# changelog

author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-1
changelog:
  - bump version to 1.3.1.6
  - Ticket 47455 - valgrind - value mem leaks, uninit mem usage
  - fix coverity 11915 - dead code - introduced with fix for ticket 346
  - fix coverity 11895 - null deref - caused by fix to ticket 47392
  - fix compiler warning in posix winsync code for posix_group_del_memberuid_callback
  - Fix compiler warnings for Ticket 47395 and 47397
  - fix compiler warning (cherry picked from commit 904416f4631d842a105851b4a9931ae17822a107)
  - Ticket 47450 - Fix compiler formatting warning errors for 32/64 bit arch
  - fix compiler warnings
  - Fix compiler warning (cherry picked from commit ec6ebc0b0f085a82041d993ab2450a3922ef5502)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-2
changelog:
  - bump version to 1.3.1.6-2
  - Resolves Bug 1000633 - ns-slapd crash due to bogus DN
  - Ticket #47488 - Users from AD sub OU does not sync to IPA


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-3
changelog:
  - Ticket #47455 - valgrind - value mem leaks, uninit mem usage
  - Ticket 47500 - start-dirsrv/restart-dirsrv/stop-disrv do not register with systemd correctly


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-4
changelog:
  - bump version to 1.3.1.6-4
  - Resolves Bug 1007988 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing (Ticket 47489)
  - Resolves Bug 853931 - Allow macro aci keywords to be case-insensitive (Ticket 449)
  - Resolves Bug 1006563 - automember rebuild task not working as expected (Ticket 47507)


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-5
changelog:
  - Resolves: bug 1013896 - logconv.pl - Use of comma-less variable list is deprecated
  - Resolves: bug 1008256 - backend txn plugin fixup tasks should be done in a txn
  - Resolves: bug 1013738 - CLEANALLRUV doesnt run across all replicas
  - Resolves: bug 1011220 - PassSync removes User must change password flag on the Windows side
  - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock
  - Resolves: bug 1012125 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch
  - Resolves: bug 1013063 - RUV tombstone search with scope "one" doesn`t work
  - Resolves: bug 1013893 - Indexed search are logged with 'notes=U' in the access logs
  - Resolves: bug 1013894 - improve logconv.pl performance with large access logs
  - Resolves: bug 1013898 - Fix various issues with logconv.pl
  - Resolves: bug 1013897 - logconv.pl uses /var/tmp for BDB temp files
  - Resolves: bug 1013900 - logconv: some stats do not work across server restarts
  - Resolves: bug 1014354 - Coverity fixes - 12023, 12024, and 12025


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-6
changelog:
  - Resolves: bug 1013900 - logconv: some stats do not work across server restarts
  -  previous patch introduced regressions
  -  fixed by c2eced0 ticket #47550 and e2a880b Ticket #47550 and 8b10f83 Ticket #47551
  - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock
  -  previous patch not complete, fixed by a11be5c Ticket 47513
  - Resolves: bug 1016749 - DS crashes when "cn=Directory Manager" is changing it's password
  -  cherry picked upstream f786600 Ticket 47329 and b67e230 Coverity Fixes
  - Resolves: bug 1015252 locale "nl" not supported by collation plugin
  - Resolves: bug 1016317 Need to update supported locales
  - Resolves: bug 1016722 memory leak in range searches


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-7
changelog:
  - Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep
  - Resolves: bug 1018914 fixup memberof task does not work: task entry not added


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-8
changelog:
  - release 1.3.1.6-8
  - Resolves: bug 971111 - DNA plugin failed to fetch replication agreement 
  - Resolves: bug 1026931 - 1.2.11.29 crash when removing entries from cache


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-9
changelog:
  - release 1.3.1.6-9
  - Resolves: bug 1028440 - Winsync replica initialization and incremental updates from DS to AD fails on RHEL
  - Resolves: bug 1027502 - Replication Failures related to skipped entries due to cleaned rids
  - Resolves: bug 1027047 - Winsync plugin segfault during incremental backoff


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-10
changelog:
  - release 1.3.1.6-10
  - Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep
  -     had to revert earlier change - does not work and breaks ipa


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-17
changelog:
  - release 1.3.1.6-17
  - Resolves: bug 853106 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (Ticket 443)
  - Resolves: bug 1049525 - Server hangs in cos_cache when adding a user entry (Ticket 47649)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-18
changelog:
  - release 1.3.1.6-18
  - Resolves: bug 838656 - logconv.pl tool removes the access logs contents if "-M" is not correctly used (Ticket 471)
  - Resolves: bug 922538 - improve dbgen rdn generation, output (Ticket 47374)
  - Resolves: bug 970750 - flush.pl is not included in perl5 (Ticket 47374)
  - Resolves: bug 1013898 - Fix various issues with logconv.pl (Ticket 471)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-19
changelog:
  - release 1.3.1.6-19
  - Resolves: bug 1065971 - Enrolling a host into IdM/IPA always takes two attempts (Ticket 47704)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-20
changelog:
  - release 1.3.1.6-20
  - Resolves: bug 1065242 - 389-ds-base, conflict occurs at yum installation if multilib_policy=all. (Ticket 47709)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-21
changelog:
  - release 1.3.1.6-21
  - Resolves: bug 918694 - Fix covscan defect FORWARD_NULL (Ticket 408)
  - Resolves: bug 918717 - Fix covscan defect COMPILER WARNINGS (Ticket 571)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-22
changelog:
  - release 1.3.1.6-22
  - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-23
changelog:
  - release 1.3.1.6-22
  - Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-23
changelog:
  - Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind) (Added 0095-Ticket-47739-directory-server-is-insecurely-misinter.patch)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-24
changelog:
  - release 1.3.1.6-24
  - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735); regression - sub-type length in attribute type was mistakenly subtracted.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-26
changelog:
  - release 1.3.1.6-26
  - Resolves: #1123864
    EMBARGOED CVE-2014-3562 389-ds-base: 389-ds: unauthenticated information disclosure [rhel-7.0.z] (BZ 1123477)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-5
changelog:
  - Bump version to 1.3.10.1-5
  - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6
changelog:
  - Bump version to 1.3.10.1-6
  - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
  - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  - Resolves: Bug 1803052 - Memory leak in ACI using IP subject
  - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
  - Resolves: Bug 1809160 - Entry cache contention during base search


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7
changelog:
  - Bump version to 1.3.10.1-7
  - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-8
changelog:
  - Bump version to 1.3.10.1-8
  - Resolves: Bug 1809160 - Entry cache contention during base search (Fix crash - part 2)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-10
changelog:
  - Bump version to 1.3.10.1-10
  - Resolves: Bug 1814603 - 389-base-ds expected file permissions in package don't match final runtime permissions
  - Resolves: Bug 1836171 - intermittent SSL hang with rhds


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-11
changelog:
  - Bump version to 1.3.10.1-11
  - Resolves: Bug 1839173 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-14
changelog:
  - Bump version to 1.3.10.1-14
  - Resolves: Bug 1814603 - revert patch as it conflicts with 389-admin package


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-6
changelog:
  - Bump version to 1.3.9.1-6
  - Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
  - Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
  - Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
  - Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-7
changelog:
  - Bump version to 1.3.9.1-7
  - Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
  - Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
  - Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-8
changelog:
  - Bump version to 1.3.9.1-8
  - Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
  - Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
  - Resolves: Bug 1713361 - Update defaults.inf
  - Resolves: Bug 1708215 - maxlogsperdir accepting negative values
  - Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-9
changelog:
  - Bump version to 1.3.9.1-9
  - Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
  - Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-10
changelog:
  - Bump version to 1.3.9.1-10
  - Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-1
changelog:
  - Bump version to 1.3.10.1-1
  - Resolves: Bug 1639342 - Replace error by warning in the state machine defined in repl5_inc_run
  - Resolves: Bug 1691931 - memory leak in automember plugin
  - Resolves: Bug 1662461 - Log the actual base DN when the search fails with "invalid attribute request"
  - Resolves: Bug 1732053 - etime can contain invalid nanosecond value
  - Resolves: Bug 1546739 - consistency in the replication error codes while setting nsds5replicaid=65535


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-2
changelog:
  - Bump version to 1.3.10.1-2
  - Resolves: Bug 1748199 - EMBARGOED CVE-2019-14824 389-ds-base: 389-ds and IDM: allows authenticated unprivileged user to retrieve content of userPassword field for any user 
  - Resolves: Bug 1610234 - nsslapd-defaultnamingcontext does not change when the assigned suffix got deleted
  - Resolves: Bug 1723545 - Directory Server 10 not RFC 4511 compliant
  - Resolves: Bug 1724914 - LDAP server returning controltype in different sequence
  - Resolves: Bug 1739182 - CleanAllRUV task limit not enforced
  - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache
  - Resolves: Bug 1685059 - After running cl-dump dbdir/cldb/*ldif.done are not deleted


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-3
changelog:
  - Bump version to 1.3.10.1-3
  - Resolves: Bug 1756182 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
  - Resolves: Bug 1749236 - etime displayed has an order of magnitude 10 times smaller than it should be
  - Resolves: Bug 1758109 - AddressSanitizer: heap-use-after-free in import_free_job
  - Resolves: Bug 1676948 - After audit log file is rotated, DS version string is logged after each update
  - Resolves: Bug 1749595 - Extremely slow LDIF import with ldif2db


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-4
changelog:
  - Bump version to 1.3.10.1-4
  - Resolves: Bug 1765106 - ipa-server-install is failing with ipapython.admintool: ERROR failed to create DS instance Command


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1
changelog:
  - Bump version to  1.3.10.2-1
  - Resolves: Bug 1724761 - Entry cache contention during base search
  - Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
  - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
  - Resolves: Bug 1762901 - cenotaph errors on modrdn operations
  - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
  - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
  - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
  - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
  - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
  - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
  - Resolves: Bug 1796558 - Memory leak in ACI using IP subject
  - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2
changelog:
  - Bump version to  1.3.10.2-2
  - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
  - Resolves: Bug 1801327 - intermittent SSL hang with rhds
  - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
  - Resolves: Bug 1827284 - Memory leak in indirect COS


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3
changelog:
  - Bump version to 1.3.10.2-3
  - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
  - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5
changelog:
  - Bump version to 1.3.10.2-5
  - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6
changelog:
  - Bump version to 1.3.10.2-6
  - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7
changelog:
  - Bump version to 1.3.10.2-7
  - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
  - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8
changelog:
  - Bump version to 1.3.10.2-8
  - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
  - Resolves: Bug 1902042 - Entries conflict not resolved by replication


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10
changelog:
  - Bump version to 1.3.10.2-10
  - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
  - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
  - Resolves: Bug 1881968 - Replication Lag under high load


author: Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11
changelog:
  - Bump version to 1.3.10.2-11
  - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
  - Resolves: Bug 1931182 - information disclosure during the binding of a DN


author: Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13
changelog:
  - Bump version to 1.3.10.2-13
  - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
  - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
  - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
  - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule


author: Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14
changelog:
  - Bump version to 1.3.10.2-14
  - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
  - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)


author: Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15
changelog:
  - Bump version to 1.3.10.2-15
  - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
  - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search


author: Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16
changelog:
  - Bump version to 1.3.10.2-16
  - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
  - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
  - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
  - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17
changelog:
  - Bump version to 1.3.10.2-17
  - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
  - Resolves: Bug 2131083 - SIGSEGV in sync_repl


author: Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1
changelog:
  - Bump version to 1.3.11.1-1
  - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
  - Resolves: Bug 2170221 - Boolean attributes should be case insensitive
  - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-4
changelog:
  - release 1.3.3.1-4
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing  (DS 47750)
  - Resolves: bug 1145846 - 389-ds 1.3.3.0 does not adjust cipher suite configuration on upgrade, breaks itself and pki-server (DS 47908)
  - Resolves: bug 1117979 - harden the list of ciphers available by default (phase 2) (DS 47838)
                          - provide enabled ciphers as search result (DS 47880)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-6
changelog:
  - release 1.3.3.1-6
  - Resolves: bug 1151287 - dynamically added macro aci is not evaluated on the fly (DS 47922)
  - Resolves: bug 1080186 - Need to move slapi_pblock_set(pb, SLAPI_MODRDN_EXISTING_ENTRY, original_entry->ep_entry) prior to original_entry overwritten (DS 47897)
  - Resolves: bug 1150694 - Encoding of SearchResultEntry is missing tag (DS 47920)
  - Resolves: bug 1150695 - ldbm_back_modify SLAPI_PLUGIN_BE_PRE_MODIFY_FN does not return even if one of the preop plugins fails. (DS 47919)
  - Resolves: bug 1139882 - Fix remaining compiler warnings (DS 47892)
  - Resolves: bug 1150206 - result of dna_dn_is_shared_config is incorrectly used (DS 47918)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-8
changelog:
  - release 1.3.3.1-8
  - Resolves: bug 1156607 - Crash in entry_add_present_values_wsi_multi_valued (DS 47937)
  - Resolves: bug 1153737 - Disable SSL v3, by default (DS 47928, DS 47945, DS 47948)
  - Resolves: bug 1158804 - Malformed cookie for LDAP Sync makes DS crash (DS 47939)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-9
changelog:
  - release 1.3.3.1-9
  - Resolves: bug 1153737 - Disable SSL v3, by default. (DS 47928)
  - Resolves: bug 1163461 - Should not check aci syntax when deleting an aci (DS 47953)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-10
changelog:
  - release 1.3.3.1-10
  - Resolves: bug 1172731 - CVE-2014-8112 password hashing bypassed when "nsslapd-unhashed-pw-switch" is set to off 
  - Resolves: bug 1166265 - DS hangs during online total update (DS 47942)
  - Resolves: bug 1168151 - CVE-2014-8105 information disclosure through 'cn=changelog' subtree
  - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable (DS 47526)
  - Resolves: bug 1171356 - Bind DN tracking unable to write to internalModifiersName without special permissions (DS 47950)
  - Resolves: bug 1153737 - logconv.pl -- support parsing/showing/reporting different protocol versions (DS 47949)
  - Resolves: bug 1171355 - start dirsrv after chrony on RHEL7 and Fedora (DS 47947)
  - Resolves: bug 1170707 - cos_cache_build_definition_list does not stop during server shutdown (DS 47967)
  - Resolves: bug 1170708 - COS memory leak when rebuilding the cache (DS - Ticket 47969)
  - Resolves: bug 1170709 - Account lockout attributes incorrectly updated after failed SASL Bind (DS 47970)
  - Resolves: bug 1166260 - cookie_change_info returns random negative number if there was no change in a tree (DS 47960)
  - Resolves: bug 1012991 - Error log levels not displayed correctly (DS 47636)
  - Resolves: bug 1108881 - rsearch filter error on any search filter (DS 47722)
  - Resolves: bug 994690  - Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart (DS 47451)
  - Resolves: bug 1162997 - Running a plugin task can crash the server (DS 47451)
  - Resolves: bug 1166252 - RHEL7.1 ns-slapd segfault when ipa-replica-install restarts (DS 47451)
  - Resolves: bug 1172597 - Crash if setting invalid plugin config area for MemberOf Plugin (DS 47525)
  - Resolves: bug 1139882 - coverity defects found in 1.3.3.x (DS 47965)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-11
changelog:
  - release 1.3.3.1-11
  - Resolves: bug 1080186 - During delete operation do not refresh cache entry if it is a tombstone (DS 47750)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-12
changelog:
  - release 1.3.3.1-12
  - Resolves: bug 1182477 - Windows Sync accidentally cleared raw_entry (DS 47989)
  - Resolves: bug 1180325 - upgrade script fails if /etc and /var are on different file systems (DS 47991 )
  - Resolves: bug 1183655 - Schema learning mechanism, in replication, unable to extend an existing definition (DS 47988)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-14
changelog:
  - release 1.3.3.1-14
  - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030)
              Fixes spec file to make sure all the server instances are stopped before upgrade
  - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-16
changelog:
  - release 1.3.3.1-16
  - Resolves: bug 1212894 - CVE-2015-1854 389ds-base: access control bypass with modrdn


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-17
changelog:
  - release 1.3.3.1-17
  - Resolves: bug 1230038 - idm/ipa 389-ds-base entry cache converges to 500 KB in dblayer_is_cachesize_sane (DS 48190)
  - Resolves: bug 1230037 - async simple paged results issue (DS 48146, DS 48192)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-18
changelog:
  - release 1.3.3.1-18
  - Resolves: bug 1232100 - CVE-2015-3230 389-ds-base: nsSSL3Ciphers preference not enforced server side (DS 48194)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-20
changelog:
  - release 1.3.3.1-20
  - Resolves: bug 1243718 - Winsync fails when AD users have multiple spaces (two)inside the value of the rdn attribute (DS 48223)


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Eliminated rpmbuild "bogus date" error due to inconsistent weekday,
    by assuming the date is correct and changing the weekday.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-21
changelog:
  - release 1.3.3.1-21
  - Resolves: bug 1258318 - Deadlock with retrochangelog, memberof plugin (DS 47931)
  - Resolves: bug 1259466 - Enhance ACIs to have more control over MODRDN operations (DS 47553)
  - Resolves: bug 1259999 - Some filters in RHDS10 are not working fine. (DS 48265)
  - Resolves: bug 1260000 - handling of "No original_tombstone for changenumber" errors (DS 47912)
  - Resolves: bug 1260001 - cleanallruv should completely clean changelog (DS 48208)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-22
changelog:
  - release 1.3.3.1-22
  - Resolves: bug 1262363 - In MMR, double free coould occur under some special condition (DS 48226)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-23
changelog:
  - release 1.3.3.1-23
  - Resolves: bug 1262363 - In MMR, double free coould occur under some special condition (DS 48226)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-11
changelog:
  - release 1.3.4.0-11
  - Resolves: bug 1249784 - ipa-dnskeysyncd unhandled exception on named-pkcs11 start (DS 48249)
  - Resolves: bug 1252082 - removing chaining database links trigger valgrind read error (DS 47686)
  - Resolves: bug 1252207 - bashisms in 389-ds-base admin scripts (DS 47511)
  - Resolves: bug 1252533 - Man pages and help for remove-ds.pl doesn't display "-a" option (DS 48245)
  - Resolves: bug 1252781 - Slapd crashes reported from latest builds (DS 48250)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-12
changelog:
  - release 1.3.4.0-12
  - Resolves: bug 1252133 - replica upgrade failed in starting dirsrv service (DS 48243)
  - Resolves: bug 1254344 - Server crashes in ACL_LasFindFlush during shutdown if ACIs contain IP addresss restrictions (DS 48233)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-14
changelog:
  - release 1.3.4.0-14
  - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228)
  - Resolves: bug 1255851 - Shell CLI fails with usage errors if an argument containing white spaces is given (DS 48254)
  - Resolves: bug 1256938 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax (DS 47757)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-15
changelog:
  - release 1.3.4.0-15
  - Resolves: bug 1258996 - Complex filter in a search request doen't work as expected. (regression) (DS 48265)
  - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-16
changelog:
  - release 1.3.4.0-16
  - Resolves: bug 1243970 - In MMR, double free coould occur under some special condition (DS 48276, DS 48226)
  - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266)
  - Resolves: bug 1241723 - cleanallruv - fix regression with server shutdown (DS 48217)
  - Resolves: bug 1264224 - segfault in ns-slapd due to accessing Slapi_DN freed in pre bind plug-in (DS 48188)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-17
changelog:
  - release 1.3.4.0-17
  - Resolves: bug 1259949 - A backport error (coverity -- unused variable 'init_retry')


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-18
changelog:
  - release 1.3.4.0-18
  - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266, DS 48284)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-19
changelog:
  - release 1.3.4.0-19
  - Resolves: bug 1228823 - async simple paged results issue (DS 48299, DS 48192)
  - Resolves: bug 1266944 - ns-slapd crash during ipa-replica-manage del (DS 48298)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-20
changelog:
  - release 1.3.4.0-20
  - Resolves: bug 1278729 - Share nsslapd-threadnumber in the case nunc-stans is enabled (DS 48339)
  - Resolves: bug 1278730 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338)
  - Resolves: bug 1279572 - Cannot upgrade a consumer to supplier in a multimaster environment (DS 48325)
  - Resolves: bug 1279573 - nunc-stans: Attempt to release connection that is not acquired (DS 48311)
  - Resolves: bug 1280210 - deadlock in mep delete post op (DS 47976)
  - Resolves: bug 1281522 - acl - regression - trailing ', (comma)' in macro matched value is not removed (DS 48344)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-21
changelog:
  - release 1.3.4.0-21
  - Resolves: bug 1278730 - SimplePagedResults -- abandon could happen between the abandon check and sending results -- Fixing a regression introduced in 1.3.4.0-20 (DS 48338)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-22
changelog:
  - release 1.3.4.0-22
  - Resolves: bug 1290725 - SimplePagedResults -- in the search error case, simple paged results slot was not released. (DS 48375)
  - Resolves: bug 1290726 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same modify operation (DS 48370)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-23
changelog:
  - release 1.3.4.0-23
  - Resolves: bug 1295684 - many attrlist_replace errors in connection with cleanallruv (DS 48283)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-24
changelog:
  - release 1.3.4.0-24
  - Resolves: bug 1298105 - 389-ds hanging after a few minutes of operation (DS 48406)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-25
changelog:
  - release 1.3.4.0-25
  - Resolves: bug 1299757 - CVE-2016-0741 389-ds-base: Worker threads do not detect abnormally closed connections causing DoS


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-27
changelog:
  - release 1.3.4.0-27
  - Resolves: bug 1309963 - keep alive entries can break replication (DS 48445)
  - Resolves: bug 1309964 - Crash in slapi_get_object_extension (DS 48536)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-28
changelog:
  - release 1.3.4.0-28
  - Resolves: bug 1315181 - change severity of some messages related to "keep alive" entries (DS 48420)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-29
changelog:
  - release 1.3.4.0-29
  - Resolves: bug 1316552 - License tag does not match actual license of code (DS 48757)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-30
changelog:
  - release 1.3.4.0-30
  - Resolves: bug 1321891 - DES to AES password conversion fails if a backend is empty (DS 48777)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-31
changelog:
  - release 1.3.4.0-31
  - Resolves: bug 1335423 - heap corruption at schema replication. (DS 48492)
  - Resolves: bug 1335107 - Paged results search returns the blank list of entries (DS 48808)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-32
changelog:
  - release 1.3.4.0-32
  - Resolves: bug 1344293 - At startup DES to AES password conversion causes timeout in start script (DS 48862)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-33
changelog:
  - release 1.3.4.0-33
  - Resolves: bug 1351323 - Improve MMR replication convergence (DS 48636)
  - Resolves: bug 1351447 - Supplier can skip a failing update, although it should retry. (DS 47788)
  - Resolves: bug 1350707 - Replication changelog can incorrectly skip over updates (DS 48766)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-2
changelog:
  - Release 1.3.5.10-2
  - Resolves: bug 1353714 - If a cipher is disabled do not attempt to look it up (DS 48743)
  - Resolves: bug 1353592 - Setup-ds.pl --update fails - regression (DS 48755)
  - Resolves: bug 1353544 - db2bak.pl task enters infinitive loop when bak fs is almost full (DS 48914)
  - Resolves: bug 1354374 - Upgrade to 389-ds-base >= 1.3.5.5 doesn't install 389-ds-base-snmp (DS 48918)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-4
changelog:
  - Release 1.3.5.10-4
  - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144)
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919)
  - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat
  - Resolves: bug 1354660 - flow control in replication also blocks receiving results (DS 48767)
  - Resolves: bug 1356261 - Fixup tombstone task needs to set proper flag when updating (DS 48924)
  - Resolves: bug 1355760 - ns-slapd crashes during the deletion of backend (DS 48922)
  - Resolves: bug 1353629 - DS shuts down automatically if dnaThreshold is set to 0 in a MMR setup (DS 48916)
  - Resolves: bug 1355879 - nunc-stans: ns-slapd crashes during startup with SIGILL on AMD Opteron 280 (DS 48925)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-5
changelog:
  - Release 1.3.5.10-5
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-6
changelog:
  - Release 1.3.5.10-6
  - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48928)
  - Resolves: bug 1360447 - nsslapd-workingdir is empty when ns-slapd is started by systemd (DS 48939)
  - Resolves: bug 1360327 - remove-ds.pl deletes an instance even if wrong prefix was specified (DS 48934)
  - Resolves: bug 1349815 - DS logs have warning:ancestorid not indexed for all CS subsystems (DS 48940)
  - Resolves: bug 1329061 - 389-ds-base-1.3.4.0-29.el7_2 "hang" (DS 48882)
  - Resolves: bug 1360976 - EMBARGOED CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack
  - Resolves: bug 1361134 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password (DS 48943) 
  - Resolves: bug 1361321 - Duplicate collation entries (DS 48936)
  - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450)
  - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-7
changelog:
  - Release 1.3.5.10-7
  - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450)
  - Resolves: bug 1360976 - fixing a compiler warning


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-8
changelog:
  - Release 1.3.5.10-8
  - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48954)
  - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950)
  - Resolves: bug 1366561 - ns-accountstatus.pl giving error even "No such object (32)" (DS 48956)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-9
changelog:
  - Release 1.3.5.10-9
  - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950)
  - Resolves: bug 1366828 - audit on failure doesn't work if attribute nsslapd-auditlog-logging-enabled is NOT enabled (DS 48958)
  - Resolves: bug 1368520 - Crash in import_wait_for_space_in_fifo() (DS 48960)
  - Resolves: bug 1368956 - man page of ns-accountstatus.pl shows redundant entries for -p port option
  - Resolves: bug 1369537 - passwordMinAge attribute doesn't limit the minimum age of the password (DS 48967)
  - Resolves: bug 1369570 - cleanallruv changelog cleaning incorrectly impacts all backends (DS 48964)
  - Resolves: bug 1369425 - ACI behaves erratically (DS 48972)
  - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957)
  - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969)
  - Resolves: bug 1371283 - Server Side Sorting crashes the server. (DS 48970)
  - Resolves: bug 1371284 - Disabling CLEAR password storage scheme will crash server when setting a password (DS 48975)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-10
changelog:
  - Release 1.3.5.10-10
  - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957)
  - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-11
changelog:
  - Release 1.3.5.10-11
  - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-12
changelog:
  - Release 1.3.5.10-12
  - Resolves: bug 1384785 - Replica install fails with old IPA master sometimes during replication process (DS 48992)
  - Resolves: bug 1388501 - 389-ds-base is missing runtime dependency - bind-utils (DS 48328)
  - Resolves: bug 1388581 - Replication stops working only when fips mode is set to true (DS 48909)
  - Resolves: bug 1390342 - ns-accountstatus.pl shows wrong status for accounts inactivated by Account policy plugin (DS 49014)
  - Resolves: bug 1390343 - trace args debug logging must be more restrictive (DS 49009)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-13
changelog:
  - Release 1.3.5.10-13
  - Resolves: bug 1402030 - Non tombstone entry which dn starting with "nsuniqueid=...," cannot be deleted (DS 48133)
  - Resolves: bug 1402325 - do not treat missing csn as fatal (DS 49020)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-15
changelog:
  - Release 1.3.5.10-15
  - Resolves: bug 1402325 - do not treat missing csn as fatal (DS 48964)
  - Resolves: bug 1410080 - incompatible nsEncryptionConfig object definition prevents RHEL 7->6 schema replication (DS 49074)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-16
changelog:
  - Release 1.3.5.10-16
  - Resolves: bug 1414677 - (un)register/migration/remove may fail if there is no suffix (DS 49016)
  - Resolves: bug 1414678 - deadlock on cos cache rebuild (DS 49079)
  - Resolves: bug 1414679 - Release 1.3.5 may allow expired accounts access to systems (DS 49080, DS 49082)
  - Resolves: bug 1416368 - Aborted operation can leave RUV in incorrect state (DS 49008)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-17
changelog:
  - Release 1.3.5.10-17
  - Resolves: bug 1414677 - (un)register/migration/remove may fail if there is no suffix (DS 49016)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.5.10-19
changelog:
  - Release 1.3.5.10-19
  - Resolves: bug 1429495 - ns-slapd dies under heavy load 
  - Resolves: bug 1429498 - A filtered nsrole that specifies an empty nsrole in its nsRoleFilter will result in a segfault


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.5.10-20
changelog:
  - Bump version to 1.3.5.10-20
  - Resolves: bug 1437005 - CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.5.10-21
changelog:
  - Bump verison to 1.3.5.10-21
  - Resolves: Bug 1440654 - Possible deadlock while installing an ipa replica
  - Resolves: Bug 1445178 - Silent install localhost issue
  - Resolves: Bug 1445177 - retrocl crash at shutdown
  - Resolves: Bug 1445176 - case sensitivity in acl


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-7
changelog:
  - Bump version to 1.3.6.1-7
  - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set(fix crash regression)
  - Resolves: bug 1381326 - dirsrv-snmp.service is provided by 389-ds-base instead of 389-ds-base-snmp
  - Resolves: bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-8
changelog:
  - Bump version to 1.3.6.1-8
  - Resolves: Bug 1432016 - Possible deadlock while installing an ipa replica
  - Resolves: Bug 1438029 - Overflow in memberof


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-9
changelog:
  - Bump version to 1.3.6.1-9
  - Resolves: Bug 1442880 - setup-ds-admin.pl -u with nsslapd-localhost changed
  - Resolves: Bug 1443682 - util_info_sys_pages should be able to detect memory restrictions in a cgroup


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-10
changelog:
  - Bump version to 1.3.6.1-10
  - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
  - Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
  - Resolves: Bug 1377452 - Integer overflow in performance counters
  - Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
  - Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
  - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-11
changelog:
  - Bump version to 1.3.6.1-11
  - Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
  - Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-13
changelog:
  - Bump version to 1.3.6.1-13
  - Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-14
changelog:
  - Bump version to 1.3.6.1-14
  - Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
  - Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
  - Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
  - Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
  - Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
  - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
  - Resolves: Bug 1451657 - -v option is not working for db2ldif.pl


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-15
changelog:
  - Bump version to 1.3.6.1-15
  - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
  - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
  - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
  - Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
  - Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-16
changelog:
  - Bump version to 1.3.6.1-16
  - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
  - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
  - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
  - Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
  - Resolves: Bug 1456774 - ipa-replica server fails to upgrade


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-17
changelog:
  - Bump version to 1.3.6.1-17
  - Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
  - Resolves: Bug 1476162 - Change the retrochangelog default cache size


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-18
changelog:
  - Bump version to 1.3.6.1-18
  - Require srvcore 4.1.3
  - Resolves: Bug 1479757 - dse.ldif and fsync
  - Resolves: Bug 1479755 - backup fails if changelog is enabled
  - Resolves: Bug 1479756 - Locked account provides different return code if password is correct


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.19-1
changelog:
  - Bump version to 1.3.6.19-1
  - Remove old mozldap and db4 requirements
  - Resolves: Bug 1483865 - Crash while binding to a server during replication online init


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-19
changelog:
  - Bump version to 1.3.6.1-19
  - Remove old mozldap and db4 requirements
  - Resolves: Bug 1483865 - Crash while binding to a server during replication online init


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-20
changelog:
  - Bump verions to 1.3.6.1-20
  - Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
  - Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
  - Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
  - Resolves: Bug 1489694 - crash in send_ldap_result
  - Resolves: Bug 1491778 - crash when adding invalid repl agmt
  - Resolves: Bug 1492830 - password expired control not sent
  - Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-21
changelog:
  - Bump verions to 1.3.6.1-21
  - Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-23
changelog:
  - Bump version to 1.3.6.1-23
  - Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
  - Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
  - Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-24
changelog:
  - Bump version to 1.3.6.1-24
  - Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
  - Resolves: Bug 1511940 - heap corruption during import
  - Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
  - Resolves: Bug 1509347 - cleanallruv task is not logging any information


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-25
changelog:
  - Bump version to 1.3.6.1-25
  - Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
  - Resolves: Bug 1523505 - opened connection are hanging, no longer poll
  - Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-27
changelog:
  - Bump version to 1.3.6.1-27
  - Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
  - Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
  - Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-28
changelog:
  - Bump version to 1.3.6.1-28
  - Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-29
changelog:
  - Bump version to 1.3.6.1-29
  - Resolves: Bug 1553602 - ipa-server-install fails with Error: Upgrade failed with no such entry [rhel-7.4.z]


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-10
changelog:
  - Bump version to 1.3.7.5-10
  - Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
  - Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
  - Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
  - Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
  - Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
  - Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
  - Resolves: Bug 1498980 - heap corruption during import
  - Resolves: Bug 1511462 - scope one searches give incorrect results
  - Resolves: Bug 1514033 - opened connection are hanging, no longer poll


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-11
changelog:
  - Bump version to 1.3.7.5-11
  - Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
  - Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
  - Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
  - Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-12
changelog:
  - Bump version to 1.3.7.5-12
  - Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
  - Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
  - Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
  - Resolves: Bug 1518287 - heap-use-after-free in csn_as
  - Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
  - Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
  - Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
  - Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
  - Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-13
changelog:
  - Bump version to 1.3.7.5-13
  - Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
  - Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
  - Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
  - Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
  - Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-14
changelog:
  - Bump version to 1.3.7.5-14
  - Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-15
changelog:
  - Bump version to 1.3.7.5-15
  - Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
  - Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
  - Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-16
changelog:
  - Bump version to 1.3.7.5-16
  - Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5.17
changelog:
  - Bump version to 1.3.7.5.17
  - Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
  - Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
  - Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp


author: Matus Honek <mhonek@redhat.com> - 1.3.7.5-19
changelog:
  - Bump version to 1.3.7.5-19
  - Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-20
changelog:
  - Bump version to 1.3.7.5-20
  - Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
  - Resolves: Bug 1559764 - memberof fails if group is moved into scope
  - Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
  - Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
  - Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
  - Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-21
changelog:
  - Bump version to 1.3.7.5-21
  - Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-22
changelog:
  - Bump version to 1.3.5.7-22
  - Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
  - Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
  - Resolves: Bug 1579698 - replicated operations should be serialized
  - Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
  - Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
  - Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-23
changelog:
  - Bump version to 1.3.7.5-23
  - Resolves: Bug 1581588 - ACI deny rules do not work correctly
  - Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-25
changelog:
  - Bump version to 1.3.7.5-25
  - Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-26
changelog:
  - Bump version to 1.3.7.5-26
  - Resolves: Bug 1615924 - Fine grained password policy can impact search performance
  - Resolves: Bug 1614836 - Disable nunc-stans by default
  - Resolves: Bug 1614861 - ldapsearch with server side sort crashes the ldap server


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-28
changelog:
  - Bump version to 1.3.7.5-28
  - Resolves: Bug 1628676 - 389-ds-base: race condition on reference counter leads to DoS using persistent search
  - Resolves: Bug 1628677 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-6
changelog:
  - Bump version to 1.3.8.4-6
  - Resolves: Bug 1595766 - backout this fix for now because it breaks FreeIPA


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-7
changelog:
  - Bump version to 1.3.8.4-7
  - Resolves: Bug 1595766 - backout this fix for now because it breaks FreeIPA (removed patch file all together)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-8
changelog:
  - Bump version to 1.3.8.4-8
  - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-9
changelog:
  - Bump version to 1.3.8.4-9
  - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-10
changelog:
  - Bump verison to 1.3.8.4-10
  - Resolves: Bug 1614501 - Disable nunc-stans by default
  - Resolves: Bug 1607078 - ldapsearch with server side sort crashes the ldap server


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-11
changelog:
  - Bump version to 1.3.8.4-11
  - Resolves: Bug 1614820 - Server crash through modify command with large DN


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-12
changelog:
  - Bump version to 1.3.8.4-12
  - Resolves: Bug 1616412 - filter optimization fix causes regression(fix reverted)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-13
changelog:
  - Bump version to 1.3.8.4-13
  - Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-16
changelog:
  - Bump version to 1.3.8.4-16
  - Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-18
changelog:
  - Bump version to 1.3.8.4-18
  - Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-19
changelog:
  - Bump version to 1.3.8.4-19
  - Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
  - Resolves: Bug 1645197 - on-line re-initialization hangs


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-21
changelog:
  - Bump version to 1.3.8.4-21
  - Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
  - Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-22
changelog:
  - Bump version to 1.3.8.4-22
  - Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-23
changelog:
  - Bump version to 1.3.8.4-23
  - Resolves: Bug 1672173 - import task should not be deleted after import finishes to be able to query the status
  - Resolves: Bug 1672177 - after certain failed import operation, impossible to replay an import operation.
  - Resolves: Bug 1672179 - cannot add cenotaph in read only consumer


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-24
changelog:
  - Bump version to 1.3.8.4-24
  - Resolves: Bug 1718184 - segfault when using pam passthru and addn plugins together


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-25
changelog:
  - Bump version to 1.3.8.4-25
  - Resolves: Bug 1722828 - referint update should discard any changes if mep update fails
  - Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character
  - Resolves: Bug 1719720 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-25.1
changelog:
  - Bump version to 1.3.8.4-25.1
  - Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character (missing patch file)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-1
changelog:
  * Bump version to 1.3.9.1-1
  - Resolves: Bug 1438144 - [RFE] Include autounmembering feature in IPA
  - Resolves: Bug 1645359 - Rebase 389-ds-base in RHEL 7.7 to 1.3.9
  - Resolves: Bug 1561769 - [RFE] revise the "transient error" message in a replication agreement's last update status
  - Resolves: Bug 1563999 - Is it possible for Directory server to reject the current password only?
  - Resolves: Bug 1597202 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
  - Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database
  - Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
  - Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck
  - Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass
  - Resolves: Bug 1643587 - default of "nsslapd-errorlog-maxlogsperdir: 1" causing huge log files
  - Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
  - Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
  - Resolves: Bug 1653163 - certmap fails when Issuer DN has comma in name
  - Resolves: Bug 1602001 - cannot add cenotaph in read only consumer
  - Resolves: Bug 1589144 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day)
  - Resolves: Bug 1600631 - In repicated topology a single-valued attribute can diverge
  - Resolves: Bug 1626375 - on-line re-initialization hangs
  - Resolves: Bug 1627846 - Contention on virtual attribute lookup
  - Resolves: Bug 1642838 - after certain failed import operation, impossible to replay an import operation
  - Resolves: Bug 1647099 - audit logs does not capture the operation where nsslapd-lookthroughlimit is modified 
  - Resolves: Bug 1648922 - during MODRDN referential integrity can fail erronously while updating large groups
  - Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy
  - Resolves: Bug 1663829 - import task should not be deleted after import finishes to be able to query the status.
  - Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements
  - Resolves: Bug 1622049 - db2bak.pl does not work with LDAPS, but ok with STARTTLS
  - Resolves: Bug 1633488 - fixup-memberof.pl -D cn=<> -w - -b <> -P LDAP fails with ldap_start_tls error
  - Resolves: Bug 1451460 - error messages during ldif2db after enabling encryption on an attribute
  - Resolves: Bug 1627512 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-2
changelog:
  - Bump version to 1.3.9.1-2
  - Resolves: Bug 1417340 - entry cache is not cleaned up if an operation is aborted
  - Resolves: Bug 1603140 - Export produces a non-importable ldif file
  - Resolves: Bug 1518320 - ns-slapd: crash in entrycache_add_int
  - Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
  - Resolves: Bug 1589144 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-3
changelog:
  - Bump version to 1.3.9.1-3
  - Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389
  - Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone 
  - Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members
  - Resolves: Bug 1673472 - the warning about skew time could last forever.
  - Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
  - Resolves: Bug 1482596 - referint update should discard any changes if mep update fails


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-4
changelog:
  - Bump version to 1.3.9.1-4
  - Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database.
  - Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements.
  - Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 & 3)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-5
changelog:
  - Bump version to 1.3.9.1-5
  - Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck 
  - Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
  - Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit
  - Resolves: Bug 1615155 - extended search fails to match entries
  - Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-11
changelog:
  - Bump version to 1.3.9.1-11
  - Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin
  - Resolves: Bug 1754831 - After audit log file is rotated, DS version string is logged after each update
  - Resolves: Bug 1763622 - Extremely slow LDIF import with ldif2db
  - Resolves: Bug 1763627 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
  - Resolves: Bug 1749289 - DB Deadlock on modrdn appears to corrupt database and entry cache


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-13
changelog:
  - Bump version to 1.3.9.1-13
  - Resolves: Bug 1801693 - ns-slapd is crashing while restarting ipactl
  - Resolves: Bug 1801695 - LDAP server returning controltype in different sequence
  - Resolves: Bug 1801700 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  - Resolves: Bug 1801701 - etime displayed has an order of magnitude 10 times smaller than it should be
  - Resolves: Bug 1801702 - Regression: NSS has interop problems as server when using limited cipher list
  - Resolves: Bug 1801704 - Log the actual base DN when the search fails with "invalid attribute request"
  - Resolves: Bug 1801705 - Directory Server 10 not RFC 4511 compliant
  - Resolves: Bug 1801706 - Replace error by warning in the state machine defined in repl5_inc_run


author: Petr Machata <pmachata@redhat.com> - 2.2.2-28
changelog:
  - GCC optimizes out write to internalUse in call from
    allocateMoreSlots to malloc.  Rename malloc to __efence__malloc to
    pacify the trigger.  Later sneak the malloc symbol in with an alias.
  - Resolves: #631316


author: Petr Machata <pmachata@redhat.com> - 2.2.2-29
changelog:
  - Tell GCC not to recognize builtins when compiling efence.c.
  - Resolves: #631316
  - Related: #632312


author: Paul Howarth <paul@city-fan.org> - 1.5.0-5
changelog:
  - Make GeoIP.dat -> GeoIP-initial.dat symlink in %install, not %post,
    and don't %ghost it
  - Run geoipupdate silently in %post and cron job
  - Create empty database files for %ghost to work with old rpm versions
  - Don't try to use noarch subpackages on old rpm versions
  - Update %description to mention database updates
  - Drop outdated README.Fedora


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-7
changelog:
  - Don't download the database in %post (#1029807)
  - Don't download GeoLiteASNum as it's no longer provided.


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-10
changelog:
  - Added base IPv6 database to GeoIP package
  - Added GeoIP-data subpackage with all other databases (#1201857)


author: Michal Ruprich <mruprich@redhat.com> - 1.5.0-12
changelog:
  - Removed clean section
  - Resolves: #1589860 - Update GeoIP legacy databases
  - Resolves: #1409060 -  Missing symlink at the GeoIP-update package


author: Paul Howarth <paul@city-fan.org> - 1.4.8-4
changelog:
  - libGeoIPUpdate and geoipupdate (which is linked against it) are GPL-licensed
    rather than LGPL-licensed (#840896)
  - Don't package generic INSTALL file (#661625)
  - Kill bogus rpaths on x86_64
  - Hardcode library sonames in %files list to avoid nasty surprises in the
    future
  - Drop %defattr, redundant since rpm 4.4
  - Recode docs as UTF-8
  - Don't use macros for commands
  - Use tabs


author: Philip Prindeville <philipp@fedoraproject.org> - 1.5.0-1
changelog:
  - Version bump to 1.5.0
  - Have GeoIP.dat be a symlink to the real data, and install the canned
    GeoIP.dat as GeoIP-initial.dat
  - Change config as per Boris' instructions to use 'lite' databases which are
    regularly updated.
  - Add pkgconfig (.pc) file into devel subpackage
  - Add cron support for refreshing the lite databases and make a separate
    subpackage.


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 6.7.8.9-7
changelog:
  - add aarch64 as a target by using 32 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 6.7.8.9-7
changelog:
  - add aarch64 as a target by using 64 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)


author: Jan Horak <jhorak@redhat.com> - 6.7.8.9-15
changelog:
  - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
    rhbz#1326834, rhbz#1334188, rhbz#1269553


author: Kalev Lember <kalevlember@gmail.com> - 0.7.990-3.git20130515
changelog:
  - Install the libmm-glib.so symlink in -glib-devel
  - Include the /usr/share/libmm-glib directory in -glib-devel
  - Make sure -glib-devel subpackage depends on the base -glib package


author: Dan Williams <dcbw@redhat.com> - 0.7.991-1.git20130607
changelog:
  - Update to 0.7.991 snapshot
  - Fix SMS validity parsing
  - Allow registration changes to 'searching' without disconnecting
  - Fix reading SMS messages from some QMI-based devices
  - Increase connection timeout for Novatel E362
  - Fix PIN retries checking when unlocking Ericsson devices
  - Better handling of supported and preferred modes (eg 2G, 3G, 4G preference)


author: Dan Williams <dcbw@redhat.com> - 0.7.991-2.git20130710
changelog:
  - Handle PNP connected devices
  - Fall back to AT for messaging if QMI modem doesn't support the WMS service
  - Fix IPv6 bearer creation for HSO devices
  - Fix detection of supported modes on Icera-based modems
  - Fix handling of some Icera-based modems with limited capability ports
  - Add support for Olivetti Olicard 200


author: Tom Lane <tgl@redhat.com> 1.2.3-1
changelog:
  - Update to final release of 1.2.3
  Resolves: #660484
  - Rebuild was needed anyway for mysql ABI break (no more libmysqlclient_r)


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-16.git20131011
changelog:
  - core: fix IPv4 addressing when IPv6 is disabled at boot time (rh #1012151)
  - ifcfg-rh: fix handling of default routes in route6 files (rh #991807)
  - core: fix PropertiesChanged signals for IP-related properties
  - ifcfg-rh: make minimal ifcfg file handling consistent with initscripts


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-19.git20131108
changelog:
  - core: fix various issues with ignore-carrier configuration (rh #1018403)
  - core: improve handling of NPAR/SRIOV devices in bonds (rh #804527)
  - ifcfg-rh: fix crash when reading connection (rh #1025007)
  - core: better handling of unrecognized connections (rh #1022256)
  - cli: add 'nmcli dev connect eth0' functionality (rh #961543)
  - core: add support for DCB/FCoE configuration (rh #799241)
  - cli: add 'activate' menu command for interactive editor (rh #1004883)
  - core: fix segfault when setting default IPv6 route for VPNs (rh #1019021)
  - core: track autoconnect for software devices that are removed (rh #1005913)
  - ifcfg-rh: always read and write static IP addresses (rh #998135)
  - cli: copy remove connection to local one on save (rh #997958)
  - core: don't crash when no DHCP client is available (rh #1015809)
  - libnm-glib: fix crash in nm_client_new() (rh #1010288)


author: Dan Williams <dcbw@redhat.com> - 1:0.9.9.1-3.git20140313
changelog:
  - core: read and assume team port configuration (rh #1035859)
  - core: looser IPv6 existing configuration assumption (rh #1073824)
  - core: follow network interface renames (rh #907836)
  - core: add support for VXLAN interfaces (rh #1066705)
  - wifi: fix connections to hidden SSIDs (rh #1069844)
  - cli: allow using master connection name when creating slaves (rh #1057494)
  - ifcfg-rh: fix reading and writing of Team port configurations (rh #1074160)


author: Dan Williams <dcbw@redhat.com> - 1:0.9.9.1-4.git20140313
changelog:
  - core: fix startup auto-activation of slow carrier detect interfaces (rh #1076592)
  - core: align default bridge priority with kernel defaults (rh #1073664)


author: Dan Winship <danw@redhat.com> - 1:0.9.9.1-7.git20140313
changelog:
  - ifcfg-rh: give a better error on "permission denied" (rh #1070617)
  - tui: allow cancelling with "Esc" from "nmtui connect" (rh #1080059)


author: Dan Williams <dcbw@redhat.com> - 1:0.9.9.1-8.git20140326
changelog:
  - core: fix management of some static configurations from initramfs (rh #1077743)
  - ifcfg-rh: add support for alias files (rh #1067170)
  - core: additional fixes for Data Center Bridging (DCB) (rh #799241)


author: Dan Williams <dcbw@redhat.com> - 1:0.9.9.1-11.git20140326
changelog:
  - core: additional fixes for Data Center Bridging (DCB) (rh #799241) (rh #1081991)
  - core: ensure /etc/resolv.conf has the right SELinux label (rh #1070829)


author: Dan Williams <dcbw@redhat.com> - 1:0.9.9.1-12.git20140326
changelog:
  - core: fix master interface DHCP handling if ignore-carrier is set (rh #1083624)
  - core: fix startup state not finishing correctly (rh #1084554)


author: Dan Williams <dcbw@redhat.com> - 1:0.9.9.1-13.git20140326
changelog:
  - core: ignore IPv6 cache routes to fix initial connection generation (rh #1083153)
  - core: ensure slow DHCP emits 'dhcp4-change' and 'dhcp6-change' dispatcher events (rh #1091296)


author: Dan Winship <danw@redhat.com> - 1:0.9.9.1-14.git20140326
changelog:
  - core: fix connection matching with IPv6 routes (rh #1086237)
  - core: wait with startup-complete for dynamic IPv4 and IPv6 addresses (rh #1096063, rh #1086906)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.9.9.1-17.git20140326
changelog:
  - core: fix connection matching generally and for s390 as well (rh #1083196)
  - dhcp: fix DHCPv6 address lifetime handling (rh #1086237)


author: Dan Williams <dcbw@redhat.com> - 1:1.0.0-5.git20150107.1ea95cd3
changelog:
  - build: remove -bluetooth and -wwan Requires to prevent unwanted updates (rh #1066690)
  - build: remove erroneous libnm/libnm-devel dependencies


author: Thomas Haller <thaller@redhat.com> - 1:1.0.0-7.git20150107.1ea95cd3
changelog:
  - platform: fix handling of routes with special metric (rh #1172780)
  - ifcfg-rh: add reading and writing of route-metric property


author: Dan Williams <dcbw@redhat.com> - 1:1.0.0-9.git20150121.b4ea599c
changelog:
  - build: fix NetworkManager-libnm and old NetworkManager-glib conflict (rh #1066690)
  - core: accept numeric bond options (rh #1171009) (rh #1133544)
  - core/libnm: better validate setting properties (rh #1182567)
  - core: add dispatcher script to support policy based routing (rh #1160013)


author: Dan Williams <dcbw@redhat.com> - 1:1.0.0-13.git20150121.b4ea599c
changelog:
  - core: remove IPv6LL address when deactivating managed devices (rh #1184997)
  - core: recognize external IP config earlier on startup
  - core: fix bridge default metric


author: Thomas Haller <thaller@redhat.com> - 1:1.0.6-22
changelog:
  - platform: fix detection of s390 CTC device (rh #1272974)
  - core: fix queuing activation while waiting for carrier (rh #1079353)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.0.6-25
changelog:
  - vpn: cancel the secrets request on agent timeout (rh #1272023)
  - vpn: cancel the connect timer when vpn reconnects (rh #1272023)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.10.2-4
changelog:
  - settings: clear unsaved flag on new connections (rh #1525078)
  - platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.10.2-5
changelog:
  - wwan: add default route even if modem didn't return a gateway (rh #1527934)
  - dhcp: fix assertion failure for dhcp-client-id (rh #1531173)


author: Thomas Haller <thaller@redhat.com> - 1:1.10.2-6
changelog:
  - core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
  - core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
  - core: fix invalid assertion deleting volatile connection (rh #1506552)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.10.2-7
changelog:
  - po: import translations (rh #1481186)
  - device: increase carrier wait time to 6 seconds (rh #1520826)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.10.2-10
changelog:
  - device: skip IP configuration phase for external devices (rh #1530288)
  - platform: fix crash during route-get call (rh #1534721)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.10.2-11
changelog:
  - ovs-interface: avoid starting ip configuration twice (rh #1540063)
  - libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
  - nmcli: clear link-watchers before adding the new ones (rh #1533926)
  - libnm-core: update team.runner description (rh #1533799)
  - libnm-core: team: fix runner sys_prio default value (rh #1533810)
  - libnm: avoid a symbol clash with json-glib (rh #1535905)
  - libnm-core: team: add support to runner "random" (rh #1538699)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.10.2-12
changelog:
  - ppp: don't start IPv6 configuration on the device (rh #1515829)
  - device: avoid setting the IPv4 rp_filter (rh #1492472)
  - nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.10.2-14
changelog:
  - manager: retry activating devices when the parent becomes managed (rh #1553595)
  - manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
  - manager: fix starting teamd after service restart  (rh #1551958)


author: Thomas Haller <thaller@redhat.com> - 1:1.12.0-1
changelog:
  - Update to upstream 1.12.0 release (rh #1592311)
  - device: improve MTU handling for VLAN (rh #1586191)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-2
changelog:
  - device: disable rp_filter handling (rh #1593194)
  - ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.12.0-3
changelog:
  - cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
  - po: import Japanese translation (rh #1569438)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-6
changelog:
  - dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
  - initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
  - cli: fix parsing vpn secrets from password file (rh #1628946)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-7
changelog:
  - manager: accept non-null device for VPN activations (rh #1641174)
  - drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.12.0-10
changelog:
  - manager: ignore ovs-system master when assuming connections (rh #1676551)
  - device: do ARP announcements only after masters have a slave (rh #1678796)


author: Thomas Haller <thaller@redhat.com> - 1:1.12.0-0.1
changelog:
  - Update to upstream release 1.11.90 (release candidate) (rh #1592311)
  - libnm: properly handle cancelling of async operations (rh #1555281)
  - libnm: support handling checkpoints (rh #1496739)
  - core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
  - core: rework and improve IPv4 address collission detection (rh #1507864)
  - wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
  - macsec: enable sending SCI by default and make it configurable (rh #1588041)
  - ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
  - wwan: improve failure reason for unsupported IP methods (rh #1459529)
  - tun: use netlink kernel API for tun devices if available (rh #1547213)
  - ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
  - dhcp: improve handling DHCP timeouts (rh #1573780)
  - dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
  - dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
  - dns: avoid updating resolv.conf when exiting (rh #1541031)
  - ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
  - ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
  - iface-helper: fix invalid reentrant call to platform (rh #1546656)
  - doc: various improvments to documentation (rh #1543832)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-0.2.20190404git9a8fe5f339
changelog:
  - Update to a 1.18 snapshot:
  - clients: only ask secrets for settings that require them (rh #1506536)
  - checkpoint: remove a device from checkpoint if it disappears (rh #1578335)
  - lldp: support more VLAN TLVs (rh #1652211)
  - bridge: add VLAN filtering support (rh #1652910)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-0.3.20190408git43d9187c14
changelog:
  - infiniband: allow large MTU (rh #1534869) (rh #1653494)
  - sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)


author: Francesco Giudici <fgiudici@redhat.com> - 1:1.18.0-0.4.20190408git43d9187c14
changelog:
  - keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
  - dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)


author: Thomas Haller <thaller@redhat.com> - 1:1.18.0-1
changelog:
  - Update to 1.18.0 release
  - cli: fix crash handling gsm secrets (rh #1698495)
  - rules: fix duplicate policy routing rules (rh #1652653)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-2
changelog:
  - cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
  - device: fix reapply of MTU (rh #1702657)
  - settings: fix failed assertion when adding connections (rh #1707261)
  - core: ensure software devices are managed when networking gets enabled (rh #1701585)
  - device: restore IPv6 configuration on link up (rh #1548237)
  - dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
  - core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
  - tc: add suppor for mired action an fq_codel qdisc (rh #1546802)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-3
changelog:
  - team: don't kill teamd for external devices (rh #1711952)
  - ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
  - po: update translations (rh #1689962)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-4
changelog:
  - cli: don't wait forever in the editor on update connection failure (rh #1702203)
  - team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)


author: Thomas Haller <thaller@redhat.com> - 1:1.18.4-1
changelog:
  - Update to 1.18.4 release
  - cli: fix bash completion for slave-types (rh #1654062)
  - core: improve handling of policy routing rules when restarting daemon (rh #1696881)
  - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
  - tui: only add bond options to profile that are supported by tui (rh #1715720)
  - cli: fix resetting default value for properties (rh #1715887)
  - core: fix detecting parent device by connection's UUID (rh #1716438)
  - core: fix setting IPv6 route options and destination (rh #1727193)
  - core: support more "arp_validate" bond options (rh #1730793)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2
changelog:
  - dhcp: include conditionals from existing dhclient configuration (rh #1758550)
  - core: fix sending ARP announcements (rh #1767681)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1
changelog:
  - Update to 1.18.6 release
  - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
  - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
  - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)


author: Thomas Haller <thaller@redhat.com> - 1:1.18.6-2
changelog:
  - vpn: gracefully handle invalid routes from VPN plugins
  - workaround g_strtoll() failing with EAGAIN (rh #1797915)


author: Thomas Haller <thaller@redhat.com> - 1:1.18.8-1
changelog:
  - Update to 1.18.8 relase
  - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
  - ifcfg-rh: handle 802-1x.pin properties.


author: Thomas Haller <thaller@redhat.com> - 1:1.18.8-2
changelog:
  - Backport OVS related fixes (rh #1871935)
  - ovs: support changing the MTU of ovs interfaces (rh #1820052)
  - ovs: fix race condition in setting MAC address (rh #1852106)


author: Thomas Haller <thaller@redhat.com> - 1:1.4.0-3
changelog:
  - wifi: fix activation failure due to error changing MAC address (rh#1371623)
  - core: fix wrong source interface for PropertiesChanged D-Bus signal (rh#1371920)
  - team: restore validation of JSON configuration (rh#1371967)
  - device: manage firewall zone for assumed persistent connections (rh#1366288)
  - device: don't let external changes cause a release of the slave (rh#1357738)


author: Thomas Haller <thaller@redhat.com> - 1:1.4.0-5
changelog:
  - libnm,nmtui: fix handling empty cloned-mac-address property (rh#1372799)
  - ibft: grant required CAP_SYS_ADMIN capabilities (rh#1371201)


author: Thomas Haller <thaller@redhat.com> - 1:1.4.0-7
changelog:
  - wifi: another fix activation failure due to error changing MAC address (rh#1371623, rh#1374023)
  - dhcp: fix race condition that may cause lost lease events and DHCP timeouts (rh#1373276)


author: Thomas Haller <thaller@redhat.com> - 1:1.4.0-8
changelog:
  - libnm: fix crash in nm_vpn_plugin_info_list_get_service_types() (rh#1374526)
  - device: wait for MAC address change before setting up interface (rh#1371623, rh#1374023)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.4.0-9
changelog:
  - clients: handle secret requests only for current connection (rh#1351272)
  - device: fix crash reapplying connection to slave devices (rh#1376784)
  - cli: fix autocompletion after ifname (rh#1375933)


author: Francesco Giudici <fgiudici@redhat.com> - 1:1.4.0-16
changelog:
  - libnm-core: remove INFERRABLE flag from dhcp-hostname property (rh#1421082)
  - core: honor order of IP addresses from configuration (rh#1394500)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-2
changelog:
  - core: fix persisting managed state of device (rh #1440171)
  - proxy: fix use-after-free (rh #1450459)
  - device: don't wrongly delay startup complete waiting for carrier (rh #1450444)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-3
changelog:
  - dhcp: don't add route to DHCP4 server (rh #1448987)
  - libnm: fix NUL termination of device's description (rh #1443114)
  - libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
  - core: fix device's UDI property on D-Bus (rh #1443114)
  - ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.8.0-4
changelog:
  - device: update external configuration before commit (rh #1449873)
  - bluetooth: fix crash on connecting to a NAP (rh #1454385)
  - device: release removed devices from master on cleanup (rh #1448907)
  - core: activate slaves using ifindex order by default (rh #1452585)
  - nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
  - po: update translations (rh #1382625)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-5
changelog:
  - ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
  - tui: fix crash during connect (rh #1456826)
  - libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-6
changelog:
  - connectivity: fix periodic connectivity check (rh #1458399)
  - bond: improve option matching on daemon restart (rh #1457909)
  - device: fix touching device after external activation (rh #1457242)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-7
changelog:
  - bond: fix crash comparing mode while generating bond connection (rh #1459580)
  - connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
  - device: persist nm-owned in run state (rh #1376199)
  - device: fix assuming master device on restart (rh #1452062)
  - device: apply route metric penality only when the default route exists (rh #1459604)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.8.0-8
changelog:
  - cli: fix output of iface in overview output (rh#1460219)
  - ppp: unexport NMPPPManager instance on dispose (rh#1459579)
  - cli: remove spurious device names from wifi subcommands output (rh#1460527)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-9
changelog:
  - device: don't change MTU unless explicitly configured (rh #1460760)
  - core: don't remove external IPv4 addresses (rh #1459813)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-11
changelog:
  - core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
  - core: fix unfreezing signals when unrealizing device fails (rh#1498755)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.8.0-0.4.rc3
changelog:
  - Update to third Release Candidate of NetworkManager 1.8
  - device: fix regressions in assuming devices on carryover from initrd (rh #1443878)
  - device: add support for SRIOV num_vfs (rh #1398934)
  - device: leave device up when setting it as unmanaged by user (rh #1371433)
  - core: properly track manager, route manager and default route manager references (rh #1440089)
  - route: properly deal with routes with non-empty host parts (rh #1439376)
  - vpn: fix a crash on disconnect (rh #1442064)
  - cli: fix hang on connection down (rh #1422786)
  - cli: fix interactive edit of bond slaves (rh #1440957)
  - vpn: fix early error handling on failed activations (rh #1440077)
  - core: only persist explicit managed state in device's state file (rh #1440171)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-1
changelog:
  - Update to upstream release 1.8.0
  - device: support dummy devices (rh#1398932)
  - core: support attaching user-data to connection profiles (rh#1421429)
  - core: fix allowing FQDN in dhcp-hostname setting (rh#1443437)
  - core: fix configuring firewall while device is activating (rh#1445242)
  - core: don't block activation without carrier for IPv6 DAD (rh#1446367)
  - tui: force writing master key to ifcfg file when editing connection (rh#1425409)


author: Avesh Agarwal <avagarwa@redhat.com> - 0.9.8.0-2
changelog:
  - Fixed rhbz#921061
  - Fixed rhbz#999353
  - Fixed rhbz#1035786
  - Fixed rhbz#1014830
  - Fixes 1035786 (and its duplicate 1040924)
  - Fixed 926225
  - Fixed dependency to libreswan.
  - Created a new sub package NetworkManager-openswan-gnome
  - Various other spec file fixes.
  - Additional code changes are as follows:
  - Fixed an issue where proper network stack is not loaded unless
    _stackmanager is run before starting pluto daemon service.
  - Fixed the termination operation of pluto daemon to comply with
    libreswan changes.
  - Fixed various debug messages.
  - Fixed initiation of pluto daemon by this plugin to reflect the
    changes in libreaswan.
  - Fixed defaults values for more parameters to help the VPN
    connection stay more reliable.
  - Rewrote pluto watch API which watches the pluto process for its status.
    Fixed memory leak issues as not all child processes were reaped correctly.
    Also g_spwan_close_pid was not being called after children were reaped.
    Also modified debugs and added more to help with debugging in the future.
  - Fixed an issue where nm-openswan service is searching for ipsec binary in
    both /sbin and /usr/sbin leading to same operation twice, as /sbin is just
    symlink to /usr/sbin, so removed /sbin from the search paths.
  - Fixed some libreswan related macro changes.
  - Fixed netmask issue when sending IP information to the nm openswan
    plugin service.
  - Fixed the current code as it does not set the default route field
    NM_VPN_PLUGIN_IP4_CONFIG_NEVER_DEFAULT when sending VPN information
    to nm-openswan plugin. This fix sets the field to TRUE.
  - Fixed some issues found by coverity scan.
  - Fixed an issue where writing configuration on stdin should not end with
    \n as it gives error. It used to work previously, but not with latest
    NetworkManager versions.
  - libreswan related fixes, as some macros have been modified after forking
    to libreswan from openswan.
  - openswan/libreswan does not provide tun0 interface, so fixed the code
    where it sends tun0 interface.
  - Fix prcoessing of nm-openswan-dialog.ui file and added more error notifications.
  - Fixed dead code based on coverity scan.
  - Fixed gnomekeyring lib dependencies.
  - Fixed Networkmanager and related lib dependencies.
  - Fixed gtk label max width issue by setting it to 35.
  - NM-openswan was missing support for nm-openswan-auth-dialog.desktop.in.in.
    So added a new nm-openswan-auth-dialog.desktop.in.in, and modified related
    Makefile and configure.ac files.


author: Lubomir Rintel <lrintel@redhat.com> - 1.2.0-0.1.beta3
changelog:
  - Update to 1.2-beta3:
  - Added support for main exchange type (rh #1292912)
  - A device libreswan is unable listen on no longer aborts connection (rh #1285367)
  - Added import/export support (rh #1129878)
  - Replace NetworkManager-openswan (rh #1264552)


author: Thomas Haller <thaller@redhat.com> - 1.2.4-1
changelog:
  - Update to 1.2.4 release
  - Move base VPN plugin library to base libreswan package
  - Don't require nm-connection-editor anymore


author: Rex Dieter <rdieter@fedoraproject.org> 1.6.1-8
changelog:
  - CVE-2009-1720 OpenEXR: Multiple integer overflows (#513995)
  - CVE-2009-1721 OpenEXR: Invalid pointer free by image decompression (#514003)


author: Nicolas Chauvet <kwizart@gmail.com> - 1.7.1-1
changelog:
  - Update to 1.7.1

  -* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.0-5
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild


author: Jan Safranek <jsafrane@redhat.com> - 2.0.19-2
changelog:
  - Updated RPM scriptlets with latest systemd-rpm macros (#850246)
  - Fixed fedora-review tool complaints


author: Ledvinka Ales <aledvink@redhat.com> - 2.0.19-5
changelog:
  - Support aarch64 by replicating release toolchain.
  - Configuration subpackage with kernel probed wildcard module aliases.
    as workaround for bz#961878 and fesco#1110
  - Man pages symlinks same as bin symlinks.
  - ipmi_ui command help argument.
  - ipmilan missing options.
  - Fixed build requirements.


author: Ledvinka Ales <aledvink@redhat.com> - 2.0.19-7
changelog:
  - Hint compilation to avoid strict aliasing and prevent type-punned pointer issues.
  - Fix rPath regression for OpenIPMI-perl library.


author: Boris Ranto <branto@redhat.com> - 2.0.19-12
changelog:
  - New release
  - Move OpenIPMI modprobe conf to /usr/lib/modprobe.d/ (#1195289)
  - Avoid warning on update/removal (#1256798)
  - Stop manually creating and shipping /var/run/OpenIPMI (#1296560)


author: Richard Hughes <rhughes@redhat.com> - 0.8.9-3
changelog:
  - Backport 2 fixes from master to increase the maximum number of packages that
    can be processed, and also to fix a race in the offline updates feature.


author: Richard Hughes <rhughes@redhat.com> - 0.8.9-5
changelog:
  - Backport another fix from master to fix the passwordless install for users
    in wheel group only bug.
  - Resolves: #975214


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: not-rhel.patch
  -->  SL is not RHEL
  - Added Source: PackageKit.ini
  -->  Config file for automated patch script
  - Ran Regex: (Release: .*)%{\?dist}(.*) => \1.sl7\2
  -->  Modify release string to note changes


author: Richard Hughes <rhughes@redhat.com> - 0.8.8-1
changelog:
  - New upstream release
  - PackageKit now allow local active users to install signed software without
    prompting for authentication. If you need to change this you will need to
    either install a PolicyKit override or just patch the policy file.
  - Added Provides property to retrieve which Provides the backend supports
  - Allow clients to call org.freedesktop.DBus.Peer
  - browser-plugin: Do not crash when running an installed package that is upgradable
  - Do not install the bash-completion code in /etc
  - Do not use _UTF8Writer when using python3
  - Don't abort the daemon if the client requests a property that does not exist
  - Don't use the default main context in sync PkClient methods
  - Expose the transaction flags on the .Transaction object
  - Pause for 10 seconds if an error occurred before restarting systemd-updates
  - Remove the prepared-updates file if any relevant state was changed
  - Support getting the distro-id from /etc/os-release
  - Use PIE to better secure installed tools and also use full RELRO in the daemon
  - Use the correct session method to fix font installation in pk-gtk-module
  - Write a pre-failure status file in case the update transaction crashes
  - yum: Ensure conf.cache is set before repo.cache is created
  - yum: Ignore errors when removing packages to work out the requires list
  - zif: Do not issue a critical warning when doing WhatProvides
  - zif: Use the same speedup used in libzif upstream


author: Richard Hughes <rhughes@redhat.com> - 0.8.9-1
changelog:
  - New upstream release
  - Add 'pkcon backend-details' to be get details of the selected backend
  - Do not rely on Python2 to write UTF-8 strings
  - Update the comps->group mapping for Fedora 19
  - When converting to unicode special case YumBaseError


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: not-rhel.patch
  -->  SL is not RHEL
  - Added Patch: pk-upgrade-distro.patch
  -->  Use /usr/sbin/sl7-upgrade rather than preupgrade
  - Added Source: PackageKit.ini
  -->  Config file for automated patch script
  - Added Patch: pk-yum-backend-for-sl.patch
  -->  Add in code to let PackageKit check dist to upgrade
  - Added Patch: use-sl-upgrade.patch
  -->  Use /usr/sbin/sl7-upgrade rather than preupgrade


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: not-rhel.patch
  -->  SL is not RHEL
  - Added Source: PackageKit.ini
  -->  Config file for automated patch script


author: Tom Lane <tgl@redhat.com> 3.8.1-1
changelog:
  - Created package by stripping down postgresql specfile and adjusting
    to meet current packaging guidelines for python modules.


author: Tom Lane <tgl@redhat.com> 3.8.1-2
changelog:
  - Fix License tag and permissions on example scripts under tutorial/,
    per discussion in package review request.
  Related: #452321


author: Tom Lane <tgl@redhat.com> 4.0-1
changelog:
  - Update to PyGreSQL 4.0
  - Relabel license as PostgreSQL now that that's separately recognized by OSI.


author: Nikolay Vladimirov <nikolay@vladimiroff.com> - 3.0.0-1
changelog:
  - Updated to 3.0 stable
  - Changed requires from python-numeric to numpy for BZ #504681
  - upstream removed full license text in license.txt
  - other minor spec fixes


author: Nikolay Vladimirov <nikolay@vladimiroff.com> - 3.0.1-1
changelog:
  - New upstream release
  - Fix BZ # 635496 - PyOpenGL crashes on every program
  - Update the shebang patch to work on the latest version
  - Upstream restored license.txt to their distribution


author: Rex Dieter <rdieter@fedoraproject.org> 4.10.1-2
changelog:
  - filter private shared objects
  - %{python_sitelib}/dbus/mainloop/qt.so should be in %python_sitearch (#957260)
  - .spec cleanup
  - -assistant subpkg


author: Petr Pisar <ppisar@redhat.com> - 1.2.15-14
changelog:
  - Do not harness backing store by default. Export SDL_VIDEO_X11_BACKINGSTORE
    environment variable to enable it.
  - Resolves: rhbz#1245417


author: Wim Taymans <wtaymans@redhat.com> - 1.2.15-17
changelog:
  - Fix Some CVEs: CVE-2019-7572, CVE-2019-7573, CVE-2019-7574,
    CVE-2019-7575, CVE-2019-7576, CVE-2019-7577, CVE-2019-7578,
    CVE-2019-7635, CVE-2019-7636, CVE-2019-7637, CVE-2019-7638
  - Resolves: rhbz#1716201, rhbz#1716202, rhbz#1716206,
  - Resolves: rhbz#1716207, rhbz#1716208


author: Troy Dawson <dawson@fnal.gov> 4.0-1
changelog:
  - Changed the script to only work with grub, not lilo or efi
  - For Fedora 13, RHEL 6 (or it's derivatives) or newer due to
    the startup changes in


author: Pat Riehecky <riehecky@fnal.gov> 4.1-1
changelog:
  - added '-r' option to script for removal of the configuration
  - now removes configuration when uninstalled
  - Switched to augeas based configuration
  - The old script can be found in the %doc folder
  - removed support for non-grub bootloaders as none are avalible for SL6
  - a number of SPEC file changes to make things cleaner


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 0.11.6-12
changelog:
  - Add m2crypto as R
  - Change License
  - Update spec
  -   All these changes comes from Toshio's patch BZRH #602932


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 4.14-11
changelog:
  - Spec file fixes for Emacs add-on guideline compliance
  - Move *.el(c) files to their own directory
  - Use Emacs packaging macros
  - Remove unneeded pkgconfig macros


author: Jakub Filak <jfilak@redhat.com> 2.1.11-3
changelog:
  - fix a double free error in abrt-applet
  - configure Augeas to parse only required files
  - show 'Close' button in the Configuration dialogue
  - Resolves: #1050167, #1053534, #1054158


author: Jakub Filak <jfilak@redhat.com> 2.1.11-5
changelog:
  - abrt-cli requires libreport-rhel (the reporting workflows)
  - applet: don't notify missing ignored_problems file
  - abrt-cli: show a hint about creating a case in RHTS
  - abrt-cli: show a info text suggesting enabling the autoreporting
  - Related: #1044424
  - Resolves: #1054291, #1055565, #1056980


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-7
changelog:
  - Fix-handling-of-Machine-Check-Exceptions
  - abrt-harvest-vmcore recovers from Permission denied errors
  - never stop 'notify' event
  - install abrt-python files to arch specific dir
  - Resolves: #1032077, #1032511, #1057710
  - Related: #881123


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-9
changelog:
  - Stop consuming 100%CPU in abrt-upload-watch
  - Turn off Autoreporting
  - Enabled GPG check
  - Resolves: #1051480, #1063317


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-11
changelog:
  - Capture all necessary logs in sosreport.tar.gz
  - do not send ureport from abrt-applet
  - do not run gdb under root
  - Resolves: #1067114, #1069278, #1069719


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Removed Patch: 0016-cli-list-show-a-hint-about-creating-a-case-in-RHTS.patch
  -->  Do not suggest opening an upstream support case
  - Added Source: abrt.ini
  -->  Config file for automated patch script
  - Ran Regex: (Release: .*)%{\?dist}(.*) => \1.sl7\2
  -->  Modify release string to note changes


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-13
changelog:
  - Translation updates
  - localization fixes
  - applet: confirm ignoring of notifications
  - cli: batch reporting in abrt-cli
  - cli: add option remove crash dirs after reporting
  - cli: robustize abrt-console-notification.sh
  - cli: make consistent commands in abrt-cli
  - applet: chown each notified problem before reporting it
  - dbus: fixed abrt-dbus memory leaks
  - plugins: add abrt-action-generate-machine-id
  - spec: add abrt-action-generate-machine-id
  - spec: remove dependency on crash from abrt-addon-vmcore
  - spec: hook abrt-oops.conf.5
  - spec: don't use native unwinder on arm arch
  - spec: remove stray space from %description
  - spec: add missing requires for python api
  - spec: add dependency on abrt-python
  - python: support exceptions without traceback
  - spec: hook Kernel oops configuration files
  - koops: add an option controlling MCE detection
  - gdb: disable loading of auto-loaded files
  - vmcore: start the service after kdump service
  - Resolves: #1066482, #1084031, #1067545, #1084027, #1087880, #1087777
  - Resolves: #1015473, #1139001, #1076820, #1139552, #1128637, #1066501
  - Resolves: #1086642


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-14
changelog:
  - ureport: attach contact email
  - mce: separate mce analysis from Kernel oops analysis
  - console-notifications: use return instead of exit
  - Resolves: #1150389, #1150169
  - Related: #1076820


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-15
changelog:
  - console-notifications: skip non-interactive shells
  - applet: show component instead of duphash in the notification
  - Related: #1084031, #1150169


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-19
changelog:
  - abrt-auto-reporting: add ureport authentication command line arguments
  - add python-augeas to the requirements
  - mark all strings for translations
  - translation updates
  - Related: #1087880, #1174833


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: abrt.ini
  -->  Config file for automated patch script
  - Removed Patch: 0016-cli-list-show-a-hint-about-creating-a-case-in-RHTS.patch
  -->  Do not suggest opening an upstream support case
  - Removed Patch: 0079-cli-mark-the-suggestion-text-for-translation.patch
  -->  Do not suggest opening an upstream support case in non-english


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-20
changelog:
  - remove the old dump directories during upgrade
  - abrt-action-install-debuginfo-to-abrt-cache: sanitize arguments and umask
  - fix race conditions and directory traversal issues in abrt-dbus
  - use /var/spool/abrt instead of /var/tmp/abrt
  - make the problem directories owned by root and the group abrt
  - validate uploaded problem directories in abrt-handle-upload
  - don't override files with user core dump files
  - fix symbolic link and race condition flaws
  - Resolves: #1211969, #1212819, #1212863, #1212869
  - Resolves: #1214453, #1214610, #1216973, #1218583


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-22
changelog:
  - do not open the build_ids file as the user abrt
  - do not unlink failed and big user core files
  - Related: #1212819, #1216973


author: Richard Marko <rmarko@redhat.com> - 2.1.11-27
changelog:
  - abrt-merge-pstoreoops: merge files in descending order
  - abrt-auto-reporting: fix related to conditional compilation
  - Update translations
  - Related: #1233662, #1191572, #1181248


author: Richard Marko <rmarko@redhat.com> - 2.1.11-28
changelog:
  - doc: fix related to conditional compilation of man page
  - spec: add dbus dependency for abrt-cli and abrt-python
  - Related: #1191572, #1245527


author: Richard Marko <rmarko@redhat.com> - 2.1.11-29
changelog:
  - ccpp: use global TID
  - ccpp: fix comment related to 'MakeCompatCore' option in CCpp.conf
  - cli: fix testing of DBus API return codes
  - dbus-api: unify reporting of errors
  - Related: #1210601, #1252419, #1224984


author: Richard Marko <rmarko@redhat.com> - 2.1.11-31
changelog:
  - Only analyze vulnerabilities when coredump present
  - Only generate core_backtrace if it's not already present.
  - Related: #1210601


author: Richard Marko <rmarko@redhat.com> - 2.1.11-33
changelog:
  - abrt-auto-reporting documentation
  - ccpp: Use global PID
  - ccpp: correct comments mentioning TID
  - Related: #1252590, #1261036, #1223805


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: abrt_spec-no-libreport-plugin-rhtsupport.spec
  -->  We don't package libreport-plugin-rhtsupport, so we can't require it
  - Added Patch: no-auto-bz-or-sosreport.patch
  -->  Do not auto create resources for RH support
  - Added Patch: disable-report-suggestions.patch
  -->  Ensure the 'report to RH' can never be triggered
  - Added Source: abrt.ini
  -->  Config file for automated patch script


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-35
changelog:
  - make /var/spool/abrt owned by root
  - remove 'r' from /var/spool/abrt for other users
  - abrt-action-install-debug-info: use secure temporary directory
  - stop saving abrt's core files to /var/spool/abrt if DebugLevel < 1
  - Fixes for: CVE-2015-5273 and CVE-2015-5287
  - Resolves: #1266853


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-39
changelog:
  - python: fix check for absolute path
  - console-notifications: add timeout
  - vmcore: generate 'reason' file in all cases
  - Fix memory leaks in abrt-dbus
  - Resolves: #1250337, #1166633, #1249101, #1319704


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-46
changelog:
  - remove not implemented option AttemptHardlink in vmcore.conf
  - introduce unsafe reporting for not-reporable problems
  - rewrite skip_pfx() function to work with journal msgs
  - don't expect kernel's version '2.6.*' or '3.*.*'
  - Related: #1416586, #1257159, #1328264, #1378469


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-49
changelog:
  - Translation updates
  - Stop creating uReports for unpackaged executables
  - koops: add detailed taint flag description for kernel oopses
  - koops: fix kernel oops and fatal MCE recognition
  - python: provide more information about Python exceptions
  - vmcore: fix replication of vmcore files
  - Related: #1271213, #1460224, #1374648, #1361116, #1228344,
  - Related: #1395285, #1214730, #1446410, #1319828, #1501718


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: no-auto-bz-or-sosreport.patch
  -->  Do not auto create resources for RH support
  - Added Patch: disable-report-suggestions.patch
  -->  Ensure the 'report to RH' can never be triggered
  - Added Source: abrt.ini
  -->  Config file for automated patch script


author: Matej Marusak <mmarusak@redhat.com> - 2.1.11-51
changelog:
  - a-a-s-p-data: fix segfault if GPGKeysDir isn't configured
  - spec: turn on --enable-native-unwinder aarch64
  - plugins: a-a-g-machine-id use dmidecode command
  - spec: use dmidecode instead of python-dmidecode
  - Related: #1566707, #1566707, #1260074, #1591141


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-53
changelog:
  - cli: load config file at the beginning
  - ccpp: fast dumping and abrt core limit
  - conf: increase MaxCrashReportsSize to 5GiB
  - vmcore: /var/tmp/abrt is no longer a dump location
  - koops: Filter kernel oopses based on logged hostname
  - daemon: Fix double closed fd race condition
  - Related: #1618818, #1647841, #1613236, #1613182, #1655241


author: Jakub Filak <jfilak@redhat.com> 2.1.6-1
changelog:
  - replace functions deprecated in Gtk-3.10 with their substitutes
  - integrate with satyr, drop btparser
  - use absolute path in python shebang rhzb#987010
  - abrt-action-save-package-data: properly close rpm database. Closes #674.
  - abrt-action-save-package-data: fix handling of ProcessUnpackaged on scripts
  - abrt-action-save-package-data manpage: typo fix
  - change /var/spool/abrt/ to /var/tmp/abrt in doc rhbz#912750
  - Fix RPMdiff warnings about abrtd and abrt-action-install-debuginfo-to-abrt-cache
  - specfile: add dependency on abrt-libs to abrt-addon-uefioops
  - stop using the hardcoded event list, use workflows instead rhbz#866027
  - retrace-client: build correct release for Fedora Rawhide
  - spec: drop unnecessary Obsoletes and Provides
  - correct FSF address in python exception hook
  - add missing manual pages for binaries and scripts
  - fix rpmlint issues in the spec file
  - move event option XML files to /usr/share/libreport/
  - abrt-hook-ccpp: always fall back to creating user core.
  - dbus: add GetForeignProblems method
  - the system tray icon opens recently detected problem
  - add gdb python plugin which analyzes coredump for vulnerability
  - applet: stop saving configuration at exit
  - introduce system-config-abrt
  - abrt-cli status: make the output more natural
  - Fix wrong path in shell include
  - abrt-dump-xorg: save "type=xorg" along with "analyzer=xorg"
  - Update python hook to use fixed socket interface
  - abrt-server: updates/fixes for future rasdaemon needs
  - Resolves: #988165


author: Jakub Filak <jfilak@redhat.com> 2.1.7-1
changelog:
  - fix debuginfo installer expecting user input from a pipe - closes #696
  - add environment variable whitelist to debuginfo install wrapper - closes #692
  - add repo_pattern argument as a custom repository filter - closes #688
  - abrt-cli list: replace "@" prefix by "id " prefix
  - fix a crash in 'abrt-cli info' when short id isn't found
  - Use common string-to-sha1_hash functions. #694
  - doc: update OpenGPGCheck in a-a-save-package-data rhbz#997922
  - abrt-cli report: accept sha1 hashes of directory names. #693
  - abrt-dump-oops: emit a message if throttling for a significant period of time
  - abrt-gdb-exploitable: print current instruction
  - spec: posttrans scriptlet regenerating core_backtraces
  - abrt-handle-event: add check for missing crash thread
  - provide tmpfiles.d configuration
  - abrt-cli list: use sha1 hash as short ids instead of @N thing. rhbz#906733
  - vmcore: fail gracefully if dump_dir is not accessible
  - spec: vmcore: require kexec-tools
  - vmcore: use re.MULTILINE instead of numerical value
  - vmcore: don't fail if /etc/kdump.conf is not readable
  - abrt-cli info: add "-s SIZE" option. closes #689
  - fix noninteractive mode in debuginfo installer - rhbz#737066
  - fixed the gpg keys loading - closes #686
  - Fix type of OPT_BOOL's referenced flag variable - it must be int, not bool!
  - adds a kdump.conf parser to get the correct dump dir location, closes #640
  - xorg_event.conf: use abrt-action-list-dsos to create dso_list
  - abrt-action-list-dsos: extend it to be able to parse Xorg backtrace.
  - don't require debuginfo for vmcore analysis rhbz#768389
  - specfile: make addon-pstoreoops obsolete addon-uefioops
  - abrt-dump-oops: add -t option which slows down problem creation. rhbz#902398.
  - rename uefioops to pstoreoops rhbz#949721
  - spec: create type element for problem dirs where it doesn't exist - rhbz#958968
  - introduce abrt-upload-watch
  - fix ccpp hook to create the type element - closes #682
  - specfile: use systemd-rpm macros. rhbz#850019
  - abrt-harvest-vmcore: notify new path - #657
  - abrt-dump-oops: remove redundant g_list_length() call, make messages clearer
  - updated translation - rhbz#860555
  - updated transifex url
  - GUI config: add Close/Defaults button
  - GUI config: hide option descriptions in tool tips
  - GUI config: add Silent shortened reporting support
  - applet: silent shortened reporting
  - applet: less misleading label for Ignore button
  - abrt-handle-upload: switch from shell to python; send socket notification. #657
  - spec: add build requires for XSMP depencies
  - applet: update seen list when X Session dies
  - improved the error messages in abrt-server - closes #679
  - fix typo in abrt-config-widget.ui
  - spec: add new packages abrt-gui-libs and abrt-gui-devel
  - delete desktop file for system-config-abrt
  - expose abrt configuration GUI in public API
  - rewrite abrt-harvest-uefioops to python - closes #678
  - spec: abrt-python is no longer noarch - related #677
  - created python binding for notify_new_path - closes #677
  - spec: install applet's desktop file to system dir
  - applet: configure notification source
  - rewrite shell script for moving vmcores into python closes #676
  - abrtd: ensure that the dump location directory exists
  - a-a-ureport: generate core_backtrace only for CCpp problems
  - do not store potentially big data in /tmp
  - abrt-dbus: send new problem notify signal to socket
  - abrtd: remove "post-create" machinery. Related to #657
  - Avoid leaving stale rpmdb locks behind (rhbz#918184)
  - abrtd: improve parsing of pidfile in create_pidfile()
  - abrt-dump-{oops,xorg}: send new problem notify signal to socket
  - abrtd: disable inotify watch on DUMP_LOC
  - abrt-hook-ccpp: send "POST /creation_notification" after creating problem dir
  - Stop dying in check_free_space(); rename it to low_free_space()
  - abrt-server: make create_problem_dir() run "post-create"
  - abrt-handle-event: create DUMP_LOC/post-create.lock when running "post-create"
  - abrt-server: add support for "POST /creation_notification"
  - abrt-handle-event: free more of allocated data
  - Resolves: #880694, #895745, #906733, #949721, #953927, #960549, #961520, #967644, #990208, #993591, #993592


author: Jakub Filak <jfilak@redhat.com> - 1.0.6-1
changelog:
  - Fix a deadlock in GC start callback
  - Disable experimental features in production releases
  - Resolves: #1012827


author: Jakub Filak <jfilak@redhat.com> - 1.0.6-3
changelog:
  - Mark stack trace with remote paths as not-reportable
  - Do not provide own reporting workflows
  - Code optimization
  - Do not report exception caught by native functions
  - Use the last frame class path for executable
  - Gracefully handle JVMTI errors
  - Add an abstract to README
  - Add support for journald and syslog
  - Make log output disabled by default
  - Add support for changing log directory
  - Fix a race condition causing a crash of JVM
  - Related: #1051198
  - Resolves: #1051483, #1054720, #1054737, #1055581


author: Jakub Filak <jfilak@redhat.com> - 1.0.6-6
changelog:
  - Make sure that agent_onload and agent_onunload are processed only once
  - Add test results for Linux-aarch64
  - Resolves: #1044756, #1063322


author: Ray Strode <rstrode@redhat.com> - 0.6.35-11
changelog:
  - address minor bug in previous patch
    Related: #1220904

  - fix memory leak in log handler
    Resolves: #1292543


author: Ray Strode <rstrode@redhat.com> - 0.6.42-2
changelog:
  - Update to 0.6.44
    Related: #1424623
  - export password expiration policy from shadow
    Resolves: #1334464


author: Ray Strode <rstrode@redhat.com> - 0.6.45-1
changelog:
  - Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
    Related: #1424623 #1334464


author: Ray Strode <rstrode@redhat.com> - 0.6.45-2
changelog:
  - Don't tread explicitly requested users as cached
    Fixes UncacheUser operation.
    Resolves: 1446620
    Related: #1432602


author: Ray Strode <rstrode@redhat.com> - 0.6.45-6
changelog:
  - Don't return bogus password expiration policy when
    shadow file is unavailable
    Resolves: #1530659


author: Kamil Dudka <dkdudka@redhat.com> - 2.2.51-13
changelog:
  - avoid failure of %check when building as root (#1085389)
  - setfacl.1: document the meaning of '-' in perms (#1337039)


author: Al Stone <ahs3@redhat.com> - 20130517-1
changelog:
  - Update to latest upstream source.
  - Remove acpica-tools-config.patch -- now in upstream
  - Remove iasl-signed-char.patch -- now in upstream
  - Updated debian-big_endian.patch
  - Updated debian-unaligned.patch


author: Al Stone <ahs3@redhat.com> - 20130517-2
changelog:
  - Correct an oversight: we provide an acpidump in conflict with the
    version in pmtools (which appears to be dead upstream) but had not
    made it an alternative before


author: Al Stone <ahs3@redhat.com> - 20130626-1
changelog:
  - Update to latest upstream source.
  - Move acpidump to acpidump-acpica so it be an alternative properly
  - Add basic man page for acpidump
  - Enable use of AAPITS tests during the check step


author: Al Stone <ahs3@redhat.com> - 20130725-2
changelog:
  - Fix several rpmlint items (listed below)
  - Add versions to explicit provides for acpixtract, acpidump
  - Not all setup steps used -q
  - Setup executable test script (run-misc-tests.sh) differently
  - Removed unneeded commented out line with macros in it
  - Removed mixed use of spaces and tabs (all spaces now)
  - Corrected source URLs (upstream moved)


author: Al Stone <ahs3@redhat.com> - 20130823-2
changelog:
  - Add in a copy of the GPLv2 text in order to comply with the requirement
    to always redistribute the terms of the license.


author: Dean Nelson <dnelson@redhat.com> - 20130823-3
changelog:
  - Fix run-misc-tests.sh script to properly set the number of BITS to 64 when run
    on a s390x system.


author: Dean Nelson <dnelson@redhat.com> - 20130823-7
changelog:
  - Fix the dangling symlink issue for acpidump(1) and acpixtract(1) man pages
    that was reported in RHBZ 1074681.


author: Dean Nelson <dnelson@redhat.com> - 20130823-8
changelog:
  - Fix run-misc-tests.sh script to properly set the number of BITS to 64 when run
    on a ppc64le system as requested by RHBZ 1125471.


author: Dean Nelson <dnelson@redhat.com> - 20140926-1
changelog:
  - Update to the latest upstream version of acpica as requested by RHBZ 967963.
  - Refresh existing patches and add new ones to enable a clean build.
  - Fix build failures that start before and finish after midnight.


author: Dean Nelson <dnelson@redhat.com> - 20150619-1
changelog:
  - Update to the latest upstream version of acpica as requested by RHBZ 1211328.
  - Refresh existing patches and add/delete ones to enable a clean build.
  - Add missing return status checks after a few calls to AcpiDmDumpTable() and
    one to fopen().


author: Dean Nelson <dnelson@redhat.com> - 20150619-3
changelog:
  - Remove acpitests-unix-20150619 directory from the build because it was a
    mistake that it was present and it complicated the fixing of the file
    permissions done related to RHBZ 1211328's requested rebase.


author: Dean Nelson <dnelson@redhat.com> - 20150619-3
changelog:
  - Remove acpitests-unix-20160527 directory from the build because it was a
    mistake that it was present and it complicated the fixing of the file
    permissions done related to RHBZ 1211328's requested rebase.


author: Dean Nelson <dnelson@redhat.com> - 20160527-1
changelog:
  - Update to the latest upstream version of acpica as requested by RHBZ 1278038.
  - Refresh existing patches and add/delete ones to enable a clean build.


author: Dean Nelson <dnelson@redhat.com> - 20150619-3
changelog:
  - Remove acpitests-unix-%{version} directory from the build because it was a
    mistake that it was present and it complicated the fixing of the file
    permissions done related to RHBZ 1211328's requested rebase.


author: Al Stone <ahs3@redhat.com> - 20160527-2
changelog:
  - Corrected the use of percent signs in the change log and made sure
    they are all properly escaped.  Resolves: #1425899.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.18-1
changelog:
  - New version
  - Replaced RPM_BUILD_ROOT variables by {buildroot} macros
  - Updated URLs to project home page and source code
  - Dropped mk patch, handled better way in the spec


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-5
changelog:
  - Used unitdir macro instead of the hardcoded systemd paths
    Related: rhbz#1057268
  - Fixed bogus date in changelog (best effort)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-7
changelog:
  - Switched to dynamic connections (increased max connections from 20 to 1024)
    Resolves: rhbz#1351999
  - Simplified conversion script and moved it to posttrans to get rid of warnings
    during upgrade from RHEL-6 to RHEL-7
    Resolves: rhbz#1086686


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-9
changelog:
  - Switched kacpimon to dynamic connections (increased max connections
    from 20 to 1024)
    Resolves: rhbz#1450980


author: Stef Walter <stefw@redhat.com> - 0.7-1
changelog:
  - Work around broken krb5 with empty passwords [#960001]
  - Fix memory corruption issue [#959999]
  - Update to 0.7, fixing various bugs


author: Stef Walter <stefw@redhat.com> - 0.7.4-1
changelog:
  - Update to upstream point release 0.7.4
  - Correctly handle truncating long host names [#1001667]
  - Try to contact all available addresses for discovery [#1004442]
  - Build fixes [#1004823]


author: Stef Walter <stefw@redhat.com> - 0.7.5-1
changelog:
  - Update to upstream point release 0.7.5
  - Workaround for discovery via IPv6 address [#1004442]
  - Correctly put IPv6 addresses in temporary krb5.conf


author: Sumit Bose <sbose@redhat.com> - 0.8.1-4
changelog:
  - adcli doesn't update kvno while joining system to AD domain (RODC) [#1471021]
  - adcli_tool_computer_delete description spelling [#1450179]
  - adcli man page should not only mention FILE type credential caches [#1423871]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-5
changelog:
  - enable "Trust this computer for delegation to any service (Kerberos only)" [#1538730]
  - realm join fails with Insufficient permissions [#1542354]
  - adcli update option cannot add principals for computer object [#1545568]
  - adcli refuses to add service principals [#1547013]
  - [RFE] Support adding SPN of a different host [#1547014]
  - adcli segfaults during AD join RHEL 7.5 [#1575554]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-6
changelog:
  - Couldn't set service principals on computer account [#1608212]
  - additional fix #1547014 and #1593240


author: Sumit Bose <sbose@redhat.com> - 0.8.1-7
changelog:
  - use autosetup macro to simplify patch handling
  - fixed rpmlint warnings in the spec file
  - join failed if hostname is not FQDN [#1649868]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-8
changelog:
  - Various updates for RHEL-7.7
  - many adcli-krb5-????? directories are created /tmp [#1588596]
  - adcli exports kerberos ticket with old kvno [#1642546]
  - [RFE] Have `adcli join` work without FQDN in `hostname` output [#1595911]
  - Improve handling of service principals [#1644311]
  - [RFE] adcli command with --unix-* options doesn't update
    values in UnixAttributes Tab for user [#1337489]
  - [RFE] adcli join should preserve SPN added by adcli preset-computer [#1630187]
  - [RFE] Need an option for adcli command which will show domain join status. [#1622583]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-9
changelog:
  - Fixes for RHEL-7.7 updates
  - additional patch for [RFE] adcli join should preserve SPN added by adcli
    preset-computer [#1630187]
  - new patches for many adcli-krb5-????? directories are created /tmp [#1588596]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-10
changelog:
  - adcli is failing with "Couldn't add keytab entries: FILE:/etc/krb5.keytab:
    Cannot allocate memory" [1665162]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-11
changelog:
  - Fixes and improvements for RHEL-7.8
  - Issue is that with arcfour-hmac as first encryption type in the config ... [#1683745]
  - adcli update --add-samba-data does not work as expected [#1738573]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-14
changelog:
  - Fixes for RHEL-7.9
  - Update' adcli update --add-samba-data ' info under correct section in man adcli [#1774622]
  - [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1802258]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-15
changelog:
  - More fixes for RHEL-7.9
  - No longer able to delete computer from AD using adcli [#1840752]
  - adcli: presetting $computer in $domain domain failed: Cannot set computer
    password: Authentication error [#1762633]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-1
changelog:
  - Update to upstream release 0.8.1
  - Rebase adcli in RHEL-7.3 to version 0.8.0 [#1292530]
  - Support Host Keytab renewal [#1288485]
  - realmd not joining AD so ssh gssapi-with-mic works [#1061371]
  - technically wrong length checks in binary parsers  [#1027905]
  - avoid alloca in _adcli_ldap_have_in_mod [#1027889]
  - [RFE] adcli --stdin-password should be able to strip newline character from
    the input [#1134330]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-3
changelog:
  - fix crash when name is specified on the command line and detect names with
    lower case characters [#1359773]


author: Than Ngo <than@redhat.com> - 1.15-21
changelog:
  - Resolves: #1711051, CVE-2019-8383 denial of service
  - Resolves: #1710910, CVE-2019-8379 null pointer dereference


author: Java SIG <java-devel@lists.fedoraproject.org> - 1.13.1-6
changelog:
  - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
  - Replace maven BuildRequires with maven-local


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.13.1-8
changelog:
  - Complete spec file rewrite
  - Build with xmvn
  - Split into multiple subpackages, resolves: rhbz#916142
  - Update to current packaging guidelines


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 2.5-9
changelog:
  - also remove include/agg_conv_gpc.h as it also carries a copy of the non-Free
    GPC license (upstream also recommends removing that file under
    http://www.antigrain.com/license/index.html#toc0005) (#559611)


author: Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-4
changelog:
  - added patch to fix aide in FIPS mode
  - use only FIPS approved digest algorithms in aide.conf so that
    aide works by default in FIPS mode


author: Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-6
changelog:
  - warn if processing prelinked binary objects and the prelink binary
    is not available
    Resolves: rbhz#1004826


author: Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-10
changelog:
  - Updated the default configuration file. New defaults contributed
    by Steve Grubb.
    Resolves: rhbz#1304334


author: Steve Grubb <sgrubb@redhat.com> - 0.14-3
changelog:
  - Fix bz 590561 aide does not detect the change of SElinux context
  - Fix bz 590566 aide reports a changed file when it has not been changed


author: Jaroslav Kysela <jkysela@redhat.com> - 1.0.25-1
changelog:
  - Updated to 1.0.25
  - Moved plugin specific configuration from /etc/alsa/pcm to /usr/share/alsa/alsa.conf.d


author: Tim Jackson <rpm@timj.co.uk> - 1.0.25-4
changelog:
  - Move udev rules to /lib/udev/rules.d (rhbz #748206)
  - remove %BuildRoot and %clean sections; no longer required


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.0.26.1-3
changelog:
  - remove vendor tag from desktop file. https://fedorahosted.org/fpc/ticket/247
  - clean up spec to follow current guidelines
  - don't build -tools for RHEL. Bill Nottingham patch. Resolves rhbz#586030


author: Jaroslav Kysela <jkysela@redhat.com> - 1.1.0-1
changelog:
  - Updated to 1.1.0
  - Enable hda-verb, hdajackretast, hdajacksensetest for i686/x86_64
  - Resolves: rhbz#1172560


author: Jaroslav Kysela <jkysela@redhat.com> - 1.0.27.1-1
changelog:
  - Updated to 1.0.27.1
  - Updated alsa-info.sh to 0.4.61
  - Remove dependency on the dialog package (it is optional for alsa-info.sh)


author: Josef Ridky <jridky@redhat.com> - 3.3.3-18
changelog:
  - Resolves: #1286330 - set non-blocking connection
  - Resolves: #1299761 - fix amindex: invalid service
  - Resolves: #1306980 - fix problem with handling compressed files


author: Josef Ridky <jridky@redhat.com> - 3.3.3-21
changelog:
  - Resolves: #1417830 - check return value from setreuid method
  - Resolves: #1423040 - fix local authentication issue


author: Petr Hracek <phracek@redhat.com> - 3.3.2-4
changelog:
  - fix (#858703) add killpgrp(8) man page to the amanda-client package
      (killpgrp will be removed from man-pages package)
  - Fix autogen for parallel tests.


author: Petr Hracek <phracek@redhat.com> - 3.3.3-1
changelog:
  - New upstream version
  - Dependecy to /usr/sbin/service was removed.
   Instead of /usr/sbin/service systemd files are used.


author: Brian C. Lane <bcl@redhat.com> - 19.31.115-1
changelog:
  - Fix EOF error that occurs if user input required in x3270. (jstodola)
    Resolves: rhbz#1171135
  - Remove magic from the passphrase dialog (vpodzime)
    Resolves: rhbz#1168645
  - Close file descriptors when forking child processes (vpodzime)
    Related: rhbz#1083978
  - Close file descriptors when running ntpdate (vpodzime)
    Resolves: rhbz#1083978


author: Brian C. Lane <bcl@redhat.com> - 19.31.116-1
changelog:
  - Fix the way we create the list of DASDs needing dasdfmt. (sbueno+anaconda)
    Related: rhbz#1073982
  - Fix threading issues for dasdfmt in gui storage. (sbueno+anaconda)
    Resolves: rhbz#1073982
  - Make sure /boot is not LVM LV if we're on s390x (sbueno+anaconda)
    Resolves: rhbz#873135


author: Brian C. Lane <bcl@redhat.com> - 19.31.118-1
changelog:
  - Fix handling of md fwraid names in kickstart bootloader command. (dlehman)
    Resolves: rhbz#1167375
  - Do not bypass name setters in the custom spoke. (dlehman)
    Related: rhbz#1138370
  - Don't try to use math.ceil on blivet.size.Size instances. (dlehman)
    Resolves: rhbz#1164191
  - Preserve kickstart url behavior for mirrorlist (bcl)
    Related: rhbz#1109933
  - Use a backslash to escape nfs spaces instead of x20 (bcl)
    Related: rhbz#1109933
  - Allow adding prepboot to a blank disk in custom (bcl)
    Resolves: rhbz#1176829


author: Brian C. Lane <bcl@redhat.com> - 19.31.119-1
changelog:
  - Update error handler classes (bcl)
    Resolves: rhbz#1181146
  - Pass a Size instance to blivet instead of number of bytes (vpodzime)
    Related: rhbz#1171116
  - If using pre-existing, no size needs to be specified in ksdata (amulhern)
    Resolves: rhbz#1169783


author: Brian C. Lane <bcl@redhat.com> - 19.31.121-1
changelog:
  - network: adapt to NetworkManager package split-up (rvykydal)
    Resolves: rhbz#1182633
  - network: pass team opts to dracut for netroot (rvykydal)
    Resolves: rhbz#1075666


author: Brian C. Lane <bcl@redhat.com> - 19.31.122-1
changelog:
  - Show empty VGs in the custom spoke. (dlehman)
    Resolves: rhbz#1185832
  - network: add teamd package if team is used during installation (rvykydal)
    Resolves: rhbz#1185670


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: sl-branding-bootloader-xfs.patch
  -->  Modify filesystem list in pyanaconda/bootloader.py for SL
  - Ran Regex: (Release: .*)%{\?dist}(.*) => \1.sl7\2
  -->  Modify release string to note changes
  - Added Source: anaconda.ini
  -->  Config file for automated patch script
  - Added Patch: sl-branding-installclass.patch
  -->  Modify installclasses/rhel.py and installclasses/fedora.py for SL


author: Brian C. Lane <bcl@redhat.com> - 19.31.27-1
changelog:
  - Refresh swap suggestion once we know which disks to use (vpodzime)
    Related: rhbz#1016673
  - fix luksformat references (bcl)
    Resolves: rhbz#1014493
  - kickstart: check for correct format (bcl)
    Resolves: rhbz#1014545
  - UIScreen doesn't necessarily have the ready property (vpodzime)
    Related: rhbz#1000409
  - Print long widgets in a nice way (vpodzime)
    Related: rhbz#1000409
  - Take into account disk space when calculating swap suggestion (vpodzime)
    Resolves: rhbz#1016673


author: Brian C. Lane <bcl@redhat.com> - 19.31.28-1
changelog:
  - Fix liveinst to work with livemedia-creator (bcl)
    Resolves: rhbz#1009711
  - Fix initramfs generation for disk image installations. (dlehman)
    Resolves: rhbz#1018925
  - Save mountpoints specified for existing btrfs volumes. (dlehman)
    Resolves: rhbz#1019510
  - Add a command line option for disabling friendly multipath names. (dlehman)
    Resolves: rhbz#977815
  - Keyboard variant names may contain dashes (vpodzime)
    Resolves: rhbz#1017556
  - swap devices should be under the System portion (clumens).
    Resolves: rhbz#1017838
  - Don't try to configure a bootloader for s390 disk image installs. (dlehman)
    Resolves: rhbz#994521
  - Install bootloader to loop device in disk image installations. (dlehman)
    Resolves: rhbz#955202
  - network: look for device settings also based on DEVICE value (rvykydal)
    Resolves: rhbz#1017788


author: Brian C. Lane <bcl@redhat.com> - 19.31.29-1
changelog:
  - Use Unicode in the TUI buffer strings (dshea)
    Resolves: rhbz#1002462
  - Don't ask to start vnc if user specifies text mode. (sbueno+anaconda)
    Resolves: rhbz#959119
  - Do not accept changes if the user presses Esc on summary screen.
    Resolves: rhbz#998384


author: Brian C. Lane <bcl@redhat.com> - 19.31.30-1
changelog:
  - Turn spinner back on for configuration (bcl)
    Related: rhbz#1019970
    Resolves: rhbz#1019970
  - Correctly generate rescue initrd (bcl)
    Related: rhbz#1019970
    Resolves: rhbz#1019970
  - Always regenerate initramfs (bcl)
    Resolves: rhbz#1019970
  - remove signal disconnect (bcl)
    Resolves: rhbz#996899
  - Always use decimal notation for Size specs (dshea)
    Resolves: rhbz#999440
  - network kickstart: add support for devices configured in %pre (rvykydal)
    Resolves: rhbz#1019796
  - network gui spoke: use GDBus to obtain list of settings (rvykydal)
    Resolves: rhbz#1019775
  - network: remove function we don't need anymore (rvykydal)
    Resolves: rhbz#1019775
    Related: rhbz#1019775
  - network gui: make Configure button insensitive when no ap is selected
    (rvykydal)
    Resolves: rhbz#1015212
  - Use a temporary directory for verifying ISO media (dshea)
    Related: rhbz#1017648
  - Skip devices not controllable by blivet (dshea)
    Resolves: rhbz#1017648
  - Use more general status for installations from media (vpodzime)
    Resolves: rhbz#1017703


author: Brian C. Lane <bcl@redhat.com> - 19.31.31-1
changelog:
  - Update bootDrive info when storage config updated in text-mode.
    (sbueno+anaconda)
    Resolves: rhbz#861018
  - Ignore SIGINT (amulhern)
    Resolves: rhbz#971323
  - Make Software spoke ready even if there is no repo (vpodzime)
    Resolves: rhbz#1001054
  - Correctly accept 'sshd' boot arg as alias for 'inst.sshd' (wwoods)
    Resolves: rhbz#924157
  - Fix the Gkbd spec string for layouts with no variant (dshea)
    Resolves: rhbz#1011155
  - mem may not exist when it's printed out in these error messages. (clumens)
    Related: rhbz#1019322
  - Use devicetree to resolve device specs in kickstart. (dlehman)
    Resolves: rhbz#1019322
  - Add bootloader execute before autopart (bcl)
    Resolves: rhbz#1022418
  - BootLoaderError should not reset storage (bcl)
    Resolves: rhbz#1022418
    Related: rhbz#1022418
  - Mountpoint is an attr of the format, not the device. (dlehman)
    Resolves: rhbz#1019510
  - Do error checking of repository names on "Installation Source" screen.
    (amulhern)
    Resolves: rhbz#1020991


author: Brian C. Lane <bcl@redhat.com> - 19.31.32-1
changelog:
  - Send the continue click after the queue is empty (bcl)
    Resolves: rhbz#1025346
  - Fix kickstart block device resolution. (dlehman)
    Resolves: rhbz#1025508
  - No longer use summary screen visit to decide whether bootloader has been
    configured (amulhern)
    Resolves: rhbz#916529
  - Remove the bootloader line from the interactive kickstart file (amulhern)
    Resolves: rhbz#916529
    Related: rhbz#916529
  - Set bootloader default location to mbr in constructor (amulhern)
    Resolves: rhbz#916529
  - Add HDD ISO support for TUI (mkolman)
    Resolves: rhbz#1000327


author: Brian C. Lane <bcl@redhat.com> - 19.31.33-1
changelog:
  - Avoid raising an exception if epdb module unavailable (amulhern)
    Resolves: rhbz#1026779
  - Display a EULA-related warning on progress hub at end of installation.
    (sbueno+anaconda)
    Resolves: rhbz#909309
    Related: rhbz#909309
  - Show last 4 bytes of wwid (jstodola)
    Resolves: rhbz#1024966
  - Display a EULA-related warning on the progress hub at the end of installation. (clumens)
    Related: rhbz#909309
  - Handle focus changes of MountpointSelectors from outside (vpodzime)
    Resolves: rhbz#975838
  - Make network-fetched driver disk .iso files work (vpodzime)
    Resolves: rhbz#1003595
  - Updates to boot-options.txt document (amulhern)
    Related: rhbz#1026385
    Resolves: rhbz#1026385
  - No longer install anaconda user documentation (amulhern)
    Resolves: rhbz#1026385


author: Brian C. Lane <bcl@redhat.com> - 19.31.34-1
changelog:
  - Don't try to unicode unicode strings (vpodzime)
    Resolves: rhbz#1029109
  - Add tmpfs support (mkolman)
    Resolves: rhbz#918621


author: Brian C. Lane <bcl@redhat.com> - 19.31.68-1
changelog:
  - Revert "Refresh after checkbox clicked (amulhern)"
    Related: rhbz#1074188
  - Wait for other threads to finish before sending ready (bcl)
    Resolves: rhbz#1075103


author: Brian C. Lane <bcl@redhat.com> - 19.31.70-1
changelog:
  - Write a modprobe blacklist (bcl)
    Resolves: rhbz#1073130
  - Append cmdline arg values in BootArgs (bcl)
    Related: rhbz#1073130
  - Only the Summary TUI hub wants to accept 'b' to continue (vpodzime)
    Resolves: rhbz#1077546


author: Brian C. Lane <bcl@redhat.com> - 19.31.72-1
changelog:
  - Check boot args for None (bcl)
    Related: rhbz#1073130
    Resolves: rhbz#1075918
  - network: don't pop HWADDR twice for vlan on s390 (rvykydal)
    Related: rhbz#1061646


author: Brian C. Lane <bcl@redhat.com> - 19.31.74-1
changelog:
  - network: don't crash on virtual devices turned off (rvykydal)
    Resolves: rhbz#1080640
  - Do not try to set keyboard preview dialog's size (vpodzime)
    Resolves: rhbz#1011140


author: Brian C. Lane <bcl@redhat.com> - 19.31.75-1
changelog:
  - Display WWIDs in the filter UI for FCoE devices (clumens).
    Resolves: rhbz#1080316
  - Make it possible to override translation domain in GUIObjects (mkolman).
    Related: rhbz#1040240


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Ran Regex: (Release: .*)%{\?dist}(.*) => \1.sl7\2
  -->  Modify release string to note changes
  - Added Source: anaconda.ini
  -->  Config file for automated patch script
  - Added Patch: sl-branding-installclass.patch
  -->  Modify installclasses/rhel.py and installclasses/fedora.py for SL


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.113-1
changelog:
  - network: handle multiple connections for one device better (rvykydal)
    Resolves: rhbz#1444887
  - network: catch exception when reading in-memory connection being removed
    (rvykydal)
    Related: rhbz#1444887
  - Compare empty confirmation field against input (mkolman)
    Resolves: rhbz#1438832


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.114-1
changelog:
  - Show the text of completions in the datetime spoke. (vponcova)
    Related: rhbz#1447984
  - Look higher for the combobox associated with an entry (dshea)
    Resolves: rhbz#1447984
  - Fix the addon handlers for the checkbox (vponcova)
    Resolves: rhbz#1448187


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.115-1
changelog:
  - Show a no network warning for network installation source. (vponcova)
    Related: rhbz#1418604
  - Show warnings about enabling the network time (vponcova)
    Resolves: rhbz#1418604
  - Fix generating UUID even for pre snapshots (jkonecny)
    Related: rhbz#1113207


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.116-1
changelog:
  - Allow nonstrict behaviour for all passwords in tui (vponcova)
    Resolves: rhbz#1450326
  - Fix setting errors and warnings in the StorageCheckHandler (vponcova)
    Resolves: rhbz#1453130
  - Mark post inst tools as disabled only if firstboot --disable is used
    (mkolman)
    Resolves: rhbz#1448940
  - Set the default filesystem type from a kickstart file (vponcova)
    Resolves: rhbz#1449099


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.117-1
changelog:
  - Root checking fixes password for password from kickstart (mkolman)
    Related: rhbz#1356966
  - Improve the GUI password checker (mkolman)
    Related: rhbz#1356966
  - Respect changesok policy on root password spoke (mkolman)
    Resolves: rhbz#1356966
  - Update translations of password checking strings (rvykydal)
    Resolves: rhbz#1383911


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.118-1
changelog:
  - rpmostreepayload: [rhel7only] Move tmpfiles to after mount setup (walters)
    Resolves: rhbz#1459623
  - rpmostreepayload: Handle /var as a user-specified mountpoint (walters)
    Resolves: rhbz#1459623


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.121-1
changelog:
  - rpmostreepayload: Stub out payload methods which use `import rpm` (walters)
    Related: rhbz#1462979


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: anaconda-context-treeinfo-DVD-72.patch
  -->  Permit selective enabling of 'addon' repos (for contexts)
  - Added Source: anaconda_spec-dont-use-rhel-bugzilla.patch
  -->  Do not configure anaconda to autoreport errors to TUV
  - Ran Regex: (Release: .*)%{\?dist}(.*) => \1.sl7\2
  -->  Modify release string to note changes
  - Added Patch: sl-branding-bootloader-xfs.patch
  -->  Modify filesystem list in pyanaconda/bootloader.py for SL
  - Added Patch: anaconda-doesnt-use-yumvars-for-mirrorlist.patch
  -->  Anaconda doesn't use yumvars for mirrorlists in UI, do it by hand
  - Added Source: anaconda.ini
  -->  Config file for automated patch script
  - Added Patch: anaconda-expand-yumvars-in-script.patch
  -->  Anaconda doesn't use yumvars for mirrorlists in script, do it by hand
  - Added Patch: sl-branding-installclass.patch
  -->  Modify installclasses/rhel.py and installclasses/fedora.py for SL


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.127-1
changelog:
  - Enable SE/HMC file access to repo (vponcova)
    Resolves: rhbz#1289918
  - Support timeout and retries options in %packages section (vponcova)
    Resolves: rhbz#1448459


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.130-1
changelog:
  - kickstart: use RHEL7_Firewall instead of F28_Firewall (dusty)
    Related: rhbz#1526450
  - kickstart: support firewall --use-system-defaults (dusty)
    Resolves: rhbz#1526450
  - Check payload is set before accessing its data (mkolman)
    Resolves: rhbz#1524785
  - Fix bad bash '*' expansion when loading kernel modules (jkonecny)
    Resolves: rhbz#1519220


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.134-1
changelog:
  - Revert "UI support for configuring certain mitigations (mkolman)"
    Resolves: rhbz#1546267
  - Revert "Performance spoke related CI fixes" (mkolman)
    Related: rhbz#1546267
  - Revert "Fix mitigation toggling with kickstart" (mkolman)
    Related: rhbz#1546267


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: anaconda-context-treeinfo-DVD-72.patch
  -->  Permit selective enabling of 'addon' repos (for contexts)
  - Added Patch: sl-branding-bootloader-xfs.patch
  -->  Modify filesystem list in pyanaconda/bootloader.py for SL
  - Added Source: anaconda.ini
  -->  Config file for automated patch script
  - Added Patch: anaconda-doesnt-use-yumvars-for-mirrorlist.patch
  -->  Anaconda doesn't use yumvars for mirrorlists in UI, do it by hand
  - Added Patch: anaconda-expand-yumvars-in-script.patch
  -->  Anaconda doesn't use yumvars for mirrorlists in script, do it by hand
  - Added Patch: sl-branding-installclass.patch
  -->  Modify installclasses/rhel.py and installclasses/fedora.py for SL


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.139-1
changelog:
  - installclasses/rhelah: Allow LVM thin and dm-crypt (walters)
    Resolves: rhbz#1546252
  - Ask for a default passphrase if required (vponcova)
    Resolves: rhbz#1436304
  - Add support for setting different types of passwords in TUI (vponcova)
    Related: rhbz#1436304


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.140-1
changelog:
  - Preserve the boot option zfcp.allow_lun_scan (vponcova)
    Resolves: rhbz#1561662
  - Don't display "Alternate Architectures" in product name (rvykydal)
    Resolves: rhbz#1488558


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.143-1
changelog:
  - Add data loss warning to nvdimm reconfigure dialog. (rvykydal)
    Resolves: rhbz#1280500
  - Add UI feedback for disk repopulating after nvdimm reconfiguration.
    (rvykydal)
    Resolves: rhbz#1280500
  - Use only devices specified by nvdimm command for installation. (rvykydal)
    Resolves: rhbz#1280500
  - Add option to reconfigure nvdimm devices into sector mode. (rvykydal)
    Resolves: rhbz#1280500
  - Allow only devices in sector mode to be selected. (rvykydal)
    Resolves: rhbz#1280500
  - Add nvdimm devices to Advanced Storage spoke. (rvykydal)
    Resolves: rhbz#1280500
  - Add kickstart support for nvdimm reconfiguration to sector mode. (rvykydal)
    Resolves: rhbz#1280500


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.144-1
changelog:
  - Don't allow unlocking and using of LUKS2 devices (vponcova)
    Resolves: rhbz#1608251
  - Fix glade accelerator conflicts (rvykydal)
    Related: rhbz#1602436
  - Add nvdimm files to POTFILES.in (rvykydal)
    Related: rhbz#1602436
  - Support nvdimm only on x86_64 (rvykydal)
    Resolves: rhbz#1602436


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.146-1
changelog:
  - Revert "If someone really wants to eject the cdrom, then do it. (jkonecny)"
    Resolves: rhbz#1618408


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: anaconda-context-treeinfo-DVD-72.patch
  -->  Permit selective enabling of 'addon' repos (for contexts)
  - Added Source: anaconda_spec-dont-use-rhel-bugzilla.patch
  -->  Do not configure anaconda to autoreport errors to TUV
  - Added Patch: sl-branding-bootloader-xfs.patch
  -->  Modify filesystem list in pyanaconda/bootloader.py for SL
  - Added Patch: anaconda-doesnt-use-yumvars-for-mirrorlist.patch
  -->  Anaconda doesn't use yumvars for mirrorlists in UI, do it by hand
  - Added Source: anaconda.ini
  -->  Config file for automated patch script
  - Added Patch: anaconda-expand-yumvars-in-script.patch
  -->  Anaconda doesn't use yumvars for mirrorlists in script, do it by hand
  - Added Patch: sl-branding-installclass.patch
  -->  Modify installclasses/rhel.py and installclasses/fedora.py for SL


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.148-1
changelog:
  - Change Skylake Spectre_V2 default to Retpolines (vponcova)
    Resolves: rhbz#1659626
  - nvdimm: update ks data for actions in UI (rvykydal)
    Resolves: rhbz#1620109
  - nvdimm: use pykickstart constant for setting reconfigure mode (rvykydal)
    Related: rhbz#1620109
  - Skip version when processing kernel boot args (jkonecny)
    Resolves: rhbz#1637112
  - Make save button insensitive in LUKS dialog with no input (mkolman)
    Resolves: rhbz#1489713


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.149-1
changelog:
  - Offer only supported sector sizes in NVDIMM reconfiguration dialog (rvykydal)
    Resolves: rhbz#1614049


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.153-1
changelog:
  - Fix tests and add new tests (jkonecny)
    Related: rhbz#1701032
  - Do not calculate hash for disabled repos (jkonecny)
    Related: rhbz#1701032
  - Test proxy only if set (jkonecny)
    Related: rhbz#1701032
  - Add certificate to the repo files (jkonecny)
    Resolves: rhbz#1701032
  - Use SSLOptions for RepoMDMetaHash object (jkonecny)
    Related: rhbz#1701032
  - Use SSLOptions for YUM calls (jkonecny)
    Related: rhbz#1701032
  - Use SSLOptions for Base repository (jkonecny)
    Related: rhbz#1701032
  - Use new ssl certificate KS option for .treeinfo (lars)
    Related: rhbz#1701032


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.158-1
changelog:
  - network: use DEVICETYPE for team when updating virtual slaves ifcfgs
    (rvykydal)
    Resolves: rhbz#1680606
  - dracut/parse-kickstart: Set DEVICETYPE instead of TYPE in a team master ifcfg file
    (ptalbert)
    Resolves: rhbz#1680606


author: Brian C. Lane <bcl@redhat.com> - 21.48.22.49-1
changelog:
  - Use correct installclass for RHEL Atomic Host (rvykydal)
    Resolves: rhbz#1265213
  - Catch blkid failure in driver-updates (bcl)
    Resolves: rhbz#1262963
  - Maximize anaconda instead of running fullscreen (dshea)
    Related: rhbz#1231856
  - Do not display markup in showDetailedError. (dshea)
    Resolves: rhbz#1263963


author: Brian C. Lane <bcl@redhat.com> - 21.48.22.50-1
changelog:
  - Fix a pylint problem with the ostree patch. (clumens)
    Related: rhbz#1253527
  - Update storage config after running dasdfmt. (sbueno+anaconda)
    Resolves: rhbz#1264411
  - rpmostreepayload: Forcibly unmount everything in sysroot (walters)
    Resolves: rhbz#1253527


author: Brian C. Lane <bcl@redhat.com> - 21.48.22.54-1
changelog:
  - ibft: fix setting dracut boot args for static ibft nic configuration
    (rvykydal)
    Resolves: rhbz#1267526
  - dracut: accept inst.dd=[file:]/dd.iso (wwoods)
    Resolves: rhbz#1268792
  - Fix issues with the date&time not being updated on timezone changes
    (vpodzime)
    Resolves: rhbz#1267450


author: Brian C. Lane <bcl@redhat.com> - 21.48.22.55-1
changelog:
  - network: create ifcfg files in tui if needed (rvykydal)
    Resolves: rhbz#1268155
  - Do not limit ONBOOT default setting to url and nfs installation methods
    (rvykydal)
    Resolves: rhbz#1269264


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: anaconda-context-treeinfo-DVD-72.patch
  -->  Permit selective enabling of 'addon' repos (for contexts)
  - Added Source: anaconda_spec-dont-use-rhel-bugzilla.patch
  -->  Do not configure anaconda to autoreport errors to TUV
  - Ran Regex: (Release: .*)%{\?dist}(.*) => \1.sl7\2
  -->  Modify release string to note changes
  - Added Patch: sl-branding-bootloader-xfs.patch
  -->  Modify filesystem list in pyanaconda/bootloader.py for SL
  - Added Source: anaconda.ini
  -->  Config file for automated patch script
  - Added Patch: 0001-Changes-in-network-state-revalidate-sources-rhbz-127.patch
  -->  Revalidate sources after network change, rhbz#1270354
  - Added Patch: sl-branding-installclass.patch
  -->  Modify installclasses/rhel.py and installclasses/fedora.py for SL
  - Added Patch: anaconda-doesnt-use-yumvars-for-mirrorlist.patch
  -->  Anaconda doesn't use yumvars for mirrorlists, do it by hand


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: anaconda-context-treeinfo-DVD-72.patch
  -->  Permit selective enabling of 'addon' repos (for contexts)
  - Added Source: anaconda_spec-dont-use-rhel-bugzilla.patch
  -->  Do not configure anaconda to autoreport errors to TUV
  - Ran Regex: (Release: .*)%{\?dist}(.*) => \1.sl7\2
  -->  Modify release string to note changes
  - Added Patch: sl-branding-bootloader-xfs.patch
  -->  Modify filesystem list in pyanaconda/bootloader.py for SL
  - Added Source: anaconda.ini
  -->  Config file for automated patch script
  - Added Patch: sl-branding-installclass.patch
  -->  Modify installclasses/rhel.py and installclasses/fedora.py for SL


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 21.48.22.86-1
changelog:
  - network: don't stumble upon new Device.Statistics NM dbus iface (rvykydal)
    Resolves: rhbz#1370099


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 21.48.22.87-1
changelog:
  - Drop T from cp command flags when copying driver disk RPMs (mkolman)
    Resolves: rhbz#1269915
  - network: set onboot correctly for vlan on bond device in ks (rvykydal)
    Related: rhbz#1234849
  - network: don't show ibft configured devices in UI (rvykydal)
    Resolves: rhbz#1309661
  - Translate press-c-to-continue correctly in TUI (mkolman)
    Resolves: rhbz#1364539
  - network: don't set empty team slave config for NM (rvykydal)
    Related: rhbz#1254929


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 21.48.22.88-1
changelog:
  - Revert "Show network spoke in the TUI reconfig mode (mkolman)"
    Resolves: rhbz#1302165
  - Improved driver disk copying (mkolman)
    Related: rhbz#1269915
  - network: adapt to ibft plugin being enabled by default in NM (rvykydal)
    Resolves: rhbz#1371188


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 21.48.22.89-1
changelog:
  - Default policy should not allow empty passwords (mkolman)
    Related: rhbz#1365112
    Related: rhbz#1365032
  - Add unit tests for password quality checking (mkolman)
    Related: rhbz#1365112
    Related: rhbz#1365032
  - Fix password quality checking (mkolman)
    Resolves: rhbz#1365112
    Resolves: rhbz#1365032
  - dud: fix multiple inst.dd=http:// instances stalling in dracut (rvykydal)
    Related: rhbz#1268792


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 21.48.22.91-1
changelog:
  - Fix password length in the password policy (mkolman)
    Related: rhbz#1365112
    Related: rhbz#1365032
  - network: avoid registering GTypes from multiple threads (lkundrak)
    Resolves: rhbz#1366271
  - Fix traceback when payload have None as url (jkonecny)
    Resolves: rhbz#1371494
  - Add new Dracut test and fix another ones (jkonecny)
    Related: rhbz#1101653
  - Fix bug when we add set to list (jkonecny)
    Related: rhbz#1101653
  - Add new helper script files to build system (jkonecny)
    Related: rhbz#1101653
  - Add new helper scripts to the README-dd documentation (jkonecny)
    Related: rhbz#1101653
  - Fix driver unload is disabling network settings (jkonecny)
    Related: rhbz#1101653


author: Samantha N. Bueno <sbueno+anaconda@redhat.com> - 21.48.22.93-1
changelog:
  - Accept any non-empty password in non-strict mode (mkolman)
    Resolves: rhbz#1379323
  - Disable the potfile check on the password quality tests (mkolman)
    Related: rhbz#1365112
    Related: rhbz#1365032
  - Fix two trivial typos in the password checking code (mkolman)
    Related: rhbz#1365112
    Related: rhbz#1365032
  - Tweak lambda use in Dracut test (jkonecny)
    Related: rhbz#1101653
  - Add Dracut test for reloading mod dependencies (jkonecny)
    Related: rhbz#1101653


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: anaconda-context-treeinfo-DVD-72.patch
  -->  Permit selective enabling of 'addon' repos (for contexts)
  - Added Source: anaconda_spec-dont-use-rhel-bugzilla.patch
  -->  Do not configure anaconda to autoreport errors to TUV
  - Ran Regex: (Release: .*)%{\?dist}(.*) => \1.sl7\2
  -->  Modify release string to note changes
  - Added Patch: sl-branding-bootloader-xfs.patch
  -->  Modify filesystem list in pyanaconda/bootloader.py for SL
  - Added Patch: anaconda-doesnt-use-yumvars-for-mirrorlist.patch
  -->  Anaconda doesn't use yumvars for mirrorlists, do it by hand
  - Added Source: anaconda.ini
  -->  Config file for automated patch script
  - Added Patch: sl-branding-installclass.patch
  -->  Modify installclasses/rhel.py and installclasses/fedora.py for SL


author: Martin Kolman <mkolman@redhat.com> - 7.3.1-1
changelog:
  - Bump epoch to fix upgrades from the Anaconda help content subpackage (mkolman)
    Resolves: rhbz#1275285
  - Add help content for the Subscription Manager addon spoke (cspicer)
    Resolves: rhbz#1260071


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: anaconda-user-help.ini
  -->  Config file for automated patch script
  - Added Patch: debrand_anaconda_user_help.patch
  -->  Debrand help files


author: David Cantrell <dcantrell@redhat.com> 1:1.0-3
changelog:
  - Need epoch increased since version is back to 1.0, but it was previously
    the same as the anaconda version number.  jkeating and wwoods said to do
    this too, so blame them.


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.9.1-3
changelog:
  - Remove arch-specific patch as ant is noarch now
  - Remove bcond macro definitions (provided by rpm itself)
  - Remove Group tags
  - Update to current packaging guidelines
  - Run tests in %check instead of %build
  - Remove dependencies on xerces-j2 and xml-commons-apis, resolves: rhbz#838711
  - Convert %global build_javadoc to conditional
  - Remove bootstrap code, resolves: rhbz#915437
  - Fail the build if any of JARs is empty
  - Skip running tests that fail on Koji, resolves: rhbz#979496
  - Merge scripts into main package, resolves: rhbz#798975


author: Tomas Radej <tradej@redhat.com> - 1.0-0.19.b3
changelog:
  - Added LICENSE to javadoc (#879349)
  - Added ASL 2.0 licence text (#879354)
  - Added requires on jpackage-utils in javadoc (#879356)


author: Miloš Jakubíček <xjakub@fi.muni.cz> - 0:2.7.7-23
changelog:
  - Add patch updating license on ShowString.java and StreamConverter.java
    examples (thanks to Tom Callaway, see BZ#848662)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.0-6
changelog:
  - Drop BR on zip, use jar instead
  - Add more verbose description
  - Update to current packaging guidelines


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.8.3-5
changelog:
  - Packaging fixes
  - Remove unneeded depmap
  - Remove versioned jars and javadocs
  - Use maven 3 to build


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.8.3-10
changelog:
  - Build with xmvn
  - Don't generate extra JARs
  - Simplify build dependencies
  - Update to current packaging guidelines


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.8.3-13
changelog:
  - Add BuildRequires on apache-commons-parent >= 26-7
  - Remove BuildRequires on commons-collections-testframework


author: Chris Spike <chris.spike@arcor.de> 1.2-3
changelog:
  - Removed maven* BRs in favour of apache-commons-parent
  - Added deprecated groupId to depmap for compatibility reasons


author: Jaromir Capik <jcapik@redhat.com> 3.2.1-13
changelog:
  - saxon dependency removed - not needed
  - minor spec file changes according to the latest guidelines


author: Orion Poplawski <orion@cora.nwra.com> - 2.1.1-6
changelog:
  - Update to current maven spec guidelines to fix build (bug 979497)
  - Add patch to fix test with junit 4.11


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.1.2-1
changelog:
  - Update to upstream version 1.1.2
  - Convert POM to POM macros
  - Remove OSGi manifest patch; fixed upstream


author: Ville Skyttä <ville.skytta@iki.fi> - 1.3.1-7
changelog:
  - Tweak source encoding to fix build with Java 1.7.
  - Drop versioned jars and javadoc dir.
  - Drop no longer needed javadoc Obsoletes.
  - Crosslink with local JDK API docs.


author: Chris Spike <spike@fedoraproject.org> 1.4.0-1
changelog:
  - Updated to 1.4.0
  - Switched build tool from ant to maven
  - Updated to latest java packaging guidelines
  - Dropped oro BR/R


author: Michal Srb <msrb@redhat.com> - 2.3.0-4
changelog:
  - Remove prebuilt documentation in %prep
  - Install NOTICE file with javadoc subpackage
  - Resolves: rhbz#854311


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 10-6
changelog:
  - Add missing R: maven-remote-resources-plugin, apache-resource-bundles
  - Add %check to verify dependencies during build


author: Orion Poplawski <orion@cora.nwra.com> 0.8-8
changelog:
  - Add apache-rat wrapper script to apache-rat-core (bug #907782)
  - Disable tests for now due to Fedora maven bug


author: Mary Ellen Foster <mefoster at gmail.com> 2-2
changelog:
  - Add plugin dependencies from POMs
  - Fix description
  - Remove maven-release plugin (not on Fedora yet)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.0.16-12
changelog:
  - Build with XMvn
  - Remove system-scoped dependency on tools.jar
  - Update to current packaging guidelines


author: Rex Dieter <rdieter@fedoraproject.org> - 4.9.97-2
changelog:
  - Ark needs to know about application/x-source-rpm (#885316)
  - Improve subfolder autodetection (kde review 107634)
  - Don't delete the KPart in the MainWindow destructor (kde review 107635)


author: Jesper Dangaard Brouer <brouer@redhat.com> - 0.0.4-5
changelog:
  - fix issues reported by static analysis tools
    Resolves: rhbz#1027762
  - add man-pages for arptables-{save,restore}
    Resolves: rhbz#1025726


author: Jesper Dangaard Brouer <brouer@redhat.com> - 0.0.4-8
changelog:
  - Add missing long option --set-counters and update documentation
    Corrosponding short option -c was implemented, but undocumented.
    Resolves: rhbz#1050854


author: Ales Ledvinka <aledvink@redhat.com> - 14:2.1a15-26
changelog:
  - fix permissions related to collected database
  - update ethcodes defaults to current public IEEE OUI-32


author: Todd Zullinger <tmz@pobox.com> - 8.4.5-3
changelog:
  - Use 'unsafe' mode by default (bug 506953)
  - Install filter scripts in %{_datadir}/asciidoc
  - Convert spec file, CHANGELOG, and README to utf-8
  - Preserve timestamps on installed files, where feasible
  - s/$RPM_BUILD_ROOT/%{buildroot} and drop duplicated /'s
  - Fix rpmlint mixed-use-of-spaces-and-tabs and end-of-line-encoding warnings


author: Ville Skyttä <ville.skytta@iki.fi> - 8.4.5-4
changelog:
  - Remaining improvements from #480288:
  - Add dependencies on libxslt and docbook-style-xsl.
  - Install dblatex style sheets.
  - Exclude unneeded *.py[co].
  - Install python API.
  - Specfile cleanups.


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 8.6.8-1
changelog:
  - Update to latest upstream version
  - Move things around make docs dir actually working
  - Add proper requires on vim-filesystem
  - Run testsuite
  - Split music and latex support to subpackages


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-8
changelog:
  - at-3.1.13-mailwithhostname.patch in email mention also hostname address
  - at-3.1.13-usePOSIXtimers.patch use POSIX timers, so we won't need
    pm-utils hack anymore
  - at-3.1.13-help.patch update usage
  - systemd-user-sessions.service is used in unit file, so the atd should be
    started after almost all services are up and running
  - 812682 pam support work with new systemd defaults


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-10
changelog:
  - fix license field
  - fix systemd macros in scriptlets part of the specfile
  - fix selinux patch to apply without fuzz=2


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-16
changelog:
  - the correct solution is remove smp_flags, they don't work properly on ppc with
    the option mpower7
  - Related: rhbz#1048745


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-21
changelog:
  - correct the DST correction when using UTC time specification (#1328832)
  - clear non-job files from at dir and test for write error on fclose
    to fix bogus syslog messages


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-22.2
changelog:
  - fix handling of the aborted jobs (due to possibly
    temporary conditions) and avoid flooding the syslog


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-23
changelog:
  - fix the ownership of the spool directory (#1414228)
  - document the -n option of atd (#739870)
  - fix handling of the aborted jobs (due to possibly
    temporary conditions) and avoid flooding the syslog


author: Ray Strode <rstrode@redhat.com> 1.32.0-2
changelog:
  - Switch back to orbit stack by default
  http://lists.fedoraproject.org/pipermail/desktop/2010-October/006568.html


author: Kalev Lember <kalev@smartlink.ee> - 2.22.2-4
changelog:
  - Spec cleanup
  - Actually co-own /usr/share/devhelp/ directory
  - Require base package from -doc subpackage


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 3.10.1-7
changelog:
  - change x86_64 archdef to P4, prefetch instruction from hammer is illegal on some pentium 4
  - add -fstack-protector-strong to flags
  - Resolves: rhbz#1070783


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 3.10.1-9
changelog:
  - ppcle patches (conflicting patches modified)
  - tests on ppcle disabled to shorten build time and fit into 24 hour limit
  - resolves bug 1125475
  - aarch64 patches
  - Resolves: rhbz#1061956


author: Jaromir Capik <jcapik@redhat.com> - 3.10.1-10
changelog:
  - patching for Power8 to pass performance tunings and tests on P8 builders
  - re-enabling tests on ppc64le
  - Resolves: rhbz#1125475


author: Jakub Martisko <jamartis@redhat.com> - 3.10.1-11
changelog:
  - apply patches 99 and 110 to all ppc variants
  - build lapack with -frecursive flag (#1176026)
  - fix possible memory leak (#1350536)
  - fix wrong sed substitutions (#1402627)
  - Resolves: rhbz#1350536
  - Related: rhbz#1176026


author: Jakub Martisko <jamartis@redhat.com> - 3.10.1-12
changelog:
  - cleanup: merge the application of ppc patches from previous commit
    into single block
  - Related: rhbz#1350536


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 3.10.1-1
changelog:
  - Rebase to 3.10.1
  - Dropped x86_64-SSE2, ix86-SSE1, ix86-3DNow, z10, z196 (uncompilable).
  - Modified incompatible patches.
  - Added armv7neon support, modified archdef from softfp abi to hard abi.
  - Modified Make.lib to include build-id, soname, versioned library name and symlinks.
  - Now builds monolithic libsatlas (serial) and libtatlas (threaded)
    libraries with lapack and blas included.
  - Lapack source tarball needed instead of static library.
  - Disabled cpu throttling detection again (sorry, could not work on atlas
    otherwise, feel free to enable yet again - atlas-throttling.patch).
  - Removed mentions of "Fedora" to promote redistribution.
  - Modified parts of atlas.spec sometimes left in place, work still in progress,
    cleanup needed.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1:0.3.6-5
changelog:
  - Merge fix from upstream pull request #25 for CVE-2015-7747.
    Test conversion from e.g. 16-bit LE stereo to 8-bit LE mono
    no longer causes corruption.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1:0.3.6-7
changelog:
  - Merge upstream pull requests #42,#43,#44 from Agostino Sarubbo to fix
    security issues.  CVE-2017-6827, CVE-2017-6828,
    CVE-2017-6829, CVE-2017-6830, CVE-2017-6831,
    CVE-2017-6832, CVE-2017-6833, CVE-2017-6834, CVE-2017-6835,
    CVE-2017-6836, CVE-2017-6837, CVE-2017-6838, CVE-2017-6839


author: Wim Taymans <wtaymans@redhat.com> - 1:0.3.6-9
changelog:
  - Apply security patches. CVE-2018-17095, CVE-2018-13440
  - Resolves: rhbz#1600369, rhbz#1601014, rhbz#1637128


author: Steve Grubb <sgrubb@redhat.com> 2.3.2-1
changelog:
  - New upstream bugfix/enhancement release
  resolves: #982112 Add delay between stopping and starting auditd


author: Steve Grubb <sgrubb@redhat.com> 2.3.3-2
changelog:
  - New upstream bugfix/enhancement release
  resolves: #1053804 - ausearch issues found by ausearch-test
  resolves: #1030409 - ausearch help typo for "-x" option


author: Steve Grubb <sgrubb@redhat.com> 2.4-1
changelog:
  resolves: #1115196 - Add golang bindings for libaudit
  resolves: #1105150 - audispd config file parser fails on long input
  resolves: #1104973 - auparse truncating selinux context after first category
  resolves: #1088593 - auditctl man page examples use deprecated syscalls
  resolves: #1087849 - support for setting loginuid immutable
  resolves: #1073063 - AUDIT_SECCOMP events syscall field is not interpretted
  resolves: #975796  - confusing aulast records for bad logins


author: Steve Grubb <sgrubb@redhat.com> 2.4.1-1
changelog:
  resolves: #963353 - aarch64 userspace auditing needs to be written
  resolves: #1150202 - perf trace sleep 1 does not list any syscall information
  resolves: #1142989 - Update audit package to 2.4.1
  resolves: #1155221 - adjust fstatat naming to match kernel uapi


author: Steve Grubb <sgrubb@redhat.com> 2.4.1-4
changelog:
  - Remove golang bindings added under the following bz
  resolves: #1115196 - Add golang bindings for libaudit


author: Steve Grubb <sgrubb@redhat.com> 2.6.5-3.1
changelog:
  resolves: #1415724 - write_logs option is not correctly handled
  resolves: #1415726 - Setting log_format to NOLOG make auditd core dump


author: Steve Grubb <sgrubb@redhat.com> 2.6.5-4
changelog:
  resolves: #1382397 - write_logs option is not correctly handled
  resolves: #1414812 - Setting log_format to NOLOG make auditd core dump


author: Steve Grubb <sgrubb@redhat.com> 2.7.4-1
changelog:
  resolves: #1367703 - auvirt wasn't supporting date keywords
  resolves: #1396792 - augenrules includes files ending in regexp "rules"
  resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character


author: Steve Grubb <sgrubb@redhat.com> 2.7.5-1
changelog:
  resolves: #1437187 - audit rpm postinstall script points to non-existing file
  resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page & rules
  resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
  resolves: #1438997 - SECCOMP records have wrong syscall


author: Steve Grubb <sgrubb@redhat.com> 2.7.8-1
changelog:
  resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
  resolves: #1448526 - aureport shows the wrong auid "-1"
  resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
  resolves: #1482121 - python audit crash dereferencing auparse_state_t le field


author: Steve Grubb <sgrubb@redhat.com> 2.8.1-1
changelog:
  resolves: #982154 - Can't find the "avc" event with the auvirt command
  resolves: #1101605 - Ipv6 seems no working
  resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
  resolves: #1455598 - Default port is wrong in audisp-remote.conf
  resolves: #1476406 - Audit package rebase


author: Steve Grubb <sgrubb@redhat.com> 2.8.4-1
changelog:
  resolves: #1559032 - Rebase audit package to 2.8.4 to pick up bug fixes
  resolves: #1573889 - auditd busy loop in rotate_logs() with num_logs < 2
  resolves: #1534748 - incorrect addr field when using IPv6 for remote logging
  resolves: #1515903 - ausearch-expression man page missing \timestamp_ex
  resolves: #1511606 - aureport AVC report header is incomplete
  resolves: #1504251 - make auditd dump internal state for log writing status


author: Steve Grubb <sgrubb@redhat.com> 2.8.5-1
changelog:
  resolves: #1651761 - Rebase audit package to 2.8.5 to pick up bug fixes
  resolves: #1462178 - audit rule arch changed from b32 to b64 on ppc64le
  resolves: #1614833 - audispd loops reloading config 
  resolves: #1622194 - audisp-remote memory leak when using krb5 
  resolves: #1625156 - audisp-remote wont connect if remote ending action not reconnect
  resolves: #1628626 - aureport -a --failed does not display user_avc events 
  resolves: #1648005 - tcp listener socket fails when ipv6.disable=1 boot command
  resolves: #1650670 - space left in auditd.conf expressed as a percentage 
  resolves: #1663285 - ausearch device/inode missing when using a single file 
  resolves: #1672287 - max_log_file_action "keep_logs" doesn't behave as described


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-6
changelog:
  - Add patch for Sysconfig module, empty comment lines (RHBZ#1043665)
  - Add check section to run test suite
  - Add patch for testPermsErrorReported test, when root (RHBZ#1043666)
  - Add patch for Shellvars, multivariable exports (RHBZ#1043815)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-9
changelog:
  - Add patch for yum-cron.conf incl entry (RHBZ#1058409)
  - Add patch for firewalld.conf incl entry (RHBZ#1058411)
  - Add patch for Grub, foreground option (RHBZ#1059426)
  - Add patch for Yum, spaces around equals (RHBZ#1062614)
  - Add patch for Shellvars, case and same-line ;; (RHBZ#1056541)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-10
changelog:
  - Add patch for IPRoute2, hex and hyphen protocols (RHBZ#1063961)
  - Add patch for IPRoute2, slashes in protocols (RHBZ#1063968)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-12
changelog:
  - Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
  - Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
  - Add patch for Krb5, parse braces in values (RHBZ#1066419)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-13
changelog:
  - aug_save: return error when unlink fails (RHBZ#1091143)
  - augtool: add aliases to autocomplete (RHBZ#1100076)
  - augtool: remove unused dump-xml arg (RHBZ#1100106)
  - Automounter: parse hostnames with hyphens (RHBZ#1075162)
  - Cgconfig: parse other valid controllers (RHBZ#1112543)
  - Chrony: add lens (RHBZ#1071947)
  - docs: update man page with new commands (RHBZ#1100077)
  - Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
  - Httpd: parse continued, quoted lines (RHBZ#1100551)
  - Ldso: parse hwcap lines (RHBZ#1102629)
  - NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
  - Rmt: add lens (RHBZ#1100549)
  - Services: permit colons in service name (RHBZ#1121527)
  - Shellvars: support arithmetic expansion (RHBZ#1100550)
  - Syslog: parse TCP loghosts (RHBZ#1129386)
  - Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
  - Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
  - Systemd: parse quoted environment vars (RHBZ#1100547)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-14
changelog:
  - Kdump: parse new options, EOL comments (RHBZ#1139298)
  - Rsyslog: parse property filters and templates (RHBZ#1138402)
  - Systemd: parse semicolons inside entry values (RHBZ#1139498)
  - Systemd: parse environment variables where value is quoted (RHBZ#1138508)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-16
changelog:
  - Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
  - Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
  - Shadow: add lens (RHBZ#1145249)


author: Dominic Cleal <dcleal@redhat.com> - 1.4.0-1
changelog:
  - Rebase to Augeas 1.4.0
  - Revert some changes for better compatibility with 1.1.0-17:
    * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
    * Dnsmasq: revert splitting of address/server options
    * Dovecot: restore quotes within values
    * Jaas: revert semicolon and line break changes
    * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
    * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
    * Syslog: restore tree without protocol for UDP hosts
    * UpdateDB: keep Simplevars to load config by default


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-4
changelog:
  - Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
  - Skip testSaveNoPermission when running as root (RHBZ#1269817)
  - Chrony: allow signed numbers (RHBZ#1302017)
  - Krb5: support includedir (RHBZ#1406111)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-5
changelog:
  - Cgconfig: allow fperm & dperm in admin & task (RHBZ#1325741)
  - Grub: handle top-level "boot" directive (RHBZ#1484261)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-9
changelog:
  - Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
    (RHBZ#1653766)
  - Anaconda: new lens (RHBZ#1657189)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-10
changelog:
  - Krb5: support realms that start with numbers; add more pkinit_* options;
    improve handling of [dbmodules]; allow include/includedir directives
    everywhere (RHBZ#1670420)
  - Grub: handle '+' in kernel command line options (RHBZ#1758357)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-9.el7_7.1
changelog:
  - Krb5: support realms that start with numbers; add more pkinit_* options;
    improve handling of [dbmodules]; allow include/includedir directives
    everywhere (RHBZ#1799021)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-9.el7_8.1
changelog:
  - Krb5: support realms that start with numbers; add more pkinit_* options;
    improve handling of [dbmodules]; allow include/includedir directives
    everywhere (RHBZ#1799022)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.17-1
changelog:
  - fix wrong exit value of --savebackup action
  - do not crash on broken SSSD configuration
  - use pam_pwquality instead of pam_cracklib


author: Tomas Mraz <tmraz@redhat.com> - 6.2.2-1
changelog:
  - use the new --noac option with ipa-client-install
  - add sss to the services entry in nsswitch.conf
  - call res_init() to reread resolv.conf before res_send()
  - updated translations


author: Tomas Mraz <tmraz@redhat.com> - 6.2.3-1
changelog:
  - fix missing linkage to libresolv
  - add missing requires of openssl binary for cacertdir_rehash
  - install missing packages via PackageKit (original patch by Stef Walter)
  - add pam_lastlog to postlogin PAM configuration to display failed login
    attempts
  - enable the allow_ypbind SELinux boolean when enabling NIS
  - try to preserve the dns_lookup_kdc and dns_lookup_realm settings
  - do not use cached_login in password stack for pam_winbind


author: Tomas Mraz <tmraz@redhat.com> - 6.2.4-1
changelog:
  - backup also passwd and friends when toggling enableshadow (#853074)
  - use the new smb.conf idmap config range syntax (#850824)
  - use local_users_only with pam_pwquality (#849072)
  - enable the authlogin_nsswitch_use_ldap SELinux boolean when enabling LDAP (#846084)
  - preserve the value of cache_credentials in sssd.conf
  - do not fail PAM session if pam_lastlog module fails
  - use sssd also for automount map (#847823)
  - enable deferred_kinit if cache_credentials is enabled (#814384)


author: Tomas Mraz <tmraz@redhat.com> - 6.2.5-1
changelog:
  - fix missing cache_credentials option when saving sssd.conf
  - do not try to start/restart sssd with incomplete default domain
  - add autofs to sssd.conf activated services
  - add pam_winbind to session pam modules


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.6-1
changelog:
  - add use_first_pass to pam_sss in password stack
  - more robust initialization of sssdConfig
  - check whether base DN value is a real base DN
  - use non-deprecated pam_pwquality option authtok_type= instead of type=
  - update lastlog for su


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.7-1
changelog:
  - samba-winbind-clients package contains the nsswitch and pam modules (#919117)
  - do not drop sss from nsswitch.conf on --update (#980861)
  - writing out smartcard/fingerprint auth policy to dconf (original patch by
    Ray Strode) (#990625)
  - document other possible return codes from authconfig invocation (#991804)
  - print error message if config file save fails (#994596)
  - never stop rpcbind (#990788)
  - do not disable sssd.service when --enablesssd is used (#953851)
  - revert use_first_pass addition to pam_sss in password stack (#953116)


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-1
changelog:
  - detect invalid LDAP uri and report error
  - fix handling of IPA domain join errors and uninstall
  - add support for winbind authentication over Kerberos 5
  - set umask=077 by default for pam_mkhomedir and pam_oddjob_mkhomedir
  - better error checking for password quality options


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-2
changelog:
  - updated translations
  - make pam_pkcs11 not ignore the wait_for_card option
  - gnome-screensaver does not exist anymore


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-7
changelog:
  - check nslcd for restart when --enableforcelegacy is used
  - call restorecon on newly created configuration files


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-8
changelog:
  - enable/start sssd only when config exists or enabled
    for both pam and nsswitch.conf
  - updated translations


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-9
changelog:
  - do not overwrite special ldap base values
  - display error message if winbind or IPA domain join fails
  - fix invocation of IPA domain join from GUI
  - keep altfiles in nsswitch.conf if present (#1134084)
  - the winbind client is now in samba-winbind package (#1084997)
  - correct handling of SSSD enablement during IPA domain joins
  - do not bail out if multiple LDAP URIs are specified (#1142830)


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-10
changelog:
  - fix title of IPA domain join window (#1166119)
  - add --unattended to IPA uninstall command (#1166131)
  - do not mistake comment for krb5 realm name (#1184639)
  - do not traceback with incorrect locales (#1187020)
  - correct the package needed for winbind (#1190226)
  - install empty /etc/sysconfig/authconfig file (#1194698)
  - let SSSD prompt non-local users for passwords (#1204864)
  - add includedir /var/lib/sss/pubconf/krb5.include.d/ to krb5.conf (#1207552)
  - pass the password provided by --winbindjoin to net join (#1225089)


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-11
changelog:
  - add trigger to change pam configuration to use pam_oddjob_mkhomedir
    instead of pam_mkhomedir if oddjob-mkhomedir is installed
  - remove unusable --winbindtemplateprimarygroup option (#1242878)
  - handle inconsistency when missing realm in krb5.conf
  - sort the /etc/sysconfig/authconfig on write (#1320943)
  - avoid unnecessary update of nsswitch.conf
  - add support for myhostname nsswitch module (#1329943)


author: Pavel Březina <pbrezina@redhat.com> - 6.2.8-26
changelog:
  - CVE-2017-7488 authconfig: Information leak when SSSD is used for authentication against remote server (#1441604)


author: Karsten Hopp <karsten@redhat.com> 2.69-2
changelog:
  - spec file changes by Ralf Corsépius:
  - Use %bcond_without for --with/out=check.
  - Add BR: perl(Data::Dumper).
  - Remove BR: automake (Testsuite doesn't need automake).
  - Add BR: gcc-gfortran, erlang (Extend testsuite).
  - Remove TESTSUITEFLAGS (Was referring to autoconf < 2.69).
  - Add rpm-4.9 perl-filters %__provides_exclude, %__requires_exclude.
    Remove rpm-4.8 perl-filters (Address RHBZ 823770).
  - Reflect autoconf being GPLv3'ed.
  - Add BR: perl-macros, Remove BR: perl-devel


author: Pavel Raiskup <praiskup@redhat.com> - 2.69-6
changelog:
  - fedora-review (minor) fixes and typos: trim lines, remove defattr(,,), do not
    run `rm -rf %{buildroot} at the beginning of install section, use curly
    brackets only around rpm macros/variables and not around shell variables,
    remove clean section


author: Pavel Raiskup <praiskup@redhat.com> - 2.69-8
changelog:
  - the 'INSTALL' file can be used as template file for packages which are using
    autoconf - mark it for installation again (#661623)


author: Ian Kent <ikent@redhat.com> - 5.0.7-97
changelog:
  - bz1358887 - On Red Hat 7.x systems if you try to access local
    filesystems using the automounter through /net then the shell
    and mount could lock up *if* the filesystem your accessing is
    double exported.
    - set bind mount as propagation slave.
    - add master map pseudo options for mount propagation.
  - Resolves: rhbz#1358887


author: Ian Kent <ikent@redhat.com> - 5.0.7-98
changelog:
  - bz1627502 - after upgrading to autofs-5.0.7-83.el7.x86_64 on RHEL 7 clients,
    amd maps /defaults key mount options are no longer working
    - fix amd parser opts option handling.
  - Resolves: rrhbz#1627502


author: Ian Kent <ikent@redhat.com> - 5.0.7-98
changelog:
  - bz1630189 - yum update hanging while restarting autofs
    - fix incorrect locking in sss lookup.
  -Resolves: rhbz#1630189


author: Ian Kent <ikent@redhat.com> - 5.0.7-100
changelog:
  - bz1599516 - [autofs] The log no longer print PID of automount process
    - add NULL check in prepare_attempt_prefix().
    - update build info with systemd.
    - use flags for startup boolean options.
    - move close stdio descriptors to become_daemon().
    - add systemd service command line option.
  - Resolves: rhbz#1599516


author: Ian Kent <ikent@redhat.com> - 5.0.7-101
changelog:
  - bz1640448 - path_resolution on an autofs managed path resets the timer. Can
    this be made configurable?
    - support strictexpire mount option.
  - Resolves: rhbz#1640448


author: Ian Kent <ikent@redhat.com> - 5.0.7-102
changelog:
  - bz1644910 - [RFE] Enable additional logging information for autofs
    - add NULL check for get_addr_string() return.
    - use malloc(3) in spawn.c.
    - add mount_verbose configuration option.
    - optionally log mount requestor process info.
    - log mount call arguments if mount_verbose is set.
  - Resolves: rhbz#1644910


author: Ian Kent <ikent@redhat.com> - 5.0.7-103
changelog:
  - bz1644933 - Segmentation fault in err_string_data_LHASH_COMP
    - openssl workaround.
  - Resolves: rhbz#1644933


author: Ian Kent <ikent@redhat.com> - 5.0.7-104
changelog:
  - bz1442063 - Parameter ghost not documented in the man pages
    - document ghost option in auto.master man page.
  - Resolves: rhbz#1442063


author: Ian Kent <ikent@redhat.com> - 5.0.7-105
changelog:
  - bz1680582 - Sanitize autofs logging
    - make expire remaining log level debug.
  - Resolves: rhbz#1680582


author: Ian Kent <ikent@redhat.com> - 5.0.7-106
changelog:
  - bz1685804 - autofs doesn't expand macros in amd map selectors
    - workaround getaddrinfo(3) ai_canonname bug.
    - improve hostname lookup error logging.
    - allow period following macro in selector value.
    - fix macro expansion in selector values.
  - Resolves: rhbz#1685804


author: Ian Kent <ikent@redhat.com> - 5.0.7-107
changelog:
  - bz1734057 - automount segfaults if a bad hosts entry is added
    in /etc/auto.master
    - fix reset flex scan buffer on init.
  - Resolves: rhbz#1734057


author: Ian Kent <ikent@redhat.com> - 5.0.7-108
changelog:
  - bz1728914 - getmntent returns additional "-hosts" entries when
    automounter is used with "hosts" map
    - remove unused function has_fstab_option().
    - remove unused function reverse_mnt_list().
    - remove a couple of old debug messages.
    - fix amd entry memory leak.
    - fix unlink_mount_tree() not umounting mounts.
    - add ignore mount option.
    - use ignore option for offset mounts as well.
    - add config option for "ignore" mount option
    - use bit flags for autofs mount types in mnt_list.
    - use mp instead of path in mnt_list entries.
    - always use PROC_MOUNTS to make mount lists.
    - add glibc getmntent_r().
    - use local getmntent_r in table_is_mounted().
    - refactor unlink_active_mounts() in direct.c.
    - don't use tree_is_mounted() for mounted checks.
    - use single unlink_umount_tree() for both direct and indirect mounts.
    - move unlink_mount_tree() to lib/mounts.c.
    - use local_getmntent_r() for unlink_mount_tree().
    - use local getmntent_r() in get_mnt_list().
    - use local getmntent_r() in tree_make_mnt_list().
  - Resolves: rhbz#1728914


author: Ian Kent <ikent@redhat.com> - 5.0.7-109
changelog:
  - bz1728914 - getmntent returns additional "-hosts" entries when
    automounter is used with "hosts" map
    - fix missing initialization of autofs_point flags.
  - Related: rhbz#1728914


author: Ian Kent <ikent@redhat.com> - 5.0.7-110
changelog:
  - bz1806514 - strictexpire option not set for offset mounts
    - also use strictexpire for offsets.
  - Resolves: rhbz#1806514


author: Ian Kent <ikent@redhat.com> - 5.0.7-111
changelog:
  - bz1806514 - strictexpire option not set for offset mounts
    - fix patch not applied.
  - Related: rhbz#1806514


author: Ian Kent <ikent@redhat.com> - 5.0.7-112
changelog:
  - bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
    - fix trailing dollar sun entry expansion.
  - Resolves: rhbz#1818664


author: Ian Kent <ikent@redhat.com> - 5.0.7-114
changelog:
  - bz1847762 - automount program crashes with "malloc(): invalid next size
    (unsorted)
    - initialize struct addrinfo for getaddrinfo() calls.
    - fix quoted string length calc in expandsunent().
    - fix autofs mount options construction.
  -Resolves: rhbz#1847762


author: Ian Kent <ikent@redhat.com> - 5.0.7-115
changelog:
  - bz1885511 - automount force unlink option (-F) does not work as expected
    on autofs-5.0.7-109.el7
    - fix direct mount unlink_mount_tree() path.
    - fix unlink mounts umount order.
  - bz1858586 - autofs share doesn't mount when using nobind over RDMA where
    nfs-server and nfs-client are the same systems
    - mount_nfs.c fix local rdma share not mounting.
  - Resolves: rhbz#1885511 rhbz#1858586


author: Ian Kent <ikent@redhat.com> - 5.0.7-116
changelog:
  - bz1885511 - automount force unlink option (-F) does not work as expected
    on autofs-5.0.7-109.el7
    - fix incorrect logical compare in unlink_mount_tree().
  - Related: rhbz#1885511


author: Ian Kent <ikent@redhat.com> - 5.0.7-116el7_9.1
changelog:
  - bz2107752 - autofs: send FAIL cmd/ioctl mess when encountering problems
    with mount trigger
    - fix kernel mount status notification.
  - Resolves: rhbz#2107752


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-20
changelog:
  - fix master map mount options matching.
  - fix master map bogus keywork match.
  - fix fix map entry duplicate offset detection.
  - add a number of fixes based on a Covarity report.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-28
changelog:
  - bz983160 Package autofs-5.0.7-22.el7 failed RHEL7 RPMdiff testing
    - fix add null check in parse_server_string() (bz979155).
    - check for protocol option.
    - use ulimit max open files if greater than internal maximum.
    - fix default path used for unitdir.
    - fix changelog inconsistent dates.
    - fix default path used for unitdir.
    - fix changelog inconsistent dates.
    - link with full reloc options.
    - fix a couple of compiler warnings.
    - add after sssd dependency to unit file (bz984089).
  - Resolves: rhbz#983160
  +


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-29
changelog:
  - bz994352 - "autofs reload" causes automount to stop running when multiple
    maps are removed from auto.master
    - fix syncronize handle_mounts() shutdown.
  - bz994359 - Wildcard in nested mounts regression
    - fix fix wildcard multi map regression.
  - Resolves: rhbz#994352 rhbz#994359


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-30
changelog:
  - bz852327 - RFE: feature to dump automount maps in native file format
    - fix dumpmaps multi output.
    - try and cleanup after dumpmaps.
    - teach dumpmaps to output simple key value pairs.
  - Resolves: rhbz#852327


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-31
changelog:
  - bz1011909 - NFSv4 UDP packet sent during automounting
    - fix get_nfs_info() probe.
    - fix portmap lookup.
  - bz995979 - RFE: feature to dump automount maps in native file format
    - update dumpmaps patch with latest changes from QE testing.
  - Resolves: rhbz#1011909 rhbz#995979


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-32
changelog:
  - bz1011909 - NFSv4 UDP packet sent during automounting
    - only probe specific nfs version if requested.
  - Related: rhbz#1011909


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-33
changelog:
  - bz1029611 - Fresh rhel7 install can't automount nfs exports
    - regenerate configure due to missing function.
  - Resolves: rhbz#1029611


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-34
changelog:
  - bz1029611 - Fresh rhel7 install can't automount nfs exports
    - fix revision in spec file.
  - Resolves: rhbz#1029611


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-35
changelog:
  - bz1029611 - Fresh rhel7 install can't automount nfs exports
    - fix ipv6 libtirpc getport function.
  - Related: rhbz#1029611


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-35
changelog:
  - bz1030705 - Default unmount is in 10 seconds, man page says 10 minutes
    - improve timeout option description.
  - Related: rhbz#1030705


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-37
changelog:
  - bz1035977 - with IPv6 address automount fail with "hostname lookup failed"
    - fix ipv6 link local address handling.
  - Resolves: rhbz#1035977


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-40
changelog:
  - bz1063139 - autofs regression test failure.
    - fix fix ipv6 libtirpc getport.
    - get_nfs_info() should query portmapper if port is not given.
    - fix rpc_portmap_getport() proto not set.
    - fix portmap not trying proto v2.
  - Resolves: rhbz#1063139


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-41
changelog:
  - bz1094661 - autofs can ghost non-existent map entries given the right timing
    - fix negative status being reset on map read.
    - fix fix negative status being reset on map read.
    - check for non existent negative entries in lookup_ghost().
  - bz1124389 - autofs-5.0.5-88.el6 breaks maps that have a -v in the options
    - allow use of hosts map in maps (dependent patch).
    - fix options compare.
    - fix fix options compare.
  - Resolves: rhbz#1094661 rhbz#1124389


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-42
changelog:
  - bz1116184 - RFE: RHEL7: Add am-utils RPM or equivalent am-utils functionality
    to other packages
    - add amd map format parser.
  - bz1132236 - Memory leak in get_exports
    - fix memory leak in create_client().
    - fix memory leak in get_exports().
  - bz1135158 - double free or corruption (fasttop) causes abort in ldap_int_tls_destroy
    - fix deadlock in init_ldap_connection().
    - extend libldap serialization.
  - Resolves: rhbz#1116184 rhbz#1132236 rhbz#1135158


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-43
changelog:
  - bz1066772 - Clarify autofs(5) man page sections "Multiple Mounts" and
    "Replicated Server"
    - clarify multiple mounts description.
  - Resolves: rhbz#1066772


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-44
changelog:
  - bz1099800 - man page of /etc/init.d/autofs: /usr/share/man/man8/autofs.8.gz
    is not needed in RHEL-7
    - update man page autofs(8) for systemd
  - Resolves: rhbz#1099800


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-45
changelog:
  - bz1152862 - autofs shouldn't have kernel as a dependency
    - remove an ancient kernel Requires.
  - Resolves: rhbz#1152862


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-46
changelog:
  - bz1153414 - autofs-5.0.5-109 with upgrade to RHEL 6.6 no longer recognizes
    +yp: in auto.master
    - fix fix master map type check.
  - Resolves: rhbz#1153414


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-47
changelog:
  - bz1156662 - autofs /net maps do not refresh list of shares exported on
    the NFS server
    - fix typo in update_hosts_mounts().
    - fix hosts map update on reload.
  - Resolves: rhbz#1156662


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-48
changelog:
  - bz1164957 - The default installed autofs.conf doesn't have default nfs
    protocol set to 4
    - add missing line to copy RedHat customized config to spec file.
  - Resolves: rhbz#1164957


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-49
changelog:
  - bz1166457 - Autofs unable to mount indirect after attempt to mount wildcard
    - make negative cache update consistent for all lookup modules.
    - ensure negative cache isn't updated on remount.
    - dont add wildcard to negative cache.
  - bz1162041 - priv escalation via interpreter load path for program based
    automount maps
    - add a prefix to program map stdvars.
    - add config option to force use of program map stdvars.
  - bz1161474 - automount segment fault in parse_sun.so for negative parser tests
    - fix incorrect check in parse_mount().
  - bz1205600 - Autofs stopped mounting /net/hostname/mounts after seeing duplicate
    exports in the NFS server
    - handle duplicates in multi mounts.
  - bz1201582 - autofs: MAPFMT_DEFAULT is not macro in lookup_program.c
    - fix macro usage in lookup_program.c.
  - Resolves: rhbz#1166457 rhbz#1162041 rhbz#1161474 rhbz#1205600 rhbz#1201582


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-50
changelog:
  - bz1218045 - Similar but unrelated NFS exports block proper mounting of
    "parent" mount point
    - remove unused offset handling code.
    - fix mount as you go offset selection.
  - Resolves: rhbz#1218045


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-51
changelog:
  - bz1233065 - 'service autofs reload' does not reloads new mounts only
    when 'sss' or 'ldap' is used in '/etc/nsswitch.conf' file
    - init qdn before use in get_query_dn().
    - fix left mount count return from umount_multi_triggers().
    - fix return handling in sss lookup module.
    - move query dn calculation from do_bind() to do_connect().
    - make do_connect() return a status.
    - make connect_to_server() return a status.
    - make find_dc_server() return a status.
    - make find_server() return a status.
    - fix return handling of do_reconnect() in ldap module.
  - bz1233067 - autofs is performing excessive direct mount map re-reads
    - fix direct mount stale instance flag reset.
  - bz1233069 - Direct map does not expire if map is initially empty
    - fix direct map expire not set for initial empty map.
  - Resolves: rhbz#1233065 rhbz#1233067 rhbz#1233069


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-52
changelog:
  - bz1233069 - Direct map does not expire if map is initially empty
    - update patch to fix expiry problem.
  - Related: rhbz#1233069


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-53
changelog:
  - bz1238573 - RFE: autofs MAP_HASH_TABLE_SIZE description
    - update map_hash_table_size description.
  - Resolves: rhbz#1238573


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-54
changelog:
  - bz1263508 - Heavy program map usage can lead to a hang
    - fix out of order call in program map lookup.
  - Resolves: rhbz#1263508


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-55
changelog:
  - bz1298115 - The autofs service fails to load maps on boot if the maps
    are stored on a NFS mount
    - make service want network-online.
    - add remote-fs.target systemd dependency.
  - bz1300496 - Duplicate mounts created or leftovers in mtab
    - revert special case cifs escapes.
  - bz1300498 - Parent directory in nested mount gets unmounted while the
    child remains mounted
    - guard against incorrect umount return.
  - bz1305721 - autofs.conf: Fix 'nameing' typo
    - fix 'nameing' typo in autofs.conf.
  - bz1329869 - RHEL6.7: shutdown / reboot hangs with findmnt in a readlink
    system call, doing path_walk and stuck in autofs4_wait
    - always set direct mounts catatonic at exit.
    - log pipe read errors.
    - fix rwlock unlock crash.
    - fix handle_mounts() termination condition check.
  - bz1300500 - double free or corruption (fasttop) causes abort in
    ldap_int_tls_destroy
    - fix config old name lookup.
    - fix error handling on ldap bind fail.
    - fix gcc5 complaints.
    - fix fix gcc5 complaints.
    - fix missing source sss in multi map lookup.
    - fix update_hosts_mounts() return.
    - change lookup to use reinit instead of reopen.
    - fix unbind sasl external mech.
    - fix sasl connection concurrancy problem.
    - add some Coverity fixes identified for recent changes.
  - bz1300501 - Request to add a configuration option to force use of the map
    entry hostname for mounts
    - add configuration option to use fqdn in mounts
  - Resolves: rhbz#1298115 rhbz#1300496 rhbz#1300498 rhbz#1305721
  - Resolves: rhbz#1329869 rhbz#1300500 rhbz#1300501


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-56
changelog:
  - bz1327388 - Fix use-after-free in st_queue_handler
    - fix use-after-free in st_queue_handler().
  - bz1252071 - [RFE] Disable alerting on non-existent automounts
    - add config option to suppress not found log message.
  - Resolves: rhbz#1327388 rhbz#1252071


author: Ian Kent <ikent@redhat.com> - 5.0.7-59
changelog:
  - bz1383910 - Incorrect autofs.schema
    - update and add README for old autofs schema
  - bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
    - fix short memory allocation in lookup_amd_instance().
    - fix count_mounts() function.
    - fix argc off by one in mount_autofs.c.
    - fix _strncmp() usage.
    - fix typos in README.amd-maps.
    - add ref counting to struct map_source.
    - add support for amd browsable option.
    - add function conf_amd_get_map_name().
    - add function conf_amd_get_mount_paths().
    - include amd mount section mounts in master mounts list.
    - check for conflicting amd section mounts.
    - add function conf_amd_get_map_options().
    - capture cache option and its settings during parsing.
    - handle map_option cache for top level mounts.
    - handle amd cache option all in amd type auto mounts.
    - fix bogus check in expire_cleanup().
    - delay submount exit for amd submounts.
  - Resolves: rhbz#1383910 rhbz#1367576


author: Ian Kent <ikent@redhat.com> - 5.0.7-60
changelog:
  - bz1382093 - Improve logging in autofs
     - add the mount requestor's pid to pending_args.
     - create thread-local ID for mount attempts.
     - log functions to prefix messages with attempt_id if available.
     - factor out set_thread_mount_request_log_id().
     - add config option to use mount request log id.
  - Resolves: rhbz#1382093


author: Ian Kent <ikent@redhat.com> - 5.0.7-61
changelog:
  - bz1101782 - autofs configured with sssd is not finding any maps
    - work around sss startup delay.
    - add sss master map wait config option (wait initially 0, disabled).
  - Resolves: rhbz#1101782


author: Ian Kent <ikent@redhat.com> - 5.0.7-62
changelog:
  - bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
    - use autofs_point to store expire timeout where possibe.
  - Related: rhbz#1367576


author: Ian Kent <ikent@redhat.com> - 5.0.7-63
changelog:
  - bz1101782 - autofs configured with sssd is not finding any maps
    - fix work around sss startup delay.
  - bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
    - fix possible NULL derefernce.
  - Related: rhbz#1101782 rhbz#1367576


author: Ian Kent <ikent@redhat.com> - 5.0.7-64
changelog:
  - bz1440769 - autofs is facing scalability issues
    - improve scalability of direct mount path component creation.
  - Resolves: rhbz#1440769


author: Ian Kent <ikent@redhat.com> - 5.0.7-65
changelog:
  - bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
    - fix invalid reference in remount_active_mount().
  - Related: rhbz#1367576


author: Ian Kent <ikent@redhat.com> - 5.0.7-66
changelog:
  - bz1435736 - autofs fails with kernel: automount[3386]:
      segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
      error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
    - increase worker thread per-thread stack size.
    - limit getgrgid_r() buffer size.
    - add congigure option for limiting getgrgid_r() stack usage.
    - use above option to limit getgrgid_r() stack usage with configure.
  - Resolves: rhbz#1435736


author: Ian Kent <ikent@redhat.com> - 5.0.7-68
changelog:
  - bz1435736 - autofs fails with kernel: automount[3386]:
      segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
      error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
    - fix unset tsd group name handling.
  - Related: rhbz#1435736


author: Ian Kent <ikent@redhat.com> - 5.0.7-69
changelog:
  - bz1435736 - autofs fails with kernel: automount[3386]:
      segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
      error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
    - fix a couple of covarity warning resulting in group name handling change.
  - Related: rhbz#1435736


author: Ian Kent <ikent@redhat.com> - 5.0.7-70.el7_4
changelog:
  - bz1503945 - autofs option parsing for maps with fstype=autofs no longer
    works [rhel-7.4.z]
    - revert fix argc off by one in mount_autofs.c.
  - bz1503946 - autofs map entry options field does not accept dot character
    [rhel-7.4.z]
    - allow dot in OPTIONSTR value lexer pattern.
    - handle additional nfs versions in mount_nfs.c.
  - Resolves: rhbz#1503945 rhbz#1503946


author: Ian Kent <ikent@redhat.com> - 5.0.7-70.el7_4.1
changelog:
  - bz1515311 - Automount cannot access host shares after a reboot [rhel-7.4.z]
    - reset master map list on startup retry.
  - Resolves: rhbz#1515311


author: Ian Kent <ikent@redhat.com> - 5.0.7-74
changelog:
  - bz1486035 - autofs map entry options field does not accept dot character
    - handle additional nfs versions in mount_nfs.c.
  - Related: rhbz#1486035


author: Ian Kent <ikent@redhat.com> - 5.0.7-75
changelog:
  - bz1489247 - autofs: config mount_nfs_default_protocol doesn't work
    - improve description of mount_nfs_default_protocol.
  - Resolves: rhbz#1489247


author: Ian Kent <ikent@redhat.com> - 5.0.7-76
changelog:
  - bz1504145 - Automount cannot access host shares after a reboot
    - reset master map list on startup retry.
  - Resolves: rhbz#1504145


author: Ian Kent <ikent@redhat.com> - 5.0.7-77
changelog:
  - bz1504145 - Automount cannot access host shares after a reboot
    - fix reject in patch changelog hunk.
  - Related: rhbz#1504145


author: Ian Kent <ikent@redhat.com> - 5.0.7-78
changelog:
  - bz1509043 - [RFE] "automount / amd: file system type program is not
    yet implemented"
    - improve debug logging of lookup key.
    - fix cachefs parse message not being logged.
    - fix typo in amd_parse.c.
    - add missing MODPREFIX to logging in amd parser.
    - fix symlink false negative in umount_multi().
    - remove expand_selectors() call on amd parser entry.
    - fix amd defaults map entry handling.
    - refactor amd_parse.c.
    - fix amd parser double quote handling.
    - fix expandamdent() quote handling.
    - fix possible memory leak during amd parse.
    - remove path restriction of amd external mount.
    - add function umount_amd_ext_mount().
    - add function ext_mount_inuse().
    - add function construct_argv().
    - add amd mount type program mount support.
  - Resolves: rhbz#1509043


author: Ian Kent <ikent@redhat.com> - 5.0.7-79
changelog:
  - bz1509043 - [RFE] "automount / amd: file system type program is not
    yet implemented"
    - fix memory leak in umount_amd_ext_mount().
    - fix strerror_r() parameter declaration in do program_mount().
    - fix incorrect check in validate_program_options().
  - Related: rhbz#1509043


author: Ian Kent <ikent@redhat.com> - 5.0.7-80
changelog:
  - bz1509088 - autofs hangs due to race condition in do_spawn
    - update configure to check for pipe2(2).
    - fix open calls not using open_xxxx() calls.
    - move open_xxxx() functions to spawn.c.
    - serialize calls to open_xxxx() functions.
  - Resolves: rhbz#1509088


author: Ian Kent <ikent@redhat.com> - 5.0.7-81
changelog:
  - bz1527815 - automount[1979]: segfault at 55f5101d30e8 ip 000055f50f177668
                sp 00007ffffa85fdd0 error 4 in automount[55f50f16d000+48000]
    - fix use after free in do_master_list_reset()
  - Resolves: rhbz#1527815


author: Ian Kent <ikent@redhat.com> - 5.0.7-82
changelog:
  - bz1527815 - automount[1979]: segfault at 55f5101d30e8 ip 000055f50f177668
                sp 00007ffffa85fdd0 error 4 in automount[55f50f16d000+48000]
    - fix deadlock in dumpmaps.
  - Related: rhbz#1527815


author: Ian Kent <ikent@redhat.com> - 5.0.7-83
changelog:
  - bz1509043 - [RFE] "automount / amd: file system type program is not
    yet implemented"
    - dont use array for path when not necessary.
    - fix prefix option handling in expand_entry().
    - fix sublink handling in do_nfs_mount().
    - add fix error return in do_nfs_mount().
  - Related: rhbz#1509043


author: Ian Kent <ikent@redhat.com> - 5.0.7-89
changelog:
  - bz1548922 - automount crashes due to segfault
    - and fix incorrect month in changelog entries.
  -Related: rhbz#1548922


author: Ian Kent <ikent@redhat.com> - 5.0.7-90
changelog:
  - bz1536526 - Ignore trailing slashes at the end of executable maps
    in auto.master config file
    - add man page note about extra slashes in paths.
  -Related: rhbz#1536526


author: Ian Kent <ikent@redhat.com> - 5.0.7-92
changelog:
  - bz1581502 - PID file never created or disappears
    - add units After line to include statd service.
    - use systemd sd_notify() at startup.
  -Resolves: rhbz#1581502


author: Ian Kent <ikent@redhat.com> - 5.0.7-93
changelog:
  - bz1581502 - PID file never created or disappears
    - add missing BuildRequires: systemd-devel.
    - fix changelog entry revision.
  -Related: rhbz#1581502


author: Ian Kent <ikent@redhat.com> - 5.0.7-94
changelog:
  - bz1609128 - autofs reload is unable to activate new map entries,
    it is autofs restart which shows new map entries.
    - fix update_negative_cache() map source usage.
  - Resolves: rhbz#1609128


author: Ian Kent <ikent@redhat.com> - 5.0.7-95
changelog:
  - bz1612914 - [autofs]Removed entries still can be accessed
    - mark removed cache entry negative.
  - Resolves: rhbz#1612914


author: Ian Kent <ikent@redhat.com> - 5.0.7-96
changelog:
  - bz1598640 - Server availability probe broke tunneling nfs via localhost
    - remove some redundant rpc library code.
    - add port parameter to rpc_ping().
    - dont probe NFSv2 by default.
    - add version parameter to rpc_ping().
  - Resolves: rhbz#1598640


author: Miroslav Lichvar <mlichvar@redhat.com> - 5.18-1
changelog:
  - Update to 5.18
  - Fix multilib conflicts (#831379)
  - Make some dependencies arch-specific
  - Remove obsolete macros


author: Pavel Raiskup <praiskup@redhat.com> - 1.13.1-13
changelog:
  - remove old build dependency comment
  - fix bogus dates in changelog
  - use the %{_smp_mflags} also by `make check`


author: Pavel Raiskup <praiskup@redhat.com> - 1.13.1-14
changelog:
  - fix another requirement on perl package which may cause problems in future,
    thanks to Paul Howarth (#924938)
  - f-r: remove Buildroot tag, fix license tag


author: Lorenzo Villani <lvillani@binaryhelix.net> - 1.0-0.10.rc2
changelog:
  - fix package summary and descriptions (as requested by Richard Hughes)
  - match cmake minimum required version with the contents of CMakeLists.txt
    (paranoid fix)


author: Stef Walter <stefw@redhat.com> - 0.6.31-5
changelog:
  - Don't ship ssh service by default file since openssh-server isn't
    running by default, and shouldn't be advertised without user
    confirmation.


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-15
changelog:
  - enable hardened build (#1092506)
  - fix short option for --version, document -t option of avahi-autoipd (#948583)
  - fix crashes in D-Bus methods GetAlternativeHostName and GetAlternativeServiceName (#1003688)
  - fix bug when avahi-daemon ended up in a tight loop (#1081801)
  - remove prefix /home/lennart/tmp/avahi from references in man pages (#1120233)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-17
changelog:
  - fix crash due to use of deprecated Gtk3 API (#1263720)
  - don't add 0pointer.de and zeroconf.org to default browse list (#1340837)
  - fix not publishing entries if a probing interface is removed (#1222646)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-18
changelog:
  - create home directory for avahi-autoipd user (#1416287)
  - get rid of the dangling symlink to avahi-discover in debuginfo package (#1421229)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:4.3-1
changelog:
  - Latest version
  - Split into two jars, provide backward compatible symlink
  - Cleanups according to new guidelines


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:2.1-6
changelog:
  - aqute-bndlib renamed to aqute-bnd (#745166)
  - Fix compilation with openjdk 1.7.0
  - Use new maven macros
  - Packaging tweaks


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.14.28-5
changelog:
  - Append python-botocore and python-jmespath bundled directory to
    search path where needed

    Resolves: rhbz#1509434


author: Nils Philippsen <nils@redhat.com> - 0.9.6-1
changelog:
  - version 0.9.6:
    * Backport r493-494: documentation typo fixes.
    * Make the CLDR import script work with Python 2.7.
    * Fix various typos.
    * Fixed Python 2.3 compatibility (ticket #146, #233).
    * Sort output of list-locales.
    * Make the POT-Creation-Date of the catalog being updated equal to
      POT-Creation-Date of the template used to update (ticket #148).
    * Use a more explicit error message if no option or argument (command) is
      passed to pybabel (ticket #81).
    * Keep the PO-Revision-Date if it is not the default value (ticket #148).
    * Make --no-wrap work by reworking --width's default and mimic xgettext's
      behaviour of always wrapping comments (ticket #145).
    * Fixed negative offset handling of Catalog._set_mime_headers (ticket #165).
    * Add --project and --version options for commandline (ticket #173).
    * Add a __ne__() method to the Local class.
    * Explicitly sort instead of using sorted() and don't assume ordering
      (Python 2.3 and Jython compatibility).
    * Removed ValueError raising for string formatting message checkers if the
      string does not contain any string formattings (ticket #150).
    * Fix Serbian plural forms (ticket #213).
    * Small speed improvement in format_date() (ticket #216).
    * Fix number formatting for locales where CLDR specifies alt or draft
      items (ticket #217)
    * Fix bad check in format_time (ticket #257, reported with patch and tests by
      jomae)
    * Fix so frontend.CommandLineInterface.run does not accumulate logging
      handlers (#227, reported with initial patch by dfraser)
    * Fix exception if environment contains an invalid locale setting (#200)
  - install python2 rather than python3 executable (#710880)


author: Akira TAGOH <tagoh@redhat.com> - 2.2-29
changelog:
  - Improve the fontconfig config file to match ko-kr as well. (#586306)
  - sync NVR and fixes from RHEL-6.
  - Update the priority.


author: Daiki Ueno <dueno@redhat.com> - 2.2-32
changelog:
  - Update the priority.
    nhn-nanum-fonts -> 65-0, un-core-fonts -> 65-1, baekmuk-ttf-fonts -> 65-2
  - Drop buildroot cleanup.
  - Drop %defattr(0644,root,root,0755) from %files.


author: Ondrej Holy <oholy@redhat.com> - 3.14.1-1
changelog:
  - Update to 3.14.1
  - Remove obsolete upstream patch
  - Add translations updates from upstream
  - Resolves: #1174557


author: Jaromir Capik <jcapik@redhat.com> - 20101219-2
changelog:
  - Java suffix removed from the package name and put in the summary instead
  - Version string added in the source URL (no need for manual renaming)
  - POM file added in the source package -> Source1 removed (no need for copying)
  - Removal of the target directory removed (not present anymore)


author: Roman Rakus <rrakus@redhat.com> - 4.2.37-7
changelog:
  - Update info about trap in man page
    Resolves: #799958
  - instead of setting the signal handler to SIG_IGN while installing
    the new trap handler, block the signal and unblock it after the new handler
    is installed
    Resolves: #695656


author: Ville Skyttä <ville.skytta@iki.fi> - 1:2.0-1
changelog:
  - Update to 2.0 (fixes #817902, #831835).
  - Don't try to python-bytecompile our non-python *.py (#813651).


author: Ville Skyttä <ville.skytta@iki.fi> - 1:2.1-1
changelog:
  - Update to 2.1 (fixes #860510, #906469, #912113, #919246, #928253).
  - Don't ship completions included in util-linux 2.23-rc2 for F-19+.


author: Roman Rakus <rrakus@redhat.com> - 2.1-4
changelog:
  - Added conditionals to not add completions for some commands; the packages
    has their own completions
    Resolves: #1007839


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.8-0.4.svn1230816
changelog:
  - Fix license tag
  - Install LICENSE and NOTICE with javadoc package
  - Remove RPM bug workaround
  - Update to current packaging guidelines


author: Jiri Vanek <jvanek@redhat.com> 1.7-14
changelog:
  - Solving jdk7's  removed internal (since 1.4.2 deprecated) com.sun.image.codec package
  - Gripped new sources from 1.8pre trunk which have support adapters for removed classes,
  - Removed all old an unused tiff classes from it -  org.apache.batik.ext.awt.image.code.tiff
  - Added requires JAI which provides tiff support
  - Added inner_version variable, which helps to keep 1.8 outside and 1.8pre inside


author: Ondrej Vasik <ovasik@redhat.com> 1.06.95-2
changelog:
  - fix possible segfault in arrays handling(debbug #586969)
  - initialize f_void to work with math lib again(#664080)


author: Jerome Marchand <jmarchan@redhat.com> - 0.6.1-1
changelog:
  - Rebase on v0.6.1
  - Fix tcpsubnet
  - Reinstate llcstat tool
  - Remove inject tool
  - Add NSS support to sslsniff
  - Fixes miscellaneous error uncovered by covscan


author: Jerome Marchand <jmarchan@redhat.com> - 0.10.0-1
changelog:
  - Rebase on bcc-0.10.0
  - Fix regression of vfscount
  - Drop tools that relies on features unavailable on RHEL 7


author: Ville Skyttä <ville.skytta@iki.fi> - 0:5.2-10
changelog:
  - Specify explicit source encoding to fix build with Java 7.
  - Install jar and javadocs unversioned.
  - Crosslink with JDK javadocs.


author: Andy Grimm <agrimm@gmail.com> - 0:5.2-13
changelog:
  - This package should not own _mavendepmapfragdir (RHBZ#850005)
  - Build with maven, and clean up deprecated spec constructs
  - Fix pom file (See http://jira.codehaus.org/browse/MEV-592)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-16.P2.4
changelog:
  - Limit number of queries triggered by a request (CVE-2020-8616)
  - Fix invalid tsig request (CVE-2020-8617)


author: Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2
changelog:
  - Prevent deadlock on reload (#1781576)
  - Disable unit test timer_test on ppc64le because of its instability


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1
changelog:
  - Fix tsig-request verify (CVE-2020-8622)
  - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
  - Correct update-policy type subdomain to match documentation (CVE-2020-8624)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10
changelog:
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-1.P2
changelog:
  - Rebase features patches
  - Disable autodetected eddsa algorithm ED448
  - Add versioned depends to all library subpackages
  - Fix multilib conflict of devel packages


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-5
changelog:
  - Install configuration for rwtab and fix chroot setup script (#1028189)
  - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-7
changelog:
  - Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384)
  - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-8
changelog:
  - Split chroot package for named and named-sdb
  - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15
changelog:
  - Use /dev/urandom when generating rndc.key file (#1107568)
  - Allow authentication using TSIG in allow-notify configuration statement (#1067424)
  - Fix race condition when destroying a resolver fetch object (#1072379)
  - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959)
  - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17
changelog:
  - Fix error in dyndb API that can cause named to freeze on shutdown (#1142150)
  - Fix error in triggerun scriptlet (#1143033)
  - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-18.4
changelog:
  - DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)
  - Increase ISC_SOCKET_MAXEVENTS to 2048 (#1250561)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20
changelog:
  - DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22
changelog:
  - Add version specific requires on bind for bind-pkcs11 (Related: #1097753)
  - Resolve issues found by static analysis (Related: #1097753)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23
changelog:
  - Don't copy /etc/localtime on -chroot package installation (#1186773)
  - Fix SPF resource records check to comply with RFC7208 (#1215164)
  - Don't use ISC's DLV by default (#1223336)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33
changelog:
  - Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185)
  - Fix error in internal test suite (#1259514)
  - Fix named-checkconf call in *-chroot.service files (#1278082)
  - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34
changelog:
  - Added support for CAA records (#1306610)
  - Use HTTPS URL instead of FTP for upstream sources (#1319280)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36
changelog:
  - Added automatic interface scan functionality (#1294506)
  - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)


author: Petr Menšík <pemensik@redhat.com> - 32:9.9.4-38.1
changelog:
  - Fix CVE-2016-9131 (ISC change 4508)
  - Fix CVE-2016-9147 (ISC change 4510)
  - Fix regression introduced by CVE-2016-8864 (ISC change 4530)
  - Fix CVE-2016-9444 (ISC change 4517)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2
changelog:
  - update to 9.9.3-P2 (fix for CVE-2013-4854)
  - update RRL patch to 9.9.3-P2-rl.13207.22
  - Fix script for setting up chroot so it unmounts everything successfully


author: Petr Menšík <pemensik@redhat.com> - 32:9.9.4-59
changelog:
  - Support for additional signing algorithms in rndc (#1501531)
  - New autogenerated rndc keys will use hmac-sha256 algorithm


author: Petr Menšík <pemensik@redhat.com> - 32:9.9.4-72
changelog:
  - Fix automatic selinux boolean named_write_master_zones (#1569466)
  - Allow starting named with readonly home again


author: Petr Menšík <pemensik@redhat.com> - 32:9.9.4-74.2
changelog:
  - Fix unstable zone transfers (#1724071)
  - Understand keep-response-order for backward compatibility


author: Petr Spacek <pspacek redhat com> - 6.0-2
changelog:
  - fix bug 1161635: send DNS NOTIFY message after any modification to the zone
  - fix bug 1168131: crash caused by interaction between forward and master zones


author: Petr Spacek <pspacek redhat com> - 7.99-1
changelog:
  - preliminary update to latests snapshot of upstream Git: 158e95e (#1204110)
  - resolves: #829395  DNSSEC support
  - resolves: #1139776 LDAP MODRDN (rename) is not supported
  - resolves: #1139778 Records deleted when connection to LDAP is down are not refreshed properly
  - resolves: #1184065 PTR record synchronization for A/AAAA record tuple can fail mysteriously
  - resolves: #1207539 Add support for TLSA resource records (DANE)
  - resolves: #1207540 Plugin will crash if idnsForwardZone object is in the wrong place
  - resolves: #1207541 Generic support for unknown DNS RR types (RFC 3597)


author: Petr Spacek <pspacek redhat com> - 8.0-1
changelog:
  - update to latest upstream version
  - resolves: #1204110 Rebase bind-dyndb-ldap to latest upstream version


author: Petr Spacek <pspacek@redhat.com> - 9.0-1
changelog:
  - update to latest upstream version
  - related: #1292145 Rebase bind-dyndb-ldap to latest upstream version


author: Petr Spacek <pspacek@redhat.com> - 10.0-1
changelog:
  - update to latest upstream version
  - resolves: #1292145 Rebase bind-dyndb-ldap to latest upstream version


author: Tomas Krizek <tkrizek@redhat.com> - 11.1-1
changelog:
  - update to letest upstream version
  - resolves: #1393889 Rebase to bind-dyndb-ldap 11+
  - resolves: #1165796 bind-dyndb-ldap crashes if server is shutting down and connection to LDAP is down
  - resolves: #1413805 bind-dyndb-ldap default schema is shipped with syntax error


author: Petr Menšík <pemensik@redhat.com> - 11.1-6
changelog:
  - Bump BIND version and fix library dependecies
  - Rebuild for bind 9.11.3. Minor tweaks to compile.
  - Support for bind 9.11.5 headers


author: Petr Spacek <pspacek redhat com> - 5.2-1
changelog:
  - update to 5.2
  - adds DNSSEC support and supports root zone in LDAP
  - idnsZoneActive attribute is not supported anymore


author: Jeff Law <law@redhat.com> - 2.23.52.0.1-10
changelog:
  - Add libstdc++-static as a build requirement when running
    the testsuite.
  - Add remaining power8 support (#731883)


author: Jeff Law <law@redhat.com> - 2.23.52.0.1-11
changelog:
  - Add support for TDB notes section (#805115)
  - Fix length operands for cdzt, cxzt czdt and czxt (#805115)


author: Jakub Jelinek <jakub@redhat.com> - 2.23.52.0.1-12
changelog:
  - Add Intel AVX3, MPX and SHA support.
  - Add support for x86-64 -mcmodel=large -fpic TLS transitions.  (#994244)


author: Jeff Law <law@redhat.com> - 2.23.52.0.1-14
changelog:
  - Fix two may-be-uninitialized issues exposed by changes in
    compiler flags used to build binutils (#1048848).


author: Patsy Franklin <pfrankli@redhat.com> - 2.23.52.0.1-21.9
changelog:
  - This fixes a problem seen on powerpc64le ELFv2 when creating a
    function symbol alias with ld --defsym.  st_other needs to be copied
    from the source symbol to the alias in order to set up the local entry
    offset for the alias.


author: Patsy Franklin <pfrankli@redhat.com> - 2.23.52.0.1-22.9
changelog:
  - Reduce the size of aarch64 .debug_line; fix cfi encoding of fp registers;
    add register names to dumping of aarch64 cfi data. Patch provided by rth.
    Resolves: #1132641


author: Jeff Law <law@redhat.com> - 2.23.52.0.1-25.9
changelog:
  Revert this change (handled elsewhere): 
  - Additional patch from Alan to fix problems with ld --defsym.
    (#1132732)


author: Jeff Law <law@redhat.com> - 2.23.52.0.1-44
changelog:
  - Avoid reading beyond function boundary when disassembling.
    (#1060282)

  - For binary ouput, we don't have an ELF bfd output so can't access
    elf_elfheader.  (#1226864)


author: Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-45
changelog:
  - Change strings program to default to -a.  Fix problems parsing
    files containg corrupt ELF group sections.  (#1157276)


author: Nick Clifton <nickc@redhat.com> 2.25.1-13
changelog:
  - Add support for Zeppelin x86 extensions.
  - Add support for the AMD MWAITX extension.
  - Add support for the PowerPC Power9 architecture.
  - Remove spurious binutils document references.
    (#1335313)
    (#1335684)
    (#1333305)


author: Nick Clifton <nickc@redhat.com> 2.25.1-14-base
changelog:
  - Extend Release string to include ".base" thus ensuring that it
    will not collide with a DTS release which might otherwise have
    the same name.
    (#1337617)


author: Nick Clifton <nickc@redhat.com> 2.25.1-17-base
changelog:
  - Close memory leak in "ar" archiver program.
    (#1162655)
  - Retire the copy-osabi patch.
    (#1252066)


author: Nick Clifton <nickc@redhat.com> 2.25.1-25-base
changelog:
  - Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
    (#1326710)


author: Nick Clifton <nickc@redhat.com> 2.25.1-32.base
changelog:
  - Revert part of the objdump speed up patch which was preventing proper function name lookup.
    (#1465318)


author: Nick Clifton <nickc@redhat.com> 2.25.1-32.base.1
changelog:
  - Revert part of the objdump speed up patch which was preventing proper function name lookup.
    (#1479773)


author: Nick Clifton <nickc@redhat.com> 2.25.1-32.base.2
changelog:
  - Fix a seg-fault in the PowerPC linker when discarding .plt sections when -pie is used and undefined weak symbols are present.  
    (#1515347)
  - Add SCV, RFSCV amd LNIA instructions to Power9 port of gas.
    (#1449585)


author: Nick Clifton <nickc@redhat.com> 2.27-19.base
changelog:
  - Suppress the generation of R_X86_64_GOTPCRELX, R_X86_64_REX_GETPCRELX and R_386_GOT32X relocations.
    (#1506004)


author: Nick Clifton <nickc@redhat.com> 2.27-20.base
changelog:
  - Bump NVR so that the binutils rpms will be rebuilt, since they also have files that contain the offending relocs.
    (#1508954)


author: Nick Clifton <nickc@redhat.com> 2.27-21.base
changelog:
  - Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
    (#1513014)


author: Nick Clifton <nickc@redhat.com> 2.27-28.base
changelog:
  - Stop the x86_64 linker from crashing when asked to convert a reloc against the ABS section.
    (#1557346)
  - Stop strip from replacing unknown relocs with null relocs.
    (#1545386)


author: Nick Clifton <nickc@redhat.com> 2.27-30.base
changelog:
  - Version bump in order to allow a rebuild, in order to work around a transient problem with the compose database.


author: Nick Clifton <nickc@redhat.com> 2.27-32.base
changelog:
  - Fix seg-fault parsing DWARF-1 information.  (#1569580)
  - Fix seg-fault parsing DWARF-2 information.  (#1569891)
  - Fix seg-fault parsing COFF files.  (#1571917)


author: Nick Clifton <nickc@redhat.com> 2.27-33.base
changelog:
  - Fix seg-fault parsing ELF files.  (#1578979)
  - Fix seg-fault parsing DWARF-2 information.  (#1579065)
  - Fix seg-fault parsing DWARF-2 information.  (#1579051)
  - Fix seg-fault parsing a PE format file.  (#1579019)


author: Nick Clifton <nickc@redhat.com> 2.27-34.base
changelog:
  - Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
  - Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
  - Fix seg-fault parsing corrupt ELF format files.  (#1579801)


author: Nick Clifton <nickc@redhat.com> 2.27-41.base.1
changelog:
  - Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)


author: Nick Clifton <nickc@redhat.com> - 2.27-41.base.3
changelog:
  - Allow the BFD library to handle the copying of files containing secondary reloc sections.  (#1804149)


author: Nick Clifton <nickc@redhat.com> 2.27-42.base
changelog:
  - Stop the BFD library from complaining about sections with multiple sets of relocations.  (#1749085)


author: Nick Clifton <nickc@redhat.com> - 2.27-43.base.1
changelog:
  - Allow the BFD library to handle the copying of files containing secondary reloc sections.  (#1804151)


author: Nick Clifton <nickc@redhat.com> 2.27-44.base
changelog:
  - Allow the BFD library to handle the copying of files which contain secondary reloc sections.  (#1785294)
  - Implement assembler workaround for Intel JCC microcode bug.  (#1778892)


author: Václav Pavlín <vpavlin@redhat.com> - 0.5.0-1
changelog:
  - Updating the sources to 0.5.0 version. Following are the changes:
  - Change scan of SMBIOS slot <-> PCI methods, recurse to set SMBIOS slot field
  - Save off secondary bus of PCI device for PCI tree traversal
  - Add version number to biosdevname


author: Václav Pavlín <vpavlin@redhat.com> - 0.5.0-5
changelog:
  - Fix regression introduced by the addslot function
  - CoverityScan fixes
  - Place udev rules to /usr/lib rather than /lib
  Resolves: rhbz#1008899


author: Praveen K Paladugu <praveen_paladugu@dell.com> - 0.4.0-1
changelog:
  - Create detached signature
  - Fix man page to use new naming convention
  - Remove unused variables from Stephen Hemminger [shemminger@vyatta.com]
  - Use Physical device for slot numbering for embedded SR-IOV cards
  - Add tracking of ifindex to eths structure
  - Fix naming for add-in network adapters when SMBIOS version is invalid
  - Read VPD-R on Dell systems only


author: Praveen K Paladugu <praveen_paladugu@dell.com> - 0.4.1-1
changelog:
  - Fix autoconfig for Fedora systems
  - Make sure that vpd scan only runs on Dell systems, also blacklist Atheros
    wireless cards which hang when vpd is read.
  - Add fixes to biosdevname to support cards that export multiple network
    ports per PCI device (chelsio/mellanox).


author: Michal Sekletár <msekleta@redhat.com> - 0.7.3-2
changelog:
  - prevent infinite recursion in dmidecode.c::smbios_setslot (#1642706)
  - fix indentation in the man page (#1642706)


author: Patsy Franklin <pfrankli@redhat.com> - 3.0.4-1
changelog:
  - Rebase to 3.0.4
    - Removed obsolete patch.
    - Added build require of flex so that tests will run.
    - Removed duplicate/unpackaged files.


author: Pravin Satpute <psatpute@redhat.com> - 0.3-13
changelog:
  - added lucida-typewriter and fixed subpackage
  - removed common subpackage
  - added conf file for each subpackage


author: Eric Sandeen <sandeen@redhat.com> - 1.0.5-7
changelog:
  - Add upstream cpu scalability patches (#1032368)
  - Remove "-k" option from manpage (#1300354)
  - Fix potential deadlock when calling stop_tracers (#1263189)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.1.0-1
changelog:
  - New version
  - Dropped office_scen patch (upstreamed)
  - Dropped hdparm patch (upstream added support for LVM)
  - Reworked rm_sudo patch


author: Ray Strode <rstrode@redhat.com> 1.3-5
changelog:
  - Rebuild against bluez5.  This won't work, but will
    at least prevent broken dependencies
    Related: #1174545 1219504


author: Bastien Nocera <bnocera@redhat.com> 4.101-4
changelog:
  - Clean up requires and build requires
  - Use CUPS macro (#772236)
  - Enable audio socket so a2dp works in PulseAudio again (#874015)
  - Fix hid2hci not working with recent kernels (#877998)


author: Don Zickus <dzickus@redhat.com> 5.41-1
changelog:
  - Update to 5.41
  - obexd fixes to prevent crashes
  - add /etc/bluetooth/main.conf config file
  Resolves: #1313363, #1336476, #1338895


author: David Arcari <darcari@redhat.com> 5.44-1
changelog:
  - Update to 5.44
  - Ship btattach tool
  - Configure systemctl settings for bluez-obex correctly
  - Add Provides: bluez-obexd
  Resolves: #1434581, #1401501


author: Christian Kellner <ckellner@redhat.com> - 0.7-1
changelog:
  - bolt 0.7 release with pre-bootacl support.
    Resolves: #1629713
  - Patch to fix a format string bug in the 0.7
  - Drop restricting-capabilities.patch (included in 0.7)
  - Patch to not use unsuppported unit file settings.
    Resolves: #1631050


author: Petr Machata <pmachata@redhat.com> - 1.53.0-5
changelog:
  - Split off Python 3 DSO symlink to a separate subpackage
    boost-python3-devel.  This makes it possible to install
    boost-devel separately, without Python 3 support.
  - Build with -fno-strict-aliasing


author: Petr Machata <pmachata@redhat.com> - 1.53.0-8
changelog:
  - Install supporting files (images etc.) for documentation
    (courtesy Marcel Metz, bug 985593)
  - Add many patches for silencing unused local typedef warnings
    (boost-1.53.0-static_assert-unused_typedef.patch,
    boost-1.54.0-bind-static_assert.patch,
    boost-1.54.0-concept-unused_typedef.patch,
    boost-1.54.0-static_warning-unused_typedef.patch,
    boost-1.54.0-math-unused_typedef.patch,
    boost-1.54.0-math-unused_typedef-2.patch,
    boost-1.53.0-fpclassify-unused_typedef.patch,
    boost-1.54.0-math-unused_typedef-3.patch,
    boost-1.54.0-tuple-unused_typedef.patch,
    boost-1.54.0-random-unused_typedef.patch,
    boost-1.54.0-date_time-unused_typedef.patch,
    boost-1.54.0-date_time-unused_typedef-2.patch,
    boost-1.54.0-spirit-unused_typedef.patch,
    boost-1.54.0-spirit-unused_typedef-2.patch,
    boost-1.54.0-numeric-unused_typedef.patch,
    boost-1.54.0-multiprecision-unused_typedef.patch,
    boost-1.53.0-lexical_cast-unused_typedef.patch,
    boost-1.53.0-regex-unused_typedef.patch,
    boost-1.53.0-thread-unused_typedef.patch,
    boost-1.54.0-unordered-unused_typedef.patch,
    boost-1.54.0-algorithm-unused_typedef.patch,
    boost-1.53.0-graph-unused_typedef.patch,
    boost-1.54.0-locale-unused_typedef.patch,
    boost-1.54.0-property_tree-unused_typedef.patch,
    boost-1.54.0-xpressive-unused_typedef.patch,
    boost-1.54.0-mpi-unused_typedef.patch,
    boost-1.54.0-python-unused_typedef.patch)
  - Add a patch to turn off execstack in Boost.Context
    (boost-1.54.0-context-execstack.patch)
  - Fix boost::mpl::print on GCC (boost-1.54.0-mpl-print.patch)


author: Petr Machata <pmachata@redhat.com> - 1.53.0-13
changelog:
  - Fix compilation of Boost.Pool test cases
    (boost-1.54.0-pool-test_linking.patch)
  - Fix -Wshadow warnings in Boost.Pool
    (boost-1.54.0-pool-max_chunks_shadow.patch)
   -Wshadow warnings in Boost.Thread
    (boost-1.54.0-thread-cond_variable_shadow.patch)


author: Petr Machata <pmachata@redhat.com> - 1.53.0-15
changelog:
  - Fix misunderstanding of Boost.MPI about widths of some
    Boost.Serialization types.  (boost-1.53.0-mpi-version_type.patch)


author: Petr Machata <pmachata@redhat.com> - 1.53.0-18
changelog:
  - Turn off build flags pre-set by Boost distribution.
    (boost-1.53.0-buildflags.patch)
  - Pass RPM_OPT_FLAGS through user-config.jam.


author: Petr Machata <pmachata@redhat.com> - 1.53.0-21
changelog:
  - Fix atomic_cas32 (thanks Jaroslav Škarvada for figuring out where
    the problem is) (boost-1.54.0-interprocess-atomic_cas32-ppc.patch)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - do not use arch-specific BuildRequires (#1268268)
  - support TLS libraries without SSLv3 (#1298227)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - Install unpatched gcc.jam (#1305019).
  - Build libboost_python and libboost_python3 such that they depend on
    their respective libpython (#1302120).
    (boost-1.53.0-python-libpython_dep.patch,
    boost-1.53.0-python-abi_letters.patch)
  - Fix Boost.Python test suite so that PyImport_AppendInittab is called
    before PyInitialize, which broke the test suite with Python 3.
    (boost-1.53.0-python-test-PyImport_AppendInittab.patch)
  - Patch gcc.jam to not add bogus rpaths.


author: Jan Pokorný <jpokorny+rpm-booth@redhat.com> - 1.0-2.eb4256a.git
changelog:
  - update a subset of out-of-tree patches per
    https://github.com/ClusterLabs/booth/pull/22#issuecomment-216936987
  - pre-inclusion cleanups in the spec (apply systemd scriptlet operations
    with booth-arbitrator, avoid overloading file implicitly considered %doc
    as %license)
    Resolves: rhbz#1302087
    Related (Fedora): rhbz#1314865
    Related (Fedora): rhbz#1333509


author: Jan Pokorný <jpokorny+rpm-booth@redhat.com> - 1.0-3.570876d.git
changelog:
  - update per the changesets recently accepted by the upstream
    (memory/resource leaks fixes, patches previously attached separately
    that make unit test pass, internal cleanups, etc.)
    Resolves: rhbz#1302087


author: Jan Pokorný <jpokorny+rpm-booth@redhat.com> - 1.0-5.77d65dd.git
changelog:
  - update per the the current upstream, most notably the support for
    cluster-glue alternatives has been accepted (separate patches no
    longer needed)
  - make the main (envelope) package properly require the subpackages
    of the same version
  - add patches allowing for live_test.sh using pcs
  - allow building also against s390x architecture
    (per Pacemaker dependency constraint)
    Resolves: rhbz#1302087


author: Jan Pokorný <jpokorny+rpm-booth@redhat.com> - 1.0-6.ef769ef.git
changelog:
  - fix an issue with identity self-determination based on match
    between the addresses assigned at host and the configured addresses
    when a network-part-of-the-address-only match preceded a possible
    exact address match which would not be even tested if the length
    of the network prefix was the same (no longer for this exact one)
    Resolves: rhbz#1341720
  - fix a crash when running booth without determined identity
    (e.g., existing, yet empty configuration) under some circumstances
    Resolves: rhbz#1366616
  - make patches be applied using "git am" rather than "git apply"


author: Jan Pokorný <jpokorny+rpm-booth@redhat.com> - 1.0-8.ef769ef.git
changelog:
  - build for aarch64
    Resolves: rhbz#1422615
  - fix unconditional "dist" RPM macro reference in Release field
    Resolves: rhbz#1465933
  - ensure booth-arbitrator service will get restarted when it fails


author: Petr Sabata <contyk@redhat.com> - 1.5-1
changelog:
  - 1.5 bump
  - BuildRoot and defattr cleanup
  - Use macros in Sources
  - Drop show-ports and foreach patches -- those have been included upstream


author: Petr Sabata <contyk@redhat.com> - 1.5-2
changelog:
  - Add three latest bugfixes from upstream git on top of 1.5
  - Dropping params patch (included upstream variant)


author: Jon Ciesla <limburgher@gmail.com> - 4.5-5
changelog:
  - Add systemd unit file, BZ 916628.
  - Drop spurious post scripts.
  - Move eveything but man pages and license files top -docs.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-10
changelog:
  - Hardened build
    Resolves: rhbz#1092547
  - Fixed Braille display emulator to start
    Resolves: rhbz#1304725


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-11
changelog:
  - Fixed Braille characters not displaying in the XW driver window
    Resolves: rhbz#1324669
  - Added AT-SPI2 driver
    Resolves: rhbz#1324672
  - Fixed requirements
    Resolves: rhbz#1324850


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-12
changelog:
  - Improved fix for Braille characters not displaying in the XW driver window
    Related: rhbz#1324669


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-13
changelog:
  - Made brltty-config executable, currently useless, but FHS compliant
    Resolves: rhbz#1332981
  - Fixed multilib
    Related: rhbz#1324850


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-14
changelog:
  - Rebuilt for new architectures
    Resolves: rhbz#1379884
  - Added fix to support compilation with ocaml-4.04.0
    Resolves: rhbz#1393750


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-15
changelog:
  - Fixed build in case ocaml is preinstalled in the build root and
    support shouldn't be built
    Resolves: rhbz#1443907


author: David Tardon <dtardon@redhat.com> - 0:1.3.0-22
changelog:
  - Resolves: rhbz#850008 bsh - Should not own /usr/share/maven-fragments
    directory
  - Resolves: rhbz#878163 bsh - javadoc subpackage doesn't require
    jpackage-utils
  - Resolves: rhbz#878166 bsh: Public Domain not listed in license tag


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0:1.3.0-24
changelog:
  - remove vendor tag from desktop file. https://fedorahosted.org/fpc/ticket/247
  - clean up spec to follow current guidelines


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.3.0-27
changelog:
  - Remove arch-specific conditionals
  - Remove group tags
  - Remove Requires on jpackage-utils
  - Remove Requires on coreutils
  - Generate custom scripts with %jpackage_script
  - Install versionless JARs only
  - Install POM files to %{_mavenpomdir}


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.3.0-27
changelog:
  - Use %add_maven_depmap instead of legacy macros
  - Install versionless javadocs
  - Remove old Obsoletes
  - Update and format descriptions
  - Install license file with manual and javadoc packages
  - Fix Requires and BuildRequires on java
  - Fix calls to %jpackage_script


author: Eric Sandeen <sandeen@redhat.com> 0.20.rc1.20130917git194aa4a-1
changelog:
  - New upstream snapshot
  - Deprecated btrfsctl, btrfs-show, and btrfs-vol; still available in btrfs cmd


author: Petr Machata <pmachata@redhat.com> - 1.9.20100610-1
changelog:
  - Rebase to 20100610
  - Update the description in accordance with upstream spec template
  - Resolves: #643598


author: Petr Machata <pmachata@redhat.com> - 1.9.20111219-1
changelog:
  - Rebase to 20111219
    - add "-s" option
    - Resolves: #769237
  - Revert default stack size to 10000
    - Related: #743343


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.5.1-12
changelog:
  - Patch for failure to gpg sign commits with no gpg-agent 
    https://bugzilla.redhat.com/show_bug.cgi?id=905087


author: Jakub Hrozek <jhrozek@redhat.com> - 1.7.5-1
changelog:
  - New upstream release 1.7.5
  - Obsoletes patch #2
  - Rebase patch #1 (optflags) to match the 1.7.5 code
  - Fixed Source0 URL to point at the upstream tarball


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5
changelog:
  - Apply a patch by Stephen Gallagher to patch autoconf, not configure to
    allow optflags to be passed in by build environment
  - Run autoreconf before configure
  - git rm obsolete patches
  - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1
changelog:
  - New upstream release 1.10
  - Obsolete upstreamed patches
  - Amend the multilib patch, there's no need to patch configure since we
    are running autoreconf anyways
  - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES


author: Kai Engert <kaie@redhat.com> - 2012.87-9.fc19.1
changelog:
  - adjust to changed and new functionality provided by p11-kit 0.17.3
  - updated READMEs to describe the new directory-specific treatment of files
  - ship a new file that contains certificates with neutral trust
  - ship a new file that contains distrust objects, and also staple a 
    basic constraint extension to one legacy root contained in the
    Mozilla CA list
  - adjust the build script to dynamically produce most of above files
  - add and own the anchors and blacklist subdirectories
  - file generate-cacerts.pl is no longer required


author: Kai Engert <kaie@redhat.com> - 2012.87-10.1
changelog:
  - Add myself as contributor to certdata2.pem.py and remove use of rcs/ident.
    (thanks to Michael Shuler for suggesting to do so)
  - Update source URLs and comments, add source file for version information.


author: Kai Engert <kaie@redhat.com> - 2012.87-10.3
changelog:
  - added a manual page and related build requirements
  - simplify the README files now that we have a manual page
  - set a certificate alias in trusted bundle (thanks to Ludwig Nussel)


author: Kai Engert <kaie@redhat.com> - 2014.1.98-70.0
changelog:
  - update to CKBI 1.98 from NSS 3.16.1
  - building on RHEL 7 no longer requires java-openjdk
  - added more detailed instructions for release numbers on RHEL branches,
    to avoid problems when rebasing on both z- and y-stream branches.


author: Kai Engert <kaie@redhat.com> - 2014.1.98-71
changelog:
  - Update to CKBI 1.98 from NSS 3.16.1
  - building on RHEL 7 no longer requires java-openjdk
  - added more detailed instructions for release numbers on RHEL branches,
    to avoid problems when rebasing on both z- and y-stream branches.


author: Stef Walter <stefw@redhat.com> - 2014.1.98-72
changelog:
  - The BasicConstraints fix for Entrust Root is no longer necessary.
    In addition it was invalid for p11-kit 0.20.x. rhbz#1130485


author: Kai Engert <kaie@redhat.com> - 2015.2.3-70.0
changelog:
  - Update to CKBI 2.3 from NSS 3.18 with legacy modifications.
  - Add a patch to the source RPM that documents the changes from the
    upstream version.
  - Introduce the ca-legacy utility, a manual page, and the ca-legacy.conf
    configuration file.
  - The new scriptlets require the coreutils package.
  - Remove the obsolete blacklist.txt file.
  - Add an alternative version of the "Thawte Premium Server CA" root,
    which carries a SHA1-RSA signature, to allow OpenJDK to verify applets
    which contain that version of the root certificate.
    This change doesn't add trust for another key, because both versions
    of the certificate use the same public key (rhbz#1170982).


author: Kai Engert <kaie@redhat.com> - 2015.2.3-71
changelog:
  - Update to CKBI 2.3 from NSS 3.18 with legacy modifications.
  - Add an alternative version of the "Thawte Premium Server CA" root,
    which carries a SHA1-RSA signature, to allow OpenJDK to verify applets
    which contain that version of the root certificate.
    This change doesn't add trust for another key, because both versions
    of the certificate use the same public key (rhbz#1170982).
  - Add a patch to the source RPM that documents the changes from the
    upstream version.
  - Introduce the ca-legacy utility, a manual page, and the ca-legacy.conf
    configuration file.
  - The new scriptlets require the coreutils package.
  - Remove the obsolete blacklist.txt file.


author: Kai Engert <kaie@redhat.com> - 2017.2.11-70.1
changelog:
  - Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
  - Use comments in extracted bundle files.
  - Change packaging script to support empty legacy bundles.


author: Kai Engert <kaie@redhat.com> - 2017.2.11-72
changelog:
  - Changed the packaged bundle to use the flexible p11-kit-object-v1 file format,
    as a preparation to fix bugs in the interaction between p11-kit-trust and
    Mozilla applications, such as Firefox, Thunderbird etc.
  - For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true
  - Require p11-kit 0.23.5
  - Added an utility to help with comparing output of the trust dump command.


author: Kai Engert <kaie@redhat.com> - 2017.2.16-71
changelog:
  - Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
    Mozilla removed code signing trust from all CAs (rhbz#1472933)


author: Bob Relyea <rrelyea@redhat.com> - 2019.2.32-76
changelog:
  - Update to CKBI 2.32 from NSS 3.44
  -   Removing:
  -   # Certificate "Visa eCommerce Root"
  -   # Certificate "AC Raiz Certicamara S.A."
  -   # Certificate "TC TrustCenter Class 3 CA II"
  -   # Certificate "ComSign CA"
  -   # Certificate "S-TRUST Universal Root CA"
  -   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
  -   # Certificate "Certplus Root CA G1"
  -   # Certificate "Certplus Root CA G2"
  -   # Certificate "OpenTrust Root CA G1"
  -   # Certificate "OpenTrust Root CA G2"
  -   # Certificate "OpenTrust Root CA G3"
  -  Adding:
  -   # Certificate "GlobalSign Root CA - R6"
  -   # Certificate "OISTE WISeKey Global Root GC CA"
  -   # Certificate "GTS Root R1"
  -   # Certificate "GTS Root R2"
  -   # Certificate "GTS Root R3"
  -   # Certificate "GTS Root R4"
  -   # Certificate "UCA Global G2 Root"
  -   # Certificate "UCA Extended Validation Root"
  -   # Certificate "Certigna Root CA"
  -   # Certificate "emSign Root CA - G1"
  -   # Certificate "emSign ECC Root CA - G3"
  -   # Certificate "emSign Root CA - C1"
  -   # Certificate "emSign ECC Root CA - C3"
  -   # Certificate "Hongkong Post Root CA 3"


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-70.0
changelog:
  - Update to CKBI 2.41 from NSS 3.53.0
  -    Removing:
  -     # Certificate "AddTrust Low-Value Services Root"
  -     # Certificate "AddTrust External Root"
  -     # Certificate "UTN USERFirst Email Root CA"
  -     # Certificate "Certplus Class 2 Primary CA"
  -     # Certificate "Deutsche Telekom Root CA 2"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "Certinomis - Root CA"
  -    Adding:
  -     # Certificate "Entrust Root Certification Authority - G4"
  - fix permissions on ghosted files.


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.48-71
changelog:
  - Update to CKBI 2.48 from NSS 3.66
  -    Removing:
  -     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root CA"
  -     # Certificate "Sonera Class 2 Root CA"
  -     # Certificate "Taiwan GRCA"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Trustis FPS Root CA"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
  -    Adding:
  -     # Certificate "Microsoft ECC Root Certificate Authority 2017"
  -     # Certificate "Microsoft RSA Root Certificate Authority 2017"
  -     # Certificate "e-Szigno Root CA 2017"
  -     # Certificate "certSIGN Root CA G2"
  -     # Certificate "Trustwave Global Certification Authority"
  -     # Certificate "Trustwave Global ECC P256 Certification Authority"
  -     # Certificate "Trustwave Global ECC P384 Certification Authority"
  -     # Certificate "NAVER Global Root Certification Authority"
  -     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
  -     # Certificate "GlobalSign Secure Mail Root R45"
  -     # Certificate "GlobalSign Secure Mail Root E45"
  -     # Certificate "GlobalSign Root R46"
  -     # Certificate "GlobalSign Root E46"
  -     # Certificate "GLOBALTRUST 2020"
  -     # Certificate "ANF Secure Server Root CA"
  -     # Certificate "Certum EC-384 CA"
  -     # Certificate "Certum Trusted Root CA"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-71
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-72
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Adding:
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-74
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-71
changelog:
  - Update to CKBI 2.60_v7.0.306 from NSS 3.91
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "CCA India 2007"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "BJCA Global Root CA1"
  -     # Certificate "BJCA Global Root CA2"
  -     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
  -     # Certificate "A-Trust-Root-05"
  -     # Certificate "ADOCA02"
  -     # Certificate "StartCom Certification Authority G2"
  -     # Certificate "ATHEX Root CA"
  -     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "America Online Root Certification Authority 1"
  -     # Certificate "Juur-SK"
  -     # Certificate "ComSign CA"
  -     # Certificate "ComSign Secured CA"
  -     # Certificate "ComSign Advanced Security CA"
  -     # Certificate "Global Chambersign Root"
  -     # Certificate "Sonera Class2 CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "VeriSign, Inc."
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Equifax Secure Global eBusiness CA-1"
  -     # Certificate "Equifax"
  -     # Certificate "Class 1 Primary CA"
  -     # Certificate "Swiss Government Root CA III"
  -     # Certificate "Application CA G4 Root"
  -     # Certificate "SSC GDL CA Root A"
  -     # Certificate "GlobalSign Code Signing Root E45"
  -     # Certificate "GlobalSign Code Signing Root R45"
  -     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-72
changelog:
  - hand merge the two 'GlobalSign ECC Root CA R4' certs together and the two 'AC RAIZ FNMT-RCM' certs together to keep p11kit from getting confused.


author: David Howells <dhowells@redhat.com> 0.10.6-1
changelog:
  - Note the correct licence.
  - Handle malformed kernel status correctly.
  - Permit culling to be disabled on the command line with the -N flag.
  - Suspend culling when cache space is short and cache objects are pinned.


author: David Howells <dhowells@redhat.com> 0.10.8-1
changelog:
  - Use systemd interaction macros in specfile installation sections [RH BZ 850053].
  - Fix the service file to use /usr/sbin/ rather than /sbin/.
  - Turn on RELRO and PIE build hardening in RPM builds (#1092561).


author: Adam Jackson <ajax@redhat.com> 1.12.6-2
changelog:
  - *-x{c,li}b-Don-t-crash-when-swapping-a-0-sized-glyph.patch: Fix some
    crashes when client and server endian don't match.


author: Rick L Vinyard Jr <rvinyard@cs.nmsu.edu> - 1.9.1-1
changelog:
  - New upstream release
  - Removed html docs from -devel package
  - Seperated requires into one per line
  - Fixed devhelp docs


author: Haïkel Guémar <hguemar@fedoraproject.org> - 1.9.8-1
changelog:
  - upstream 1.9.8
  - fix issues with f15/rawhide (RHBZ #676878)
  - drop gtk-doc dependency (RHBZ #604169)


author: Kalev Lember <kalevlember@gmail.com> - 1.10.0-1
changelog:
  - Update to 1.10.0
  - Have the -doc subpackage depend on the base package
  - Modernize the spec file
  - Really own /usr/share/devhelp directory


author: Parag Nemade <pnemade AT redhat DOT com> - 0.4.5-1
changelog:
  - Update to 0.4.5
  - Resolves:rh#744852 - Pressing | in on-screen keyboard produces <
  - Resolves:rh#880379 - Another service acquired %s, quitting..
  - Resolves:rh#880382


author: Matthias Saou <http://freshrpms.net/> 10.2-6
changelog:
  - Fix all of the problems detected during the review which aren't acceptable
    according to the current policies and guidelines (part of #225638).
  - Don't prefix summaries with "A" nor suffix them with a dot.
  - Move .so symlink to the devel sub-package (#203620).
  - Add highest known version to the cdparanoia-III obsoletes.
  - Remove incorrect buildroot removal from %build.
  - Use acceptable %clean section.
  - Provide cdparanoia-static in the devel sub-package since the *.a is there.
  - Use single-command scriplet syntax for /sbin/ldconfig calls.
  - Escape all macros in changelog.
  - Include license file since it is present with the sources.


author: Peter Jones <pjones@redhat.com> - 10.2-8
changelog:
  - Incorporate changes from Matthias Saou:
  - Include install patch, to avoid all of the ugly manual installation.
  - Cosmetic fixes (libs group, scriplets, don't mix %name with hardcode...).


author: Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 10.2-15
changelog:
  - Patched configure to use config.{guess,sub} files so 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m32 -mcpu=power7 -mtune=power7}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m32 -mcpu=power7 -mtune=power7}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m32 -mcpu=power7 -mtune=power7 -I/usr/lib/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m32 -mcpu=power7 -mtune=power7 -I/usr/lib/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=ppc-redhat-linux-gnu --host=ppc-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info macro can
    replace them with proper version. With this change it builds fine for AArch64
    architecture.
    Resolves: rhbz#1023783


author: Honza Horak <hhorak@redhat.com> - 1.1.11-12
changelog:
  - Use system cdparanoia instead of old bundled version
  - Build libusal as a shared library
  - Messages from rpmlint clean-up


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-18
changelog:
  - ported from cdda-paranoia to libcdio-paranoia, modified paranoia-cdda.patch
  - fixed bogus date in changelog


author: Jakub Martisko <jamartis@redhat.com> - 1.1.11-25
changelog:
  - add support for device names of the form /dev/srN
  - fix provided by Frantisek Kluknavsky
  - resolves:rhbz#1058446


author: Boris Ranto <branto@redhat.com> - 1:10.2.5-1
changelog:
  - New version (1:10.2.5-1)
  - Makefile: Fix dencoder build
  - Add fake fcgiapp.h for rgw
  - common: Build more files of libcommon in client
  - libradosstripper: Build libradostripper for rados as noinst


author: Nalin Dahyabhai <nalin@redhat.com> 0.63-1
changelog:
  - serialize access to NSS databases and the running of pre- and post-save
    commands which might also access them (possibly fixing part of #883484)


author: Nalin Dahyabhai <nalin@redhat.com> 0.64-1
changelog:
  - at startup, if we resume the state machine for a given certificate to a state
    which expects to have the newly-added lock already acquired, acquire it
    before moving on with the certificate's work (still aimed at fixing #883484)


author: Nalin Dahyabhai <nalin@redhat.com> 0.66-1
changelog:
  - build as position-independent executables with early binding (#883966)
  - also don't tag the unit file as a configuration file (internal tooling)


author: Nalin Dahyabhai <nalin@redhat.com> 0.67-1
changelog:
  - when saving certificates to NSS databases, try to preserve the trust
    value assigned to a previously-present certificate with the same nickname
    and subject, if one is found
  - when saving certificates to NSS databases, also prune certificates from
    the database which have both the same nickname and subject as the one
    we're adding, to avoid tripping up tools that only fetch one certificate
    by nickname


author: Nalin Dahyabhai <nalin@redhat.com> 0.67-3
changelog:
  - pull up a patch from master to adapt self-tests to certutil's diagnostic
    output having changed (#992050)


author: Nalin Dahyabhai <nalin@redhat.com> 0.68-1
changelog:
  - notice when the OpenSSL RNG isn't seeded
  - notice when saving certificates or keys fails due to filesystem-related
    permission denial (#996581)


author: Nalin Dahyabhai <nalin@redhat.com> 0.69-1
changelog:
  - tweak how we decide whether we're on the master or a minion when we're
    told to use certmaster as a CA
  - clean up one of the tests so that it doesn't have to work around internal
    logging producing duplicate messages
  - when logging errors while setting up to contact xmlrpc servers, explicitly
    note that the error is client-side
  - don't abort() due to incorrect locking when an attempt to save an issued
    certificate to the designated location fails (part of #1032760/#1033333,
    ticket #22)
  - when reading an issued certificate from an enrollment helper, ignore
    noise before or after the certificate itself (more of #1032760/1033333,
    ticket #22)
  - run subprocesses in a cleaned-up environment (more of #1032760/1033333,
    ticket #22)
  - clear the ca-error that we saved when we had an error talking to the CA if we
    subsequently succeed in talking to the CA
  - various other static-analysis fixes


author: Nalin Dahyabhai <nalin@redhat.com> 0.70-1
changelog:
  - add a --with-homedir option to configure, and use it, since subprocesses
    which we run and which use NSS may attempt to write to $HOME/.pki, and
    0.69's strategy of setting that to "/" was rightly hitting SELinux policy
    denials (#1047798)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.9-1
changelog:
  - avoid potential use-after-free after a CA is removed dynamically (thanks to
    Keenan Brock) (#1125342)
  - add a "external-helper" property to CA objects


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.10-1
changelog:
  - when attempting to contact an IPA LDAP server, if no "ldap_uri" is set in
    default.conf, and no "host" is set either, try to construct the server URI
    using the "server" setting (#1126985)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.11-1
changelog:
  - when getcert is passed a -a flag, to indicate that CA root certificates
    should be stored in the specified database, don't ignore locations which
    don't include a storage scheme (#1129537)
  - when called to 'start-tracking' with the -a or -F flags, if we have
    applicable certificates on-hand for a CA that we're either told to use
    or which we decide is the correct one, save the certificates (#1129696)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.12-1
changelog:
  - correct encoding/decoding of variant-typed data which we receive and send
    as part of the org.freedesktop.DBus.Properties interface over the bus, and
    add some tests for them (based on patch from David Kupka, ticket #36)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.14-1
changelog:
  - make pathname canonicalization slightly smarter, to handle ".." in
    locations
  - updates to self-tests


author: Jan Cholasta <jcholast@redhat.com> - 0.75.14-2
changelog:
  - backport dogtag-submit: accept additional options to pass to the server when
    approving requests using agent creds (#1165155)


author: Jan Cholasta <jcholast@redhat.com> - 0.75.14-3
changelog:
  - backport change from git to correctly retrieve string values from DBus
    property interface replies (#1181022)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.14-1
changelog:
  - make pathname canonicalization slightly smarter, to handle ".." in
    locations (#1131758)
  - updates to self-tests (#1144082)


author: Jan Cholasta <jcholast@redhat.com> - 0.78.1-1
changelog:
  - Resolves: #1140241 RFE: Add SCEP support to certmonger
  - Resolves: #1148001 ipa-getcert killed by SIGABRT
  - Resolves: #1205756 Rebase certmonger to 0.77 or later
    - Update to upstream 0.78.1


author: Jan Cholasta <jcholast@redhat.com> - 0.78.3-1
changelog:
  - Resolves: #1244914 scep ca helper does not parse command line options
    correctly
  - Related:  #1205756 Rebase certmonger to 0.77 or later
    - Update to upstream 0.78.3


author: Jan Cholasta <jcholast@redhat.com> - 0.78.4-1
changelog:
  - Resolves: #1249753 challenge password not added in csr using start-tracking
  - Resolves: #1250397 Remove certmonger rekey feature in 7.2
    - Remove rekey feature
  - Related:  #1205756 Rebase certmonger to 0.77 or later
    - Update to upstream 0.78.4


author: Jan Cholasta <jcholast@redhat.com> - 0.78.4-2
changelog:
  - Resolves: #1345755 Support for specifying IPA lightweight CA
    - Add 'issuer' request option for specifying issuer
    - Documentation: mark $CERTMONGER_CA_ISSUER as 0.79
    - Comment/whitespace fixup
    - ipa-submit: Retry without "ca" on OptionError
    - getcert: fix a potential out-of-bounds
    - Document the -X option in the ipa-submit man page
  - Resolves: #1351052 certmonger build for RHEL 7.3 failure
    - Stop assuming RSA 512 works
    - Stop assuming RSA 512 works, part two
    - Fix a flakiness in the 028-dbus test


author: Jan Cholasta <jcholast@redhat.com> - 0.78.4-3
changelog:
  - Resolves: #1367683 getcert request command fails to use Sub CA using -X
    argument
    - Fix CA option name for ipa cert-request


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-4
changelog:
  - Use required DER encoding when setting CA basic constraint (#1551635)
  - NSS 3.34 more strictly enforces length checking when verifying signatures
    (#1551702)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-5
changelog:
  - Add Requires on psmsic for killall in post script (#1458890)
  - upstream project migrated from fedorahosted.org to pagure.io (#1501723)
  - Strip CR/LF from passwords read from a file (#1545935)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-8
changelog:
  - Disable iterate-10 test which fails intermitently (#1596161)
  - Add BuildRequires for running autoreconf


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-9
changelog:
  - Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
    variables to helpers. The root cause was a bug in IPA (#1596161)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-12
changelog:
  - Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
    man page (#1651368)
  - SCEP: Don't set message=<ca ident> with GetCaps and GetCACert (#1608781)
  - SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
  - Document owner and permission parameters to getcert (#1549585)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-17
changelog:
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2015511)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-3.1
changelog:
  - Use required DER encoding when setting CA basic constraint (#1560961)
  - NSS 3.34 more strictly enforces length checking when verifying signatures
    (#1560960)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.2-11
changelog:
  - Fix license tag
  - Install LICENSE and NOTICE with javadoc package
  - Convert versioned JARs to unversioned
  - Preserve timestamp of POM file
  - Update to current packaging guidelines


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-3
changelog:
  - Update to latest patches from eparis/Upstream
  -   checkpolicy: libsepol: implement default type policy syntax
  -   
  -   We currently have a mechanism in which the default user, role, and range
  -   can be picked up from the source or the target object.  This implements
  -   the same thing for types.  The kernel will override this with type
  -   transition rules and similar.  This is just the default if nothing
  -   specific is given.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream 
          * Fix errors found by coverity
          * implement default type policy syntax
          * Free allocated memory when clean up / exit.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-4
changelog:
  - Fix a segmentation fault if the --handle-unknown option was set without
  arguments.
  - Thanks to Alexandre Rebert and his team at Carnegie Mellon University
  for detecting this crash.


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix typos in test/dispol
  - Set flex as default lexer
  - Fix checkmodule output message
  - Build policy on systems not supporting DCCP protocol
  - Fail if module name different than output base filename


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-6
changelog:
  - Add ibendport ocontext handling
  - Add support for ibendportcon labels
  - Add ibpkey ocontext handling
  - Add support for ibpkeycon labels
  - Add binary module support for xperms


author: Hans de Goede <hdegoede@redhat.com> - 2:3.8.2-3
changelog:
  - Add a number of bug-fixes to deal better with high res cams (#873434)
  - Fix cheese-introduction.png being in both cheese and cheese-libs (#893756)
  - Put the COPYING file in the docs for cheese-libs (#893800)
  - Fix the flash when taking a photo being dark grey instead of white (#965813)
  - Fix needing to press the effects button twice to select effects after
    selecting an effect for the first time
  - Various other bug-fixes


author: Hans de Goede <hdegoede@redhat.com> - 2:3.8.2-4
changelog:
  - Fix misbehavior when started without a camera
  - Don't crash when the (last) camera gets unplugged
  - Automatically use a newly plugged camera when going from 0 to 1 cameras
  - Misc. other bugfixes


author: Bill Nottingham <notting@redhat.com> 1.3.53-1
changelog:
  - ntsysv: change the default to configure runlevels 2/3/4/5 (#709254)
  - alternatives: check whether the --initscript param is a systemd service, act appropriately (#714830)
  - forward chkconfig --del to systemctl disable where necessary


author: Bill Nottingham <notting@redhat.com> 1.3.54-1
changelog:
  - alternatives: fix --initscript systemd support (#714830)
  - revert forwarding of 'chkconfig --del' to 'systemctl disable'


author: Bill Nottingham <notting@redhat.com> 1.3.57-1
changelog:
  - assorted cleanups to LSB dependency support (#693202 fixed properly, #701573)
  - fix kill values for LSB-only scripts (#696305, <jbastian@redhat.com>)
  - don't apply start deps for services that aren't starting anywhere (#750446)


author: Bill Nottingham <notting@redhat.com> 1.3.58-1
changelog:
  - fix forwarding to systemctl with systemd >= 41 (#789256)
  - assorted regression fixes from 1.3.57 (#782152, etc.)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.60-1
changelog:
  - don't completely override LDFLAGS
  - pass along any rpm-configured LD flags
  - make sure install_initd/remove_initd provides appropriate help output for those commands (#803818)
  - check for overridden services in /etc too (#850899)
  - chconfig should own /etc/rc.d (#894328)
  - isXinetdEnabled should also ask systemd (#820363)
  - alternatives: look for service file also in /etc
  - alternatives: add --list option (#622635)
  - chkconfig: add hint to call systemctl list-unit-files and list-dependencies (#800334)
  - chkconfig: correctly handle unreadable init.d (#913807)
  - alternatives: call systemctl enable with --force (#915667)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.61-5
changelog:
  - chkconfig: don't create symlinks if they already exist
  - fix combination --type xinetd --list service
  - leveldb: restore selinux context for xinetd conf files


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.62-1
changelog:
  - use systemctl preset, not systemctl enable
  - fix typo in manpage
  - partly support socket activated services


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.4-1
changelog:
  - ntsysv: show systemd services and sockets
  - fix combination --type xinetd --list service
  - leveldb: restore selinux context for xinetd conf files
  - alternatives: remove unused variable
  - alternatives: warn if the target is not a symlink
  - spec: add link to git
  - lets simplify version


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.5-1
changelog:
  - add systemd-sysv-install alias
  - don't create symlinks if they already exist
  - fix wrongly behaving LDFLAGS


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.6-1
changelog:
  - systemd-sysv-install: don't play ping-pong with systemctl
  - ntsysv: add description to systemd services
  - ntsysv: skip templates
  - Makefile: fix typo


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.7.2-1
changelog:
  - alternatives: introduce --keep-missing
  - alternatives: allow family in --set and display it in --config


author: Jan Macku <jamacku@redhat.com> - 1.7.5-1
changelog:
  - Fix issues with extra backslashes in path string - (#1485304)
  - Add documentation for --keep-missing option - (#1371146)


author: Pete Walter <pwalter@fedoraproject.org> - 8.2-2
changelog:
  - Package review fixes (#1343710)
  - Validate the desktop file
  - Don't own /etc/opt directory
  - Depend on mozilla-filesystem instead of co-owning mozilla directories
  - Depend on dbus and gnome-icon-theme/hicolor-icon-theme for directory
    ownership


author: Florian Müllner <fmuellner@redhat.com> - 10.1-4
changelog:
  - Adjust Fedora spec to build on RHEL:
    - build missing BuildRequire
    - use python2 instead of python3

    Related: #1643501


author: Miroslav Lichvar <mlichvar@redhat.com> 1.27-0.5.pre1.git1ca844
changelog:
  - update to git snapshot 1ca844
  - update systemd integration (#846303)
  - use systemd macros if available (#850151)
  - use correct vendor pool.ntp.org zone on RHEL (#845981)
  - don't log output of chrony-wait service


author: Miroslav Lichvar <mlichvar@redhat.com> 1.27-1
changelog:
  - update to 1.27
  - start chrony-wait service with chronyd
  - start chronyd service after sntp
  - remove obsolete macros


author: Miroslav Lichvar <mlichvar@redhat.com> 1.27-2
changelog:
  - suppress error messages from tr when generating key (#907914)
  - fix delta calculation with extreme frequency offsets


author: Miroslav Lichvar <mlichvar@redhat.com> 1.27-3
changelog:
  - disable chrony-wait service by default (#961047)
  - drop old systemd scriptlets
  - don't own ntp-units.d directory
  - move files from /lib
  - remove unncessary dependency on syslog target


author: Miroslav Lichvar <mlichvar@redhat.com> 1.29.1-1
changelog:
  - update to 1.29.1 (#1053022, CVE-2014-0021)
  - fix selecting of sources with prefer option (#1061048)
  - fix potential bug in writing of drift files (#1061106)
  - replace hardening build flags with _hardened_build (#1061036)


author: Miroslav Lichvar <mlichvar@redhat.com> 2.1-1
changelog:
  - update to 2.1 (#1117882 #1169353 #1206504 #1209568 CVE-2015-1821
    CVE-2015-1822 CVE-2015-1853)
  - extend chrony-helper to allow using servers from DNS SRV records (#1211600)
  - add servers from DHCP with iburst option by default (#1219492)
  - execute test suite


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-1
changelog:
  - update to 3.1 (#1387223 #1274250 #1350669 #1406445)
  - don't start chronyd without capability to set system clock (#1306046)
  - fix chrony-helper to escape names of systemd units (#1418968)
  - package chronyd sysconfig file (#1396840)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.2-1
changelog:
  - update to 3.2 (#1482565 #1462081 #1454765)
  - use ID from /etc/os-release to set pool.ntp.org vendor zone


author: Miroslav Lichvar <mlichvar@redhat.com> 3.4-1
changelog:
  - update to 3.4 (#1636117, #1565544, #1565548, #1596239, #1600882)
  - drop support for HW timestamping on kernels < 3.10.0-613


author: Petr Machata <pmachata@redhat.com> - 0.13-11
changelog:
  - Add missing last entry in long options array
    (chrpath-0.13-getopt_long.patch)
  - Update config.sub and config.guess to support aarch64
    (chrpath-0.13-aarch64.patch)


author: Jeff Layton <jlayton@redhat.com> 6.2-3
changelog:
  - fixes for bugs reported by coverity:
  - update bad bit shift patch with one that patches getcifsacl.c too
  - remove some dead code from getcifsacl.c, asn1.c, and data_blob.c
  - fix bad handling of allocated memory in del_mtab in mount.cifs.c


author: Sachin Prabhu <sprabhu@redhat.com> - 6.2-8
changelog:
  - Prevent unnecessary linking of libwbclient
  - Uppercase orig_dev on 2nd try at mounting
  - Include paths.h in mtab.c
  - Clarify use of backupuid/backupgid in manpage
  - Ignore x-* mount options


author: Sachin Prabhu <sprabhu@redhat.com> - 6.2-10
changelog:
  - aclocal: fix typo in idmap.m4
  - mount.cifs: Removed extra comma in front of domain
  - mount.cifs: Accept empty domains on the command line
  - mount.cifs: Fixed command line parsing and aligned with kernel
  - mount.cifs: Remove unneeded stdbool header include
  - manpage: document mfsymlinks in the mount.cifs man page


author: Nathaniel McCallum <npmccallum@redhat.com> - 5-1
changelog:
  - New upstream release
  - Run clevis decryption from udisks2 under an unprivileged user
  - Reenable udisks2 subpackage


author: Nathaniel McCallum <npmccallum@redhat.com> - 6-1
changelog:
  - New upstream release
  - Specify unprivileged user/group during configuration
  - Move clevis user/group creation to base clevis package


author: Nathaniel McCallum <npmccallum@redhat.com> - 7-1
changelog:
  - Update to v7
  - Resolves: rhbz#1467907
  - Resolves: rhbz#1467908
  - Resolves: rhbz#1475406
  - Resolves: rhbz#1500975
  - Resolves: rhbz#1478888


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-16
changelog:
  - Disable NetworkManager management of resolv.conf if nameservers
    are specified by configuration.
    Resolves: rhbz#1454491


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-18
changelog:
  - Start the cloud-init init local service after the dbus socket is created
    so that the hostnamectl command works.
    Resolves: rhbz#1450521


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-23
changelog:
  - Fix a bug tha caused cloud-init to fail as a result of trying
    to rename bonds.
    Resolves: rhbz#1512247


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-24
changelog:
  - Set DHCP_HOSTNAME on Azure to allow for the hostname to be
    published correctly when bouncing the network.
    Resolves: rhbz#1434109


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.7.9-24.el7_5.1
changelog:
  - ci-Revert-azure-Fix-publishing-of-hostname.patch [bz#1568717]
  - ci-DataSourceAzure.py-use-hostnamectl-to-set-hostname.patch [bz#1568717]
  - ci-sysconfig-Don-t-disable-IPV6_AUTOCONF.patch [bz#1578702]
  - Resolves: bz#1568717
    (Add patch to bounce NICs in Azure/update DNS [rhel-7.5.z])
  - Resolves: bz#1578702
    (cloud-init-0.7.9-9.el7_4.6 breaks IPv4/IPv6 dual-stack EC2 instances in AWS [rhel-7.5.z])


author: Lars Kellogg-Stedman <lars@redhat.com> - 0.7.6-8
changelog:
  - make rh_subscription plugin do nothing in the absence of a valid
    configuration [RH:1295953]
  - move rh_subscription module to cloud_config stage


author: Lars Kellogg-Stedman <lars@redhat.com> 0.7.9-6
changelog:
  - add power-state-change module to cloud_final_modules (rhbz#1252477)
  - remove 'tee' command from logging configuration (rhbz#1424612)
  - limit permissions on def_log_file (rhbz#1424612)
  - Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
  - OpenStack: add 'dvs' to the list of physical link types. (rhbz#1442783)


author: Lars Kellogg-Stedman <lars@redhat.com> 0.7.9-7
changelog:
  - Add missing sysconfig unit test data (rhbz#1438082)
  - Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
  - sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
  - Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
  - Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)


author: Lars Kellogg-Stedman <lars@redhat.com> 0.7.9-9
changelog:
  - RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
  - azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
  - Fix ipv6 subnet detection (rhbz#1438082)


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-9.3
changelog:
  - Disable NetworkManager management of resolv.conf if nameservers
    are specified by configuration.
    Resolves: rhbz#1537439


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-9.4
changelog:
  - sysconfig: Fix rendering of default gateway for ipv4
    Resolves: rhbz#1540094
  - sysconfig: Correct rendering for dhcp on ipv6
    Resolves: rhbz#1540093


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-1.el7_6.1
changelog:
  - ci-Adding-systemd-mount-options-to-wait-for-cloud-init.patch [bz#1633282]
  - ci-Azure-Ignore-NTFS-mount-errors-when-checking-ephemer.patch [bz#1633282]
  - ci-azure-Add-reported-ready-marker-file.patch [bz#1633282]
  - ci-Adding-disk_setup-to-rhel-cloud.cfg.patch [bz#1633282]
  - Resolves: bz#1633282
    ([Azure] cloud-init fails to mount /dev/sdb1 after stop(deallocate)&&start VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-1.el7_6.2
changelog:
  - ci-azure-Filter-list-of-ssh-keys-pulled-from-fabric.patch [bz#1684038]
  - Resolves: bz#1684038
    (EMBARGOED cloud-init: wrong list of ssh keys added to authorized_keys [rhel-7.6.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-2.el7
changelog:
  - ci-net-Wait-for-dhclient-to-daemonize-before-reading-le.patch [bz#1632967]
  - Resolves: bz#1632967
    ([Azure] cloud-init dhcp.py dhcp_discovery() race with dhclient with preprovisioned VM in Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-3.el7
changelog:
  - ci-cloud-init-per-don-t-use-dashes-in-sem-names.patch [bz#1664876]
  - ci-Enable-cloud-init-by-default-on-vmware.patch [bz#1623281]
  - Resolves: bz#1623281
    ([ESXi][RHEL7.6]Enable cloud-init by default on VMware)
  - Resolves: bz#1664876
    (cloud-init Storage-Management Functionality Is Erasing Filesystems)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-4.el7
changelog:
  - ci-azure-Filter-list-of-ssh-keys-pulled-from-fabric.patch [bz#1684040]
  - Resolves: bz#1684040
    (CVE-2019-0816 cloud-init: extra ssh keys added to authorized_keys [rhel-7.7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-5.el7
changelog:
  - ci-include-NOZEROCONF-yes-in-etc-sysconfig-network.patch [bz#1653131]
  - Resolves: bz#1653131
    (cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-1.el7
changelog:
  - Rebase to 18.5 [bz#1687565]
  - Resolves: bz#1687565
    (cloud-init 18.5 rebase for fast provisioning on Azure [RHEL 7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-2.el7
changelog:
  - ci-Azure-Ensure-platform-random_seed-is-always-serializ.patch [bz#1687565]
  - ci-DatasourceAzure-add-additional-logging-for-azure-dat.patch [bz#1687565]
  - ci-Azure-Changes-to-the-Hyper-V-KVP-Reporter.patch [bz#1687565]
  - ci-DataSourceAzure-Adjust-timeout-for-polling-IMDS.patch [bz#1687565]
  - ci-cc_mounts-check-if-mount-a-on-no-change-fstab-path.patch [bz#1687565]
  - Resolves: bz#1687565
    (cloud-init 18.5 rebase for fast provisioning on Azure [RHEL 7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-3.el7
changelog:
  - ci-Revert-azure-ensure-that-networkmanager-hook-script-.patch [bz#1707725]
  - Resolves: bz#1707725
    ([WALA][cloud] cloud-init dhclient-hook script has some unexpected side-effects on Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-4.el7
changelog:
  - ci-Azure-Return-static-fallback-address-as-if-failed-to.patch [bz#1726701]
  - Resolves: bz#1726701
    ([Azure] [RHEL 7.8] Cloud-init fixes to support fast provisioning for Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-5.el7
changelog:
  - ci-Fix-for-network-configuration-not-persisting-after-r.patch [bz#1593010]
  - Resolves: bz#1593010
    ([cloud-init][RHVM]cloud-init network configuration does not persist reboot [RHEL 7.8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7
changelog:
  - ci-util-json.dumps-on-python-2.7-will-handle-UnicodeDec.patch [bz#1744526]
  - Resolves: bz#1744526
    ([cloud-init][OpenStack] cloud-init can't persist instance-data.json)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7_8.1
changelog:
  - ci-azure-avoid.patch [bz#1810064]
  - Resolves: bz#1810064
    (cloud-init Azure byte swap (hyperV Gen2 Only) [rhel-7.8.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7_8.2
changelog:
  - ci-cmd-main.py-Fix-missing-modules-init-key-in-modes-di.patch [bz#1802173]
  - Resolves: bz#1802173
    ([cloud-init][rhel-7.8.z]cloud-init cloud-final.service fail with KeyError: 'modules-init' after upgrade to version 18.2-1.el7_6.1 in RHV)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7_8.3
changelog:
  - ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1801094]
  - ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1801094]
  - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1801094]
  - Resolves: bz#1801094
    ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init [rhel-7.8.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7_8.4
changelog:
  - ci-New-data-source-for-the-Exoscale.com-cloud-platform.patch [bz#1827207]
  - ci-Add-support-for-publishing-host-keys-to-GCE-guest-at.patch [bz#1827207]
  - ci-exoscale-fix-sysconfig-cloud_config_modules-override.patch [bz#1827207]
  - ci-exoscale-Increase-url_max_wait-to-120s.patch [bz#1827207]
  - ci-ec2-Add-support-for-AWS-IMDS-v2-session-oriented-55.patch [bz#1827207]
  - Resolves: bz#1827207
    (Support for AWS IMDS v2 (available in cloud-init 19.4) [rhel-7.8.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7_8.5
changelog:
  - ci-url_helper-read_file_or_url-should-pass-headers-para.patch [bz#1832177]
  - Resolves: bz#1832177
    ([Azure] cloud-init provisioning failed in Azure [rhel-7.8.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-2.el7
changelog:
  - ci-Removing-cloud-user-from-wheel.patch [bz#1549638]
  - ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
  - ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
  - ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
  - ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
  - Resolves: bz#1549638
    ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
  - Resolves: bz#1574338
    (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
  - Resolves: bz#1748015
    ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
  - Resolves: bz#1812170
    (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
  - Resolves: bz#1812173
    (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el7
changelog:
  - ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
  - Resolves: bz#1772505
    ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el7
changelog:
  - ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
  - Resolves: bz#1772505
    ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el7
changelog:
  - ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
  - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
  - Resolves: bz#1748015
    ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
  - Resolves: bz#1772505
    ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el7
changelog:
  - ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
  - ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
  - Resolves: bz#1748015
    ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
  - Resolves: bz#1821999
    ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7
changelog:
  - ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
  - Resolves: bz#1821999
    ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)


author: Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.2
changelog:
  - ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
  - ci-Changing-notation-of-subp-call.patch [bz#1839619]
  - ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
  - Resolves: bz#1839619
    ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
  - Resolves: bz#1871916
    ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])


author: Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3
changelog:
  - ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
  - Resolves: bz#1861871
  - ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])


author: Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3
changelog:
  - ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
  - Resolves: bz#1861871
    ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])


author: Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.4
changelog:
  - ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
  - Resolves: bz#1900807
    (Update existing user password RHEL7x)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7_9.5
changelog:
  - ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1897616]
  - Resolves: bz#1897616
    ([rhel-7]cloud-final.service fails if NetworkManager not installed.)


author: Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.6
changelog:
  - ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2003231]
  - Resolves: bz#2003231
    (anything above 19.2 of cloud init it fails to assign default route and connect to the meta data service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.29-2.el7_6.2
changelog:
  - growpart: fix bug when resizing a middle partition with sgdisk [rhbz#1726564]
  - Resolves: rhbz#1726564
    (When growing GPT partitions use [start of next - 1] instead of [start of next] as the new end sector.)


author: Rex Dieter <rdieter@fedoraproject.org> 2.3.3.4-6
changelog:
  - contribs-lib is not built and installed even with config (#794795, upstream ID: 3392466)
  - pkgconfig file is missing clucene-shared (upstream ID: 3461512)
  - non-descriptive descripton (#757319)


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.10.1-2
changelog:
  - packaging fixes (clufter-cli requires python-setuptools, adjust for
    older schema of Bash completions)


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.57.0-1
changelog:
  - bump upstream package, see https://pagure.io/clufter/releases
  - generate man pages also for offered commands
  - auto-generate SEE ALSO sections for the man pages
  - move entry_points.txt to clufter-cli sub-package
  - general spec file refresh (pagure.io as a default project base, etc.)
  - make Python interpreter execution sane
  - fix *2pcscmd* commands so they do not suggest
    "pcs cluster cib <file> --config" that doesn't currently
    work for subsequent local-modification pcs commands
    [rhbz#1328078]
  - add support for ticket constraints to *2pcscmd commands
    [rhbz#1340243]


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.58.0-1
changelog:
  - fix Python interpreter propagated as enquoted string with old setuptools
  - bump upstream package, see https://pagure.io/clufter/releases


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.59.0-1
changelog:
  - add ability to borrow validation schemas from pacemaker installed along
  - bump upstream package, see https://pagure.io/clufter/releases


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.70.0-2
changelog:
  - split -bin and -common packages, the former becoming the only arch-specific
  - also move python-specific (entry points, main files) back from -cli package
  - also add virtual provides for python-clufter as python2-clufter
  - bump upstream package (version rolling the above changes out)
  - build for ppc64le
    [rhbz#1402565]


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.75.0-1
changelog:
  - move nano fallback editor dependency to -cli package [PGissue#1]
  - bump upstream package, see https://pagure.io/clufter/releases


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.76.0-1
changelog:
  - factor "borrow validation schemas from pacemaker" out to a separate script
  - bump upstream package, see https://pagure.io/clufter/releases


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.77.0-2
changelog:
  - fix nodelist.node.name configuration option (originaly devised by pacemaker)
    not supported in corosync.conf with the built-in validation schema
    [rhbz#1517834]


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.77.1-1
changelog:
  - bump upstream package, see https://pagure.io/clufter/releases
  - build for aarch64
    [rhbz#1569111]


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Eliminated rpmbuild "bogus date" error due to inconsistent weekday,
    by assuming the date is correct and changing the weekday.
    Sun Mar 23 2007 --> Sun Mar 18 2007 or Fri Mar 23 2007 or Sun Mar 25 2007 or ....
    Sun Mar 24 2007 --> Sun Mar 18 2007 or Sat Mar 24 2007 or Sun Mar 25 2007 or ....
    Sun Mar 27 2007 --> Sun Mar 25 2007 or Tue Mar 27 2007 or Sun Apr 01 2007 or ....
    Sun Mar 28 2007 --> Sun Mar 25 2007 or Wed Mar 28 2007 or Sun Apr 01 2007 or ....
    Wed Feb 11 2010 --> Wed Feb 10 2010 or Thu Feb 11 2010 or Wed Feb 17 2010 or ....
    Tue Mar 20 2010 --> Tue Mar 16 2010 or Sat Mar 20 2010 or Tue Mar 23 2010 or ....


author: Florian Müllner <fmuellner@redhat.com> - 1.14.4-7
changelog:
  - Backport device manager cleanups for pointer emulation for touch events
    in mutter
    Resolves: rhbz#1051029


author: Owen Taylor <otaylor@redhat.com> - 1.14.4-9
changelog:
  - Add upstream patches fixing problems that resulted in the entire
    screen being redrawn too often with gnome shell.
    Resolves: rhbz#1034941


author: Owen Taylor <otaylor@redhat.com> - 1.20.0-6
changelog:
  - Fix problem with stereo patch (missing export declarations) that resulted
    in added symbols not being exported.
    Resolves: #1306801


author: Owen Taylor <otaylor@redhat.com> - 1.20.0-8
changelog:
  - Add a patch that adds clutter_x11_enable_threaded_swap_wait(),
    enabling proper waiting for frame completion on NVIDIA.
  - Add a patch to fix Cogl Glib source added multiple times.
    See https://bugzilla.gnome.org/show_bug.cgi?id=768243
    Resolves: #1306801


author: Rui Matos <rmatos@redhat.com> - 1.20.0-10
changelog:
  - Add patches to make the backend driver selection explicit instead of
    changing the default to gl3
    Resolves: #1361251


author: Petr Machata <pmachata@redhat.com> - 2.8.11-2
changelog:
  - Pass -fno-strict-aliasing to cm_sha2.c to avoid strict aliasing
    problems that GCC warns about.
  - Icon name in CMake.desktop shouldn't include filename extension.


author: Patsy Franklin <pfrankli@redhat.com> - 2.8.12.2-1
changelog:
  - Rebase to 2.8.12.2 including some recent patches. (BZ #1195919)
  - Fix to find python libs version 3.4 (BZ #1246369)
  - Don't fail if certain Qt modules are unavailable. (BZ #1192188)


author: Antonio Trande <sagitter@fedoraproject.org> - 3.14.6-1
changelog:
  - Update to cmake-3.14.6 (rhbz#1746146, rhbz#1746104)
  - Do not use system jsoncpp
  - Split off appdata file as external source file


author: Neal Gompa <ngompa13@gmail.com> - 3.17.3-3
changelog:
  - Backport support for out-of-source builds controlled by __cmake3_in_source_build macro
  - Backport cmake3_build and cmake3_install macros
  - Backport ctest3 macro


author: Andreas Schneider <asn@redhat.com> - 1.0.0-1
changelog:
  - Update to version 1.0.0:
    * Added new test runner with group fixtures. The old runner is deprecated
    * Added an extensible message output formatter
    * Added jUnit XML message output
    * Added subunit message output
    * Added Test Anything Protocol message output
    * Added skip() command
    * Added test_realloc()
    * Added a cmockery compat header
    * Fixed a lot of bugs on Windows


author: Andreas Schneider <asn@redhat.com> - 1.0.1-1
changelog:
  - Update to version 1.0.1:
    * Added a macro for assert_ptr_equal().
    * Fixed test_realloc() if 0 size is passed.
    * Fixed objects packaging bug.
    * Fixed building with newer gcc versions.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.5.2-3
changelog:
  - Fixed passing NULL array from get_instance
  - Add bindings for CMTraceMessage
    (patches by Jan Safranek)


author: Jan Safranek <jsafrane@redhat.com> - 0.5.2-6
changelog:
  - Fixed 'env' parameter value in 'get_providers()' function
    Resolves: #919082
  - Fixed embedded instance properties
    Resolves: #919081


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.9.5-3
changelog:
  - Fix placement of *.py[co] files
    Resolves: #921547
  - Remove /usr/share/cmpi - it's used by ruby binding that we don't build


author: Mat Booth <fedora@matbooth.co.uk> - 1.9.4.1-1
changelog:
  - Update for latest guidelines.
  - Update to latest upstream version, bug 848871.
  - Fix directory ownership, bug 850004.


author: Michal Srb <msrb@redhat.com> - 1.9.4.1-4
changelog:
  - Replace servlet 2.5 with servlet 3.0 (Resolves: #979499)
  - Install ASL 1.1 license file
  - Spec file clean up


author: Michal Srb <msrb@redhat.com> - 1.9.4.1-7
changelog:
  - Fix license tag
  - Add ASL 2.0 license text
  - Remove unneeded files licensed under questionable license


author: Dominik Perpeet <dperpeet@redhat.com> 138-3
changelog:
  - Fix issues with connections between multiple hosts
  - Fix format string type mismatch on some architectures


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: cockpit-spec-debranding.patch
  -->  Correctly brand this as NOT TUV's product
  - Added Source: cockpit.ini
  -->  Config file for automated patch script


author: Martin Pitt <mpitt@redhat.com> 154-1
changelog:
  - Rebase to version 154, drop all patches rhbz#1470780
  - This allows ssh keys to be loaded from arbitrary directories
    rhbz#1425887


author: Martin Pitt <mpitt@redhat.com> 154-3
changelog:
  - Update source po for Japanese translations rhbz#1512923
  - Adjust build system to avoid build failure for the above


author: Dominik Perpeet <dperpeet@redhat.com> 147-1
changelog:
  - Update to 147 release
  - Add "Software Updates" page for packages
  - Fix Kubernetes authentication when Kubernetes configured for RBAC
  - Add configuration of account locking and password expiry to Accounts page
  - Consistently ignore loopback traffic on all network load graphs
  - Add ABRT integration to the System page
  - Resize the terminal dynamically to use all available space


author: Martin Pitt <mpitt@redhat.com> 148-1
changelog:
  - Update Cluster/Registry Image tags design to current Openshift Web Console
  - Delete Kubernetes session tokens on logout
  - Detect unregistered RHEL systems on Software Updates page


author: Martin Pitt <mpitt@redhat.com> 155-1
changelog:
  - Add NFS client support to the Storage page
   - Add checkboxes for common Storage encryption and mount options


author: Martin Pitt <mpitt@redhat.com> 160-1
changelog:
  - Add check boxes for common NFS mount options
   - Redesign package list on Software Updates page and show RHEL Errata
   - Clarify Software Update status if only security updates are available
   - Add serial console to virtual Machines page and redesign the Consoles tab
   - Show more error message details for failures on virtual Machines page


author: Dominik Perpeet <dperpeet@redhat.com> 141-1
changelog:
  - Update to 141 release
  - Allow users to change Docker container environment variables
  - Allow auth commands to store credentials for future challenges
  - Attempt to tear down used partitions when formatting disks
  - Show the correct known_hosts path on missing/mismatching host keys
  - Set HTML content type when serving login page, for better reverse proxy operation


author: Martin Pitt <mpitt@redhat.com> 158-1
changelog:
  - Update to 158 release
  - New package "cockpit-packagekit", which provides a "Software Updates" page
    for installing package updates rhbz#1479836
  - Add NFS client support to the Storage page
  - Add checkboxes for common Storage encryption and mount options
  - Adjust cockpit-storaged dependencies to storaged → udisks2 rename
    rhbz#1510667


author: Martin Pitt <mpitt@redhat.com> 159-1
changelog:
  - Update to 159 release
  - Configure data deduplication with VDO devices on Storage page
  - Add serial console to virtual Machines page and redesign the Consoles tab
  - Show more error message details for failures on virtual Machines page


author: Martin Pitt <mpitt@redhat.com> 160-2
changelog:
  - Add kubevirt Virtual Machines overview
  - Redesign package list on Software Updates page and show RHEL Errata


author: Martin Pitt <mpitt@redhat.com> 165-1
changelog:
  - Update to 165 release
  - New VMs can be created on Machines page
  - Improve LVM volume resizing
  - Hide Docker storage pool reset button when it cannot work properly
  - Move NFS management into new details page
  - Show more details of sessions and services that keep NFS busy
  - Machines page now shows proper error notifications
  - Show virtual machines that are being created
  - Detect if libvirtd is not running and offer to start and/or enable it
  - Enable building of cockpit-machines-ovirt rhbz#1515796


author: Martin Pitt <mpitt@redhat.com> 169-3
changelog:
  - Rebase to version 169, drop all patches rhbz#1568728
  - Fix Subscriptions page hang when accessing as non-admin rhbz#1442540
  - Show an indicator on front page if updates are available rhbz#1495543
  - Properly localize "Log in" rhbz#1541454
  - Improve check for root privilege availability, to e. g. also work for FreeIPA
    admins rhbz#1574630


author: Martin Pitt <mpitt@redhat.com> 173-6
changelog:
  - Fix remote unauthenticated crash with crafted URLs rhbz#1627631
  - Fix off-by-one error in flow control rhbz#1626846


author: Martin Pitt <mpitt@redhat.com> 173.1-1
changelog:
  - Crash fixes spotted by coverity rhbz#1644345
  - Fix race condition with fslist channels rhbz#1644346
  - Fix remotectl crash on errors rhbz#1644348


author: Martin Pitt <mpitt@redhat.com> 190-1
changelog:
  - kdump: Add NFS and SSH dump targets rhbz#1533366
  - kdump: Fix confusing design of target selector rhbz#1536327
  - firewall: Hide already enabled items from "Add Services" dialog rhbz#1598625
  - networking: Gracefully handle when NetworkManager is  not running
    rhbz#1551615
  - web server: Mark deleted cookie as "secure", and add X-Content-Type-Options
    header rhbz#1677767
  - web server: Mark deleted cookie as "HttpOnly" rhbz#1656339
  - Fix various crashes spotted by coverity rhbz#1644209
  - Fix remotectl crash with inaccessible files rhbz#1644213
  - Fix race condition with fslist1 channels rhbz#1644223
  - Fix crash with parsing invalid bas64 headers rhbz#1663712


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: cockpit-spec-debranding.patch
  -->  Correctly brand this as NOT TUV's product
  - Added Source: cockpit-spec-recommends.patch
  -->  Remove unsupported RPM tags
  - Added Source: cockpit.ini
  -->  Config file for automated patch script


author: Martin Pitt <mpitt@redhat.com> 195.2-1
changelog:
  - firewall: Only reload firewall when adding custom services (rhbz#1725094)
  - networking: Activate a connection after clearing master/slave fields (rhbz#1729378)
  - Add Obsoletes: for ancient cockpit-shell package (rhbz#1744208)


author: Martin Pitt <mpitt@redhat.com> 195.3-1
changelog:
  - subscriptions: Add support for Red Hat Insights (rhbz#1748026)
  - systemd: Warn if not connected to Insights (rhbz#1748350)


author: Martin Pitt <mpitt@redhat.com> 195.8-1
changelog:
  - webserver: Fix large requests with TLS (rhbz#1785497)
  - Machines: Avoid D-Bus introspection to libvirt-dbus, to speed up polkit
    operations (rhbz#1780400)
  - Machines: Fix CPU statistics (rhbz#1763641)


author: Martin Pitt <mpitt@redhat.com> 195.9-1
changelog:
  - ws: Add support for EC certificates (rhbz#1841070)
  - Translation fixes (rhbz#1796834)
  - Use RHSM1 service instead of the deprecated (and now removed)
    com.redhat.SubscriptionManager


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: cockpit-spec-debranding.patch
  -->  Correctly brand this as NOT TUV's product
  - Added Source: cockpit-spec-nokub-32bit.patch
  -->  Make sure to not bother with kubernetes on 32bit
  - Added Source: cockpit.ini
  -->  Config file for automated patch script


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: cockpit-spec-debranding.patch
  -->  Correctly brand this as NOT TUV's product
  - Added Source: cockpit-nokub-32bit.patch
  -->  Make sure to not bother with kubernetes on 32bit
  - Added Source: cockpit-spec-recommends.patch
  -->  Remove unsupported RPM tags
  - Added Source: cockpit.ini
  -->  Config file for automated patch script


author: Brian C. Lane <bcl@redhat.com> - 0.1.1-1
changelog:
  - fixes blueprints end-to-end test (jgiardin)
  - Hides Comment feature from Pending Changes modal (jgiardin)
  - Remove non-functional UI elements/components (jgiardin)
  - fixes line length in unit test (jgiardin)
  - update selector for Edit Blueprint button in test (jgiardin)
  - fixes empty state on blueprints page and tests (jgiardin)
  - fixes spacing errors (jgiardin)
  - fixes bad merges during rebase (jgiardin)
  - handles error case for fetching blueprints (jgiardin)
  - sets timeout on Loading state (jgiardin)
  - how did that 'n' get in there? (jgiardin)
  - fixes line length (jgiardin)
  - Disables actions (jgiardin)
  - Updates UI based on state, for loading and error (jgiardin)
  - Adds reducer for updating state when an error occurs (jgiardin)
  - updates state to hold values for fetch status (jgiardin)
  - components: Use consistent syntax for handlers (lars)
  - Fix two issues. (henrywangxf)
  - test/create.image: simplify shallow wrapper creation (lars)
  - CreateImage: don't call unset handlers (lars)
  - test/create.image: also conider handleStartCompose (lars)
  - correcting the initial state (jgiardin)
  - updates mockState in unit tests to match state updates for Filters (jgiardin)
  - Merge pull request #250 from larskarlitski/remove-mock-data (jgiardin)
  - Remove mock data (lars)
  - Add lorax-composer test and remove stand alone welder-web test. (henrywangxf)
  - Domain socket support in UI testing. (henrywangxf)
  - Update queue status text, Remove cancel button (jacobdkozol)
  - Added status icons for imageListView (jacobdkozol)
  - Add start compose functionality (jacobdkozol)
  - Fix blueprint page issue loading components (jacobdkozol)
  - Remove redux persist (jacobdkozol)
  - Remove unused code (lars)
  - Merge pull request #248 from jgiardino/filter (jgiardin)
  - Merge pull request #262 from andreasn/form-control-fx-style (jgiardin)
  - Fix style of pagination input under available components (anilsson)
  - fix issue when multiple filters are defined (jgiardin)
  - implements filtering and refactors toolbars (jgiardin)


author: Brian C. Lane <bcl@redhat.com> - 0.1.2-1
changelog:
  - New Version 0.1.2
  - Add the .spec files to .PHONY (bcl)
  - Add welder-web and cockpit-composer release instructions (bcl)
  - Add a 'tag' target to the Makefile (bcl)
  - Adjust image list layout to improve alignment (jgiardin)
  - Fix blueprint packages getting added to history (jacobdkozol)
  - Fixed bug where startComposeApi would not return start compose response (sfondell)
  - Run `make po-push` from travis on pushes to master. (dshea)
  - Add a po-push target to the Makefile. (dshea)
  - Don't call compose API on the blueprints page (lars)
  - Support downloading images (lars)
  - Fix fetchComposes() call (lars)
  - Update text string (jgiardin)
  - add bootstrap class for large modals (jgiardin)
  - Fix issues with translated strings and add one more for "Close" (jgiardin)
  - Make strings translatable (but includes build error) (jgiardin)
  - Update layout (jgiardin)
  - Don't show custom sources section if empty (jgiardin)
  - Add modal for listing sources (jgiardin)
  - Revert "Revert "Add python and gcc to the Dockerfiles."" (dshea)
  - Include translations in the dist tarball (dshea)
  - Remove the zanata-js crud from package-lock.json (dshea)
  - Fix how fetching blueprints/composes is triggered (jacobdkozol)
  - Update API calls error messages (jacobdkozol)
  - Fix polling issue. Add error action. (jacobdkozol)
  - Add loading images from prior sessions and sort by start time. (jacobdkozol)
  - Revert "Run `npm rebuild` after `npm install`." (lars)
  - Revert "Add python and gcc to the Dockerfiles." (lars)
  - Don't update translations on every build (lars)
  - Fix yamllint errors on .travis.yml (dshea)
  - Add new requirements to the travis environment (dshea)
  - Add a script for testing translations. (dshea)
  - Run `npm rebuild` after `npm install`. (dshea)
  - Make the editBlueprint selector more specific. (dshea)
  - Add python and gcc to the Dockerfiles. (dshea)
  - Add a i18n section to the README (dshea)
  - Create cockpit translation modules. (dshea)
  - Extract cockpit manifest strings for translation. (dshea)
  - Add translated messages. (dshea)
  - Add scripts for interacting with Zanata. (dshea)
  - Internationalize strings with react-intl. (dshea)
  - Fix PR#309 imported issue. The rpm package should be welder-web*.noarch.rpm, not welder-web*.x86_64.rpm (henrywangxf)
  - Build srpm together with rpm (atodorov)
  - Images list UI refinements (jgiardin)
  - cockpituous-release: Use upstream release-source (martinpitt)
  - core: Use escalated privileges to access Lorax API (stefw)
  - remove utils from Layout (jgiardin)
  - Remove unused Layout components (jgiardin)
  - Submit coverage report only if present (atodorov)
  - Use default composer dir without --group option (atodorov)
  - Fix created image not being added to state (jacobdkozol)
  - package.json: Remove bootstrap-select (lars)
  - package.json: Update stylelint (lars)
  - blueprints: Show actual error message (lars)
  - core: propagate errors from cockpitFetch() (lars)


author: Brian C. Lane <bcl@redhat.com> - 0.1.3-1
changelog:
  - New version 0.1.3
  - Update Create Image notifications (#328) (jgiardin)
  - Make strings translatable in Pending Changes dialog (#341) (jgiardin)
  - Makefile: don't run po-pull on dist (lars)
  - Add the .spec files to .PHONY (bcl)


author: Brian C. Lane <bcl@redhat.com> - 0.1.4-1
changelog:
  - New version 0.1.4
  - Adds queue status to an infotip in the Create Image modal (jgiardin)
  - Update Create Image modal to also commit unsaved changes (jgiardin)
  - Catching a couple of minor issues (jgiardin)
  - Update Create Image modal to include blueprint object instead of just name (jgiardin)
  - Update Create Image button selector in end-to-end test (jgiardin)
  - Display warning messages to the user in Create Image modal (jgiardin)
  - use updated property key from api for date created (jgiardin)
  - translations: Fail when zanata-js is not installed (lars)
  - README.md: Add missing `translations:` (lars)
  - translations: remove test target (lars)
  - po: Update from Fedora Zanata (lars)
  - translations: move po files and scripts to po/ (lars)
  - translations: Strip country code when loading react-intl's locale-data (mpitt)
  - remove redundant .then(data => data) (jgiardin)
  - Add ability to stop builds that are waiting or running (jgiardin)
  - Change text from "Delete Build" to "Delete Image" (jgiardin)
  - Update Delete Blueprint modal to match layout of Delete Build (jgiardin)
  - Fix miscellaneous propType warnings (jgiardin)
  - Include confirmation modal for deleting a finished build (jgiardin)
  - Swap order of date and type in the Image list item details (jgiardin)
  - Add Delete action for Finished composes (jgiardin)
  - Add ability to delete Failed builds (jgiardin)
  - test_blueprints: Make blueprint selection more robust (lars)
  - Use upstream patternfly-react's Tab component (lars)
  - Changes en-dash to dash and adds spaces (jgiardin)
  - Updates based on a11y review, also simplified i18n format (jgiardin)
  - minor tweaks to improve the screen reader experience (jgiardin)
  - Makes strings translatable in pagination for available components (jgiardin)
  - Update React and enzyme (lars)
  - package.json: Use ~ instead of ^ versions for dependencies (lars)
  - Drop unused dependencies (lars)
  - package.json: update dependencies (lars)
  - Remove package-lock.json (lars)


author: Adam Jackson <ajax@redhat.com> 1.14.0-5.1
changelog:
  - Enable GLX_MESA_copy_sub_buffer on llvmpipe, since RHEL's Mesa includes
    a fix for that; also conflict with Mesas that don't.


author: Owen Taylor <otaylor@redhat.com> - 1.18.2-12
changelog:
  - Add patches to improve display synchronization on NVIDIA
      
    When testing quadbuffer stereo patches, GNOME Shell would sometimes
    hang up on restart. This turned out to be a problem with display
    synchronization on NVIDIA. The patches added here make display
    synchronization work much more similarly with the NVIDIA drivers
    and the open source drivers, which not only fixes this bug, but should
    reduce future bugs.
      
    Resolves: #1305076

  - Add patches improving frame completion events in Cogl


author: Richard Hughes <richard@hughsie.com> - 1-7
changelog:
  - Add the user-writable system-wide per-machine ICC profile directory from
    the new version of the OpenIccDirectoryProposal.


author: Richard Hughes <richard@hughsie.com> 0.1.31-1
changelog:
  - New upstream version
  - Calculate the display calibration based on the Lab and target display gamma
  - Interpolate the gamma data to the VCGT size using Akima
  - Add some more display vendor names to the display fixup table
  - Fix the argyll sensor driver when using the ColorMunki Smile
  - Fix the gamut warning to check primaries wider than CIERGB and ProPhoto
  - Move the private sensor libraries out of the pure lib space


author: Richard Hughes <richard@hughsie.com> 0.1.32-1
changelog:
  - New upstream version
  - Add a new tool 'cd-iccdump' that can dump V4 and V2 profiles
  - Add translated descriptions to the ICC profiles


author: Richard Hughes <richard@hughsie.com> 0.1.33-1
changelog:
  - New upstream version
  - Add some translated profile descriptions for the CMYK profiles
  - Add the FOGRA45L and FOGRA47L CMYK and eciRGBv1 profiles
  - Check the generated CCMX matrix for invalid data
  - Do not print a warning if the DBus property does not exist
  - Ensure mbstowcs() has an LC_CTYPE of 'en_US.UTF-8'
  - Always write C-locale floating point values in IT8 files
  - Initialize the value of the CCMX matrix
  - Never promote localized v2 ICC profiles to v4
  - Rename ISOnewspaper26 to IFRA26S_2004_newsprint


author: Richard Hughes <richard@hughsie.com> 0.1.34-1
changelog:
  - New upstream version
  - Add a ICC transform object for simple RGB conversions
  - Add a warning for RGB profiles with unlikely whitepoint values
  - Add Qt DBus annotations
  - Allow clients to call org.freedesktop.DBus.Peer
  - Correct a lot more company names when creating devices
  - Do not automatically add EDID profiles with warnings to devices
  - Increase the delay between patches in the session-helper
  - Install the bash completion support into /usr


author: Richard Hughes <richard@hughsie.com> 1.0.0-1
changelog:
  - New upstream version
  - Add a config option for monitors with identical EDID values
  - Allow a different input and output format in CdTransform
  - Build all installed binaries with PIE
  - Build the colord binary with full RELRO
  - Do not show a warning when using 'colormgr device-get-profile-for-qualifier'
  - Fix crash in cd-iccdump by working around an lcms2 bug
  - Fix using the color sensors on ARM hardware
  - Set the STANDARD_space metadata for the print profiles
  - Show all the translations when dumping an ICC profile


author: Richard Hughes <richard@hughsie.com> 1.0.1-1
changelog:
  - New upstream version
  - Do not unconditionally enable BPC on the color transform
  - Fix profile created time for non-UTC timezones
  - Record the gamma table in the session helper error message


author: Richard Hughes <richard@hughsie.com> 1.0.2-1
changelog:
  - New upstream version
  - Add cd_icc_save_data() so that we can easily set _ICC_PROFILE
  - Add CdIccStore to monitor directories of ICC profiles
  - Add SystemVendor and SystemModel properties to the main interface
  - Allow to specify a non-qualified path when using FindProfileByFilename
  - Allow using the key 'Filename' when using FindProfileByProperty
  - Always return the error if any sync method failed
  - Fix GObject introspection when getting lists
  - Fix GObject introspection when getting metadata


author: Richard Hughes <richard@hughsie.com> 1.0.4-1
changelog:
  - Rebase to a new upstream version to fix small security bug
  - Use %ghost in the to avoid removing databases on upgrades
  - Resolves: #1012832


author: Richard Hughes <richard@hughsie.com> 0.1.22-2
changelog:
  - Backport a patch from git master that fixes an include issue with
    projects that want to use colord-gtk.h and colord.h at the same time.


author: Richard Hughes <richard@hughsie.com> 0.1.25-1
changelog:
  - New upstream version.
  - Give the sample widget slightly curved corners and a gray outline
  - Do not use deprecated functions from libcolord
  - Fix warnings when building ColordGtk-1.0.gir
  - Fix up the licence boilerplate for CdSampleWidget


author: Jay Fenlason <fenlason@redhat.com> 1:1.2.15-1.el5
changelog:
  - Change sysconfig file to /etc/rdma/compat-dapl to match the change in dapl
  - Split out into separate source rpm from the dapl-2.0.25-2.el5.src.rpm
    Resolves: rhbz#557170 split compat-dapl into a separate srpm


author: Doug Ledford <dledford@redhat.com> - 1:1.2.15-2.el6
changelog:
  - Fix various rpmlint wanrings in spec file
  - Version all of the obsoletes
  - Now that this is no longer part of the dapl rpm, it needs its own
    doc macro so that the license and whatnot are on the system when the
    package is installed
  - Related: bz555835


author: Jay Fenlason <fenlason@redhat.com> - 1:1.2.15-2.1.el6
changelog:
  - Include pipe-leak patch to close
    Resolves: rhbz619439 - OFED1.5.1: uDAPL - cma: memory leak of FD's (DB2 pureScale)
    This required some whitspace editing--apparently the patch was garbled
    somewhere in transit.
  - Include the cma-memleak-verbs-CQ-compl-chans-fix patch to close
    Resolves: rhbz619443 - OFED1.5.1: uDAPL handles close on forked child exit (DB2 pureScale)


author: Doug Ledford <dledford@redhat.com> - 1:1.2.19-1
changelog:
  - Update to latest upstream release (1.2.15 -> 1.2.19)
  - Remove 3 patches rolled into upstream
  - Update exclusive arch to accommodate i686 arch
  - Related: bz725016, bz724896


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-18
changelog:
  - really fix the update path (#627019, #627387)
  - introduce -headers subpackage to avoid conflicts on multiarch
    systems (#590973)
  - install package license


author: Jan Grulich <jgrulich@redhat.com> - 0.23-1
changelog:
  - Spec file based on exiv2 package to provide old libraries before API change
    Resolves: bz#1568618


author: Jan Grulich <jgrulich@redhat.com> - 0.26-1
changelog:
  - Spec file based on exiv2 package to provide old libraries before API change
    Resolves: bz#1668355


author: Jakub Jelinek <jakub@redhat.com> 3.2.3-68
changelog:
  - strip -march=z9-109 and -mtune=z10 from OPT_FLAGS on s390, s390x
    (#523209)
  - make sure to use system libgcc_s.so.1 instead of gcc32 one during
    testing


author: Jakub Jelinek <jakub@redhat.com> 3.2.3-70
changelog:
  - filter out -fstack-protector-strong, -grecord-gcc-switches and new
    i686, ppc and s390 tunings (#1048850)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-7
changelog:
  - change -fstack-protector-strong to -fstack-protector in optflags,
    remove -march=x86-64 and -mfpmath=sse for ix86 (#1048852)


author: Jeff Law <law@redhat.com> - 1:2.12-1.80.4
changelog:
  - Fix passing of -z execstack to the linker.
  - Remove -mnew-mnenomics from PPC build flags
  - Pull over patch for 911307 from Fedora


author: Karsten Hopp <karsten@redhat.de> 1.10-24
changelog:
  - added development manpages
  - as there are no manpages for the executables available, added at least
    a FAQ (#172324)


author: Jan Vcelak <jvcelak@redhat.com> 1:2.3.43-3
changelog:
  - enhancement: build with hardening flags (RELRO)
  - fix: querying for IPv6 DNS records when IPv6 is disabled on the host (#835013)
  - drop unnecessary patches
  - clean configure flags


author: Doug Ledford <dledford@redhat.com> - 3.3.5-2
changelog:
  - Drop libibmad as it didn't soname bump, and also remove the lower level
    opensm libs, libosm{comp,vendor} as they didn't soname bump either
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 3.3.5-3
changelog:
  - Change the file spec so we don't accidentally pick up the debug files in
    the base package on 32bit arches
  - Resolves: bz732495


author: Honggang Li <honli@redhat.com> - 3.3.15-3
changelog:
  - Package up libosmcomp.so.3* to fix dependency issue after rebase
    opensm to release 3.3.21
  - Resolves: bz1670692


author: Marek Kasik <mkasik@redhat.com> - 0.22.5-4
changelog:
  - Add back glib, cpp and qt frontends so that existing applications
  - loads correct libpoppler.so.*.
  - Resolves: #1184215


author: Marek Polacek <polacek@redhat.com> 10.2.1-1
changelog:
  - GCC 10.2 release
  - disable -flto in %{optflags}, lto bootstrap will be enabled the GCC way
    later
  - require MPFR Library version 3.1.0 (or later)


author: Marek Polacek <polacek@redhat.com> 5.3.1-9
changelog:
  - update Description again (#1351527)
  - enable on ppc64 (#1363851)
  - enable on ppc64le (#1363846, #1363853)


author: <odubaj@redhat.com> - 2.3.4-2
changelog:
  - move soname back to *.so.2 (#1875355)
  - add *.so.1002 symlinks for backward compatibility (#1844443)


author: Denys Vlasenko <dvlasenk@redhat.com> - 0.2.7-4
changelog:
  - Forward-porting fixes from RHEL6.
  - Enlarge buffer used for formatting date in a string format.
  - Resolves: rhbz#891938.
  - Allow configuration of the maximum number of open files.
  - Resolves: rhbz#738967.


author: Denys Vlasenko <dvlasenk@redhat.com> - 0.2.7-9
changelog:
  - Added commented-out "LimitNOFILE=" directive to conman.service.
  - This is systemd-esque way to change process limits for serivces.
  - Also and a comment when to use it.
  - Resolves: rhbz#1035228.


author: Paul Wouters <pwouters@redhat.com> - 1.4.2-8
changelog:
  - Resolves: rhbz#CVE-2015-6496
  - Fold in upstream patches since 1.4.2 release up to git 900d7e8
  - Fold in upstream patch set of 2015-08-18 for coverity issues


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-3
changelog:
  - Resolves: rhbz#1425552 (explicitely Require: libnetfilter_conntrack >= 1.0.6 as it is same .so version)


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-4
changelog:
  - Resolves: rhbz#1578059 Greatest NVR version of conntrack-tools for ppc64le and x86_64 are different


author: Phil Sutter <psutter@redhat.com> - 1.4.4-5
changelog:
  - Add git commit info to IPv6 NAT support patch
  - Backport: conntrackd: helpers: dhcpv6: Fix potential array overrun
  - Backport: nfct: Drop dead code in nfct_timeout_parse_params()
  - Backport: src: Fix for implicit-fallthrough warnings


author: Bastien Nocera <bnocera@redhat.com> - 3.22.2-1
changelog:
  + control-center-3.22.2-1
  - Update to 3.22.2
  - Add cursor size selection patch
  Resolves: #1386839, #1298881


author: Bastien Nocera <bnocera@redhat.com> - 3.22.2-5
changelog:
  + control-center-3.22.2-5
  - Don't show veth interfaces, we don't have code to set them up
  Resolves: #1457691


author: Bastien Nocera <bnocera@redhat.com> - 3.26.2-6
changelog:
  + control-center-3.26.2-6
  - Fix Clone MAC not being saved in Ethernet device properties
  - Resolves: #1467295


author: Bastien Nocera <bnocera@redhat.com> - 3.26.2-8
changelog:
  + control-center-3.26.2-8
  - Fix Wi-Fi networks not getting updated
  - Show "Wi-Fi disabled" page when Wi-Fi is disabled
  - Resolves: #1545713


author: Bastien Nocera <bnocera@redhat.com> 3.8.5-3
changelog:
  - Patch from Bill Nottingham to use the Pretty name in priority
    to the name+version in the details panel
    Resolves: #988613


author: Nils Philippsen <nphilipp@redhat.com> - 1.10-3
changelog:
  - don't expect find output to be sorted, move "make test" to %check (#237687,
    patch by Giuseppe Bonacci)
  - change license tag to "GPLv2"


author: Nils Philippsen <nphilipp@redhat.com> - 1.12-1
changelog:
  - version 1.12
  - remove obsolete tests patch
  - don't run md5sum against MD5sums as it lists a non-existing .MD5sums file
    which causes md5sum to error out
  - change license tag to "GPLv2 or GPLv3"


author: Robert Relyea <rrelyea@redhat.com> - 1.1.0-34
changelog:
  - recognize up to 32 keys and certs in coolkeys. (can go up to 62 with just #define changes)
  - own our cache file.
  - verify we are using the correct mechanisms


author: Jiri Vanek <jvanek@redhat.com> - 1.1-2
changelog:
  - package now "installs" also during pretrans, so pretrasn scripts can use it
  - pretrasn "install" is removed in postrans


author: Jiri Vanek <jvanek@redhat.com> - 1.1-3
changelog:
  - commented requires on lua posix to stop blocking composes.
  - changed it to 644 to dont mislead by executable flags
  - Resolves: rhbz#1296430


author: Jiri Vanek <jvanek@redhat.com> - 1.1-5
changelog:
  - posttrans silenced, the error is appearing only in state, when there is nothing to copy
  - Resolves: rhbz#1296430


author: Jiri Vanek <jvanek@redhat.com> - 2.2-1
changelog:
  - added "jre/lib/security/blacklisted.certs" to cared files
  - moved to newest release 2.1
  - moved to new upstream at pagure.io
  - added new script of copy_jdk_configs_fixFiles.sh 
  - copy_jdk_configs.lua  aligned to it
  - Resolves: rhbz#1427463


author: Ondrej Vasik <ovasik@redhat.com> 8.21-12
changelog:
  - pr -e, with a mix of backspaces and TABs, could corrupt the heap
    in multibyte locales (analyzed by J.Koncicky)
  - Fix sort multibyte incompatibilities (by O.Oprala)
  - change the TMP variable name in colorls.csh to _tmp (#981373)
  - optimization of colorls scripts by Ville Skytta (#961012)


author: Ondrej Vasik <ovasik@redhat.com> 8.22-1
changelog:
  - new upstream version 8.22 (#1043552)
  - temporarily df symlink test (incomplete upstream fix, not
    regression)
  - enable build with openssl for better performance of
    HASHsum utilities (not for md5sum because of FIPS)
  - turn on the multibyte path in the testsuite to cover
    i18n regressions
  - fix possible colorls.csh script errors for tcsh with
    noclobber set and entered include file


author: Ondrej Vasik <ovasik@redhat.com> 8.22-3
changelog:
  - mark deprecated SELinux related downstream options as
    deprecated in usage/man
  - temporarily disable setting SELinux contexts recursively
    for existing directories - broken (#1045122)


author: Ondrej Vasik <ovasik@redhat.com> 8.22-5
changelog:
  - do not modify SELinux contexts of existing parent
    directories when copying files (fix by P.Brady, #1045122)


author: Ondrej Vasik <ovasik@redhat.com> 8.22-10
changelog:
  - cp/mv/install: do not crash when getfscreatecon() is
    returning a NULL context
  - fix the cut optimizations to UTF-8 locales only
  - unset the unnecessary envvars after colorls scripts


author: Ondrej Vasik <ovasik@redhat.com> - 8.22-13
changelog:
  - call utilities in colorls.* scripts with full path (#1222223)
  - tail: disable inotify in --follow for vxfs (#1109083)
  - remove circular dependency for util-linux (not relevant for RHEL 7 - #1155963)
  - sort: do not look at more than specified keys for mb locales (#1148347)
  - i18n patch: fix buffer overruns and compiler warnings (#1148347)
  - xfs: fix dd sparse false test failure on btrfs and xfs (#1223041)
  - dd: new status=progress level to print stats periodically (#1147701)
  - id/groups - print correct group for session (#1115430)
  - cp,install,mknod,mkfifo,mkdir: separate -Z and --context options
    in --help and manpage (#1084471)
  - ls: clarify --scontext/--context/--lcontext options behaviour
    in info documentation, mention deprecation (#1099508)
  - du: handle bindmount cycles more gracefully (#1238191)
  - mv: prevent possible race condition for hardlinks (#1166570)
  - df: improve filtering of NFS mounts and bind mounts
    (#1197463, #1100026, #1129661)


author: Ondrej Vasik <ovasik@redhat.com> - 8.22-18
changelog:
  - fix xfs build failure in chrooted environment (#1263341)
  - update filesystem lists for stat and tail from latest upstream
    (#1327881, #1280357) 
  - disable id/setgid.sh test(missing chroot feature), fix 
    cp-a-selinux test (#1266500,#1266501)
  - colorls.sh - change detection of interactive shell for ksh
    compatibility (#1321648)
  - fix date --date crash with empty or invalid TZ envvar (#1325786)
  - df -l: do not hang on a dead autofs mount point (#1309247)
  - sort -h: fix functionality of human readable numeric sort for other
    than first field (#1328360)


author: Kamil Dudka <kdudka@redhat.com> - 8.22-19
changelog:
  - timeout: fix race possibly terminating wrong process (#1439465)
  - ls: allow interruption when reading slow directories (#1421802)
  - fold: preserve new-lines in mutlibyte text (#1418505)


author: Kamil Dudka <kdudka@redhat.com> - 8.22-23
changelog:
  - update description of the -a/--all option in df.1 man page (#1553212)
  - sort -M: fix memory leak when using multibyte locale (#1540059)


author: Kamil Dudka <kdudka@redhat.com> - 8.22-24
changelog:
  - doc: improve description of the --kibibytes option of ls (#1527391)
  - doc: fix typo in date example (#1620624)
  - stat,tail: sync the list of file systems with coreutils-8.31 (#1659530)
  - df: avoid stat() for dummy file systems with -l (#1668137)
  - df: prioritize mounts nearer the device root (#1042840)


author: Jan Friesse <jfriesse@redhat.com> 2.3.1-3
changelog:
  - Resolves: rhbz#998362

  - Fix scheduler pause-detection timeout (rhbz#998362)
  - merge upstream commit 2740cfd1eac60714601c74df2137fe588b607866 (rhbz#998362)


author: Jan Friesse <jfriesse@redhat.com> 2.3.2-3
changelog:
  - Resolves: rhbz#1031832

  - cfgtool: return error on reload failure (rhbz#1031832)
  - merge upstream commit 7014f10123a634cf026491edc9a09d6044106116 (rhbz#1031832)


author: Jan Friesse <jfriesse@redhat.com> 2.3.3-2
changelog:
  - Resolves: rhbz#1067028

  - cpg: Refactor mh_req_exec_cpg_procleave (rhbz#1067028)
  - merge upstream commit fcf26e03036b6ae5a8ef762ea0b5691a4f790c92 (rhbz#1067028)
  - cpg: Make sure nodid is always logged as hex num (rhbz#1067028)
  - merge upstream commit 83c63b247f4030fe8123df7c9f96d7a1c8e245b1 (rhbz#1067028)
  - cpg: Make sure left nodes are really removed (rhbz#1067028)
  - merge upstream commit fbe8768f1bbab6d546023d70e7f7b91a9dc213b0 (rhbz#1067028)


author: Jan Friesse <jfriesse@redhat.com> 2.3.3-2.1
changelog:
  - Resolves: rhbz#1157702

  - [crypto] fix crypto block rounding/padding calculation (rhbz#1157702)
  - merge upstream commit 239e2397820f9fa7ef430ebef0947ec1246eb50f (rhbz#1157702)
  - Adjust MTU for IPv6 correctly (rhbz#1157702)
  - merge upstream commit 03f95ddaa1d223e1e93788a307dc1b36d86b22b5 (rhbz#1157702)


author: Jan Friesse <jfriesse@redhat.com> 2.3.3-3
changelog:
  - Resolves: rhbz#1059607
  - Resolves: rhbz#1069254
  - Resolves: rhbz#1074673
  - Resolves: rhbz#1078361
  - Resolves: rhbz#1078363
  - Resolves: rhbz#1085468
  - Resolves: rhbz#1086233
  - Resolves: rhbz#1108508
  - Resolves: rhbz#1108511
  - Resolves: rhbz#1108522
  - Resolves: rhbz#1108525
  - Resolves: rhbz#1108708
  - Resolves: rhbz#1117911

  - Free object allocated at quorum_register_callback (rhbz#1059607)
  - merge upstream commit fa71067a93ea99d8dc4812e3a028ae154216a91a (rhbz#1059607)
  - votequorum: Add extended options to auto_tie_breaker (rhbz#1059607)
  - merge upstream commit 90d448af3b4b4508ca890cce67113cb226475d3b (rhbz#1059607)
  - totemsrp: Fix typo with cont gather (rhbz#1108508)
  - merge upstream commit 38c04d9a66ba41dae14a57eba119dabb31cbb18f (rhbz#1108508)
  - mon: Make mon compilable with libstatgrab ver 0.9 (rhbz#1108511)
  - merge upstream commit e1e2390b61fb5d47a8639f2538721675dd411b08 (rhbz#1108511)
  - mon: Fix comparsion typo (rhbz#1108511)
  - merge upstream commit 57ff693b70cb7aaa81e52e9d24f38aa0399a8c46 (rhbz#1108511)
  - mon: Pass correct pointer to inst (rhbz#1108511)
  - merge upstream commit 099f704cdddfb3b72fe93fb1f4fc777672eb9fdf (rhbz#1108511)
  - mon: Make monitoring work (rhbz#1108511)
  - merge upstream commit ff67daa55f6cfcb48357a8fddaa312b9fb49602b (rhbz#1108511)
  - votequorum: Properly initialize atb and atb_string (rhbz#1059607)
  - merge upstream commit e1801ba49738a3ae2ba3ca08c2b74dda5ff9056c (rhbz#1059607)
  - config: Handle totem_set_volatile_defaults errors (rhbz#1078361)
  - merge upstream commit 2f0cad20a9a368683fd59a869b2cb360bd31f95b (rhbz#1078361)
  - Log: Make reload of logging work (rhbz#1078361)
  - merge upstream commit 1b6abcc7d5afd4651efcdba1a65effb259f6ee3e (rhbz#1078361)
  - Really clear totemconfig nodes on reload (rhbz#1078361)
  - merge upstream commit eeb2384157351ff460be0648d954e5e97213d532 (rhbz#1078361)
  - totemconfig: Key change process dependencies (rhbz#1078361)
  - merge upstream commit b95ebd640eb45267d69822c8292a0098a8e4180e (rhbz#1078361)
  - totemconfig: Log errors on key change and reload (rhbz#1078361)
  - merge upstream commit 9a8de87c34071f54a9e3b545a1a7460d64568579 (rhbz#1078361)
  - Add token_coefficient option (rhbz#1078361)
  - merge upstream commit 58176d6779a0f5ff23dabf61dff7544db29af25a (rhbz#1078361)
  - init: Make init script configurable (rhbz#1078363)
  - merge upstream commit 1f7e78ab9cc686a7528ac4601651ded9d204b01f (rhbz#1078363)
  - config: Allow dynamic change of token_coefficient (rhbz#1078361)
  - merge upstream commit 7557fdec487cb5fad7c449949ba58496bd396458 (rhbz#1078361)
  - upstart: Make job conf file configurable (rhbz#1108522)
  - merge upstream commit d23ee6a3e0d5299f488bf9abed98f1853fd0e8b0 (rhbz#1108522)
  - Indent: Remove space in negation of expression (rhbz#1108522)
  - merge upstream commit b6e2c8024dd314ce17eac4f3f83a2320ebb7017d (rhbz#1108522)
  - Indent: Remove newline before else branch start (rhbz#1108522)
  - merge upstream commit d0dc9ae93c6f41ab9139242d754428fcf9bcc653 (rhbz#1108522)
  - totemiba: Add multicast recovery (rhbz#1108522)
  - merge upstream commit 4d6a18d8a5c0001f2eaeebb79d75f999c671cb74 (rhbz#1108522)
  - totemiba: Fix incorrect failed log message (rhbz#1108522)
  - merge upstream commit e905f92bf532c291d9be23b6a16d972f36d5d464 (rhbz#1108522)
  - logsys: Log error if blackbox cannot be created (rhbz#1108525)
  - merge upstream commit 19c5b63ff5fae43c2acf28ce95cca6460f500176 (rhbz#1108525)
  - logsys: Log warning if flightrecorder init fails (rhbz#1108525)
  - merge upstream commit 8f13a983204c2bc16c7490cee6db90138ecc43f1 (rhbz#1108525)
  - Introduce get_run_dir function (rhbz#1108525)
  - merge upstream commit d310b251c3ba5e92c7ca1b8f6f8197d71141a8d6 (rhbz#1108525)
  - Move ringid store and load from totem library (rhbz#1108525)
  - merge upstream commit da46ecfc3087de97ad9a76fe6a156f10170503a2 (rhbz#1108525)
  - init: change return value when starting corosync (rhbz#1078363)
  - merge upstream commit 7a6cc6b5a2f6ec5d88e52e34e62f18db1915afd7 (rhbz#1078363)
  - Install doc: Correct a typo (rhbz#1108522)
  - merge upstream commit a64696698718071e4e531a5a3332c363742c550b (rhbz#1108522)
  - coroparse: More strict numbers parsing (rhbz#1108708)
  - merge upstream commit 4e9716ed30ffe6a5750f5c6c2565815e88413c23 (rhbz#1108708)
  - Doc: Enhance INSTALL file a bit (rhbz#1108522)
  - merge upstream commit e8a5c56ab27fff4beef910804841d73aaa17a6a1 (rhbz#1108522)
  - Make config.reload_in_progress key read only (rhbz#1085468)
  - merge upstream commit c8e3f14fdb284aadf023d7e62c0f951181f21736 (rhbz#1085468)
  - votequorum: Do not process events during reload (rhbz#1085468)
  - merge upstream commit 72cf15af27ea9dbf918839ac44929ed9c65eea5e (rhbz#1085468)
  - systemd: Config example for corosync wd service (rhbz#1108522)
  - merge upstream commit f6d6a9b0a0ca99a201bb9e9353a05075b700bcbd (rhbz#1108522)
  - fix memory leak produced by 'corosync -v' (rhbz#1117911)
  - merge upstream commit cc80c8567d6eec1d136f9e85d2f8dfb957337eef (rhbz#1117911)
  - Handle SIGSEGV and SIGABRT signals (rhbz#1117911)
  - merge upstream commit 384760cb670836dc37e243f594612c6e68f44351 (rhbz#1117911)
  - Fix compiler warning introduced by previous patch (rhbz#1117911)
  - merge upstream commit dfaca4b10a005681230a81e229384b6cd239b4f6 (rhbz#1117911)
  - corosync-cmapctl: Allow -p option to delete keys (rhbz#1108522)
  - merge upstream commit 7a4bb37723777bf6bcd08035696d8d7317c0ce1d (rhbz#1108522)
  - Implement config file testing mode (rhbz#1108522)
  - merge upstream commit e3ffd4fedc8158cdb5057f9fe40b6459e3d85846 (rhbz#1108522)
  - cleanup after test-driver (rhbz#1108522)
  - merge upstream commit c7ebb09530349b7b1bbec7b1d9ef4b05ad186a63 (rhbz#1108522)
  - be consistent in using CPPFLAGS vs CFLAGS (rhbz#1108522)
  - merge upstream commit 84b9e5989aa4a7090aeccbeb6cb8910735274a65 (rhbz#1108522)
  - Slightly rework corosync-keygen. (rhbz#1108522)
  - merge upstream commit 520fe686c5e45f0f7143e749a3f6c2001a2ea0d7 (rhbz#1108522)
  - totemconfig: Free ifaddrs list (rhbz#1108522)
  - merge upstream commit dc35bfae6213256fd7f0d5bf4dd9d5fa0f77a6f6 (rhbz#1108522)
  - totemconfig: totem_config_get_ip_version (rhbz#1108522)
  - merge upstream commit 10c80f454e70b42fc394d3326af1eb81c4be0d75 (rhbz#1108522)
  - totemconfig: refactor nodelist_to_interface func (rhbz#1108522)
  - merge upstream commit 63bf09776fb84e939cd56ec2c2d1bbea97c2e0e1 (rhbz#1108522)
  - corosync-keygen: Replace printf/exit call with err (rhbz#1108522)
  - merge upstream commit 0ce8d51c6d989c4e62d8c1f3fc42785c4f3d250c (rhbz#1108522)
  - config: Fix typos (rhbz#1108522)
  - merge upstream commit 3b8365e80668eea55bdd3f7178693c82884331ae (rhbz#1108522)
  - totemconfig: Make sure join timeout is less than consensus (rhbz#1074673)
  - merge upstream commit 88dbb9f722122f04dc7c95681375a53a3a1301a5 (rhbz#1074673)
  - votequorum: Return current ring id in callback (rhbz#1108522)
  - merge upstream commit 5f6f68805c48f8f72f66f7fff9abc44b4c65df1e (rhbz#1108522)
  - votequorum: Add ring id to poll call (rhbz#1108522)
  - merge upstream commit b8902464d1b040326108ce7ec0934c1de5fe04ee (rhbz#1108522)
  - ipc: Process votequorum messages during sync (rhbz#1108522)
  - merge upstream commit 7cad804629fe7d936d098569122f84979959b554 (rhbz#1108522)
  - votequorum: Block sync until qdevice poll (rhbz#1108522)
  - merge upstream commit b4c99346352ce39cf96f7b12943811c896b89caa (rhbz#1108522)
  - testvotequorum2: Opt for polling with old ringid (rhbz#1108522)
  - merge upstream commit f8413350b2df4e37822e6d34e9337da87993d271 (rhbz#1108522)
  - votequorum: Make qdev timeout in sync configurable (rhbz#1108522)
  - merge upstream commit 17488909d4ae0dc948eb9a4a15133570faaf9c0b (rhbz#1108522)
  - Cancel token holding while in retransmition (rhbz#1108522)
  - merge upstream commit f135b680967aaef1d466f40170c75ae3e470e147 (rhbz#1108522)
  - votequorum: Add cmap key to reset wait_for_all (rhbz#1086233)
  - merge upstream commit cbf753405b7924e48aa1838cc1d14044229449b3 (rhbz#1086233)
  - quorumtool: Sort output by nodeid (rhbz#1108522)
  - merge upstream commit ddb017fa0e2026ee4f0d05e9bf780898c32c129a (rhbz#1108522)
  - YKD: Fix loading of YKD quorum module (rhbz#1108522)
  - merge upstream commit 02f58aec9cd53887aa1dfe1616fcbb32671987d4 (rhbz#1108522)
  - corosync-quorumtool: add sort options (rhbz#1108522)
  - merge upstream commit f53580c2c1c8fa621cbc18de81974811799bafd8 (rhbz#1108522)
  - TODO: Remove TODO file (rhbz#1108522)
  - merge upstream commit c9232d5d6cbfb1e4de9eb09afadda630ad4fee83 (rhbz#1108522)
  - Makefile: Do not install TODO file (rhbz#1108522)
  - merge upstream commit 4b7293da7a03253a7f96401642e1afb006e7750c (rhbz#1108522)
  - totem: Inform RRP about membership changes (rhbz#1069254)
  - merge upstream commit acb55cdb03808a4cea745b1b6a80c7ef1769880f (rhbz#1069254)
  - totemnet: Add totemnet_member_set_active (rhbz#1069254)
  - merge upstream commit 4c717942cf5f35902be630f393b81a03a81bb194 (rhbz#1069254)
  - totemrrp: Implement *_membership_changed (rhbz#1069254)
  - merge upstream commit 371a99e96147f600510bd9d819b92a4de94fcc30 (rhbz#1069254)
  - totemudpu: Implement member_set_active (rhbz#1069254)
  - merge upstream commit 71f1b99649329ab06309791d0a621d3cfbb74bdb (rhbz#1069254)
  - totemudpu: Send msgs to all members occasionally (rhbz#1069254)
  - merge upstream commit 2429481b96d895c366ca27c82a2bd7cfee55af15 (rhbz#1069254)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-3
changelog:
  - Resolves: rhbz#1078361
  - Resolves: rhbz#1136429
  - Resolves: rhbz#1149916

  - [crypto] fix crypto block rounding/padding calculation (rhbz#1136429)
  - merge upstream commit 239e2397820f9fa7ef430ebef0947ec1246eb50f (rhbz#1136429)
  - Adjust MTU for IPv6 correctly (rhbz#1136429)
  - merge upstream commit 03f95ddaa1d223e1e93788a307dc1b36d86b22b5 (rhbz#1136429)
  - init: Don't wait for ipc if corosync doesn't start (rhbz#1149916)
  - merge upstream commit b627844f3d5c5788bd8bb140d8852ba666da16aa (rhbz#1149916)
  - manpage: Fix English (rhbz#1078361)
  - merge upstream commit f77a61ac1795e794244440e1bfe804f02cc5d2b6 (rhbz#1078361)
  - Store configuration values used by totem to cmap (rhbz#1078361)
  - merge upstream commit bb52fc2774ef690d6bb951fe9cc34e5b373caffe (rhbz#1078361)
  - man page: Improve description of token timeout (rhbz#1078361)
  - merge upstream commit 57539d1abc09e5aef322cb9cca5b3e6c496cfae9 (rhbz#1078361)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-4
changelog:
  - Resolves: rhbz#1184154

  - Handle adding and removing UDPU members atomically (rhbz#1184154)
  - merge upstream commit d77cec24d0025d353681762fe707794c621665c7 (rhbz#1184154)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-4.1
changelog:
  - Resolves: rhbz#1205336
  - Resolves: rhbz#1205338

  - Votequorum: Fix auto_tie_breaker default (rhbz#1205336)
  - merge upstream commit 314a01c98e5f98ff686333966dbe675935b7b6a8 (rhbz#1205336)
  - Don't allow both two_node and auto_tie_breaker in corosync.conf (rhbz#1205338)
  - merge upstream commit c832ade034fa737561ccabefbe417c9d7855d970 (rhbz#1205338)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-4.2
changelog:
  - Resolves: rhbz#1260002

  - Set RR priority by default (rhbz#1260002)
  - merge upstream commit 177ef0e5240b4060ff5b14eab6f2eefee3aa777d (rhbz#1260002)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-4.3
changelog:
  - Resolves: rhbz#1260719

  - quorum: don't allow quorum_trackstart to be called twice (rhbz#1260719)
  - merge upstream commit 82526d2fe9137e8b604f1bbae6d6e39ba41377f9 (rhbz#1260719)
  - votequorum: Fix auto_tie_breaker behaviour in odd-sized clusters (rhbz#1260719)
  - merge upstream commit b9f5c290b7dedd0a677cdfc25db7dd111245a745 (rhbz#1260719)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-5
changelog:
  - Resolves: rhbz#1197091
  - Resolves: rhbz#1197671

  - Votequorum: Fix auto_tie_breaker default (rhbz#1197091)
  - merge upstream commit 314a01c98e5f98ff686333966dbe675935b7b6a8 (rhbz#1197091)
  - Don't allow both two_node and auto_tie_breaker in corosync.conf (rhbz#1197671)
  - merge upstream commit c832ade034fa737561ccabefbe417c9d7855d970 (rhbz#1197671)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-6
changelog:
  - Resolves: rhbz#1170347
  - Resolves: rhbz#1225441
  - Resolves: rhbz#1226842
  - Resolves: rhbz#1229194
  - Resolves: rhbz#1234261
  - Resolves: rhbz#1234266
  - Resolves: rhbz#682771
  - Resolves: rhbz#773464

  - config: Make sure user doesn't mix IPv6 and IPv4 (rhbz#773464)
  - merge upstream commit 6c028d4d9c53decaa9469c792ac68fd2a886e7d9 (rhbz#773464)
  - config: Process broadcast option consistently (rhbz#773464)
  - merge upstream commit 70bd35fc06e68a010d780dfa39bd68d4bd2f7da7 (rhbz#773464)
  - config: Ensure mcast address/port differs for rrp (rhbz#773464)
  - merge upstream commit 6449bea835c90045baa23e3e041fed1df2abf070 (rhbz#773464)
  - Reset timer_problem_decrementer on fault (rhbz#1234261)
  - merge upstream commit 8f284b26b3331e1ab252969ba65543e6d9217ab1 (rhbz#1234261)
  - automake: Check minimum automake version (rhbz#773464)
  - merge upstream commit 114b826c67126fe1f690ad976b5217a8487994a4 (rhbz#773464)
  - Set RR priority by default (rhbz#1170347)
  - merge upstream commit 177ef0e5240b4060ff5b14eab6f2eefee3aa777d (rhbz#1170347)
  - Log auto-recovery of ring only once (rhbz#773464)
  - merge upstream commit e0ac861efdc32831366a2b5f5cc1d61e2ffa5504 (rhbz#773464)
  - totem: Ignore duplicated commit tokens in recovery (rhbz#1234261)
  - merge upstream commit 4ee84c51fa73c4ec7cbee922111a140a3aaf75df (rhbz#1234261)
  - corosync_ring_id_store: Use safer permissions (rhbz#1234266)
  - merge upstream commit 252b38ab8a62ff083e83b1d6f514109f7b7cbb42 (rhbz#1234266)
  - totemsrp: Format member list log as unsigned int (rhbz#773464)
  - merge upstream commit 5d9acc5604eb4e8a739cb37a4ad46bcc5ad8deb6 (rhbz#773464)
  - cpg: Add support for messages larger than 1Mb (rhbz#682771)
  - merge upstream commit 8cc8e513633a1a8b12c416e32fb5362fcf4d65dd (rhbz#682771)
  - Really add cpghum (rhbz#682771)
  - merge upstream commit 3842ba6080e00fd9484a2a875d982e149f67bc44 (rhbz#682771)
  - quorum: don't allow quorum_trackstart to be called twice (rhbz#1229194)
  - merge upstream commit 82526d2fe9137e8b604f1bbae6d6e39ba41377f9 (rhbz#1229194)
  - totemconfig: Check for duplicate nodeids (rhbz#773464)
  - merge upstream commit 997074cc3e1ea425ca63e453b7e2181741bdcef0 (rhbz#773464)
  - totem: Log a message if JOIN or LEAVE message is ignored (rhbz#773464)
  - merge upstream commit 53f67a2a7914228f1a406aad61ea6768525e11b0 (rhbz#773464)
  - totemsrp: Improve logging of left/down nodes (rhbz#773464)
  - merge upstream commit ab8942f6260fde93824ed2a18e09e572b59ceb25 (rhbz#773464)
  - votequorum: Fix auto_tie_breaker behaviour in odd-sized clusters (rhbz#1229194)
  - merge upstream commit b9f5c290b7dedd0a677cdfc25db7dd111245a745 (rhbz#1229194)
  - Add note about rrp active beeing unsupported (rhbz#1226842)
  - merge upstream commit 219965f4fe694eaaf2eb4ea05cdc7e35f5146114 (rhbz#1226842)
  - Log: Add logrotate configuration file (rhbz#1225441)
  - merge upstream commit aabbace625b3c68332b4356887378fca81f8f387 (rhbz#1225441)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-7
changelog:
  - Related: rhbz#682771

  - Don't link with libz when not needed (rhbz#682771)
  - merge upstream commit 145f9279d12cf0b981494bbd4dabbc9c3641378e (rhbz#682771)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-7.1
changelog:
  - Resolves: rhbz#1283067

  - totemudp: Move udp bind() so that multicast works with IPv6 (rhbz#1283067)
  - merge upstream commit 165561df9ba1e0be2a11ff550b70da94990eb2f5 (rhbz#1283067)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-7.2
changelog:
  - Resolves: rhbz#1333397

  - totemconfig: Explicitly pass IP version (rhbz#1333397)
  - merge upstream commit 60565b7da7d271651c30cd7fdca6e3f3eb5327ac (rhbz#1333397)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-7.3
changelog:
  - Resolves: rhbz#1338667

  - cmapctl: Handle corosync errors in print_key func (rhbz#1338667)
  - merge upstream commit 8ab7743068cc6cd5bf235d1ccae65de1d91784f0 (rhbz#1338667)


author: Jan Friesse <jfriesse@redhat.com> 2.3.6-1
changelog:
  - Related: rhbz#1306680
  - Resolves: rhbz#1289169
  - Resolves: rhbz#1306349
  - Resolves: rhbz#1282372
  - Resolves: rhbz#1317573
  - Resolves: rhbz#1336462

  - Rebase to Corosync 2.3.6


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-2
changelog:
  - Resolves: rhbz#1363654

  - Config: Flag config uidgid entries (rhbz#1363654)
  - merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-3
changelog:
  - Related: rhbz#1363654

  - Enhance spec so corosync-qdevice subpackage depends on same version of
    the corosync and corosynclib packages.


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-4
changelog:
  - Resolves: rhbz#1367813

  - Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
  - merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
  - man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
  - merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
  - Qnetd LMS: Fix two partition use case (rhbz#1367813)
  - merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-6
changelog:
  - Resolves: rhbz#1371880

  - libvotequorum: Bump version (rhbz#1371880)
  - merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
  - votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
  - merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
  - votequorum: simplify reconfigure message handling (rhbz#1371880)
  - merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-7
changelog:
  - Related: rhbz#1371880

  - Fix build on RHEL7.3 latest (rhbz#1371880)
  - merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
  - Enable aarch64 build (bz#1422598)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-8
changelog:
  - Resolves: rhbz#1434528
  - Resolves: rhbz#1434529
  - Resolves: rhbz#1434534

  - cfg: Prevents use of uninitialized buffer (rhbz#1434528)
  - merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
  - man: Fix typos in man page (rhbz#1434529)
  - merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
  - Fix typo: Destorying -> Destroying (rhbz#1434529)
  - merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
  - init: Add doc URIs to the systemd service files (rhbz#1434529)
  - merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
  - man: Modify man-page according to command usage (rhbz#1434529)
  - merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
  - Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
  - merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
  - upstart: Add softdog module loading example (rhbz#1434529)
  - merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
  - Remove deprecated doxygen flags (rhbz#1434529)
  - merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
  - Remove redundant header file inclusion (rhbz#1434528)
  - merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
  - Qdevice: fix spell errors in qdevice (rhbz#1434529)
  - merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
  - doc: document watchdog_device parameter (rhbz#1434529)
  - merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
  - Logsys: Change logsys syslog_priority priority (rhbz#1434534)
  - merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
  - logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
  - merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-9
changelog:
  - Resolves: rhbz#1445001

  - Main: Call mlockall after fork (rhbz#1445001)
  - merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
  - Disable aarch64 build (bz#1422598)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-9.1
changelog:
  - Resolves: rhbz#1477461

  - main: Add option to set priority (rhbz#1477461)
  - merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
  - main: Add support for libcgroup (rhbz#1477461)
  - merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-9.2
changelog:
  - Resolves: rhbz#1484264

  - totem: Propagate totem initialization failure (rhbz#1484264)
  - merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
  - totemcrypto: Refactor symmetric key importing (rhbz#1484264)
  - merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
  - totemcrypto: Use different method to import key (rhbz#1484264)
  - merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
  - totemcrypto: Fix compiler warning (rhbz#1484264)
  - merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-10
changelog:
  - Resolves: rhbz#1439205
  - Resolves: rhbz#1461450
  - Resolves: rhbz#1469170
  - Resolves: rhbz#1476214

  - main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
  - merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
  - totem: Propagate totem initialization failure (rhbz#1461450)
  - merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
  - totemcrypto: Refactor symmetric key importing (rhbz#1461450)
  - merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
  - totemcrypto: Use different method to import key (rhbz#1461450)
  - merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
  - main: Add option to set priority (rhbz#1469170)
  - merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
  - main: Add support for libcgroup (rhbz#1476214)
  - merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
  - totemcrypto: Fix compiler warning (rhbz#1461450)
  - merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)


author: Jan Friesse <jfriesse@redhat.com> 2.4.3-2
changelog:
  - Resolves: rhbz#1536219

  - logging: Make blackbox configurable (rhbz#1536219)
  - merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
  - logging: Close before and open blackbox after fork (rhbz#1536219)
  - merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)


author: Jan Friesse <jfriesse@redhat.com> 2.4.3-5
changelog:
  - Resolves: rhbz#1376819
  - Resolves: rhbz#1634710

  - configure: add --with-initconfigdir option (rhbz#1376819)
  - merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
  - Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
  - merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
  - totemcrypto: Fix importing of the private key (rhbz#1634710)
  - merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
  - qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
  - merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-1
changelog:
  - Resolves: rhbz#1732039
  - Resolves: rhbz#1153818
  - Resolves: rhbz#1647120

  - Rebase to Corosync 2.4.5


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-2
changelog:
  - Resolves: rhbz#1656492

  - totem: Increase ring_id seq after load (rhbz#1656492)
  - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)


author: Jan Friesse <jfriesse@redhat.com> - 2.4.5-3
changelog:
  - Resolves: rhbz#1737884
  - Resolves: rhbz#1737887

  - Do not set exec permission for service file
  - Fix CFLAGS definition


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-5
changelog:
  - Resolves: rhbz#1679792
  - Resolves: rhbz#1780134

  - votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
  - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
  - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
  - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
  - votequorum: set wfa status only on startup (rhbz#1679792)
  - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-6
changelog:
  - Resolves: rhbz#1835885

  - stats: Add basic schedule-miss stats to needle (rhbz#1835885)
  - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
  - main: Add schedmiss timestamp into message (rhbz#1835885)
  - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-7
changelog:
  - Related: rhbz#1835885

  - main: Make schedmiss in cmap and log equal (rhbz#1835885)
  - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-7.1
changelog:
  - Resolves: rhbz#1896311
  - Resolves: rhbz#1897087

  - spausedd: Fix log_perror (rhbz#1896311)
  - spausedd: Add ability to move process into root cgroup (rhbz#1897087)


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-14
changelog:
  - fix bad changelog entries
  - allow to build in Fedora Rawhide (temporarily because of #872336) (the value
    is guessed from from /usr/include/asm-generic/fcntl.h)


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-17
changelog:
  - fix small memory leak in copyin.c (#919454)
  - remove %defattr and install 'cpio' to real %{_bindir}
  - CovScan: add %{?_rawbuild}


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-20
changelog:
  - fix another bogus date in changelog
  - update config.guess/config.sub for aarm64 build (#925189)
  - run autoreconf instead of autoheader


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-3
changelog:
  - fix the python module to work with compressed dictionaries (#972542)
  - fix various dictionary lookup errors (#986400, #986401)
  - make the library reentrant and fix compilation warnings


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-5
changelog:
  - make the simplistic check and the purging of special characters much
    less aggressive (#1003624, #985378)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.22-1
changelog:
  - update to 2.8.22 (#887461), which now returns an error instead of exiting
    when there's a failure opening the dictionary in FascistCheck()


author: Nalin Dahyabhai <nalin@redhat.com> - 2.9.0-1
changelog:
  - update to 2.9.0 (#970065)
    - adds FascistCheckUser()
  - go ahead and compress the main dictionary, since we're linking with zlib
    anyway


author: Dave Anderson <anderson@redhat.com> - 7.0.2-1
changelog:
  - Update to latest upstream release
  - Fix for ppc64 embedded gdb NULL pointer translation sigsegv
  - Fix for bt -F failure


author: Dave Anderson <anderson@redhat.com> - 7.0.2-2
changelog:
  - Compressed kdump 46-bit physical memory support
    Resolves: rhbz#1015250
  - Fix incorrect backtrace for dumps taken with "virsh dump --memory-only"
    Resolves: rhbz#1020469
  - Fix cpu number display on systems with more than 254 cpus
    Resolves: rhbz#1020536


author: Dave Anderson <anderson@redhat.com> - 7.0.2-4
changelog:
  - Fixes for "kmem -S" command for CONFIG_SLUB.
  - Resolves: rhbz#1045591
  - Increase S390X NR_CPUS
  - Resolves: rhbz#1051156


author: Dave Anderson <anderson@redhat.com> - 7.0.2-5
changelog:
  - Fix for a missing kernel-mode exception frame dump by the x86_64 
    "bt" command if a page fault was generated by a bogus RIP.
  - Resolves: rhbz#1057353
  - Fix for the x86_64 "bt" command to prevent an unwarranted message
    indicating "WARNING: possibly bogus exception frame" generated
    from a blocked kernel thread that was in the process of exec'ing
    a user process via the call_usermodehelper() facility.
  - Resolves: rhbz#1057357


author: Dave Anderson <anderson@redhat.com> - 7.0.8-1
changelog:
  - Rebase to upstream version 7.0.8.
  - Resolves: rhbz#1110513
  - Fix to calculate the physical base address of dumpfiles created
    by a "virsh dump" of an OVMF guest.
  - Resolves: rhbz#1080698
  - Support for aarch64 architecture.
  - Resolves: rhbz#1110551
  - Fix to prevent crash from spinning endlessly on a corrupted/truncated
    dumpfile whose bitmap data is not wholly contained within the file.
  - Resolves: rhbz#1114088
  - Support for ppc64le architecture.
  - Resolves: rhbz#1123991


author: Dave Anderson <anderson@redhat.com> - 7.0.8-2
changelog:
  - Fix ps performance patch regression on live systems.
  - Resolves: rhbz#1134177
  - Minor build-related fixes for ppc64le.
  - Resolves: rhbz#1123991


author: Dave Anderson <anderson@redhat.com> - 7.0.9-2
changelog:
  - Use registers from QEMU-generated ELF and compressed kdump headers 
    for active task backtraces.
  - Resolves: rhbz#1169555


author: Dave Anderson <anderson@redhat.com> - 7.0.9-5
changelog:
  - Support new sadump format that can represent more than 16 TB physical memory space
    Resolves: rhbz#1182383


author: Dave Anderson <anderson@redhat.com> - 7.1.1-1
changelog:
  - Rebase to upstream version 7.1.1
    Resolves: rhbz#1207696
  - Display s390x vector registers from a kernel dump.
    Resolves: rhbz#1182161
  - Fix date displayed on initial system banner and by the "sys" command on ARM64.
    Resolves: rhbz#1223044
  - Fix ARM64 page size calculation on 4.1 and later kernels.
    Resolves: rhbz#1222645


author: Dave Anderson <anderson@redhat.com> - 7.1.2-1
changelog:
  - Rebase to upstream version 7.1.2
    Resolves: rhbz#1207696
  - Fix several ppc64 backtrace issues
    Resolves: rhbz#1235447


author: Dave Anderson <anderson@redhat.com> - 7.1.2-2
changelog:
  - Fix "kmem -s <address>", "bt -F[F]", and "rd -S[S]" options in kernels 
    configured with CONFIG_SLUB having multiple-page slabs.
    Resolves: rhbz#1244003
  - Fix for SIGSEGV generated by "bt -[f|F]" in ARM64 kernels.
    Resolves: rhbz#1248859


author: Dave Anderson <anderson@redhat.com> - 7.1.2-3
changelog:
  - crash fails to read or wrongly reads some parts of memory in sadump vmcore format
    Resolves: rhbz#1282997


author: Dave Anderson <anderson@redhat.com> - 7.1.5-1
changelog:
  - Rebase to upstream version 7.1.5
    Resolves: rhbz#1292566
  - Decode clflushopt instruction
    Resolves: rhbz#1262479
  - Support AArch64 QEMU generated dumps 
    Resolves: rhbz#1299873
  - crash: zero-size memory allocation (aarch64) 
    Resolves: rhbz#1312738


author: Dave Anderson <anderson@redhat.com> - 7.1.5-2
changelog:
  - Fix for kernel module symbol gathering when the ordering of module
    symbol name strings does not match the order of the kernel_symbol
    structures.
  - Resolves: rhbz#1375130


author: Dave Anderson <anderson@redhat.com> - 7.1.8-1
changelog:
  - Rebase to upstream version 7.1.8
    Resolves: rhbz#1393534
  - POWER9 - Power ISA 3.0 related support for crash utility
    Resolves: rhbz#1368711
  - crash package update - ppc64/ppc64le
    Resolves: rhbz#1384944
  - exception RIP: unknown or invalid address
    Resolves: rhbz#1350457
  - Crash does not always parse correctly the modules symbol tables
    Resolves: rhbz#1360415
  - ARM64: crash live system from: WARNING: cannot read linux_banner string
    Resolves: rhbz#1392007
  - kmem: invalid structure member offset: page_count
    Resolves: rhbz#1392011
  - Kernel address space randomization [KASLR] support 
    Resolves: rhbz#1392658
  - invalid structure size: tnt
    Resolves: rhbz#1420653


author: Dave Anderson <anderson@redhat.com> - 7.1.9-1
changelog:
  - Rebase to upstream version 7.1.9
    Resolves: rhbz#1393534
  - Fix gdb "set scope" option for KASLR kernels.
    Resolves: rhbz#1440725
  - Fix for the determination of the x86_64 "phys_base" value when it is
    not passed in the VMCOREINFO data of ELF vmcores
    Resolves: rhbz#1439170


author: Dave Anderson <anderson@redhat.com> - 7.1.9-2
changelog:
  - Rebase to github commits 87179026 to ad3b8476
    Resolves: rhbz#1393534
  - Prohibit native gdb disassemble command when KASLR
    Resolves: rhbz#1445649


author: Dave Anderson <anderson@redhat.com> - 7.2.0-1
changelog:
  - Rebase to upstream version 7.2.0
  - Rebase to github commits da9bd35a to e2efacdd
    Resolves: rhbz#1497316
  - ppc64le: fix for "WARNING: cannot access vmalloc'd module memory"
    Resolves: rhbz#1485391
  - Support for analyzing an SADUMP crash dump if KASLR is enabled
    Resolves: rhbz#1504467


author: Dave Anderson <anderson@redhat.com> - 7.2.0-3
changelog:
  - Rebase to github commits 494a796e to 63419fb9
    Resolves: rhbz#1497316
  - Fix IRQ stack transition failure due to kernel's removal of 64-byte gap
    Resolves: rhbz#1530887


author: Dave Anderson <anderson@redhat.com> - 7.2.0-5
changelog:
  - Additional support for analyzing an SADUMP dumpfile if KASLR
    and KPTI are both enabled
    Resolves: rhbz#1504467


author: Dave Anderson <anderson@redhat.com> - 7.2.3-1
changelog:
  - Rebase to upstream version 7.2.3
    Resolves: rhbz#1559460
  - eBPF support with new bpf command
    Resolves: rhbz#1559758


author: Dave Anderson <anderson@redhat.com> - 7.2.3-2
changelog:
  - Work around rhel-7.6 s390/s390x ptrace.h incompatiblity FTBFS issue
  - Rebase to github commit 46d21219
    Resolves: rhbz#1559460


author: Dave Anderson <anderson@redhat.com> - 7.2.3-5
changelog:
  - Rebase to github commits b9d76838 to c79a11fa
    Resolves: rhbz#1559460
  - Fix ppc64/ppc6le stacksize calculation
    Resolves: rhbz#1589685


author: Dave Anderson <anderson@redhat.com> - 7.2.3-7
changelog:
  - Support ppc64 increased VA range
  - Fix ppc64 "bt" command failure reporting invalid NIP value
    Resolves: rhbz#1617936


author: Dave Anderson <anderson@redhat.com> - 7.2.3-8
changelog:
  - Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. 
    Resolves: rhbz#1617936


author: Dave Anderson <anderson@redhat.com> - 7.2.3-9
changelog:
  - Alternate list loop detection option
    Resolves: rhbz#1595389
  - Readline library tab completion plugin
    Resolves: rhbz#1656165


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.3-11.1
changelog:
  - crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction
    Resolves: rhbz#1854016


author: HATAYAMA Daisuke <d.hatayama@jp.fujitsu.com> - 1.0-1
changelog:
  - Remove inclusion of kvmdump.h and unwind_x86_64.h due to non-supporting issue
    on crash-devel package. Instead, use a new interface for them.
  - Remove ppc64, ia64, s390 and s390x from ExclusiveArch, leave x86_64
    and %{ix86} there.
  - Add descriptions in BuildRequires and Requires about crash and crash-devel.


author: Dave Anderson <anderson@redhat.com> - 1.0.3-2.el7
changelog:
  - Add RPM_OPT_FLAGS to gcc line in ptdump.mk
    Resolves: rhbz#1450708
  - Set gdb scope to get appropriate ring_buffer structure
    Resolves: rhbz#1451181


author: Dave Anderson <anderson@redhat.com> - 1.0.3-3.el7
changelog:
  - ptdump: fix build warning: warning: this ‘if’ clause does not guard
  - ptdump: fix failure: ptdump: invalid size request: 0 type: "read page for write" 
  - ptdump: fix heap memory and fd leak when fault happens
    Resolves: rhbz#1791525


author: Dave Anderson <anderson@redhat.com> - 2.0-3
changelog:
  - Replace obsolete _init() and _fini() functions.
  - Fix possible segmentation violation on calloc() failure.
  - Initialize trace_dat to avoid compiler warning.


author: Dave Anderson <anderson@redhat.com> - 2.0.12
changelog:
  - Differentiate ppc64 .ring_buffer_read text symbol from ring_buffer_read data symbol
  - Fix for ring_buffer_per_cpu.nr_pages size change on big-endian systems 
  - Fix for Linux 4.7 change to the TRACE_EVENT_FL_TRACEPOINT flag
    Resolves: rhbz#1441914
    Resolves: rhbz#1440726


author: Dave Anderson <anderson@redhat.com> - 2.0.13
changelog:
  - Build requires crash-devel-7.2.0-2 and usage requires crash-7.2.0-2
    because of load_module structure change.
    Resolves: rhbz#1520825


author: Dave Anderson <anderson@redhat.com> - 1.0-1.2
changelog:
  - fix Makefile to account for s390 build
  - change exclusive arch entry from i386 to {ix86}
  - Resolves: rbhz#545564


author: Dave Anderson <anderson@redhat.com> - 1.0-2
changelog:
  - Fix for segmentation violation with "trace show -c cpu" command,
    and add "trace dump -t" command.
    Resolves: rbhz#592887


author: Dave Anderson <anderson@redhat.com> - 1.0-3
changelog:
  - Remove trace_dump.patch, which requires a kernel later than
    the RHEL6 base of 2.6.32.
    Resolves: rbhz#601536


author: John W. Linville <linville@redhat.com> 1.1.2_2011.04.28-1
changelog:
  - Update crda to version 1.1.2
  - Update wireless-regdb to version 2011.04.28 
  - Fix mis-numbered version comment in changelog for Nov 23 2010


author: John W. Linville <linville@redhat.com> - 1.1.3_2013.02.13-3
changelog:
  - setregdomain: remove sed and awk calls
  - setregdomain: reimplement COUNTRY assignment with shell function


author: John W. Linville <linville@redhat.com> - 1.1.3_2014.06.13-1
changelog:
  - Update wireless-regdb to version 2014.06.13
  - Add logger commands to setregdomain to make it more communicative


author: John W. Linville <linville@redhat.com> - 1.1.3_2015.04.06-2
changelog:
  - Update wireless-regdb to version 2015.04.06
  - Add patch for regdbdump to display DFS region
  - Make some improvements to setregdomain and its man page


author: Zdenek Pavlas <zpavlas at redhat.com> - 0.9.9-14
changelog:
  - update to latest HEAD
  - Fix the deadlock issue.  BZ 856363
  - Manually set the permmissions for tempfile created cachefiles. BZ 833350
  - modifyrepo: use available compression only.  BZ 865845
  - No baseurl means no baseurl.  BZ 875029
  - Change the compress-type for modifyrepo to .gz for compat. BZ 874682.
  - fix the --skip-symlinks option
  - no repomd.xml && --checkts: skip .rpm timestamp checking.  BZ 877301
  - new worker piping code (no tempfiles, should be faster)


author: Zdenek Pavlas <zpavlas at redhat.com> - 0.9.9-16
changelog:
  - update to latest HEAD
  - turn off stdout buffering in worker to prevent a deadlock
  - modifyrepo: use integer timestamps


author: Zdenek Pavlas <zpavlas@redhat.com> - 0.9.9-21
changelog:
  - update to latest HEAD
  - don't BuildRequire bash-completion in rhel
  - Fail for bad compress-type options to modifyrepo, like createrepo. BZ 886589
  - Fix options documentation. BZ 892657.
  - modifyrepo: fix --compress option bug. BZ 950724
  - modifyrepo: add --checksum and --{unique,simple}-md-filenames options


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-24
changelog:
  - mergerepo: merge package versions from multiple repos.
  - Related: bug#1178763
  - Close lock file before unlink().
  - Related: bug#1256216


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-26
changelog:
  - Make sure filename doesn't already contain a checksum.
  - Resolves: bug#1270784
  - Catch IOErrors when loading pkglist.
  - Resolves: bug#1083182
  - Add missing options to the manpage.
  - Resolves: bug#1285761


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-27
changelog:
  - Fix temporary files cleanup.
  - Resolves: bug#1406418
  - Fix --update for pkgs with same nevra.
  - Resolves: bug#1404239


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-28
changelog:
  - createrepo: allow xz and bz2 for xml files.
  - Resolves: bug#1125437
  - modifyrepo: fix handling of already compressed input.
  - Resolves: bug#1227782
  - modifyrepo: handle empty file with LZMA.
  - Resolves: bug#1287685
  - modifyrepo: docs: remove compat compress type.
  - Resolves: bug#1287714


author: Adrian Reber <areber@redhat.com> - 1.6.1-2
changelog:
  - removed criu.service (CVE-2015-5228, CVE-2015-5231)
  - removed devel sub-package (related to above CVEs)


author: Adrian Reber <adrian@lisas.de> - 3.12-0.1
changelog:
  - Updated to 3.12 (pre-release)
  - Create libs subpackage
  - Build against SELinux (Fedora and RHEL8)
  - Build against libbsd (Fedora)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.3-5
changelog:
  - Python 2 binary package renamed to python2-criu
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.11-2
changelog:
  - scriptlets are not created correctly if systemd is not in BR 986698
  - remove sub-package sysvinit, which is not needed anymore
  - update license, anacron is under GPLv2+


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.11-3
changelog:
  - 919290 systemd script use "KillMode=process"
  - Fcntl locking has different semantics than flock. Prefer flock.
    - 49225e172d156531ca142518d2638350752e373a
  - Pull PAM environment variables also from session modules.
    - c8e7d1b43c86a85441cb09cf7e08090f3ec1f384


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.11-5
changelog:
  - Cronie doesn't work when is executed as stand alone without systemd (for 
    debuging issues)
  - Fix another permission, hopefully all now.
  - Resolves: rhbz#1012420, rhbz#1015567


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-14
changelog:
  - mark the 0hourly and dailyjobs crontabs as config
  - properly handle users for whose getpwnam() returns NULL temporarily
  - log when crond is shutting down


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-16
changelog:
  - disable mail from anacron with empty MAILTO
  - crontab: do not block access with PAM when running as root
  - improve the crontab man page
  - do not hardcode system_u selinux user but use the user from
    the current context


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18
changelog:
  - make anacron not to contradict itself in syslog
    (job output does not have to be necessarily mailed)


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18
changelog:
  - fix regression - spurious PAM log message from crontab (#1479064)
  - allow empty variables in crontabs (#1439217)


author: Marcel Plch <mplch@redhat.com> - 1.4.11-20
changelog:
  - Fix race condition when crontab is modified the same second
    before and after reading the crontab
  - Resolves: rhbz#1638691


author: Marcel Plch <mplch@redhat.com> - 1.4.11-22
changelog:
  - Backport upstream patch to fix cron failing on
    smart card authentication
  - Resolves: rhbz#1650314


author: Jan Staněk <jstanek@redhat.com> - 1.4.11-24
changelog:
  - Limit memory allocated for file descriptors
    Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
    Resolves: rhbz#2026289


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.10-5
changelog:
  - add support for RANDOM_DELAY - delaying job startups
  - pass some environment variables to processes (LANG, etc.) (#969761)
  - do not use putenv() with string literals (#971516)


author: Elio Maldonado <emaldona@redhat.com> - 2.4.1-33
changelog:
  - Resolves: Bug 782142 - keyutil should use error string utilities provided by nss since 3.13
  - Update Requires and BuildRequires nss and nss-util mininimum versions
  - Add needed line breaks to the keyutil usage message


author: Joe Orton <jorton@redhat.com> - 2.4.1-40.1
changelog:
  - keyutil: use SHA1 as default hash in created certs (#1030470)
  - genkey: default to 2048 bit keysize (#1039896)


author: Joe Orton <jorton@redhat.com> - 2.4.1-42
changelog:
  - genkey: skip cert generation after CSR for OpenSSL (#1039896)
  - keyutil: fix error reporting (#1039896)


author: Milan Broz <mbroz@redhat.com> - 1.6.0-0.1
changelog:
  - Update to cryptsetup 1.6.0-rc1.
  - Relax license to GPLv2+ according to new release.
  - Compile cryptsetup with libpwquality support.


author: Milan Broz <mbroz@redhat.com> - 1.6.0-1
changelog:
  - Update to cryptsetup 1.6.0.
  - Change default LUKS encryption mode to aes-xts-plain64 (AES128).
  - Force use of gcrypt PBKDF2 instead of internal implementation.


author: Ondrej Kozina <okozina@redhat.com> - 1.6.2-1
changelog:
  - Update to cryptsetup 1.6.2.
  - Add dracut module for cryptsetup-reencrypt (90reencrypt).
  - 90reencrypt: Rename dracut parameteres to be compliant with actual naming guidance.
  - 90reencrypt: Install and load loop kernel module.
  - 90reencrypt: Fix lock file name.
  - 90reencrypt: Add conflict with 90crypt dracut module (more info in #1010287)
  - Resolves: #1010278 #1010287


author: Ondrej Kozina <okozina@redhat.com> - 1.6.2-2
changelog:
  - 90reencrypt: Move conflict with 90crypt to install() section.
  - 90reencrypt: Drop to emergency_shell after successful reencryption.
  - Resolves: #1021593


author: Ondrej Kozina <okozina@redhat.com> - 1.6.3-1
changelog:
  - Update to cryptsetup 1.6.3.
  - various fixes related to block devices with 4KiB sectors
  - enable reencryption using specific keyslot (dracut module)
  - fix failure in reading last keyslot from external LUKS header
  - update FIPS POST to be complaint with actual requirements
  - fix hash limiting if parameter is not numeric
  - Resolves: #1028362 #1029032 #1029406 #1030288 #1034388 #1038097


author: Ondrej Kozina <okozina@redhat.com> - 1.6.7-1
changelog:
  - Update to cryptsetup 1.6.7.
  - patch: avoid use of kernel crypto API socket which is known
    to be broken in RHEL7.0 kernel (7.1+ is fine).
  - Resolves: #1206170


author: Ondrej Kozina <okozina@redhat.com> - 1.7.4-4
changelog:
  - patch: fix regression in blockwise functions
  - patch: avoid repeating error messages when device holders
    detected.
  - patch: add option to cryptsetup-reencrypt to print progress
    log sequentaly
  - patch: use --progress-frequency in reencryption dracut module
  - Resolves: #1480006 #1447632 #1479857


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-2
changelog:
  - patch: stop LUKS2 auto-recovery if device is no longer LUKS
    type
  - patch: update cryptsetup man page for --type option
  - patch: rephrase error message for invalid --type option in
    convert action
  - Resolves: #1599281 #1601477 #1601481


