# changelog

author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-9
changelog:
  - Fix HTML documentation installation location.
  - Replace CUnit-2.1-3-src.tar.bz2 tarball, which really
    is 2.1-2 in disguise according to configure.in, with 2.1-3 as
    published on 2014-04-24.
  - BR libtool
  - Run autoreconf instead of autoconf.
  - Drop --enable-curses because without BuildRequires ncurses-devel it
    would disable itself automatically (and if it were enabled, test programs
    would need to link with ncurses explicitly).


author: Ville Skyttä <ville.skytta@iki.fi> - 3.2.6-15
changelog:
  - Fix source URL and switch to xz tarball (the only one available)
  - Do not own %{_localstatedir}/lib/rpm-state (#907618)
  - Ship gsettings-schema-convert manpage only in -devel (#893767)
  - Install COPYING as %license where available
  - Fix bogus dates in %changelog


author: Paul Howarth <paul@city-fan.org> - 1.0.5-17
changelog:
  - ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
  - Drop legacy BuildRoot: and Group: tags
  - Drop redundant explicit buildroot cleaning
  - Specify all explicitly-used build requirements
  - Use %license where possible
  - Drop %defattr, redundant since rpm 4.4


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-2
changelog:
  - Resolve issues found by rpmdiff
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-3
changelog:
  - Add a patch to resolve one more issue found by rpmdiff/rpminspect:
    fix getaddrinfo detection to avoid using gethostbyname.


author: Wim Taymans <wtaymans@redhat.com> - 1.2.15-38
changelog:
  - fix CVEs
  - Resolves: rhbz#1716209, rhbz#1716210, rhbz#1716211, rhbz#1716212,
              rhbz#1716213, rhbz#1716214, rhbz#1716215, rhbz#1716216,
  	    rhbz#1716217, rhbz#1716218, rhbz#1716219


author: Mukundan Ragavan <nonamedotc@fedoraproject.org> - 5.1.1-1
changelog:
  - Update to 5.1.1
  - Remove format security patch - not needed anymore
  - Edit patches to be version specific
  - Renamed patch4 to be consistent with others
  - Minor spec file housekeeping


author: Sumit Bose <sbose@redhat.com> - 0.8.2-6
changelog:
  - [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1806260]
  - No longer able to delete computer from AD using adcli [#1846882]
  - adcli: presetting $computer in $domain domain failed: Cannot set computer
    password: Authentication error [#1846878]
  - Typo in adcli update --help option [#1791611]
  - Manpage and help does not explain the use of "-C" option [#1791545]


author: Sumit Bose <sbose@redhat.com> - 0.8.2-8
changelog:
  - Add --use-ldaps option to adcli update as well [#1883467]
  - Cannot join a pre-staged Computer Account on AD in Custom OU using Delegated
    user [#1734764]
  - missing documentation for required AD rights for adcli join and net
    join [#1852080]
  - [RFE] Add new mode to just create an AD account to be able to connect to
    LDAP [#1854112]


author: Sumit Bose <sbose@redhat.com> - 0.8.2-10
changelog:
  - [RFE] Adcli and Realm Error Code Optimization Request [#1889386]
  - [RFE] adcli should allow to modify DONT_EXPIRE_PASSWORD attribute [#1769644]


author: Sumit Bose <sbose@redhat.com> - 0.8.2-12
changelog:
  - [RFE] Allow adcli to create AD user with password as well as set or reset
    existing user password [#1952828]
  - [RFE] add option to populate "managed by" computer attribute [#1690920]


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.0-1
changelog:
  - Add MVP HA functionality to the server role
    Resolves: rhbz#2066338
  - Add mssql_tls_remote_src to the server role
    Resolves: rhbz#2039990
  - Add Requires: linux-system-roles or rhel-system-roles
  - Add downstream values to galaxy.yml


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.0-3
changelog:
  - Update mssql commit
    Resolves: rhbz#2066338
  - Add condition for upstream spec build for galaxy_transform
  - Replace extra-mapping with replacing in the legacy format with sed


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.3-1
changelog:
  - Use firewall role to configure firewall for SQL Server
    Resolves: rhbz#2120714
  - Add mssql_ha_virtual_ip
    Replace mssql_ha_db_name with mssql_ha_db_names to let users replicate multiple DBs
    Resolves: rhbz#2066338
  - Replace simple `mssql_input_sql_file` with `pre` and `post` variables
    Resolves: rhbz#2120713
  - Add Requires: linux-system-roles or rhel-system-roles
  - Replace fedora.linux_system_roles:redhat.rhel_system_roles on RHEL
  - Add downstream values to galaxy.yml
  - Change defcommit to defsource that takes both tags and commits
  - Update CHANGELOG.md with the current date and copy it to collection dir


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.4-1
changelog:
  - Replicate all provided databases
    - This change fixes the bug where only the first database provided with
  mssql_ha_db_names got replicated
    - Clarify that the role does not remove not listed databases
    Resolves: rhbz#2129869
  - Input multiple sql scripts
    - Allow _input_sql_file vars to accept list of files
    - Flush handlers prior to inputting post sql script
    Resolves: rhbz#2129872
  - Note that ha_cluster is not idempotent
  - SPEC: Do not update dates in CHANGELOG.md


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.4-2
changelog:
  - Simplify spec file
    - Do not install roles to /usr/share/microsoft and then create symlinks
      to /usr/share/ansible/roles/, instead install directly to
      /usr/share/ansible/roles/
    - Remove unused removal of ambiguous python shebangs
    - Remove all loops because this RPM contains only one role
    - Remove defsource - simply define the source for mssql
    - 's|$RPM_BUILD_ROOT|%{buildroot}|' for consistency
    - Remove getarchivedir for simplicity
    - Wrap description by 80 symbols and clarify it
    - Remove tests/.fmf dir from the RPM
    Resolves: rhbz#2129106


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-1
changelog:
  - Keep spec consistent with linux-system-roles
    - Return conditionals related to EL to keep up- and downstream consistent
    - Add pretrans scriplet to remove symlinks if exist to fix issue with update
    - Instead of copying doc and license files create symlinks
    - Dynamically generate %files section
    - Add -t to md2html to generate TOC
    Resolves: rhbz#2129106
  - On SQL Server Enterprise Edition, support configuring asynchronous replication
    Resolves: rhbz#2144820
  - Support configuring a read-scale SQL server availability group (without pacemaker
    Resolves: rhbz#2144821
  - Use the certificate role to create the cert and the key
    Resolves: rhbz#2144852
  - Support SQL Server version 2022
    Resolves: rhbz#2153427
  - Support integrating with AD Server for authentication
    Resolves: rhbz#2163696


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-2
changelog:
  - Replace fedora.linux_system_roles/redhat.rhel_system_roles and
    linux-system-roles.mssql with microsoft.sql.server in the role.
    Resolves: rhbz#2129106
  - Use latest 1.3.0 to fix ad_Integration issues
    Resolves: rhbz#2163696


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-3
changelog:
  - Spec: add functionality to build from a commit hash
  - Use latest 1.3.0 to add flexibility to AD integration functionality
    Resolves: rhbz#2163696


author: Dimitri Savineau <dsavinea@redhat.com> - 2.14.2-3
changelog:
  - rebuild with python 3.11 (rhbz#2169524)
  - remove bundled dependencies from requirements file (rhbz#2143974)
  - use PyPi sources (rhbz#2160277)
  - remove straightplugin


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.0-1
changelog:
  - ansible-core 2.15.0 release (rhbz#2204511)
  - update bundled markupsafe to 2.1.2.
  - update bundled packaging to 21.3.
  - update bundled pyparsing to 3.0.7.
  - update bundled resolvelib to 1.0.1.
  - remove six runtime dependency.


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.3-1
changelog:
  - ansible-core 2.15.3 release (rhbz#2232431)
  - Use docs and examples from ansible-documentation project.
  - Build the manpages.


author: Dimitri Savineau <dsavinea@redhat.com> - 2.16.3-1
changelog:
  - ansible-core 2.16.3 release (RHEL-23782)
  - Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration) (RHEL-22123)


author: Thomas Woerner <twoerner@redhat.com> - 1.9.2-1
changelog:
  - Update to version 1.9.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.2
    Resolves: RHBZ#2125592
  - ipabackup: Use ipabackup_item again in copy_backup_to_server
    Resolves: RHBZ#2165953


author: Thomas Woerner <twoerner@redhat.com> - 1.10.0-1
changelog:
  - Update to version 1.10.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.10.0
    Resolves: RHBZ#2170373
  - ipareplica/server: Enable removal from domain with undeployment
    Resolves: RHBZ#2127903
  - ipagroup: Allow multiple group management
    Resolves: RHBZ#2175763
  - ipaserver: Allow deployments with random serial numbers
    Resolves: RHBZ#2127905
  - ipagroup: Fix ensuring external group members (without trust-ad)
    Resolves: RHBZ#2183822
  - ipaclient: Add subid option to select the sssd profile with-subid
    Resolves: RHBZ#2175767
  - ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup
    Resolves: RHBZ#2127883
  - ipaclient: Keep server affinity while deploying as long as possible
    Resolves: RHBZ#2175757


author: Thomas Woerner <twoerner@redhat.com> - 1.11.0-1
changelog:
  - Update to version 1.11.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.0
    Resolves: RHBZ#2170373
  - Multiple service management
    Resolves: RHBZ#2175771
  - New ipacert module
    Resolves: RHBZ#2127907
  - Fix maxsequence handling in ipapwpolicy module
    Resolves: RHBZ#2214294


author: Thomas Woerner <twoerner@redhat.com> - 1.11.1-1
changelog:
  - Update to version 1.11.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.1
    Resolves: RHBZ#2170373
  - ipaautomountmap: add support for indirect maps
    Resolves: RHBZ#2050176
  - ipauser: Add support to modify GECOS field
    Resolves: RHBZ#2169372
  - ipauser: Add support for parameter "street"
    Resolves: RHBZ#2215531
  - ipauser: Add support for SMB attributes
    Resolves: RHBZ#2215533
  - ipauser: Support for External IdP attributes
    Resolves: RHBZ#2215536
  - Fix handling of ipapwpolicy attributes usercheck and dictcheck
    Resolves: RHBZ#2215542
  - Update authtypes authind
    Resolves: RHBZ#2215538


author: Thomas Woerner <twoerner@redhat.com> - 1.12.0-1
changelog:
  - Update to version 1.12.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.0
    Resolves: RHEL-13744
  - New idoverridegroup management module.
    Resolves: RHEL-16937
  - New idoverrideuser management module.
    Resolves: RHEL-16942
  - New idview management module.
    Resolves: RHEL-16934
  - New idp management module.
    Resolves: RHEL-16939
  - idoverride{user,group}: Fix delete_continue with state absent
    Resolves: RHEL-16680


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-1
changelog:
  - Update to version 1.12.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.1
    Resolves: RHEL-13744
  - ipauser module lacks the "rename" field.
    Resolves: RHEL-4962
  - Add missing support for rename in ipagroup module
    Resolves: RHEL-13758
  - The IDP module does not support the modification of IDP options
    Resolves: RHEL-17954
  - The IDP module does not support resetting IDP options
    Resolves: RHEL-17957
  - ipauser is not idempotent when random is defined
    Resolves: RHEL-19123
  - ipasudorule: Allow setting groups for runasuser
    Resolves: RHEL-19130
  - Idempotency fixes
    Resolves: RHEL-19132
  - ipadnszone: Add support for per-zone privilege delegation
    Resolves: RHEL-19134
  - Handle data type or empty string in module_utils
    Resolves: RHEL-19136


author: Thomas Woerner <twoerner@redhat.com> - 1.13.1-1
changelog:
  - Update to version 1.13.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.1
    Resolves: RHEL-35565
  - New inventory plugin
    Resolves: RHEL-35541
  - Enable batch command as backend
    Resolves: RHEL-38943
  - New collection sub package
    Resolves: RHEL-38931


author: Thomas Woerner <twoerner@redhat.com> - 1.13.2-1
changelog:
  - Update to version 1.13.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.2
    Resolves: RHEL-35565
  - Convert input certificates
    Resolves: RHEL-44614
  - Fix rolesdeployment with IPA 4.12
    Resolves: RHEL-40869


author: Thomas Woerner <twoerner@redhat.com> - 0.1.5-1
changelog:
  - Update to version 0.1.5
    - Support for IPA 4.8.0
    - New user management module
    - New group management module
    - ipaserver: Support external signed CA
    - RHEL-8 specific vars files to be able to install needed modules
      automatically
    - ipareplica: Fixes for certmonger and kra setup
    - New tests folder
    - OTP related updates to README files
  - Updates of version 0.1.4
    - ipatopologysegment: Use commands, not command
  - Updates of version 0.1.3
    - ipaclient_test: Fix Python2 decode use with Python3
    - Fixed: #86 (AttributeError: 'str' object has no attribute 'decode')
    - ipaclient_get_otp: Remove ansible_python_interpreter handling
    - ipaclient: Use omit (None) for password, keytab, no string length checks
    - ipaclient_join: Support to use ipaadmin_keytab without ipaclient_use_otp
    - ipaclient: Report error message if ipaclient_get_otp failed
    - Fixes #17 Improve how tasks manage package installation
    - ipareplica: The dm password is not needed for ipareplica_master_password
    - ipareplica: Use ipareplica_server if set
    - ipatopologysegment: Allow domain+ca suffix, new state: checked
    - Documentation updates
    - Cleanups
  - Update of version 0.1.2
    - Now a new Ansible Collection
    - Fix gssapi requirement for OTP: It is only needed if keytab is used with
      OTP now.
    - Fix wrong ansible argument types
    - Do not fail on textwrap for replica deployments with CA
    - Ansible lint and galaxy fixes
    - Disable automatic removal of replication agreements in uninstall
    - Enable freeipa-trust service if adtrust is enabled
    - Add support for hidden replica
    - New topology managament modules
    - Add support for pki_config_override
    - Fix host name setup in server deployment
    - Fix errors when ipaservers variable is not set
    - Fix ipaclient install role length typo
    - Cleanups


author: Thomas Woerner <twoerner@redhat.com> - 0.1.5-2
changelog:
  - Update README-user.md: Fixed examples, new example
  - ipauser example playbooks: Fixed actions, new example


author: Thomas Woerner <twoerner@redhat.com> - 0.1.6-1
changelog:
  - Update to version 0.1.6
    - Lots of documentation updates in READMEs and modules
    - library/ipaclient_get_otp: Enable force mode for host_add call (fixes #74)
    - Flake8 and pylint reated fixes
    - Fixed wrong path to CheckedIPAddress class in ipareplica_test
    - Remove unused ipaserver/library/ipaserver.py
    - No not use wildcard imports for modules
    - ipareplica: Add support for pki_config_override
    - ipareplica: Initialize dns.ip_addresses and dns.reverse_zones for dns setup
    - ipareplica_prepare: Properly initialize pin and cert_name variables
    - ipareplica: Fail with proper error messages
    - ipaserver: Properly set settings related to pkcs12 files
    - ipaclient: RawConfigParser is not always provided by six.moves.configparser
    - ipaclient_setup_nss: paths.GETENT is not available before
      freeipa-4.6.90.pre1
    - ipaserver_test: Initialize value from options.zonemgr
    - ipareplica_setup_custodia: create_replica only available in newer releases
    - ipaclient: Fix typo in dnsok assignment for ipaclient_setup_nss
    - ipa[server,replica]: Set _packages_adtrust for Ubuntu
    - New build script for galaxy release
    - New utils script to update module docs


author: Thomas Woerner <twoerner@redhat.com> - 0.1.8-1
changelog:
  - Update to version 0.1.8 with lots of fixes and additional modules
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.1.8
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.1.7


author: Thomas Woerner <twoerner@redhat.com> - 0.1.9-1
changelog:
  - Update to version 0.1.8 with lots of fixes and additional modules
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.1.9


author: Thomas Woerner <twoerner@redhat.com> - 0.1.10-1
changelog:
  - Update to version 0.1.10 with fixes and additional modules
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.1.10


author: Thomas Woerner <twoerner@redhat.com> - 0.2.1-1
changelog:
  - Update to version 0.2.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.2.1
  - Update to version 0.2.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.2.0
  - New tests sub package providing upstream tests
  - Utils in /usr/share/ansible-freeipa/utils


author: Thomas Woerner <twoerner@redhat.com> - 0.3.1-1
changelog:
  - Update to version 0.3.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.1
  - ipabackup: Fix undefined vars for conditions in shell tasks without else


author: Thomas Woerner <twoerner@redhat.com> - 0.3.4-1
changelog:
  - Update to version 0.3.4
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.4
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.2


author: Thomas Woerner <twoerner@redhat.com> - 0.3.6-1
changelog:
  - Update to version 0.3.6
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.6
    Resolves: RHBZ#1972178
  - ansible-freeipa-tests not in the compose
    Resolves: RHBZ#1940014
  - Remove unsupported parameter for (ipapermission) module: perm_rights from
    permission-present.yml
    Resolves: RHBZ#1973167
  - Sample playbook included for selfservice module is incorrect
    Resolves: RHBZ#1973166
  - ipa-client-install failing with error code 7(keytab: /usr/sbin/ipa-rmkeytab
    returned 7)
    Resolves: RHBZ#1973169
  - New management module ipaserver
    Resolves: RHBZ#1973171
  - New management module ipaautomember
    Resolves: RHBZ#1973172


author: Thomas Woerner <twoerner@redhat.com> - 0.3.6-3
changelog:
  - Apply fix for ipabackup: Use module to get IPA_BACKUP_DIR from ipaplatform
    Resolves: RRBZ#1973173


author: Thomas Woerner <twoerner@redhat.com> - 0.3.8-1
changelog:
  - Update to version 0.3.7 and 0.3.8
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.7
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.8
    Related: RHBZ#1972178
  - automember: Verify condition keys
    Resolves: RHBZ#1981713
  - automember: Fix result["failed"] issues with conditions
    Resolves: RHBZ#1981713
  - automember: Fix action to be automember or member, not service
    Resolves: RHBZ#1981711


author: Thomas Woerner <twoerner@redhat.com> - 0.3.8-3
changelog:
  - Add requirement for ansible-core
    Resolves: RHBZ#1993857
  - Remove python3, pip and ansible installation from sanity test
    Related: RHBZ#1993857
  - Replace json_query in tests/user/test_users_absent.yml
    Resolves: RHBZ#1992997


author: Thomas Woerner <twoerner@redhat.com> - 0.4.0-1
changelog:
  - Update to version 0.4.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.4.0
    Resolves: RHBZ#2010622
  - Add ability to run modules remotely
    Resolves: RHBZ#2010633
  - New management module ipaautomountlocation
    Resolves: RHBZ#2010643


author: Thomas Woerner <twoerner@redhat.com> - 1.5.3-1
changelog:
  - Update to version 1.5.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.0
    Related: RHBZ#2010622
  - automember set default group/hostgroup is missing from the automember module
    Resolves: RHBZ#2021947
  - automember remove default group/hostgroup is missing from the automember
    module
    Resolves: RHBZ#2021952
  - automember rebuild is missing from the automember module
    Resolves: RHBZ#2021954
  - automember remove orphans group/hostgroup is missing from the automember
    module
    Resolves: RHBZ#2021955
  - Not able to update existing automember rule description
    Resolves: RHBZ#1976922


author: Thomas Woerner <twoerner@redhat.com> - 1.6.1-1
changelog:
  - Update to version 1.6.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.0
    Related: RHBZ#2010622
  - Add module to manage automount maps
    Resolves: RHBZ#2040701
  - Add module to manage automount keys
    Resolves: RHBZ#2040702


author: Thomas Woerner <twoerner@redhat.com> - 1.6.2-1
changelog:
  - Update to version 1.6.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.2
    Related: RHBZ#2010622


author: Thomas Woerner <twoerner@redhat.com> - 1.6.3-1
changelog:
  - Update to version 1.6.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.3
    Related: RHBZ#2010622


author: Thomas Woerner <twoerner@redhat.com> - 1.7.0-1
changelog:
  - Update to version 1.7.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.7.0
    Resolves: RHBZ#2080322
  - New idrange management module.
    Resolves: RHBZ#2069188
  - Not able to update empty descriptions in automount maps.a
    Resolves: RHBZ#2050179
  - New servicedelegationrule management module.
    Resolves: RHBZ#2069179
  - New servicedelegationtarget management module.
    Resolves: RHBZ#2069180
  - Add support for managing idoverrideusers in ipagroup.
    Resolves: RHBZ#2069183


author: Thomas Woerner <twoerner@redhat.com> - 1.8.0-1
changelog:
  - idrange: Fix usage of dom_name when idrange doesn't exist.
    Resolves: RHBZ#2086994
  - smartcard roles for ansible-freeipa
    Resolves: RHBZ#2076567


author: Thomas Woerner <twoerner@redhat.com> - 1.8.1-1
changelog:
  - Update to version 1.8.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.1
    Related: RHBZ#2080322
  - ipa server deploys failing with latest IPA compose
    Resolves: RHBZ#2103924
  - ipaserver_external_cert_files failes to copy with ansible 2.13
    Resolves: RHBZ#2104142


author: Thomas Woerner <twoerner@redhat.com> - 1.8.2-1
changelog:
  - Update to version 1.8.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.2
    Related: RHBZ#2080322
  - SIDs are always generated for server and replica deployments
    Resolves: RHBZ#2110478
  - Random Serial Numbers are not enabled by default any more
    Resolves: RHBZ#2110523
  - Fixes comparison of bool values in IPA 4.9.10+ for ipadnsconfig
    Resolves: RHBZ#2110538


author: Thomas Woerner <twoerner@redhat.com> - 1.8.3-1
changelog:
  - Update to version 1.8.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.3
    Related: RHBZ#2080322
  - Fixes replica deployment issue for domains without SID support.
    Related: RHBZ#2110478


author: Thomas Woerner <twoerner@redhat.com> - 1.8.4-1
changelog:
  - Update to version 1.8.4
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.4
    Resolves: RHBZ#2125592
  - 'ansible-doc' -l lists most idm modules as 'UNDOCUMENTED'
    Resolves: RHBZ#2125603
  - ansible-freeipa Replica Install Setup DNS fails
    Resolves: RHBZ#2125616
  - ipaconfig does not support SID and netbios attributes
    Resolves: RHBZ#2069184


author: Thomas Woerner <twoerner@redhat.com> - 1.9.0-1
changelog:
  - Update to version 1.9.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.0
    Related: RHBZ#2125592
  - pwpolicy: Add support for password check and grace limit
    Resolves: RHBZ#2127911
  - ipaconfig: Do not allow enable_sid set to False
    Resolves: RHBZ#2127446
  - ipaclient: No kinit on controller for deployment using OTP
    Resolves: RHBZ#2127887
  - ipaclient: Configure DNS resolver
    Resolves: RHBZ#2127895
  - New netgroup management module
    Resolves: RHBZ#2127910
  - sudorule: Add support for 'hostmask' parameter
    Resolves: RHBZ#2127913
  - ipaconfig: Fix fail_json calls
    Resolves: RHBZ#2134375
  - ipaconfig: Do not require enable_sid for add_sids or netbios_name
    Resolves: RHBZ#2134505
  - ipaserver: Add missing idstart check
    Resolves: RHBZ#2132731


author: Thomas Woerner <twoerner@redhat.com> - 1.9.1-1
changelog:
  - Update to version 1.9.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.1
    Resolves: RHBZ#2125592
  - pwpolicy: Allow clearing policy values
    Resolves: RHBZ#2150334
  - Use netgroup_find instead of netgroup_show to workaround IPA bug
    Resolves: RHBZ#2144725


author: Thomas Woerner <twoerner@redhat.com> - 1.14.0-1
changelog:
  - Update to version 1.14.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0
    Resolves: RHEL-67566
  - Multi sudorule management with the ipasudorule module
    Resolves: RHEL-61431


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
changelog:
  - Update to version 1.14.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
    Resolves: RHEL-67566
  - Fix requirements for ansible-core
    Resolves: RHEL-69146


author: Thomas Woerner <twoerner@redhat.com> - 1.14.2-1
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    Resolves: RHEL-67566
  - ipareplica: Pass ipareplica_ip_addresses to ipaclient
    Resolves: RHEL-40227
  - ipagroup: Correctly handle externalmember in member actions
    Resolves: RHEL-25009
  - ipasudorule: Evaluate all members related to hosts and users
    Resolves: RHEL-68439
  - ipacert: Correctly handle removFromCRL revocation
    Resolves: RHEL-70016
  - Collection: No more role module duplication
    Resolves: RHEL-71123


author: Thomas Woerner <twoerner@redhat.com> - 1.14.3-1
changelog:
  - Update to version 1.14.3
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.4-1
changelog:
  - Update to version 1.14.4
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    Resolves: RHEL-67566
  - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)
    Resolves: RHEL-78230


author: Guillaume Rousse <g.rousse@linux-mandrake.com> 1.2-2mdk
changelog:
  - new spec file
  - discarded ugly non-free Sun jaxp library from sources, and used pretty open-source xerces instead


author: Guillaume Rousse <g.rousse@linux-mandrake.com> 1.2-4mdk
changelog:
  - merged with Henri Gomez <hgomez@users.sourceforge.net> specs:
  - changed name to ant
  - changed javadir to /usr/share/java
  - dropped jdk and jre requirement
  - corrected require to jaxp
  - added Jikes support
  - used our own bash script
  - dropped perl script
  - dropped ant home directory


author: Guillaume Rousse <g.rousse@linux-mandrake.com> 1.2-7mdk
changelog:
  - launch script improvments (Christian Zoffoli <czoffoli@linux-mandrake.com>)
  - added french in spec
  - more macros


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.4-2jpp
changelog:
  - first unified release
  - dropped explicit xalan-j2 requirement, as stylebook-1.0b3 already requires it
  - added missing xalan-j1 compatibility classes
  - s/jPackage/JPackage


author: Christian Zoffoli <czoffoli@littlepenguin.org> 1.4.1-2jpp
changelog:
  - conditional build
  - removed packager tag
  - new jpp extension
  - added xalan 2.2.D13 support
  - added BuildRequires: xalan-j2 >= 2.2.D13
  - removed Requires: oro junit stylebook-1.0b3 bsf rhino antlr


author: Christian Zoffoli <czoffoli@littlepenguin.org> 1.4.1-3jpp
changelog:
  - readded Requires: oro junit stylebook-1.0b3 bsf rhino antlr to the main package
  - corrected changelog release 1jpp-> 2jpp


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.4.1-4jpp
changelog:
  - removed conditional build
  - removed redundant BuildRequires
  - ant-optional.jar in ant-optional package
  - javadoc into javadoc package
  - new launch script using functions library


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.4.1-5jpp
changelog:
  - versioned dir for javadoc
  - no dependencies for manual and javadoc packages
  - stricter dependency for optional package
  - additional sources in individual archives
  - upgraded launch script
  - no more javadoc cross-linking
  - additional requirement for optional package: xml-commons-apis, xalan-j2, xalan-j2-compat, jaf, javamail, & log4j


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.4.1-7jpp
changelog:
  - adaptation to new stylebook1.0b3 package
  - stylebook is a dependency of optional package
  - removed redundant dependencies
  - launch script correction


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.4.1-11jpp
changelog:
  - no more jikes specific support in launch script
  - source user prefs before configuration in launch script
  - distribution tag
  - group tag
  - provided original script as documentation


author: Henri Gomez <hgomez@users.sourceforge.net> 1.4.1-13jpp
changelog:
  - added optional-full which include all ant tasks, even those without
    matching package
  - added jdepend 2.2
  - remove require oro, since ant could works without it
  - ant lib is now in %{_javadir}/%{name}, put external jars here


author: Ville Skyttä <ville.skytta@iki.fi> 1.5-2jpp
changelog:
  - Requires jaxp_parser_impl, no longer jaxp_parser2
    (jaxp_parser_impl already requires xml-commons-apis).
  - Use sed instead of bash 2 extension when symlinking.


author: Henri Gomez <hgomez@users.sourceforge.net> 1.5-4jpp
changelog:
  - fix a problem in xerces-j2 build by changing the way CLASSPATH is constructed:
    first add jars found in CLASSPATH, then add xml-commons-apis, jaxp_parser_impl,
    ant, ant-optional and finish with jars found in ant/lib.
  - jpackage-utils is no more required (but recommanded :)
  - ant-optional-full provides ant-optional
  - fix link between manual and api (javadoc)


author: Henri Gomez <hgomez@users.sourceforge.net> 1.5-5jpp
changelog:
  - ant script standard behaviour restored, ie ant/lib jars are taken
    before CLASSPATH. You should define CLASSPATH_OVERRIDE env var to have
    CLASSPATH before ant/lib jars
  - applied ant script patch for cygwin (cygwin rpm users around ?)
  - remove conflict in ant-optional-full, just put provides


author: Henri Gomez <hgomez@users.sourceforge.net> 1.5.1-3jpp
changelog:
  - new post script for optional-full since rpm didn't works as
    expected and didn't set correct symlink for ant-optional.jar


author: Ville Skyttä <ville.skytta@iki.fi> - 1.5.1-4jpp
changelog:
  - Patched to allow easier use with Jikes and IBM's 1.4.0, see
    <http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15289> for details.


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.5.1-5jpp
changelog:
  - scripts subpackages
  - file-based manual dependencies, as packages doesn't have the same name on RedHat and Mandrake


author: Ville Skyttä <ville.skytta@iki.fi> - 1.5.1-8jpp
changelog:
  - Symlink a transformer into ANT_LIB for smoother experience on Java 1.3.
  - Requires jaxp_transform_impl.
  - Don't remove optional.jar symlinks on optional-full upgrade.
  - Include Sun's 1.4 JSSE and JCE jars in runtime path, see
    <http://nagoya.apache.org/bugzilla/show_bug.cgi?id=16242>.
  - Use jpackage-utils for setting JAVA_HOME when building.
  - Built with Sun 1.4.1_01 javac.


author: Henri Gomez <hgomez@users.sourceforge.net> 1.5.2-1jp
changelog:
  - 1.5.2
  - remove JDK 1.4 related patchs which are now included in ant 1.5.2
  - fix ant-optional-full pre/post install script (now remove correctly all
    ant optional jars)
  - Built with jikes 1.18 and IBM SDK 1.4


author: Henri Gomez <hgomez@users.sourceforge.net> 1.5.2-3jp
changelog:
  - rebuilt with IBM SDK 1.3.1 since there was zip corruption when built
    with jikes 1.18 and IBM SDK 1.4.


author: Henri Gomez <hgomez@users.sourceforge.net> 1.5.2-4jp
changelog:
  - changed provided /etc/ant.conf so that if usejikes is allready provided
    it didn't set it. Which such modification if you want to disable
    ant to use jikes even if jikes is set in /etc/ant.conf you'll just have
    to do usejikes=false ant build.xml.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.5.2-5jpp
changelog:
  - Move ANT_HOME to /usr/share/ant.
  - Don't special-case the lib dir for RPM layout any more, use ANT_HOME/lib.
  - Install XSLs into ANT_HOME/etc.
  - Call set_jvm by default in ant.conf.
  - Provide ant-optional-clean (versioned) in ant-optional.
  - Make ant-optional-full conflict with ant-optional-clean.
  - Add version info to ant-optional provision in ant-optional-full.
  - Built with Sun 1.4.1_02 javac (to get JDK 1.4 regex).


author: Nicolas Mailhot <Nicolas.Mailhot at JPackage.org> - 1.5.2-13jpp
changelog:
  - ant-optional is optional (silly me)
  - jaxp_transform is optional , do not require it
  - epoch, correct jpackage-utils requires...


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.5.3-1jpp
changelog:
  - Update to 1.5.3.
  - Remove runtime java-devel dependency.
  - Add Epochs in all Provides and Requires.
  - Include non-versioned javadoc symlink.
  - Build without dependencies that are partially or completely missing from
    JPackage 1.5 (oldbsf, xalan-j1, stylebook1.0b3).
  - Add netcomponents to optional jar list in ant.conf.


author: Randy Watler <rwatler at finali.com> - 0:1.6.0-1jpp
changelog:
  - Update to Ant 1.6.0
  - Break out optional/optional-full components
  - Revise ant launch scripts and support ~/.ant/ant.conf configuration file
  - Use --noconfig flag to bootstrap ant build and override existing jpp config
  - Modify ant launcher to use ant.library.dir property to find extra jars
  - Port changes made in ant launch script for 1.6.2 back into patches


author: Randy Watler <rwatler at finali.com> - 0:1.6.1-1jpp
changelog:
  - Update to Ant 1.6.1
  - Change ant launch script to source instead of patch
  - Move optional components to ant subdirectory: %{_javadir}/%{name}
  - Remove os/2 scripts and set JAVA_HOME for build


author: Fernando Nasser <fnasser at redhat.com> - 0:1.6.1-2jpp
changelog:
  - Remove incorrect noreplace option for ant.conf; it can't be used anymore
    because the sub-packages update that file.
  - Add patch to fix temp directory used for file containing large
    command strings (> 4k)


author: Fernando Nasser <fnasser at redhat.com> - 0:1.6.5-1jpp
changelog:
  - Upgrade to 1.6.5
  - Incorporate the following changes:
    From Gary Benson <gbenson at redhat.com>:
  - Allow subpackages not in Fedora to be installed from JPackage
  - Add NOTICE file as per Apache License version 2.0
  - Own /usr/share/java/ant
    From Vadim Nasardinov <vadimn@redhat.com>
  - Removed apache-ant-1.6.2.patch.  Incorporated upstream.
    From David Walluck <david@jpackage.org>
  - Add manifest-only package (mainly for eclipse)
  - Add conflicts on j2sdk for Mandriva


author: Deepak Bhole <dbhole@redhat.com> - 0:1.6.5-2jpp
changelog:
  - Added conditional native compilation
  - Added patch to fix jvm version detection
  - Add missing requirements
  - Synch with Fedora spec


author: Ralph Apel <r.apel at r-apel.de> - 0:1.7.0-2.jpp5
changelog:
  - Add poms and depmap frags
  - (B)R jpackage-utils >= 0:1.7.5
  - BR java-devel = 0:1.5.0
  - R java >= 0:1.5.0


author: David Walluck <dwalluck@redhat.com> 0:1.7.0-3
changelog:
  - add bootstrap mode
  - replace some alternatives/virtual requires by explicit requires
  - remove javadoc scriptlets
  - fix GCJ support
  - add workaround for xalan-j2 in %{_sysconfdir}/%{name}.d/trax
  - version Obsoletes and add Provides
  - remove Conflicts
  - mark files in %{_sysconfdir} as %config(noreplace)


author: David Walluck <dwalluck@redhat.com> 0:1.7.1-1
changelog:
  - 1.7.1
  - update maven pom files
  - rediff apache-ant-jars.patch
  - rediff apache-ant-bz163689.patch
  - add apache-ant-gnu-classpath.patch
  - set rpm_mode=true in conf since the ant script handles the rest


author: David Walluck <dwalluck@redhat.com> 0:1.7.1-6
changelog:
  - add ant-bootstrap jar if bootstrap is enabled
  - enable jmf, swing, trax if bootstrap is enabled
  - BuildRequires: jaxp_transform_impl
  - BuildRequires: junit for non-bootstrap


author: Orion Poplawski <orion@cora.nwra.com> 0:1.8.1-1
changelog:
  - Update to ant 1.8.1
  - Update no-test-jar patch
  - Update class-path-in-manifest patch
  - Drop gnu-classpath patch
  - Retire trax subpackage no longer shipped
  - Add xalan2 subpackage and support for junitreport task
  - Drop old jakarta jar aliases


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.8.2-3
changelog:
  - Add backward compatible maven depmap for nodeps jar
  - Revert define->global change (different semantic in rpm 4.9.X)


author: Alexander Kurtakov <akurtako@redhat.com> 0:1.8.3-2
changelog:
  - Use apache-commons-* instead of jakarta-commons-*.
  - Drop xml-commons-apis-13 BR/R since it's no longer needed.


author: Alexander Kurtakov <akurtako@redhat.com> 0:1.9.0-2
changelog:
  - Drop a pile of old provider/requires/obsoletes that are no longer usable
    and cause only problem if ant is scl-ized.


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.9.1-3
changelog:
  - Remove arch-specific patch as ant is noarch now
  - Remove bcond macro definitions (provided by rpm itself)
  - Remove Group tags
  - Update to current packaging guidelines
  - Run tests in %check instead of %build
  - Remove dependencies on xerces-j2 and xml-commons-apis, resolves: rhbz#838711
  - Convert %global build_javadoc to conditional
  - Remove bootstrap code, resolves: rhbz#915437
  - Fail the build if any of JARs is empty
  - Skip running tests that fail on Koji, resolves: rhbz#979496
  - Merge scripts into main package, resolves: rhbz#798975


author: Alexander Kurtakov <akurtako@redhat.com> 0:1.9.4-1
changelog:
  - Update to upstream 1.9.4.
  - Disable tests as they use new junit tas attribute added in this release.


author: Igor Foox <ifoox@redhat.com> - 1.0-1.b2
changelog:
  - Changed release-version to comply with FE standards
  - Consolidated into -manual into main package
  - Removed ghosting of the manual symlink
  - Removed Epoch
  - Run dos2unix over some manual files that have windows line endings
  - Changed group for docs to Documentation
  - Remove unused Source1
  - Set Source0 to valid URL instead of just a file name
  - Fix indentation
  - Remove {push,pop}d and -c from %setup
  - Changed %defattr in the %files section to standard (-,root,root,-)


author: Igor Foox <ifoox@redhat.com> - 1.0-0.1.b2
changelog:
  - Fixed release number to reflect beta status
  - Removed Distribution and Vendor tags
  - Fixed duplication in postun section
  - Removed patch3, and used sed to fix line-endings instead


author: Igor Foox <ifoox@redhat.com> - 1.0-0.3.b2
changelog:
  - Removed unneccessary 0 epoch from required packages.
  - Fixed dependance on specifically version 3.8.1 of junit.


author: Tomas Radej <tradej@redhat.com> - 1.0-0.19.b3
changelog:
  - Added LICENSE to javadoc (#879349)
  - Added ASL 2.0 licence text (#879354)
  - Added requires on jpackage-utils in javadoc (#879356)


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.7.1-3jpp
changelog:
  - used a build file instead of makefile
  - build classes instead of blindly jared them !
  - used original tarball
  - corrected license spelling


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.7.1-6jpp
changelog:
  - versioned dir for javadoc
  - no dependencies for manual and javadoc packages
  - additional sources in individual archives


author: Ville Skyttä <ville.skytta at iki.fi> - 2.7.2-1jpp
changelog:
  - Update to 2.7.2.
  - Include antlr script and jEdit mode (see antlr-jedit RPM description).
  - Use sed instead of bash 2 extension when symlinking jars during build.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.7.2-3jpp
changelog:
  - Add non-versioned javadoc dir symlink.
  - Crosslink with local J2SE javadocs.
  - Spec cleanups, change to UTF-8.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.7.3-1jpp
changelog:
  - Update to 2.7.3.
  - Include gcj build option and a native subpackage, build using
    "--with native" to get that.
  - Add %{_bindir}/antlr alternative.


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 0:2.7.6-3jpp_3fc
changelog:
  - Stub docs. (dist-fc6-java)
  - Require hack-libgcj for build. (dist-fc6-java)
  - Bump release number.


author: Deepak Bhole <dbhole@redhat.com> - 0:2.7.7-5
changelog:
  - Include cstdio in CharScanner.hpp (needed to build with GCC 4.4)
  - Merge changes from includestrings patch into the above one


author: Miloš Jakubíček <xjakub@fi.muni.cz> - 0:2.7.7-9
changelog:
  - Drop native build, alternatives, jedit, gcj bits and other jpackage crap
  - Disable debuginfo since we have only a static library.
  - Use %global everywhere
  - Split the C++ bindings into a separate -C++ subpackage
  - Use -tool subpackage with Provide: antlr to make it possible to be noarch
  - Use sed instead of perl => drop BR: perl


author: Miloš Jakubíček <xjakub@fi.muni.cz> - 0:2.7.7-10
changelog:
  - Use original upstream tarball, prebuilt jars are anyway removed in %prep
  - Don't overuse macros
  - Added explanation about headers in the C++ subpackage
  - Remove unnecessary Makefile and Makefile.in from %docs, permissions fixed
  - Added doxygen docs for C++ as a -C++-doc subpackage
  - antlr-config moved into the C++ subpackage
  - Removed %post and %postun javadoc relicts from JPackage


author: Miloš Jakubíček <xjakub@fi.muni.cz> - 0:2.7.7-23
changelog:
  - Add patch updating license on ShowString.java and StreamConverter.java
    examples (thanks to Tom Callaway, see BZ#848662)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:2.7.7-29
changelog:
  - Do not install versioned jar (#1022080)
  - Install LICENSE files in each independent subpackage
  - Minor spec cleanups


author: gil cattaneo <puntogil@libero.it> 0:2.7.7-39
changelog:
  - adapt to current guideline
  - remove some rpmlint problems
  - disable javadoc doclint
  - introduce license macro


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.0-6
changelog:
  - Drop BR on zip, use jar instead
  - Add more verbose description
  - Update to current packaging guidelines


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.9.2-1
changelog:
  - Update to upstream version 1.9.2
  - Remove legacy Provides/Obsoletes for jakarta-commons-beanutils
  - Remove RPM bug workaround


author: Henri Gomez <hgomez@users.sourceforge.net> 1.3-2jpp
changelog:
  - use sed instead of bash 2.x extension in link area to make spec compatible
    with distro using bash 1.1x


author: Aizaz Ahmed <aahmed@redhat.com> 0:1.6.1-4jpp_5rh
changelog:
  - Added trigger to restore symlinks that are removed if ugrading
    from a commons-beanutils rhug package


author: Ralph Apel <r.apel at r-apel.de> - 0:1.7.0-6jpp
changelog:
  - Make Vendor, Distribution based on macro
  - Fix aot build
  - Add poms and depmap frags
  - Build with maven1 by default
  - Add manual subpackage when built with maven


author: David Walluck <dwalluck@redhat.com> 0:1.7.0-8.jpp5
changelog:
  - fix duplicate files
  - correctly unpack sources
  - remove spurious gnu-crypto requirement
  - remove spurious javadoc package requirements
  - fix javadoc directory
  - fix build-classpath call
  - use macros


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.8.3-1
changelog:
  - Re-did whole spec file, dropped gcj support
  - Rename package (jakarta-commons-beanutils->apache-commons-beanutils)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.8.3-5
changelog:
  - Packaging fixes
  - Remove unneeded depmap
  - Remove versioned jars and javadocs
  - Use maven 3 to build


author: Java SIG <java-devel@lists.fedoraproject.org> - 1.8.3-8
changelog:
  - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
  - Replace maven BuildRequires with maven-local


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.8.3-10
changelog:
  - Build with xmvn
  - Don't generate extra JARs
  - Simplify build dependencies
  - Update to current packaging guidelines


author: Chris Spike <chris.spike@arcor.de> 1.2-3
changelog:
  - Removed maven* BRs in favour of apache-commons-parent
  - Added deprecated groupId to depmap for compatibility reasons


author: Mat Booth <fedora@matbooth.co.uk> - 1.4-1
changelog:
  - Update to 1.4
  - Rewrite spec file to build using upstream-preferred maven instead of ant
  - Drop patch to add OSGi manifest (done automatically in the maven build)
  - Install pom and add to maven dep-map
  - Re-enable all tests


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.6-4
changelog:
  - Enable tests
  - Install NOTICE with javadoc package
  - Fix file permissions
  - Remove versioned symlinks


author: Carl Green <carlgreen at gmail.com> - 3.2.1-4
changelog:
  - Renamed from jakarta-commons-collections
  - Updated to use maven2
  - Replaced saxon:group instruction with xsl:for-each-group in pom-maven2jpp-newdepmap.xsl


author: Carl Green <carlgreen at gmail.com> - 3.2.1-5
changelog:
  - Remove source and patches no longer needed for Maven
  - Fix non-standard groups and remove empty sections
  - Fix file permissions


author: Jaromir Capik <jcapik@redhat.com> 3.2.1-13
changelog:
  - saxon dependency removed - not needed
  - minor spec file changes according to the latest guidelines


author: Michael Simacek <msimacek@redhat.com> - 3.2.2-1
changelog:
  - Update to upstream version 3.2.2
  - Merge two javadoc subpackages
  - Install with XMVn
  - Specfile cleanup


author: Mat Booth <mat.booth@redhat.com> - 3.2.2-8
changelog:
  - Allow testframework to still be built even with tests disabled, which is
    needed by other packages


author: ELMORABITY Mohamed <melmorabity@fedoraproject.org> 1.0.1-2
changelog:
  - Add missing %post/%postun Requires
  - Use macro %{_mavendepmapfragdir} instead of %{_datadir}/maven2/pom
  - Unown directories %{_mavenpomdir} and %{_mavendepmapfragdir}


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1:2.0.1-1
changelog:
  - Update to 2.0.1
  - Versionless jars & javadocs
  - Use maven 3 to build
  - Use apache-commons-parent for BR


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.3-1
changelog:
  - Rename package (jakarta-commons-jxpath->apache-commons-jxpath)
  - Cleanup spec file
  - Build using maven, drop old pom file from sources
  - Update to upstream version


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.5-1
changelog:
  - Rename and rebase of jakarta-commons-lang
  - Re-did whole spec file to use maven, dropped gcj support


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.5-2
changelog:
  - Added export for MAVEN_LOCAL_REPO and mkdir
  - Added more add_to_maven_depmap to assure backward compatibility
  - Add symlink to short_name.jar


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.1.1-2
changelog:
  - Fix EOLs on docs
  - Create javadoc symlinks during install
  - Use version macro in Source0 URL, use _mavenpomdir macro


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.1.1-12
changelog:
  - Add depmaps for api and adapters subpackages
  - Use apache-commons-parent BR instead of maven-*
  - Replace tomcat5 BR with tomcat6
  - Reenable tests


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.1.1-13
changelog:
  - Replace tomcat6 BR with servlet25 only
  - Cleanups according to new packaging guidelines
  - Install maven metadata for -api jar
  - Versionless jars/javadocs


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.1.2-1
changelog:
  - Update to upstream version 1.1.2
  - Convert POM to POM macros
  - Remove OSGi manifest patch; fixed upstream


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.0-3
changelog:
  - Rename jakarta-commons-net to apache-commons-net and drop EPOCH
  - Build with maven
  - Clean up whole spec


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.2-1
changelog:
  - Replace maven plugins with apache-commons-parent for BR
  - Versionless jars and javadocs
  - Rebase to latest upstream version


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.3.0-4
changelog:
  - Install POM files, resolves: rhbz#1032258
  - Remove explicit requires; auto-requires are in effect now


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 10-6
changelog:
  - Add missing R: maven-remote-resources-plugin, apache-resource-bundles
  - Add %check to verify dependencies during build


author: Mary Ellen Foster <mefoster at gmail.com> 2-2
changelog:
  - Add plugin dependencies from POMs
  - Fix description
  - Remove maven-release plugin (not on Fedora yet)


author: Gil Cattaneo <puntogil@libero.it> 0.0.363-11
changelog:
  - fix rhbz#991985
  - add source compatibility with ant 1.9
  - remove and rebuild from source aQute.runtime.jar
  - update to current packaging guidelines


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.20-7
changelog:
  - the ownership of the spool directory should be root as at is configured
    with daemon username root
  - document the -n option


author: Kamil Dudka <kdudka@redhat.com> 2.4.47-19
changelog:
  - fix test-suite failure with perl-5.26.0 (#1473853)
  - apply patches automatically to ease maintenance
  - update URL of the upstream source tarball


author: Sergio Correia <scorreia@redhat.com> - 3.0.5-1
changelog:
  - Rebase audit package on 8.6
    Resolves: rhbz#1939406
    Resolves: rhbz#1906065
    Resolves: rhbz#1921447
    Resolves: rhbz#1927884
    Resolves: rhbz#1921658


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-2
changelog:
  - Adjust sample-rules dir permissions
    Resolves: rhbz#2054727 - /usr/share/audit/sample-rules is no longer readable by non-root users


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-3
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2062612 - auparse missing information when used with --format-text


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-4
changelog:
  - Drop ProtectHome from auditd.service as it interferes with rules
    Resolves: rhbz#2071727 - Default systemd service config blocks audit watch rules in some directories


author: Radovan Sroka <rsroka@redhat.com> - 3.0.7-5
changelog:
  - Introduce new fanotify record fields
    Resolves: rhbz#2216668
  - invalid use of flexible array member
    Resolves: rhbz#2116867


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 3.1.2-1.0.1
changelog:
  - Add doc sub package (Bo Ren)
  - cherry-pick `add sw patch #63160b250a36d3a0326470e2814e9ad8d6b45589` (nijie@wxiat.com)


author: Ian Kent <ikent@redhat.com> - 5.1.4-106
changelog:
  - bz2214444 - The sss lookup modules handles error return incorrectly
    in some cases
    - fix some sss error return cases.
  - Resolves: rhbz#2214444


author: Ian Kent <ikent@redhat.com> - 5.1.4-107
changelog:
  - bz2216877 - When looking up included maps, sometimes autofs does not
    consult all the included files in order
    - fix incorrect matching of cached wildcard key
  - Resolves: rhbz#2216877


author: Ian Kent <ikent@redhat.com> - 5.1.4-108
changelog:
  - bz2216877 - When looking up included maps, sometimes autofs does not
    consult all the included files in order
    - fix the "fix incorrect matching of cached wildcard key" patch.
  - Related: rhbz#2216877


author: Ian Kent <ikent@redhat.com> - 5.1.4-109
changelog:
  - bz2213267 - filesystems mount and expire immediately
    - fix expire retry looping.
  - Resolves: rhbz#2213267


author: Ian Kent <ikent@redhat.com> - 5.1.4-110
changelog:
  - bz2232402 - autofs attempts to mount nonexistant ".hidden" filesystems
    - allow -null map in indirect maps.
  - Resolves: rhbz#2232402


author: Ian Kent <ikent@redhat.com> - 5.1.4-111
changelog:
  - RHEL-12369 - autofs attempts to mount nonexistant ".hidden" filesystems
    - update patch "allow -null map in indirect maps".
  - Resolves: RHEL-12369


author: Ian Kent <ikent@redhat.com> - 5.1.4-112
changelog:
  - RHEL-7997 - multi mount detection fails for share with blank+dash
    causing SEGV crash
    -fix multi-mount check.
  -Resolves: RHEL-7997


author: Ian Kent <ikent@redhat.com> - 5.1.4-113
changelog:
  - RHEL-18035 - SIGSEGV using hierarchical map entries on reload with
    autofs-5.1.4-109
    - fix get parent multi-mount check in try_remount().
    - fix deadlock in remount.
  - Resolves: RHEL-18035


author: Ian Kent <ikent@redhat.com> - 5.1.4-114
changelog:
  - RHEL-61670 - sporadic autofs daemon segfaults
    - fix submount shutdown race.
  - RHEL-52402 - Sporadic mount failures with amd program maps on RHEL8
    - fix amd external mount error handling.
    - fix amd external mount mount handling.
    - don't free ext mount if mounted.
    - refactor amd function do_program_mount().
    - refactor umount_amd_ext_mount().
    - add flags argument to amd do_program_mount().
  - Resolves: RHEL-61670 RHEL-52402


author: Ian Kent <ian.kent@pobox.com>
changelog:
  - Add patch to implement directory ghosting and direct mounts
  - Add patch to for autofs4 module to support ghosting


author: Ian Kent <raven@themaw.net>
changelog:
  - Cleaned up an restructured my added code
  - Corrected ghosting problem with 2.4.19 and above
  - Added autofs4 ghosting patch for 2.4.19 and above
  - Implemented HUP signal to force update of ghosted maps


author: Ian Kent <raven@themaw.net>
changelog:
  - Implemented LDAP direct map handling for nisMap and automountMap schema
  - Fixed autofs4 ghosting patch for 2.4.19 and above (again)
  - Added locking to fix overlapping internal calls to (u)mount 
  - Added wait for mtab~ to improve tolerance of overlapping external calls to (u)mount
  - Fixed ghosted directory removal after failed mount attempt


author: Ian Kent <raven@themaw.net>
changelog:
  - Fixed autofs4 ghosting patch for 2.4.19 and above (again)
  - Fixed autofs directory removal on failure of autofs mount
  - Fixed lock file wait function overlapping calls to (u)mount


author: Ian Kent <raven@themaw.net>
changelog:
  - Removed ineffective lock stuff
  - Added -n to bind mount to prevent mtab update error
  - Added retry to autofs umount to clean matb after fail
  - Redirected messages from above to debug log and added info message
  - Fixed autofs4 module reentrancy, pwd and chroot handling


author: Ian Kent <raven@themaw.net>
changelog:
  - Checked and merged most of the RedHat v3 patches
  - Fixed kernel module handling wu-ftpd login problem (again)


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-3
changelog:
  - Ported forward Red Hat's patches from 3.1.7 that were not already present
    in 4.1.0.
  - Moving autofs from version 3.1.7 to 4.1.0


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-4
changelog:
  - comment out /net and /misc from the default auto.master.  /net is important
    since in a default shipping install, we can neatly co-exist with amd.


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-5
changelog:
  - make the init script only recognize redhat systems.  Nalin seems to remember
    some arcane build system error that can be caused if we don't do this.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.0-7
changelog:
  - Moved the freeing of ap.path to cleanup_exit, as we would otherwise 
    reference an already-freed variable.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-3
changelog:
  - Fix bug in get_best_mount, whereby if there is only one option, we 
    choose nothing.  This is primarily due to the fact that we pass 0 in to
    the get_best_mount function for the long timeout parameter.  So, we
    timeout trying to contact our first and only server, and never retry.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-5
changelog:
  - Clarify documentation on direct maps.
  - Send automount daemons a HUP signal during reload.  This tells them to 
    re-read maps (otherwise they use a cached version.  Patch from the autofs
    maintainer.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-6
changelog:
  - Add the /etc/sysconfig/autofs file, and supporting infrastructure in 
    the init script.
  - Add support for UNDERSCORE_TO_DOT for those who want it.
  - We no longer own /net.  Move it to the filesystem package.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-1
changelog:
  - Change hard-coded paths in the spec file to the %{_xxx} variety.
  - Update to upstream 4.1.2.
  - Add a STRIPDASH option to /etc/sysconfig/autofs which allows for
    compatibility with the Sun automounter options specification syntax in
    auto.master.  See /etc/sysconfig/autofs for more information.  Addresses
    bug 113950.


author: <jmoyer@redhat.com> - 1:4.1.2-2
changelog:
  - Pass --libdir= to ./configure so we get this right on 64 bit platforms that 
    support backwards compat.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-5
changelog:
  - Ian has a new fix for replicated server and multi-mounts.  Updated the 
    patch for testing.  Still beta.  (Ian Kent)


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-6
changelog:
  - The lookup_yp module only dealt with YPERR_KEY, all other errors were 
    treated as success.  As a result, if the ypdomain was not bound, the 
    subprocess that starts mounts would SIGSEGV.  This is now fixed.
  - Option parsing in the init script was not precise enough, sometimes matching
    filesystem options to one of --ghost, --timeout, --verbose, or --debug.  
    The option-parsing patch addresses this issue by making the regexp's much
    more precise.
  - Ian has rolled a third version of the replicated mount fixes.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-2
changelog:
  - Incorporate patch from Ian which fixes an infinite loop seen by those
    running older versions of the kernel patches (triggered by non-strict mounts
    being the default).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-4
changelog:
  - Perform an icmp ping request before rpc_pings, since the rpc clnt_create
    function has a builtin default timeout of 60 seconds.  This could result
    in a long delay when a server in a replicated mount setup is down.
  - For non-replicated server entries, ping a host before attempting to mount.
    (Ian Kent)
  - Change to %configure.
  - Put version-release into .version to allow for automount --version to
    print exact info.
  - Nuke my get-best-mount patch which always uses the long timeout.  This
    should no longer be needed.
  - Put name into changelog entries to make them consistent.  Add e:n-v-r
    into Florian's entry.
  - Stop autofs before uninstalling


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-8
changelog:
  - Change icmp ping to an rpc ping.  (Ian Kent)
  - Fix i18n patch
    o Remove the extra \" from one echo line.
    o Use echo -e if we are going to do a \n in the echo string.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-10
changelog:
  - Add bad chdir patch from Ian Kent.
  - Add a typo fix for the mtab lock file.
  - Nuke the stripdash patch.  It didn't solve a problem.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-11
changelog:
  - Add beta map expiry code for wider testing. (Ian Kent)
  - Fix check for ghosting option.  I forgot to check for it in DAEMONOPTIONS.
  - Remove STRIPDASH from /etc/sysconfig/autofs


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-12
changelog:
  - Add a sysconfig entry to disable direct map support, and set this to 
    1 by default.
  - Disable the beta map expiry logic so I can build into a stable distro.
  - Add defaults for all of the sysconfig variables to the init script so 
    we don't trip over user errors (i.e. deleting /etc/sysconfig/autofs).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-13
changelog:
  - Only read one auto.master map (instead of concatenating all found sources).
  - Uncomment Ian's experimental mount expiry patch.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-14
changelog:
  - New map expiry patch from Ian.
  - Fix a couple signal races.  No known problem reports of these, but they
    are holes, none-the-less.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-15
changelog:
  - Fix a socket leak in the rpc_subs, causing mounts to fail since we are 
    running out of port space fairly quickly.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-17
changelog:
  - Add patch to support parsing nsswitch.conf to determine map sources.
  - Disable this patch, and Ian's map expiry patch for a FC build.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-18
changelog:
  - Umount loopback filesystems under automount points when stopping the 
    automounter.
  - Uncomment the map expiry patch.
  - change a close to an fclose in lookup_file.c


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-20
changelog:
  - Merged my and Ian's socket leak fixes into one, smaller patch. Only
    partially addresses bz #128966.
  - Fix some more echo lines for internationalization. bz #77820
  - Revert the only one auto.master patch until we implement the +auto_master
    syntax.  Temporarily addresses bz #133055.


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-27
changelog:
  - Fixed an error in the init script which caused duplicate entries to be
    displayed when asking for autofs status.


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-29
changelog:
  - Fixed a problem with backwards compatability. Specifying local
    maps without '/etc/' prepended to them now works. (bz #136038)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-32
changelog:
  - Fixed the use of +ypmapname so the maps included with +ypmapname
    are used in the correct order.  (In the past the '+' entries
    were always processed after local entries.)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-34
changelog:
  - Added a patch to fix the automounter failing on ldap maps
    when it couldn't get the whole map.  (ie. when the search
    limit was lower than the number of results)


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-55
changelog:
  - Fix program maps so that they can have gt 4k characters. (Neil Horman)
    Addresses bz #138994.
  - Add a space after the colon here "Starting automounter:" in init script.
    Fixes bz #138513.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-57
changelog:
  - Pass a socket into clntudp_bufcreate so that we don't use up additional 
    reserved ports.  This patch, along with the socket leak fix, addresses
    bz #128966.


author: <jmoyer@redhat.com> - 1:4.1.3-74
changelog:
  - Add in the map expiry patch
  - Bring in other patches that have been committed to other branches. This 
    version should now contain all fixes we have to date
  - Merge conflicts due to map expiry changes


author: Chris Feist <cfeist@redhat.com> - 1:4.3-80
changelog:
  - Added a variable to determine if we created the directory or not
    so we don't accidently remove a directory that we didn't create when
    we stop autofs.  (bz #134399)


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-90
changelog:
  - Fix potential double free in cache_release.  This bug showed up in a
    multi-map setup.  Two calls to cache_release would result in a SIGSEGV,
    and the automount process would never exit.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-98
changelog:
  - Program maps can repeat the last character of output.  Fix this.  
    Addresses bz #138606
  - Return first entry when there are duplicate keys in a map.  Addresses
    bz #140108.
  - Propagate custom map variables to submounts.  Fixes bz #143074.
  - Create a sysconfig variable to control whether we source only one master
    map (the way sun does), or source all maps found (which is the default for
    backwards compatibility).  Addresses bz #143126.
  - Revised version of the get_best_mount patch. (#146887) cfeist@redhat.com
    The previous patch introduced a regression.  Non-replicated mounts would
    not have the white space stripped from the entry and the mount would fail.
  - Handle comment characters in the middle of the automount line in
    /etc/nsswitch.conf.  Addresses bz #127457.


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-100
changelog:
  - When using ldap if auto.master doesn't exist we now check for auto_master.
    Addresses bz #130079
  - When using an auto.smb map we now remove the leading ':' from the path which
    caused mount to fail in the past.  Addresses bz #147492
  - Autofs now checks /etc/nsswitch.conf to determine in what order files & nis
    are checked when looking up autofs submount maps which don't specify a
    maptype.  Addresses IT #57612.


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-111
changelog:
  - Fixed one off bug in the submount-variable-propagation patch.
    (bz #143074)
  - Fixed a bug in the init script which wouldn't find the -browse
    option if it was preceded by another option. (fz #113494)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-115
changelog:
  - Fixed regression causing any entries after a wildcard in an
    indirect map to be ignored. (bz #151668).
  - Fixed regression which caused local hosts to be mount instead
    of --bind local directories. (bz #146887)


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-119
changelog:
  - Merge in the multi-over patch.  This resolves an issue whereby multimounts
    (such as those used for /net) could be processed in the wrong order,
    resulting in directories not showing up in a multimount tree.  The fix
    is to process these directories in order, shortest to longer path.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-123
changelog:
  - Add in an error case that was omitted in the multi-over patch.
  - Update our auto.net to reflect the changes that went into 4.1.4_beta2.
    This fixes a problem seen by at least one customer where a malformed entry
    appeared first in the multimount list, thus causing the entire multimount
    to be ignored.  This new auto.net places that entry at the end, purely by
    luck, but it fixes the problem in this one case.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-4
changelog:
  - Finish up with the merge breakage.
  - Temporary fix for the multimount detection code.  It seems half-baked.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-6
changelog:
  - Fix a race between mounting a share and updating the cache in the parent
    process.  If the mount completed first, the parent would not expire the
    stale entry, leaving it first on the list.  This causes map updates to not
    be recognized (well, worse, they are recognized after the first expire, but
    not subsequent ones).  Fixes a regression, bug #137026 (rhel3 bug).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-7
changelog:
  - I reversed the checking for multimount entries, breaking those configs!
    This update puts the code back the way it was before I broke it.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-8
changelog:
  - Add in the deferred syslog patch.  This fixes a hung automounter issue
    related to unsafe calls to syslog in signal handler context.


author: <jmoyer@redhat.com> - 1:4.1.4-10
changelog:
  - Fix some bugs in the parser
  - allow -net instead of /etc/auto.net
  - Fix a buffer overflow with large key lengths
  - Don't allow autofs to unlink files, only to remove directories
  - change to the upstream reentrant syslog patch from the band-aid deferred
    syslog patch.
  - Get rid of the init script patch that hard-coded the release to redhat.
    This should be handled properly by all red hat distros.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-12
changelog:
  - The sort command no longer accepts options of the form "+0".  This broke
    auto.net, so the option was removed.  Fixes bz #172111.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-14
changelog:
  - Removed the /misc entry from the default auto.master.  auto.misc has
    an entry for the cdrom device, and the preferred method of mounting the
    cd is via udev/hal.


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-16
changelog:
  - Replace check-is-multi with more general multi-parse-fix.
  - Add fix for premature return when waiting for lock file.
  - Update copyright declaration for reentrant-syslog source.
  - Add patch for configure option to disable locking during mount.
    But don't disable locking by default.
  - Add ability to handle automount schema used in Sun directory server.
  - Quell compiler warning about getsockopt parameter.
  - Quell compiler warning about yp_order parameter.


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-18
changelog:
  - Add patch to allow customization of arguments to the
    autofs-ldap-auto-master program (bz #187525).
  - Add patch to escap "#" characters in exports from auto.net
    program mount (bz#178304).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-20
changelog:
  - add patch to use "cifs" instead of smbfs and escape speces
    in share names (bz #163999, #187732).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-23
changelog:
  - add patch to ignore the "bg" and "fg" mount options as they
    aren't relevant for autofs mounts (bz #184386).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-1
changelog:
  - update source to version 5.0.0_beta3.
  - add patch to remove extra debug print.
  - add patch to
    - fix memory alloc error in nis lookup module.
    - add "_" to "." mapname translation to nis lookup module.
  - add patch to add owner pid to mount list struct.
  - add patch to disable NFSv4 when probing hosts (at least foe now).
  - add patch to fix white space handling in replicated server selection code.
  - add patch to prevent striping of debug info macro patch (Jeff Moyer).
  - add patch to add sanity checks on rmdir_path and unlink (Jeff Moyer).
  - add patch to fix e2fsck error code check (Jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-3
changelog:
  - update hesiod module (Jeff Moyer).
    - add mutex to protect against overlapping mount requests.
    - update return from mount request to give more sensible NSS_*
      values.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-6
changelog:
  - add back test for nested mount in program map lookup.
    - I must have commented this out for a reason. I guess we'll
      find out soon enough.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-2
changelog:
  - re-instate v4 directory cleanup (bz# 193832 again).
  - backout master map lookup changes made to beta3.
  - change default master map from /etc/auto.master to auto.master
    so that we always use nsswitch to locate master map.
  - change default installed master map to include "+auto.master"
    to pickup NIS master map (all bz# 193831 again).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-4
changelog:
  - check base of offset mount tree is not a mount before umounting
    its offsets.
  - fix replicated mount parse for case where last name in list
    fails lookup.
  - correct indirect mount expire broken by the wildcard lookup fix.
  - fix up multi-mount handling when wildcard map entry present.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-6
changelog:
  - add free for working var in get_default_logging.
  - add inialisation for kver in autofs_point struct.
  - fix sources list corruption in check_update_map_sources.
  - fix memory leak in walk_tree.
  - fix memory leak in rpc_portmap_getport and rpc_ping_proto.
  - fix memory leak in initialisation of lookup modules.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-8
changelog:
  - fix handling of master map entry update (bz # 193718).
  - fix program map handling of invalid multi-mount offsets.


author: Jeff Moyer <jmoyer@redhat.com> - 5.0.0_beta4-12
changelog:
  - Change BuildPrereq to BuildRequires as per the package guidelines.
  - Add libxml2-devel to the BuildRequires, as it is needed for the LDAP
    authentication bits.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-13
changelog:
  - Change LDAP message severity from crit to degug (bz# 183893).
  - Corrections to INSTALL and README.v5.release.
  - Add patch to fix segv on overlength map keys in file maps (Jeff Moter).
  - Add patch to restrict scanning of /proc to pid directories only (Jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-3
changelog:
  - lookup_init cleanup and fix missed memory leak.
  - use nis map order to check if update is needed.
  - fix couple of memory leaks in lookup_yp.c.
  - fix pasre error in replicated server module.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-4
changelog:
  - correct spelling error in default config.
  - fix default auth config not being installed.
  - change LDAP query method as my test db was incorrect.
  - change ldap defaults code to handle missing auth config.
  - fix mistake in parsing old style LDAP specs.
  - update LDAP so that new query method also works for old syntax.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-5
changelog:
  - allow global macro defines to override system macros.
  - correct spelling error in default config files missed by
    previous update.
  - misc correctness and a memory leak fix.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-1
changelog:
  - consolidate to beta6, including:
    - mode change update for config file.
    - correction to get_query_dn fix from beta5-4.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-2
changelog:
  - merge LDAP authentication update for GSSAPI (Jeff Moyer).
  - update default auth config to add options documenetation (Jeff Moyer).
  - workaround segfaults at exit after using GSSAPI library.
  - fix not checking return in init_ldap_connection (jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-7
changelog:
  - correct directory cleanup in mount modules.
  - merge key and wildcard LDAP query for lookups (bz 197746).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.6
changelog:
  - cthon more parser corrections and attempt to fix multi-mounts
    with various combinations of submounts (still not right).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.14
changelog:
  - remove SIGCHLD handler because it is no longer needed and was
    causing expire problems.
  - alter expire locking of multi-mounts to lock sub-tree instead of
    entire tree.
  - review verbose message feedback and update.
  - correction for expire of multi-mounts.
  - spelling corrections to release notes (Jeff Moyer).
  - add back sloppy mount option, removed for Connectathon testing.
  - disable mtab locking again.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.15
changelog:
  - expire individual submounts.
  - add ino_index locking.
  - fix nested submount expiring away when pwd is base of submount.
  - more expire re-work to cope better with shutdown following cthon tests.
  - allow hostname to start with numeric when validating.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.16
changelog:
  - fix included map lookup.
  - fix directory cleanup on expire.
  - fix task cancelation at shutdown.
  - fix included map wild card key lookup.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.17
changelog:
  - fix task cancelation at shutdown (more)
  - fix concurrent mount and expire race with nested submounts.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.1
changelog:
  - consolidate to rc2.
  - fix colon escape handling.
  - fix recusively referenced bind automounts.
  - update kernel patches.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.5
changelog:
  - fix LDAP lookup delete cache entry only if entry doesn't exist.
  - add missing socket close in replicated host check (Jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.7
changelog:
  - make default installed master map for /net use "-hosts" instead
    of auto.net.
  - fix included map recursive map key lookup.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.10
changelog:
  - fix get_query_dn not looking in subtree for LDAP search.
  - allow syntax "--timeout <secs>" for backward compatibility
    (bz 193948).
  - make masked_match independent of hostname for exports comparison
    (bz 209638).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.11
changelog:
  - fix file handle leak in nsswitch parser (bz 207678).
  - fix memory leak in mount and expire request processing (bz 207678).
  - add additional check to prevent running of cancelled tasks.
  - fix potential file handle leakage in rpc_subs.c for some failure
    cases (bz 207678).
  - fix file handle leak in included map lookup (bz 207678).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.12
changelog:
  - fix "-fstype=nfs4" server probing (part 2 of bz 208757).
  - set close-on-exec flag on open files where possible (bz 207678).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.16
changelog:
  - fix get_query_dn not looking in subtree for LDAP search (missed
    econd occurance).
  - allow additional common LDAP attributes in map dn.
  - Resolves: rhbz#205997


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.20
changelog:
  - Update patch for changed semantics of mkdir in recent kernels.
  - fix macro table locking (bz 208091).
  - fix nsswitch parser locking (bz 208091).
  - allow only one master map read task at a time.
  - fix misc memory leaks.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.21
changelog:
  - mitigate manual umount of automounts where possible.
  - fix multiply recursive bind mounts.
  - check kernel module version and require 5.00 or above.
  - fix expire regression introduced in the "mitigate manual umount" patch.
  - still more on multiply recursive bind mounts.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.23
changelog:
  - fix tokenizer to distinguish between global option and dn string (bz 214684).
  - fix incorrect return from spawn.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.26
changelog:
  - fix parsing of bad mount mount point in master map (bz 215620).
  - fix use after free memory access in cache.c and lookup_yp.c (bz 208091).
  - eliminate use of pthread_kill to detect task completion (bz 208091).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.29
changelog:
  - alter nfs4 host probing to not use portmap lookup and add options
    check for "port=" parameter (bz 208757).
  - correct semantics of "-null" map handling (bzs 214800, 208091).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.33
changelog:
  - expand export access checks to include missing syntax options.
  - make "-hosts" module try to be sensitive to exports list changes.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.34
changelog:
  - change mount "device" from "automount" to the map name.
  - check for buffer overflow in mount_afs.c.
  - replace tempnam with mkdtemp.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.38
changelog:
  - update master map tokenizer to admit "slasify-colons" option.
  - update location validation to accept "_" (bz 219445).
  - set close-on-exec flag on open sockets (bz 215757).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.41
changelog:
  - fix nonstrict multi-mount handling (bz 219383).
  - correct detection of duplicate indirect mount entries (bz 220799).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.5
changelog:
  - remove fullstop from Summary tag.
  - change Buildroot to recommended form.
  - replace Prereq with Requires.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.13
changelog:
  - make double quote handing consistent (at least as much as we can).
  - fix handling of trailing white space in wildcard lookup (forward port bz 199720).
  - check fqdn of each interface when matching export access list (bz 213700).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.17
changelog:
  - make use of spaces and tabs in spec file consistent.
  - escape embedded macro text in %changelog.
  - eliminate redundant %version and %release.
  - remove redundant conditional check from %clean.
  - remove redundant exit from %preun.
  - correct %defattr spec.
  - remove empty %doc and redundant %dir misc lines.
  - combine program module spec lines into simpler one line form.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.18
changelog:
  - update the "task done race" patch to fix a deadlock.
  - added URL tag.
  - removed obsoletes autofs-ldap.
  - replaced init directory paths with %{_initrddir} macro.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.24
changelog:
  - add "condrestart" to init script (bz 228860).
  - add "@network" and .domain.name export check.
  - fix display map name in mount entry for "-hosts" map.


author: Ian Kent <ikent@redhat.com> - 5.0.1-1
changelog:
  - update to release tar.
  - fix return check for getpwuid_r and getgrgid_r.
  - patch to give up trying to update exports list while host is mounted.
  - fix to "@network" matching. 
  - patch to check for fstab update and retry if not updated.


author: Ian Kent <ikent@redhat.com> - 5.0.1-5
changelog:
  - drop "DEFAULT_" prefix from configuration names.
  - add option to select replicated server at random (instead of
    ping response time) (bz 227604).
  - fix incorrect cast in directory cleanup routines (bz 231864).


author: Ian Kent <ikent@redhat.com> - 5.0.1-6
changelog:
  - fix directory creation for browse mounts.
  - fix wildcard map handling and improve nsswitch source map update.


author: Ian Kent <ikent@redhat.com> - 5.0.1-8
changelog:
  - add configuration variable to control appending of global options (bz 214684).
  - add command option to set a global mount options string (bz 214684).


author: Ian Kent <ikent@redhat.com> - 5.0.1-9
changelog:
  - upstream fix for filesystem is local check.
  - disable exports access control check (bz 203277).
  - fix patch to add command option for set a global mount options (bz 214684).


author: Ian Kent <ikent@redhat.com> - 5.0.1-16
changelog:
  - add ldaps support.
    - note: it's no longer possible to have multiple hosts in an ldap map spec.
    - note: to do this you need to rely on the ldap client config.


author: Ian Kent <ikent@redhat.com> - 5.0.2-2
changelog:
  - include krb5.h in lookup_ldap.h (some openssl doesn't implicitly include it).
  - correct initialization of local var in parse_server_string.


author: Ian Kent <ikent@redhat.com> - 5.0.2-5
changelog:
  - fix mount point directory creation for bind mounts.
  - add quoting for exports gathered by hosts map.


author: Ian Kent <ikent@redhat.com> - 5.0.2-10
changelog:
  - mark map instances stale so they aren't "cleaned" during updates.
  - fix large file compile time option.


author: Ian Kent <ikent@redhat.com> - 5.0.2-11
changelog:
  - don't fail on empty master map.
  - add support for the "%" hack for case insensitive attribute schemas.


author: Ian Kent <ikent@redhat.com> - 5.0.2-14
changelog:
  - update patch to prevent failure on empty master map.
  - if there's no "automount" entry in nsswitch.conf use "files" source.
  - add LDAP schema discovery if no schema is configured.


author: Ian Kent <ikent@redhat.com> - 5.0.2-16
changelog:
  - add descriptive comments to config about LDAP schema discovery.
  - work around segfault at exit caused by libxml2.
  - fix foreground logging (also fixes shutdown needing extra signal bug).


author: Ian Kent <ikent@redhat.com> - 5.0.2-18
changelog:
  - fix schema selection in LDAP schema discovery.
  - check for "*" when looking up wildcard in LDAP.
  - fix couple of edge case parse fails of timeout option.
  - add SEARCH_BASE configuration option.
  - add random selection as a master map entry option.
  - re-read config on HUP signal.
  - add LDAP_URI, LDAP_TIMEOUT and LDAP_NETWORK_TIMEOUT configuration options.
  - fix deadlock in submount mount module.
  - fix lack of ferror() checking when reading files.
  - fix typo in autofs(5) man page.
  - fix map entry expansion when undefined macro is present.
  - remove unused export validation code.
  - add dynamic logging (adapted from v4 patch from Jeff Moyer).
  - fix recursive loopback mounts (Matthias Koenig).
  - add map re-load to verbose logging.
  - fix handling of LDAP base dns with spaces.
  - handle MTAB_NOTUPDATED status return from mount.
  - when default master map, auto.master, is used also check for auto_master.
  - update negative mount timeout handling.
  - fix large group handling (Ryan Thomas).
  - fix for dynamic logging breaking non-sasl build (Guillaume Rousse).
  - eliminate NULL proc ping for singleton host or local mounts.


author: Ian Kent <ikent@redhat.com> - 5.0.2-21
changelog:
  - Bug 421371: CVE-2007-5964 autofs defaults don't restrict suid in /net [rawhide]
    - use mount option "nosuid" for "-hosts" map unless "suid" is explicily specified.


author: Ian Kent <ikent@redhat.com> - 5.0.2-23
changelog:
  - Bug 397591 SELinux is preventing /sbin/rpc.statd (rpcd_t) "search" to <Unknown> (sysctl_fs_t).
    - prevent fork between fd open and setting of FD_CLOEXEC.


author: Ian Kent <ikent@redhat.com> - 5.0.2-25
changelog:
  - Bug 426401: CVE-2007-6285 autofs default doesn't set nodev in /net [rawhide]
    - use mount option "nodev" for "-hosts" map unless "dev" is explicily specified.


author: Ian Kent <ikent@redhat.com> - 5.0.3-3
changelog:
  - catch "-xfn" map type and issue "no supported" message.
  - another correction for handling of LDAP base dns with spaces.


author: Ian Kent <ikent@redhat.com> - 5.0.3-4
changelog:
  - correction to the correction for handling of LDAP base dns with spaces.
  - avoid using UDP for probing NFSv4 mount requests.
  - use libldap instead of libldap_r.


author: Ian Kent <ikent@redhat.com> - 5.0.3-6
changelog:
  - fix expire calling kernel more often than needed.
  - fix unlink of mount tree incorrectly causing autofs mount fail.
  - add miscellaneous device node interface library.
  - use miscellaneous device node, if available, for active restart.
  - device node and active restart fixes.
  - update is_mounted to use device node ioctl, if available.


author: Ian Kent <ikent@redhat.com> - 5.0.3-8
changelog:
  - revert miscellaneous device node related patches.
  - add missing check for zero length NIS key.
  - fix incorrect match of map type name when included in map name.
  - update rev 7 sasl callbacks patch.


author: Ian Kent <ikent@redhat.com> - 5.0.3-18
changelog:
  - don't abuse the ap->ghost field on NFS mount.
  - multi-map doesn't pickup NIS updates automatically.
  - eliminate redundant DNS name lookups.
  - mount thread create condition handling fix.
  - allow directory create on NFS root.
  - check direct mount path length.
  - fix incorrect in check in get user info.
  - fix a couple of memory leaks.


author: Ian Kent <ikent@redhat.com> - 5.0.3-21
changelog:
  - add upstream bug fix patches
    - add command line option to override is running check.
    - don't use proc fs for is running check.
    - fix fail on included browse map not found.
    - fix incorrect multi source messages.
    - clear stale flag on map read.
    - fix proximity other rpc ping timeout.
    - refactor mount request vars code.
    - make handle_mounts startup condition distinct.
    - fix submount shutdown handling.
    - try not to block on expire.
    - add configuration paramter UMOUNT_WAIT.
    - fix multi mount race.
    - fix nfs4 colon escape handling.
    - check replicated list after probe.
    - add replicated server selection debug logging.
    - update replicated server selection documentation.
    - use /dev/urandom instead of /dev/random.
    - check for mtab pointing to /proc/mounts.
    - fix interface config buffer size.
    - fix percent hack heap corruption.


author: Ian Kent <ikent@redhat.com> - 5.0.3-23
changelog:
  - add upstream bug fixes
    - bug fix for mtab check.
    - bug fix for zero length nis key.
    - update for ifc buffer handling.
    - bug fix for kernel automount handling.
  - warning: I found a bunch of patches that were present but not
    being applied.


author: Ian Kent <ikent@redhat.com> - 5.0.3-25
changelog:
  - fix fd leak at multi-mount non-fatal mount fail.
  - fix incorrect multi-mount mountpoint calcualtion.


author: Ian Kent <ikent@redhat.com> - 5.0.3-26
changelog:
  - add map-type-in-map-name fix patch to sync with upstream and RHEL.
  - don't readmap on HUP for new mount.
  - add NIS_PARTIAL to map entry not found check and fix use after free bug.


author: Ian Kent <ikent@redhat.com> - 5.0.3-28
changelog:
  - don't close file handle for rootless direct mounti-mount at mount.
  - wait submount expire thread completion when expire successful.
  - add inadvertantly ommitted server list locking in LDAP module.


author: Ian Kent <kent@redhat.com> - 5.0.3-30
changelog:
  - fix segv during library re-open.
  - fix incorrect pthreads condition handling for expire requests.
  - fix master map lexer eval order.
  - fix bad alloca usage.


author: Ian Kent <kent@redhat.com> - 5.0.4-5
changelog:
  - fix negative caching of non-existent keys.
  - fix ldap library detection in configure.
  - use CLOEXEC flag functionality if present.
  - fix select(2) fd limit.
  - make hash table scale to thousands of entries.


author: Ian Kent <ikent@redhat.com> - 5.0.4-8
changelog:
  - rename program map parsing bug fix patch.
  - use CLOEXEC flag functionality for setmntent also, if present.


author: Ian Kent <ikent@redhat.com> - 5.0.4-9
changelog:
  - fix hosts map use after free.
  - fix uri list locking (again).
  - check for stale SASL credentials upon connect fail.
  - add "forcestart" and "forcerestart" init script options to allow
    use of 5.0.3 strartup behavior if required.
  - always read entire file map into cache to speed lookups.
  - make MAX_ERR_BUF and PARSE_MAX_BUF use easier to audit.
  - make some easy alloca replacements.
  - update to configure libtirpc if present.
  - update to provide ipv6 name and address support.
  - update to provide ipv6 address parsing.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-15
changelog:
  - fix array out of bounds accesses and cleanup couple of other alloca() calls.
  - Undo mistake in copy order for submount path introduced by rev 11 patch.
  - add check for alternate libxml2 library for libxml2 tsd workaround.
  - add check for alternate libtirpc library for libtirpc tsd workaround.
  - cleanup configure defines for libtirpc.
  - add WITH_LIBTIRPC to -V status report.
  - add libtirpc-devel to BuildRequires.
  - add nfs mount protocol default configuration option.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-21
changelog:
  - fix file map lookup when reading included or nsswitch sources.
    - a regression introduced by file map lookup optimisation in rev 9.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-26
changelog:
  - fix lsb init script header.
  - fix memory leak reading ldap master map.
  - fix st_remove_tasks() locking.
  - reset flex scanner when setting buffer.
  - zero s_magic is valid.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-28
changelog:
  - use intr option as hosts mount default.
  - sync kernel includes with upstream kernel.
  - dont umount existing direct mount on master re-read.
  - fix incorrect shutdown introduced by library relaod fixes.
  - improve manual umount recovery.
  - dont fail on ipv6 address when adding host.
  - always read file maps multi map fix.
  - always read file maps key lookup fixes.
  - add support for LDAP_URI="ldap:///<domain db>" SRV RR lookup.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-30
changelog:
  - fix incorrect dclist free.
  - srv lookup handle endianness.
  - fix bug introduced by library reload changes which causes autofs to
    not release mount thread resources when using submounts.
  - fix notify mount message path.
  - try harder to work out if we created mount point at remount.
  - fix double free in do_sasl_bind().
  - manual umount recovery fixes.
  - fix map type info parse error.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-32
changelog:
  - fix an RPC fd leak.
  - don't block signals we expect to dump core.
  - fix pthread push order in expire_proc_direct().


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-39
changelog:
  - fix libxml2 non-thread-safe calls.
  - fix direct map cache locking.
  - fix patch "dont umount existing direct mount on reread" deadlock.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-1
changelog:
  - update source to latest upstream version.
    - this is essentially a consolidation of the patches already in this rpm.
  - add dist tag to match latest RHEL-5 package tag format.


author: Ian Kent <kent@redhat.com> - 1:5.0.5-2
changelog:
  - fix included map read fail handling.
  - refactor ldap sasl authentication bind to eliminate extra connect
    causing some servers to reject the request. 
  - add mount wait parameter to allow timeout of mount requests to
    unresponsive servers.
  - special case cifs escape handling.
  - fix libxml2 workaround configure.
  - more code analysis corrections (and fix a typo in an init script).
  - fix backwards #ifndef INET6.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-6
changelog:
  - don't use master_lex_destroy() to clear parse buffer.
  - make documentation for set-log-priority clearer.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-17
changelog:
  - dont connect at ldap lookup module init.
  - fix random selection option.
  - fix disable timeout.
  - fix strdup() return value check.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-22
changelog:
  - fix get query dn failure.
  - fix ampersand escape in auto.smb.
  - add locality as valid ldap master map attribute.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-25.fc14
changelog:
  - make nfs4 default for replicated selection configuration (bz579949).
  - add simple bind authentication option (bz579951).


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-27.fc14
changelog:
  - fix master map source server unavailable handling.
  - add autofs_ldap_auth.conf man page.
  - fix random selection for host on different network.
  - make redhat init script more lsb compliant.
  - don't hold lock for simple mounts.
  - fix remount locking.
  - fix wildcard map entry match.
  - fix parse_sun() module init.
  - dont check null cache on expire.
  - fix null cache race.
  - fix cache_init() on source re-read.
  - fix mapent becomes negative during lookup.
  - check each dc server individually.
  - fix negative cache included map lookup.
  - remove state machine timed wait.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-28
changelog:
  - remove extra read master map call.
  - remove extra cache create call in master_add_map_source().
  - fix error handing in do_mount_indirect().
  - expire thread use pending mutex.
  - explicity link against the Kerberos library.
  - remove some log message duplication for verbose logging.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-32.fc15
changelog:
  - always read file maps mount lookup map read fix.
  - fix direct map not updating on reread.
  - add external bind method.
  - fix add simple bind auth.
  - add option to dump configured automount maps.
  - wait for master map to be available at start.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-36
changelog:
  - use weight only for server selection.
  - fix isspace() wild card substition.
  - auto adjust ldap page size.
  - fix prune cache valid check.
  - fix mountd vers retry.
  - fix expire race.
  - add lsb force-reload and try-restart.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-3
changelog:
  - improve mount location error reporting.
  - fix paged query more results check.
  - fix dumpmaps not reading maps.
  - fix result null check in read_one_map().
  - Fix LDAP result leaks on error paths.
  - code analysis fixes 1.
  - fix not bind mounting local filesystem.
  - update dir map-type patch for changed patch order.
  - fix wait for master source mutex.
  - fix submount shutdown race
  - fix fix map source check in file lookup.
  - add disable move mount configure option.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-5
changelog:
  - fix ipv6 name lookup check.
  - fix ipv6 rpc calls.
  - fix ipv6 configure check.
  - add piddir to configure.
  - add systemd unit support.
  - fix MNT_DETACH define.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-9
changelog:
  - add correct patch for "fix improve mount location error reporting".
  - add correct patch for "fix fix wait for master source mutex".


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-12
changelog:
  - ignore duplicate exports in auto.net.
  - add kernel verion check function.
  - add function to check mount.nfs version.
  - reinstate singleton mount probe.
  - rework error return handling in rpc code.
  - catch EHOSTUNREACH and bail out early.
  - systemd support fixes.
  - fix segmentation fault in do_remount_indirect().


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-15
changelog:
  - fix typo in libtirpc file name.
  - fix rework error return handling in rpc code.
  - allow MOUNT_WAIT to override probe.
  - improve UDP RPC timeout handling.
  - fix segfault in get_query_dn().
  - use strtok_r() in linux_version_code().
  - fix sss wildcard match.
  - fix dlopen() error handling in sss module.
  - fix configure string length tests for sss library.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-21
changelog:
  - fix fix LDAP result leaks on error paths.
  - report map not read when debug logging.
  - duplicate parent options for included maps.
  - update ->timeout() function to not return timeout.
  - move timeout to map_source.
  - fix kernel verion check of version components.
  - dont retry ldap connect if not required.
  - check if /etc/mtab is a link to /proc/self/mounts.
  - fix nfs4 contacts portmap.
  - make autofs wait longer for shutdown.
  - fix sss map age not updated.
  - fix remount deadlock.
  - fix umount recovery of busy direct mount.
  - fix offset mount point directory removal.
  - remove move mount code and configure option.
  - fix remount of multi mount.
  - fix devce ioctl alloc path check.
  - refactor hosts lookup module.
  - remove cache update from parse_mount().
  - add function to delete offset cache entry.
  - allow update of multi mount offset entries.
  - add hup signal handling to hosts map.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-21
changelog:
  - fix systemd argument passing.
  - fix get_nfs_info() can incorrectly fail.
  - fix offset directory removal.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-3
changelog:
  - fix nobind sun escaped map entries.
  - fix use cache entry after free mistake.
  - fix ipv6 proximity calculation.
  - fix parse buffer initialization.
  - fix typo in automount(8).


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-4
changelog:
  - include usage in usage message.
  - dont wait forever to restart.
  - add option description to man page.
  - fix null map entry order handling.
  - make description of default MOUNT_WAIT setting clear.
  - configure.in: allow cross compilation.
  - README: update mailing list subscription info.
  - allow non root user to check status.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-6
changelog:
  - fix recursive mount deadlock.
  - increase file map read buffer size.
  - handle new location of systemd.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-8
changelog:
  - fix map entry duplicate offset detection.
  - Allow nsswitch.conf to not contain "automount:" lines.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-10
changelog:
  - fix submount offset delete.
  - fix init script status return.
  - fix use get_proximity() without libtirpc.
  - don't use dirent d_type to filter out files in scandir().
  - don't schedule new alarms after readmap.
  - use numeric protocol ids instead of protoent structs.
  - lib/defaults.c: use WITH_LDAP conditional around LDAP types.
  - make yellow pages support optional.
  - modules/replicated.c: use sin6_addr.s6_addr32.
  - workaround missing GNU versionsort extension.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-12
changelog:
  - dont fail on master map self include.
  - fix wildcard multi map regression.
  - fix file descriptor leak when reloading the daemon.
  - depricate nosymlink pseudo option.
  - add symlink pseudo option.
  - update kernel include files.
  - fix requires in spec file.
  - fix libtirpc build option.
  - fix systemd unidir in spec file.
  - document browse option in man page.
  - fix automounter support on parisc.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-16
changelog:
  - make dump maps check for duplicate indirect mounts (bz961312).
  - document allowed map sources in auto.master(5) (bz961312).
  - add enable sloppy mount option to configure.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-20
changelog:
  - fix master map mount options matching.
  - fix master map bogus keywork match.
  - fix fix map entry duplicate offset detection.
  - add a number of fixes based on a Covarity report.


author: Ian Kent <ikent@redhat.com> - 1:5.0.8-3
changelog:
  - fix undefined authtype_requires_creds err if ldap enabled but without sasl.
  - fix master map type check.
  - fix task manager not getting signaled.


author: Ian Kent <ikent@redhat.com> - 1:5.0.8-4
changelog:
  - allow --with-systemd to take a path arg.
  - fix WITH_LIBTIRPC function name.
  - fix ipv6 libtirpc getport (bz1033918).


author: Ian Kent <ikent@redhat.com> - 1:5.0.8-5
changelog:
  - fix ipv6 link local address handling.
  - fix fix ipv6 libtirpc getport.
  - get_nfs_info() should query portmapper if port is not given.
  - fix rpc_portmap_getport() proto not set.


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-0.beta1.1
changelog:
  - amd lookup update lookup ldap to handle amd keys
    - inadvertantly drop from initial series.
  - amd lookup update lookup hesiod to handle amd keys
    - inadvertantly drop from initial series.
  - fix wildcard key lookup.
  - check for non existent negative entries in lookup_ghost().


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-1
changelog:
  - update to upstream release, 5.1.0.
    - fix reset flex scan buffer on init.
    - fix fix negative status being reset on map read.
    - fix out of order amd timestamp lookup.
    - fix ldap default schema config.
    - fix ldap default master map name config.
    - fix map format init in lookup_init().
    - fix incorrect max key length in defaults get_hash().
    - fix xfn sets incorrect lexer state.
    - fix old style key lookup.
    - fix expire when server not responding.
    - fix ldap_uri config update.
    - fix typo in conf_load_autofs_defaults().
    - fix hash on confg option add and delete.
    - add plus to path match pattern.
    - fix multi entry ldap option handling.
    - cleanup options in amd_parse.c.
    - allow empty value for some map options.
    - allow empty value in macro selectors.


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-3
changelog:
  - fix compile error in defaults.c.
  - add serialization to sasl init.
  - dont allocate dev_ctl_ops too early.
  - fix incorrect round robin host detection.
  - fix race accessing qdn in get_query_dn().
  - fix leak in cache_push_mapent().
  - fix config entry read buffer not checked.
  - fix FILE pointer check in defaults_read_config().
  - fix memory leak in conf_amd_get_log_options().
  - fix signed comparison in inet_fill_net().
  - fix buffer size checks in get_network_proximity().
  - fix leak in get_network_proximity().
  - fix buffer size checks in merge_options().
  - check amd lex buffer len before copy.
  - add return check in ldap check_map_indirect().
  - check host macro is set before use.
  - check options length before use in parse_amd.c.
  - fix some out of order evaluations in parse_amd.c.
  - fix copy and paste error in dup_defaults_entry().


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-7
changelog:
  - force disable browse mode for amd format maps.
  - fix hosts map options check in lookup_amd_instance().
  - fix memory leak in create_client().
  - fix memory leak in get_exports().
  - fix memory leak in get_defaults_entry().
  - fix out of order clearing of options buffer.
  - fix reset amd lexer scan buffer.
  - ignore multiple commas in options strings.
  - fix typo in flagdir configure option.
  - clarify multiple mounts description.
  - gaurd against incorrect umount return.
  - update man page autofs(8) for systemd.
  - remove ancient kernel Requires.


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-9
changelog:
  - fix custom autofs.conf not being installed.
  - init qdn before use in get_query_dn().
  - fix typo in update_hosts_mounts().
  - fix hosts map update on reload.


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-10
changelog:
  - make negative cache update consistent for all lookup modules.
  - ensure negative cache isn't updated on remount.
  - dont add wildcard to negative cache.
  - make service want network-online (bz1071591).


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-5
changelog:
  - actually apply fix use after free in do_master_list_reset().
  - fix deadlock in dumpmaps.
  - fix rpcgen dependency problem.


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-6
changelog:
  - dont use array for path when not necessary.
  - fix prefix option handling in expand_entry().
  - fix sublink option not set from defaults.
  - fix error return in do_nfs_mount().


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-7
changelog:
  - add error handling for ext_mount_add().
  - account for recent libnsl changes.
  - use_hostname_for_mounts shouldn't prevent selection among replicas.
  - fix monotonic_elapse.
  - Makefiles.rules: remove 'samples' from SUBDIRS.


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-12
changelog:
  - dont allow trailing slash in master map mount points.
  - fix libresolv configure check.
  - add fedfs-getsrvinfo.c.
  - add mount.fedfs.c.
  - add fedfs-map-nfs4.c
  - add conditional inclusion of fedfs binaries.
  - add an example fedfs master map entry to the installed master map.


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-16
changelog:
  - tiny patch for autofs typo and possible bug.
  - add units After line to include statd service.
  - use systemd sd_notify() at startup.
  - add "BuildRequires: systemd-devel".
  - fix NFS version mask usage.
  - fix incorrect date in changelog.


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-17
changelog:
  - bz1577700 - automount leaves FDs in half-open state
    - fix fd leak in rpc_do_create_client().
  - Resolves: rhbz#1577700


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-18
changelog:
  - bz1593492 - Ignore trailing slashes at the end of executable maps in
    auto.master config file
    - add-man page note about extra slashes in paths
  - Resolves: rhbz#1593492


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-19
changelog:
  - bz1602447 - Please review important issues found by covscan in
    "autofs-5.1.4-18.el8+7"
    - covarity fixes.
  -Resolves: rhbz#1602447


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-20
changelog:
  - bz1612565 - Man page scan results for autofs
    - fix program usage message.
  - Resolves: rhbz#1612565


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-21
changelog:
  - bz1611866 - autofs reload is unable to activate new map entries,
    it is autofs restart which shows new map entries.
    - fix update_negative_cache() map source usage.
  - bz1613621 - [autofs]Removed entries still can be accessed
    - mark removed cache entry negative.
  - Resolves: rhbz#1611866 rhbz#1613621


author: Ian Kent <ikent@redhat.com> - 5.1.4-22
changelog:
  - bz1613630 - On Red Hat 7.x systems if you try to access local
    filesystems using the automounter through /net then the shell
    and mount could lock up *if* the filesystem your accessing is
    double exported.
    - set bind mount as propagation slave.
    - add master map pseudo options for mount propagation.
  - Resolves: rhbz#1613630


author: Ian Kent <ikent@redhat.com> - 5.1.4-23
changelog:
  - bz1615782 - autofs master map age is incorrectly set
    - fix age setting at startup.
  - Resolves: rhbz#1615782


author: Ian Kent <ikent@redhat.com> - 5.1.4-24
changelog:
  - bz1621938 - autofs can no longer get maps from IPA server
    - fix use after free in parse_ldap_config().
  - Resolves: rhbz#1621938


author: Ian Kent <ikent@redhat.com> - 5.1.4-26
changelog:
  - bz1630190 - yum update hanging while restarting autofs
    - fix incorrect locking in sss lookup.
  - bz1630194 - after upgrading to autofs-5.0.7-83.el7.x86_64 on
    RHEL 7 clients, amd maps /defaults key mount options are no
    longer working
    - fix amd parser opts option handling.
  - Resolves: rhbz#1630190 rhbz#1630194


author: Ian Kent <ikent@redhat.com> - 5.1.4-27
changelog:
  - bz1638487 - Drop dependency on hesiod
    - better handle hesiod support not built in.
    - exclude hesiod support from configure options
    - remove hesiod depends.
  - Resolves: rhbz#1638487


author: Ian Kent <ikent@redhat.com> - 5.1.4-28
changelog:
  - bz1638487 - Drop dependency on hesiod
    - actually update the spec file with the hesiod removal.
  - Related: rhbz#1638487


author: Ian Kent <ikent@redhat.com> - 5.1.4-29
changelog:
  - bz1654541 - autofs crash when parsing master map
    - fix hesiod string check in master_parse().
  - Resolves: rhbz#1654541


author: Ian Kent <ikent@redhat.com> - 5.1.4-30
changelog:
  - bz1689469 - [autofs] The log no longer print PID of automount process
    - remove autofs4 module load code.
    - add NULL check in prepare_attempt_prefix().
    - update build info with systemd.
    - use flags for startup boolean options.
    - move close stdio descriptors to become_daemon().
    - add systemd service command line option.
  - Resolves: rhbz#1689469


author: Ian Kent <ikent@redhat.com> - 5.1.4-31
changelog:
  - bz1689467 - path_resolution on an autofs managed path resets the timer. Can
    this be made configurable?
    - support strictexpire mount option.
  - Resolves: rhbz#1689467


author: Ian Kent <ikent@redhat.com> - 5.1.4-32
changelog:
  - bz1703876 - [RFE] Enable additional logging information for autofs
    - add NULL check for get_addr_string() return.
    - use malloc(3) in spawn.c.
    - add mount_verbose configuration option.
    - optionally log mount requestor process info.
    - log mount call arguments if mount_verbose is set.
  - Resolves: rhbz#1703876


author: Ian Kent <ikent@redhat.com> - 5.1.4-33
changelog:
  - bz1689466 - Sanitize autofs logging
    - make expire remaining log level debug.
  - bz1685805 - autofs doesn't expand macros in amd map selectors
    - allow period following macro in selector value.
    - fix macro expansion in selector values.
  - Resolves: rhbz#1689466 rhbz#1685805


author: Ian Kent <ikent@redhat.com> - 5.1.4-34
changelog:
  - bz1681956 - autofs changes blocked until gating tests are added
    - add gating.yaml for manual gate testing.
  - Related: rhbz#1681956


author: Ian Kent <ikent@redhat.com> - 5.1.4-35
changelog:
  - bz1681956 - autofs changes blocked until gating tests are added
    - correct test name in gating.yaml.
  - Related: rhbz#1681956


author: Ian Kent <ikent@redhat.com> - 5.1.4-36
changelog:
  - bz1743442 - getmntent returns additional "-hosts" entries when
    automounter is used with "hosts" map (userspace part)
    - also use strictexpire for offsets (mounts).
    - change expire type naming to better reflect usage.
    - remove unused function has_fstab_option().
    - remove unused function reverse_mnt_list().
    - remove a couple of old debug messages.
    - fix amd entry memory leak.
    - fix unlink_mount_tree() not umounting mounts.
    - add ignore mount option.
    - use ignore option for offset mounts as well.
    - add config option for "ignore" mount option.
    - use bit flags for autofs mount types in mnt_list.
    - use mp instead of path in mnt_list entries.
    - always use PROC_MOUNTS to make mount lists.
    - add glibc getmntent_r().
    - use local getmntent_r in table_is_mounted().
    - refactor unlink_active_mounts() in direct.c.
    - don't use tree_is_mounted() for mounted checks.
    - use single unlink_umount_tree() for both direct and indirect mounts.
    - move unlink_mount_tree() to lib/mounts.c.
    - use local_getmntent_r() for unlink_mount_tree().
    - use local getmntent_r() in get_mnt_list().
    - use local getmntent_r() in tree_make_mnt_list().
    - fix missing initialization of autofs_point flags.
  - Resolves: rhbz#1743442


author: Ian Kent <ikent@redhat.com> - 5.1.4-37
changelog:
  - bz1660145 - autofs.schema doesn't work in RHEL8
    - update ldap READMEs and schema definitions.
  - Resolves: rhbz#1660145


author: Ian Kent <ikent@redhat.com> - 5.1.4-38
changelog:
  - bz1660145 - autofs.schema doesn't work in RHEL8
    - update spec file doc inclusions for schema definition update.
  - Related: rhbz#1660145


author: Ian Kent <ikent@redhat.com> - 5.1.4-39
changelog:
  - bz1802251 - Autofs will only mount share once if sss is first ini
    nsswitch.conf
    - fix a regression with map instance lookup.
  - Resolves: rhbz#1802251


author: Ian Kent <ikent@redhat.com> - 5.1.4-41
changelog:
  - bz1835547 - [RHEL8]autofs cannot mount samba/cifs shares that end with a
    dollar sign
    - fix trailing dollar sun entry expansion.
  - Resolves: rhbz#1835547


author: Ian Kent <ikent@redhat.com> - 5.1.4-42
changelog:
  - bz1841456 - automount program crashes with "malloc(): invalid next size
    (unsorted)
    - initialize struct addrinfo for getaddrinfo() calls.
    - fix quoted string length calc in expandsunent().
  -Resolves: rhbz#1841456


author: Ian Kent <ikent@redhat.com> - 5.1.4-43
changelog:
  - bz1841456 - automount program crashes with "malloc(): invalid next size
    (unsorted)
    - fix autofs mount options construction.
  -Related: rhbz#1841456


author: Ian Kent <ikent@redhat.com> - 5.1.4-44
changelog:
  - bz1858742 - autofs share doesn't mount when using nobind over RDMA where
    nfs-server and nfs-client are the same systems.
    - mount_nfs.c fix local rdma share not mounting.
  -Resolves: rhbz#1858742


author: Ian Kent <ikent@redhat.com> - 5.1.4-45
changelog:
  - bz1664561 - incorrect of start service command in autofs man page
    - fix incorrect systemctl command syntax in autofs(8).
  -Resolves: rhbz#1664561


author: Ian Kent <ikent@redhat.com> - 5.1.4-46
changelog:
  - bz1664561 - incorrect of start service command in autofs man page
    - actually apply fix patch.
  - fix dates and recent status messages in changelog.
  -Related: rhbz#1664561 rhbz#1858742


author: Ian Kent <ikent@redhat.com> - 5.1.4-47
changelog:
  - bz1887681 - automount force unlink option (-F) does not work as expected
    on autofs-5.0.7-109.el7
    - fix direct mount unlink_mount_tree() path.
    - fix unlink mounts umount order.
    - fix incorrect logical compare in unlink_mount_tree().
    - use bit flag for force unlink mounts.
    - improve force unlink mounts option description.
    - remove logpri fifo on autofs mount fail.
    - add force unlink mounts and exit option.
    - cleanup stale logpri fifo pipes on unlink and exit.
  - Resolves: rhbz#1887681


author: Ian Kent <ikent@redhat.com> - 5.1.4-48
changelog:
  - bz1892184 - autofs: return a connection failure until maps have been fetched
    - fix lookup_nss_read_master() nsswicth check return.
    - fix typo in open_sss_lib().
    - fix sss_master_map_wait timing.
    - add sss ECONREFUSED return handling.
    - use mapname in sss context for setautomntent().
    - add support for new sss autofs proto version call.
    - fix retries check in setautomntent_wait().
    - refactor sss setautomntent().
    - improve sss setautomntent() error handling.
    - refactor sss getautomntent().
    - improve sss getautomntent() error handling.
    - sss introduce calculate_retry_count() function.
    - move readall into struct master.
    - sss introduce a flag to indicate map being read.
    - update sss timeout documentation.
    - refactor sss getautomntbyname().
    - improve sss getautomntbyname() error handling.
    - use a valid timeout in lookup_prune_one_cache().
    - dont prune offset map entries.
    - simplify sss source stale check.
  - Resolves: rhbz#1892184


author: Ian Kent <ikent@redhat.com> - 5.1.4-64
changelog:
  - bz1912106 - Using -hosts option does not resolve host from /etc/hosts and mount
    failes
      - use defines for expire type.
    - remove unused function dump_master().
    - fix additional typing errors.
    - make bind mounts propagation slave by default.
    - fix browse dir not re-created on symlink expire.
      - update list.h.
    - add hashtable implementation.
    - change mountpoint to mp in struct ext_mount.
    - make external mounts independent of amd_entry.
    - make external mounts use simpler hashtable.
    - add a hash index to mnt_list.
    - use mnt_list for submounts.
    - use mnt_list for amdmounts.
    - make umount_autofs() static.
    - remove force parameter from umount_all().
    - fix remount expire.
    - fix stale offset directories disable mount.
    - use struct mnt_list to track mounted mounts.
    - use struct mnt_list mounted list for expire.
    - remove unused function tree_get_mnt_list().
    - only add expre alarm for active mounts.
    - move submount check into conditional_alarm_add().
    - move lib/master.c to daemon/master.c.
    - use master_list_empty() for list empty check.
    - add helper to construct mount point path.
      - add xdr_exports().
    - remove mount.x and rpcgen dependencies.
    - dont use realloc in host exports list processing.
    - use sprintf() when constructing hosts mapent.
    - fix mnts_remove_amdmount() uses wrong list.
    - eliminate cache_lookup_offset() usage.
    - fix is mounted check on non existent path.
    - simplify cache_get_parent().
    - set offset parent in update_offset_entry().
    - remove redundant variables from mount_autofs_offset().
    - remove unused parameter form do_mount_autofs_offset().
    - refactor umount_multi_triggers().
    - eliminate clean_stale_multi_triggers().
    - simplify mount_subtree() mount check.
    - fix mnts_get_expire_list() expire list construction.
    - fix inconsistent locking in umount_subtree_mounts().
    - fix return from umount_subtree_mounts() on offset list delete.
    - pass mapent_cache to update_offset_entry().
    - fix inconsistent locking in parse_mount().
    - remove unused mount offset list lock functions.
    - eliminate count_mounts() from expire_proc_indirect().
    - eliminate some strlen calls in offset handling.
    - don't add offset mounts to mounted mounts table.
    - reduce umount EBUSY check delay.
    - cleanup cache_delete() a little.
    - rename path to m_offset in update_offset_entry().
    - don't pass root to do_mount_autofs_offset().
    - rename tree implementation functions.
    - fix program map multi-mount lookup after mount fail.
    - add some multi-mount macros.
    - remove unused functions cache_dump_multi() and cache_dump_cache().
    - add a len field to struct autofs_point.
    - make tree implementation data independent.
    - add mapent tree implementation.
    - add tree_mapent_add_node().
    - add tree_mapent_delete_offsets().
    - add tree_mapent_traverse_subtree().
    - fix mount_fullpath().
    - add tree_mapent_cleanup_offsets().
    - add set_offset_tree_catatonic().
    - add mount and umount offsets functions.
    - switch to use tree implementation for offsets.
    - remove obsolete functions.
    - remove redundant local var from sun_mount().
    - use mount_fullpath() in one spot in parse_mount().
    - pass root length to mount_fullpath().
    - remove unused function master_submount_list_empty().
    - move amd mounts removal into lib/mounts.c.
    - check for offset with no mount location.
    - remove mounts_mutex.
  - Resolves: rhbz#1912106


author: Ian Kent <ikent@redhat.com> - 5.1.4-65
changelog:
  - bz1912106 - Using -hosts option does not resolve host from /etc/hosts and mount
    failes
    - fix unapplied patch.
    - remove unused variable from get_exports().
  - Related: rhbz#1912106


author: Ian Kent <ikent@redhat.com> - 5.1.4-66
changelog:
  - bz1912106 - Using -hosts option does not resolve host from /etc/hosts and mount
    failes
    - Coverity fixes
      - add missing free in handle_mounts().
      - remove redundant if check.
      - fix possible memory leak in master_parse().
      - fix possible memory leak in mnts_add_amdmount().
      - fix double unlock in parse_mount().
      - add length check in umount_subtree_mounts().
      - fix flags check in umount_multi().
      - dont try umount after stat() ENOENT fail.
      - remove redundant assignment in master_add_amd_mount_section_mounts().
      - fix dead code in mnts_add_mount().
      - fix arg not used in error print.
      - fix missing lock release in mount_subtree().
      - fix double free in parse_mapent().
      - refactor lookup_prune_one_cache() a bit.
      - cater for empty mounts list in mnts_get_expire_list().
      - add ext_mount_hash_mutex lock helpers.
  - Related: rhbz#1912106


author: Ian Kent <ikent@redhat.com> - 5.1.4-67
changelog:
  - bz1954430 - Please, rebuild autofs-5.1.4-66.el8
    - rebuild with fixed binutils.
  - Resolves: rhbz#1954430


author: Ian Kent <ikent@redhat.com> - 5.1.4-68
changelog:
  - bz1958487 - autofs amd mounts present in the configuration get umounted
    on reload
    - fix amd section mounts map reload.
  - bz1958485 - autofs amd type host mounts fail for certain host names
    - fix amd hosts mount expire.
  - Resolves: rhbz#1958487 rhbz#1958485


author: Ian Kent <ikent@redhat.com> - 5.1.4-69
changelog:
  - bz1961492 - autofs: regression in offset ordering
    - fix offset entries order.
    - use mapent tree root for tree_mapent_add_node().
    - eliminate redundant cache lookup in tree_mapent_add_node().
    - fix hosts map offset order.
    - fix direct mount deadlock.
  - Resolves: rhbz#1961492


author: Ian Kent <ikent@redhat.com> - 5.1.4-70
changelog:
  - bz1965862 - A recent Coverity change can cause an infinit loop on map reload
    - fix lookup_prune_one_cache() refactoring change.
  - bz1963129 - auto.master manpage doesn't mention -null or other built-in maps
    - add missing desciption of null map option.
  - Resolves: rhbz#1965862 rhbz#1963129


author: Ian Kent <ikent@redhat.com> - 5.1.4-71
changelog:
  - bz1969210 - autofs: already mounted as other than autofs or failed to unlink
    entry in tree
    - fix empty mounts list return from unlink_mount_tree().
  - Resolves: rhbz#1969210


author: Ian Kent <ikent@redhat.com> - 5.1.4-72
changelog:
  - bz1973025 - /net mount being not cleanly mounted and unmounted
    - fix nonstrict offset mount fail handling.
  - Resolves: rhbz#1973025


author: Ian Kent <ikent@redhat.com> - 5.1.4-73
changelog:
  - bz1973025 - /net mount being not cleanly mounted and unmounted
    - correct patch, fix nonstrict offset mount fail handling.
  - Related: rhbz#1973025


author: Ian Kent <ikent@redhat.com> - 5.1.4-74
changelog:
  - bz1974309 - Removal of default intr mount option while using -hosts
    and host.net
    - remove intr hosts map mount option.
    - fix previous changelog entry revision.
  - Resolves: rhbz#1974309


author: Ian Kent <ikent@redhat.com> - 5.1.4-75
changelog:
  - bz2023740 - autofs: send FAIL cmd/ioctl mess when encountering problems
    with mount trigger
    - fix kernel mount status notification.
  - Resolves: rhbz#2023740


author: Ian Kent <ikent@redhat.com> - 5.1.4-76
changelog:
  - bz2025963 - autofs service has not proper limits set to be able to handle many mounts
    - fix set open file limit.
    - improve descriptor open error reporting.
  - Resolves: rhbz#2025963


author: Ian Kent <ikent@redhat.com> - 5.1.4-77
changelog:
  - bz2025509 - Autofs auto.smb awk script fails on shares with dollar signs
    - fix double quoting in auto.smb.
    - fix double quoting of ampersand in auto.smb as well.
  - Resolves: rhbz#2025509


author: Ian Kent <ikent@redhat.com> - 5.1.4-81
changelog:
  - bz2033552 - Using -hosts option does not work after upgrading from 8.4 to 8.5
    - fix root offset error handling.
    - fix nonstrict fail handling of last offset mount.
    - dont fail on duplicate offset entry tree add.
    - fix loop under run in cache_get_offset_parent().
    - simplify cache_add() a little.
    - fix use after free in tree_mapent_delete_offset_tree().
    - fix memory leak in xdr_exports().
    - avoid calling pthread_getspecific() with NULL key_thread_attempt_id.
    - fix sysconf(3) return handling.
  - Resolves: rhbz#2033552


author: Ian Kent <ikent@redhat.com> - 5.1.4-82
changelog:
  - bz2052122 - autofs attempts unmount on directory in use
    - make umount_ent() recognise forced umount.
    - remove nonstrict parameter from tree_mapent_umount_offsets().
    - fix handling of incorrect return from umount_ent().
  - Resolves: rhbz#2052122


author: Ian Kent <ikent@redhat.com> - 5.1.4-83
changelog:
  - bz2069097 - libnss_sss: threads stuck at sss_nss_lock from initgroups
    - dont use initgroups() at spawn.
  - Resolves: rhbz#2069097


author: Ian Kent <ikent@redhat.com> - 5.1.4-84
changelog:
  - bz2130034 - automount -m crashes with Segmentation fault (core dumped)
    - fix invalid tsv access.
  - Resolves: rhbz#2130034


author: Ian Kent <ikent@redhat.com> - 5.1.4-85
changelog:
  - bz2139504 - segfault due to lookup_mod->context address being freed
    and reused while multiple threads were using it
    - fix parse module instance mutex naming.
    - serialise lookup module open and reinit.
  - Resolves: rhbz#2139504


author: Ian Kent <ikent@redhat.com> - 5.1.4-86
changelog:
  - bz2139504 - segfault due to lookup_mod->context address being freed
    and reused while multiple threads were using it
    - coverity fix for invalid access.
  - Related: rhbz#2139504


author: Ian Kent <ikent@redhat.com> - 5.1.4-87
changelog:
  - bz2139504 - segfault due to lookup_mod->context address being freed
    and reused while multiple threads were using it
    - fix hosts map deadlock on restart.
    - fix deadlock with hosts map reload.
  - Related: rhbz#2139504


author: Ian Kent <ikent@redhat.com> - 5.1.4-88
changelog:
  - bz2139504 - segfault due to lookup_mod->context address being freed
    and reused while multiple threads were using it
    - fix memory leak in update_hosts_mounts().
  - Related: rhbz#2139504


author: Ian Kent <ikent@redhat.com> - 5.1.4-89
changelog:
  - bz2149206 - RHEL9: automount does not handle null option string after
    "-" anymore
    - fix concat_options() error handling.
    - fix minus only option handling in concat_options().
  - Resolves: rhbz#2149206


author: Ian Kent <ikent@redhat.com> - 5.1.4-90
changelog:
  - bz2149206 - RHEL9: automount does not handle null option string after
    "-" anymore
    - fix changelog entry.
  - Related: rhbz#2149206


author: Ian Kent <ikent@redhat.com> - 5.1.4-91
changelog:
  - bz2148872 - autofs: errors in autofs-5.1.4-83.el8.x86_64 when restarting
    autofs with busy directories
    - fix incorrect path for is_mounted() in try_remount().
  - Resolves: rhbz#2148872


author: Ian Kent <ikent@redhat.com> - 5.1.4-92
changelog:
  - bz2161336 - Users can trigger a simple autofs DoS with wildcard automounter maps
    - fail on empty trailing replicated host name.
  - Resolves: rhbz#2161336


author: Ian Kent <ikent@redhat.com> - 5.1.4-93
changelog:
  - bz2165143 - Autofs reports can't connect to sssd, retry for 10 seconds when
    real problem is empty LDAP object
    - improve handling of ENOENT in sss setautomntent().
    - dont immediately call function when waiting.
  - Resolves: rhbz#2165143


author: Ian Kent <ikent@redhat.com> - 5.1.4-102
changelog:
  - bz2177998 - deadlock while reading amd maps
    - fix return status of mount_autofs().
    - don't close lookup at umount.
    - fix deadlock in lookups.
    - dont delay expire.
    - make amd mapent search function name clear.
    - rename statemachine() to signal_handler().
    - make signal handling consistent.
    - fix incorrect print format specifiers in get_pkt().
    - eliminate last remaining state_pipe usage.
    - add function master_find_mapent_by_devid().
    - use device id to locate autofs_point when setting log priotity.
    - add command pipe handling functions.
    - switch to application wide command pipe.
    - get rid of unused field submnt_count.
    - fix mount tree startup reconnect.
    - fix unterminated read in handle_cmd_pipe_fifo_message() (Coverity).
  - Resolves: rhbz#2177998


author: Ian Kent <ikent@redhat.com> - 5.1.4-103
changelog:
  - bz2177998 - deadlock while reading amd maps
    - rebuild to avoid possible NVR problems.
  - Related: rhbz#2177998


author: Ian Kent <ikent@redhat.com> - 5.1.4-104
changelog:
  - bz2208408 - autofs fails to start with combination of +auto.master and
    local direct map lookups after upgrading to 5.1.4-93.el8
    - fix memory leak in sasl_do_kinit() (Coverity).
    - fix fix mount tree startup reconnect.
  - Resolves: rhbz#2208408


author: Ian Kent <ikent@redhat.com> - 5.1.4-105
changelog:
  - bz2207801 - amd map format netgoup selector function not working
    - fix date for revision 104 changelog entry.
    - fix use_ignore_mount_option description.
    - include addtional log info for mounts.
    - fix amd selector function matching.
    - get rid entry thid field.
    - continue expire immediately after submount check.
    - add buffer length checks to autofs mount_mount().
    - eliminate realpath from mount of submount.
    - eliminate root param from autofs mount and umount.
    - remove redundant fstat from do_mount_direct().
    - get rid of strlen call in handle_packet_missing_direct().
    - remove redundant stat call in lookup_ghost().
    - set mapent dev and ino before adding to index.
    - change to use printf functions in amd parser.
    - dont call umount_subtree_mounts() on parent at umount.
    - dont take parent source lock at mount shutdown.
    - eliminate buffer usage from handle_mounts_cleanup().
    - fix possible use after free in handle_mounts_exit().
    - make submount cleanup the same as top level mounts.
    - eliminate some more alloca usage.
    - add soucre parameter to module functions.
    - add ioctlfd open helper.
    - make open files limit configurable.
  - Resolves: rhbz#2207801


author: Ian Kent <ikent@redhat.com> - 5.1.4-114.el8_10.2
changelog:
  - RHEL-72524 - autofs: deadlock between mnts_lookup_mount and mnts_remove_mount
    - fix deadlock in master_notify_submount().
  -Resolves: RHEL-72524


author: Ian Kent <ikent@redhat.com> - 5.1.4-114.el8_10.3
changelog:
  - RHEL-84118 - autofs hang - autofs-5.1.4-114.el8_10.2
    - fix lock ordering deadlock in expire_cleanup().
    - change spec file %patchN to %patch -P N as required by rpm(8).
  - Resolves: RHEL-84118


author: Ian Kent <ikent@redhat.com> - 5.1.4-114.el8_10.4
changelog:
  - RHEL-90238 - autofs fails to mount shares when using kerberised LDAP (RHEL 8)
    - fix ldap sasl reconnect problem.
    - always recreate credential cache.
    - fix always recreate credential cache.
  - Resolves: RHEL-90238


author: Ian Kent <ikent@redhat.com> - 5.1.4-114.el8_10.5
changelog:
  - RHEL-111930 - automount blocked when attempting to lookup ldap maps
    - fix missing unlock in sasl_do_kinit_ext_cc().
  - Resolves: RHEL-111930


author: Miroslav Lichvar <mlichvar@redhat.com> - 5.18.12-7
changelog:
  - fix linking to use hardening flags (#1547522)
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - remove comment with macro


author: Iryna Shcherbina <ishcherb@redhat.com> - 2.3.4-7
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Tomas Orsava <torsava@redhat.com> - 2.5.1-7
changelog:
  - Include the /usr/bin/pybabel binary that runs on Python 3.6 in the
    python3-babel package
  Resolves: rhbz#1967173


author: Kevin Fenzi <kevin@scrye.com> - 1.07.1-1https://bugs.archlinux.org/task/53546
changelog:
  - Update to 1.07.1
  - Fixes a bug that breaks kernel builds ( https://bugs.archlinux.org/task/53546 )


author: Henri Gomez <hgomez@slib.fr> 5.0-1jpp
changelog:
  - bcel is now a jakarta apache project
  - dependency on jakarta-regexp instead of gnu.regexp 
  - created manual package


author: Ville Skyttä <ville.skytta@iki.fi> - 5.0-5jpp
changelog:
  - Rebuild to get docdir right on modern distros.
  - Fix License tag and source file perms.
  - Built with IBM's 1.3.1SR3 (doesn't build with Sun's 1.4.1_01).


author: Ralph Apel <r.apel@r-apel.de> 0:5.1-6jpp
changelog:
  - First JPP-1.7 release
  - Use tidyed sources from svn
  - Add resources to build the manual
  - Add examples to -demo subpackage
  - Build with maven by default
  - Add option to build with straight ant


author: Matt Wringe <mwringe at redhat.com> 0:5.1-7jpp
changelog:
  - Add conditional native compilation
  - Change spec file encoding from ISO-8859-1 to UTF-8
  - Add missing BR werken.xpath and ant-apache-regexp


author: Jason Corley <jason.corley@gmail.com> 0:5.2-2jpp
changelog:
  - use official 5.2 release tarballs and location
  - change vendor and distribution to macros
  - add missing requires on and maven-plugin-test, maven-plugins-base, and
    maven-plugin-xdoc 
  - macro bracket fixes
  - remove demo subpackage (examples are not included in the distribution tarball)
  - build in mock


author: Ralph Apel <r.apel@r-apel.de> 0:5.2-3jpp
changelog:
  - Install poms unconditionally
  - Add pom in ./maven2/default_poms
  - Add org.apache.bcel:bcel depmap frag


author: Ville Skyttä <ville.skytta@iki.fi> - 0:5.2-10
changelog:
  - Specify explicit source encoding to fix build with Java 7.
  - Install jar and javadocs unversioned.
  - Crosslink with JDK javadocs.


author: Andy Grimm <agrimm@gmail.com> - 0:5.2-13
changelog:
  - This package should not own _mavendepmapfragdir (RHBZ#850005)
  - Build with maven, and clean up deprecated spec constructs
  - Fix pom file (See http://jira.codehaus.org/browse/MEV-592)


author: Roman Vais <rvais@redhat.com> - 1.57-1
changelog:
  - Update to upstream version 1.57
  - Correct directory setup in prep section
  - Change of tarball name in source url to correspond to upstream


author: Roman Vais <rvais@redhat.com> - 1.71-1
changelog:
  - Update to upstream version 1.71
  - Add patch for issue https://github.com/cbeust/jcommander/issues/367


author: Gopal Tiwari <gtiwari@redhat.com> - 5.56-1
changelog:
  + bluez-5.56-1
  - Fixing (#1965057)
  - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56


author: David Marlin <dmarlin@redhat.com> - 5.63-2
changelog:
  + bluez-5.63-2
  - Change default of ClassicBondedOnly to true to align with HID specification.
  - Resolves: RHEL-18429
  - Fixing CVE-2021-41229


author: - Bastien Nocera <bnocera@redhat.com> - 4.5-1
changelog:
  - Update to 4.5
  - Fix initscript to actually start bluetoothd by hand
  - Add chkconfig information to the initscript


author: - David Woodhouse <David.Woodhouse@intel.com> - 4.5-2
changelog:
  - Change main utils package name to 'bluez'; likewise its subpackages
  - Remove references to obsolete initscripts (hidd,pand,dund)


author: Karsten Hopp <karsten@redhat.com> 4.29-2
changelog:
  - bluez builds fine on s390(x) and the packages are required to build
    other packages, drop ExcludeArch


author: Bastien Nocera <bnocera@redhat.com> 4.47-2
changelog:
  - Remove hid2hci calls, they're in udev now
  - Work-around udev bug, bluetoothd wasn't getting enabled
    on coldplug


author: Bastien Nocera <bnocera@redhat.com> 4.50-2
changelog:
  - Remove obsoleted patches
  - Add another CUPS backend patch
  - Update cable pairing patch for new build system


author: Bastien Nocera <bnocera@redhat.com> 4.57-2
changelog:
  - Move the rfcomm.conf to the compat package, otherwise
    the comments at the top of it are confusing


author: Bastien Nocera <bnocera@redhat.com> 4.61-1
changelog:
  - Update to 4.61
  - Remove Wacom tablet enabler, now in the kernel
  - Fix linking with new DSO rules (#564799)


author: Dan Horák <dan[at]danny.cz> 4.66-3
changelog:
  - don't require the pin helper on s390(x) now, we can disable the whole
    bluetooth stack in the future


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> 4.69-3
changelog:
  - Comment out Requires: dbus-bluez-pin-helper for bootstrapping. Otherwise
    it drags in the old blueman, built against python-2.6


author: Lennart Poettering <lpoetter@redhat.com> - 4.94-2
changelog:
  - Enable bluetoothd by default
  - Follow-up on https://bugzilla.redhat.com/show_bug.cgi?id=694519 also fixing upgrades


author: Lennart Poettering <lpoetter@redhat.com> - 4.94-4
changelog:
  - Enable bluetoothd on all upgrades from 4.87-6 and older, in order to fix up broken F15 installations


author: Hans de Goede <hdegoede@redhat.com> 4.96-2
changelog:
  - hid2hci was recently removed from udev and added to bluez in 4.93,
    udev in Fedora-16 no longer has hid2hci -> enable it in our bluez builds.
    This fixes bluetooth not working on machines where the bluetooth hci
    initially shows up as a hid device, such as with many Dell laptops.


author: Hans de Goede <hdegoede@redhat.com> 4.96-3
changelog:
  - Put hid2hci into its own (optional) subpackage, so that people who
    just want to use their HID proxying HCI with the keyboard and mouse
    it came with, will have things working out of the box.
  - Put udev rules in /lib/udev, where package installed udev rules belong


author: Bastien Nocera <bnocera@redhat.com> 4.101-4
changelog:
  - Clean up requires and build requires
  - Use CUPS macro (#772236)
  - Enable audio socket so a2dp works in PulseAudio again (#874015)
  - Fix hid2hci not working with recent kernels (#877998)


author: Don Zickus <dzickus@redhat.com> 5.40-2
changelog:
  - obexd fixes to prevent crashes
  - add /etc/bluetooth/main.conf config file
  - set 'AutoEnable=true' in /etc/bluetooth/main.conf file


author: Peter Robinson <pbrobinson@fedoraproject.org> 5.44-1
changelog:
  - Update to 5.44
  - Enable deprecated option to keep all usual tools
  - Ship btattach tool
  - Minor spec cleanups


author: Bastien Nocera <bnocera@redhat.com> - 5.46-4
changelog:
  + bluez-5.46-4
  - Patches cleanup
  - Add DualShock4 cable pairing support
  - BIND_NOW support for RELRO
  - iCade autopairing support


author: Hans de Goede <hdegoede@redhat.com> - 5.46-5
changelog:
  - Add scripts to automatically btattach serial-port / uart connected
    Broadcom HCIs found on some Atom based x86 hardware


author: Peter Robinson <pbrobinson@fedoraproject.org> 5.47-1
changelog:
  - New upstream 5.47 bugfix release
  - Initial support for Bluetooth LE mesh
  - Blueooth 5 fixes and improvements


author: David Marlin <dmarlin@redhat.com> - 5.63-4
changelog:
  + bluez-5.63-4
  - Resolves: RHEL-35501
  - Fixing CVE-2023-50230
  - Resolves: RHEL-35504
  - Fixing CVE-2023-50229


author: David Marlin <dmarlin@redhat.com> - 5.63-5
changelog:
  + bluez-5.63-5
  - Resolves: RHEL-35371
  - Fixing CVE-2023-27349
  - Resolves: RHEL-35492
  - Fixing CVE-2023-51589


author: Deepak Bhole <dbhole@redhat.com> 0:2.3.0-10jpp_1fc
changelog:
  - Added conditional native compilation.
  - From gbenson@redhat:
  -   Build without Jython or Rhino for now.
  -   Build with servletapi5.
  -   Avoid Sun-specific classes.


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.01-2jpp
changelog:
  - additional sources in individual archives
  - versioned dir for javadoc
  - no dependencies for javadoc package
  - stricter dependency for demo package
  - section macro


author: David Walluck <david@anti-microsoft.org> 1.2-0.b8.1jpp
changelog:
  - rename to bsh
  - add manual
  - add Changes.html to %doc
  - add bsh and bshdoc scripts
  - add %dir %{_datadir}/%{name} to main package
  - correct test interpreter and make bsh files executable


author: David Walluck <david@anti-microsoft.org> 1.2-0.b8.2jpp
changelog:
  - remove servlet dependency (if anyone wants to add this as a separate
    package and do the tomcat integration, be my guest)


author: Permaine Cheung <pcheung@redhat.com> 0:1.3.0-10jpp.1
changelog:
  - Merge with upstream
  - Removed unapplied patch and moved buildroot removal from prep to install,
    and other rpmlint cleanup


author: Permaine Cheung <pcheung@redhat.com> 0:1.3.0-12jpp.2
changelog:
  - Fix bugzilla 417491. Thanks Ville Skytta for the patch.
  - Add menu entry and startup script for bsh desktop.
  - Ensure scriptlets exit with zero exit status.


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.3.0-17
changelog:
  - Rename -desktop to -utils, move shell scripts and menu entry to it (#417491).
  - Bring icon cache scriptlets up to date with current guidelines.
  - Use jline in bsh script for command history support.
  - Prefer JRE over SDK when finding JVM to invoke in scripts.
  - Build with -source 1.5.


author: David Tardon <dtardon@redhat.com> - 0:1.3.0-22
changelog:
  - Resolves: rhbz#850008 bsh - Should not own /usr/share/maven-fragments
    directory
  - Resolves: rhbz#878163 bsh - javadoc subpackage doesn't require
    jpackage-utils
  - Resolves: rhbz#878166 bsh: Public Domain not listed in license tag


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0:1.3.0-24
changelog:
  - remove vendor tag from desktop file. https://fedorahosted.org/fpc/ticket/247
  - clean up spec to follow current guidelines


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.3.0-26
changelog:
  - Remove arch-specific conditionals
  - Remove group tags
  - Remove Requires on jpackage-utils
  - Remove Requires on coreutils
  - Generate custom scripts with %jpackage_script
  - Install versionless JARs only
  - Install POM files to %{_mavenpomdir}


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.3.0-26
changelog:
  - Use %add_maven_depmap instead of legacy macros
  - Install versionless javadocs
  - Remove old Obsoletes
  - Update and format descriptions
  - Install license file with manual and javadoc packages
  - Fix Requires and BuildRequires on java
  - Fix calls to %jpackage_script


author: Tania Bento <tbento@redhat.com> - 0:1.11-2jpp.1
changelog:
  - Fixed the %Release tag.
  - Changed the %License tag.
  - Fixed the %BuildRoot tag.
  - Removed the %Vendor tag.
  - Removed the %Distribution tag.
  - Removed the %BuildRequires: gcc and make tags as these d not need to be
  listed.
  - Removed "%define section free".
  - Added "sed -i 's/\r//g docs/tf.y' to fix a warning generated by
  rpmlint.
  - Fixed the %Source0 tag.
  - Changed the %Group tag.
  - Installed man pages in proper directory.


author: Severin Gehwolf <sgehwolf@redhat.com> - 3.0.6-2
changelog:
  - Add BRs, maven-plugin-bundle, maven-source-plugin and
    maven-plugin-plugin, fixing FTBFS.
  - Resolves: RHBZ#1402998


author: Severin Gehwolf <sgehwolf@redhat.com> - 4.0.4-1
changelog:
  - Update to latest upstream 4.0.4 release.
  - Split junit-dependent packages into sub-packages:
    byteman-dtest, byteman-bmunit
  - Fix automatically generated requirements:
    - ASM is BR-only and bundled.
    - java-headless >= 1:1.9 would get generated, but byteman 4.x
      runs on JDK 8 too (would even work for JDK 6)


author: David Howells <dhowells@redhat.com> 0.10.6-1
changelog:
  - Note the correct licence.
  - Handle malformed kernel status correctly.
  - Permit culling to be disabled on the command line with the -N flag.
  - Suspend culling when cache space is short and cache objects are pinned.


author: David Howells <dhowells@redhat.com> 0.10.8-1
changelog:
  - Use systemd interaction macros in specfile installation sections [RH BZ 850053].
  - Fix the service file to use /usr/sbin/ rather than /sbin/.
  - Turn on RELRO and PIE build hardening in RPM builds.


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0.7.4-4
changelog:
  - Fix pom filenames (Resolves rhbz#655792)
  - Add several packages to Requires
  - Remove versioned jars and javadocs


author: gil cattaneo <puntogil@libero.it> 1.1-10
changelog:
  - rebuilt for upgrade el apis gid:aid (rhbz#1223468)
  - adapt to current guideline
  - use mvn()-like BRs
  - fix rpmlint problem in changelog entries


author: Till Maas <opensource@till.name> - 10.2-19
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-15
changelog:
  - Replace the previous fix for dbus restarting with PartOf in the
    certmonger systemd service file to link the two (#1687698)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.13-4
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1577570)
  - Certmonger segfault after cert renewal request (#1881500)
  - Include certificate NotBefore date in output of the 'getcert list' command
    (#1940261)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001079)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.13-5
changelog:
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012258)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.17-1
changelog:
  - Update to upstream 0.79.17 (#2139523)
  - Certificate format validation when adding the SCEP server's CA (#2150025)
  - Certmonger SCEP renewal should not use old challenges (#2150030)
  - certmonger SEGV during rekey in FIPS mode (#2150070)


author: Mary Ellen Foster <mefoster at gmail.com> - 2.2-2
changelog:
  - Explicitly require Java > 1.6 because it won't compile with gcj
  - Fix cosmetic issues in spec file


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.2-11
changelog:
  - Fix license tag
  - Install LICENSE and NOTICE with javadoc package
  - Convert versioned JARs to unversioned
  - Preserve timestamp of POM file
  - Update to current packaging guidelines


author: David King <amigadave@amigadave.com> - 0.16-1
changelog:
  - Update to 0.16 (#1144863)
  - Remove clean section and BuildRoot tag
  - Update URL and Sourc0
  - Use license macro for COPYING
  - Use parallel make flags
  - Preserve timestamps during install


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.29-3
changelog:
  - Fix growpart error when partition size matches partition offset
  - Resolves: rhbz#1666854
    (growpart fails when partition start sector is the same as partition size)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.31-2
changelog:
  - cu-growpart-Use-LANG-C-to-parse-sfdisk-output.patch [bz#1933768]
  - Resolves: bz#1933768
    (cloud-utils-growpart: Wrong parsing of sfdisk output in french locale)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.31-3
changelog:
  - cu-Fix-issue-LP-1928167-growpart-doesn-t-work-when-LANG.patch [bz#1885992]
  - Resolves: bz#1885992
    ([RHEL-8] growpart doesn't work when LANG=cs_CZ.UTF-8)


author: Jon Maloy <jmaloy@redhat.com> - 0.33-0
changelog:
  - Rebased to cloud-utils-growpart-0.33-0.el8
  - Resolves: bz#2122575
    ([RHEL-8] Add redhat build support for cloud-utils rebase 0.33 for RHEL8.8


author: Richard Hughes <richard@hughsie.com> 1.4.4-1
changelog:
  - New upstream version
  - Actually install the installed tests
  - Port manpages to xsltproc and DocBook 5


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Jan Grulich <jgrulich@redhat.com> - 0.26-1
changelog:
  - Spec file based on exiv2 package to provide old libraries before API change
    Resolves: bz#1757349


author: Jan Grulich <jgrulich@redhat.com> - 0.26-4
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990398

  - Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS
    Resolves: bz#1990399


author: Jan Grulich <jgrulich@redhat.com> - 0.26-6
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993283

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993246


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.2-2
changelog:
  - Fix an assertion failure in the gdb's copy_type()
  - Fix for "bt" command printing "bogus exception frame" warning


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 8.0.5-1.0.1
changelog:
  - Rebrand for Anolis OS
  - Add doc sub package (wenshu.hx@alibaba-inc.com)
  - Add loongarch64 arch (wb-zh951434@alibaba-inc.com)


author: Stanislaw Gruszka <sgruszka@redhat.com> - 3.18_2018.05.31-2
changelog:
  - Update wireless-regdb to 2018.05.31
  - Remove python2 dependency
  - Use sforshee signed reulatory.bin (required by modern kernels)


author: Ondrej Kozina <okozina@redhat.com> - 2.3.3-4
changelog:
  - patch: Fix reencryption for custom devices with data segments
    set to use cipher_null.
  - Resolves: #1927409


author: Ondrej Kozina <okozina@redhat.com> - 2.3.7-1
changelog:
  - update to cryptsetup 2.3.7
  - fixes CVE-2021-4122
  - patch: Fix suboptimal optimization in bundled argon2.
  - patch: Fix bogus memory allocation/device read with
           invalid LUKS2 headers
  - patch: Fix typo in luksRepair prompt.
  - Resolves: #2021815 #2022301 #2031859


author: Daniel Zatovic <dzatovic@redhat.com> - 2.3.7-4
changelog:
  - patch: Remove LUKS2 encryption data size restriction.
  - patch: Abort encryption when header and data devices are same.
  - Resolves: #2150254


author: Daniel Zatovic <dzatovic@redhat.com> - 2.3.7-6
changelog:
  - patch: Delegate FIPS mode detection to configured crypto backend
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212772 #2193342


author: Vladis Dronov <vdronov@redhat.com> - 15.9-8
changelog:
  - Fix a double-free in changestring() (bz1886165)
  - Update Requires to include coreutils and ed
  - Adjust cscope-coverity-fixes.patch removing the fclose(script) chunk
  - Adjust BuildRequires and remove trailing spaces
  - Remove older source version from .gitignore
  - Rename cscope-invindex-sizing.patch as it is for the older upstream version


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-55
changelog:
  - RHEL-14933 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15309 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-56
changelog:
  - RHEL-10702 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents
  - RHEL-19200 Recommend new cups-filters subpackages with weak dep for better upgrade exp


author: Pavol Zacik <pzacik@redhat.com> - 1:2.2.6-60
changelog:
  - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Tim Powers <timp@redhat.com>
changelog:
  - started changelog 
  - fixed init.d script location
  - changed script in init.d quite a bit and made more like the rest of our
    startup scripts


author: Than Ngo <than@redhat.de>
changelog:
  - update to 1.1 release
  - move back to /etc/rc.d/init.d
  - fix cupsd.init to work with /etc/init.d and /etc/rc.d/init.d
  - split cups


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.1.1 (this has some major bugfixes)
  - Fix a typo in initscript (it's $?, not ?$)
  - Fix /usr/etc vs. /etc trouble, don't insist on /usr/var (YUCK!)
  - Create the spool dir


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-1
changelog:
  - 1.1.13
  - Add patch for koi8-{r,u} and iso8859-8 encodings (#59018)
  - Rename init scripts so we can safely "killall cupsd" from there


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-5
changelog:
  - Move cups-config to cups-devel subpackage
  - Make alternatives usage a %define to simplify builds for earlier
    releases
  - Explicitly provide things we're supplying through alternatives
    to shut up kdeutils dependencies


author: Bill Nottingham <notting@redhat.com> 1.1.14-7
changelog:
  - lpc man page is alternative too
  - run ldconfig in -libs %post/%postun, not main
  - remove alternatives in %preun


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-12
changelog:
  - Support SMB printing (#62407)
  - Add HTML redirections to doc files to work around users mistaking
    /usr/share/doc/cups-1.1.14 for the web frontend (#62405)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-1
changelog:
  - 1.1.15-1
  - Fix up smb printing trigger (samba-client, not samba-clients)
  - Start cupsd earlier, apparently it needs to be running before samba
    starts up for smb printing to work.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-3
changelog:
  - Add a symlink /usr/share/cups/doc -> /usr/share/doc/cups-devel-1.1.15
    because some applications expect to find the cups docs in
    /usr/share/cups/doc


author: Tim Waugh <twaugh@redhat.com> 1.1.15-7
changelog:
  - Really add cups-lpd xinetd file (bug #63919).
  - Ship pstoraster (bug #69573).
  - Prevent fread from trying to read from beyond EOF (fixes a segfault
    with new glibc).


author: Tim Waugh <twaugh@redhat.com> 1.1.15-11
changelog:
  - Use %configure for multilib correctness.
  - Use libexec instead of lib for CUPS_SERVERBIN.
  - Ship translated man pages.
  - Remove unshipped files.
  - Fix file list permissions (bug #59021, bug #74738).
  - Fix messy initscript output (bug #65857).
  - Add 'reload' to initscript (bug #76114).


author: Tim Waugh <twaugh@redhat.com> 1.1.15-13
changelog:
  - Use logrotate for log rotation (bug #76791).
  - No longer need cups.desktop, since redhat-config-printer handles it.


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.15-14
changelog:
  - Buildrequire pam-devel.
  - Patch default PAM config file to remove directory names from module paths,
    allowing the configuration files to work equally well on multilib systems.
  - Patch default PAM config file to use system-auth, require the file at build-
    time because that's what data/Makefile checks for.


author: Tim Waugh <twaugh@redhat.com> 1.1.17-6
changelog:
  - Add epoch to internal requirements.
  - Make 'condrestart' return success exit code when daemon isn't running.


author: Tim Waugh <twaugh@redhat.com> 1.1.18-1
changelog:
  - 1.1.18.
  - No longer need uninit patch.
  - Some parts of the iDefense and pdftops patches seem to have been
    picked up, but not others.


author: Havoc Pennington <hp@redhat.com> 1:1.1.18-4
changelog:
  - adjust dbus patch - dbus_bus_get() sends the hello for you, 
    and there were a couple of memleaks
  - buildprereq dbus 0.9
  - rebuild for new dbus
  - hope it works, I'm ssh'd in with no way to test. ;-)


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-0.rc4.1
changelog:
  - 1.1.19rc4.  Ported initscript, idefense, ppdsdat, dbus patches.
  - No longer need error, sigchld patches.
  - Ship cupstestppd.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-7
changelog:
  - Add some %if %use_dbus / %endif's to make it compile without dbus
    (bug #97397).  Patch from Jos Vos.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-10
changelog:
  - Pass correct attributes-natural-language through even in the absence
    of translations for that language (bug #100984).
  - Show compilation command lines.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't ignore the file descriptor when ShutdownClient is called: it
    might get closed before we next try to read it (bug #107787).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-1
changelog:
  - 1.1.20.
  - No longer need idefense, str226 patches.
  - Updated sanity patch.
  - The devel sub-package requires openssl-devel (bug #110772).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-2
changelog:
  - Try harder to find a translated page for the web interface (bug #107619).
  - Added build_as_pie conditional to spec file to facilitate debugging.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-4
changelog:
  - Tracked D-BUS API changes.
  - Updated D-BUS configuration file.
  - Symlinks to avoid conflicting with bash builtins (bug #102490).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-7
changelog:
  - Fix non-conformance with HTTP/1.1, which caused failures when printing
    to a Xerox Phaser 8200 via IPP (bug #122352).
  - Make lppasswd(1) PIE.
  - Rotate logs within cupsd (instead of relying on logrotate) if we start
    to approach the filesystem file size limit (bug #123003).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fix cups/util.c:get_num_sdests() to use encryption when it is necessary
    or requested (bug #118982).
  - Use upstream patch for the HTTP/1.1 Continue bug (from STR716).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-8
changelog:
  - If cupsd fails to start, make it exit with an appropriate code so that
    initlog notifies the user (bug #110135).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-9
changelog:
  - Apply patches from CVS (authtype) to fix STR #434, STR #611, and as a
    result STR #719.  This fixes several problems including those noted in
    bug #114999.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc2.1
changelog:
  - 1.1.21rc2.
  - No longer need state, reload-timeout or str743 patches.
  - httpnBase64 patch no longer applies; alternate method implemented
    upstream.
  - Fix single byte overread in usersys.c (spotted by Colin Walters).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.7
changelog:
  - Prevent filters generating incorrect PS in locales where "," is the
    decimal separator (bug #136102).  Patch from STR #970.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc2.1
changelog:
  - Make cancel-cups(1) man page point to lp-cups(1) not lp(1) (bug #136973).
  - Use upstream patch for STR #953.
  - 1.1.22rc2.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-2
changelog:
  - Fixed cups-lpd file mode (bug #137325).
  - Convert all man pages to UTF-8 (bug #107118).  Patch from Miloslav Trmac.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.23-18
changelog:
  - Raise IPP_MAX_VALUES to 100 (bug #164232).  STR #1284.
  - Made FindDest better behaved in some instances (bug #164232).  STR #1283.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - 1.2 svn snapshot.
  - No longer need doclink, str1023, pdftops, sanity, lpstat, str1068,
    sigchld, gcc34, gcc4, slow, CAN-2004-0888, CAN-2005-2097, finddest,
    str1249, str1284, str1290, str1301, CVE-2005-3625,6,7 patches.
  - Removed autodetect-tag patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn4964.0
changelog:
  - Use -fPIE not -fpie in PIE patch.
  - Fix link patch.
  - Patch in PIE instead of using --enable-pie, since that doesn't work.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn5102.0
changelog:
  - New svn snapshot.
  - No longer need enabledisable patch.
  - Fixed double-free in scheduler/policy.c (STR #1428).


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.1.b2.6
changelog:
  - Add KDE compatibility symbols _ipp_add_attr/_ipp_free_attr to ipp.h, with
    a comment saying why they shouldn't be used.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.1
changelog:
  - Ship a printers.conf file, and a client.conf file.  That way, they get
    their SELinux file contexts set correctly.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.8
changelog:
  - No longer need openssl-devel.
  - Build with LDAP_DEPRECATED=1, to pick up declarations of ldap_init() etc.
  - Only warn about ACLs once (STR #1532).
  - Fix imagetops filter (STR #1533).
  - Sync pstops.c with svn 5382.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.5.rc3.2
changelog:
  - Patch pdftops to understand 'includeifexists', and use that in the
    pdftops.conf file (bug #189809).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - No longer need backend, rcp, or ppdsdat patches.
  - Use configure switch for LogFilePerm default instead of patch.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5470.
  - No longer need link, CAN-2005-0064, or no-propagate-ipp-port patches.
  - Switch to upstream PIE implementation (every single binary is PIE).
  - Extend relro to all binaries.
  - Better rpath patch.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5538.
  - Added 'restartlog' to initscript, for clearing out error_log.  Useful
    for problem diagnosis.
  - Initscript no longer needs to check for printconf-backend.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-4
changelog:
  - Disable back-channel data in the usb backend (STR #1705, bug #192034).
  - Fix for 'browsing stops on reload', STR #1670 (bug #191217).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-7
changelog:
  - Sync to svn5568.  No longer need rpath patch.
  - Added a 'conflicts:' for kdelibs to prevent bug #192548.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.1-2
changelog:
  - 1.2.1.
  - Another STR #1705 fix (bug #192034).
  - Fixed devel package multilib conflict (bug #192664).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-6
changelog:
  - Use replacement snmp.c from STR #1737 (bug #193093).
  - Re-enable LSPP; doesn't harm browsing after all.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-10
changelog:
  - Remove 'Provides: LPRng = 3.8.15-3' (bug #148757).
  - Applied patch to fix STR #1893 (bug #201800).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-8
changelog:
  - LSPP patch didn't get updated properly in 1:1.2.4-6.  Use the right
    patch this time (bug #208676).  LSPP re-enabled.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-9
changelog:
  - adminutil.c: when writing 'BrowseAllow @LOCAL', add a comment about what
    to change it to when using directed broadcasts from another subnet
    (bug #204373).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.5-4
changelog:
  - Fixed support for /dev/ttyUSB devices (bug #212577, STR #2061).
  - Fixed parallel backend (bug #213021, STR #2056).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.7-4
changelog:
  - Another LSPP fix (bug #216669).
  - Fixed LSPP SELinux check (bug #216855).
  - Increased PPD timeout in copy_model() (bug #216065).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.7-6
changelog:
  - Fixed If-Modified-Since: handling in libcups (bug #217556, STR #2133).
  - Fixed extra EOF in pstops output (bug #216154, STR #2111).
  - Use upstream patch for STR #2121.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.7-8
changelog:
  - Removed logrotate config file and maxlogsize patch (bug #227369).  Now
    CUPS is in charge of rotating its own logs, and defaults to doing so once
    they get to 1Mb in size.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.10-6
changelog:
  - Fixed 'cancel' man page (bug #234088).
  - Added empty subscriptions.conf file to make sure it gets the right
    SELinux file context.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.10-7
changelog:
  - Until bug #236736 is fixed, work around the kernel usblp driver's
    quirks so that we can detect paper-out conditions.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Make the initscript use start priority 56 (bug #213828).
  - Better paper-out detection patch (bug #241589).


author: Tim Waugh <twaugh@redhat.com> 1:1.3-0.b1.2
changelog:
  - Build requires avahi-compat-libdns_sd-devel.  Applied patch to fix
    build against avahi (bug #245824).
  - Build requires krb5-devel.


author: Tim Waugh <twaugh@redhat.com> 1:1.3-0.b1.3
changelog:
  - Change initscript start level to 98, to start after avahi but before
    haldaemon.
  - The devel sub-package requires krb5-devel.


author: Tim Waugh <twaugh@redhat.com> 1:1.3-0.rc2.1
changelog:
  - Better buildroot tag.
  - Moved LSPP access check in add_job() to before allocation of the job
    structure (bug #231522).
  - 1.3rc2.  No longer need avahi patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.3-0.rc2.2
changelog:
  - Make cancel man page work properly with alternatives system (bug #249768).
  - Don't call aclocal even when we modify m4 files -- CUPS does not use
    automake (bug #250251).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.3-3
changelog:
  - Use ppdev instead of libieee1284 for parallel port Device ID
    retrieval (bug #311671).  This avoids SELinux audit messages.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.4-2
changelog:
  - Applied patch to fix CVE-2007-4045 (bug #250161).
  - Applied patch to fix CVE-2007-4352, CVE-2007-5392 and
    CVE-2007-5393 (bug #345101).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fixed CVE-2007-4045 patch; has no effect with shipped packages since they
    are linked with gnutls.
  - LSPP cupsdSetString/ClearString fixes (bug #378451).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - CVE-2007-4045 patch is not necessarily because cupsd_client_t objects are
    not moved in array operations, only pointers to them.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Apply patch to prevent overlong PPD lines from causing failures except
    in strict mode (bug #405061).  Needed for compatibility with older
    versions of foomatic (e.g. Red Hat Enterprise Linux 3/4).
  - Applied upstream patch to fix cupsctl --remote-any (bug #421411, STR #2650).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.5-4
changelog:
  - Fix compilation of SO_PEERCRED support.
  - Include fixes from svn up to revision 7287.  No longer need str2650 or
    str2664 patches.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.5-6
changelog:
  - Include fixes from svn up to revision 7304.  No longer need str2703 patch.
    Build with --with-dbusdir.
  - Try out logrotate again (bug #432730).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.6-3
changelog:
  - Set MaxLogSize to 0 to prevent log rotation.  Upstream default is 1Mb, but
    we want logrotate to be in charge.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.6-4
changelog:
  - LSB header for initscript (bug #246897).
  - Move HTML-related files to main application directory so that the CUPS
    web interface still works even with --excludedocs (bug #375631).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.6-9
changelog:
  - Applied patch to fix CVE-2008-1373 (GIF overflow, bug #438303).
  - Applied patch to prevent heap-based buffer overflow in CUPS helper
    program (bug #436153, CVE-2008-0047, STR #2729).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-3
changelog:
  - If cupsdTimeoutJob is called when the originating connection is still
    known, pass that to the function so that copy_banner can get at it if
    necessary (bug #447200).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-13
changelog:
  - CVE-2008-1373 patch is no longer needed (applied upstream).
  - Mark HTML files and templates config(noreplace) for site-local
    modifications (bug #441719).
  - The cups-devel package requires zlib-devel (bug #455192).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Removed autoconf requirement by applying autoconf-generated changes
    to patches that caused them.  Affected patches: cups-lspp.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.8-5
changelog:
  - The dnssd backend uses avahi-browse so require it (bug #458565).
  - New php sub-package (bug #428235).
  - cups-polld: reinit the resolver if we haven't yet resolved the
    hostname (bug #354071).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.9-1
changelog:
  - 1.3.9, including fixes for CVE-2008-3639 (STR #2918, bug #464710),
    CVE-2008-3640 (STR #2919, bug #464713) and CVE-2008-3641 (STR #2911,
    bug #464716).
  - No longer need str2892 or res_init patches.


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b1.3
changelog:
  - 1.4b1.
  - No longer need ext, includeifexists, foomatic-recommended,
    getnameddest, str2101, str2536 patches.
  - Require poppler-utils at runtime and for build.  No longer need
    pdftops.conf.
  - Obsolete cupsddk.


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b1.5
changelog:
  - Applied patch to fix RSS subscription limiting (bug #473901,
    CVE-2008-5183).
  - Attempt to unbreak the fix for STR #2831 (bug #474742).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.6
changelog:
  - Beginnings of avahi support.  The dnssd backend should now work, but
    the scheduler will not yet advertise DNS-SD services.
  - No longer require avahi-tools as the dnssd backend does not use the
    command line tools any longer.
  - Load MIME type rules correctly (bug #426089, STR #3059).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.7
changelog:
  - Prevent cups-deviced missing devices (STR #3108).
  - Actually drop the perl implementation of the dnssd backend and use
    the avahi-aware one.


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.12
changelog:
  - If cups-polld gets EAI_AGAIN when looking up a hostname,
    re-initialise the resolver (bug #490943).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.13
changelog:
  - Don't verify MD5 sum, file size, or mtime for several config files:
    cupsd.conf, client.conf, classes.conf, printers.conf, snmp.conf,
    subscriptions.conf, lpoptions (bug #486287).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.14
changelog:
  - Applied patch to fix CVE-2009-0163 (bug #490596).
  - Applied patch to fix CVE-2009-0164 (bug #490597).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.15
changelog:
  - Accept "Host: ::1" (bug #497393).
  - Accept Host: fields set to the ServerName value (bug #497301).
  - Specify that we want poppler's pdftops (not ghostscript) for the
    pdftops wrapper when calling configure.


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.1
changelog:
  - 1.4rc1.  No longer need str3124, CVE-2009-0163, CVE-2009-0164,
    str3197, missing-devices patches.
  - Disabled avahi patch for the time being.  More work is needed to
    port this to rc1.
  - Removed wbuffer patch as it is not needed (see STR #1968).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.3
changelog:
  - Don't use RPM_SOURCE_DIR macro.
  - Fixed add/modify-printer templates which had extra double-quote
    characters, preventing the Continue button from appearing in certain
    browsers (bug #506461, STR #3229).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.7
changelog:
  - Fixed template problem preventing current printer option defaults
    from being shown in the web interface (bug #506794, STR #3244).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.10
changelog:
  - Applied patch to prevent bad job control files crashing cupsd on
    start-up (STR #3253, bug #509741).
  - Correctly handle CUPS-Get-PPDs requests for models with '+' in their
    names (STR #3254, bug #509586).
  - Accept incorrect device URIs in the (non-libusb) usb backend for
    compatibility with Fedora 11 before bug #507244 was fixed.
  - Applied patch to fix incorrect device URIs (STR #3259, bug #507244).
  - Applied patch to fix job-hold-until for remote queues (STR #3258,
    bug #497376).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.12
changelog:
  - Fixed Avahi support in the dnssd backend (bug #513888).
  - Fixed incorrect arguments to sigaction() in dnssd backend (STR #3272).
  - Cheaply restore compatibility with 1.1.x by having cups_get_sdests()
    perform a CUPS_GET_CLASSES request if it is not sure it is talking
    to CUPS 1.2 or later (bug #512866).
  - Prevent ipp backend looping with bad IPP devices (bug #476424,
    STR #3262).
  - Fixed Device ID reporting in the usb backend (STR #3266).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.13
changelog:
  - Ship udev rules to allow libusb to access printer devices.
  - Fixed duplex test pages (bug #514898, STR #3277).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.14
changelog:
  - Fixed ppds.dat handling of drv files (bug #515027, STR #3279).
  - Fixed udev rules file to avoid DEVTYPE warning messages.
  - Fixed cupsGetNamedDest() so it does not fall back to the default
    printer when a destination has been named (bug #516439, STR #3285).
  - Fixed MIME type rules for image/jpeg and image/x-bitmap
    (bug #516438, STR #3284).
  - Clear out cache files on upgrade.
  - Require acl.


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.16
changelog:
  - Fixed JobKillDelay handling for cancelled jobs (bug #518026, STR
    - Use 'exec' to invoke ghostscript in the pstoraster filter.  This
    allows the SIGTERM signal to reach the correct process, as well as
    conserving memory (part of bug #518026).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.19
changelog:
  - Prevent infinite loop in cupsDoIORequest when processing HTTP
    errors (bug #518065, bug #519663, STR #3311).
  - Fixed document-format-supported attribute when
    application/octet-stream is enabled (bug #516507, STR #3308, patch
    from Jiri Popelka).
  - Fixed buggy JobKillDelay handling fix (STR #3292).
  - Prevent infinite loop in ppdc (STR #3293).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.0-2
changelog:
  - Fixed the dnssd backend so that it only reports devices once avahi
    resolution has completed.  This makes it report Device IDs
    (bug #520858).
  - Fix locale code for Norwegian (bug #520379).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.1-4
changelog:
  - Changed cups.init to be LSB compliant (bug #521641), i.e.
    return code "2" (instead of "3") if invalid arguments
    return code "4" if restarting service under nonprivileged user
    return code "5" if cupsd not exist or is not executable
    return code "6" if cupsd.conf not exist


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.1-13
changelog:
  - Fix incorrectly applied patch from #STR3285 (bug #531108).
  - Set the PRINTER_IS_SHARED variable for admin.cgi (bug #529634, #STR3390).
  - Pass through serial parameters correctly in web interface (bug #529635, #STR3391).
  - Fixed German translation (bug #531144, #STR3396).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-1
changelog:
  - 1.4.2.  No longer need str3380, str3332, str3356, str3396 patches.
  - Removed postscript.ppd.gz (bug #533371).
  - Renumbered patches and sources.


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-5
changelog:
  - Fixed typo in admin web template (bug #537884, STR #3403).
  - Reset SIGPIPE handler for child processes (bug #537886, STR #3399).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-6
changelog:
  - Fixed display of current driver (bug #537182, STR #3418).
  - Fixed out-of-memory handling when loading jobs (bug #538054,
    STR #3407).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-14
changelog:
  - The scheduler did not use the Get-Job-Attributes policy for a
    printer (STR #3431).
  - The scheduler added two job-name attributes to each job object
    (STR #3428).
  - The scheduler did not clean out completed jobs when
    PreserveJobHistory was turned off (STR #3425).
  - The web interface did not show completed jobs (STR #3436).
  - Authenticated printing did not always work when printing directly to
    a remote server (STR #3435).
  - Use upstream patch to stop the network backends incorrectly clearing
    the media-empty-warning state (rev 8896).
  - Use upstream patch to fix interrupt handling in the side-channel
    APIs (rev 8896).
  - Use upstream patch to handle negative SNMP string lengths (rev 8896).
  - Use upstream fix for SNMP detection (bug #542857, STR #3413).
  - Use the text filter for text/css files (bug #545026, STR #3442).
  - Show conflicting option values in web UI (bug #544326, STR #3440).
  - Use upstream fix for adjustment of conflicting options
    (bug #533426, STR #3439).
  - No longer requires paps.  The texttopaps filter MIME conversion file
    is now provided by the paps package (bug #545036).
  - Moved %{_datadir}/cups/ppdc/*.h to the main package (bug #545348).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-20
changelog:
  - Fixed ipp authentication for servers requiring authentication for
    IPP-Get-Printer-Attributes (bug #548873, STR #3458).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-21
changelog:
  - Fixed patch for STR #3425 again by adding in back-ported change from
    svn revision 8929 (bug #549899).  No longer need
    delete-active-printer patch.


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-22
changelog:
  - Removed use of prereq and buildprereq.
  - Fixed use of '%' in changelog.
  - Versioned explicit obsoletes/provides.
  - Use tabs throughout.


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-23
changelog:
  - Use %{_initddir}, %{_sysconfdir} and SMP make flags.
  - Use mode 0755 for binaries and libraries where appropriate.
  - Fix lpd obsoletes tag.


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-32
changelog:
  - Fixed cupsGetNamedDest() so it falls back to the real default
    printer when a default from configuration file does not exist (bug #565569, STR #3503).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-33
changelog:
  - Don't own filesystem locale directories (bug #569403).
  - Don't apply gcrypt threading patch (bug #553834).
  - Don't treat SIGPIPE as an error (bug #569770).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-34
changelog:
  - Applied patch for CVE-2010-0302 (incomplete fix for CVE-2009-3553,
    bug #557775).
  - Added comments for all sources and patches.


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-35
changelog:
  - Fixed (for the third time) patch for STR #3425 to correctly
    remove job info files in /var/spool/cups (bug #571830).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.3-1
changelog:
  - 1.4.3.
  - No longer need CVE-2009-3553, str3381, str3390, str3391,
    str3403, str3407, str3413, str3418, str3422, str3425,
    str3428, str3431, str3435, str3436, str3439, str3440,
    str3442, str3448, str3458, str3460, cups-sidechannel-intrs,
    negative-snmp-string-length, cups-media-empty-warning patches.


author: Tim Waugh <twaugh@redhat.com> 1:1.4.3-9
changelog:
  - Adjust texttops output to be in natural orientation (STR #3563).
    This fixes page-label orientation when texttops is used in the
    filter chain (bug #572338).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Removed unapplied gnutls-gcrypt-threads patch.  Fixed typos in
    descriptions for lpd and php sub-packages.


author: Tim Waugh <twaugh@redhat.com> 1:1.4.4-1
changelog:
  - 1.4.4.  Fixes several security vulnerabilities (bug #605399):
    CVE-2010-0540, CVE-2010-0542, CVE-2010-1748.  No longer need str3503,
    str3399, str3505, str3541, str3425p2 or CVE-2010-0302 patches.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Merged F-12 change:
    - Use numeric addresses for interfaces unless HostNameLookups are
      turned on (bug #583054).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.4-10
changelog:
  - Perform locking for gnutls and avoid libgcrypt's broken
    locking (bug #607159).
  - Build with --enable-threads again (bug #607159).
  - Force the use of gnutls despite thread-safety concerns (bug #607159).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.4-12
changelog:
  - Applied patch to fix cupsd memory corruption vulnerability
    (CVE-2010-2941, bug #652161).
  - Don't crash when MIME database could not be loaded (bug #610088).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.5-4
changelog:
  - Changed subsystem lock file name in initscript
    so the service is correctly stopped on reboot or halt (bug #659391).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.5-5
changelog:
  - Fixed character encoding in CREDITS.txt.
  - Mark D-Bus configuration file as config file.
  - Don't mark MIME types and convs files as config files.  Overrides
    can be placed as new *.types/*.convs files in /etc/cups.
  - Don't mark banners as config files.  Better is to provide new
    banners.
  - Don't mark templates and www files as config files.  A better way to
    provide local overrides is to use a different ServerRoot setting.
    Note that a recent security fix required changed to template files.
  - Provide versioned LPRng symbol for rpmlint.


author: Tim Waugh <twaugh@redhat.com> 1:1.4.5-6
changelog:
  - The cups-config man page has been moved to the devel sub-package.
  - The php sub-package now explicitly requires the libs package with
    the same version and release (bug #646814).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.6-2
changelog:
  - Use a smaller buffer when writing to USB devices (bug #661814).
  - Handle EAI_NONAME when resolving hostnames (bug #617208).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.6-4
changelog:
  - Properly separated serverbin-compat and lspp patches.
  - Updated ICC patch (still not yet applied).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.6-6
changelog:
  - Don't use --enable-pie configure option as it has been removed and
    is now assumed.  See STR #3691.


author: Jiri Popelka <jpopelka@redhat.com> 1:1.5-0.1.b1
changelog:
  - 1.5b1
    - removed cups-texttops-rotate-page.patch (#572338 is CANTFIX)
    - removed cups-page-label.patch (#520141 seems to be CANTFIX)


author: Tim Waugh <twaugh@redhat.com> 1:1.5-0.10.rc1
changelog:
  - Don't use portreserve any more.  Better approach is to use systemd
    socket activation (not yet done).


author: Tim Waugh <twaugh@redhat.com> 1:1.5-0.14.rc1
changelog:
  - Undo last change which had no effect.  We already remove the .SILENT
    target from the Makefile as part of the build.


author: Tim Waugh <twaugh@redhat.com> 1:1.5.0-6
changelog:
  - Tighten explicit libs sub-package requirement so that it includes
    the correct architecture as well (bug #731421 comment #8).


author: Richard Hughes <rhughes@redhat.com> 1:1.5.0-11
changelog:
  - Updated colord patch with fixes to DeleteDevice.
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=741697


author: Tim Waugh <twaugh@redhat.com> 1:1.5.0-12
changelog:
  - More fixes for systemd socket activation:
    - relax permissions check for domain socket in libcups.
    - initialise addrlen before calling getsockname().


author: Tim Waugh <twaugh@redhat.com> 1:1.5.0-16
changelog:
  - Use upstream fix for driverd issue (bug #742989).
  - Array handling fixes for DNSSDPrinters.
  - Array handling fixes for Avahi poll implementation.
  - Increase client blocking timeout from 30s to 70s (bug #744715).
  - Set BindIPv6Only=ipv6-only in systemd socket unit file as better fix
    for bug #737230.


author: Tim Waugh <twaugh@redhat.com> 1:1.5.0-18
changelog:
  - Make sure to guard against retrying the Avahi connection whilst
    already doing so (Ubuntu #877967).


author: Tim Waugh <twaugh@redhat.com> 1:1.5.0-23
changelog:
  - Detangle cups-serverbin-compat.patch from cups-lspp.patch.
  - Bind to datagram socket as well in systemd cups.socket unit file, to
    prevent that port being stolen by another service (bug #760070).


author: Tim Waugh <twaugh@redhat.com> 1:1.5.0-26
changelog:
  - Replace newline characters with spaces in reported Device IDs
    (bug #782129, STR #4005).
  - Don't accept Device URIs of '\0' from SNMP devices
    (bug #770646, STR #4004).


author: Remi Collet <remi@fedoraproject.org> 1:1.5.0-28
changelog:
  - build against php 5.4.0, patch for STR #3999
  - add filter to fix private-shared-object-provides
  - add %check for php extension


author: Tim Waugh <twaugh@redhat.com> 1:1.5.2-2
changelog:
  - Synthesize notify-printer-uri for job-completed events where the job
    never started processing (bug #784786, STR #4014).
  - Removed banners from LSPP patch on Dan Walsh's advice.


author: Tim Waugh <twaugh@redhat.com> 1:1.5.2-8
changelog:
  - Avoid systemd PrivateTmp bug by explicitly requiring the fixed
    version of systemd (bug #807672).


author: Tim Waugh <twaugh@redhat.com> 1:1.5.2-10
changelog:
  - Removed private-shared-object-provides filter lines as they are not
    necessary (see bug #807767 comment #3).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.5.2-11
changelog:
  - The IPP backend did not always setup username/password authentication
    for printers (bug #810007, STR #3985)
  - Detect authentication errors for all requests.
    (bug #810007, upstream commit revision10277)


author: Jiri Popelka <jpopelka@redhat.com> 1:1.5.2-12
changelog:
  - Install /usr/lib/tmpfiles.d/cups-lp.conf to support /dev/lp* devices (#812641)
  - Move /etc/tmpfiles.d/cups.conf to /usr/lib/tmpfiles.d/ (#812641)


author: Jiri Popelka <jpopelka@redhat.com> 1:1.5.2-13
changelog:
  - Add triggers for samba4-client. (#817110)
  - No need to define BuildRoot and clean it in clean and install section anymore.
  - %defattr no longer needed in %files sections.


author: Jiri Popelka <jpopelka@redhat.com> 1:1.6.1-1
changelog:
  - 1.6.1
   - simplified systemd.patch due to removed CUPS Browsing protocol (STR #3922)
   - removed:
     textonly filter - moved to cups-filters
     pstopdf filter - cups-filters also has pstopdf (different)
     PHP module - moved to cups-filters (STR #3932)
     serial.patch - moved to cups-filters
     getpass.patch - r10140 removed the getpass() use
     snmp-quirks.patch - fixed upstream (r10493)
     avahi patches - merged upstream (STR #3066)
     icc.patch - merged upstream (STR #3808)
   - TODO:
     - do we need cups-build.patch ?
  - added filesystem sub-package (#624695)
  - use macroized systemd scriptlets


author: Tim Waugh <twaugh@redhat.com> 1:1.6.1-11
changelog:
  - Apply upstream fix for CVE-2012-5519 (STR #4223, bug #875898).
    Migrate configuration keywords as needed.


author: Tim Waugh <twaugh@redhat.com> 1:1.6.1-13
changelog:
  - Applied additional upstream patch for CVE-2012-5519 so that the
    RemoteRoot keyword is recognised in the correct configuration file.


author: Tim Waugh <twaugh@redhat.com> 1:1.6.1-16
changelog:
  - Additional fix relating to CVE-2012-5519 to avoid misleading error
    message about actions to take to enable file device URIs.


author: Jiri Popelka <jpopelka@redhat.com> 1:1.6.1-17
changelog:
  - Migrate cups-lpd from xinetd to systemd socket activatable service (#884641).
  - Clean up old Requires/Conflicts/Obsoletes/Provides.


author: Jiri Popelka <jpopelka@redhat.com> - 1:1.6.1-23
changelog:
  - Removed obsolete browsing directives from cupsd.conf (bug #880826, STR #4157).
  - Updated summary and descriptions (#882982).
  - Fixed bogus dates in changelog.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - cups-dbus-utf.patch: now that the scheduler only accepts valid UTF-8
    strings for job-name, there's no need to validate it as UTF-8 in the
    dbus notifier.


author: Tim Waugh <twaugh@redhat.com> - 1:1.7-0.19.rc1
changelog:
  - Fixed avahi-no-threaded patch (was missing part of cupsd.h). Thanks
    to Joseph Wang for spotting it.


author: Tim Waugh <twaugh@redhat.com> - 1:1.7-0.26.rc1
changelog:
  - Reverted upstream change to FINAL_CONTENT_TYPE in order to fix
    printing to remote CUPS servers (bug #1010580).


author: Tim Waugh <twaugh@redhat.com> - 1:1.7.0-9
changelog:
  - dbus notifier: call _exit when handling SIGTERM (STR #4314).
  - Use '-f' when using rm in %setup section.
  - Fixed avahi-no-threaded patch so it removes a call to
    avahi_threaded_poll_stop() (bug #1044602).


author: Tim Waugh <twaugh@redhat.com> - 1:1.7.0-10
changelog:
  - Removed cups-dbus-utf8.patch as no longer needed (see STR #4314).
  - Return jobs in rank order when handling IPP-Get-Jobs (STR #4326).


author: Tim Waugh <twaugh@redhat.com> - 1:1.7.1-6
changelog:
  - Track local default in cupsEnumDests() (STR #4332).
  - libcups: avoid race condition when sending IPP requests (STR #4386).
  - Prevent feedback loop when fetching error_log over HTTP (STR #4366).


author: Jiri Popelka <jpopelka@redhat.com> - 1:1.7.1-9
changelog:
  - New client subpackage containing command line client tools (bug #1002342).
  - Removed unneeded Group tags.
  - Removed 'Requires: /sbin/chkconfig'.
  - Moved 'Provides: lpd' to lpd subpackage.


author: Tim Waugh <twaugh@redhat.com> - 1:1.7.5-4
changelog:
  - Removed old one-off trigger now it's no longer needed.
  - Run systemd postun script for path and socket unit files as well as
    the main service unit file.
  - Upstream patch for STR #4396, pre-requisite for STR #2913 patch.
  - Upstream patch for STR #2913 to limit Get-Jobs replies to 500 jobs
    (bug #421671).


author: Tim Waugh <twaugh@redhat.com> - 1:2.0.0-4
changelog:
  - Can no longer reproduce bug #1010580 so removing final-content-type
    patch as it causes issues for some backends (bug #1149244).


author: Tim Waugh <twaugh@redhat.com> - 1:2.0.0-10
changelog:
  - cups-lspp.patch: use cupsdLogJob() when appropriate.
  - Fixed some warnings in cups-lspp.patch.
  - New systemd journal fields CUPS_DEST and CUPS_PRINTER, as well as
    accurate code location fields.


author: Tim Waugh <twaugh@redhat.com> - 1:2.0.0-11
changelog:
  - Removed openssl requirements from spec file as it is no longer
    supported upstream (see bug #1161235).


author: Tim Waugh <twaugh@redhat.com> - 1:2.0.0-12
changelog:
  - Re-introduce SSLOptions configuration directive, disable SSL3 by
    default (STR #4476).
  - Enable SSL again via GnuTLS (bug #1161235).


author: Tim Waugh <twaugh@redhat.com> - 1:2.0.3-3
changelog:
  - Fix slow resume of jobs after restart (STR #4646).
  - Fix redirection from CGI scripts (bug #1232030, STR #4538).


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.1-3
changelog:
  - Unable to print from Windows (7) on a Cups-Server(2.2.1-1) with german umlauts in the filename (bug #1386751)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.3-4
changelog:
  - fixing issue with #1437065 - makes res_init() call to local resolver and keeps error message, but no hard exit for cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-21
changelog:
  - 1602469 - fixed covscan issues
  - 1625899 - cups 2.2.6 lpr command fails against old cups 1.3.9 server
  - 1625913 - ssl options aren't initialized when no SSLOptions directive is set in /etc/cups/client.conf
  - 1618009 - Enabling cups.path causes high load when jobs are submitted to CUPS
  - 1630805 - Make cups systemd unit files more upstream-like


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-22
changelog:
  - 1622431 - Jobs with multiple files don't complete when backend fails
  - CVE-2018-4700 cups: Predictable session cookie breaks CSRF protection [rhel-8]


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-30
changelog:
  - 1774462 - CVE-2019-8675 - buffer overflow in SNMP and IPP, memory disclosure and DoS in scheduler
  - 1774463 - CVE-2019-8696


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-35
changelog:
  - 1825254 - CVE-2020-3898 cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-36
changelog:
  - 1838449 - ipp/socket backends connect to turned off device for eternity (contimeout is not applied)
  - 1689207 - Add failover backend
  - 1833516 - DirtyCleanInterval ignored if there are open client connections


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-39
changelog:
  - 1941437 - cupsd doesn't log job ids when logging into journal
  - 1782216 - Print queue is paused after ipp backend ends with CUPS_BACKEND_STOP
  - 1938384 - CUPS doesn't start if sssd starts after cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-40
changelog:
  - 1955964 - PreserveJobHistory doesn't work with seconds
  - 1927452 - CVE-2020-10001 cups: access to uninitialized buffer in ipp.c [rhel-8]


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-41
changelog:
  - 2006987 - Unauthenticated users can't move print jobs in Web UI
  - 2017919 - Setting 'MaxJobTime 0' does not set a job time to unlimited
  - 1726383 - "lpadmin -p <queue> -o cupsSNMPSupplies:false" doesn't work
  - 1982891 - Printing of banner before PCL file only prints banner
  - 2006591 - Trying to restart and hold a job doesn't work
  - 1811716 - lpr to non-existent printer reports incorrect error


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-46
changelog:
  - 2074684 - lp to a remote server takes a long time
  - 2074736 - CUPS is too chatty about "Removing document files." in debug mode


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-52
changelog:
  - 2217178 - Delays printing to lpd when reserved ports are exhausted
  - 2217283 - The command "cancel -x <job>" does not remove job files
  - 2217955 - Enlarge backlog queue for listen() in cupsd
  - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
  - CVE-2023-32324 cups: heap buffer overflow may lead to DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-33
changelog:
  - RHEL-19433 Incorrect PS header handling in gstopdf
  - RHEL-16034 pdftopdf results with (N > 1)^2 copies if a file is sent to IPP printer with collate
  - RHEL-13211 redhat-lsb unnecessary pulls in cups and avahi dependencies


author: Weitao Zhou <zhouwt@linux.alibaba.com> 1.20.0-34.0.1
changelog:
  - use extern in header files when declaring global variables for compatible gcc10 build
  - Add doc sub package(Weisson)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-35.0.1
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Tim Waugh <twaugh@redhat.com> - 1.0.35-6
changelog:
  - Set cost for text filters to 200 so that the paps filter gets
    preference for the time being (bug #988909).


author: Tim Waugh <twaugh@redhat.com> - 1.0.36-3
changelog:
  - Upstream patch to re-work filter costs (bug #998977). No longer need
    text filter costs patch as paps gets used by default now if
    installed.


author: Tim Waugh <twaugh@redhat.com> - 1.0.41-4
changelog:
  - Adjust filter costs so application/vnd.adobe-read-postscript input
    doesn't go via pstotiff (bug #1008166).


author: Tim Waugh <twaugh@redhat.com> - 1.0.54-2
changelog:
  - Fix build issue (bug #1106101).
  - Don't use grep's -P switch in pstopdf as it needs execmem (bug #1079534).
  - Return work-around patch for bug #768811.


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.14.0-3
changelog:
  - update python Requires/BuildRequires accordingly to Fedora Guidelines for Python (python-cups -> python3-cups)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-3
changelog:
  - remove old stuff https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/MRWOMRZ6KPCV25EFHJ2O67BCCP3L4Y6N/


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-13
changelog:
  - 1602470 - covscan fixes from upstream
  - 1632268 - cups-filters needs to obsolete ghostscript-cups and foomatic-filters
  - 1626996 - cups-filters: Sticky EOF behavior in glibc breaks descriptor concatenation using dup2


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-31
changelog:
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)


author: Jacek Migacz <jmigacz@redhat.com> - 7.61.1-34
changelog:
  - when keyboard-interactive auth fails, try password (#2229800)
  - cap SFTP packet size sent (RHEL-5311)
  - unify the upload/method handling (CVE-2023-28322)
  - fix cookie injection with none file (CVE-2023-38546)
  - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Jacek Migacz <jmigacz@redhat.com> - 7.61.1-34.el8_10.3
changelog:
  - asyn-thread: create a socketpair to wait on (RHEL-34906)
  - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641)


author: Simo Sorce <simo@redhat.com> - 2.1.27-0.4rc7
changelog:
  - Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
  - Resolves bz#1618744
  - Fix multilib issue bz#1663120


author: Ray Strode <rstrode@redhat.com> - 1:1.12.8-22
changelog:
  - Use hangup signal instead of termination signal to
    kill sesssion monitoring script to appeach tcsh.
    Related: #2089362


author: Ray Strode <rstrode@redhat.com> - 1:1.12.8-23
changelog:
  - Address race for very short running sessions in SSH
    session monitoring script.
    Related: #2089362


author: Ray Strode <rstrode@redhat.com> - 1.12.8-25
changelog:
  - Ensure only one dbus-daemon is spawned for all shells sharing
    a single connection.
    Resolves: #2189201


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 1.12.8-26.0.1
changelog:
  - Add doc sub package, requires and provides
  - Fix build failure(Chang Gao)
  - Fix CVE-2023-34969 (Bo Liu)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2.4-9
changelog:
  - Python 2 binary package renamed to python2-dbus
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2.4-10
changelog:
  - Also add Provides for the old name without %_isa
  - Use %python_provide for the python3 subpackage and drop manual Provide which
    conflicts with %python_provide in the python2 subpackage.


author: Marian Csontos <mcsontos@redhat.com> - 0.8.5-3
changelog:
  - Remove obsolete pool-inactive option from thin_trim man page.
  - Check input file exists eralier, and prevent writing incorrect metadata.


author: Marian Csontos <mcsontos@redhat.com> - 0.9.0-1
changelog:
  - Update to upstream version 0.9.0.
  - Fix important issues found by static analysis.
  - Update crc32c to version 0.5 supporting non x86 architectures.
  - New tools thin_metadata_pack and thin_metadata_unpack.


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.3-13.20171209
changelog:
  - update to 1.3-20171209
  - fix build with multiple options in hardened ldflags (#1548400)
  - add gcc to build requirements
  - use macro for ldconfig scriptlets


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Don't schedule dleyna_task_processor_t->on_quit_cb more than once
    (RH #1251366)
  - Remove all queues before dleyna_task_processor_t->on_quit_cb is run
    (RH #1205574, #1360209)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.6.0-3
changelog:
  - Don't remove a queue more than once
  - Remove any pending task processing handlers when destroying a queue
  Resolves: #1464902


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Fix crash due to double-free when destroying the same dls_upnp_t or
    dls_manager_t twice (RH #1251365)
  - Use make_build and make_install macros
  - Update minimum required versions; use pkgconfig(...) for BRs
  - Miscellaneous clean-ups


author: Bo Ren <rb01097748@alibaba-inc.com> - 1:3.5-1.0.1
changelog:
  - Add doc sub package
  - Enable loongarch64 support (geliwei@openanolis.org)
  - cherry-pick `add sw arch`. (nijie@wxiat.com)
  - https://bugzilla.openanolis.cn/show_bug.cgi?id=8972
  - dmidecode Add processor support from SMBIOS 3.6.0 (wangkaiqiang@inspur.com)


author: Tomas Hozza <thozza@redhat.com> - 0.15-4
changelog:
  - Added explicit BuildRequires on gcc as required by packaging guidelines
  - Added explicit Requires on e2fsprogs, so that /usr/bin/chattr is available
  - Remove redundant removal of immutable bit in %preun scriptlet (#1542400)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.0-1
changelog:
  - New version
    Resolves: rhbz#1333781
  - Switched to autotools
  - Various spec file cosmetic fixes (e.g. used optflags)


author: Panu Matilainen <pmatilai@redhat.com> - 0.91-1
changelog:
  - Use a relative path from udevrulesdir
  - Use fedorable source url which spectool actually understands
  - Move bash completions to newer standard in %{_datadir}/bash-completion
  - Use %make_install macro
  - Require /usr/sbin/udevadm for %post and %postun


author: Timothy Redaelli <tredaelli@redhat.com> - 0.101-1
changelog:
  - Rebase to driverctl-0.101-1.el7 (#1648411):
    - Fix shellcheck warnings (#1506969)
    - Install bash-completion as driverctl instead of driverctl-bash-completion.sh
    - fix load_override for non-PCI bus
    - Make sure driverctl had loaded all the overrides before basic.target (#1634160)


author: Timothy Redaelli <tredaelli@redhat.com> - 0.108-1
changelog:
  - Fix bash autocompletion (#1657020)
  - Fix --no-save to do not always returns with exit code 1
  - Return error code when unbinding a device from a driver fails


author: Ales Matej <amatej@gmail.com> 0.4.1-1
changelog:
  - Update to 0.4.1
  - Relicense to LGPLv2+
  - Fix number of bugs mainly with drpm_make and drpm_apply
  - Add support for zstd drpms
  - CMake cleanups
  - Make running tests optional
  - Small spec improvements


author: Jakub Martisko <jamartis@redhat.com> - 7.1-27
changelog:
  - Include sys/sysmacros header in the growisofs.c file
  - Some macros have been moved from sys/types to sys/sysmacros which lead to FTBFS
  - Resolves: 1611716


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.2-12
changelog:
  - Fix pom filename (Resolves rhbz#655795)
  - Remove clean section and buildroot declaration
  - Remove versioned jars and pom files


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-10
changelog:
  - edk2-OvmfPkg-VirtNorFlashDxe-clone-ArmPlatformPkg-s-NOR-f.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-remove-CheckBlockLocked-feat.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-remove-disk-I-O-protocol-imp.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-drop-block-I-O-protocol-impl.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-avoid-array-mode-switch-afte.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-avoid-switching-between-mode.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-use-EFI_MEMORY_WC-and-drop-A.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-map-flash-memory-as-uncachea.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariable2.patch [RHEL-17587]
  -  edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variable2.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-add-casts-to-UINTN-and-UINT3.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-clarify-block-write-logic-fi.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-add-a-loop-for-NorFlashWrite.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-allow-larger-writes-without-.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-ValidateFvHeader-unwritten-s.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-move-DoErase-code-block-into.patch [RHEL-17587]
  - edk2-ArmVirtPkg-ArmVirtQemu-migrate-to-OVMF-s-VirtNorFlas.patch [RHEL-17587]
  - edk2-OvmfPkg-clone-NorFlashPlatformLib-into-VirtNorFlashP.patch [RHEL-17587]
  - Resolves: RHEL-17587
    ([rhel8] guest fails to boot due to ASSERT error)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-11
changelog:
  - edk2-SecurityPkg-Change-use-of-EFI_D_-to-DEBUG_.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Change-OPTIONAL-keyword-usage-style.patch [RHEL-21154 RHEL-21156]
  - edk2-MdePkg-Introduce-CcMeasurementProtocol-for-CC-Guest-.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Support-CcMeasurementProtocol-in-DxeTpm2.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Support-CcMeasurementProtocol-in-DxeTpmM.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Adding-CVE-2022-36763-to-SecurityFixes.y.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-418.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4118.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SEC-PATCH-4118-2.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SEC-PATCH-4117-2.patch [RHEL-21154 RHEL-21156]
  - edk2-SecurityPkg-Updating-SecurityFixes.yaml-after-symbol.patch [RHEL-21154 RHEL-21156]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Pa.patch [RHEL-21840 RHEL-21842]
  - edk2-NetworkPkg-Add-Unit-tests-to-CI-and-create-Host-Test.patch [RHEL-21840 RHEL-21842]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Un.patch [RHEL-21840 RHEL-21842]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Pa.patch [RHEL-21840 RHEL-21842]
  - Resolves: RHEL-21154
    (CVE-2022-36763 edk2: heap buffer overflow in Tcg2MeasureGptTable() [rhel-8])
  - Resolves: RHEL-21156
    (CVE-2022-36764 edk2: heap buffer overflow in Tcg2MeasurePeImage() [rhel-8])
  - Resolves: RHEL-21840
    (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message [rhel-8])
  - Resolves: RHEL-21842
    (CVE-2023-45230 edk2: Buffer overflow in the DHCPv6 client via a long Server ID option [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-12
changelog:
  - edk2-Apply-uncrustify-changes-to-.c-.h-files-in-the-Netwo.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Patc.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Unit.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Patc.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Unit.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Apply-uncrustify-changes.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p2.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p3.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p4.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Adds-a-SecurityFix.yaml-file.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Apply-uncrustify-changes-p2.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Re.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Dhcp6Dxe-Removes-duplicate-check-and-repl.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - edk2-NetworkPkg-Dhcp6Dxe-Packet-Length-is-not-updated-bef.patch [RHEL-21840 RHEL-21844 RHEL-21846 RHEL-21848 RHEL-21850 RHEL-21852]
  - Resolves: RHEL-21840
    (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message [rhel-8])
  - Resolves: RHEL-21844
    (CVE-2023-45231 edk2: Out of Bounds read when handling a ND Redirect message with truncated options [rhel-8])
  - Resolves: RHEL-21846
    (CVE-2023-45232 edk2: Infinite loop when parsing unknown options in the Destination Options header [rhel-8])
  - Resolves: RHEL-21848
    (CVE-2023-45233 edk2: Infinite loop when parsing a PadN option in the Destination Options header [rhel-8])
  - Resolves: RHEL-21850
    (CVE-2023-45234 edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message [rhel-8])
  - Resolves: RHEL-21852
    (CVE-2023-45235 edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-13
changelog:
  - edk2-EmbeddedPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-21158]
  - edk2-StandaloneMmPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-21158]
  - Resolves: RHEL-21158
    (CVE-2022-36765 edk2: integer overflow in CreateHob() could lead to HOB OOB R/W [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-13.el8_10.2
changelog:
  * Wed Jul 03 2024 Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-13.el8_10.1
  - edk2-MdeModulePkg-Change-use-of-EFI_D_-to-DEBUG_.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdeModulePkg-Potential-UINT32-overflow-in-S3-ResumeC.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Apply-uncrustify-changes.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-Apply-uncrustify-changes.p2.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Rename-RdRandGenerateEntropy-to-g.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Remove-ArchGetSupportedRngAlgorit.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Documentation-include-parameter-c.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Check-before-advertising-Cpu-Rng-.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Add-AArch64-RawAlgorithm-support-.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Add-debug-warning-for-NULL-PcdCpu.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Rename-AArch64-RngDxe.c.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Add-Arm-support-of-RngDxe.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Correctly-update-mAvailableAlgoAr.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Conditionally-install-EFI_RNG_PRO.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdeModulePkg-Duplicate-BaseRngLibTimerLib-to-MdeModu.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Add-deprecated-warning-to-BaseRngLibTimer.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-SecurityPkg.dec-Move-PcdCpuRngSupportedA.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-DxeRngLib-Request-raw-algorithm-instead-of-de.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Rng-Add-GUID-to-describe-Arm-Rndr-Rng-algorit.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdeModulePkg-Rng-Add-GUID-to-describe-unsafe-Rng-alg.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-Rng-Add-GetRngGuid-to-RngLib.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Use-GetRngGuid-when-probing-RngLi.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-Simplify-Rng-algorithm-selection-.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-SECURITY-PATCH-CVE-2023-45237.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-BaseRngLib-Add-a-smoketest-for-RDRAND-and-che.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-SecurityPkg-RngDxe-add-rng-test.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-OvmfPkg-wire-up-RngDxe.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-CryptoPkg-Test-call-ProcessLibraryConstructorList.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-MdePkg-X86UnitTestHost-set-rdrand-cpuid-bit.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-TcpDxe-SECURITY-PATCH-CVE-2023-45236.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - edk2-NetworkPkg-TcpDxe-Fixed-system-stuck-on-PXE-boot-flo.patch [RHEL-21854 RHEL-21856 RHEL-40099]
  - Resolves: RHEL-21854
    (CVE-2023-45236 edk2: Predictable TCP Initial Sequence Numbers [rhel-8])
  - Resolves: RHEL-21856
    (CVE-2023-45237 edk2: Use of a Weak PseudoRandom Number Generator [rhel-8])
  - Resolves: RHEL-40099
    (CVE-2024-1298 edk2: Temporary DoS vulnerability [rhel-8.10.z])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-13.el8.3
changelog:
  - edk2-OvmfPkg-Add-Hash2DxeCrypto-to-OvmfPkg.patch [RHEL-53009]
  - Resolves: RHEL-53009
    (No http boot support on edk2-ovmf-20231122-6.el9_4.2 [rhel-8.10.z])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-13.el8.4
changelog:
  - edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60830]
  - Resolves: RHEL-60830
    (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-8.10.z])


author: Jiang Xin <jiangxin@hygon.cn> - 20220126gitbb1bba3d77-13.0.1.4
changelog:
  - Support hygon CSV3 feature
  - Support SEV live migration
  - 0047-anolis-OvmfPkg-BaseMemEncryptLib-Save-memory-encrypt.patch
  - Fix the isue that interrupt is enabled in MMIO VC handler
  - 0048-OvmfPkg-AmdSev-SecretDxe-Allocate-secret-location-as.patch (fangbaoshun@hygon.cn)
  - Resolves: bz#8033


author: hanliyang <hanliyang@hygon.cn> - 20220126gitbb1bba3d77-13.0.1.6
changelog:
  - Fix boot failure on OvmfPkg/AmdSev
  - Add a build process that uses AmdSevX64.dsc with neither SB nor SMM enabled


author: Laszlo Ersek <lersek@redhat.com> - 20140723-1.git3facc08.el7
changelog:
  - rebase from upstream a618eaa to 3facc08
  - update to openssl-0.9.8za
  - drop downstream-only split varstore patch, rely on upstream's


author: Laszlo Ersek <lersek@redhat.com> - 20140822-1.git9ece15a.el7
changelog:
  - rebase from upstream 3facc08 to 9ece15a
  - update to openssl-0.9.8zb
  - update to FatPkg SVN r86 (git 2355ea2c)
  - the following patches of Paolo Bonzini have been merged in upstream; drop the
    downstream-only copies:
    7bc1421 edksetup.sh: Look for BuildEnv under EDK_TOOLS_PATH
    d549344 edksetup.sh: Ensure that WORKSPACE points to the top of an edk2
            checkout
    1c023eb BuildEnv: remove useless check before setting $WORKSPACE
  - include the following patches that have been pending review on the upstream
    list for a long time:
    [PATCH 0/4] OvmfPkg: complete client for QEMU's ACPI loader interface
    http://thread.gmane.org/gmane.comp.bios.tianocore.devel/8369
    [PATCH] OvmfPkg: QemuVideoDxe: fix querying of QXL's drawable buffer size
    http://thread.gmane.org/gmane.comp.bios.tianocore.devel/8515
  - nasm is a build-time dependency now because upstream BuildTools has started
    to call it directly


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-2.git9ece15a
changelog:
  - ovmf-redhat-process-rh-specific.sh-suppress-missing-files.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-QemuVideoDxe-fix-querying-of-.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-AcpiPlatformDxe-implement-QEM.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-AcpiPlatformDxe-remove-curren.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-AcpiPlatformDxe-actualize-Qem.patch [bz#1145784]
  - ovmf-Revert-RH-only-OvmfPkg-resolve-OrderedCollectionLib-.patch [bz#1145784]
  - ovmf-OvmfPkg-QemuVideoDxe-work-around-misreported-QXL-fra.patch [bz#1145784]
  - ovmf-OvmfPkg-resolve-OrderedCollectionLib-with-base-red-b.patch [bz#1145784]
  - ovmf-OvmfPkg-AcpiPlatformDxe-actualize-QemuLoader.h-comme.patch [bz#1145784]
  - ovmf-OvmfPkg-AcpiPlatformDxe-remove-current-ACPI-table-lo.patch [bz#1145784]
  - ovmf-OvmfPkg-AcpiPlatformDxe-implement-QEMU-s-full-ACPI-t.patch [bz#1145784]
  - ovmf-spec-build-small-bootable-ISO-with-standalone-UEFI-s.patch [bz#1147592]
  - ovmf-OvmfPkg-allow-exclusion-of-the-shell-from-the-firmwa.patch [bz#1147592]
  - ovmf-spec-exclude-the-UEFI-shell-from-the-SecureBoot-enab.patch [bz#1147592]
  - ovmf-OvmfPkg-EnrollDefaultKeys-application-for-enrolling-.patch [bz#1148296]
  - ovmf-spec-package-EnrollDefaultKeys.efi-on-UefiShell.iso-.patch [bz#1148296]
  - ovmf-OvmfPkg-disable-stale-fork-of-SecureBootConfigDxe.patch [bz#1148294]
  - ovmf-OvmfPkg-SecureBootConfigDxe-remove-stale-fork.patch [bz#1148294]
  - Resolves: bz#1145784
    (OVMF sync with QXL and ACPI patches up to edk2 7a9612ce)
  - Resolves: bz#1147592
    (the binary RPM should include a small ISO file with a directly bootable UEFI shell binary)
  - Resolves: bz#1148294
    (drop OvmfPkg's stale fork of SecureBootConfigDxe)
  - Resolves: bz#1148296
    (provide a non-interactive way to auto-enroll important SecureBoot certificates)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-3.git9ece15a.el7
changelog:
  - ovmf-Revert-OvmfPkg-set-video-resolution-of-text-setup-to.patch [bz#1153927]
  - ovmf-Try-to-read-key-strike-even-when-the-TimeOuts-value-.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-remove-dead-call-to-PlatformBdsEnterFron.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-drop-useless-return-statement.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-don-t-overwrite-the-BDS-Front-Page-timeo.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-optimize-second-argument-in-PlatformBdsE.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-drop-superfluous-connect-first-boot-opti.patch [bz#1153927]
  - ovmf-OvmfPkg-BDS-drop-custom-boot-timeout-revert-to-Intel.patch [bz#1153927]
  - ovmf-OvmfPkg-set-video-resolution-of-text-setup-to-640x48.patch [bz#1153927]
  - Resolves: bz#1153927
    (set NEXTBOOT to uefi setting failed from Windows Recovery console)


author: Laszlo Ersek <lersek@redhat.com> - AAVMF-20141113-1.git77d5dac
changelog:
  - rebased to upstream 77d5dac
    <https://bugzilla.redhat.com/show_bug.cgi?id=1162314#c1>
  - patch "ArmVirtualizationPkg: FdtPL011SerialPortLib: support UEFI_APPLICATION"
    is now upstream (SVN r16219, git edb5073)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-4.git9ece15a.el7
changelog:
  - ovmf-Add-comments-to-clarify-mPubKeyStore-buffer-MemCopy.patch [bz#1162314]
  - ovmf-MdeModulePkg-SecurityPkg-Variable-Add-boundary-check.patch [bz#1162314]
  - Resolves: bz#1162314
   (EMBARGOED OVMF: uefi: INTEL-TA-201410-001 && INTEL-TA-201410-002 [rhel-7.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-6.git9ece15a.el7
changelog:
  - ovmf-OvmfPkg-AcpiPlatformDxe-make-dependency-on-PCI-enume.patch [bz#1166027]
  - Resolves: bz#1166027
    (backport "OvmfPkg: AcpiPlatformDxe: make dependency on PCI enumeration explicit")


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20140822-7.git9ece15a.el7
changelog:
  - ovmf-MdePkg-UefiScsiLib-do-not-encode-LUN-in-CDB-for-READ.patch [bz#1166971]
  - ovmf-MdePkg-UefiScsiLib-do-not-encode-LUN-in-CDB-for-othe.patch [bz#1166971]
  - Resolves: bz#1166971
    (virtio-scsi disks and cd-roms with nonzero LUN are rejected with errors)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-2.git77d5dac.el7
changelog:
  - aavmf-ArmVirtualizationPkg-VirtFdtDxe-forward-FwCfg-addres.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-introduce-QemuFwCfgLib-instance.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-clone-PlatformIntelBdsLib-from-.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-add-basic-p.patch [bz#1172749]
  - aavmf-OvmfPkg-extract-QemuBootOrderLib.patch [bz#1172749]
  - aavmf-OvmfPkg-QemuBootOrderLib-featurize-PCI-like-device-p.patch [bz#1172749]
  - aavmf-OvmfPkg-introduce-VIRTIO_MMIO_TRANSPORT_GUID.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-VirtFdtDxe-use-dedicated-VIRTIO.patch [bz#1172749]
  - aavmf-OvmfPkg-QemuBootOrderLib-widen-ParseUnitAddressHexLi.patch [bz#1172749]
  - aavmf-OvmfPkg-QemuBootOrderLib-OFW-to-UEFI-translation-for.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-adhere-to-Q.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-identify-new-shell-as-builtin-s.patch [bz#1172749]
  - aavmf-ArmVirtualizationPkg-Intel-BDS-load-EFI-stubbed-Linu.patch [bz#1172749]
  - aavmf-spec-build-AAVMF-with-the-Intel-BDS-driver-RHELSA-on.patch [bz#1172749]
  - aavmf-Revert-ArmVirtualizationPkg-work-around-cache-incohe.patch [bz#1172910]
  - Resolves: bz#1172749
    (implement fw_cfg, boot order handling, and -kernel booting in ArmVirtualizationQemu)
  - Resolves: bz#1172910
    (revert Acadia-only workaround (commit df7bca4e) once Acadia host kernel (KVM) is fixed)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-3.git77d5dac.el7
changelog:
  - aavmf-OvmfPkg-QemuBootOrderLib-expose-QEMU-s-boot-menu-on-.patch [bz#1172756]
  - aavmf-OvmfPkg-PlatformBdsLib-get-front-page-timeout-from-Q.patch [bz#1172756]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-get-front-p.patch [bz#1172756]
  - Resolves: bz#1172756
    ([RFE]Expose boot-menu shortcut to domain via AAVMF)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-4.git77d5dac.el7
changelog:
  - aavmf-ArmPkg-ArmArchTimerLib-clean-up-comments.patch [bz#1188247]
  - aavmf-ArmPkg-ArmArchTimerLib-use-edk2-conformant-UINT64-UI.patch [bz#1188247]
  - aavmf-ArmPkg-ArmArchTimerLib-conditionally-rebase-to-actua.patch [bz#1188247]
  - aavmf-ArmVirtualizationQemu-ask-the-hardware-for-the-timer.patch [bz#1188247]
  - aavmf-ArmPkg-TimerDxe-smack-down-spurious-timer-interrupt-.patch [bz#1188054]
  - Resolves: bz#1188054
    (guest reboot (asked from within AAVMF) regressed in 3.19.0-0.rc5.58.aa7a host kernel)
  - Resolves: bz#1188247
    (backport "fix gBS->Stall()" series)


author: Miroslav Rezanina <mrezanin@redhat.com> - AAVMF-20141113-5.git77d5dac.el7_1
changelog:
  - aavmf-ArmPkg-DebugPeCoffExtraActionLib-debugger-commands-a.patch [bz#1197141]
  - aavmf-ArmPlatformPkg-PEIM-startup-is-not-an-error.patch [bz#1197141]
  - aavmf-ArmVirtualizationPkg-PlatformIntelBdsLib-lack-of-QEM.patch [bz#1197141]
  - aavmf-ArmVirtualizationPkg-expose-debug-message-bitmask-on.patch [bz#1197141]
  - aavmf-spec-build-and-install-verbose-and-silent-default-AA.patch [bz#1197141]
  - Resolves: bz#1197141
    (create silent & verbose builds)


author: Laszlo Ersek <lersek@redhat.com> - 20150414-1.gitc9e5618.el7
changelog:
  - rebase from upstream 9ece15a to c9e5618
  - adapt .gitignore files
  - update to openssl-0.9.8zf
  - create Logo-OpenSSL.bmp rather than modifying Logo.bmp in-place
  - update to FatPkg SVN r93 (git 8ff136aa)
  - drop the following downstream-only patches (obviated by upstream
    counterparts):
    "tools_def.template: use forward slash with --add-gnu-debuglink (RHEL only)"
    "tools_def.template: take GCC48 prefixes from environment (RHEL only)"
    "OvmfPkg: set video resolution of text setup to 640x480 (RHEL only)"
    "OvmfPkg: resolve OrderedCollectionLib with base red-black tree instance"
    "OvmfPkg: AcpiPlatformDxe: actualize QemuLoader.h comments"
    "OvmfPkg: AcpiPlatformDxe: remove current ACPI table loader"
    "OvmfPkg: AcpiPlatformDxe: implement QEMU's full ACPI table loader interface"
    "OvmfPkg: QemuVideoDxe: fix querying of QXL's drawable buffer size"
    "OvmfPkg: disable stale fork of SecureBootConfigDxe"
    "OvmfPkg: SecureBootConfigDxe: remove stale fork"
    "Try to read key strike even when ..."
    "OvmfPkg: BDS: remove dead call to PlatformBdsEnterFrontPage()"
    "OvmfPkg: BDS: drop useless return statement"
    "OvmfPkg: BDS: don't overwrite the BDS Front Page timeout"
    "OvmfPkg: BDS: optimize second argument in PlatformBdsEnterFrontPage() call"
    'OvmfPkg: BDS: drop superfluous "connect first boot option" logic'
    "OvmfPkg: BDS: drop custom boot timeout, revert to IntelFrameworkModulePkg's"
    "Add comments to clarify mPubKeyStore buffer MemCopy. ..."
    "MdeModulePkg/SecurityPkg Variable: Add boundary check..."
    "OvmfPkg: AcpiPlatformDxe: make dependency on PCI enumeration explicit"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for READ and WRITE"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for other SCSI commands"
  - merge downstream AAVMF patch "adapt packaging to Arm64", which forces us to
    rename the main package from "OVMF" to "ovmf"
  - drop the following ARM BDS specific tweaks (we'll only build the Intel BDS):
    "ArmPlatformPkg/Bds: generate ESP Image boot option if user pref is unset
     (Acadia)"
    "ArmPlatformPkg/Bds: check for other defaults too if user pref is unset
     (Acadia)"
    "ArmPlatformPkg/ArmVirtualizationPkg: auto-detect boot path (Acadia)"
    "ArmPlatformPkg/Bds: initialize ConIn/ConOut/ErrOut before connecting
     terminals"
    "ArmPlatformPkg/Bds: let FindCandidate() search all filesystems"
    "ArmPlatformPkg/Bds: FindCandidateOnHandle(): log full device path"
    "ArmPlatformPkg/Bds: fall back to Boot Menu when no default option was found"
    "ArmPlatformPkg/Bds: always connect drivers before looking at boot options"
  - drop patch "ArmPlatformPkg/ArmVirtualizationPkg: enable DEBUG_VERBOSE (Acadia
    only)", obsoleted by fixed bug 1197141
  - tweak patch "write up build instructions (for interactive, local development)
    (RHELSA)". The defaults in "BaseTools/Conf/target.template", ie.
    ACTIVE_PLATFORM and TARGET_ARCH, are set for OVMF / X64. The AAVMF build
    instructions now spell out the necessary override options (-p and -a,
    respectively).
  - extend patch "build FAT driver from source (RHELSA)" to the Xen build as well
    (only for consistency; we don't build for Xen).
  - drop the following downstream-only AAVMF patches, due to the 77d5dac ->
    c9e5618 AAVMF rebase & join:
    "redhat/process-rh-specific.sh: fix check for hunk-less filtered patches"
    "redhat/process-rh-specific.sh: suppress missing files in final 'rm'"
    "ArmVirtualizationQemu: build UEFI shell from source (Acadia only)"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for READ and WRITE"
    "MdePkg: UefiScsiLib: do not encode LUN in CDB for other SCSI commands"
    "ArmVirtualizationPkg: work around cache incoherence on KVM affecting DTB"
    "Changed build target to supp-rhel-7.1-candidate"
    "ArmVirtualizationPkg: VirtFdtDxe: forward FwCfg addresses from DTB to PCDs"
    "ArmVirtualizationPkg: introduce QemuFwCfgLib instance for DXE drivers"
    "ArmVirtualizationPkg: clone PlatformIntelBdsLib from ArmPlatformPkg"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: add basic policy"
    "OvmfPkg: extract QemuBootOrderLib"
    "OvmfPkg: QemuBootOrderLib: featurize PCI-like device path translation"
    "OvmfPkg: introduce VIRTIO_MMIO_TRANSPORT_GUID"
    "ArmVirtualizationPkg: VirtFdtDxe: use dedicated VIRTIO_MMIO_TRANSPORT_GUID"
    "OvmfPkg: QemuBootOrderLib: widen ParseUnitAddressHexList() to UINT64"
    "OvmfPkg: QemuBootOrderLib: OFW-to-UEFI translation for virtio-mmio"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: adhere to QEMU's boot order"
    "ArmVirtualizationPkg: identify "new shell" as builtin shell for Intel BDS"
    "ArmVirtualizationPkg: Intel BDS: load EFI-stubbed Linux kernel from fw_cfg"
    'Revert "ArmVirtualizationPkg: work around cache incoherence on KVM affecting
     DTB"'
    "OvmfPkg: QemuBootOrderLib: expose QEMU's "-boot menu=on[, splash-time=N]""
    "OvmfPkg: PlatformBdsLib: get front page timeout from QEMU"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: get front page timeout from QEMU"
    "ArmPkg: ArmArchTimerLib: clean up comments"
    "ArmPkg: ArmArchTimerLib: use edk2-conformant (UINT64 * UINT32) / UINT32"
    "ArmPkg: ArmArchTimerLib: conditionally rebase to actual timer frequency"
    "ArmVirtualizationQemu: ask the hardware for the timer frequency"
    "ArmPkg: DebugPeCoffExtraActionLib: debugger commands are not errors"
    "ArmPlatformPkg: PEIM startup is not an error"
    "ArmVirtualizationPkg: PlatformIntelBdsLib: lack of QEMU kernel is no error"
    "ArmVirtualizationPkg: expose debug message bitmask on build command line"
  - tweak patch "rebase to upstream 77d5dac (Acadia only)": update spec changelog
    only
  - tweak patch "spec: build AAVMF with the Intel BDS driver (RHELSA only)":
    apply "-D INTEL_BDS" to manual build instructions in redhat/README too
  - tweak patch "spec: build and install verbose and silent (default) AAVMF
    binaries": apply DEBUG_PRINT_ERROR_LEVEL setting to interactive build
    instructions in redhat/README too
  - install OVMF whitepaper as part of the OVMF build's documentation
  - Resolves: bz#1211337
    (merge AAVMF into OVMF)
  - Resolves: bz#1206523
    ([AAVMF] fix missing cache maintenance)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20150414-2.gitc9e5618.el7
changelog:
  - ovmf-OvmfPkg-PlatformPei-set-SMBIOS-entry-point-version-d.patch [bz#1232876]
  - Resolves: bz#1232876
    (OVMF should install a version 2.8 SMBIOS entry point)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20151104-1.gitb9ffeab.el7
changelog:
  - rebase to upstream b9ffeab
  - Resolves: bz#1207554
    ([AAVMF] AArch64: populate SMBIOS)
  - Resolves: bz#1270279
    (AAVMF: output improvements)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160202-1.gitd7c0dfa.el7
changelog:
  - rebase to upstream d7c0dfa
  - update OpenSSL to 1.0.2e (upstream)
  - update FatPkg to SVN r97 (upstream)
  - drive NVMe devices (upstream)
  - resize xterm on serial console mode change, when requested with
    -fw_cfg name=opt/(ovmf|aavmf)/PcdResizeXterm,string=y
    (downstream)
  - Resolves: bz#1259395
    (revert / roll back AAVMF fix for BZ 1188054)
  - Resolves: bz#1202819
    (OVMF: secure boot limitations)
  - Resolves: bz#1182495
    (OVMF rejects iPXE oprom when Secure Boot is enabled)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160202-2.gitd7c0dfa.el7
changelog:
  - ovmf-restore-TianoCore-splash-logo-without-OpenSSL-advert.patch [bz#1308678]
  - ovmf-OvmfPkg-ArmVirtPkg-show-OpenSSL-less-logo-without-Se.patch [bz#1308678]
  - ovmf-OvmfPkg-simplify-VARIABLE_STORE_HEADER-generation.patch [bz#1308678]
  - ovmf-redhat-bring-back-OVMF_CODE.fd-but-without-SB-and-wi.patch [bz#1308678]
  - ovmf-redhat-rename-OVMF_CODE.smm.fd-to-OVMF_CODE.secboot..patch [bz#1308678]


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160419-1.git90bb4c5.el7
changelog:
  - FatPkg is under the 2-clause BSDL now; "ovmf" has become OSS
  - upgrade to openssl-1.0.2g
  - Resolves: bz#1323363
    (remove "-D SECURE_BOOT_ENABLE" from AAVMF)
  - Resolves: bz#1257882
    (FEAT: support to boot from virtio 1.0 modern devices)
  - Resolves: bz#1308678
    (clearly separate SB-less, SMM-less OVMF binary from SB+SMM OVMF binary)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160419-2.git90bb4c5.el7
changelog:
  - Submit scratch builds from the exploded tree again to
    supp-rhel-7.3-candidate, despite FatPkg being OSS at this point; see
    bz#1329559.


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160608-1.git988715a.el7
changelog:
  - Resolves: bz#1341733
    (prevent SMM stack overflow in OVMF while enrolling certificates in "db")
  - Resolves: bz#1257882
    (FEAT: support to boot from virtio 1.0 modern devices)
  - Resolves: bz#1333238
    (Q35 machine can not boot up successfully with more than 3 virtio-scsi
    storage controller under switch)
  - Resolves: bz#1330955
    (VM can not be booted up from hard disk successfully when with a passthrough
    USB stick)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160608-2.git988715a.el7
changelog:
  - ovmf-ArmPkg-ArmGicV3Dxe-configure-all-interrupts-as-non-s.patch [bz#1349407]
  - ovmf-ArmVirtPkg-PlatformBootManagerLib-Postpone-the-shell.patch [bz#1353689]
  - Resolves: bz#1349407
    (AArch64: backport fix to run over gicv3 emulation)
  - Resolves: bz#1353689
    (AAVMF: Drops to shell with uninitialized NVRAM file)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160608-3.git988715a.el7
changelog:
  - ovmf-MdePkg-PCI-Add-missing-PCI-PCIE-definitions.patch [bz#1332408]
  - ovmf-ArmPlatformPkg-NorFlashDxe-accept-both-non-secure-an.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemu-switch-secure-boot-build-to-N.patch [bz#1353494]
  - ovmf-ArmPlatformPkg-NorFlashAuthenticatedDxe-remove-this-.patch [bz#1353494]
  - ovmf-ArmVirtPkg-add-FDF-definition-for-empty-varstore.patch [bz#1353494]
  - ovmf-redhat-package-the-varstore-template-produced-by-the.patch [bz#1353494]
  - ovmf-ArmVirtPkg-Re-add-the-Driver-Health-Manager.patch [bz#1353494]
  - ovmf-ArmVirtPkg-HighMemDxe-allow-patchable-PCD-for-PcdSys.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemuKernel-make-ACPI-support-AARCH.patch [bz#1353494]
  - ovmf-ArmVirtPkg-align-ArmVirtQemuKernel-with-ArmVirtQemu.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemu-factor-out-shared-FV.FvMain-d.patch [bz#1353494]
  - ovmf-ArmVirtPkg-factor-out-Rules-FDF-section.patch [bz#1353494]
  - ovmf-ArmVirtPkg-add-name-GUIDs-to-FvMain-instances.patch [bz#1353494]
  - ovmf-OvmfPkg-add-a-Name-GUID-to-each-Firmware-Volume.patch [bz#1353494]
  - ovmf-OvmfPkg-PlatformBootManagerLib-remove-stale-FvFile-b.patch [bz#1353494]
  - ovmf-MdePkg-IndustryStandard-introduce-EFI_PCI_CAPABILITY.patch [bz#1332408]
  - ovmf-MdeModulePkg-PciBusDxe-look-for-the-right-capability.patch [bz#1332408]
  - ovmf-MdeModulePkg-PciBusDxe-recognize-hotplug-capable-PCI.patch [bz#1332408]
  - ovmf-OvmfPkg-add-PciHotPlugInitDxe.patch [bz#1332408]
  - ovmf-ArmPkg-ArmGicLib-manage-GICv3-SPI-state-at-the-distr.patch [bz#1356655]
  - ovmf-ArmVirtPkg-PlatformBootManagerLib-remove-stale-FvFil.patch [bz#1353494]
  - ovmf-OvmfPkg-EnrollDefaultKeys-assign-Status-before-readi.patch [bz#1356913]
  - ovmf-OvmfPkg-EnrollDefaultKeys-silence-VS2015x86-warning-.patch [bz#1356913]
  - ovmf-CryptoPkg-update-openssl-to-ignore-RVCT-3079.patch [bz#1356184]
  - ovmf-CryptoPkg-Fix-typos-in-comments.patch [bz#1356184]
  - ovmf-CryptoPkg-BaseCryptLib-Avoid-passing-NULL-ptr-to-fun.patch [bz#1356184]
  - ovmf-CryptoPkg-BaseCryptLib-Init-the-content-of-struct-Ce.patch [bz#1356184]
  - ovmf-CryptoPkg-OpensslLib-Upgrade-OpenSSL-version-to-1.0..patch [bz#1356184]
  - Resolves: bz#1332408
    (Q35 machine can not hot-plug scsi controller under switch)
  - Resolves: bz#1353494
    ([OVMF] "EFI Internal Shell" should be removed from "Boot Manager")
  - Resolves: bz#1356184
    (refresh embedded OpenSSL to 1.0.2h)
  - Resolves: bz#1356655
    (AAVMF: stop accessing unmapped gicv3 registers)
  - Resolves: bz#1356913
    (fix use-without-initialization in EnrollDefaultKeys.efi)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160608b-1.git988715a.el7
changelog:
  - rework downstream-only commit dde83a75b566 "setup the tree for the secure
    boot feature (RHEL only)", excluding patent-encumbered files from the
    upstream OpenSSL 1.0.2g tarball [bz#1374710]
  - rework downstream-only commit dfc3ca1ee509 "CryptoPkg/OpensslLib: Upgrade
    OpenSSL version to 1.0.2h", excluding patent-encumbered files from the
    upstream OpenSSL 1.0.2h tarball [bz#1374710]


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20170228-1.gitc325e41585e3.el7
changelog:
  - Rebase to upstream c325e41585e3 [bz#1416919]
  - Resolves: bz#1373812
    (guest boot from network even set 'boot order=1' for virtio disk with OVMF)
  - Resolves: bz#1380282
    (Update OVMF to openssl-1.0.2k-hobbled)
  - Resolves: bz#1412313
    (select broadcast SMI if available)
  - Resolves: bz#1416919
    (Rebase OVMF for RHEL-7.4)
  - Resolves: bz#1426330
    (disable libssl in CryptoPkg)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-2.gitc325e41585e3.el7
changelog:
  - ovmf-MdeModulePkg-Core-Dxe-downgrade-CodeSegmentCount-is-.patch [bz#1433428]
  - Resolves: bz#1433428
    (AAVMF: Fix error message during ARM guest VM installation)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-3.gitc325e41585e3.el7
changelog:
  - ovmf-ArmVirtPkg-FdtClientDxe-supplement-missing-EFIAPI-ca.patch [bz#1430262]
  - ovmf-ArmVirtPkg-ArmVirtPL031FdtClientLib-unconditionally-.patch [bz#1430262]
  - ovmf-MdeModulePkg-RamDiskDxe-fix-C-string-literal-catenat.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-ACPI-GUID.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-PlatformHasAcpiLib.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-Device-Tree.patch [bz#1430262]
  - ovmf-ArmVirtPkg-add-PlatformHasAcpiDtDxe.patch [bz#1430262]
  - ovmf-ArmVirtPkg-enable-AcpiTableDxe-and-EFI_ACPI_TABLE_PR.patch [bz#1430262]
  - ovmf-ArmVirtPkg-FdtClientDxe-install-DT-as-sysconfig-tabl.patch [bz#1430262]
  - ovmf-ArmVirtPkg-PlatformHasAcpiDtDxe-don-t-expose-DT-if-Q.patch [bz#1430262]
  - ovmf-ArmVirtPkg-remove-PURE_ACPI_BOOT_ENABLE-and-PcdPureA.patch [bz#1430262]
  - Resolves: bz#1430262
    (AAVMF: forward QEMU's DT to the guest OS only if ACPI payload is unavailable)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-4.gitc325e41585e3.el7
changelog:
  - ovmf-ShellPkg-Shell-clean-up-bogus-member-types-in-SPLIT_.patch [bz#1442908]
  - ovmf-ShellPkg-Shell-eliminate-double-free-in-RunSplitComm.patch [bz#1442908]
  - Resolves: bz#1442908
    (Guest hang when running a wrong command in Uefishell)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-5.gitc325e41585e3.el7
changelog:
  - ovmf-OvmfPkg-EnrollDefaultKeys-update-SignatureOwner-GUID.patch [bz#1443351]
  - ovmf-OvmfPkg-EnrollDefaultKeys-expose-CertType-parameter-.patch [bz#1443351]
  - ovmf-OvmfPkg-EnrollDefaultKeys-blacklist-empty-file-in-db.patch [bz#1443351]
  - ovmf-OvmfPkg-introduce-the-FD_SIZE_IN_KB-macro-build-flag.patch [bz#1443351]
  - ovmf-OvmfPkg-OvmfPkg.fdf.inc-extract-VARS_LIVE_SIZE-and-V.patch [bz#1443351]
  - ovmf-OvmfPkg-introduce-4MB-flash-image-mainly-for-Windows.patch [bz#1443351]
  - ovmf-OvmfPkg-raise-max-variable-size-auth-non-auth-to-33K.patch [bz#1443351]
  - ovmf-OvmfPkg-PlatformPei-handle-non-power-of-two-spare-si.patch [bz#1443351]
  - ovmf-redhat-update-local-build-instructions-with-D-FD_SIZ.patch [bz#1443351]
  - ovmf-redhat-update-OVMF-build-commands-with-D-FD_SIZE_4MB.patch [bz#1443351]
  - Resolves: bz#1443351
    ([svvp][ovmf] job "Secure Boot Logo Test" failed  with q35&ovmf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-1.git92d07e48907f.el7
changelog:
  - Rebase to 92d07e48907f [bz#1469787]
  - Resolves: bz#1469787
    ((ovmf-rebase-rhel-7.5) Rebase OVMF for RHEL-7.5)
  - Resolves: bz#1434740
    (OvmfPkg/PciHotPlugInitDxe: don't reserve IO space when IO support is disabled)
  - Resolves: bz#1434747
    ([Q35] code12 error when hotplug x710 device in win2016)
  - Resolves: bz#1447027
    (Guest cannot boot with 240 or above vcpus when using ovmf)
  - Resolves: bz#1458192
    ([Q35] recognize "usb-storage" devices in XHCI ports)
  - Resolves: bz#1468526
    (>1TB RAM support)
  - Resolves: bz#1488247
    (provide "OVMF_CODE.secboot.verbose.fd" for log capturing; silence "OVMF_CODE.secboot.fd")
  - Resolves: bz#1496170
    (Inconsistent MOR control variables exposed by OVMF, breaks Windows Device Guard)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-2.git92d07e48907f.el7
changelog:
  - ovmf-MdeModulePkg-Bds-Remove-assertion-in-BmCharToUint.patch [bz#1513632]
  - ovmf-MdeModulePkg-Bds-Check-variable-name-even-if-OptionN.patch [bz#1513632]
  - ovmf-MdeModulePkg-PciBus-Fix-bug-that-PCI-BUS-claims-too-.patch [bz#1514105]
  - ovmf-OvmfPkg-make-it-a-proper-BASE-library.patch [bz#1488247]
  - ovmf-OvmfPkg-create-a-separate-PlatformDebugLibIoPort-ins.patch [bz#1488247]
  - ovmf-OvmfPkg-save-on-I-O-port-accesses-when-the-debug-por.patch [bz#1488247]
  - ovmf-OvmfPkg-enable-DEBUG_VERBOSE-RHEL-only.patch [bz#1488247]
  - ovmf-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-QemuVide.patch [bz#1488247]
  - ovmf-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-NvmExpre.patch [bz#1488247]
  - ovmf-Revert-redhat-introduce-separate-silent-and-verbose-.patch [bz#1488247]
  - Resolves: bz#1488247
    (make debug logging no-op unless a debug console is active)
  - Resolves: bz#1513632
    ([RHEL-ALT 7.5] AAVMF fails to boot after setting BootNext)
  - Resolves: bz#1514105
    (backport edk2 commit 6e3287442774 so that PciBusDxe not over-claim resources)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-3.git92d07e48907f.el7
changelog:
  - ovmf-UefiCpuPkg-CpuDxe-Fix-multiple-entries-of-RT_CODE-in.patch [bz#1518308]
  - ovmf-MdeModulePkg-DxeCore-Filter-out-all-paging-capabilit.patch [bz#1518308]
  - ovmf-MdeModulePkg-Core-Merge-memory-map-after-filtering-p.patch [bz#1518308]
  - Resolves: bz#1518308
    (UEFI memory map regression (runtime code entry splitting) introduced by c1cab54ce57c)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-4.git92d07e48907f.el7
changelog:
  - ovmf-MdeModulePkg-Core-Dxe-log-informative-memprotect-msg.patch [bz#1520485]
  - ovmf-MdeModulePkg-BdsDxe-fall-back-to-a-Boot-Manager-Menu.patch [bz#1515418]
  - Resolves: bz#1515418
    (RFE: Provide diagnostics for failed boot)
  - Resolves: bz#1520485
    (AAVMF: two new messages with silent build)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20180508-2.gitee3198e672e2
changelog:
  - OvmfPkg/PlatformBootManagerLib: connect consoles unconditionally [bz#1577546]
  - build OVMF varstore template with SB enabled / certs enrolled [bz#1561128]
  - connect Virtio RNG devices again [bz#1579518]
  - Resolves: bz#1577546
    (no input consoles connected under certain circumstances)
  - Resolves: bz#1561128
    (OVMF Secure boot enablement (enrollment of default keys))
  - Resolves: bz#1579518
    (EFI_RNG_PROTOCOL no longer produced for virtio-rng)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-3.el8
changelog:
  - edk2-redhat-Provide-and-Obsolete-OVMF-and-AAVMF.patch [bz#1596148]
  - edk2-ArmVirtPkg-unify-HttpLib-resolutions-in-ArmVirt.dsc..patch [bz#1536627]
  - edk2-ArmVirtPkg-ArmVirtQemu-enable-the-IPv6-stack.patch [bz#1536627]
  - edk2-advertise-OpenSSL-due-to-IPv6-enablement-too-RHEL-on.patch [bz#1536627]
  - edk2-redhat-add-D-NETWORK_IP6_ENABLE-to-the-build-flags.patch [bz#1536627]
  - edk2-redhat-update-license-fields-and-files-in-the-spec-f.patch [bz#1536627]
  - Resolves: bz#1536627
    (IPv6 enablement in OVMF)
  - Resolves: bz#1596148
    (restore Provides/Obsoletes macros for OVMF and AAVMF, from RHEL-8 Alpha)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-4.el8
changelog:
  - edk2-redhat-provide-virtual-bundled-OpenSSL-in-edk2-ovmf-.patch [bz#1607801]
  - Resolves: bz#1607801
    (add 'Provides: bundled(openssl) = 1.1.0h' to the spec file)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-5.el8
changelog:
  - edk2-BaseTools-footer.makefile-expand-BUILD_CFLAGS-last-f.patch [bz#1607906]
  - edk2-BaseTools-header.makefile-remove-c-from-BUILD_CFLAGS.patch [bz#1607906]
  - edk2-BaseTools-Source-C-split-O2-to-BUILD_OPTFLAGS.patch [bz#1607906]
  - edk2-BaseTools-Source-C-take-EXTRA_OPTFLAGS-from-the-call.patch [bz#1607906]
  - edk2-BaseTools-Source-C-take-EXTRA_LDFLAGS-from-the-calle.patch [bz#1607906]
  - edk2-BaseTools-VfrCompile-honor-EXTRA_LDFLAGS.patch [bz#1607906]
  - edk2-redhat-inject-the-RPM-compile-and-link-options-to-th.patch [bz#1607906]
  - Resolves: bz#1607906
    (edk2-tools: Does not use RPM build flags)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-5.el8
changelog:
  - edk2-MdeModulePkg-Variable-Fix-Timestamp-zeroing-issue-on.patch [bz#1641436]
  - edk2-MdePkg-Add-more-checker-in-UefiDecompressLib-to-acce.patch [bz#1641449 bz#1641453 bz#1641464 bz#1641469]
  - edk2-IntelFrameworkModulePkg-Add-more-checker-in-UefiTian.patch [bz#1641453 bz#1641464 bz#1641469]
  - edk2-BaseTools-Add-more-checker-in-Decompress-algorithm-t.patch [bz#1641445 bz#1641453 bz#1641464 bz#1641469]
  - Resolves: bz#1641436
    (CVE-2018-3613 edk2: Logic error in MdeModulePkg in EDK II firmware allows for privilege escalation by authenticated users [rhel-8])
  - Resolves: bz#1641445
    (CVE-2017-5731 edk2: Privilege escalation via processing of malformed files in TianoCompress.c [rhel-8])
  - Resolves: bz#1641449
    (CVE-2017-5732 edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c [rhel-8])
  - Resolves: bz#1641453
    (CVE-2017-5733 edk2: Privilege escalation via heap-based buffer overflow in MakeTable() function [rhel-8])
  - Resolves: bz#1641464
    (CVE-2017-5734 edk2: Privilege escalation via stack-based buffer overflow in MakeTable() function [rhel-8])
  - Resolves: bz#1641469
    (CVE-2017-5735 edk2: Privilege escalation via heap-based buffer overflow in Decode() function [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-8.el8
changelog:
  - edk2-NetworkPkg-UefiPxeBcDxe-Add-EXCLUSIVE-attribute-when.patch [bz#1643377]
  - Resolves: bz#1643377
    (Exception when grubx64.efi used for UEFI netboot)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20180508gitee3198e672e2-9.el8
changelog:
  - edk2-BaseTools-Fix-UEFI-and-Tiano-Decompression-logic-iss.patch [bz#1662184]
  - edk2-MdePkg-BaseUefiDecompressLib-Fix-UEFI-Decompression-.patch [bz#1662184]
  - edk2-IntelFrameworkModulePkg-Fix-UEFI-and-Tiano-Decompres.patch [bz#1662184]
  - edk2-git-Use-HTTPS-support.patch []
  - Resolves: bz#1662184
    (backport fix for (theoretical?) regression introduced by earlier CVE fixes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 20190308git89910a39dcfd-2.el8
changelog:
  - edk2-redhat-provide-firmware-descriptor-meta-files.patch [bz#1600230]
  - Resolves: bz#1600230
    ([RHEL 8.1] RFE: provide firmware descriptor meta-files for the edk2-ovmf and edk2-aarch64 firmware images)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190308git89910a39dcfd-4.el8
changelog:
  - edk2-OvmfPkg-raise-the-PCIEXBAR-base-to-2816-MB-on-Q35.patch [bz#1666941]
  - edk2-OvmfPkg-PlatformPei-set-32-bit-UC-area-at-PciBase-Pc.patch [bz#1666941]
  - Resolves: bz#1666941
    (UEFI guest cannot boot into os when setting some special memory size)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190308git89910a39dcfd-5.el8
changelog:
  - edk2-redhat-add-D-TPM2_ENABLE-to-the-edk2-ovmf-build-flag.patch [bz#1693205]
  - Resolves: bz#1693205
    (edk2: Enable TPM2 support)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190308git89910a39dcfd-6.el8
changelog:
  - edk2-ArmVirtPkg-silence-DEBUG_VERBOSE-masking-0x00400000-.patch [bz#1714446]
  - edk2-OvmfPkg-QemuRamfbDxe-Do-not-report-DXE-failure-on-Aa.patch [bz#1714446]
  - edk2-ArmPkg-DebugPeCoffExtraActionLib-debugger-commands-a.patch [bz#1714446]
  - Resolves: bz#1714446
    (edk2-aarch64 silent build is not silent enough)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-1.el8
changelog:
  - Rebase to edk2-stable201908 [bz#1748180]
  - Resolves: bz#1748180
    ((edk2-rebase-rhel-8.2) - rebase edk2 to upstream tag edk2-stable201908 for RHEL-8.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-2.el8
changelog:
  - edk2-MdePkg-Include-Protocol-Tls.h-Add-the-data-type-of-E.patch [bz#1536624]
  - edk2-CryptoPkg-TlsLib-Add-the-new-API-TlsSetVerifyHost-CV.patch [bz#1536624]
  - edk2-CryptoPkg-Crt-turn-strchr-into-a-function-CVE-2019-1.patch [bz#1536624]
  - edk2-CryptoPkg-Crt-satisfy-inet_pton.c-dependencies-CVE-2.patch [bz#1536624]
  - edk2-CryptoPkg-Crt-import-inet_pton.c-CVE-2019-14553.patch [bz#1536624]
  - edk2-CryptoPkg-TlsLib-TlsSetVerifyHost-parse-IP-address-l.patch [bz#1536624]
  - edk2-NetworkPkg-TlsDxe-Add-the-support-of-host-validation.patch [bz#1536624]
  - edk2-NetworkPkg-HttpDxe-Set-the-HostName-for-the-verifica.patch [bz#1536624]
  - edk2-redhat-enable-HTTPS-Boot.patch [bz#1536624]
  - Resolves: bz#1536624
    (HTTPS enablement in OVMF)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-3.el8
changelog:
  - Update used openssl version [bz#1616029]
  - Resolves: bz#1616029
    (rebuild edk2 against the final RHEL-8.2.0 version of OpenSSL-1.1.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-4.el8
changelog:
  - edk2-redhat-set-guest-RAM-size-to-768M-for-SB-varstore-te.patch [bz#1778301]
  - edk2-redhat-re-enable-Secure-Boot-varstore-template-verif.patch [bz#1778301]
  - Resolves: bz#1778301
    (re-enable Secure Boot (varstore template) verification in %check)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-5.el8
changelog:
  - edk2-MdeModulePkg-UefiBootManagerLib-log-reserved-mem-all.patch [bz#1789797]
  - edk2-NetworkPkg-HttpDxe-fix-32-bit-truncation-in-HTTPS-do.patch [bz#1789797]
  - Resolves: bz#1789797
    (Backport upstream patch series: "UefiBootManagerLib, HttpDxe: tweaks for large HTTP(S) downloads" to improve HTTP(S) Boot experience with large (4GiB+) files)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-6.el8
changelog:
  - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-fix-2M-4K-page-splitting-r.patch [bz#1789335]
  - Resolves: bz#1789335
    (VM with edk2 can't boot when setting memory with '-m 2001')


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-7.el8
changelog:
  - edk2-SecurityPkg-Fix-spelling-errors-PARTIAL-PICK.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-simplify-Ver.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-remove-else-.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-keep-PE-COFF.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-narrow-down-.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-fix-retval-o.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-remove-super.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-unnest-AddIm.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-eliminate-St.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-fix-retval-f.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-fix-imgexec-.patch [bz#1751993]
  - edk2-SecurityPkg-DxeImageVerificationHandler-fix-defer-vs.patch [bz#1751993]
  - Resolves: bz#1751993
    (DxeImageVerificationLib handles "DENY execute on security violation" like "DEFER execute on security violation" [rhel8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-8.el8
changelog:
  - edk2-MdeModulePkg-Enable-Disable-S3BootScript-dynamically.patch [bz#1801274]
  - edk2-MdeModulePkg-PiDxeS3BootScriptLib-Fix-potential-nume.patch [bz#1801274]
  - Resolves: bz#1801274
    (CVE-2019-14563 edk2: numeric truncation in MdeModulePkg/PiDxeS3BootScriptLib [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20190829git37eef91017ad-9.el8
changelog:
  - edk2-OvmfPkg-QemuVideoDxe-unbreak-secondary-vga-and-bochs.patch [bz#1806359]
  - Resolves: bz#1806359
    (bochs-display cannot show graphic wihout driver attach)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-1.el8
changelog:
  - Rebase to edk2-stable202005 [bz#1817035]
  - Resolves: bz#1817035
    ((edk2-rebase-rhel-8.3) - rebase edk2 to upstream tag edk2-stable202005 for RHEL-8.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-2.el8
changelog:
  - edk2-OvmfPkg-QemuKernelLoaderFsDxe-suppress-error-on-no-k.patch [bz#1844682]
  - edk2-OvmfPkg-GenericQemuLoadImageLib-log-Not-Found-at-INF.patch [bz#1844682]
  - edk2-SecurityPkg-Tcg2Dxe-suppress-error-on-no-swtpm-in-si.patch [bz#1844682]
  - Resolves: bz#1844682
    (silent build of edk2-aarch64 logs DEBUG_ERROR messages that don't actually report serious errors)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-3.el8
changelog:
  - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-pause-in-WaitForSemaphore-.patch [bz#1861718]
  - Resolves: bz#1861718
    (Very slow boot when overcommitting CPU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-4.el8
changelog:
  - edk2-OvmfPkg-SmmControl2Dxe-negotiate-ICH9_LPC_SMI_F_CPU_.patch [bz#1849177]
  - edk2-OvmfPkg-CpuHotplugSmm-fix-CPU-hotplug-race-just-befo.patch [bz#1849177]
  - edk2-OvmfPkg-CpuHotplugSmm-fix-CPU-hotplug-race-just-afte.patch [bz#1849177]
  - edk2-CryptoPkg-OpensslLib-Upgrade-OpenSSL-to-1.1.1g.patch [bz#1893806]
  - edk2-redhat-bump-OpenSSL-dist-git-submodule-to-1.1.1g-RHE.patch [bz#1893806]
  - Resolves: bz#1849177
    (OVMF: negotiate "SMI on VCPU hotplug" with QEMU)
  - Resolves: bz#1893806
    (attempt advancing RHEL8 edk2's OpenSSL submodule to RHEL8 OpenSSL 1.1.1g (or later))


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-5.el8
changelog:
  - edk2-MdeModulePkg-LzmaCustomDecompressLib-catch-4GB-uncom.patch [bz#1892318]
  - edk2-redhat-add-OVMF-binary-that-will-support-SEV-ES.patch [bz#1956837]
  - Resolves: bz#1892318
    (edk2: possible heap corruption with LzmaUefiDecompressGetInfo [rhel-8])
  - Resolves: bz#1956837
    (Additional build of edk2 without SMM (dual build / sub-package) for SEV-ES)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-1
changelog:
  - Rebase to edk2-stable202105 [bz#1938238]
  - Resolves: bz#1938238
    ((edk2-rebase-rhel-8.5) - rebase edk2 to edk2-stable202105 for RHEL-8.5)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-2
changelog:
  - edk2-NetworkPkg-IScsiDxe-wrap-IScsiCHAP-source-files-to-8.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-simplify-ISCSI_CHAP_AUTH_DATA.In.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-clean-up-ISCSI_CHAP_AUTH_DATA.Ou.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-clean-up-library-class-dependenc.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-potential-integer-overflow-i.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-assert-that-IScsiBinToHex-always.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-reformat-IScsiHexToBin-leading-c.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-hex-parsing.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-buffer-overflo.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-check-IScsiHexToBin-return-value.patch [bz#1956408]
  - Resolves: bz#1956408
    (edk2: remote buffer overflow in IScsiHexToBin function in NetworkPkg/IScsiDxe [rhel-8.5.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-3
changelog:
  - edk2-MdeModulePkg-PartitionDxe-Ignore-PMBR-BootIndicator-.patch [bz#1988762]
  - Resolves: bz#1988762
    (edk2 does not ignore PMBR protective record BootIndicator as required by UEFI spec)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-1.el8
changelog:
  - Rebase to latest upstream release [bz#2018386]
  - Resolves: bz#2018386
    ([rebase] update edk2 to nov '21 release (edk2-stable202111xx))


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-2
changelog:
  - edk2-OvmfPkg-AmdSev-SecretPei-Mark-SEV-launch-secret-area.patch [bz#2112307]
  - Resolves: bz#2112307
    (Mark SEV launch secret area as reserved)


author: Camilla Conte <cconte@redhat.com> - 20220126gitbb1bba3d77-3
changelog:
  - Bumping OpenSSL version [bz# 2074834]
  - Resolves: bz# 2074834
    (edk2: sync openssl sources with rhel openssl rpm)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-4
changelog:
  - edk2-openssl-update.patch [bz#2164531 bz#2164543 bz#2164558 bz#2164581]
  - edk2-rh-openssl-add-crypto-bn-rsa_sup_mul.c-to-file-list.patch [bz#2164531 bz#2164543 bz#2164558 bz#2164581]
  - Resolves: bz#2164531
    (CVE-2023-0286 edk2: openssl: X.400 address type confusion in X.509 GeneralName [rhel-8])
  - Resolves: bz#2164543
    (CVE-2022-4304 edk2: openssl: timing attack in RSA Decryption implementation [rhel-8])
  - Resolves: bz#2164558
    (CVE-2023-0215 edk2: openssl: use-after-free following BIO_new_NDEF [rhel-8])
  - Resolves: bz#2164581
    (CVE-2022-4450 edk2: openssl: double free after calling PEM_read_bio_ex [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-5
changelog:
  - edk2-SecurityPkg-DxeImageVerificationLib-Check-result-of-.patch [bz#1861743]
  - Resolves: bz#1861743
    (CVE-2019-14560 edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler() [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-6
changelog:
  - edk2-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch [bz#2150267]
  - Resolves: bz#2150267
    (ovmf must consider max cpu count not boot cpu count for apic mode [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-7
changelog:
  - edk2-add-8.6-machine-type-to-edk2-ovmf-cc.json.patch [RHEL-12626]
  - Resolves: RHEL-12626
    (Missing firmware descriptor with secureboot disabled in RHEL 8)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-8
changelog:
  - edk2-Bumped-openssl-submodule-version-to-cf317b2bb227.patch [RHEL-7560]
  - Resolves: RHEL-7560
    (CVE-2023-3446 edk2: openssl: Excessive time spent checking DH keys and parameters [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-9
changelog:
  - edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariableG.patch [RHEL-17587]
  - edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variables.patch [RHEL-17587]
  - Resolves: RHEL-17587
    ([rhel8] guest fails to boot due to ASSERT error)


author: Peter Jones <pjones@redhat.com> - 3-2
changelog:
  - Always provide macros for efi_arch and efi_alt_arch (and their _upper
    variants), and make efi_has_arch and efi_has_alt_arch 0 when they will be
    wrong.  This ensures everything can always expand when we're on a non-efi
    architecture.


author: Peter Jones <pjones@redhat.com> - 15-1
changelog:
  - Update to efibootmgr 15
  - Make efibootmgr use EFIDIR / efibootmgr.efidir like fwupdate does
  - make --loader default build-time configurable
  - sanitize set_mirror()/get_mirror()
  - Add support for parsing loader options as UCS2
  - GCC 7 fixes
  - Don't use -fshort-wchar since we don't run on EFI machines.
  - Also rebuild for efivar-31-1.fc26 to get symbol versioning right.
    Resolves: rhbz#1468841


author: Peter Jones <pjones@redhat.com> - 35-1
changelog:
  - Update to efivar 35
  - fixes for older compilers
  - efi_get_variable_exists()
  - Lots of stuff to make CI work.
  - use usleep() to avoid hitting the kernel rate limiter on efivarfs
  - better EFI_GUID macro
  - add efi_guid_fwupdate (0abba7dc-e516-4167-bbf5-4d9d1c739416)


author: Peter Jones <pjones@redhat.com> - 36-1
changelog:
  - Update to efivar 36 (and some change)
    Resolves: rhbz#1635019
  - Add NVDIMM support
  - Re-written linux interface parser to handle how devices are
    partitioned better, and for cleaner code, with one file per device
    type.
  - lots of verbosity updates
  - better CI
  - analysis with clang's analyzer as well as coverity
  - Better handling of immutable bits in sysfs
  - LIBEFIVAR_OPS=help
  - lots of code cleanups.
  - Add emmc device support
  - Add SAS port expander support
  - Support for ACPI root nodes that are less common
    (i.e. ACPI Generic Container and Embedded Controller PNP nodes)
  - Make abbreviated device paths if we can't parse a device's info
  - Don't require NVME to have an EUI


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-9
changelog:
  - Fix etags local command injection vulnerability (#2175190)
  - Fix htmlfontify.el command injection vulnerability (#2175179)
  - Fix ruby-mode.el local command injection vulnerability (#2175142)
  - Fix ob-latex.el command injection vulnerability (#2180590)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - Disable xwidgets (RHEL-14551)
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Add protection for LaTeX preview (CVE-2024-30204)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-11.el9_5.1
changelog:
  - Fix man.el shell injection vulnerability (RHEL-79021)
  - Eliminate use of obsolete patch syntax (RHEL-80450)


author: Xiaoping Liu <liuxiaoping@alibaba-inc.com> - 1:27.2-11.0.1.1
changelog:
  - Add doc sub package
  - update config.sub and config.guess for loongarch64 (Jingyun Hua)
  - cherry-pick `add sw patch #349896d0a48b80b530cfa5cc2bd1fc4ceff68e42`. (nijie@wxiat.com)


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Moved ctags to gctags to fit in the more powerful for C (but less
    general) exuberant ctags as the binary /usr/bin/ctags and the
    man page /usr/man/man1/ctags.1


author: Michael Fulbright <msf@redhat.com>
changelog:
  - joy a new version of emacs! Of note - no lockdir any more.
  - use post/preun sections to handle numerous GNU info files


author: Michael Fulbright <msf@redhat.com>
changelog:
  - added multibyte support back into emacs 20.2
  - added wmconfig for X11 emacs
  - fixed some errant buildroot references


author: David S. Miller <davem@dm.cobaltmicro.com>
changelog:
  - fix signals when linked with glibc on non-Intel architectures
    NOTE: This patch is not needed with emacs >20.2


author: Paul Fisher <pnfisher@redhat.com>
changelog:
  - upgrade to 20.5a
  - remove python-mode, wheelmouse support, and auctex menu
  - import emacs.desktop with icon from GNOME


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fix descriptions and summary
  - fix permissions for emacs niaries (what the hell does 1755 means for a
    binary?)
  - added missing, as per emacs Changelog, NCURSES_OSPEED_T compilation
    flag; without it emacs on Linux is making global 'ospeed' short which
    is not the same as 'speed_t' expected by libraries. (reported by Michal
    Jaegermann <michal@harddata.com>)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fix bug #2988
  - recompile patched .el files (suggested by Pavel.Janik@linux.cz)
  - prereq /sbin/install-info


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - added a security patch from RUS-CERT, which fixes
    bugs mentioned in "Advisory 200004-01: GNU Emacs 20"


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - let the build system handle gzipping man pages and stripping
  - added patch to increase keyboard buffer size


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - don't apply the unexelf patch - use a new unexelf.c file
    from the 21 source tree (this will go into the 20.7 tree)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Version 20.7
  - Add requirement for final newline to the default .emacs
  - redid the Xaw3d patch
  - checked all patches, discarded those we've upstreamed


author: Matt Wilson <msw@redhat.com>
changelog:
  - edited japanese patch not to patch configure
  - fixed a missing escaped \" in a wc string
  - merge japanese support to head of development


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - (from MSW) different compression on IA64 to avoid hangs
  - remove etags/ctags - use a separate package. Disable patch1


author: Matt Wilson <msw@redhat.com>
changelog:
  - don't build with -O2 on alpha until we can track down the compiler
    bug that causes crashes in the garbage collector
  - removed all the nox Japanese packages


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - include python mode and change in site-start.el related to this
  - some changes to the default .emacs


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - remove ctags.1 and etags.1 from the emacs etc directory
    (#18011)
  - fix the emacs-nox not to use the locale.alias in XFree86
    (#18548)... copy it into /usr/share/emacs and patch
    the startup files to use it. Argh.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix icon name in the .desktop file
  - don't have site-start.el "noreplace"
  - load psgml-init (if present) in the default site-start.el
    to avoid psgml modifying the file


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add /usr/share/emacs/site-lisp/site-start.d
  - change site-start.el so files in the above directory
    are automatically run on startup
  - don't set the ispell name in site-start.el, use the
    above directory instead


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add rpm-spec-mode after modifying (use Red Hat groups,
    from /usr/share/doc/rpm-version/GROUPS) and fixing
    colours(don't specify "yellow" on "bright") Also,
    use gpg, not pgp.
  - use it (site-start.el)
  - add mwheel
  - use it, in /etc/skel/.emacs


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - do locale.alias fix for emacs-nox only, as it somehow
    broke the subject line in gnus. Weird.
  - update to gnus 5.8.7


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add /usr/share/emacs/locale.alias , which had gone AWOL
  - update rpm-spec-mode to 0.11a, fresh from the author
    (Stig Bjorlykke <stigb@tihlde.org>). The changes we made
    are integrated.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Much cleaner site-start.d sourcing
  - Add more build dependencies
  - Add the emacs lisp reference info pages (RFE #44577)
  - Don't require tamago - just plug it in for Japanese support


author: Trond Eivind Glomsrød <teg@redhat.com> 20.7-42
changelog:
  - Update python-mode to the version in the python 2.2a3
  - Include po-mode in emacs, instead of including in gettext


author: Trond Eivind Glomsrød <teg@redhat.com> 20.7-43
changelog:
  - Add php-mode 0.9.9
  - Add URL (#54603)
  - don't run autoconf/libtoolize during build - they're broken
  - don't build on IA64 until they are fixed


author: Trond Eivind Glomsrød <teg@redhat.com> 21.1-0.1
changelog:
  - 21.1
  - Build on IA64 again - the default config now handles it
  - Drop all old patches
  - Misc cleanups
  - Update the elisp manual to 21-2.7
  - Deprecate the emacs-nox and emacs-X11 subpackages.
    Simplify build procedure to match.
  - Update php-mode to 1.0.0


author: Jens Petersen <petersen@redhat.com> 21.2-19
changelog:
  - own our libexec dir (#73984)
  - only set transient-mark-mode in dotemacs for Emacs (#75440)
  - update to latest config.{guess,sub}
  - use _datadir macro


author: Jens Petersen <petersen@redhat.com> 21.2-20
changelog:
  - add support for x86_64 and merge in s390 support from cvs
  - add alloca defines to amdx86-64.h (from SuSE)


author: Jens Petersen <petersen@redhat.com> 21.2-23
changelog:
  - set transient-mark-mode in dotemacs for Emacs not XEmacs (#75440)
  - update rpm-spec-mode.el to 0.12
    - define needed XEmacs compat functions in new rpm-spec-mode-init.el
  - tidy site-start.el
    - move python-mode setup to python-mode
  - don't build with sbin in path
  - use _libexecdir, _bindir and _sysconfdir
  - don't gzip info files explicitly
  - use tar's C and j options
  - generate lisp file-lists in single find sweeps over lisp and leim dirs
    - use -fprint and -fprintf
    - correct more dir ownerships


author: Jens Petersen <petersen@redhat.com>
changelog:
  - use LC_CTYPE rather than LANG to determine default encoding (#78678)
    [reported by starback@stp.ling.uu.se]


author: Jens Petersen <petersen@redhat.com> 21.2-24
changelog:
  - rpm-spec-mode update fixes
    - patch in XEmacs compat functions rather than defining them with apel
      macros in init file (#78764)
    - autoload "rpm-spec-mode" not "rpm-spec-mode.el" in same file
  - let emacs base also own leim dir to avoid startup warning about missing dir
    when -el and -leim aren't installed (#78764)


author: Jens Petersen <petersen@redhat.com> 21.2-27
changelog:
  - look at LANG after LC_CTYPE when checking for UTF-8 locale encoding
    in site-start.el (#79535)
  - don't set desktop file config(noreplace)


author: Jens Petersen <petersen@redhat.com> 21.2-29
changelog:
  - update to newer po-mode.el and po-compat.el from gettext-0.11.4
  - patch po-mode's po-replace-revision-date for when
    po-auto-replace-revision-date is nil (#71264)
  - update po-mode-init.el
  - examine LC_ALL before LC_CTYPE in site-start.el for utf-8 (#79535)
  - don't install etc/DOC files explicitly by hand
  - make sure all lisp .elc files are up to date
  - pass _smp_mflags to make
  - remove games that we shouldn't ship


author: Jens Petersen <petersen@redhat.com> - 21.2-31
changelog:
  - block input in allocate_vectorlike to prevent malloc hangs (#83600)
    [thanks to Jim Blandy]
  - set startup wmclass notify in desktop file


author: Jens Petersen <petersen@redhat.com> - 21.2-32
changelog:
  - set X copy'n'paste encoding to extended compound-text (#74100)
    by default in .emacs file [suggested by olonho@hotmail.com]
  - .emacs file cleanup (xemacs now has a separate init file)


author: Jens Petersen <petersen@redhat.com> - 21.3-1
changelog:
  - update to 21.3
  - no longer set compound-text-with-extensions in dotemacs, since it is now
    the default
  - emacs-21.2-pop.patch is no longer needed
  - update php-mode to 1.0.4


author: Jens Petersen <petersen@redhat.com> - 21.3-2
changelog:
  - add Mule-UCS for CJK utf-8 support (suggested by Akira Tagoh)
    and use it by default in CJK UTF-8 locale
  - move emacs-asian startup files into new lang-coding-systems-init.el
  - utf-8 setup in site-start.el is no longer needed in Emacs 21.3
  - generate filelist for site-lisp automatically like base lisp and leim
  - don't setup aspell in site-start.el
  - rename dotemacs to dotemacs.el and move former contents to new default.el


author: Jens Petersen <petersen@redhat.com> - 21.3-3
changelog:
  - use Mule-UCS utf-8 coding-system for CJK subprocess IO
  - no need to set fontset anymore in CJK locale


author: Jens Petersen <petersen@redhat.com> - 21.3-5
changelog:
  - move transient-mark-mode and global-font-lock-mode setting from default.el
    back to dotemacs, so as not to surprise old users (#90193)
    [reported by jik@kamens.brookline.ma.us]
  - change require-final-newline to query (default.el)
  - don't make a backup when applying browse-url-htmlview-84262.patch (#90226)
    [reported by mitr@volny.cz]


author: Jens Petersen <petersen@redhat.com> - 21.3-7
changelog:
  - use "setarch i386" to build on ix86 (#101818) [reported by Michael Redinger]
  - use __make to %build and %install
  - set keyboard coding-system for utf-8 in lang-coding-systems-init.el (#106929)
    [reported with fix by Axel Thimm]
  - add source url for MuleUCS
  - update base package description (#103551) [reported by Tim Landscheidt]


author: Jens Petersen <petersen@redhat.com> - 21.3-8
changelog:
  - comment out setting transient-mark-mode in skel .emacs (#102441,#90193)
    [reported by mal@gromco.com, Jonathan Kamens]
  - improve lang-coding-systems-init.el to set-language-environment for CJK
    utf-8 locale too and use utf-8 for default-coding-systems and
    terminal-coding-system (#111172) [Yoshinori Kuniga]
  - update rpm-spec-mode.el to newer one in xemacs package cvs (#105888) [Dams]
  - rename etags to etags.emacs and make etags a symlink to it at install time
    if it doesn't exist (#92256) [marc_soft@merlins.org]
  - apply editfns.c-Fformat-multibyte-davej.patch to fix multibyte code typo
    in Fformat [patch from Dave Jones]
  - add runtime requirements for XFree86-libs, image libraries, ncurses and zlib
  - improve -el and -leim package summaries
  - no longer configure build with redundant --with-gcc


author: Jens Petersen <petersen@redhat.com> - 21.3-9
changelog:
  - bring back emacs-nox subpackage (emacs built without X support) (#113001)
    [suggested by Frank Kruchio]
  - base emacs package now only contains emacs binary built with X support
    and no longer obsoletes emacs-nox
  - all the common files required by emacs and emacs-nox are now in emacs-common
  - update php-mode.el to 1.0.5
  - add missing rfc1345.el leim input method
  - update po-compat.el to version in gettext-0.13.1
  - update base package summary
  - add url for python-mode.el and php-mode.el
  - gctags is now a symlink to ctags.emacs


author: Mike A. Harris <mharris@redhat.com> 21.3-11
changelog:
  - Removed bogus Requires: XFree86-libs that was added in 21.3-8, as rpm
    find-requires will automatically pick up the dependancies on any runtime
    libraries, and such hard coded requires is not X11 implementation
    agnostic (#118471)


author: Jens Petersen <petersen@redhat.com> - 21.3-12
changelog:
  - update php-mode to 1.1.0
  - add emacs-21.3-no-rpath.patch so that /usr/X11R6/lib is not rpath'ed
  - require /bin/ln for %post (Tim Waugh, 119817)
  - move prereq for dev and /sbin/install-info to emacs-common
  - leim no longer requires emacs
  - use source site-lisp dir in %prep to setup site files
  - define and use site_lisp for buildroot in %install
  - default ispell dictionary to "english" for CJK locale
  - add comment to top of site-start.el about load order
  - turn on auto-compression-mode in default.el (114808)
  - set require-final-newline with setq (David Olsson,119141)
    and remove redundant next-line-add-newlines setting
  - update info_file list (Reuben Thomas,114729)


author: Jens Petersen <petersen@redhat.com> - 21.3-13
changelog:
  - unset focus-follows-mouse in default.el to make switching frames work for
    click-to-focus (Theodore Belding,114736)


author: Jens Petersen <petersen@redhat.com> - 21.3-15
changelog:
  - cleanup and update .desktop file
  - make emacs not appear in the desktop menu (Seth Nickell,132567)
  - move the desktop file from -common to main package
  - go back to using just gctags for ctags
  - etags is now handled by alternatives (92256)
  - improve the default frame title by prefixing the buffer name
    (Christopher Beland, 128110)
  - fix the names of some European aspell languages with
    emacs-21.3-lisp-textmodes-ispell-languages.patch (David Jansen, 122618)
  - fixing running "libtool gdb program" in gud with
    emacs-21.3-gud-libtool-fix.patch (Dave Malcolm, 130955)


author: Jens Petersen <petersen@redhat.com> - 21.3-16
changelog:
  - do not setup frame-title-format in default.el, since it will override
    setting by users (Henrik Bakken, 134520)
  - emacs-el no longer requires emacs for the sake of -nox users
    (Lars Hupfeldt Nielsen, 134479)
  - condition calling of global-font-lock-mode in default .emacs
    in case xemacs should happen to load it


author: Jens Petersen <petersen@redhat.com> - 21.3-18
changelog:
  - show emacs again in the desktop menu (132567)
  - require fonts-xorg-75dpi to prevent empty boxes at startup due to missing
    fonts (Johannes Kaiser, 137060)


author: Jens Petersen <petersen@redhat.com> - 21.3.50-0.20041111
changelog:
  - initial packaging of cvs emacs
    - leim and elisp manual now in main tarball
    - no leim subpackage anymore, so make common obsolete it
    - no longer need MuleUCS, nor rfc1345.el
    - buildrequire and use autoconf rather autoconf213
    - no longer need emacs-21.2-x86_64.patch,
      editfns.c-Fformat-multibyte-davej.patch
    - bring back game for now
    - TODO: some patches still need updating
    - fns.el no longer installed
    - remove /var/games for now
    - update filelist generation to single sweep
    - update info_files list


author: Jens Petersen <petersen@redhat.com> - 21.3-19
changelog:
  - prefer XIM status under-the-window for now to stop xft httx from dying
    (125413): add emacs-xim-status-under-window-125413.patch
  - default diff to unified format in .emacs


author: Jens Petersen <petersen@redhat.com> - 21.3-20
changelog:
  - workaround xorg-x11 modifier key problem with
    emacs-21.3-xterm-modifiers-137868.patch (Thomas Woerner, 137868)


author: Jens Petersen <petersen@redhat.com> - 21.3-21
changelog:
  - fix CAN-2005-0100 movemail vulnerability with movemail-CAN-2005-0100.patch
    (Max Vozeler, 146701)


author: Jens Petersen <petersen@redhat.com> - 21.3-22
changelog:
  - use prereq instead of contexts for common script requirements
    (Axel Thimm, 147791)
  - move emacs.png from common to main package


author: Jens Petersen <petersen@redhat.com> - 21.3-23
changelog:
  - install %{_bindir}/emacs-nox as a hardlink of the versioned binary
  - drop explicit lib requirements
  - use sed instead of perl to fix up filelists


author: Jens Petersen <petersen@redhat.com> - 21.3-24
changelog:
  - mark default.el as a noreplace config file (Pawel Salek, 149310)
  - only set keyboard-coding-system in xterms to fix problem with input
    Latin characters becoming prefixes and making emacs loop
    (Eddahbi Karim, 126007)
  - make emacs-el own its lisp directories
  - run latex-mode-hook in latex-mode (Martin Biely, 144083)
    - add emacs-21.3-latex-mode-hook-144083.patch


author: Jens Petersen <petersen@redhat.com> - 21.3-25
changelog:
  - add tramp-2.1.3 to site-lisp (David Woodhouse, 149703)
    - move removal of info dir to after its installation
    - add tramp-init.el to put tramp into load-path


author: Jens Petersen <petersen@redhat.com> - 21.3-27
changelog:
  - use alternatives to switch _bindir/emacs between emacs and emacs-nox
    (Henning Schmiedehausen, #151067)
    - remove emacs and emacs-nox from bindir
    - prereq alternatives for emacs and emacs-nox
    - add post and postun scripts to handle alternatives
  - buildrequire xorg-x11-devel instead of XFree86-devel
  - really include and apply emacs-21.3-latex-mode-hook-144083.patch
  - make emacs and emacs-nox own _datadir/emacs/version too


author: Jens Petersen <petersen@redhat.com> - 21.4-1
changelog:
  - update to 21.4 movemail vulnerability release
    - no longer need movemail-CAN-2005-0100.patch
  - replace %{_bindir}/emacs alternatives with a wrapper script (Warren Togami)
    to prevent it from disappearing when upgrading (Michal Jaegermann, 154326)
    - suffix the X emacs binaries with -x and the no X binaries with -nox
    - the wrapper script %{_bindir}/emacs-%version runs emacs-x if installed or
      otherwise emacs-nox.  %{_bindir}/emacs is a symlink to the wrapper
  - make emacs and emacs-nox own the subdirs in %{_libexecdir}
  - add a bunch of fixes from debian's emacs21_21.4a-1 patch:
      battery-acpi-support.dpatch, bzero-and-have-stdlib.dpatch,
      coding-region-leak.dpatch, detect-coding-iso2022.dpatch,
      fix-batch-mode-signal-handling.dpatch, pcl-cvs-format.dpatch,
      python-completion-ignored-extensions.dpatch,
      remote-files-permissions.dpatch, save-buffer.dpatch, scroll-margin.dpatch,
      xfree86-4.3-modifiers.dpatch
    - add fix-x-vs-no-x-diffs.dpatch
      - define emacs_libexecdir
      - build both emacs and emacs-nox as %{version}.1 and move common DOC file
        to emacs-common
      - suffix version in fns-%{version}.1.el with -x and -nox respectively
  - add 100 to elisp patches


author: Jens Petersen <petersen@redhat.com> - 21.4-2
changelog:
  - update etags to 17.11 (idht4n@hotmail.com, 151390)
    - add etags-14.21-17.11-diff.patch
  - replace i386 setarch redefinitions of __make and makeinstall with
    emacs-21.4-setarch_for_loadup-101818.patch and setting SETARCH on i386
    (Jason Vas Dias, 101818)


author: Jens Petersen <petersen@redhat.com> - 21.4-4
changelog:
  - don't accidently exclude emacsclient from common package
    (Jonathan Kamens, #157808)
  - traditional Chinese desktop file translation (Wei-Lun Chao, #157287)


author: Jens Petersen <petersen@redhat.com> - 21.4-5
changelog:
  - update cc-mode to 5.30.9 stable release to address font-lock problems
    (126165,148977,150197,155292,158044)


author: Jens Petersen <petersen@redhat.com>
changelog:
  - move setting of require-final-newline from default.el to a comment in default
    .emacs (Ralph Loader, 119141)


author: Jens Petersen <petersen@redhat.com> - 21.4-6
changelog:
  - merge in changes from emacs22.spec conditionally
    - define emacs21 rpm macro switch to control major version and use it
  - update tramp to 2.0.49


author: Jens Petersen <petersen@redhat.com> - 21.4-7
changelog:
  - update rpm-spec-mode.el to cvs revision 1.17 (Ville Skyttä)
    - fixes expansion of %{?dist}
  - replace emacs-21.4-setarch_for_loadup-101818.patch with backport
    emacs-21-personality-linux32-101818.patch from cvs (Jan Djärv)
    which also turns off address randomization during dumping (Masatake Yamato)
    - no longer need to pass SETARCH to make on i386 (#160814)
  - move ownership of %{_datadir}/emacs/ and %{_datadir}/emacs/%{version}/
    from emacs to emacs-el and emacs-leim subpackages
  - don't build tramp html and dvi documentation
  - drop src/config.in part of bzero-and-have-stdlib.dpatch to avoid
    compiler warnings


author: Jens Petersen <petersen@redhat.com>
changelog:
  - fix name of aspell-es dictionary (#147964)
    - update emacs-21.3-lisp-textmodes-ispell-languages.patch


author: Jens Petersen <petersen@redhat.com> - 21.4-9
changelog:
  - fix keyboard-coding-system on console for utf-8 (Dawid Gajownik, #173855)
  - update etags to latest cvs (Hideki Iwamoto, #173023)
    - replace etags-14.21-17.11-diff.patch with etags-update-to-cvs.patch
  - update smtpmail.el to latest cvs version for better authentication support
    with smtpmail-cvs-update.patch (Alberto Brizio, #167804)


author: Jens Petersen <petersen@redhat.com> - 21.4-11
changelog:
  - avoid building with -fstack-protector on i386 to prevent crashing
    (Jonathan Kamens, #174730)
  - require xorg-x11-fonts-ISO8859-1-75dpi instead of xorg-x11-fonts-75dpi
    for modular X (#174614)


author: Jens Petersen <petersen@redhat.com> - 21.4-12
changelog:
  - add mule-cmd.el-X11-locale.alias-173781.patch to correct location of X11
    locale.alias file (Paul Dickson, #173781)
  - fix autoload of php-mode in php-mode-init.el (Christopher Beland, #179484)


author: Jens Petersen <petersen@redhat.com> - 21.4-13
changelog:
  - buildrequire libXaw-devel for menus and scrollbar
  - pass -R to setarch to disable address randomization during dumping
    (Sam Peterson, #174736)
  - install cc-mode.info correctly (Sam Peterson, #182084)
  - fix sort-columns not to use deprecated non-posix sort key syntax
    with sort-columns-posix-key-182282.patch (Richard Ryniker, #182282)
  - use system-name function not variable when setting frame-title-format in
    /etc/skel/.emacs for XEmacs users hitting .emacs


author: Jens Petersen <petersen@redhat.com>
changelog:
  - avoid backup for fix-x-vs-no-x-diffs.dpatch (Ian Collier, #183503)
  - remove the old ccmode info manual (#182084)


author: Jens Petersen <petersen@redhat.com> - 21.4-14
changelog:
  - bring back setarch for i386 with -R option in spec file and drop
    emacs-21-personality-linux32-101818.patch since it no longer seems
    sufficient with recent kernels (Sam Peterson, #174736)
  - buildrequire giflib-devel instead of libungif-devel


author: Chip Coldwell <coldwell@redhat.com> - 22.0.92-1
changelog:
  - new pretest version
  - removed almost all emacs 21 patches from emacs 22
  - clean up spec file,
  - many new BuildRequires (David Woodhouse #221250)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.93-1
changelog:
  - new pretest version
  - removed setarch since new dumper copes with execshield
  - clean up site initialization files (varions #176171)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.93-4
changelog:
  - fixup loaddefs.el dependencies (Dan Nicolaescu #176171)
  - add BuildRequires: automake (changes to Makefile.in)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.99-1
changelog:
  - new (last?) pretest tarball from FSF
  - update to php-mode-1.2.0 (Ville Skyttä Resolves: bz235941)
  - use /etc/alternatives instead of wrapper script


author: Chip Coldwell <coldwell@redhat.com> - 22.0.99-4
changelog:
  - format of freed blocks changed between glibc 2.5.90-21 and 2.5.90-22
  - BuildRequires: glibc >= 2.5.90-22 (Ulrich Drepper)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.990-1
changelog:
  - new pretest tarball from FSF
  - removed Ulrich Drepper's patch to prevent mmapped pages during dumping
    removed BuildRequires: glibc >= 2.5.90-22
    (bug traced to glibc Resolves: bz239344)
  - fix alternatives removal scriptlet (Resolves: bz239745)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.990-2
changelog:
  - revert all spec file changes since 22.0.95-1 (Resolves: bz239745)
  - new pretest tarball from FSF (Resolves: bz238234)
  - restore php-mode (Resolves: bz235941)


author: Chip Coldwell <coldwell@redhat.com> - 22.1-1
changelog:
  - move alternatives install to posttrans scriptlet (Resolves: bz239745)
  - new release tarball from FSF (Resolves: bz245303)
  - new php-mode 1.2.0


author: Chip Coldwell <coldwell@redhat.com> - 22.1-2
changelog:
  - add pkgconfig file for emacs-common and virtual provides (Resolves: bz242176)
  - glibc-open-macro.patch to deal with glibc turning "open" into a macro.
  - leave emacs info pages in default section (Resolves: bz199008)


author: Chip Coldwell <coldwell@redhat.com> - 22.1-4
changelog:
  - fix pkgconfig path (from pkg-config to pkgconfig (Jonathan Underwood)
  - use macro instead of variable style for buildroot.


author: Chip Coldwell <coldwell@redhat.com> - 22.1-5
changelog:
  - require xorg-x11-fonts-ISO8859-1-100dpi instead of 75dpi (Resolves: bz281861)
  - drop broken python mode (Resolves: bz262801)


author: Chip Coldwell <coldwell@redhat.com> 23.0.60-2
changelog:
  - New upstream tarball (fixes bz435767)
  - configure tweaks
  - drop files.el patch (now upstream)
  - drop parallel build patch (now upstream)


author: Chip Coldwell <coldwell@redhat.com> 22.2-1
changelog:
  - revert back to emacs-22.2 (bz443639)
  - update to php-mode-1.4.0
  - update to rpm-spec-mode.el v0.12.1x (bz432209)
  - patch rpm-spec-mode to use compilation mode (bz227418)
  - fix the Release tag (bz440624)
  - drop superfluous configure options
  - move the new icons into the right destination directory
  - the heuristics for detecting address space randomization in the emacs dumper
    seem insufficient, so bring back setarch -R


author: Jens Petersen <petersen@redhat.com> - 1:22.3-1
changelog:
  - update to 22.3 (#461448)
  - emacs-22.1.50-sparc64.patch and emacs-22.1.50-regex.patch no longer needed
  - update rpm-spec-mode.el to look for fields at bol (#466407)


author: Daniel Novotny <dnovotny@redhat.com> 1:22.3-5
changelog:
  - fix #474578 - /usr/bin/emacs link not updated on upgrade
    (added a script to scan the alternatives and update them)


author: Jens Petersen <petersen@redhat.com> - 1:23.0.93-3
changelog:
  - drop igrep since lgrep and rgrep are maintained in emacs now
  - specify the list of *-init.el files to be install explicitly


author: Daniel Novotny <dnovotny@redhat.com> 1:23.0.93-5
changelog:
  - revoked default.el change (#508033)
  - added build dependency: librsvg2-devel (#507852)
  - added dependency: aspell (#443549)


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1-11
changelog:
  - Update macros.xemacs to treat epoch correctly and be consistent with xemacs package
  - Use site_start_d macro consistently


author: Jens Petersen <petersen@redhat.com> - 1:23.1-19
changelog:
  - m17n-lib-flt requires m17n-db-flt so no longer need to require explicitly
    m17n-db-datafiles for complex text rendering (#542657)


author: Karel Klic <kklic@redhat.com> 1:23.1-22
changelog:
  - Removed invalid URL for rpm-spec-mode.el. This mode is no longer
    found on Internet in this version.


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1-25
changelog:
  - Add --eval '(progn (setq load-path (cons "." load-path)))' to byte
    compilation macro for packaging add-ons


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1-26
changelog:
  - Fix broken byte compilation of emacs2.py and emacs3.py with the relevant
    python binaries - requires turning off brp-python-bytecompile script


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1.94-4
changelog:
  - Remove unnecessary buildroot tag
  - Remove explicit dependency on librsvg2 (but keep BuildRequires for
    librsvg2-devel)
  - Add properly versioned Provides for emacs(bin)
  - Remove long unneeded Obsoletes for emacs-leim
  - Fix summary for emacs-el


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1.94-5
changelog:
  - Fix typo in spec file changelog
  - Use standard %patch macro to apply all patches to silent rpmlint warnings


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1.96-2
changelog:
  - Remove po-mode files since they are now packaged separately as a sub-package
    of gettext (RHBZ #579452)


author: Karel Klíč <kklic@redhat.com> - 1:23.2-4
changelog:
  - Add patch to fix rhbz#595546 hideshow library matches wrong parenthesis
    under certain circumstances
  - Removed %clean section


author: Karel Klic <kklic@redhat.com> - 1:23.2-6
changelog:
  - Removed Obsoletes: emacs-nxml-mode, it was obsoleted in F-11
  - Added COPYING to emacs-el, moved COPYING in emacs-common to %doc


author: Karel Klic <kklic@redhat.com> - 1:23.2-11
changelog:
  - Own /usr/bin/emacs (rhbz#614935)
  - Updated the handling of alternatives to match
    https://fedoraproject.org/wiki/Packaging:Alternatives


author: Karel Klic <kklic@redhat.com> - 1:23.2-12
changelog:
  - Mention xdg-open in browse-url-default-browser docstring (rhbz#624359)
    Updates emacs-23.1-xdg.patch


author: Karel Klic <kklic@redhat.com> - 1:23.2-13
changelog:
  - Removed transient-mark-mode suggestion from dotemacs.el, as this
    minor mode is enabled by default in recent versions of Emacs


author: Karel Klic <kklic@redhat.com> - 1:23.2-16
changelog:
  - Removed dependency on both hunspell and aspell. Emacs does not
    _require_ spell checker, e.g. if user wants to uninstall one, there
    is no reason why Emacs should also be uninstalled. Emacs can run one
    like it can run GDB, pychecker, (La)TeX, make, gcc, and all VCSs out
    there.
  - Removed conflict with old gettext package
  - Cleaned spec file header
  - Removed gcc-4.5.0 specific CFLAGS


author: Karel Klic <kklic@redhat.com> - 1:23.3-2
changelog:
  - Another attempt to fix the handling of alternatives (rhbz#684447)
    The current process loses alternatives preference on every upgrade,
    but there seems to be no elegant way how to prevent this while
    having versioned binaries (/bin/emacs-%{version}) at the same time.
  - Removed 'rm -rf %{buildroot}' from %install section


author: Ville Skyttä <ville.skytta@iki.fi> - 1:23.3-3
changelog:
  - Use UTC timestamps in rpm-spec-mode changelog entries by default (rhbz#672350)
  - Consider *.elc in addition to *.el when loading files from site-start.d (rhbz#672324)


author: Karel Klíč <kklic@redhat.com> - 1:23.3-5
changelog:
  - Removed %defattr from %files sections, as RPM no longer needs it
  - Removed %dir %{_libexecdir}/emacs and similar from emacs and
    emacs-nox packages, as the directories are used and present only in
    emacs-common (rhbz#704067)


author: Ville Skyttä <ville.skytta@iki.fi> - 1:23.3-7
changelog:
  - Use custom-set-variables for customizable variables in .emacs (#716440).
  - Move frame-title-format default from .emacs to default.el (#716443).


author: Karel Klíč <kklic@redhat.com> - 1:23.3-8
changelog:
  - Updated release archive to 23.3a, which includes grammar files that are
    necessary to modify Semantic parsers


author: Karel Klíč <kklic@redhat.com> - 1:23.3-10
changelog:
  - Keep COPYING and NEWS in the etc subdir, and symlinks in the docs (rhbz#714212)
    Author: fedora.dm0@gmail.com


author: Ville Skyttä <ville.skytta@iki.fi> - 1:23.3-11
changelog:
  - Build with gpm and liblockfile support.
  - Drop ssl.el (superseded by tls.el).
  - Update php-mode to 1.5.0.


author: Karel Klíč <kklic@redhat.com> - 1:23.3-19
changelog:
  - Added patch to handle CVE-2012-0035: CEDET global-ede-mode file loading vulnerability (rhbz#773024)


author: Karel Klíč <kklic@redhat.com> - 1:24.0.94-1
changelog:
  - Update to the newest prerelease
  - Remove unpatched files in the lisp directory, where all files are
    installed


author: Karel Klíč <kklic@redhat.com> - 1:24.1-3
changelog:
  - Fix org-mode to work without emacs-el installed. rhbz#830162
  - Fix building without gets function, which is removed from recent version of glibc.


author: Karel Klíč <kklic@redhat.com> - 1:24.1-6
changelog:
  - Fix CVE-2012-3479: Evaluation of 'eval' forms in file-local variable
    sections, when 'enable-local-variables' set to ':safe'


author: Karel Klíč <kklic@redhat.com> - 1:24.2-1
changelog:
  - Updated to the newest upstream release
  - Switched from bz2 upstream package to xz
  - Make the spec file usable on EL6
  - Removed the nogets and CVE-2012-3479 patches, because the upstream
    package fixes the associated issues
  - Added GFDL license to emacs-common package


author: Karel Klíč <kklic@redhat.com> - 1:24.2-2
changelog:
  - Removed focus-init.el which used to set focus-follows-mouse to nil.
    It is set to nil by default in Emacs 24.2.


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1:24.2-11
changelog:
  - Remove %config from %{_sysconfdir}/rpm/macros.*
    (https://fedorahosted.org/fpc/ticket/259).
  - Fix broken spec-file changelog entry.


author: Petr Hracek <phracek@redhat.com> - 1:24.3-1
changelog:
  - Updated to the newest upstream release
  - solved problem with distribution flag in case of rhel
  - rcs-checking not availble anymore
  - emacs22.png are not installed anymore


author: Petr Hracek <phracek@redhat.com> - 1:24.3-3
changelog:
  - Fix for emacs bug 112144, style_changed_cb (#922519)
  - Fix for emacs bug 112131, bell does not work (#562719)


author: Jan Synáček <jsynacek@redhat.com> - 1:24.5-9
changelog:
  - emacs "deadlocked" after using mercurial with huge amounts of ignored files in the repository (#1232422)
  - GDB interface gets confused by non-ASCII (#1283412)


author: Jan Synáček <jsynacek@redhat.com> - 1:25.0.95-3
changelog:
  - workaround: emacs build failure due to high memory consumption on ppc64 (#1356919)
    (patch provided by Sinny Kumari)


author: Richard W.M. Jones <rjones@redhat.com> - 1:25.3-2
changelog:
  - Rebuild to try to fix: libwebkit2gtk-4.0.so.37: undefined symbol:
    soup_auth_manager_clear_cached_credentials


author: Jan Synáček <jsynacek@redhat.com> - 1:26.1-3
changelog:
  - Refix: Emacs crashes when loading color fonts (#1519038)
    + emacs SIGABRT after XProtocolError on displaying an email in Gnus (#1591223)


author: Bhavin Gandhi <bhavin7392@gmail.com> - 1:27.1-1
changelog:
  - emacs-27.1 is available (#1867841)
  - Add systemd-devel to support Type=notify in unit file
  - Build with Cairo and Jansson support
  - Remove ImageMagick dependency as it's no longer used


author: Jan Synáček <jsynacek@redhat.com> - 1:27.1-2
changelog:
  - use make macros (original patch provided by Tom Stellard)
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Radovan Sroka <rsroka@redhat.com> - 1.0-2
changelog:
  RHEL 8.3 ERRATUM
  - rebase to v1.0
  - installed multiple policies to /usr/share/fapolicyd
    - known-libs (default)
    - restrictive
  - installed fapolicyd.trust file
  - enhanced fapolicyd-cli
  Resolves: rhbz#1817413
  - introduced fapolicyd-selinux that provides SELinux policy module
  Resolves: rhbz#1714529


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-3
changelog:
  RHEL 8.4.0 ERRATUM
  - rebase to 1.0.2
  - strong dependency on rpm/rpm-plugin-fapolicyd
  - installed dnf-plugin is dummy and we are not using it anymore
  - enabled integrity setting
  Resolves: rhbz#1887451
  - added make check
  - Adding DISA STIG during OS installation causes 'ipa-server-install' to fail
  - fixed java detection
  Resolves: rhbz#1895435
  - dnf update fails when fapolicyd is enabled
  Resolves: rhbz#1876975
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1896875


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-7
changelog:
  - fapolicyd abnormally exits by executing sosreport
  - fixed multiple problems with unlink()
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1943251


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-2
changelog:
  RHEL 8.6.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespace in trust files
  - use full paths in trust files
  Resolves: rhbz#1939379
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#1989272
  - fix fapolicyd-dnf-plugin reporting as '<invalid>'
  Resolves: rhbz#1997414
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014445


author: Radovan Sroka <rsroka@redhat.com> - 1.1-1
changelog:
  RHEL 8.6.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#1939379
  - introduce rules.d feature
  Resolves: rhbz#2054741
  - remove pretrans scriptlet
  Resolves: rhbz#2051485


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-8
changelog:
  RHEL 8.7.0 ERRATUM
  - rebase fapolicyd to the latest stable vesion
  Resolves: rhbz#2100087
  - fapolicyd does not correctly handle SIGHUP
  Resolves: rhbz#2070639
  - fapolicyd often breaks package updates
  Resolves: rhbz#2111243
  - drop libgcrypt in favour of openssl
  Resolves: rhbz#2111935
  - fapolicyd.rules doesn't advertise that using a username/groupname instead of uid/gid also works
  Resolves: rhbz#2103914
  - fapolicyd gets way too easily killed by OOM killer
  Resolves: rhbz#2100089
  - compiled.rules file ownership and mode
  Resolves: rhbz#2066653
  - Faulty handling of static applications
  Resolves: rhbz#2084497
  - Introduce ppid rule attribute
  Resolves: rhbz#2102563
  - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path [rhel-8.7.0]
  Resolves: rhbz#2069121
  - Fapolicyd denies access to /usr/lib64/ld-2.28.so [rhel-8.7.0]
  Resolves: rhbz#2068105


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-12
changelog:
  RHEL 8.8.0 ERRATUM
  - statically linked app can execute untrusted app
  Resolves: rhbz#2088349
  - Starting manually fapolicyd while the service is already running breaks the system
  Resolves: rhbz#2103352
  - Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
  Resolves: rhbz#2087040
  - fapolicyd: Introduce filtering of rpmdb
  Resolves: rhbz#2165645


author: Radovan Sroka <rsroka@redhat.com> - 1.3.2-1
changelog:
  RHEL 8.9.0 ERRATUM
  - Rebase fapolicyd to the latest stable version
  Resolves: RHEL-519
  - RFE: send rule number to fanotify so it gets audited
  Resolves: RHEL-628
  - Default q_size doesn't match manpage's one
  Resolves: RHEL-629
  - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  Resolves: RHEL-632
  - fapolicyd needs to make sure the FD limit is never reached
  Resolves: RHEL-631
  - fapolicyd still allows execution of a program after "untrusting" it
  Resolves: RHEL-630
  - Fix broken backwards compatibility backend numbers
  Resolves: RHEL-731
  - fapolicyd can create RPM DB files /var/lib/rpm/__db.xxx with bad ownership causing AVCs to occur
  Resolves: RHEL-829
  - SELinux prevents the fapolicyd from reading symlink (cert_t)
  Resolves: RHEL-820


author: Chris Leech <cleech@redhat.com> - 1.0.32-6
changelog:
  - remove fcoe from SUPPORTED_DRIVERS in /etc/sysconfig/fcoe
  - add qedf to SUPPORTED_DRIVERS in /etc/sysconf/fcoe
  - added upstream fix for large fcoe ctrl numbers


author: Mat Booth <fedora@matbooth.co.uk> 1.4.0-4
changelog:
  - Fix POM names RHBZ #655800.
  - Versionless jars/docs, update maven plug-in BRs.
  - Other misc guideline compliances.


author: Marek Goldmann <mgoldman@redhat.com> 1.4.0-10
changelog:
  - Add CM_LOCATION_CHANGED property to ConfigurationEvent
  - Add TARGET property to ConfigurationPermission


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.4.0-4
changelog:
  - Add felix-parent to Requires (maven builds require this)
  - Add license and jpackage-utils Requires to javadoc subpackage
  - Use mavenpomdir macro


author: Jaromir Capik <jcapik@redhat.com> 1.4.0-8
changelog:
  - Extra groupId "org.osgi" added
  - Minor spec file changes according to the latest guidelines
  - fixing "unmappable character for encoding ANSI_X3.4-1968"


author: Victor G. Vasilyev <victor.vasilyev@sun.com> 1.2.0-3
changelog:
  - The javadoc subpackage should have requires on jpackage-utils
  - Use the mavenpomdir macro
  - Rename the mavenPOM macro to publicPOM


author: Mat Booth <fedora@matbooth.co.uk> - 1.2.1-3
changelog:
  - Add legacy depmap from maven2-common-poms for felix packages that still
    specify "felix" instead of "felix-parent"


author: Mat Booth <fedora@matbooth.co.uk> - 1.2.0-1
changelog:
  - Update to latest upstream version rhbz #892553.
  - Drop patch, use preferred %pom_* macros instead.


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: Petr Pisar <ppisar@redhat.com> - 4.0.12-15
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Weinan Li <weli@redhat.com> - 5-2
changelog:
  - Add the license source note
  - Cleanup the svn metadata in source
  - Add the full instructions for creating the tar in the comment


author: Weinan Li <weli@redhat.com> - 5-3
changelog:
  - Each package must consistently use macros, use rm instead of all %{_rm}
  - Add Requires: jpackage-utils


author: José Expósito <jexposit@redhat.com> - 3.2.1-10
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25176
    Resolves: https://issues.redhat.com/browse/RHEL-25178


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Ondrej Holy <oholy@redhat.com> - - 2:2.2.0-9
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136151)
  - CVE-2022-39283: Add missing length check in video channel (#2136153)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145139)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145139)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145139)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145139)
  - CVE-2022-39347: Fix path validation in drive channel (#2145139)
  - CVE-2022-41877: Add missing length check in drive channel (#2145139)


author: Tomas Popela <tpopela@redhat.com> - 1.6.1-7
changelog:
  - Rebuild with newer annobin to fix rpmdiff problems
  - Fix the build with a newer opencv
  - Resolves: rhbz#1703994


author: Akira TAGOH <tagoh@redhat.com> - 1.0.4-9
changelog:
  - Fix security issues CVE-2022-25308, CVE-2022-25309, CVE-2022-25310.
    Resolves: rhbz#2050085, rhbz#2050068, rhbz#2050062
  - Drop --disable-docs from %configure. no such options available.


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-13
changelog:
  - Resolves: RHEL-2263 - eBGP multihop peer flapping due to delta miscalculation of new configuration


author: lutw <lutw@ieisystem.com> - 7.5.1-16.0.3
changelog:
  - fix CVE-2023-46752
  - fix CVE-2023-46753
  - fix CVE-2023-31490
  - fix CVE-2023-41909
  - fix CVE-2023-41358
  - fix CVE-2023-47234 because in 7.5.1-16.0.2  CVE-2023-47234 CVE-2023-47235 is not suitable to fix CVE-2023-46752 CVE-2023-46753, so change to use rehl patch


author: Michal Ruprich <mruprich@redhat.com> - 7.5-5
changelog:
  - Resolves: #1979426 - Unable to configure OSPF in multi-instance mode
  - Resolves: #1917269 - vtysh running-config output not showing bgp ttl-security hops option


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-1
changelog:
  - Resolves: #2018451 - Rebase of frr to version 7.5.1
  - Resolves: #1975361 - the dynamic routing setup does not work any more


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-2
changelog:
  - Resolves: #1941765 - AVCs while running frr tests on RHEL 8.4.0 Beta-1.2
  - Resolves: #1714984 - SELinux policy (daemons) changes required for package


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-6
changelog:
  - Resolves: #1939516 - frr service cannot reload itself, due to executing in the wrong SELinux context


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-7
changelog:
  - Resolves: #2128737 - out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-14
changelog:
  - Resolves: RHEL-6617 - Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-16
changelog:
  - Resolves: RHEL-15916 - Flowspec overflow in bgpd/bgp_flowspec.c
  - Resolves: RHEL-15919 - Out of bounds read in bgpd/bgp_label.c
  - Resolves: RHEL-15869 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  - Resolves: RHEL-15868 - crash from malformed EOR-containing BGP UPDATE message


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-17
changelog:
  - Resolves: RHEL-6583 - Routes are not refreshed after changing the inbound route rules from deny to permit


author: Richard Hughes <richard@hughsie.com> 1.5.5-1
changelog:
  - Rebase package to include support for latest OEM hardware and to
    support deploying UEFI SecureBoot dbx updates.
  - Resolves: #1870811


author: Richard Hughes <richard@hughsie.com> 1.5.5-2
changelog:
  - Do not invalidate all remote timestamps during package install to fix rpm -V.
  - Backport some important high priority fixes from upstream.
  - Resolves: #1926382


author: Richard Hughes <richard@hughsie.com> 1.5.9-3
changelog:
  - Rebase to include the SBAT metadata section to allow fixing BootHole
  - Resolves: rhbz#1933012
  - Resolves: rhbz#1932953
  - Resolves: rhbz#1932909
  - Resolves: rhbz#1932882
  - Resolves: rhbz#1932579
  - Resolves: rhbz#1932553
  - Resolves: rhbz#1932423


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport upstream changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1969472
  - Resolves: rhbz#1976408


author: Richard Hughes <richard@hughsie.com> 1.7.1-2
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Resolves: rhbz#2029333


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Resolves: rhbz#2038258
  - Resolves: rhbz#2037294


author: Charles R. Anderson <cra@wpi.edu> - 2008_10_13-10
changelog:
  - Patch to apply CFLAGS/LDFLAGS to final link so RPM_OPT_FLAGS are picked up (rhbz#1548426)
  - Use CC=gcc explicitly
  - Regenerate fxload-noa3load.patch


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.1.4-7
changelog:
  - Revert previous change of adding 'awk*' symlinks for info pages (bug #1486924)
  - Added patch to correctly fix the info pages issue (bug #1486924)
  - specfile content refactored for better readability
  - Package now provides its ABI version via gawk(abi)
  - Added test for usage of correct gawk(abi) into %check section


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.2.0-1
changelog:
  - Update to latest stable release from upstream [new API version - 2.0]
  - Added latest relevant patches from upstream's gawk-4.2-stable branch


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.2.0-2
changelog:
  - 'noarch' removed from *-devel subpackage
  - added arch requirement for *-devel subpackage
  - updated the build process to use %make_build macro


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Kevin Buettner <kevinb@redhat.com> - 12.1-13
changelog:
  - Backport fix for problems associated with GCC 13's self-move warning.
    (Jan-Benedict Glaw)
  - Tweak gdb-6.6-buildid-locate-rpm.patch so that running GDB's configure
    script will not error out due to GCC 13's warnings.


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153227)


author: Bo Ren <rb01097748@alibaba-inc.com> 12.1-4.0.1
changelog:
  - Exclude loongarch64

  - Backport "Add a recursion limit to the demangle_const function
    in the Rust demangler."
    (Nick Clifton, RHEL-4237)


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Richard Hughes <rhughes@redhat.com> - 2.31.3-2
changelog:
  - Split out the modules as a subpackage to allows us to depend on the core
    library on the cloud image and not drag every image loader known to man.


author: Richard Hughes <rhughes@redhat.com> - 2.31.3-3
changelog:
  - Split out the xlib code as a subpackage to allows us to depend on the core
    library on the cloud image and not depends on half of Xorg.


author: Kalev Lember <klember@redhat.com> - 2.38.0-1
changelog:
  - Update to 2.38.0
  - Switch to the meson build system
  - Remove ancient conflicts
  - Remove ldconfig scriptlets


author: Paul Howarth <paul@city-fan.org> - 2.3.1-1
changelog:
  - Update to 2.3.1
    - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
      greater
    - Previously, on an invalid gzip file, geoipupdate would output binary data
      to stderr; it now displays an appropriate error message
    - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
    - $(sysconfdir) is now created if it doesn't exist (GH#33)
    - The sample config file is now usable (GH#33)


author: Paul Howarth <paul@city-fan.org> - 2.4.0-1
changelog:
  - Update to 2.4.0
    - geoipupdate now checks that the database directory is writable: if it is
      not, it reports the problem and aborts
    - geoipupdate now acquires a lock when starting up to ensure only one
      instance may run at a time: a new option, 'LockFile', exists to set the
      file to use as a lock ('.geoipupdate.lock' in the database directory by
      default)
    - geoipupdate now prints out additional information from the server when a
      download request results in something other than HTTP status 2xx; this
      provides more information when the API does not respond with a database
      file
    - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
    - Previously, a variable named 'ERROR' was used, which caused issues building
      on Windows (GH#36)
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - noarch subpackages always available now
    - libcurl-devel always available now


author: Paul Howarth <paul@city-fan.org> - 2.5.0-1
changelog:
  - Update to 2.5.0
    - Replace use of strnlen() due to lack of universal availability (GH#71)
    - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
    - Remove unused base64 library (GH#68)
    - Add the new configuration option 'PreserveFileTimes'; if set, the
      downloaded files will get the same modification times as their original on
      the server (default is '0') (GH#63)
    - Use the correct types when calling 'curl_easy_setopt()'; this fixes
      warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
    - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
      'ProductIds' option was renamed to 'EditionIDs'; the old options will
      continue to work, but upgrading to the new names is recommended for
      forward compatibility


author: Mary Ellen Foster <mefoster at gmail.com> 1.1.1-6
changelog:
  - Add the *correct* version to the geronimo-specs Obsoletes line
  - Also Obsolete geronimo-specs-compat


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.1.1-21
changelog:
  - Update to current packaging guidelines
  - Remove rpm bug workaround
  - Remove legacy obsoletes/provides


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.1.1-2
changelog:
  - Add jpa.jar symlink
  - Change persistance-api maven depmap version to %{spec_ver}
  - Renamed provides to jpa_api


author: Mary Ellen Foster <mefoster at gmail.com> 1.6-2
changelog:
  - Don't include the apache root pom; it's already in maven2-common-poms
  - Double check the dependencies to include only what's in the POMs
  - Add initial Provides for the genesis stuff
  - Fix changelog


author: Mary Ellen Foster <mefoster at gmail.com> 1.6-3
changelog:
  - Fix tabs and spaces in srpm
  - Remove config flag from mavendepmapfragdir
  - Add jpackage-utils to the BuildRequires


author: Andrew Price <anprice@redhat.com> - 3.2.0-9
changelog:
  - gfs2_jadd: Handle out-of-space issues
  - gfs2_jadd: error handling overhaul
    Resolves: rhbz#1833141
  - gfs2.5: Update some mentions of gfs2_tool
    Resolves: rhbz#1818983


author: Andrew Price <anprice@redhat.com> - 3.2.0-11
changelog:
  - gfs2_jadd: Use fallocate to preallocate journals
  - gfs2_jadd: Don't fsync after each block written
    Resolves: rhbz#1942434


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 5.50 at last...
  - hpdj 2.6
  - Added 3rd party drivers:
    - Lexmark 5700 (lxm5700m)
    - Alps MD-* (md2k, md5k)
    - Lexmark 2050, 3200, 5700 and 7000 (lex2050, lex3200, lex5700, lex7000)


author: Michael Stefaniuc <mstefani@redhat.com>
changelog:
  - added the stp driver from the gimp-print project.
    It supports high quality printing especialy with Epson Stylus Photo.


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - merged in some patches that got away:
    * Fri Sep  1 2000 Mitsuo Hamada <mhamada@redhat.com>
    - add support JIS B size
    - fix the problem of reconverting GNUPLOT output


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - upgraded to 6.51, a major version upgrade
  - rewrote spec file, threw out some patches
  - turned on IBM's Omni print drivers interface
  - turned on HP's hpijs print drivers interface
  - turned on every driver that looked usable from linux
  - sacrificed a chicken to integrate the old Japanese drivers
  - - This didn't work. The japanese patches are turned off, pending review.
  - - I can do loops with C, but the bugs are in Postscript init files


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-2
changelog:
  - luckily, I had a spare chicken. Thanks to some work by Nakai, and one last
  - desperate search through google, everything /seems/ to be working. I know
  - that there are going to be problems in the japanese code, and I need to turn
  - on the cjk font map from adobe, but it /works/ at the moment.


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-4
changelog:
  - applied drepper@redhat.com's patch for #50300
  - fixed build deps on zlib-devel and libpng-devel, #49853
  - made gs_init.ps a config file; #25096
  - O\^/nZ the daTa directorieZ now; #50693


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-9
changelog:
  - applied IBM's glib patches for Omni, which now works.
  - BE AWARE: we now link against libstdc++ and glib for this, and use a c++
  - link stage to do the dirty.
  - added glib-devel buildreq and glib req, I don't think we require everything
  - yet, I could pull in sasl.


author: Bernhard Rosenkraenzer <bero@redhat.com> 6.52-1
changelog:
  - Updates:
    - ghostscript 6.52
    - hpdj 2.6 -> pcl3 3.3
    - CJK Patchlevel 3, adobe-cmaps 200109
    - gimp-print 4.2.0
  - Adapt patches
  - Fix various URLs
  - Begin cleaning up spec file
  - Fix bugs #21879 and #50923


author: Tim Waugh <twaugh@redhat.com> 6.52-6
changelog:
  - Fix config patch so that gs --help displays the right thing.
  - Don't ship sysvlp.sh.
  - Fix some shell scripts.
  - Ship escputil man page (bug #58919).


author: Tim Waugh <twaugh@redhat.com> 7.05-1
changelog:
  - 7.05.
  - No longer need mkstemp, vflib.fixup, quoting, or PARANOIDSAFER
    patches.
  - Don't apply CJK patches any more (no longer needed).
  - Updated Source15, Patch0, Patch10, Patch5, Patch24, Patch14, Patch12.
  - Made gdevdmpr.c compile again.
  - Move gimp-print to a separate package.
  - Ship the shared object too (and a .so file that is dlopened).
  - Update Omni patch.  No longer need Omni_path, Omni_quiet, Omni_glib patches.
  - Require Omni >= 0.6.1.
  - Add patch to fix gtk+ initial window size.
  - Add devel package with header files.
  - Turn on IJS support.
  - Update hpijs to 1.1.
  - Don't ship the hpijs binary in the ghostscript package.
  - Use -fPIC when building ijs.


author: Tim Waugh <twaugh@redhat.com> 7.05-2
changelog:
  - Don't apply bogus parts of vflib patch (bug #65268).
  - Work around Omni -sPAPERSIZE=a4 problem (bug #65269).


author: Tim Waugh <twaugh@redhat.com> 7.05-8
changelog:
  - Requires recent version of patchutils (bug #65947).
  - Don't ship broken man page symlinks (bug #66238).


author: Tim Waugh <twaugh@redhat.com> 7.05-25
changelog:
  - Fix level 1 PostScript output (bug #78450).
  - No need to carry gomni.c, since it comes from the patch.


author: Tim Waugh <twaugh@redhat.com> 7.05-26
changelog:
  - Don't ship the shared object yet (part of bug #79340).
  - Don't make the gtk package, since that needs the shared object.


author: Tim Waugh <twaugh@redhat.com> 7.05-33
changelog:
  - Add some missing font aliases (bug #73342).
  - Use the system jpeg library.
  - Update hpijs to 1.3.1.
  - Update gdevcups.c from cups-1.1.18.


author: Tim Waugh <twaugh@redhat.com> 7.05-34
changelog:
  - Apply fix for CJK font search method when the fonts are not available
    (bug #83516).
  - The gb18030 patch no longer applies here.


author: Tim Waugh <twaugh@redhat.com> 7.06-1
changelog:
  - 7.06.
  - Updated config, vflib.fixup patches.
  - No longer need dx6, jpeg patches.
  - No longer need to add in missed GNU drivers.
  - Turn off dj970 driver (hpijs drives that).


author: Tim Waugh <twaugh@redhat.com> 7.07-1
changelog:
  - 7.07.
  - Parametrize build_libgs.
  - Remove Omni requirement (bug #88177).
  - Fix ghostscript-gtk obsoletes: line (bug #88175).


author: Tim Waugh <twaugh@redhat.com> 7.07-15
changelog:
  - Build for Fedora Core 1 printer drivers update.
  - Conflicts with foomatic before hpijs 1.5 data.
  - Make fontconfig optional.


author: Tim Waugh <twaugh@redhat.com> 7.07-17
changelog:
  - Removed stp driver.  Use the IJS version (ijsgimpprint) instead.
  - No longer conflicts with foomatic for hpijs versioning.


author: Tim Waugh <twaugh@redhat.com> 7.07-19
changelog:
  - Attempt to fix gdevcups crash (bug #114256).
  - Make gs dynamically link to libgs (bug #114276).
  - Fix gdevesmv.c's misuse of const (bug #114250).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Run /sbin/ldconfig in %post/%postun.
  - Stricter requirements for the main package in the subpackages.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.1
changelog:
  - Switch to ESP Ghostscript.
  - 8.15rc3.
  - Lots of patches dropped.  Perhaps some will need to be re-added.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.2
changelog:
  - Drop 'Provides: libijs.so' because it is incorrect.
  - Build igcref.c with -O0 to work around bug #150771.
  - Renumber patches.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.4
changelog:
  - Add Japanese fonts to FAPIcidfmap (bug #161187).
  - Moved Resource directory.
  - Added use-external-freetype patch (bug #161187).


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.5
changelog:
  - Split font configuration (bug #161187).
  - Reverted this change:
    - Build requires xorg-x11-devel, not XFree86-devel.


author: Tim Waugh <twaugh@redhat.com> 8.15.2-9
changelog:
  - Apply CJKV patch from svn164:165 plus the fix from svn173:174 (bug #194592,
    bug #203712, possibly bug #167596).


author: Tim Waugh <twaugh@redhat.com> 8.15.3-2
changelog:
  - 8.15.3.  No longer need gtk2, ps2epsi, badc, pagesize,
    use-external-freetype, split-font-configuration or cjkv patches.
  - Renumbered patches.


author: Tim Waugh <twaugh@redhat.com> 8.15.3-6
changelog:
  - Configure with --with-drivers=ALL since the advertised default is not
    what gets used (bug #223819).


author: Tim Waugh <twaugh@redhat.com> 8.15.3-7
changelog:
  - dvipdf script fixes (bug #88906).
  - Moved libijs.so and libgs.so into devel package (bug #203623).


author: Tim Waugh <twaugh@redhat.com> 8.15.4-3
changelog:
  - Apply fonts in CIDFnmap even if the same fontnames are already registered
    (bug #163231).
  - New file CIDFmap (bug #233966).
  - Allow local overrides for FAPIcidfmap, cidfmap and Fontmap (bug #233966).


author: Tim Waugh <twaugh@redhat.com> 8.60-0.r8112.1
changelog:
  - 8.60 snapshot from svn.  Patches dropped:
    - big-cmap-post
    - split-cidfnmap
    - exactly-enable-cidfnmap
    - Fontmap.local
    No longer needed:
    - gxcht-64bit-crash


author: Tim Waugh <twaugh@redhat.com> 8.61-2
changelog:
  - Add /usr/share/fonts to fontpath (bug #402551).
  - Restore cidfmap-switching bits, except for FAPIcidfmap which is no
    longer used.
  - Add runlibfileifexists to gs_init.ps.
  - Build with --disable-compile-inits (bug #402501).


author: Tim Waugh <twaugh@redhat.com> 8.61-9
changelog:
  - Build with jasper again (bug #433897).  Build requires jasper-devel, and
    a patch to remove jas_set_error_cb reference.


author: Tim Waugh <twaugh@redhat.com> 8.62-4
changelog:
  - Applied patch to work around bug #229174.
  - Applied patch from upstream to fix box_fill_path for shfill (bug #452348).


author: Tim Waugh <twaugh@redhat.com> 8.63-1
changelog:
  - 8.63.  No longer need r8591 or incomplete-ccittfax patches.
  - Compile without strict aliasing opts due to warnings across several
    files.
  - Don't run autogen.sh for main package, just for ijs which doesn't
    ship with a configure script.


author: Tim Waugh <twaugh@redhat.com> 8.64-6
changelog:
  - Applied patch to fix CVE-2009-0792 (bug #491853).
  - Applied patch to fix CVE-2009-0196 (bug #493379).


author: Tim Waugh <twaugh@redhat.com> 8.64-11
changelog:
  - Fixed CVE-2009-0583,0584 patch by using 255 as the maximum number of
    points, not 100, and by not treating a missing black point tag as an
    error (bug #487744).


author: Tim Waugh <twaugh@redhat.com> 8.70-1
changelog:
  - 8.70.
  - License has changed to GPLv3+.  Packages containing programs that
    link to libgs/libijs are:
    - foomatic (GPLv2+)
    - libspectre (GPLv2+)
    - ImageMagick (ImageMagick, listed on Licensing wiki page under
      "Good Licenses" and marked as GPLv3 compat)
    - gutenprint (GPLv2+)


author: Tim Waugh <twaugh@redhat.com> 8.70-3
changelog:
  - Don't ship libtool la files (bug #542674).
  - Fix debugging output from gdevcups (CVE-2009-4270, bug #540760).
  - Harden ghostscript's debugging output functions (bug #540760).


author: Tim Waugh <twaugh@redhat.com> 8.70-6
changelog:
  - Fixed pdftoraster so that it waits for its sub-process to exit.
  - Another gdevcups duplex fix from upstream revision 10631
    (bug #541604).


author: Tim Waugh <twaugh@redhat.com> 8.71-4
changelog:
  - Actually revert the upstream gdevcups changes (bug #563313).
  - Fixed pdf2dsc.ps (bug #565935).
  - Use fixed patch for LDFLAGS to make sure libgs.so gets a soname
    (bug #565935).


author: Tim Waugh <twaugh@redhat.com> 8.71-6
changelog:
  - Fixed summary.
  - Fixed macros in changelog.
  - Avoid mixed spaces and tabs.
  - Ship COPYING file.
  - Added comments for all patches.
  - More consistent macro use.


author: Tim Waugh <twaugh@redhat.com> 8.71-7
changelog:
  - Don't own the %{_datadir}/ghostscript or
    %{_datadir}/ghostscript/conf.d directories as the filesystem
    package already does (bug #569442).


author: Tim Waugh <twaugh@redhat.com> 8.71-8
changelog:
  - Restore the TIFF default strip size of 0 (bug #571520).
  - Don't segfault closing tiffg3 device if opening failed (bug #571520).
  - Don't revert gdevcups y-axis change (bug #541604).
  - Reallocate memory in gdevcups when color depth changes (bug #563313).


author: Tim Waugh <twaugh@redhat.com> 8.71-9
changelog:
  - Backported some more TIFF fixes (bug #573970).
  - Use upstream fix for TIFF default strip size (bug #571520).


author: Tim Waugh <twaugh@redhat.com> 8.71-12
changelog:
  - Change SEARCH_HERE_FIRST default to make -P- default instead of -P
    (bug #599564).
  - Removed redundant gs-executable patch (bug #502550).


author: Tim Waugh <twaugh@redhat.com> 8.71-15
changelog:
  - Restored Fontmap.local patch, incorrectly dropped after
    ghostscript-8.15.4-3 (bug #610301).
  - Applied patch to let gdevcups use automatic memory allocation.  Use
    RIPCache=auto in /etc/cups/cupsd.conf to enable.
  - Applied patch to fix NULL dereference in bbox driver (bug #591624).
  - Applied upstream patch to fix iname.c segfault (bug #465311).


author: Tim Waugh <twaugh@redhat.com> 9.00-1
changelog:
  - Updated to 9.00.  No longer need -P-, CVE-2009-4270, CVE-2010-1628,
    SEARCH_HERE_FIRST, bbox-close, cups-realloc-color-depth,
    epstopdf-failure, fPIC, gdevcups-ripcache, iname-segfault, ldfalgs,
    pdf2dsc, pdftoraster-exit, tif-fail-close, tiff-default-strip-size,
    or tiff-fixes patches.


author: Tim Waugh <twaugh@redhat.com> 9.00-3
changelog:
  - Don't use carriage return in ps2epsi output (bug #635786).
  - Include more documentation (bug #634354).


author: Tim Waugh <twaugh@redhat.com> 9.00-8
changelog:
  - Applied upstream ICC fix (bug #655449).
  - gdevcups: use correct width and height values when allocating memory
    (upstream bug 691733).


author: Tim Waugh <twaugh@redhat.com> 9.01-1
changelog:
  - 9.01.  No longer needed gdevcups-691733, glyph-stretch-691920,
    icc-fix, scan_token, or system-jasper patches.


author: Tim Waugh <twaugh@redhat.com> - 9.05-3
changelog:
  - Removed more bundled packages (bug #816747).
  - Fixed missing error check when setting ICC profile.


author: Tim Waugh <twaugh@redhat.com> - 9.06-5
changelog:
  - Updated build requirement from gtk2-devel to gtk3-devel so that gsx
    gets built using the correct loader (bug #884483).


author: Tim Waugh <twaugh@redhat.com> 9.07-10
changelog:
  - Added in missing part of gs_sprintf backport: add in the header to
    stdio_.h. Without this there are problems with va_args on some
    platforms (bug #979681).


author: Tim Waugh <twaugh@redhat.com> 9.14-3
changelog:
  - Applied patch from upstream to fix memory handling issue that could
    lead to crashes (bug #1087071).


author: Tim Waugh <twaugh@redhat.com> 9.15-3
changelog:
  - Avoid shipping ramfs source as its license is unclear. Similarly
    with some documentation and example code (bug #1149617).


author: Tim Waugh <twaugh@redhat.com> 9.15-4
changelog:
  - New ghostscript-x11 package for X11 driver (bug #148939).
  - Ghostscript not requiring X11 is now in ghostscript-core.
  - The 'ghostscript' package requires both of these.


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.16-5
changelog:
  - [TEMPORARY] Support for OpenJPEG disabled for builds to pass.
  - Security fix for BZ #1380416 backported.


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-1
changelog:
  - Rebase to latest ghostscript-9.20. Major changes in this rebase:
    - OpenJPEG support has been re-enabled
    - ijs-config custom tool has been removed (pkg-config is used by default)
    - old irrelevant patches removed (changes are part of upstream release now)
    - remaining patches has been updated & renamed
    - no API/ABI changes according to upstream


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-2
changelog:
  - Added security fixes for:
    - CVE-2016-7979 (bug #1382305)
    - CVE-2016-7976 (bug #1382294)
    - CVE-2016-7978 (bug #1382300)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-5
changelog:
  - Added fix to avoid SIGSEGV for some *.ps files. More info here:
    <http://bugs.ghostscript.com/show_bug.cgi?id=697286>


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-6
changelog:
  - Remove and (re-implement) ConvertUTF.c (bug #1404933)
  - Added security fix for CVE-2016-9601 (bug #1410021)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.20-9
changelog:
  - Added security fixes for:
    - CVE-2016-10217 (bug #1441564)
    - CVE-2016-10218 (bug #1441568)
    - CVE-2016-10219 (bug #1441569)
    - CVE-2016-10220 (bug #1441571)
    - CVE-2017-5951  (bug #1441572)
    - CVE-2017-8291  (bug #1446063)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.22-4
changelog:
  - complete cleanup in ghostscript specfile according to FPG
  - libgs -- new separate package (Ghostscript library)
  - libgs-devel -- new separate subpackage (devel files for Ghostscript library)
  - libijs -- now shipped as a separate package on Pagure
  - ghostscript-tools-fonts -- new subpackage
  - ghostscript-tools-printing -- new subpackage
  - ghostscript-core -- changed to transitional metapackage
  - package is now completely debundled from already packaged software/resources
  - versioned paths for documentation, resources, etc. are no longer used
  - LPR setup scripts removed (no longer shipped)
  - added symlinks for direct resources location to speedup Ghostscript startup times
  - Ghostscript's search path updated to include only fonts locations as a backup
  - support for /usr/share/ghostscript/conf.d dropped (using Google Droid Sans Fallback instead)
  - examples/ folder dropped from *-doc subpackage


author: Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 9.22-8
changelog:
  - Switch to %ldconfig_scriptlets
    >> https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.24-1
changelog:
  - rebase to latest upstream version, which contains important CVE fixes
  - additional ZER0-DAY fixes added


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.24-3
changelog:
  - ghostscript-9.24-002-icc-PermitReading.patch removed
  - ghostscript-9.24-002-fix-for-Canon-and-Kyocera-printers.patch added (bug #1626818)
  - ghostscript-9.24-003-CVE-2018-16802.patch added (bug #1627960)


author: Martin Osvald <mosvald@redhat.com> - 9.26-1
changelog:
  - rebase to latest upstream version 9.26
  - spec change to remove gsdoc.el due to upstream 8bc783cb586


author: Martin Osvald <mosvald@redhat.com> - 9.27-1
changelog:
  - rebase to latest upstream version 9.27
  - security fixes added for:
    - CVE-2019-14811 (bug #1747908)
    - CVE-2019-14812 (bug #1747907)
    - CVE-2019-14813 (bug #1747906)
    - CVE-2019-14817 (bug #1747909)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18
changelog:
  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Ondrej Pohorelsky <opohorel@redhat.com> - 2.13.3-1
changelog:
  - Update to version 2.13.3
  - Fixed round brackets in Provides
  - Moved manpages.tgz to look-a-side cache
  - Resolves: rhbz#2021549, rhbz#1870080, rhbz#1866441


author: Weisson <wenshu.hx@alibaba-inc.com> - 3.4.1-4.0.1
changelog:
  - Add doc sub package
  - Disable pie mode for loongarch64 (geliwei@openanolis.org)
  - Support loongarch build (geliwei@openanolis.org)


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 1.5.5-1
changelog:
  - Update to latest release
  - Add -devel and -unit-test-devel subpackages
  - Add post/preun scriptlets for global enablement


author: Carl George <carl@george.computer> - 2.3.4-4
changelog:
  - Use vendored libraries on RHEL
  - Skip test on RHEL
  - Don't build man pages on RHEL due to missing ronn
  - Don't build html versions of man pages


author: Karsten Hopp <karsten@redhat.com> - 3.20.0-6
changelog:
  - apply upstream patch from Jonh Wendell to fix g_ptr_array_find types and make it
    build with latest glib2


author: Mikolaj Izdebski <mizdebsk@redhat.com> 2.2.1-4
changelog:
  - Change OSGi Bundle-SymbolicName to better match Eclipse needs
  - Update URL
  - Resolves: rhbz#868169


author: Colin Walters <walters@redhat.com> - 2.47.6.19.gad2092b-2
changelog:
  - git snapshot to work around https://bugzilla.gnome.org/show_bug.cgi?id=762637
  - Add --with-python=/usr/bin/python explicitly to hopefully fix a weird
    issue I am seeing where librepo fails to build in epel7 with this due to
    us requiring /bin/python.


author: Colin Walters <walters@redhat.com> - 2.48.0-2
changelog:
  - Explicitly require system pcre, though we happened to default to this now
    anyways due to something else pulling PCRE into the buildroot
    Closes rhbz#1287266


author: Colin Walters <walters@verbum.org> - 2.52.1-3
changelog:
  - Backport patches for gmain wakeup for qemu
    See: https://bugzilla.gnome.org/show_bug.cgi?id=761102


author: Debarshi Ray <rishi@fedoraproject.org> - 2.56.1-4
changelog:
  - Backport patch to fix possible invalid pointer in dbus callback in the FD.o
    notification backend (RH #1584916)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.60.0-2
changelog:
  - Make sure all .py files have fixed timestamps (fixes issue with
    parallel installability of i686 and amd64 -devel packages)
  - Switch to explicit byte compilation to override invalidation mode


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.1-3
changelog:
  - Add missing bundled provides
  - Add rpminspect gating configuration
  - Consolidate GDesktopAppInfo patchset
  - Resolves: #1951126


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-16.2
changelog:
  - Add patches for CVE-2024-52533 and CVE-2025-4373
  - Update GDateTime test for new tzdata
  - Resolves: RHEL-94290
  - Resolves: RHEL-102845


author: Carlos O'Donell <carlos@systemhalted.org> - 2.26-1
changelog:
  - Update to released glibc 2.26.
  - Auto-sync with upstream master,
    commit 2aad4b04ad7b17a2e6b0e66d2cb4bc559376617b.
  - getaddrinfo: Release resolver context on error in gethosts (swbz#21885)


author: Florian Weimer <fweimer@redhat.com> - 2.26-2
changelog:
  - Disable multi-arch (IFUNC string functions) on i686 (#1471427)
  - Remove nosegneg 32-bit Xen PV support libraries (#1482027)
  - Adjust spec file to RPM changes


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-3
changelog:
  - Auto-sync with upstream master,
    commit 403143e1df85dadd374f304bd891be0cd7573e3b:
  - x86-64: Align L(SP_RANGE)/L(SP_INF_0) to 8 bytes (swbz#21955)
  - powerpc: Add values from Linux 4.8 to <elf.h>
  - S390: Add new s390 platform z14.
  - Various locale fixes (swbz#14925, swbz#20008, swbz#20482, swbz#12349
    swbz#19982, swbz#20756, swbz#20756, swbz#21836, swbz#17563, swbz#16905,
    swbz#21920, swbz#21854)
  - NSS: Replace exported NSS lookup functions with stubs (swbz#21962)
  - i386: Do not set internal_function
  - assert: Suppress pedantic warning caused by statement expression (swbz#21242)
  - powerpc: Restrict xssqrtqp operands to Vector Registers (swbz#21941)
  - sys/ptrace.h: remove obsolete PTRACE_SEIZE_DEVEL constant (swbz#21928)
  - Remove __qaddr_t, __long_double_t
  - Fix uc_* namespace (swbz#21457)
  - nss: Call __resolv_context_put before early return in get*_r (swbz#21932)
  - aarch64: Optimized memcpy for Qualcomm Falkor processor
  - manual: Document getcontext uc_stack value on Linux (swbz#759)
  - i386: Add <startup.h> (swbz#21913)
  - Don't use IFUNC resolver for longjmp or system in libpthread (swbz#21041)
  - Fix XPG4.2 bits/sigaction.h namespace (swbz#21899)
  - x86-64: Add FMA multiarch functions to libm
  - i386: Support static PIE in start.S
  - Compile tst-prelink.c without PIE (swbz#21815)
  - x86-64: Use _dl_runtime_resolve_opt only with AVX512F (swbz#21871)
  - x86: Remove __memset_zero_constant_len_parameter (swbz#21790)


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 2.26-4
changelog:
  - Remove 'Buildroot' tag, 'Group' tag, and '%clean' section, and don't
    remove the buildroot in '%install', all per Fedora Packaging Guidelines
    (#1476839)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-5
changelog:
  - Auto-sync with upstream master,
    commit 2585d7b839559e665d5723734862fbe62264b25d:
  - Do not use generic selection in C++ mode
  - Do not use __builtin_types_compatible_p in C++ mode (#1481205)
  - x86-64: Check FMA_Usable in ifunc-mathvec-avx2.h (swbz#21966)
  - Various locale fixes (swbz#21750, swbz#21960, swbz#21959, swbz#19852)
  - Fix sigval namespace (swbz#21944)
  - x86-64: Optimize e_expf with FMA (swbz#21912)
  - Adjust glibc-rh827510.patch.


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-6
changelog:
  - Auto-sync with upstream master,
    commit b5889d25e9bf944a89fdd7bcabf3b6c6f6bb6f7c:
  - assert: Support types without operator== (int) (#1483005)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-8
changelog:
  - Auto-sync with upstream master,
    commit a8410a5fc9305c316633a5a3033f3927b759be35:
  - Obsolete matherr, _LIB_VERSION, libieee.a.


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-10
changelog:
  - Use an architecture-independent system call list (#1484729)
  - Drop glibc-fedora-include-bits-ldbl.patch (#1482105)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-11
changelog:
  - Auto-sync with upstream master,
    commit 3d7b66f66cb223e899a7ebc0f4c20f13e711c9e0:
  - string/stratcliff.c: Replace int with size_t (swbz#21982)
  - Fix tgmath.h handling of complex integers (swbz#21684)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-13
changelog:
  - Drop glibc-rh952799.patch, applied upstream (#952799, swbz#22025)
  - Auto-sync with upstream master,
    commit 5f9409b787c5758fc277f8d1baf7478b752b775d:
  - Various locale fixes (swbz#22022, swbz#22038, swbz#21951, swbz#13805,
    swbz#21971, swbz#21959)
  - MIPS/o32: Fix internal_syscall5/6/7 (swbz#21956)
  - AArch64: Fix procfs.h not to expose stdint.h types
  - iconv_open: Fix heap corruption on gconv_init failure (swbz#22026)
  - iconv: Mangle __btowc_fct even without __init_fct (swbz#22025)
  - Fix bits/math-finite.h _MSUF_ expansion namespace (swbz#22028)
  - Provide a C++ version of iszero that does not use __MATH_TG (swbz#21930)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-14
changelog:
  - Build glibc with -O2 (following the upstream default).
  - Auto-sync with upstream master,
    commit f4a6be2582b8dfe8adfa68da3dd8decf566b3983:
  - malloc: Abort on heap corruption, without a backtrace (swbz#21754)
  - getaddrinfo: Return EAI_NODATA for gethostbyname2_r with NO_DATA (swbz#21922)
  - getaddrinfo: Fix error handling in gethosts (swbz#21915) (swbz#21922)
  - Place $(elf-objpfx)sofini.os last (swbz#22051)
  - Various locale fixes (swbz#15332, swbz#22044)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-15
changelog:
  - Auto-sync with upstream master,
    commit b38042f51430974642616a60afbbf96fd0b98659:
  - Implement tmpfile with O_TMPFILE (swbz#21530)
  - Obsolete pow10 functions
  - math.h: Warn about an already-defined log macro


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-16
changelog:
  - Auto-sync with upstream master,
    commit 1e2bffd05c36a9be30d7092d6593a9e9aa009ada:
  - Add IBM858 charset (#1416405)
  - Update kernel version in syscall-names.list to 4.13
  - Add Linux 4.13 constants to bits/fcntl-linux.h
  - Add fcntl sealing interfaces from Linux 3.17 to bits/fcntl-linux.h
  - math: New generic powf, log2f, logf
  - Fix nearbyint arithmetic moved before feholdexcept (swbz#22225)
  - Mark __dso_handle as hidden (swbz#18822)
  - Skip PT_DYNAMIC segment with p_filesz == 0 (swbz#22101)
  - glob now matches dangling symbolic links (swbz#866, swbz#22183)
  - nscd: Release read lock after resetting timeout (swbz#22161)
  - Avoid __MATH_TG in C++ mode with -Os for fpclassify (swbz#22146)
  - Fix dlclose/exit race (swbz#22180)
  - x86: Add SSE4.1 trunc, truncf (swbz#20142)
  - Fix atexit/exit race (swbz#14333)
  - Use execveat syscall in fexecve (swbz#22134)
  - Enable unwind info in libc-start.c and backtrace.c
  - powerpc: Avoid misaligned stores in memset
  - powerpc: build some IFUNC math functions for libc and libm (swbz#21745)
  - Removed redundant data (LC_TIME and LC_MESSAGES) for niu_NZ (swbz#22023)
  - Fix LC_TELEPHONE for az_AZ (swbz#22112)
  - x86: Add MathVec_Prefer_No_AVX512 to cpu-features (swbz#21967)
  - x86: Add x86_64 to x86-64 HWCAP (swbz#22093)
  - Finish change from “Bengali” to “Bangla” (swbz#14925)
  - posix: fix glob bugs with long login names (swbz#1062)
  - posix: Fix getpwnam_r usage (swbz#1062)
  - posix: accept inode 0 is a valid inode number (swbz#19971)
  - Remove redundant LC_TIME data in om_KE (swbz#22100)
  - Remove remaining _HAVE_STRING_ARCH_* definitions (swbz#18858)
  - resolv: Fix memory leak with OOM during resolv.conf parsing (swbz#22095)
  - Add miq_NI locale for Miskito (swbz#20498)
  - Fix bits/math-finite.h exp10 condition (swbz#22082)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-17
changelog:
  - Move nss_compat to the main glibc package (#1400538)
  - Auto-sync with upstream master,
    commit 11c4f5010c58029e73e656d5df4f8f42c9b8e877:
  - crypt: Use NSPR header files in addition to NSS header files (#1489339)
  - math: Fix yn(n,0) without SVID wrapper (swbz#22244)
  - math: Fix log2(0) and log(10) in downward rounding (swbz#22243)
  - math: Add C++ versions of iscanonical for ldbl-96, ldbl-128ibm (swbz#22235)
  - powerpc: Optimize memrchr for power8
  - Hide various internal functions (swbz#18822)


author: Carlos O'Donell <carlos@systemhalted.org> - 2.26.90-18
changelog:
  - Auto-sync with upstream master,
    commit 1e26d35193efbb29239c710a4c46a64708643320.
  - malloc: Fix tcache leak after thread destruction (swbz#22111)
  - powerpc:  Fix IFUNC for memrchr.
  - aarch64: Optimized implementation of memmove for Qualcomm Falkor
  - Always do locking when iterating over list of streams (swbz#15142)
  - abort: Do not flush stdio streams (swbz#15436)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-19
changelog:
  - Move /var/db/Makefile to nss_db (#1498900)
  - Auto-sync with upstream branch master,
    commit 645ac9aaf89e3311949828546df6334322f48933:
  - openpty: use TIOCGPTPEER to open slave side fd


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-20
changelog:
  - Auto-sync with upstream branch master,
    commit d8425e116cdd954fea0c04c0f406179b5daebbb3:
  - nss_files performance issue in multi mode (swbz#22078)
  - Ensure C99 and C11 interfaces are available for C++ (swbz#21326)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-21
changelog:
  - Auto-sync with upstream branch master,
    commit 596f70134a8f11967c65c1d55a94a3a2718c731d:
  - Silence -O3 -Wall warning in malloc/hooks.c with GCC 7 (swbz#22052)
  - locale: No warning for non-symbolic character (swbz#22295)
  - locale: Allow "" int_curr_Symbol (swbz#22294)
  - locale: Fix localedef exit code (swbz#22292)
  - nptl: Preserve error in setxid thread broadcast in coredumps (swbz#22153)
  - powerpc: Avoid putting floating point values in memory (swbz#22189)
  - powerpc: Fix the carry bit on mpn_[add|sub]_n on POWER7 (swbz#22142)
  - Support profiling PIE (swbz#22284)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-22
changelog:
  - Auto-sync with upstream branch master,
    commit c38a4bfd596db2be2b9c1f96715bdc833eab760a:
  - malloc: Use compat_symbol_reference in libmcheck (swbz#22050)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-24
changelog:
  - Use make -O to serialize make output
  - Auto-sync with upstream branch master,
    commit 63b4baa44e8d22501c433c4093aa3310f91b6aa2:
  - sysconf: Fix missing definition of UIO_MAXIOV on Linux (#1504165)
  - Install correct bits/long-double.h for MIPS64 (swbz#22322)
  - malloc: Fix deadlock in _int_free consistency check
  - x86-64: Don't set GLRO(dl_platform) to NULL (swbz#22299)
  - math: Add _Float128 function aliases
  - locale: Add new locale mjw_IN (swbz#13994)
  - aarch64: Rewrite elf_machine_load_address using _DYNAMIC symbol
  - powerpc: fix check-before-set in SET_RESTORE_ROUND
  - locale: Use U+202F as thousands separators in pl_PL locale (swbz#16777)
  - math: Use __f128 to define FLT128_* constants in include/float.h for old GCC
  - malloc: Improve malloc initialization sequence (swbz#22159)
  - malloc: Use relaxed atomics for malloc have_fastchunks
  - locale: New locale ca_ES@valencia (swbz#2522)
  - math: Let signbit use the builtin in C++ mode with gcc < 6.x (swbz#22296)
  - locale: Place monetary symbol in el_GR, el_CY after the amount (swbz#22019)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-25
changelog:
  - Auto-sync with upstream branch master,
    commit 797ba44ba27521261f94cc521f1c2ca74f650147:
  - math: Add bits/floatn.h defines for more _FloatN / _FloatNx types
  - posix: Fix improper assert in Linux posix_spawn (swbz#22273)
  - x86-64: Use fxsave/xsave/xsavec in _dl_runtime_resolve (swbz#21265)
  - CVE-2017-15670: glob: Fix one-byte overflow (#1504807)
  - malloc: Add single-threaded path to _int_free
  - locale: Add new locale kab_DZ (swbz#18812)
  - locale: Add new locale shn_MM (swbz#13605)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-26
changelog:
  - Auto-sync with upstream branch master,
    commit 6b86036452b9ac47b4ee7789a50f2f37df7ecc4f:
  - CVE-2017-15804: glob: Fix buffer overflow during GLOB_TILDE unescaping
  - powerpc: Use latest string function optimization for internal function calls
  - math: No _Float128 support for ppc64le -mlong-double-64 (swbz#22402)
  - tpi_PG locale: Fix wrong d_fmt
  - aarch64: Disable lazy symbol binding of TLSDESC
  - tpi_PG locale: fix syntax error (swbz#22382)
  - i586: Use conditional branches in strcpy.S (swbz#22353)
  - ffsl, ffsll: Declare under __USE_MISC, not just __USE_GNU
  - csb_PL locale: Fix abmon/mon for March (swbz#19485)
  - locale: Various yesstr/nostr/yesexpr/noexpr fixes (swbz#15260, swbz#15261)
  - localedef: Add --no-warnings/--warnings option
  - powerpc: Replace lxvd2x/stxvd2x with lvx/stvx in P7's memcpy/memmove
  - locale: Use ASCII as much as possible in LC_MESSAGES
  - Add new locale yuw_PG (swbz#20952)
  - malloc: Add single-threaded path to malloc/realloc/calloc/memalloc
  - i386: Replace assembly versions of e_powf with generic e_powf.c
  - i386: Replace assembly versions of e_log2f with generic e_log2f.c
  - x86-64: Add powf with FMA
  - x86-64: Add logf with FMA
  - i386: Replace assembly versions of e_logf with generic e_logf.c
  - i386: Replace assembly versions of e_exp2f with generic e_exp2f.c
  - x86-64: Add exp2f with FMA
  - i386: Replace assembly versions of e_expf with generic e_expf.c


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-27
changelog:
  - Auto-sync with upstream branch master,
    commit f6e965ee94b37289f64ecd3253021541f7c214c3:
  - powerpc: AT_HWCAP2 bit PPC_FEATURE2_HTM_NO_SUSPEND
  - aarch64: Add HWCAP_DCPOP bit
  - ttyname, ttyname_r: Don't bail prematurely (swbz#22145)
  - signal: Optimize sigrelse implementation
  - inet: Check length of ifname in if_nametoindex (swbz#22442)
  - malloc: Account for all heaps in an arena in malloc_info (swbz#22439)
  - malloc: Add missing arena lock in malloc_info (swbz#22408)
  - malloc: Use __builtin_tgmath in tgmath.h with GCC 8 (swbz#21660)
  - locale: Replaced unicode sequences in the ASCII printable range
  - resolv: More precise checks in res_hnok, res_dnok (swbz#22409, swbz#22412)
  - resolv: ns_name_pton should report trailing \ as error (swbz#22413)
  - locale: mfe_MU, miq_NI, an_ES, kab_DZ, om_ET: Escape / in d_fmt (swbz#22403)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-28
changelog:
  - Auto-sync with upstream branch master,
    commit cccb6d4e87053ed63c74aee063fa84eb63ebf7b8:
  - sigwait can fail with EINTR (#1516394)
  - Add memfd_create function
  - resolv: Fix p_secstodate overflow handling (swbz#22463)
  - resolv: Obsolete p_secstodate
  - Avoid use of strlen in getlogin_r (swbz#22447)
  - lv_LV locale: fix collation (swbz#15537)
  - S390: Add cfi information for start routines in order to stop unwinding
  - aarch64: Optimized memset for falkor


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-29
changelog:
  - Enable -fstack-clash-protection (#1512531)
  - Auto-sync with upstream branch master,
    commit a55430cb0e261834ce7a4e118dd9e0f2b7fb14bc:
  - elf: Properly compute offsets of note descriptor and next note (swbz#22370)
  - cs_CZ locale: Base collation on iso14651_t1 (swbz#22336)
  - Implement the mlock2 function
  - Add _Float64x function aliases
  - elf: Consolidate link map sorting
  - pl_PL locale: Base collation on iso14651_t1 (swbz#22469)
  - nss: Export nscd hash function as __nss_hash (swbz#22459)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-30
changelog:
  - Add build dependency on bison
  - Auto-sync with upstream branch master,
    commit 7863a7118112fe502e8020a0db0fa74fef281f29:
  - math: New generic sinf (swbz#5997)
  - is_IS locale: Base collation on iso14651_t1 (swbz#22519)
  - intl: Improve reproducibility by using bison (swbz#22432)
  - sr_RS, bs_BA locales: make collation rules the same as for hr_HR (wbz#22534)
  - hr_HR locale: various updates (swbz#10580)
  - x86: Make a space in jmpbuf for shadow stack pointer
  - CVE-2017-17426: malloc: Fix integer overflow in tcache (swbz#22375)
  - locale: make forward accent sorting the default in collating (swbz#17750)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-31
changelog:
  - Add elision tunables.  Drop related configure flag.  (#1383986)
  - Auto-sync with upstream branch master,
    commit 37ac8e635a29810318f6d79902102e2e96b2b5bf:
  - Linux: Implement interfaces for memory protection keys
  - math: Add _Float64, _Float32x function aliases
  - math: Use sign as double for reduced case in sinf
  - math: fix sinf(NAN)
  - math: s_sinf.c: Replace floor with simple casts
  - et_EE locale: Base collation on iso14651_t1 (swbz#22517)
  - tr_TR locale: Base collation on iso14651_t1 (swbz#22527)
  - hr_HR locale: Avoid single code points for digraphs in LC_TIME (swbz#10580)
  - S390: Fix backtrace in vdso functions


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-32
changelog:
  - Obsolete the libcrypt-nss subpackage (#1525396)
  - armhfp: Disable -fstack-clash-protection due to GCC bug (#1522678)
  - ppc64: Disable power6 multilib due to GCC bug (#1522675)
  - Auto-sync with upstream branch master,
    commit 243b63337c2c02f30ec3a988ecc44bc0f6ffa0ad:
  - libio: Free backup area when it not required (swbz#22415)
  - math: Fix nextafter and nexttoward declaration (swbz#22593)
  - math: New generic cosf
  - powerpc: POWER8 memcpy optimization for cached memory
  - x86-64: Add sinf with FMA
  - x86-64: Remove sysdeps/x86_64/fpu/s_sinf.S
  - math: Fix ctanh (0 + i NaN), ctanh (0 + i Inf) (swbz#22568)
  - lt_LT locale: Base collation on copy "iso14651_t1" (swbz#22524)
  - math: Add _Float32 function aliases
  - math: Make cacosh (0 + iNaN) return NaN + i pi/2 (swbz#22561)
  - hsb_DE locale: Base collation on copy "iso14651_t1" (swbz#22515)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-34
changelog:
  - Auto-sync with upstream branch master,
    commit bad7a0c81f501fbbcc79af9eaa4b8254441c4a1f:
  - copy_file_range: New function to copy file data
  - nptl: Consolidate pthread_{timed,try}join{_np}
  - nptl: Implement pthread_self in libc.so (swbz#22635)
  - math: Provide a C++ version of iseqsig (swbz#22377)
  - elf: remove redundant __libc_enable_secure check from fillin_rpath
  - math: Avoid signed shift overflow in pow (swbz#21309)
  - x86: Add feature_1 to tcbhead_t (swbz#22563)
  - x86: Update cancel_jmp_buf to match __jmp_buf_tag (swbz#22563)
  - ld.so: Examine GLRO to detect inactive loader (swbz#20204)
  - nscd: Fix nscd readlink argument aliasing (swbz#22446)
  - elf: do not substitute dst in $LD_LIBRARY_PATH twice (swbz#22627)
  - ldconfig: set LC_COLLATE to C (swbz#22505)
  - math: New generic sincosf
  - powerpc: st{r,p}cpy optimization for aligned strings
  - CVE-2017-1000409: Count in expanded path in _dl_init_path (#1524867)
  - CVE-2017-1000408: Compute correct array size in _dl_init_paths (#1524867)
  - x86-64: Remove sysdeps/x86_64/fpu/s_cosf.S
  - aarch64: Improve strcmp unaligned performance


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-35
changelog:
  - Remove sln (#1531546)
  - Remove Sun RPC interfaces (#1531540)
  - Rebuild with newer GCC to fix pthread_exit stack unwinding issue (#1529549)
  - Auto-sync with upstream branch master,
    commit f1a844ac6389ea4e111afc019323ca982b5b027d:
  - CVE-2017-16997: elf: Check for empty tokens before DST expansion (#1526866)
  - i386: In makecontext, align the stack before calling exit (swbz#22667)
  - x86, armhfp: sync sys/ptrace.h with Linux 4.15 (swbz#22433)
  - elf: check for rpath emptiness before making a copy of it
  - elf: remove redundant is_path argument
  - elf: remove redundant code from is_dst
  - elf: remove redundant code from _dl_dst_substitute
  - scandir: fix wrong assumption about errno (swbz#17804)
  - Deprecate external use of libio.h and _G_config.h


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-36
changelog:
  - Auto-sync with upstream branch master,
    commit 579396ee082565ab5f42ff166a264891223b7b82:
  - nptl: Add test for callee-saved register restore in pthread_exit
  - getrlimit64: fix for 32-bit configurations with default version >= 2.2
  - elf: Add linux-4.15 VDSO hash for RISC-V
  - elf: Add RISC-V dynamic relocations to elf.h
  - powerpc: Fix error message during relocation overflow
  - prlimit: Replace old_rlimit RLIM64_INFINITY with RLIM_INFINITY (swbz#22678)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-38
changelog:
  - nptl: Fix stack guard size accounting (#1527887)
  - Remove invalid Obsoletes: on glibc-header provides
  - Require python3 instead of python during builds
  - Auto-sync with upstream branch master,
    commit 09085ede12fb9650f286bdcd805609ae69f80618:
  - math: ldbl-128ibm lrintl/lroundl missing "invalid" exceptions (swbz#22690)
  - x86-64: Add sincosf with vector FMA


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-39
changelog:
  - nptl: Open libgcc.so with RTLD_NOW during pthread_cancel (#1527887)
  - Introduce libnsl subpackage and remove NIS headers (#1531540)
  - Use versioned Obsoletes: for libcrypt-nss.
  - Auto-sync with upstream branch master,
    commit 08c6e95234c60a5c2f37532d1111acf084f39345:
  - nptl: Add tst-minstack-cancel, tst-minstack-exit (swbz#22636)
  - math: ldbl-128ibm log1pl (-qNaN) spurious "invalid" exception (swbz#22693)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-40
changelog:
  - libnsl: Do not install libnsl.so, libnsl.a (#1531540)
  - Use unversioned Supplements: for langpacks (#1490725)
  - Auto-sync with upstream branch master,
    commit 9a08a366a7e7ddffe62113a9ffe5e50605ea0924:
  - hu_HU locale: Avoid double space (swbz#22657)
  - math: Make default libc_feholdsetround_noex_ctx use __feholdexcept
    (swbz#22702)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-41
changelog:
  - CVE-2018-1000001: Make getcwd fail if it cannot obtain an absolute path
    (#1533837)
  - elf: Synchronize DF_1_* flags with binutils (#1439328)
  - Auto-sync with upstream branch master,
    commit 860b0240a5645edd6490161de3f8d1d1f2786025:
  - aarch64: fix static pie enabled libc when main is in a shared library
  - malloc: Ensure that the consolidated fast chunk has a sane size


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-43
changelog:
  - Enable static PIE support on i386, x86_64 (#1247050)
  - Remove add-on support (already gone upstream)
  - Rework test suite status reporting
  - Auto-sync with upstream branch master,
    commit 64f63cb4583ecc1ba16c7253aacc192b6d088511:
  - malloc: Fix integer overflows in memalign and malloc functions (swbz#22343)
  - x86-64: Properly align La_x86_64_retval to VEC_SIZE (swbz#22715)
  - aarch64: Update bits/hwcap.h for Linux 4.15
  - Add NT_ARM_SVE to elf.h


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-44
changelog:
  - Correct the list of static PIE architectures (#1247050)
  - glibc_post_upgrade: Remove process restart logic
  - glibc_post_upgrade: Integrate into the build process
  - glibc_post_upgrade: Do not clean up tls subdirectories
  - glibc_post_upgrade: Drop ia64 support
  - Remove architecture-specific symbolic link for iconvconfig
  - Auto-sync with upstream branch master,
    commit 4612268a0ad8e3409d8ce2314dd2dd8ee0af5269:
  - powerpc: Fix syscalls during early process initialization (swbz#22685)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-45
changelog:
  - Drop static PIE support on aarch64.  It leads to crashes at run time.
  - Remove glibc-rpcgen subpackage.  See rpcsvc-proto.  (#1531540)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-48
changelog:
  - Auto-sync with upstream branch master,
    commit 21c0696cdef617517de6e25711958c40455c554f:
  - locale: Implement alternative month names (swbz#10871)
  - locale: Change month names for pl_PL (swbz#10871)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-50
changelog:
  - Auto-sync with upstream branch master,
    commit cdd14619a713ab41e26ba700add4880604324dbb:
  - libnsl: Turn remaining symbols into compat symbols (swbz#22701)
  - be_BY, be_BY@latin, lt_LT, el_CY, el_GR, ru_RU, ru_UA, uk_UA:
    Add alternative month names (swbz#10871)
  - x86: Revert Intel CET changes to __jmp_buf_tag (swbz#22743)
  - aarch64: Revert the change of the __reserved member of mcontext_t


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-51
changelog:
  - Explicitly run ldconfig in the buildroot
  - Do not run ldconfig from scriptlets
  - Put triggers into the glibc-common package, do not pass arguments to ldconfig


author: Richard W.M. Jones <rjones@redhat.com> - 2.26.9000-52
changelog:
  - Disable -fstack-clash-protection on riscv64:
    not supported even by GCC 7.3.1 on this architecture.


author: Carlos O'Donell <carlos@redhat.com> - 2.27-1
changelog:
  - Update to released glibc 2.27.
  - Auto-sync with upstream branch master,
    commit 23158b08a0908f381459f273a984c6fd328363cb.


author: Florian Weimer <fweimer@redhat.com> - 2.27-2.1
changelog:
  - Linux: use reserved name __key in pkey_get (#1542643)
  - Auto-sync with upstream branch release/2.27/master,
    commit 56170e064e2b21ce204f0817733e92f1730541ea.


author: Florian Weimer <fweimer@redhat.com> - 2.27-3
changelog:
  - Spec file cleanups:
    - Remove %defattr(-,root,root)
    - Use shell to run ldconfig %transfiletrigger
    - Move %transfiletrigger* to the glibc-common subpackage
    - Trim changelog
    - Include ChangeLog.old in the source RPM


author: Richard W.M. Jones <rjones@redhat.com> - 2.27-4
changelog:
  - riscv64: Add symlink from /usr/lib64/lp64d -> /usr/lib64 for ABI compat.
  - riscv64: Disable valgrind smoke test on this architecture.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-6
changelog:
  - Switch back to upstream master branch
  - Drop glibc-rh1013801.patch, applied upstream.
  - Drop glibc-fedora-nptl-linklibc.patch, no longer needed.
  - Auto-sync with upstream branch master,
    commit bd60ce86520b781ca24b99b2555e2ad389bbfeaa.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-7
changelog:
  - Auto-sync with upstream branch master,
    commit 1a2f44a848663036c8a14671fe0faa3fed0b2a25:
  - Remove spurios reference to libpthread_nonshared.a


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-13
changelog:
  - Auto-sync with upstream branch master,
    commit d39c0a459ef32a41daac4840859bf304d931adab:
  - CVE-2017-18269: memory corruption in i386 memmove (#1580934)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-17
changelog:
  - Avoid exporting some Sun RPC symbols with default versions (#1577210)
  - Inherit the -mstackrealign flag if it is set
  - Inherit compiler flags in the original order
  - Auto-sync with upstream branch master,
    commit 89aacb513eb77549a29df2638913a0f8178cf3f5:
  - CVE-2018-11236: realpath: Fix path length overflow (#1581270, swbz#22786)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-18
changelog:
  - Do not run telinit u on upgrades (#1579225)
  - Auto-sync with upstream branch master,
    commit 632a6cbe44cdd41dba7242887992cdca7b42922a.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-20
changelog:
  - Auto-sync with upstream branch master,
    commit 7f9f1ecb710eac4d65bb02785ddf288cac098323:
  - CVE-2018-11237: Buffer overflow in __mempcpy_avx512_no_vzeroupper (#1581275)
  - Drop glibc-rh1452750-allocate_once.patch,
    glibc-rh1452750-libidn2.patch.  Applied upstream.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-22
changelog:
  - Modernise nsswitch.conf defaults (#1581809)
  - Adjust build flags inheritence from redhat-rpm-config
  - Auto-sync with upstream branch master,
    commit 104502102c6fa322515ba0bb3c95c05c3185da7a.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-24
changelog:
  - Auto-sync with upstream branch master,
    commit 14beef7575099f6373f9a45b4656f1e3675f7372:
  - iconv: Make IBM273 equivalent to ISO-8859-1 (#1592270)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-28
changelog:
  - Drop glibc-rh1315108.patch.  extend_alloca was removed upstream. (#1315108)
  - Auto-sync with upstream branch master,
    commit c49e18222e4c40f21586dabced8a49732d946917.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-29
changelog:
  - Drop glibc-deprecate_libcrypt.patch.  Variant applied upstream. (#1566464)
  - Drop glibc-linux-timespec-header-compat.patch.  Upstreamed.
  - Auto-sync with upstream branch master,
    commit e69d994a63afc2d367f286a2a7df28cbf710f0fe.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-30
changelog:
  - Auto-sync with upstream branch master,
    commit b7b88cea4151d85eafd7ababc2e4b7ae1daeedf5:
  - New locale: dsb_DE (Lower Sorbian)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-36
changelog:
  - Auto-sync with upstream branch master,
    commit fd70af45528d59a00eb3190ef6706cb299488fcd:
  - Add the statx function
  - regexec: Fix off-by-one bug in weight comparison (#1582229)
  - nss_files: Fix re-reading of long lines (swbz#18991)
  - aarch64: add HWCAP_ATOMICS to HWCAP_IMPORTANT
  - aarch64: Remove HWCAP_CPUID from HWCAP_IMPORTANT
  - conform/conformtest.pl: Escape literal braces in regular expressions
  - x86: Use AVX_Fast_Unaligned_Load from Zen onwards.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-38
changelog:
  - Auto-sync with upstream branch master,
    commit 93304f5f7a32f73b551266c5a181db51d97a71e4:
  - Install <bits/statx.h> header
  - Put the correct Unicode version number 11.0.0 into the generated files


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-41
changelog:
  - Build with --enable-cet on x86_64, i686
  - Auto-sync with upstream branch master,
    commit cfba5dbb10cc3abde632b46c60c10b2843917035:
  - Keep expected behaviour for [a-z] and [A-z] (#1607286)
  - Additional ucontext tests
  - Intel CET enhancements
  - ISO C11 threads support
  - Fix out-of-bounds access in IBM-1390 converter (swbz#23448)
  - New locale Yakut (Sakha) for Russia (sah_RU) (swbz#22241)
  - os_RU: Add alternative month names (swbz#23140)
  - powerpc64: Always restore TOC on longjmp (swbz#21895)
  - dsb_DE locale: Fix syntax error and add tests (swbz#23208)
  - Improve performance of the generic strstr implementation
  - regcomp: Fix off-by-one bug in build_equiv_class (swbz#23396)
  - Fix out of bounds access in findidxwc (swbz#23442)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-42
changelog:
  - Auto-sync with upstream branch master,
    commit af86087f02a5522d8801a11d8381e04f95e33162:
  - x86/CET: Don't parse beyond the note end
  - Fix Linux fcntl OFD locks tests on unsupported kernels
  - x86: Populate COMMON_CPUID_INDEX_80000001 for Intel CPUs (swbz#23459)
  - x86: Correct index_cpu_LZCNT (swbz#23456)
  - Fix string/tst-xbzero-opt if build with gcc head


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-43
changelog:
  - Update to glibc 2.28 release tarball:
  - Translation updates
  - x86/CET: Fix property note parser (swbz#23467)
  - x86: Add tst-get-cpu-features-static to $(tests) (swbz#23458)


author: Patsy Griffin Franklin <patsy@redhat.com> - 2.28-48
changelog:
  - Add compiler barriers around modifications of the robust mutex list
    for pthread_mutex_trylock. (#1672773)


author: Florian Weimer <fweimer@redhat.com> - 2.28-65
changelog:
  - glibc-all-langpacks: Do not delete locale archive during update (#1717347)
  - Do not mark /usr/lib/locale/locale-archive as a configuration file
    because it is always automatically overwritten by build-locale-archive.


author: Arjun Shankar <arjun@redhat.com> - 2.28-79
changelog:
  - Remove unwanted whitespace from size lines and account for top chunk in
    malloc_info output (#1735747)


author: Arjun Shankar <arjun@redhat.com> - 2.28-80
changelog:
  - Fix race condition in tst-clone3 and add a new ldconfig test,
    tst-ldconfig-bad-aux-cache (#1764226)


author: Patsy Griffin <patsy@redhat.com> - 2.28-114
changelog:
  - CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
    sincosl, and tanl function. (#1811796)


author: Patsy Griffin <patsy@redhat.com> - 2.28-130
changelog:
  - Fix avx2 strncmp offset compare condition check (#1871394)
  - Add strncmp and strcmp testcases for page boundary


author: Carlos O'Donell <carlos@redhat.com> - 2.28-153
changelog:
  - Support SEM_STAT_ANY via semctl. Return EINVAL for unknown commands to semctl,
    msgctl, and shmctl. (#1912670)


author: Arjun Shankar <arjun@redhat.com> - 2.28-174
changelog:
  - Introduce new glibc-doc.noarch subpackage (#2021671)
  - Move the reference manual info pages from glibc-devel to glibc-doc
  - Move debugger interface documentation from glibc to glibc-doc
  - Remove unnecessary README, INSTALL, NEWS files from glibc
  - Remove unnecessary README.timezone and gai.conf files from glibc-common


author: Florian Weimer <fweimer@redhat.com> - 2.28-175
changelog:
  - Fix dl-tls.c assert failure with pthread_create & dlopen (#1991001)
  - Fix x86_64 TLS lazy binding with auditors (#1950056)


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-188
changelog:
  - CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
    for "unix" and svcunix_create (#2045063).


author: Arjun Shankar <arjun@redhat.com> - 2.28-190
changelog:
  - Reduce installed size of some langpacks by de-duplicating LC_CTYPE (#2054790)
  - Fix localedef so it can handle symbolic links when generating locale-archive.


author: Carlos O'Donell <carlos@redhat.com> - 2.28-209
changelog:
  - Improve dynamic loader auditing interface (LD_AUDIT) (#2047981)
  - Add dlinfo() API support for RTLD_DI_PHDR (#2097898)


author: Florian Weimer <fweimer@redhat.com> - 2.28-211
changelog:
  - Preserve GLRO (dl_naudit) internal ABI (#2119304)
  - Avoid s390x ABI change due to z16 recognition on s390x (#2119304)


author: Arjun Shankar <arjun@redhat.com> - 2.28-216
changelog:
  - Retain .gnu_debuglink section for libc.so.6 (#2115830)
  - Remove .annobin* symbols from ld.so
  - Remove redundant ld.so debuginfo file


author: Florian Weimer <fweimer@redhat.com> - 2.28-251.2
changelog:
  - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264)
  - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267)
  - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271)
  - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.4
changelog:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.5
changelog:
  - elf: Clarify and invert second argument of _dl_allocate_tls_init
  - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.19
changelog:
  - libio: Fix a deadlock after fork in popen
  - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.24
changelog:
  - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo
    and AF_UNSPEC.
  - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error
    responses. (RHEL-18039)


author: Rongwei Wang <rongwei.wang@linux.alibaba.com> - 2.28-251.0.1.25
changelog:
  - elf: Properly align PT_LOAD segments
  - Sync loongarch64 code to lnd.35. (lixing@loongson.cn)
  - Add patch for gb18030-2022 from upstream bug#30243 (fundawang@yeah.net)
  - aarch64: Increase small and medium cases for __memcpy_generic (bug#7060) (Kaiqiang Wang)
  - Add Hygon Support (Jing Li)
  - Sync loongarch64 code to lnd.36. (fanpeng@loongson.cn)
  - SPECS: define glibc_ldso for LoongArch. (fanpeng@loongson.cn)


author: Rongwei Wang <rongwei.wang@linux.alibaba.com> - 2.28-251.0.1.13
changelog:
  - elf: Properly align PT_LOAD segments
  - Sync loongarch64 code to lnd.35. (lixing@loongson.cn)
  - Add patch for gb18030-2022 from upstream bug#30243 (fundawang@yeah.net)
  - aarch64: Increase small and medium cases for __memcpy_generic (bug#7060) (Kaiqiang Wang)
  - Add Hygon Support (Jing Li)
  - Sync loongarch64 code to lnd.36. (fanpeng@loongson.cn)

  - Restore internal ABI to avoid tooling false positives (RHEL-8381)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.0-1
changelog:
  - Update to 3.40.0
  - Disable the Facebook, Flickr and Foursquare providers
  - Remove Photos support from the Google provider
  Resolves: #1913641


author: Milan Crha <mcrha@redhat.com> - 3.40.0-4
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.40.0-5
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Jonas Ådahl <jadahl@redhat.com> - 0.1.2-1
changelog:
  - Update to 0.1.2
  - Changed tabs to spaces
  - Added systemd user macros
  - Install to correct systemd user unit directory
  - Compile gsettings schemas after install and uninstall


author: Felipe Borges <feborges@redhat.com> - 40.0.1-10
changelog:
  - Default power-button-action to poweroff on servers
    (except when power-button-action=nothing)
    Resolves: #1885639


author: Ray Strode <rstrode@redhat.com> - 40.0.1-13
changelog:
  - Revert hard dependency on subscription-manager since we're going to put it in gnome-session instead
    Related: #2175675


author: Ray Strode <rstrode@redhat.com> - 40.0.1-15
changelog:
  - Fix crashers in g-s-d and control-center related to
    making subscription-manager a soft dep
    Related: RHEL-20449


author: Zhao Hang <wb-zh951434@alibaba-inc.com> - 40.0.1-17.0.1
changelog:
  - Add doc sub package
  - Modify systemd buildrequirement to version 239 and rebuild with systemd-239 (<gc-taifu@linux.alibaba.com>)


author: Soren Sandmann <sandmann@redhat.com> - 2.21.91-3
changelog:
  - Add patch to make the xrandr plugin listen for client messages from
    the control panel and reread the configuration file.


author: Ray Strode <rstrode@redhat.com> - 2.21.92-3
changelog:
  - Don't set keyboard model on startup from gconf if evdev is being used.
    Evdev needs to use its own keyboard model to work right.


author: - Ray Strode <rstrode@redhat.com> - 2.22.1-0.2008.03.26.4
changelog:
  - Over the releases we've accumulated default.png, default-wide.png default-5_4.png
    and default.jpg.  We haven't been able to drop them because it would leave some
    users with white backgrounds on upgrade.  This patch just falls back to the
    default image if the user's background doesn't exist.


author: Colin Walters <walters@redhat.com> - 2.23.3-2
changelog:
  - Add (now upstreamed) patch to legacy ESD preference; see
    http://bugzilla.gnome.org/show_bug.cgi?id=533198
    https://bugzilla.redhat.com/show_bug.cgi?id=430624


author: Lennart Poettering <lpoetter@redhat.com> - 2.23.6-2
changelog:
  - Apply patch from gnome bug 545386. This hasn't been accepted in this form yet
    by upstream, will however very likely be merged in a similar form.
  - Disable esd/sounds module since we don't need it to start PA anymore


author: Ray Strode <rstrode@redhat.com> - 2.25.2-6
changelog:
  - Listen for DeviceAdded signals when configuring mouse
    (in addition to DeviceEnabled).  This may help with
    bug 474758.


author: Ray Strode <rstrode@redhat.com> - 2.25.2-9
changelog:
  - Don't call SetPointerMapping when using Xinput since
    it duplicates effort but gets touchpads wrong (bug 324721)


author: Bastien Nocera <bnocera@redhat.com> 2.26.1-3
changelog:
  - Don't set touchpads to be left-handed, otherwise the tap
    behaves like the 2nd mouse button (#483639)


author: Peter Hutterer <peter.hutterer@redhat.com> 2.27.91-2
changelog:
  - buttonmapping.patch: Don't check for IsXExtensionDevice, only skip button
    mappings for core devices instead (#502129).


author: Peter Hutterer <peter.hutterer@redhat.com> 2.28.1-2
changelog:
  - left-handed-touchpad.patch: change physical touchpad buttons to
    left-handed, not tapping though (#498249)


author: Adam Williamson <awilliam@redhat.com> - 3.2.0-2
changelog:
  - backport some greatest hits from git to stop the same bugs being
    reported over and over (all will be in 3.2.1)


author: Kalev Lember <kalevlember@gmail.com> - 3.9.2-1
changelog:
  - Update to 3.9.2
  - Drop the ibus-kkc-libpinyin patch; the hardcoded input sources
    list is gone from g-s-d
  - Set the minimum required gnome-desktop3 version


author: Kalev Lember <kalevlember@gmail.com> - 3.9.5-1
changelog:
  - Update to 3.9.5
  - Remove empty /etc/gnome-settings-daemon directory
  - Install new rfkill plugin and add back the smartcard plugin


author: Richard Hughes <rhughes@redhat.com> - 3.9.91.1-2
changelog:
  - Grab a patch from upstream so that the offline updates feature can
    actually work when reboot returns with success.


author: Richard Hughes <rhughes@redhat.com> - 3.10.0-2
changelog:
  - Grab a patch from upstream to fix the multiple notifications about updates.
  - Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1009132


author: Bastien Nocera <bnocera@redhat.com> - 3.26.2-3
changelog:
  - Fix gdm session trying to change the backlight, resulting in a lot
    of spurious error messages (#1322588)


author: Bastien Nocera <bnocera@redhat.com> - 3.27.90-3
changelog:
  + gnome-settings-daemon-3.27.90-3
  - Really fix gsd-* helper linkage
  - Build fix for highly parallel builds


author: Debarshi Ray <rishi@fedoraproject.org> - 3.28.3-3
changelog:
  - Support using the '0', '+' and '-' keys from the numeric keypad as
    accelerators
  - Resolves: #837035


author: Milan Crha <mcrha@redhat.com> - 3.28.1-7
changelog:
  - extensions: Incorrectly shows enabled extensions as disabled after enable-all
  - Resolves: #1804123


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.0-2.1219svn
changelog:
  - Moved munge repacking to prep
  - Added -Dversion to change generated manifest version
  - Removed http part of URL


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 3.1.2-1
changelog:
  - Complete rewrite of the spec file
  - New upstream, to ease future maintenance
  - Build with maven instead of ant
  - Split into multiple subpackages


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.14.0-1
changelog:
  - Release 0.14.0 (Peter Robinson)
  - Updated testing documentation (Jose Noguera)
  - README updated with TOC and improved explanations (Jose Noguera)
  - Add watchdog-triggered boot check #2 (Jose Noguera)
  - Update specfile and README to reflect changes in subpackage layout. (Jose Noguera)
  - Ensure all required health checks are run #52 (Jose Noguera)


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Kalev Lember <klember@redhat.com> - 3.31.0.1-2
changelog:
  - Switch back to autotools to fix missing org.gnome.desktop.enums.xml
  - Add a test to verify that the schemas compile


author: Kalev Lember <klember@redhat.com> - 3.31.90-2
changelog:
  - Recommend the default fonts set in the schemas:
    abattis-cantarell-fonts and adobe-source-code-pro-fonts (#1677056)


author: Yanko Kaneti <yaneti@declera.com> - 1.0.0-2
changelog:
  - Initial spec for review - 0.98.0-0.1.a648648
  - Additional patch + references + using %autopatch - 0.98.0-0.2.a648648
  - Update to 1.0.0. drop upstreamed paches - 1.0.0-1
  - Own some more directories as per review (#1167482) - 1.0.0-2


author: Julien Rische <jrische@redhat.com> - 1.2.0-1
changelog:
  - New release 1.2.0
  - Fix CVE-2023-25563: multiple out-of-bounds read when decoding NTLM fields
  - Fix CVE-2023-25564: memory corruption when decoding UTF16 strings
  - Fix CVE-2023-25565: incorrect free when decoding target information
  - Fix CVE-2023-25566: memory leak when parsing usernames
  - Fix CVE-2023-25567: out-of-bounds read when decoding target information
  - Resolves: rhbz#2181313


author: Kalev Lember <klember@redhat.com> - 1.33-1
changelog:
  - Update to 1.33
  - Switch to meson build system
  - Explicitly byte-compile python files using py_byte_compile macro


author: Kalev Lember <klember@redhat.com> - 2.24.5-1
changelog:
  - Update to 2.24.5
  - Use license macro for COPYING
  - Don't set group tags
  - Tighten -devel requires with the _isa macro


author: Noa Resare <noa@resare.com> - 18.0-5
changelog:
  - enable module guava-testlib
  - enable tests in guava-testlib
  - backport fix to HashMap related test from 19.0-SNAPSHOT


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.12.8-1
changelog:
  - 0.12.8 release
  - http://ftp.gnome.org/pub/GNOME/sources/gupnp-av/0.12/gupnp-av-0.12.8.news
  - Use %license


author: Kalev Lember <klember@redhat.com> - 0.12.9-1
changelog:
  - Update to 0.12.9
  - Don't set group tags
  - Tighten subpackage deps with the _isa macro
  - Use make_install macro


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.2.4-6
changelog:
  - Python 2 binary package renamed to python2-gupnp-igd
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Kalev Lember <klember@redhat.com> - 0.2.5-1
changelog:
  - Update to 0.2.5
  - Update inter-package dependencies after python2-gupnp-igd rename
  - Tighten deps with the _isa macro
  - Update source URLs
  - Use license macro for COPYING


author: Bastien Nocera <bnocera@redhat.com> - 0.2.5-3
changelog:
  + gupnp-igd-0.2.5-3
  - Remove python2-gupnp-igd sub-package, nothing uses it in Fedora
    and gobject-introspection supports both Python2 and Python3


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 3.7-1mdk
changelog:
  - 3.7
  - vendor tag
  - packager tag
  - s/Copyright/License/
  - truncated description to 72 columns in spec
  - spec cleanup
  - used versioned jar
  - moved demo files to %{_datadir}/%{name}


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 3.7-6jpp
changelog:
  - versioned dir for javadoc
  - no dependencies for manual and javadoc packages
  - stricter dependency for demo package
  - additional sources in individual archives
  - section macro


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 3.8.2-3jpp.1
changelog:
  - Committed on behalf of Tania Bento <tbento@redhat.com>
  - Update per Fedora review process
  - Resolves rhbz#225954


author: Ben Konrath <bkonrath@redhat.com> - 4.3.1-2jpp
changelog:
  - Set gcj_support to 0 to work around problems with GCJ.
  - Fix buglet with the gcj post/postun if statement.
  - Fix tab / space problems.
  - Fix buildroot.
  - Update Summary.
  - Convert html files to Unix file endings.
  - Disable aot-compile-rpm because it's not working ATM.


author: Ralph Apel <r.apel@r-apel.de> - 0:4.3.1-3jpp
changelog:
  - build and upload noarch packages
  - Add pom and depmap frag
  - BR java-devel = 1.5.0
  - Restore Vendor, Distribution from macros


author: David Walluck <dwalluck@redhat.com> 0:1.1-2
changelog:
  - add options to build without integration, jarjar, and tests
  - allow build with java-devel >= 1.5.0
  - remove javadoc scriptlets
  - use more strict file list
  - fix maven directory ownership
  - add non-versioned symlink for demo
  - fix GCJ requires
  - fix eol in LICENSE.txt
  - remove Vendor and Distribution


author: David Walluck <dwalluck@redhat.com> 0:1.1-7.1
changelog:
  - Fedora-specific: enable GCJ support
  - Fedora-specific: build with java 1.6.0
  - Fedora-specific: disable integration and tests


author: Mat Booth <mat.booth@redhat.com> - 0:1.3-8
changelog:
  - Fix FTBFS
  - Always build integration jar (removes some complexity from the spec)
  - Drop unused patch


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.3-22
changelog:
  - Elimitate race condition when injecting JAR manifest
  - Resolves: rhbz#1495234
  - Remove bogus hamcrest-text JAR


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Marek Goldmann <mgoldman@redhat.com> 1.1-3
changelog:
  - Split maven-hawtjni-plugin into new package
  - Fixed license
  - Fixed summary
  - Using xz to compress source code


author: Michal Grzedzicki <mge@fb.com> - 9.54-4
changelog:
  - backport fix for --dco-identify real max sectors calculation from upstream version 9.62 (#1959918)


author: Severin Gehwolf <sgehwolf@redhat.com> 4.1.1-2
changelog:
  - Add BR/R apache-commons-codec, since httpcomponents-client's
    MANIFEST.MF has an Import-Package: org.apache.commons.codec
    header.


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 4.2.1-2
changelog:
  - Install NOTICE.txt file
  - Fix javadir directory ownership
  - Fix directory permissions
  - Preserve timestamps
  - Replace add_to_maven_depmap with add_maven_depmap


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 4.1.1-1
changelog:
  - Update to latest upstream (4.1.1)
  - Use new maven macros
  - Tweaks according to new guidelines
  - Enable tests again (seem to work OK even in koji now)


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.24-5
changelog:
  - Fix covscan reviews. Related: rhbz#1963071

  - Implement ibus_im_context_set_surrounding_with_selection()


author: Mike FABIAN <mfabian@redhat.com> - 1.9.18-1
changelog:
  - update to 1.9.18
  - validate ibus-table.appdata.xml in %check
  - Update translations from zanata (pt_BR updated, es new)
  - Don't query user database if user define phrase and
    dynamic adjust are disabled (thanks to heiher)
  - Enable hash map based cache for user database enabled
    (thanks to heiher)
  - Import hash map based cache for table database (thanks to
    heiher)
  - Install appstream metadata to /usr/share/metainfo/ (thanks
    to jbicha)
  - Fix some appdata validation issues (thanks to jbicha)
  - Fix bug in Unihan_Variants.txt, 著 U+8457 is both
    simplified *and* traditional Chinese (thanks to heiher)


author: Mike FABIAN <mfabian@redhat.com> - 2.0.0-1
changelog:
  - Update to 2.0.0
  - Update translations because of the merge of the engines (de, pl, uk updated)
  - Update emoji annotations from CLDR
  - Do not hardcode icon names in desktop files
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/17)
  - Change the default for “Unicode symbols and emoji predictions” to “False”
  - Merge all typing-booster engines into one
  - Change the UI of the setup tool to make it possible to select
    multiple input methods and dictionaries
  - Move the buttons to learn from a file and to delete learned data to the options tab
  - Use the same “About” dialog in the setup tool as in emoji-picker


author: Mike FABIAN <mfabian@redhat.com> - 2.0.2-1
changelog:
  - Update to 2.0.2
  - Better Tab handling, use Tab to switch to the next candidate, not to commit
  - Update to 2.0.1
  - Update translations from zanata (ja updated)
  - Update emoji annotations from CLDR
  - Fix some bugs in the usage of “prefix” for prefixes other than “/usr” (For FreeBSD)
  - Make itb_util.get_ime_help() work on FreeBSD
  - Update UnicodeData.txt to Unicode 11.0.0
  - Remove useless 't-nil vi-base': 'vi-base.mim', from M17N_INPUT_METHODS
  - Remove extra space in entry for sa-IAST input method to make it work
  - Show in the setup tool in the input listbox whether minput_open_im() succeeded.
  - Use the rocket icon emoji_u1f680.svg from the “Noto Color Emoji” font


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - emoji-picker: Show a concise description of a selected emoji in the header bar
  - Update the setup UI when settings are changed outside of the setup UI
  - Migrate IBusConfig to GSettings (The old settings are
    unfortunately lost, so one has to open the setup tool
    and recreate ones favourite settings).
  - Read emoji data files always in UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-3
changelog:
  - Make “make check“ test cases work again when building the rpm
    (To avoid that rpmdiff in the errata tool reports a problem)
  - Related: rhbz#1619153


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-5
changelog:
  - Prevent also BackSpace from reopening a preedit when the
    option “Arrow keys can reopen a preedit” is off
  - Resolves: rhbz#1925030


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-7
changelog:
  - Avoid verbatim bidi formatting characters in source comments
    to make rpminspect complain less.
  - Resolves: RHEL-2237


author: Richard W.M. Jones <rjones@redhat.com> - 0.31.3-1
changelog:
  - New upstream version 0.31.3.
  - This includes all the previous upstream patches, and reverts the
    check which broke processing of PE binaries.


author: Martin Gieseking <martin.gieseking@uos.de> - 0.32.3-1
changelog:
  - Updated to version 0.32.3.
  - Dropped patch to fix https://savannah.nongnu.org/bugs/?52319 (applied upstream)


author: Colin Walters <walters@redhat.com> - 0.51.0-4
changelog:
  - Add patch to hopefully close race condition in systemd builds
  - Related to https://bugzilla.redhat.com/show_bug.cgi?id=1249051
  - And the test suite is failing but the logs are hidden under
    test-suite.log, so copy some code I had in dbus.spec to cat them.


author: Charalampos Stratakis <cstratak@redhat.com> - 0.6-10
changelog:
  - SPEC file cleanup
  - Added licence tag
  - Removal of old and unneeded macros
  - Use of newest python macros
  - Removed Python 2 dependency
  - Added patch for Python 3 build


author: Václav Doležal <vdolezal@redhat.com> - 1.8.18-17
changelog:
  - Disable retry of pre-session "Get cipher suites" command as some
    BMCs are ignoring it (#1831158)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-18
changelog:
  - Protect against negative values to memmove that caused
    "ipmitool sol activate" to crash against an IBM DataPower appliance
    (#1951480)
    Cherry-picked from upstream PR#78.


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-19
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Andrea Claudi <aclaudi@redhat.com> - 5.15.0-3.el8
changelog:
  - tc: u32: add json support in `print_raw`, `print_ipv4`, `print_ipv6` (Andrea Claudi) [1989591]
  - tc: u32: add support for json output (Andrea Claudi) [1989591]


author: Andrea Claudi <aclaudi@redhat.com> - 5.15.0-4.el8
changelog:
  - vdpa: Update man page with added support to configure max vq pair (Andrea Claudi) [2056827]
  - vdpa: Support reading device features (Andrea Claudi) [2056827]
  - vdpa: Support for configuring max VQ pairs for a device (Andrea Claudi) [2056827]
  - vdpa: Allow for printing negotiated features of a device (Andrea Claudi) [2056827]
  - vdpa: Remove unsupported command line option (Andrea Claudi) [2056827]
  - uapi: update vdpa.h (Andrea Claudi) [2056827]
  - Update kernel headers and import virtio_net (Andrea Claudi) [2056827]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-2.el8
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2188134]
  - Update kernel headers (Andrea Claudi) [2188134]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-4.el8
changelog:
  - ip vrf: make ipvrf_exec SELinux-aware (Andrea Claudi) [1780023]
  - lib: add SELinux include and stub functions (Andrea Claudi) [1780023]
  - ss: make SELinux stub functions conformant to API definitions (Andrea Claudi) [1780023]
  - ss: make is_selinux_enabled stub work like in SELinux (Andrea Claudi) [1780023]


author: Liwei Ge <geliwei@openanolis.org> - 6.2.0-6.0.1
changelog:
  - delete the rt_dsfield file due to three Aones (hengqi@linux.alibaba.com)
  - [kernelself-tests]net.fib_rule_tests.sh: TEST rule4 del by pref, rule6 del by pref FAIL
  - cherry-pick `add sw patch #89d57a068e2a72e13980eef179ae85fa0f9dd348`. (nijie@wxiat.com)
  - Disable bpf feature for sw_64. (Weisson@linux.alibaba.com)


author: Phil Cameron <pcameron@redhat.com> - 1.1.4-16
changelog:
  - Moved upstream from https://fedorahosted.org/iptraf-ng/ to 
    https://github.com/iptraf-ng/iptraf-ng/ with release v1.1.4
    Fixes error in patch Patch03 - this fixes 1283773


author: Thomas Woerner <twoerner@redhat.com> 2.2.6-1
changelog:
  - New upstream version 2.2.6
    - Located at github
    - Fixes (RHBZ#1294913 and RHBZ#1375395)
  - Additional upstream patch (no_debug) to drop some debugging remains
  - Additional proposed patch to fix segmentation fault with -1 -C (RHBZ#599181)


author: Ryan O'Hara <rohara@redhat.com> - 1.29-7
changelog:
  - Add 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS (#1543790)


author: Kairui Song <kasong@redhat.com> 2:1.4.0-3
changelog:
  - Update document and remove dead options to fix manpage scan warning (bz1612706)
  - Fix gating test error (bz1680619)


author: Ralph Apel <r.apel at r-apel.de> 0:0.1-0.20041111.2jpp
changelog:
  - By default omit tests requiring xercesjarv
  - Add postun for javadoc
  - Drop useless macros for name, version, etc.


author: Andrew Overholt <overholt@redhat.com> 1:0-0.1.release20050331.1jpp.1
changelog:
  - Clean up
  - Remove tests
  - Fix e:nvr for new scheme (0.Z.tag.Xjpp.Y%{?dist}) and bump epoch for
    upgrades
  - Add instructions for how to create source drop
  - Don't do javadoc symlinking in %post{,un}
  - Remove Obsoletes and Provides on isorelax-bootstrap as they were never
    shipped in Fedora and I don't know what version to Obsolete/Provide


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0.6.0-1
changelog:
  - Update to upstream version 0.6.0
  - Make maven provides versioned
  - Add additional pom_ macros to simplify additional pom editing


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0.7.0-1
changelog:
  - Update to latest upstream
  - Full support for compat depmap generation
  - Generate maven-files-%{name} with a list of files to package
  - Add support for maven repo generation (alpha version)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0.9.0-1
changelog:
  - Update to latest upstream version
  - Enable maven requires generator for xmvn packages
  - Enable requires generator for javadoc packages


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0.10.0-1
changelog:
  - Update to upstream version 0.10.0
  - Implement %xmvn_alias, %xmvn_file and %xmvn_package macros
  - Fix regex in osgi.attr
  - Add support for pre- and post-goals in mvn-build script


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0.12.0-1
changelog:
  - Update to upstream version 0.12.0
  - Implement new pom macros: xpath_replace and xpath_set
  - Remove Support-local-depmaps.patch (accepted upstream)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0.12.4-1
changelog:
  - Update to upstream version 0.12.4
  - Resolves: rhbz#913630 (versioned requires between subpackages)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0.12.5-1
changelog:
  - Update to upstream version 0.12.5
  - Resolves problems with compat package provides and automatic requires


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0.12.6-1
changelog:
  - Update to upstream version 0.12.6
  - Resolves: rhbz#917618 (remove jetty orbit provides)
  - Resolves: rhbz#917647 (system.bundle into autogenerated deps)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0.15.0-1
changelog:
  - Update to upstream version 0.15.0
  - Added depmap for tools.jar
  - Added support for versioned autorequires
  - New plugin metadata from Maven Central


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.0.0-1
changelog:
  - Update to upstream version 2.0.0
  - Merge functionality of jpackage-utils
  - Provide and obsolete jpackage-utils
  - %add_maven_depmap macro now injects pom.properties to every JAR
  - %add_to_maven_depmap and %update_maven_depmap macros were removed
  - maven2jpp-mapdeps.xsl template has been removed
  - Macros related to installation of icons and desktop files were removed
  - 14 new manual pages were added
  - Documentation specific to JPackage was removed
  - Add BuildRequires: asciidoc, xmlto


author: Stanislav Ochotnicky <sochotnicky@redhat.com> 3.0.2-1
changelog:
  - Update to upstream version 3.0.2
  - Add separate python-javapackages subpackage
  - Add separate fedora-review-plugin-java subpackage
  - Enable part of unit tests


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 4.2.0-5
changelog:
  - Use wrapper script to inject ABRT agent JVM argument
  - Fix path to ABRT agent DSO
  - Resolves: rhbz#1153652


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.0-4jpp
changelog:
  - renamed to jakarta-commons-httpclient
  - additional sources in individual archives
  - versioned dir for javadoc
  - no dependencies for javadoc package
  - dropped j2ee package
  - adapted to new jsse package
  - section macro


