to 0.17:
    - Eliminate extra whitespace when release data is not defined (CPAN RT#67441)
    - Require version.pm 0.79, which introduced the $LAX regexp (CPAN RT#67613)
    - Add the option to sort groups


author: Paul Howarth <paul@city-fan.org> - 0.18-1
changelog:
  - Update to 0.18:
    - Expand changes_file_ok() to accept arguments so that a specific version may
      be checked
    - Add $VERSION to Test::CPAN::Changes so it plays nice with the toolchain
      e.g. Module::Install::AuthorRequires


author: Paul Howarth <paul@city-fan.org> - 0.19-1
changelog:
  - Update to 0.19:
    - Test::CPAN::Changes now accepts version entries ending in '-TRIAL'
      (CPAN RT#76882)
    - releases() in CPAN::Changes also accepts entries ending in '-TRIAL'
  - Don't need to remove empty directories from buildroot
  - Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 0.20-1
changelog:
  - Update to 0.20:
    - 'delete_empty_groups' shouldn't erronously delete default group
    - Add tidy_changelog utility script
    - Minor pod fix
  - Bump Test::More version requirement to 0.96 (CPAN RT#84994)


author: Paul Howarth <paul@city-fan.org> - 0.008-7
changelog:
  - Run the extra tests in a separate test run, and only when not bootstrapping
  - Don't BR: perl(Test::Spelling) with RHEL ≥ 7 as we don't have the other
    dependencies needed do the spell check test


author: Paul Howarth <paul@city-fan.org> - 0.008-12
changelog:
  - Never BR: perl(Test::Version) for EL builds as perl(version) is too old
    prior to EL-7 and this package is included in RHEL ≥ 7 but Test::Version
    is only in EPEL


author: Petr Pisar <ppisar@redhat.com> 1.22-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Remove BuildRoot and defattr code from spec
  - Do not export private module DB


author: Paul Howarth <paul@city-fan.org> - 0.08-12
changelog:
  - BR:/R: perl(Carp)
  - BR: perl(base)
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Don't need to remove empty directories from the buildroot
  - Don't use macros for commands
  - Make %files list more explicit
  - Fix typos in %description


author: Paul Howarth <paul@city-fan.org> - 0.19-1
changelog:
  - Update to 0.19 (no functional changes)
  - This release by DOY -> update source URL
  - BR: perl(Exporter)
  - Don't need to remove empty directories from buildroot


author: Paul Howarth <paul@city-fan.org> - 0.19-7
changelog:
  - New upstream re-release of 0.19 by DROLSKY
    - The load_class() subroutine now returns the class name on success
      (CPAN RT#76931)
    - Exceptions and errors from Class::Load no longer contain references to line
      numbers in Class::Load or Module::Runtime; this applies to exceptions
      thrown by load_class, load_first_existing_class, and load_optional_class,
      as well as the error returned by try_load_class
    - Exceptions are now croaked properly so they appear to come from the calling
      code, not from an internal subroutine; this makes the exceptions look more
      like the ones thrown by Perl's require (CPAN RT#68663)
  - This release by DROLSKY -> update source URL
  - BR: perl(Scalar::Util) for the module
  - BR: perl(lib) for the test suite
  - Drop buildreqs perl(strict) and perl(warnings) - not dual-lived


author: Paul Howarth <paul@city-fan.org> - 0.04-1
changelog:
  - Update to 0.04:
    - Some small test changes for the latest Module::Implementation and
      Class::Load
  - Bump Class::Load version requirement to 0.15
  - BR: perl(constant), perl(Module::Implementation) ≥ 0.04, 
    perl(Test::Requires), perl(Test::Without::Module) and perl(version) for test 
    suite


author: Paul Howarth <paul@city-fan.org> - 0.06-1
changelog:
  - Update to 0.06:
    - Require Class::Load 0.20 in the code, not just the distro metadata
      (CPAN RT#80002)
    - Weird classes with either an ISA or VERSION constant would cause the XS to
      blow up badly (CPAN RT#79998)
    - Fixed some broken logic that lead to a segfault from the
      014-weird-constants.t test on some Perls (CPAN RT#80059)
  - Bump perl(Class::Load) version requirement to 0.20
  - Drop explicit requirement for perl(Class::Load), no longer needed


author: Paul Howarth <paul@city-fan.org> - 2.055-1
changelog:
  - Update to 2.055
    - Fix misuse of magic in API (CPAN RT#78080)
  - Drop redundant explicit requires for perl(Exporter) and perl(File::Temp)


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - Compress::Raw::Bzip2 needs to use PERL_NO_GET_CONTEXT (CPAN RT#80318)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79811)
    - Update to ppport.h that includes SvPV_nomg_nolen (CPAN RT#78080)


author: Paul Howarth <paul@city-fan.org> - 2.055-1
changelog:
  - Update to 2.055
    - Fix misuse of magic in API (CPAN RT#78079)
    - Include zlib 1.2.7 source
  - BR: perl(Exporter) and perl(lib)
  - BR: perl(Test::NoWarnings) except when bootstrapping
  - Drop redundant explicit require for perl(Exporter)
  - Drop BR: perl(bytes), not dual-lived


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - Compress::Raw::Zlib needs to use PERL_NO_GET_CONTEXT (CPAN RT#80319)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79812)
    - Update to ppport.h that includes SvPV_nomg_nolen (CPAN RT#78079)


author: Paul Howarth <paul@city-fan.org> - 2.061-1
changelog:
  - Update to 2.061
    - Include zlib 1.2.8 source
    - Typo fix (CPAN RT#85431)
    - Silence compiler warning by making 2nd parameter to DispStream a const char*


author: Paul Howarth <paul@city-fan.org> - 2.14-3
changelog:
  - Reinstate compatibility with older distributions like EL-5
  - Run release tests as well as the regular test suite
  - BR: perl(Test::CPAN::Meta) and perl(Test::More)
  - Only drop perl(Test::MinimumVersion) as a buildreq when bootstrapping, and
    add a comment about why that's needed
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Don't use macros for commands
  - Make %files list more explicit
  - No longer need to fix permissions of Tiny.pm
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 2.29-10
changelog:
  - BR: perl(bytes), perl(constant), perl(Digest::MD5) - required by module
  - BR: perl(Crypt::Blowfish), perl(Crypt::Blowfish_PP), perl(Crypt::DES),
    perl(Crypt::Rijndael) for improved test coverage, except when bootstrapping


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.29-11
changelog:
  - Do not build-require Crypt::Blowfish, Crypt::Blowfish_PP, and Crypt::Rijndael
    on RHEL >= 7
  - Resolves: rhbz#822812


author: Paul Howarth <paul@city-fan.org> - 2.33-1
changelog:
  - Update to 2.33
    - Fixes to regular expressions to avoid rare failures to correctly strip
      padding in decoded messages
    - Add padding type = "none"
    - Fix "Taint checks are turned on and your key is tainted" error when
      autogenerating salt and IV
    - Fix minor bugs CPAN RT#83175 and CPAN RT#86455
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Use DESTDIR rather than PERL_INSTALL_ROOT


author: Petr Šabata <psabata@redhat.com> - 1.3-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
  - Spec cleanup, fix dependencies


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.3-16
changelog:
  - Add license Beerware
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Don't use macros for commands
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.64-3
changelog:
  - Remove circular BR: perl(Net::SSL) provided by this package
  - Placate rpmlint regarding file permissions
  - Don't need to remove empty directories from the buildroot


author: Marcela Mašláňová <mmaslano@redhat.com> 1.34-1
changelog:
  - update by Fedora::App::MaintainerTools 0.006
  - updating to latest GA CPAN version (1.34)
  - replaced old BR on perl(Test::Simple) with Test::More
  - added a new req on perl(DBI) (version 1.21)


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.135.07-240
changelog:
  - update the version to override the module from perl.srpm
  - bump release to override sub-package from perl.spec


author: Paul Howarth <paul@city-fan.org> - 0.107-3
changelog:
  - package LICENSE file
  - run test suite even when bootstrapping, as it should still pass
  - run release tests too
  - enhance %description so it makes sense
  - BR: perl(Test::More)


author: Paul Howarth <paul@city-fan.org> - 0.107-4
changelog:
  - drop -tests subpackage (general lack of interest in this), but include
    them as documentation for the main package
  - drop redundant %{?perl_default_filter}
  - don't use macros for commands
  - can't find any dependency cycle so drop %{?perl_bootstrap} usage
  - drop ExtUtils::MakeMaker version requirement to 6.30, actual working minimum


author: Marcela Mašláňová <mmaslano@redhat.com> 0.33-1
changelog:
  - Specfile autogenerated by cpanspec 1.79.
  - apply patch to automatically create alias -> DP on Data::Peek


author: Iain Arnell <iarnell@gmail.com> 2:0.70-1
changelog:
  - Unbundle DateTime::TimeZone and DateTime::Locale
  - Bump epoch and revert to upstream versioning
  - Specfile regenerated by cpanspec 1.78.
  - Update description


author: Petr Pisar <ppisar@redhat.com> - 2:1.04-6
changelog:
  - Restore object after failed truncate() call (bug #1095111)
  - Add 2015-06-30 and 2016-12-31 leap seconds (bug #1353509)


author: Petr Pisar <ppisar@redhat.com> - 1.70-1
changelog:
  - 1.70 bump (bug #1101251)
  - Regenerate Perl code from timezone sources (bug #1101251)
  - Update time zone data to Olson 2017b (bug #1101251)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.11-12
changelog:
  - Update dependencies
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Don't use macros for commands
  - Don't need to remove empty directories from the buildroot


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.03-20
changelog:
  - Remove BuildRoot definition.
  - Remove BuildRoot cleaning.
  - Replace PERL_INSTALL_ROOT with DESTDIR.
  - Remove cleaning empty directories.
  - Remove %defattr.
  - Do not export private library (Leak.so()).


author: Paul Howarth <paul@city-fan.org> - 1:2.08-8
changelog:
  - Spec clean-up:
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - BR: perl(Carp)
    - BR: perl(Test::Pod) and perl(Test::Pod::Coverage) if not bootstrapping
    - Use %{_fixperms} macro instead of our own chmod incantation
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.06-1
changelog:
  - Update to 0.06
    - Add optional runtime conflict warnings
    - Require 5.8.1, clean up a few things and add a few more tests
    - Use Exporter instead of Sub::Exporter
  - Update patch for building with Test::More < 0.88
  - Drop patch for building with old ExtUtils::MakeMaker, no longer needed
  - Don't need to remove empty directories from the buildroot


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.898-2
changelog:
  - Specify all dependencies
  - Drop %defattr, remove %clean section
  - Don't need to remove empty directories from the buildroot
  - Use DESTDIR rather than PERL_INSTALL_ROOT


author: Petr Pisar <ppisar@redhat.com> 2.47-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Make devel sub-package architecture specific due to file location


author: Petr Pisar <ppisar@redhat.com> - 2.51-6
changelog:
  - Rebuild against "file" package fixed by Jan Kaluza to correct run-time
    dependencies (bug #1048910)


author: Paul Howarth <paul@city-fan.org> - 1:0.17020-1
changelog:
  - Update to 0.17020
    - Change to Shlomi Fish's new E-mail and web address
    - Clarify the licence of lib/Error/Simple.pm (CPAN RT#81277)
    - Correct typos (CPAN RT#85023)
  - Don't use macros for commands
  - Don't need to remove empty directories from the buildroot
  - Make %files list more explicit
  - Drop %defattr, redundant since rpm 4.4
  - Avoid provides/requires from examples


author: Steven Pritchard <steve@kspei.com> 1.32-1
changelog:
  - Update to 1.32.
  - License is now Artistic 2.0.
  - Switch back to building with ExtUtils::MakeMaker/Makefile.PL.  (Dave
    Rolsky needs to make up his mind.)
  - Add README to docs.


author: Paul Howarth <paul@city-fan.org> - 1.37-1
changelog:
  - Update to 1.37
    - I now recommend you use Throwable instead of this module; it has a nicer,
      more modern interface
    - Fixed warning from basic.t on 5.17.x (CPAN RT#79121)
    - 1.33 did not declare any prereqs (CPAN RT#79677)
    - Require Class::Data::Inheritable ≥ 0.02
    - Fixed some stupidity in the tests that appears to have been highlighted by
      recent changes to Devel::StackTrace (CPAN RT#81245)
    - Fixed various bugs and confusion in the docs
  - Don't need to remove empty directories from the buildroot
  - Don't use macros for commands
  - Make the %files list more explicit
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Drop release testing (now more extensive and would fail anyway)
  - Drop support for distributions older than EL-6 (test suite would need
    patching for EL-5 anyway)


author: Petr Šabata <contyk@redhat.com> - 2.46-1
changelog:
  - 2.46 bump
  - Specify all dependencies
  - Drop command macros
  - Modernize the spec and clean whitespace


author: Paul Howarth <paul@city-fan.org> - 3.20-10
changelog:
  - Clean up spec file for modern rpmbuild:
    - Drop BuildRoot definition
    - Drop %defattr
    - Drop %clean section
    - Drop cleaning of buildroot in %install
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Use %{_fixperms} macro rather than our own chmod incantation
    - Don't use macros for commands
  - Break build dependency loop by only using perl(Test::Pod) if we're not
    bootstrapping
  - BR: perl(Test::More)


author: Paul Howarth <paul@city-fan.org> - 1:5.02-4
changelog:
  - Don't BR: perl(Test::LeakTrace) when bootstrapping
  - Don't use macros for commands
  - Don't need to remove empty directories from the buildroot
  - Drop explicit provides for perl(HTML::Tree) now that CPAN and RPM versions
    are back in sync


author: Petr Pisar <ppisar@redhat.com> 6.00-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Remove BuildRoot stuff
  - Conflicts with perl-libwww-perl-5* and older


author: Petr Pisar <ppisar@redhat.com> - 0.033-2
changelog:
  - Croak on failed write into a file (bug #1031096)
  - Do not use already existing temporary files (bug #1031096)


author: Paul Howarth <paul@city-fan.org> - 0.24-1
changelog:
  - Update to 0.24
    - Add Build.PL
    - Better support for debugger
    - Makefile.PL fixed
    - New test added
  - BR: perl(Carp)
  - Include demo files as %doc
  - Fix line endings on documentation
  - Upstream release is now a tarball rather than a zipfile
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Don't use macros for commands
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 2.055-1
changelog:
  - Update to 2.055
    - FAQ: added a few paragraphs on how to deal with pbzip2 files
      (CPAN RT#77743)
    - Compress::Zip: speed up compress, uncompress, memGzip and memGunzip
      (CPAN RT#77350)
  - BR: perl(lib)
  - Drop BR: perl(Test::Builder) and perl(Test::More) as they're bundled
  - Drop BR: perl(Config), perl(Fcntl), perl(File::Copy), perl(File::Glob),
    perl(POSIX) and perl(Symbol) as they're not dual-lived
  - Drop redundant explicit require for perl(Exporter)
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - IO::Compress::Zip
      - Allow member name and Zip Comment to be "0"
    - IO::Compress::Base::Common
      - Remove "-r" test - the file open will catch this
      - IO::Compress::Base::Common returned that it could not read readable files
        in NFS (CPAN RT#80855)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79820)
    - General performance improvements
    - Fix failing 01misc.t subtest introduced in 2.057 (CPAN RT#81119)
  - Explicitly install to 'perl' directories


author: Paul Howarth <paul@city-fan.org> - 2.059-1
changelog:
  - Update to 2.059
    - IO::Compress::Base
      - Added "Encode" option (fixes the encoding half of CPAN RT#42656)


author: Paul Howarth <paul@city-fan.org> - 2.060-1
changelog:
  - Update to 2.060
    - Updated POD
      - CPAN RT#82138: Example code not clear - gunzip() takes filenames!
    - IO::Compress::Base
      - Remove the flush call when opening a filehandle


author: Paul Howarth <paul@city-fan.org> - 2.061-1
changelog:
  - Update to 2.061
    - zipdetails (1.06)
      - Get it to cope with Android 'zipalign' non-standard extra fields; these
        are used to make sure that a non-compressed member starts on a 4 byte
        boundary
    - unzip example with IO::Uncompress::Unzip (CPAN RT#84647)


author: Paul Howarth <paul@city-fan.org> - 2.57-4
changelog:
  - s/PERL_INSTALL_ROOT/DESTDIR/
  - re-enable the test suite
  - BR: perl(Test::More), perl(Test::Pod), perl(Test::Pod::Coverage)


author: Paul Howarth <paul@city-fan.org> - 2.66-1
changelog:
  - Update to 2.66
    - Fix inet_pton/inet_ntop import warnings (CPAN RT#55901)
    - Fix listening on :: or 0.0.0.0 (CPAN RT#54656)
    - Add test listen_port_only.t
    - Solved problems with multihomed and family order (CPAN RT#57676)
    - Fix select timeout issue in t/io_multihomed6.t
    - Fix t/io_multihomed6.t on systems with broken getaddrinfo() (CPAN RT#58198)
    - Made the "use Socket" call import constants selectively, and not rely on
      @EXPORT's whims


author: Paul Howarth <paul@city-fan.org> - 2.69-1
changelog:
  - Update to 2.69:
    - Solved symbol clashes in t/io_multihomed6.t (CPAN RT#72769)
    - Fix the imports on t/io_multihomed6.t (CPAN RT#72769)
    - Update the link to the repository in Build.PL
  - BR: perl(IO::Socket)
  - BR: perl(Socket)
  - Use %{_fixperms} macro instead of our own chmod incantation


author: Paul Howarth <paul@city-fan.org> - 1.87-1
changelog:
  - Update to 1.87
    - Complain if given SSL_(key|cert|ca)_(file|path) do not exist or if they are
      not readable (CPAN RT#84829)
    - Fix use of SSL_key|SSL_file objects instead of files, broken with 1.83


author: Paul Howarth <paul@city-fan.org> - 1.88-1
changelog:
  - Update to 1.88
    - Consider a value of '' the same as undef for SSL_ca_(path|file), SSL_key*
      and SSL_cert* - some apps like Net::LDAP use it that way


author: Paul Howarth <paul@city-fan.org> - 1.89-1
changelog:
  - Update to 1.89
    - If IO::Socket::IP is used it should be at least version 0.20; otherwise we
      get problems with HTTP::Daemon::SSL and maybe others (CPAN RT#81932)
    - Spelling corrections


author: Paul Howarth <paul@city-fan.org> - 1.90-1
changelog:
  - Update to 1.90
    - Support more digests, especially SHA-2 (CPAN RT#85290)
    - Added support for easy SSL interception (man in the middle) based on ideas
      found in mojo-mitm proxy
    - Make 1.46 the minimal required version for Net::SSLeay, because it
      introduced lots of useful functions
  - BR:/R: openssl ≥ 0.9.7e for P_ASN1_TIME_(get,set)_isotime in Net::SSLeay


author: Paul Howarth <paul@city-fan.org> - 1.91-1
changelog:
  - Update to 1.91
    - Added IO::Socket::SSL::Utils for easier manipulation of certificates and
      keys
    - Moved SSL interception into IO::Socket::SSL::Intercept and simplified it
      using IO::Socket::SSL::Utils
    - Enhance meta information in Makefile.PL
  - Bump openssl version requirement to 0.9.8a
  - Need at least version 6.58 of ExtUtils::MakeMaker (CPAN RT#85739)


author: Paul Howarth <paul@city-fan.org> - 1.92-1
changelog:
  - Update to 1.92
    - Intercept: use sha1-fingerprint of original cert for id into cache unless
      otherwise given
    - Fix pod error in IO::Socket::SSL::Utils (CPAN RT#85733)


author: Paul Howarth <paul@city-fan.org> - 1.93-1
changelog:
  - Update to 1.93
    - Need at least OpenSSL version 0.9.8 now, since last 0.9.7 was released 6
      years ago; remove code to work around older releases
    - Changed AUTHOR in Makefile.PL from array back to string, because the array
      feature is not available in MakeMaker shipped with 5.8.9 (CPAN RT#85739)
  - Set openssl version requirement to 0.9.8
  - Drop ExtUtils::MakeMaker version requirement back to 6.46


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Makefile.PL reported wrong version of openssl if Net::SSLeay was not
      installed, instead of reporting a missing dependency of Net::SSLeay


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-4
changelog:
  - Respect OpenSSL default ciphers and protocol versions (bug #1127322)
  - Fix typo in Utils.pm (bug #1097710)


author: Steven Pritchard <steve@kspei.com> 1.10-1
changelog:
  - Update to 1.10.
  - Use fixperms macro instead of our own chmod incantation.
  - Update Source0 URL.
  - BR Test::More.


author: Paul Howarth <paul@city-fan.org> 2.110-17
changelog:
  - spec clean-up:
    - nobody else likes macros for commands
    - use DESTDIR rather than PERL_INSTALL_ROOT
    - add buildreqs for core perl modules, which may be dual-lived


author: Paul Howarth <paul@city-fan.org> 2.110-18
changelog:
  - don't build-require modules that this package provides (problem stupidly
    introduced in previous release)
  - don't need to remove empty directories from buildroot
  - drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 2.27200-241
changelog:
  - BR: perl(base), perl(constant) and perl(lib)
  - Install to vendor directories
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot


author: Petr Šabata <contyk@redhat.com> - 2.27200-242
changelog:
  - Correct the URL
  - Add a few missing buildtime dependencies
  - Drop Getopt::Long dep; json_pp isn't tested


author: Paul Howarth <paul@city-fan.org> - 2.27202-1
changelog:
  - Update to 2.27202
    - Fix test failures due to hash iterator randomization in perl 5.17.6 onwards
      (CPAN RT#83421)


author: Petr Pisar <ppisar@redhat.com> - 1:0.56-3
changelog:
  - Do not set SSL ciphers at all by default (bug #1091316)
  - Pass actual length to syswrite() instead of default 1500 B (bug #1104243)


author: Petr Pisar <ppisar@redhat.com> 6.01-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Remove BuildRoot stuff
  - Conflicts with perl-libwww-perl 5* and older


author: Paul Howarth <paul@city-fan.org> - 0.33-1
changelog:
  - Update to 0.33
    - Updated can_xs to fix a bug in it
  - Reinstate compatibility with old distributions like EL-5
  - Drop Test::More version requirement to 0.42
  - BR: perl(ExtUtils::MakeMaker)
  - BR: perl(Test::LeakTrace) except on EL-4/EL-5 where it's not available
  - BR: perl(Pod::Simple), perl(Test::CPAN::Meta), perl(Test::MinimumVersion)
    (if we're not bootstrapping) and perl(Test::Pod), and run the developer tests
    too
  - Don't use macros for commands
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Make %files list more specific
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 0.33-7
changelog:
  - BR:/R: perl(Carp)
  - BR: perl(constant), perl(Exporter) and perl(ExtUtils::CBuilder)
  - Add commentary regarding non-use of Test::LeakTrace for EL-7 builds
  - Use Test::LeakTrace for EL-5 builds
  - Drop support for EL-4 builds since it was EOL-ed ages ago
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Remove more command macros


author: Petr Šabata <contyk@redhat.com> - 0.39-7.1
changelog:
  - Add a few more missing build-time deps
  - Correct the licence tag
  - Modernize the spec a bit
  - Package the example scripts in their directory


author: Paul Howarth <paul@city-fan.org> - 2.8.0-3
changelog:
  - Fix broken POD (CPAN RT#86060)
  - Work around test suite failures with Net::DNS ≥ 0.68 (CPAN RT#78214)


author: Paul Howarth <paul@city-fan.org> - 2.08-1
changelog:
  - Update to 2.08 (#709697)
    - Respect errors on closing a Mail::Mailer::smtp/::smtps connection
    - Mail::Internet should accept Net::SMTP::SSL as well (CPAN RT#68590)
    - Document that Mail::Mailer::smtps needs Authen::SASL
  - Use patch rather than iconv to convert docs to UTF8 encoding
  - Nobody else likes macros for commands


author: Paul Howarth <paul@city-fan.org> - 2.08-3
changelog:
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - One buildreq per line for readability
  - Add buildreqs for core perl modules, which might be dual-lived


author: Paul Howarth <paul@city-fan.org> - 2.09-1
changelog:
  - Update to 2.09
    - Remove dependency to Test::Pod by moving 99pod.t from t/ to xt/
      (CPAN RT#69918)
  - BR: perl(Net::Domain) ≥ 1.05 and perl(Net::SMTP) ≥ 1.03
  - Explicitly run xt/ tests


author: Paul Howarth <paul@city-fan.org> 2.10-1
changelog:
  - Update to 2.10
    - Mail::Mailer::smtp set from address twice (CPAN RT#77161)
    - Mail::Mailer::smtps did not support the From option (CPAN RT#77161)
    - Mail::Util::mailaddress has now an optional parameter to set the returned
      value explicitly (CPAN #75975)
  - BR: perl(base)
  - Drop BR: perl(Config) and perl(POSIX), not dual-lived
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> 2.12-1
changelog:
  - Update to 2.12
    - Default for Mail::Header::new(Modify) is 'false', not 'true'
      (CPAN RT#79985)
    - Mail::Address take username with rindex(), a bit better than index() but
      still poor (CPAN RT#82056)
    - Check for bad folding of header lines (CPAN RT#79993)
    - Add a note about better to avoid Mail::Address->name() (CPAN RT#81459)
  - Drop UTF8 patch, no longer needed


author: Paul Howarth <paul@city-fan.org> - 0.03-3
changelog:
  - Incorporate feedback from package review (#788258)
    - Correct License tag, which should be Artistic 2.0
    - BR: perl(lib) for test suite
    - Explicitly require perl(Carp), not automatically detected


author: Paul Howarth <paul@city-fan.org> - 0.04-1
changelog:
  - Update to 0.04
    - This module no longer installs an _implementation() subroutine in callers;
      instead, you can call Module::Implementation::implementation_for($package)
      to get the implementation used for a given package
  - Update patch for building with old Test::More versions


author: Paul Howarth <paul@city-fan.org> - 0.05-1
changelog:
  - Update to 0.05
    - Make Test::Taint an optional dependency; it requires XS, and requiring a
      compiler for Module::Implementation defeats its purpose (CPAN RT#74817)
  - BR: perl(Test::Requires)
  - Update patch for building with old Test::More versions


author: Paul Howarth <paul@city-fan.org> - 0.06-3
changelog:
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from buildroot
  - Add commentary regarding conditionalized buildreqs


author: Steven Pritchard <steve@kspei.com> 1.00-1
changelog:
  - Update to 1.00.
  - Update build dependencies:
    + Archive::Tar >= 1.44
    + ExtUtils::Install >= 1.52
    + ExtUtils::ParseXS >= 2.19
    + JSON >= 2.14
    + LWP::UserAgent >= 5.812
    + Module::Build >= 0.29
    + Module::CoreList >= 2.17
    + Module::ScanDeps >= 0.89
  - Update description (pulled from module).


author: Paul Howarth <paul@city-fan.org> - 1.000012-1
changelog:
  - Update to 1.000012
    - Improved package detection heuristics
    - Fix ->contains_pod (CPAN RT#84932)
    - Fix detection of pod after __END__ (CPAN RT#79656)
  - This release by ETHER -> update source URL
  - Package new upstream README file


author: Paul Howarth <paul@city-fan.org> - 1.000014-1
changelog:
  - Update to 1.000014
    - Fix reliance on recent Test::Builder
    - Make tests perl 5.6 compatible
  - This release by BOBTFISH -> update source URL


author: Paul Howarth <paul@city-fan.org> - 1.000016-1
changelog:
  - Update to 1.000016
    - Re-release to fix prereqs and other metadata
  - This release by ETHER -> update source URL
  - Specify all dependencies


author: Paul Howarth <paul@city-fan.org> - 1.000018-1
changelog:
  - Update to 1.000018
    - Re-release of de-tainting fix without unstated non-core test dependencies
  - Drop BR: perl(Test::Fatal)


author: Paul Howarth <paul@city-fan.org> - 0.68-5
changelog:
  - BR: perl(constant), perl(Data::Dumper) and perl(lib)
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 0.69-1
changelog:
  - Update to 0.69
    - Support for gpg under these alternate names: gpg gpg2 gnupg gnupg2
  - This release by AUDREYT -> update source URL
  - BR:/R: perl(Text::Diff)
  - Include Andreas Koenig's GPG key in the SRPM and import it in %prep so
    that we don't need to get it from a keyserver in %check


author: Paul Howarth <paul@city-fan.org> - 0.73-1
changelog:
  - Update to 0.73
    - Constrain the user-specified digest name to /^\w+\d+$/
    - Only allow loading Digest::* from absolute paths in @INC (CVE-2013-2145)


author: Paul Howarth <paul@city-fan.org> - 1.49-1
changelog:
  - update to 1.49
    - fixed problem where on some platforms test t/local/07_tcpecho.t would bail
      out if it could not bind port 1212; it now tries a number of ports to bind
      to until successful
    - improvements to unsigned casting
    - improvements to Net::SSLeay::read to make it easier to use with
      non-blocking IO: it modifies Net::SSLeay::read() to return the result from
      SSL_read() as the second return value, if Net::SSLeay::read() is called in
      list context (its behavior should be unchanged if called in scalar or void
      context)
    - fixed a problem where t/local/kwalitee.t fails with
      Module::CPANTS::Analyse 0.86
    - fixed a number of typos
    - fixed a compiler warning from Compiling with gcc-4.4 and -Wall
    - Fixed problems with get_https4: documentation was wrong, $header_ref was
      not correctly set and $server_cert was not returned
    - fixed a problem that could cause a Perl exception about no blength method
      on undef (CPAN RT#79309)
    - added documentation about how to mitigate various SSL/TLS vulnerabilities
    - SSL_MODE_* are now available as constants
  - drop upstreamed pod encoding patch


author: Paul Howarth <paul@city-fan.org> - 1.50-1
changelog:
  - update to 1.50
    - fixed a problem where t/handle/external/50_external.t would crash if any of
      the test sites were not contactable
    - now builds on VMS, added README.VMS
    - fixed a few compiler warnings in SSLeay.xs; most of them are just
      signed/unsigned pointer mismatches but there is one that actually fixes
      returning what would be an arbitrary value off the stack from
      get_my_thread_id if it happened to be called in a non-threaded build
    - added SSL_set_tlsext_host_name, SSL_get_servername, SSL_get_servername_type,
      SSL_CTX_set_tlsext_servername_callback for server side Server Name
      Indication (SNI) support
    - fixed a problem with C++ comments preventing builds on AIX and HPUX
    - perdition.org not available for tests, changed to www.open.com.au
    - added SSL_FIPS_mode_set
    - improvements to test suite so it succeeds with and without FIPS mode
      enabled
    - added documentation, warning not to pass UTF-8 data in the content
      argument to post_https


author: Paul Howarth <paul@city-fan.org> - 1.51-1
changelog:
  - update to 1.51
    - fixed a problem where SSL_set_SSL_CTX is not available with
      OpenSSL < 0.9.8f (CPAN RT#81940)
  - fix bogus date in spec changelog


author: Paul Howarth <paul@city-fan.org> - 1.52-1
changelog:
  - update to 1.52
    - rebuild package with gnu format tar, to prevent problems with unpacking on
      other systems such as old Solaris


author: Paul Howarth <paul@city-fan.org> - 1.54-1
changelog:
  - update to 1.54
    - added support for SSL_export_keying_material where present (i.e. in OpenSSL
      1.0.1 and later)
    - changed t/handle/external/50_external.t to use www.airspayce.com instead of
      perldition.org, who no longer have an https server
    - patch to fix a crash: P_X509_get_crl_distribution_points on an X509
      certificate with values in the CDP extension that do not have an ia5 string
      would cause a segmentation fault when accessed
    - change in t/local/32_x509_get_cert_info.t to not use
      Net::SSLeay::ASN1_INTEGER_get, since it works differently on 32 and 64 bit
      platforms
    - updated author and distribution location details to airspayce.com
    - improvement to test 07_sslecho.t so that if set_cert_and_key fails we can
      tell why


author: Paul Howarth <paul@city-fan.org> - 1.55-1
changelog:
  - update to 1.55
    - added support for TLSV1_1 and TLSV1_2 methods with SSL_CTX_tlsv1_1_new(),
      SSL_CTX_tlsv1_2_new(), TLSv1_1_method() and TLSv1_2_method(), where
      available in the underlying openssl
    - added CRL support functions X509_CRL_get_ext(), X509_CRL_get_ext_by_NID(),
      X509_CRL_get_ext_count()
    - fixed a problem that could cause content with a value of '0' to be
      incorrectly encoded by do_httpx3 and friends (CPAN RT#85417)
    - added support for SSL_get_tlsa_record_byname() required for DANE support in
      openssl-1.0.2 and later
    - testing with openssl-1.0.2-stable-SNAP-20130521
    - added X509_NAME_new and X509_NAME_hash


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.55-6
changelog:
  - Deleted support for SSL_get_tlsa_record_byname (bug #1422435)
  - Removed tests which fails due to changes openssl 1.0.1h and later


author: Paul Howarth <paul@city-fan.org> - 4.064-1
changelog:
  - Update to 4.064
    - Updated GPL v2.0 text and address in all modules
    - Added support for rfc3021 /31 networks to hostenum
  - Update UTF8 patch


author: Paul Howarth <paul@city-fan.org> - 4.067-1
changelog:
  - Update to 4.067
    - Improved diagnostic message for "die" with bad mask for hostenum,
      hostenumref, split, splitref, rsplit, rsplitref
  - Include new docfile About-NetAddr-IP.txt


author: Paul Howarth <paul@city-fan.org> - 4.069-1
changelog:
  - Update to 4.069
    - Add proper pod encoding in Lite.pm
    - Changed Makefile.PL to check for config.h when building for XS with 'gcc',
      try building with 'cc', and check again; if config.h is not found, force
      Pure Perl mode
    - Kill XS in winduhs and Darwin, both of which misbehave when compiling XS
      code
  - Drop UTF8 patch, no longer needed


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 0.01-15
changelog:
  - Apply https://rt.cpan.org/Ticket/Attachment/792151/410599/Number-Compare-0.01-uninitialized.patch
    to address https://bugzilla.redhat.com/show_bug.cgi?id=607982.


author: Paul Howarth <paul@city-fan.org> - 1.215-3
changelog:
  - always run test suite but don't run release tests when bootstrapping
  - nobody else likes macros for commands
  - clean up for modern rpm:
    - drop explicit buildroot tag
    - drop buildroot cleaning
    - drop %defattr
    - use native provides filtering
  - use a patch rather than scripting iconv to fix character encoding
  - upstream file permissions no longer need fixing


author: Paul Howarth <paul@city-fan.org> - 1.215-9
changelog:
  - classify buildreqs by usage
  - BR: perl(Time::HiRes) for the test suite
  - BR: perl(Pod::Simple) ≥ 3.14 for the release tests
  - BR: at least version 0.17 of perl(Test::CPAN::Meta)
  - bump perl(Test::Pod) version requirement to 1.44
  - don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.12-1
changelog:
  - Update to 0.12:
    - Fix tests to pass with Carp 1.25 (CPAN RT#75520)
  - BR: perl(Test::Spelling), aspell-en
  - Add patch to accept "deprecations" as a valid dictionary word
  - Update patches to apply cleanly
  - Don't need to remove empty directories from buildroot
  - Don't use macros for commands
  - Drop EPEL-4 support:
    - Drop patch supporting build with ExtUtils::MakeMaker < 6.30


author: Paul Howarth <paul@city-fan.org> - 0.13-1
changelog:
  - Update to 0.13:
    - Fix dist.ini to not add Test::Spelling as a requirement
  - Drop %defattr, redundant since rpm 4.4
  - Test::Requires available on all supported distributions


author: Paul Howarth <paul@city-fan.org> - 0.103-8
changelog:
  - Run Perl::Critic test in %check too
  - BR: perl(Test::Perl::Critic)
  - BR: perl(Carp) and perl(Symbol), which might be dual-lived
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Drop version requirement for perl(ExtUtils::MakeMaker); older versions work
    without problems, e.g. version 6.17 on EL-4
  - Make %files list more explicit
  - Don't use macros for commands
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 0.31-1
changelog:
  - Update to 0.31
    - Fix ->add_symbol('$foo', qr/sdlfk/) on 5.12+
    - Fix ->add_symbol('$foo', \v1.2.3) on 5.10+
  - Update patch for old Test::More versions
  - Update patch for no Test::Requires


author: Paul Howarth <paul@city-fan.org> - 0.32-1
changelog:
  - Update to 0.32
    - Bring the behavior of has_symbol for nonexistant scalars into line with the
      XS version
    - Invalid package names (for instance, Foo:Bar) are not allowed
    - Invalid stash entry names (anything containing ::) are not allowed
  - Update patches to apply cleanly
  - Bump perl(Package::Stash::XS) version requirement to 0.24


author: Paul Howarth <paul@city-fan.org> - 0.33-6
changelog:
  - Drop EPEL-4 support
    - Drop %defattr, redundant since rpm 4.4
    - Test::LeakTrace, Test::Requires and Test::Script are now universally available
    - A suitably recent version of ExtUtils::MakeMaker is now universally available
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.34-1
changelog:
  - Update to 0.34
    - Support anonymous stashes on newer perl versions
    - Prevent harmful effects from invalid settings for
      $ENV{PACKAGE_STASH_IMPLEMENTATION}
    - Switch to Module::Implementation
  - BR: perl(Module::Implementation) ≥ 0.06
  - BR: perl(base) for test suite
  - Bump Package::Stash::XS version requirement to 0.26
  - Explicitly run extra tests (except on RHEL ≥ 7, where the necessary
    build dependencies may not be available)
  - Update patch for building with old Test::More version in EPEL-5


author: Paul Howarth <paul@city-fan.org> - 0.23-1
changelog:
  - Update to 0.23
    - Fix the test for scalar values, again
    - Disallow assigning globrefs to scalar glob slots (this doesn't actually
      make any sense)
  - Update patches for old ExtUtils::MakeMaker and Test::More versions
  - perl(Pod::Coverage::TrustPod) now available in EPEL-4 too
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 0.25-1
changelog:
  - Update to 0.25
    - Invalid package names (for instance, Foo:Bar) are not allowed
    - Invalid stash entry names (anything containing ::) are not allowed
  - Update patches to apply cleanly


author: Paul Howarth <paul@city-fan.org> - 0.25-6
changelog:
  - Drop EPEL-4 support
    - Test::LeakTrace now universally available
    - Suitably recent version of ExtUtils::MakeMaker now universally available
    - Drop %defattr, redundant since rpm 4.4
  - BR: perl(File::Temp)
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - Internal refactorings to support Package::Anon stashes
  - BR: perl(base) and perl(Test::Requires) for test suite
  - Update patch for old distro compatibility
  - Explicitly run the release/author tests


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.08-1
changelog:
  - Upstream update.
  - Update patch.
  - Update BRs.
  - Add %bcond --with network.
  - Fix up %changelog dates.


author: Petr Šabata <contyk@redhat.com> - 1.967003-1
changelog:
  - 1.967003 bump (backwards-incompatible changes)
  - Spec cleanup and modernization
  - New Source URL
  - Install to vendor


author: Paul Howarth <paul@city-fan.org> - 1.967006-1
changelog:
  - Update to 1.967006 (#789560)
    - Localize the OUT filehandle during Precompile
    - Document the <autotree:Base::Class> form of the <autotree> directive
    - Provide a simple test for the <autotree> directive, t/autotree.t; renamed
      basics.t to ensure it runs before autotree.t
    - Allow a global <skip:> directive that functions the same as modifying
      $Parse::RecDescent::skip prior to compiling a grammar
    - Require that the $file returned by caller() be eq '-', rather than merely
      starting with '-'
    - Warn on empty productions followed by other productions: the empty
      production always matches, so following productions will never be reached
    - NON-BACKWARDS COMPATIBLE CHANGE: a repetition directive such as 'id(s /,/)'
      correctly creates a temporary @item variable to hold the 'id's that are
      matched. That @item variable is then used to set the real $item[] entry for
      that repetition. The same treatment is now given to %item. Formerly, in a
      production like:
        id ',' id(s /,/)
      matched against:
        xxx, yyy, zzz
      The $item{id} entry that should be 'xxx' is overwritten by 'yyy' and then
      'zzz' prior to the action being executed. Now 'yyy' and 'zzz' set
      $item{id}, but in the private %item, which goes out of scope once the
      repetition match completes.
    - EXPERIMENTAL: when precompiling, optionally create a standalone parser by
      including most of the contents of Parse::RecDescent in the resulting
      Precompiled output
    - Accept an optional $options hashref to Precompile, which can be used to
      specify $options->{-standalone}, which currently defaults to false
    - The subroutines import, Precompile and Save are not included in the
      Precompile'd parser
    - The included Parse::RecDescent module is renamed to
      Parse::RecDescent::_Runtime to avoid namespace conflicts with an installed
      and use'd Parse::RecDescent
    - Add a new t/precompile.t to test precompilation
    - Add a new $_FILENAME global to Parse::RecDescent to make it easy for the
      Precompile method to find the module
    - Remove the prototype from _generate; it is not required, and it caused
      t/precompile.t (which ends up re-defining a lot of Parse::RecDescent
      subroutines) to fail needlessly, as the calls to _generate in Replace and
      Extend normally do not see the prototype, but do when re-defined
    - POD documentation for standalone parsers added
    - Added ExtUtils::MakeMaker build/configure version requirements
      (CPAN RT#74787)
  - BR: perl(Test::Pod) and perl(Test::Warn) for additional test coverage
  - Use a patch rather than scripted iconv to fix character encoding
  - Improve %summary
  - Tidy %description
  - Make %files list more explicit
  - Don't use macros for commands
  - Don't need to specify compiler flags for pure-perl package
  - Drop redundant 'find' commands from %install


author: Paul Howarth <paul@city-fan.org> - 1.118-1
changelog:
  - update to 1.118
    Policy Changes:
    - CodeLayout::RequireTidyCode: revise to work with incompatible changes in
      Perl::Tidy 20120619 (CPAN RT#77977)
    - TestingAndDebugging::ProhibitNoWarnings: correct the parse of the
      'no warnings' statement, so that 'no warnings "qw"' is recognized as
      suppressing just 'qw' warnings (CPAN RT#74647)
    - Miscellanea::RequireRcsKeywords has been moved to the Perl-Critic-More
      distribution (CPAN RT#69546)
    Other Changes:
    - make all unescaped literal "{" characters in regexps into character
      classes; these are deprecated, and became noisy with Perl 5.17.0
      (CPAN RT#77510)
  - drop now-redundant patch for Perl::Tidy compatibility
  - BR: perl(lib) for the build process
  - BR: perl(base), perl(PPIx::Utilities::Node) and perl(Test::Builder) ≥ 0.92
    for the module (Test::Builder required by Test::Perl::Critic::Policy)
  - BR: perl(Exporter) ≥ 5.58; with older versions we get:
    ":color_severity" is not exported by the Perl::Critic::Utils::Constants module
  - BR: perl(File::Spec::Functions) for the test suite
  - drop buildreqs for perl(charnames), perl(File::Basename), perl(File::Find),
    perl(overload), perl(strict) and perl(warnings) - not dual lived


author: Petr Pisar <ppisar@redhat.com> - 1.000-6
changelog:
  - Add Miscellanea::RequireRcsKeywords droped from Perl::Critic. Credits to Paul
    Howarth. (bug #839815)


author: Ralf Corsépius <ralf.corsepius@fedoraproject.org> - 1.28-1
changelog:
  - Upstream update.
  - Remove maintainer test (Upstream doesn't want us to find his bugs).
  - Update BR's.


author: Paul Howarth <paul@city-fan.org> - 1.002-241
changelog:
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Don't delete the extra tests when bootstrapping, but don't run them either


author: Paul Howarth <paul@city-fan.org> - 1.003-1
changelog:
  - Update to 1.003
    - Fixed detection of VOS; $^O reports 'vos', not 'VOS'
    - Additional release tests
  - BR: perl(File::Spec::Functions), perl(List::Util),
    perl(Perl::Critic::Policy::Lax::ProhibitStringyEval::ExceptForRequire),
    perl(Pod::Wordlist::hanekomu), perl(Test::MinimumVersion),
    perl(Test::Perl::Critic), perl(Test::Spelling) and perl(Test::Version)
  - Identify purpose of each build requirement
  - Update patches for building on old distributions
  - Don't run extra tests for EPEL-5/6 builds


author: Petr Pisar <ppisar@redhat.com> 0.003-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Do not build-require File::Find, Socket, and warnings::register which are
    not exercised by tests
  - Sort provides by English rules


author: Paul Howarth <paul@city-fan.org> - 1.03-18
changelog:
  - Drop -tests subpackage (general lack of interest in this), but include
    them as documentation for the main package
  - No need to remove empty directories from buildroot
  - Add buildreqs for Perl core modules that might be dual-lived
  - Fix script interpreter for test suite since we're packaging it
  - Drop redundant %{?perl_default_filter}
  - Don't use macros for commands
  - Make %files list more explicit
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 1.05-10
changelog:
  - Drop -tests subpackage (general lack of interest in this), but include
    them as documentation for the main package
  - Don't use macros for commands
  - No need to remove empty directories from buildroot
  - Add buildreqs for Perl core modules that might be dual-lived
  - Rename makefile patch to include module name and version
  - Fix script interpreter for test suite since we're packaging it
  - Add filter for doc-file dependencies if we don't have %perl_default_filter
  - Make %files list more explicit
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 0.982-10
changelog:
  - Explicitly require perl(Package::Generator)
  - Make %files list more explicit
  - Mark POD files as %doc
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Don't need to remove empty directories from buildroot
  - Don't use macros for commands
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 0.984-1
changelog:
  - Update to 0.984 (documentation fixes)
  - Add filters for provides/requires from the test suite
  - BR: perl(base) and perl(Exporter) for the test suite


author: Paul Howarth <paul@city-fan.org> - 0.985-1
changelog:
  - Update to 0.985 (documentation fixes)
  - Add patch to support building with Test::More < 0.88
  - Run the extra tests too
  - BR: perl(File::Find) and perl(File::Temp) for test suite
  - BR: perl(Test::Pod) for the extra tests


author: Petr Pisar <ppisar@redhat.com> - 0.54-4
changelog:
  - Support cpu_type on ARM and AArch64 (bug #1093266)
  - Accept undefined cpu_clock on ARM and AArch64 (bug #1093266)


author: Daniel P. Berrange <berrange@redhat.com> - 1.1.1-2
changelog:
  - Fix incorrect handling of flags in $dom->get_vcpu_info() (rhbz #994139)
  - Fix error handling in $dev->get_parent() (rhbz #994141)


author: Daniel P. Berrange <berrange@redhat.com> - 1.2.8-4
changelog:
  - Add agent lifecycle event callbacks & constants (rhbz #1167392)
  - Fix docs for get_time method (rhbz #1164972)
  - Fix docs for GET_ALL_STATS constnats (rhbz #1170481)


author: Daniel P. Berrangé <berrange@redhat.com> - 4.5.0-2
changelog:
  - Fix typed parameter memory handling (rhbz#1613227)
  - Fix missing NWFilterBinding module (rhbz#1608755)


author: Petr Pisar <ppisar@redhat.com> - 2.30-17
changelog:
  - Modernize spec file
  - Specify all dependencies
  - Change license to "(Copyright only) and (Artistic or GPL+)" because of
    ppport.h


author: Paul Howarth <paul@city-fan.org> - 0.17-1
changelog:
  - Update to 0.17
    - Fix RT#46473: license url with fragment part
    - Fix RT#47393: "optional_features" as map rather than list
    - Renamed word() to keyword()
    - Added identifier() validation
    - Changed optional_features key from a keyword to an identifier type
    - Clarified spec defined and user defined keys
    - Fixed qr// delimiters due to issues with the NOT SIGN symbol


author: Paul Howarth <paul@city-fan.org> - 0.23-1
changelog:
  - Update to 0.23
    - Updated INSTALL instructions
    - Added minimum perl version (5.006)
    - Reworked Makefile.PL for clarity
    - Implemented Perl::Critic suggestions
    - Added meta_yaml_ok test and example
    - Several Version.pm updates, including new() parameter name change:
      'yaml' is now 'data'
    - Changes file dates changed to meet W3CDTF standards
  - Don't use macros for commands
  - Don't need to remove empty directories from the buildroot
  - Make %files list more explicit
  - Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 0.110-1
changelog:
  - Update to 0.110
    - Allow methods() and listmethods() to work again on class methods
      (CPAN RT#77804)
  - Drop redundant BR: perl(Data::Dumper)
  - Drop arrayeach patch - similar change introduced upstream
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Don't use macros for commands
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.5000-1
changelog:
  - Update to 0.500
    - Add support for all diff styles supplied by Text::Diff (CPAN RT#23579)
    - Add Build.PL
    - Convert to universally use Test::More instead of Test
    - Convert to modern Perl distribution.
    - Applied doc suggestion from CPAN RT#24297
    - Fix the { a => 1 } versus { a => '1' } bug (CPAN RT#3029)
  - Upstream dropped eg/ docs
  - Bump perl(Text::Diff) requirement to 0.35
  - BR: perl(Test::Pod) and perl(Test::Pod::Coverage) for extra test cover


author: Petr Pisar <ppisar@redhat.com> 1.009-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Remove BuildRoot stuff
  - Install into perl core directory
  - Hack %check for rpmbuild bug #672538


author: Paul Howarth <paul@city-fan.org> - 1.0-1
changelog:
  - Update to 1.0
    - Fix misleading test failure diagnostics when only issue is trailing
      whitespace
    - No longer blindly assume utf8 on input files (CPAN RT#59877)
    - Properly document testing options
  - This release by RIBASUSHI -> update source URL
  - Drop upstreamed patch for CPAN RT#59877
  - Update patch for building with old ExtUtils::MakeMaker versions


author: Paul Howarth <paul@city-fan.org> - 1.1-1
changelog:
  - Update to 1.1
    - Fix test fails on < 5.8 perls
    - Fix t/13-latin1.t failures on Win32 and under TB1.5
  - Add buildreqs for required core modules, which might be dual-lived


author: Paul Howarth <paul@city-fan.org> - 1.2-1
changelog:
  - Update to 1.2
    - Fix bad regex matching directories containing 'svn', not just '.svn'
      directories (CPAN RT#75968)
  - BR: perl(Cwd)
  - Drop non-dual-lived buildreqs perl(File::Find) and perl(FindBin)
  - This release by BOBTFISH -> update source URL
  - Remove tabs from bundled Module::Install that break release tests
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 1.3-1
changelog:
  - Update to 1.3
    - Fix to ignore inc/ directory used by Module::Install
  - Drop hack to remove tabs from bundled Module::Install
  - Bump version requirement for perl(Test::NoTabs) to 1.2 to avoid failing
    release tests due to tabs in bundled Module::Install


author: Paul Howarth <paul@city-fan.org> - 1.3-6
changelog:
  - Reinstate EPEL-5 compatibility
  - Drop redundant patch for building with ExtUtils::MakeMaker < 6.30


author: Paul Howarth <paul@city-fan.org> - 0.32-1
changelog:
  - Update to 0.32
    - Fixed tests that broke due to diagnostic changes in Test::More 0.99
  - Don't use macros for commands
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4
  - Make %files list more explicit
  - Remove bogus exec permission on Changes file


author: Paul Howarth <paul@city-fan.org> 0.006-1
changelog:
  - Update to 0.006
    - Crank back the Test::More and Exporter requirements (CPAN RT#62699)
    - Add lives_ok and dies_ok emulation (CPAN RT#67598)
  - Versions patch replaced by workaround for old ExtUtils::MakeMaker
  - BR: perl(Test::Builder::Tester)


author: Paul Howarth <paul@city-fan.org> 0.008-1
changelog:
  - Update to 0.008
    - Revert the mistake by which 0.004 allowed blocks after "exception" as well
      as "success"
  - BR: perl(Carp)
  - Update patch for building with ExtUtils::MakeMaker < 6.30


author: Paul Howarth <paul@city-fan.org> 0.010-1
changelog:
  - Update to 0.010
    - Avoid tickling an overloading bug in perl 5.6 during testing
      (CPAN RT#74847)


author: Paul Howarth <paul@city-fan.org> - 1.23-1
changelog:
  - Update to 0.23
    - Fix bug for missing file (should warn and skip, not pass to run_t_files)
    - File path and unlink fixes for VMS (CPAN RT#32061)
  - Add patch to reinstate manpage, dropped upstream
  - BR:/R: perl(File::Spec) and perl(Test::Harness)
  - BR: perl(base), perl(Carp), perl(Exporter) and perl(File::Spec::Functions)
  - Don't use macros for commands
  - Reformat %description
  - Don't need to remove empty directories from the buildroot
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Drop %defattr, redundant since rpm 4.4
  - Make %files list more explicit
  - Package LICENSE and README files


author: Paul Howarth <paul@city-fan.org> 1.1-1
changelog:
  - Update to 1.1
    - Fix test fails if cwd or perl has a space in its path (CPAN RT#67376)
  - Remove remaining uses of macros for commands


author: Paul Howarth <paul@city-fan.org> - 1.2-1
changelog:
  - Update to 1.2
    - Fix to ignore inc/ for Module::Install
  - BR: perl(Cwd), perl(ExtUtils::MakeMaker), perl(File::Spec), perl(File::Temp)
    and perl(Test::Builder)
  - Don't need to remove empty directories from the buildroot
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Drop %defattr, redundant since rpm 4.4


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.3-4
changelog:
  - Remove BR: perl(ExtUtils::MakeMaker)
  - Replace bundled modules Module::Install* by BR perl(inc::Module::Install)


author: Steven Pritchard <steve@kspei.com> 1.02-1
changelog:
  - Update to 1.02.
  - Update Source0 URL.
  - BR Test::Builder and Test::More, plus update versioned Test::Tester BR.
  - CHANGES renamed to Changes, and LGPL renamed to LICENSE.


author: Jitka Plesnikova <jplesnik@redhat.com> - 0.07-16
changelog:
  - Specify all dependencies.
  - Remove patch, because it is not needed (current version of Test::Builder
    is 0.98)


author: Iain Arnell <iarnell@gmail.com> 1.01-1
changelog:
  - update to latest upstream version
  - clean up spec for modern rpmbuild
  - doesn't require Test::Tester


author: Paul Howarth <paul@city-fan.org> - 1.02-7
changelog:
  - Drop -tests subpackage (general lack of interest in this), but include
    them as documentation for the main package
  - Drop redundant BR: perl(ExtUtils::MakeMaker)
  - Drop redundant unversioned explicit requires
  - Drop %defattr, redundant since rpm 4.4
  - Make %files list more explicit
  - Don't use macros for commands
  - Run the author tests in %check
  - BR: perl(Test::Pod) and perl(Test::Pod::Coverage)
  - Use tabs


author: Chris Weyl <cweyl@alumni.drew.edu> - 1.02-1
changelog:
  - Update by Fedora::App::MaintainerTools 0.006
  - Updating to latest GA CPAN version (1.02)
  - Added a new br on perl(Carp) (version 0)
  - Added a new br on perl(English) (version 0)
  - Altered br on perl(Module::Build) (0 => 0.35)
  - Altered br on perl(Perl::Critic) (0.21 => 1.105)
  - Added a new br on perl(Perl::Critic::Utils) (version 1.105)
  - Added a new br on perl(Perl::Critic::Violation) (version 1.105)
  - Added a new br on perl(Test::Builder) (version 0)
  - Added a new br on perl(Test::More) (version 0)
  - Force-adding ExtUtils::MakeMaker as a BR
  - Dropped old BR on perl(Test::Pod)
  - Dropped old BR on perl(Test::Pod::Coverage)
  - Added a new req on perl(Carp) (version 0)
  - Added a new req on perl(English) (version 0)
  - Added a new req on perl(Perl::Critic) (version 1.105)
  - Added a new req on perl(Perl::Critic::Utils) (version 1.105)
  - Added a new req on perl(Perl::Critic::Violation) (version 1.105)
  - Added a new req on perl(Test::Builder) (version 0)


author: Petr Pisar <ppisar@redhat.com> - 1.48-3
changelog:
  - Clarify license (bug #1065946)
  - Remove run-time dependency on Test::Builder::Tester (bug #1065944)
  - Declare run-time dependency on File::Find (bug #1066006)


author: Paul Howarth <paul@city-fan.org> - 0.06-2
changelog:
  - Run release tests as well as standard test suite in %check
  - Drop no-longer-needed buildreq perl(Filter::Util::Call)
  - New buildreqs perl(Test::Perl::Critic), perl(Test::Pod), perl(Test::Spelling)


author: Paul Howarth <paul@city-fan.org> - 0.06-4
changelog:
  - Drop -tests subpackage (general lack of interest in this), but include
    them as documentation for the main package
  - Don't need explicit runtime dependency on perl(Test::Builder::Module) if we
    have rpm ≥ 4.9 as it can auto-detect it
  - BR: at least version 0.61 of perl(Test::More) as per upstream
  - Drop unnecessary version requirement for perl(ExtUtils::MakeMaker)
  - Drop redundant %{?perl_default_filter}
  - BR: aspell-en rather than hunspell-en on old distributions where
    Test::Spelling uses aspell instead of hunspell
  - Don't BR: perl(Test::Perl::Critic) when bootstrapping
  - Don't use macros for commands
  - Don't need to remove empty directories from buildroot
  - Make %files list more explicit
  - Drop %defattr, redundant since rpm 4.4
  - Use tabs


author: Paul Howarth <paul@city-fan.org> - 0.06-9
changelog:
  - BR: perl(base), perl(Cwd), perl(Data::Dumper)
  - RHEL builds don't use Test::Spelling so they don't need dictionaries either


author: Paul Howarth <paul@city-fan.org> - 0.98-241
changelog:
  - Merge tests sub-package back into main package
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4
  - Make %files list more explicit
  - Don't use macros for commands
  - Mark Tutorial.pod as %doc
  - Drop explicit dependency on perl-devel


author: Paul Howarth <paul@city-fan.org> - 0.15-1
changelog:
  - Update to 0.15:
    - Begin adding actual tests (hilariously, adding the suggested t/pod-spell.t
      to this dist to test itself found a typo: "stopwards")
  - BR: perl(Test::Tester) and hunspell-en


author: Jitka Plesnikova <jplesnik@redhat.com> - 0.15-5
changelog:
  - Update dependencies
  - Don't need to remove empty directories from the buildroot
  - Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 0.16-1
changelog:
  - Update to 0.16:
    - Allow use of a custom POD parser rather than Pod::Spell using
      set_pod_parser
  - Re-diff patch to avoid shipping .orig file


author: Paul Howarth <paul@city-fan.org> - 0.18-1
changelog:
  - Update to 0.18:
    - Work around Pod::Spell limitations
    - Improve case handling
    - Improve test failure reporting
    - Include more useful info in Test-Spelling's own test suite


author: Paul Howarth <paul@city-fan.org> - 0.19-1
changelog:
  - Update to 0.19:
    - For more consistent results, avoid using the user's local aspell dictionary
      (CPAN RT#56483)
  - Update hunspell preference patch


author: Paul Howarth <paul@city-fan.org> - 1.09-8
changelog:
  - Don't run the release tests when bootstrapping, to avoid circular build deps
  - Sync buildreqs with upstream:
    - BR: perl(Exporter)
    - BR: perl(ExtUtils::MakeMaker) ≥ 6.42
    - BR: perl(File::Spec) ≥ 0.80
    - Bump perl(Pod::Simple) version requirement to at least 3.07
    - BR: perl(Test::Builder)
    - Drop perl(Test::More) version requirement to a minimum of 0.42
  - Make %files list more explicit
  - Drop %defattr, redundant since rpm 4.4
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Don't need to remove empty directories from the buildroot
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 0.06-9
changelog:
  - Can run spelling test unconditionally now
  - BR: perl(ExtUtils::Manifest)
  - Don't BR: perl(Test::Perl::Critic) if we're bootstrapping
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Run developer tests in a separate test run
  - Drop redundant %{?perl_default_filter}
  - Don't use macros for commands


