# changelog

author: Todd Zullinger <tmz@pobox.com> - 1.10-9
changelog:
  - Update UsrLibBinaryException config to include .build-id
  - Ignore useless-provides on debuginfo provides (bz1489096)


author: Thomas Woerner <twoerner@redhat.com> - 1.10.13.1
changelog:
  - Fix unit test: use platform-python, py.test-3, no flake8 (RHBZ#1576803)
  - Update of ValidShells (RHBZ#1633698)
  - Remove Python2 paths from TagsCheck.py (RHBZ#1633698)
  - Enable bash-competion scripts (RHBZ#1577890)


author: Liming Sun <lsun@mellanox.com> - 2.0.1-1
changelog:
  - Rename bfrshim to rshim
  - Remove rshim.spec since it's auto-generated from rshim.spec.in
  - Fix warnings reported by coverity
  - Add rhel/rshim.spec.in for fedora
  - Move rshim to sbin and move man page to man8


author: Liming Sun <lsun@mellanox.com> - 2.0.2-1
changelog:
  - Remove unnecessary dependency in .spec and use make_build
  - Add package build for debian/ubuntu
  - Fix some format in the man page
  - Add check for syslog headers


author: Liming Sun <lsun@mellanox.com> - 2.0.3-1
changelog:
  - Enable pci device during probing
  - Map the pci resource0 file instead of /dev/mem
  - Add copyright header in bootstrap.sh
  - Add 'Requires' tag check in the rpm .spec for kernel-modules-extra
  - Fix the 'rshim --version' output


author: Liming Sun <lsun@mellanox.com> - 2.0.4-1
changelog:
  - Update .spec file according to review comments
  - Fix the 'KillMode' in rshim.service
  - Support process termination by SIGTERM
  - Fix some compiling warnings and configure issue for FreeBSD
  - Fix a read()/write() issue in rshim_pcie.c caused by optimization


author: Dean Nelson <dnelson@redhat.com> - 2.0.4-4
changelog:
  - Expose gating.yaml file in order to enable manual CI gating for rshim
    in RHEL-8.4, by bumping release and doing a Brew build.
  - Partially resolves: rhbz#1912248


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-1
changelog:
  - Update user-space rshim driver source to version 2.0.5.
  - Modify rshim.spec accordingly.
  - Resolves: rhbz#1950425


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-2
changelog:
  - Add sysconfig/rshim file and update rshim.service to source it.
  - jbastian made the first cut of this patch, which needed to be
    modified due to the update to 2.0.5. And I chose to go with
    %autosetup to handle Patch0, instead of sticking with %setup.
  - Resolves: rhbz#1946349


author: Robert Scheck <robert@fedoraproject.org> - 1.4.3-1
changelog:
  - Upgrade to 1.4.3 (#1443553, #1646191, #1741427)
  - Extend spec file compatibility to cover RHEL/CentOS 6
  - Add run-time requirement for perl(Lchown) (#1494775)


author: Michal Ruprich <mruprich@redhat.com> - 3.1.3-19
changelog:
  - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-5
changelog:
  - Do not exit when user/group can not be found
    resolves: rhbz#1984489
  - Remove abortOnIDResolution fail


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-9
changelog:
  - Add deleteStateOnFileMove imfile module option
    resolves: rhbz#1909639
  - Add inotify_rm_watch() inotify API call when object needs to be destroyed
    resolves: rhbz#2052403


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-10
changelog:
  - openssl: Correct gnutlsPriorityString (custom ciphers) behaviour
  - Fix error handling in gtlsRecordRecv that can cause 100 percent CPU usage
    resolves: rhbz#2046158
  - Address CVE-2022-24903, Heap-based overflow in TCP syslog server
    resolves: rhbz#2081401


author: Attila Lakatos <alaktos@redhat.com> - 8.2102.0-13
changelog:
  - Make rsyslog-relp require librelp>= 1.9.0
    resolves: rhbz#2029352
  - Reorder logrotate parameters to work with POSIXLY_CORRECT env var
    resolves: rhbz#2070496


author: Stephen Gallagher <sgallagh@redhat.com> - 0.11-15
changelog:
  - Temporarily disable -Werror=format-security to unbreak the build
  - Build with verbose command-line visible in the logs
  - Resolves: rhbz#1424270


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 21.12-3.20220401git8228f0d
changelog:
  - Comment some of the config options makes for more sensible defaults
  - Use install instead of cp for config file


author: John Kacur <jkacur@redhat.com> - 5.14.0-3
changelog:
  - Fix exit status when returning from calls to usage()
  Resolves: rhbz#2161423
  jiraProject == RHELPLAN-145250


author: Conrad Meyer <cemeyer@uw.edu> - 0.9.7-1
changelog:
  - Bump to latest upstream release (rhbz# 1588472)
  - Drop special views patch (# 1354125); now fixed in 0.9.7


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-106
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 2.7.1-132
changelog:
  - Update to Ruby 2.7.1 by merging Fedora master branch (commit: 2981648)
    * Skip unstable tests on s390x.
    * Skip JIT tests in RHEL 8.
    Resolves: rhbz#1817135


author: Vít Ondruch <vondruch@redhat.com> - 2.7.1-133
changelog:
  - Fix `require` behavior allowing to load libraries multiple times.
    Resolves: rhbz#1842989
  - Add ruby-default-gems dependency on irb.


author: Pavel Valena <pvalena@redhat.com> - 2.7.3-136
changelog:
  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1947938
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1944227


author: Jun Aruga <jaruga@redhat.com> - 2.7.4-137
changelog:
  - Upgrade to Ruby 2.7.4.
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810
  - Fix StartTLS stripping vulnerability in Net::IMAP.
    Resolves: CVE-2021-32066
  - Upgrade to Bundler 2.2.24.
    Resolves: CVE-2020-36327


author: Jarek Prokop <jprokop@redhat.com> - 2.7.6-138
changelog:
  - Upgrade to Ruby 2.7.6.
    Resolves: rhbz#2109424
  - Fix FTBFS due to an incompatible load directive.
    Related: rhbz#2109424
  - Fix a fiddle import test on an optimized glibc on Power 9.
    Related: rhbz#2109424
  - Fix regular Expression Denial of Service Vulnerability of Date Parsing Methods.
    Resolves: CVE-2021-41817
  - Fix cookie prefix spoofing in CGI::Cookie.parse.
    Resolves: CVE-2021-41819
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Pavel Valena <pvalena@redhat.com> - 0.0.4-1
changelog:
  - Update to introspection 0.0.4(rhbz#1390394)
    - Remove patch0, subsumed
    - Remove patch1, subsumed


author: Davide Cavalca <dcavalca@fedoraproject.org> - 3.0.9-1
changelog:
  - Upgrade to 3.0.9 and package tests
  - Drop el6 and ancient Fedora logic
  - Various fixes to follow the latest Ruby packaging policy


author: Jun Aruga <jaruga@redhat.com> - 0.5.2-1
changelog:
  - New upstream release 0.5.2 by merging Fedora master branch (commit: cc15309)
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 0.5.3-1
changelog:
  - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475)
    Resolves: rhbz#1817135


author: Athos Ribeiro <athoscr@fedoraproject.org> - 0.1.0-3
changelog:
  - Do not use simplecov
  - Add spec directory to documentation subpackage
  - Remove code for EOL fedora versions


author: Jun Aruga <jaruga@redhat.com> - 1.1.4-1
changelog:
  - Update to pg 1.1.4 by merging Fedora master branch (commit: 397796e)
    * BuildRequires: s/postgresql-devel/libpq-devel/
    * Add marking lines at the start and end of the setup.log
    Resolves: rhbz#1672575


author: Ricky Elrod <codeblock@fedoraproject.org> 0.7.3-4
changelog:
  - Add groff-base Requires.
  - Nuke a Requires of the base package from the -doc subpackage.
  - Fix Requires for F18-, make it be >= 1.9.1.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 3.5.0-3
changelog:
  - Always use full tar.gz for installed files and
    keep using gem file for gem spec (ref: bug 1425220)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.3-6
changelog:
  - Fix every podman run invocation generates two "Couldn't stat device
    /dev/char/10:200: No such file or directory" lines in the journal
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.3-3
changelog:
  - fix "Error: runc: exec failed: unable to start container process:
    open /dev/pts/0: operation not permitted: OCI permission denied"
  - Related: #2061390


author: Julio González Gil <packages@juliogonzalez.es> - 1.90-1
changelog:
  - Update to 1.90 from https://github.com/s3fs-fuse/s3fs-fuse (#1991301)
    Full changelog: https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.90


author: Julio González Gil <packages@juliogonzalez.es> - 1.91-1
changelog:
  - Update to 1.91 from https://github.com/s3fs-fuse/s3fs-fuse (#2061848)
    Full changelog: https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.91


author: Julio González Gil <packages@juliogonzalez.es> - 1.92-1
changelog:
  - Update to 1.92 from https://github.com/s3fs-fuse/s3fs-fuse (#2209081)
    Full changelog: https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.92


author: Fedora Release Engineering <releng@fedoraproject.org> - 3.0.0-18
changelog:
  - Second attempt - Rebuilt for
    https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

  -* Wed Jul 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.0.0-17
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

  -* Fri Jul 26 2019 Fedora Release Engineering <releng@fedoraproject.org> - 3.0.0-16
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild


author: Michal Ambroz <rebus AT seznam.cz> - 3.0.0-20
changelog:
  - use Debian patch to switch to the current version of openssl for crypto
  - adding dependencies to make and gcc


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.1-6
changelog:
  - match qdevice-sync_timeout against wd-timeout
  - sync startup/shutdown via pacemakerd-api

    Resolves: rhbz#1703128
    Resolves: rhbz#1743726


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.1-7
changelog:
  - conflict with pacemaker-libs < 2.0.4-5 instead of requiring
    a minimum pacemaker version

    Resolves: rhbz#1861713


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-1
changelog:
  - rebase to upstream v1.4.2
  - make sbd default to do pacemakerd-api handshake
  - conflict with pacemaker-libs < 2.0.5-4 to assure pacemaker
    is defaulting to pacemakerd-api handshake

    Resolves: rhbz#1903730
    Resolves: rhbz#1873135


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-3
changelog:
  - change the default for SBD_WATCHDOG_TIMEOUT to 10s
    s390(x) stays at 15s as before

    Resolves: rhbz#1922143


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - reverted watchdog_timeout_default to 5s
    (slipped in via an unreleased change on 8.4.0 branch)

    Resolves: rhbz#1980797


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-10
changelog:
  - Fix docdir patch (patch Makefile.am, not Makefile.in)
  - Use correct short name for Eclipse Public License 1.0
  - Use %license
  - Add explicit dependencies for libraries in Makefile.am (fixes FTBFS)
    Resolves: #1606302


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions
    Resolves: #1776670


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.9-24
changelog:
  - Fix important coverity issues
    Resolves: #1989603
  - Fix incorrect use of temporary paths
    Resolves: #1989605


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.5.0-1
changelog:
  - Update to latest upstream version
  - Change license to Eclipse Public License 1.0
  - Use %license
  - Fix URL


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-10
changelog:
  - Fix null pointer (DoS) vulnerability via POST request to /cimom (CVE-2018-6644)
    (patch by Adam Majer)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-16
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Remove %defattr
    Resolves: #1638007


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-9
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Fix license tag
    Resolves: #1638015


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.63-2
changelog:
  - aligning with the latest STIG update (RHBZ#2112937)
  - OSPP: use Authselect minimal profile (RHBZ#2117192)
  - OSPP: change rules for protecting of boot (RHBZ#2116440)
  - add warning about configuring of TCP queues to rsyslog_remote_loghost (RHBZ#2078974)
  - fix handling of Defaults clause in sudoers (RHBZ#2083109)
  - make rules checking for mount options of /tmp and /var/tmp applicable only when the partition really exists (RHBZ#2032403)
  - fix handling of Rsyslog include directives (RHBZ#2075384)


author: Watson Sato <wsato@redhat.com> - 0.1.63-5
changelog:
  - Update RHEL8 STIG profile to V1R8 (RHBZ#2148446)
  - Add rule warning for sysctl IPv4 forwarding config (RHBZ#2118758)
  - Fix remediation for firewalld_sshd_port_enabled (RHBZ#2116474)
  - Fix compatibility with Ansible 2.14


author: Watson Sato <wsato@redhat.com> - 0.1.66-1
changelog:
  - Rebase to a new upstream release 0.1.66 (RHBZ#2158404)
  - Update RHEL8 STIG profile to V1R9 (RHBZ#2152658)
  - Fix levels of CIS rules (RHBZ#2162803)
  - Remove unused RHEL8 STIG control file (RHBZ#2156192)
  - Fix accounts_password_pam_unix_remember's check and remediations (RHBZ#2153547)
  - Fix handling of space in sudo_require_reauthentication (RHBZ#2152208)
  - Add rule for audit immutable login uids (RHBZ#2151553)
  - Fix remediation of audit watch rules (RHBZ#2119356)
  - Align file_permissions_sshd_private_key with DISA Benchmark (RHBZ#2115343)
  - Fix applicability of kerberos rules (RHBZ#2099394)
  - Add support rainer scripts in rsyslog rules (RHBZ#2072444)


author: Jan Černý <jcerny@redhat.com> - 0.1.69-1
changelog:
  - Rebase to a new upstream release 0.1.69 (RHBZ#2228444)
  - Add rule audit_rules_login_events_faillock to STIG profile (RHBZ#2228455)
  - Add appropriate STIGID to accounts_passwords_pam_faillock_interval rule (RHBZ#2228465)
  - Make rule checking for Postfix unrestricted relay accept more variants of valid configuration syntax (RHBZ#2228471)
  - Correct URL used to download CVE checks (RHBZ#2228452)
  - Evaluation and remediation of rules related to mount points have been enhanced for Image builder (RHBZ#2228448)
  - Mention exact required configuration value in description of some PAM related rules (RHBZ#2228441)
  - Fixed rules related to AIDE configuration (RHBZ#2228458)
  - Update ANSSI BP-028 profiles to be aligned with version 2.0 (RHBZ#2228429)
  - Improved and unified OVAL checks checking for interactive users (RHBZ#2228433)
  - Unify OVAL checks to correctly identify interactive users (RHBZ#2228460)
  - Fixed excess quotes in journald configuration files (RHBZ#2228437)
  - Allow default permissions for files stored on EFI FAT partitions (RHBZ#2228443)
  - Make mount point related rules not applicable when no such mount points exist (RHBZ#2228473)


author: Timothée Floure <fnux@fedoraproject.org> - 1.9.4-3
changelog:
  - Remove useless PCDIR variable definition in build section
  - Fix erroneous dates in last two changelog entries


author: Merlin Mathesius <mmathesi@redhat.com> - 1.0.11-14
changelog:
  - Fix FTBFS by disabling regeneration of documentation at build time
    and using pregenerated docs included in upstream source. This is
    because gtkdoc-mktmpl has been removed as of gtk-doc-1.26.


author: Sérgio Basto <sergio@serjux.com> - 1.6.10-1
changelog:
  - Update to 1.6.10
  - Add from Debian package, BRs, patches and config files
  - Switch to cmake
  - Modernize spec file


author: Derek Weitzel <dweitzel@unl.edu> - 1.0.0-1
changelog:
  - Add async API for parsing and verifying tokens
  - Add configuration API
  - Make nbf claim optional for non-scitokens tokens
  - Update to OpenSSL 3.0


author: Derek Weitzel <dweitzel@unl.edu> - 1.0.2-1
changelog:
  - Add support for API-configurable cache home
  - Fix enforcer_acl_free logic
  - scitokens_internal: catch matching exception type after jwt-cpp update


author: Derek Weitzel <dweitzel@unl.edu> - 1.1.0-1
changelog:
  - Allow the scitokens library user to setup a custom CA file
  - Fix typecast errors in scitoken_status_get_*() that caused async queries to fail
  - Fix logic error in deserialize_continue() that caused async deserialization to fail


author: Dave Love <loveshack@fedoraproject.org> - 6.0-9
changelog:
  - Fix building gcc plugin, and reporting its use, on el7
  - Drop el6 conditionals
  - Don't try to install osh on aarch64


author: Rajeesh K V <rajeeshknambiar@fedoraproject.org> - 1.2-3
changelog:
  - Address Fedora review comments, v2.
  - Fix BR typo of python3-gobject
  - Add missing BR for intltool and gettext
  - Add missing runtime dependency on slop
  - Add fontawesome and appindicator recommendation
  - Install locale files


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.0.0-5.20220328gita5096e5
changelog:
  - Rename to sdl-crypto (RHBZ#2068621)
  - Update summary and description to make it clear this is a fork
  - Update to a5096e5 git snapshot
  - Drop f32 logic and tidy up the specfile


author: Davide Cavalca <dcavalca@fedoraproject.org> - 3.68.0-5.20220328git3aa2f45
changelog:
  - Rename to sdl-decnumber (RHBZ#2068621)
  - Update summary and description to make it clear this is a fork
  - Update to 3aa2f45 git snapshot
  - Drop f32 logic and tidy up the specfile


author: Davide Cavalca <dcavalca@fedoraproject.org> - 3.5.0-5
changelog:
  - Rename to sdl-softloat (RHBZ#2068621)
  - Update summary and description to make it clear this is a fork
  - Update to 4b0c326 git snapshot
  - Drop f32 logic and tidy up the specfile


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.0.0-5.20220328gite0e2a91
changelog:
  - Update summary and description to make it clear this is a fork
  - Update to e0e2a91 git snapshot
  - Drop f32 logic and tidy up the specfile


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.12.0-3.el8
changelog:
  - seabios-rh-add-configs-for-ramfb-and-bochs-display.patch [bz#1724098]
  - Resolves: bz#1724098
    (enable device: bochs-display (seabios))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.12.0-4.el8
changelog:
  - seabios-tpm-Check-for-TPM-related-ACPI-tables-before-attempt.patch [bz#1705212]
  - seabios-usb-ehci-Clear-pipe-token-on-pipe-reallocate.patch [bz#1705212]
  - Resolves: bz#1705212
    (Backport 1.12.1 patches to RHEL-AV 8.1.0)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.12.0-5.el8
changelog:
  - seabios-add-get_keystroke_full-helper.patch [bz#1693031]
  - seabios-bootmenu-add-support-for-more-than-9-entries.patch [bz#1693031]
  - Resolves: bz#1693031
    (On systems with more than 10 available boot devices, keys are uninintuitive)


author: Jon Maloy <jmaloy@redhat.com> - 1.15.0-1.el8
changelog:
  - pci-reserve-resources-for-pcie-pci-bridge-to-fix-reg.patch [bz#2001921]
  - pci: let firmware reserve IO for pcie-pci-bridge.patch [bz#2001921]
  - Resolves: bz#2001921


author: Paweł Poławski <ppolawsk@redhat.com> - 1.16.0-1
changelog:
  - Rebase to upstream 1.16 tag [bz#2066828]
  - Resolves: bz#2066828
    (rebase seabios to 1.16 release)


author: Jon Maloy <jmaloy@redhat.com> - 1.16.0-2
changelog:
  - seabios-shortcut-skip-unbootable-disks-optimitation.patch [bz#2073012]
  - seabios-pci-refactor-the-pci_config_-functions.patch [bz#2083884]
  - seabios-reset-force-standard-PCI-configuration-access.patch [bz#2083884]
  - Resolves: bz#2073012
    (Guest whose os is installed multiple disks but boot partition is installed on single disk can't boot into OS on RHEL 8 [rhel-8.7.0])
  - Resolves: bz#2083884
    (qemu reboot problem with seabios 1.16.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.0-3
changelog:
  - seabios-virtio-blk-use-larger-default-request-size.patch [bz#2101787]
  - Resolves: bz#2101787
    ([rhel.8.7] Loading a kernel/initrd is sometimes very slow)


author: Jakub Martisko <jamartis@redhat.com> - 4.4-4
changelog:
  - When editing file inplace, the SELinux context should
    be based on the link instead of the target file itself.
    --follow-symlinks option remains unchanged
  - Resolves: #1401442


author: Jakub Martisko <jamartis@redhat.com> - 4.5-2
changelog:
  - fix "in-place edits on FUSE filesystems create files with all-zero mode bits"
  - Resolves: #1835761


author: Jakub Martisko <jamartis@redhat.com> - 4.5-5
changelog:
  - Minor cleanup - remove unused patch from the spec file too (related to 4.5-3)
  - Resolves: rhbz#1869253


author: Mahailiang <mahailiang@openanolis.org> - 4.5-5.0.1
changelog:
  - fix testsuite/inplace-selinux.sh check error
  - Sync from https://debbugs.gnu.org/cgi/bugreport.cgi?bug=35997


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.20.0-1
changelog:
  - Update to 1.20.0
  - Backport upstream PR for securemode and verifySIGPassword
  - Use standard macros for building and installing


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-109
changelog:
  - Add the files_map_read_etc_files() interface
  Resolves: rhbz#2132230
  - Allow insights-client manage samba var dirs
  Resolves: rhbz#2132230
  - Allow insights-client send null signal to rpm and system cronjob
  Resolves: rhbz#2132230
  - Update rhcd policy for executing additional commands 4
  Resolves: rhbz#2132230
  - Allow insights-client connect to postgresql with a unix socket
  Resolves: rhbz#2132230
  - Allow insights-client domtrans on unix_chkpwd execution
  Resolves: rhbz#2132230
  - Add file context entries for insights-client and rhc
  Resolves: rhbz#2132230
  - Allow snmpd_t domain to trace processes in user namespace
  Resolves: rhbz#2121084
  - Allow sbd the sys_ptrace capability
  Resolves: rhbz#2124552
  - Allow pulseaudio create gnome content (~/.config)
  Resolves: rhbz#2124387


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-110
changelog:
  - Add the systemd_connectto_socket_proxyd_unix_sockets() interface
  Resolves: rhbz#208441
  - Add the dev_map_vhost() interface
  Resolves: rhbz#2122920
  - Allow init remount all file_type filesystems
  Resolves: rhbz#2122239
  - added policy for systemd-socket-proxyd
  Resolves: rhbz#2088441
  - Allow virt_domain map vhost devices
  Resolves: rhbz#2122920
  - Allow virt domains to access xserver devices
  Resolves: rhbz#2122920
  - Allow rotatelogs read httpd_log_t symlinks
  Resolves: rhbz#2030633
  - Allow vlock search the contents of the /dev/pts directory
  Resolves: rhbz#2122838
  - Allow system cronjobs dbus chat with setroubleshoot
  Resolves: rhbz#2125008
  - Allow ptp4l_t name_bind ptp_event_port_t
  Resolves: rhbz#2130168
  - Allow pcp_domain execute its private memfd: objects
  Resolves: rhbz#2090711
  - Allow samba-dcerpcd use NSCD services over a unix stream socket
  Resolves: rhbz#2121709
  - Allow insights-client manage samba var dirs
  Resolves: rhbz#2132230


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-111
changelog:
  - Add domain_unix_read_all_semaphores() interface
  Resolves: rhbz#2141311
  - Allow iptables list cgroup directories
  Resolves: rhbz#2134820
  - Allow systemd-hostnamed dbus chat with init scripts
  Resolves: rhbz#2111632
  - Allow systemd to read symlinks in /var/lib
  Resolves: rhbz#2118784
  - Allow insights-client domain transition on semanage execution
  Resolves: rhbz#2141311
  - Allow insights-client create gluster log dir with a transition
  Resolves: rhbz#2141311
  - Allow insights-client manage generic locks
  Resolves: rhbz#2141311
  - Allow insights-client unix_read all domain semaphores
  Resolves: rhbz#2141311
  - Allow winbind-rpcd use the terminal multiplexor
  Resolves: rhbz#2107106
  - Allow mrtg send mails
  Resolves: rhbz#2103675
  - Allow sssd dbus chat with system cronjobs
  Resolves: rhbz#2132922
  - Allow postfix/smtp and postfix/virtual read kerberos key table
  Resolves: rhbz#1983308


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-112
changelog:
  - Allow ipsec_t only read tpm devices
  Resolves: rhbz#2147380
  - Allow ipsec_t read/write tpm devices
  Resolves: rhbz#2147380
  - Label udf tools with fsadm_exec_t
  Resolves: rhbz#1972230
  - Allow the spamd_update_t domain get generic filesystem attributes
  Resolves: rhbz#2144501
  - Allow cdcc mmap dcc-client-map files
  Resolves: rhbz#2144505
  - Allow insights client communicate with cupsd, mysqld, openvswitch, redis
  Resolves: rhbz#2143878
  - Allow insights client read raw memory devices
  Resolves: rhbz#2143878
  - Allow winbind-rpcd get attributes of device and pty filesystems
  Resolves: rhbz#2107106
  - Allow postfix/smtpd read kerberos key table
  Resolves: rhbz#1983308


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-113
changelog:
  - Allow systemd-socket-proxyd get attributes of cgroup filesystems
  Resolves: rhbz#2088441
  - Allow systemd-socket-proxyd get filesystems attributes
  Resolves: rhbz#2088441
  - Allow sysadm read ipmi devices
  Resolves: rhbz#2148561
  - Allow system mail service read inherited certmonger runtime files
  Resolves: rhbz#2143337
  - Add lpr_roles  to system_r roles
  Resolves: rhbz#2151111
  - Allow insights-client tcp connect to various ports
  Resolves: rhbz#2151111
  - Allow insights-client work with pcp and manage user config files
  Resolves: rhbz#2151111
  - Allow insights-client dbus chat with various services
  Resolves: rhbz#2152867
  - Allow insights-client dbus chat with abrt
  Resolves: rhbz#2152867
  - Allow redis get user names
  Resolves: rhbz#2112228
  - Add winbind-rpcd to samba_enable_home_dirs boolean
  Resolves: rhbz#2143696


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-114
changelog:
  - Add interfaces in domain, files, and unconfined modules
  Resolves: rhbz#2141311
  - Allow sysadm_t read/write ipmi devices
  Resolves: rhbz#2148561
  - Allow sudodomain use sudo.log as a logfile
  Resolves: rhbz#2143762
  - Add insights additional capabilities
  Resolves: rhbz#2158779
  - Allow insights client work with gluster and pcp
  Resolves: rhbz#2141311
  - Allow prosody manage its runtime socket files
  Resolves: rhbz#2157902
  - Allow system mail service read inherited certmonger runtime files
  Resolves: rhbz#2143337
  - Add lpr_roles  to system_r roles
  Resolves: rhbz#2151111


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-115
changelog:
  - Fix syntax problem in redis.te
  Resolves: rhbz#2112228
  - Allow unconfined user filetransition for sudo log files
  Resolves: rhbz#2164047
  - Allow winbind-rpcd make a TCP connection to the ldap port
  Resolves: rhbz#2152642
  - Allow winbind-rpcd manage samba_share_t files and dirs
  Resolves: rhbz#2152642
  - Allow insights-client work with su and lpstat
  Resolves: rhbz#2134125
  - Allow insights-client read nvme devices
  Resolves: rhbz#2143878
  - Allow insights-client tcp connect to all ports
  Resolves: rhbz#2143878
  - Allow redis-sentinel execute a notification script
  Resolves: rhbz#2112228


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-116
changelog:
  - Allow sysadm_t run initrc_t script and sysadm_r role access
  Resolves: rhbz#2039662
  - Allow insights-client manage fsadm pid files
  Resolves: rhbz#2166802
  - Add journalctl the sys_resource capability
  Resolves: rhbz#2136189


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.3-117
changelog:
  - Fix opencryptoki file names in /dev/shm
  Resolves: rhbz#2028637
  - Allow system_cronjob_t transition to rpm_script_t
  Resolves: rhbz#2154242
  - Revert "Allow system_cronjob_t domtrans to rpm_script_t"
  Resolves: rhbz#2154242
  - Allow httpd work with tokens in /dev/shm
  Resolves: rhbz#2028637
  - Allow keepalived to set resource limits
  Resolves: rhbz#2168638
  - Allow insights-client manage fsadm pid files


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.16.1-1
changelog:
  - New version
    Resolves: rhbz#1853885
  - Dropped smtp-session-reuse-fix, openssl-1.1.0-fix, openssl-1.1.0-ecdhe-fix,
    gethostbyname2, fix-covscan-issues, gcc-10-fix patches (not needed)
  - Dropped format-security patch (upstreamed)
  - Updated patches


author: Robert Scheck <robert@fedoraproject.org> 1.24-12
changelog:
  - Added upstream patch to enable SRV record lookups by default
    and to fix support for virtual domain user names


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-1
changelog:
  - Add 'fur' into shipped locales
  - Update translations (#1820570)
  - Log full reports with correct syslog identifier
  - Cancel pending alarm during AVC analyses


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-2
changelog:
  - Optimize get_rpm_nvr_by_type by adding a cache (#1794807)
  - Stop building seappletlegacy (#1878792)
  - Update translations


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-1
changelog:
  - Revert "Replace pydbus with dasbus"
  - Fix typos in --help, man pages and developer's guide (#2028226)
  - Do not use Python slip package
  - Stop SetroubleshootFixit after 10 seconds of inactivity
  - Fix plugin exception reporting
  - export alert dbus signal
  - Make sure local_policy_package is not None
  - sealert: add "Last Seen" column to alert list


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-4
changelog:
  - Decrease setroubleshootd priority and limit RAM utilization to 1GB (#2064727)
  - doc: Document performance related changes


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.10-1
changelog:
  - Handle no "allowed_target_types" properly
  - bind_ports: Do not use when there are no allowed_target_types
  - Fix summary and "if" text for AVCs with unknown target path
  - plugins: Update translations


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.10-2
changelog:
  - update "file" plugin (#1649818)
  - Update "xen_image" plugin (#1649831)
  - Update qemu_blk_image and qemu_file_image (#1649838)


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.12-1
changelog:
  - Use get_package_nvr* functions instead of get_rpm_nvr*
  - Update deprecated type references (#1829306)


author: Ondrej Vasik <ovasik@redhat.com> - 2.12.2-2
changelog:
  - do not ship /etc/hosts.allow and /etc/hosts.deny (no need for them
    as we don't allow tcp_wrappers in RHEL8, #1663556)


author: Martin Osvald <mosvald@redhat.com> - 2.12.2-3
changelog:
  - add pcp user to /etc/aliases (#1744089)
  - set PATH if it is empty in csh.login (#1744104)
  - lang.csh: prevent grep from failing so scripts do not end
    prematurely when tcsh -e option in use (#1678706)
  - use full path for non-builtins (#1688302)
  - add nrpe tcp port 5666 to /etc/services (#1730396)


author: Martin Osvald <mosvald@redhat.com> - 2.12.2-7
changelog:
  - Move /var/log/lastlog ownership to systemd (#2044589)
  - tcsh sets variable p to /usr/sbin from /etc/csh.login (#1945400)
  - bashrc: Don't set up VTE-specific PROMPT_COMMAND (#1917934)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.44-3
changelog:
  - Fix sg_turs help invocation in an old mode (#1683343)
  - Fix sg_raw printing error about device not specified on version request (#1627657)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-9
changelog:
  - do not mistake a regular user process for a namespaced one (#1788696)
  - add HOME_MODE support in login.defs (#1777718)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-12
changelog:
  - lib/sssd: redirect warning message to file (#1749001)
  - useradd: clarify valid usernames/groupnames (#1869432)
  - login.defs: link login specific information to its own package (#1804766)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-15
changelog:
  - Creation of subid and subid-devel subpackages (#2013009)
  - libsubid: creation and nsswitch support
  - libsubid: don't print error messages on stderr by default
  - libsubid: libsubid_init return false if out of memory
  - libsubid: don't return owner in list_owner_ranges API call
  - libsubid: libsubid_init don't print messages on error
  - libsubid: fix newusers when nss provides subids
  - libsubid: make shadow_logfd not extern
  - useradd: fix SUB_UID_COUNT=0
  - man: mention NSS in new[ug]idmap manpages
  - man: clarify subid delegation


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-16
changelog:
  - getsubids: provide system binary and man page. Resolves: #2013016
  - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #1986782


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-17
changelog:
  - subordinateio: also compare the owner ID. Resolves: #2093311
  - Fix release sources
  - Add subid requirement for subid-devel


author: Petr Pisar <ppisar@redhat.com> - 4.15.2-10
changelog:
  - License corrected to "GPLv3+ and (GPLv3+ and BSD) and (LGPLv3+ or BSD) and
    LGPLv2+ and Public Domain and GFDL"


author: Javier Martinez Canillas <javierm@redhat.com> - 15-12
changelog:
  - Fix firmware update bug in aarch64 caused by shim ignoring arguments
    Resolves: rhbz#1830871
  - Fix a shim crash when attempting to netboot
    Resolves: rhbz#1795654


author: Peter Jones <pjones@redhat.com> - 15-13
changelog:
  - New signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Javier Martinez Canillas <javierm@redhat.com> - 15-3
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1704854
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717063


author: Peter Jones <pjones@redhat.com> - 15-7
changelog:
  - Backport this to EL 8 so we can build-dep on the right version.
    Related: CVE-2020-14372 (and others)


author: Marcus Müller <marcus@hostalia.de> - 27-1
changelog:
  - updated to release v27
  - prepared `%check` for as soon as regression tests are released
  - fixed `%set_build_flags` (thanks Antonio <anto.trande@gmail.com>)
  - proper _prefix (thanks Vít Ondruch <vondruch@redhat.com>)


author: Marcus Müller <marcus@hostalia.de> - 30-1
changelog:
  - Bump upstream version
  - Include the upstreamed license file
  - Add newlines to changelog
  - set LD explicitly (thanks sagitter)


author: Robert Scheck <robert@fedoraproject.org> - 30-6
changelog:
  - Spec file improvements by Robert-André Mauchin
    - Add tarball signature verification
    - Add patch to keep files timestamps
    - Rewrite summary (no encrypt)
    - Add Public Domain License
  - Switch to upstream commit for keeping file timestamps


author: Rex Dieter <rdieter@fedoraproject.org> - 0.22-14
changelog:
  - patch out -Werror move -no-rtti for tests/ only (#1891251)
  - use %autosetup, %make_build, %make_install
  - add %check


author: David Trudgian <dtrudg@sylabs.io> - 3.11.0-1
changelog:
  - Upgrade to 3.11.0 upstream version.
  - This is a compatible upgrade to a new upstream minor version.


author: David Trudgian <dtrudg@sylabs.io> - 3.11.1-1
changelog:
  - Upgrade to 3.11.1 upstream version.
  - This is a compatible upgrade to a new upstream patch version.


author: David Trudgian <dtrudg@sylabs.io> - 3.11.2-1
changelog:
  - Upgrade to 3.11.2 upstream version.
  - This is a compatible upgrade to a new upstream patch version.


author: David Trudgian <dtrudg@sylabs.io> - 3.11.3-1
changelog:
  - Upgrade to 3.11.3 upstream version.
  - This is a compatible upgrade to a new upstream patch version.


author: David Trudgian <dtrudg@sylabs.io> - 3.11.4-1
changelog:
  - Upgrade to 3.11.4 upstream version.
  - This is a compatible upgrade to a new upstream patch version.


author: David Trudgian <dtrudg@sylabs.io> - 3.11.5-1
changelog:
  - Upgrade to 3.11.5 upstream version.
  - This is a compatible upgrade to a new upstream patch version.


author: David Trudgian <dtrudg@sylabs.io> - 4.1.1-1
changelog:
  - Upgrade to 4.1.1 upstream version.
  - This is an incompatible upgrade, following EPEL policy.
    - Some functionality previously provided by the singularity remote
      command is split into new singularity registry and singularity
      keyserver commands.
    - The singularity remote add command now sets a newly added remote as
      the default (unless suppressed).
    - The —vm flag to start singularity inside a Virtual Machine has been
      removed.
    - Bind mounts are now performed in the order in which they are
      specified.
    - Current working directory on the host is now created in the
      container, restoring a behaviour from Singularity <3.6.0.
    - If the current directory paths on the container and host contains
      symlinks to different locations, the current working directory is
      not mounted.


author: Jindrich Novy <jnovy@redhat.com> - 2:1.11.0-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/2817510)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:1.11.0-0.2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/8e09e64)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:1.11.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/fe15a36)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:1.11.0-1
changelog:
  - update to https://github.com/containers/skopeo/releases/tag/v1.11.0
    (https://github.com/containers/skopeo/commit/968670116c56023d37e9e98b48346478599c6801)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 2:1.11.2-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.11
    (https://github.com/containers/skopeo/commit/3f98753)
  - Related: #2123641


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-5
changelog:
  - Link with libnsl explicitly in Fedora 28 or later
  - Require libnsl2-devel for build
  - Resolves rhbz#1573636


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
changelog:
  - Upstream release 0.56.5
  - Resolves: rhbz#1751295: (2) When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
  - Resolves: rhbz#1768156: ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED


author: Jindrich Novy <jnovy@redhat.com> - 1.1.4-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.4
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.6-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.6
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.7-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.8-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.0
  - Related: #2061390


author: Stewart Smith <stewart@flamingspork.com> - 2.26-37
changelog:
  - Build with the right LDFLAGS (fixes rpmlint warning about PIE binaries, hardens build)
  - Remove executable bit on man page.


author: Carl George <carl@george.computer> - 20.11.9-1
changelog:
  - Update to 20.11.9, resolves: rhbz#2081898
  - Fix CVE-2022-29500, resolves: rhbz#2082285
  - Fix CVE-2022-29501, resolves: rhbz#2082288


author: Rajeesh K V <rajeeshknambiar@fedoraproject.org> 6.1-1
changelog:
  - New upstream release with many enhancements and bugfixes
  - Metainfo file for AppData/Software Center
  - Drop patch for Fedora bug#803234 which is fixed upstream


author: Rajeesh K V <rajeeshknambiar@fedoraproject.org> 6.1-3
changelog:
  - Updated license for AnjaliOldLipi to OFL 1.1
  - Drop the email confirmation on AnjaliOldLipi license


author: Čestmír Kalina <ckalina@redhat.com> - 1.6.0-1
changelog:
  - Resolves: #1869292 Statistics Support - smc-tools part
  - Resolves: #1919225 Add SMC-D Setup Check (smc-tools)
  - Resolves: #1919240 Upgrade smc-tools to latest version


author: Čestmír Kalina <ckalina@redhat.com> - 1.6.0-3
changelog:
  - Patch stats.c to fix overruns
  - Patch stats.c to fix leaks
  - Patch stats.c to fix fallback counter values
  - Resolves: #1993469


author: Čestmír Kalina <ckalina@redhat.com> - 1.8.1-1
changelog:
  - Upgrade smc-tools to latest version
  - Add User-defined EID (Enterprise ID) Support
  - Resolves: #1919228
  - Resolves: #2043841


author: Matthew Miller <mattdm@fedoraproject.org> - 1.5-1
changelog:
  - update to 1.5 tagged release (no new tarballs are forthcoming for this project)
  - hard-code python3 as per guidelines


author: Antonio Trande <sagitter@fedoraproject.org> - 2.56-1
changelog:
  - First package
  - Unbundle zlib, boost and BioNetGen
  - Remove unused header files
  - Fix file permissions
  - Add License file provided by upstream


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.60.2
   - i/builtin: allow directories in private /dev/shm
   - i/builtin: add read access to /proc/task/schedstat in system-
     observe
   - snap-bootstrap: print version information at startup
   - go.mod: update gopkg.in/yaml.v3 to v3.0.1 to fix CVE-2022-28948
   - snap, store: filter out invalid snap edited links from store info
     and persisted state
   - o/configcore: write netplan defaults to 00-snapd-config on seeding
   - snapcraft.yaml: pull in apparmor_parser optimization patches from
     https://gitlab.com/apparmor/apparmor/-/merge_requests/711
   - snap-confine: fix missing \0 after readlink
   - cmd/snap: hide append-integrity-data
   - interfaces/opengl: add support for ARM Mali


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.60.3
   - i/b/shared-memory: handle "private" plug attribute in shared-
     memory interface correctly
   - i/apparmor: support for home.d tunables from /etc/


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.60.4
   - i/b/qualcomm_ipc_router.go: switch to plug/slot and add socket
     permission
   - interfaces/builtin: fix custom-device udev KERNEL values
   - overlord: allow the firmware-updater snap to install user daemons
   - interfaces: allow loopback as a block-device


author: Philip Meulengracht <philip.meulengracht@canonical.com>
changelog:
  - New upstream release 2.61
   - Fix control of activated services in 'snap start' and 'snap stop'
   - Correctly reflect activated services in 'snap services'
   - Disabled services are no longer enabled again when snap is
     refreshed
   - interfaces/builtin: added support for Token2 U2F keys
   - interfaces/u2f-devices: add Swissbit iShield Key
   - interfaces/builtin: update gpio apparmor to match pattern that
     contains multiple subdirectories under /sys/devices/platform
   - interfaces: add a polkit-agent interface
   - interfaces: add pcscd interface
   - Kernel command-line can now be edited in the gadget.yaml
   - Only track validation-sets in run-mode, fixes validation-set
     issues on first boot.
   - Added support for using store.access to disable access to snap
     store
   - Support for fat16 partition in gadget
   - Pre-seed authority delegation is now possible
   - Support new system-user name  daemon
   - Several bug fixes and improvements around remodelling
   - Offline remodelling support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.61.1
   - Stop requiring default provider snaps on image building and first
     boot if alternative providers are included and available
   - Fix auth.json access for login as non-root group ID
   - Fix incorrect remodelling conflict when changing track to older
     snapd version
   - Improved check-rerefresh message
   - Fix UC16/18 kernel/gadget update failure due volume mismatch with
     installed disk
   - Stop auto-import of assertions during install modes
   - Desktop interface exposes GetIdletime
   - Polkit interface support for new polkit versions
   - Fix not applying snapd snap changes in tracked channel when remodelling


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.61.2
   - Fix to enable plug/slot sanitization for prepare-image
   - Fix panic when device-service.access=offline
   - Support offline remodeling
   - Allow offline update only remodels without serial
   - Fail early when remodeling to old model revision
   - Fix to enable plug/slot sanitization for validate-seed
   - Allow removal of core snap on classic systems
   - Fix network-control interface denial for file lock on /run/netns
   - Add well-known core24 snap-id
   - Fix remodel snap installation order
   - Prevent remodeling from UC18+ to UC16
   - Fix cups auto-connect on classic with cups snap installed
   - u2f-devices interface support for GoTrust Idem Key with USB-C
   - Fix to restore services after unlink failure
   - Add libcudnn.so to Nvidia libraries
   - Fix skipping base snap download due to false snapd downgrade
     conflict


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.57
   - tests: Fix calls to systemctl is-system-running
   - osutil/disks: handle GPT for 4k disk and too small tables
   - packaging: import change from the 2.54.3-1.1 upload
   - many: revert "features: disable refresh-app-awarness by default
     again"
   - tests: improve robustness of preparation for regression/lp-1803542
   - tests: get the ubuntu-image binary built with test keys
   - tests: remove commented code from lxd test
   - interfaces/builtin: add more permissions for steam-support
   - tests: skip interfaces-network-control on i386
   - tests: tweak the "tests/nested/manual/connections" test
   - interfaces: posix-mq: allow specifying message queue paths as an
     array
   - bootloader/assets: add ttyS0,115200n8 to grub.cfg
   - i/b/desktop,unity7: remove name= specification on D-Bus signals
   - tests: ensure that microk8s does not produce DENIED messages
   - many: support non-default provenance snap-revisions in
     DeriveSideInfo
   - tests: fix `core20-new-snapd-does-not-break-old-initrd` test
   - many: device and provenance revision authority cross checks
   - tests: fix nested save-data test on 22.04
   - sandbox/cgroup: ignore container slices when tracking snaps
   - tests: improve 'ignore-running' spread test
   - tests: add `debug:` section to `tests/nested/manual/connections`
   - tests: remove leaking `pc-kernel.snap` in `repack_kernel_snap`
   - many: preparations for revision authority cross checks including
     device scope
   - daemon,overlord/servicestate: followup changes from PR #11960 to
     snap logs
   - cmd/snap: fix visual representation of 'AxB%' cpu quota modifier.
   - many: expose and support provenance from snap.yaml metadata
   - overlord,snap: add support for per-snap storage on ubuntu-save
   - nested: fix core-early-config nested test
   - tests: revert lxd change to support nested lxd launch
   - tests: add invariant check for leftover cgroup scopes
   - daemon,systemd: introduce support for namespaces in 'snap logs'
   - cmd/snap: do not track apps that wish to stay outside of the life-
     cycle system
   - asserts: allow classic + snaps models and add distribution to
     model
   - cmd/snap: add snap debug connections/connection commands
   - data: start snapd after time-set.target
   - tests: remove ubuntu 21.10 from spread tests due to end of life
   - tests: Update the whitebox word to avoid inclusive naming issues
   - many: mount gadget in run folder
   - interfaces/hardware-observe: clean up reading access to sysfs
   - tests: use overlayfs for interfaces-opengl-nvidia test
   - tests: update fake-netplan-apply test for 22.04
   - tests: add executions for ubuntu 22.04
   - tests: enable centos-9
   - tests: make more robust the files check in preseed-core20 test
   - bootloader/assets: add fallback entry to grub.cfg
   - interfaces/apparmor: add permissions for per-snap directory on
     ubuntu-save partition
   - devicestate: add more path to `fixupWritableDefaultDirs()`
   - boot,secboot: reset DA lockout counter after successful boot
   - many: Revert "overlord,snap: add support for per-snap storage on
     ubuntu-save"
   - overlord,snap: add support for per-snap storage on ubuntu-save
   - tests: exclude centos-7 from kernel-module-load test
   - dirs: remove unused SnapAppArmorAdditionalDir
   - boot,device: extract SealedKey helpers from boot to device
   - boot,gadget: add new `device.TpmLockoutAuthUnder()` and use it
   - interfaces/display-control: allow changing brightness value
   - asserts: add more context to key expiry error
   - many: introduce IsUndo flag in LinkContext
   - i/apparmor: allow calling which.debianutils
   - tests: new profile id for apparmor in test preseed-core20
   - tests: detect 403 in apt-hooks and skip test in this case
   - overlord/servicestate: restart the relevant journald service when
     a journal quota group is modified
   - client,cmd/snap: add journal quota frontend (5/n)
   - gadget/device: introduce package which provides helpers for
     locations of things
   - features: disable refresh-app-awarness by default again
   - many: install bash completion files in writable directory
   - image: fix handling of var/lib/extrausers when preseeding
     uc20
   - tests: force version 2.48.3 on xenial ESM
   - tests: fix snap-network-erros on uc16
   - cmd/snap-confine: be compatible with a snap rootfs built as a
     tmpfs
   - o/snapstate: allow install of unasserted gadget/kernel on
     dangerous models
   - interfaces: dynamic loading of kernel modules
   - many: add optional primary key provenance to snap-revision, allow
     delegating via snap-declaration revision-authority
   - tests: fix boringcripto errors in centos7
   - tests: fix snap-validate-enforce in opensuse-tumbleweed
   - test: print User-Agent on failed checks
   - interfaces: add memory stats to system_observe
   - interfaces/pwm: Remove implicitOnCore/implicitOnClassic
   - spread: add openSUSE Leap 15.4
   - tests: disable core20-to-core22 nested test
   - tests: fix nested/manual/connections test
   - tests: add spread test for migrate-home command
   - overlord/servicestate: refresh security profiles when services are
     affected by quotas
   - interfaces/apparmor: add missing apparmor rules for journal
     namespaces
   - tests: add nested test variant that adds 4k sector size
   - cmd/snap: fix test failing due to timezone differences
   - build-aux/snap: build against the snappy-dev/image PPA
   - daemon: implement api handler for refresh with enforced validation
     sets
   - preseed: suggest to install "qemu-user-static"
   - many: add migrate-home debug command
   - o/snapstate: support passing validation sets to storehelpers via
     RevisionOptions
   - cmd/snapd-apparmor: fix unit tests on distros which do not support
     reexec
   - o/devicestate: post factory reset ensure, spread test update
   - tests/core/basic20: Enable on uc22
   - packaging/arch: install snapd-apparmor
   - o/snapstate: support migrating snap home as change
   - tests: enable snapd.apparmor service in all the opensuse systems
   - snapd-apparmor: add more integration-ish tests
   - asserts: store required revisions for missing snaps in
     CheckInstalledSnaps
   - overlord/ifacestate: fix path for journal redirect
   - o/devicestate: factory reset with encryption
   - cmd/snapd-apparmor: reimplement snapd-apparmor in Go
   - squashfs: improve error reporting when `unsquashfs` fails
   - o/assertstate: support multiple extra validation sets in
     EnforcedValidationSets
   - tests: enable mount-order-regression test for arm devices
   - tests: fix interfaces network control
   - interfaces: update AppArmor template to allow read the memory …
   - cmd/snap-update-ns: add /run/systemd to unrestricted paths
   - wrappers: fix LogNamespace being written to the wrong file
   - boot: release the new PCR handles when sealing for factory reset
   - tests: add support fof uc22 in test uboot-unpacked-assets
   - boot: post factory reset cleanup
   - tests: add support for uc22 in listing test
   - spread.yaml: add ubuntu-22.04-06 to qemu-nested
   - gadget: check also mbr type when testing for implicit data
     partition
   - interfaces/system-packages-doc: allow read-only access to
     /usr/share/cups/doc-root/ and /usr/share/gimp/2.0/help/
   - tests/nested/manual/core20-early-config: revert changes that
     disable netplan checks
   - o/ifacestate: warn if the snapd.apparmor service is disabled
   - tests: add spread execution for fedora 36
   - overlord/hookstate/ctlcmd: fix timestamp coming out of sync in
     unit tests
   - gadget/install: do not assume dm device has same block size as
     disk
   - interfaces: update network-control interface with permissions
     required by resolvectl
   - secboot: stage and transition encryption keys
   - secboot, boot: support and use alternative PCR handles during
     factory reset
   - overlord/ifacestate: add journal bind-mount snap layout when snap
     is in a journal quota group (4/n)
   - secboot/keymgr, cmd/snap-fde-keymgr: two step encryption key
     change
   - cmd/snap: cleanup and make the code a bit easier to read/maintain
     for quota options
   - overlord/hookstate/ctlcmd: add 'snapctl model' command (3/3)
   - cmd/snap-repair: fix snap-repair tests silently failing
   - spread: drop openSUSE Leap 15.2
   - interfaces/builtin: remove the name=org.freedesktop.DBus
     restriction in cups-control AppArmor rules
   - wrappers: write journald config files for quota groups with
     journal quotas (3/n)
   - o/assertstate: auto aliases for apps that exist
   - o/state: use more detailed NoStateError in state
   - tests/main/interfaces-browser-support: verify jupyter notebooks
     access
   - o/snapstate: exclude services from refresh app awareness hard
     running check
   - tests/main/nfs-support: be robust against umount failures
   - tests: update centos images and add new centos 9 image
   - many: print valid/invalid status on snap validate --monitor
   - secboot, boot: TPM provisioning mode enum, introduce
     reprovisioning
   - tests: allow to re-execute aborted tests
   - cmd/snapd-apparmor: add explicit WSL detection to
     is_container_with_internal_policy
   - tests: avoid launching lxd inside lxd on cloud images
   - interfaces: extra htop apparmor rules
   - gadget/install: encrypted system factory reset support
   - secboot: helpers for dealing with PCR handles and TPM resources
   - systemd: improve error handling for systemd-sysctl command
   - boot, secboot: separate the TPM provisioning and key sealing
   - o/snapstate: fix validation sets restoring and snap revert on
     failed refresh
   - interfaces/builtin/system-observe: extend access for htop
   - cmd/snap: support custom apparmor features dir with snap prepare-
     image
   - interfaces/mount-observe: Allow read access to /run/mount/utab
   - cmd/snap: add help strings for set-quota options
   - interfaces/builtin: add README file
   - cmd/snap-confine: mount support cleanups
   - overlord: execute snapshot cleanup in task
   - i/b/accounts_service: fix path of introspectable objects
   - interfaces/opengl: update allowed PCI accesses for RPi
   - configcore: add core.system.ctrl-alt-del-action config option
   - many: structured startup timings
   - spread: switch back to building ubuntu-image from source
   - many: optional recovery keys
   - tests/lib/nested: fix unbound variable
   - run-checks: fail on equality checks w/ ErrNoState
   - snap-bootstrap: Mount as private
   - tests: Test for gadget connections
   - tests: set `br54.dhcp4=false` in the netplan-cfg test
   - tests: core20 preseed/nested spread test
   - systemd: remove the systemctl stop timeout handling
   - interfaces/shared-memory: Update AppArmor permissions for
     mmap+link
   - many: replace ErrNoState equality checks w/ errors.Is()
   - cmd/snap: exit w/ non-zero code on missing snap
   - systemd: fix snapd systemd-unit stop progress notifications
   - .github: Trigger daily riscv64 snapd edge builds
   - interfaces/serial-port: add ttyGS to serial port allow list
   - interfaces/modem-manager: Don't generate DBus plug policy
   - tests: add spread test to test upgrade from release snapd to
     current
   - wrappers: refactor EnsureSnapServices
   - testutil: add ErrorIs test checker
   - tests: import spread shellcheck changes
   - cmd/snap-fde-keymgr: best effort idempotency of add-recovery-key
   - interfaces/udev: refactor handling of udevadm triggers for input
   - secboot: support for changing encryption keys via keymgr


author: Alberto Mardegan <alberto.mardegan@canonical.com>
changelog:
  - New upstream release 2.57.1
   - cmd/snap-update-ns: handle mountpoint removal failures with EBUSY
   - cmd/snap-update-ns: print current mount entries
   - cmd/snap-update-ns: check the unused mounts with a cleaned path
   - snap-confine: disable -Werror=array-bounds in __overflow tests to
     fix build error on Ubuntu 22.10
   - systemd: add `WantedBy=default.target` to snap mount units
     (LP: #1983528)


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.57.2
   - store/tooling,tests: support UBUNTU_STORE_URL override env var
   - packaging/*/tests/integrationtests: reload ssh.service, not
     sshd.service
   - tests: check snap download with snapcraft v7+ export-login auth
     data
   - store/tooling: support using snapcraft v7+ base64-encoded auth
     data
   - many: progress bars should use the overridable stdouts
   - many: refactor store code to be able to use simpler form of auth
     creds
   - snap,store: drop support/consideration for anonymous download urls
   - data: include snapd/mounts in preseeded blob
   - many: Set SNAPD_APPARMOR_REEXEC=1
   - overlord: track security profiles for non-active snaps


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.57.3
   - wrappers: journal namespaces did not honor journal.persistent
   - snap/quota,wrappers: allow using 0 values for the journal rate to
     override the system default values
   - multiple: clear up naming convention for cpu-set quota
   - i/b/mount-control: allow custom filesystem types
   - i/b/system-observe: allow reading processes security label
   - sandbox/cgroup: don't check V1 cgroup if V2 is active
   - asserts,boot,secboot: switch to a secboot version measuring
     classic


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.57.4
   - release, snapd-apparmor: fixed outdated WSL detection
   - overlord/ifacestate: fix conflict detection of auto-connection
   - overlord: run install-device hook during factory reset
   - image/preseed/preseed_linux: add missing new line
   - boot: add factory-reset cases for boot-flags.
   - interfaces: added read/write access to /proc/self/coredump_filter
     for process-control
   - interfaces: add read access to /proc/cgroups and
     /proc/sys/vm/swappiness to system-observe
   - fde: run fde-reveal-key with `DefaultDependencies=no`
   - snapdenv: added wsl to userAgent
   - tests: fix restore section for persistent-journal-namespace
   - i/b/mount-control: add optional `/` to umount rules
   - cmd/snap-bootstrap: changes to be able to boot classic rootfs
   - cmd/snap-bootstrap: add CVM mode


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.57.5
   - image: clean snapd mount after preseeding
   - wrappers,snap/quota: clear LogsDirectory= in the service unit
     for journal namespaces
   - cmd/snap,daemon: allow zero values from client to daemon for
     journal rate-limit
   - interfaces: steam-support allow pivot /run/media and /etc/nvidia
     mount
   - o/ifacestate: introduce DebugAutoConnectCheck hook
   - release, snapd-apparmor, syscheck: distinguish WSL1 and WSL2
   - autopkgtests: fix running autopkgtest on kinetic
   - interfaces: add microceph interface
   - interfaces: steam-support allow additional mounts
   - many: add stub services
   - interfaces: add kconfig paths to system-observe
   - i/b/system_observe: honour root dir when checking for
     /boot/config-*
   - interfaces: grant access to speech-dispatcher socket
   - interfaces: rework logic of unclashMountEntries


author: Neal Gompa <ngompa13@gmail.com> - 1.47-1
changelog:
  - Update to 1.47
  - New API: snapd_channel_get_released_at
  - New API: SNAPD_ERROR_DNS_FAILURE
  - Fix tests breaking due to undefined order of results
  - Remove generated MOC file from tarball


author: Neal Gompa <ngompa13@gmail.com> - 1.48-1
changelog:
  - Update to 1.48
  - Many new APIs added
  - Allow searching via common-id
  - Add a description markdown parser
  - Replace SnapdConnection with SnapdPlugRef and SnapdSlotRef
  - Support updated connections API (/v2/connections)
  - Support updated /v2/interfaces&select= API
  - Support snap configuration API
  - Add Qt interface attribute API
  - Make snapd_client_set_socket_path revert to the default when NULL passed.
  - Fix C99 mode not being enabled on older versions of GCC


author: Neal Gompa <ngompa13@gmail.com> - 1.49-1
changelog:
  - Update to 1.49
  - New APIs for getting connections and deprecating older variants
  - Fix memory leaks
  - Use C99 variable style


author: Neal Gompa <ngompa13@gmail.com> - 1.54-1
changelog:
  - Update to 1.54
  - Add API to get snap website
  - Add purge option to remove
  - Switch build system to Meson
  - Fix Qt build with optimisation disabled
  - Fix tests breaking on json-glib < 1.2.4
  - Use C99 style variable definitions


author: Neal Gompa <ngompa13@gmail.com> - 1.55-1
changelog:
  - Update to 1.55
  - Add new APIs for download and logout actions
  - Add support for snap store logout
  - Fix QSnapdAuthData () constructor not copying discharge strings correctly
  - Remove obsolete screenshot parsing code
  - Make all snapd 404 errors return SNAPD_ERROR_NOT_FOUND


author: Neal Gompa <ngompa13@gmail.com> - 1.57-1
changelog:
  - Update to 1.57
  - Add snapd_interface_make_label
  - Add support for new snap types: "core", "base" and "snapd"
  - Change way GTK documentation is generated to avoid a Meson bug
  - Fix leak in markdown parser
  - Fix leak in logout code
  - Make build reproducible by fixing comment in generated file


author: Neal Gompa <ngompa13@gmail.com> - 1.58-1
changelog:
  - Update to 1.58
  - Fix GIR annotations on snapd_client_get_snap_conf
  - Put more information into error messages for unknown errors


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.1.8-1
changelog:
  - Rebase to latest github version Snappy-1.1.8
  - Also change the URL to reflect to the updated github location.


author: Neal Gompa <ngompa@fedoraproject.org> - 2.4.14-1
changelog:
  - Rebase to 2.4.14
  - Modernize packaging to current packaging guidelines
  - Drop unsupported devel content
  - Run test suite


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 2.5.1-1
changelog:
  - Update to 2.5.1
  - Convert to SPDX license identifier
  - Add compat subpackage for snoopy-disable and snoopy-enable


author: Paul Wouters <pwouters@redhat.com> - 1.7.4.1-1
changelog:
  - Resolves: rhbz#1805132 socat does not recognize IP addresses of the SAN extensions in ssl mode
  - Resolves: rhbz#1870279 Transfer via socat fails with openssl enabled
  - Resolves: rhbz#1914989 Socat udp4-recvfrom cause endless loop error when target is not vaild


author: Andreas Schneider <asn@redhat.com> - 1.1.8-1
changelog:
  - Update to version 1.1.8
    * Added support for openat()
    * Added support for open64() and fopen64()
    * Always enabled logging support
    * Increased maximum for wrapped interfaces to 64
    * Improved fd duplication code
    * Fixed strict-aliasing issues
    * Fixed some use after free issues
    * Fixed issues on ppc64le


author: Andreas Schneider <asn@redhat.com> - 1.2.0-1
changelog:
  - Update to vesrion 1.2.0
    * Added threading support
    * Moved to modern cmake
    * Several smaller bugfixes


author: David Woodhouse <dwmw2@infradead.org> - 2.6.1-3
changelog:
  - Resolves: rhbz#1831086 softhsm use-after-free on process exit
    Fix crash introduced by initial patch


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.3.0-3
changelog:
  - Remove softhsm2-pk11install. Software modules are to be registered with
    p11-kit as in https://fedoraproject.org/wiki/PackagingDrafts/Pkcs11Support (#1541095).


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-1
changelog:
  - Fixes: rhbz#1818877 - rebase to softhsm 2.6.0+
  - Fixes: rhbz#1701233 - support setting supported signature methods on the token


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-3
changelog:
  - Fixes: rhbz#1834909 - softhsm use-after-free on process exit
  - Synchronize the final fix with Fedora


author: Dominik Mierzejewski <rpm@greysector.net> - 1.0.5-1
changelog:
  - update to 1.0.5 (#1933413)
  - drop obsolete patch
  - drop redundant explicit Requires: on pyudev
  - python3-gobject is optional (for GUI only), move to Recommends:
  - fix unknown battery status regression


author: Dominik Mierzejewski <rpm@greysector.net> - 1.0.6-1
changelog:
  - update to 1.0.6 (#1953333)
  - improve handling of unavailable devices on startup or resume (#1921575, #1912132, #1942301, #1946104)
  - add a conditional weak dependency on appindicator extension for gnome-shell


author: Dominik Mierzejewski <rpm@greysector.net> - 1.1.0-1
changelog:
  - update to 1.1.0 (#2026986)
  - fix exceptions when adding devices (#2008448, #2015360)
  - fix exception when applying settings fails (#2020706, #2022320)


author: Jan Jansky <jjansky@redhat.com> = 4.6.0-1
changelog:
  - [ultrapath] Add new plugin for Huawei UltraPath
    Resolves: bz2187407
  - [cleaner] Use data filter for extraction
    Resolves: bz2217906
  - [discovery] Enable the plugin by containers
    Resolves: bz2222134


author: Jake Hunsaker <jhunsake@redhat.com> - 1.6-1
changelog:
  - Drop paramiko dependency, use OpenSSH ControlPersist instead
  - Layered cluster profiles can now accept base profile options
  - Debian/Ubuntu hosts now supported


author: Jake Hunsaker <jhunsake@redhat.com> - 1.7-1
changelog:
  - New upstream release
  - Overhaul mechanism of execution of sosreport in containers
  - Added RHCOS support
  - Added a 'none' cluster type


author: Jake Hunsaker <jhunsake@redhat.com> - 1.7-2
changelog:
  - Fix 'none' cluster type enablement
  - Update RHCOS image to RHEL 8 version
  - Fix execution from within a container


author: Hans de Goede <hdegoede@redhat.com> - 2.0.0-6
changelog:
  - The last round of security fixes also fixes CVE-2018-14044, CVE-2018-14045
    (rhbz#1601618, rhbz#1601620, rhbz#1601624, rhbz#1601625)


author: Sérgio Basto <sergio@serjux.com> - 2.1.1-1
changelog:
  - Update to 2.1.1
    Bugfixes: Fixed potential buffer overwrite bugs in WavFile routines. Replaced asserts with runtime exceptions.
    Android: Migrated the SoundTouch Android example to new Android Studio
    Automake: unset ACLOCAL in bootstrap script to avoid error in case earlier build script has set it


author: Jiri Kucera <jkucera@redhat.com> - 14.4.2.0-20
changelog:
  - added patch that fixes WAV to HCOM conversion abortion on 64 bit big endian
    machines
    + resolves #1558887


author: Jiri Kucera <jkucera@redhat.com> - 14.4.2.0-21
changelog:
  - fix hunks in patches
  - prevents division by zero in src/ao.c
    + fixes/prevents "sox killed by SIGFPE (signal 8)" kind of bugs that appear
      randomly, depending on reporter's HW/environment/OS components
    + related bugs: #1309426, #1226675, #1540762, #1492910


author: Jiri Kucera <jkucera@redhat.com> - 14.4.2.0-22
changelog:
  - added patch that fixes:
    + "divide by zero in startread function in wav.c" (CVE-2017-11332)
    + "invalid memory read in read_samples function in hcom.c" (CVE-2017-11358)
    + "divide by zero in wavwritehdr function in wav.c" (CVE-2017-11359)
    resolves #1480674, #1480675, #1480676, and #1480678


author: Paul Howarth <paul@city-fan.org> - 0.4.0-11
changelog:
  - Replace /bin/* dependencies with coreutils etc. (#1512898)
  - Drop explicit paths for commands to aid spec readability
  - Drop EL-5 support
    - Drop legacy Group: and BuildRoot: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - Noarch sub-packages are always available now


author: Paul Howarth <paul@city-fan.org> - 0.4.0-12
changelog:
  - Account for systemd-units being merged into systemd at Fedora 17
  - Drop support for SysV-to-systemd migration from Fedora 18, RHEL 7
  - Use forward-looking conditionals
  - One build requirement per line


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-10
changelog:
  - Fixed CVE-2018-11805
  - Resolves: rhbz#1787514
  - Fixed CVE-2020-1930
  - Resolves: rhbz#1820649
  - Fixed CVE-2020-1931
  - Resolves: rhbz#1820650


author: Volker Fröhlich <volker27@gmx.at> - 1.9.2-1
changelog:
  - New upstream release
  - Use github as source
  - Use license macro and remove the now-gone README
  - Remove merged patch


author: Lukáš Tyrychtr <lukastyrychtr@gmail.com> 2.5-9
changelog:
  - Add an obsoletes directive for the old speech-tools-libs as they're
    no longer part of the Festival package.


author: Leigh Scott <leigh123linux@gmail.com> - 2.1.1-1
changelog:
  - Update to 2.1.1 release
  - Remove pointless check, builders don't have internet access
  - Use python3 macros
  - Fix Source URL
  - Remove gz extension from man file
  - Don't bother compressing man file as rpmbuild does it
  - Remove unnecessary Requires
  - Spec file clean up


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2.0-1
changelog:
  - update to 1.2.0
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - include soname in file list
  - use license macro


author: Uri Lublin <uril@redhat.com> - 8.3-1
changelog:
  - mingw-virt-viewer 9.0-1
  - spice-usbdk-win   1.0-22
  - mingw-spice-gtk   0.38-4
  - mingw-libgovirt   0.3.7-2
  - mingw-spice-protocol 0.14-2
    Related:  rhbz#1841952, rhbz#1179070, rhbz#1428402
    Related:  rhbz#1575043, rhbz#1640058, rhbz#1793019
    Related:  rhbz#1841951
    Related:  rhbz#1842532
    Related:  rhbz#1841949
    Related:  rhbz#1773899
    Related:  rhbz#1741202, rhbz#1741252


author: Uri Lublin <uril@redhat.com> - 8.4-1
changelog:
  - mingw-virt-viewer 9.0-3
  - mingw-libgovirt   0.3.7-5
  - mingw-spice-gtk   0.38-5
    Related: rhbz#844683
    Related: rhbz#1839104 rhbz#1874740 rhbz#1017261
    Related: rhbz#1918459


author: Uri Lublin <uril@redhat.com> - 8.5-5
changelog:
  - mingw-virt-viewer 9.0-6
    Resolves: rhbz#1997058
    Resolves: rhbz#1918877
    Related:  rhbz#1939111
    Related:  rhbz#1942919


author: Uri Lublin <uril@redhat.com> - 0.21.0-2
changelog:
  - Build without pciaccess
    Resolves: rhbz#1964922
  - Fix g_memdup deprecation warning with glib >= 2.68


author: Uri Lublin <uril@redhat.com> - 0.10.0-4
changelog:
  - Reset properly state of pending large messages upon disconnection
    Resolves rhbz#1548419
  - Return detailed message for file transfer
    Resolves rhbz#1520393


author: Abhi Das <adas@redhat.com> - 4.3-19
changelog:
  - rhbz#1602698 - Fix coverity issues
    rhbz#1624173 - Fix annocheck failures
    rhbz#1716278 - limit max cpus in mksquashfs
    Resolves: rhbz#1602698, rhbz#1624173, rhbz#1716278


author: Abhi Das <adas@redhat.com> - 4.3-20
changelog:
  - rhbz#1895017 - unsquashfs does not preserve file capabilities
    rhbz#1754815 - Kdump: Building kdump initramfs img may fail with 'dracut: Failed making squash image' occasionally
    Resolves: rhbz#1895017, rhbz#1754815


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-2
changelog:
  - Resolves: #1853130 - CVE-2020-15049 squid:4/squid: request smuggling and
    poisoning attack against the HTTP cache
  - Resolves: #1853136 - CVE-2020-14058 squid:4/squid: DoS in TLS handshake


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-3
changelog:
  - Resolves: #1871705 - CVE-2020-24606 squid: Improper Input Validation could
    result in a DoS
  - Resolves: #1871702 - CVE-2020-15811 squid: HTTP Request Splitting could result
    in cache poisoning
  - Resolves: #1871700 - CVE-2020-15810 squid: HTTP Request Smuggling could result
    in cache poisoning


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-5
changelog:
  - Resolves: #1944261 - CVE-2020-25097 squid:4/squid: improper input validation
    may allow a trusted client to perform HTTP Request Smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-2
changelog:
  - Resolves: #2006121 - SQUID shortens FTP Link wrong that contains a semi-colon
    and as a result is not able to download zip file.CODE 404 TO CLIENT)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-3
changelog:
  - Resolves: #1941506 - CVE-2021-28116 squid:4/squid: out-of-bounds read in WCCP
    protocol data may lead to information disclosure


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-5
changelog:
  - Resolves: #2130260 - CVE-2022-41318 squid:4/squid: buffer-over-read in SSPI and SMB
    authentication


author: Tomas Korbar <tkorbar@redhat.com> - 4.15-6
changelog:
  - Resolves: #2072988 - [RFE] Add the "IP_BIND_ADDRESS_NO_PORT"
    flag to sockets created for outgoing connections in the squid source code.


author: Bojan Smojver <bojan@rexursive.com> - 1.4-28
changelog:
  - Helper protocol patch (bug #1443273, bug #1418267)
  - Fix logrotate configuration (bug #1394601)
  - Fix typo in transparent-proxying.service


author: Christopher Engelhard <ce@lcts.de> 2.4.1-5
changelog:
  - Fix backend path in example spec file
  - Remove SysV init related things
  - Require a backend
  - Fix wrong check for EPEL8


author: Kevin Fenzi <kevin@scrye.com> - 1.0.4-1
changelog:
  - Update to 1.0.4. Fixes bug #1856063
  - Apply upstream commit to fix python2 compat on remote side. Fixes bug #1851622


author: Clark Williams <williams@redhat.com> - 1.10-1
changelog:
  - utils: Fix bounds check on cpu and end_cpu variables
  - stalld: Support denylisting of tasks in stalld
  - src/utils: use right argument for warning printf


author: Clark Williams <williams@redhat.com> - 1.11-1
changelog:
  - redhat/stalld.spec: pick up gating test version for changelog
  - utils.c: set daemon umask to restrict global write/execute (1934586)
  - hardening fixes from coverity scan (1934590)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.12-1
changelog:
  - stalld.8: fix diff cruft left in manpage source
  - stalld.c: clean up handling of nr_running
  - stalld.c: remove duplicate parameter to fill_waiting_task()
  - stalld: Add error handling in get_cpu_idle_time()
  - stalld.service: Run stalld as sched_fifo via systemd
  - packaging: clean up Makefiles and rpm specfile
  - stalld: Always print current function for info messages
  - stalld: Always print current function for warn messages
  - stalld: Always print current function for die messages
  - utils: change PATHMAX to 4096


author: Fernando Pacheco <fpacheco@redhat.com> - 1.13-1
changelog:
  - stalld: Fix log message on boost_cpu_starving_vector()
  - stalld: Add the overload control to the single-threaded mode
  - stalld: Add the adaptive mode option
  - stalld: Use the last mode set in the cmdline
  - stalld: Fallback to the adaptive mode if force_fifo is selected
  - stalld: Make single-threaded mode the default one
  - stalld.service: Always restart stalld on exit
  - utils.c: Fail if user is not root
  - utils.c: Make the path to sched_debug path dynamic


author: Fernando Pacheco <fpacheco@redhat.com> - 1.14.1-1
changelog:
  - stalld: Coding style cleanup
  - stalld: spaces in place of <TAB>
  - throttling: Use RT_RUNTIME_PATH in rt_throttling_is_off()
  - throttling: Check open() on turn_off_rt_throttling
  - throttling: Adjust variables in restore_rt_throttling()
  - stalld.c: utils.c: Remove complex assignments from variable declarations
  - stalld.h: Define MAX_PATH/DIR_PATH/FILE_NAME and use them
  - stalld: Adjust variables in parse_old_task_format()
  - utils.c: Use MAX_PATH for pidfile
  - stalld.c: Remove variable declaration from the middle of  the function
  - stalld: Respect -l option in single threaded mode (1983103)
  - utils: s/try_to_open_file/check_file_exists/
  - utils: use check_file_exists in setup_hr_tick()
  - utils: Check for the new sched_features path


author: Fernando Pacheco <fpacheco@redhat.com> - 1.15-1
changelog:
  - stalld: Fix incorrect open() return value checks
  - stalld: Pass errno to strerror() on sig*set() failures
  - throttling: Always null terminate sched_rt_runtime_us output
  - stalld: Remove unreachable statement in detect_task_format()
  - tests: Fix uninitialized value action.sa_mask
  - utils: Bail if malloc() returns null in parse_cpu_list()
  - stalld: Use correct format specifier for long types
    Resolves: rhbz#2016010


author: Fernando Pacheco <fpacheco@redhat.com> - 1.16-1
changelog:
  - stald/utils: Space, lines and voids clenaups
  - stalld: Add an option to easily set stalld as SCHED_DEADLINE
  - stalld: Comments cleanup
  - src/utils: Comments cleanup
  - src/throttling: Comments cleanup
  - src/stalld.h Comments cleanup
    Resolves: rhbz#2068550


author: Leah Leshchinsky <lleshchi@redhat.com> - 1.17.1-1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  Resolves: rhbz#2120799


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0-0.40.20240208gitb7cf124
changelog:
  - Update to 0^20240208gitb7cf124
  - stb_image-devel is updated to 2.29
  - stb_image_resize2-devel is updated to 2.05


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0-0.5
changelog:
  - Update to c0c9826 (fix RHBZ#2002436)
  - Removed and obsoleted stb_perlin-devel due to possible patents
  - Updated stb_truetype to 1.26
  - Bug fixes in stb_image (no new version number)


author: Benjamin A. Beasley <code@musicinmybrain.net>
changelog:
  - Update to 8b5f1f3
  - The stb_perlin-devel subpackage has been restored, as upstream believes
    all relevant patents are now expired.


author: Kalev Lember <klember@redhat.com> - 0.19.3-1
changelog:
  - 0.19.3
  - Don't replace upstream screenshots in appdata
  - Use desktop-file-validate rather than desktop-file-install
  - Validate appdata


author: Parag Nemade <pnemade AT redhat DOT com> - 1.1.0-7
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove %clean section which is optional now
  - Remove buildroot which is optional now
  - Remove removal of buildroot in %install
  - Remove group tag


author: Ondrej Mosnacek <omosnace@redhat.com> - 14.1-1
changelog:
  - Adapt spec file for NNUE support
  - Use upstream buildsystem
  - Bump to version 14.1
  - Resolves: rhbz#1875192
  - Resolves: rhbz#1988004


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-1
changelog:
  - Rebase to v5.13; drop upstream patches on top of 5.7 (#2015917).
  - Address some issues reported by covscan.


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1914316
  - Remove requirement for python3-semantic_version
  - Resolves: rhbz#1972353


author: Bryan Gurney <bgurney@redhat.com> - 3.4.0-1
changelog:
  - Update to version 3.4.0
  - Resolves: rhbz#2124977
  - Return no-op on overprovision command on error
  - Resolves: rhbz#2131934
  - Return error on init-cache if cache is present
  - Resolves: rhbz#2141223


author: Dennis Keefe <dkeefe@redhat.com> - 2.0.0-4
changelog:
  - Update to 2.0.0
  - Resolves: rhbz#1760906
  - Fix a bug where last update time for variable length metadata was not set
    properly on startup:
  - Resolves: rhbz#1720399
  - Specify path of PID file as "/run/stratisd.pid" instead of 
    "/var/run/stratisd.pid".
  - Resolves: rhbz#1754649
  - For a particular log entry, reduce log level from INFO to DEBUG and make the
    log message more detailed:
  - Resolves: rhbz#1680052


author: Dennis Keefe <dkeefe@redhat.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Resolves: rhbz#1791473
  - Update Stratis RPM Spec File
  - Resolves: rhbz#1828487
  - Support per-pool encryption of the devices that form a pool's data tier
  - Resolves: rhbz#1768580
  - Improve systemd unit file description
  - Resolves: rhbz#1756525


author: Dennis Keefe <dkeefe@redhat.com> - 2.3.0-2
changelog:
  - Update to 2.3.0
  - Resolves: rhbz#1885328
  - Stratis devices inhabit an existing root directory path
  - Resolves: rhbz#1798244
  - Add Clevis Support
  - Resolves: rhbz#1868100
  - Improve stratisd log levels
  - Resolves: rhbz#1757976


author: Bryan Gurney <bgurney@redhat.com> - 2.4.0-3
changelog:
  - Update to 2.4.0
  - Resolves: rhbz#1931671
  - Improve stratis by adding Multi-threading
  - Resolves: rhbz#1927485
  - Dump stratis configuration on demand or in debug
  - Resolves: rhbz#1735475
  - Add noalign option to XFS creation on MDV
  - Resolves: rhbz#1908318
  - Cap thinpool metadata device size at devicemapper-set limit
  - Resolves: rhbz#1707461


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1931671
  - Ensure that binaries are installed with proper features enabled
  - Split dracut modules out to subpackage
  - Add additional dependencies in dracut module


author: John Kacur <jkacur@redhat.com> - 0.15.00-1
changelog:
  - Rebase to upstream V0.15.00
  - Add the following upstream patches
  - stress-shm: move /dev/shm check to earlier in the setup phase
  - stress-shm: skip stressor if /dev/shm is not mounted with tmpfs on linux
  - stress-sysfs: check for zero sysfs entries after pruning the directory
  Resolves: rhbz#2144070


author: Petr Menšík <pemensik@redhat.com> - 0.4.2-2
changelog:
  - Private users do not work with dynamic users
  - Provide path to unbound-anchor key, but keep it commented out


author: Sahana Prasad <sahana@redhat.com> - 5.56-5
changelog:
  - Fix CVE-2021-20230 stunnel: client certificate not
    correctly verified when redirect and verifyChain options are used.


author: Petr Viktorin <pviktori@redhat.com> - 1.15.0-8
changelog:
  - Run sanity-check.py with Python 3
    https://bugzilla.redhat.com/show_bug.cgi?id=1595816
    https://bugzilla.redhat.com/show_bug.cgi?id=1610038


author: Christopher Snyder <csnyder@redhat.com>
changelog:
  - 1776461: Rebase subscription-manager-migration-data component to the latest
    upstream branch for RHEL 8.2.0 (csnyder@redhat.com)
  - 1776461: Update product certs to include those for 8.2 (csnyder@redhat.com)


author: Radovan Sroka <rsroka@redhat.com> - 1.8.28p1-1
changelog:
  - RHEL 8.2 ERRATUM
  - rebase to 1.8.28p1
  Resolves: rhbz#1733961
  - fixed man page for always_set_home
  Resolves: rhbz#1576880
  - sudo does not work with notbefore/after
  Resolves: rhbz#1679508
  - NOTBEFORE showing value of sudoNotAfter Ldap attribute
  Resolves: rhbz#1715516
  - CVE-2019-14287 sudo
  - Privilege escalation via 'Runas' specification with 'ALL' keyword
  Resolves: rhbz#1760697


author: Radovan Sroka <rsroka@redhat.com> - 1.8.29-7
changelog:
  - RHEL 8.4 ERRATUM
  - CVE-2021-3156
  Resolves: rhbz#1917734
  - CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhzb#1916434
  - CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1917038
  - updated upstream url
  Resolves: rhbz#1923825


author: Radovan Sroka <rsroka@redhat.com> - 1.8.29-8
changelog:
  RHEL 8.6.0 ERRATUM
  - sudoedit does not work with selinux args
  Resolves: rhbz#2029551
  - Make sure SIGCHLD is not ignored when sudo is executed
  Resolves: rhbz#1999751
  - [RFE] pass KRB5CCNAME to pam_authenticate environment if available
  Resolves: rhbz#1917379
  - utmp resource leak in sudo
  Resolves: rhbz#1986572


author: Radovan Sroka <rsroka@redhat.com> - 1.8.29.9
changelog:
  RHEL 8.8.0 ERRATUM
  - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
  Resolves: rhbz#2161221
  - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384)
  Resolves: rhbz#2114576


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-1
changelog:
  RHEL 8.9.0.Z ERRATUM
  - Rebase to 1.9.5p2
  - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
  Resolves: RHEL-21825
  - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
  Resolves: RHEL-21831
  - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables
  Resolves: RHEL-21820


author: Francisco Javier Tsao Santín <tsao@gpul.org> - 4.2.0-1
changelog:
  - Packaging cleanups to align with current Fedora Packaging Guidelines by Neal Gompa <ngompa13@gmail.com>
  - Upgraded to 4.2.0 version. Removed meld3 dependency by Francisco Javier Tsao Santín <tsao@gpul.org>


author: Ryan Lerch <rlerch@redhat.com> - 0.4-1
changelog:
  - Fix message body format when sending a Fedora message
  - Fix standard commands like .listmeetings and .recent


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.0-2.20200828git0c238a2
changelog:
  - Backport fixes from 0.4.0 stable branch. Resolves: rhbz#1868375
    (fixes usage of swtpm-localca with passwords when signing keys)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.2-1.20201201git2df14e3
changelog:
  - Update to 0.4.2, to address potential symlink vulnerabilities (CVE-2020-28407).
    Resolves: rhbz#1906043


author: Xavier Bachelot <xavier@bachelot.org> 6.2.62-1
changelog:
  - Update to 6.2.62
    - Fixes CVE-2020-26880 (RHBZ#1886232 - RHBZ#1886233)
  - Unbundle jquery-ui
  - Unbundle jquery on EL8


author: Xavier Bachelot <xavier@bachelot.org> 6.2.68-1
changelog:
  - Update to 6.2.68
  - Dont unbundle jquery-ui on EL9
  - Use Archive::Zip::SimpleZip instead of Archive::Zip where available


author: Xavier Bachelot <xavier@bachelot.org> 6.2.70-2
changelog:
  - Fix sympasoap socket ownership for httpd (RHBZ#2152381)
  - Fix both wwwsympa and sympasoap socket ownership for nginx


author: Ding-Yi Chen <dchen@redhat.com> - 1:1.14.3.5-1
changelog:
  - Upstream update to v1.14.3.5-stable
  - Add BuildRequires: libnotify-devel, libxkbfile-devel, pugixml-devel


author: Liwei Ge <geliwei@openanolis.org> - 6.04-6.0.1
changelog:
  - Enable nonlinux for x86 build
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 build


author: Peter Czanik <peter@czanik.hu> - 3.23.1-2
changelog:
  - fix MaxMindDB (GeoIP) packaging (make it a sub-package again)
  - fix file conflicit between rsyslog and syslog-ng: /etc/logrotate.d/syslog
    see: https://bugzilla.redhat.com/show_bug.cgi?id=1802165
    It became a weak dependency which conflicts with rsyslog


author: Michal Sekletár <msekleta@redhat.com> - 11.7.3-2
changelog:
  - sysstat's buildsystem doesn't really use LDFLAGS, we have to merge CFLAGS and LDFLAGS to get binaries with full RELRO (#1624177)


author: <msekleta@redhat.com> - 11.7.3-7
changelog:
  - Don't trigger autofs mounts when running sadc (#2000910)
  - sar: Add missing %gnice CPU value for tickless CPU (#2000916)
  - sadf: Fix seg fault on empty data files (#1910841)
  - sar: Fix typo in manual page (#1877836)


author: Jan Tulak <jtulak@redhat.com> - 1.2-1
changelog:
  - Upstream release 1.2 which fixes:
  - use pwquality to test password strength for cryptsetup (#1141871)
  - add multipath detection support (#1309729)
  - add migrate command (#1014708)


author: Jan Tulak <jtulak@redhat.com> - 1.2-3:
changelog:
  - Gating tests implementation, which meant adding few more changes
    to the existing patches (#1681969)
  - sphinx patch was merged to python3 change
  - add seq numbers to patch files


author: Jan Tulak <jtulak@redhat.com> - 1.4-1:
changelog:
  - Bring changes from upstream 1.4 (mostly bugfixes)
  - Remove multipath from the list of default backends (rhbz#1685019)
  - Fix locale issue (rhbz#1679587)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-69
changelog:
  - logind: optionally watch utmp for login data (#2122288)
  - logind: add hashtable for finding session by leader PID (#2122288)
  - core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2122288)
  - sd-event: add relative timer calls (#2122288)
  - logind: add option to stop idle sessions after specified timeout (#2122288)
  - logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2122288)
  - ci(lint): add shell linter - Differential ShellCheck (#2122499)
  - meson: do not compare objects of different types (#2122499)
  - journal-remote: use MHD_HTTP_CONTENT_TOO_LARGE as MHD_HTTP_PAYLOAD_TOO_LARGE is deprecated since 0.9.74 (#2122499)
  - Fix build with µhttpd 0.9.71 (#2122499)
  - ci: replace LGTM with CodeQL (#2122499)
  - ci(mergify): Update policy - Drop LGTM checks (#2122499)
  - time-util: fix buffer-over-run (#2139391)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-70
changelog:
  - basic: recognize pdfs filesystem as a network filesystem (#2094661)
  - core: move reset_arguments() to the end of main's finish (#2127131)
  - manager: move inc. of n_reloading into a function (#2136869)
  - core: Add new DBUS properties UnitsReloadStartTimestamp and UnitsLoadTimestampMontonic (#2136869)
  - core: Indicate the time when the manager started loading units the last time (#2136869)
  - core: do not touch /run/systemd/systemd-units-load from user session instances (#2136869)
  - sysctl: downgrade message when we have no permission (#2158160)
  - core: respect SELinuxContext= for socket creation (#2136738)
  - manager: use target process context to set socket context (#2136738)
  - virt: detect Amazon EC2 Nitro instance (#2117948)
  - machine-id-setup: generate machine-id from DMI product ID on Amazon EC2 (#2117948)
  - virt: use string table to detect VM or container (#2117948)
  - fileio: introduce read_full_virtual_file() for reading virtual files in sysfs, procfs (#2117948)
  - Use BIOS characteristics to distinguish EC2 bare-metal from VMs (#2117948)
  - device: drop refuse_after (#2043524)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-71
changelog:
  - manager: limit access to private dbus socket (#2119405)
  - journalctl: do not treat EINTR as an error when waiting for events (#2161683)
  - core: bring manager_startup() and manager_reload() more inline (#2059633)
  - pam: add a call to pam_namespace (#1861836)
  - virt: Support detection for ARM64 Hyper-V guests (#2158307)
  - virt: Fix the detection for Hyper-V VMs (#2158307)
  - basic: add STRERROR() wrapper for strerror_r() (#2155520)
  - coredump: put context array into a struct (#2155520)
  - coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155520)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-72
changelog:
  - test: import logind test from debian/ubuntu test suite (#1866955)
  - test: introduce inst_recursive() helper function (#1866955)
  - tests: verify that Lock D-Bus signal is sent when IdleAction=lock (#1866955)
  - systemctl: simplify halt_main() (#2053273)
  - systemctl: shutdown don't fallback on auth fail (#2053273)
  - systemctl: reintroduce the original halt_main() (#2053273)
  - systemctl: preserve old behavior unless requested (#2053273)
  - pam_systemd: suppress LOG_DEBUG log messages if debugging is off (#2170084)
  - udev/net_id: introduce naming scheme for RHEL-8.8 (#2170499)
  - pam: add a call to pam_namespace (#1861836)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-73
changelog:
  - journald: add API to move logging from /var to /run again (#1873540)
  - journalctl: add new --relinquish and --smart-relinquish options (#1873540)
  - units: automatically revert to /run logging on shutdown if necessary (#1873540)
  - pstore: Tool to archive contents of pstore (#2158832)
  - meson: drop redundant line (#2158832)
  - pstore: drop unnecessary initializations (#2158832)
  - pstopre: fix return value of list_files() (#2158832)
  - pstore: remove temporary file on failure (#2158832)
  - pstore: do not add FILE= journal entry if content_size == 0 (#2158832)
  - pstore: run only when /sys/fs/pstore is not empty (#2158832)
  - pstore: fix use after free (#2158832)
  - pstore: refuse to run if arguments are specified (#2158832)
  - pstore: allow specifying src and dst dirs are arguments (#2158832)
  - pstore: rework memory handling for dmesg (#2158832)
  - pstore: fixes for dmesg.txt reconstruction (#2158832)
  - pstore: Don't start systemd-pstore.service in containers (#2158832)
  - units: pull in systemd-pstore.service from sysinit.target (#2158832)
  - units: drop dependency on systemd-remount-fs.service from systemd-pstore.service (#2158832)
  - units: make sure systemd-pstore stops at shutdown (#2158832)
  - pstore: Run after modules are loaded (#2158832)
  - pstore: do not try to load all known pstore modules (#2158832)
  - logind-session: make stopping of idle session visible to admins (#2156780)
  - journald: Increase stdout buffer size sooner, when almost full (#2029426)
  - journald: rework end of line marker handling to use a field table (#2029426)
  - journald: use the fact that client_context_release() returns NULL (#2029426)
  - journald: rework pid change handling (#2029426)
  - test: Add a test case for #15654 (#2029426)
  - test: Stricter test case for #15654 (Add more checks) (#2029426)
  - man: document the new _LINE_BREAK= type (#2029426)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-74
changelog:
  - journald-server: always create state file in signal handler (#2174645)
  - journald-server: move relinquish code into function (#2174645)
  - journald-server: always touch state file in signal handler (#2174645)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-74.1
changelog:
  - pager: set $LESSSECURE whenver we invoke a pager (#2175623)
  - test-login: always test sd_pid_get_owner_uid(), modernize (#2175623)
  - pager: make pager secure when under euid is changed or explicitly requested (#2175623)
  - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175623)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-74.2
changelog:
  - pstore: fix crash and forward dummy arguments instead of NULL (#2190153)
  - ci: workflow for gathering metadata for source-git automation (#2190153)
  - ci: first part of the source-git automation - commit linter (#2190153)


author: systemd maintenance team <systemd-maint@redhat.com> - 239-74.3
changelog:
  - login: add a missing error check for session_set_leader() (#2223602)
  - logind: reset session leader if we know for a fact that it is gone (#2223602)


author: Yuanhong Peng <yummypeng@linux.alibaba.com> - 239-74.0.2.3
changelog:
  - core: fix a null reference case in load_from_path()
  - sysctl: Don't pass null directive argument to '%s'
  - exit-status: introduce EXIT_EXCEPTION mapping to 255
  - main: don't freeze PID 1 in containers, exit with non-zero instead
  - Do not go into freeze when systemd crashd
  - mount-setup: change the system mount propagation to shared by default only at bootup
  - cgroup-util: make definition of CGROUP_CONTROLLER_TO_MASK() unsigned
  - cgroup: update only siblings that got realized once
  - core: add a config item to support setting the value of cpuset.clone_children when systemd is starting
  - support loongarch for systemd
  - test-catalog: Fix coredump when compiled under GCC10
  - add Iluvatar CoreX pci id (Liwei Ge)
  - seccomp: add loongarch64 support (Liwei Ge)
  - seccomp: remove loongarch64 switch(Liwei Ge)
  - umount: check LO_FLAGS_AUTOCLEAR after LOOP_CLR_FD claimed success(yuanhui)
  - fileio: when reading a full file into memory, refuse inner NUL bytes (Guorui Yu)
  - util: introduce explicit_bzero_safe for explicit memset (Guorui Yu)
  - util: introduce erase_and_free() helper (Guorui Yu)
  - util: introduce READ_FULL_FILE_SECURE flag for reading secure data (Guorui Yu)
  - fileio: introduce warn_file_is_world_accessible() (Guorui Yu)
  - fileio: read_full_file_full() also warns when file is world readable and secure flag is set (Guorui Yu)
  - basic/fileio: Fix memory leak if READ_FULL_FILE_SECURE flag is used (Guorui Yu)
  - fileio: add explicit flag for generating world executable warning when reading file (Guorui Yu)
  - fileio: add 'dir_fd' parameter to read_full_file_full() (Guorui Yu)
  - fileio: add support for read_full_file() on AF_UNIX stream sockets (Guorui Yu)
  - fileio: beef up READ_FULL_FILE_CONNECT_SOCKET to allow setting sender socket name (Guorui Yu)
  - fileio: teach read_full_file_full() to read from offset/with maximum size (Guorui Yu)
  - cryptsetup: port cryptsetup's main key file logic over to read_full_file_full() (Guorui Yu)


author: Stan Cox <scox@redhat.com> - 4.7-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 4.8-2
changelog:
  - rhbz2156092 = rhbz1997192
  - rhbz2145241 = rhbz2145242
  - rhbz2156093 = rhbz2149223
  - rhbz2156095 = rhbz2149666
  - rhbz2156094 = rhbz2154430


author: Ondrej Dubaj <odubaj@redhat.com> - 1.30-6
changelog:
  - added "padding with zeros" info message (#1913566)
  - do not report disk error as file shrank (#1913569)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.6-2
changelog:
  - Splitted documentation to the doc subpackage
    Resolves: rhbz#1380291
  - Fixed whitespace
  - Dropped obsoleted defattr


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.8-2
changelog:
  - Reverted _module_build macro check which fixes systemtap probes on RHEL-8
    Resolves: rhbz#1579386


author: Dmitrij S. Kryzhevich <krege@land.ru> - 1.17-1
changelog:
  - Update to 1.17.
  - Drop upstream patch as it was... hm... included in upstream.
  - Fix download URL.
  - Drop commented code.
  - Drop defattr tag.


author: Robert Scheck <robert@fedoraproject.org> - 1.7.21-6
changelog:
  - Disabled strip via objcopy to achieve proper -debuginfo package
  - Added patch to fix compiler warnings about implicit fall-through
  - Added patch to fix "ee key too small" error messages during tests
  - Added patch for OpenSSL 3.0 support (#2088363)


author: Jakub Jelen <jjelen@redhat.com> - 7.6-88
changelog:
  - Remove the devel subpackage (#1495181)
  - Adjust build process for recent changes (nsl separated from glibc-headers)


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-4
changelog:
  - Removing build-time dependency on sharutils(rhbz#1587877)
  - Changing git dependency to smaller git-core


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-6
changelog:
  - Resolves: #1715423 - tcpdump pre creates user and groups unconditionally
  - Resolves: #1655622 - CVE-2018-19519 Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.3-2
changelog:
  - Resolves: #1860216 - tcpdump can not parse mptcp options
  - Resolves: #1901635 - ppp decapsulator can be convinced to allocate a large amount of memory
  - Adding tedude test to gating


author: Bojan Smojver <bojan@rexursive com> - 4.4.2-1
changelog:
  - bump up to 4.4.2
  - CVE-2022-27939, CVE-2022-27940, CVE-2022-27941, CVE-2022-27942,
  - CVE-2022-28487, CVE-2022-37047, CVE-2022-37048, CVE-2022-37049


author: Bojan Smojver <bojan@rexursive com> - 4.4.3-3
changelog:
  - CVE-2023-27783 CVE-2023-27784 CVE-2023-27785 CVE-2023-27786
    CVE-2023-27787 CVE-2023-27788 CVE-2023-27789


author: Jan Macku <jamacku@redhat.com> - 6.22.03-1
changelog:
  - Update to tcsh-6.22.03
  - Drop tcsh-6.22.02-avoid-gcc-to-fail.patch                              - applied by upstream
  - Drop tcsh-6.22.02-call-seterror-consistently-and-abort-quickly.patch   - applied by upstream
  - Drop tcsh-6.22.02-avoid-crashing-when-loading-corrupted-history.patch  - applied by upstream


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-69
changelog:
  - Resolves: #1445259 - telnet won't build with latest gcc
  - added note about address resolution in manpage


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-73
changelog:
  - Resolves: #1602711 - Please review important issues found by covscan
  - Resolves: #1637085 - Option -i is missing in telnet in el8 but is available in el7


author: Tao Xu <tao.xt@alibaba-inc.com> - 2.3.3-2
changelog:
  - Enable async SSL mode build for CPU acceleration
  - Fixes for resolv.conf detection and specification


author: Dominic Hopf <dmaphy@fedoraproject.org> - 1.92-2
changelog:
  - Improve requirement listings
  - Fix requirement for python3-psutil on EPEL8
  - Add missing requirement for gtk-update-icon-cache


author: Ding-Yi Chen <dchen@redhat.com> - 1.10.0-1
changelog:
  - Upstream update to 1.10.0
  - Fixes RHBZ #1917603 - terminology-1.10.0 is available
  - Remove BuildRequired elementary-devel because it is merged into efl-devel


author: Sandro Mani <manisandro@gmail.com> - 4.0.0-2
changelog:
  - Make all langpack / script subpackages require tesseract for tessdata dir ownership
  - Fix tesseract-osd requires
  - Fix typo cirilic -> cyrillic


author: Sandro Mani <manisandro@gmail.com> - 4.0.0-5
changelog:
  - Improve subpackage descriptions
  - Make script subpackages own the script directory
  - Bump release to -5


author: Mat Booth <mat.booth@redhat.com> - 6.11-1
changelog:
  - Update to latest upstream release
  - Continue building with maven for now, instead of moving to gradle due to
    rhbz#1467724


author: Christian Krause <chkr@fedoraproject.org> - 3.0.2-1
changelog:
  - Updated to 3.0.2 (BZ #1750167)
  - Updated installed documentation files
  - Added provided man page (adjusted to Fedora's script name "testssl")


author: Parag Nemade <pnemade AT redhat DOT com> - 0.1-20
changelog:
  - Resolves:rh#921852 - Four culmus subpackages are not listed in build require
  - Added BR: and R: for the following packages
  - culmus-hadasim-clm-fonts, culmus-simple-clm-fonts
  - culmus-stamashkenaz-clm-fonts, culmus-stamsefarad-clm-fonts


author: Than Ngo <than@redhat.com> - 9:20200327-19
changelog:
  - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 9:20200406-26.0.1
changelog:
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 build
  - anolis texlive add loongarch64(Yaxuan Liu)


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.2-25
changelog:
  - Fix inconsistent --map-file option spelling in manual (rhbz#2066853)
  - Fix memory corruption in tftpd when filename remapping with macro \x
    is used (rhbz#2066862)


author: Weitao Zhou <zhouwt@linux.alibaba.com> 5.2-26.0.1
changelog:
  - Make configure an order-only prerequisite of aconfig.h.in
  - remove autoreconf in %build to fix parallel build error
  - use extern in header files when declaring global variables for compatible gcc10 build
  - Add doc sub package


author: Robert Scheck <robert@fedoraproject.org> - 3.8-1
changelog:
  - Upgrade to 3.8 (#1902857)
  - Spec file modernization including support for RHEL/CentOS 7
  - Remove perl(Socket6) dependency (thanks to Michal Josef Špaček)


author: Carl George <carl@george.computer> - 2.2.0-3.2020704git5a1c8d8
changelog:
  - Update to latest upstream commit
  - Add patch to use correct shell completion locations
  - Run test suite
  - Add provides for ag and bundled uthash


author: Carl George <carl@george.computer> - 2.2.0^2020704.5a1c8d8-1
changelog:
  - Switch to caret versioning
  - Build against system uthash
  - Add patch for zsh completion of new flags


author: Athmane Madjoudj <athmane@fedoraproject.org> 2.25b-35
changelog:
  - Add patch to fix RHBZ #887451 / CVE-2012-5640
  - Fix fedora logo issue (RHBZ #1114423).
  - Enable PIE flags (RHBZ #955129)
  - Use systemd for post-rotate script (RHBZ #1218259)


author: Jan Grulich <jgrulich@redhat.com> - 1.12.0-10
changelog:
  - Rebuild for xorg-x11-server CVEs
    Resolves: CVE-2022-4283 (bz#2154233)
    Resolves: CVE-2022-46340 (bz#2154220)
    Resolves: CVE-2022-46341 (bz#2154223)
    Resolves: CVE-2022-46342 (bz#2154225)
    Resolves: CVE-2022-46343 (bz#2154227)
    Resolves: CVE-2022-46344 (bz#2154229)


author: Jan Grulich <jgrulich@redhat.com> - 1.12.0-12
changelog:
  - xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation
    Resolves: bz#2167058


author: Jan Grulich <jgrulich@redhat.com> - 1.12.0-15
changelog:
  - xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability
    Resolves: bz#2180305


author: Kaiqiang Wang <wangkaiqiang@inspur.com> - 1.12.0-17
changelog:
  - Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions


author: Petr Pisar <ppisar@redhat.com> - 1.8-1
changelog:
  - 1.8 bump
  - License changed from GPLv2+ to (GPLv3+ and GFDL)
  - Disable printing command failure in POSIX mode


author: Fabian Affolter <mail@fabian-affolter.ch> - 1.0.35-1
changelog:
  - Fix for CVE-2018-16737, CVE-2018-16738 and CVE-2018-16758 
  - Update to new upstream version 1.0.35


author: Petr Šabata <contyk@redhat.com> - 5.0-0.100.b8
changelog:
  - Include current Debian and Gentoo patches
  - Add ATCP, GMCP and OPT102 support
  - This is a big change, bumping the release quite a bit to reflect that


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.1-1
changelog:
  - Update to version 1.11.1 rhbz#2220885
  - Switch to SPDX license identifier and mark license file appropriately
  - Use upstream default config file with minimal changes
  - Log to journal instead of files
  - Run daemon in foreground to remove the need for pidfile tracking


author: Jakub Kadlcik <frostyx@email.cz> 0.6.17-1
changelog:
  - Update releasers.conf (frostyx@email.cz)
  - Make build --verbose autocompletable (nmoumoul@redhat.com)
  - Add support for centpkg (wpoteat@redhat.com)
  - Remove extraneous extra newline (areese@users.noreply.github.com)
  - Add some documentation for tito.builder.SubmoduleAwareBuilder
    (areese999@apple.com)
  - Update based on feedback: 1. Remove PushDir, tito.common.chdir has the same
    functionality so use that instead. 2. Remove useless override of constructor,
    it's just extra noise. (areese999@apple.com)
  - 150 Add support for repos that use submodules. Allow though submodules are a
    contentious topic, this adds a submodule_aware_builder (areese999@apple.com)
  - doc: fix typo tito.props (subpop@users.noreply.github.com)
  - Update fedora releaser in .tito/releasers.conf (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.18-1
changelog:
  - Document fetch_sources option in tito.props (frostyx@email.cz)
  - Rename fetch-sources to fetch_sources in the tito.props config
    (frostyx@email.cz)
  - Adding option to fetch sources (sisi.chlupova@gmail.com)
  - Change the master branch in releasers.conf to rawhide (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.20-1
changelog:
  - Sync repo (in addition to tag) during mead build (nmoumoul@redhat.com)
  - Add 'Building RHEL packages with Tito' as external doc (frostyx@email.cz)
  - Consider the current project git config when releasing to DistGit
    (frostyx@email.cz)
  - Print the problematic binary files (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.21-1
changelog:
  - Properly catch TitoException (frostyx@email.cz)
  - Add documentation for the MockBuilder (frostyx@email.cz)
  - Allow to define mock chroot in tito.props (frostyx@email.cz)
  - Fix recursion error in MockBuilder (frostyx@email.cz)
  - DistGitReleasers: don't nuke external sources with fetch_sources (praiskup@redhat.com)
  - Add installation instructions from PyPI (frostyx@email.cz)
  - Add long_description to setup.py (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.22-1
changelog:
  - Fix python2 urlretrieve import (frostyx@email.cz)
  - Fixed submodule archives concatenation (jerzy.drozdz@jdsieci.pl)
  - Fixed issue #414 (jerzy.drozdz@jdsieci.pl)
  - Fixed issue #413 (jerzy.drozdz@jdsieci.pl)
  - Revert 45d431ad149cb33e2462a990c4c4f29e6bb2bb7e (nmoumoul@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.23-1
changelog:
  - Replace `submodule--helper list` with `git config --get-regexp`
  - do not overwrite packit.yaml and its variants (msuchy@redhat.com)
  - packit: fixing the Fedora build failures (praiskup@redhat.com)
  - Don't upload patches to the lookaside cache (frostyx@email.cz)
  - use spdx license (msuchy@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.24-1
changelog:
  - Will now copy both source files and patch files declared in the spec
  - Fix UpstreamBuilder deprecation warning (#461) (frostyx@email.cz)
  - Fix the setup.py license according to tito.spec (#433) (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz>
changelog:
  - Use rpm.ds instead of deprecated hdr.dsFromHeader (frostyx@email.cz)
  - Support branch aliases in releasers (frostyx@email.cz)
  - Document how to automate bodhi updates (msuchy@redhat.com)
  - Use raw strings for regex patterns (frostyx@email.cz)
  - Allow tito build without .tito directory (frostyx@email.cz)
  - Unify README and index.md (msuchy@redhat.com)
  - Fix PEP8 issues found by runtests.py (frostyx@email.cz)
  - Replace egrep with grep -E (frostyx@email.cz)
  - Don't use --cacheonly on DNF5 (frostyx@email.cz)


author: TI_Eugene <ti.eugene@gmail.com> - 1.0.13-1
changelog:
  - Version bump
  - 'make check-light' implemented (https://github.com/estraier/tkrzw/issues/23)
  - ppc64le temporary disabled


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Release v7
  - Allow tlog-play redirection of stdout
  - Add -i/--interactive option to tlog-rec-session. Allows login
    programs to call tlog-rec-session more transparently.
  - Make in_txt/out_txt fields optional. This handles missing fields
    when reading from Elasticsearch or other backends.


author: Justin Stephenson <jstephen@redhat.com> - 8-1
changelog:
  - Release v8
  - Spec file fixes for EL6
  - Spec file improvements for Debian/Ubuntu pkg-config
  - Tlog-play improve authentication options
  - Handle piped in I/O from stdin and improve the main recording transfer exit
    condition.
  - Use empty string on hostname resolution failure


author: Justin Stephenson <jstephen@redhat.com> - 9-1
changelog:
  - Release v9
  - Add libutempter support
  - Require journal match filter
  - Add file reader match functionality
  - Restore cursor visibility and color attributes on tlog-play exit
  - Add "time" real clock timestamp message field
  - Various upstream CI improvements


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Fire SIGCHLD after utempter_add_record since it probably eats it.
  - Correct suse rpmbuild
  - Update debbuild for travis CI


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Release v12
  - Prevent infinite transfer loop on GDM login.
  - tlog-play: add journal namespace support.
  - tlitest: extend delay for limit-action delay test.


author: Justin Stephenson <jstephen@redhat.com> - 12.1
changelog:
  - Exit transfer loop when output fd is closed
  - Revert "Prevent infinite transfer loop on GDM login"


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.5-1
changelog:
  - New upstream release 2.5 - fixes rhbz #1449666
  - https://raw.githubusercontent.com/tmux/tmux/2.5/CHANGES


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.5-4
changelog:
  - Fixes rhbz #1476851 tmux bell-action other not working
  - Fixes rhbz #1476892 tmux update in F26 broke tmuxinator


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-5.1
changelog:
  - Resolves: RHEL-12542 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)
  - Update source to include the CVE fixes
  - Update patch command


author: Peng Wu <pwu@redhat.com> - 0.6.0-37
changelog:
  - Update BuildRequires to mariadb-connector-c-devel
  - Add tomoe-0.6.0-fixes-set-parse-error.patch to fix compile


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.3-2
changelog:
  - Update to 0.0.99.3
  - BuildRequire only systemd-rpm-macros as recommended by the Fedora packaging
    guidelines
  - Update the Summary to match upstream
  - Update the URL to point to the website
  Resolves: #2047290


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.9-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-9/10155
  - security fixes for bz#2248562 & bz#2248563
  - add --enable-gpl build options to enable PoW as DDoS protection bz#2247828


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.10-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-10/10536
  - security fixes for bz#2253846 & bz#2211726 & bz#2253847


author: Honggang Li <honli@redhat.com> - 4.2.10-25
changelog:
  - Rebase to latest Fedora release
  - Fix file conflicts in torque-devel multilib packages
  - Resolve: bz1853167


author: Michal Schmidt <mschmidt@redhat.com> - 1.3.9-1
changelog:
  - Upstream release 1.3.9.
  - Add fixes for build errors with OpenSSL 1.1.
  - Add fixes for NULL cipher context use in seal/unseal.
  - spec file modernization.


author: Javier Martinez Canillas <javierm@redhat.com> - 2.0.0-1
changelog:
  - Download the distributed tarball instead of the source code tarball
  - Update URLs to point to the new project location
  - Update to 2.0.0 release


author: Jerry Snitselaar <jsnitsel@redhat.com> - 4.1.1-2
changelog:
  - Fix ESYS_TR hierarchy transition.
  - Refactor fix_esys_hierarchies to return actual TSS2_RC return code.
  - tpm2_alg_util.c: fix a bug where the string rsa3072 wasn't being parsed.
  - tpm2_create.c: Fix an issue where userwithauth attr cleared if policy specified.
  - tpm2_hierarchycontrol: Fix bug where hierarchycontrol operation failed silently.
  - tpm2_nvdefine.c: Fix error reporting message.
  - tpm2_policyor: Fix silent failure for invalid/unspecified policy digest alg.
  resolves: rhbz#1854774


author: Jerry Snitselaar <jsnitsel@redhat.com> - 4.1.1-3
changelog:
  - Fix resource leak.
  - Fix to restrict policy digest size.
  - Fix incompatible pointer cast.
  - Fix error message in files_load_##name
  - Fix issue where execution couldn't reach function return.
  resolves: rhbz#1920821


author: chench <chench@hygon.cn> -4.1.1-5.0.2
changelog:
  - Add gm support for all commands.
  - Add the gm API for tools library.
  - Add commands line arguments to support gm in some commands


author: chench <chench@hygon.cn> -4.1.1-5.0.3
changelog:
  - Add gm test case for all commands.
  - This patch tests all commands for gm support. Every script test a class of commands


author: Jerry Snitselaar <jsnitsel@redhat.com> - 2.3.2-3
changelog:
  - Add tss user if doesn't exist.
  - Update exported symbols map for libtss2-mu
  - esys: Check object handle node before calling compute_session_value
  - esys: fix resource name calculation
  - esys: fix Esys_StartAuthSession called with optional params
  - esys: fix keysize of ECC curve TPM2_ECC_NISTP224
  - esys: fixup compute_encrypted_salt error handling
  - esys: use memcmp in byte array comparison
  - esys: zero out ctx->salt after startAuthSession_finish
  - mu: Remove use of VLAs for Marshalling TPML types
  - return proper error code on memory allocation failure
  - sys: match counter variable type for cmdAuthsArray->count
  - tcti-device: getPollHandles should allow num_handles query
  - tctildr: fix segmentation fault if name_conf is too big
  resolves: rhbz#1879071 rhbz#1855180


author: Jerry Snitselaar <jsnitsel@redhat.com> - 2.3.2-4
changelog:
  - Fix hmac calculation for tpm2_clear command.
  - Remove private implementation of strndup.
  resolves: rhbz#1920825 rhbz#1940861


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-2
changelog:
  - Update to 3.1.0.rc, based on earlier tracker3-miners packaging
  - Obsolete separate tracker3-miners package


author: John Zaitseff <J.Zaitseff@zap.org.au> - 7.15-1
changelog:
  - Updated the RPM package for a new release of Star Traders: version 7.15.
  - Added a dependency on make, as per current packaging guidelines.


author: John Zaitseff <J.Zaitseff@zap.org.au> - 7.16-1
changelog:
  - Updated the RPM package for a new release of Star Traders: version 7.16.
  - Added an AppStream-conforming metadata file.


author: John Zaitseff <J.Zaitseff@zap.org.au> - 7.18-1
changelog:
  - Updated the RPM package for a new release of Star Traders: version 7.18.
  - Added verification of upstream signature.


author: John Zaitseff <J.Zaitseff@zap.org.au> - 7.19-1
changelog:
  - Updated the RPM package for a new release of Star Traders: version 7.19.
  - Update rules for AppStream metainfo and desktop files.


author: Jered Floyd <jered@redhat.com> 9.1.3-1
changelog:
  - Update to 9.1.3, resolves CVE-2022-25763, CVE-2022-31779, CVE-2021-37150,
    CVE-2022-28129, CVE-2022-31780
  - Resolve glibc 2.36 (f37) header incompatibility that caused FTBFS RHBZ#2112282


author: Kamil Dudka <kdudka@redhat.com> - 1.7.0-11
changelog:
  - do not escape UTF-8 chars in file names by default in UTF-8 locale (#1480778)
  - modernize spec file (Group, BuildRoot, autosetup, clean, defattr)


author: Jerry Snitselaar <jsnitsel@redhat.com> - 0.3.15-1
changelog:
  - Rebase to 0.3.15
  - Fix CVE-2020-24330 CVE-2020-24331 CVE-2020-24332
  resolves: rhbz#1725782 rhbz#1877517 rhbz#1882402 rhbz#1882414


author: Merlin Mathesius <mmathesi@redhat.com> - 1027-1
changelog:
  - Version bump. Now supported for all architectures.
  - Generate man pages since they are no longer included in source archive.


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1234-5
changelog:
  - Move header files to ibmtss directory.
  - Check return value of TSS_Hash_Generate.
  resolves: rhbz#1636245


author: Leah Leshchinsky <lleshchi@redhat.com> - 0.17-2
changelog:
  - Fix typo for variable parm
  - Handle get_policy_and_rtprio exceptions
  - Remove finally block in get_policy_and_rtprio
  Resolves: rhbz#2049746


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.18.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2003833
    - profiles: fix improper parsing of include directive
      resolves: rhbz#2017924
    - disk: added support for the nvme
      resolves: rhbz#1854816
    - cpu: extended cstate force_latency syntax to allow skipping zero latency
      resolves: rhbz#2002744
    - net: added support for the txqueuelen
      resolves: rhbz#2015044
    - bootloader: on s390(x) remove TuneD variables from the BLS
      resolves: rhbz#1978786
    - daemon: don't do full rollback on systemd failure
      resolves: rhbz#2011459


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.18.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#2003833
    - tuned-gui: fixed creation of new profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.19.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2057602
    - fixed parsing of inline comments
      resolves: rhbz#2060138
    - added support for quotes in isolated_cores specification
      resolves: rhbz#1891036
    - recommend: preset balanced profile for notebook, laptop or portable if
      syspurpose is not defined
      resolves: rhbz#1896717


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2133814
    - systemd: relax polkit requirement
      resolves: rhbz#2065591
    - sysvinit: fixed path
    - plugin_cpu: added support for pm_qos_resume_latency_us
    - do not exit on duplicate config lines
      resolves: rhbz#2071418
    - profiles: new cpu-partitioning-powersave profile
    - profiles: new profile for AWS EC2
    - API: add support for moving devices between instances
    - D-Bus: send tracebacks through D-Bus only in debug mode
    - Makefile: added fix for python-3.12
    - throughput-performance: set net.core.somaxconn to at least 2048
      resolves: rhbz#1998310
    - plugin_scheduler: do not leak FDs from the perf
      resolves: rhbz#2080227
    - plugin_cpu: added support for intel_pstate scaling driver
    - added support for the API access through the Unix Domain Socket


author: zhangbinchen <zhangbinchen@openanolis.org> - 2.20.0-1.0.1
changelog:
  - cherry-pick [38e4b97]
  - Don't require syspurpose for Anolis OS
  - Turn on balance mode for Anolis OS


author: Jeremy Cline <jcline@redhat.com> - 1.12.2-3
changelog:
  - Bump the obsoletes so the upgrade path from F29 works
  - Include the manpage since the dep chain for docs building is broken


author: Wim Taymans <wtaymans@redhat.com> - 0.3.13-12
changelog:
  - Add explicit Requires for the -libs package.
  - Do NVR bump to move twolame-devel from buildroot to CRB
  - Resolves: rhbz#1843275


author: Patsy Griffin <patsy@redhat.com> - 2022b-1
changelog:
  - Rebase to tzdata-2022b
    - Chile transitions to DST on 2022-09-11, not 2022-09-04
    - 'make install' now defaults LOCALTIME to Factory rather than GMT
    - More zones that are the same since 1970 have been moved to backzone.
    - Include patch for awk workaround.


author: Patsy Griffin <patsy@redhat.com> - 2022c-1
changelog:
  - Rebase to tzdata-2022c - supersedes tzdata-2022b
    - Add a work-around for an awk bug in FreeBSD, macOS, etc.
    - Improve tzselect with respect to intercontinental Zones.


author: Patsy Griffin <patsy@redhat.com> - 2022f-1
changelog:
  - Rebase to tzdata-2022f
    - Mexico will stop observing DST except near the US border.
    - Chihuahua moved to -06 year round starting on 2022-10-30.
    - Fiji no longer observes DST.


author: Patsy Griffin <patsy@redhat.com> - 2022g-1
changelog:
  - Rebase to tzdata-2022g
    - The northern edge of the Mexican state of Chihuahua will
      change time zone to agree with nearby US locations on
      2022-11-30.
    - Added a new Zone America/Ciudad_Juarez that splits from
      America/Ojinaga.


author: Patsy Griffin <patsy@redhat.com> - 2023a-1
changelog:
  - Rebase to tzdata-2023a
    - Egypt reintroduced DST, from April through October.
    - Morocco springs forward April 23, not April 30.
    - Palestine delayed the start of DST this year.


author: Jindrich Novy <jnovy@redhat.com> - 0.2.5-2
changelog:
  - New rebase https://github.com/containers/udica/releases/tag/v0.2.5 (#1995041)
  - Replace capability dictionary with str.lower()
  - Enable udica to generate policies with fifo class
  - Sort container inspect data before processing
  - Update templates to work properly with new cil parser
  - Related: #1934415


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 4.11-13
changelog:
  - Add BuildRequires on gcc-c++
  - Remove Group tags
  - Don't clear the buildroot in the install section
  - Switch to %ldconfig_scriptlets


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 0.35-5
changelog:
  - Change URL to https
  - Get the tarball directly from upstream rather than from Ubuntu
  - Remove redundant "-n %{name}-%{version}" from %setup
  - Use %py3_build and %py3_install macros
  - Add Python 3.6 to check-requirements


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 0.35-6
changelog:
  - Change permissions of the *.rules files from 0640 to 0644
  - Change permissions of the before.init and after.init hooks from 0640 to 0755
  - Don't prepend /usr/bin/env to sys.executable, which is always an absolute path


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.14.0.0-1.20190401gitac96d055
changelog:
  - New version, switched to git snapshot
  - Conditionalized wireshark support
  - Disabled wireshark support, it's currently broken (upstream ticket #268)
  - Disabled tests, it's currently broken (upstream ticket #267)
  - Dropped boost169 patch (not needed)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.14.0.0-2.201904023gitc52f3f41
changelog:
  - New git snapshot
  - Added python2-numpy build requirement
  - Re-enabled tests for upstream to easily reproduce the problem


author: Nils Philippsen <nils@redhat.com> - 1.2.1-3
changelog:
  - drop requirements on cmake, pkgconfig and rather own the directories for the
    files augmenting these packages


author: Andreas Schneider <asn@redhat.com> - 1.2.2-1
changelog:
  - Update to version 1.2.2:
    * Added support for fork'ed and then exec'ed processes
    * Added support for Alpha


author: Andreas Schneider <asn@redhat.com> - 1.2.4-1
changelog:
  - Update to version 1.2.4
    * Added deadlock workaround for glibc < 2.24
    * Fixed a possible deadlock bug if uid_wrapper is turned off
    * Logging is always turned on now
    * Fixed a memory leak
    * Limited number of groups during fork+exec


author: Kamil Dudka <kdudka@redhat.com> - 2.17-5
changelog:
  - do not update currency.units from network during build
  - units_cur: validate rate data from server (#1598913)


author: Jakub Martisko <jamartis@redhat.com> - 6.0-38
changelog:
  - Fix CVE-2018-1000035 - heap based buffer overflow when opening
    password protected files.
    Resolves: 1537043


author: Jakub Martisko <jamartis@redhat.com> - 6.0-40
changelog:
  - fix several possibly unterminated strings
    When copying to OEM_CP and ISO_CP strings, the string could end unterminated
    (stncpy does not append '\0').
  - Related: #1602721


author: Chris Adams <linux@cmadams.net> - 1.2.8-0.8.20171022svn14722
changelog:
  - update to new upstream snapshot
  - fix SSL to build against newer OpenSSL (works with older too)
  - update default config to have Fedora SSL path
  - update systemd service file to restart on failure
  - sync Fedora and EPEL SRPMS, drop EPEL 5


author: Chris Adams <linux@cmadams.net> - 1.2.8-0.13.20171022svn14722
changelog:
  - clean up spec file and remove conditionals - spec file is for F28+
  - remove tcp-wrappers (obsolete, use iptables to control access)
  - add gcc BR for future Fedora
  - switch to private user, fix default config parse (BZ 1543142)
  - switch to foreground for systemd unit


author: Attila Lakatos <alakatos@redhat.com> - 0.7.8-4
changelog:
  - RHEL 8.3.0 ERRATUM
  - Spec file clean up
  - Rebase to 0.7.8
  Resolves: rhbz#1738590
  - Added selinux subpackage
  Resolves: rhbz#1683567
  - Added notifier subpackage
  - Installing /etc/usbguard/rules.d/
  Resolves: rhbz#1667395
  - Fixed sigwaitinfo handling
  Resolves: rhbz#1835210


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-5
changelog:
  - RHEL 8.3.0 ERRATUM
  - Use old-fasioned forking style in unit file
  Resolves: rhbz#1846885
  - Allow usbguard to read /proc/cpuinfo
  Resolves: rhbz#1847870
  - Removed notifier's Requires for usbguard-devel
  Resolves: rhbz#1667395
  - Allow usbguard to read /dev/urandom
  Resolves: rhbz#1848618


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-6
changelog:
  - RHEL 8.3.0 ERRATUM
  - Removed execstack from .spec
  - Removed AuthorizedDefault=wired from the usbguard
  Resolves: rhbz#1852539
  - Missing error message on bad configuration
  Resolves: rhbz#1857299
  - /etc/usbguard/usbguard-daemon.conf file does not contain all default options
  Resolves: rhbz#1862907


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-1
changelog:
  - Rebase to 1.0.0
  Resolves: rhbz#1887448
  - Filtering rules by attribute
  Resolves: rhbz#1873953
  - Change device policy of multiple devices using rule instead of ID
  Resolves: rhbz#1852568


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-8
changelog:
  - change usbguard icon injection
  - fix DSP module definition in spec file
  Resolves: rhbz#2014441
  - add execstack to spec
  - remove IPAddressDeny from usbguard service
  Resolves: rhbz#1929364
  - fix file conflict when installing usbguard on rhel
  Resolves: rhbz#1963271
  - fix IPC access control files override
  Resolves: rhbz#2004511
  - validate ACL permission existence
  Resolves: rhbz#2005020
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2000000


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-8.2
changelog:
  - Fix unauthorized access via D-bus
  - Fix memory leak on D-bus connection failure
  Resolves: rhbz#2127848


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Rebase to latest upstream: 0.13.0
  - Keeps usbredirserver binary (removed upstream)
    Related: rhbz#2135760


author: Victor Toso <victortoso@redhat.com> - 0.13.0-2
changelog:
  - Fixes 100% CPU usage when usbredirect used as TCP server
    Related: rhbz#2157520
  - Fixes USB redirection of identical devices
    Resolves: rhbz#2157520


author: Miloslav Trmač <mitr@redhat.com> - 1.111-10
changelog:
  - Fix a FBFS with  -Werror=format-security
    Resolves #1444750
  - Fix inconsistent dates in %changelog


author: Jiri Kucera <jkucera@redhat.com> - 1.112-2
changelog:
  - Dropped need to run autotools
  - <sys/sysmacros.h> must be now included manually
    Resolves #1611752
  - Fixed bad FSF address


author: Jiri Kucera <jkucera@redhat.com> - 1.113-2
changelog:
  - Fix typo in pam-panel-icon manpage
    Do not use deprecated selinux API
    Do not use fexecve
    Resolves: #1775931


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.10.1-3
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz #1853168)
  - Added CI gating tests (bz #1682555)
  - Resolves: bz #1682555, #1853168


author: James Antill <james@fedoraproject.org> - 1.0.4-20
changelog:
  - Move doc/ustr-devel-<version> to doc/ustr-devel. BZ 993940.
  - Use -fgnu89-inline workaround for gcc5.


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> - 2.3.6-1
changelog:
  - update to 2.3.6
  - new upstream location
  - use cmake and run tests
  - switch main package to archful per
    https://docs.fedoraproject.org/en-US/packaging-guidelines/#_do_not_use_noarch


author: Mark Wielaard <mjw@redhat.com> - 3.18.1-5
changelog:
  - Add valgrind-3.18.1-dhat-tests-copy.patch
  - Add valgrind-3.18.1-s390x-EXRL.patch
  - Add valgrind-3.18.1-ppc64-lxsibzx-lxsihzx.patch
  - Add valgrind-3.18.1-ppc-pstq.patch
  - Add valgrind-3.18.1-ppc-pstq-tests.patch
  - Add valgrind-3.18.1-gdbserver_tests-hwcap.patch
  - Add valgrind-3.18.1-rust-v0-demangle.patch
  - Add valgrind-3.18.1-arm64-doubleword-cas.patch
  - Add valgrind-3.18.1-arm64-ldaxp-stlxp.patch
  - Add valgrind-3.18.1-arm64-atomic-align.patch
  - Add valgrind-3.18.1-amd64-more-spec-rules.patch
  - Add valgrind-3.18.1-condvar.patch
  - Add valgrind-3.18.1-demangle-namespace.patch


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.41-14
changelog:
  - Integrated the vdo to lvm conversion tool into the vdo management script
    and modified the tool itself to correctly convert the UDS index so that
    dedupe information is not lost by conversion.
  - Resolves: rhbz#1928284


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.62-14
changelog:
  - Removed extraneous fields from the super block of a converted index.
  - Resolves: rhbz#1965546
  - Added a parameter to the lvm conversion tool to specify the amount of
    space to free up.
  - Resolves: rhbz#1966827
  - Fixed calculation of the number of expiring chapters in a converted
    index.
  - Resolves: rhbz#1975546


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.74-14
changelog:
  - Renamed vdo2LVM to vdopreparelvm and moved its installation location to
    /usr/libexec so that it is not in common default paths as this utility is
    intended to be called from LVM, not directly by users.
  - Related: rhbz#1986930


author: - Andy Walsh <awalsh@redhat.com> - 6.2.6.3-14
changelog:
  - Added a check to vdopreparelvm to determine whether it has already been
    converted.
  - Resolves: rhbz#2017843


author: - Andy Walsh <awalsh@redhat.com> - 6.2.6.7-14
changelog:
  - Fixed bugs in the vdopreparelvm check to determine whether a device has
    already been converted.
  - Resolves: rhbz#2017843
  - Fixed an issue in the vdo-by-dev tool which could result in a failure to
    start vdo devices when some devices in the vdo config file do not exist.
  - Resolves: rhbz#2022154


author: - Andy Walsh <awalsh@redhat.com> - 6.2.6.14-14
changelog:
  - Added a tool to make LVMVDO pools read/write so that support and
    debugging tools may access them.
  - Resolves: rhbz#1999640


author: - Andy Walsh <awalsh@redhat.com> - 6.2.7.17-14
changelog:
  - Fixed excessive vdo2lvm "Retrying" messages.
  - Resolves: rhbz#1986595
  - Fixed a pylint 2+ complaint in the vdo scripts.
  - Resolves: rhbz#2072131
  - Updated vdo script documentation and help text for the uuid option.
  - Resolves: rhbz#2089957


author: gil cattaneo <puntogil@libero.it> 0:1.7-18
changelog:
  - fix FTBFS rhbz#1240035
  - fix BR list, change log4j with log4j12
  - set javac source/target to 1.6
  - disable Java8doc doclint
  - remove werken-xpath Import/Export refences in manifest file
  - resolve some rpmlint problems
  - remove zero-length file
  - introduce license macro


author: Scott Tsai scottt.tw@gmail.com - 3.922-5
changelog:
  - Remove duplicate copies of 'examples' in /usr/share/doc
  - https://bugzilla.redhat.com/show_bug.cgi?id=1592057#c3


author: Martin Gansser <martinkg@fedoraproject.org> - 1.1-3.20170830gitafc8ea9
changelog:
  - change license tag to GPLv2
  - fix warning _FORTIFY_SOURCE requires compiling with optimization (-O)


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-18
changelog:
  - CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
  - CVE-2021-4192 vim: vulnerable to Use After Free


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-18
changelog:
  - CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
  - CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-18
changelog:
  - fix test suite after fix for CVE-2022-0318
  - CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-18
changelog:
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
  - CVE-2022-0413 vim: use after free in src/ex_cmds.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.0.1763-19.3
changelog:
  - CVE-2022-1785 vim: Out-of-bounds Write
  - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
  - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c


author: Marek Kasik <mkasik@redhat.com> - 3.22.0-22
changelog:
  - Rebuild due to new version of FreeRDP
  - Fix an issue when RDP connection shows just black screen
  - Resolves: #1839744


author: Daniel Berteaud <daniel@firewall-services.com> 0.2.19-1
changelog:
  - Add an exclusive lock to be sure we correctly count the number of running
    backups This also ensure only one LVM snapshot is created at a time, which is
    a good thing to prevent overloading the system (daniel@firewall-services.com)


author: Daniel Berteaud <daniel@firewall-services.com> 0.2.22-1
changelog:
  - Support pigz compression (daniel@firewall-services.com)
  - Don't try to detect backing LVM volume is snapshot is disabled
    (daniel@firewall-services.com)


author: Daniel Berteaud <daniel@firewall-services.com> 0.2.23-1
changelog:
  - Remove redundant debug statement (daniel@firewall-services.com)
  - Fix $glock scope (daniel@firewall-services.com)
  - Fix tito releasers (daniel@firewall-services.com)


author: Jonathon Jongsma <jjongsma@redhat.com> - 3.2.0-13
changelog:
  - cli: --filesystem: add binary.sandbox.mode and source.socket (rhbz#2045932)
  - nodedev: Improve error with unknown address strings (rhbz#2017840)


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.0.0-1
changelog:
  - Rebased to virt-manager-4.0.0 (rhbz#2100525)
  - virt-install: add support for qemu-vdagent channel (rhbz#2060724)
  - virt-manager: add support for qemu-vdagent channel (rhbz#2060724)


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-1
changelog:
  - Rebased to virt-manager-4.1.0 (rhbz#2135791)
  - cloner: Sync <uuid> and <sysinfo> system uuid (rhbz#2038040)


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-3
changelog:
  - progress: Fix showing correct final total (rhbz#2156247)
  - virtinstall: Fix the allocating disk size printed by the progress bar (rhbz#2156247)
  - virtinstall: Hide total_size in the progress bar if it doesn't need (rhbz#2156247)


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-4
changelog:
  - virt-install: Recommend '--boot uefi' (rhbz#2112154)
  - virt-install: Document Secure Boot setups (rhbz#2112154)


author: Pino Toscano <ptoscano@redhat.com> - 1:1.42.0-4
changelog:
  - Copy %description also for the source, so tools are less confused
    about it.
  - Fix the "extra" addition to the version to refer to rhel.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.8-37
changelog:
  - Fix "Input/output error" in journal
    resolves: rhbz#2149139
  - Store the patches in an upstream branch in git.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-11
changelog:
  - v2v: windows: Allow qxldod.inf as synonym for qxl.inf
    resolves: rhbz#1926102
  - v2v: Increase required free space in Windows to 100 MB
    resolves: rhbz#1949147
  - docs: Document how to remove "Out of HTTP sessions" limit
  - v2v: Disable readahead for VMware curl sources too
    resolves: rhbz#1848862
  - v2v: Allow output to block devices
    resolves: rhbz#1868690
  - docs: -o openstack: Clarify name of file containing OpenStack auth
    resolves: rhbz#1871754
  - docs: UEFI guest conversion to -o openstack is supported
    resolves: rhbz#1872100
  - v2v: Turn pnp_wait.exe warning into a debug message
    resolves: rhbz#1903960
  - v2v: windows: Fix schtasks /SD parameter
    resolves: rhbz#1895323


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-13
changelog:
  - docs: Fix version of virt-v2v which added UEFI for OpenStack
    related: rhbz#1872100
  - v2v: Increase Linux minimum root filesystem to 100 MB
    resolves: rhbz#1764569


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-17
changelog:
  - Correct regexps used to fix schtasks command
  - Fix backing file specified without backing format
    resolves: rhbz#2023279, rhbz#2025769


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-21
changelog:
  - Fix assertion failure when parsing OVA dir with trailing slash
    resolves: rhbz#2028823
  - For -o rhv-upload wait for VM creation task
    resolves: rhbz#1985827
  - If listing RPM applications fails, rebuild DB and retry (2089623)
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2102720


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.0-22
changelog:
  - RHEL 8: If setfiles fails fall back to autorelabel
    resolves: rhbz#XXX
  - Reapply patches since we are using git format-patch --submodule=diff


author: Uri Lublin <uril@redhat.com> - 10.0-3
changelog:
  - Show OS-ID when running 'remote-viewer -V'
    Resolves: rhbz#1953282
  - Clear auth entry fields
    Resolves: rhbz#1953933


author: Daniel P. Berrangé <berrange@redhat.com> - 11.0-1
changelog:
  - Rebase to 11.0 release
  - Add missing dep on libvirt-client for bash completion
  - Resolves: rhbz#2028604, rhbz#2000528


author: Richard W.M. Jones <rjones@redhat.com> - 1.18-8
changelog:
  - Add support for Nutanix AHV
    resolves: rhbz#1756381
  - Add all patches since 1.18 was released, up to 1.20 and beyond.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.1.0-0.27.rc3
changelog:
  - Update to version 2.1.0-rc3
  - Drop patches accepted upstream
  - Add new patches (the PRs have been accepted upstream)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.3.2-1
changelog:
  - Update to version 3.3.2
  - Drop patches voms-clients-java-use-a-more-sensible-timeout.patch and
    voms-clients-java-change-default-proxy-cert-key-length-to-2048-bits.patch


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.1.0-0.19.rc1
changelog:
  - Update to version 2.1.0-rc1
  - Drop patches accepted upstream:
    voms-nid-defined.patch, voms-gssapi-header.patch and voms-wsdl2h.patch
  - Use systemd unit file from source distribution


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.1.7-5
changelog:
  - Build using mariadb-connector-c for Fedora 28+
  - EPEL 5 End-Of-Life specfile clean-up
    - Remove Group and BuildRoot tags
    - Don't clear the buildroot in the install section
    - Remove the clean section


author: James Hennessy <jphxxxx@gmail.com>
changelog:
  - Fixed issue where vpnc-script is using resolvconf on systems where "resolve" isn't enabled in /etc/nsswitch.


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-32
changelog:
  - Removed a hint about the ftp_home_dir SELinux boolean from the config file
  - Resolves: rhbz#1623424


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-34
changelog:
  - Enable support for wide-character strings in logs
  - Replace unprintables with HEX code, not question marks
  - Resolves: rhbz#1947900


author: Orion Poplawski <orion@nwra.com> - 9.0.1-1
changelog:
  - Update to 9.0.1
  - Disable OSMesa - conflicts with X support
  - Build against Fedora gl2ps, libharu, utf8cpp
  - Drop python3-vtk-qt packages
  - No longer ship compiled examples
  - Install jar file into /usr/share/java
  - Fix JNI install location
  - Drop Qt4 build option


author: Valerij Maljulin <vmaljuli@redhat.com> - 1.1.7-1
changelog:
  - Support for multiple LDAP queries was added
  - Calling ``start`` for the ``stomp.py`` connection was removed as it was deprecated
  - ``scenario`` field was added to the database


author: Lukas Holecek <hluk@email.cz> - 1.3.0-1
changelog:
  - A simpler permission configuration can be now used. New option
    ``PERMISSIONS`` uses glob expressions instead of a regular expression to
    verify the user is allowed to waive a test case. The configuration can be
    listed with :http:get:`/api/v1.0/permissions`. Additional GET parameter
    ``testcase`` can be used to filter the list by matching test case.
    ``PERMISSION_MAPPING`` is deprecated but still works if the new option is not
    defined.
  - Fixes possible disconnecting issue with older stomp.py library
    (https://github.com/jasonrbriggs/stomp.py/issues/323).


author: Lukas Holecek <hluk@email.cz> - 1.4.0-1
changelog:
  - On an authentication error, waiverdb-cli will now print the actual error
    message instead of a JSONDecodeError exception.
  - Documentation has been updated and moved to: https://waiverdb.readthedocs.io


author: Benjamin A. Beasley <code@musicinmybrain.net> - 6.0.4-12
changelog:
  - Explicitly set most Makefile variables
  - Moves the documentation into the standard location
  - Enables rebuilding localized man pages etc.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.2-17
changelog:
  - Change URLs from HTTP to HTTPS
  - Add source file signature verification
  - Use %make_build and %make_install macros
  - Reformatting and minor changes for personal style preference
  - Fix man page glob
  - Use less broad globs
  - Add ABOUT-NLS, BACKLOG, and THANKS as %doc files
  - Rebuild configure script at build time
  - Add a %check section and run the tests
  - Add ncurses-devel BR for termcap/curses support
  - Add missing BR on gcc
  - Rebuild man pages in RPM build
  - Properly install license file (COPYING)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.2-18
changelog:
  - Improve summary and description text
  - Build HTML and PDF versions of the documentation
  - Add Latex2e to License field


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 5-1
changelog:
  - switch to dot-prefixed Aliases
  - order Aliases for compatibility with older Apache releases
  - enable webfonts
  - enable symlinks in %{_webassetdir} and %{_jsdir}
  - re-enable httpd subpackage


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.38.5-1.4
changelog:
  - Add patch for CVE-2023-28204
    Resolves: #2209744
  - Add patch for CVE-2023-32373
    Resolves: #2209727


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.0.2
changelog:
  - Update to 0.0.2
  - Install webp-pixbuf.thumbnailer
  - Remove extra license text file, now bundled in the release


author: Wolfgang Stöggl <c72578@yahoo.de> - 0.8.2-1
changelog:
  - New upstream version
  - Drop patches (fixed upstream):
    websocketpp-0.8.1-boost_1.70.patch
    websocketpp-0.8.1-fix_CMakeLists.txt_version_number.patch


author: Michel Alexandre Salim <salimma@fedoraproject.org> 3.4-7
changelog:
  - Fix test compilation
  - build tests with -fPIC
  - install test dependency on locale data
  - disable failing tests


author: gil cattaneo <puntogil@libero.it> 31-4
changelog:
  - remove enforcer plugin support
  - related to rhbz#1308237,1308238
  - use BRs mvn()-like
  - introduce license macro


author: Brian C. Lane <bcl@redhat.com> - 35.5-1
changelog:
  - New release: 35.5 (bcl)
    Resolves: rhbz#2052604
  - docs: Explain how to undo blueprints delete (bcl)
  - test: server status no longer returns devel (bcl)
  - Use GetFrozenBlueprintsTOML for blueprints freeze save (bcl)
  - Add a test for float uid/gid in frozen blueprint (bcl)
  - Use GetBlueprintsTOML for blueprints save (bcl)
  - test: Add a test for float uid/gid in saved blueprint (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 (49699333+dependabot[bot])
  - tests: trigger on push to main (jrusz)
  - build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - ci: add keystore for sonarqube (jrusz)
  - spec: Switch to using %gobuild macro on Fedora (bcl)
  - ci: change workflow name (jrusz)
  - ci: add gitlab-ci and sonarqube (jrusz)
  - doc: fix example links from the README (tdecacqu)
  - build(deps): bump actions/checkout from 2.3.4 to 2.4.0 (49699333+dependabot[bot])
  - ci: Enable Coverity Scan tool (atodorov)


author: Brian C. Lane <bcl@redhat.com> - 35.9-1
changelog:
  - Copy rhel-88.json test repository from osbuild-composer
  - Update osbuild-composer test repositories from osbuild-composer
  - New release: 35.9 (bcl)
    Resolves: rhbz#2168666
  - tests: Replace os.MkdirTemp with t.TempDir (bcl)
  - blueprint save: Allow overriding bad blueprint names (bcl)
  - tests: Clean up checking err in tests (bcl)
  - composer-cli: Implement blueprints diff (bcl)
  - saveBlueprint: Return the filename to the caller (bcl)
  - composer-cli: Add tests for using --commit with old servers (bcl)
  - weldr: Return error about the blueprints change route (bcl)
  - weldr: Save the http status code as part of APIResponse (bcl)
  - Add --commit support to blueprints save (bcl)
  - Add --commit to blueprints show (bcl)
  - gitleaks: Exclude the test password used in tests (bcl)
  - ci: add tags to AWS instances (tlavocat)
  - Update github.com/BurntSushi/toml to 1.2.1
  - Update github.com/stretchr/testify to 1.8.1
  - Update bump github.com/spf13/cobra to 1.6.1
  - New release: 35.8 (bcl)
  - completion: Remove providers from bash completion script (bcl)
  - completion: Filter out new headers from compose list (bcl)
  - docs: Remove unneeded Long descriptions (bcl)
  - docs: Use a custom help template (bcl)
  - docs: Add more command documentation (bcl)
  - cmdline: Add package glob support to modules list command (bcl)
  - workflow: Add govulncheck on go v1.18 (bcl)
  - tests: Update to use golangci-lint 1.49.0 (bcl)
  - New release: 35.7 (bcl)
  - spec: Move %gometa macro above %gourl (bcl)
  - weldr: When starting a compose pass size as bytes, not MiB (bcl)
  - tests: Use correct size value in bytes for test (bcl)
  - workflow: Add Go 1.18 to text matrix (bcl)
  - Replace deprecated ioutil functions (bcl)
  - New release: 35.6 (bcl)
  - tests: Update tests for osbuild-composer changes (bcl)
  - CMD: Compose status format (eloy.coto)
  - CMD: Compose list format (eloy.coto)
  - tests: Update tests to check for JSON list output (bcl)
  - composer-cli: Change JSON output to be a list of objects (bcl)
  - weldr: Simplify the old ComposeLog, etc. functions (bcl)
  - composer-cli: Add --filename to blueprints freeze save command (bcl)
  - composer-cli: Add --filename to blueprints save command (bcl)
  - composer-cli: Add --filename to compose logs command (bcl)
  - composer-cli: Add --filename to compose image command (bcl)
  - composer-cli: Add --filename to compose metadata command (bcl)
  - composer-cli: Add --filename to compose results command (bcl)
  - weldr: Add saving to a new filename to GetFilePath function (bcl)
  - github: Fix issue with codecov and forced pushes in PRs (bcl)
  - Use golangci-lint 1.45.2 in workflow (bcl)
  - Run workflow tests for go 1.16.x and 1.17.x (bcl)
  - Move go.mod to go 1.16 (bcl)
  - workflows/trigger-gitlab: run Gitlab CI in new image-builder project (jrusz)
  - Update GitHub actions/setup-go to 3
  - Update GitHub actions/checkout to 3


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 1.19.5-11.0.1
changelog:
  - use extern in header files when declaring global variables for compatible gcc10 build
  - Add doc sub package(taifu.gc@alibaba-inc.com)


author: Michal Ambroz <rebus at, seznam.cz> - 0.5.5-2
changelog:
  - removed alias bundle - needs to be solved by
  - added conditional for the (network) tests
  - license is GPLv2+
  - empty the plugin/IpToCountry.csv with problematic 
  - move addons and plugin-development to doc folder


author: Than Ngo <than@redhat.com> - 2.21-17
changelog:
  - Resolves: #2025709, check shell correctly 
  - Resolves: #2009547, which treats function contents as aliases when parsing ksh


author: Sudip Shil <sshil@redhat.com> - 1.0.7-1
changelog:
  - feature added: fontname option, sans-serif would be default
  - feature added: add option to print utf8 hex sequence


author: Sudip Shil <sshil@redhat.com> - 1.0.8-1
changelog:
  - Handling non-printable charcaters
  - Print nicer names for all non-printable characters
  - code rendering


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: dave@bevhost.com 20080615-13.2
changelog:
  - Added parameterized systemd unit file for client
  - Added more complete usage example to RELEASENOTES


author: dave@bevhost.com 20080615-23.1
changelog:
  - Update upstream from 13 to 23 including
  - bugfix close file descriptions on exec
  - bugfix warning suppression for YYDEBUG
  - better logging for Option 20
  - added more examples in documentation
  - enhancement now able to randomize interface IP


author: Hans de Goede <hdegoede@redhat.com> - 0.4.2-1
changelog:
  - New upstream release 0.4.2 (rhbz#1433550)
  - Fixes CVE-2017-11661 CVE-2017-11662 CVE-2017-11663 CVE-2017-11664 (#1479315)


author: Joe Doss <joe@solidadmin.com> - 1.0.20200820-1
changelog:
  - Update to 1.0.20200820
  - ipc: split into separate files per-platform
  - wincompat: fold random into genkey
  - systemd: add reload target to systemd unit
  - man: wg-quick: use syncconf instead of addconf for strip example
  - pubkey: isblank is a subset of isspace
  - ctype: use non-locale-specific ctype.h
  - wg-quick: wait on process substitutions


author: Joe Doss <joe@solidadmin.com> - 1.0.20200827-1
changelog:
  - Update to 1.0.20200827
  - wg-quick: android: use iproute2 to bring up interface instead of ndc
  - wg-quick: Revert wait on process substitutions


author: Joe Doss <joe@solidadmin.com> - 1.0.20210223-1
changelog:
  - wg-quick: android: do not free iterated pointer
  - wg-quick: openbsd: no use for userspace support
  - embeddable-wg-library: sync latest from netlink.h
  - wincompat: recent mingw has inet_ntop/inet_pton
  - wincompat: add resource and manifest and enable lto
  - wincompat: do not elevate by default
  - completion: add help and syncconf completions
  - sticky-sockets: do not use SO_REUSEADDR
  - man: LOG_LEVEL variables changed name
  - ipc: do not use fscanf with trailing \n
  - ipc: read trailing responses after set operation


author: Joe Doss <joe@solidadmin.com> - 1.0.20210315-1
changelog:
  - Makefile: fix version indicator
  - wireguard-tools: const correctness
  - wireguard-tools: drag in headers for prototypes
  - ipc: uniformly ignore preshared keys that are zero
  - wg-quick: freebsd: add kernel support
  - ipc: freebsd: add initial FreeBSD support
  - wg-quick: freebsd: avoid writing private keys to /tmp


author: Joe Doss <joe@solidadmin.com> - 1.0.20210424-1
changelog:
  - wg-quick: freebsd: check for socket using -S, not -f
  - wg-quick: freebsd: do not assume point-to-point interface flag
  - wg-quick: freebsd: use ifconfig for determining if interface is up
  - wg-quick: kill route monitor when loop terminates


author: Joe Doss <joe@solidadmin.com> - 1.0.20210914-1
changelog:
  - contrib/launchd: fix xml syntax error
  - wg-quick: darwin: account for "link#XX" gateways
  - ipc: add wireguard-nt support
  - ipc: cache windows lookups to avoid O(n^2) with nested lookups
  - ipc: remove windows elevation
  - ipc: windows: don't display disabled adapters
  - ipc: windows: use devpkey instead of nci for name
  - wg-quick: android: adjust for android 12
  - wg-quick: openbsd: set DNS with resolvd(8)


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-7
changelog:
  - Resolves: #1642919 - CVE-2018-12086, CVE-2018-18225, CVE-2018-18226, CVE-2018-18227
  - Resolves: #1656342 - CVE-2018-19623
  - Resolves: #1657634 - CVE-2018-19625
  - Resolves: #1657211 - CVE-2018-19626
  - Resolves: #1657184 - CVE-2018-19627
  - Resolves: #1657190 - CVE-2018-19628
  - fixes CVE-2018-19622, CVE-2018-19624


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-15
changelog:
  - Resolves: #2119126 - Wireshark source rpm fails to build due to looking for incorrect libssh header files


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.20091126-27
changelog:
  - Clarify URL/Source situation, and do not claim to have a working source
    archive URL
  - General tidying of spec file; use modern macros and install HTML format
    description as documentation
  - Add hand-written man pages


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.10.50-1
changelog:
  - Update to 1.10.50
  - Enable GNOME Flashback applet
  - Support GNOME Shell 42 (#2132504) and 43 (#2132507)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.9-2
changelog:
  - Fix AP mode PMF disconnection protection bypass (CVE-2019-16275)
  - Fix NULL dereference in d-bus handler when P2P control interface is removed (rh #1752780)
  - enable WIFI_DISPLAY (rh #1755941)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.9-3
changelog:
  - fix p2p_listen unexpectedly stopped after 5 seconds (rh #1693684)
  - allow changing 'bridge' via D-Bus (rh #1888050)
  - expose OWE configurability via D-Bus (rh #1888718)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.9-5
changelog:
  - P2P: Fix a corner case in peer addition based on PD Request (CVE-2021-27803)
  - Fix buffer overflow when processing P2P group information (CVE-2021-0326)


author: Sérgio Basto <sergio@serjux.com> - 0.9.16-1
changelog:
  - Update to 0.9.16
  - Java viewers moved to
    https://github.com/LibVNC/libvncserver/tree/master/webclients/java-applet
  - classes and jars have been removed from upstream sources.
  - Remove support to EL5
  - Encoding and permissions of files seems that are correct, no need to fix.
  - rpmlint doesn't find any hardcoded rpath


author: Petr Pisar <ppisar@redhat.com> - 0.9.16-2
changelog:
  - Modernize a spec file
  - License corrected from GPLv2 to GPLv2+
  - Enforce system crypto policy
  - Normalize ChangeLog encoding
  - Fix building with GCC 10 properly
  - Fix a NULL pointer dereference in a cursor handler (upstream bug #123)


author: Sérgio Basto <sergio@serjux.com> - 0.157-5.20190303git72db437
changelog:
  - Enable opencl (which is default) only exist --disable-opencl option
  - Disable opencl on 10bit seems that is just prepared for 8bit.
  - Build /usr/bin/x264 with gpac shared lib instead static lib.


author: Sérgio Basto <sergio@serjux.com> - 2.8-1
changelog:
  - Update to 2.8 more 2 patches to fix builds on non-x86 and arm
    https://bitbucket.org/multicoreware/x265/issues/404/28-fails-to-build-on-ppc64le-gnu-linux
    https://bitbucket.org/multicoreware/x265/issues/406/arm-assembly-fail-to-compile-on-18


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.12.0-1
changelog:
  - New upstream version 1.12.0
  - Source code signature verification
  - New CMake build system
  - Enable new optional ICU dependency
  - Build API documentation with Doxygen


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.12.0-2
changelog:
  - Make spec file compatible with EPEL8: force CMake out-of-source build, add
    ldconfig_scriptlets macro, and add explicit dependency on graphviz (dot) for
    API docs


author: Benjamin A. Beasley <code@musicinmybrain.net> 1.12.0-5
changelog:
  - Commit KEYS (gpg keychain for source verification) to SCM rather than
    keeping it in the lookaside cache


author: Peter Hutterer <peter.hutterer@redhat.com> 1.1.0-4
changelog:
  - Reduce the BuildRequires to the set actually needed
  - update the rest of the spec a bit, drop RHEL5 conditional


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.1.8-2
changelog:
  - Unretire package
  - Update URL
  - Install README as doc
  - Use the appropriate macro to install the license
  - Relax globbing for man pages
  - Convert specfile from tabs to spaces


author: Tomas Popela <tpopela@redhat.com> - 1.6.0-5
changelog:
  - Drop PipeWire 0.2 requirement as Chrom[e|ium] 90 now depends on PipeWire 0.3
  - Resolves: rhbz#1949809


author: Debarshi Ray <rishi@fedoraproject.org> - 41.1-2
changelog:
  - Make the Supplements specific to Fedora to retain consistency with
    xdg-desktop-portal-gtk
  Resolves: #2051473


author: Jerry James <loganjerry@gmail.com> - 21.5.34-29.20171230hg92757c2b8239
changelog:
  - Update to latest mercurial snapshot for miscellaneous bug fixes
  - Remove obsolete scriptlets
  - Drop upstreamed -endian, -gcpro, and -format-overflow patches
  - Install a scalable icon


author: Jerry James <loganjerry@gmail.com> - 21.5.34-33.20190323hgc0ed7ef9a5a1
changelog:
  - Update to latest mercurial snapshot for miscellaneous bug fixes
  - Switch from NSS to OpenSSL
  - Build with openldap support
  - Compress the Lisp source files


author: Tim Landscheidt <tim@tim-landscheidt.de> - 21.5.34-33.20190323hgc0ed7ef9a5a1
changelog:
  - Obsolete -el subpackage
  - Remove needless use of %defattr
  - Simplify generation of file list
  - Enable test suite


author: Jerry James <loganjerry@gmail.com> - 20190315-1
changelog:
  - Update all packages
  - Include mew again, since xemacs-mew no longer exists
  - Add -python3 patch and build with python3 instead of python2
  - Add -eval-when and -deps patches to fix FTBFS


author: Mukundan Ragavan <nonamedotc@fedoraproject.org> - 4.13.8-1
changelog:
  - Update to 4.13.8
  - Enable gobject introspection
  - Following upstream, disable perl bindings and obsolete xfconf-perl sub-pkg


author: Hans de Goede <hdegoede@redhat.com> - 3.2.6a-6
changelog:
  - Fix font issues (rhbz#1523624) :
   - Adjust xfig-3.2.5-urwfonts.patch for new font names in urw-base35-fonts
   - Except for the symbols font, use the old un-scalable Adobe PCF Symbol font
     for now as StandardSymbolsPS.otf from urw-base35-fonts is currently broken
   - Add a patch to deal with some fonts being scalable, while Symbol is not
   - Note the dingbats font is also broken in urw-base35-fonts, but there is no
     replacement for it, so that font is still broken, see rhbz#1534206
  - ghostscript-core no longer exists, instead require ghostscript (rhbz#1536581)
  - Remove obsolete icon-cache and desktop-database scriptlets
  - Add a patch from Debian fixing some issues with arrows


author: Hans de Goede <hdegoede@redhat.com> - 3.2.6a-7
changelog:
  - Fix font issues take 2 (rhbz#1523624) :
   - It turns out the new urw fonts are completely unusuable as X11 core fonts,
     stop using them for now (see bug rhbz#1551219)
   - Add a patch to use the fallback fonts for non-scalable fonts too, so that
     we at least show something somewhat reasonable for Bookman, New Century
     Schoolbook and Palatino
   - This means that display of Zapf Chancery and Zapf Dingbats currently
     falls back to the "fixed" font, which is completely wrong for Dingbats


author: Hans de Goede <hdegoede@redhat.com> - 3.2.7a-1
changelog:
  - New upstream release 3.2.7a
  - Add Requires: transfig to make sure esp export works (rhbz#1642033)
  - Switch back to URW fonts so that Bookman, New Century Schoolbook and
    Palatino work again. This uses the old version of the URW fonts which are
    now packaged as urw-base35-fonts-legacy (rhbz#1523624, rhbz#1551219)
  - Trim the changelog


author: Pavel Reichl <preichl@redhat.com> - 3.1.8-5
changelog:
  - Batch fixing several issues
  - xfsdump: restoring inventory prevents non-directory files being restored
  -      from tape, Related: rhbz#2245677
  - xfsrestore: Files from the backup go to orphanage dir because of xfsdump
  -      issue, Related: rhbz#2245344
  - xfsdump/xfsrestore: suggest recovery for false roots may be possible using -x,
  -      Related: RHEL-14493


author: Bill O'Donnell <billodo@redhat.com> 5.0.0-6
changelog:
  - xfs_repair: improve AG btree ptr validation (libxfs_verify_agbno) (#1887288)
  - mkfs.xfs: fix ASSERT on too-small device with stripe geometry (#1887401)
  - xfs_repair: fix rebuilding btree block less than minrecs (#1759452)


author: Bill O'Donnell <billodo@redhat.com> 5.0.0-7
changelog:
  - xfs_quota: document how the default quota is stored (#1850188)
  - xfs_db: skip type change if type_f unchanged (#1867474)


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 5.0.0-11.0.1
changelog:
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 build
  - Add atomic write support (joseph.qi@linux.aliabba.com)
  - mkfs: don't trample the gid set in the protofile (hongnan.li@linux.alibaba.com)
  - Add doc sub package (fanhangbo.fhb@alibaba-inc.com)
  - Add fsck log replay support (joseph.qi@linux.aliabba.com)
  - mkfs.xfs: terminate getsubopt arrays properly (mengferry@linux.alibaba.com)
  - mkfs.xfs: fix internal logs' size (mengferry@linux.alibaba.com)
  - xfs_repair: ignore empty xattr leaf blocks (mengferry@linux.alibaba.com)


author: Peter Hutterer <peter.hutterer@redhat.com> 2.24-3
changelog:
  - Remove high-keycode removal patches, xkbcomp 1.4.2 has been in stable for
    long enough (related #1587998)


author: Paul Wouters <pwouters@redhat.com> - 1.3.15-1
changelog:
  - Resolves: rhbz#1761700 xl2tpd-1.3.15 is available
  - Resolves: rhbz#1875262 Unsupported options 'crtscts' and 'lock' in /etc/ppp/options.xl2tpd
  - Resolves: rhbz#1869420 xl2tpd.service:8: PIDFile= references a path below legacy directory /var/run/


author: Rob Crittenden <rcritten@redhat.com> - 1.51.0-7
changelog:
  - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827)
    (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602)
  - Prevent integer overflow on m_groupSize in doProlog
    (CVE-2021-46143) (#2058560)


author: Ondrej Vasik <ovasik@redhat.com> 0.0.27-1
changelog:
  - New version 0.0.27
  - remove several bashisms in scripts
  - add new option --profile for preprocessing documents
    with profiling stylesheet
  - fix several potential crashes in xmlif (found by static analysis)


author: Adam Jackson <ajax@redhat.com> - 7.7-21
changelog:
  - oclock 1.0.4
  - xeyes 1.1.2
  - xfontsel 1.0.6
  - xload 1.1.3
  - xmessage 1.0.5
  - xpr 1.0.5
  - xwd 1.0.7
  - xwud 1.0.5


author: Simone Caronni <negativo17@gmail.com> - 1.7.1-1
changelog:
  - Update to 1.7.1.
  - Skip PDF document generation through fop. It fixes FTBFS on Fedora 22. Tarball
    is not yet compatible with Fedora xmlgraphics-commons >= 2.0.
  - Remove useless db files.


author: Adam Jackson <ajax@redhat.com> - 1.7.1-5
changelog:
  - Drop BuildRequires: java-devel. Originally that was to force a specific
    JDK version, which we no longer need to do.


author: Michel Dänzer <mdaenzer@redhat.com> - 19.1.0-1
changelog:
  - ati 19.1.0 (#1728818)
  - Drop patch 0001-Don-t-set-up-black-scanout-buffer-if-LeaveVT-is-call.patch,
    merged upstream
  - Add patches 0001-Handle-NULL-fb_ptr-in-pixmap_get_fb.patch &
    0002-Don-t-crash-X-server-if-GPU-acceleration-is-not-avai.patch from
    upstream Git master, fixing crashes with ShadowFB


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.1-2
changelog:
  - xf86-input-libinput 1.0.1 (#1951879)
  - Fix the upstream source URL
  - Use autosetup instead of manual patch handling


author: Hans de Goede <hdegoede@redhat.com> - 1.0.12-4
changelog:
  - Fix the crtc not being turned off, causing the dgpu to not suspend,
    after using a dgpu attached output


author: Christophe Fergeau <cfergeau@redhat.com> - 0.1.5-7
changelog:
  - Add upstream patches for Python 3 support
  - Validate RANDR output property atoms
  - Add patch fixing crash with multiple QXL devices
  - This syncs the RHEL branch with both current rawhide and RHEL 7.6


author: Hans de Goede <hdegoede@redhat.com> - 7.5-11
changelog:
  - Update most fonts:
     -encodings-1.0.4
     -font-adobe-100dpi-1.0.3
     -font-adobe-75dpi-1.0.3
     -font-adobe-utopia-100dpi-1.0.4
     -font-adobe-utopia-75dpi-1.0.4
     -font-adobe-utopia-type1-1.0.4
     -font-arabic-misc-1.0.3
     -font-bh-100dpi-1.0.3
     -font-bh-75dpi-1.0.3
     -font-bh-lucidatypewriter-100dpi-1.0.3
     -font-bh-lucidatypewriter-75dpi-1.0.3
     -font-bitstream-100dpi-1.0.3
     -font-bitstream-75dpi-1.0.3
     -font-bitstream-type1-1.0.3
     -font-cronyx-cyrillic-1.0.3
     -font-cursor-misc-1.0.3
     -font-daewoo-misc-1.0.3
     -font-dec-misc-1.0.3
     -font-isas-misc-1.0.3
     -font-jis-misc-1.0.3
     -font-micro-misc-1.0.3
     -font-misc-cyrillic-1.0.3
     -font-misc-ethiopic-1.0.3
     -font-misc-misc-1.1.2
     -font-mutt-misc-1.0.3
     -font-schumacher-misc-1.1.2
     -font-screen-cyrillic-1.0.4
     -font-sony-misc-1.0.3
     -font-sun-misc-1.0.3
     -font-winitzki-cyrillic-1.0.3
     -font-xfree86-type1-1.0.4
  - Fix a bug in jisx0201.1976-0.enc (#1009350)


author: Simone Caronni <negativo17@gmail.com> - 7.5-12
changelog:
  - Clean up SPEC file, remove obsolete tags, fix all rpmlint warnings.
  - Rework build/install section to be like other xorg packages.
  - Remove all obsolete provides/obsoletes/conflicts.
  - Simplify build requirements.
  - Simplify build, it has not changed since 2008.


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-9
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2108156, rhbz#2108161


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.20.11-11
changelog:
  - CVE fix for: CVE-2022-4283 (#2151799), CVE-2022-46340 (#2151774),
    CVE-2022-46341 (#2151779), CVE-2022-46342 (#2151784),
    CVE-2022-46343 (#2151789), CVE-2022-46344 (#2151794)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-2
changelog:
  - CVE fix for: CVE-2021-4008 (#2038067), CVE-2021-4009 (#2038070),
    CVE-2021-4010 (#2038072), CVE-2021-4011 (#2038074)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-3
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2110440, rhbz#2110433


author: Peter Hutterer <peter.hutterer@redhat.com> - 21.1.3-5
changelog:
  - CVE fix for: CVE-2022-4283 (#2151803), CVE-2022-46340 (#2151778),
    CVE-2022-46341 (#2151783), CVE-2022-46342 (#2151786),
    CVE-2022-46343 (#2151793), CVE-2022-46344 (#2151796)


author: Adam Jackson <ajax@redhat.com> - 7.7-25
changelog:
  - iceauth 1.0.8
  - xkill 1.0.5
  - xrdb 1.1.1
  - xrefresh 1.0.6
  - xset 1.2.4
  - xsetroot 1.1.2
  - HTTPS URLs


author: Adam Jackson <ajax@redhat.com> - 7.7-24
changelog:
  - Make -devel Require the base package, so the pc file will point to an
    xkbcomp that actually exists.


author: Bojan Smojver <bojan@rexursive.com> - 0.9.19-5
changelog:
  - Insert glamoregl module into xorg.conf for glamor package
  - Add missed Xorg server dependencies into glamor package


author: Tom Callaway <spot@fedoraproject.org> - 1:4.04-5
changelog:
  - pull in all the headers
  - apply null fix for default var in GlobalParams()
  - make a libxpdfcore for texlive-base to use


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.4.2-3
changelog:
  - Link with libatomic on some 32-bit architectures
  - Fix sphinx doc
  - Backport fixes from upstream git master (OpenSSL 3, Python 3.10)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.4.3-1
changelog:
  - Update to version 5.4.3
  - Drop patches accepted upstream or previously backported
  - Add BR python3-pip and python3-wheel


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.5.0-1
changelog:
  - Update to version 5.5.0
  - Drop patches accepted upstream
  - Address some warnings from Doxygen
  - Build using devtoolset 7 on EPEL 7


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.5.1-1
changelog:
  - Update to version 5.5.1
  - Drop doxygen patch accepted upstream
  - Check all sizes (8, 16, 32, 64) in <atomic> check
  - Check operator++ in <atomic> check


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.999-28
changelog:
  - remove dependency on ImageMagick and netpbm-progs, because they were needed for
    tests during %build phase, which were removed in commit SHA 0595c15da29


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:5.45-1
changelog:
  - Update to 5.45
  - asm6502.c/immediate: readd free() call accidentally removed during gcc warnings fix
  - beats/draw_beats: avoid integer overflow by multiplication


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:5.45-3
changelog:
  - Fix up gcc -Wstringop or -Wformat-overflow warnings
  - Make xscreensaver logo or ok button appear on lock screen


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.0.2-1
changelog:
  - Unretire package
  - Switch source to GitHub and update to 1.0.2
  - Use cmake instead of scons
  - Install systemd user service
  - Misc specfile updates


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.4-1
changelog:
  - rebase to 5.2.4 (rhbz#1574039), per release notes:
    https://www.mail-archive.com/xz-devel@tukaani.org/msg00295.html


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.4-2
changelog:
  - drop ppc64p7 hack, per fedora devel list discussion:
    https://lists.fedoraproject.org/archives/list/
    devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/
  - don't explicitly set _FILE_OFFSET_BITS, package uses AC_SYS_LARGEFILE


author: Oliver Haessler <oliver@redhat.com> - 0.38.2-3
changelog:
  - increment number, as bodhi has issues with the previous version,
  so fixing it by updating the minor version


author: Adrien Vergé <adrienverge@gmail.com> - 1.31.0-1
changelog:
  - Update to latest upstream version
  - Temporarily restore setup.py/setup.cfg since setuptools ≥ 61 is not available


author: zsvetlik@redhat.com - 1.22.10-1
changelog:
  - Update to 1.22.10
  - Resolves: RHBZ#1816262, RHBZ#1851876
  - Long resolved CVEs, just not mentioned in changelog


author: Neal Gompa <ngompa@fedoraproject.org> - 1.22.10-4
changelog:
  - Work around broken brp-mangle-shebangs behavior (see RHBZ#1998924)
  - Fix broken macro variable for legacy "nodejs-yarn" binary name (RHBZ#1904279)


author: zsvetlik@redhat.com - 1.22.17-1
changelog:
  - Update to latest upstream release
  - use --force in yarnpkg-tarball.sh to workaround dependency conflincts


author: Kalev Lember <klember@redhat.com> - 2:40~beta-2
changelog:
  - Drop libtool as-needed hack as as-needed is in default LDFLAGS now
  - Remove unneeded ldconfig_scriptlets macro call
  - Tighten soname globs


author: Maxwell G <gotmax@e.email> - 2021.12.17-1
changelog:
  - Update to 2021.12.17. Fixes rhbz#2033616.
  - Properly own shell completions directories
  - Remove obsolete epel6 code.


author: Matej Mužila <mmuzila@redhat.com> - 3:2.4-5
changelog:
  - Add "Wants" dependency on network-online.target
  - Remove "After" dependency on NetworkManager-wait-online.service


author: Severin Gehwolf <sgehwolf@redhat.com> - 2.4.8-4
changelog:
  - Add explicit requirement on javapackages-tools since yuicompressor
    script uses java-functions. See RHBZ#1600426.


author: Orion Poplawski <orion@nwra.com> - 6.0.13-1
changelog:
  - Update to 6.0.13
  - Add policy to allow zabbix scripts to run chronyc as chronyc_t (bz#2160180)
  - Add policy to allow zabbix agent to run rpm read-only
  - Fix up alternatives scripts to allow better upgrades from other zabbix packages


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.0-1
changelog:
  - Add option to generate a zchunk header from an uncompressed file without
    actually creating a zchunk file


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.1-1
changelog:
  - Fix a few low severity security bugs including
    - An off-by-one overflow when reading compressed integers from a
      malicious zchunk file
    - Error handling being skipped when the number of bytes read doesn't
      match what's expected
    - Not freeing memory when attempting to reallocate to size 0


author: Jonathan Dieter <jdieter@gmail.com> - 1.4.0-1
changelog:
  - Add native OpenSSL 3 compatibility
  - Add new function for getting zchunk context from chunk
  - Fix bug when assembling from multiple sources


author: Denis Arnaud <denis.arnaud_fedora@m4x.org> - 4.3.4-1
changelog:
  - Upstream upgrade
  - Fixes #1921879, #1921972, #1921973, #1921975, #1921976, #1921979, #1921981,
  - #1921983, #1921983, #1921985, #1921987, #1921989, #1921992, #1921994


author: Ben Woodard <woodard@redhat.com> - 4.3.4-3
changelog:
  - disable building with libunwind to fix C++ exceptions when a C applicaion loads
    a module written in C++ #2175966


author: Jakub Martisko <jamartis@redhat.com> - 3.0-22
changelog:
  - Add missing linker flags
  - Port the configure patch from unzip that allows linker flags configuration
    from the spec file
  - Related: #1624188


author: Jakub Martisko <jamartis@redhat.com> - 3.0-23
changelog:
  - Set the ziperr function as noreturn
  - Fix email in the previous chnagelog entry
  - Related: #1602741


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-11
changelog:
  - IBM Z hardware-accelerated deflate for s390x architectures
  - IBM CRC32 optimalization for POWER 8+ architectures
  - fixed firefox crash due to zlib (#1741266)
  - added test for crc32


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-13
changelog:
  - Added -DDFLTCC parameter to configure to enable 
  - Z hardware-accelerated deflate for s390x architectures (#1659433)


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-16
changelog:
  - Permit a deflateParams() parameter change
  - Another fix for Z hardware-accelerated deflate for s390x architectures
  - according to previous change by upstream


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-17
changelog:
  - Fixed DFLTCC compression level switching issues (#1875492)
  - Enabled HW compression for compression levels 1 through 6 (#1847438)
  - Fixed inflateSyncPoint() bad return value on z15 (#1888930)


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11.19
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 0-0.9gitfe0f368
changelog:
  - Require specific version of znc, to avoid unexpected breakage when znc
    updates.  (Broken deps are better than a broken server.)


author: Justin W. Flory <jflory7@fedoraproject.org> - 1.0.3-1
changelog:
  - Fix reused integers from being optimized out.
  - Props to Jan Drögehoff (FAS: sentry) for sending this fix upstream to avoid carrying a Fedora-specific patch.
  - Remove grues.


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-1
changelog:
  - Rebase to 0.13.71
  - Drop the CVE patches, they are now part of the upstream package
  - Build no longer requires python2
  - Resolves: 1807565


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-7
changelog:
  - Remove the doc/zzipdoc/{options,match}.py scritps from the original tar
  - Replace them with a current github version
  - The original version of the files contains autogenerated header with incompatible license
  - This build thus uses modified tar archive
  Resolves: rhbz#1982241


