# changelog

author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-0.6
changelog:
  - update to an early 1.36 snapshot (1.35.6)
  - Move ifup/ifdown scripts to new NetworkManager-initscripts-updown package


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Steve Grubb <sgrubb@redhat.com> 3.0.7-2
changelog:
  - Adjust sample-rules dir permissions
  - Add support for new access/dealloc function attributes
  - Adjust compile flags for less warnings


author: Pavel Březina <pbrezina@redhat.com> - 1.3.0-9
changelog:
  - Make authselect compatible with ostree (#2034360)
  - Authselect now requires explicit opt-out if users don't want to use it (#2051545)


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-6
changelog:
  - remove unnecessarily divisive terms, take 1.
  -   in ca-certificates there are 3 cases:
  -   1) master refering to the fedora master branch in the fetch.sh script.
  -      This can only be changed once fedora changes the master branch name.
  -   2) a reference to the 'master bundle' in this file: this has been changed
  -      to 'primary bundle'.
  -   3) a couple of blacklist directories owned by this package, but used to
  -      p11-kit. New 'blocklist' directories have been created, but p11-kit
  -      needs to be updated before the old blacklist directories can be removed
  -      and the man pages corrected.


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.48-2
changelog:
  - Update to CKBI 2.48 from NSS 3.64
  -    Removing:
  -     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root CA"
  -     # Certificate "Sonera Class 2 Root CA"
  -     # Certificate "Taiwan GRCA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
  -    Adding:
  -     # Certificate "Microsoft ECC Root Certificate Authority 2017"
  -     # Certificate "Microsoft RSA Root Certificate Authority 2017"
  -     # Certificate "e-Szigno Root CA 2017"
  -     # Certificate "certSIGN Root CA G2"
  -     # Certificate "Trustwave Global Certification Authority"
  -     # Certificate "Trustwave Global ECC P256 Certification Authority"
  -     # Certificate "Trustwave Global ECC P384 Certification Authority"
  -     # Certificate "NAVER Global Root Certification Authority"
  -     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
  -     # Certificate "GlobalSign Secure Mail Root R45"
  -     # Certificate "GlobalSign Secure Mail Root E45"
  -     # Certificate "GlobalSign Root R46"
  -     # Certificate "GlobalSign Root E46"
  -     # Certificate "Certum EC-384 CA"
  -     # Certificate "Certum Trusted Root CA"
  -     # Certificate "GlobalSign Code Signing Root R45"
  -     # Certificate "GlobalSign Code Signing Root E45"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.50-2
changelog:
  - Update to CKBI 2.50 from NSS 3.67
  -    Removing:
  -     # Certificate "Trustis FPS Root CA"
  -     # Certificate "GlobalSign Code Signing Root R45"
  -     # Certificate "GlobalSign Code Signing Root E45"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -    Adding:
  -     # Certificate "GLOBALTRUST 2020"
  -     # Certificate "ANF Secure Server Root CA"


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.50-5
changelog:
  - integrate Adam William's /etc/ssl/certs with Debian-compatibility
  - back out blocklist change since p11-kit .24 is not yet available on rawhide


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.52-2
changelog:
  - Update to CKBI 2.52 from NSS 3.72
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Ondrej Kozina <okozina@redhat.com> - 2.4.0~rc0-1
changelog:
  - Update to cryptsetup 2.4.0-rc0.
  - add experimental cryptsetup-ssh token subpackage
  - spec file cleanup


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Fix some coverity issues
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.6-5
changelog:
  - Update to the head of the upstream staging branch plus redhat patches
    * Patches 0016-0018 are from the upstream staging branch
    * Patches 0019-0024 have been submitted upstream
  - Rename files
    * Previous patches 0016-0025 are now patches 0024-0033


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-1
changelog:
  - Update source to upstream version 0.8.7
    * Previous patches 0001-0023 are included in the commit.
  - Add patches from upstream staging branch
    * Patches 0001-0010 are from the upstream staging branch
  - Rename redhat patches
    * Previous patches 0024-0033 are now patches 0011-0020


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-2
changelog:
  - Modify 0013-RH-don-t-start-without-a-config-file.patch
    * add condtion to multipathd.socket as well


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-3
changelog:
  - Update to the head of the upstream staging branch
    * Patches 0011 & 0012 are from the upstream staging branch
  - Rename redhat patches
    * Previous patches 0011-0020 are now patches 0013-0022


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-4
changelog:
  - Update to the head of the upstream staging branch
    * Patches 0013 - 0024 are from the upstream staging branch
  - Rename redhat patches
    * Previous patches 0013-0022 are now patches 0025-0034


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-5
changelog:
  - Modify 0030-RH-add-mpathconf.patch
    * fix setting property_blacklist with no blacklist_exceptions section


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-8
changelog:
  - Add 0036-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
    * add the ability for mpathconf to set arbitray options with --option
  - Add 0037-RH-add-support-to-mpathconf-for-setting-recheck_wwid.patch
    * add --recheck_wwid option to mpathconf


author: Nicola Sella <nsella@redhat.com> - 4.6.0-1
changelog:
  - Update to 4.6.0
  - Log scriptlets output also for API users (RhBug:1847340)
  - Fix module remove --all when no match spec (RhBug:1904490)
  - yum.misc.decompress() to handle uncompressed files (RhBug:1895059)
  - Make an error message more informative (RhBug:1814831)
  - Add deprecation notice to help messages of deplist
  - Remove Base._history_undo_operations() as it was replaced with transaction_sr code
  - cli/output: Return number of listed packages from listPkgs()
  - Clean up history command error handling
  - [doc] Describe install with just a name and obsoletes (RhBug:1902279)
  - Add api function fill_sack_from_repos_in_cache to allow loading a repo cache with repomd and (solv file or primary xml) only (RhBug:1865803)
  - Packages installed/removed via DNF API are logged into dnf.log (RhBug:1855158)
  - Support comps groups in history redo (RhBug:1657123,1809565,1809639)
  - Support comps groups in history rollback (RhBug:1657123,1809565,1809639)
  - Support comps groups in history undo (RhBug:1657123,1809565,1809639)
  - New optional parameter for filter_modules enables following modular obsoletes based on a config option module_obsoletes
  - Add get_header() method to the Package class (RhBug:1876606)
  - Fix documentation of globs not supporting curly brackets (RhBug:1913418)


author: Nicola Sella <nsella@redhat.com> - 4.6.1-1
changelog:
  - Update to 4.6.1
  - Fix recreate script
  - Add unit test for fill_sack_from_repos_in_cache (RhBug:1865803)
  - Add docs and examples for fill_sack_from_repos_in_cache (RhBug:1865803)
  - [spec] remove python2 support
  - Remove problematic language
  - The noroot plugin no longer exists, remove mention
  - Run tests for fill_sack_from_repos_in_cache in installroot (RhBug:1865803)
  - expand history to full term size when output is redirected (RhBug:1852577) (RhBug:1852577,1906970)
  - [doc] Fix: "sslcacert" contains path to the file
  - [doc] Added proxy ssl configuration options, increase libdnf require
  - Set persistdir and substitutions for fill_sack_from_repos_in_cache tests (RhBug:1865803)
  - Update documentation for module_obsoletes and module_stream_switch
  - print additional information when verifying GPG key using DNS
  - Bugs fixed (RhBug:1897573)
  - Remove hardcoded logfile permissions (RhBug:1910084)
  - Enhanced detection of plugins removed in transaction (RhBug:1929163)


author: Nicola Sella <nsella@redhat.com> - 4.7.0-1
changelog:
  - Improve repo config path ordering to fix a comps merging issue (RhBug:1928181)
  - Keep reason when package is removed (RhBug:1921063)
  - Improve mechanism for application of security filters (RhBug:1918475)
  - [doc] Add description for new API
  - [API] Add new method for reset of security filters
  - [doc] Improve documentation for Hotfix repositories
  - [doc] fix: "makecache" command downloads only enabled repositories
  - Use libdnf.utils.checksum_{check,value}
  - [doc] Add info that maximum parallel downloads is 20
  - Increase loglevel in case of invalid config options
  - [doc] installonly_limit documentation follows behavior
  - Prevent traceback (catch ValueError) if pkg is from cmdline
  - Add documentation for config option sslverifystatus (RhBug:1814383)
  - Check for specific key string when verifing signatures (RhBug:1915990)
  - Use rpmkeys binary to verify package signature (RhBug:1915990)
  - Bugs fixed (RhBug:1916783)
  - Preserve file mode during log rotation (RhBug:1910084)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.8.0-1
changelog:
  - Update to 4.8.0
  - Do not assume that a remote rpm is complete if present
  - Use positive percentage for "Failed delta RPMs" message
  - Remove redundant new line in Groups output
  - Format empty group names outputs to <name-unset>
  - [doc] Document default colors
  - Use rpmkeys alone to verify signature
  - Add dnf.error message to explain rpm.error traceback when package not found after resolving a transaction (RhBug:1815327,1887293,1909845)
  - Bugs fixed (RhBug:1946975,1955309)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.9.0-1
changelog:
  - Update to 4.9.0
  - [API] Add method "set_or_append_opt_value" to BaseConfig (RhBug:1967925)
  - Add aliases for commands: info, updateinfo, provides (RhBug:1938333)
  - Add report about demodularized rpms into module info (RhBug:1805260)
  - Remove DNSSEC errors on COPR group email keys
  - Documentation inprovements - bugs: 1938352, 1993899, 1963704


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.10.0-1
changelog:
  - Update to 4.10.0
  - Add support for autodetecting packages to be excluded from being installed as weak dependencies (RhBug:1699672)
  - Add support for excluding packages to be installed as weak dependencies (RhBug:1699672)
  - Add fail_fast parameter to download_payloads methods for use in reposync
  - Acquire all relevant locks during "dnf clean"
  - API: Raise CompsError when group/env not found in install_group and install_environment (RhBug:1947958)


author: Nicola Sella <nsella@redhat.com> - 4.0.19-1
changelog:
  - Update to 4.0.19
  - copr: allow only 2 arguments with copr enable command
  - [needs-restarting] fix -r in nspawn containers (RhBug:1913962,1914251)
  - Add --gpgcheck option to reposync (RhBug:1856818) (RhBug:1856818)
  - Re-introduce yum-groups-manager functionality (RhBug:1826016)
  - [repomanage] Don't use cached metadata (RhBug:1899852)
  - [needs-restarting] add -s to list services (RhBug:1772939) (RhBug:1772939)


author: Nicola Sella <nsella@redhat.com> - 4.0.21-1
changelog:
  - Add missing command line option to documentation
  - doc: add packages to needs-restarting conf
  - Set blacklist subcommand as deprecated
  - Bugs fixed (RhBug:1914827,1916782)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.22-1
changelog:
  - Update to 4.0.22
  - [repomanage] Allow running only with metadata
  - [repomanage] Enhance documentation (RhBug:1898293)
  - [versionlock] Locking obsoleted package does not make the obsoleter unavailable (RhBug:1957280)
  - [versionlock] Work correctly with packages with minorbump part of release (RhBug:1961217)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.23-1
changelog:
  - Update to 4.0.23
  - [leaves] Show strongly connected components
  - [needs-restarting] Fix wrong boot time (RhBug:1960437)
  - [playground] Disable playground command, since it doesn't work


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.24-1
changelog:
  - Update to 4.0.24
  - [copr] on CentOS Stream, enable centos stream chroot instead of not epel 8 (RhBug:1994154)
  - [copr] Avoid using deprecated function distro.linux_distribution() (RhBug:2011550)
  - [copr] don't traceback on empty lines in /etc/os-release


author: Dusty Mabe <dusty@dustymabe.com> - 055-3
changelog:
  - Fixes for NM running via systemd+dbus in the initramfs
  - Drop requirement on deprecated systemd-udev-settle


author: Mark Wielaard <mjw@fedoraproject.org> - 0.185-1
changelog:
  - Upgrade to upstream 0.185
    - debuginfod-client: Simplify curl handle reuse so downloads which
                         return an error are retried.
    - elfcompress: Always exit with code 0 when the operation succeeds
                   (even when nothing was done). On error the exit code
                   is now always 1.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.185-3
changelog:
  - Update version to 0.185-3 for rawhide/f35 upgrade from f34
    This build enables debuginfod client by default
  - Workaround bad test in make check


author: Mark Wielaard <mjw@fedoraproject.org> - 0.186-1
changelog:
  - Upgrade to upstream 0.186
    - debuginfod-client: Default $DEBUGINFOD_URLS is computed from
      drop-in files /etc/debuginfod/*.urls rather than
      hardcoded into the /etc/profile.d/debuginfod*
      scripts.
      Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings
      for skipping large/slow transfers.
      Add $DEBUGINFOD_RETRY for retrying aborted lookups.
    - debuginfod: Supply extra HTTP response headers, describing
      archive/file names that satisfy the requested buildid content.
      Support -d :memory: option for in-memory databases.
      Protect against loops in federated server configurations.
      Add -r option to use -I/-X regexes for grooming stale files.
      Protect against wasted CPU from duplicate concurrent requests.
      Limit the duration of groom ops roughly to rescan (-t) times.
      Add --passive mode for serving from read-only database.
      Several other performance improvements & prometheus metrics.
    - libdw: Support for the NVIDIA Cuda line map extensions.
      DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name
      are defined in dwarf.h. New functions dwarf_linecontext and
      dwarf_linefunctionname.
    - translations: Update Japanese translation.


author: Pavel Raiskup <praiskup@redhat.com> - 3.14-4
changelog:
  - /proc and /sys made %ghost to allow filesystem package updates in rootless
    container environments (rhbz#1548403)


author: Kamil Dudka <kdudka@redhat.com> - 1:4.7.0-6
changelog:
  - disable -flto on ppc64le to make test-float pass (#1789115)
  - do not compile with -D__SUPPORT_SNAN__ (#1294016)


author: Eric Garver <eric@garver.life> - 1.0.0-1
changelog:
  - rebase package to v1.0.0
  - add subpackage firewalld-test
  - remove Requires: python3-decorator, python3-slip-dbus
  - add Recommends: polkit, libcap-ng-python3


author: Filipe Brandenburger <filbranden@gmail.com> - 1.4-4
changelog:
  - Include patch to implement PKCS#11 opaque keys support through
    OpenSSL pkcs11 engine (rhbz #2000411)


author: Jakub Jelinek <jakub@redhat.com> 12.0.0-0.5
changelog:
  - update from trunk
    - PRs ada/104027, analyzer/104029, c++/70417, c++/103705, c++/103991,
  	c/104002, fortran/67804, fortran/99256, fortran/103782,
  	libfortran/104006, libstdc++/91260, libstdc++/91383, libstdc++/95065,
  	libstdc++/103992, middle-end/100280, middle-end/101475,
  	middle-end/104026, target/94790, target/98737, target/100637,
  	target/103935, target/103941, target/104001, target/104003,
  	target/104014, tree-optimization/83072, tree-optimization/83073,
  	tree-optimization/96707, tree-optimization/97909,
  	tree-optimization/102192, tree-optimization/103989,
  	tree-optimization/104009, tree-optimization/104015
  - include rs6000-vecdefines.h on ppc* (#2040825)


author: Jakub Jelinek <jakub@redhat.com> 12.0.1-0.1
changelog:
  - update from trunk
    - PRs c++/104031, c/63272, fortran/83079, fortran/87711, fortran/97896,
  	libstdc++/103650, libstdc++/104080, middle-end/101292, target/103124,
  	target/103973, target/104005, testsuite/104035, testsuite/104037,
  	tree-optimization/80532, tree-optimization/101941,
  	tree-optimization/104064


author: Jakub Jelinek <jakub@redhat.com> 12.0.1-0.2
changelog:
  - update from trunk
    - PRs c++/104007, c++/104074, fortran/103692, ipa/103989, libstdc++/101124,
  	libstdc++/104098, middle-end/103163, tree-optimization/103987,
  	tree-optimization/104038
  - default to -mabi=ieeelongdouble on ppc64le
  - fix -Wdangling-pointer with -fsanitize=address (PR middle-end/104103)
  - fix -masm=intel (PR target/104104)


author: Jakub Jelinek <jakub@redhat.com> 12.0.1-0.3
changelog:
  - update from trunk
    - PRs ada/103538, analyzer/94362, analyzer/103685, analyzer/104062,
  	analyzer/104089, analyzer/104150, analyzer/104159, bootstrap/104135,
  	bootstrap/104170, c++/20040, c++/55227, c++/91911, c++/101072,
  	c++/101405, c++/101715, c++/102300, c++/102338, c++/103631,
  	c++/103672, c++/103681, c++/104025, c++/104055, c++/104084,
  	c++/104134, c++/104139, c++/104148, c++/104173, c++/104182,
  	c++/104197, c/104115, debug/103874, fortran/102621, fortran/103695,
  	fortran/104127, libgcc/104207, libstdc++/87193, libstdc++/104019,
  	libstdc++/104032, libstdc++/104099, libstdc++/104101,
  	libstdc++/104123, libstdc++/104174, middle-end/100786,
  	middle-end/102860, middle-end/104069, middle-end/104076,
  	middle-end/104140, other/104176, other/104181, preprocessor/104030,
  	rtl-optimization/102478, sanitizer/99673, sanitizer/104158,
  	target/64821, target/94193, target/100784, target/102517,
  	target/103676, target/103771, target/104090, target/104136,
  	target/104188, testsuite/102833, testsuite/103763, testsuite/104021,
  	testsuite/104022, testsuite/104109, tree-optimization/100089,
  	tree-optimization/100740, tree-optimization/101508,
  	tree-optimization/101972, tree-optimization/102087,
  	tree-optimization/102131, tree-optimization/103721,
  	tree-optimization/103997, tree-optimization/104112,
  	tree-optimization/104114, tree-optimization/104152,
  	tree-optimization/104156, tree-optimization/104214
    - don't emit C++ mangling aliases for compatibility with GCC 8.1 ppc64le
      IEEE quad long double (PR target/104172)
  - mark IEEE quad long double in DWARF as implicit typedef to _Float128
    (PR debug/104194)


author: Jakub Jelinek <jakub@redhat.com> 12.0.1-0.4
changelog:
  - update from trunk
    - PRs ada/104258, analyzer/104224, analyzer/104247, bootstrap/67102,
  	c++/51344, c++/59950, c++/82632, c++/92752, c++/92944, c++/99895,
  	c++/100030, c++/100198, c++/100282, c++/101532, c++/101988,
  	c++/103057, c++/103341, c++/103678, c++/104206, c++/104225,
  	c++/104226, c++/104235, c++/104245, fortran/84784, fortran/103790,
  	fortran/104128, fortran/104212, fortran/104227, libfortran/104233,
  	libstdc++/100516, libstdc++/104161, libstdc++/104217,
  	libstdc++/104259, lto/104237, middle-end/103642, target/103702,
  	target/104201, target/104213, target/104239, testsuite/70230,
  	tree-optimization/104196, tree-optimization/104203,
  	tree-optimization/104263, tree-optimization/104267, web/104254
  - configure with --enable-libstdcxx-backtrace and package
    libstdc++_libbacktrace.a


author: Jakub Jelinek <jakub@redhat.com> 12.0.1-0.5
changelog:
  - update from trunk
    - PRs analyzer/104270, c++/101874, c++/102414, c++/102434, c++/103186,
  	c++/104291, c++/104294, d/104287, demangler/98886, demangler/99935,
  	fortran/104331, libstdc++/101831, libstdc++/104301, lto/104333,
  	middle-end/104232, middle-end/104307, middle-end/95115,
  	preprocessor/104147, rtl-optimization/101260, target/94372,
  	target/100428, target/104189, target/104298, target/104323,
  	tree-optimization/95424, tree-optimization/100499,
  	tree-optimization/102819, tree-optimization/103169,
  	tree-optimization/103514, tree-optimization/104279,
  	tree-optimization/104280, tree-optimization/104281
  - fix a VRP bug with 1-3 bit precision types (PR tree-optimization/104334)


author: Jakub Jelinek <jakub@redhat.com> 12.0.1-0.6
changelog:
  - update from trunk
    - PRs analyzer/104369, c++/92385, c++/104079, c++/104300, c++/104302,
  	debug/104337, debug/104366, fortran/104311, fortran/104328,
  	middle-end/90348, middle-end/104092, middle-end/104260,
  	rtl-optimization/101885, target/95082, target/100808, target/103686,
  	target/104219, target/104362, target/104380, tree-optimization/103641,
  	tree-optimization/104119, tree-optimization/104356,
  	tree-optimization/104389


author: Jakub Jelinek <jakub@redhat.com> 12.0.1-0.7
changelog:
  - update from trunk
    - PRs analyzer/98797, analyzer/101081, analyzer/102052, analyzer/103872,
  	analyzer/104274, analyzer/104417, analyzer/104452, c++/80951,
  	c++/96242, c++/96876, c++/102204, c++/103706, c++/103752, c++/104033,
  	c++/104379, c++/104403, c++/104410, c++/104425, c++/104432,
  	c++/104472, c/104427, debug/104407, fortran/66193, fortran/104329,
  	libgomp/104385, libstdc++/104442, middle-end/100775,
  	middle-end/104402, middle-end/104446, middle-end/104450,
  	middle-end/104464, middle-end/104467, middle-end/104496,
  	rtl-optimization/104059, rtl-optimization/104153,
  	rtl-optimization/104198, rtl-optimization/104400,
  	rtl-optimization/104459, sanitizer/104449, target/35513, target/79754,
  	target/97005, target/97040, target/100593, target/102140,
  	target/103627, target/104117, target/104283, target/104327,
  	target/104345, target/104364, target/104441, target/104451,
  	target/104453, target/104456, target/104458, target/104462,
  	target/104469, target/104474, target/104502, testsuite/104481,
  	tree-optimization/102832, tree-optimization/104288,
  	tree-optimization/104373, tree-optimization/104420,
  	tree-optimization/104445, tree-optimization/104466,
  	tree-optimization/104479, tree-optimization/104499


author: Jakub Jelinek <jakub@redhat.com> 12.0.1-0.8
changelog:
  - update from trunk
    - PRs ada/97504, ada/98724, c/104505, fortran/104228, libstdc++/100912,
  	middle-end/104497, tree-optimization/104511, tree-optimization/104528
    - fix handling of return in arm constexpr ctors and on all arches return in
      constexpr dtors (PR c++/104513)


author: Filip Januš <fjanus@redhat.com> - 1.18.1-3
changelog:
  - Resolves: #1799391
  - After upgrade GCC to version gcc version 10.0.1 build fails
  - Patch gdbm_gcc_10.patch was added


author: Florian Weimer <fweimer@redhat.com> - 2.34.9000-33
changelog:
  - Auto-sync with upstream branch master,
    commit b99b0f93ee8762fe53ff65802deb6f00700b9924:
  - nss: Use "files dns" as the default for the hosts database (#2033020)
  - arm: Guard ucontext _rtld_global_ro access by SHARED, not PIC macro
  - Fix The GNU ToolChain Authors copyright notice
  - Remove upper limit on tunable MALLOC_MMAP_THRESHOLD
  - localedata: add new locale ab_GE
  - Fix __minimal_malloc segfaults in __mmap due to stack-protector
  - __glibc_unsafe_len: Fix comment
  - malloc: Enable huge page support on main arena
  - malloc: Move MORECORE fallback mmap to sysmalloc_mmap_fallback
  - malloc: Add Huge Page support to arenas
  - malloc: Add Huge Page support for mmap
  - malloc: Move mmap logic to its own function
  - malloc: Add THP/madvise support for sbrk
  - malloc: Add madvise support for Transparent Huge Pages
  - powerpc: Use global register variable in <thread_pointer.h>
  - Use LFS and 64 bit time for installed programs (swbz#15333)


author: Florian Weimer <fweimer@redhat.com> - 2.34.9000-35
changelog:
  - Auto-sync with upstream branch master,
    commit 5d28a8962dcb6ec056b81d730e3c6fb57185a210:
  - elf: Add _dl_find_object function
  - malloc: Remove memusage.h
  - malloc: Use hp-timing on libmemusage
  - Remove atomic-machine.h atomic typedefs
  - malloc: Remove atomic_* usage
  - microblaze: Add missing implementation when !__ASSUME_TIME64_SYSCALLS
  - elf: Do not fail for failed dlmopen on audit modules (BZ #28061)
  - elf: Issue audit la_objopen for vDSO
  - elf: Add audit tests for modules with TLSDESC
  - elf: Avoid unnecessary slowdown from profiling with audit (BZ#15533)
  - elf: Add _dl_audit_pltexit
  - elf: Add _dl_audit_pltenter
  - elf: Add _dl_audit_preinit
  - elf: Add _dl_audit_symbind_alt and _dl_audit_symbind
  - elf: Add _dl_audit_objclose
  - elf: Add _dl_audit_objsearch
  - elf: Add _dl_audit_activity_map and _dl_audit_activity_nsid
  - elf: Add _dl_audit_objopen
  - hurd: Fix static-PIE startup
  - hurd: let csu initialize tls
  - hurd: Fix XFAIL-ing mallocfork2 tests
  - hurd: XFAIL more tests that require setpshared support
  - malloc: Add missing shared thread library flags
  - stdio-common: Fix %m sprintf test output for GNU/Hurd
  - x86: Optimize L(less_vec) case in memcmpeq-evex.S
  - x86: Optimize L(less_vec) case in memcmp-evex-movbe.S
  - elf: Remove AArch64 from comment for AT_MINSIGSTKSZ
  - math: Properly cast X_TLOSS to float [BZ #28713]
  - Set default __TIMESIZE default to 64
  - stdio: Implement %#m for vfprintf and related functions
  - elf: Remove unused NEED_DL_BASE_ADDR and _dl_base_addr
  - x86-64: Add vector acos/acosf implementation to libmvec
  - intl/plural.y: Avoid conflicting declarations of yyerror and yylex
  - elf: Remove excessive p_align check on PT_LOAD segments [BZ #28688]
  - s_sincosf.h: Change pio4 type to float [BZ #28713]
  - Linux: Fix 32-bit vDSO for clock_gettime on powerpc32
  - Regenerate ulps on x86_64 with GCC 12
  - Add ARPHRD_CAN, ARPHRD_MCTP to net/if_arp.h
  - Remove ununsed tcb-offset
  - riscv: align stack before calling _dl_init [BZ #28703]
  - riscv: align stack in clone [BZ #28702]
  - elf: Fix tst-cpu-features-cpuinfo for KVM guests on some AMD systems [BZ #28704]
  - powerpc64[le]: Allocate extra stack frame on syscall.S
  - Update copyright header in recently merged ab_GE locale
  - fortify: Fix spurious warning with realpath


author: Florian Weimer <fweimer@redhat.com> - 2.34.9000-36
changelog:
  - Auto-sync with upstream branch master,
    commit 28713c06129f8f64f88c423266e6ff2880216509:
  - elf: Sort tests and modules-names
  - hurd: nuke all unknown ports on exec
  - hurd: Fix auth port leak
  - Remove stale reference to libanl.a
  - elf: Add <dl-debug.h>
  - Properly check linker option in LIBC_LINKER_FEATURE [BZ #28738]
  - hurd: Implement _S_msg_get_dtable
  - Update automatically-generated copyright dates
  - Sync move-if-change from Gnulib, updating copyright
  - Update copyright dates not handled by scripts/update-copyrights.
  - Update copyright dates with scripts/update-copyrights
  - hurd: Use __trivfs_server_name instead of trivfs_server_name
  - hurd: Bump BRK_START to 0x20000000
  - hurd: Avoid overzealous shared objects constraints
  - time: Refactor timesize.h for some ABIs
  - hurd: Make getrandom a stub inside the random translator
  - open64: Force O_LARGEFILE on all architectures
  - x86-64: Add vector tan/tanf implementation to libmvec
  - x86-64: Add vector erfc/erfcf implementation to libmvec
  - resolv: Do not install libanl.so symbolic link
  - resolv: Do not build libanl.so for ABIs starting at 2.35
  - timezone: test-case for BZ #28707
  - timezone: handle truncated timezones from tzcode-2021d and later (BZ #28707)
  - x86-64: Add vector asinh/asinhf implementation to libmvec
  - x86-64: Add vector tanh/tanhf implementation to libmvec
  - x86-64: Add vector erf/erff implementation to libmvec
  - x86-64: Add vector acosh/acoshf implementation to libmvec
  - x86-64: Add vector atanh/atanhf implementation to libmvec
  - x86-64: Add vector log1p/log1pf implementation to libmvec
  - x86-64: Add vector log2/log2f implementation to libmvec
  - x86-64: Add vector log10/log10f implementation to libmvec
  - x86-64: Add vector atan2/atan2f implementation to libmvec
  - x86-64: Add vector cbrt/cbrtf implementation to libmvec
  - x86-64: Add vector sinh/sinhf implementation to libmvec
  - x86-64: Add vector expm1/expm1f implementation to libmvec
  - x86-64: Add vector cosh/coshf implementation to libmvec
  - x86-64: Add vector exp10/exp10f implementation to libmvec
  - x86-64: Add vector exp2/exp2f implementation to libmvec
  - x86-64: Add vector hypot/hypotf implementation to libmvec
  - x86-64: Add vector asin/asinf implementation to libmvec
  - x86-64: Add vector atan/atanf implementation to libmvec


author: DJ Delorie <dj@redhat.com> - 2.34.9000-38
changelog:
  - Auto-sync with upstream branch master,
    commit 5b8e7980c5dabd9aaefeba4f0208baa8cf7653ee.
  - Linux: Detect user namespace support in io/tst-getcwd-smallbuff
  - Fix handling of unterminated bracket expressions in fnmatch (bug 28792)
  - realpath: Avoid overwriting preexisting error (CVE-2021-3998)
  - elf: Add a test for PT_LOAD segments with invalid p_align [BZ #28688]
  - elf: Add a test for PT_LOAD segments with p_align == 1 [BZ #28688]
  - elf: Add a test for PT_LOAD segments with mixed p_align [BZ #28676]
  - Add and use link-test-modules-rpath-link [BZ #28455]
  - tst-realpath-toolong: Fix hurd build
  - getcwd: Set errno to ERANGE for size == 1 (CVE-2021-3999)
  - Add valgrind smoke test
  - htl: Fix cleaning the reply port
  - elf: Properly align all PT_LOAD segments [BZ #28676]
  - realpath: Set errno to ENAMETOOLONG for result larger than PATH_MAX [BZ #28770]
  - support: Add helpers to create paths longer than PATH_MAX
  - nptl: Effectively skip CAS in spinlock loop
  - mips: Move DT_MIPS into <ldsodefs.h>
  - x86_64: Document libmvec vector functions accuracy [BZ #28766]
  - x86: Black list more Intel CPUs for TSX [BZ #27398]
  - elf: Fix tst-align3
  - elf: Move _dl_setup_hash to its own file
  - htl: Fix build error in annexc
  - elf: Reinstate tst-audit17
  - x86: use default cache size if it cannot be determined [BZ #28784]
  - rt/tst-mqueue*: Return UNSUPPORTED when mq_open fails with ENOSYS
  - Linux: Add epoll_pwait2 (BZ #27359)
  - Properly handle --disable-default-pie [BZ #28780]
  - elf: Fix 64 time_t support for installed statically binaries
  - Revert "elf: Fix 64 time_t support for installed statically binaries"
  - CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bug 28768)
  - sunrpc: Test case for clnt_create "unix" buffer overflow (bug 22542)
  - CVE-2022-23219: Buffer overflow in sunrpc clnt_create for "unix" (bug 22542)
  - socket: Add the __sockaddr_un_set function
  - elf/tst-dl_find_object: Disable subtests for non-contiguous maps (bug 28732)
  - elf: Set l_contiguous to 1 for the main map in more cases
  - elf: Introduce rtld_setup_main_map
  - hurd: Make RPC input array parameters const
  - hurd: optimize exec cleanup
  - hurd: Add __rtld_execve
  - hurd: Fix exec() leak on proc_task2proc failure
  - htl: Hide __pthread_attr's __schedparam type [BZ #23088]
  - htl: Clear kernel_thread field before releasing the thread structure
  - hurd: drop SA_SIGINFO availability xfail
  - hurd: Fix timer/clock_getres crash on NULL res parameter
  - hurd: Fix pthread_kill on exiting/ted thread
  - [hurd] Drop spurious #ifdef SHARED
  - [hurd] Call _dl_sort_maps_init in _dl_sysdep_start
  - elf tst-dl_find_object: Fix typo
  - s390x: Use <gcc-macros.h> in early HWCAP check
  - x86: Add x86-64-vN check to early startup
  - powerpc64le: Use <gcc-macros.h> in early HWCAP check
  - Add --with-rtld-early-cflags configure option
  - elf: Split dl-printf.c from dl-misc.c
  - elf/Makefile: Reflow and sort most variable assignments
  - Generate gcc-macros.h
  - x86: HAVE_X86_LAHF_SAHF, HAVE_X86_MOVBE and -march=x86-64-vN (bug 28782)
  - math: Add more inputs to atan2 accuracy tests [BZ #28765]
  - Disable debuginfod in printer tests [BZ #28757]
  - Update syscall lists for Linux 5.16
  - i386: Remove broken CAN_USE_REGISTER_ASM_EBP (bug 28771)
  - stdlib: Fix formatting of tests list in Makefile
  - stdlib: Sort tests in Makefile
  - x86_64: Fix SSE4.2 libmvec atan2 function accuracy [BZ #28765]
  - debug: Synchronize feature guards in fortified functions [BZ #28746]
  - debug: Autogenerate _FORTIFY_SOURCE tests
  - Do not build libresolv module with 64 bit time_t flags
  - Revert "linux: Fix ancillary 64-bit time timestamp conversion (BZ #28349, BZ #28350)"
  - Revert "support: Add support_socket_so_timestamp_time64"
  - timezone: Fix tst-bz28707 Makefile rule
  - linux: Fix ancillary 64-bit time timestamp conversion (BZ #28349, BZ #28350)
  - support: Add support_socket_so_timestamp_time64
  - elf: Fix 64 time_t support for installed statically binaries
  - Enable _FORTIFY_SOURCE=3 for gcc 12 and above
  - manual: Drop obsolete @refill
  - aarch64: Add HWCAP2_ECV from Linux 5.16
  - Use Linux 5.16 in build-many-glibcs.py
  - x86: Fix __wcsncmp_evex in strcmp-evex.S [BZ# 28755]
  - x86: Fix __wcsncmp_avx2 in strcmp-avx2.S [BZ# 28755]
  - math: Fix float conversion regressions with gcc-12 [BZ #28713]
  - elf: Simplify software TM implementation in _dl_find_object
  - Restore ENTRY_POINT definition on hppa, ia64 (bug 28749)
  - elf: Fix fences in _dl_find_object_update (bug 28745)
  - ttydefaults.h: Fix CSTATUS to control-t
  - AArch64: Check for SVE in ifuncs [BZ #28744]
  - debug: Remove catchsegv and libSegfault (BZ #14913)
  - Documentation for OpenRISC port
  - build-many-glibcs.py: add OpenRISC support
  - or1k: Build Infrastructure
  - or1k: ABI lists
  - or1k: Linux ABI
  - or1k: Linux Syscall Interface
  - or1k: math soft float support
  - or1k: Atomics and Locking primitives
  - or1k: Thread Local Storage support
  - or1k: startup and dynamic linking code
  - or1k: ABI Implementation
  - linux/syscalls: Add or1k_atomic syscall for OpenRISC
  - elf: Add reloc for OpenRISC
  - elf: Add a comment after trailing backslashes
  - elf: Also try DT_RUNPATH for LD_AUDIT dlopen [BZ #28455]
  - elf: Fix tst-linkall-static link when pthread is not in libc


author: Florian Weimer <fweimer@redhat.com> - 2.34.9000-39
changelog:
  - Drop glibc-temp-Wno-use-after-free.patch, fixed upstream.
  - Auto-sync with upstream branch master,
    commit 3fb18fd80c5900cc82748f3320b30516c57d24da:
  - elf: Add <dl-r_debug.h>
  - Mention _FORTIFY_SOURCE=3 for gcc12 in NEWS
  - malloc: Fix -Wuse-after-free warning in tst-mallocalign1 [BZ #26779]
  - Update libc.pot for 2.35 release.
  - tst-socket-timestamp-compat.c: Check __TIMESIZE [BZ #28837]
  - Add prelink removal plan on NEWS
  - Linux: Only generate 64 bit timestamps for 64 bit time_t recvmsg/recvmmsg
  - linux: Fix ancillary 64-bit time timestamp conversion (BZ #28349, BZ#28350)
  - support: Add support_socket_so_timestamp_time64
  - Fix elf/loadfail test build dependencies
  - Fix glibc 2.34 ABI omission (missing GLIBC_2.34 in dynamic loader)
  - x86: Use CHECK_FEATURE_PRESENT to check HLE [BZ #27398]
  - Guard tst-valgrind-smoke.out with run-built-tests
  - hurd: Add posix_spawnattr_tc{get,set}pgrp_np on libc.abilist
  - Avoid -Wuse-after-free in tests [BZ #26779].
  - elf: Replace tst-p_alignmod1-editX with a python script
  - stdlib: Avoid -Wuse-after-free in __add_to_environ [BZ #26779]
  - io: Fix use-after-free in ftw [BZ #26779]
  - intl: Avoid -Wuse-after-free [BZ #26779]
  - elf: Fix use-after-free in ldconfig [BZ #26779]
  - posix: Add terminal control setting support for posix_spawn


author: Florian Weimer <fweimer@redhat.com> - 2.35-1
changelog:
  - glibc 2.35 upstream release
  - Auto-sync with upstream branch release/2.35/master,
    commit a2f1675634b3513c09c38e55e6766e8c05768b1f:
  - linux: __get_nprocs_sched: do not feed CPU_COUNT_S with garbage [BZ #28850]
  - posix: Fix tst-spawn6 terminal handling (BZ #28853)
  - Regenerate configure
  - Create ChangeLog.old/ChangeLog.24.
  - Prepare for glibc 2.35 release.
  - Regenerate configure.
  - Update install.texi, and regenerate INSTALL.
  - Update NEWS bug list.
  - Update NEWS.
  - Update translations.
  - Linux: Use ptrdiff_t for __rseq_offset
  - Fix elf/tst-audit25a with default bind now toolchains
  - posix: Replace posix_spawnattr_tc{get,set}pgrp_np with posix_spawn_file_actions_addtcsetpgrp_np
  - or1k: Define PI_STATIC_AND_HIDDEN
  - SET_RELHOOK: merge i386 and x86_64, and move to sysdeps/mach/hurd/x86
  - elf: Fix runtime linker auditing on aarch64 (BZ #26643)
  - elf: Issue la_symbind for bind-now (BZ #23734)
  - elf: Fix initial-exec TLS access on audit modules (BZ #28096)
  - elf: Add la_activity during application exit
  - localedata: Adjust C.UTF-8 to align with C/POSIX.
  - localedef: Fix handling of empty mon_decimal_point (Bug 28847)
  - malloc: Fix tst-mallocalign1 macro spacing.


author: Florian Weimer <fweimer@redhat.com> - 2.35-2
changelog:
  - Auto-sync with upstream branch release/2.35/master,
    commit 24962427071fa532c3c48c918e9d64d719cc8a6c:
  - Add BZ#28860 reference on NEWS
  - linux: Fix missing __convert_scm_timestamps (BZ #28860)


author: Jakub Jelen <jjelen@redhat.com> - 2.3.2-3
changelog:
  - Fix crash in agent when deciphering (#2009978)
  - Recommend pcsc-lite-ccid to support USB smart cards (#2007923)


author: Daiki Ueno <dueno@redhat.com> - 3.7.1-1
changelog:
  - Update to upstream 3.7.1 release
  - Remove fipscheck dependency, as it is now calculated with an
    internal tool


author: Daiki Ueno <dueno@redhat.com> - 3.7.1-3
changelog:
  - Remove %defattr invocations which are no longer necessary
  - libpkcs11mock1.* is not installed anymore
  - hobble-gnutls: Remove SRP removal
  - Use correct source URL
  - Switch to using %gpgverify macro


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-1
changelog:
  - Update to upstream 3.7.3 release
  - Remove dependency on autogen
  - Add build-time conditionals for TPM 1.2 and GOST cryptography


author: Adam Williamson <awilliam@redhat.com> - 3.4-5
changelog:
  - Backport fix for upstream #28105 to fix zgrep
    Resolves: rhbz#1872913
  - Remove some non-portable tests that fail on armv7hl (Paul Eggert)
    Resolves: rhbz#1863830


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.7-1
changelog:
  - New version
    Resolves: rhbz#1993631
  - Temporarily switch to the included regex until glibc bug (glibc#11053)
    is fixed


author: Tom Stellard <tstellar@redhat.com> - 8.40-50
changelog:
  - Use make_build macro instead of plain make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-54
changelog:
  - Clarify package description
    Resolves: rhbz#1913299
  - Update man page to not mention the GRUB config in the ESP anymore
    Resolves: rhbz#1958458


author: Jakub Martisko <jamartis@redhat.com> - 1.11-1
changelog:
  - Rebase to gzip 1.11
  - Run the tests in the check section instead of the build section
  Resolve: rhbz#2001025


author: Jan Macku <jamacku@redhat.com> - 10.07-1
changelog:
  - doc: Fix "Duplicated string found in the file."
  - doc: Documents RES_OPTIONS option
  - doc: Documents ifcfg option LINKSTATUS
  - ci: use up to date keywords and fix some warnings
  - network: fix set_link_up()
  - network: add option to keep the link down
  - Rework of shell ci
  - Translations update from Weblate


author: Jan Macku <jamacku@redhat.com> - 10.10-1
changelog:
  - Translated using Weblate (Friulian) (#381)
  - Translations update from Weblate (#378)
  - added veth support
  - ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon
  - ifdown removes veth pair if both peers are down
  - rename_device: also support dracut-style kernel cmdline configuration
  - spec: Mark network-scripts as deprecated
  - spec: Initscripts now requires chkconfig (#374)
  - Translations update from Weblate (#371)
  - spec: Move service script into subpackage
  - ci: Onboard initscripts to Packit
  - ci: Migrate from Travis to GH Actions


author: Jan Macku <jamacku@redhat.com> - 10.13-1
changelog:
  - ifup-routes: Log when using `ip $type replace`
  - ifup-routes: Use `ip route repace` to avoid race
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - ci: set default merge method to rebase
  - ci: disable comments under opened PR in order to fix CI
  - network scripts: do not use c-style for-loop
  - network scripts: replace "<<<" with pipe
  - rc.d/functions: do not use "+=" to concatenate string
  - ci: Use default github-token (#395)
  - ci(Mergify): configuration update (#394)
  - ci: Output shellcheck results using PR comments (#393)
  - ci: Update path to csdiff repository (#391)
  - spec: Fix issue with $NEXT_VERSION (#390)
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Czech)


author: Jan Macku <jamacku@redhat.com> - 10.14-1
changelog:
  - ifup-routes: Revert quotes
  - ifup-routes: Use `ip replace` only on type `route`
  - ci(Mergify): configuration update
  - ci: remove testing branch from `shellcheck_test.yml`


author: Jan Macku <jamacku@redhat.com> - 10.15-1
changelog:
  - spec: network-scripts needs to depend on dbus-tools for NetworkManager detection
  - packit: Run copr builds on release as well
  - ci: Update `.packit.yml` to run on `c8s` `c9s` and `rawhide`
  - Translated using Weblate (Finnish)
  - ci: Use Differential ShellCheck action
  - ci(Mergify): configuration update


author: Phil Sutter <psutter@redhat.com> - 1.8.7-8
changelog:
  - iptables.init: Fix functionality for iptables-nft
  - iptables.init: Ignore sysctl files not suffixed '.conf'
  - iptables.init: Drop unused NEW_MODUTILS check
  - iptables.init: Drop some trailing whitespace


author: Phil Sutter <psutter@redhat.com> - 1.8.7-13
changelog:
  - doc: ebtables-nft.8: Adjust for missing atomic-options
  - nft: Fix for non-verbose check command
  - Build services sub-package as noarch


author: Charalampos Stratakis <cstratak@redhat.com> - 2.13.1-1
changelog:
  - Update to 2.13.1 (#1831402)
  - Fix docs build failures with Sphinx 3 (#1823532)
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Björn Esser <besser82@fedoraproject.org> - 0.14-2
changelog:
  - Add a patch to backport fixes applied on upstream master branch
  - Re-enable RDRAND as json-c can detect broken implementations in CPUs now
  - Disable -Werror during build


author: Björn Esser <besser82@fedoraproject.org> - 0.14-6
changelog:
  - Build using Ninja instead of Make
  - Add a patch to move Doxyfile into doc subdir
  - Remove pre-built html documentation
  - Update Doxyfile during %prep
  - Add a patch to apply some optimizations to arraylist
  - Hardlink the files in %_pkgdocdir


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.0-3
changelog:
  - Fix issues detected by static analysis
  - Fix layout->keymap conversion broken by change in xkeyboard-config
    (patch by Peter Hutterer)
    Related: #1950406


author: Adam Williamson <awilliam@redhat.com> - 2.4.0-8
changelog:
  - Symlink fa.map.gz to ara.map.gz so Arabic console layout works (#2015972)
  - Drop one mapping from fa.map that causes it to fail to load


author: Justin M. Forbes <jforbes@fedoraproject.org> [5.14.14-0]
changelog:
  - autofs: fix wait name hash calculation in autofs_wait() (Ian Kent)
  - Fix up quirk to match upstream (Justin M. Forbes)
  - Re-enable CONFIG_RDMA_RXE for Fedora (Justin M. Forbes)
  - Fix up backport of Dell XPS 9710 quirk (Justin M. Forbes)
  - Fix changelog missing entries (Justin M. Forbes)


author: Justin M. Forbes <jforbes@fedoraproject.org> [5.14.16-1]
changelog:
  - Update release for usb fix rebuild (Justin M. Forbes)
  - Revert "xhci: Set HCD flag to defer primary roothub registration" (Justin M. Forbes)
  - Revert "usb: core: hcd: Add support for deferring roothub registration" (Justin M. Forbes)


author: Justin M. Forbes <jforbes@fedoraproject.org> [5.14.17-1]
changelog:
  - btrfs: fix memory ordering between normal and ordered work functions (Nikolay Borisov)
  - Turn on COMMON_CLK_AXG_AUDIO for Fedora rhbz 2020481 (Justin M. Forbes)


author: Justin M. Forbes <jforbes@fedoraproject.org> [5.14.18-1]
changelog:
  - usb: xhci: tegra: Check padctrl interrupt presence in device tree (Dmitry Osipenko)
  - Input: i8042 - Add quirk for Fujitsu Lifebook T725 (Takashi Iwai)


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 29-5
changelog:
  - kmod.spec: enable debug
  - weak-modules: compare_initramfs_modules: exit on pushd/popd failures
  - weak-modules: split modules into array with read -a
  - Add default config file, /etc/depmod.d/dist.conf


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.17-1
changelog:
  - Update to 0.1.17
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Don't print empty requires
  - Fix memory leaks and resource leaks
  - Remove Python 2 support


author: Nicola Sella <nsella@redhat.com> - 0.60.0-1
changelog:
  - Fix repo.fresh() implementation
  - build-sys: Add ENABLE_STATIC option
  - Fix: Fully set ssl in newHandle function
  - [conf] Add options for working with certificates used with proxy
  - Apply proxy certificate options
  - lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  - build-sys: Clean up message about Python bindings
  - Modify module NSVCA parsing - context definition (RhBug:1926771)
  - [context] Fix: dnf_package_is_installonly (RhBug:1928056)
  - Fix problematic language
  - Add getApplicablePackages to advisory and isApplicable to advisorymodule
  - Keep isAdvisoryApplicable to preserve API
  - Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  - [context] Support config file option "proxy_auth_method", defaults "any"
  - Support main config file option "installonlypkgs".
  - Support main config file option "protected_packages".
  - Properly handle multiple collections in updateinfo.xml (RhBug:1804234)


author: Nicola Sella <nsella@redhat.com> - 0.62.0-1
changelog:
  - Fix: Fully set ssl in newHandle function
  - [conf] Add options for working with certificates used with proxy
  - lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  - Modify module NSVCA parsing - context definition (RhBug:1926771)
  - libdnf.h: Remove overall extern "C"
  - [context] Fix: dnf_package_is_installonly (RhBug:1928056)
  - Fix problematic language
  - Add getApplicablePackages to advisory and isApplicable to advisorymodule
  - Keep isAdvisoryApplicable to preserve API
  - Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  - [context] Support config file option "proxy_auth_method", defaults "any"
  - Hardening: add signature check with rpmcliVerifySignatures (RhBug:1932079)
  - do not allow 1 as installonly_limit value (RhBug:1926261)
  - Add a config option to check TLS certificate revocation status (using OCSP stapling), defaults to false (RhBug:1814383)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.1-1
changelog:
  - Update to 0.63.1
  - ModuleProfile: add isDefault()
  - ModulePackage: add getDefaultProfile()
  - Add new dnf_context_module_install() C API
  - Fix a crash when [media] section in .treeinfo is missing for bootable media (RhBug:1946024)
  - Add hy_query_get_advisory_pkgs to C API (RhBug:1960561)
  - Add dnf_advisorypkg_get_advisory()
  - DNF does not fail on non UTF-8 file names in a package (RhBug:1893176)
  - Improve error-reporting for modular functions


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.64.0-1
changelog:
  - Update to 0.64.0
  - Implement logic for demodularization of modular rpms (RhBug:1805260)
  - DnfContext: fix handling of default module profiles
  - ModuleMetadata: gracefully handle modules with no defaults
  - Remove failovermethod config option (RhBug:1961083)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.65.0-1
changelog:
  - Update to 0.65.0
  - Add support for excluding packages to be installed as weak dependencies
  - Add support for autodetecting packages to be excluded from being installed as weak dependencies
  - Turn off strict validation of modulemd documents (RhBug:2004853,2007166,2007167)


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Sahana Prasad <omosnace@redhat.com> - 1.2.0-1
changelog:
  - Update to upstream version 1.2.0 tracked by BZ 1839592.
  - Enable kcapi-enc tests as libkcapi BZ 1826022 is fixed.
  - Remove 110-fipshmac-compat.patch as the changes are merged upstream.
  - Remove 100-workaround-cppcheck-bug.patch as the changes are merged upstream.


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Andreas Schneider <asn@redhat.com> - 2.3.0-2
changelog:
  - Fix tests on aarch64
  - Verify signature in prep state
  - resolves: rhbz#1794307 - Build with lmbd support on ppc64le again


author: Petr Pisar <ppisar@redhat.com> - 2.13.0-3
changelog:
  - Accept an invalid buildorder 18446744073709551615 found in RHEL 8 repositories
    (https://pagure.io/koji/issue/3025)


author: Jiri Pirko <jiri@nvidia.com> - 1.8-1
changelog:
  - 1.8 release
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1.4.4-3
changelog:
  - Resolves: rhbz#1919026 libpwquaily rpm requires cracklib to function but RPM missing requirement [updated]


author: Paul Wouters <paul.wouters@aiven.io> - 1.4.4-6
changelog:
  - Resolves: rhbz#1992607 libpwquality: regression in minimal image size because of hard dependency on cracklib-dicts


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Nicola Sella <nsella@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Fix: memory leaks
  - Support multiple checksums in xattr (RhBz:1931904)
  - Use macros to access extended attributes
  - Remove problematic language
  - CMake: Set minimum version for curl to 7.52.0


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.1-1
changelog:
  - Update to 1.14.1
  - Recover from fsync fail on read-only filesystem (RhBug:1956361)
  - Reduce time to load metadata
  - Fix resource leaks


author: Matěj Grabovský <mgrabovs@redhat.com> - 2.15.2-11
changelog:
  - Backport patch for building with Python 3.11
    (https://bugzilla.redhat.com/show_bug.cgi?id=2019402)


author: Matěj Grabovský <mgrabovs@redhat.com> - 2.16.0-1
changelog:
  - Bump satyr dependency to 0.38
  - Bump libreport library revision to 2:1:0
  - Drop build-time dependency on libproxy-devel
  - Drop last reference to global_uuid file
  - Don't use deprecated assertEquals() in tests
  - Add DEBUGINFOD_URLS environment variable to ignored_words
  - rhbz: Retry XML-RPC calls when uploading attachments
  - rhbz: Be a little bit more defensive when working with subcomponents
  - Update translations


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-CVE-2021-3634 libssh: possible heap-based buffer
    overflow when rekeying
  - Resolves: rhbz#1994600


author: Liu Yang <yanliu@redhat.com> - 4.18.0-2.1
changelog:
  - Merge fix from riscv.rocks
  - Wed May 05 2021 David Abdurachmanov <david.abdurachmanov@gmail.com> - 4.16.0-3.0.riscv64
  - Use  %{valgrind_arches}


author: Tom Stellard <tstellar@redhat.com> - 1.2.6-2
changelog:
  - Add BuildRequires: gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_packaging


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)
  - Fix spelling in license GPLV2+ -> GPLv2+


author: Björn Esser <besser82@fedoraproject.org> - 4.4.27-2
changelog:
  - Update Obsoletes, Provides, and Requires to glibc 2.28 (or later),
    as this was the first upstream version of glibc with an option to
    be built without shipping libcrypt
  - Fix rhel version in conditional


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20220209-129
changelog:
  - Update to upstream 20220209 release
  - i915: Add DMC firmware v2.16 for ADL-P
  - i915: Add GuC v69.0.3 for all platforms
  - mediatek: Update MT8173 VPU firmware to v1.1.7
  - mediatek: update firmware for MT7921 WiFi and bluetooth
  - mediatek: update firmware for MT7915
  - mediatek: add firmware for MT7916
  - Firmware updates for Intel Bluetooth 9260/9462/9560/AX200/AX201/AX210/AX211
  - iwlwifi: add new FWs from core63-136 release
  - iwlwifi: update 9000-family firmwares to core66-88
  - Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  - add marvell CPT firmware images
  - WHENCE: add missing symlink for NanoPi R1
  - amdgpu: update yellow carp dmcub firmware
  - QCA: Add Bluetooth nvm file for WCN685x
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  - QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  - cxgb4: Update firmware to revision 1.26.6.0
  - cnm: add chips&media wave521c firmware.
  - rtw88: 8822c: Update normal firmware to v9.9.11
  - rtw89: 8852a: update fw to v0.13.33.0


author: Tom Callaway <spot@fedoraproject.org> - 5.4.3-4
changelog:
  - apply upstream fix for CVE-2021-44647
  - apply upstream fixes for known lua bugs 4-10 (11 assumes other changes beyond 5.4.3)


author: Tom Callaway <spot@fedoraproject.org> - 5.4.4-1
changelog:
  - update to 5.4.4, update bootstrap code to 5.3.6
  - 5.4.4 contains the fix for 5.4.3 bug7, which is also CVE-2021-43519
    This fix was also in 5.4.3-4, so you do not need to update solely for that.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.10-1
changelog:
  - Add integrity with raid capability.
  - Add writecache and integrity support to lvmdbusd.
  - Zero pool metadata on allocation (disable with allocation/zero_metadata=0).
  - Failure in zeroing or wiping will fail command (bypass with -Zn, -Wn).
  - Add lvcreate of new cache or writecache lv with single command.
  - Generate unique cachevol name when default required from lvcreate.
  - Converting RAID1 volume to one with same number of legs now succeeds with a
    warning.
  - Fix conversion to raid from striped lagging type.
  - Fix conversion to 'mirrored' mirror log with larger regionsize.
  - Fix running out of free buffers for async writing for larger writes.
  - Fix support for lvconvert --repair used by foreign apps (i.e. Docker).
  - Add support for VDO in blkdeactivate script.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.11-1
changelog:
  - Fix mpath filtering of NVMe devices.
  - Check if lvcreate passes read_only_volume_list with tags and skips zeroing.
  - Limit pool metadata spare to 16GiB.
  - Improves conversion and allocation of pool metadata.
  - Fix different limits used for metadata by lvm2 and thin-tools.
  - Fix interrupting lvconvert --splitcache command with striped origin volumes.
  - Fix problem with wiping of converted LVs.
  - Fix memleak in scanning.
  - Fix corner case allocation for thin-pools.
  - Fix pvck handling MDA at offset different from 4096.
  - Partial or degraded activation of writecache is not allowed.
  - Enhance error handling in fsadm and handle correct fsck result.
  - Dmeventd lvm plugin ignores higher reserved_stack lvm.conf values.
  - Support using BLKZEROOUT for clearing devices.
  - Fixed interrup handling.
  - Fix block cache when device has too many failing writes.
  - Fix block cache waiting for IO completion with failing disks.
  - Add configure --enable-editline support as an alternative to readline.
  - Enhance reporting and error handling when creating thin volumes.
  - Enable vgsplit for VDO volumes.
  - Lvextend of vdo pool volumes ensure at least 1 new VDO slab is added.
  - Restore lost signal blocking while VG lock is held.
  - Improve estimation of needed extents when creating thin-pool.
  - Use extra 1% when resizing thin-pool metadata LV with --use-policy.
  - Enhance --use-policy percentage rounding.
  - Allow pvmove of writecache origin.
  - Report integrity fields.
  - Integrity volumes defaults to journal mode.


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Nicola Sella <nsella@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Simon Pichugin <spichugi@redhat.com> - 2.6.1-1
changelog:
  - Update to new major release OpenLDAP 2.6.1 (#1955293)
    + rediff all patches and remove patches now upstream
    + use upstream source location for check password module
    + and rediff patch due to this
    + add patch to fix build issue in 2.5.4 (from upstream)
    + clean and sort buildreqs
    + remove various refs to bdb
    + remove now default -DLDAP_USE_NON_BLOCKING_TLS
    + add new modules and enable load balancer as module
    + disable wiredtired backend due to missing build deps
    + don't remove files that don't exist
    + let check-config work on *.mdb over legacy files
    + remove refs to old-style config
    + new soname names
    + remove libldap_r link as the library was merged with libldap
    + refactor openldap-compat package to support the transition from 2.4
    + add UPGRADE_INSTRUCTIONS for openldap-server upgrade
  - The original patch was submitted by Fedora user - terjeros
    https://src.fedoraproject.org/rpms/openldap/pull-request/6


author: Liu Yang <yanliu@redhat.com> - 8.8p1.1-1.1
changelog:
  - Merge this patch from riscv.rocks for riscv64 build.
  - Tue Dec 01 2020 David Abdurachmanov <david.abdurachmanov@sifive.com> - 8.4p1-4.0.riscv64 + 0.10.4-1.0.riscv64
  - Dissable seccomp_filter on riscv64


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Björn Esser <besser82@fedoraproject.org> - 1.5.2-1
changelog:
  - Rebase to release 1.5.2
    Resolves: #2001208
  - Add so_ver macro to avoid accidental soname bumps
  - Add a patch to fix a missing header include in pam_console


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.2-4
changelog:
  - Remove the /etc/motd.d directory to exclude its ownership from pam (#1968131)
  - pam_timestamp: enable openssl hmac authentication on supported
    distributions (Fedora >= 36 and RHEL >= 9) (#1947294)
  - Clean spec file: organize dependencies and move URL location


author: Björn Esser <besser82@fedoraproject.org> - 1.5.2-5
changelog:
  - Rebase to pam-redhat-1.1.5
  - Drop explicit dependency on openssl, as auto-deps will pull it in
  - Conditionalize BR: openssl >= 3.0.0 to supported distributions


author: Björn Esser <besser82@fedoraproject.org> - 1.5.2-6
changelog:
  - Remove old cruft from spec file
  - Rename docs sub-package to doc
  - Replace $RPM_BUILD_ROOT with %{buildroot}
  - Move documentation to %{_pkgdocdir}
  - Constantly use spaces for indentation


author: Pavel Březina <pbrezina@redhat.com> - 1.5.2-8
changelog:
  - systemd-auth, smartcard-auth, fingerprint-auth, password-auth and postlogin are now owned by authselect (#2023738)


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Update gpg key for bcl@redhat.com
  - Work around a mkswap bug


author: Brian C. Lane <bcl@redhat.com> - 3.4-6
changelog:
  - spec: Use the %gpgverify macro for the signature check
  - tests/t3000: Use mkfs.hfsplus and fsck.hfsplus for resize tests (bcl)
  - tests/t3000: Check for hfs and vfat support separately (bcl)
  - tests: Reduce memory usage for tests using scsi_debug module (bcl)
  - spec: Install to /usr/sbin and /usr/lib64 (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.4-7
changelog:
  - libparted: Tell libdevmapper to retry remove when BUSY (bcl)
    Resolves: rhbz#1980697
  - parted: Escape colons and backslashes in machine output (bcl)
  - tests: check for vfat kernel support and tools (ross.burton)
  - tests: add a helper to check the kernel knows about a file system (ross.burton)
  - tests: add aarch64 and mips64 as a valid 64-bit machines (ross.burton)
  - libparted: Add swap flag to msdos disklabel (bcl)
  - Move Exception Option values into enum (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.4-8
changelog:
  - parted: Add --json cmdline switch to output JSON (aschnell)
  - parted: Allow empty string for partition name (aschnell)
  - libparted: Check devpath before passing to strlen (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.4-9
changelog:
  - keep GUID specific attributes (aschnell)
  - hurd: Implement partition table rereading (cjwatson)
  - hurd: Support rumpdisk-based device names (samuel.thibault)
  - hurd: Fix partition paths (cjwatson)


author: Brian C. Lane <bcl@redhat.com> - 3.4-10
changelog:
  - gpt: Revert to filesystem GUID when setting flag to off (bcl)
  - tests: Add a test to make sure GPT GUIDs default to filesystem (bcl)
  - doc: Document gpt linux-home flag (bcl)
  - gpt: Add linux-home flag (aschnell)
  - gpt: Map PED_PARTITON_ flags to GUID values (aschnell)


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-3
changelog:
  - Fix misparsing long numbers as a backreference and a number without
    a closing bracket as a quantifier (upstream bug #2690)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-3
changelog:
  - Revert of copying the old posix library - After rebuilding all
  - dependend packages we don't need to backport the old library


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-13.20200306git58a7289
changelog:
  - Add patches fixing crash on monitor hot(un)plug (rhbz#1809681)
  - Add patches fixing delay between gdm telling us to deactivate and
    us telling gdm it is ok to continue
  - Drop plymouth-plugin-throbgress sub-package, the spinfinity theme now
    uses the two-step plugin


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-14.20200306git58a7289
changelog:
  - New upstream git snapshot
  - Add RemainAfterExit=yes to plymouth's systemd service files (rhbz#1807771)
  - Fix the spinner / animation missing on shutdown and reboot


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-1.20210323git8a3c9bb
changelog:
  - Update to 0.9.5 + a bunch of extra fixes from git (new upstream git snapshot)
  - Fixes 1896929 - systemd complains about Unit configured to use KillMode=none


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2.20210331git1ea1020
changelog:
  - New git snapshot
  - Fixes 1933378 - Bootsplash doesn't always fully clear on boot to console
  - Fixes 1941329 - Flickering plymouth on shutdown/reboot
  - Prune spec-file changelog a bit


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-2
changelog:
  - setfiles/restorecon: support parallel relabeling with -T <N> option
  - semodule: add -m | --checksum option


author: Jan Rybar <jrybar@redhat.com> - 3.3.16-2
changelog:
  - ps: new exe format option to show real path to exe
  - pidof: new -w option to show kernel worker threads
  - pkill: manpage to document -e option
  - Resolves: bz#1629413
  - Resolves: bz#1399206


author: Tomas Hrnciar <thrnciar@redhat.com> - 3.40.1-3
changelog:
  - Backport upstream PR to fix ImportWarning: DynamicImporter.find_spec() not found
  - Fixes: rhbz#1958890


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-2
changelog:
  - Fix Python configuration for ELN/RHEL 9
  - Rework bconds for Python now that there are no Fedoras left that should
    use Python2


author: Miro Hrončok <mhroncok@redhat.com> - 57.4.0-1
changelog:
  - Update to 57.4.0
  - https://setuptools.readthedocs.io/en/latest/history.html#v57-4-0
  - Fixes rhbz#1982493


author: Miro Hrončok <mhroncok@redhat.com> - 3.10.0-2
changelog:
  - Change the values of sysconfig's "posix_prefix" install scheme to /usr/local
    when RPM build or venv/virtualenv is not detected,
    instead of patching distutils


author: Neal Gompa <ngompa@fedoraproject.org> - 4.17.0-7
changelog:
  - Migrate rpmdb to /usr/lib/sysimage/rpm (#2042099)
    https://fedoraproject.org/wiki/Changes/RelocateRPMToUsr


author: Zdenek Pytela <zpytela@redhat.com> - 35.10-1
changelog:
  - Allow login_userdomain watch systemd-machined PID directories
  - Allow login_userdomain watch systemd-logind PID directories
  - Allow login_userdomain watch accountsd lib directories
  - Allow login_userdomain watch localization directories
  - Allow login_userdomain watch various files and dirs
  - Allow login_userdomain watch generic directories in /tmp
  - Allow rhsm-service read/write its private memfd: objects
  - Allow radiusd connect to the radacct port
  - Allow systemd-io-bridge ioctl rpm_script_t
  - Allow systemd-coredump userns capabilities and root mounton
  - Allow systemd-coredump read and write usermodehelper state
  - Allow login_userdomain create session_dbusd tmp socket files
  - Allow gkeyringd_domain write to session_dbusd tmp socket files
  - Allow systemd-logind delete session_dbusd tmp socket files
  - Allow gdm-x-session write to session dbus tmp sock files
  - Label /etc/cockpit/ws-certs.d with cert_t
  - Allow kpropd get attributes of cgroup filesystems
  - Allow administrative users the bpf capability
  - Allow sysadm_t start and stop transient services
  - Connect triggerin to pcre2 instead of pcre


author: Zdenek Pytela <zpytela@redhat.com> - 35.11-1
changelog:
  - Revert "Label /etc/cockpit/ws-certs.d with cert_t"
  - Allow login_userdomain write to session_dbusd tmp socket files
  - Label /var/run/user/%{USERID}/dbus with session_dbusd_tmp_t


author: Zdenek Pytela <zpytela@redhat.com> - 35.12-1
changelog:
  - Fix badly indented used interfaces
  - Allow domain transition to sssd_t
  - Dontaudit sfcbd sys_ptrace cap_userns
  - Label /var/lib/plocate with locate_var_lib_t
  - Allow hostapd talk with unconfined user over unix domain dgram socket
  - Allow NetworkManager talk with unconfined user over unix domain dgram socket
  - Allow system_mail_t read inherited apache system content rw files
  - Add apache_read_inherited_sys_content_rw_files() interface
  - Allow rhsm-service execute its private memfd: objects
  - Allow dirsrv read configfs files and directories
  - Label /run/stratisd with stratisd_var_run_t
  - Allow tumblerd write to session_dbusd tmp socket files


author: Zdenek Pytela <zpytela@redhat.com> - 35.13-1
changelog:
  - Allow systemd services watch dbusd pid directory and its parents
  - Allow ModemManager connect to the unconfined user domain
  - Label /dev/wwan.+ with modem_manager_t
  - Allow alsactl set group Process ID of a process
  - Allow domtrans to sssd_t and role access to sssd
  - Creating interface sssd_run_sssd()
  - Label utilities for exFAT filesystems with fsadm_exec_t
  - Label /dev/nvme-fabrics with fixed_disk_device_t
  - Allow init delete generic tmp named pipes
  - Allow timedatex dbus chat with xdm


author: Zdenek Pytela <zpytela@redhat.com> - 36.1-1
changelog:
  - Label exFAT utilities at /usr/sbin
  - policy/modules/contrib: Support /usr/lib/sysimage/rpm as the rpmdb path
  - Enable genfs_seclabel_symlinks policy capability
  - Sync policy/policy_capabilities with refpolicy
  - refpolicy: drop unused socket security classes
  - Label new utility of NetworkManager nm-priv-helper
  - Label NetworkManager-dispatcher service with separate context
  - Allow sanlock get attributes of filesystems with extended attributes
  - Associate stratisd_data_t with device filesystem
  - Allow init read stratis data symlinks


author: Zdenek Pytela <zpytela@redhat.com> - 36.2-1
changelog:
  - Allow sysadm_passwd_t to relabel passwd and group files
  - Allow confined sysadmin to use tool vipw
  - Allow login_userdomain map /var/lib/directories
  - Allow login_userdomain watch library and fonts dirs
  - Allow login_userdomain watch system configuration dirs
  - Allow login_userdomain read systemd runtime files
  - Allow ctdb create cluster logs
  - Allow alsa bind mixer controls to led triggers
  - New policy for insight-client
  - Add mctp_socket security class and access vectors
  - Fix koji repo URL pattern
  - Update chronyd_pid_filetrans() to allow create dirs
  - Update NetworkManager-dispatcher policy
  - Allow unconfined to run virtd bpf
  - Allow nm-privhelper setsched permission and send system logs
  - Add the map permission to common_anon_inode_perm permission set
  - Rename userfaultfd_anon_inode_perms to common_inode_perms
  - Allow confined users to use kinit,klist and etc.
  - Allow rhsmcertd create rpm hawkey logs with correct label


author: Zdenek Pytela <zpytela@redhat.com> - 36.3-1
changelog:
  - Update NetworkManager-dispatcher policy to use scripts
  - Allow init mounton kernel messages device
  - Revert "Make dbus-broker service working on s390x arch"
  - Remove permissive domain for insights_client_t
  - Allow userdomain read symlinks in /var/lib
  - Allow iptables list cgroup directories
  - Dontaudit mdadm list dirsrv tmpfs dirs
  - Dontaudit dirsrv search filesystem sysctl directories
  - Allow chage domtrans to sssd
  - Allow postfix_domain read dovecot certificates
  - Allow systemd-networkd create and use netlink netfilter socket
  - Allow nm-dispatcher read nm-dispatcher-script symlinks
  - filesystem.te: add genfscon rule for ntfs3 filesystem
  - Allow rhsmcertd get attributes of cgroup filesystems
  - Allow sandbox_web_client_t watch various dirs
  - Exclude container.if from policy devel files
  - Run restorecon on /usr/lib/sysimage/rpm instead of /var/lib/rpm


author: Zdenek Pytela <zpytela@redhat.com> - 36.4-1
changelog:
  - Update NetworkManager-dispatcher cloud and chronyc policy
  - Update insights-client: fc pattern, motd, writing to etc
  - Allow systemd-sysctl read the security state information
  - Allow init create and mounton to support PrivateDevices
  - Allow sosreport dbus chat abrt systemd timedatex


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-4
changelog:
  - login.defs: include HMAC_CRYPTO_ALGO key
  - Clean spec file: organize dependencies and move License location


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-8
changelog:
  - getsubids: provide system binary and man page (#1980780)
  - pwck: fix segfault when calling fprintf() (#2021339)
  - newgrp: fix segmentation fault (#2019553)
  - groupdel: fix SIGSEGV when passwd does not exist (#1986111)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-9
changelog:
  - nss: get shadow_logfd with log_get_logfd() (#2038811)
  - lib: make shadow_logfd and Prog not extern
  - lib: rename Prog to shadow_progname
  - lib: provide default values for shadow_progname
  - libsubid: use log_set_progname in subid_init


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.11.1-1
changelog:
  - Rebase to version 4.11.1 (#2034038)
  - Fix release sources
  - Add explicit subid requirement for subid-devel


author: Pavel Březina <pbrezina@redhat.com> - 2.6.0-2
changelog:
  - Add additional patches on top of 2.6.0
  - Fix KCM upgrade from older releases
  - Enable subid ranges


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250.3-4
changelog:
  - Drop scriptlet for handling nobody user upgrades from Fedora <28
  - Specify owner of /var/log/journal as root in the rpm listing (#2018913)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250.3-5
changelog:
  - Move part of %post scriptlet for resolved to %posttrans (#2018913)
  - Specify owner of utmp/wtmp/btmp/lastlog as root in the rpm listing


author: Patsy Griffin <patsy@redhat.com> - 2020f-1
changelog:
  - Rebase to tzdata-2020f including changes for tzdata-2020e
    - tzdata-2020f fixes a bug in tzdata-2020e that caused an
      invalid zi file in rearguard format
    - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
    - Australia/Currie is identical to Australia/Hobart for all
      timestamps since 1970 and was therefore created by mistake,
      now moved to the "backward" file.


author: Patsy Griffin <patsy@redhat.com> - 2021b-1
changelog:
  - Rebase to tzdata-2021b
    - Jordan now starts DST on February's last Thursday.
    - Samoa no longer observes DST.
    - Merge more location-based Zones whose timestamps agree since 1970.
    - Move some backward-compatibility links to 'backward'.
    - Rename Pacific/Enderbury to Pacific/Kanton.
    - Correct many pre-1993 transitions in Malawi, Portugal, etc.
    - zic now creates each output file or link atomically.
    - zic -L no longer omits the POSIX TZ string in its output.
    - zic fixes for truncation and leap second table expiration.
    - zic now follows POSIX for TZ strings using all-year DST.
    - Fix some localtime crashes and bugs in obscure cases.
    - zdump -v now outputs more-useful boundary cases.
    - tzfile.5 better matches a draft successor to RFC 8536.


author: Patsy Griffin <patsy@redhat.com> - 2021c-1
changelog:
  - Rebase to tzdata-2021c
    - Revert most 2021b changes to the 'backward' file.
    - Fix 'zic -b fat' bug in pre-1970 32-bit data reported in tzdata-2021b.
    - Fix two Link line typos from tzdata-2021b.
    - Distribute the new SECURITY file.


author: Patsy Griffin <patsy@redhat.com> - 2021e-1
changelog:
  - Rebase to tzdata-2021e - supersedes tzdata-2021d
    - Pacific/Fiji suspended DST for the 2021/2022 season.
    - 'zic -r' now marks unspecified timestamps with "-00".
    - Palestine will fall back 2021-10-29 at 01:00, rather
      than the predicted 2021-10-30.


author: Jiri Vanek <jvanek@redhat.com> - 2021e-3
changelog:
  - Rebuilt for java-17-openjdk as system jdk
  - to keep the legacy tzdata, now build requires both jdk8 and system jdk.
  - I recommend to put legacy tz data to separate subpkg or to drop them at all.
  - Also I would recomend to  rename legacy tzdat.to versioned ones (eg avazi-1.7) and to keep future, rolling tzdata unversioned, as javazi only


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-4
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-6
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1935101


author: Karel Zak <kzak@redhat.com> - 2.37-4
changelog:
  - disable raw(8) - no more supported since Linux v5.14 (commit 03e4922f1c81fc2ed3a87b4f91a8d3aafc7e093)
  - remove dependence on deprecated pcre2posix.h
  - fix #1981729 - close_range() 3rd argument


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-27
changelog:
  - Enabled Z hardware-accelerated deflate for compression levels 1 through 6 (#1972057)
  - IBM CRC32 optimalization rhbz#1959423


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.5.1-2
changelog:
  - Disable amd64 assembly on non-intel architectures (#2035802):
    this should avoid the issue where an executable stack is created.


